dorkos 0.81.0 → 0.82.0

package/dist/bin/cli.js

@@ -21239,7 +21239,7 @@ function settleLegacyAccountAlias(merged, patch) {
   const block = merged?.runtimes?.claudeCode;
   if (block && typeof block === "object") delete block.activeAccount;
 }
-var DEFAULT_TRUST_WINDOW_MINUTES, MIN_TRUST_WINDOW_MINUTES, MAX_TRUST_WINDOW_MINUTES, ROOM_TURN_LIMIT_BOUNDS, MAX_TOTAL_TURNS_PER_HOUR_BOUNDS, ROOM_TURN_LIMIT_DEFAULTS, RELAY_TURN_CEILING_BOUNDS, RELAY_TURN_CEILING_DEFAULTS, SENSITIVE_CONFIG_KEYS, CREDENTIAL_REF_PATTERN, CredentialReferenceSchema, ONBOARDING_STEPS, OnboardingStepSchema, OnboardingStateSchema, ToursStateSchema, TOURS_DEFAULTS, DisplayNameSourceSchema, UserProfileSchema, USER_PROFILE_DEFAULTS, SidebarDisplayFilterSchema, SidebarItemRefSchema, SmartGroupRulesSchema, SidebarGroupShapeSchema, SidebarGroupSchema, SidebarSectionIdSchema, SidebarSectionPrefsSchema, SIDEBAR_SECTION_IDS, SidebarSectionsSchema, SidebarPrefsSchema, SIDEBAR_PREFS_DEFAULTS, ShapeUserPrefsSchema, SHAPE_USER_PREFS_DEFAULTS, StatusBarPinSchema, STATUS_BAR_PIN_KEYS, StatusBarPrefsSchema, STATUS_BAR_PREFS_DEFAULTS, ComposerPrefsSchema, COMPOSER_PREFS_DEFAULTS, EscalationDelaySchema, NotificationPrefsSchema, NOTIFICATION_PREFS_DEFAULTS, DEFAULT_AGENTS_DIRECTORY, RawMcpServerConfigSchema, ClaudeCodeAccountSchema, ClaudeCodeAccountsSchema, DefaultModelSchema, DefaultEffortSchema, DefaultTrustStopSchema, ClaudeCodeSettingsSchema, LoggingConfigSchema, UserConfigSchema, LOG_LEVEL_MAP, USER_CONFIG_DEFAULTS;
+var CommunityNavigationRefSchema, CommunityInstallationPathSchema, CommunityInstallationSearchScalarSchema, CommunityInstallationSearchValueSchema, CommunityInstallationDestinationSchema, CommunityNavigationDestinationSchema, CommunityNavigationOwnerPrefsSchema, CommunityNavigationPrefsSchema, DEFAULT_TRUST_WINDOW_MINUTES, MIN_TRUST_WINDOW_MINUTES, MAX_TRUST_WINDOW_MINUTES, ROOM_TURN_LIMIT_BOUNDS, MAX_TOTAL_TURNS_PER_HOUR_BOUNDS, ROOM_TURN_LIMIT_DEFAULTS, RELAY_TURN_CEILING_BOUNDS, RELAY_TURN_CEILING_DEFAULTS, SENSITIVE_CONFIG_KEYS, CREDENTIAL_REF_PATTERN, CredentialReferenceSchema, ONBOARDING_STEPS, OnboardingStepSchema, OnboardingStateSchema, ToursStateSchema, TOURS_DEFAULTS, DisplayNameSourceSchema, UserProfileSchema, USER_PROFILE_DEFAULTS, SidebarDisplayFilterSchema, SidebarItemRefSchema, SmartGroupRulesSchema, SidebarGroupShapeSchema, SidebarGroupSchema, SidebarSectionIdSchema, SidebarSectionPrefsSchema, SIDEBAR_SECTION_IDS, SidebarSectionsSchema, SidebarPrefsSchema, SIDEBAR_PREFS_DEFAULTS, ShapeUserPrefsSchema, SHAPE_USER_PREFS_DEFAULTS, StatusBarPinSchema, STATUS_BAR_PIN_KEYS, StatusBarPrefsSchema, STATUS_BAR_PREFS_DEFAULTS, ComposerPrefsSchema, COMPOSER_PREFS_DEFAULTS, EscalationDelaySchema, NotificationPrefsSchema, NOTIFICATION_PREFS_DEFAULTS, DEFAULT_AGENTS_DIRECTORY, RawMcpServerConfigSchema, ClaudeCodeAccountSchema, ClaudeCodeAccountsSchema, DefaultModelSchema, DefaultEffortSchema, DefaultTrustStopSchema, ClaudeCodeSettingsSchema, LoggingConfigSchema, UserConfigSchema, LOG_LEVEL_MAP, USER_CONFIG_DEFAULTS;
 var init_config_schema = __esm({
   "../shared/src/config-schema.ts"() {
     init_zod();
@@ -21249,6 +21249,66 @@ var init_config_schema = __esm({
     init_room_repo();
     init_runtime_environment_schema();
     init_runtime_environment_schema();
+    CommunityNavigationRefSchema = external_exports.string().regex(/^[0-9A-Za-z][0-9A-Za-z_-]*$/, "A community ref must be path-safe");
+    CommunityInstallationPathSchema = external_exports.enum([
+      "/",
+      "/activity",
+      "/team",
+      "/session",
+      "/tasks",
+      "/channels",
+      "/workspaces",
+      "/connections",
+      "/marketplace",
+      "/marketplace/sources",
+      "/feedback-requests"
+    ]);
+    CommunityInstallationSearchScalarSchema = external_exports.union([
+      external_exports.string(),
+      external_exports.number(),
+      external_exports.boolean(),
+      external_exports.null()
+    ]);
+    CommunityInstallationSearchValueSchema = external_exports.union([
+      CommunityInstallationSearchScalarSchema,
+      external_exports.array(CommunityInstallationSearchScalarSchema).max(100)
+    ]);
+    CommunityInstallationDestinationSchema = external_exports.strictObject({
+      path: CommunityInstallationPathSchema,
+      search: external_exports.record(external_exports.string(), CommunityInstallationSearchValueSchema).default({})
+    }).superRefine(({ search }, context2) => {
+      if ("community" in search)
+        context2.addIssue({
+          code: "custom",
+          path: ["search"],
+          message: "A local installation destination cannot select Community authority"
+        });
+      if (JSON.stringify(search).length > 4096)
+        context2.addIssue({
+          code: "custom",
+          path: ["search"],
+          message: "Local installation search state is too large"
+        });
+    });
+    CommunityNavigationDestinationSchema = external_exports.object({
+      ref: CommunityNavigationRefSchema,
+      roomId: external_exports.string().min(1).max(256),
+      threadId: external_exports.string().min(1).max(256).nullable().default(null),
+      scrollAnchorEntryId: external_exports.string().min(1).max(256).nullable().default(null)
+    });
+    CommunityNavigationOwnerPrefsSchema = external_exports.object({
+      ownerKey: external_exports.string().min(1).max(256),
+      installationDestination: CommunityInstallationDestinationSchema.default({
+        path: "/",
+        search: {}
+      }),
+      order: external_exports.array(CommunityNavigationRefSchema).max(100).default(() => []),
+      destinations: external_exports.array(CommunityNavigationDestinationSchema).max(100).default(() => [])
+    });
+    CommunityNavigationPrefsSchema = external_exports.object({
+      version: external_exports.literal(1).default(1),
+      owners: external_exports.array(CommunityNavigationOwnerPrefsSchema).max(16).default(() => [])
+    });
     DEFAULT_TRUST_WINDOW_MINUTES = 480;
     MIN_TRUST_WINDOW_MINUTES = 5;
     MAX_TRUST_WINDOW_MINUTES = 1440;
@@ -21783,6 +21843,11 @@ var init_config_schema = __esm({
         statusBar: StatusBarPrefsSchema.default(() => ({ pins: [] })),
         /** Person-scoped message-box preferences (DOR-948). */
         composer: ComposerPrefsSchema.default(() => ({ richText: true })),
+        /** Owner-qualified Community order and remembered destinations; never draft content. */
+        communityNavigation: CommunityNavigationPrefsSchema.default(() => ({
+          version: 1,
+          owners: []
+        })),
         /**
          * When this person last read what Full autonomy means and said "don't ask
          * me again", as an ISO 8601 UTC string. `null` until they do, which is the
@@ -21867,6 +21932,7 @@ var init_config_schema = __esm({
         },
         statusBar: { pins: [] },
         composer: { richText: true },
+        communityNavigation: { version: 1, owners: [] },
         autonomyAcknowledgedAt: null,
         // Both halves of the power-door answer. Declared here as well as per-field
         // because `conf` merges top-level defaults SHALLOWLY: the per-field default
@@ -25473,7 +25539,7 @@ import path2 from "path";
 import { fileURLToPath } from "url";
 function resolveVersion() {
   if (env2.DORKOS_VERSION_OVERRIDE) return env2.DORKOS_VERSION_OVERRIDE;
-  if (true) return "0.81.0";
+  if (true) return "0.82.0";
   const pkgPath = path2.join(path2.dirname(fileURLToPath(import.meta.url)), "../../package.json");
   return JSON.parse(readFileSync(pkgPath, "utf-8")).version;
 }
@@ -26217,6 +26283,7 @@ __export(config_manager_exports, {
   retireToolOnlyReplies: () => retireToolOnlyReplies,
   scrubRetiredOnboardingSteps: () => scrubRetiredOnboardingSteps,
   seedA2aDisabled: () => seedA2aDisabled,
+  seedCommunityNavigationPrefs: () => seedCommunityNavigationPrefs,
   seedDisplayNameSourceDefault: () => seedDisplayNameSourceDefault,
   seedFullPowerDecision: () => seedFullPowerDecision,
   seedHarnessAutoAdopt: () => seedHarnessAutoAdopt,
@@ -27126,6 +27193,15 @@ function seedRoomCanvasOps(store) {
     maxCanvasOpsPerTurn: USER_CONFIG_DEFAULTS.rooms.maxCanvasOpsPerTurn
   });
 }
+function seedCommunityNavigationPrefs(store) {
+  const ui = store.get("ui");
+  if (!ui || typeof ui !== "object" || Array.isArray(ui)) return;
+  if ("communityNavigation" in ui) return;
+  store.set("ui", {
+    ...ui,
+    communityNavigation: { version: 1, owners: [] }
+  });
+}
 function tolerateRetiredSidebarKeys(ctx) {
   if (ctx.zodSchema === SidebarPrefsSchema) {
     const properties = ctx.jsonSchema.properties;
@@ -27710,6 +27786,12 @@ and your settings stay in the file you renamed.`;
       // `maxCanvasOpsPerTurn`, all of which this body preserves.
       "0.81.0": (store) => {
         retireToolOnlyReplies(store);
+      },
+      // 0.81.0 has merged (the second graduated experiment), so 0.82.0 is the next
+      // key. This adds one nested preference block under `ui`; every older sibling
+      // is preserved, and repeated execution leaves an existing owner history intact.
+      "0.82.0": (store) => {
+        seedCommunityNavigationPrefs(store);
       }
     };
     jsonSchemaFull = external_exports.toJSONSchema(UserConfigSchema, {
@@ -27974,7 +28056,7 @@ and your settings stay in the file you renamed.`;
         const floorBefore = this.standingGrantVoidFloor();
         this.write(key, value);
         this.stampStandingGrantVoidFloor(licensedBefore, floorBefore);
-        this.emitChange([key]);
+        this.emitChange([key], [key]);
       }
       /**
        * Write one path, keeping any settings underneath it that belong to another
@@ -28055,10 +28137,10 @@ and your settings stay in the file you renamed.`;
           this.listeners.delete(listener);
         };
       }
-      /** Notify subscribers that the named top-level sections were just written. */
-      emitChange(sections) {
+      /** Notify subscribers that the named sections, at the named key paths, were just written. */
+      emitChange(sections, paths2) {
         if (this.listeners.size === 0) return;
-        const change = { sections };
+        const change = { sections, paths: paths2 };
         for (const listener of this.listeners) {
           try {
             listener(change);
@@ -28077,7 +28159,7 @@ and your settings stay in the file you renamed.`;
         const floorBefore = this.standingGrantVoidFloor();
         this.write(key, value);
         this.stampStandingGrantVoidFloor(licensedBefore, floorBefore);
-        this.emitChange([key.split(".")[0]]);
+        this.emitChange([key.split(".")[0]], [key]);
         return result2;
       }
       /** Get the full config object. */
@@ -28126,7 +28208,8 @@ and your settings stay in the file you renamed.`;
           restoreProtectedState(this.store, stored, "Reset your config");
         }
         this.stampStandingGrantVoidFloor(licensedBefore, floorBefore);
-        this.emitChange(key ? [key] : Object.keys(this.store.store));
+        const sections = key ? [key] : Object.keys(this.store.store);
+        this.emitChange(sections, sections);
       }
       /**
        * Whether the two settings, as stored RIGHT NOW, license a standing permission
@@ -30117,6 +30200,7 @@ function requiresClaudePlugin(type) {
 var PackageTypeSchema;
 var init_package_types = __esm({
   "../marketplace/src/package-types.ts"() {
+    "use strict";
     init_zod();
     PackageTypeSchema = external_exports.enum(["agent", "plugin", "skill-pack", "adapter", "shape"]);
   }
@@ -31361,6 +31445,13 @@ var init_source_resolver = __esm({
   }
 });
 
+// ../marketplace/src/package-version.ts
+var init_package_version = __esm({
+  "../marketplace/src/package-version.ts"() {
+    "use strict";
+  }
+});
+
 // ../marketplace/src/cc-validator.ts
 function validateAgainstCcSchema(raw) {
   const result2 = CcMarketplaceJsonSchema.safeParse(raw);
@@ -31546,6 +31637,7 @@ var init_src = __esm({
     init_dorkos_sidecar_schema();
     init_merge_marketplace();
     init_source_resolver();
+    init_package_version();
     init_cc_validator();
     init_marketplace_json_parser();
     init_package_types();
@@ -31667,6 +31759,52 @@ var init_logger2 = __esm({
   }
 });
 
+// ../shared/src/marketplace-schemas.ts
+function describeSchedulePermissionMode(mode) {
+  return SCHEDULE_PERMISSION_MODE_SUMMARY[mode] ?? `runs in "${mode}" mode, which this version of DorkOS does not recognise`;
+}
+function describeScheduleArrival(startsEnabled) {
+  return startsEnabled ? "waits for your approval before its first run" : "arrives switched off, and would wait for your approval too";
+}
+function describeHookEvent(event, matcher) {
+  const when = HOOK_EVENT_SUMMARY[event] ?? `on ${event}`;
+  return matcher ? `${when} (${matcher})` : when;
+}
+function isInstallSiblingName(name) {
+  return MARKETPLACE_INSTALL_SIBLING_MARKERS.some((marker) => name.includes(marker));
+}
+var SCHEDULE_PERMISSION_MODE_SUMMARY, HOOK_EVENT_SUMMARY, MARKETPLACE_BACKUP_DIR_MARKER, MARKETPLACE_INSTALL_SIBLING_MARKERS;
+var init_marketplace_schemas = __esm({
+  "../shared/src/marketplace-schemas.ts"() {
+    SCHEDULE_PERMISSION_MODE_SUMMARY = {
+      default: "runs at the most careful setting its agent offers",
+      plan: "can only read and plan, and cannot change anything",
+      acceptEdits: "can change files on its own, and on some agents run commands too",
+      dontAsk: "runs its tools without a permission prompt",
+      bypassPermissions: "can run any command without a permission prompt",
+      auto: "decides for itself which actions are safe to take"
+    };
+    HOOK_EVENT_SUMMARY = {
+      SessionStart: "when a session starts",
+      SessionEnd: "when a session ends",
+      UserPromptSubmit: "when you send a message",
+      PreToolUse: "before the agent uses a tool",
+      PostToolUse: "after the agent uses a tool",
+      PermissionRequest: "when the agent asks for permission",
+      Notification: "when the agent sends a notification",
+      SubagentStart: "when a subagent starts",
+      SubagentStop: "when a subagent finishes",
+      Stop: "when the agent finishes",
+      PreCompact: "before the conversation is shortened",
+      PostCompact: "after the conversation is shortened"
+    };
+    MARKETPLACE_BACKUP_DIR_MARKER = ".dorkos-bak-";
+    MARKETPLACE_INSTALL_SIBLING_MARKERS = [
+      MARKETPLACE_BACKUP_DIR_MARKER
+    ];
+  }
+});
+
 // ../skills/src/constants.ts
 var SKILL_FILENAME, WIDGET_TEMPLATE_SUFFIX;
 var init_constants3 = __esm({
@@ -34174,7 +34312,8 @@ var init_additional_context = __esm({
     StagedContextDataSchema = external_exports.object({ text: external_exports.string().min(1) });
     AccountsAccessDataSchema = external_exports.object({
       accountCount: external_exports.number().int().nonnegative().nullable(),
-      changed: external_exports.boolean()
+      changed: external_exports.boolean(),
+      serviceCatalog: external_exports.boolean().optional()
     });
     ApprovalVerdictDataSchema = external_exports.object({
       approvalId: external_exports.string().min(1),
@@ -34458,7 +34597,6 @@ function isSafeSigninUrl(value) {
 var PermissionModeSchema, PermissionModeIdSchema, PermissionStopSchema, SessionTaskStatusSchema, StreamEventTypeSchema, QuestionOptionSchema, QuestionItemSchema, EffortLevelSchema, SessionOriginSchema, SessionSchema, SessionUpdateResponseSchema, SessionSettingsSchema, StoredSessionSettingsResponseSchema, UpdateSessionRequestSchema, ForkSessionRequestSchema, ReloadPluginsResultSchema, SEED_CONTEXT_MAX_LENGTH, MessageDispositionSchema, DispositionDowngradeReasonSchema, MessageDeliveryOutcomeSchema, InterruptOutcomeSchema, InterruptReasonSchema, InterruptReceiptSchema, QueuedMessageSchema, SendMessageRequestSchema, SendMessageResponseSchema, SessionTriggerResponseSchema, SessionQueueResponseSchema, QueueMoveTargetSchema, UpdateQueuedMessageRequestSchema, UpdateQueuedMessageResponseSchema, DENY_REASON_MAX_LENGTH, ApprovalRequestSchema, BatchApprovalRequestSchema, SubmitAnswersRequestSchema, UI_ACTION_ID_MAX_LENGTH, UI_ACTION_TITLE_MAX_LENGTH, UI_ACTION_PAYLOAD_MAX_LENGTH, UiActionRequestSchema, McpAppPermissionSchema, McpAppResourceRequestSchema, McpAppResourceResponseSchema, ElicitationModeSchema, ElicitationActionSchema, SubmitElicitationRequestSchema, ListSessionsQuerySchema, SessionListWarningSchema, SessionListResponseSchema, RecentSessionsQuerySchema, RecentSessionsResponseSchema, SessionDailyCountsQuerySchema, SessionDailyCountsResponseSchema, CommandsQuerySchema, TextDeltaSchema, ThinkingDeltaSchema, ToolCallStatusSchema, McpAppRefSchema, ToolCallEventSchema, ToolProgressEventSchema, AlwaysAllowScopeSchema, ApprovalEventSchema, QuestionPromptEventSchema, PendingInteractionDTOSchema, ErrorCategorySchema, ErrorEventSchema, ApiRetryEventSchema, DoneEventSchema, TerminalReasonSchema, UsageStateSchema, UsageStatusSchema, SessionStatusEventSchema, ContextUsageCategorySchema, ContextUsageSchema, TaskItemSchema, TaskUpdateEventSchema, RelayReceiptEventSchema, MessageDeliveredEventSchema, RelayMessageEventSchema, BackgroundTaskTypeSchema, BackgroundTaskStatusSchema, BackgroundTaskStartedEventSchema, BackgroundTaskProgressEventSchema, BackgroundTaskDoneEventSchema, SubagentTextDeltaEventSchema, SystemStatusEventSchema, OperationKindSchema, OperationStateSchema, OperationProgressEventShapeSchema, OperationProgressEventSchema, MemoryEntrySchema, MemoryRecallEventSchema, CompactBoundaryEventSchema, sessionImageShape, SessionImageEventSchema, deniedAgentShape, PermissionDeniedEventSchema, PromptSuggestionEventSchema, HookStartedEventSchema, HookProgressEventSchema, HookResponseEventSchema, SdkSessionStateSchema, SessionStateChangedEventSchema, ElicitationPromptEventSchema, ElicitationCompleteEventSchema, InteractionCancelledEventSchema, CapabilityApprovalRequiredEventSchema, CapabilityApprovalResolvedEventSchema, SigninUrlSchema, MCP_SIGNIN_OUTCOMES, McpSigninOutcomeSchema, McpSigninRequiredEventSchema, McpSigninResolvedEventSchema, StreamEventSchema, TextPartSchema, HookStatusSchema, HookPartSchema, ToolApprovalOutcomeSchema, QuestionOutcomeSchema, ToolCallPartSchema, BackgroundTaskPartSchema, ThinkingPartSchema, ErrorPartSchema, ElicitationPartSchema, CapabilityApprovalPartSchema, McpSigninPartSchema, MemoryRecallPartSchema, PermissionDeniedPartSchema, CompactBoundaryPartSchema, ImagePartSchema, MessagePartSchema, MessageTypeSchema, HistoryToolCallSchema, CompactMetadataSchema, HistoryMessageSchema, CommandEntrySchema, CommandRegistrySchema, FileListQuerySchema, RawFileQuerySchema, FileListResponseSchema, WriteFileRequestSchema, WriteFileResponseSchema, FileEntrySchema, FileTreeQuerySchema, FileTreeResponseSchema, FileContentQuerySchema, FileContentResponseSchema, CreateEntryRequestSchema, CreateEntryResponseSchema, DeleteEntryQuerySchema, RenameEntryRequestSchema, CopyEntryRequestSchema, RevealEntryRequestSchema, DiffBaselineOriginSchema, DiffBaselineQuerySchema, DiffBaselineResponseSchema, AdvanceDiffBaselineRequestSchema, DiffPendingQuerySchema, DiffPendingResponseSchema, DiffBaselineRawQuerySchema, RevertDiffBaselineRequestSchema, FileMutationResponseSchema, WorkbenchSignRequestSchema, WorkbenchSignResponseSchema, WorkbenchProbeRequestSchema, WorkbenchProbeResponseSchema, BrowseDirectoryQuerySchema, DirectoryEntrySchema, BrowseDirectoryResponseSchema, TunnelStatusSchema, HealthResponseSchema, ExecutionDefaultsSchema, ExperimentStateSchema, ServerConfigSchema, ModelTierSchema, ModelOptionSchema, SubagentInfoSchema, GitStatusResponseSchema, GitStatusErrorSchema, ErrorResponseSchema, SessionLockedErrorSchema, TaskStatusSchema, SettableTaskStatusSchema, TaskNameSchema, TaskRunStatusSchema, TaskRunTriggerSchema, TaskSchema, TaskRunSchema, CancelTaskRunResponseSchema, TaskTemplateSchema, TASK_DURATION_PATTERN, TASK_DURATION_MAX, TASK_DESCRIPTION_MAX, CreateTaskRequestSchema, SIDEBAR_TAB_ID_PATTERN, ShapeLiveLayoutCaptureSchema, ForkShapeRequestSchema, UpdateTaskRequestSchema, ListTaskRunsQuerySchema, ConfigPatchRequestSchema, ConfigPatchResponseSchema, UploadResultSchema, UploadResponseSchema, UploadProgressSchema, CanvasMediaSrcSchema, UiCanvasContentSchema, UiPanelIdSchema, UiSidebarTabSchema, UiToastLevelSchema, CELEBRATION_KINDS, CELEBRATION_KIND_SYNONYMS, CelebrationKindSchema, UiCommandTargetSchema, UiCommandSchema, UiCommandEventSchema, UiStateSchema, UiStateReportDocumentSchema, UiStateReportSchema, DevtoolsConsoleLevelSchema, DEVTOOLS_ARGS_MAX_CHARS, DevtoolsConsoleEntrySchema, DevtoolsNetworkEntrySchema, DEVTOOLS_CONSOLE_BATCH_MAX, DEVTOOLS_NETWORK_BATCH_MAX, DEVTOOLS_SCREENSHOT_MAX_CHARS, DevtoolsScreenshotResultSchema, DevtoolsIngestSchema, BrowserTargetSchema, BrowserActCommandSchema, BrowserPageSummarySchema, DEVTOOLS_OUTLINE_MAX_CHARS, DevtoolsActionResultSchema, DevtoolsRecordingUploadSchema;
 var init_schemas3 = __esm({
   "../shared/src/schemas.ts"() {
-    "use strict";
     init_zod();
     init_zod_openapi();
     init_additional_context();
@@ -38299,6 +38437,7 @@ async function scanSkillDirectory(dir, schema2, options) {
   for (const entry of entries) {
     if (!entry.isDirectory() || entry.name.startsWith(".")) continue;
     if (ignoreDirs.has(entry.name)) continue;
+    if (isInstallSiblingName(entry.name)) continue;
     const skillPath = path12.join(dir, entry.name, SKILL_FILENAME);
     let content;
     try {
@@ -38345,6 +38484,7 @@ var UI_TEMPLATES_DIRNAME;
 var init_scanner = __esm({
   "../skills/src/scanner.ts"() {
     init_logger2();
+    init_marketplace_schemas();
     init_constants3();
     init_parser();
     init_ui_template();
@@ -38401,8 +38541,22 @@ var init_validator = __esm({
 // ../marketplace/src/package-validator.ts
 import { promises as fs7 } from "node:fs";
 import path14 from "node:path";
+async function readDeclaredVersion(packagePath) {
+  return await readVersionField(path14.join(packagePath, CLAUDE_PLUGIN_MANIFEST_PATH)) ?? await readVersionField(path14.join(packagePath, PACKAGE_MANIFEST_PATH));
+}
+async function readVersionField(filePath) {
+  try {
+    const parsed = JSON.parse(await fs7.readFile(filePath, "utf-8"));
+    if (parsed === null || typeof parsed !== "object") return void 0;
+    const version4 = parsed.version;
+    return typeof version4 === "string" && version4 !== "" ? version4 : void 0;
+  } catch {
+    return void 0;
+  }
+}
 async function validatePackage(packagePath) {
   const issues = [];
+  const declaredVersion = await readDeclaredVersion(packagePath);
   let manifestRaw;
   let manifestSource;
   const dorkManifestPath2 = path14.join(packagePath, PACKAGE_MANIFEST_PATH);
@@ -38421,7 +38575,7 @@ async function validatePackage(packagePath) {
         message: `Invalid JSON in manifest: ${err instanceof Error ? err.message : String(err)}`,
         path: PACKAGE_MANIFEST_PATH
       });
-      return { ok: false, issues };
+      return { ok: false, issues, declaredVersion };
     }
     manifestSource = PACKAGE_MANIFEST_PATH;
   } else {
@@ -38433,7 +38587,7 @@ async function validatePackage(packagePath) {
         message: `Required file missing: ${PACKAGE_MANIFEST_PATH} (no ${CLAUDE_PLUGIN_MANIFEST_PATH} fallback found either)`,
         path: PACKAGE_MANIFEST_PATH
       });
-      return { ok: false, issues };
+      return { ok: false, issues, declaredVersion };
     }
     manifestRaw = synthesized;
     manifestSource = CLAUDE_PLUGIN_MANIFEST_PATH;
@@ -38448,7 +38602,7 @@ async function validatePackage(packagePath) {
         path: manifestSource
       });
     }
-    return { ok: false, issues };
+    return { ok: false, issues, declaredVersion };
   }
   const manifest = parseResult.data;
   if (!manifest.category && !manifest.categories?.length) {
@@ -38471,6 +38625,9 @@ async function validatePackage(packagePath) {
       });
     }
   }
+  if (manifestSource === PACKAGE_MANIFEST_PATH) {
+    await checkVersionAgreement(packagePath, manifest.version, issues);
+  }
   for (const dir of SKILL_SOURCE_DIRS) {
     const fullDir = path14.join(packagePath, dir);
     try {
@@ -38491,7 +38648,35 @@ async function validatePackage(packagePath) {
   await checkPackagedMcpServers(packagePath, issues);
   await checkScheduleSkillRefs(packagePath, manifest, issues);
   const hasErrors = issues.some((i2) => i2.level === "error");
-  return { ok: !hasErrors, issues, manifest };
+  return { ok: !hasErrors, issues, manifest, declaredVersion };
+}
+async function checkVersionAgreement(packagePath, manifestVersion, issues) {
+  let plugin;
+  try {
+    plugin = JSON.parse(
+      await fs7.readFile(path14.join(packagePath, CLAUDE_PLUGIN_MANIFEST_PATH), "utf-8")
+    );
+  } catch {
+    return;
+  }
+  if (plugin === null || typeof plugin !== "object") return;
+  const pluginVersion = plugin.version;
+  if (typeof pluginVersion === "string" && pluginVersion !== "") {
+    if (pluginVersion === manifestVersion) return;
+    issues.push({
+      level: "error",
+      code: "VERSION_MISMATCH",
+      message: `${PACKAGE_MANIFEST_PATH} says version ${manifestVersion} but ${CLAUDE_PLUGIN_MANIFEST_PATH} says ${pluginVersion}. Set both to the same version: Claude Code loads ${pluginVersion}, DorkOS would report ${manifestVersion}.`,
+      path: CLAUDE_PLUGIN_MANIFEST_PATH
+    });
+    return;
+  }
+  issues.push({
+    level: "error",
+    code: "VERSION_MISMATCH",
+    message: `${PACKAGE_MANIFEST_PATH} says version ${manifestVersion} but ${CLAUDE_PLUGIN_MANIFEST_PATH} has no version. Add "version": "${manifestVersion}" to plugin.json so Claude Code and DorkOS agree.`,
+    path: CLAUDE_PLUGIN_MANIFEST_PATH
+  });
 }
 async function checkScheduleSkillRefs(packagePath, manifest, issues) {
   if (manifest.type === "adapter") return;
@@ -38722,12 +38907,24 @@ async function checkSourcePaths(marketplace, probe, buildCandidate, marketplaceR
       return { name: entry.name, status: "skipped-object-source" };
     }
     const candidate = buildCandidate(resolved.path);
-    const reachable = await probe(candidate);
-    return reachable ? { name: entry.name, status: "ok", candidate } : { name: entry.name, status: "not-found", candidate, sourceInput };
+    const probed = await probe(candidate);
+    if (!probed.reachable) {
+      return { name: entry.name, status: "not-found", candidate, sourceInput };
+    }
+    if (entry.version && probed.version && entry.version !== probed.version) {
+      return {
+        name: entry.name,
+        status: "version-mismatch",
+        candidate,
+        entryVersion: entry.version,
+        pluginVersion: probed.version
+      };
+    }
+    return { name: entry.name, status: "ok", candidate };
   });
   const results = await Promise.all(tasks);
   const checkedCount = results.filter((r3) => r3.status !== "skipped-object-source").length;
-  const ok2 = results.every((r3) => r3.status !== "not-found");
+  const ok2 = results.every((r3) => r3.status === "ok" || r3.status === "skipped-object-source");
   return { ok: ok2, results, checkedCount, totalCount: marketplace.plugins.length };
 }
 function makeLocalCandidateBuilder(marketplaceRoot) {
@@ -38738,26 +38935,42 @@ function makeRemoteCandidateBuilder(rawBase) {
   return (resolvedPath) => `${normalized}/${resolvedPath}/.claude-plugin/plugin.json`;
 }
 async function localProbe(candidate) {
-  const { stat: stat3 } = await import("node:fs/promises");
+  const { readFile: readFile7, stat: stat3 } = await import("node:fs/promises");
   try {
-    const s2 = await stat3(candidate);
-    return s2.isFile();
+    if (!(await stat3(candidate)).isFile()) return { reachable: false };
   } catch {
-    return false;
+    return { reachable: false };
+  }
+  try {
+    return withVersion(JSON.parse(await readFile7(candidate, "utf-8")));
+  } catch {
+    return { reachable: true };
   }
 }
 async function remoteProbe(candidate) {
+  let res;
   try {
-    const res = await fetch(candidate);
-    return res.ok;
+    res = await fetch(candidate);
   } catch {
-    return false;
+    return { reachable: false };
   }
+  if (!res.ok) return { reachable: false };
+  try {
+    return withVersion(await res.json());
+  } catch {
+    return { reachable: true };
+  }
+}
+function withVersion(plugin) {
+  const version4 = plugin !== null && typeof plugin === "object" ? plugin.version : void 0;
+  return typeof version4 === "string" && version4 !== "" ? { reachable: true, version: version4 } : { reachable: true };
 }
 function renderSourcePathResults(report2, marketplace) {
   const { results, checkedCount, totalCount } = report2;
   const skippedCount = totalCount - checkedCount;
-  const okCount = results.filter((r3) => r3.status === "ok").length;
+  const okCount = results.filter(
+    (r3) => r3.status === "ok" || r3.status === "version-mismatch"
+  ).length;
   if (report2.ok) {
     let suffix;
     if (checkedCount === 0) {
@@ -38770,17 +38983,33 @@ function renderSourcePathResults(report2, marketplace) {
     return { okLine: `[OK]   Plugin sources reachable${suffix}
 `, failBlock: "" };
   }
-  const lines = [`[FAIL] Plugin sources reachable (${okCount}/${checkedCount})
-`];
-  for (const r3 of results) {
-    if (r3.status !== "not-found") continue;
-    lines.push(`  - ${r3.name}: "${r3.sourceInput}" \u2192 not found at ${r3.candidate}
+  const lines = [];
+  const notFound = results.filter(
+    (r3) => r3.status === "not-found"
+  );
+  if (notFound.length > 0) {
+    lines.push(`[FAIL] Plugin sources reachable (${okCount}/${checkedCount})
+`);
+    for (const r3 of notFound) {
+      lines.push(`  - ${r3.name}: "${r3.sourceInput}" \u2192 not found at ${r3.candidate}
+`);
+    }
+  }
+  const mismatched = results.filter(
+    (r3) => r3.status === "version-mismatch"
+  );
+  if (mismatched.length > 0) {
+    lines.push(`[FAIL] Entry versions match plugin.json
 `);
+    for (const r3 of mismatched) {
+      lines.push(
+        `  - ${r3.name}: ENTRY_VERSION_MISMATCH: marketplace.json says version ${r3.entryVersion} but ${r3.candidate} says ${r3.pluginVersion}. Claude Code silently uses plugin.json's version, so the entry's is never seen. Remove "version" from the entry, or make them match.
+`
+      );
+    }
   }
   const pluginRoot = marketplace.metadata?.pluginRoot;
-  const failingWithExplicitDotSlash = results.some(
-    (r3) => r3.status === "not-found" && r3.sourceInput.startsWith("./")
-  );
+  const failingWithExplicitDotSlash = notFound.some((r3) => r3.sourceInput.startsWith("./"));
   if (pluginRoot !== void 0 && failingWithExplicitDotSlash) {
     const normalizedRoot = pluginRoot.replace(/^\.\//, "").replace(/\/+$/, "");
     lines.push(
@@ -39224,6 +39453,17 @@ var init_config_disclosure = __esm({
       "ui.shapes.autoFollowAgent": "expose",
       "ui.statusBar.pins": "expose",
       "ui.composer.richText": "expose",
+      // Owner and tenant-qualified navigation history is local UI state. Withhold
+      // the whole shape so a tokenless config read cannot enumerate private room IDs.
+      "ui.communityNavigation.version": "withhold",
+      "ui.communityNavigation.owners[].ownerKey": "withhold",
+      "ui.communityNavigation.owners[].order": "withhold",
+      "ui.communityNavigation.owners[].destinations[].ref": "withhold",
+      "ui.communityNavigation.owners[].destinations[].roomId": "withhold",
+      "ui.communityNavigation.owners[].destinations[].threadId": "withhold",
+      "ui.communityNavigation.owners[].destinations[].scrollAnchorEntryId": "withhold",
+      "ui.communityNavigation.owners[].installationDestination.path": "withhold",
+      "ui.communityNavigation.owners[].installationDestination.search": "withhold",
       // A timestamp saying the person read what Full autonomy means. Names nothing
       // and unlocks nothing on being read — an agent that learns the date is no
       // closer to anything than one that does not.
@@ -39614,6 +39854,20 @@ var init_config_write_policy = __esm({
       "ui.shapes.autoFollowAgent": "agent-writable",
       "ui.statusBar.pins": "agent-writable",
       "ui.composer.richText": "agent-writable",
+      // Preferences only: restoring a room always reauthorizes it server-side, so
+      // changing an ID cannot widen access or disclose the remembered destination.
+      "ui.communityNavigation.version": "agent-writable",
+      // Operator-only: which owner a namespace belongs to, and where the owner's
+      // next "This DorkOS" click lands. An agent that could write either could
+      // plant another owner's state or steer the operator to a route of its choice.
+      "ui.communityNavigation.owners[].ownerKey": "operator-only",
+      "ui.communityNavigation.owners[].order": "agent-writable",
+      "ui.communityNavigation.owners[].destinations[].ref": "agent-writable",
+      "ui.communityNavigation.owners[].destinations[].roomId": "agent-writable",
+      "ui.communityNavigation.owners[].destinations[].threadId": "agent-writable",
+      "ui.communityNavigation.owners[].destinations[].scrollAnchorEntryId": "agent-writable",
+      "ui.communityNavigation.owners[].installationDestination.path": "operator-only",
+      "ui.communityNavigation.owners[].installationDestination.search": "operator-only",
       // Which promo cards are hidden. A preference about what the sidebar's bottom
       // slot offers, exactly like `ui.sidebar.gettingStarted.retired` above; nothing
       // it gates is a security control.
@@ -40295,6 +40549,19 @@ var init_config_write_policy = __esm({
         description: "Whether a name on your roster is shown as your own or as an agent\u2019s suggestion",
         paths: ["profile.displayNameSource.kind", "profile.displayNameSource.agentName"]
       },
+      {
+        stake: "navigation",
+        // Not `reach` (nobody gets in) and not `authorship` (no name is shown as
+        // anyone's). An agent able to write the owner key could file its own state
+        // under the person's namespace, and one able to write the saved route could
+        // choose where the person lands on their next "switch back" click.
+        description: "Where the app takes you when you switch back to this DorkOS, and whose saved places those are",
+        paths: [
+          "ui.communityNavigation.owners[].ownerKey",
+          "ui.communityNavigation.owners[].installationDestination.path",
+          "ui.communityNavigation.owners[].installationDestination.search"
+        ]
+      },
       {
         stake: "attention",
         description: "Whether you are told that something is waiting on you",
@@ -42387,7 +42654,7 @@ var init_sql = __esm({
         return new SQL([new StringChunk(str)]);
       }
       sql22.raw = raw;
-      function join53(chunks, separator) {
+      function join54(chunks, separator) {
         const result2 = [];
         for (const [i2, chunk] of chunks.entries()) {
           if (i2 > 0 && separator !== void 0) {
@@ -42397,7 +42664,7 @@ var init_sql = __esm({
         }
         return new SQL(result2);
       }
-      sql22.join = join53;
+      sql22.join = join54;
       function identifier(value) {
         return new Name(value);
       }
@@ -45317,7 +45584,7 @@ var init_select2 = __esm({
           const baseTableName = this.tableName;
           const tableName = getTableLikeName(table2);
           for (const item of extractUsedTable(table2)) this.usedTables.add(item);
-          if (typeof tableName === "string" && this.config.joins?.some((join53) => join53.alias === tableName)) {
+          if (typeof tableName === "string" && this.config.joins?.some((join54) => join54.alias === tableName)) {
             throw new Error(`Alias "${tableName}" is already used in this query`);
           }
           if (!this.isPartialSelect) {
@@ -46203,7 +46470,7 @@ var init_update = __esm({
       createJoin(joinType) {
         return (table2, on) => {
           const tableName = getTableLikeName(table2);
-          if (typeof tableName === "string" && this.config.joins.some((join53) => join53.alias === tableName)) {
+          if (typeof tableName === "string" && this.config.joins.some((join54) => join54.alias === tableName)) {
             throw new Error(`Alias "${tableName}" is already used in this query`);
           }
           if (typeof on === "function") {
@@ -57420,6 +57687,7 @@ function listSkillDirs(absRoot, relPrefix, options = {}) {
     if (isLink && options.followSymlinks === false) continue;
     const isManagedProjection2 = isLink && entry.name.includes(INSTALLED_PROJECTION_MARKER);
     if (isManagedProjection2 && !options.includeManagedProjections) continue;
+    if (isInstallSiblingName(entry.name)) continue;
     const absEntry = join10(absRoot, entry.name);
     if (!resolvesToDirectory(absEntry, entry)) continue;
     const sourceDir = `${relPrefix}/${entry.name}`;
@@ -57457,6 +57725,7 @@ var INSTALLED_PROJECTION_MARKER, AGENTS_SKILLS_DIR, CLAUDE_PLUGIN_ROOT_TOKEN;
 var init_scanner2 = __esm({
   "../harness/src/scan/scanner.ts"() {
     "use strict";
+    init_marketplace_schemas();
     INSTALLED_PROJECTION_MARKER = "__";
     AGENTS_SKILLS_DIR = ".agents/skills";
     CLAUDE_PLUGIN_ROOT_TOKEN = "${CLAUDE_PLUGIN_ROOT}";
@@ -58476,11 +58745,11 @@ function globalInstallDropReason(plugin, opts) {
     namedSkills(plugin.skills.map((skill) => skill.name)),
     shared
   );
-  const join53 = (into) => shared ? into : `${into}${into.endsWith(".") ? "" : "."} ${GLOBAL_INSTALL_SHARE_OFFER}`;
+  const join54 = (into) => shared ? into : `${into}${into.endsWith(".") ? "" : "."} ${GLOBAL_INSTALL_SHARE_OFFER}`;
   const timed = plugin.skills.filter((skill) => skill.hasSchedule);
-  if (timed.length === 0) return join53(lead);
+  if (timed.length === 0) return join54(lead);
   const allLinked = timed.every((skill) => skill.linkedInDorkHome === true);
-  return join53(`${lead}. ${allLinked ? GLOBAL_INSTALL_TIMERS_WORK : GLOBAL_INSTALL_TIMERS_PENDING}`);
+  return join54(`${lead}. ${allLinked ? GLOBAL_INSTALL_TIMERS_WORK : GLOBAL_INSTALL_TIMERS_PENDING}`);
 }
 function planGlobalInstallDrops(input4) {
   const projectNames = new Set(
@@ -58701,7 +58970,7 @@ function scanPluginsRoot(pluginsRoot, scope, dorkHome) {
   const plugins = [];
   const unreadableManifests = [];
   for (const entry of readdirSync3(pluginsRoot, { withFileTypes: true })) {
-    if (!entry.isDirectory()) continue;
+    if (!entry.isDirectory() || isInstallSiblingName(entry.name)) continue;
     const pluginDir = join12(pluginsRoot, entry.name);
     const location = scope === "global" ? { scope, absDir: pluginDir } : { scope, relDir: `${PROJECT_PLUGINS_DIR}/${entry.name}` };
     const sourcePrefix = location.scope === "global" ? location.absDir : location.relDir;
@@ -58761,6 +59030,7 @@ var init_installed = __esm({
   "../harness/src/sources/installed.ts"() {
     "use strict";
     init_src();
+    init_marketplace_schemas();
     init_schedule_schema();
     init_parser();
     init_scanner2();
@@ -59599,6 +59869,7 @@ function lockedSkillFolders(absRoot, root, entries, found, options) {
   const records = [];
   for (const entry of entries) {
     if (found.has(entry.name)) continue;
+    if (isInstallSiblingName(entry.name)) continue;
     const isLink = entry.isSymbolicLink();
     if (isLink && entry.name.includes(INSTALLED_PROJECTION_MARKER) && !options.includeManagedProjections)
       continue;
@@ -59636,6 +59907,7 @@ var init_skills = __esm({
     init_scanner2();
     init_installed_projector();
     init_parser();
+    init_marketplace_schemas();
     init_constants3();
     init_read();
     init_types4();
@@ -62731,9 +63003,9 @@ rather not share, and press submit. Never report their issue as filed. If
 \`truncated\` comes back true the link could not hold the whole body, so hand them
 \`fullBody\` as well.
 
-If they would rather do it themselves: **Send feedback** in the app goes straight
-to the DorkOS team; **Help and feedback > Report on GitHub** opens this same
-page; \`dorkos feedback\` does it from a terminal. Neither that command nor this
+If they would rather do it themselves: **Help and feedback > Send feedback** in
+the app goes straight to the DorkOS team, and its **Open one instead** link at
+the bottom opens this same page; \`dorkos feedback\` does it from a terminal. Neither that command nor this
 tool is off limits to you, so never say it is, and never file an issue on their
 behalf through some other tool.
 
@@ -66063,7 +66335,6 @@ function boundaryWasConfigured(env5, config3) {
 var BoundaryError, resolvedBoundary, MAX_DANGLING_SYMLINK_HOPS, cachedDorkHome;
 var init_boundary = __esm({
   "../../apps/server/src/lib/boundary.ts"() {
-    "use strict";
     init_dork_home();
     BoundaryError = class extends Error {
       code;
@@ -66219,7 +66490,6 @@ function writeGlobalSharing(harnesses, reason, now2 = /* @__PURE__ */ new Date()
 var NOTHING_SHARED;
 var init_global_scope = __esm({
   "../../apps/server/src/services/harness/global-scope.ts"() {
-    "use strict";
     init_src4();
     init_config_schema();
     init_boundary();
@@ -66858,18 +67128,119 @@ var init_package_paths = __esm({
   }
 });
 
-// ../../apps/server/src/services/marketplace/marketplace-cache.ts
-import { mkdir as mkdir3, mkdtemp, readFile as readFile3, rename, writeFile as writeFile3, readdir, rm, stat } from "node:fs/promises";
+// ../../apps/server/src/lib/git-safety.ts
+var init_git_safety = __esm({
+  "../../apps/server/src/lib/git-safety.ts"() {
+    "use strict";
+  }
+});
+
+// ../../apps/server/src/services/core/template-downloader.ts
+var init_template_downloader = __esm({
+  "../../apps/server/src/services/core/template-downloader.ts"() {
+    "use strict";
+    init_src();
+    init_logger();
+    init_git_safety();
+    init_env();
+  }
+});
+
+// ../../apps/server/src/services/marketplace/lib/git-tree.ts
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+function isFullCommitSha(value) {
+  return value !== void 0 && FULL_COMMIT_SHA_RE.test(value);
+}
+var execFileAsync, REMOTE, PARTIAL_CLONE_CONFIG, FULL_COMMIT_SHA_RE;
+var init_git_tree = __esm({
+  "../../apps/server/src/services/marketplace/lib/git-tree.ts"() {
+    "use strict";
+    init_git_safety();
+    init_template_downloader();
+    execFileAsync = promisify(execFile);
+    REMOTE = "origin";
+    PARTIAL_CLONE_CONFIG = [
+      ["core.repositoryformatversion", "1"],
+      ["extensions.partialClone", REMOTE],
+      [`remote.${REMOTE}.promisor`, "true"],
+      [`remote.${REMOTE}.partialclonefilter`, "blob:none"]
+    ];
+    FULL_COMMIT_SHA_RE = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/;
+  }
+});
+
+// ../../apps/server/src/services/marketplace/lib/directory-size.ts
+import { lstat, readdir } from "node:fs/promises";
 import { join as join43 } from "node:path";
+async function directorySize(root) {
+  let total = 0;
+  const walk = async (dir, depth) => {
+    if (depth > MAX_DEPTH2) return;
+    let entries;
+    try {
+      entries = await readdir(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      const entryPath = join43(dir, entry.name);
+      if (entry.isDirectory()) {
+        await walk(entryPath, depth + 1);
+      } else if (entry.isFile()) {
+        try {
+          total += (await lstat(entryPath)).size;
+        } catch {
+        }
+      }
+    }
+  };
+  await walk(root, 0);
+  return total;
+}
+var MAX_DEPTH2;
+var init_directory_size = __esm({
+  "../../apps/server/src/services/marketplace/lib/directory-size.ts"() {
+    "use strict";
+    MAX_DEPTH2 = 256;
+  }
+});
+
+// ../../apps/server/src/services/marketplace/marketplace-cache.ts
+import { createHash as createHash3, randomUUID as randomUUID2 } from "node:crypto";
+import {
+  mkdir as mkdir3,
+  mkdtemp,
+  readFile as readFile3,
+  rename,
+  writeFile as writeFile3,
+  readdir as readdir2,
+  rm,
+  stat,
+  utimes
+} from "node:fs/promises";
+import { join as join44 } from "node:path";
+function subpathDigest(subpath) {
+  if (subpath === "") return "";
+  return createHash3("sha256").update(subpath).digest("hex").slice(0, 12);
+}
+async function stampUsed(path43) {
+  const now2 = /* @__PURE__ */ new Date();
+  try {
+    await utimes(path43, now2, now2);
+    return now2;
+  } catch {
+    return (await stat(path43)).mtime;
+  }
+}
 function parsePackageDirName(entry) {
   const at = entry.lastIndexOf("@");
   if (at <= 0 || at === entry.length - 1) {
     return null;
   }
-  return {
-    packageName: entry.slice(0, at),
-    commitSha: entry.slice(at + 1)
-  };
+  const [commitSha = "", digest2 = ""] = entry.slice(at + 1).split(SUBPATH_SEPARATOR);
+  if (commitSha === "") return null;
+  return { packageName: entry.slice(0, at), commitSha, subpathDigest: digest2 };
 }
 async function isNonEmptyDir(dir) {
   try {
@@ -66877,30 +67248,29 @@ async function isNonEmptyDir(dir) {
     if (!info2.isDirectory()) {
       return false;
     }
-    const entries = await readdir(dir);
+    const entries = await readdir2(dir);
     return entries.length > 0;
   } catch {
     return false;
   }
 }
-function groupByPackageName(packages) {
-  const grouped = /* @__PURE__ */ new Map();
-  for (const pkg of packages) {
-    const list = grouped.get(pkg.packageName) ?? [];
-    list.push(pkg);
-    grouped.set(pkg.packageName, list);
-  }
-  return grouped;
-}
-var DEFAULT_TTL_MS, MARKETPLACE_FILENAME, LAST_FETCHED_FILENAME, MarketplaceCache;
+var DEFAULT_TTL_MS, MARKETPLACE_FILENAME, LAST_FETCHED_FILENAME, TREES_DIRNAME, LEGACY_PACKAGES_DIRNAME, TEMP_FETCH_PREFIX, TEMP_PRUNE_PREFIX, IN_USE_GRACE_MS, SUBPATH_SEPARATOR, MarketplaceCache;
 var init_marketplace_cache = __esm({
   "../../apps/server/src/services/marketplace/marketplace-cache.ts"() {
     "use strict";
     init_src();
     init_package_paths();
+    init_git_tree();
+    init_directory_size();
     DEFAULT_TTL_MS = 60 * 60 * 1e3;
     MARKETPLACE_FILENAME = "marketplace.json";
     LAST_FETCHED_FILENAME = ".last-fetched";
+    TREES_DIRNAME = "trees";
+    LEGACY_PACKAGES_DIRNAME = "packages";
+    TEMP_FETCH_PREFIX = ".tmp-fetch-";
+    TEMP_PRUNE_PREFIX = ".tmp-prune-";
+    IN_USE_GRACE_MS = 15 * 60 * 1e3;
+    SUBPATH_SEPARATOR = "~";
     MarketplaceCache = class {
       /**
        * Construct a cache rooted at `${dorkHome}/cache/marketplace`.
@@ -66916,17 +67286,25 @@ var init_marketplace_cache = __esm({
       dorkHome;
       ttlMs;
       /**
-       * In-flight materialization promises keyed by `${name}@${sha}`. Two
+       * In-flight materialization promises keyed by `${name}@${expectedSha}`. Two
        * concurrent {@link MarketplaceCache.materializePackage} calls for the same
-       * cache key share a single clone: the first call performs the clone, every
+       * expected commit share a single fetch: the first call performs it, every
        * subsequent caller awaits the same promise and reuses the result. This is
        * the in-process de-dup that stops a UI preview + install double-fetch from
-       * racing two `git clone` processes into the same directory.
+       * racing two git processes into the same directory.
        */
       inFlight = /* @__PURE__ */ new Map();
+      /**
+       * Tail of the in-process lock ({@link MarketplaceCache.exclusive}). It
+       * serialises only short critical sections: a reader's "exists? stamp it",
+       * a fetch's landing, and a sweep's "still unused? rename it aside".
+       */
+      lockTail = Promise.resolve();
+      /** Listeners told when a fetch lands a new entry ({@link onEntryWritten}). */
+      entryWrittenListeners = /* @__PURE__ */ new Set();
       /** Compute the cache root path: `${dorkHome}/cache/marketplace`. */
       get cacheRoot() {
-        return join43(this.dorkHome, "cache", "marketplace");
+        return join44(this.dorkHome, "cache", "marketplace");
       }
       /**
        * Read a cached marketplace.json document.
@@ -66951,8 +67329,8 @@ var init_marketplace_cache = __esm({
        */
       async readMarketplace(marketplaceName) {
         const dir = this.marketplaceDir(marketplaceName);
-        const jsonPath = join43(dir, MARKETPLACE_FILENAME);
-        const stampPath = join43(dir, LAST_FETCHED_FILENAME);
+        const jsonPath = join44(dir, MARKETPLACE_FILENAME);
+        const stampPath = join44(dir, LAST_FETCHED_FILENAME);
         let raw;
         let stamp2;
         try {
@@ -66987,138 +67365,262 @@ var init_marketplace_cache = __esm({
       async writeMarketplace(marketplaceName, json2) {
         const dir = this.marketplaceDir(marketplaceName);
         await mkdir3(dir, { recursive: true });
-        await writeFile3(join43(dir, MARKETPLACE_FILENAME), `${JSON.stringify(json2, null, 2)}
+        await writeFile3(join44(dir, MARKETPLACE_FILENAME), `${JSON.stringify(json2, null, 2)}
 `);
-        await writeFile3(join43(dir, LAST_FETCHED_FILENAME), (/* @__PURE__ */ new Date()).toISOString());
+        await writeFile3(join44(dir, LAST_FETCHED_FILENAME), (/* @__PURE__ */ new Date()).toISOString());
       }
       /**
-       * Get a cached package by name and commit SHA.
+       * Get a cached package tree by name, commit and subfolder, and stamp it as
+       * used so a sweep leaves it alone while the caller reads it.
        *
        * @param packageName - Logical package name.
-       * @param commitSha - Commit SHA the package was cloned at.
-       * @returns A descriptor when present, `null` otherwise.
-       */
-      async getPackage(packageName, commitSha) {
-        const path43 = this.packageDir(packageName, commitSha);
-        try {
-          const info2 = await stat(path43);
-          if (!info2.isDirectory()) {
-            return null;
-          }
-          return {
-            packageName,
-            commitSha,
-            path: path43,
-            cachedAt: info2.mtime
-          };
-        } catch {
-          return null;
-        }
+       * @param commitSha - The commit whose tree is wanted.
+       * @param subpath - The subfolder a sparse entry holds; `''` for the whole
+       *   repository. Part of the key: a sparse checkout is a different tree.
+       * @returns A descriptor when a non-empty entry is present, `null` otherwise.
+       */
+      async getPackage(packageName, commitSha, subpath) {
+        const path43 = this.packageDir(packageName, commitSha, subpath);
+        const usedAt = await this.stampIfPresent(path43);
+        if (usedAt === null) return null;
+        return {
+          packageName,
+          commitSha,
+          subpathDigest: subpathDigest(subpath),
+          path: path43,
+          lastUsedAt: usedAt
+        };
       }
       /**
-       * Reserve a package directory in the cache and return its absolute path.
+       * The one way an entry is written. Fetches into a unique temp directory,
+       * takes the entry's key from the commit the fetch REPORTS, refuses anything
+       * that is not a full commit id, and atomically renames the tree onto
+       * `${name}@${commit}` — `${name}@${commit}~${digest}` for a sparse entry,
+       * where the digest is of the subfolder (DOR-2248). The caller's
+       * `expectedSha` never names an
+       * entry: it only short-circuits a tree already cached under it and
+       * de-duplicates concurrent fetches of it. The two differ when a ref moved
+       * between the caller's lookup and the fetch, and the entry then holds the
+       * commit that actually arrived.
        *
-       * The caller is responsible for writing the package contents into the
-       * returned directory. The directory is created (idempotently) but left
-       * empty — `putPackage` does no other I/O.
+       * Every entry it hands out is stamped as used, and a fetch that lands a new
+       * entry tells the {@link onEntryWritten} listeners.
        *
-       * @param packageName - Logical package name.
-       * @param commitSha - Commit SHA the package will be cloned at.
-       * @returns Absolute path to the reserved directory.
-       */
-      async putPackage(packageName, commitSha) {
-        const path43 = this.packageDir(packageName, commitSha);
-        await mkdir3(path43, { recursive: true });
-        return path43;
-      }
-      /**
-       * Concurrency-safe, atomic package materialization. Guarantees that two
-       * concurrent fetches of the same `${name}@${sha}` never both clone into (and
-       * corrupt) the same directory. This is the bug behind the failing `flow`
-       * github-subdir install: a UI preview and install fire simultaneously and
-       * two `git clone` processes collide on git's template copy step.
-       *
-       * Algorithm:
-       *   1. If the final cache path already holds a valid (non-empty) package,
-       *      reuse it immediately (no clone).
-       *   2. If a materialization for this key is already in flight, await it and
-       *      reuse its result (in-process de-dup).
-       *   3. Otherwise clone into a unique sibling temp directory, then atomically
-       *      `rename` it onto the final cache path. A partial/empty directory left
-       *      by a prior crashed clone is removed before the rename so it can never
-       *      shadow a clean result.
-       *
-       * The injected `clone` callback receives the temp directory to populate; any
-       * error it throws (e.g. a `GitSpawnError` carrying git stderr + exit code)
-       * propagates verbatim so callers surface the real fetch failure rather than
-       * a downstream "manifest missing" validation error.
+       * Concurrency: two fetches of one entry key in this process
+       * share one fetch (a UI preview and an install fire together, and two git
+       * processes must never collide in one directory). A valid tree another
+       * process landed first wins, and ours is discarded. A partial (empty)
+       * directory left by a crash is replaced.
+       *
+       * The fetch's error (git's stderr, via `GitFetchError`) propagates
+       * verbatim, so a caller sees the real failure rather than a later
+       * "manifest missing".
        *
        * @param packageName - Logical package name.
-       * @param commitSha - Commit SHA the package is cloned at (the cache key).
-       * @param clone - Callback that clones/populates the given temp directory.
-       * @returns Absolute path to the final cache directory holding the package.
-       */
-      async materializePackage(packageName, commitSha, clone2) {
-        const finalPath = this.packageDir(packageName, commitSha);
-        if (await isNonEmptyDir(finalPath)) {
-          return finalPath;
-        }
-        const key = `${packageName}@${commitSha}`;
+       * @param expectedSha - The commit the caller asked for.
+       * @param subpath - The subfolder the fetch checks out; `''` for the whole
+       *   repository.
+       * @param fetch - Populates the temp directory it is given and resolves to
+       *   the full commit id of what it put there.
+       * @returns Where the tree is, and the commit it is.
+       * @throws {Error} When the fetch reports anything but a full commit id.
+       */
+      async materializePackage(packageName, expectedSha, subpath, fetch2) {
+        const expectedPath = this.packageDir(packageName, expectedSha, subpath);
+        if (await this.stampIfPresent(expectedPath) !== null) {
+          return { path: expectedPath, commitSha: expectedSha };
+        }
+        const key = expectedPath;
         const existing = this.inFlight.get(key);
         if (existing) {
           return existing;
         }
-        const work = this.cloneAndPromote(finalPath, clone2).finally(() => {
+        const work = this.fetchAndPromote(packageName, subpath, fetch2).finally(() => {
           this.inFlight.delete(key);
         });
         this.inFlight.set(key, work);
         return work;
       }
       /**
-       * Clone into a unique temp directory and atomically promote it onto the
-       * final cache path. Cleans up the temp directory on clone failure and
-       * removes any partial directory occupying the final path before promoting.
+       * Delete what no entry is ever read from, once, before any fetch runs (the
+       * server calls it at startup):
+       *
+       * - the `packages/` root entries lived in before their keys were verified
+       *   (DOR-2248): a tree there may not be the commit its name says;
+       * - temp fetch directories a crash left in `trees/`, whose `.git` may still
+       *   hold a half-fetched repository;
+       * - entries a sweep renamed aside and a crash stopped it deleting.
+       *
+       * Idempotent. Not safe while a fetch is running in this cache.
+       */
+      async removeLeftovers() {
+        await rm(join44(this.cacheRoot, LEGACY_PACKAGES_DIRNAME), { recursive: true, force: true });
+        const treesRoot = join44(this.cacheRoot, TREES_DIRNAME);
+        let entries;
+        try {
+          entries = await readdir2(treesRoot);
+        } catch {
+          return;
+        }
+        await Promise.all(
+          entries.filter(
+            (entry) => entry.startsWith(TEMP_FETCH_PREFIX) || entry.startsWith(TEMP_PRUNE_PREFIX)
+          ).map((entry) => rm(join44(treesRoot, entry), { recursive: true, force: true }))
+        );
+      }
+      /**
+       * Fetch into a unique temp directory, key it by the reported commit, and
+       * atomically promote it onto that entry. Cleans up the temp directory on
+       * any failure.
        *
        * @internal
        */
-      async cloneAndPromote(finalPath, clone2) {
-        const packagesRoot = join43(this.cacheRoot, "packages");
-        await mkdir3(packagesRoot, { recursive: true });
-        const tempDir = await mkdtemp(join43(packagesRoot, ".tmp-clone-"));
+      async fetchAndPromote(packageName, subpath, fetch2) {
+        const treesRoot = join44(this.cacheRoot, TREES_DIRNAME);
+        await mkdir3(treesRoot, { recursive: true });
+        const tempDir = await mkdtemp(join44(treesRoot, TEMP_FETCH_PREFIX));
+        let commitSha;
+        let finalPath;
         try {
-          await clone2(tempDir);
+          commitSha = await fetch2(tempDir);
+          if (!isFullCommitSha(commitSha)) {
+            throw new Error(
+              `Refused to cache ${packageName}: the fetch reported "${commitSha}", which is not a full commit id`
+            );
+          }
+          finalPath = this.packageDir(packageName, commitSha, subpath);
         } catch (err) {
           await rm(tempDir, { recursive: true, force: true });
           throw err;
         }
-        if (await isNonEmptyDir(finalPath)) {
+        const landedOurs = await this.exclusive(async () => {
+          if (await isNonEmptyDir(finalPath)) {
+            await stampUsed(finalPath);
+            return false;
+          }
+          await rm(finalPath, { recursive: true, force: true });
+          await rename(tempDir, finalPath);
+          await stampUsed(finalPath);
+          return true;
+        });
+        if (landedOurs) {
+          for (const listener of this.entryWrittenListeners) listener();
+        } else {
           await rm(tempDir, { recursive: true, force: true });
-          return finalPath;
         }
-        await rm(finalPath, { recursive: true, force: true });
-        await rename(tempDir, finalPath);
-        return finalPath;
+        return { path: finalPath, commitSha };
+      }
+      /**
+       * Be told each time a fetch lands a new entry: the one way the cache grows,
+       * so the one signal its retention owner needs. Not called for a cache hit,
+       * a failed fetch, or a tree that was already there when the fetch landed.
+       *
+       * @param listener - Called synchronously after the entry is in place. It
+       *   must not throw; start any work it triggers in the background.
+       * @returns A function that stops the notifications.
+       */
+      onEntryWritten(listener) {
+        this.entryWrittenListeners.add(listener);
+        return () => {
+          this.entryWrittenListeners.delete(listener);
+        };
+      }
+      /**
+       * Remove every entry the caller's rule does not keep and that nobody has
+       * used in the last {@link IN_USE_GRACE_MS}. The grace is not the caller's to
+       * waive: it is this cache's promise to everyone it handed a path.
+       *
+       * Each removal re-checks the stamp and renames the entry aside to
+       * `.tmp-prune-*` under the lock, then measures and deletes the renamed copy
+       * outside it. A reader that stamps first keeps its entry; one that comes
+       * after the rename sees a miss and fetches. In-progress fetches
+       * (`.tmp-fetch-*`) are never entries, so never candidates.
+       *
+       * @param keep - Given every entry, returns the paths to keep. Called once,
+       *   with the listing this call works from.
+       * @returns What was removed, the bytes freed, and any entry that could not be
+       *   removed (the others still are).
+       */
+      async removeUnused(keep) {
+        const treesRoot = join44(this.cacheRoot, TREES_DIRNAME);
+        const entries = await this.listPackages();
+        const kept = keep(entries);
+        const result2 = { removed: [], freedBytes: 0, failed: [] };
+        for (const entry of entries) {
+          if (kept.has(entry.path)) continue;
+          try {
+            const aside = await this.exclusive(async () => {
+              let lastUsedMs;
+              try {
+                lastUsedMs = (await stat(entry.path)).mtimeMs;
+              } catch {
+                return null;
+              }
+              if (Date.now() - lastUsedMs < IN_USE_GRACE_MS) return null;
+              const target = join44(treesRoot, `${TEMP_PRUNE_PREFIX}${randomUUID2()}`);
+              await rename(entry.path, target);
+              return target;
+            });
+            if (aside === null) continue;
+            const bytes = await directorySize(aside);
+            await rm(aside, { recursive: true, force: true });
+            result2.removed.push(entry);
+            result2.freedBytes += bytes;
+          } catch (err) {
+            result2.failed.push({ entry, error: err instanceof Error ? err.message : String(err) });
+          }
+        }
+        return result2;
+      }
+      /**
+       * Stamp `path` as used now if it holds a valid entry, as one step under the
+       * lock.
+       *
+       * @returns When it was stamped, or `null` when there is no valid entry.
+       * @internal
+       */
+      stampIfPresent(path43) {
+        return this.exclusive(async () => {
+          if (!await isNonEmptyDir(path43)) return null;
+          return stampUsed(path43);
+        });
+      }
+      /**
+       * Run `fn` with no other critical section of this cache running. Sections
+       * are a few system calls each, so a promise chain is all the lock needs.
+       *
+       * @internal
+       */
+      exclusive(fn) {
+        const run = this.lockTail.then(fn);
+        this.lockTail = run.then(
+          () => void 0,
+          () => void 0
+        );
+        return run;
       }
       /**
        * Enumerate every cached package across all names and SHAs. Entries whose
-       * directory name does not match the `${name}@${sha}` convention are
-       * silently skipped.
+       * directory name does not match the `${name}@${sha}` convention (including
+       * in-progress fetches and entries being removed) are silently skipped.
+       * Listing is not use: it stamps nothing.
        */
       async listPackages() {
-        const root = join43(this.cacheRoot, "packages");
+        const root = join44(this.cacheRoot, TREES_DIRNAME);
         let entries;
         try {
-          entries = await readdir(root);
+          entries = await readdir2(root);
         } catch {
           return [];
         }
         const results = [];
         for (const entry of entries) {
+          if (entry.startsWith(TEMP_FETCH_PREFIX) || entry.startsWith(TEMP_PRUNE_PREFIX)) continue;
           const parsed = parsePackageDirName(entry);
           if (!parsed) {
             continue;
           }
-          const path43 = join43(root, entry);
+          const path43 = join44(root, entry);
           try {
             const info2 = await stat(path43);
             if (!info2.isDirectory()) {
@@ -67127,37 +67629,15 @@ var init_marketplace_cache = __esm({
             results.push({
               packageName: parsed.packageName,
               commitSha: parsed.commitSha,
+              subpathDigest: parsed.subpathDigest,
               path: path43,
-              cachedAt: info2.mtime
+              lastUsedAt: info2.mtime
             });
           } catch {
           }
         }
         return results;
       }
-      /**
-       * Garbage-collect cached packages. Groups every cached package by name,
-       * sorts each group by `cachedAt` descending, and removes everything past
-       * the `keepLastN`-th entry.
-       *
-       * @param opts - Pruning options. `keepLastN` defaults to `1` (keep only
-       *   the most recently cached SHA per package name).
-       * @returns The list of removed package descriptors.
-       */
-      async prune(opts) {
-        const keepLastN = opts?.keepLastN ?? 1;
-        const grouped = groupByPackageName(await this.listPackages());
-        const removed = [];
-        for (const group of grouped.values()) {
-          group.sort((a2, b2) => b2.cachedAt.getTime() - a2.cachedAt.getTime());
-          const toRemove = group.slice(keepLastN);
-          for (const pkg of toRemove) {
-            await rm(pkg.path, { recursive: true, force: true });
-            removed.push(pkg);
-          }
-        }
-        return { removed };
-      }
       /** Wipe the entire cache directory. No-op when the directory does not exist. */
       async clear() {
         await rm(this.cacheRoot, { recursive: true, force: true });
@@ -67169,11 +67649,15 @@ var init_marketplace_cache = __esm({
        *   the cache.
        */
       marketplaceDir(marketplaceName) {
-        const root = join43(this.cacheRoot, "marketplaces");
-        return assertContainedIn(root, join43(root, marketplaceName));
+        const root = join44(this.cacheRoot, "marketplaces");
+        return assertContainedIn(root, join44(root, marketplaceName));
       }
       /**
-       * Compute the directory path for a content-addressable package clone.
+       * Compute the directory path for a content-addressable package tree:
+       * `${name}@${sha}` for a whole repository, `${name}@${sha}~${digest}` for a
+       * sparse checkout of `subpath`, the digest being the first 12 hex digits of
+       * the subfolder's SHA-256 (a path may hold characters a directory name
+       * cannot, and its length is unbounded).
        *
        * The containment assertion is the belt to the resolver's braces. Both halves
        * of this key are caller-influenced — the package name comes from the install
@@ -67185,9 +67669,11 @@ var init_marketplace_cache = __esm({
        * @throws {PathEscapeError} When the key would place the directory outside
        *   the cache.
        */
-      packageDir(packageName, commitSha) {
-        const root = join43(this.cacheRoot, "packages");
-        return assertContainedIn(root, join43(root, `${packageName}@${commitSha}`));
+      packageDir(packageName, commitSha, subpath) {
+        const root = join44(this.cacheRoot, TREES_DIRNAME);
+        const digest2 = subpathDigest(subpath);
+        const tree = digest2 === "" ? "" : `${SUBPATH_SEPARATOR}${digest2}`;
+        return assertContainedIn(root, join44(root, `${packageName}@${commitSha}${tree}`));
       }
     };
   }
@@ -67195,13 +67681,13 @@ var init_marketplace_cache = __esm({
 
 // ../shared/src/atomic-write.ts
 import { AsyncLocalStorage as AsyncLocalStorage3 } from "node:async_hooks";
-import { randomUUID as randomUUID2 } from "node:crypto";
+import { randomUUID as randomUUID3 } from "node:crypto";
 import { chmod, mkdir as mkdir4, rename as rename2, rm as rm2, writeFile as writeFile4 } from "node:fs/promises";
-import { basename as basename6, dirname as dirname11, join as join44, resolve as resolve9 } from "node:path";
+import { basename as basename6, dirname as dirname11, join as join45, resolve as resolve9 } from "node:path";
 async function writeUnlocked(filePath, data, options) {
   const dir = dirname11(filePath);
   await mkdir4(dir, { recursive: true });
-  const tempPath = join44(dir, `.${basename6(filePath)}.${process.pid}.${randomUUID2()}.tmp`);
+  const tempPath = join45(dir, `.${basename6(filePath)}.${process.pid}.${randomUUID3()}.tmp`);
   try {
     await writeFile4(tempPath, data, {
       encoding: "utf-8",
@@ -67305,7 +67791,7 @@ var init_source_url_policy = __esm({
 
 // ../../apps/server/src/services/marketplace/marketplace-source-manager.ts
 import { readFile as readFile4 } from "node:fs/promises";
-import { join as join45 } from "node:path";
+import { join as join46 } from "node:path";
 function buildDefaultSources() {
   const now2 = (/* @__PURE__ */ new Date()).toISOString();
   return [
@@ -67365,7 +67851,7 @@ var init_marketplace_source_manager = __esm({
        */
       constructor(dorkHome) {
         this.dorkHome = dorkHome;
-        this.filePath = join45(dorkHome, MARKETPLACES_FILENAME);
+        this.filePath = join46(dorkHome, MARKETPLACES_FILENAME);
       }
       dorkHome;
       filePath;
@@ -67800,7 +68286,7 @@ __export(harness_sync_command_exports, {
   runHarnessSync: () => runHarnessSync
 });
 import { existsSync as existsSync17, readFileSync as readFileSync20 } from "node:fs";
-import { join as join46 } from "node:path";
+import { join as join47 } from "node:path";
 import { parseArgs as parseArgs3 } from "node:util";
 function parseHarnessSyncArgs(rawArgs) {
   let parsed;
@@ -67927,7 +68413,7 @@ function reportCodexTrust(before, after) {
 }
 function reportClaudeSkillsRestart(existedBefore, repoRoot) {
   if (existedBefore) return;
-  if (!existsSync17(join46(repoRoot, CLAUDE_SKILLS_DIR))) return;
+  if (!existsSync17(join47(repoRoot, CLAUDE_SKILLS_DIR))) return;
   const facts = skillsFactsFor("claude-code");
   console.log("");
   console.log(`Created ${CLAUDE_SKILLS_DIR}/, which is where Claude Code reads skills.`);
@@ -67938,7 +68424,7 @@ function reportClaudeSkillsRestart(existedBefore, repoRoot) {
 }
 function readIfPresent(repoRoot, rel) {
   try {
-    return readFileSync20(join46(repoRoot, rel), "utf8");
+    return readFileSync20(join47(repoRoot, rel), "utf8");
   } catch {
     return void 0;
   }
@@ -68265,7 +68751,7 @@ async function runHarnessSync(args) {
   }
   const repoRoot = process.cwd();
   const ourHarness = await readDorkosHarness(resolveDorkHome2());
-  if (!existsSync17(join46(repoRoot, HARNESS_MANIFEST_PATH))) {
+  if (!existsSync17(join47(repoRoot, HARNESS_MANIFEST_PATH))) {
     if (!args.fix) {
       console.error(`No harness manifest in ${repoRoot}`);
       console.error(`  looked for: ${HARNESS_MANIFEST_PATH}`);
@@ -68345,7 +68831,7 @@ async function runHarnessSync(args) {
       return { exitCode: strictExit(exitCode2, withheld, args.strict) };
     }
     const codexHooksBefore = readIfPresent(repoRoot, CODEX_HOOKS_TARGET);
-    const claudeSkillsExistedBefore = existsSync17(join46(repoRoot, CLAUDE_SKILLS_DIR));
+    const claudeSkillsExistedBefore = existsSync17(join47(repoRoot, CLAUDE_SKILLS_DIR));
     const result2 = projectWithConsent2(repoRoot, {
       ...consentOpts,
       sweepOrphans: harnessFilter === void 0
@@ -68403,7 +68889,7 @@ __export(harness_adopt_command_exports, {
   runHarnessAdopt: () => runHarnessAdopt
 });
 import { existsSync as existsSync18 } from "node:fs";
-import { join as join47, resolve as resolve10 } from "node:path";
+import { join as join48, resolve as resolve10 } from "node:path";
 import { parseArgs as parseArgs4 } from "node:util";
 function parseHarnessAdoptArgs(rawArgs) {
   let parsed;
@@ -68444,7 +68930,7 @@ ${USAGE_LINE6}`
 }
 async function runHarnessAdopt(args) {
   const repoRoot = args.project === void 0 ? process.cwd() : resolve10(process.cwd(), args.project);
-  if (!existsSync18(join47(repoRoot, HARNESS_MANIFEST_PATH))) {
+  if (!existsSync18(join48(repoRoot, HARNESS_MANIFEST_PATH))) {
     console.error(`No harness manifest in ${repoRoot}`);
     console.error(`  looked for: ${HARNESS_MANIFEST_PATH}`);
     console.error("");
@@ -68969,31 +69455,16 @@ function parseCacheListArgs(rawArgs) {
   }
 }
 function parseCachePruneArgs(rawArgs) {
-  let parsed;
   try {
-    parsed = parseArgs6({
+    parseArgs6({
       args: rawArgs,
-      options: {
-        "keep-last-n": { type: "string" }
-      },
+      options: {},
       allowPositionals: false,
       strict: true
     });
   } catch (err) {
     rethrowUnknownOption(err, "cache prune", PRUNE_USAGE);
   }
-  const raw = parsed.values["keep-last-n"];
-  if (raw === void 0) {
-    return {};
-  }
-  const parsedNumber = Number(raw);
-  if (!Number.isInteger(parsedNumber) || parsedNumber < 0) {
-    throw new Error(
-      `Invalid value for --keep-last-n: '${String(raw)}' (expected a non-negative integer).
-${PRUNE_USAGE}`
-    );
-  }
-  return { keepLastN: parsedNumber };
 }
 function parseCacheClearArgs(rawArgs) {
   let parsed;
@@ -69019,11 +69490,17 @@ function renderCacheStatus(status) {
   ];
   const labelWidth = Math.max(...rows.map((r3) => r3[0].length));
   const valueWidth = Math.max(...rows.map((r3) => r3[1].length));
-  return rows.map(([label, value]) => {
+  const lines = rows.map(([label, value]) => {
     const paddedLabel = label + " ".repeat(labelWidth - label.length);
     const paddedValue = " ".repeat(valueWidth - value.length) + value;
     return `${paddedLabel}  ${paddedValue}`;
-  }).join("\n");
+  });
+  if (status.cleanup?.paused) {
+    lines.push(
+      `Automatic cleanup is paused: ${status.cleanup.reason ?? "the server log says why"}`
+    );
+  }
+  return lines.join("\n");
 }
 async function runCacheList() {
   try {
@@ -69039,17 +69516,18 @@ async function runCacheList() {
     return 1;
   }
 }
-async function runCachePrune(args) {
+async function runCachePrune() {
   try {
-    const body = args.keepLastN !== void 0 ? { keepLastN: args.keepLastN } : {};
-    const result2 = await apiCall("POST", "/api/marketplace/cache/prune", body);
+    const result2 = await apiCall("POST", "/api/marketplace/cache/prune", {});
     const count2 = result2.removed.length;
     if (count2 === 0) {
-      console.log("Nothing to prune \u2014 cache is already minimal.");
+      console.log(
+        "Nothing to remove. Everything cached belongs to an installed package or was used in the last 15 minutes."
+      );
       return 0;
     }
     const noun = count2 === 1 ? "package" : "packages";
-    console.log(`Pruned ${count2} cached ${noun}, freed ${formatBytes(result2.freedBytes)}.`);
+    console.log(`Removed ${count2} cached ${noun}, freed ${formatBytes(result2.freedBytes)}.`);
     return 0;
   } catch (err) {
     if (err instanceof ApiError) {
@@ -69093,7 +69571,7 @@ var init_cache_commands = __esm({
     init_confirm_prompt();
     init_parse_args_error();
     LIST_USAGE = "Usage: dorkos cache list";
-    PRUNE_USAGE = "Usage: dorkos cache prune [--keep-last-n <N>]";
+    PRUNE_USAGE = "Usage: dorkos cache prune";
     CLEAR_USAGE = "Usage: dorkos cache clear [-y|--yes]";
   }
 });
@@ -69122,7 +69600,8 @@ async function runCacheDispatcher(subcommand2, subArgs) {
       return await runCacheList2();
     }
     if (subcommand2 === "prune") {
-      return await runCachePrune2(parseCachePruneArgs2(subArgs));
+      parseCachePruneArgs2(subArgs);
+      return await runCachePrune2();
     }
     if (subcommand2 === "clear") {
       return await runCacheClear2(parseCacheClearArgs2(subArgs));
@@ -69146,13 +69625,13 @@ Inspect and manage the marketplace package cache on the running DorkOS server.
 
 Subcommands:
   list                       Show cache counts and total size
-  prune [--keep-last-n <N>]  Remove older cached package SHAs (default: keep 1)
+  prune                      Remove cached packages no install needs
+                             (DorkOS also does this on its own)
   clear [-y|--yes]           Wipe the entire cache (requires confirmation)
 
 Examples:
   dorkos cache list
   dorkos cache prune
-  dorkos cache prune --keep-last-n 3
   dorkos cache clear --yes
 `;
   }
@@ -70349,45 +70828,6 @@ https://dorkos.ai/docs/guides/agent-browser
   }
 });
 
-// ../shared/src/marketplace-schemas.ts
-function describeSchedulePermissionMode(mode) {
-  return SCHEDULE_PERMISSION_MODE_SUMMARY[mode] ?? `runs in "${mode}" mode, which this version of DorkOS does not recognise`;
-}
-function describeScheduleArrival(startsEnabled) {
-  return startsEnabled ? "waits for your approval before its first run" : "arrives switched off, and would wait for your approval too";
-}
-function describeHookEvent(event, matcher) {
-  const when = HOOK_EVENT_SUMMARY[event] ?? `on ${event}`;
-  return matcher ? `${when} (${matcher})` : when;
-}
-var SCHEDULE_PERMISSION_MODE_SUMMARY, HOOK_EVENT_SUMMARY;
-var init_marketplace_schemas = __esm({
-  "../shared/src/marketplace-schemas.ts"() {
-    SCHEDULE_PERMISSION_MODE_SUMMARY = {
-      default: "runs at the most careful setting its agent offers",
-      plan: "can only read and plan, and cannot change anything",
-      acceptEdits: "can change files on its own, and on some agents run commands too",
-      dontAsk: "runs its tools without a permission prompt",
-      bypassPermissions: "can run any command without a permission prompt",
-      auto: "decides for itself which actions are safe to take"
-    };
-    HOOK_EVENT_SUMMARY = {
-      SessionStart: "when a session starts",
-      SessionEnd: "when a session ends",
-      UserPromptSubmit: "when you send a message",
-      PreToolUse: "before the agent uses a tool",
-      PostToolUse: "after the agent uses a tool",
-      PermissionRequest: "when the agent asks for permission",
-      Notification: "when the agent sends a notification",
-      SubagentStart: "when a subagent starts",
-      SubagentStop: "when a subagent finishes",
-      Stop: "when the agent finishes",
-      PreCompact: "before the conversation is shortened",
-      PostCompact: "after the conversation is shortened"
-    };
-  }
-});
-
 // src/lib/preview-render.ts
 function renderPreview(packageName, version4, preview) {
   const lines = [];
@@ -70738,62 +71178,112 @@ function parseUpdateArgs(rawArgs) {
 }
 async function runUpdate(args) {
   try {
-    const targets = args.name ? [args.name] : await listInstalledPackageNames();
-    if (targets.length === 0) {
-      console.log("No installed packages to check.");
-      return 0;
-    }
-    const allChecks = [];
-    const allApplied = [];
-    for (const name of targets) {
-      const body = { apply: Boolean(args.apply) };
-      if (args.projectPath) body.projectPath = args.projectPath;
-      const result2 = await apiCall(
-        "POST",
-        `/api/marketplace/packages/${encodeURIComponent(name)}/update`,
-        body
-      );
-      allChecks.push(...result2.checks);
-      allApplied.push(...result2.applied);
-    }
-    renderUpdateChecks(allChecks, Boolean(args.apply));
-    if (args.apply && allApplied.length > 0) {
-      console.log("");
-      console.log("Applied:");
-      for (const a2 of allApplied) {
-        console.log(`  ${a2.packageName}@${a2.version} \u2192 ${a2.installPath}`);
-      }
-    }
-    return 0;
+    return args.name ? await updateOne(args.name, args) : await updateAll(args);
   } catch (err) {
-    if (err instanceof ApiError) {
-      console.error(`Error: ${err.message}`);
-    } else {
-      console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);
-    }
+    console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);
     return 1;
   }
 }
-async function listInstalledPackageNames() {
-  const installed = await apiCall("GET", "/api/marketplace/installed");
-  return installed.packages.map((p) => p.name);
+async function updateOne(name, args) {
+  const body = { apply: Boolean(args.apply) };
+  if (args.projectPath) body.projectPath = args.projectPath;
+  let result2;
+  try {
+    result2 = await apiCall(
+      "POST",
+      `/api/marketplace/packages/${encodeURIComponent(name)}/update`,
+      body
+    );
+  } catch (err) {
+    if (!(err instanceof ApiError)) throw err;
+    renderUpdateChecks([couldNotCheck(name, err.message)], Boolean(args.apply));
+    return err.status === 404 || args.apply ? 1 : 0;
+  }
+  renderUpdateChecks(result2.checks, Boolean(args.apply));
+  if (args.apply && result2.applied.length > 0) {
+    console.log("");
+    console.log("Applied:");
+    for (const a2 of result2.applied)
+      console.log(`  ${a2.packageName}@${a2.version} \u2192 ${a2.installPath}`);
+  }
+  return 0;
 }
-function renderUpdateChecks(checks, apply) {
-  const pending = checks.filter((c3) => c3.hasUpdate);
-  const upToDate = checks.length - pending.length;
-  if (pending.length === 0) {
-    console.log(`All ${checks.length} package(s) up to date.`);
-    return;
+async function updateAll(args) {
+  const result2 = args.apply ? await apiCall("POST", "/api/marketplace/updates", {
+    apply: true,
+    ...args.projectPath && { projectPath: args.projectPath }
+  }) : await apiCall(
+    "GET",
+    `/api/marketplace/updates${args.projectPath ? `?projectPath=${encodeURIComponent(args.projectPath)}` : ""}`
+  );
+  if (result2.checks.length === 0) {
+    console.log("No installed packages to check.");
+    return 0;
   }
-  for (const check4 of pending) {
-    const suffix = apply ? "" : " (run with --apply to update)";
-    console.log(
-      `${check4.packageName}: ${check4.installedVersion} \u2192 ${check4.latestVersion}${suffix}`
-    );
+  renderUpdateChecks(result2.checks, Boolean(args.apply));
+  const applied = result2.checks.flatMap(
+    (c3) => c3.applied ? [{ check: c3, result: c3.applied }] : []
+  );
+  if (applied.length > 0) {
+    console.log("");
+    console.log("Applied:");
+    for (const { check: check4, result: a2 } of applied) {
+      console.log(`  ${labelOf(check4)}@${a2.version} \u2192 ${a2.installPath}`);
+    }
+  }
+  const failed = result2.checks.filter((c3) => c3.applyError !== void 0);
+  if (failed.length > 0) {
+    console.log("");
+    console.log("Could not update:");
+    for (const c3 of failed) console.log(`  ${labelOf(c3)}: ${c3.applyError}`);
   }
-  if (upToDate > 0) {
-    console.log(`${upToDate} package(s) already up to date.`);
+  return failed.length > 0 ? 1 : 0;
+}
+function couldNotCheck(packageName, reason) {
+  return {
+    packageName,
+    installedVersion: "",
+    latestVersion: "",
+    hasUpdate: false,
+    marketplace: "",
+    status: "unknown",
+    note: reason
+  };
+}
+function labelOf(check4) {
+  const place2 = check4.agentName ?? check4.agentPath;
+  return place2 ? `${check4.packageName} [${place2}]` : check4.packageName;
+}
+function formatVersion(version4, source) {
+  return source === "commit" ? `commit ${version4.slice(0, 7)}` : version4;
+}
+function renderUpdateChecks(checks, apply) {
+  for (const check4 of checks) {
+    const label = labelOf(check4);
+    const installed = formatVersion(check4.installedVersion, check4.installedVersionSource);
+    if (check4.status === "unknown") {
+      console.log(`${label}  could not check: ${check4.note ?? "no reason given"}`);
+      continue;
+    }
+    if (check4.status === "update-available") {
+      const latest = formatVersion(check4.latestVersion, check4.latestVersionSource);
+      const from = check4.marketplace ? `  (${check4.marketplace})` : "";
+      console.log(`${label}  ${installed} \u2192 ${latest}${from}`);
+    } else {
+      console.log(`${label}  up to date (${installed})`);
+    }
+    if (check4.note) console.log(`  ${check4.note}`);
   }
+  const updates = checks.filter((c3) => c3.status === "update-available").length;
+  const current = checks.filter((c3) => c3.status === "current").length;
+  const unknown2 = checks.filter((c3) => c3.status === "unknown").length;
+  const parts = [
+    updates > 0 && `${updates} ${updates === 1 ? "update" : "updates"} available`,
+    current > 0 && `${current} up to date`,
+    unknown2 > 0 && `${unknown2} could not be checked`
+  ].filter(Boolean);
+  const hint = !apply && updates > 0 ? ` Run again with --apply to install ${updates === 1 ? "it" : "them"}.` : "";
+  console.log(`${parts.join(", ")}.${hint}`);
 }
 var USAGE_LINE10;
 var init_update2 = __esm({
@@ -71498,7 +71988,7 @@ var init_provider_process = __esm({
 // src/commands/community-deploy/runtime/github-release-source.ts
 import { mkdtemp as mkdtemp2, rm as rm3, writeFile as writeFile5 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join48 } from "node:path";
+import { join as join49 } from "node:path";
 function createGitHubCommunityReleaseSource(options) {
   const verify = async (subject, trusted) => {
     await runProviderCommand({
@@ -71544,8 +72034,8 @@ function createGitHubCommunityReleaseSource(options) {
       return result2.value;
     },
     verifyManifest: async (bytes, trusted) => {
-      const directory = await mkdtemp2(join48(tmpdir2(), "dorkos-community-manifest-"));
-      const path43 = join48(directory, "manifest.json");
+      const directory = await mkdtemp2(join49(tmpdir2(), "dorkos-community-manifest-"));
+      const path43 = join49(directory, "manifest.json");
       try {
         await writeFile5(path43, bytes, { mode: 384, flag: "wx" });
         return await verify(path43, trusted);
@@ -71564,7 +72054,7 @@ var init_github_release_source = __esm({
 });
 
 // src/commands/community-deploy/plan.ts
-import { createHash as createHash3 } from "node:crypto";
+import { createHash as createHash4 } from "node:crypto";
 function createLaunchPlan(input4) {
   const parsed = LaunchPlanInputSchema.parse(input4);
   Object.freeze(parsed.fly);
@@ -71594,7 +72084,7 @@ function hashLaunchPlan(plan) {
       private: plan.tigris.private
     }
   });
-  return createHash3("sha256").update(canonical, "utf8").digest("hex");
+  return createHash4("sha256").update(canonical, "utf8").digest("hex");
 }
 var SafeIdentifierSchema, DisplayNameSchema, RegionSchema, Sha256DigestSchema, LaunchPlanInputSchema;
 var init_plan2 = __esm({
@@ -71845,13 +72335,21 @@ async function readFlyRegions(options) {
     deprecated: region.deprecated
   }));
 }
+function toFlyAppIdentity(app) {
+  return {
+    id: app.ID,
+    name: app.Name,
+    organizationSlug: app.Organization.Slug,
+    status: app.Status
+  };
+}
 async function readFlyApps(options, organizationSlug) {
   const slug = ExternalIdentifierSchema.parse(organizationSlug);
   const apps = (await runProviderCommand({
     ...options,
     args: ["apps", "list", "--org", slug, "--json"],
     parse: (stdout3) => {
-      const parsed = external_exports.array(FlyAppSchema).parse(parseExternalJson(stdout3));
+      const parsed = external_exports.array(FlyAppResponseSchema).parse(parseExternalJson(stdout3));
       requireUniqueExternalIds(parsed, (app) => app.ID);
       if (parsed.some((app) => app.Organization.Slug !== slug)) {
         throw new Error("ORGANIZATION_BINDING_MISMATCH");
@@ -71859,14 +72357,19 @@ async function readFlyApps(options, organizationSlug) {
       return parsed;
     }
   })).value;
-  return apps.map((app) => ({
-    id: app.ID,
-    name: app.Name,
-    organizationId: app.Organization.ID,
-    organizationSlug: app.Organization.Slug,
-    organizationName: app.Organization.Name,
-    status: app.Status
-  }));
+  return apps.map(toFlyAppIdentity);
+}
+async function readFlyOrganizationId(options, organizationSlug) {
+  const slug = ExternalIdentifierSchema.parse(organizationSlug);
+  return (await runProviderCommand({
+    ...options,
+    args: ["orgs", "show", slug, "--json"],
+    parse: (stdout3) => {
+      const parsed = FlyOrganizationDetailSchema.parse(parseExternalJson(stdout3));
+      if (parsed.Slug !== slug) throw new Error("ORGANIZATION_BINDING_MISMATCH");
+      return parsed.ID;
+    }
+  })).value;
 }
 async function readFlyRuntimeInventory(options, appName) {
   const app = ExternalIdentifierSchema.parse(appName);
@@ -71927,7 +72430,7 @@ async function readFlyRuntimeInventory(options, appName) {
     }))
   };
 }
-var FlyIdentitySchema, FlyOrganizationsSchema, FlyRegionSchema, FlyAppSchema, FlyImageDigestSchema, FlyImageComponentSchema, FlyMachineSchema, FlyReleaseSchema, FlyIpSchema;
+var FlyIdentitySchema, FlyOrganizationsSchema, FlyRegionSchema, FlyAppResponseSchema, FlyOrganizationDetailSchema, FlyImageDigestSchema, FlyImageComponentSchema, FlyMachineSchema, FlyReleaseSchema, FlyIpSchema;
 var init_fly_read = __esm({
   "src/commands/community-deploy/fly-read.ts"() {
     "use strict";
@@ -71945,16 +72448,13 @@ var init_fly_read = __esm({
       requires_paid_plan: external_exports.boolean(),
       deprecated: external_exports.boolean()
     }).passthrough();
-    FlyAppSchema = external_exports.object({
+    FlyAppResponseSchema = external_exports.object({
       ID: ExternalIdentifierSchema,
       Name: ExternalIdentifierSchema,
-      Organization: external_exports.object({
-        ID: ExternalIdentifierSchema,
-        Slug: ExternalIdentifierSchema,
-        Name: ExternalLabelSchema
-      }).passthrough(),
-      Status: ExternalLabelSchema
+      Organization: external_exports.object({ Slug: ExternalIdentifierSchema }).passthrough(),
+      Status: external_exports.union([external_exports.literal(""), ExternalLabelSchema])
     }).passthrough();
+    FlyOrganizationDetailSchema = external_exports.object({ ID: ExternalIdentifierSchema, Slug: ExternalIdentifierSchema }).passthrough();
     FlyImageDigestSchema = external_exports.string().regex(/^sha256:[0-9a-f]{64}$/u);
     FlyImageComponentSchema = external_exports.string().regex(/^[A-Za-z0-9][A-Za-z0-9._/-]{0,511}$/u);
     FlyMachineSchema = external_exports.object({
@@ -72029,21 +72529,27 @@ async function createFlyApp(options, appName, organizationSlug) {
     ...options,
     args: ["apps", "create", app, "--org", organization2, "--json", "--yes"],
     parse: (stdout3) => {
-      const parsed = FlyCreatedAppSchema.parse(parseExternalJson(stdout3));
-      if (parsed.Name !== app || parsed.Organization.Slug !== organization2) {
+      let document;
+      try {
+        document = parseExternalJson(stdout3);
+      } catch {
+        return null;
+      }
+      const parsed = FlyAppResponseSchema.safeParse(document);
+      if (!parsed.success) return null;
+      if (parsed.data.Name !== app || parsed.data.Organization.Slug !== organization2) {
         throw new Error("APP_BINDING_MISMATCH");
       }
-      return parsed;
+      return toFlyAppIdentity(parsed.data);
     }
   });
-  return {
-    id: created.ID,
-    name: created.Name,
-    organizationId: created.Organization.ID,
-    organizationSlug: created.Organization.Slug,
-    organizationName: created.Organization.Name,
-    status: created.Status
-  };
+  if (created) return created;
+  const matches = await readFlyApps(options, organization2).catch(() => {
+    throw new ProviderMutationError("CREATION_OUTCOME_UNCERTAIN");
+  });
+  const exact = matches.filter((candidate) => candidate.name === app);
+  if (exact.length !== 1) throw new ProviderMutationError("CREATION_OUTCOME_UNCERTAIN");
+  return exact[0];
 }
 async function stageFlySecrets(options, appName, secrets) {
   const app = parseInput(ExternalIdentifierSchema, appName);
@@ -72114,23 +72620,14 @@ function verifyExistingFlyDeployment(inventory, expectedRepository, expectedDige
   }
   return inventory;
 }
-var FlyCreatedAppSchema, SecretNameSchema, ImageReferenceSchema;
+var SecretNameSchema, ImageReferenceSchema;
 var init_fly_mutate = __esm({
   "src/commands/community-deploy/fly-mutate.ts"() {
     "use strict";
     init_zod();
     init_provider_contract();
     init_provider_mutation();
-    FlyCreatedAppSchema = external_exports.object({
-      ID: ExternalIdentifierSchema,
-      Name: ExternalIdentifierSchema,
-      Status: ExternalLabelSchema,
-      Organization: external_exports.object({
-        ID: ExternalIdentifierSchema,
-        Slug: ExternalIdentifierSchema,
-        Name: ExternalLabelSchema
-      }).passthrough()
-    }).passthrough();
+    init_fly_read();
     SecretNameSchema = external_exports.string().regex(/^[A-Za-z_][A-Za-z0-9_]{0,127}$/u);
     ImageReferenceSchema = external_exports.string().regex(/^[A-Za-z0-9][A-Za-z0-9._/-]{0,511}@sha256:[0-9a-f]{64}$/u);
   }
@@ -73199,6 +73696,7 @@ function createDefaultCommunityCreationDependencies(input4) {
     if (!id) throw new ProviderMutationError("INVALID_RESPONSE");
     return exactFlyApp(input4.options, input4.plan.fly.organizationId, id, input4.plan.fly.appName);
   };
+  let flyOrganizationId;
   return {
     persist: input4.persist,
     now: input4.now,
@@ -73258,15 +73756,23 @@ function createDefaultCommunityCreationDependencies(input4) {
           );
           if (!confirmed) throw new FlyGraphqlClientError("TERMS_NOT_ACCEPTED");
         }
+        flyOrganizationId = await readFlyOrganizationId(
+          input4.options.fly,
+          input4.plan.fly.organizationId
+        );
       },
       create: async () => {
         const exactApp = await app();
+        const organizationId = flyOrganizationId ??= await readFlyOrganizationId(
+          input4.options.fly,
+          input4.plan.fly.organizationId
+        );
         const created = await useTigrisClient(
           input4.options,
           (client2) => client2.createTigris({
             clientMutationId: input4.latestJournal().runId,
             name: input4.plan.tigris.bucketName,
-            organizationId: input4.plan.fly.organizationId,
+            organizationId,
             appId: exactApp.id,
             primaryRegion: input4.plan.fly.region
           })
@@ -73304,7 +73810,7 @@ var init_default_services = __esm({
 // src/commands/community-deploy/fly-config.ts
 import { mkdtemp as mkdtemp3, rm as rm4, writeFile as writeFile6 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join49 } from "node:path";
+import { join as join50 } from "node:path";
 function tomlString(value) {
   return JSON.stringify(value);
 }
@@ -73357,8 +73863,8 @@ kill_timeout = "30s"
 `;
 }
 async function withCommunityFlyConfig(plan, consumer) {
-  const directory = await mkdtemp3(join49(tmpdir3(), "dorkos-community-fly-"));
-  const path43 = join49(directory, "fly.toml");
+  const directory = await mkdtemp3(join50(tmpdir3(), "dorkos-community-fly-"));
+  const path43 = join50(directory, "fly.toml");
   try {
     await writeFile6(path43, renderCommunityFlyConfig(plan), { mode: 384, flag: "wx" });
     return await consumer(path43);
@@ -73506,7 +74012,7 @@ var init_default_deploy = __esm({
 // src/commands/community-deploy/runtime/default-owner.ts
 import { access, constants as constants4, stat as stat2 } from "node:fs/promises";
 import { platform as platform2 } from "node:os";
-import { delimiter, join as join50 } from "node:path";
+import { delimiter, join as join51 } from "node:path";
 import { createInterface as createInterface4 } from "node:readline/promises";
 import { stdin as stdin2, stdout as stdout2 } from "node:process";
 async function ask(question, signal) {
@@ -73539,7 +74045,7 @@ function handoffCommands(system) {
 async function executableOnPath(executable, path43) {
   for (const directory of path43.split(delimiter).filter(Boolean)) {
     try {
-      await access(join50(directory, executable), constants4.X_OK);
+      await access(join51(directory, executable), constants4.X_OK);
       return true;
     } catch {
     }
@@ -73573,7 +74079,7 @@ async function assertOwnerHandoffPrerequisites(env5, system = platform2()) {
         "Owner handoff needs an active Wayland clipboard session before setup can create resources. See https://github.com/dork-labs/dorkos/blob/main/apps/community/FLY.md"
       );
     }
-    const socketAvailable = await stat2(join50(runtimeDirectory, display)).then(
+    const socketAvailable = await stat2(join51(runtimeDirectory, display)).then(
       (value) => value.isSocket(),
       () => false
     );
@@ -74198,28 +74704,28 @@ var init_owner = __esm({
 });
 
 // src/commands/community-deploy/journal.ts
-import { randomUUID as randomUUID3 } from "node:crypto";
+import { randomUUID as randomUUID4 } from "node:crypto";
 import { constants as constants5 } from "node:fs";
 import {
   chmod as chmod2,
   link as link2,
-  lstat,
+  lstat as lstat2,
   mkdir as mkdir5,
   open as open2,
   readFile as readFile6,
-  readdir as readdir2,
+  readdir as readdir3,
   rename as rename3,
   rm as rm5,
   unlink
 } from "node:fs/promises";
-import { basename as basename7, dirname as dirname12, join as join51 } from "node:path";
+import { basename as basename7, dirname as dirname12, join as join52 } from "node:path";
 function launchJournalPath(dorkHome, runId) {
   const safeRunId = external_exports.uuid().parse(runId);
-  return join51(dorkHome, "launches", "community", `${safeRunId}.json`);
+  return join52(dorkHome, "launches", "community", `${safeRunId}.json`);
 }
 async function rejectSymlink(path43) {
   try {
-    if ((await lstat(path43)).isSymbolicLink()) throw new Error(`Refusing symbolic link: ${path43}`);
+    if ((await lstat2(path43)).isSymbolicLink()) throw new Error(`Refusing symbolic link: ${path43}`);
   } catch (error63) {
     if (error63.code !== "ENOENT") throw error63;
   }
@@ -74243,7 +74749,7 @@ async function prepareDirectory(filePath) {
 }
 async function exists2(path43) {
   try {
-    await lstat(path43);
+    await lstat2(path43);
     return true;
   } catch (error63) {
     if (error63.code === "ENOENT") return false;
@@ -74252,9 +74758,9 @@ async function exists2(path43) {
 }
 async function writeDurably(filePath, data) {
   const directory = dirname12(filePath);
-  const temporary = join51(
+  const temporary = join52(
     directory,
-    `.${basename7(filePath)}.${process.pid}.${randomUUID3()}.durable`
+    `.${basename7(filePath)}.${process.pid}.${randomUUID4()}.durable`
   );
   let handle;
   try {
@@ -74294,7 +74800,7 @@ function processIsAlive(pid) {
 }
 async function sameFile(first, second) {
   try {
-    const [left, right] = await Promise.all([lstat(first), lstat(second)]);
+    const [left, right] = await Promise.all([lstat2(first), lstat2(second)]);
     return left.dev === right.dev && left.ino === right.ino;
   } catch {
     return false;
@@ -74305,7 +74811,7 @@ async function releaseOwnedLock(candidate, lockPath) {
   await rm5(candidate, { force: true });
 }
 async function createLockCandidate(lockPath) {
-  const record2 = { ownerId: randomUUID3(), pid: process.pid, createdAt: (/* @__PURE__ */ new Date()).toISOString() };
+  const record2 = { ownerId: randomUUID4(), pid: process.pid, createdAt: (/* @__PURE__ */ new Date()).toISOString() };
   const candidate = `${lockPath}.${record2.ownerId}.candidate`;
   await writeDurably(candidate, `${JSON.stringify(record2)}
 `);
@@ -74349,12 +74855,12 @@ async function readLaunchJournal(filePath) {
   }
 }
 async function listIncompleteLaunchJournals(dorkHome) {
-  const directory = join51(dorkHome, "launches", "community");
+  const directory = join52(dorkHome, "launches", "community");
   await rejectSymlink(dirname12(directory));
   await rejectSymlink(directory);
   let filenames;
   try {
-    filenames = await readdir2(directory);
+    filenames = await readdir3(directory);
   } catch (error63) {
     if (error63.code === "ENOENT") return [];
     throw error63;
@@ -74625,7 +75131,7 @@ __export(community_dispatcher_exports, {
   formatIncompleteLaunches: () => formatIncompleteLaunches,
   runCommunityDispatcher: () => runCommunityDispatcher
 });
-import { randomUUID as randomUUID4 } from "node:crypto";
+import { randomUUID as randomUUID5 } from "node:crypto";
 import { parseArgs as parseArgs16 } from "node:util";
 function required2(value, flag) {
   if (!value) throw new Error(`${flag} is required`);
@@ -74728,7 +75234,7 @@ async function runCommunityDispatcher(args, context2) {
     return 0;
   }
   const version4 = parsed.values.version ?? context2.cliVersion;
-  const runId = parsed.values.resume ?? randomUUID4();
+  const runId = parsed.values.resume ?? randomUUID5();
   const journalPath = launchJournalPath(context2.dorkHome, runId);
   const resumeJournal = parsed.values.resume ? await readLaunchJournal(journalPath) : null;
   if (parsed.values.resume && !resumeJournal) {
@@ -75738,7 +76244,7 @@ __export(feedback_exports, {
   runFeedback: () => runFeedback
 });
 import os7 from "node:os";
-import { execFile } from "node:child_process";
+import { execFile as execFile2 } from "node:child_process";
 function gatherCliReport(kind, version4, store) {
   return gatherFeedbackReport({
     kind,
@@ -75757,11 +76263,11 @@ function parseArgs17(args) {
 function defaultOpenUrl(url2) {
   if (!/^https?:\/\//i.test(url2)) return false;
   try {
-    if (process.platform === "darwin") execFile("open", [url2], () => {
+    if (process.platform === "darwin") execFile2("open", [url2], () => {
     });
-    else if (process.platform === "win32") execFile("cmd", ["/c", "start", "", url2], () => {
+    else if (process.platform === "win32") execFile2("cmd", ["/c", "start", "", url2], () => {
     });
-    else execFile("xdg-open", [url2], () => {
+    else execFile2("xdg-open", [url2], () => {
     });
     return true;
   } catch {
@@ -79631,7 +80137,7 @@ var init_base64 = __esm({
 });
 
 // ../../node_modules/.pnpm/@better-auth+utils@0.5.0/node_modules/@better-auth/utils/dist/hash.mjs
-function createHash4(algorithm2, encoding) {
+function createHash5(algorithm2, encoding) {
   return { digest: async (input4) => {
     const data = toBufferSource(input4);
     const hashBuffer = await getWebcryptoSubtle().digest(algorithm2, data);
@@ -80575,12 +81081,12 @@ function formatEnvelope(version4, ciphertext) {
   return `${ENVELOPE_PREFIX}${version4}$${ciphertext}`;
 }
 async function rawEncrypt(secret, data) {
-  const keyAsBytes = await createHash4("SHA-256").digest(secret);
+  const keyAsBytes = await createHash5("SHA-256").digest(secret);
   const dataAsBytes = utf8ToBytes(data);
   return bytesToHex(managedNonce(xchacha20poly1305)(new Uint8Array(keyAsBytes)).encrypt(dataAsBytes));
 }
 async function rawDecrypt(secret, hex4) {
-  const keyAsBytes = await createHash4("SHA-256").digest(secret);
+  const keyAsBytes = await createHash5("SHA-256").digest(secret);
   const dataAsBytes = hexToBytes2(hex4);
   const chacha = managedNonce(xchacha20poly1305)(new Uint8Array(keyAsBytes));
   return new TextDecoder().decode(chacha.decrypt(dataAsBytes));
@@ -85273,7 +85779,7 @@ var init_verification_token_storage = __esm({
     init_base64();
     init_hash();
     defaultKeyHasher = async (identifier) => {
-      const hash2 = await createHash4("SHA-256").digest(new TextEncoder().encode(identifier));
+      const hash2 = await createHash5("SHA-256").digest(new TextEncoder().encode(identifier));
       return base64Url.encode(new Uint8Array(hash2), { padding: false });
     };
   }
@@ -86607,7 +87113,7 @@ var init_internal_adapter = __esm({
         * is best-effort there (it is intended for development and tests).
         */
         reserveVerificationValue: async (data) => {
-          const reservationId = base64Url.encode(new Uint8Array(await createHash4("SHA-256").digest(new TextEncoder().encode("reserve:" + data.identifier))), { padding: false });
+          const reservationId = base64Url.encode(new Uint8Array(await createHash5("SHA-256").digest(new TextEncoder().encode("reserve:" + data.identifier))), { padding: false });
           const storageOption = getStorageOption(data.identifier, options.verification?.storeIdentifier);
           const storedIdentifier = await processIdentifier(data.identifier, storageOption);
           if (secondaryStorage && !options.verification?.storeInDatabase) throw new BetterAuthError("reserveVerificationValue requires database-backed verification storage. Set verification.storeInDatabase to true for flows that reserve verification values.");
@@ -95826,7 +96332,7 @@ var init_factory = __esm({
         }
         return transformedData;
       };
-      const transformOutput = async (data, unsafe_model, select2 = [], join53) => {
+      const transformOutput = async (data, unsafe_model, select2 = [], join54) => {
         const transformSingleOutput = async (data2, unsafe_model2, select3 = []) => {
           if (!data2) return null;
           const newMappedKeys = config3.mapKeysTransformOutput ?? {};
@@ -95862,10 +96368,10 @@ var init_factory = __esm({
           }
           return transformedData2;
         };
-        if (!join53 || Object.keys(join53).length === 0) return await transformSingleOutput(data, unsafe_model, select2);
+        if (!join54 || Object.keys(join54).length === 0) return await transformSingleOutput(data, unsafe_model, select2);
         unsafe_model = getDefaultModelName(unsafe_model);
         const transformedData = await transformSingleOutput(data, unsafe_model, select2);
-        const requiredModels = Object.entries(join53).map(([model, joinConfig]) => ({
+        const requiredModels = Object.entries(join54).map(([model, joinConfig]) => ({
           modelName: getModelName(model),
           defaultModelName: getDefaultModelName(model),
           joinConfig
@@ -95964,8 +96470,8 @@ var init_factory = __esm({
         if (!unsanitizedJoin) return void 0;
         if (Object.keys(unsanitizedJoin).length === 0) return void 0;
         const transformedJoin = {};
-        for (const [model, join53] of Object.entries(unsanitizedJoin)) {
-          if (!join53) continue;
+        for (const [model, join54] of Object.entries(unsanitizedJoin)) {
+          if (!join54) continue;
           const defaultModelName = getDefaultModelName(model);
           const defaultBaseModelName = getDefaultModelName(baseModel);
           let foreignKeys = Object.entries(schema2[defaultModelName].fields).filter(([field, fieldAttributes]) => fieldAttributes.references && getDefaultModelName(fieldAttributes.references.model) === defaultBaseModelName);
@@ -96006,7 +96512,7 @@ var init_factory = __esm({
           const isUnique = to === "id" ? true : foreignKeyAttributes.unique ?? false;
           let limit = options.advanced?.database?.defaultFindManyLimit ?? 100;
           if (isUnique) limit = 1;
-          else if (typeof join53 === "object" && typeof join53.limit === "number") limit = join53.limit;
+          else if (typeof join54 === "object" && typeof join54.limit === "number") limit = join54.limit;
           transformedJoin[getModelName(model)] = {
             on: {
               from,
@@ -96223,21 +96729,21 @@ var init_factory = __esm({
             action: "findOne"
           });
           unsafeModel = getDefaultModelName(unsafeModel);
-          let join53;
+          let join54;
           let passJoinToAdapter = true;
           if (!config3.disableTransformJoin) {
             const result2 = transformJoinClause(unsafeModel, unsafeJoin, select2);
             if (result2) {
-              join53 = result2.join;
+              join54 = result2.join;
               select2 = result2.select;
             }
-            if (!options.advanced?.database?.joins && join53 && Object.keys(join53).length > 0) passJoinToAdapter = false;
-          } else join53 = unsafeJoin;
+            if (!options.advanced?.database?.joins && join54 && Object.keys(join54).length > 0) passJoinToAdapter = false;
+          } else join54 = unsafeJoin;
           debugLog({ method: "findOne" }, `${formatTransactionId(thisTransactionId)} ${formatStep(1, 3)}`, `${formatMethod("findOne")}:`, {
             model,
             where,
             select: select2,
-            join: join53
+            join: join54
           });
           const res = await withSpan2(`db findOne ${model}`, {
             [ATTR_DB_OPERATION_NAME]: "findOne",
@@ -96246,14 +96752,14 @@ var init_factory = __esm({
             model,
             where,
             select: select2,
-            join: passJoinToAdapter ? join53 : void 0
+            join: passJoinToAdapter ? join54 : void 0
           }));
           debugLog({ method: "findOne" }, `${formatTransactionId(thisTransactionId)} ${formatStep(2, 3)}`, `${formatMethod("findOne")} ${formatAction2("DB Result")}:`, {
             model,
             data: res
           });
           let transformed = res;
-          if (!config3.disableTransformOutput) transformed = await transformOutput(res, unsafeModel, select2, join53);
+          if (!config3.disableTransformOutput) transformed = await transformOutput(res, unsafeModel, select2, join54);
           debugLog({ method: "findOne" }, `${formatTransactionId(thisTransactionId)} ${formatStep(3, 3)}`, `${formatMethod("findOne")} ${formatAction2("Parsed Result")}:`, {
             model,
             data: transformed
@@ -96271,23 +96777,23 @@ var init_factory = __esm({
             action: "findMany"
           });
           unsafeModel = getDefaultModelName(unsafeModel);
-          let join53;
+          let join54;
           let passJoinToAdapter = true;
           if (!config3.disableTransformJoin) {
             const result2 = transformJoinClause(unsafeModel, unsafeJoin, select2);
             if (result2) {
-              join53 = result2.join;
+              join54 = result2.join;
               select2 = result2.select;
             }
-            if (!options.advanced?.database?.joins && join53 && Object.keys(join53).length > 0) passJoinToAdapter = false;
-          } else join53 = unsafeJoin;
+            if (!options.advanced?.database?.joins && join54 && Object.keys(join54).length > 0) passJoinToAdapter = false;
+          } else join54 = unsafeJoin;
           debugLog({ method: "findMany" }, `${formatTransactionId(thisTransactionId)} ${formatStep(1, 3)}`, `${formatMethod("findMany")}:`, {
             model,
             where,
             limit,
             sortBy,
             offset,
-            join: join53
+            join: join54
           });
           const res = await withSpan2(`db findMany ${model}`, {
             [ATTR_DB_OPERATION_NAME]: "findMany",
@@ -96299,7 +96805,7 @@ var init_factory = __esm({
             select: select2,
             sortBy,
             offset,
-            join: passJoinToAdapter ? join53 : void 0
+            join: passJoinToAdapter ? join54 : void 0
           }));
           debugLog({ method: "findMany" }, `${formatTransactionId(thisTransactionId)} ${formatStep(2, 3)}`, `${formatMethod("findMany")} ${formatAction2("DB Result")}:`, {
             model,
@@ -96307,7 +96813,7 @@ var init_factory = __esm({
           });
           let transformed = res;
           if (!config3.disableTransformOutput) transformed = await Promise.all(res.map(async (r3) => {
-            return await transformOutput(r3, unsafeModel, void 0, join53);
+            return await transformOutput(r3, unsafeModel, void 0, join54);
           }));
           debugLog({ method: "findMany" }, `${formatTransactionId(thisTransactionId)} ${formatStep(3, 3)}`, `${formatMethod("findMany")} ${formatAction2("Parsed Result")}:`, {
             model,
@@ -96649,7 +97155,7 @@ var init_dist7 = __esm({
               return sortBy.direction === "asc" ? comparison : -comparison;
             });
           };
-          function convertWhereClause(where, model, join53, select2) {
+          function convertWhereClause(where, model, join54, select2) {
             const baseRecords = (() => {
               const table2 = activeDb[model];
               if (!table2) {
@@ -96709,14 +97215,14 @@ var init_dist7 = __esm({
               })))));
               return records;
             })();
-            if (!join53) return baseRecords;
+            if (!join54) return baseRecords;
             const grouped = /* @__PURE__ */ new Map();
             const seenIds = /* @__PURE__ */ new Map();
             for (const baseRecord of baseRecords) {
               const baseId = String(baseRecord.id);
               if (!grouped.has(baseId)) {
                 const nested = { ...baseRecord };
-                for (const [joinModel, joinAttr] of Object.entries(join53)) {
+                for (const [joinModel, joinAttr] of Object.entries(join54)) {
                   const joinModelName = getModelName(joinModel);
                   if (joinAttr.relation === "one-to-one") nested[joinModelName] = null;
                   else {
@@ -96727,7 +97233,7 @@ var init_dist7 = __esm({
                 grouped.set(baseId, nested);
               }
               const nestedEntry = grouped.get(baseId);
-              for (const [joinModel, joinAttr] of Object.entries(join53)) {
+              for (const [joinModel, joinAttr] of Object.entries(join54)) {
                 const joinModelName = getModelName(joinModel);
                 const joinTable = activeDb[joinModelName];
                 if (!joinTable) {
@@ -96760,18 +97266,18 @@ var init_dist7 = __esm({
               activeDb[model].push(data);
               return data;
             },
-            findOne: async ({ model, where, select: select2, join: join53 }) => {
-              const res = convertWhereClause(where, model, join53, select2);
-              if (join53) {
+            findOne: async ({ model, where, select: select2, join: join54 }) => {
+              const res = convertWhereClause(where, model, join54, select2);
+              if (join54) {
                 const resArray = res;
                 if (!resArray.length) return null;
                 return resArray[0];
               }
               return res[0] || null;
             },
-            findMany: async ({ model, where, sortBy, limit, select: select2, offset, join: join53 }) => {
-              const res = convertWhereClause(where || [], model, join53, select2);
-              if (join53) {
+            findMany: async ({ model, where, sortBy, limit, select: select2, offset, join: join54 }) => {
+              const res = convertWhereClause(where || [], model, join54, select2);
+              if (join54) {
                 const resArray = res;
                 if (!resArray.length) return [];
                 applySortToRecords(resArray, sortBy, model);
@@ -98769,10 +99275,10 @@ var init_query_node = __esm({
           where: node2.where ? WhereNode.cloneWithOperation(node2.where, "And", operation) : WhereNode.create(operation)
         });
       },
-      cloneWithJoin(node2, join53) {
+      cloneWithJoin(node2, join54) {
         return freeze({
           ...node2,
-          joins: node2.joins ? freeze([...node2.joins, join53]) : freeze([join53])
+          joins: node2.joins ? freeze([...node2.joins, join54]) : freeze([join54])
         });
       },
       cloneWithReturning(node2, selections) {
@@ -103283,8 +103789,8 @@ var init_with_schema_transformer = __esm({
           this.#collectSchemableIdsFromTableExpr(node2.table, schemableIds);
         }
         if ("joins" in node2 && node2.joins) {
-          for (const join53 of node2.joins) {
-            this.#collectSchemableIdsFromTableExpr(join53.table, schemableIds);
+          for (const join54 of node2.joins) {
+            this.#collectSchemableIdsFromTableExpr(join54.table, schemableIds);
           }
         }
         if ("using" in node2 && node2.using) {
@@ -115456,7 +115962,7 @@ var init_mssql_introspector = __esm({
         return await this.#db.selectFrom("sys.schemas").select("name").execute();
       }
       async getTables(options = { withInternalKyselyTables: false }) {
-        const rawColumns = await this.#db.selectFrom("sys.tables as tables").leftJoin("sys.schemas as table_schemas", "table_schemas.schema_id", "tables.schema_id").innerJoin("sys.columns as columns", "columns.object_id", "tables.object_id").innerJoin("sys.types as types", "types.user_type_id", "columns.user_type_id").leftJoin("sys.schemas as type_schemas", "type_schemas.schema_id", "types.schema_id").leftJoin("sys.extended_properties as comments", (join53) => join53.onRef("comments.major_id", "=", "tables.object_id").onRef("comments.minor_id", "=", "columns.column_id").on("comments.name", "=", "MS_Description")).$if(!options.withInternalKyselyTables, (qb) => qb.where("tables.name", "!=", DEFAULT_MIGRATION_TABLE).where("tables.name", "!=", DEFAULT_MIGRATION_LOCK_TABLE)).select([
+        const rawColumns = await this.#db.selectFrom("sys.tables as tables").leftJoin("sys.schemas as table_schemas", "table_schemas.schema_id", "tables.schema_id").innerJoin("sys.columns as columns", "columns.object_id", "tables.object_id").innerJoin("sys.types as types", "types.user_type_id", "columns.user_type_id").leftJoin("sys.schemas as type_schemas", "type_schemas.schema_id", "types.schema_id").leftJoin("sys.extended_properties as comments", (join54) => join54.onRef("comments.major_id", "=", "tables.object_id").onRef("comments.minor_id", "=", "columns.column_id").on("comments.name", "=", "MS_Description")).$if(!options.withInternalKyselyTables, (qb) => qb.where("tables.name", "!=", DEFAULT_MIGRATION_TABLE).where("tables.name", "!=", DEFAULT_MIGRATION_LOCK_TABLE)).select([
           "tables.name as table_name",
           (eb) => eb.ref("tables.type").$castTo().as("table_type"),
           "table_schemas.name as table_schema_name",
@@ -115471,7 +115977,7 @@ var init_mssql_introspector = __esm({
           "types.name as type_name",
           "type_schemas.name as type_schema_name",
           "comments.value as column_comment"
-        ]).unionAll(this.#db.selectFrom("sys.views as views").leftJoin("sys.schemas as view_schemas", "view_schemas.schema_id", "views.schema_id").innerJoin("sys.columns as columns", "columns.object_id", "views.object_id").innerJoin("sys.types as types", "types.user_type_id", "columns.user_type_id").leftJoin("sys.schemas as type_schemas", "type_schemas.schema_id", "types.schema_id").leftJoin("sys.extended_properties as comments", (join53) => join53.onRef("comments.major_id", "=", "views.object_id").onRef("comments.minor_id", "=", "columns.column_id").on("comments.name", "=", "MS_Description")).select([
+        ]).unionAll(this.#db.selectFrom("sys.views as views").leftJoin("sys.schemas as view_schemas", "view_schemas.schema_id", "views.schema_id").innerJoin("sys.columns as columns", "columns.object_id", "views.object_id").innerJoin("sys.types as types", "types.user_type_id", "columns.user_type_id").leftJoin("sys.schemas as type_schemas", "type_schemas.schema_id", "types.schema_id").leftJoin("sys.extended_properties as comments", (join54) => join54.onRef("comments.major_id", "=", "views.object_id").onRef("comments.minor_id", "=", "columns.column_id").on("comments.name", "=", "MS_Description")).select([
           "views.name as table_name",
           "views.type as table_type",
           "view_schemas.name as table_schema_name",
@@ -116611,10 +117117,10 @@ var init_dist9 = __esm({
             mysqlNoIdWarned = true;
             logger2.warn(`[Kysely Adapter] MySQL does not support INSERT...RETURNING. With generateId set to false, the adapter uses best-effort fallback strategies (unique columns, full-field match) to retrieve inserted rows. For reliable behavior, use Better Auth's default ID generation, a custom generateId function, or generateId: "serial" for auto-increment.`);
           }
-          const selectAllJoins = (join53) => {
+          const selectAllJoins = (join54) => {
             const allSelects = [];
             const allSelectsStr = [];
-            if (join53) for (const [joinModel, _3] of Object.entries(join53)) {
+            if (join54) for (const [joinModel, _3] of Object.entries(join54)) {
               const fields = schema2[getDefaultModelName(joinModel)]?.fields;
               const [_joinModelSchema, joinModelName] = joinModel.includes(".") ? joinModel.split(".") : [void 0, joinModel];
               if (!fields) continue;
@@ -116839,7 +117345,7 @@ var init_dist9 = __esm({
             async create({ data, model }) {
               return await withReturning(data, db2.insertInto(model).values(data), model, []);
             },
-            async findOne({ model, where, select: select2, join: join53 }) {
+            async findOne({ model, where, select: select2, join: join54 }) {
               const { and: and2, or: or2 } = convertWhereClause(model, where);
               let query = db2.selectFrom((eb) => {
                 let b2 = eb.selectFrom(model);
@@ -116852,19 +117358,19 @@ var init_dist9 = __esm({
                 else b2 = b2.selectAll();
                 return b2.as("primary");
               }).selectAll("primary");
-              if (join53) for (const [joinModel, joinAttr] of Object.entries(join53)) {
+              if (join54) for (const [joinModel, joinAttr] of Object.entries(join54)) {
                 const [_joinModelSchema, joinModelName] = joinModel.includes(".") ? joinModel.split(".") : [void 0, joinModel];
-                query = query.leftJoin(`${joinModel} as join_${joinModelName}`, (join54) => join54.onRef(`join_${joinModelName}.${joinAttr.on.to}`, "=", `primary.${joinAttr.on.from}`));
+                query = query.leftJoin(`${joinModel} as join_${joinModelName}`, (join55) => join55.onRef(`join_${joinModelName}.${joinAttr.on.to}`, "=", `primary.${joinAttr.on.from}`));
               }
-              const { allSelectsStr, allSelects } = selectAllJoins(join53);
+              const { allSelectsStr, allSelects } = selectAllJoins(join54);
               query = query.select(allSelects);
               const res = await query.execute();
               if (!res || !Array.isArray(res) || res.length === 0) return null;
               const row = res[0];
-              if (join53) return processJoinedResults(res, join53, allSelectsStr)[0];
+              if (join54) return processJoinedResults(res, join54, allSelectsStr)[0];
               return row;
             },
-            async findMany({ model, where, limit, select: select2, offset, sortBy, join: join53 }) {
+            async findMany({ model, where, limit, select: select2, offset, sortBy, join: join54 }) {
               const { and: and2, or: or2 } = convertWhereClause(model, where);
               let query = db2.selectFrom((eb) => {
                 let b2 = eb.selectFrom(model);
@@ -116893,11 +117399,11 @@ var init_dist9 = __esm({
                 else b2 = b2.selectAll();
                 return b2.as("primary");
               }).selectAll("primary");
-              if (join53) for (const [joinModel, joinAttr] of Object.entries(join53)) {
+              if (join54) for (const [joinModel, joinAttr] of Object.entries(join54)) {
                 const [_joinModelSchema, joinModelName] = joinModel.includes(".") ? joinModel.split(".") : [void 0, joinModel];
-                query = query.leftJoin(`${joinModel} as join_${joinModelName}`, (join54) => join54.onRef(`join_${joinModelName}.${joinAttr.on.to}`, "=", `primary.${joinAttr.on.from}`));
+                query = query.leftJoin(`${joinModel} as join_${joinModelName}`, (join55) => join55.onRef(`join_${joinModelName}.${joinAttr.on.to}`, "=", `primary.${joinAttr.on.from}`));
               }
-              const { allSelectsStr, allSelects } = selectAllJoins(join53);
+              const { allSelectsStr, allSelects } = selectAllJoins(join54);
               query = query.select(allSelects);
               if (sortBy?.field) query = query.orderBy(`${getFieldName({
                 model,
@@ -116905,7 +117411,7 @@ var init_dist9 = __esm({
               })}`, sortBy.direction);
               const res = await query.execute();
               if (!res) return [];
-              if (join53) return processJoinedResults(res, join53, allSelectsStr);
+              if (join54) return processJoinedResults(res, join54, allSelectsStr);
               return res;
             },
             async update({ model, where, update: values2 }) {
@@ -118093,7 +118599,7 @@ function detectEnvironment() {
   return getEnvVar("NODE_ENV") === "production" ? "production" : isCI2() ? "ci" : isTest() ? "test" : "development";
 }
 async function hashToBase64(data) {
-  const buffer = await createHash4("SHA-256").digest(data);
+  const buffer = await createHash5("SHA-256").digest(data);
   return base643.encode(buffer);
 }
 async function readRootPackageJson() {
@@ -119011,10 +119517,10 @@ var init_dist12 = __esm({
             checkMissingFields(schemaModel, model, values2);
             return await withReturning(model, db2.insert(schemaModel).values(values2), values2);
           },
-          async findOne({ model, where, select: select2, join: join53 }) {
+          async findOne({ model, where, select: select2, join: join54 }) {
             const schemaModel = getSchema2(model);
             const clause = convertWhereClause(where, model);
-            if (join53) {
+            if (join54) {
               const queryModel = getQueryModel(model);
               if (!db2.query || !queryModel) {
                 logger2.error(`[# Drizzle Adapter]: The model "${model}" was not found in the query object. Please update your Drizzle schema to include relations or re-generate using "npx auth@latest generate".`);
@@ -119024,7 +119530,7 @@ var init_dist12 = __esm({
                 const renamedJoinResults = [];
                 const relationKeys = relationKeysByModel.get(queryModel);
                 includes = {};
-                const joinEntries = Object.entries(join53);
+                const joinEntries = Object.entries(join54);
                 for (const [joinModel, joinAttr] of joinEntries) {
                   const limit = joinAttr.limit ?? options.advanced?.database?.defaultFindManyLimit ?? 100;
                   const isUnique = joinAttr.relation === "one-to-one";
@@ -119066,11 +119572,11 @@ var init_dist12 = __esm({
             if (!res.length) return null;
             return res[0];
           },
-          async findMany({ model, where, sortBy, limit, select: select2, offset, join: join53 }) {
+          async findMany({ model, where, sortBy, limit, select: select2, offset, join: join54 }) {
             const schemaModel = getSchema2(model);
             const clause = where ? convertWhereClause(where, model) : [];
             const sortFn = sortBy?.direction === "desc" ? desc : asc;
-            if (join53) {
+            if (join54) {
               const queryModel = getQueryModel(model);
               if (!db2.query || !queryModel) {
                 logger2.error(`[# Drizzle Adapter]: The model "${model}" was not found in the query object. Please update your Drizzle schema to include relations or re-generate using "npx auth@latest generate".`);
@@ -119080,7 +119586,7 @@ var init_dist12 = __esm({
                 const renamedJoinResults = [];
                 const relationKeys = relationKeysByModel.get(queryModel);
                 includes = {};
-                const joinEntries = Object.entries(join53);
+                const joinEntries = Object.entries(join54);
                 for (const [joinModel, joinAttr] of joinEntries) {
                   const isUnique = joinAttr.relation === "one-to-one";
                   const limit2 = joinAttr.limit ?? options.advanced?.database?.defaultFindManyLimit ?? 100;
@@ -119710,7 +120216,7 @@ var init_client = __esm({
 
 // ../../node_modules/.pnpm/better-auth@1.7.2_@opentelemetry+api@1.9.1_@prisma+client@5.22.0_better-sqlite3@12.11.1_2a8e047da398d63c3579f222674b33b1/node_modules/better-auth/dist/plugins/organization/adapter.mjs
 async function computeTeamMembershipKey(data) {
-  const digest2 = await createHash4("SHA-256").digest(new TextEncoder().encode(JSON.stringify([data.teamId, data.userId])));
+  const digest2 = await createHash5("SHA-256").digest(new TextEncoder().encode(JSON.stringify([data.teamId, data.userId])));
   return base64Url.encode(new Uint8Array(digest2), { padding: false });
 }
 async function findTeamMemberByKeyOrPair(adapter, data) {
@@ -127144,7 +127650,7 @@ var init_dist13 = __esm({
       }
     } } });
     defaultKeyHasher2 = async (key) => {
-      const hash2 = await createHash4("SHA-256").digest(new TextEncoder().encode(key));
+      const hash2 = await createHash5("SHA-256").digest(new TextEncoder().encode(key));
       return base64Url.encode(new Uint8Array(hash2), { padding: false });
     };
     API_KEY_TABLE_NAME = "apikey";
@@ -127211,7 +127717,7 @@ var init_auth_instance = __esm({
 });
 
 // ../shared/src/secret-file.ts
-import { randomUUID as randomUUID5 } from "node:crypto";
+import { randomUUID as randomUUID6 } from "node:crypto";
 import {
   chmodSync as chmodSync2,
   linkSync,
@@ -127221,9 +127727,9 @@ import {
   rmSync as rmSync7,
   writeFileSync as writeFileSync2
 } from "node:fs";
-import { basename as basename8, dirname as dirname13, join as join52 } from "node:path";
+import { basename as basename8, dirname as dirname13, join as join53 } from "node:path";
 function tempPathFor(filePath) {
-  return join52(dirname13(filePath), `.${basename8(filePath)}.${process.pid}.${randomUUID5()}.tmp`);
+  return join53(dirname13(filePath), `.${basename8(filePath)}.${process.pid}.${randomUUID6()}.tmp`);
 }
 function unusableSecretError(filePath, detail) {
   return new Error(
@@ -128912,7 +129418,7 @@ var init_cloud_link_client = __esm({
 });
 
 // ../../apps/server/src/lib/instance-id.ts
-import { randomUUID as randomUUID6 } from "node:crypto";
+import { randomUUID as randomUUID7 } from "node:crypto";
 import fs21 from "node:fs/promises";
 import path36 from "node:path";
 async function getOrCreateInstanceId(dorkHome) {
@@ -128923,7 +129429,7 @@ async function getOrCreateInstanceId(dorkHome) {
     if (trimmed) return trimmed;
   } catch {
   }
-  const id = randomUUID6();
+  const id = randomUUID7();
   await fs21.mkdir(dorkHome, { recursive: true });
   await fs21.writeFile(filePath, id, "utf8");
   return id;
@@ -128954,15 +129460,15 @@ __export(cloud_dispatcher_exports, {
   HELP_TEXT: () => HELP_TEXT8,
   runCloudDispatcher: () => runCloudDispatcher
 });
-import { execFile as execFile2 } from "node:child_process";
+import { execFile as execFile3 } from "node:child_process";
 function defaultOpenUrl2(url2) {
   if (!/^https?:\/\//i.test(url2)) return;
   try {
-    if (process.platform === "darwin") execFile2("open", [url2], () => {
+    if (process.platform === "darwin") execFile3("open", [url2], () => {
     });
-    else if (process.platform === "win32") execFile2("cmd", ["/c", "start", "", url2], () => {
+    else if (process.platform === "win32") execFile3("cmd", ["/c", "start", "", url2], () => {
     });
-    else execFile2("xdg-open", [url2], () => {
+    else execFile3("xdg-open", [url2], () => {
     });
   } catch {
   }
@@ -130215,7 +130721,7 @@ var init_connections_subscriptions = __esm({
 });
 
 // src/commands/connections-review.ts
-import { execFile as execFile3 } from "node:child_process";
+import { execFile as execFile4 } from "node:child_process";
 import { parseArgs as parseArgs23 } from "node:util";
 function connectorReviewErrorExitCode(error63) {
   return error63 instanceof ConnectorReviewStatusError ? error63.exitCode : void 0;
@@ -130224,11 +130730,11 @@ function defaultOpenUrl3(url2) {
   const parsed = new URL(url2);
   if (parsed.protocol !== "http:" || parsed.hostname !== "localhost") return false;
   try {
-    if (process.platform === "darwin") execFile3("open", [url2], () => {
+    if (process.platform === "darwin") execFile4("open", [url2], () => {
     });
-    else if (process.platform === "win32") execFile3("cmd", ["/c", "start", "", url2], () => {
+    else if (process.platform === "win32") execFile4("cmd", ["/c", "start", "", url2], () => {
     });
-    else execFile3("xdg-open", [url2], () => {
+    else execFile4("xdg-open", [url2], () => {
     });
     return true;
   } catch {
@@ -132599,7 +133105,7 @@ if (process.argv[2] === "community") {
       })
     );
     const exitCode = await dispatcher.runCommunityDispatcher(process.argv.slice(3), {
-      cliVersion: "0.81.0",
+      cliVersion: "0.82.0",
       dorkHome: DORK_HOME,
       processEnv: childEnv,
       parseRelease: (bytes) => releaseContract.parseCompatibleCommunityReleaseManifest(
@@ -132607,7 +133113,7 @@ if (process.argv[2] === "community") {
         {
           platform: { os: "linux", architecture: "amd64" },
           configSchemaVersion: releaseContract.COMMUNITY_CONFIG_SCHEMA_VERSION,
-          migrationCompatibilityId: "sha256:94aafbb08157408c74d3262a744ebe4b4a44e42cd5b3a2a4ae764eb9224fb5bf"
+          migrationCompatibilityId: "sha256:3cd56d9a5458634b4e1c77fd6c2fbdc5f0d14ec2145cd18d241447e6329a4c6e"
         }
       )
     });
@@ -132617,7 +133123,7 @@ if (process.argv[2] === "community") {
     process.exit(1);
   }
 }
-var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.81.0" });
+var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.82.0" });
 var uninstallCliErrorHandlers = cliErrorReporter ? installCliErrorHandlers(cliErrorReporter) : void 0;
 if (process.argv[2] === "doctor") {
   process.env.DORK_HOME = DORK_HOME;
@@ -132627,7 +133133,7 @@ if (process.argv[2] === "doctor") {
 if (process.argv[2] === "feedback") {
   process.env.DORK_HOME = DORK_HOME;
   const { runFeedback: runFeedback2 } = await Promise.resolve().then(() => (init_feedback2(), feedback_exports));
-  process.exit(await runFeedback2(DORK_HOME, "0.81.0", process.argv.slice(3)));
+  process.exit(await runFeedback2(DORK_HOME, "0.82.0", process.argv.slice(3)));
 }
 if (process.argv[2] === "auth") {
   process.env.DORK_HOME = DORK_HOME;
@@ -132722,7 +133228,7 @@ if (process.argv[2] === "agent" || process.argv[2] === "task" || process.argv[2]
     }
   }
   const { runVersionDispatcher: runVersionDispatcher2 } = await Promise.resolve().then(() => (init_version5(), version_exports));
-  process.exit(await runVersionDispatcher2("0.81.0", DORK_HOME, subArgs));
+  process.exit(await runVersionDispatcher2("0.82.0", DORK_HOME, subArgs));
 }
 function parseCliArgs() {
   try {
@@ -132845,14 +133351,14 @@ Examples:
   process.exit(0);
 }
 if (values.version) {
-  console.log("0.81.0");
+  console.log("0.82.0");
   process.exit(0);
 }
 if (values["post-install-check"]) {
   const claudeFound = checkClaude();
   const coreExtensionsFound = checkCoreExtensions();
   const extensionsCompile = await checkExtensionCompilation();
-  console.log(`dorkos ${"0.81.0"}`);
+  console.log(`dorkos ${"0.82.0"}`);
   if (!coreExtensionsFound) {
     console.log("Installation incomplete \u2014 bundled core extensions are missing.");
   }
@@ -133009,7 +133515,7 @@ if (fs28.existsSync(envPath)) {
 }
 uninstallCliErrorHandlers?.();
 process.env.DORKOS_CLI_ENTRYPOINT = fileURLToPath6(import.meta.url);
-process.env.DORKOS_CLI_VERSION = "0.81.0";
+process.env.DORKOS_CLI_VERSION = "0.82.0";
 var server;
 try {
   server = await import("../server/index.js");
@@ -133034,7 +133540,7 @@ var ansiReset = "\x1B[0m";
 console.log("");
 console.log(`${purple}${logo}${ansiReset}`);
 console.log("");
-console.log(`  DorkOS v${"0.81.0"}`);
+console.log(`  DorkOS v${"0.82.0"}`);
 console.log(`  Local:   ${link(localUrl, localUrl)}`);
 var nets = networkInterfaces();
 var networkUrl = null;
@@ -133057,9 +133563,9 @@ if (shouldOpenBrowser && process.stdin.isTTY) {
   const openCmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
   exec(`${openCmd} ${localUrl}`);
 }
-checkForUpdate("0.81.0").then((latestVersion) => {
+checkForUpdate("0.82.0").then((latestVersion) => {
   if (latestVersion) {
-    const msg = `Update available: ${"0.81.0"} \u2192 ${latestVersion}`;
+    const msg = `Update available: ${"0.82.0"} \u2192 ${latestVersion}`;
     const cmd = "Run npm install -g dorkos@latest to update";
     const width = Math.max(msg.length, cmd.length) + 6;
     const pad2 = (s2) => `\u2502   ${s2}${" ".repeat(width - s2.length - 6)}   \u2502`;