dorkos 0.92.0 → 0.93.0

package/dist/bin/cli.js

@@ -21396,13 +21396,17 @@ function classifyClaudeAccountRows(value, noun = "Claude account") {
   });
   return { rows, warnings };
 }
+function readProjectRootList(raw) {
+  if (!Array.isArray(raw)) return null;
+  return raw.filter((root) => typeof root === "string" && root.length > 0);
+}
 function configuredRuntimes(read) {
   const runtimes = ["claude-code"];
   if (read("runtimes.codex.enabled") !== false) runtimes.push("codex");
   if (read("runtimes.opencode.enabled") !== false) runtimes.push("opencode");
   return runtimes;
 }
-var CommunityNavigationRefSchema, ExtensionApprovedSourceSchema, ExtensionDismissedApprovalSchema, CommunityInstallationPathSchema, CommunityInstallationSearchScalarSchema, CommunityInstallationSearchValueSchema, CommunityInstallationDestinationSchema, CommunityNavigationDestinationSchema, CommunityNavigationOwnerPrefsSchema, CommunityNavigationPrefsSchema, ROOM_TURN_LIMIT_BOUNDS, MAX_TOTAL_TURNS_PER_HOUR_BOUNDS, ROOM_TURN_LIMIT_DEFAULTS, MAX_CONCURRENT_TURNS_PER_AGENT_BOUNDS, MAX_CONCURRENT_TURNS_PER_AGENT_DEFAULT, RELAY_TURN_CEILING_BOUNDS, RELAY_TURN_CEILING_DEFAULTS, SENSITIVE_CONFIG_KEYS, CREDENTIAL_REF_PATTERN, CredentialReferenceSchema, ONBOARDING_STEPS, OnboardingStepSchema, OnboardingStateSchema, ToursStateSchema, TOURS_DEFAULTS, DisplayNameSourceSchema, UserProfileSchema, USER_PROFILE_DEFAULTS, SidebarDisplayFilterSchema, SidebarItemRefSchema, SmartGroupRulesSchema, SidebarGroupShapeSchema, SidebarGroupSchema, SidebarSectionIdSchema, SidebarSectionPrefsSchema, SIDEBAR_SECTION_IDS, SidebarSectionsSchema, SidebarPrefsSchema, SIDEBAR_PREFS_DEFAULTS, ShapeUserPrefsSchema, SHAPE_USER_PREFS_DEFAULTS, StatusBarPinSchema, STATUS_BAR_PIN_KEYS, StatusBarPrefsSchema, STATUS_BAR_PREFS_DEFAULTS, ComposerPrefsSchema, COMPOSER_PREFS_DEFAULTS, EscalationDelaySchema, NotificationPrefsSchema, NOTIFICATION_PREFS_DEFAULTS, DEFAULT_AGENTS_DIRECTORY, RawMcpServerConfigSchema, ClaudeCodeAccountSchema, ClaudeCodeAccountsSchema, ClaudeAccountsSeenSchema, CLAUDE_ACCOUNTS_SEEN_KEY, DefaultModelSchema, DefaultEffortSchema, DefaultTrustStopSchema, DefaultAccountColorSchema, ClaudeCodeSettingsSchema, LoggingConfigSchema, PermissionConfigStateSchema, UserConfigSchema, LOG_LEVEL_MAP, USER_CONFIG_DEFAULTS;
+var CommunityNavigationRefSchema, ExtensionOriginSchema, ExtensionTrustedSourceSchema, ExtensionApprovedSourceSchema, ExtensionDismissedApprovalSchema, CommunityInstallationPathSchema, CommunityInstallationSearchScalarSchema, CommunityInstallationSearchValueSchema, CommunityInstallationDestinationSchema, CommunityNavigationDestinationSchema, CommunityNavigationOwnerPrefsSchema, CommunityNavigationPrefsSchema, ROOM_TURN_LIMIT_BOUNDS, MAX_TOTAL_TURNS_PER_HOUR_BOUNDS, ROOM_TURN_LIMIT_DEFAULTS, MAX_CONCURRENT_TURNS_PER_AGENT_BOUNDS, MAX_CONCURRENT_TURNS_PER_AGENT_DEFAULT, RELAY_TURN_CEILING_BOUNDS, RELAY_TURN_CEILING_DEFAULTS, SENSITIVE_CONFIG_KEYS, CREDENTIAL_REF_PATTERN, CredentialReferenceSchema, ONBOARDING_STEPS, OnboardingStepSchema, OnboardingStateSchema, ToursStateSchema, TOURS_DEFAULTS, DisplayNameSourceSchema, UserProfileSchema, USER_PROFILE_DEFAULTS, SidebarDisplayFilterSchema, SidebarItemRefSchema, SmartGroupRulesSchema, SidebarGroupShapeSchema, SidebarGroupSchema, SidebarSectionIdSchema, SidebarSectionPrefsSchema, SIDEBAR_SECTION_IDS, SidebarSectionsSchema, SidebarPrefsSchema, SIDEBAR_PREFS_DEFAULTS, ShapeUserPrefsSchema, SHAPE_USER_PREFS_DEFAULTS, StatusBarPinSchema, STATUS_BAR_PIN_KEYS, StatusBarPrefsSchema, STATUS_BAR_PREFS_DEFAULTS, ComposerPrefsSchema, COMPOSER_PREFS_DEFAULTS, EscalationDelaySchema, NotificationPrefsSchema, NOTIFICATION_PREFS_DEFAULTS, DEFAULT_AGENTS_DIRECTORY, RawMcpServerConfigSchema, ProjectRootListSchema, TolerantProjectRootListSchema, ProjectAccountsRuleSchema, TolerantProjectAccountsSchema, ClaudeCodeAccountSchema, ClaudeCodeAccountsSchema, ClaudeAccountsSeenSchema, CLAUDE_ACCOUNTS_SEEN_KEY, DefaultModelSchema, DefaultEffortSchema, DefaultTrustStopSchema, DefaultAccountColorSchema, ClaudeCodeSettingsSchema, LoggingConfigSchema, PermissionConfigStateSchema, UserConfigSchema, LOG_LEVEL_MAP, USER_CONFIG_DEFAULTS;
 var init_config_schema = __esm({
   "../shared/src/config-schema.ts"() {
     init_zod();
@@ -21415,6 +21419,18 @@ var init_config_schema = __esm({
     init_permission_ids();
     init_runtime_environment_schema();
     CommunityNavigationRefSchema = external_exports.string().regex(/^[0-9A-Za-z][0-9A-Za-z_-]*$/, "A community ref must be path-safe");
+    ExtensionOriginSchema = external_exports.object({
+      /** The plugin folder that carries the extension. */
+      plugin: external_exports.string().min(1),
+      /** The normalized `owner/repo` the plugin was installed from. */
+      source: external_exports.string().min(1)
+    });
+    ExtensionTrustedSourceSchema = external_exports.object({
+      /** The normalized `owner/repo`, e.g. `dork-labs/marketplace`. */
+      source: external_exports.string().min(1),
+      /** When the person trusted it. ISO 8601. */
+      trustedAt: external_exports.string()
+    });
     ExtensionApprovedSourceSchema = external_exports.object({
       /** Absolute path of the approved extension directory. */
       path: external_exports.string().min(1),
@@ -21422,7 +21438,23 @@ var init_config_schema = __esm({
        * The installed marketplace plugin that carries this extension, when it came
        * inside one; absent for an extension installed directly.
        */
-      plugin: external_exports.string().min(1).optional()
+      plugin: external_exports.string().min(1).optional(),
+      /**
+       * Where the approved copy came from, when this machine can prove it (spec
+       * `flow-multiproject` §9.1): the carrying plugin and the `owner/repo` DorkOS's
+       * own installer recorded fetching it from. Present only when the approved
+       * copy had such a trusted origin. Another copy with the same trusted origin
+       * counts as approved too, so the same plugin installed into several projects
+       * asks once. A file inside a project can never supply this: it is read only
+       * from DorkOS's own install records.
+       */
+      origin: ExtensionOriginSchema.optional(),
+      /**
+       * For a copy whose plugin files changed after DorkOS installed it: the
+       * whole plugin folder's digest the person said yes to. Any further change
+       * asks again, because a path alone no longer says what is there.
+       */
+      digest: external_exports.string().min(1).optional()
     });
     ExtensionDismissedApprovalSchema = external_exports.object({
       /** Absolute path of the extension directory the person declined. */
@@ -21864,6 +21896,31 @@ var init_config_schema = __esm({
       /** Streamable HTTP or SSE — the two remote MCP transports. */
       transport: external_exports.enum(["http", "sse"])
     });
+    ProjectRootListSchema = external_exports.array(external_exports.string().min(1));
+    TolerantProjectRootListSchema = external_exports.preprocess(
+      (raw) => readProjectRootList(raw),
+      ProjectRootListSchema.nullable()
+    );
+    ProjectAccountsRuleSchema = external_exports.object({
+      /** The account ids that may work in this project. */
+      allow: external_exports.array(external_exports.string().min(1))
+    });
+    TolerantProjectAccountsSchema = external_exports.preprocess(
+      (raw) => {
+        if (!raw || typeof raw !== "object" || Array.isArray(raw)) return {};
+        const out = {};
+        for (const [root, rule] of Object.entries(raw)) {
+          if (root.length === 0 || !rule || typeof rule !== "object") continue;
+          const allow = rule.allow;
+          if (!Array.isArray(allow)) continue;
+          out[root] = {
+            allow: allow.filter((id) => typeof id === "string" && id.length > 0)
+          };
+        }
+        return out;
+      },
+      external_exports.record(external_exports.string().min(1), ProjectAccountsRuleSchema)
+    );
     ClaudeCodeAccountSchema = external_exports.object({
       /**
        * Stable kebab-case slug for this account, unique within the registry. What
@@ -21882,7 +21939,21 @@ var init_config_schema = __esm({
        * color follows the palette if it changes. A value that is not lowercase
        * `#rrggbb` reads as `null` rather than failing the whole config.
        */
-      color: external_exports.string().regex(ACCOUNT_COLOR_PATTERN).nullable().default(null).catch(null)
+      color: external_exports.string().regex(ACCOUNT_COLOR_PATTERN).nullable().default(null).catch(null),
+      /**
+       * The projects this account may work in, as canonical project roots (git
+       * main checkouts), or `null` for any project (spec `flow-multiproject` §8,
+       * N6). A list never includes "no project": an account kept to client-app
+       * does not run in a folder that is in no repository. Written only by a
+       * person, through `PUT /api/runtimes/claude-code/accounts/:id/only-projects`.
+       *
+       * Optional rather than defaulted, and absent reads exactly as `null`: a row
+       * is a shared contract with flow (readers ignore fields they do not know,
+       * writers keep them), so rows written by an older flow or by hand carry no
+       * such field, and every reader (`readProjectRootList`) treats that as "any
+       * project". The `'0.93.0'` migration still writes `null` onto stored rows.
+       */
+      onlyProjects: TolerantProjectRootListSchema.optional()
     });
     ClaudeCodeAccountsSchema = external_exports.preprocess(
       backfillMissingAccountIds,
@@ -21949,6 +22020,22 @@ var init_config_schema = __esm({
        * folder: that row's own color wins. See {@link DefaultAccountColorSchema}.
        */
       defaultAccountColor: DefaultAccountColorSchema.default(null).catch(null),
+      /**
+       * The projects Main (this computer's own sign-in, id `default`) may work in,
+       * as canonical project roots, or `null` for any project. Main has no
+       * registry row to carry `onlyProjects`, so its rule lives here, the same
+       * pattern as `defaultAccountColor` (spec `flow-multiproject` §8.1).
+       */
+      defaultAccountOnlyProjects: TolerantProjectRootListSchema.default(null),
+      /**
+       * Per-project account rules, keyed by canonical project root: which
+       * accounts may work in that project (spec `flow-multiproject` §8.1, N6). A
+       * project with no entry allows every account. An account works in a project
+       * only when both its own rule and the project's allow it. Written only by a
+       * person, through `PUT /api/runtimes/claude-code/project-accounts`, which
+       * rewrites the whole object: the keys are paths and contain dots.
+       */
+      projectAccounts: TolerantProjectAccountsSchema.default({}),
       /**
        * Account folders a person dismissed from Settings' "Found on this
        * computer" list, so they stay hidden across restarts (spec
@@ -22743,13 +22830,24 @@ var init_config_schema = __esm({
          * to a consent question, and an agent that could write it could hide the
          * question from them.
          */
-        dismissedApprovals: external_exports.record(external_exports.string(), ExtensionDismissedApprovalSchema).default(() => ({}))
+        dismissedApprovals: external_exports.record(external_exports.string(), ExtensionDismissedApprovalSchema).default(() => ({})),
+        /**
+         * The code sources a person trusts (spec `flow-multiproject` §9.3): an
+         * extension whose copy provably came from one of these runs without an
+         * approval row. Keyed on a trusted origin's `owner/repo`, so a clone
+         * that merely claims a source is never covered.
+         *
+         * `operator-only`: it decides which code runs. Trusting a new source is
+         * one of the three asks only a person can answer.
+         */
+        trustedSources: external_exports.array(ExtensionTrustedSourceSchema).default(() => [])
       }).default(() => ({
         enabled: [],
         disabled: [],
         approvedToRun: [],
         approvedSources: {},
-        dismissedApprovals: {}
+        dismissedApprovals: {},
+        trustedSources: []
       })),
       mcp: external_exports.object({
         enabled: external_exports.boolean().default(true),
@@ -23045,6 +23143,8 @@ var init_config_schema = __esm({
           defaultAccount: null,
           accounts: [],
           defaultAccountColor: null,
+          defaultAccountOnlyProjects: null,
+          projectAccounts: {},
           dismissedFolders: [],
           defaultModel: null,
           defaultEffort: null,
@@ -23128,6 +23228,8 @@ var init_config_schema = __esm({
           defaultAccount: null,
           accounts: [],
           defaultAccountColor: null,
+          defaultAccountOnlyProjects: null,
+          projectAccounts: {},
           dismissedFolders: [],
           defaultModel: null,
           defaultEffort: null,
@@ -25488,6 +25590,7 @@ function logError(err) {
 var DEFAULT_MAX_LOG_SIZE, DEFAULT_MAX_LOG_FILES, logDir, logFile, maxLogSize, maxLogFiles, configuredLevel, TAG_PREFIX_PATTERN, logger;
 var init_logger = __esm({
   "../../apps/server/src/lib/logger.ts"() {
+    "use strict";
     init_dist();
     init_dispatch_context();
     init_serialize_error();
@@ -25808,7 +25911,7 @@ import path2 from "path";
 import { fileURLToPath } from "url";
 function resolveVersion() {
   if (env2.DORKOS_VERSION_OVERRIDE) return env2.DORKOS_VERSION_OVERRIDE;
-  if (true) return "0.92.0";
+  if (true) return "0.93.0";
   const pkgPath = path2.join(path2.dirname(fileURLToPath(import.meta.url)), "../../package.json");
   return JSON.parse(readFileSync(pkgPath, "utf-8")).version;
 }
@@ -25894,6 +25997,18 @@ function moreProtective(entry, stored, fresh) {
       if (typeof fresh !== "number") return void 0;
       return stored > fresh ? stored : void 0;
     }
+    case "ruled": {
+      if (Array.isArray(stored)) {
+        if (fresh !== null || !stored.every((item) => typeof item === "string")) return void 0;
+        return stored;
+      }
+      if (stored === null || typeof stored !== "object") return void 0;
+      if (Object.keys(stored).length === 0) return void 0;
+      if (fresh === null || typeof fresh !== "object" || Object.keys(fresh).length > 0) {
+        return void 0;
+      }
+      return stored;
+    }
     case "restricted": {
       if (!Array.isArray(stored) || !stored.every((item) => typeof item === "string")) {
         return void 0;
@@ -25939,8 +26054,8 @@ function applyProtectedState(store, salvaged) {
   const section = (name) => {
     const existing = sections.get(name);
     if (existing) return existing;
-    const current = store.get(name);
-    const draft = current !== null && typeof current === "object" ? { ...current } : {};
+    const current2 = store.get(name);
+    const draft = current2 !== null && typeof current2 === "object" ? { ...current2 } : {};
     sections.set(name, draft);
     return draft;
   };
@@ -26154,6 +26269,22 @@ var init_protected_state = __esm({
         protectiveValue: false,
         reason: "Warm agents default ON (spec `full-power-defaults`). Holding a process open between messages costs memory \u2014 up to about 1 GB per warm agent \u2014 so somebody who turned it off did so to get that memory back, on a machine that presumably needed it. A wipe that handed the default back would take it away again with nothing on screen to say why."
       },
+      {
+        path: "runtimes.claudeCode.defaultAccountOnlyProjects",
+        direction: "ruled",
+        reason: 'Main (this computer\'s own Claude sign-in) kept to some projects (spec `flow-multiproject` \xA78). The default is any project, so a wipe that forgot "Main is only for client-app" would silently let it work in personal repos: the DOR-584 class of loss.'
+      },
+      {
+        path: "runtimes.claudeCode.projectAccounts",
+        direction: "ruled",
+        reason: "Which accounts each project may use (spec `flow-multiproject` \xA78). The default is no limits, so a wipe that forgot a project's list would let every account work there again, including one the person kept out on purpose."
+      },
+      // `runtimes.claudeCode.accounts[].onlyProjects` has no entry, on purpose: a
+      // wipe does not carry the account registry itself (no row, no path), so the
+      // account it limited is no longer one DorkOS can launch on. There is nothing
+      // for the rule to protect until the person registers the account again, and
+      // a row cannot be carried by one leaf without its folder and id. Pinned by
+      // `protected-state.test.ts`.
       {
         path: "scheduler.maxConcurrentRuns",
         direction: "lower",
@@ -26321,24 +26452,24 @@ function leafStub(node2) {
   return stub;
 }
 function objectShape(schema3) {
-  let current = schema3;
+  let current2 = schema3;
   for (let depth = 0; depth < MAX_ZOD_WRAPPERS; depth++) {
-    const def = current.def;
+    const def = current2.def;
     if (def.type === "object" && def.shape !== void 0) return def.shape;
     if (def.innerType === void 0) return void 0;
-    current = def.innerType;
+    current2 = def.innerType;
   }
   return void 0;
 }
 function resolveLeafSchema(segments) {
-  let current = UserConfigSchema;
+  let current2 = UserConfigSchema;
   for (const segment of segments) {
-    const shape = objectShape(current);
+    const shape = objectShape(current2);
     const next = shape?.[segment];
     if (next === void 0) return void 0;
-    current = next;
+    current2 = next;
   }
-  return current;
+  return current2;
 }
 function relaxIn(properties, segments, leaves) {
   for (const [key, child] of Object.entries(properties)) {
@@ -26514,12 +26645,14 @@ __export(config_manager_exports, {
   retireToolOnlyReplies: () => retireToolOnlyReplies,
   scrubRetiredOnboardingSteps: () => scrubRetiredOnboardingSteps,
   seedA2aDisabled: () => seedA2aDisabled,
+  seedAccountProjectRules: () => seedAccountProjectRules,
   seedClaudeDismissedFolders: () => seedClaudeDismissedFolders,
   seedCommunityNavigationPrefs: () => seedCommunityNavigationPrefs,
   seedDefaultAccountColor: () => seedDefaultAccountColor,
   seedDisplayNameSourceDefault: () => seedDisplayNameSourceDefault,
   seedExtensionsApprovedSources: () => seedExtensionsApprovedSources,
   seedExtensionsDismissedApprovals: () => seedExtensionsDismissedApprovals,
+  seedExtensionsTrustedSources: () => seedExtensionsTrustedSources,
   seedFullPowerDecision: () => seedFullPowerDecision,
   seedHarnessAutoAdopt: () => seedHarnessAutoAdopt,
   seedHarnessGlobal: () => seedHarnessGlobal,
@@ -26702,6 +26835,12 @@ function seedExtensionsDismissedApprovals(store) {
   if (dismissed && typeof dismissed === "object" && !Array.isArray(dismissed)) return;
   store.set("extensions", { ...ext, dismissedApprovals: {} });
 }
+function seedExtensionsTrustedSources(store) {
+  const ext = store.get("extensions");
+  if (!ext || typeof ext !== "object" || Array.isArray(ext)) return;
+  if (Array.isArray(ext.trustedSources)) return;
+  store.set("extensions", { ...ext, trustedSources: [] });
+}
 function backfillWorkspaceDefaults(store) {
   if (store.get("workspace") == null) {
     store.set("workspace", {
@@ -27023,27 +27162,27 @@ function backfillRoomsDefaults(store) {
     store.set("rooms", seeded);
     return;
   }
-  const current = { ...rooms2 };
+  const current2 = { ...rooms2 };
   let changed = false;
   for (const [key, value] of Object.entries(seeded)) {
-    if (current[key] === void 0) {
-      current[key] = value;
+    if (current2[key] === void 0) {
+      current2[key] = value;
       changed = true;
     }
   }
-  if (current.maxAutomaticTurnsPerHour !== void 0) {
-    if (typeof current.maxAutomaticTurnsPerHour === "number") {
-      current.maxAutomaticTurnsPerRoomPerHour = current.maxAutomaticTurnsPerHour;
+  if (current2.maxAutomaticTurnsPerHour !== void 0) {
+    if (typeof current2.maxAutomaticTurnsPerHour === "number") {
+      current2.maxAutomaticTurnsPerRoomPerHour = current2.maxAutomaticTurnsPerHour;
     }
-    delete current.maxAutomaticTurnsPerHour;
+    delete current2.maxAutomaticTurnsPerHour;
     changed = true;
   }
-  if (changed) store.set("rooms", current);
+  if (changed) store.set("rooms", current2);
 }
 function raiseRoomTurnLimits(store) {
   const rooms2 = store.get("rooms");
   if (rooms2 == null || typeof rooms2 !== "object") return;
-  const current = { ...rooms2 };
+  const current2 = { ...rooms2 };
   let changed = false;
   const RAISED = [
     ["maxAgentDepth", 3, 30],
@@ -27051,8 +27190,8 @@ function raiseRoomTurnLimits(store) {
     ["maxAutomaticTurnsTotalPerHour", 240, 5e3]
   ];
   for (const [key, was, becomes] of RAISED) {
-    if (current[key] === was) {
-      current[key] = becomes;
+    if (current2[key] === was) {
+      current2[key] = becomes;
       changed = true;
     }
   }
@@ -27061,12 +27200,12 @@ function raiseRoomTurnLimits(store) {
     maxTurnsPerAgentPerCascade: 10
   };
   for (const [key, value] of Object.entries(ADDED)) {
-    if (current[key] === void 0) {
-      current[key] = value;
+    if (current2[key] === void 0) {
+      current2[key] = value;
       changed = true;
     }
   }
-  if (changed) store.set("rooms", current);
+  if (changed) store.set("rooms", current2);
 }
 function backfillWelcomeBackDefaults(store) {
   const seeded = {
@@ -27080,15 +27219,15 @@ function backfillWelcomeBackDefaults(store) {
     store.set("welcomeBack", seeded);
     return;
   }
-  const current = { ...stored };
+  const current2 = { ...stored };
   let changed = false;
   for (const [key, value] of Object.entries(seeded)) {
-    if (current[key] === void 0) {
-      current[key] = value;
+    if (current2[key] === void 0) {
+      current2[key] = value;
       changed = true;
     }
   }
-  if (changed) store.set("welcomeBack", current);
+  if (changed) store.set("welcomeBack", current2);
 }
 function backfillSmartGroupKindDefaults(store) {
   const ui = store.get("ui");
@@ -27223,9 +27362,9 @@ function backfillClaudeCodeRuntimeDefaults(store) {
 function backfillRuntimeExecutionDefaults(store) {
   const runtimes = store.get("runtimes");
   if (runtimes == null || typeof runtimes !== "object") return;
-  const current = runtimes;
+  const current2 = runtimes;
   const seed = (section, leaves) => {
-    const value = current[section];
+    const value = current2[section];
     if (value == null || typeof value !== "object") return null;
     const block = value;
     const missing = leaves.filter((leaf) => !(leaf in block));
@@ -27237,7 +27376,7 @@ function backfillRuntimeExecutionDefaults(store) {
   const opencode = seed("opencode", ["defaultModel"]);
   if (!claudeCode && !codex && !opencode) return;
   store.set("runtimes", {
-    ...current,
+    ...current2,
     ...claudeCode ? { claudeCode } : {},
     ...codex ? { codex } : {},
     ...opencode ? { opencode } : {}
@@ -27246,9 +27385,9 @@ function backfillRuntimeExecutionDefaults(store) {
 function backfillDefaultTrustStops(store) {
   const runtimes = store.get("runtimes");
   if (runtimes == null || typeof runtimes !== "object") return;
-  const current = runtimes;
+  const current2 = runtimes;
   const seed = (section) => {
-    const value = current[section];
+    const value = current2[section];
     if (value == null || typeof value !== "object") return null;
     const block = value;
     if ("defaultTrustStop" in block) return null;
@@ -27257,10 +27396,10 @@ function backfillDefaultTrustStops(store) {
   const claudeCode = seed("claudeCode");
   const codex = seed("codex");
   const opencode = seed("opencode");
-  const global2 = "defaultTrustStop" in current ? null : { defaultTrustStop: null };
+  const global2 = "defaultTrustStop" in current2 ? null : { defaultTrustStop: null };
   if (!claudeCode && !codex && !opencode && !global2) return;
   store.set("runtimes", {
-    ...current,
+    ...current2,
     ...global2 ?? {},
     ...claudeCode ? { claudeCode } : {},
     ...codex ? { codex } : {},
@@ -27270,19 +27409,19 @@ function backfillDefaultTrustStops(store) {
 function backfillClaudeCodePersistentSession(store) {
   const runtimes = store.get("runtimes");
   if (runtimes == null || typeof runtimes !== "object") return;
-  const current = runtimes;
-  const claudeCode = current.claudeCode;
+  const current2 = runtimes;
+  const claudeCode = current2.claudeCode;
   if (claudeCode == null || typeof claudeCode !== "object") return;
   const block = claudeCode;
   if ("persistentSession" in block) return;
   store.set("runtimes", {
-    ...current,
+    ...current2,
     claudeCode: { ...block, persistentSession: false }
   });
 }
 function seedA2aDisabled(store) {
-  const current = store.get("a2a");
-  if (current != null && typeof current === "object") return;
+  const current2 = store.get("a2a");
+  if (current2 != null && typeof current2 === "object") return;
   store.set("a2a", { enabled: false });
 }
 function backfillPromoDismissals(store) {
@@ -27376,6 +27515,39 @@ function seedDefaultAccountColor(store) {
     claudeCode: { ...block, defaultAccountColor: null }
   });
 }
+function seedAccountProjectRules(store) {
+  const runtimes = store.get("runtimes");
+  if (!runtimes || typeof runtimes !== "object" || Array.isArray(runtimes)) return;
+  const block = runtimes.claudeCode;
+  if (!block || typeof block !== "object" || Array.isArray(block)) return;
+  const current2 = block;
+  const next = { ...current2 };
+  let changed = false;
+  if (!("projectAccounts" in current2)) {
+    next.projectAccounts = {};
+    changed = true;
+  }
+  if (!("defaultAccountOnlyProjects" in current2)) {
+    next.defaultAccountOnlyProjects = null;
+    changed = true;
+  }
+  if (Array.isArray(current2.accounts)) {
+    let rowsChanged = false;
+    const rows = current2.accounts.map((row) => {
+      if (!row || typeof row !== "object" || Array.isArray(row) || "onlyProjects" in row) {
+        return row;
+      }
+      rowsChanged = true;
+      return { ...row, onlyProjects: null };
+    });
+    if (rowsChanged) {
+      next.accounts = rows;
+      changed = true;
+    }
+  }
+  if (!changed) return;
+  store.set("runtimes", { ...runtimes, claudeCode: next });
+}
 function seedClaudeDismissedFolders(store) {
   const runtimes = store.get("runtimes");
   if (!runtimes || typeof runtimes !== "object" || Array.isArray(runtimes)) return;
@@ -27413,13 +27585,13 @@ function raiseSchedulerConcurrencyFloor(store) {
 function warmClaudeCodeSessionsByDefault(store) {
   const runtimes = store.get("runtimes");
   if (runtimes == null || typeof runtimes !== "object") return;
-  const current = runtimes;
-  const claudeCode = current.claudeCode;
+  const current2 = runtimes;
+  const claudeCode = current2.claudeCode;
   if (claudeCode == null || typeof claudeCode !== "object") return;
   const block = claudeCode;
   if (block.persistentSession !== false) return;
   store.set("runtimes", {
-    ...current,
+    ...current2,
     claudeCode: { ...block, persistentSession: true }
   });
 }
@@ -27430,26 +27602,26 @@ function seedMemoryProviderDefault(store) {
 function seedRoomRepoDefaults(store) {
   const rooms2 = store.get("rooms");
   if (rooms2 == null || typeof rooms2 !== "object") return;
-  const current = rooms2;
-  if (current.repo != null) return;
-  store.set("rooms", { ...current, repo: USER_CONFIG_DEFAULTS.rooms.repo });
+  const current2 = rooms2;
+  if (current2.repo != null) return;
+  store.set("rooms", { ...current2, repo: USER_CONFIG_DEFAULTS.rooms.repo });
 }
 function dropRetiredDorkosTools(store) {
   const runtimes = store.get("runtimes");
   if (runtimes == null || typeof runtimes !== "object") return;
-  const current = runtimes;
-  if (!("dorkosTools" in current)) return;
-  const { dorkosTools: _retired, ...rest } = current;
+  const current2 = runtimes;
+  if (!("dorkosTools" in current2)) return;
+  const { dorkosTools: _retired, ...rest } = current2;
   store.set("runtimes", rest);
 }
 function retireToolOnlyReplies(store) {
   const rooms2 = store.get("rooms");
   if (rooms2 == null || typeof rooms2 !== "object") return;
-  const current = rooms2;
-  const { toolOnlyReplies: _retired, ...rest } = current;
+  const current2 = rooms2;
+  const { toolOnlyReplies: _retired, ...rest } = current2;
   const next = { ...rest };
-  let changed = "toolOnlyReplies" in current;
-  if (current.maxPostsPerTurn == null) {
+  let changed = "toolOnlyReplies" in current2;
+  if (current2.maxPostsPerTurn == null) {
     next.maxPostsPerTurn = USER_CONFIG_DEFAULTS.rooms.maxPostsPerTurn;
     changed = true;
   }
@@ -27459,61 +27631,61 @@ function retireToolOnlyReplies(store) {
 function seedDisplayNameSourceDefault(store) {
   const profile = store.get("profile");
   if (profile == null || typeof profile !== "object") return;
-  const current = profile;
-  if ("displayNameSource" in current) return;
+  const current2 = profile;
+  if ("displayNameSource" in current2) return;
   store.set("profile", {
-    ...current,
+    ...current2,
     displayNameSource: USER_CONFIG_DEFAULTS.profile.displayNameSource
   });
 }
 function seedIdentityPromptDismissedDefault(store) {
   const profile = store.get("profile");
   if (profile == null || typeof profile !== "object") return;
-  const current = profile;
-  if ("identityPromptDismissedAt" in current) return;
+  const current2 = profile;
+  if ("identityPromptDismissedAt" in current2) return;
   store.set("profile", {
-    ...current,
+    ...current2,
     identityPromptDismissedAt: USER_CONFIG_DEFAULTS.profile.identityPromptDismissedAt
   });
 }
 function seedHarnessRefusedHooks(store) {
   const harness = store.get("harness");
   if (harness == null || typeof harness !== "object") return;
-  const current = harness;
-  if (Array.isArray(current.refusedHooks)) return;
-  store.set("harness", { ...current, refusedHooks: [] });
+  const current2 = harness;
+  if (Array.isArray(current2.refusedHooks)) return;
+  store.set("harness", { ...current2, refusedHooks: [] });
 }
 function seedHarnessGlobal(store) {
   const harness = store.get("harness");
   if (harness == null || typeof harness !== "object") return;
-  const current = harness;
-  if (current.global != null && typeof current.global === "object") return;
-  store.set("harness", { ...current, global: { harnesses: [], askedAt: null } });
+  const current2 = harness;
+  if (current2.global != null && typeof current2.global === "object") return;
+  store.set("harness", { ...current2, global: { harnesses: [], askedAt: null } });
 }
 function seedHarnessAutoAdopt(store) {
   const harness = store.get("harness");
   if (harness == null || typeof harness !== "object") return;
-  const current = harness;
-  if (typeof current.autoAdopt === "boolean") return;
-  store.set("harness", { ...current, autoAdopt: false });
+  const current2 = harness;
+  if (typeof current2.autoAdopt === "boolean") return;
+  store.set("harness", { ...current2, autoAdopt: false });
 }
 function seedRoomCanvasOps(store) {
   const rooms2 = store.get("rooms");
   if (rooms2 == null || typeof rooms2 !== "object") return;
-  const current = rooms2;
-  if (current.maxCanvasOpsPerTurn != null) return;
+  const current2 = rooms2;
+  if (current2.maxCanvasOpsPerTurn != null) return;
   store.set("rooms", {
-    ...current,
+    ...current2,
     maxCanvasOpsPerTurn: USER_CONFIG_DEFAULTS.rooms.maxCanvasOpsPerTurn
   });
 }
 function seedMaxConcurrentTurnsPerAgent(store) {
   const rooms2 = store.get("rooms");
   if (rooms2 == null || typeof rooms2 !== "object") return;
-  const current = rooms2;
-  if (current.maxConcurrentTurnsPerAgent != null) return;
+  const current2 = rooms2;
+  if (current2.maxConcurrentTurnsPerAgent != null) return;
   store.set("rooms", {
-    ...current,
+    ...current2,
     maxConcurrentTurnsPerAgent: USER_CONFIG_DEFAULTS.rooms.maxConcurrentTurnsPerAgent
   });
 }
@@ -27561,8 +27733,8 @@ function retireAgentContextSettings(store) {
   const blocked = [];
   if (off.length > 0) {
     const permissions = store.get("permissions");
-    const current = permissions && typeof permissions === "object" && !Array.isArray(permissions) ? permissions : { preset: null, defaults: { areas: {}, actions: {} }, upgradeSweptVersion: null };
-    const defaults = current.defaults && typeof current.defaults === "object" && !Array.isArray(current.defaults) ? current.defaults : { areas: {}, actions: {} };
+    const current2 = permissions && typeof permissions === "object" && !Array.isArray(permissions) ? permissions : { preset: null, defaults: { areas: {}, actions: {} }, upgradeSweptVersion: null };
+    const defaults = current2.defaults && typeof current2.defaults === "object" && !Array.isArray(current2.defaults) ? current2.defaults : { areas: {}, actions: {} };
     const areas = {
       ...defaults.areas ?? {}
     };
@@ -27573,7 +27745,7 @@ function retireAgentContextSettings(store) {
     }
     if (blocked.length > 0) {
       store.set("permissions", {
-        ...current,
+        ...current2,
         defaults: { actions: {}, ...defaults, areas }
       });
     }
@@ -27618,6 +27790,8 @@ function tolerateLegacyClaudeAccountEncoding(ctx) {
       anyOf: [{ type: "string" }, { type: "null" }],
       default: null
     };
+    properties.defaultAccountOnlyProjects = { default: null };
+    properties.projectAccounts = { default: {} };
     return;
   }
   if (ctx.zodSchema !== ClaudeCodeAccountSchema) return;
@@ -28097,10 +28271,10 @@ and your settings stay in the file you renamed.`;
       },
       // New nested defaults only; historical migration bodies stay immutable.
       "0.76.0": (store) => {
-        const current = store.get("runtimes");
+        const current2 = store.get("runtimes");
         store.set("runtimes", {
-          ...current,
-          environment: current?.environment ?? { inherit: { claudeCode: [], codex: [], opencode: [] } }
+          ...current2,
+          environment: current2?.environment ?? { inherit: { claudeCode: [], codex: [], opencode: [] } }
         });
       },
       // 0.76.0 has merged (DOR-1903, a `runtimes` leaf) and 0.74.0 is the newest
@@ -28261,6 +28435,29 @@ and your settings stay in the file you renamed.`;
       // body preserves.
       "0.92.0": (store) => {
         seedExtensionsDismissedApprovals(store);
+      },
+      // 0.92.0 has merged (DOR-2517, extension approvals a person said "Not now"
+      // to), so 0.93.0 is the next key. Frozen from merge, not from the release
+      // bump, for the reason `'0.60.0'` above states; anything further opens
+      // `'0.94.0'`.
+      //
+      // Disjoint from every other key here: it adds two nested leaves under
+      // `runtimes.claudeCode` and one leaf on each `accounts[]` row, none of which
+      // anything above names, and keeps every member `'0.65.0'`, `'0.87.0'`,
+      // `'0.90.0'` and `'0.91.0'` write there.
+      "0.93.0": (store) => {
+        seedAccountProjectRules(store);
+      },
+      // 0.93.0 has merged (DOR-2526, account project rules) and v0.89.0 is the
+      // newest tag, so 0.94.0 is the next key. Frozen from merge, not from the
+      // release bump, for the reason `'0.60.0'` above states; anything further
+      // opens `'0.95.0'`.
+      //
+      // Disjoint from every other key here: it adds one nested leaf under
+      // `extensions`, beside `dismissedApprovals`, which `'0.92.0'` writes and this
+      // body preserves.
+      "0.94.0": (store) => {
+        seedExtensionsTrustedSources(store);
       }
     };
     jsonSchemaFull = external_exports.toJSONSchema(UserConfigSchema, {
@@ -30396,11 +30593,11 @@ var init_env2 = __esm({
 // src/startup-diagnostics.ts
 import os2 from "os";
 function checkNodeVersion(version4 = process.versions.node) {
-  const current = version4.split(".").map((part) => Number.parseInt(part, 10));
+  const current2 = version4.split(".").map((part) => Number.parseInt(part, 10));
   const minimum = MIN_NODE_VERSION.split(".").map((part) => Number.parseInt(part, 10));
   const supported2 = minimum.every((minimumPart, index2) => {
-    const currentPart = current[index2] ?? 0;
-    const equalPrefix = minimum.slice(0, index2).every((part, prior) => part === current[prior]);
+    const currentPart = current2[index2] ?? 0;
+    const equalPrefix = minimum.slice(0, index2).every((part, prior) => part === current2[prior]);
     return !equalPrefix || currentPart >= minimumPart;
   });
   if (!supported2) {
@@ -30638,6 +30835,7 @@ function requiresClaudePlugin(type2) {
 var PackageTypeSchema;
 var init_package_types = __esm({
   "../marketplace/src/package-types.ts"() {
+    "use strict";
     init_zod();
     PackageTypeSchema = external_exports.enum(["agent", "plugin", "skill-pack", "adapter", "shape"]);
   }
@@ -32384,15 +32582,15 @@ async function readPackageFileWithin(root, relPath2, maxBytes, what) {
     `${what} is reached through a symbolic link, which DorkOS does not follow inside a package.`
   );
   const parts = inside.split(path11.sep);
-  let current = root;
+  let current2 = root;
   for (const part of parts) {
-    current = path11.join(current, part);
-    if ((await lstat(current)).isSymbolicLink()) throw linked();
+    current2 = path11.join(current2, part);
+    if ((await lstat(current2)).isSymbolicLink()) throw linked();
   }
   await readPackageFileHooks.beforeOpen?.();
   let handle;
   try {
-    handle = await open2(current, readNoFollowFlags());
+    handle = await open2(current2, readNoFollowFlags());
   } catch (err) {
     if (err.code === "ELOOP") throw linked();
     throw err;
@@ -32401,9 +32599,9 @@ async function readPackageFileWithin(root, relPath2, maxBytes, what) {
     await readPackageFileHooks.afterOpen?.();
     const [opened, atPath, realRoot, realFile] = await Promise.all([
       handle.stat(),
-      lstat(current),
+      lstat(current2),
       realpath(root),
-      realpath(current)
+      realpath(current2)
     ]);
     const fromRoot = path11.relative(realRoot, realFile);
     if (opened.dev !== atPath.dev || opened.ino !== atPath.ino || path11.isAbsolute(fromRoot) || fromRoot === ".." || fromRoot.startsWith(`..${path11.sep}`)) {
@@ -38636,10 +38834,9 @@ var init_capabilities = __esm({
 });
 
 // ../shared/src/project-schemas.ts
-var PROJECT_NAME_PATTERN, ProjectRefSchema, ProjectInfoSchema, ProjectListResponseSchema, ProjectResolveQuerySchema, ProjectResolveResponseSchema;
+var PROJECT_NAME_PATTERN, ProjectRefSchema, ProjectInfoSchema, ProjectListResponseSchema, ProjectResolveQuerySchema, ProjectResolveResponseSchema, AccountEligibilityRowSchema, AccountEligibilityQuerySchema, AccountEligibilityResponseSchema, ProjectAccountsRequestSchema, OnlyProjectsRequestSchema, OnlyProjectsResponseSchema;
 var init_project_schemas = __esm({
   "../shared/src/project-schemas.ts"() {
-    "use strict";
     init_zod();
     init_zod_openapi();
     extendZodWithOpenApiOnce();
@@ -38671,6 +38868,74 @@ var init_project_schemas = __esm({
       /** The project the folder belongs to, or null when it is in no repository. */
       project: ProjectRefSchema.nullable()
     }).openapi("ProjectResolveResponse");
+    AccountEligibilityRowSchema = external_exports.object({
+      /** The registry id, or `default` for Main (this computer's own sign-in). */
+      id: external_exports.string(),
+      /** What the person calls the account, or null when unnamed. */
+      label: external_exports.string().nullable(),
+      /** The color its dot is drawn in, lowercase `#rrggbb`. */
+      color: external_exports.string(),
+      /** True for Main when it has no registry row. */
+      implicit: external_exports.boolean(),
+      /** The projects the account is kept to, or null for any project. */
+      onlyProjects: external_exports.array(ProjectRefSchema).nullable(),
+      /** Whether the account's own rule lets it work here. */
+      allowedByAccount: external_exports.boolean(),
+      /** Whether the project's rule lets it work here (true with no project rule). */
+      allowedByProject: external_exports.boolean(),
+      /** Whether it may work here: both rules allow it. */
+      eligible: external_exports.boolean()
+    }).openapi("AccountEligibilityRow");
+    AccountEligibilityQuerySchema = external_exports.object({
+      /**
+       * Any folder; the answer is for the project it belongs to. Leave it out for
+       * a folder in no project.
+       */
+      project: external_exports.string().min(1).optional()
+    }).openapi("AccountEligibilityQuery");
+    AccountEligibilityResponseSchema = external_exports.object({
+      /** The project the folder belongs to, or null when it is in no project. */
+      project: ProjectRefSchema.nullable(),
+      /** The project's own allow list, or null when it has none (every account). */
+      allow: external_exports.array(external_exports.string()).nullable(),
+      /** Every Claude account, in registry order, Main last when it has no row. */
+      accounts: external_exports.array(AccountEligibilityRowSchema),
+      /**
+       * What a new chat in this folder would run on when nobody picks an account:
+       * the launch ladder's own answer (the folder's agent's account, else the
+       * default, skipping to the next account that may work here), or why it
+       * would be refused. A picker's "Default" row names this, never a guess.
+       * Absent on a server too old to say.
+       */
+      launch: external_exports.discriminatedUnion("ok", [
+        external_exports.object({
+          ok: external_exports.literal(true),
+          /** The account's registry id, or `default` for Main. */
+          accountId: external_exports.string(),
+          /** The Claude folder it runs in. */
+          root: external_exports.string()
+        }),
+        external_exports.object({
+          ok: external_exports.literal(false),
+          /** The plain sentence the launch would be refused with. */
+          message: external_exports.string()
+        })
+      ]).optional()
+    }).openapi("AccountEligibilityResponse");
+    ProjectAccountsRequestSchema = external_exports.object({
+      /** Any folder in the project. */
+      project: external_exports.string().min(1),
+      /** The account ids that may work there, or null to remove the project's rule. */
+      allow: external_exports.array(external_exports.string().min(1)).nullable()
+    }).openapi("ProjectAccountsRequest");
+    OnlyProjectsRequestSchema = external_exports.object({
+      /** Folders of the projects the account may work in, or null for any project. */
+      projects: external_exports.array(external_exports.string().min(1)).nullable()
+    }).openapi("OnlyProjectsRequest");
+    OnlyProjectsResponseSchema = external_exports.object({
+      /** The projects the account is now kept to, or null for any project. */
+      onlyProjects: external_exports.array(ProjectRefSchema).nullable()
+    }).openapi("OnlyProjectsResponse");
   }
 });
 
@@ -39171,9 +39436,10 @@ function isSafeSigninUrl(value) {
   if (url2.protocol !== "http:") return false;
   return url2.hostname === "localhost" || url2.hostname === "127.0.0.1" || url2.hostname === "[::1]";
 }
-var PermissionModeSchema, PermissionModeIdSchema, PermissionStopSchema2, SessionTaskStatusSchema, StreamEventTypeSchema, QuestionOptionSchema, QuestionItemSchema, EffortLevelSchema, SessionOriginSchema, SessionLifecycleSchema, LimitPlanSchema, LimitStateSchema, SessionLimitSchema, ContinueAccountOptionSchema, ContinueOptionsResponseSchema, ContinueSessionRequestSchema, ContinueSessionResponseSchema, WaitForResetRequestSchema, LimitPlanResponseSchema, TrackerItemRefSchema, SessionSchema, SessionUpdateResponseSchema, SessionSettingsSchema, StoredSessionSettingsResponseSchema, UpdateSessionRequestSchema, ForkSessionRequestSchema, ReloadPluginsResultSchema, SEED_CONTEXT_MAX_LENGTH, MessageDispositionSchema, DispositionDowngradeReasonSchema, MessageDeliveryOutcomeSchema, InterruptOutcomeSchema, InterruptReasonSchema, InterruptReceiptSchema, QueuedMessageSchema, SendMessageRequestSchema, SendMessageResponseSchema, SessionTriggerResponseSchema, SessionQueueResponseSchema, QueueMoveTargetSchema, UpdateQueuedMessageRequestSchema, UpdateQueuedMessageResponseSchema, DENY_REASON_MAX_LENGTH, ApprovalRequestSchema, BatchApprovalRequestSchema, SubmitAnswersRequestSchema, UI_ACTION_ID_MAX_LENGTH, UI_ACTION_TITLE_MAX_LENGTH, UI_ACTION_PAYLOAD_MAX_LENGTH, UiActionRequestSchema, McpAppPermissionSchema, McpAppResourceRequestSchema, McpAppResourceResponseSchema, ElicitationModeSchema, ElicitationActionSchema, SubmitElicitationRequestSchema, ListSessionsQuerySchema, SessionListWarningSchema, SessionListResponseSchema, RecentSessionsQuerySchema, RecentSessionsResponseSchema, SessionDailyCountsQuerySchema, SessionDailyCountsResponseSchema, CommandsQuerySchema, TextDeltaSchema, ThinkingDeltaSchema, ToolCallStatusSchema, McpAppRefSchema, ToolCallEventSchema, ToolProgressEventSchema, AlwaysAllowScopeSchema, ApprovalEventSchema, QuestionPromptEventSchema, PendingInteractionDTOSchema, ErrorCategorySchema, ErrorEventSchema, ApiRetryEventSchema, DoneEventSchema, TerminalReasonSchema, UsageStateSchema, UsageStatusSchema, SessionStatusEventSchema, ContextUsageCategorySchema, ContextUsageSchema, TaskItemSchema, TaskUpdateEventSchema, RelayReceiptEventSchema, MessageDeliveredEventSchema, RelayMessageEventSchema, BackgroundTaskTypeSchema, BackgroundTaskStatusSchema, BackgroundTaskStartedEventSchema, BackgroundTaskProgressEventSchema, BackgroundTaskDoneEventSchema, SubagentTextDeltaEventSchema, SystemStatusEventSchema, OperationKindSchema, OperationStateSchema, OperationProgressEventShapeSchema, OperationProgressEventSchema, MemoryEntrySchema, MemoryRecallEventSchema, CompactBoundaryEventSchema, sessionImageShape, SessionImageEventSchema, deniedAgentShape, PermissionDeniedEventSchema, PromptSuggestionEventSchema, HookStartedEventSchema, HookProgressEventSchema, HookResponseEventSchema, SdkSessionStateSchema, SessionStateChangedEventSchema, ElicitationPromptEventSchema, ElicitationCompleteEventSchema, InteractionCancelledEventSchema, CapabilityApprovalRequiredEventSchema, CapabilityApprovalResolvedEventSchema, SigninUrlSchema, MCP_SIGNIN_OUTCOMES, McpSigninOutcomeSchema, McpSigninRequiredEventSchema, McpSigninResolvedEventSchema, StreamEventSchema, TextPartSchema, HookStatusSchema, HookPartSchema, ToolApprovalOutcomeSchema, QuestionOutcomeSchema, ToolCallPartSchema, BackgroundTaskPartSchema, ThinkingPartSchema, ErrorPartSchema, ElicitationPartSchema, CapabilityApprovalPartSchema, McpSigninPartSchema, MemoryRecallPartSchema, PermissionDeniedPartSchema, CompactBoundaryPartSchema, ImagePartSchema, MessagePartSchema, MessageTypeSchema, HistoryToolCallSchema, CompactMetadataSchema, HistoryMessageSchema, CommandEntrySchema, CommandRegistrySchema, FileListQuerySchema, RawFileQuerySchema, FileListResponseSchema, WriteFileRequestSchema, WriteFileResponseSchema, FileEntrySchema, FileTreeQuerySchema, FileTreeResponseSchema, FileContentQuerySchema, FileContentResponseSchema, CreateEntryRequestSchema, CreateEntryResponseSchema, DeleteEntryQuerySchema, RenameEntryRequestSchema, CopyEntryRequestSchema, RevealEntryRequestSchema, DiffBaselineOriginSchema, DiffBaselineQuerySchema, DiffBaselineResponseSchema, AdvanceDiffBaselineRequestSchema, DiffPendingQuerySchema, DiffPendingResponseSchema, DiffBaselineRawQuerySchema, RevertDiffBaselineRequestSchema, FileMutationResponseSchema, WorkbenchSignRequestSchema, WorkbenchSignResponseSchema, WorkbenchProbeRequestSchema, WorkbenchProbeResponseSchema, BrowseDirectoryQuerySchema, DirectoryEntrySchema, BrowseDirectoryResponseSchema, TunnelStatusSchema, HealthResponseSchema, ExecutionDefaultsSchema, ExperimentStateSchema, ServerConfigSchema, ModelTierSchema, ModelOptionSchema, SubagentInfoSchema, GitStatusResponseSchema, GitStatusErrorSchema, ErrorResponseSchema, SessionLockedErrorSchema, TaskStatusSchema, SettableTaskStatusSchema, TaskNameSchema, TaskRunStatusSchema, TaskRunTriggerSchema, TaskSchema, TaskRunSchema, CancelTaskRunResponseSchema, TaskTemplateSchema, TASK_DURATION_PATTERN, TASK_DURATION_MAX, TASK_DESCRIPTION_MAX, CreateTaskRequestSchema, SIDEBAR_TAB_ID_PATTERN, ShapeLiveLayoutCaptureSchema, ForkShapeRequestSchema, UpdateTaskRequestSchema, ListTaskRunsQuerySchema, ConfigPatchRequestSchema, ConfigPatchResponseSchema, UploadResultSchema, UploadResponseSchema, UploadProgressSchema, CanvasMediaSrcSchema, UiCanvasContentSchema, UiPanelIdSchema, UiToastLevelSchema, CELEBRATION_KINDS, CELEBRATION_KIND_SYNONYMS, CelebrationKindSchema, UiCommandTargetSchema, UiCommandSchema, UiCommandEventSchema, UiStateSchema, UiStateReportDocumentSchema, UiStateReportSchema, DevtoolsConsoleLevelSchema, DEVTOOLS_ARGS_MAX_CHARS, DevtoolsConsoleEntrySchema, DevtoolsNetworkEntrySchema, DEVTOOLS_CONSOLE_BATCH_MAX, DEVTOOLS_NETWORK_BATCH_MAX, DEVTOOLS_SCREENSHOT_MAX_CHARS, DevtoolsScreenshotResultSchema, DevtoolsIngestSchema, BrowserTargetSchema, BrowserActCommandSchema, BrowserPageSummarySchema, DEVTOOLS_OUTLINE_MAX_CHARS, DevtoolsActionResultSchema, DevtoolsRecordingUploadSchema;
+var PermissionModeSchema, PermissionModeIdSchema, PermissionStopSchema2, SessionTaskStatusSchema, StreamEventTypeSchema, QuestionOptionSchema, QuestionItemSchema, EffortLevelSchema, SessionOriginSchema, SessionLifecycleSchema, LimitPlanSchema, LimitStateSchema, SessionLimitSchema, ContinueAccountOptionSchema, ContinueOptionsResponseSchema, ContinueSessionRequestSchema, ContinueSessionResponseSchema, WaitForResetRequestSchema, LimitPlanResponseSchema, TrackerItemRefSchema, SessionStartedBySchema, SessionSchema, SessionUpdateResponseSchema, SessionSettingsSchema, StoredSessionSettingsResponseSchema, UpdateSessionRequestSchema, ForkSessionRequestSchema, ReloadPluginsResultSchema, SEED_CONTEXT_MAX_LENGTH, MessageDispositionSchema, DispositionDowngradeReasonSchema, MessageDeliveryOutcomeSchema, InterruptOutcomeSchema, InterruptReasonSchema, InterruptReceiptSchema, QueuedMessageSchema, SendMessageRequestSchema, SendMessageResponseSchema, SessionTriggerResponseSchema, SessionQueueResponseSchema, QueueMoveTargetSchema, UpdateQueuedMessageRequestSchema, UpdateQueuedMessageResponseSchema, DENY_REASON_MAX_LENGTH, ApprovalRequestSchema, BatchApprovalRequestSchema, SubmitAnswersRequestSchema, UI_ACTION_ID_MAX_LENGTH, UI_ACTION_TITLE_MAX_LENGTH, UI_ACTION_PAYLOAD_MAX_LENGTH, UiActionRequestSchema, McpAppPermissionSchema, McpAppResourceRequestSchema, McpAppResourceResponseSchema, ElicitationModeSchema, ElicitationActionSchema, SubmitElicitationRequestSchema, ListSessionsQuerySchema, SessionListWarningSchema, SessionListResponseSchema, RecentSessionsQuerySchema, RecentSessionsResponseSchema, SessionDailyCountsQuerySchema, SessionDailyCountsResponseSchema, CommandsQuerySchema, TextDeltaSchema, ThinkingDeltaSchema, ToolCallStatusSchema, McpAppRefSchema, ToolCallEventSchema, ToolProgressEventSchema, AlwaysAllowScopeSchema, ApprovalEventSchema, QuestionPromptEventSchema, PendingInteractionDTOSchema, ErrorCategorySchema, ErrorEventSchema, ApiRetryEventSchema, DoneEventSchema, TerminalReasonSchema, UsageStateSchema, UsageStatusSchema, SessionStatusEventSchema, ContextUsageCategorySchema, ContextUsageSchema, TaskItemSchema, TaskUpdateEventSchema, RelayReceiptEventSchema, MessageDeliveredEventSchema, RelayMessageEventSchema, BackgroundTaskTypeSchema, BackgroundTaskStatusSchema, BackgroundTaskStartedEventSchema, BackgroundTaskProgressEventSchema, BackgroundTaskDoneEventSchema, SubagentTextDeltaEventSchema, SystemStatusEventSchema, OperationKindSchema, OperationStateSchema, OperationProgressEventShapeSchema, OperationProgressEventSchema, MemoryEntrySchema, MemoryRecallEventSchema, CompactBoundaryEventSchema, sessionImageShape, SessionImageEventSchema, deniedAgentShape, PermissionDeniedEventSchema, PromptSuggestionEventSchema, HookStartedEventSchema, HookProgressEventSchema, HookResponseEventSchema, SdkSessionStateSchema, SessionStateChangedEventSchema, ElicitationPromptEventSchema, ElicitationCompleteEventSchema, InteractionCancelledEventSchema, CapabilityApprovalRequiredEventSchema, CapabilityApprovalResolvedEventSchema, SigninUrlSchema, MCP_SIGNIN_OUTCOMES, McpSigninOutcomeSchema, McpSigninRequiredEventSchema, McpSigninResolvedEventSchema, StreamEventSchema, TextPartSchema, HookStatusSchema, HookPartSchema, ToolApprovalOutcomeSchema, QuestionOutcomeSchema, ToolCallPartSchema, BackgroundTaskPartSchema, ThinkingPartSchema, ErrorPartSchema, ElicitationPartSchema, CapabilityApprovalPartSchema, McpSigninPartSchema, MemoryRecallPartSchema, PermissionDeniedPartSchema, CompactBoundaryPartSchema, ImagePartSchema, MessagePartSchema, MessageTypeSchema, HistoryToolCallSchema, CompactMetadataSchema, HistoryMessageSchema, CommandEntrySchema, CommandRegistrySchema, FileListQuerySchema, RawFileQuerySchema, FileListResponseSchema, WriteFileRequestSchema, WriteFileResponseSchema, FileEntrySchema, FileTreeQuerySchema, FileTreeResponseSchema, FileContentQuerySchema, FileContentResponseSchema, CreateEntryRequestSchema, CreateEntryResponseSchema, DeleteEntryQuerySchema, RenameEntryRequestSchema, CopyEntryRequestSchema, RevealEntryRequestSchema, DiffBaselineOriginSchema, DiffBaselineQuerySchema, DiffBaselineResponseSchema, AdvanceDiffBaselineRequestSchema, DiffPendingQuerySchema, DiffPendingResponseSchema, DiffBaselineRawQuerySchema, RevertDiffBaselineRequestSchema, FileMutationResponseSchema, WorkbenchSignRequestSchema, WorkbenchSignResponseSchema, WorkbenchProbeRequestSchema, WorkbenchProbeResponseSchema, BrowseDirectoryQuerySchema, DirectoryEntrySchema, BrowseDirectoryResponseSchema, TunnelStatusSchema, HealthResponseSchema, ExecutionDefaultsSchema, ExperimentStateSchema, ServerConfigSchema, ModelTierSchema, ModelOptionSchema, SubagentInfoSchema, GitStatusResponseSchema, GitStatusErrorSchema, ErrorResponseSchema, SessionLockedErrorSchema, TaskStatusSchema, SettableTaskStatusSchema, TaskNameSchema, TaskRunStatusSchema, TaskRunTriggerSchema, TaskSchema, TaskRunSchema, CancelTaskRunResponseSchema, TaskTemplateSchema, TASK_DURATION_PATTERN, TASK_DURATION_MAX, TASK_DESCRIPTION_MAX, CreateTaskRequestSchema, SIDEBAR_TAB_ID_PATTERN, ShapeLiveLayoutCaptureSchema, ForkShapeRequestSchema, UpdateTaskRequestSchema, ListTaskRunsQuerySchema, ConfigPatchRequestSchema, ConfigPatchResponseSchema, UploadResultSchema, UploadResponseSchema, UploadProgressSchema, CanvasMediaSrcSchema, UiCanvasContentSchema, UiPanelIdSchema, UiToastLevelSchema, CELEBRATION_KINDS, CELEBRATION_KIND_SYNONYMS, CelebrationKindSchema, UiCommandTargetSchema, UiCommandSchema, UiCommandEventSchema, UiStateSchema, UiStateReportDocumentSchema, UiStateReportSchema, DevtoolsConsoleLevelSchema, DEVTOOLS_ARGS_MAX_CHARS, DevtoolsConsoleEntrySchema, DevtoolsNetworkEntrySchema, DEVTOOLS_CONSOLE_BATCH_MAX, DEVTOOLS_NETWORK_BATCH_MAX, DEVTOOLS_SCREENSHOT_MAX_CHARS, DevtoolsScreenshotResultSchema, DevtoolsIngestSchema, BrowserTargetSchema, BrowserActCommandSchema, BrowserPageSummarySchema, DEVTOOLS_OUTLINE_MAX_CHARS, DevtoolsActionResultSchema, DevtoolsRecordingUploadSchema;
 var init_schemas3 = __esm({
   "../shared/src/schemas.ts"() {
+    "use strict";
     init_zod();
     init_zod_openapi();
     init_additional_context();
@@ -39316,7 +39582,13 @@ var init_schemas3 = __esm({
       /** Why, in plain words. */
       reason: external_exports.string(),
       /** The advisor's badge, when it gave one. */
-      badge: external_exports.enum(["recommended", "reserved"]).optional()
+      badge: external_exports.enum(["recommended", "reserved"]).optional(),
+      /**
+       * `true` when the account may not work in this session's project (spec
+       * `flow-multiproject` §8.4): shown so a person sees why, never pickable,
+       * and `reason` says which rule ("Only for client-app"). Absent otherwise.
+       */
+      notAllowed: external_exports.literal(true).optional()
     }).openapi("ContinueAccountOption");
     ContinueOptionsResponseSchema = external_exports.object({
       /** The session's current plan. */
@@ -39355,6 +39627,26 @@ var init_schemas3 = __esm({
       /** The chat the work runs in: the "Open its chat" target. Null for `this-chat`, or when it is not a DorkOS chat. */
       ownChatSessionId: external_exports.string().nullable()
     }).openapi("TrackerItemRef");
+    SessionStartedBySchema = external_exports.discriminatedUnion("kind", [
+      external_exports.object({
+        kind: external_exports.literal("extension"),
+        /** The extension's id. */
+        extensionId: external_exports.string(),
+        /** Its manifest name, as the first line says it. */
+        extensionName: external_exports.string(),
+        /** Why it was started (1-200). */
+        reason: external_exports.string()
+      }),
+      external_exports.object({
+        kind: external_exports.literal("chat"),
+        /** The chat that started it: the first line's link. */
+        sessionId: external_exports.string(),
+        /** That chat's title, or null when this server cannot name it. */
+        title: external_exports.string().nullable(),
+        /** Why it was started, or null when the chat gave no reason. */
+        reason: external_exports.string().nullable()
+      })
+    ]).openapi("SessionStartedBy");
     SessionSchema = external_exports.object({
       id: external_exports.string().uuid(),
       title: external_exports.string(),
@@ -39493,6 +39785,14 @@ var init_schemas3 = __esm({
        * their own (`via: 'own-chat'`). ABSENT when no run names this session.
        */
       trackerItems: external_exports.array(TrackerItemRefSchema).optional(),
+      /**
+       * Who started this chat, when an extension or another chat did (spec
+       * `flow-multiproject` §7.7). Stamped from the server's own
+       * `session_started_by` row by the session-origin overlays, on the session
+       * routes and the live session list alike. ABSENT for a chat a person
+       * started.
+       */
+      startedBy: SessionStartedBySchema.optional(),
       /**
        * ISO-8601 timestamp of the last message a PERSON sent in this session —
        * the server half of the sidebar's interaction-recency order key
@@ -41263,6 +41563,9 @@ var init_schemas3 = __esm({
             }),
             isAccountRoot: external_exports.boolean().openapi({
               description: "Whether DorkOS can currently find a Claude account here \u2014 the directory exists AND holds a `projects/` directory (the structural check, spec claude-code-accounts D4). Deliberately not named `exists`: a directory that exists without `projects/` reports false. False means it contributes no sessions"
+            }),
+            onlyProjects: external_exports.array(ProjectRefSchema).nullable().optional().openapi({
+              description: 'The projects this account may work in ("Only for client-app"), or null for any project (spec flow-multiproject \xA78). Change it with PUT /api/runtimes/claude-code/accounts/:id/only-projects, never by writing it back through PATCH /api/config. Absent on a server too old to report it'
             })
           })
         ).openapi({ description: "The Claude accounts the operator has registered" }),
@@ -41281,6 +41584,19 @@ var init_schemas3 = __esm({
         }).optional().openapi({
           description: "Present only when the server process's own $CLAUDE_CONFIG_DIR decides where new sessions run (no default account is chosen) AND no row stands for that folder, so resolvedAccountId is absent: the variable and the folder it names. A launch-only override: the default account (Main) never follows it (shared account contract rev 6d)"
         }),
+        defaultAccountOnlyProjects: external_exports.array(ProjectRefSchema).nullable().optional().openapi({
+          description: "The projects Main (this computer's own Claude sign-in, id `default`) may work in, or null for any project (spec flow-multiproject \xA78). Absent on a server too old to report it"
+        }),
+        projectAccounts: external_exports.array(
+          external_exports.object({
+            project: ProjectRefSchema,
+            allow: external_exports.array(external_exports.string()).openapi({
+              description: "The account ids that may work in this project; `default` is Main"
+            })
+          })
+        ).optional().openapi({
+          description: "Each project that limits which accounts may work in it, by project name (spec flow-multiproject \xA78). A project that is not listed allows every account. Change it with PUT /api/runtimes/claude-code/project-accounts. Absent on a server too old to report it"
+        }),
         accountsUnavailable: external_exports.boolean().optional().openapi({
           description: "True when the account registry could NOT be read (the config store threw, or was consulted before it was initialized), so `accounts` is empty because nothing could be learned rather than because nothing is registered. Absent means the list is an answer. A client must not judge an agent or session account reference against an unavailable registry \u2014 an override that cannot be verified is unknown, never wrong"
         }),
@@ -43208,12 +43524,12 @@ function substitutePlaceholders(value) {
   return value;
 }
 function getValueAtPath(value, path53) {
-  let current = value;
+  let current2 = value;
   for (const segment of path53) {
-    if (current === null || typeof current !== "object") return void 0;
-    current = current[segment];
+    if (current2 === null || typeof current2 !== "object") return void 0;
+    current2 = current2[segment];
   }
-  return current;
+  return current2;
 }
 var WHOLE_PLACEHOLDER_PATTERN, PLACEHOLDER_DUMMY_VALUE, WidgetTemplateSchema;
 var init_ui_template = __esm({
@@ -43532,7 +43848,6 @@ async function measurePackageTree(root, limits = PACKAGE_SIZE_LIMITS, { countGit
 var PACKAGE_SIZE_LIMITS, CLONE_SIZE_LIMITS, PackageTooLargeError;
 var init_package_size = __esm({
   "../marketplace/src/package-size.ts"() {
-    "use strict";
     PACKAGE_SIZE_LIMITS = {
       maxTotalBytes: 250 * 1024 * 1024,
       maxEntries: 2e4,
@@ -43725,10 +44040,10 @@ async function readPackageFile(packagePath, relPath2) {
   }
 }
 async function reachedThroughLink(packagePath, relDir) {
-  let current = packagePath;
+  let current2 = packagePath;
   for (const part of path18.normalize(relDir).split(path18.sep)) {
-    current = path18.join(current, part);
-    if ((await fs8.lstat(current)).isSymbolicLink()) return true;
+    current2 = path18.join(current2, part);
+    if ((await fs8.lstat(current2)).isSymbolicLink()) return true;
   }
   return false;
 }
@@ -44972,6 +45287,11 @@ var init_config_disclosure = __esm({
       // The copies a person declined in the inbox (DOR-2517): absolute paths on
       // this machine again, and nothing an agent needs to do its work.
       "extensions.dismissedApprovals": "withhold",
+      // The code sources a person trusts (spec `flow-multiproject` §9.3). Not a
+      // secret, but nothing an agent needs to do its work, and the list says which
+      // code this machine runs without asking.
+      "extensions.trustedSources[].source": "withhold",
+      "extensions.trustedSources[].trustedAt": "withhold",
       "mcp.enabled": "expose",
       "mcp.apiKey": "withhold",
       "mcp.rateLimit.enabled": "expose",
@@ -45046,6 +45366,13 @@ var init_config_disclosure = __esm({
       // (spec claude-account-ui §7.4). Folder paths, the same class as
       // `accounts[].path` above: exposed on purpose, and naming no secret.
       "runtimes.claudeCode.dismissedFolders": "expose",
+      // Which projects each account may work in, and which accounts each project
+      // may use (spec `flow-multiproject` §8): absolute folders on this machine, and
+      // nothing an agent needs. A launch it asks for that the rules refuse is
+      // answered with a sentence naming the project, which is all it can act on.
+      "runtimes.claudeCode.accounts[].onlyProjects": "withhold",
+      "runtimes.claudeCode.defaultAccountOnlyProjects": "withhold",
+      "runtimes.claudeCode.projectAccounts": "withhold",
       // The execution defaults a new session on each runtime starts with. A model id
       // and an effort rung are the same class of thing as `runtimes.default`: they
       // describe HOW work runs here, name no credential and no person, and an agent
@@ -45530,6 +45857,12 @@ var init_config_write_policy = __esm({
       // Their answer to a consent question: a caller that could write it could
       // hide the question from them.
       "extensions.dismissedApprovals": "operator-only",
+      // The code sources a person trusts outright (spec `flow-multiproject` §9.3):
+      // every extension provably from one runs without asking. It decides which
+      // code runs, and trusting a new source is one of the three asks only a
+      // person can answer.
+      "extensions.trustedSources[].source": "operator-only",
+      "extensions.trustedSources[].trustedAt": "operator-only",
       // Whether the external tool endpoint answers, the bearer that gates it, and the
       // rate limits that bound abuse of it.
       "mcp.enabled": "operator-only",
@@ -45645,6 +45978,14 @@ var init_config_write_policy = __esm({
       // accounts a person is shown as addable, so it stays with the roster it
       // curates: only a person curates it, through the dismiss route.
       "runtimes.claudeCode.dismissedFolders": "operator-only",
+      // Which projects each Claude account may work in, and which accounts each
+      // project may use (spec `flow-multiproject` §8). They bound where a credential
+      // may be used, so an agent that could write them could move spend onto an
+      // account the person kept out of that project. Written by a person through
+      // the two `PUT /api/runtimes/claude-code/...` routes behind the person bar.
+      "runtimes.claudeCode.accounts[].onlyProjects": "operator-only",
+      "runtimes.claudeCode.defaultAccountOnlyProjects": "operator-only",
+      "runtimes.claudeCode.projectAccounts": "operator-only",
       // The execution defaults for new sessions on each runtime. Writable, and the
       // operator was asked directly: a model and an effort level are a preference
       // about how work runs, on the same footing as `runtimes.default` right above,
@@ -45793,7 +46134,10 @@ var init_config_write_policy = __esm({
           "runtimes.claudeCode.accounts[].label",
           "runtimes.claudeCode.accounts[].color",
           "runtimes.claudeCode.defaultAccountColor",
-          "runtimes.claudeCode.dismissedFolders"
+          "runtimes.claudeCode.dismissedFolders",
+          "runtimes.claudeCode.accounts[].onlyProjects",
+          "runtimes.claudeCode.defaultAccountOnlyProjects",
+          "runtimes.claudeCode.projectAccounts"
         ]
       },
       {
@@ -45810,6 +46154,8 @@ var init_config_write_policy = __esm({
           "extensions.approvedToRun",
           "extensions.approvedSources",
           "extensions.dismissedApprovals",
+          "extensions.trustedSources[].source",
+          "extensions.trustedSources[].trustedAt",
           "harness.approvedHooks",
           "harness.refusedHooks",
           "runtimes.opencode.binaryPath",
@@ -47286,6 +47632,13 @@ function permissionSeedForOrigin(origin) {
     // binding it was bridged from.
     case "room":
       return origin.externalAuthor ? "none" : "configured-stop-on-insert";
+    // Work an extension started in a brand-new chat in the person's project.
+    // The id was minted for this start a moment earlier, so there is no row a
+    // person's earlier settings change could have made, and "on insert" is
+    // the honest name for it: the operator's configured stop, the same default
+    // a new chat of their own gets (spec `full-power-defaults`).
+    case "extension-start":
+      return "configured-stop-on-insert";
     // Everything below seeds nothing, for two different reasons.
     //
     // A schedule's power is already decided and already stored, on the schedule
@@ -54425,38 +54778,48 @@ var sessionMetadata, sessionMessageQueue, sessionStagedContext;
 var init_sessions = __esm({
   "../db/src/schema/sessions.ts"() {
     "use strict";
+    init_drizzle_orm();
     init_sqlite_core();
-    sessionMetadata = sqliteTable("session_metadata", {
-      // --- Immutable identity (first-write-wins; ADR-0255) ---
-      sessionId: text("session_id").primaryKey(),
-      // NULL = this session has not started yet, so nothing has said which runtime
-      // owns it. A settings change made before the first message creates the row
-      // (that is E3's pre-launch picker), and a preference is not a binding: the
-      // first turn carries the person's runtime choice and is what claims the row
-      // (DOR-812). Readers resolve an unbound row exactly like a row-less one — by
-      // inference, unpersisted — so nothing is blocked in the meantime.
-      runtime: text("runtime"),
-      agentPath: text("agent_path"),
-      // What started the session (`TurnOrigin.kind`), written by the same
-      // first-write-wins statement that binds the runtime and never overwritten.
-      // Server-held, unlike the best-effort `Session.origin`, so it is what decides
-      // whether a limited session may carry its work to another account (spec
-      // `claude-account-fleet` D9). NULL = bound before this column existed.
-      launchOrigin: text("launch_origin"),
-      // The episode `resetsAt` (else `since`) of the last usage limit core resumed
-      // this session from by itself (spec `claude-account-fleet` D9 "Wait, then
-      // resume by itself"): at most one automatic resume per window reset. Kept
-      // here, not on the `session_limits` row, because the resumed turn's own
-      // `turn_start` deletes that row. NULL = never resumed automatically.
-      lastAutoResumeFor: text("last_auto_resume_for"),
-      createdAt: text("created_at").notNull(),
-      // --- Mutable per-session settings (last-write-wins; ADR-0260) ---
-      // NULL = "no explicit preference; use the runtime's default."
-      permissionMode: text("permission_mode"),
-      model: text("model"),
-      effort: text("effort"),
-      fastMode: integer2("fast_mode", { mode: "boolean" })
-    });
+    sessionMetadata = sqliteTable(
+      "session_metadata",
+      {
+        // --- Immutable identity (first-write-wins; ADR-0255) ---
+        sessionId: text("session_id").primaryKey(),
+        // NULL = this session has not started yet, so nothing has said which runtime
+        // owns it. A settings change made before the first message creates the row
+        // (that is E3's pre-launch picker), and a preference is not a binding: the
+        // first turn carries the person's runtime choice and is what claims the row
+        // (DOR-812). Readers resolve an unbound row exactly like a row-less one — by
+        // inference, unpersisted — so nothing is blocked in the meantime.
+        runtime: text("runtime"),
+        agentPath: text("agent_path"),
+        // What started the session (`TurnOrigin.kind`), written by the same
+        // first-write-wins statement that binds the runtime and never overwritten.
+        // Server-held, unlike the best-effort `Session.origin`, so it is what decides
+        // whether a limited session may carry its work to another account (spec
+        // `claude-account-fleet` D9). NULL = bound before this column existed.
+        launchOrigin: text("launch_origin"),
+        // The episode `resetsAt` (else `since`) of the last usage limit core resumed
+        // this session from by itself (spec `claude-account-fleet` D9 "Wait, then
+        // resume by itself"): at most one automatic resume per window reset. Kept
+        // here, not on the `session_limits` row, because the resumed turn's own
+        // `turn_start` deletes that row. NULL = never resumed automatically.
+        lastAutoResumeFor: text("last_auto_resume_for"),
+        createdAt: text("created_at").notNull(),
+        // --- Mutable per-session settings (last-write-wins; ADR-0260) ---
+        // NULL = "no explicit preference; use the runtime's default."
+        permissionMode: text("permission_mode"),
+        model: text("model"),
+        effort: text("effort"),
+        fastMode: integer2("fast_mode", { mode: "boolean" })
+      },
+      // `listSessionIdsForAgentPath` answers "which sessions belong to this agent"
+      // for every agent's session list, and there is one row per session ever
+      // started, so without this it read the whole table per request.
+      (t2) => [
+        index("session_metadata_agent_path_idx").on(t2.agentPath).where(sql`${t2.agentPath} IS NOT NULL`)
+      ]
+    );
     sessionMessageQueue = sqliteTable(
       "session_message_queue",
       {
@@ -54550,9 +54913,11 @@ var init_session_events = __esm({
         payload: text("payload").notNull(),
         createdAt: text("created_at").notNull()
       },
+      // The primary key is the only index: it already orders one session's events by
+      // seq. A second `(session_id, seq)` index sat here until the index audit
+      // (migration 0134) and cost every event written a second b-tree insert.
       (t2) => ({
-        pk: primaryKey({ columns: [t2.sessionId, t2.seq] }),
-        bySession: index("session_events_session_idx").on(t2.sessionId, t2.seq)
+        pk: primaryKey({ columns: [t2.sessionId, t2.seq] })
       })
     );
   }
@@ -54727,6 +55092,45 @@ var init_session_context = __esm({
   }
 });
 
+// ../db/src/schema/session/session-started-by.ts
+var sessionStartedBy;
+var init_session_started_by = __esm({
+  "../db/src/schema/session/session-started-by.ts"() {
+    "use strict";
+    init_drizzle_orm();
+    init_sqlite_core();
+    sessionStartedBy = sqliteTable(
+      "session_started_by",
+      {
+        /** The started chat's canonical id. */
+        sessionId: text("session_id").primaryKey(),
+        /** What started it. */
+        kind: text("kind", { enum: ["extension", "chat"] }).notNull(),
+        /** The extension that started it, for `kind = 'extension'`. */
+        extensionId: text("extension_id"),
+        /** The chat that started it, for `kind = 'chat'`. */
+        startedBySessionId: text("started_by_session_id"),
+        /** The extension at the root of the chain, or NULL when none. */
+        originExtensionId: text("origin_extension_id"),
+        /** Why it was started, in plain words (≤ 200), or NULL when none was given. */
+        reason: text("reason"),
+        /**
+         * A chat carried to another account from a started one (a move, not new
+         * work): it keeps the chain, and it is never refused by, nor counted in,
+         * the hourly limit.
+         */
+        carried: integer2("carried", { mode: "boolean" }).notNull().default(false),
+        /** When it was started (ISO 8601). */
+        createdAt: text("created_at").notNull()
+      },
+      (table2) => [
+        index("session_started_by_origin_created_idx").on(table2.originExtensionId, table2.createdAt),
+        check2("session_started_by_kind", sql`${table2.kind} IN ('extension', 'chat')`)
+      ]
+    );
+  }
+});
+
 // ../db/src/schema/workspace.ts
 var workspaces;
 var init_workspace2 = __esm({
@@ -54963,7 +55367,7 @@ var init_unclaimed_chats = __esm({
 });
 
 // ../db/src/schema/connectors/connections.ts
-var connectorProviderInstances, connections, connectorOperationRevisions, connectionOperationGrants, EVERY_AGENT_GRANT_SUBJECT_ID, agentConnectionAttachments, sessionConnectionOverrides, connectorLegacyAgentRevocations, connectorApplicationMigrations;
+var connectorProviderInstances, connections, connectorOperationRevisions, connectionOperationGrants, EVERY_AGENT_GRANT_SUBJECT_ID, connectionAccessLevels, connectionLevelFollows, agentConnectionAttachments, sessionConnectionOverrides, connectorLegacyAgentRevocations, connectorApplicationMigrations;
 var init_connections = __esm({
   "../db/src/schema/connectors/connections.ts"() {
     "use strict";
@@ -55120,6 +55524,36 @@ var init_connections = __esm({
       ]
     );
     EVERY_AGENT_GRANT_SUBJECT_ID = "every_agent";
+    connectionAccessLevels = sqliteTable(
+      "connection_access_levels",
+      {
+        subjectType: text("subject_type", { enum: ["agent", "every_agent"] }).notNull(),
+        subjectId: text("subject_id").notNull(),
+        /** The one agent a row speaks for; null only on an `every_agent` row. */
+        agentId: text("agent_id"),
+        connectionId: text("connection_id").notNull().references(() => connections.id, { onDelete: "cascade" }),
+        level: text("level", { enum: ["read", "read-write"] }).notNull(),
+        createdBy: text("created_by").notNull(),
+        updatedAt: text("updated_at").notNull(),
+        /**
+         * The hosted command DorkOS staged on its own to follow the app, while it
+         * is the latest one for this level. Hosted authority refusing THAT command
+         * keeps the level (the next pass sends it again); refusing a change the
+         * owner made ends it. Null once the owner chooses again.
+         */
+        followerCommandId: text("follower_command_id")
+      },
+      (table2) => [
+        primaryKey({ columns: [table2.subjectType, table2.subjectId, table2.connectionId] }),
+        index("connection_access_levels_agent_idx").on(table2.agentId),
+        index("connection_access_levels_connection_idx").on(table2.connectionId)
+      ]
+    );
+    connectionLevelFollows = sqliteTable("connection_level_follows", {
+      connectionId: text("connection_id").primaryKey().references(() => connections.id, { onDelete: "cascade" }),
+      followedAt: text("followed_at").notNull(),
+      appVersion: text("app_version").notNull()
+    });
     agentConnectionAttachments = sqliteTable(
       "agent_connection_attachments",
       {
@@ -56142,7 +56576,14 @@ var init_rooms = __esm({
         /** The `(member, room)` read cursor — the highest `seq` this member has seen. */
         lastReadSeq: integer2("last_read_seq").notNull().default(0)
       },
-      (table2) => [primaryKey({ columns: [table2.roomId, table2.authorId] })]
+      (table2) => [
+        primaryKey({ columns: [table2.roomId, table2.authorId] }),
+        // "Every room this author is in" (`listMembershipsFor`), asked by the room
+        // directory, room search and the member directory on every request. The
+        // primary key leads with room_id, so without this each call read the whole
+        // table, and a mirrored Community room adds a row per remote author.
+        index("idx_room_members_author").on(table2.authorId)
+      ]
     );
     roomDepartedSeats = sqliteTable(
       "room_departed_seats",
@@ -56273,7 +56714,17 @@ var init_rooms = __esm({
         // hot path, inside the `seq`-allocating transaction — pays one more b-tree
         // write. Taken because the read it serves runs on every room-list request,
         // where the alternative is a full scan of the largest table in the schema.
-        index("idx_room_entries_author_room").on(table2.authorId, table2.roomId)
+        //
+        // **`thread_root_entry_id` is the third column for `listThreadsForMember`**
+        // (migration 0134). Its "did this author post in this thread" EXISTS runs
+        // once per reply in every room, and with two columns the planner (no
+        // statistics, as above) answered it from `(author_id, room_id)` and read
+        // every row the author ever wrote in that room, per reply: 10.9 seconds for
+        // one thread list on a 500,000-entry install. With the third column the
+        // check is one covering lookup, and the whole list went from 137M to 4.3M
+        // VM steps (10.9 s to 0.4 s). Widening this index
+        // rather than adding one keeps the insert cost where it was.
+        index("idx_room_entries_author_room").on(table2.authorId, table2.roomId, table2.threadRootEntryId)
       ]
     );
     roomEntryReactions = sqliteTable(
@@ -56654,7 +57105,11 @@ var init_read_cursors = __esm({
         // it: an interpolated `0` becomes a bind parameter, and drizzle-kit writes
         // the marker into the migration file, where `>= ?` is a syntax error the
         // first time the migration runs.
-        check2("read_cursors_last_read_seq", sql`${table2.lastReadSeq} >= ${sql.raw("0")}`)
+        check2("read_cursors_last_read_seq", sql`${table2.lastReadSeq} >= ${sql.raw("0")}`),
+        // Everyone's cursor on one thread (`listForThread`), read each time a room
+        // opens. The primary key leads with the person, and every session a person
+        // opens adds a row, so without this each room open read the whole table.
+        index("idx_read_cursors_thread").on(table2.threadKind, table2.threadId)
       ]
     );
   }
@@ -56785,6 +57240,7 @@ var communityRoomMirrors, communityMirrorAccess, communityMirrorEntries, communi
 var init_community_mirrors = __esm({
   "../db/src/schema/communities/community-mirrors.ts"() {
     "use strict";
+    init_drizzle_orm();
     init_sqlite_core();
     communityRoomMirrors = sqliteTable(
       "community_room_mirrors",
@@ -56860,8 +57316,7 @@ var init_community_mirrors = __esm({
           table2.localRoomId,
           table2.remoteSeq
         ),
-        uniqueIndex("community_mirror_entries_local_entry_unique").on(table2.localEntryId),
-        index("idx_community_mirror_entries_room_seq").on(table2.localRoomId, table2.remoteSeq)
+        uniqueIndex("community_mirror_entries_local_entry_unique").on(table2.localEntryId)
       ]
     );
     communityMirrorRedactions = sqliteTable(
@@ -56909,7 +57364,12 @@ var init_community_mirrors = __esm({
           table2.idempotencyKey
         ),
         index("idx_community_outbox_state_expiry").on(table2.state, table2.expiresAt),
-        index("idx_community_outbox_ref_state").on(table2.communityRef, table2.state)
+        index("idx_community_outbox_ref_state").on(table2.communityRef, table2.state),
+        // The local copies of one Community entry (`localCopiesOf`), asked once per
+        // redaction the Community sends. The outbox is never pruned, and the other
+        // indexes stop at community_ref, so each redaction read every post this
+        // install ever delivered to that Community.
+        index("idx_community_outbox_remote_entry").on(table2.communityRef, table2.remoteRoomId, table2.remoteEntryId).where(sql`${table2.remoteEntryId} IS NOT NULL`)
       ]
     );
     communityEntryOrigins = sqliteTable(
@@ -57456,6 +57916,8 @@ __export(schema_exports, {
   communityMirrorRedactions: () => communityMirrorRedactions,
   communityOutbox: () => communityOutbox,
   communityRoomMirrors: () => communityRoomMirrors,
+  connectionAccessLevels: () => connectionAccessLevels,
+  connectionLevelFollows: () => connectionLevelFollows,
   connectionOperationGrants: () => connectionOperationGrants,
   connections: () => connections,
   connectorAgentRequests: () => connectorAgentRequests,
@@ -57523,6 +57985,7 @@ __export(schema_exports, {
   sessionMetadata: () => sessionMetadata,
   sessionRelations: () => sessionRelations,
   sessionStagedContext: () => sessionStagedContext,
+  sessionStartedBy: () => sessionStartedBy,
   unclaimedChats: () => unclaimedChats,
   user: () => user,
   userRelations: () => userRelations,
@@ -57547,6 +58010,7 @@ var init_schema2 = __esm({
     init_session_limits();
     init_session_limit_history();
     init_session_context();
+    init_session_started_by();
     init_workspace2();
     init_auth();
     init_unclaimed_chats();
@@ -57695,6 +58159,18 @@ var init_session_limit_store = __esm({
   }
 });
 
+// ../../apps/server/src/services/session/origin/session-started-by-store.ts
+function getSessionStartedByStore() {
+  return current;
+}
+var current;
+var init_session_started_by_store = __esm({
+  "../../apps/server/src/services/session/origin/session-started-by-store.ts"() {
+    "use strict";
+    init_src2();
+  }
+});
+
 // ../../node_modules/.pnpm/@opentelemetry+api@1.9.1/node_modules/@opentelemetry/api/build/esm/version.js
 var VERSION;
 var init_version3 = __esm({
@@ -59715,6 +60191,7 @@ var init_runtime_registry = __esm({
     init_src2();
     init_logger();
     init_session_limit_store();
+    init_session_started_by_store();
     init_observability();
     BOUND_RUNTIME_CHUNK_SIZE = 500;
     RuntimeNotRegisteredError = class extends Error {
@@ -60322,6 +60799,15 @@ var init_runtime_registry = __esm({
             err: err instanceof Error ? err.message : String(err)
           });
         }
+        try {
+          getSessionStartedByStore()?.move(fromId, toId);
+        } catch (err) {
+          logger.warn("[RuntimeRegistry] could not move who started a session", {
+            fromId,
+            toId,
+            err: err instanceof Error ? err.message : String(err)
+          });
+        }
         const source = db.select().from(sessionMetadata).where(eq(sessionMetadata.sessionId, fromId)).get();
         if (!source) return;
         const destination = db.select().from(sessionMetadata).where(eq(sessionMetadata.sessionId, toId)).get();
@@ -62262,6 +62748,58 @@ var init_task_origin_overlay = __esm({
   }
 });
 
+// ../../apps/server/src/services/session/origin/started-by-origin-overlay.ts
+function rememberTitle(session2) {
+  if (!session2.title) return;
+  knownTitles.delete(session2.id);
+  knownTitles.set(session2.id, session2.title);
+  if (knownTitles.size > TITLE_MEMORY) {
+    const oldest = knownTitles.keys().next().value;
+    if (oldest !== void 0) knownTitles.delete(oldest);
+  }
+}
+function toStartedBy(record2, nameOf, titleOf) {
+  if (record2.kind === "extension") {
+    if (!record2.extensionId) return null;
+    return {
+      kind: "extension",
+      extensionId: record2.extensionId,
+      extensionName: nameOf(record2.extensionId),
+      reason: record2.reason ?? ""
+    };
+  }
+  if (!record2.startedBySessionId) return null;
+  return {
+    kind: "chat",
+    sessionId: record2.startedBySessionId,
+    title: titleOf(record2.startedBySessionId),
+    reason: record2.reason
+  };
+}
+function applyStartedByOverlay(sessions, resolveStartedBy, nameOf) {
+  if (sessions.length === 0) return;
+  for (const session2 of sessions) rememberTitle(session2);
+  if (!resolveStartedBy) return;
+  const starts = resolveStartedBy(sessions.map((s2) => s2.id));
+  if (starts.size === 0) return;
+  const titleOf = (id) => knownTitles.get(id) ?? null;
+  for (const session2 of sessions) {
+    const record2 = starts.get(session2.id);
+    if (!record2) continue;
+    const startedBy = toStartedBy(record2, nameOf ?? ((id) => id), titleOf);
+    if (!startedBy) continue;
+    session2.startedBy = startedBy;
+  }
+}
+var TITLE_MEMORY, knownTitles;
+var init_started_by_origin_overlay = __esm({
+  "../../apps/server/src/services/session/origin/started-by-origin-overlay.ts"() {
+    "use strict";
+    TITLE_MEMORY = 2e3;
+    knownTitles = /* @__PURE__ */ new Map();
+  }
+});
+
 // ../../apps/server/src/services/session/origin/session-origin-overlays.ts
 function sessionOriginOverlaySteps(resolvers) {
   return [
@@ -62272,6 +62810,10 @@ function sessionOriginOverlaySteps(resolvers) {
     {
       name: "Pulse task origin",
       apply: (sessions) => applyTaskOriginOverlay(sessions, resolvers.resolveTaskOrigins)
+    },
+    {
+      name: "started by",
+      apply: (sessions) => applyStartedByOverlay(sessions, resolvers.resolveStartedBy, resolvers.extensionNameOf)
     }
   ];
 }
@@ -62280,6 +62822,7 @@ var init_session_origin_overlays = __esm({
     "use strict";
     init_room_origin_overlay();
     init_task_origin_overlay();
+    init_started_by_origin_overlay();
   }
 });
 
@@ -62961,6 +63504,18 @@ var init_project_registry = __esm({
           this.listeners.delete(listener);
         };
       }
+      /**
+       * The root of a named folder, with the boundary applied to both ends, and
+       * nothing recorded: no `reported` row, no reporter, no cap slot. For a caller
+       * that only accepts projects already known (starting work, spec §7.7), where
+       * a refusal must leave no trace.
+       *
+       * @param dir - Any folder.
+       * @returns The canonical root, null (no repository), or `'outside'`.
+       */
+      rootWithin(dir) {
+        return this.boundedRoot(dir);
+      }
       /** The root of a named folder, with the boundary applied to both ends. */
       async boundedRoot(dir) {
         let checked;
@@ -63015,8 +63570,8 @@ var init_project_registry = __esm({
       }
       /** Record that an extension named a root; persisted first, then kept. */
       addReporter(root, extensionId, kind) {
-        const current = this.reporters.get(root)?.get(extensionId);
-        if (current === "report" || current === kind) return;
+        const current2 = this.reporters.get(root)?.get(extensionId);
+        if (current2 === "report" || current2 === kind) return;
         const reporter = {
           root,
           extensionId,
@@ -63676,6 +64231,68 @@ var init_claude_config_env_lock = __esm({
   }
 });
 
+// ../../apps/server/src/services/core/usage/account-eligibility.ts
+var init_account_eligibility = __esm({
+  "../../apps/server/src/services/core/usage/account-eligibility.ts"() {
+    "use strict";
+    init_canonical_directory();
+    init_account_usage();
+    init_config_schema();
+    init_project_schemas();
+    init_project_registry();
+  }
+});
+
+// ../../apps/server/src/services/core/usage/account-advisor.ts
+var RankingRowSchema, RankingSchema, LimitedPlanSchema, CarryOverSeedSchema;
+var init_account_advisor = __esm({
+  "../../apps/server/src/services/core/usage/account-advisor.ts"() {
+    "use strict";
+    init_zod();
+    init_schemas3();
+    init_logger();
+    RankingRowSchema = external_exports.object({
+      runtime: external_exports.string().min(1).optional(),
+      id: external_exports.string().min(1),
+      eligible: external_exports.boolean(),
+      reason: external_exports.string().trim().min(1),
+      badge: external_exports.enum(["recommended", "reserved"]).optional()
+    });
+    RankingSchema = external_exports.object({
+      accounts: external_exports.array(external_exports.unknown()),
+      recommendedId: external_exports.string().nullable()
+    });
+    LimitedPlanSchema = external_exports.discriminatedUnion("mode", [
+      external_exports.object({ mode: external_exports.literal("auto"), target: external_exports.string().min(1), delaySeconds: external_exports.number() }),
+      external_exports.object({ mode: external_exports.literal("wait"), resumeAt: external_exports.iso.datetime({ offset: true }).optional() }),
+      external_exports.object({ mode: external_exports.literal("ask") })
+    ]);
+    CarryOverSeedSchema = external_exports.object({
+      seedContext: external_exports.string().min(1).max(SEED_CONTEXT_MAX_LENGTH),
+      prompt: external_exports.string().min(1).optional()
+    });
+  }
+});
+
+// ../../apps/server/src/services/core/usage/current-usage-store.ts
+var init_current_usage_store = __esm({
+  "../../apps/server/src/services/core/usage/current-usage-store.ts"() {
+    "use strict";
+  }
+});
+
+// ../../apps/server/src/services/core/usage/account-ranking.ts
+var init_account_ranking = __esm({
+  "../../apps/server/src/services/core/usage/account-ranking.ts"() {
+    "use strict";
+    init_account_usage();
+    init_account_advisor();
+    init_config_manager();
+    init_account_eligibility();
+    init_current_usage_store();
+  }
+});
+
 // ../../apps/server/src/services/core/usage/runtime-accounts.ts
 import path29 from "node:path";
 function expandAccountPath(dir, home2) {
@@ -63711,6 +64328,9 @@ var init_claude_config_dir = __esm({
     init_config_manager();
     init_account_usage();
     init_claude_config_env_lock();
+    init_canonical_directory();
+    init_account_eligibility();
+    init_account_ranking();
     init_runtime_accounts();
   }
 });
@@ -63760,6 +64380,33 @@ function defaultAccountColorRefusal(patch) {
     "runtimes.claudeCode.defaultAccountColor: must be a lowercase #rrggbb color, or null for the default."
   ];
 }
+function accountRulesRefusal(patch) {
+  const runtimes = patch.runtimes;
+  if (!isRecord(runtimes)) return null;
+  const claudeCode = runtimes.claudeCode;
+  if (!isRecord(claudeCode)) return null;
+  const details = [];
+  if ("defaultAccountOnlyProjects" in claudeCode && !StrictRootListSchema.safeParse(claudeCode.defaultAccountOnlyProjects).success) {
+    details.push(
+      "runtimes.claudeCode.defaultAccountOnlyProjects: must be a list of project folders, or null for any project."
+    );
+  }
+  if ("projectAccounts" in claudeCode && !StrictProjectAccountsSchema.safeParse(claudeCode.projectAccounts).success) {
+    details.push(
+      'runtimes.claudeCode.projectAccounts: each project folder must map to { "allow": [account ids] }.'
+    );
+  }
+  if (Array.isArray(claudeCode.accounts)) {
+    claudeCode.accounts.forEach((row, index2) => {
+      if (!isRecord(row) || !("onlyProjects" in row)) return;
+      if (StrictRootListSchema.safeParse(row.onlyProjects).success) return;
+      details.push(
+        `runtimes.claudeCode.accounts.${index2}.onlyProjects: must be a list of project folders, or null for any project.`
+      );
+    });
+  }
+  return details.length > 0 ? details : null;
+}
 function withReadableLabel(row) {
   return typeof row.label === "string" || row.label === null ? row : { ...row, label: null };
 }
@@ -63795,11 +64442,18 @@ function planClaudeAccountWrite(stored, patched, seen) {
   ).map(({ row }) => withReadableLabel(row));
   return { ok: true, accounts: [...merged, ...kept], unlisted };
 }
+var StrictRootListSchema, StrictProjectAccountsSchema;
 var init_claude_account_patch = __esm({
   "../../apps/server/src/services/core/operator/claude-account-patch.ts"() {
     "use strict";
+    init_zod();
     init_account_usage();
     init_config_schema();
+    StrictRootListSchema = external_exports.array(external_exports.string().min(1)).nullable();
+    StrictProjectAccountsSchema = external_exports.record(
+      external_exports.string().min(1),
+      external_exports.object({ allow: external_exports.array(external_exports.string().min(1)) }).strict()
+    );
   }
 });
 
@@ -63886,12 +64540,14 @@ function applyConfigPatch(patch) {
   const patchObj = taken.patch;
   const colorRefusal = defaultAccountColorRefusal(patchObj);
   if (colorRefusal) return { ok: false, error: "Validation failed", details: colorRefusal };
-  const current = configManager.getAll();
-  const merged = deepMerge(current, patchObj);
+  const rulesRefusal = accountRulesRefusal(patchObj);
+  if (rulesRefusal) return { ok: false, error: "Validation failed", details: rulesRefusal };
+  const current2 = configManager.getAll();
+  const merged = deepMerge(current2, patchObj);
   settleLegacyAccountAlias(merged, patchObj);
   const patchedClaude = patchObj.runtimes?.claudeCode;
   const namesAccounts = isPlainObject5(patchedClaude) && "accounts" in patchedClaude;
-  const storedAccounts = current.runtimes?.claudeCode?.accounts;
+  const storedAccounts = current2.runtimes?.claudeCode?.accounts;
   const accountPlan = planClaudeAccountWrite(
     storedAccounts,
     namesAccounts ? patchedClaude.accounts : void 0,
@@ -63945,7 +64601,7 @@ function applyConfigPatch(patch) {
       configManager.set(configKey, validated[configKey]);
     }
   }
-  if (claudeAccountsChanged(current.runtimes, validated.runtimes)) {
+  if (claudeAccountsChanged(current2.runtimes, validated.runtimes)) {
     if (applyClaudeAccountChange) {
       applyClaudeAccountChange();
     } else {
@@ -63954,7 +64610,7 @@ function applyConfigPatch(patch) {
       );
     }
   }
-  return { ok: true, before: current, config: configManager.getAll(), warnings };
+  return { ok: true, before: current2, config: configManager.getAll(), warnings };
 }
 var DANGEROUS_KEYS, applyClaudeAccountChange, LOGGED_PATH_LIMIT, MAX_SEGMENT_CHARS, PLAIN_SEGMENT, RESIDUAL_UNSAFE;
 var init_config_patch = __esm({
@@ -63981,13 +64637,13 @@ function asRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
 function readPath2(patch, path53) {
-  let current = patch;
+  let current2 = patch;
   for (const key of path53.split(".")) {
-    const record2 = asRecord(current);
+    const record2 = asRecord(current2);
     if (!record2) return void 0;
-    current = record2[key];
+    current2 = record2[key];
   }
-  return current;
+  return current2;
 }
 function hasStandingAutonomyAck() {
   const ui = configManager?.get("ui");
@@ -64057,12 +64713,12 @@ __export(config_write_exports, {
   onTrustStopChange: () => onTrustStopChange
 });
 function leafAt(config3, path53) {
-  let current = config3;
+  let current2 = config3;
   for (const key of path53) {
-    if (current === null || typeof current !== "object") return null;
-    current = current[key];
+    if (current2 === null || typeof current2 !== "object") return null;
+    current2 = current2[key];
   }
-  return typeof current === "string" ? current : null;
+  return typeof current2 === "string" ? current2 : null;
 }
 function onTrustStopChange(listener) {
   trustStopListener = listener;
@@ -71066,7 +71722,7 @@ var init_src3 = __esm({
 });
 
 // ../harness/src/adopt/refusals.ts
-function joinNames(items) {
+function joinNames2(items) {
   if (items.length <= 1) return items[0] ?? "";
   return `${items.slice(0, -1).join(", ")} and ${items[items.length - 1]}`;
 }
@@ -71081,7 +71737,7 @@ var init_refusals = __esm({
     CLAUDE_PLUGIN_ROOT = "${CLAUDE_PLUGIN_ROOT}";
     ADOPT_SENTENCES = {
       /** R1, and there is no such skill anywhere adopt looked. */
-      S2: (name, roots) => `There is no skill called "${name}" in ${joinNames([...roots])}. Run dorkos harness sync --check to see what is here.`,
+      S2: (name, roots) => `There is no skill called "${name}" in ${joinNames2([...roots])}. Run dorkos harness sync --check to see what is here.`,
       /** R1, and the name is already in the canonical layer as well. */
       S2b: (name, source) => `"${name}" is already in .agents/skills, where every agent reads it. The copy in ${source} is a second one that gets in the way \u2014 delete one of them.`,
       /** R1, and the name is declared in `manifest.claudeOnlySkills`. */
@@ -71269,11 +71925,11 @@ function notOnAllowlistReason(name, verdict) {
     case "body-token":
       return ADOPT_SENTENCES.S7b(name);
     case "claude-field":
-      return ADOPT_SENTENCES.S7(name, joinNames(verdict.fields));
+      return ADOPT_SENTENCES.S7(name, joinNames2(verdict.fields));
     case "dorkos-field":
-      return ADOPT_SENTENCES.S7d(name, joinNames(verdict.fields));
+      return ADOPT_SENTENCES.S7d(name, joinNames2(verdict.fields));
     default:
-      return ADOPT_SENTENCES.S7c(name, joinNames(verdict.fields));
+      return ADOPT_SENTENCES.S7c(name, joinNames2(verdict.fields));
   }
 }
 function declarationReason(verdict) {
@@ -71282,11 +71938,11 @@ function declarationReason(verdict) {
     case "body-token":
       return ADOPT_DECLARATION_REASONS.bodyToken();
     case "claude-field":
-      return ADOPT_DECLARATION_REASONS.claudeFields(joinNames(verdict.fields));
+      return ADOPT_DECLARATION_REASONS.claudeFields(joinNames2(verdict.fields));
     case "dorkos-field":
-      return ADOPT_DECLARATION_REASONS.dorkosFields(joinNames(verdict.fields));
+      return ADOPT_DECLARATION_REASONS.dorkosFields(joinNames2(verdict.fields));
     default:
-      return ADOPT_DECLARATION_REASONS.unknownFields(joinNames(verdict.fields));
+      return ADOPT_DECLARATION_REASONS.unknownFields(joinNames2(verdict.fields));
   }
 }
 var CLAUDE_SKILLS_ROOT;
@@ -73101,7 +73757,7 @@ function harnessesThatCannotSee(root, enabled3) {
 function adoptableSentence(input4) {
   const { root, names, cannotSee, projectPath } = input4;
   if (names.length === 0 || cannotSee.length === 0) return "";
-  const tools = joinNames(cannotSee.map((harness) => HARNESS_LABELS[harness]));
+  const tools = joinNames2(cannotSee.map((harness) => HARNESS_LABELS[harness]));
   const project2 = projectPath === void 0 ? "" : ` --project ${projectPath}`;
   if (names.length === 1) {
     return `1 skill lives only in ${root} and ${tools} cannot see it \u2014 dorkos harness adopt ${names[0]}${project2} moves it`;
@@ -73164,15 +73820,15 @@ function viaOf(root, abs) {
 function ascendLevels(root, cwd, stopAtWorktree) {
   const rel = relative7(root, cwd);
   const inside = rel === "" || !rel.startsWith("..") && !isAbsolute4(rel);
-  let current = inside ? cwd : root;
+  let current2 = inside ? cwd : root;
   const levels2 = [];
   for (; ; ) {
-    levels2.push(current);
-    if (stopAtWorktree && existsSync13(join36(current, ".git"))) break;
-    if (current === root) break;
-    const parent = resolve6(current, "..");
-    if (parent === current) break;
-    current = parent;
+    levels2.push(current2);
+    if (stopAtWorktree && existsSync13(join36(current2, ".git"))) break;
+    if (current2 === root) break;
+    const parent = resolve6(current2, "..");
+    if (parent === current2) break;
+    current2 = parent;
   }
   return levels2;
 }
@@ -73569,7 +74225,7 @@ __export(src_exports, {
   isJunctionAt: () => isJunctionAt,
   isPathIgnored: () => isPathIgnored,
   isProjectScoped: () => isProjectScoped,
-  joinNames: () => joinNames,
+  joinNames: () => joinNames2,
   junctionCommitWarnings: () => junctionCommitWarnings,
   listAuthoredSkills: () => listAuthoredSkills,
   listSkillDirs: () => listSkillDirs,
@@ -75081,9 +75737,9 @@ var init_marketplace_cache = __esm({
       async writeFetchStatus(marketplaceName, status) {
         const file2 = join45(this.marketplaceDir(marketplaceName), LAST_CHECK_FILENAME);
         await withFileLock(file2, async (write) => {
-          const current = await this.readFetchStatus(marketplaceName);
-          if (current && current.startedAt > status.startedAt) return;
-          const next = !status.ok && status.packageCount === void 0 && current?.packageCount !== void 0 ? { ...status, packageCount: current.packageCount } : status;
+          const current2 = await this.readFetchStatus(marketplaceName);
+          if (current2 && current2.startedAt > status.startedAt) return;
+          const next = !status.ok && status.packageCount === void 0 && current2?.packageCount !== void 0 ? { ...status, packageCount: current2.packageCount } : status;
           await write(`${JSON.stringify(next)}
 `);
         });
@@ -78654,7 +79310,7 @@ async function runMarketplaceOutdated(args) {
   const outdated = result2.checks.filter((c3) => c3.status === "update-available");
   const linked = result2.checks.filter((c3) => c3.linked === true);
   const unknown2 = result2.checks.filter((c3) => c3.status === "unknown" && c3.linked !== true);
-  const current = result2.checks.filter((c3) => c3.status === "current");
+  const current2 = result2.checks.filter((c3) => c3.status === "current");
   const code = outdated.length > 0 ? OUTDATED_EXIT.outdated : unknown2.length > 0 ? OUTDATED_EXIT.unknown : OUTDATED_EXIT.current;
   if (args.json) {
     printJson({ outdated, unknown: unknown2, linked });
@@ -78665,7 +79321,7 @@ async function runMarketplaceOutdated(args) {
     return code;
   }
   if (code === OUTDATED_EXIT.current && linked.length === 0) {
-    const n2 = current.length;
+    const n2 = current2.length;
     console.log(`Everything is up to date (${n2} ${n2 === 1 ? "package" : "packages"} checked).`);
     return code;
   }
@@ -78694,7 +79350,7 @@ async function runMarketplaceOutdated(args) {
     unknown2.length > 0 && `${unknown2.length} could not be checked`,
     linked.length > 0 && `${linked.length} linked, not checked`
   ].filter(Boolean);
-  const rest = code === OUTDATED_EXIT.current ? ` Everything else is up to date (${current.length} checked).` : "";
+  const rest = code === OUTDATED_EXIT.current ? ` Everything else is up to date (${current2.length} checked).` : "";
   const hint = outdated.length > 0 ? ` Run \`dorkos marketplace update --apply${args.projectPath ? ` --project ${shellWord(args.projectPath)}` : ""}\` to install ${outdated.length === 1 ? "it" : "them"}.` : "";
   console.log(`${parts.join(", ")}.${rest}${hint}`);
   return code;
@@ -79294,11 +79950,11 @@ function renderUpdateChecks(checks, apply) {
     if (check4.note) console.log(`  ${check4.note}`);
   }
   const updates = checks.filter((c3) => c3.status === "update-available").length;
-  const current = checks.filter((c3) => c3.status === "current").length;
+  const current2 = checks.filter((c3) => c3.status === "current").length;
   const unknown2 = checks.filter((c3) => c3.status === "unknown").length;
   const parts = [
     updates > 0 && `${updates} ${updates === 1 ? "update" : "updates"} available`,
-    current > 0 && `${current} up to date`,
+    current2 > 0 && `${current2} up to date`,
     unknown2 > 0 && `${unknown2} could not be checked`
   ].filter(Boolean);
   const hint = !apply && updates > 0 ? ` Run again with --apply to install ${updates === 1 ? "it" : "them"}.` : "";
@@ -81543,7 +82199,7 @@ async function deployFlySecrets(options, appName) {
   const app = parseInput(ExternalIdentifierSchema, appName);
   return runProviderMutation({
     ...options,
-    args: ["secrets", "deploy", "--app", app, "--yes"],
+    args: ["secrets", "deploy", "--app", app],
     parse: () => ({ operation: "deploy" })
   });
 }
@@ -81943,6 +82599,14 @@ var init_neon_mutate = __esm({
 });
 
 // src/commands/community-deploy/fly-graphql-contract.ts
+function tigrisCredentialsFromEnvironment(environment) {
+  const parsed = TigrisEnvironmentSchema.safeParse(environment);
+  if (!parsed.success) return null;
+  return new TigrisBucketCredentials(
+    parsed.data.AWS_ACCESS_KEY_ID,
+    parsed.data.AWS_SECRET_ACCESS_KEY
+  );
+}
 function invalidResponse() {
   return new FlyGraphqlContractError("INVALID_RESPONSE");
 }
@@ -81961,7 +82625,7 @@ function sanitizeAddOn(value) {
     providerName: addOn.addOnProvider.name,
     appId: addOn.app.id,
     appName: addOn.app.name,
-    public: addOn.options.public
+    public: addOn.options?.public ?? false
   };
 }
 function parseTigrisTermsResponse(response) {
@@ -81981,17 +82645,48 @@ function parseTigrisCreateResponse(response) {
   } catch {
     throw invalidResponse();
   }
-  return sanitizeAddOn(parsed.data.createAddOn.addOn);
+  const { environment, ...addOn } = parsed.data.createAddOn.addOn;
+  return {
+    identity: sanitizeAddOn(addOn),
+    credentials: tigrisCredentialsFromEnvironment(environment)
+  };
+}
+function parseTigrisCredentialsResponse(response, expectedId) {
+  if (AddOnNotFoundEnvelopeSchema.safeParse(response).success) {
+    throw new FlyGraphqlContractError("ADD_ON_MISSING");
+  }
+  let parsed;
+  try {
+    parsed = CredentialsEnvelopeSchema.parse(response);
+  } catch {
+    throw invalidResponse();
+  }
+  if (parsed.data.addOn.id !== expectedId) throw new FlyGraphqlContractError("BINDING_MISMATCH");
+  return tigrisCredentialsFromEnvironment(parsed.data.addOn.environment);
 }
 function parseTigrisReadResponse(response) {
+  if (AddOnNotFoundEnvelopeSchema.safeParse(response).success) {
+    throw new FlyGraphqlContractError("ADD_ON_MISSING");
+  }
   let parsed;
   try {
     parsed = ReadEnvelopeSchema.parse(response);
   } catch {
     throw invalidResponse();
   }
-  if (parsed.data.node === null) throw new FlyGraphqlContractError("ADD_ON_MISSING");
-  return sanitizeAddOn(parsed.data.node);
+  return sanitizeAddOn(parsed.data.addOn);
+}
+function parseAppTigrisResponse(response, appName) {
+  let parsed;
+  try {
+    parsed = AppTigrisEnvelopeSchema.parse(response);
+  } catch {
+    throw invalidResponse();
+  }
+  const { app } = parsed.data;
+  if (app.name !== appName) throw new FlyGraphqlContractError("BINDING_MISMATCH");
+  if (app.addOns.totalCount !== app.addOns.nodes.length) throw invalidResponse();
+  return app.addOns.nodes.map(({ id, name }) => ({ id, name }));
 }
 function parseTigrisDeleteResponse(response, expectedName) {
   let parsed;
@@ -82022,7 +82717,7 @@ function createTigrisVariables(input4) {
   const parsed = CreateInputSchema.parse(input4);
   return { input: { ...parsed, type: "tigris" } };
 }
-var SafeIdentifierSchema2, SafeStatusSchema, AddOnSchema, TermsEnvelopeSchema, CreateEnvelopeSchema, ReadEnvelopeSchema, DeleteEnvelopeSchema, ExpectedBindingSchema, CreateInputSchema, FLY_TIGRIS_TERMS_QUERY, FLY_TIGRIS_CREATE_MUTATION, FLY_TIGRIS_READ_QUERY, FLY_TIGRIS_DELETE_MUTATION, FlyGraphqlContractError;
+var SafeIdentifierSchema2, SafeStatusSchema, AddOnSchema, TermsEnvelopeSchema, CreateEnvelopeSchema, TigrisKeyValueSchema, TigrisEnvironmentSchema, CredentialsEnvelopeSchema, ReadEnvelopeSchema, AddOnNotFoundEnvelopeSchema, AppTigrisEnvelopeSchema, DeleteEnvelopeSchema, ExpectedBindingSchema, CreateInputSchema, FLY_TIGRIS_TERMS_QUERY, FLY_TIGRIS_CREATE_MUTATION, FLY_TIGRIS_CREDENTIALS_QUERY, FLY_APP_TIGRIS_QUERY, FLY_TIGRIS_READ_QUERY, FLY_TIGRIS_DELETE_MUTATION, FlyGraphqlContractError, TigrisBucketCredentials;
 var init_fly_graphql_contract = __esm({
   "src/commands/community-deploy/fly-graphql-contract.ts"() {
     "use strict";
@@ -82033,7 +82728,11 @@ var init_fly_graphql_contract = __esm({
       id: SafeIdentifierSchema2,
       name: SafeIdentifierSchema2,
       status: SafeStatusSchema,
-      options: external_exports.object({ public: external_exports.boolean() }).passthrough(),
+      // Fly stores no options for a bucket created without them (as this launcher creates it) and
+      // answers `options: null` (DOR-2559; `AddOn.options: JSON` is nullable in Fly's schema). That
+      // is Fly's private default. The key must still be present, and a present `public` must be a
+      // boolean, so only an explicit `public: true` reads as public.
+      options: external_exports.object({ public: external_exports.boolean() }).passthrough().nullable(),
       organization: external_exports.object({ slug: SafeIdentifierSchema2 }).strict(),
       addOnProvider: external_exports.object({ name: SafeIdentifierSchema2 }).strict(),
       app: external_exports.object({ id: SafeIdentifierSchema2, name: SafeIdentifierSchema2 }).strict()
@@ -82044,10 +82743,46 @@ var init_fly_graphql_contract = __esm({
       }).strict()
     }).strict();
     CreateEnvelopeSchema = external_exports.object({
-      data: external_exports.object({ createAddOn: external_exports.object({ addOn: AddOnSchema }).strict() }).strict()
+      data: external_exports.object({
+        createAddOn: external_exports.object({ addOn: AddOnSchema.extend({ environment: external_exports.unknown().optional() }) }).strict()
+      }).strict()
+    }).strict();
+    TigrisKeyValueSchema = external_exports.string().min(1).max(1024).regex(/^[\x21-\x7e]+$/u);
+    TigrisEnvironmentSchema = external_exports.object({ AWS_ACCESS_KEY_ID: TigrisKeyValueSchema, AWS_SECRET_ACCESS_KEY: TigrisKeyValueSchema }).passthrough();
+    CredentialsEnvelopeSchema = external_exports.object({
+      data: external_exports.object({
+        addOn: external_exports.object({ id: SafeIdentifierSchema2, environment: external_exports.unknown().optional() }).strict()
+      }).strict()
     }).strict();
     ReadEnvelopeSchema = external_exports.object({
-      data: external_exports.object({ node: AddOnSchema.nullable() }).strict()
+      // Fly's GraphQL has no Relay `node` root field; `addOn(id:)` is the exact-ID read (live gate,
+      // DOR-2169, 2026-09-29: `node(id:)` answered only "Field 'node' doesn't exist on type 'Queries'").
+      // Not nullable: a bare `addOn: null` without Fly's NOT_FOUND error is not proof the bucket is
+      // gone, and treating it as gone once let cleanup skip a bucket that was still billing (DOR-2584
+      // review). Only `AddOnNotFoundEnvelopeSchema` means missing.
+      data: external_exports.object({ addOn: AddOnSchema }).strict()
+    }).strict();
+    AddOnNotFoundEnvelopeSchema = external_exports.object({
+      data: external_exports.object({ addOn: external_exports.null() }).strict(),
+      errors: external_exports.array(
+        external_exports.object({
+          path: external_exports.tuple([external_exports.literal("addOn")]),
+          extensions: external_exports.object({ code: external_exports.literal("NOT_FOUND") }).passthrough()
+        }).passthrough()
+      ).min(1)
+    }).strict();
+    AppTigrisEnvelopeSchema = external_exports.object({
+      data: external_exports.object({
+        app: external_exports.object({
+          name: SafeIdentifierSchema2,
+          addOns: external_exports.object({
+            totalCount: external_exports.number().int().nonnegative(),
+            nodes: external_exports.array(
+              external_exports.object({ id: SafeIdentifierSchema2, name: SafeIdentifierSchema2 }).strict()
+            )
+          }).strict()
+        }).strict()
+      }).strict()
     }).strict();
     DeleteEnvelopeSchema = external_exports.object({
       data: external_exports.object({
@@ -82085,25 +82820,43 @@ var init_fly_graphql_contract = __esm({
         name
         status
         options
+        environment
         organization { slug }
         addOnProvider { name }
         app { id name }
       }
     }
   }
+`;
+    FLY_TIGRIS_CREDENTIALS_QUERY = `
+  query DorkosReadTigrisCredentials($id: ID!) {
+    addOn(id: $id) {
+      id
+      environment
+    }
+  }
+`;
+    FLY_APP_TIGRIS_QUERY = `
+  query DorkosListAppTigris($appName: String!) {
+    app(name: $appName) {
+      name
+      addOns(type: tigris, first: 50) {
+        totalCount
+        nodes { id name }
+      }
+    }
+  }
 `;
     FLY_TIGRIS_READ_QUERY = `
   query DorkosReadTigris($id: ID!) {
-    node(id: $id) {
-      ... on AddOn {
-        id
-        name
-        status
-        options
-        organization { slug }
-        addOnProvider { name }
-        app { id name }
-      }
+    addOn(id: $id) {
+      id
+      name
+      status
+      options
+      organization { slug }
+      addOnProvider { name }
+      app { id name }
     }
   }
 `;
@@ -82128,6 +82881,40 @@ var init_fly_graphql_contract = __esm({
         this.code = code;
       }
     };
+    TigrisBucketCredentials = class {
+      #values;
+      /**
+       * Wrap validated keys without exposing them as object data.
+       *
+       * @param accessKeyId - The bucket's access key id.
+       * @param secretAccessKey - The bucket's secret access key.
+       */
+      constructor(accessKeyId, secretAccessKey) {
+        this.#values = { AWS_ACCESS_KEY_ID: accessKeyId, AWS_SECRET_ACCESS_KEY: secretAccessKey };
+      }
+      /**
+       * Use the keys, by their app secret names, inside one bounded callback.
+       *
+       * @param consumer - The secret-staging call.
+       * @returns The consumer result.
+       */
+      async use(consumer) {
+        if (!this.#values) throw new FlyGraphqlContractError("INVALID_RESPONSE");
+        return consumer(this.#values);
+      }
+      /** Drop this wrapper's reference to the keys. */
+      dispose() {
+        this.#values = void 0;
+      }
+      /** Return a safe marker for string interpolation. */
+      toString() {
+        return "[REDACTED Tigris bucket credentials]";
+      }
+      /** Return a safe marker for JSON serialization. */
+      toJSON() {
+        return "[REDACTED Tigris bucket credentials]";
+      }
+    };
   }
 });
 
@@ -82253,6 +83040,7 @@ var init_fly_graphql_client = __esm({
        * the mutation. The caller must inspect by provider-issued provenance and must not retry blindly.
        *
        * @param input - Validated creation identity selected by the consented plan.
+       * @returns The bucket's identity, and its access keys when Fly sent them (in memory only).
        */
       async createTigris(input4) {
         let variables;
@@ -82273,6 +83061,40 @@ var init_fly_graphql_client = __esm({
         }
         return this.request(FLY_TIGRIS_READ_QUERY, { id: addOnId }, parseTigrisReadResponse, false);
       }
+      /**
+       * Read one bucket's access keys by its exact ID, for a resumed launch that has none in memory.
+       *
+       * @param addOnId - Provider-issued add-on ID already recorded in the launch journal.
+       * @returns Redacting credentials, or null when Fly returned none.
+       */
+      async readTigrisCredentials(addOnId) {
+        if (!SAFE_PROVIDER_IDENTIFIER_PATTERN.test(addOnId)) {
+          throw new FlyGraphqlClientError("INVALID_RESPONSE");
+        }
+        return this.request(
+          FLY_TIGRIS_CREDENTIALS_QUERY,
+          { id: addOnId },
+          (response) => parseTigrisCredentialsResponse(response, addOnId),
+          false
+        );
+      }
+      /**
+       * List every Tigris bucket attached to one app, by id and name.
+       *
+       * @param appName - The exact app name.
+       * @returns The attached buckets; an empty list means the app has none.
+       */
+      async listTigrisOnApp(appName) {
+        if (!SAFE_PROVIDER_IDENTIFIER_PATTERN.test(appName)) {
+          throw new FlyGraphqlClientError("INVALID_RESPONSE");
+        }
+        return this.request(
+          FLY_APP_TIGRIS_QUERY,
+          { appName },
+          (response) => parseAppTigrisResponse(response, appName),
+          false
+        );
+      }
       /** Delete one exact Tigris name after the caller independently reverified its journal binding. */
       async deleteTigris(addOnName) {
         if (!SAFE_PROVIDER_IDENTIFIER_PATTERN.test(addOnName)) {
@@ -82646,6 +83468,31 @@ function tigrisIdentity(identity, plan, app) {
     bindingId: verified.appId
   };
 }
+async function stageTigrisKeys(options, appName, credentials) {
+  try {
+    await credentials.use((values2) => stageFlySecrets(options.fly, appName, values2));
+  } finally {
+    credentials.dispose();
+  }
+}
+async function ensureTigrisSecrets(options, appName, addOnId) {
+  const before = await readFlySecretInventory(options.fly, appName);
+  const present = EXPECTED_TIGRIS_SECRET_NAMES.filter(
+    (name) => before.some((item) => item.name === name)
+  );
+  if (present.length === EXPECTED_TIGRIS_SECRET_NAMES.length) {
+    verifyTigrisSecretNames(before);
+    return;
+  }
+  if (present.length > 0) throw new TigrisSessionError("MISSING_TIGRIS_SECRETS");
+  const credentials = await useTigrisClient(
+    options,
+    (client2) => client2.readTigrisCredentials(addOnId)
+  );
+  if (!credentials) throw new TigrisSessionError("MISSING_TIGRIS_SECRETS");
+  await stageTigrisKeys(options, appName, credentials);
+  verifyTigrisSecretNames(await readFlySecretInventory(options.fly, appName));
+}
 function createDefaultCommunityCreationDependencies(input4) {
   const app = async () => {
     const id = input4.latestJournal().resources.flyAppId;
@@ -82653,6 +83500,7 @@ function createDefaultCommunityCreationDependencies(input4) {
     return exactFlyApp(input4.options, input4.plan.fly.organizationId, id, input4.plan.fly.appName);
   };
   let flyOrganizationId;
+  let tigrisCredentials = null;
   return {
     persist: input4.persist,
     now: input4.now,
@@ -82733,16 +83581,20 @@ function createDefaultCommunityCreationDependencies(input4) {
             primaryRegion: input4.plan.fly.region
           })
         );
-        const result2 = tigrisIdentity(created, input4.plan, exactApp);
-        return result2;
+        tigrisCredentials?.dispose();
+        tigrisCredentials = created.credentials;
+        return tigrisIdentity(created.identity, input4.plan, exactApp);
       },
       inspect: async (id) => {
+        const held2 = tigrisCredentials;
+        tigrisCredentials = null;
+        if (held2) {
+          await stageTigrisKeys(input4.options, input4.plan.fly.appName, held2).catch(() => void 0);
+        }
         const exactApp = await app();
         const found = await useTigrisClient(input4.options, (client2) => client2.readTigris(id));
         const result2 = tigrisIdentity(found, input4.plan, exactApp);
-        verifyTigrisSecretNames(
-          await readFlySecretInventory(input4.options.fly, input4.plan.fly.appName)
-        );
+        await ensureTigrisSecrets(input4.options, input4.plan.fly.appName, found.addOnId);
         return result2;
       }
     }
@@ -83192,9 +84044,9 @@ function assertIdentity(step, identity, expectedBindingId) {
     throw new ProviderMutationError("INVALID_RESPONSE");
   }
 }
-async function persistNext(dependencies, current, update) {
-  const next = withRevision(current, dependencies.now(), update);
-  await dependencies.persist(next, current.revision);
+async function persistNext(dependencies, current2, update) {
+  const next = withRevision(current2, dependencies.now(), update);
+  await dependencies.persist(next, current2.revision);
   return next;
 }
 async function executeCreationStep(journal, step, dependencies) {
@@ -83213,11 +84065,11 @@ async function executeCreationStep(journal, step, dependencies) {
   if (journal.pendingIntent && (!existingId || journal.pendingIntent.provider !== step.service)) {
     throw new CommunityCreationUncertainError(journal.pendingIntent.provider);
   }
-  let current = journal;
+  let current2 = journal;
   let createdId = existingId;
   if (!journal.pendingIntent) {
     await step.boundary.prepare?.();
-    current = await persistNext(dependencies, journal, {
+    current2 = await persistNext(dependencies, journal, {
       pendingIntent: {
         provider: step.service,
         organizationId: step.organizationId,
@@ -83232,18 +84084,18 @@ async function executeCreationStep(journal, step, dependencies) {
     } catch (error63) {
       const safeCode = safeErrorCode(error63);
       if (isCertifiedPreSubmitFailure(safeCode)) {
-        await persistNext(dependencies, current, {
+        await persistNext(dependencies, current2, {
           pendingIntent: null,
           lastSafeError: { category: safeErrorCategory(safeCode), code: safeCode }
         });
         throw error63;
       }
-      await persistUncertain(dependencies, current);
+      await persistUncertain(dependencies, current2);
       throw new CommunityCreationUncertainError(step.service);
     }
     createdId = created.id;
-    current = await persistNext(dependencies, current, {
-      resources: { ...current.resources, [step.resourceKey]: createdId }
+    current2 = await persistNext(dependencies, current2, {
+      resources: { ...current2.resources, [step.resourceKey]: createdId }
     });
   }
   let inspected;
@@ -83251,26 +84103,32 @@ async function executeCreationStep(journal, step, dependencies) {
     inspected = await step.boundary.inspect(createdId);
     assertIdentity(step, inspected, expectedBindingId);
     if (inspected.id !== createdId) throw new ProviderMutationError("INVALID_RESPONSE");
-  } catch {
-    await persistUncertain(dependencies, current);
+  } catch (error63) {
+    if (step.service === "tigris" && safeErrorCode(error63) === "MISSING_TIGRIS_SECRETS") {
+      await persistNext(dependencies, current2, {
+        lastSafeError: { category: "invalid-response", code: "MISSING_TIGRIS_SECRETS" }
+      });
+      throw error63;
+    }
+    await persistUncertain(dependencies, current2);
     throw new CommunityCreationUncertainError(step.service);
   }
-  return persistNext(dependencies, current, {
+  return persistNext(dependencies, current2, {
     state: step.state,
     pendingIntent: null,
     resources: {
-      ...current.resources,
+      ...current2.resources,
       [step.resourceKey]: inspected.id,
       ...inspected.relatedResources ?? {}
     },
     verifiedBindings: [
-      ...current.verifiedBindings,
+      ...current2.verifiedBindings,
       ...expectedBindingId === void 0 ? [] : [
         { kind: "bucket-to-app", sourceId: inspected.id, targetId: expectedBindingId }
       ],
       ...inspected.verifiedBindings ?? []
     ],
-    completedSteps: [...current.completedSteps, step.state],
+    completedSteps: [...current2.completedSteps, step.state],
     lastSafeError: null
   });
 }
@@ -83283,8 +84141,8 @@ function isCertifiedPreSubmitFailure(code) {
 function safeErrorCategory(code) {
   return code === "AUTH_REQUIRED" ? "authentication" : code === "ACCESS_DENIED" || code === "TERMS_NOT_ACCEPTED" ? "authorization" : "transient";
 }
-async function persistUncertain(dependencies, current) {
-  await persistNext(dependencies, current, {
+async function persistUncertain(dependencies, current2) {
+  await persistNext(dependencies, current2, {
     state: "uncertain",
     lastSafeError: { category: "uncertain", code: "CREATION_OUTCOME_UNCERTAIN" }
   });
@@ -83311,7 +84169,7 @@ function assertJournalIdentity(journal, step, inspected, expectedBindingId) {
   }
 }
 async function executeCommunityCreationPhase(plan, journal, dependencies) {
-  let current = journal;
+  let current2 = journal;
   const steps = [
     {
       service: "fly",
@@ -83342,9 +84200,9 @@ async function executeCommunityCreationPhase(plan, journal, dependencies) {
   ];
   for (const step of steps) {
     dependencies.progress?.(step.service);
-    current = await executeCreationStep(current, step, dependencies);
+    current2 = await executeCreationStep(current2, step, dependencies);
   }
-  return current;
+  return current2;
 }
 var CommunityCreationUncertainError;
 var init_execute = __esm({
@@ -83366,12 +84224,12 @@ var init_execute = __esm({
 
 // src/commands/community-deploy/deploy.ts
 import { randomBytes as randomBytes2 } from "node:crypto";
-function nextJournal(current, now2, update) {
-  return { ...current, ...update, revision: current.revision + 1, updatedAt: now2 };
+function nextJournal(current2, now2, update) {
+  return { ...current2, ...update, revision: current2.revision + 1, updatedAt: now2 };
 }
-async function persist(dependencies, current, update) {
-  const next = nextJournal(current, dependencies.now(), update);
-  await dependencies.persist(next, current.revision);
+async function persist(dependencies, current2, update) {
+  const next = nextJournal(current2, dependencies.now(), update);
+  await dependencies.persist(next, current2.revision);
   return next;
 }
 function runtimeSecretRows(inventory) {
@@ -83413,33 +84271,33 @@ function runtimeEvidence(inventory) {
   return { machine, release };
 }
 async function executeCommunityDeployPhase(plan, journal, dependencies) {
-  let current = journal;
+  let current2 = journal;
   let bootstrapSecret = null;
-  if (!current.completedSteps.includes("secrets_staged")) {
-    if (!current.secretBaseline) {
+  if (!current2.completedSteps.includes("secrets_staged")) {
+    if (!current2.secretBaseline) {
       const before = await dependencies.readSecrets();
       if (runtimeSecretRows(before).length > 0) {
-        await persist(dependencies, current, {
+        await persist(dependencies, current2, {
           state: "uncertain",
           lastSafeError: { category: "uncertain", code: "CREATION_OUTCOME_UNCERTAIN" }
         });
         throw new Error("Runtime secrets exist without a proven journal checkpoint");
       }
-      current = await persist(dependencies, current, {
+      current2 = await persist(dependencies, current2, {
         secretBaseline: runtimeDigestMap(before),
         lastSafeError: null
       });
     }
-    const baseline = current.secretBaseline;
+    const baseline = current2.secretBaseline;
     if (!baseline) throw new ProviderMutationError("INVALID_RESPONSE");
     const observed = await dependencies.readSecrets();
     const observedRuntime = runtimeSecretRows(observed);
     if (observedRuntime.length > 0) {
       const staged = provesFreshStage(observed, baseline);
-      current = await persist(dependencies, current, {
+      current2 = await persist(dependencies, current2, {
         state: "secrets_staged",
         secretDigests: staged,
-        completedSteps: [...current.completedSteps, "secrets_staged"],
+        completedSteps: [...current2.completedSteps, "secrets_staged"],
         lastSafeError: null
       });
     } else {
@@ -83456,10 +84314,10 @@ async function executeCommunityDeployPhase(plan, journal, dependencies) {
       try {
         const staged = provesFreshStage(await dependencies.readSecrets(), baseline);
         bootstrapSecret = secretSet.bootstrapSecret();
-        current = await persist(dependencies, current, {
+        current2 = await persist(dependencies, current2, {
           state: "secrets_staged",
           secretDigests: staged,
-          completedSteps: [...current.completedSteps, "secrets_staged"],
+          completedSteps: [...current2.completedSteps, "secrets_staged"],
           lastSafeError: null
         });
       } finally {
@@ -83467,11 +84325,11 @@ async function executeCommunityDeployPhase(plan, journal, dependencies) {
       }
     }
   }
-  const expectedDigests = current.secretDigests ?? {};
+  const expectedDigests = current2.secretDigests ?? {};
   if (Object.keys(expectedDigests).length !== COMMUNITY_RUNTIME_SECRET_NAMES.length) {
     throw new ProviderMutationError("INVALID_RESPONSE");
   }
-  if (!current.completedSteps.includes("deployed")) {
+  if (!current2.completedSteps.includes("deployed")) {
     const existingSecrets = await dependencies.readSecrets();
     const deployedRows = runtimeSecretRows(existingSecrets);
     let inventory;
@@ -83493,15 +84351,15 @@ async function executeCommunityDeployPhase(plan, journal, dependencies) {
       inventory = dependencies.verifyNewRuntime(await dependencies.readRuntime(), previous);
     }
     const { machine, release } = runtimeEvidence(inventory);
-    current = await persist(dependencies, current, {
+    current2 = await persist(dependencies, current2, {
       state: "deployed",
       resources: {
-        ...current.resources,
+        ...current2.resources,
         flyMachineId: machine.id,
         flyReleaseId: release.id
       },
       verifiedBindings: [
-        ...current.verifiedBindings,
+        ...current2.verifiedBindings,
         { kind: "machine-to-release", sourceId: machine.id, targetId: release.id },
         ...Object.values(expectedDigests).map((digest2) => ({
           kind: "secret-version-to-machine",
@@ -83509,19 +84367,19 @@ async function executeCommunityDeployPhase(plan, journal, dependencies) {
           targetId: machine.id
         }))
       ],
-      completedSteps: [...current.completedSteps, "deployed"],
+      completedSteps: [...current2.completedSteps, "deployed"],
       lastSafeError: null
     });
   }
-  if (!current.completedSteps.includes("healthy")) {
+  if (!current2.completedSteps.includes("healthy")) {
     await dependencies.verifyHealth(`https://${plan.fly.appName}.fly.dev`);
-    current = await persist(dependencies, current, {
+    current2 = await persist(dependencies, current2, {
       state: "healthy",
-      completedSteps: [...current.completedSteps, "healthy"],
+      completedSteps: [...current2.completedSteps, "healthy"],
       lastSafeError: null
     });
   }
-  return { journal: current, bootstrapSecret };
+  return { journal: current2, bootstrapSecret };
 }
 var COMMUNITY_RUNTIME_SECRET_NAMES, CommunityRuntimeSecrets;
 var init_deploy = __esm({
@@ -83576,12 +84434,12 @@ var init_deploy = __esm({
 
 // src/commands/community-deploy/owner.ts
 import { randomBytes as randomBytes3 } from "node:crypto";
-function nextJournal2(current, now2, update) {
-  return { ...current, ...update, revision: current.revision + 1, updatedAt: now2 };
+function nextJournal2(current2, now2, update) {
+  return { ...current2, ...update, revision: current2.revision + 1, updatedAt: now2 };
 }
-async function persist2(dependencies, current, update) {
-  const next = nextJournal2(current, dependencies.now(), update);
-  await dependencies.persist(next, current.revision);
+async function persist2(dependencies, current2, update) {
+  const next = nextJournal2(current2, dependencies.now(), update);
+  await dependencies.persist(next, current2.revision);
   return next;
 }
 function bootstrapDigest(inventory, status) {
@@ -83602,50 +84460,50 @@ async function replaceAndApplyBootstrap(journal, dependencies, ownerClaimed = fa
   const deployedDigest = bootstrapDigest(await dependencies.readSecrets(), "Deployed");
   if (deployedDigest !== stagedDigest) throw new ProviderMutationError("INVALID_RESPONSE");
   await dependencies.verifyRuntimeAndHealth();
-  const current = await persist2(dependencies, journal, {
+  const current2 = await persist2(dependencies, journal, {
     secretDigests: { ...journal.secretDigests, [BOOTSTRAP_SECRET_NAME]: deployedDigest },
     ...ownerClaimed ? { ownerBootstrapRotated: true } : {},
     lastSafeError: null
   });
-  return { journal: current, secret };
+  return { journal: current2, secret };
 }
 async function executeCommunityOwnerHandoff(plan, journal, initialBootstrapSecret, dependencies) {
   if (journal.completedSteps.includes("complete")) return journal;
-  let current = journal;
+  let current2 = journal;
   const origin = `https://${plan.fly.appName}.fly.dev`;
   let handoffSecret = initialBootstrapSecret;
-  if (current.completedSteps.includes("owner_pending") && !await dependencies.ownerExists(origin)) {
+  if (current2.completedSteps.includes("owner_pending") && !await dependencies.ownerExists(origin)) {
     if (!handoffSecret) {
-      const replacement = await replaceAndApplyBootstrap(current, dependencies);
-      current = replacement.journal;
+      const replacement = await replaceAndApplyBootstrap(current2, dependencies);
+      current2 = replacement.journal;
       handoffSecret = replacement.secret;
     }
     await dependencies.handoffSecret(origin, handoffSecret);
   }
-  if (!current.completedSteps.includes("owner_pending")) {
+  if (!current2.completedSteps.includes("owner_pending")) {
     if (!handoffSecret) {
-      const replacement = await replaceAndApplyBootstrap(current, dependencies);
-      current = replacement.journal;
+      const replacement = await replaceAndApplyBootstrap(current2, dependencies);
+      current2 = replacement.journal;
       handoffSecret = replacement.secret;
     }
     await dependencies.handoffSecret(origin, handoffSecret);
-    current = await persist2(dependencies, current, {
+    current2 = await persist2(dependencies, current2, {
       state: "owner_pending",
-      completedSteps: [...current.completedSteps, "owner_pending"],
+      completedSteps: [...current2.completedSteps, "owner_pending"],
       lastSafeError: null
     });
   }
   if (!await dependencies.ownerExists(origin) && !await dependencies.waitForOwnerClaim(origin)) {
-    return current;
+    return current2;
   }
-  if (!current.ownerBootstrapRotated) {
-    const rotation = await replaceAndApplyBootstrap(current, dependencies, true);
-    current = rotation.journal;
+  if (!current2.ownerBootstrapRotated) {
+    const rotation = await replaceAndApplyBootstrap(current2, dependencies, true);
+    current2 = rotation.journal;
   }
-  if (!await dependencies.confirmAcceptance(origin)) return current;
-  return persist2(dependencies, current, {
+  if (!await dependencies.confirmAcceptance(origin)) return current2;
+  return persist2(dependencies, current2, {
     state: "complete",
-    completedSteps: [...current.completedSteps, "complete"],
+    completedSteps: [...current2.completedSteps, "complete"],
     lastSafeError: null
   });
 }
@@ -83839,8 +84697,8 @@ async function writeLaunchJournal(filePath, journal, expectedRevision) {
   await withFileLock(
     filePath,
     () => withCrossProcessLock(filePath, async () => {
-      const current = await readLaunchJournal(filePath);
-      const actualRevision = current?.revision ?? null;
+      const current2 = await readLaunchJournal(filePath);
+      const actualRevision = current2?.revision ?? null;
       if (actualRevision !== expectedRevision) {
         throw new LaunchJournalConflictError(expectedRevision, actualRevision);
       }
@@ -84131,7 +84989,16 @@ function formatCommunityRecovery(journal) {
     Console: https://fly.io/apps/${selection.appName}` : `  Tigris bucket ${journal.resources.tigrisBucketId} \u2014 saved owner unavailable; may incur charges; private files may exist.` : null
   ].filter((row) => row !== null);
   const pending = journal.pendingIntent;
-  const reconciliation = pending ? pending.provider === "fly" ? `Unresolved Fly creation intent for ${pending.resourceName} in ${pending.organizationId}. Do not create or adopt a name match. Inspect: fly apps list --org ${pending.organizationId} --json
+  const tigrisKeysMissing = pending?.provider === "tigris" && journal.resources.tigrisBucketId !== void 0 && journal.lastSafeError?.code === "MISSING_TIGRIS_SECRETS";
+  const reconciliation = tigrisKeysMissing ? selection ? [
+    `Tigris bucket ${selection.bucketName} exists, but its access keys are not on app ${selection.appName}, and Fly would not return them again. Keep this bucket; setup must not create another.`,
+    `1. Open the bucket's Tigris console: fly storage dashboard ${selection.bucketName} --app ${selection.appName}`,
+    `2. Create an access key there with read and write access to ${selection.bucketName}.`,
+    `3. Run: fly secrets import --app ${selection.appName} --stage`,
+    "   then type two lines, AWS_ACCESS_KEY_ID=<key id> and AWS_SECRET_ACCESS_KEY=<secret>, and press Ctrl-D.",
+    "   (Typing them keeps the secret out of your shell history.)",
+    "4. Resume with the command below."
+  ].join("\n") : `Tigris bucket ${journal.resources.tigrisBucketId} exists, but its access keys are not on the app. Add AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY with fly secrets import --stage, then resume.` : pending ? pending.provider === "fly" ? `Unresolved Fly creation intent for ${pending.resourceName} in ${pending.organizationId}. Do not create or adopt a name match. Inspect: fly apps list --org ${pending.organizationId} --json
 Console: https://fly.io/dashboard/${pending.organizationId}` : pending.provider === "neon" ? `Unresolved Neon creation intent for ${pending.resourceName} in ${pending.organizationId}. Do not create or adopt a name match. Inspect: neonctl projects list --org-id ${pending.organizationId} --output json
 Console: https://console.neon.tech` : `Unresolved Tigris creation intent for ${pending.resourceName} in ${pending.organizationId}. Do not create or adopt a name match. Inspect: fly storage list --org ${pending.organizationId}
 Console: https://fly.io/dashboard/${pending.organizationId}` : null;
@@ -88641,7 +89508,7 @@ function createRemoteJWKSet(url2, options) {
   }
   const reload = async () => {
     if (pendingFetch && isCloudflareWorkers() && (pendingFetch = void 0), !pendingFetch) {
-      const sequence = ++reloadSequence, current = pendingFetch = fetchJwks(href, headers, AbortSignal.timeout(timeoutDuration), fetchImpl).then((json3) => {
+      const sequence = ++reloadSequence, current2 = pendingFetch = fetchJwks(href, headers, AbortSignal.timeout(timeoutDuration), fetchImpl).then((json3) => {
         const next = createLocalJWKSet(json3);
         if (sequence <= appliedSequence)
           return;
@@ -88649,7 +89516,7 @@ function createRemoteJWKSet(url2, options) {
         const updatedAt = Date.now();
         cache3 && (cache3.uat = updatedAt, cache3.jwks = json3), jwksTimestamp = updatedAt, appliedSequence = sequence;
       }).finally(() => {
-        pendingFetch === current && (pendingFetch = void 0);
+        pendingFetch === current2 && (pendingFetch = void 0);
       });
     }
     await pendingFetch;
@@ -95493,11 +96360,11 @@ var init_internal_adapter = __esm({
       async function withVerificationConsumeLock(key, fn) {
         const previous = verificationConsumeLocks.get(key) ?? Promise.resolve();
         let release;
-        const current = new Promise((resolve11) => {
+        const current2 = new Promise((resolve11) => {
           release = resolve11;
         });
         const next = previous.catch(() => {
-        }).then(() => current);
+        }).then(() => current2);
         verificationConsumeLocks.set(key, next);
         await previous.catch(() => {
         });
@@ -105371,9 +106238,9 @@ function createAtomicFallbacks(context2) {
       for (const [field, delta] of deltas) {
         const previous = counterSchema.safeParse(row[field]);
         if (!previous.success) throw new BetterAuthError(`Adapter "${adapterId}" must return finite numeric counter values or null for atomic increments.`);
-        const current = previous.data ?? 0;
-        const next = current + delta;
-        if (!Number.isFinite(next) || delta !== 0 && next === current) throw new BetterAuthError(`Adapter "${adapterId}" cannot represent the requested counter increment safely.`);
+        const current2 = previous.data ?? 0;
+        const next = current2 + delta;
+        if (!Number.isFinite(next) || delta !== 0 && next === current2) throw new BetterAuthError(`Adapter "${adapterId}" cannot represent the requested counter increment safely.`);
         update[field] = next;
       }
       const guard = await snapshotGuard(row, fields, request, "incrementOne");
@@ -127719,9 +128586,9 @@ function validateSecretsArray(secrets, logger3) {
     if (seen.has(version4)) throw new BetterAuthError(`Duplicate version ${version4} in \`secrets\`. Each version must be unique.`);
     seen.add(version4);
   }
-  const current = secrets[0];
-  if (current.value.length < 32) logger3.warn(`[better-auth] Warning: the current secret (version ${current.version}) should be at least 32 characters long for adequate security.`);
-  if (estimateEntropy(current.value) < 120) logger3.warn("[better-auth] Warning: the current secret appears low-entropy. Use a randomly generated secret for production.");
+  const current2 = secrets[0];
+  if (current2.value.length < 32) logger3.warn(`[better-auth] Warning: the current secret (version ${current2.version}) should be at least 32 characters long for adequate security.`);
+  if (estimateEntropy(current2.value) < 120) logger3.warn("[better-auth] Warning: the current secret appears low-entropy. Use a randomly generated secret for production.");
 }
 function buildSecretConfig(secrets, legacySecret) {
   const keys = /* @__PURE__ */ new Map();
@@ -137676,7 +138543,7 @@ var init_connector_authentication_setup = __esm({
 });
 
 // ../shared/src/connector-schemas.ts
-var CONNECTOR_OPERATION_SELECTION_LIMIT, CONNECTOR_AUTHENTICATION_FLOW_TTL_MS, CONNECTOR_EVENT_REVIEW_SCOPE_LIMIT, ConnectorJsonValueSchema, ConnectorJsonObjectSchema, ConnectorProviderInstanceIdSchema, ConnectionIdSchema, ConnectorExternalAccountRefSchema, ConnectorProviderModeSchema, ConnectorProviderHealthSchema, ConnectorGrantReconciliationStatusSchema, ConnectorOperationClassificationSchema, ConnectorRetryPolicySchema, ConnectorOperationRevisionSchema, ConnectorOperationPageSchema, ConnectorCapabilityAvailabilitySchema, ConnectorUnsupportedResultSchema, ConnectorProviderCapabilitySetSchema, ConnectorToolkitVersionResultSchema, ConnectorProviderExecuteResultSchema, ConnectorAuthenticationFlowSchema, ConnectorExecutionTargetSchema, ConnectorProgramExecutionRequestSchema, ConnectorExecutionPublicResultSchema, ConnectorExecutionResponseSchema, ConnectionReadinessStateSchema, ConnectionReadinessReasonSchema, ConnectionFixActionSchema, ConnectionFixSchema, ConnectionReadinessSchema, READINESS_ASK_ON_CONNECTIONS, CONNECTION_GONE_AGENT_COPY, CONNECTION_READINESS_COPY, AccessibleConnectorConnectionSchema, AccessibleConnectorOperationSchema, ConnectorAccessibleConnectionsResponseSchema, ConnectorAccessibleOperationsResponseSchema, ConnectorUsageItemSchema, ConnectorUsagePageSchema, ConnectorReconciliationPreviewRequestSchema, ConnectorReconciliationGrantSelectionSchema, ConnectorReconciliationEveryAgentSelectionSchema, ConnectorReconciliationEveryAgentStateSchema, ConnectorEveryAgentRevokeResponseSchema, ConnectorReconciliationAgentSchema, ConnectorReconciliationCandidateSchema, ConnectorReconciliationPreviewSchema, ConnectorReconciliationApplyRequestSchema, ConnectorReconciliationApplyResponseSchema, ReviewActionBaseSchema, ConnectionTargetSchema, ConnectorRequestAccessSchema, ConnectorReviewActionSchema, ConnectorAgentConnectionRequestInputSchema, ConnectorAgentRequestBaseSchema, ConnectorRequestNotGrantedSchema, ConnectorAgentRequestStatusSchema, ConnectorAgentRequestItemSchema, ConnectorAgentRequestListResponseSchema, ConnectorManagementConnectActionSchema, ConnectorManagementAppliedActionSchema, ConnectorManagementReviewActionSchema, ConnectorManagementReviewCreateRequestSchema, ConnectorManagementReviewOutcomeSchema, ConnectorManagementReviewOperationContextSchema, ConnectorManagementReviewConnectionContextSchema, ConnectorManagementReviewAgentContextSchema, ConnectorManagementReviewContextSchema, ManagementReviewItemBaseShape, ConnectorPendingManagementReviewItemSchema, ConnectorResolvingManagementReviewItemSchema, ConnectorExpiredManagementReviewItemSchema, ConnectorDeniedManagementReviewItemSchema, ConnectorApprovedAppliedManagementReviewItemSchema, ConnectorApprovedConnectManagementReviewItemSchema, ConnectorApprovedUnknownManagementReviewItemSchema, ConnectorManagementReviewItemSchema, ProgramReviewStatusBaseShape, ConnectorProgramReviewStatusSchema, ConnectorManagementReviewDecisionSchema, ConnectorManagementReviewDecisionResultSchema;
+var CONNECTOR_OPERATION_SELECTION_LIMIT, CONNECTOR_AUTHENTICATION_FLOW_TTL_MS, CONNECTOR_EVENT_REVIEW_SCOPE_LIMIT, ConnectorJsonValueSchema, ConnectorJsonObjectSchema, ConnectorProviderInstanceIdSchema, ConnectionIdSchema, ConnectorExternalAccountRefSchema, ConnectorProviderModeSchema, ConnectorProviderHealthSchema, ConnectorGrantReconciliationStatusSchema, ConnectorOperationClassificationSchema, ConnectorAccessLevelSchema, ConnectorRetryPolicySchema, ConnectorOperationRevisionSchema, ConnectorOperationPageSchema, ConnectorCapabilityAvailabilitySchema, ConnectorUnsupportedResultSchema, ConnectorProviderCapabilitySetSchema, ConnectorToolkitVersionResultSchema, ConnectorProviderExecuteResultSchema, ConnectorAuthenticationFlowSchema, ConnectorExecutionTargetSchema, ConnectorProgramExecutionRequestSchema, ConnectorExecutionPublicResultSchema, ConnectorExecutionResponseSchema, ConnectionReadinessStateSchema, ConnectionReadinessReasonSchema, ConnectionFixActionSchema, ConnectionFixSchema, ConnectionReadinessSchema, READINESS_ASK_ON_CONNECTIONS, CONNECTION_GONE_AGENT_COPY, CONNECTION_READINESS_COPY, AccessibleConnectorConnectionSchema, AccessibleConnectorOperationSchema, ConnectorAccessibleConnectionsResponseSchema, ConnectorAccessibleOperationsResponseSchema, ConnectorUsageItemSchema, ConnectorUsagePageSchema, ConnectorReconciliationPreviewRequestSchema, ConnectorReconciliationGrantSelectionSchema, ConnectorReconciliationEveryAgentSelectionSchema, ConnectorReconciliationEveryAgentStateSchema, ConnectorEveryAgentRevokeResponseSchema, ConnectorReconciliationAgentSchema, ConnectorReconciliationCandidateSchema, ConnectorReconciliationPreviewSchema, ConnectorReconciliationApplyRequestSchema, ConnectorReconciliationApplyResponseSchema, ReviewActionBaseSchema, ConnectionTargetSchema, ConnectorRequestAccessSchema, ConnectorReviewActionSchema, ConnectorAgentConnectionRequestInputSchema, ConnectorAgentRequestBaseSchema, ConnectorRequestNotGrantedSchema, ConnectorAgentRequestStatusSchema, ConnectorAgentRequestItemSchema, ConnectorAgentRequestListResponseSchema, ConnectorManagementConnectActionSchema, ConnectorManagementAppliedActionSchema, ConnectorManagementReviewActionSchema, ConnectorManagementReviewCreateRequestSchema, ConnectorManagementReviewOutcomeSchema, ConnectorManagementReviewOperationContextSchema, ConnectorManagementReviewConnectionContextSchema, ConnectorManagementReviewAgentContextSchema, ConnectorManagementReviewContextSchema, ManagementReviewItemBaseShape, ConnectorPendingManagementReviewItemSchema, ConnectorResolvingManagementReviewItemSchema, ConnectorExpiredManagementReviewItemSchema, ConnectorDeniedManagementReviewItemSchema, ConnectorApprovedAppliedManagementReviewItemSchema, ConnectorApprovedConnectManagementReviewItemSchema, ConnectorApprovedUnknownManagementReviewItemSchema, ConnectorManagementReviewItemSchema, ProgramReviewStatusBaseShape, ConnectorProgramReviewStatusSchema, ConnectorManagementReviewDecisionSchema, ConnectorManagementReviewDecisionResultSchema;
 var init_connector_schemas = __esm({
   "../shared/src/connector-schemas.ts"() {
     init_zod();
@@ -137717,6 +138584,7 @@ var init_connector_schemas = __esm({
       "migration_needs_reconcile"
     ]);
     ConnectorOperationClassificationSchema = external_exports.enum(["read", "write", "destructive"]);
+    ConnectorAccessLevelSchema = external_exports.enum(["read", "read-write"]);
     ConnectorRetryPolicySchema = external_exports.enum(["never", "provider_idempotency_key"]);
     ConnectorOperationRevisionSchema = external_exports.object({
       id: external_exports.string().min(1),
@@ -138063,14 +138931,19 @@ var init_connector_schemas = __esm({
     ConnectorReconciliationPreviewRequestSchema = external_exports.object({ connectionId: ConnectionIdSchema }).strict();
     ConnectorReconciliationGrantSelectionSchema = external_exports.object({
       agentId: external_exports.string().min(1),
-      operationRevisionIds: external_exports.array(external_exports.string().min(1))
+      operationRevisionIds: external_exports.array(external_exports.string().min(1)),
+      level: ConnectorAccessLevelSchema.optional()
     }).strict();
     ConnectorReconciliationEveryAgentSelectionSchema = external_exports.object({
-      operationRevisionIds: external_exports.array(external_exports.string().min(1))
+      operationRevisionIds: external_exports.array(external_exports.string().min(1)),
+      /** The level these revisions are, kept as the app changes; absent for exact actions. */
+      level: ConnectorAccessLevelSchema.optional()
     }).strict();
     ConnectorReconciliationEveryAgentStateSchema = external_exports.object({
       available: external_exports.boolean(),
-      operationRevisionIds: external_exports.array(external_exports.string().min(1))
+      operationRevisionIds: external_exports.array(external_exports.string().min(1)),
+      /** The level the owner chose for every agent; absent for exact actions or no sharing. */
+      level: ConnectorAccessLevelSchema.optional()
     }).strict();
     ConnectorEveryAgentRevokeResponseSchema = external_exports.object({
       connectionId: ConnectionIdSchema,
@@ -138116,7 +138989,7 @@ var init_connector_schemas = __esm({
     ConnectionTargetSchema = ReviewActionBaseSchema.extend({
       connectionId: ConnectionIdSchema
     }).strict();
-    ConnectorRequestAccessSchema = external_exports.enum(["read", "read-write"]);
+    ConnectorRequestAccessSchema = ConnectorAccessLevelSchema;
     ConnectorReviewActionSchema = external_exports.discriminatedUnion("kind", [
       ReviewActionBaseSchema.extend({
         kind: external_exports.literal("connect"),
@@ -138596,7 +139469,14 @@ var init_connector_provider = __esm({
       /** Why a configured provider is not registered (secret-free), when it isn't. */
       error: external_exports.string().optional(),
       /** Which credential kind the stored key validated as, when the provider reports it. */
-      keyKind: ConnectorKeyKindSchema.optional()
+      keyKind: ConnectorKeyKindSchema.optional(),
+      /**
+       * When DorkOS checks this key again on its own, while a check is scheduled
+       * or running (a running one reads as now). Absent once it has stopped
+       * trying, so a client showing the error knows to read the status again
+       * and pick up the new line.
+       */
+      recheckAt: external_exports.string().datetime().optional()
     });
     ConnectorRecommendationKindSchema = external_exports.enum(["relay-adapter", "gateway", "raw-mcp"]);
     ConnectorRecommendationSchema = external_exports.object({
@@ -143779,12 +144659,12 @@ function flattenConfig(obj, prefix = "") {
 }
 function getDefault(key) {
   const parts = key.split(".");
-  let current = USER_CONFIG_DEFAULTS;
+  let current2 = USER_CONFIG_DEFAULTS;
   for (const part of parts) {
-    if (current === null || typeof current !== "object") return void 0;
-    current = current[part];
+    if (current2 === null || typeof current2 !== "object") return void 0;
+    current2 = current2[part];
   }
-  return current;
+  return current2;
 }
 function handleConfigDefault(store) {
   const config3 = store.getAll();
@@ -143816,20 +144696,20 @@ function formatConfigValue(value) {
 }
 function splitDotPath(key) {
   const segments = [];
-  let current = "";
+  let current2 = "";
   for (let index2 = 0; index2 < key.length; index2 += 1) {
     const char = key[index2];
     if (char === "\\" && index2 + 1 < key.length) {
-      current += key[index2 + 1];
+      current2 += key[index2 + 1];
       index2 += 1;
     } else if (char === ".") {
-      segments.push(current);
-      current = "";
+      segments.push(current2);
+      current2 = "";
     } else {
-      current += char;
+      current2 += char;
     }
   }
-  segments.push(current);
+  segments.push(current2);
   return segments;
 }
 function patchForPath(key, value) {
@@ -144652,7 +145532,7 @@ if (process.argv[2] === "community") {
       })
     );
     const exitCode = await dispatcher.runCommunityDispatcher(process.argv.slice(3), {
-      cliVersion: "0.92.0",
+      cliVersion: "0.93.0",
       dorkHome: DORK_HOME,
       processEnv: childEnv,
       parseRelease: (bytes) => releaseContract.parseCompatibleCommunityReleaseManifest(
@@ -144660,7 +145540,7 @@ if (process.argv[2] === "community") {
         {
           platform: { os: "linux", architecture: "amd64" },
           configSchemaVersion: releaseContract.COMMUNITY_CONFIG_SCHEMA_VERSION,
-          migrationCompatibilityId: "sha256:fda264096ca0d6d4da2413c62527af3a89266af2a101954a429aff2ee3212e37"
+          migrationCompatibilityId: "sha256:a97601bea5580e9a1502e3cb0f9aabe991e7db5809b159cdd3a669649c2d55bd"
         }
       )
     });
@@ -144670,7 +145550,7 @@ if (process.argv[2] === "community") {
     process.exit(1);
   }
 }
-var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.92.0" });
+var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.93.0" });
 var uninstallCliErrorHandlers = cliErrorReporter ? installCliErrorHandlers(cliErrorReporter) : void 0;
 if (process.argv[2] === "doctor") {
   process.env.DORK_HOME = DORK_HOME;
@@ -144680,7 +145560,7 @@ if (process.argv[2] === "doctor") {
 if (process.argv[2] === "feedback") {
   process.env.DORK_HOME = DORK_HOME;
   const { runFeedback: runFeedback2 } = await Promise.resolve().then(() => (init_feedback2(), feedback_exports));
-  process.exit(await runFeedback2(DORK_HOME, "0.92.0", process.argv.slice(3)));
+  process.exit(await runFeedback2(DORK_HOME, "0.93.0", process.argv.slice(3)));
 }
 if (process.argv[2] === "auth") {
   process.env.DORK_HOME = DORK_HOME;
@@ -144779,7 +145659,7 @@ if (process.argv[2] === "agent" || process.argv[2] === "task" || process.argv[2]
     }
   }
   const { runVersionDispatcher: runVersionDispatcher2 } = await Promise.resolve().then(() => (init_version5(), version_exports));
-  process.exit(await runVersionDispatcher2("0.92.0", DORK_HOME, subArgs));
+  process.exit(await runVersionDispatcher2("0.93.0", DORK_HOME, subArgs));
 }
 function parseCliArgs() {
   try {
@@ -144904,14 +145784,14 @@ Examples:
   process.exit(0);
 }
 if (values.version) {
-  console.log("0.92.0");
+  console.log("0.93.0");
   process.exit(0);
 }
 if (values["post-install-check"]) {
   const claudeFound = checkClaude();
   const coreExtensionsFound = checkCoreExtensions();
   const extensionsCompile = await checkExtensionCompilation();
-  console.log(`dorkos ${"0.92.0"}`);
+  console.log(`dorkos ${"0.93.0"}`);
   if (!coreExtensionsFound) {
     console.log("Installation incomplete \u2014 bundled core extensions are missing.");
   }
@@ -145065,7 +145945,7 @@ if (fs31.existsSync(envPath)) {
 }
 uninstallCliErrorHandlers?.();
 process.env.DORKOS_CLI_ENTRYPOINT = fileURLToPath6(import.meta.url);
-process.env.DORKOS_CLI_VERSION = "0.92.0";
+process.env.DORKOS_CLI_VERSION = "0.93.0";
 var server;
 try {
   server = await import("../server/index.js");
@@ -145090,7 +145970,7 @@ var ansiReset = "\x1B[0m";
 console.log("");
 console.log(`${purple}${logo}${ansiReset}`);
 console.log("");
-console.log(`  DorkOS v${"0.92.0"}`);
+console.log(`  DorkOS v${"0.93.0"}`);
 console.log(`  Local:   ${link(localUrl, localUrl)}`);
 var nets = networkInterfaces();
 var networkUrl = null;
@@ -145116,9 +145996,9 @@ if (shouldOpenBrowser && process.stdin.isTTY) {
   const openCmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
   exec(`${openCmd} ${localUrl}`);
 }
-checkForUpdate("0.92.0").then((latestVersion) => {
+checkForUpdate("0.93.0").then((latestVersion) => {
   if (latestVersion) {
-    const msg = `Update available: ${"0.92.0"} \u2192 ${latestVersion}`;
+    const msg = `Update available: ${"0.93.0"} \u2192 ${latestVersion}`;
     const cmd = "Run npm install -g dorkos@latest to update";
     const width = Math.max(msg.length, cmd.length) + 6;
     const pad2 = (s2) => `\u2502   ${s2}${" ".repeat(width - s2.length - 6)}   \u2502`;