dorkos 0.88.0 → 0.89.0

package/dist/bin/cli.js

@@ -21350,7 +21350,7 @@ function settleLegacyAccountAlias(merged, patch) {
   const block = merged?.runtimes?.claudeCode;
   if (block && typeof block === "object") delete block.activeAccount;
 }
-function classifyClaudeAccountRows(value) {
+function classifyClaudeAccountRows(value, noun = "Claude account") {
   const minted = backfillMissingAccountIds(value);
   if (!Array.isArray(minted)) return { rows: [], warnings: [] };
   const warnings = [];
@@ -21360,7 +21360,7 @@ function classifyClaudeAccountRows(value) {
       warnings.push({
         code: "row-invalid",
         index: index2,
-        message: `Claude account ${index2 + 1} is not an object, so it was skipped.`
+        message: `${noun} ${index2 + 1} is not an object, so it was skipped.`
       });
       return { index: index2, row: null, listed: false };
     }
@@ -21370,7 +21370,7 @@ function classifyClaudeAccountRows(value) {
       warnings.push({
         code: "path-invalid",
         index: index2,
-        message: `Claude account "${id}" has no absolute path, so it was skipped.`
+        message: `${noun} "${id}" has no absolute path, so it was skipped.`
       });
       return { index: index2, row, listed: false };
     }
@@ -21378,7 +21378,7 @@ function classifyClaudeAccountRows(value) {
       warnings.push({
         code: "id-duplicate",
         index: index2,
-        message: `Claude account "${id}" repeats an earlier account's id, so it was skipped.`
+        message: `${noun} "${id}" repeats an earlier account's id, so it was skipped.`
       });
       return { index: index2, row, listed: false };
     }
@@ -21393,7 +21393,7 @@ function configuredRuntimes(read) {
   if (read("runtimes.opencode.enabled") !== false) runtimes.push("opencode");
   return runtimes;
 }
-var CommunityNavigationRefSchema, ExtensionApprovedSourceSchema, CommunityInstallationPathSchema, CommunityInstallationSearchScalarSchema, CommunityInstallationSearchValueSchema, CommunityInstallationDestinationSchema, CommunityNavigationDestinationSchema, CommunityNavigationOwnerPrefsSchema, CommunityNavigationPrefsSchema, ROOM_TURN_LIMIT_BOUNDS, MAX_TOTAL_TURNS_PER_HOUR_BOUNDS, ROOM_TURN_LIMIT_DEFAULTS, MAX_CONCURRENT_TURNS_PER_AGENT_BOUNDS, MAX_CONCURRENT_TURNS_PER_AGENT_DEFAULT, RELAY_TURN_CEILING_BOUNDS, RELAY_TURN_CEILING_DEFAULTS, SENSITIVE_CONFIG_KEYS, CREDENTIAL_REF_PATTERN, CredentialReferenceSchema, ONBOARDING_STEPS, OnboardingStepSchema, OnboardingStateSchema, ToursStateSchema, TOURS_DEFAULTS, DisplayNameSourceSchema, UserProfileSchema, USER_PROFILE_DEFAULTS, SidebarDisplayFilterSchema, SidebarItemRefSchema, SmartGroupRulesSchema, SidebarGroupShapeSchema, SidebarGroupSchema, SidebarSectionIdSchema, SidebarSectionPrefsSchema, SIDEBAR_SECTION_IDS, SidebarSectionsSchema, SidebarPrefsSchema, SIDEBAR_PREFS_DEFAULTS, ShapeUserPrefsSchema, SHAPE_USER_PREFS_DEFAULTS, StatusBarPinSchema, STATUS_BAR_PIN_KEYS, StatusBarPrefsSchema, STATUS_BAR_PREFS_DEFAULTS, ComposerPrefsSchema, COMPOSER_PREFS_DEFAULTS, EscalationDelaySchema, NotificationPrefsSchema, NOTIFICATION_PREFS_DEFAULTS, DEFAULT_AGENTS_DIRECTORY, RawMcpServerConfigSchema, ClaudeCodeAccountSchema, ClaudeCodeAccountsSchema, ClaudeAccountsSeenSchema, CLAUDE_ACCOUNTS_SEEN_KEY, DefaultModelSchema, DefaultEffortSchema, DefaultTrustStopSchema, ClaudeCodeSettingsSchema, LoggingConfigSchema, PermissionConfigStateSchema, UserConfigSchema, LOG_LEVEL_MAP, USER_CONFIG_DEFAULTS;
+var CommunityNavigationRefSchema, ExtensionApprovedSourceSchema, CommunityInstallationPathSchema, CommunityInstallationSearchScalarSchema, CommunityInstallationSearchValueSchema, CommunityInstallationDestinationSchema, CommunityNavigationDestinationSchema, CommunityNavigationOwnerPrefsSchema, CommunityNavigationPrefsSchema, ROOM_TURN_LIMIT_BOUNDS, MAX_TOTAL_TURNS_PER_HOUR_BOUNDS, ROOM_TURN_LIMIT_DEFAULTS, MAX_CONCURRENT_TURNS_PER_AGENT_BOUNDS, MAX_CONCURRENT_TURNS_PER_AGENT_DEFAULT, RELAY_TURN_CEILING_BOUNDS, RELAY_TURN_CEILING_DEFAULTS, SENSITIVE_CONFIG_KEYS, CREDENTIAL_REF_PATTERN, CredentialReferenceSchema, ONBOARDING_STEPS, OnboardingStepSchema, OnboardingStateSchema, ToursStateSchema, TOURS_DEFAULTS, DisplayNameSourceSchema, UserProfileSchema, USER_PROFILE_DEFAULTS, SidebarDisplayFilterSchema, SidebarItemRefSchema, SmartGroupRulesSchema, SidebarGroupShapeSchema, SidebarGroupSchema, SidebarSectionIdSchema, SidebarSectionPrefsSchema, SIDEBAR_SECTION_IDS, SidebarSectionsSchema, SidebarPrefsSchema, SIDEBAR_PREFS_DEFAULTS, ShapeUserPrefsSchema, SHAPE_USER_PREFS_DEFAULTS, StatusBarPinSchema, STATUS_BAR_PIN_KEYS, StatusBarPrefsSchema, STATUS_BAR_PREFS_DEFAULTS, ComposerPrefsSchema, COMPOSER_PREFS_DEFAULTS, EscalationDelaySchema, NotificationPrefsSchema, NOTIFICATION_PREFS_DEFAULTS, DEFAULT_AGENTS_DIRECTORY, RawMcpServerConfigSchema, ClaudeCodeAccountSchema, ClaudeCodeAccountsSchema, ClaudeAccountsSeenSchema, CLAUDE_ACCOUNTS_SEEN_KEY, DefaultModelSchema, DefaultEffortSchema, DefaultTrustStopSchema, DefaultAccountColorSchema, ClaudeCodeSettingsSchema, LoggingConfigSchema, PermissionConfigStateSchema, UserConfigSchema, LOG_LEVEL_MAP, USER_CONFIG_DEFAULTS;
 var init_config_schema = __esm({
   "../shared/src/config-schema.ts"() {
     init_zod();
@@ -21886,6 +21886,7 @@ var init_config_schema = __esm({
     DefaultModelSchema = external_exports.string().min(1).nullable().default(null);
     DefaultEffortSchema = external_exports.enum(EFFORT_LEVELS).nullable().default(null);
     DefaultTrustStopSchema = external_exports.enum(["ask", "act", "autonomy"]).nullable().default(null);
+    DefaultAccountColorSchema = external_exports.union([external_exports.string().regex(ACCOUNT_COLOR_PATTERN), external_exports.literal("")]).nullable();
     ClaudeCodeSettingsSchema = external_exports.object({
       /**
        * Absolute path of the Claude config directory a NEW session runs and
@@ -21916,10 +21917,27 @@ var init_config_schema = __esm({
       /**
        * The Claude accounts DorkOS knows about — what lets it show which
        * client a session belongs to. The operator registers these: DorkOS
-       * never globs `~/.claude*`, because that guess sweeps up directories
-       * that are not accounts at all (D4).
+       * never registers a `~/.claude*` folder on its own, because that guess
+       * sweeps up directories that are not accounts at all (D4). Settings may
+       * OFFER the folders it finds (spec `claude-account-ui` §6.9), and nothing
+       * lands here until a person clicks Add.
        */
       accounts: ClaudeCodeAccountsSchema.default(() => []),
+      /**
+       * The color the standalone default account is drawn in, or `null` for the
+       * default for its position. Ignored while a registered row has the default
+       * folder: that row's own color wins. See {@link DefaultAccountColorSchema}.
+       */
+      defaultAccountColor: DefaultAccountColorSchema.default(null).catch(null),
+      /**
+       * Account folders a person dismissed from Settings' "Found on this
+       * computer" list, so they stay hidden across restarts (spec
+       * `claude-account-ui` §7.4). Stored in comparable form (the real path).
+       * Written only by `POST /api/runtimes/claude-code/accounts/found/dismiss`,
+       * which appends in one read-modify-write; a `PATCH /api/config` would
+       * replace the array, and the screen never sees it.
+       */
+      dismissedFolders: external_exports.array(external_exports.string()).max(200).default([]),
       /** Model a new claude-code session starts on. See {@link DefaultModelSchema}. */
       defaultModel: DefaultModelSchema,
       /** Effort a new claude-code session starts at. See {@link DefaultEffortSchema}. */
@@ -22989,6 +23007,8 @@ var init_config_schema = __esm({
         claudeCode: external_exports.preprocess(healClaudeAccountRename, ClaudeCodeSettingsSchema).default(() => ({
           defaultAccount: null,
           accounts: [],
+          defaultAccountColor: null,
+          dismissedFolders: [],
           defaultModel: null,
           defaultEffort: null,
           defaultTrustStop: null,
@@ -23070,6 +23090,8 @@ var init_config_schema = __esm({
         claudeCode: {
           defaultAccount: null,
           accounts: [],
+          defaultAccountColor: null,
+          dismissedFolders: [],
           defaultModel: null,
           defaultEffort: null,
           defaultTrustStop: null,
@@ -25729,7 +25751,7 @@ import path2 from "path";
 import { fileURLToPath } from "url";
 function resolveVersion() {
   if (env2.DORKOS_VERSION_OVERRIDE) return env2.DORKOS_VERSION_OVERRIDE;
-  if (true) return "0.88.0";
+  if (true) return "0.89.0";
   const pkgPath = path2.join(path2.dirname(fileURLToPath(import.meta.url)), "../../package.json");
   return JSON.parse(readFileSync(pkgPath, "utf-8")).version;
 }
@@ -26435,7 +26457,9 @@ __export(config_manager_exports, {
   retireToolOnlyReplies: () => retireToolOnlyReplies,
   scrubRetiredOnboardingSteps: () => scrubRetiredOnboardingSteps,
   seedA2aDisabled: () => seedA2aDisabled,
+  seedClaudeDismissedFolders: () => seedClaudeDismissedFolders,
   seedCommunityNavigationPrefs: () => seedCommunityNavigationPrefs,
+  seedDefaultAccountColor: () => seedDefaultAccountColor,
   seedDisplayNameSourceDefault: () => seedDisplayNameSourceDefault,
   seedExtensionsApprovedSources: () => seedExtensionsApprovedSources,
   seedFullPowerDecision: () => seedFullPowerDecision,
@@ -27276,6 +27300,28 @@ function renameReservedClaudeAccountIds(store) {
     claudeCode: { ...block, accounts: next }
   });
 }
+function seedDefaultAccountColor(store) {
+  const runtimes = store.get("runtimes");
+  if (!runtimes || typeof runtimes !== "object" || Array.isArray(runtimes)) return;
+  const block = runtimes.claudeCode;
+  if (!block || typeof block !== "object" || Array.isArray(block)) return;
+  if ("defaultAccountColor" in block) return;
+  store.set("runtimes", {
+    ...runtimes,
+    claudeCode: { ...block, defaultAccountColor: null }
+  });
+}
+function seedClaudeDismissedFolders(store) {
+  const runtimes = store.get("runtimes");
+  if (!runtimes || typeof runtimes !== "object" || Array.isArray(runtimes)) return;
+  const block = runtimes.claudeCode;
+  if (!block || typeof block !== "object" || Array.isArray(block)) return;
+  if (Array.isArray(block.dismissedFolders)) return;
+  store.set("runtimes", {
+    ...runtimes,
+    claudeCode: { ...block, dismissedFolders: [] }
+  });
+}
 function seedFullPowerDecision(store) {
   const ui = store.get("ui");
   if (ui == null || typeof ui !== "object") return;
@@ -27503,6 +27549,10 @@ function tolerateLegacyClaudeAccountEncoding(ctx) {
     const properties = ctx.jsonSchema.properties;
     if (!properties) return;
     properties.activeAccount = { anyOf: [{ type: "string" }, { type: "null" }] };
+    properties.defaultAccountColor = {
+      anyOf: [{ type: "string" }, { type: "null" }],
+      default: null
+    };
     return;
   }
   if (ctx.zodSchema !== ClaudeCodeAccountSchema) return;
@@ -28111,6 +28161,30 @@ and your settings stay in the file you renamed.`;
       // every other field and row.
       "0.87.0": (store) => {
         renameReservedClaudeAccountIds(store);
+      },
+      // 0.90.0 was the next free key when this merged (0.88.0 was the newest tag).
+      // `'0.89.0'` is intentionally unused: the branch that had reserved it moved to
+      // `'0.91.0'` once this merged first, because a key below one an install has
+      // already run would never run there. Frozen from merge, not from the release
+      // bump, for the reason `'0.60.0'` above states.
+      //
+      // Disjoint from every other key here: it adds one nested leaf under
+      // `runtimes.claudeCode` that nothing above names, and keeps every member
+      // `'0.65.0'` and `'0.87.0'` write there.
+      "0.90.0": (store) => {
+        seedDefaultAccountColor(store);
+      },
+      // 0.90.0 has merged (the standalone default account's color, DOR-2492) and
+      // v0.88.0 is the newest tag, so 0.91.0 is the next key: keys must rise in
+      // merge order, because an install that already ran 0.90.0 would never run a
+      // lower key added after it. Frozen from merge, not from the release bump, for
+      // the reason `'0.60.0'` above states; anything further opens `'0.92.0'`.
+      //
+      // Disjoint from every other key here: it adds one nested leaf under
+      // `runtimes.claudeCode`, beside `accounts`, which `'0.65.0'` and `'0.87.0'`
+      // write and this body preserves.
+      "0.91.0": (store) => {
+        seedClaudeDismissedFolders(store);
       }
     };
     jsonSchemaFull = external_exports.toJSONSchema(UserConfigSchema, {
@@ -38241,7 +38315,7 @@ var init_mesh_schemas = __esm({
 });
 
 // ../shared/src/additional-context.ts
-var GitStatusDataSchema, EnvDataSchema, RelayContextDataSchema, RoomContextOriginSchema, RoomContextAuthorSchema, RoomContextMemberSchema, RoomContextEntrySchema, RoomContextAcknowledgmentSchema, RoomContextFilesSchema, RoomContextDataSchema, SeedContextDataSchema, StagedContextDataSchema, AccountsAccessDataSchema, ApprovalVerdictDataSchema, AdditionalContextEntrySchema, AdditionalContextSchema, ClientContextSchema;
+var GitStatusDataSchema, EnvDataSchema, RelayContextDataSchema, RoomContextOriginSchema, RoomContextAuthorSchema, RoomContextMemberSchema, RoomContextEntrySchema, RoomContextAcknowledgmentSchema, MainMovedSchema, WorktreeRefreshOutcomeSchema, RoomContextFilesSchema, RoomContextDataSchema, SeedContextDataSchema, StagedContextDataSchema, AccountsAccessDataSchema, ApprovalVerdictDataSchema, AdditionalContextEntrySchema, AdditionalContextSchema, ClientContextSchema;
 var init_additional_context = __esm({
   "../shared/src/additional-context.ts"() {
     "use strict";
@@ -38317,12 +38391,41 @@ var init_additional_context = __esm({
       entryAt: external_exports.string(),
       entryExcerpt: external_exports.string()
     });
+    MainMovedSchema = external_exports.object({
+      commits: external_exports.array(
+        external_exports.object({
+          sha: external_exports.string(),
+          who: external_exports.string().nullable(),
+          subject: external_exports.string(),
+          kind: external_exports.enum(["merge", "person", "other"]),
+          files: external_exports.array(external_exports.string()),
+          fileCount: external_exports.number().int().nonnegative()
+        })
+      ),
+      overflow: external_exports.number().int().nonnegative(),
+      overlap: external_exports.array(external_exports.string())
+    });
+    WorktreeRefreshOutcomeSchema = external_exports.discriminatedUnion("kind", [
+      external_exports.object({ kind: external_exports.literal("current") }),
+      external_exports.object({
+        kind: external_exports.literal("refreshed"),
+        from: external_exports.string(),
+        to: external_exports.string(),
+        paths: external_exports.array(external_exports.string())
+      }),
+      external_exports.object({
+        kind: external_exports.literal("held"),
+        reason: external_exports.enum(["busy", "changes", "ahead", "off-branch", "unreadable", "unsafe-config"]),
+        moved: MainMovedSchema.nullable()
+      })
+    ]);
     RoomContextFilesSchema = external_exports.object({
       worktreePath: external_exports.string(),
       branch: external_exports.string(),
       repoPath: external_exports.string(),
       behind: external_exports.number().int().nonnegative().nullable(),
-      ahead: external_exports.number().int().nonnegative().nullable()
+      ahead: external_exports.number().int().nonnegative().nullable(),
+      refresh: WorktreeRefreshOutcomeSchema.optional()
     });
     RoomContextDataSchema = external_exports.object({
       room: external_exports.object({
@@ -38652,7 +38755,7 @@ var init_account_usage_codex = __esm({
 });
 
 // ../shared/src/account-usage.ts
-var LEDGER_RUNTIMES, LEDGER_SOURCES, RateLimitStatusSchema, ISO_TIME_PATTERN, IsoTimeSchema, LedgerSourceSchema, LedgerEntrySchema, WINDOW_KEY_PATTERN, LedgerPlanSchema, LedgerCreditsSchema, LedgerSpendSchema, UsageLedgerSchema, MINUTE_MS, HOUR_MS, FIVE_HOUR_MS, SEVEN_DAY_MS, MAX_FUTURE_SKEW_MS, AccountUsageSchema;
+var LEDGER_RUNTIMES, LEDGER_SOURCES, RateLimitStatusSchema, ISO_TIME_PATTERN, IsoTimeSchema, LedgerSourceSchema, LedgerEntrySchema, WINDOW_KEY_PATTERN, LedgerPlanSchema, LedgerCreditsSchema, LedgerSpendSchema, UsageLedgerSchema, MINUTE_MS, HOUR_MS, FIVE_HOUR_MS, SEVEN_DAY_MS, MAX_FUTURE_SKEW_MS, AccountUsageSchema, LimitResolutionSchema, LimitHistoryEntrySchema, LimitHistoryResponseSchema, FoundClaudeFolderSchema, DismissFoundFolderRequestSchema;
 var init_account_usage = __esm({
   "../shared/src/account-usage.ts"() {
     init_zod();
@@ -38679,14 +38782,14 @@ var init_account_usage = __esm({
     IsoTimeSchema = external_exports.string().regex(ISO_TIME_PATTERN).refine((value) => !Number.isNaN(Date.parse(value)), { message: "Not a real time" });
     LedgerSourceSchema = external_exports.enum(LEDGER_SOURCES);
     LedgerEntrySchema = external_exports.object({
-      /** Share of the window used, 0 to 100, or `null` when the source gave none. */
-      usedPct: external_exports.number().min(0).max(100).nullable(),
-      /** When the window resets, ISO-8601, or `null` when unknown. */
-      resetsAt: IsoTimeSchema.nullable(),
+      /** Share of the window used, 0 to 100, or `null` when the source gave none (omitted reads as `null`). */
+      usedPct: external_exports.number().min(0).max(100).nullable().default(null),
+      /** When the window resets, ISO-8601, or `null` when unknown (omitted reads as `null`). */
+      resetsAt: IsoTimeSchema.nullable().default(null),
       /** The window's length in minutes, when the source names it: an integer of 1 or more. */
       windowMinutes: external_exports.number().int().min(1).optional(),
-      /** The status the source reported, or `null` when it reported none. */
-      status: RateLimitStatusSchema.nullable(),
+      /** The status the source reported, or `null` when it reported none (omitted reads as `null`). */
+      status: RateLimitStatusSchema.nullable().default(null),
       /** When the source observed this reading, ISO-8601 with an explicit zone. */
       observedAt: IsoTimeSchema,
       /** Which source produced the reading. */
@@ -38812,6 +38915,61 @@ var init_account_usage = __esm({
       /** The ledger's last write, or `null` when there is no ledger. */
       updatedAt: external_exports.string().nullable()
     }).openapi("AccountUsage");
+    LimitResolutionSchema = external_exports.enum(["moved", "resumed-reset", "resumed-model", "resumed-early"]).openapi("LimitResolution");
+    LimitHistoryEntrySchema = external_exports.object({
+      /** Row id (a uuid). */
+      id: external_exports.string(),
+      /** The session the limit hit. */
+      sessionId: external_exports.string(),
+      /** When the limit was hit, ISO-8601. */
+      since: external_exports.string(),
+      /** The runtime the session ran on. */
+      runtime: external_exports.string(),
+      /** The registry id of the account that ran out, or `null` when unregistered. */
+      accountId: external_exports.string().nullable(),
+      /** The ledger window key that rejected work, such as `five_hour`. */
+      window: external_exports.string(),
+      /** Whether the whole account ran out or only one model on it. */
+      scope: external_exports.string(),
+      /** When that window resets, ISO-8601, or `null` when unknown. */
+      resetsAt: external_exports.string().nullable(),
+      /** How the episode ended. */
+      resolution: LimitResolutionSchema,
+      /** When it ended, ISO-8601. */
+      resolvedAt: external_exports.string(),
+      /** The session the work carried over to (`moved` only), else `null`. */
+      toSessionId: external_exports.string().nullable(),
+      /** The account the work carried over to (`moved` only), else `null`. */
+      toAccountId: external_exports.string().nullable(),
+      /** The model before a `resumed-model` switch, else `null`. */
+      modelFrom: external_exports.string().nullable(),
+      /** The model after a `resumed-model` switch, else `null`. */
+      modelTo: external_exports.string().nullable()
+    }).openapi("LimitHistoryEntry");
+    LimitHistoryResponseSchema = external_exports.object({
+      /** The episodes, oldest first. */
+      entries: external_exports.array(LimitHistoryEntrySchema)
+    }).openapi("LimitHistoryResponse");
+    FoundClaudeFolderSchema = external_exports.object({
+      /** The folder, absolute. */
+      path: external_exports.string(),
+      /** The folder's own name (the path's last part), such as `.claude2`. */
+      name: external_exports.string(),
+      /**
+       * When the account was last used: the newest change among its `projects/`
+       * folder, that folder's children and the files directly inside each child,
+       * ISO-8601. `null` when none could be read.
+       */
+      lastUsedAt: external_exports.string().nullable(),
+      /** Whether the folder holds a file Claude Code saves when an organization manages the account. */
+      orgManaged: external_exports.boolean(),
+      /** The name of that file, or `null` when there is none. */
+      orgMarker: external_exports.string().nullable()
+    }).openapi("FoundClaudeFolder");
+    DismissFoundFolderRequestSchema = external_exports.object({
+      /** The folder, as the found list gave it. */
+      path: external_exports.string().min(1)
+    }).openapi("DismissFoundFolderRequest");
   }
 });
 
@@ -38827,7 +38985,7 @@ function isSafeSigninUrl(value) {
   if (url2.protocol !== "http:") return false;
   return url2.hostname === "localhost" || url2.hostname === "127.0.0.1" || url2.hostname === "[::1]";
 }
-var PermissionModeSchema, PermissionModeIdSchema, PermissionStopSchema2, SessionTaskStatusSchema, StreamEventTypeSchema, QuestionOptionSchema, QuestionItemSchema, EffortLevelSchema, SessionOriginSchema, SessionLifecycleSchema, LimitPlanSchema, SessionLimitSchema, SessionSchema, SessionUpdateResponseSchema, SessionSettingsSchema, StoredSessionSettingsResponseSchema, UpdateSessionRequestSchema, ForkSessionRequestSchema, ReloadPluginsResultSchema, SEED_CONTEXT_MAX_LENGTH, MessageDispositionSchema, DispositionDowngradeReasonSchema, MessageDeliveryOutcomeSchema, InterruptOutcomeSchema, InterruptReasonSchema, InterruptReceiptSchema, QueuedMessageSchema, SendMessageRequestSchema, SendMessageResponseSchema, SessionTriggerResponseSchema, SessionQueueResponseSchema, QueueMoveTargetSchema, UpdateQueuedMessageRequestSchema, UpdateQueuedMessageResponseSchema, DENY_REASON_MAX_LENGTH, ApprovalRequestSchema, BatchApprovalRequestSchema, SubmitAnswersRequestSchema, UI_ACTION_ID_MAX_LENGTH, UI_ACTION_TITLE_MAX_LENGTH, UI_ACTION_PAYLOAD_MAX_LENGTH, UiActionRequestSchema, McpAppPermissionSchema, McpAppResourceRequestSchema, McpAppResourceResponseSchema, ElicitationModeSchema, ElicitationActionSchema, SubmitElicitationRequestSchema, ListSessionsQuerySchema, SessionListWarningSchema, SessionListResponseSchema, RecentSessionsQuerySchema, RecentSessionsResponseSchema, SessionDailyCountsQuerySchema, SessionDailyCountsResponseSchema, CommandsQuerySchema, TextDeltaSchema, ThinkingDeltaSchema, ToolCallStatusSchema, McpAppRefSchema, ToolCallEventSchema, ToolProgressEventSchema, AlwaysAllowScopeSchema, ApprovalEventSchema, QuestionPromptEventSchema, PendingInteractionDTOSchema, ErrorCategorySchema, ErrorEventSchema, ApiRetryEventSchema, DoneEventSchema, TerminalReasonSchema, UsageStateSchema, UsageStatusSchema, SessionStatusEventSchema, ContextUsageCategorySchema, ContextUsageSchema, TaskItemSchema, TaskUpdateEventSchema, RelayReceiptEventSchema, MessageDeliveredEventSchema, RelayMessageEventSchema, BackgroundTaskTypeSchema, BackgroundTaskStatusSchema, BackgroundTaskStartedEventSchema, BackgroundTaskProgressEventSchema, BackgroundTaskDoneEventSchema, SubagentTextDeltaEventSchema, SystemStatusEventSchema, OperationKindSchema, OperationStateSchema, OperationProgressEventShapeSchema, OperationProgressEventSchema, MemoryEntrySchema, MemoryRecallEventSchema, CompactBoundaryEventSchema, sessionImageShape, SessionImageEventSchema, deniedAgentShape, PermissionDeniedEventSchema, PromptSuggestionEventSchema, HookStartedEventSchema, HookProgressEventSchema, HookResponseEventSchema, SdkSessionStateSchema, SessionStateChangedEventSchema, ElicitationPromptEventSchema, ElicitationCompleteEventSchema, InteractionCancelledEventSchema, CapabilityApprovalRequiredEventSchema, CapabilityApprovalResolvedEventSchema, SigninUrlSchema, MCP_SIGNIN_OUTCOMES, McpSigninOutcomeSchema, McpSigninRequiredEventSchema, McpSigninResolvedEventSchema, StreamEventSchema, TextPartSchema, HookStatusSchema, HookPartSchema, ToolApprovalOutcomeSchema, QuestionOutcomeSchema, ToolCallPartSchema, BackgroundTaskPartSchema, ThinkingPartSchema, ErrorPartSchema, ElicitationPartSchema, CapabilityApprovalPartSchema, McpSigninPartSchema, MemoryRecallPartSchema, PermissionDeniedPartSchema, CompactBoundaryPartSchema, ImagePartSchema, MessagePartSchema, MessageTypeSchema, HistoryToolCallSchema, CompactMetadataSchema, HistoryMessageSchema, CommandEntrySchema, CommandRegistrySchema, FileListQuerySchema, RawFileQuerySchema, FileListResponseSchema, WriteFileRequestSchema, WriteFileResponseSchema, FileEntrySchema, FileTreeQuerySchema, FileTreeResponseSchema, FileContentQuerySchema, FileContentResponseSchema, CreateEntryRequestSchema, CreateEntryResponseSchema, DeleteEntryQuerySchema, RenameEntryRequestSchema, CopyEntryRequestSchema, RevealEntryRequestSchema, DiffBaselineOriginSchema, DiffBaselineQuerySchema, DiffBaselineResponseSchema, AdvanceDiffBaselineRequestSchema, DiffPendingQuerySchema, DiffPendingResponseSchema, DiffBaselineRawQuerySchema, RevertDiffBaselineRequestSchema, FileMutationResponseSchema, WorkbenchSignRequestSchema, WorkbenchSignResponseSchema, WorkbenchProbeRequestSchema, WorkbenchProbeResponseSchema, BrowseDirectoryQuerySchema, DirectoryEntrySchema, BrowseDirectoryResponseSchema, TunnelStatusSchema, HealthResponseSchema, ExecutionDefaultsSchema, ExperimentStateSchema, ServerConfigSchema, ModelTierSchema, ModelOptionSchema, SubagentInfoSchema, GitStatusResponseSchema, GitStatusErrorSchema, ErrorResponseSchema, SessionLockedErrorSchema, TaskStatusSchema, SettableTaskStatusSchema, TaskNameSchema, TaskRunStatusSchema, TaskRunTriggerSchema, TaskSchema, TaskRunSchema, CancelTaskRunResponseSchema, TaskTemplateSchema, TASK_DURATION_PATTERN, TASK_DURATION_MAX, TASK_DESCRIPTION_MAX, CreateTaskRequestSchema, SIDEBAR_TAB_ID_PATTERN, ShapeLiveLayoutCaptureSchema, ForkShapeRequestSchema, UpdateTaskRequestSchema, ListTaskRunsQuerySchema, ConfigPatchRequestSchema, ConfigPatchResponseSchema, UploadResultSchema, UploadResponseSchema, UploadProgressSchema, CanvasMediaSrcSchema, UiCanvasContentSchema, UiPanelIdSchema, UiToastLevelSchema, CELEBRATION_KINDS, CELEBRATION_KIND_SYNONYMS, CelebrationKindSchema, UiCommandTargetSchema, UiCommandSchema, UiCommandEventSchema, UiStateSchema, UiStateReportDocumentSchema, UiStateReportSchema, DevtoolsConsoleLevelSchema, DEVTOOLS_ARGS_MAX_CHARS, DevtoolsConsoleEntrySchema, DevtoolsNetworkEntrySchema, DEVTOOLS_CONSOLE_BATCH_MAX, DEVTOOLS_NETWORK_BATCH_MAX, DEVTOOLS_SCREENSHOT_MAX_CHARS, DevtoolsScreenshotResultSchema, DevtoolsIngestSchema, BrowserTargetSchema, BrowserActCommandSchema, BrowserPageSummarySchema, DEVTOOLS_OUTLINE_MAX_CHARS, DevtoolsActionResultSchema, DevtoolsRecordingUploadSchema;
+var PermissionModeSchema, PermissionModeIdSchema, PermissionStopSchema2, SessionTaskStatusSchema, StreamEventTypeSchema, QuestionOptionSchema, QuestionItemSchema, EffortLevelSchema, SessionOriginSchema, SessionLifecycleSchema, LimitPlanSchema, LimitStateSchema, SessionLimitSchema, ContinueAccountOptionSchema, ContinueOptionsResponseSchema, ContinueSessionRequestSchema, ContinueSessionResponseSchema, WaitForResetRequestSchema, LimitPlanResponseSchema, SessionSchema, SessionUpdateResponseSchema, SessionSettingsSchema, StoredSessionSettingsResponseSchema, UpdateSessionRequestSchema, ForkSessionRequestSchema, ReloadPluginsResultSchema, SEED_CONTEXT_MAX_LENGTH, MessageDispositionSchema, DispositionDowngradeReasonSchema, MessageDeliveryOutcomeSchema, InterruptOutcomeSchema, InterruptReasonSchema, InterruptReceiptSchema, QueuedMessageSchema, SendMessageRequestSchema, SendMessageResponseSchema, SessionTriggerResponseSchema, SessionQueueResponseSchema, QueueMoveTargetSchema, UpdateQueuedMessageRequestSchema, UpdateQueuedMessageResponseSchema, DENY_REASON_MAX_LENGTH, ApprovalRequestSchema, BatchApprovalRequestSchema, SubmitAnswersRequestSchema, UI_ACTION_ID_MAX_LENGTH, UI_ACTION_TITLE_MAX_LENGTH, UI_ACTION_PAYLOAD_MAX_LENGTH, UiActionRequestSchema, McpAppPermissionSchema, McpAppResourceRequestSchema, McpAppResourceResponseSchema, ElicitationModeSchema, ElicitationActionSchema, SubmitElicitationRequestSchema, ListSessionsQuerySchema, SessionListWarningSchema, SessionListResponseSchema, RecentSessionsQuerySchema, RecentSessionsResponseSchema, SessionDailyCountsQuerySchema, SessionDailyCountsResponseSchema, CommandsQuerySchema, TextDeltaSchema, ThinkingDeltaSchema, ToolCallStatusSchema, McpAppRefSchema, ToolCallEventSchema, ToolProgressEventSchema, AlwaysAllowScopeSchema, ApprovalEventSchema, QuestionPromptEventSchema, PendingInteractionDTOSchema, ErrorCategorySchema, ErrorEventSchema, ApiRetryEventSchema, DoneEventSchema, TerminalReasonSchema, UsageStateSchema, UsageStatusSchema, SessionStatusEventSchema, ContextUsageCategorySchema, ContextUsageSchema, TaskItemSchema, TaskUpdateEventSchema, RelayReceiptEventSchema, MessageDeliveredEventSchema, RelayMessageEventSchema, BackgroundTaskTypeSchema, BackgroundTaskStatusSchema, BackgroundTaskStartedEventSchema, BackgroundTaskProgressEventSchema, BackgroundTaskDoneEventSchema, SubagentTextDeltaEventSchema, SystemStatusEventSchema, OperationKindSchema, OperationStateSchema, OperationProgressEventShapeSchema, OperationProgressEventSchema, MemoryEntrySchema, MemoryRecallEventSchema, CompactBoundaryEventSchema, sessionImageShape, SessionImageEventSchema, deniedAgentShape, PermissionDeniedEventSchema, PromptSuggestionEventSchema, HookStartedEventSchema, HookProgressEventSchema, HookResponseEventSchema, SdkSessionStateSchema, SessionStateChangedEventSchema, ElicitationPromptEventSchema, ElicitationCompleteEventSchema, InteractionCancelledEventSchema, CapabilityApprovalRequiredEventSchema, CapabilityApprovalResolvedEventSchema, SigninUrlSchema, MCP_SIGNIN_OUTCOMES, McpSigninOutcomeSchema, McpSigninRequiredEventSchema, McpSigninResolvedEventSchema, StreamEventSchema, TextPartSchema, HookStatusSchema, HookPartSchema, ToolApprovalOutcomeSchema, QuestionOutcomeSchema, ToolCallPartSchema, BackgroundTaskPartSchema, ThinkingPartSchema, ErrorPartSchema, ElicitationPartSchema, CapabilityApprovalPartSchema, McpSigninPartSchema, MemoryRecallPartSchema, PermissionDeniedPartSchema, CompactBoundaryPartSchema, ImagePartSchema, MessagePartSchema, MessageTypeSchema, HistoryToolCallSchema, CompactMetadataSchema, HistoryMessageSchema, CommandEntrySchema, CommandRegistrySchema, FileListQuerySchema, RawFileQuerySchema, FileListResponseSchema, WriteFileRequestSchema, WriteFileResponseSchema, FileEntrySchema, FileTreeQuerySchema, FileTreeResponseSchema, FileContentQuerySchema, FileContentResponseSchema, CreateEntryRequestSchema, CreateEntryResponseSchema, DeleteEntryQuerySchema, RenameEntryRequestSchema, CopyEntryRequestSchema, RevealEntryRequestSchema, DiffBaselineOriginSchema, DiffBaselineQuerySchema, DiffBaselineResponseSchema, AdvanceDiffBaselineRequestSchema, DiffPendingQuerySchema, DiffPendingResponseSchema, DiffBaselineRawQuerySchema, RevertDiffBaselineRequestSchema, FileMutationResponseSchema, WorkbenchSignRequestSchema, WorkbenchSignResponseSchema, WorkbenchProbeRequestSchema, WorkbenchProbeResponseSchema, BrowseDirectoryQuerySchema, DirectoryEntrySchema, BrowseDirectoryResponseSchema, TunnelStatusSchema, HealthResponseSchema, ExecutionDefaultsSchema, ExperimentStateSchema, ServerConfigSchema, ModelTierSchema, ModelOptionSchema, SubagentInfoSchema, GitStatusResponseSchema, GitStatusErrorSchema, ErrorResponseSchema, SessionLockedErrorSchema, TaskStatusSchema, SettableTaskStatusSchema, TaskNameSchema, TaskRunStatusSchema, TaskRunTriggerSchema, TaskSchema, TaskRunSchema, CancelTaskRunResponseSchema, TaskTemplateSchema, TASK_DURATION_PATTERN, TASK_DURATION_MAX, TASK_DESCRIPTION_MAX, CreateTaskRequestSchema, SIDEBAR_TAB_ID_PATTERN, ShapeLiveLayoutCaptureSchema, ForkShapeRequestSchema, UpdateTaskRequestSchema, ListTaskRunsQuerySchema, ConfigPatchRequestSchema, ConfigPatchResponseSchema, UploadResultSchema, UploadResponseSchema, UploadProgressSchema, CanvasMediaSrcSchema, UiCanvasContentSchema, UiPanelIdSchema, UiToastLevelSchema, CELEBRATION_KINDS, CELEBRATION_KIND_SYNONYMS, CelebrationKindSchema, UiCommandTargetSchema, UiCommandSchema, UiCommandEventSchema, UiStateSchema, UiStateReportDocumentSchema, UiStateReportSchema, DevtoolsConsoleLevelSchema, DEVTOOLS_ARGS_MAX_CHARS, DevtoolsConsoleEntrySchema, DevtoolsNetworkEntrySchema, DEVTOOLS_CONSOLE_BATCH_MAX, DEVTOOLS_NETWORK_BATCH_MAX, DEVTOOLS_SCREENSHOT_MAX_CHARS, DevtoolsScreenshotResultSchema, DevtoolsIngestSchema, BrowserTargetSchema, BrowserActCommandSchema, BrowserPageSummarySchema, DEVTOOLS_OUTLINE_MAX_CHARS, DevtoolsActionResultSchema, DevtoolsRecordingUploadSchema;
 var init_schemas3 = __esm({
   "../shared/src/schemas.ts"() {
     "use strict";
@@ -38907,15 +39065,32 @@ var init_schemas3 = __esm({
     SessionOriginSchema = external_exports.enum(["user", "agent", "channel", "room", "task", "external"]).openapi("SessionOrigin");
     SessionLifecycleSchema = external_exports.enum(["idle", "streaming", "blocked", "error", "interrupted"]).openapi("SessionLifecycle");
     LimitPlanSchema = external_exports.discriminatedUnion("mode", [
-      external_exports.object({ mode: external_exports.literal("ask") }),
+      external_exports.object({ mode: external_exports.literal("ask"), carryOver: external_exports.literal(false).optional() }),
       external_exports.object({
         mode: external_exports.literal("auto"),
         target: external_exports.string(),
         fireAt: external_exports.string().datetime({ offset: true })
       }),
-      external_exports.object({ mode: external_exports.literal("waiting") }),
+      external_exports.object({
+        mode: external_exports.literal("waiting"),
+        resumeAt: external_exports.string().nullable().default(null),
+        autoResume: external_exports.boolean().default(false),
+        resetConfirmedAt: external_exports.string().optional(),
+        unconfirmed: external_exports.literal(true).optional(),
+        carryOver: external_exports.literal(false).optional()
+      }),
       external_exports.object({ mode: external_exports.literal("continued"), sessionId: external_exports.string(), accountId: external_exports.string() })
     ]).openapi("LimitPlan");
+    LimitStateSchema = external_exports.enum([
+      "limited",
+      "wait-only",
+      "model-limited",
+      "all-accounts-out",
+      "handing-off",
+      "moved",
+      "waiting-reset",
+      "reset-ready"
+    ]).openapi("LimitState");
     SessionLimitSchema = external_exports.object({
       /** The registry id of the account that ran out, or `null` when it is not registered. */
       accountId: external_exports.string().nullable(),
@@ -38926,8 +39101,60 @@ var init_schemas3 = __esm({
       /** When the limit was hit, ISO-8601. */
       since: external_exports.string(),
       /** What happens next ({@link LimitPlanSchema}); `ask` when absent. */
-      plan: LimitPlanSchema.default({ mode: "ask" })
+      plan: LimitPlanSchema.default({ mode: "ask" }),
+      /**
+       * `model` when only one model's window ran out (`seven_day_opus`,
+       * `seven_day_sonnet`, a `model:*` bucket), else `account`.
+       */
+      scope: external_exports.enum(["account", "model"]).default("account"),
+      /** Where the limit stands ({@link LimitStateSchema}); `limited` in an older snapshot. */
+      state: LimitStateSchema.default("limited"),
+      /** The model the same account can keep going on, when only one model ran out. */
+      modelFallback: external_exports.string().optional(),
+      /** With `all-accounts-out`: the account that comes back first, and when. */
+      allOut: external_exports.object({ accountId: external_exports.string(), resetsAt: external_exports.string().nullable() }).optional()
     }).openapi("SessionLimit");
+    ContinueAccountOptionSchema = external_exports.object({
+      /** The runtime the account belongs to. */
+      runtime: external_exports.string(),
+      /** The registry id. */
+      id: external_exports.string(),
+      /** What the operator calls the account, or `null` when unnamed. */
+      label: external_exports.string().nullable(),
+      /** The resolved display color. */
+      color: external_exports.string(),
+      /** The account's current usage. */
+      usage: AccountUsageSchema,
+      /** Whether work may go to it now. A person may still pick one that is not. */
+      eligible: external_exports.boolean(),
+      /** Why, in plain words. */
+      reason: external_exports.string(),
+      /** The advisor's badge, when it gave one. */
+      badge: external_exports.enum(["recommended", "reserved"]).optional()
+    }).openapi("ContinueAccountOption");
+    ContinueOptionsResponseSchema = external_exports.object({
+      /** The session's current plan. */
+      plan: LimitPlanSchema,
+      /** The accounts to offer, in order; the account that ran out is not among them. */
+      ranking: external_exports.object({
+        accounts: external_exports.array(ContinueAccountOptionSchema),
+        /** The account to suggest first, or `null` when none has room. */
+        recommendedId: external_exports.string().nullable()
+      }),
+      /** True when the account advisor's ranking was used, false for DorkOS's own. */
+      advised: external_exports.boolean()
+    }).openapi("ContinueOptionsResponse");
+    ContinueSessionRequestSchema = external_exports.object({
+      account: external_exports.string().min(1).optional(),
+      runtime: external_exports.string().min(1).optional(),
+      model: external_exports.string().min(1).optional()
+    }).openapi("ContinueSessionRequest");
+    ContinueSessionResponseSchema = external_exports.object({ sessionId: external_exports.string().optional() }).openapi("ContinueSessionResponse");
+    WaitForResetRequestSchema = external_exports.object({
+      /** Whether the session continues by itself once the reset is confirmed. */
+      autoResume: external_exports.boolean().optional()
+    }).openapi("WaitForResetRequest");
+    LimitPlanResponseSchema = external_exports.object({ plan: LimitPlanSchema }).openapi("LimitPlanResponse");
     SessionSchema = external_exports.object({
       id: external_exports.string().uuid(),
       title: external_exports.string(),
@@ -39023,12 +39250,19 @@ var init_schemas3 = __esm({
       accountId: external_exports.string().optional(),
       /**
        * The session's live status in this server process: its lifecycle and any
-       * usage limit it hit. ABSENT means the session is not live in this process;
-       * read it as idle.
+       * usage limit it hit. ABSENT when the session is not live in this process
+       * and has no stored limit; read it as idle.
        */
       status: external_exports.object({
         lifecycle: SessionLifecycleSchema,
-        limit: SessionLimitSchema.nullable()
+        limit: SessionLimitSchema.nullable(),
+        /**
+         * Account-wide cached usage for the account this session bills, as
+         * `SessionStatus.accountUsage` carries it (spec `claude-account-fleet`
+         * §6 U). Set by `GET /api/sessions/:id`; ABSENT on the list, whose
+         * envelope carries each account once.
+         */
+        accountUsage: AccountUsageSchema.nullable().optional()
       }).optional(),
       /**
        * The work item a flow run serves, read from flow's `flow-state.json`
@@ -40814,6 +41048,12 @@ var init_schemas3 = __esm({
             })
           })
         ).openapi({ description: "The Claude accounts the operator has registered" }),
+        defaultAccountColor: external_exports.string().nullable().optional().openapi({
+          description: "The color the operator chose for the standalone default account (this computer's own Claude sign-in when no registered account has its folder), as lowercase #rrggbb, or null when it shows the default for its position. Ignored while a registered account has the default folder: that account's own color wins. Absent on a server too old to report it"
+        }),
+        defaultAccountResolvedColor: external_exports.string().optional().openapi({
+          description: "The color the default account is drawn in, as lowercase #rrggbb, decided by the server: the registered account that has the default folder's own color, else defaultAccountColor, else the default for its position. Draw this rather than re-deriving it. Absent when the config could not be read, or on a server too old to report it"
+        }),
         accountsUnavailable: external_exports.boolean().optional().openapi({
           description: "True when the account registry could NOT be read (the config store threw, or was consulted before it was initialized), so `accounts` is empty because nothing could be learned rather than because nothing is registered. Absent means the list is an answer. A client must not judge an agent or session account reference against an unavailable registry \u2014 an override that cannot be verified is unknown, never wrong"
         }),
@@ -44556,6 +44796,13 @@ var init_config_disclosure = __esm({
       "runtimes.claudeCode.accounts[].path": "expose",
       "runtimes.claudeCode.accounts[].label": "expose",
       "runtimes.claudeCode.accounts[].color": "expose",
+      // The standalone default account's color (DOR-2492): a display hex, the same
+      // class as a row's `color` right above.
+      "runtimes.claudeCode.defaultAccountColor": "expose",
+      // Account folders a person hid from Settings' "Found on this computer" list
+      // (spec claude-account-ui §7.4). Folder paths, the same class as
+      // `accounts[].path` above: exposed on purpose, and naming no secret.
+      "runtimes.claudeCode.dismissedFolders": "expose",
       // The execution defaults a new session on each runtime starts with. A model id
       // and an effort rung are the same class of thing as `runtimes.default`: they
       // describe HOW work runs here, name no credential and no person, and an agent
@@ -45137,6 +45384,16 @@ var init_config_write_policy = __esm({
       // whole array, so a write that could set a color could also add or repoint an
       // account. The row stays operator-only as a unit.
       "runtimes.claudeCode.accounts[].color": "operator-only",
+      // The standalone default account's color (DOR-2492). Cosmetic too, and held
+      // with the rows' colors on purpose: it is the same choice for the one account
+      // that has no row, so an agent that may not recolor a registered account may
+      // not recolor this one either.
+      "runtimes.claudeCode.defaultAccountColor": "operator-only",
+      // Which found account folders Settings stops offering (spec claude-account-ui
+      // §7.4). Hiding a suggestion widens nothing, but the list decides which
+      // accounts a person is shown as addable, so it stays with the roster it
+      // curates: only a person curates it, through the dismiss route.
+      "runtimes.claudeCode.dismissedFolders": "operator-only",
       // The execution defaults for new sessions on each runtime. Writable, and the
       // operator was asked directly: a model and an effort level are a preference
       // about how work runs, on the same footing as `runtimes.default` right above,
@@ -45241,7 +45498,7 @@ var init_config_write_policy = __esm({
           // machine — read as a write rather than as a scope.
           "harness.autoSync",
           // Whether DorkOS moves a person's own skill folders, unattended, inside
-          // the agent folders and room folders DorkOS owns (DOR-1853). The same
+          // the agent folders DorkOS owns (DOR-1853). The same
           // clause read one notch harder: `autoSync` writes links DorkOS made, this
           // one moves a file the person wrote.
           "harness.autoAdopt",
@@ -45278,7 +45535,9 @@ var init_config_write_policy = __esm({
           "runtimes.claudeCode.accounts[].id",
           "runtimes.claudeCode.accounts[].path",
           "runtimes.claudeCode.accounts[].label",
-          "runtimes.claudeCode.accounts[].color"
+          "runtimes.claudeCode.accounts[].color",
+          "runtimes.claudeCode.defaultAccountColor",
+          "runtimes.claudeCode.dismissedFolders"
         ]
       },
       {
@@ -46785,12 +47044,21 @@ function permissionSeedForOrigin(origin) {
     // An agent launching a session does not hand it the operator's trust stop;
     // whatever power it gets is the tool's clamped mode, set on its own.
     //
+    // A carry-over's row already holds the source session's model, effort and
+    // mode, copied before the send; the origin must not add the operator's stop
+    // on top of what the session already had.
+    //
+    // A resume after an account's reset goes to a session that is already
+    // bound: its row is its power, and the origin must not add to it.
+    //
     // The harness is not a surface anybody ships to.
     case "schedule":
     case "relay-binding":
     case "agent-dm":
     case "connector-event":
     case "agent-launch":
+    case "account-handoff":
+    case "account-resume":
     case "test-harness":
       return "none";
     default: {
@@ -53892,6 +54160,18 @@ var init_sessions = __esm({
       // inference, unpersisted — so nothing is blocked in the meantime.
       runtime: text("runtime"),
       agentPath: text("agent_path"),
+      // What started the session (`TurnOrigin.kind`), written by the same
+      // first-write-wins statement that binds the runtime and never overwritten.
+      // Server-held, unlike the best-effort `Session.origin`, so it is what decides
+      // whether a limited session may carry its work to another account (spec
+      // `claude-account-fleet` D9). NULL = bound before this column existed.
+      launchOrigin: text("launch_origin"),
+      // The episode `resetsAt` (else `since`) of the last usage limit core resumed
+      // this session from by itself (spec `claude-account-fleet` D9 "Wait, then
+      // resume by itself"): at most one automatic resume per window reset. Kept
+      // here, not on the `session_limits` row, because the resumed turn's own
+      // `turn_start` deletes that row. NULL = never resumed automatically.
+      lastAutoResumeFor: text("last_auto_resume_for"),
       createdAt: text("created_at").notNull(),
       // --- Mutable per-session settings (last-write-wins; ADR-0260) ---
       // NULL = "no explicit preference; use the runtime's default."
@@ -54075,14 +54355,101 @@ var init_session_limits = __esm({
       accountPath: text("account_path"),
       /** What happens next, as `LimitPlan` JSON. */
       plan: text("plan").notNull(),
-      /** Where the limit stands; `limited` until the out-of-usage flow computes more. */
+      /** Where the limit stands (`LimitState`); `limited` until the out-of-usage flow computes more. */
       state: text("state").notNull(),
+      /** The session's working directory when the limit was hit, or NULL when unknown. */
+      cwd: text("cwd"),
+      /** The model the same account can keep going on when only one model ran out, or NULL. */
+      modelFallback: text("model_fallback"),
+      /** With `all-accounts-out`: the JSON of `{ accountId, resetsAt }` for the earliest reset, or NULL. */
+      allOut: text("all_out"),
+      /**
+       * The extension id of the account advisor that claimed this session (spec
+       * `claude-account-fleet` X, "One writer for a flow run"), or NULL when none
+       * did. Stored rather than asked live, so a claim survives the advisor's
+       * extension reloading.
+       */
+      claimedBy: text("claimed_by"),
+      /**
+       * The session's chosen model when the limit was hit (`session_metadata.model`),
+       * `''` for the runtime's default, or NULL when never recorded (unknown, never
+       * read as a switch). What the limit history compares against at the next
+       * `turn_start` to tell a model switch from a wait (spec `claude-account-ui`
+       * §7.1). Migration 0120 backfilled the rows that predate it.
+       */
+      model: text("model"),
       /** The row's last write. */
       updatedAt: text("updated_at").notNull()
     });
   }
 });
 
+// ../db/src/schema/session/session-limit-history.ts
+var sessionLimitHistory;
+var init_session_limit_history = __esm({
+  "../db/src/schema/session/session-limit-history.ts"() {
+    "use strict";
+    init_sqlite_core();
+    sessionLimitHistory = sqliteTable(
+      "session_limit_history",
+      {
+        /** A uuid. */
+        id: text("id").primaryKey(),
+        /** The canonical session id the limit hit. */
+        sessionId: text("session_id").notNull(),
+        /** When the limit was hit (the episode's `session_limits.since`). */
+        since: text("since").notNull(),
+        /** The runtime the session ran on, such as `claude-code`. */
+        runtime: text("runtime").notNull(),
+        /** The registry id of the account that ran out, or NULL when unregistered. */
+        accountId: text("account_id"),
+        /** The ledger window key that rejected work, such as `five_hour`. */
+        window: text("window").notNull(),
+        /** Whether the whole account ran out (`account`) or one model's window (`model`). */
+        scope: text("scope").notNull(),
+        /** When that window resets, or NULL when unknown. */
+        resetsAt: text("resets_at"),
+        /** How the episode ended. */
+        resolution: text("resolution", {
+          enum: ["moved", "resumed-reset", "resumed-model", "resumed-early"]
+        }).notNull(),
+        /** When it ended. */
+        resolvedAt: text("resolved_at").notNull(),
+        /** The session the work carried over to (`moved` only). */
+        toSessionId: text("to_session_id"),
+        /** The account the work carried over to (`moved` only). */
+        toAccountId: text("to_account_id"),
+        /** The model before a `resumed-model` switch. */
+        modelFrom: text("model_from"),
+        /** The model after a `resumed-model` switch. */
+        modelTo: text("model_to")
+      },
+      (table2) => [
+        uniqueIndex("session_limit_history_episode_idx").on(table2.sessionId, table2.since),
+        index("session_limit_history_resolved_at_idx").on(table2.resolvedAt)
+      ]
+    );
+  }
+});
+
+// ../db/src/schema/session/session-context.ts
+var sessionContext;
+var init_session_context = __esm({
+  "../db/src/schema/session/session-context.ts"() {
+    "use strict";
+    init_sqlite_core();
+    sessionContext = sqliteTable("session_context", {
+      sessionId: text("session_id").primaryKey(),
+      /** Tokens occupying the context window at the reading. */
+      contextTokens: integer2("context_tokens").notNull(),
+      /** The model's context window at the reading; `0` when the runtime did not say. */
+      contextMaxTokens: integer2("context_max_tokens").notNull(),
+      /** When the reading was taken (ISO-8601). */
+      observedAt: text("observed_at").notNull()
+    });
+  }
+});
+
 // ../db/src/schema/workspace.ts
 var workspaces;
 var init_workspace2 = __esm({
@@ -56398,7 +56765,8 @@ var init_notifications = __esm({
             "signin.required",
             "update.installed",
             "report.daily",
-            "account.limited"
+            "account.limited",
+            "account.reset"
           ]
         }).notNull(),
         /** How loud this was allowed to be. Copied from the registry at write time. */
@@ -56619,7 +56987,9 @@ __export(schema_exports, {
   searchSources: () => searchSources,
   session: () => session,
   sessionConnectionOverrides: () => sessionConnectionOverrides,
+  sessionContext: () => sessionContext,
   sessionEvents: () => sessionEvents,
+  sessionLimitHistory: () => sessionLimitHistory,
   sessionLimits: () => sessionLimits,
   sessionMessageAcceptanceReceipts: () => sessionMessageAcceptanceReceipts,
   sessionMessageQueue: () => sessionMessageQueue,
@@ -56648,6 +57018,8 @@ var init_schema2 = __esm({
     init_session_events();
     init_message_acceptance();
     init_session_limits();
+    init_session_limit_history();
+    init_session_context();
     init_workspace2();
     init_auth();
     init_unclaimed_chats();
@@ -56758,6 +57130,17 @@ Your data has not been touched \u2014 DorkOS never recreates, renames or repairs
   }
 });
 
+// ../../apps/server/src/services/session/fleet/session-limit-history.ts
+var LIMIT_HISTORY_RETENTION_MS;
+var init_session_limit_history2 = __esm({
+  "../../apps/server/src/services/session/fleet/session-limit-history.ts"() {
+    "use strict";
+    init_src2();
+    init_schemas3();
+    LIMIT_HISTORY_RETENTION_MS = 30 * 24 * 60 * 60 * 1e3;
+  }
+});
+
 // ../../apps/server/src/services/session/fleet/session-limit-store.ts
 function withSessionLimitStore(what, fn) {
   const store = sharedStore;
@@ -56779,6 +57162,7 @@ var init_session_limit_store = __esm({
     init_src2();
     init_schemas3();
     init_logger();
+    init_session_limit_history2();
   }
 });
 
@@ -58775,6 +59159,23 @@ function fillNullsWith(seed) {
   }
   return update;
 }
+function moveSessionContext(db, fromId, toId) {
+  const source = db.select().from(sessionContext).where(eq(sessionContext.sessionId, fromId)).get();
+  if (!source) return;
+  const destination = db.select().from(sessionContext).where(eq(sessionContext.sessionId, toId)).get();
+  db.transaction((tx) => {
+    tx.delete(sessionContext).where(eq(sessionContext.sessionId, fromId)).run();
+    if (destination && destination.observedAt >= source.observedAt) return;
+    tx.insert(sessionContext).values({ ...source, sessionId: toId }).onConflictDoUpdate({
+      target: sessionContext.sessionId,
+      set: {
+        contextTokens: source.contextTokens,
+        contextMaxTokens: source.contextMaxTokens,
+        observedAt: source.observedAt
+      }
+    }).run();
+  });
+}
 var BOUND_RUNTIME_CHUNK_SIZE, RuntimeNotRegisteredError, RuntimeRegistry, runtimeRegistry;
 var init_runtime_registry = __esm({
   "../../apps/server/src/services/core/runtime-registry.ts"() {
@@ -58909,6 +59310,10 @@ var init_runtime_registry = __esm({
           sessionId,
           runtime,
           agentPath: agentPath ?? null,
+          // What started it, server-held and never overwritten: the fact that
+          // decides whether a limited session may carry its work to another
+          // account (spec `claude-account-fleet` D9).
+          launchOrigin: origin.kind,
           createdAt: (/* @__PURE__ */ new Date()).toISOString(),
           ...seed
         }).onConflictDoUpdate({
@@ -58920,6 +59325,8 @@ var init_runtime_registry = __esm({
             // with no agent never erases a path some other write knew.
             ...agentPath !== void 0 ? { agentPath } : {},
             ...fillNullsWith(seed),
+            // The claim names what started the session only when nothing has yet.
+            launchOrigin: sql`coalesce(${sessionMetadata.launchOrigin}, ${origin.kind})`,
             // **The UPDATE branch is a CLAIM, and not every origin may seed one.**
             // This row already exists: something created it before the session
             // started, which for a person is their own pre-launch settings change
@@ -58938,6 +59345,23 @@ var init_runtime_registry = __esm({
         });
         return result2.changes > 0;
       }
+      /**
+       * Take back the binding row a caller wrote at a turn's launch when that turn
+       * then never ran (DOR-2447).
+       *
+       * A room records a session's owner as its turn launches, because a runtime may
+       * ask for authority that needs the row the moment it starts. If the dispatch
+       * then fails before any turn runs, the room never binds that freshly minted
+       * id and mints another next time — so the row would belong to nothing. Only
+       * the caller that wrote the row, for an id only it knows, may ask this.
+       *
+       * @param sessionId - The minted session id whose launch never produced a turn
+       */
+      async forgetUnstartedSession(sessionId) {
+        const db = this.requireDb("forgetUnstartedSession");
+        db.delete(sessionMetadata).where(eq(sessionMetadata.sessionId, sessionId)).run();
+        return Promise.resolve();
+      }
       /**
        * Return the runtime type string for a session.
        *
@@ -59070,6 +59494,55 @@ var init_runtime_registry = __esm({
         const row = db.select({ agentPath: sessionMetadata.agentPath }).from(sessionMetadata).where(eq(sessionMetadata.sessionId, sessionId)).get();
         return row?.agentPath ?? null;
       }
+      /**
+       * What started a session (`TurnOrigin.kind`), as the binding write recorded
+       * it, or null when the session has no row or was bound before the column
+       * existed. Server-held, unlike `Session.origin`, so it can decide what a
+       * session may do (spec `claude-account-fleet` D9).
+       *
+       * @param sessionId - Session identifier
+       */
+      getSessionLaunchOrigin(sessionId) {
+        const db = this.requireDb("getSessionLaunchOrigin");
+        const row = db.select({ launchOrigin: sessionMetadata.launchOrigin }).from(sessionMetadata).where(eq(sessionMetadata.sessionId, sessionId)).get();
+        return row?.launchOrigin ?? null;
+      }
+      /**
+       * The usage-limit episode core last resumed this session from by itself
+       * (`session_metadata.last_auto_resume_for`), or null when it never did.
+       * Read by every later episode, so a resumed turn that runs out again in the
+       * same window is never resumed a second time (spec `claude-account-fleet`
+       * D9 "Wait, then resume by itself").
+       *
+       * @param sessionId - Session identifier
+       */
+      getLastAutoResumeFor(sessionId) {
+        const db = this.requireDb("getLastAutoResumeFor");
+        const row = db.select({ lastAutoResumeFor: sessionMetadata.lastAutoResumeFor }).from(sessionMetadata).where(eq(sessionMetadata.sessionId, sessionId)).get();
+        return row?.lastAutoResumeFor ?? null;
+      }
+      /**
+       * Record that core is resuming this session by itself from the episode
+       * named `episode`, before the resume is sent. Synchronous, so the record and
+       * the dispatch that follows it happen in one step. Creates an unbound row
+       * when the session has none, and never touches the binding.
+       *
+       * @param sessionId - Session identifier
+       * @param episode - The episode's key (its `resetsAt`, else its `since`), or
+       *   `null` to put back "never" when the resume could not be sent
+       */
+      markAutoResumed(sessionId, episode) {
+        const db = this.requireDb("markAutoResumed");
+        db.insert(sessionMetadata).values({
+          sessionId,
+          runtime: null,
+          createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+          lastAutoResumeFor: episode
+        }).onConflictDoUpdate({
+          target: sessionMetadata.sessionId,
+          set: { lastAutoResumeFor: episode }
+        }).run();
+      }
       /**
        * Read a session's persisted settings, or null when no row exists. NULL
        * columns are omitted from the result (not surfaced as explicit values).
@@ -59123,6 +59596,21 @@ var init_runtime_registry = __esm({
           ...patch
         }).onConflictDoUpdate({ target: sessionMetadata.sessionId, set: patch }).run();
       }
+      /**
+       * Delete a session's `session_metadata` row outright, bound or not.
+       *
+       * For exactly one kind of caller: one that minted the session id itself,
+       * saved settings under it, and then saw the launch refused, throw, or not be
+       * accepted (`session_start`). Nobody else can know that id, so nothing anyone
+       * chose is lost; without this, every refused launch would leave a row for a
+       * session that never existed.
+       *
+       * @param sessionId - The id the caller minted.
+       */
+      async discardSessionSettings(sessionId) {
+        const db = this.requireDb("discardSessionSettings");
+        db.delete(sessionMetadata).where(eq(sessionMetadata.sessionId, sessionId)).run();
+      }
       /**
        * The `permission_mode` a CLAIM should write: the stored one if the runtime
        * being bound can actually run it, otherwise the seed, otherwise nothing.
@@ -59296,6 +59784,15 @@ var init_runtime_registry = __esm({
         if (fromId === toId) return;
         const db = this.requireDb("rekeySessionSettings");
         withSessionLimitStore("rekey", (store) => store.rekeySession(fromId, toId));
+        try {
+          moveSessionContext(db, fromId, toId);
+        } catch (err) {
+          logger.warn("[RuntimeRegistry] could not move a session context reading", {
+            fromId,
+            toId,
+            err: err instanceof Error ? err.message : String(err)
+          });
+        }
         const source = db.select().from(sessionMetadata).where(eq(sessionMetadata.sessionId, fromId)).get();
         if (!source) return;
         const destination = db.select().from(sessionMetadata).where(eq(sessionMetadata.sessionId, toId)).get();
@@ -59311,7 +59808,9 @@ var init_runtime_registry = __esm({
             model: destination.model ?? source.model,
             effort: destination.effort ?? source.effort,
             fastMode: destination.fastMode ?? source.fastMode,
-            agentPath: destination.agentPath ?? source.agentPath
+            agentPath: destination.agentPath ?? source.agentPath,
+            launchOrigin: destination.launchOrigin ?? source.launchOrigin,
+            lastAutoResumeFor: destination.lastAutoResumeFor ?? source.lastAutoResumeFor
           }).where(eq(sessionMetadata.sessionId, toId)).run();
         });
         logger.debug(
@@ -59528,6 +60027,7 @@ var init_session_stream = __esm({
     init_approval_schemas();
     init_schemas3();
     init_canvas_schemas();
+    init_account_usage();
     init_schemas3();
     extendZodWithOpenApiOnce();
     SessionContextUsageSchema = external_exports.object({
@@ -59540,7 +60040,15 @@ var init_session_stream = __esm({
       /** Tokens read from prompt cache (90% cost savings). */
       cacheReadTokens: external_exports.number().int(),
       /** Tokens written to prompt cache (slight write premium). */
-      cacheCreationTokens: external_exports.number().int()
+      cacheCreationTokens: external_exports.number().int(),
+      /**
+       * When {@link totalTokens} and {@link maxTokens} were measured (ISO-8601):
+       * the moment of a live reading, or the stored reading's time when the
+       * figures were restored on open or after a restart (spec
+       * `claude-account-fleet` §6 U). ABSENT when a runtime reported the figures
+       * without it (an older server).
+       */
+      observedAt: external_exports.string().optional()
     }).openapi("SessionContextUsage");
     SessionCacheStatsSchema = external_exports.object({
       /** Cumulative tokens served from the prompt cache. */
@@ -59580,6 +60088,21 @@ var init_session_stream = __esm({
        * The `.default(null)` keeps pre-usage snapshots parsing (version skew).
        */
       usage: UsageStatusSchema.nullable().default(null),
+      /**
+       * Account-wide cached usage for the account this session bills (spec
+       * `claude-account-fleet` §6 U), stamped from the server's usage store when
+       * the session is opened, so it shows before the session's first turn and
+       * for a single account (`default`). `updatedAt` and each window's
+       * `observedAt` say how fresh it is. `null` when the session's runtime keeps
+       * no usage ledger.
+       *
+       * Never carried by a `status_change`: a change travels only on the global
+       * `account_usage` event, and a client applies it to every session whose
+       * value names that account, matching on (`runtime`, `accountId`), or on
+       * (`runtime`, `path`) when `accountId` is `null`. The `.default(null)` keeps
+       * older snapshots parsing (version skew).
+       */
+      accountUsage: AccountUsageSchema.nullable().default(null),
       /** Prompt-cache accounting, or `null` before the first turn. */
       cacheStats: SessionCacheStatsSchema.nullable(),
       /** Active model identifier, or `null` before the first turn. */
@@ -59754,10 +60277,15 @@ var init_session_stream = __esm({
       // out fleet-wide — which is a runtime naming a tool the session never
       // started. Nothing produces it (the normalizer maps no source field to it),
       // so the delta simply cannot express it.
+      //
+      // `accountUsage` is OMITTED too: it is account-wide, so a change to it
+      // travels once on the global `account_usage` event rather than into every
+      // session's log (a log-backed runtime persists each event it streams, and a
+      // reconnect would replay them all).
       external_exports.object({
         ...seqShape,
         type: external_exports.literal("status_change"),
-        status: SessionStatusSchema.omit({ activity: true }).partial().extend({
+        status: SessionStatusSchema.omit({ activity: true, accountUsage: true }).partial().extend({
           contextUsage: SessionContextUsageSchema.partial().nullable().optional()
         })
       }),
@@ -61731,6 +62259,16 @@ function takeAccountsSeen(patch) {
     seen: new Set(parsed.data)
   };
 }
+function defaultAccountColorRefusal(patch) {
+  const runtimes = patch.runtimes;
+  if (!isRecord(runtimes)) return null;
+  const claudeCode = runtimes.claudeCode;
+  if (!isRecord(claudeCode) || !("defaultAccountColor" in claudeCode)) return null;
+  if (DefaultAccountColorSchema.safeParse(claudeCode.defaultAccountColor).success) return null;
+  return [
+    "runtimes.claudeCode.defaultAccountColor: must be a lowercase #rrggbb color, or null for the default."
+  ];
+}
 function withReadableLabel(row) {
   return typeof row.label === "string" || row.label === null ? row : { ...row, label: null };
 }
@@ -61855,6 +62393,8 @@ function applyConfigPatch(patch) {
   const taken = takeAccountsSeen(patch);
   if (!taken.ok) return { ok: false, error: "Validation failed", details: taken.details };
   const patchObj = taken.patch;
+  const colorRefusal = defaultAccountColorRefusal(patchObj);
+  if (colorRefusal) return { ok: false, error: "Validation failed", details: colorRefusal };
   const current = configManager.getAll();
   const merged = deepMerge(current, patchObj);
   settleLegacyAccountAlias(merged, patchObj);
@@ -68789,10 +69329,17 @@ different folder, so:
 
 ## Sync before you edit
 
-Run \`git -C <your copy> merge main\` at the start of any turn where you are
-going to change something. This is plain git, not a tool: sorting out a clash in
-your own copy is your job, and doing it there means the room's copy never sits in
-a conflicted state.
+When a room turn of yours starts and your copy has nothing in progress (nothing
+changed, nothing committed that the room lacks, still on your own branch),
+DorkOS brings it up to date with main first, and your room context says so.
+When you do have work in progress, your copy is left exactly as it is, and your
+room context lists what moved on main since you branched: who changed it, which
+files, and which of those you have changed too.
+
+Either way, run \`git -C <your copy> merge main\` at the start of any turn where
+you are going to change something. This is plain git, not a tool: sorting out a
+clash in your own copy is your job, and doing it there means the room's copy
+never sits in a conflicted state.
 
 Your room context tells you how far the room has moved ahead of you. If you want
 to look before you start, the tool whose name ends in \`room_repo_status\` reports
@@ -69056,7 +69603,7 @@ var init_refusals = __esm({
       /** R7, and the offending keys are a mix, or one belongs to nobody DorkOS knows. */
       S7c: (name, fields) => `"${name}" uses ${fields} in its settings, which DorkOS doesn't recognise, so it can't tell whether your other agents can run it. Run dorkos harness adopt ${name} --claude-only to keep it where it is, or take ${fields} out and adopt it.`,
       /** B1 — `harness.autoAdopt` is on somewhere DorkOS does not own. */
-      S8: () => `harness.autoAdopt is on, and it does nothing here: DorkOS only moves skills on its own inside the agent folders and room folders it owns. Run dorkos harness adopt <name> to move one yourself.`,
+      S8: () => `harness.autoAdopt is on, and it does nothing here: DorkOS only moves skills on its own inside the agent folders it owns. Run dorkos harness adopt <name> to move one yourself.`,
       /** R8 — `--claude-only` on a candidate that does not live in Claude Code's folder. */
       S9: (name, root) => `--claude-only records a skill as belonging to Claude Code, and "${name}" lives in ${root}. Leave it where it is, or move the folder yourself.`,
       /**
@@ -135701,7 +136248,13 @@ var init_connector_schemas = __esm({
       operations: external_exports.array(
         ConnectorOperationRevisionSchema.omit({ id: true, discoveredAt: true }).extend({
           // Private upstream revision identity, never included in public revision DTOs.
-          providerRevisionRef: external_exports.string().min(1).max(500).optional()
+          providerRevisionRef: external_exports.string().min(1).max(500).optional(),
+          // Presentation hints only. Neither is part of a revision's identity, its
+          // stored row, or its safety classification.
+          /** The service's own display name for the operation, when it gives one. */
+          displayName: external_exports.string().min(1).max(200).optional(),
+          /** True when the service marks the operation as one of its main ones. */
+          important: external_exports.boolean().optional()
         })
       ),
       nextCursor: external_exports.string().min(1).optional(),
@@ -136283,7 +136836,16 @@ var init_connector_provider = __esm({
       /** Exact per-service authentication availability when it differs from the provider default. */
       authentication: ConnectorCapabilityAvailabilitySchema.optional(),
       /** Composio's `max_accounts_per_toolkit`; `undefined` = unbounded/one. */
-      maxAccountsPerUser: external_exports.number().int().positive().optional()
+      maxAccountsPerUser: external_exports.number().int().positive().optional(),
+      /**
+       * Where the connection service hosts the app's logo: an https URL on one of
+       * that service's own logo hosts, already checked by the provider. Server-side
+       * only: the catalog never sends it to a browser, which gets a same-origin
+       * logo path instead, and the server's logo route fetches this URL.
+       */
+      logoUrl: external_exports.string().url().max(2e3).optional(),
+      /** The service's own one-line description of the app, already cut to one short sentence. */
+      description: external_exports.string().min(1).max(300).optional()
     });
     ConnectedAccountStatusSchema = external_exports.enum([
       "active",
@@ -142364,7 +142926,7 @@ if (process.argv[2] === "community") {
       })
     );
     const exitCode = await dispatcher.runCommunityDispatcher(process.argv.slice(3), {
-      cliVersion: "0.88.0",
+      cliVersion: "0.89.0",
       dorkHome: DORK_HOME,
       processEnv: childEnv,
       parseRelease: (bytes) => releaseContract.parseCompatibleCommunityReleaseManifest(
@@ -142382,7 +142944,7 @@ if (process.argv[2] === "community") {
     process.exit(1);
   }
 }
-var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.88.0" });
+var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.89.0" });
 var uninstallCliErrorHandlers = cliErrorReporter ? installCliErrorHandlers(cliErrorReporter) : void 0;
 if (process.argv[2] === "doctor") {
   process.env.DORK_HOME = DORK_HOME;
@@ -142392,7 +142954,7 @@ if (process.argv[2] === "doctor") {
 if (process.argv[2] === "feedback") {
   process.env.DORK_HOME = DORK_HOME;
   const { runFeedback: runFeedback2 } = await Promise.resolve().then(() => (init_feedback2(), feedback_exports));
-  process.exit(await runFeedback2(DORK_HOME, "0.88.0", process.argv.slice(3)));
+  process.exit(await runFeedback2(DORK_HOME, "0.89.0", process.argv.slice(3)));
 }
 if (process.argv[2] === "auth") {
   process.env.DORK_HOME = DORK_HOME;
@@ -142491,7 +143053,7 @@ if (process.argv[2] === "agent" || process.argv[2] === "task" || process.argv[2]
     }
   }
   const { runVersionDispatcher: runVersionDispatcher2 } = await Promise.resolve().then(() => (init_version5(), version_exports));
-  process.exit(await runVersionDispatcher2("0.88.0", DORK_HOME, subArgs));
+  process.exit(await runVersionDispatcher2("0.89.0", DORK_HOME, subArgs));
 }
 function parseCliArgs() {
   try {
@@ -142616,14 +143178,14 @@ Examples:
   process.exit(0);
 }
 if (values.version) {
-  console.log("0.88.0");
+  console.log("0.89.0");
   process.exit(0);
 }
 if (values["post-install-check"]) {
   const claudeFound = checkClaude();
   const coreExtensionsFound = checkCoreExtensions();
   const extensionsCompile = await checkExtensionCompilation();
-  console.log(`dorkos ${"0.88.0"}`);
+  console.log(`dorkos ${"0.89.0"}`);
   if (!coreExtensionsFound) {
     console.log("Installation incomplete \u2014 bundled core extensions are missing.");
   }
@@ -142780,7 +143342,7 @@ if (fs30.existsSync(envPath)) {
 }
 uninstallCliErrorHandlers?.();
 process.env.DORKOS_CLI_ENTRYPOINT = fileURLToPath6(import.meta.url);
-process.env.DORKOS_CLI_VERSION = "0.88.0";
+process.env.DORKOS_CLI_VERSION = "0.89.0";
 var server;
 try {
   server = await import("../server/index.js");
@@ -142805,7 +143367,7 @@ var ansiReset = "\x1B[0m";
 console.log("");
 console.log(`${purple}${logo}${ansiReset}`);
 console.log("");
-console.log(`  DorkOS v${"0.88.0"}`);
+console.log(`  DorkOS v${"0.89.0"}`);
 console.log(`  Local:   ${link(localUrl, localUrl)}`);
 var nets = networkInterfaces();
 var networkUrl = null;
@@ -142831,9 +143393,9 @@ if (shouldOpenBrowser && process.stdin.isTTY) {
   const openCmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
   exec(`${openCmd} ${localUrl}`);
 }
-checkForUpdate("0.88.0").then((latestVersion) => {
+checkForUpdate("0.89.0").then((latestVersion) => {
   if (latestVersion) {
-    const msg = `Update available: ${"0.88.0"} \u2192 ${latestVersion}`;
+    const msg = `Update available: ${"0.89.0"} \u2192 ${latestVersion}`;
     const cmd = "Run npm install -g dorkos@latest to update";
     const width = Math.max(msg.length, cmd.length) + 6;
     const pad2 = (s2) => `\u2502   ${s2}${" ".repeat(width - s2.length - 6)}   \u2502`;