dorkos 0.96.0 → 0.97.0

package/dist/bin/cli.js

@@ -21455,7 +21455,14 @@ var init_config_schema = __esm({
        * whole plugin folder's digest the person said yes to. Any further change
        * asks again, because a path alone no longer says what is there.
        */
-      digest: external_exports.string().min(1).optional()
+      digest: external_exports.string().min(1).optional(),
+      /**
+       * The real path of the dev link this approval was given to (DOR-2696);
+       * absent for an installed copy. A dev link sits at its package's normal
+       * folder, so without this an approval of the installed copy would cover the
+       * link's files at the same path, and the other way round.
+       */
+      devLink: external_exports.string().min(1).optional()
     });
     ExtensionDismissedApprovalSchema = external_exports.object({
       /** Absolute path of the extension directory the person declined. */
@@ -25972,7 +25979,7 @@ import path2 from "path";
 import { fileURLToPath } from "url";
 function resolveVersion() {
   if (env2.DORKOS_VERSION_OVERRIDE) return env2.DORKOS_VERSION_OVERRIDE;
-  if (true) return "0.96.0";
+  if (true) return "0.97.0";
   const pkgPath = path2.join(path2.dirname(fileURLToPath(import.meta.url)), "../../package.json");
   return JSON.parse(readFileSync(pkgPath, "utf-8")).version;
 }
@@ -32779,8 +32786,9 @@ function describeScheduleArrival(startsEnabled) {
   return startsEnabled ? "waits for your approval before its first run" : "arrives switched off, and would wait for your approval too";
 }
 function describeHookEvent(event, matcher) {
-  const when = HOOK_EVENT_SUMMARY[event] ?? `on ${event}`;
-  return matcher ? `${when} (${matcher})` : when;
+  const whole = (value) => revealHiddenCharacters(JSON.stringify(value));
+  const when = HOOK_EVENT_SUMMARY[event] ?? `on ${whole(event)}`;
+  return matcher ? `${when} (${whole(matcher)})` : when;
 }
 function describeProgramLine(command, args = []) {
   return [command, ...args].map((part) => revealHiddenCharacters(JSON.stringify(part))).join(" ");
@@ -32801,9 +32809,21 @@ function skillCommandKind(source) {
 function isInstallSiblingName(name) {
   return MARKETPLACE_INSTALL_SIBLING_MARKERS.some((marker) => name.includes(marker));
 }
-var SCHEDULE_PERMISSION_MODE_SUMMARY, HOOK_EVENT_SUMMARY, PLUGIN_PROGRAMS_SCOPE_NOTE, HIDDEN_CHARACTERS, MARKETPLACE_BACKUP_DIR_MARKER, MARKETPLACE_STAGE_DIR_MARKER, MARKETPLACE_UNINSTALL_DIR_MARKER, MARKETPLACE_INSTALL_SIBLING_MARKERS;
+function parseDevLinksFile(text2) {
+  let raw;
+  try {
+    raw = JSON.parse(text2);
+  } catch {
+    return "unreadable";
+  }
+  const parsed = DevLinksFileSchema.safeParse(raw);
+  return parsed.success ? parsed.data : "unreadable";
+}
+var SCHEDULE_PERMISSION_MODE_SUMMARY, HOOK_EVENT_SUMMARY, PLUGIN_PROGRAMS_SCOPE_NOTE, HIDDEN_CHARACTERS, MARKETPLACE_BACKUP_DIR_MARKER, MARKETPLACE_STAGE_DIR_MARKER, MARKETPLACE_UNINSTALL_DIR_MARKER, MARKETPLACE_DEVLINK_PARKED_MARKER, MARKETPLACE_INSTALL_SIBLING_MARKERS, DEV_LINKS_FILE, DevLinkPackageNameSchema, DevLinkPackageTypeSchema, DevLinkViaSchema, DevLinkRecordSchema, DevLinksFileSchema;
 var init_marketplace_schemas = __esm({
   "../shared/src/marketplace-schemas.ts"() {
+    init_zod();
+    init_config_schema();
     SCHEDULE_PERMISSION_MODE_SUMMARY = {
       default: "runs at the most careful setting its agent offers",
       plan: "can only read and plan, and cannot change anything",
@@ -32831,11 +32851,60 @@ var init_marketplace_schemas = __esm({
     MARKETPLACE_BACKUP_DIR_MARKER = ".dorkos-bak-";
     MARKETPLACE_STAGE_DIR_MARKER = ".dorkos-stage-";
     MARKETPLACE_UNINSTALL_DIR_MARKER = ".dorkos-uninstall-";
+    MARKETPLACE_DEVLINK_PARKED_MARKER = ".dorkos-devlink-parked";
     MARKETPLACE_INSTALL_SIBLING_MARKERS = [
       MARKETPLACE_BACKUP_DIR_MARKER,
       MARKETPLACE_STAGE_DIR_MARKER,
-      MARKETPLACE_UNINSTALL_DIR_MARKER
+      MARKETPLACE_UNINSTALL_DIR_MARKER,
+      MARKETPLACE_DEVLINK_PARKED_MARKER
     ];
+    DEV_LINKS_FILE = "marketplace/dev-links.json";
+    DevLinkPackageNameSchema = external_exports.string().min(1).max(64).regex(/^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/).refine((name) => !name.includes("--"), "Must not contain consecutive hyphens");
+    DevLinkPackageTypeSchema = external_exports.enum(["plugin", "skill-pack"]);
+    DevLinkViaSchema = external_exports.enum(["app", "terminal", "agent-card"]);
+    DevLinkRecordSchema = external_exports.object({
+      /** The package name from the folder's manifest at link time. */
+      name: DevLinkPackageNameSchema,
+      /** The package type from the folder's manifest at link time. */
+      type: DevLinkPackageTypeSchema,
+      /** `global` for every session, `project` for one project. */
+      scope: external_exports.enum(["global", "project"]),
+      /** The canonical project folder; present exactly when `scope` is `project`. */
+      projectPath: external_exports.string().min(1).optional(),
+      /** Absolute path of the link itself: the package's normal slot. */
+      slot: external_exports.string().min(1),
+      /** The real path of the working folder the link points at. */
+      target: external_exports.string().min(1),
+      /** Absolute path of the installed copy set aside for the link, when there was one. */
+      parked: external_exports.string().min(1).optional(),
+      /** What unlink puts back for the parked copy, or for another copy of an extension id. */
+      restoreApprovals: external_exports.object({
+        /** Extension approvals the link's own approvals replaced, by extension id. */
+        extensions: external_exports.record(external_exports.string(), ExtensionApprovedSourceSchema).optional(),
+        /** Which of those ids were approved to run then; the rest only had a source. */
+        runIds: external_exports.array(external_exports.string()).optional(),
+        /** Stored global-activation entries (`<name>@global-<digest>`) of the parked copy. */
+        globalActivation: external_exports.array(external_exports.string()).optional()
+      }).optional(),
+      /**
+       * Project hook approvals (`harness.approvedHooks` entries) this link
+       * recorded when it was made, because the card showed those hooks. Unlink
+       * removes exactly these, so an approval that was there before the link
+       * (the installed copy's, the same hooks in the same project) stays.
+       */
+      grantedHooks: external_exports.array(external_exports.string()).optional(),
+      /** When the link was made. ISO 8601. */
+      linkedAt: external_exports.string().min(1),
+      /** Where the person said yes. */
+      linkedVia: DevLinkViaSchema
+    }).refine((record2) => record2.scope === "project" === (record2.projectPath !== void 0), {
+      message: "A project dev link names its project, and a global one does not",
+      path: ["projectPath"]
+    });
+    DevLinksFileSchema = external_exports.object({
+      version: external_exports.literal(1),
+      links: external_exports.array(DevLinkRecordSchema)
+    });
   }
 });
 
@@ -36183,6 +36252,7 @@ function parseSkillFile(filePath, content, schema3, options) {
 }
 var init_parser = __esm({
   "../skills/src/parser.ts"() {
+    "use strict";
     init_constants3();
     init_frontmatter();
   }
@@ -39335,6 +39405,7 @@ var init_capabilities = __esm({
 var PROJECT_NAME_PATTERN, ProjectRefSchema, ProjectInfoSchema, ProjectListResponseSchema, ProjectResolveQuerySchema, ProjectResolveResponseSchema, AccountEligibilityRowSchema, AccountEligibilityQuerySchema, AccountEligibilityResponseSchema, ProjectAccountsRequestSchema, ProjectWithoutCreditsRequestSchema, OnlyProjectsRequestSchema, OnlyProjectsResponseSchema;
 var init_project_schemas = __esm({
   "../shared/src/project-schemas.ts"() {
+    "use strict";
     init_zod();
     init_zod_openapi();
     extendZodWithOpenApiOnce();
@@ -67306,7 +67377,7 @@ var init_factory = __esm({
         }
         return transformedData;
       };
-      const transformOutput = async (data, inputModel, select2 = [], join54) => {
+      const transformOutput = async (data, inputModel, select2 = [], join55) => {
         const transformSingleOutput = async (data2, inputModel2, select3 = []) => {
           if (!data2) return null;
           const modelKey2 = getDefaultModelName(inputModel2);
@@ -67343,10 +67414,10 @@ var init_factory = __esm({
           }
           return transformedData2;
         };
-        if (!join54 || Object.keys(join54).length === 0) return await transformSingleOutput(data, inputModel, select2);
+        if (!join55 || Object.keys(join55).length === 0) return await transformSingleOutput(data, inputModel, select2);
         const modelKey = getDefaultModelName(inputModel);
         const transformedData = await transformSingleOutput(data, modelKey, select2);
-        const requiredModels = Object.entries(join54).map(([model, joinConfig]) => ({
+        const requiredModels = Object.entries(join55).map(([model, joinConfig]) => ({
           modelName: model,
           defaultModelName: joinConfig.modelKey ?? getDefaultModelName(model),
           joinConfig
@@ -67445,8 +67516,8 @@ var init_factory = __esm({
         if (!unsanitizedJoin) return void 0;
         if (Object.keys(unsanitizedJoin).length === 0) return void 0;
         const transformedJoin = {};
-        for (const [model, join54] of Object.entries(unsanitizedJoin)) {
-          if (!join54) continue;
+        for (const [model, join55] of Object.entries(unsanitizedJoin)) {
+          if (!join55) continue;
           const defaultModelName = getDefaultModelName(model);
           const defaultBaseModelName = getDefaultModelName(baseModel);
           let foreignKeys = Object.entries(schema3[defaultModelName].fields).filter(([field, fieldAttributes]) => fieldAttributes.references && getDefaultModelName(fieldAttributes.references.model) === defaultBaseModelName);
@@ -67487,7 +67558,7 @@ var init_factory = __esm({
           const isUnique = to === "id" ? true : foreignKeyAttributes.unique ?? false;
           let limit = options.advanced?.database?.defaultFindManyLimit ?? 100;
           if (isUnique) limit = 1;
-          else if (typeof join54 === "object" && typeof join54.limit === "number") limit = join54.limit;
+          else if (typeof join55 === "object" && typeof join55.limit === "number") limit = join55.limit;
           transformedJoin[getModelName(model)] = {
             modelKey: model,
             on: {
@@ -67720,21 +67791,21 @@ var init_factory = __esm({
             where: unsafeWhere,
             action: "findOne"
           });
-          let join54;
+          let join55;
           let passJoinToAdapter = true;
           if (!config3.disableTransformJoin) {
             const result2 = transformJoinClause(modelKey, unsafeJoin, select2);
             if (result2) {
-              join54 = result2.join;
+              join55 = result2.join;
               select2 = result2.select;
             }
-            if (!options.advanced?.database?.joins && join54 && Object.keys(join54).length > 0) passJoinToAdapter = false;
-          } else join54 = unsafeJoin;
+            if (!options.advanced?.database?.joins && join55 && Object.keys(join55).length > 0) passJoinToAdapter = false;
+          } else join55 = unsafeJoin;
           debugLog({ method: "findOne" }, `${formatTransactionId(thisTransactionId)} ${formatStep(1, 3)}`, `${formatMethod("findOne")}:`, {
             model,
             where,
             select: select2,
-            join: join54
+            join: join55
           });
           const res = await withSpan3(`db findOne ${model}`, {
             [ATTR_DB_OPERATION_NAME]: "findOne",
@@ -67744,14 +67815,14 @@ var init_factory = __esm({
             modelKey,
             where,
             select: select2,
-            join: passJoinToAdapter ? join54 : void 0
+            join: passJoinToAdapter ? join55 : void 0
           }));
           debugLog({ method: "findOne" }, `${formatTransactionId(thisTransactionId)} ${formatStep(2, 3)}`, `${formatMethod("findOne")} ${formatAction("DB Result")}:`, {
             model,
             data: res
           });
           let transformed = res;
-          if (!config3.disableTransformOutput) transformed = await transformOutput(res, modelKey, select2, join54);
+          if (!config3.disableTransformOutput) transformed = await transformOutput(res, modelKey, select2, join55);
           debugLog({ method: "findOne" }, `${formatTransactionId(thisTransactionId)} ${formatStep(3, 3)}`, `${formatMethod("findOne")} ${formatAction("Parsed Result")}:`, {
             model,
             data: transformed
@@ -67769,23 +67840,23 @@ var init_factory = __esm({
             where: unsafeWhere,
             action: "findMany"
           });
-          let join54;
+          let join55;
           let passJoinToAdapter = true;
           if (!config3.disableTransformJoin) {
             const result2 = transformJoinClause(modelKey, unsafeJoin, select2);
             if (result2) {
-              join54 = result2.join;
+              join55 = result2.join;
               select2 = result2.select;
             }
-            if (!options.advanced?.database?.joins && join54 && Object.keys(join54).length > 0) passJoinToAdapter = false;
-          } else join54 = unsafeJoin;
+            if (!options.advanced?.database?.joins && join55 && Object.keys(join55).length > 0) passJoinToAdapter = false;
+          } else join55 = unsafeJoin;
           debugLog({ method: "findMany" }, `${formatTransactionId(thisTransactionId)} ${formatStep(1, 3)}`, `${formatMethod("findMany")}:`, {
             model,
             where,
             limit,
             sortBy,
             offset,
-            join: join54
+            join: join55
           });
           const res = await withSpan3(`db findMany ${model}`, {
             [ATTR_DB_OPERATION_NAME]: "findMany",
@@ -67798,7 +67869,7 @@ var init_factory = __esm({
             select: select2,
             sortBy,
             offset,
-            join: passJoinToAdapter ? join54 : void 0
+            join: passJoinToAdapter ? join55 : void 0
           }));
           debugLog({ method: "findMany" }, `${formatTransactionId(thisTransactionId)} ${formatStep(2, 3)}`, `${formatMethod("findMany")} ${formatAction("DB Result")}:`, {
             model,
@@ -67806,7 +67877,7 @@ var init_factory = __esm({
           });
           let transformed = res;
           if (!config3.disableTransformOutput) transformed = await Promise.all(res.map(async (r3) => {
-            return await transformOutput(r3, modelKey, void 0, join54);
+            return await transformOutput(r3, modelKey, void 0, join55);
           }));
           debugLog({ method: "findMany" }, `${formatTransactionId(thisTransactionId)} ${formatStep(3, 3)}`, `${formatMethod("findMany")} ${formatAction("Parsed Result")}:`, {
             model,
@@ -68161,7 +68232,7 @@ var init_dist6 = __esm({
               return sortBy.direction === "asc" ? comparison : -comparison;
             });
           };
-          function convertWhereClause(where, model, modelKey, join54, select2) {
+          function convertWhereClause(where, model, modelKey, join55, select2) {
             const baseRecords = (() => {
               const table2 = activeDb2[model];
               if (!table2) {
@@ -68221,14 +68292,14 @@ var init_dist6 = __esm({
               })))));
               return records;
             })();
-            if (!join54) return baseRecords;
+            if (!join55) return baseRecords;
             const grouped = /* @__PURE__ */ new Map();
             const seenIds = /* @__PURE__ */ new Map();
             for (const baseRecord of baseRecords) {
               const baseId = String(baseRecord.id);
               if (!grouped.has(baseId)) {
                 const nested = { ...baseRecord };
-                for (const [joinModel, joinAttr] of Object.entries(join54)) {
+                for (const [joinModel, joinAttr] of Object.entries(join55)) {
                   const joinModelName = joinModel;
                   if (joinAttr.relation === "one-to-one") nested[joinModelName] = null;
                   else {
@@ -68239,7 +68310,7 @@ var init_dist6 = __esm({
                 grouped.set(baseId, nested);
               }
               const nestedEntry = grouped.get(baseId);
-              for (const [joinModel, joinAttr] of Object.entries(join54)) {
+              for (const [joinModel, joinAttr] of Object.entries(join55)) {
                 const joinModelName = joinModel;
                 const joinTable = activeDb2[joinModelName];
                 if (!joinTable) {
@@ -68272,18 +68343,18 @@ var init_dist6 = __esm({
               activeDb2[model].push(data);
               return data;
             },
-            findOne: async ({ model, modelKey = model, where, select: select2, join: join54 }) => {
-              const res = convertWhereClause(where, model, modelKey, join54, select2);
-              if (join54) {
+            findOne: async ({ model, modelKey = model, where, select: select2, join: join55 }) => {
+              const res = convertWhereClause(where, model, modelKey, join55, select2);
+              if (join55) {
                 const resArray = res;
                 if (!resArray.length) return null;
                 return resArray[0];
               }
               return res[0] || null;
             },
-            findMany: async ({ model, modelKey = model, where, sortBy, limit, select: select2, offset, join: join54 }) => {
-              const res = convertWhereClause(where || [], model, modelKey, join54, select2);
-              if (join54) {
+            findMany: async ({ model, modelKey = model, where, sortBy, limit, select: select2, offset, join: join55 }) => {
+              const res = convertWhereClause(where || [], model, modelKey, join55, select2);
+              if (join55) {
                 const resArray = res;
                 if (!resArray.length) return [];
                 applySortToRecords(resArray, sortBy, modelKey);
@@ -70281,10 +70352,10 @@ var init_query_node = __esm({
           where: node2.where ? WhereNode.cloneWithOperation(node2.where, "And", operation) : WhereNode.create(operation)
         });
       },
-      cloneWithJoin(node2, join54) {
+      cloneWithJoin(node2, join55) {
         return freeze({
           ...node2,
-          joins: node2.joins ? freeze([...node2.joins, join54]) : freeze([join54])
+          joins: node2.joins ? freeze([...node2.joins, join55]) : freeze([join55])
         });
       },
       cloneWithReturning(node2, selections) {
@@ -74795,8 +74866,8 @@ var init_with_schema_transformer = __esm({
           this.#collectSchemableIdsFromTableExpr(node2.table, schemableIds);
         }
         if ("joins" in node2 && node2.joins) {
-          for (const join54 of node2.joins) {
-            this.#collectSchemableIdsFromTableExpr(join54.table, schemableIds);
+          for (const join55 of node2.joins) {
+            this.#collectSchemableIdsFromTableExpr(join55.table, schemableIds);
           }
         }
         if ("using" in node2 && node2.using) {
@@ -86968,7 +87039,7 @@ var init_mssql_introspector = __esm({
         return await this.#db.selectFrom("sys.schemas").select("name").execute();
       }
       async getTables(options = { withInternalKyselyTables: false }) {
-        const rawColumns = await this.#db.selectFrom("sys.tables as tables").leftJoin("sys.schemas as table_schemas", "table_schemas.schema_id", "tables.schema_id").innerJoin("sys.columns as columns", "columns.object_id", "tables.object_id").innerJoin("sys.types as types", "types.user_type_id", "columns.user_type_id").leftJoin("sys.schemas as type_schemas", "type_schemas.schema_id", "types.schema_id").leftJoin("sys.extended_properties as comments", (join54) => join54.onRef("comments.major_id", "=", "tables.object_id").onRef("comments.minor_id", "=", "columns.column_id").on("comments.name", "=", "MS_Description")).$if(!options.withInternalKyselyTables, (qb) => qb.where("tables.name", "!=", DEFAULT_MIGRATION_TABLE).where("tables.name", "!=", DEFAULT_MIGRATION_LOCK_TABLE)).select([
+        const rawColumns = await this.#db.selectFrom("sys.tables as tables").leftJoin("sys.schemas as table_schemas", "table_schemas.schema_id", "tables.schema_id").innerJoin("sys.columns as columns", "columns.object_id", "tables.object_id").innerJoin("sys.types as types", "types.user_type_id", "columns.user_type_id").leftJoin("sys.schemas as type_schemas", "type_schemas.schema_id", "types.schema_id").leftJoin("sys.extended_properties as comments", (join55) => join55.onRef("comments.major_id", "=", "tables.object_id").onRef("comments.minor_id", "=", "columns.column_id").on("comments.name", "=", "MS_Description")).$if(!options.withInternalKyselyTables, (qb) => qb.where("tables.name", "!=", DEFAULT_MIGRATION_TABLE).where("tables.name", "!=", DEFAULT_MIGRATION_LOCK_TABLE)).select([
           "tables.name as table_name",
           (eb) => eb.ref("tables.type").$castTo().as("table_type"),
           "table_schemas.name as table_schema_name",
@@ -86983,7 +87054,7 @@ var init_mssql_introspector = __esm({
           "types.name as type_name",
           "type_schemas.name as type_schema_name",
           "comments.value as column_comment"
-        ]).unionAll(this.#db.selectFrom("sys.views as views").leftJoin("sys.schemas as view_schemas", "view_schemas.schema_id", "views.schema_id").innerJoin("sys.columns as columns", "columns.object_id", "views.object_id").innerJoin("sys.types as types", "types.user_type_id", "columns.user_type_id").leftJoin("sys.schemas as type_schemas", "type_schemas.schema_id", "types.schema_id").leftJoin("sys.extended_properties as comments", (join54) => join54.onRef("comments.major_id", "=", "views.object_id").onRef("comments.minor_id", "=", "columns.column_id").on("comments.name", "=", "MS_Description")).select([
+        ]).unionAll(this.#db.selectFrom("sys.views as views").leftJoin("sys.schemas as view_schemas", "view_schemas.schema_id", "views.schema_id").innerJoin("sys.columns as columns", "columns.object_id", "views.object_id").innerJoin("sys.types as types", "types.user_type_id", "columns.user_type_id").leftJoin("sys.schemas as type_schemas", "type_schemas.schema_id", "types.schema_id").leftJoin("sys.extended_properties as comments", (join55) => join55.onRef("comments.major_id", "=", "views.object_id").onRef("comments.minor_id", "=", "columns.column_id").on("comments.name", "=", "MS_Description")).select([
           "views.name as table_name",
           "views.type as table_type",
           "view_schemas.name as table_schema_name",
@@ -88210,10 +88281,10 @@ var init_dist8 = __esm({
             mysqlNoIdWarned = true;
             logger2.warn(`[Kysely Adapter] MySQL does not support INSERT...RETURNING. With generateId set to false, the adapter uses best-effort fallback strategies (unique columns, full-field match) to retrieve inserted rows. For reliable behavior, use Better Auth's default ID generation, a custom generateId function, or generateId: "serial" for auto-increment.`);
           }
-          const selectAllJoins = (join54) => {
+          const selectAllJoins = (join55) => {
             const allSelects = [];
             const allSelectsStr = [];
-            if (join54) for (const [joinModel, joinConfig] of Object.entries(join54)) {
+            if (join55) for (const [joinModel, joinConfig] of Object.entries(join55)) {
               const fields = schema3[joinConfig.modelKey ?? getDefaultModelName(joinModel)]?.fields;
               const [_joinModelSchema, joinModelName] = joinModel.includes(".") ? joinModel.split(".") : [void 0, joinModel];
               if (!fields) continue;
@@ -88438,7 +88509,7 @@ var init_dist8 = __esm({
             async create({ data, model, modelKey = model }) {
               return await withReturning(data, db2.insertInto(model).values(data), model, modelKey, []);
             },
-            async findOne({ model, modelKey = model, where, select: select2, join: join54 }) {
+            async findOne({ model, modelKey = model, where, select: select2, join: join55 }) {
               const { and: and2, or: or2 } = convertWhereClause(model, modelKey, where);
               let query = db2.selectFrom((eb) => {
                 let b2 = eb.selectFrom(model);
@@ -88451,19 +88522,19 @@ var init_dist8 = __esm({
                 else b2 = b2.selectAll();
                 return b2.as("primary");
               }).selectAll("primary");
-              if (join54) for (const [joinModel, joinAttr] of Object.entries(join54)) {
+              if (join55) for (const [joinModel, joinAttr] of Object.entries(join55)) {
                 const [_joinModelSchema, joinModelName] = joinModel.includes(".") ? joinModel.split(".") : [void 0, joinModel];
-                query = query.leftJoin(`${joinModel} as join_${joinModelName}`, (join55) => join55.onRef(`join_${joinModelName}.${joinAttr.on.to}`, "=", `primary.${joinAttr.on.from}`));
+                query = query.leftJoin(`${joinModel} as join_${joinModelName}`, (join56) => join56.onRef(`join_${joinModelName}.${joinAttr.on.to}`, "=", `primary.${joinAttr.on.from}`));
               }
-              const { allSelectsStr, allSelects } = selectAllJoins(join54);
+              const { allSelectsStr, allSelects } = selectAllJoins(join55);
               query = query.select(allSelects);
               const res = await query.execute();
               if (!res || !Array.isArray(res) || res.length === 0) return null;
               const row2 = res[0];
-              if (join54) return processJoinedResults(res, join54, allSelectsStr)[0];
+              if (join55) return processJoinedResults(res, join55, allSelectsStr)[0];
               return row2;
             },
-            async findMany({ model, modelKey = model, where, limit, select: select2, offset, sortBy, join: join54 }) {
+            async findMany({ model, modelKey = model, where, limit, select: select2, offset, sortBy, join: join55 }) {
               const { and: and2, or: or2 } = convertWhereClause(model, modelKey, where);
               let query = db2.selectFrom((eb) => {
                 let b2 = eb.selectFrom(model);
@@ -88492,11 +88563,11 @@ var init_dist8 = __esm({
                 else b2 = b2.selectAll();
                 return b2.as("primary");
               }).selectAll("primary");
-              if (join54) for (const [joinModel, joinAttr] of Object.entries(join54)) {
+              if (join55) for (const [joinModel, joinAttr] of Object.entries(join55)) {
                 const [_joinModelSchema, joinModelName] = joinModel.includes(".") ? joinModel.split(".") : [void 0, joinModel];
-                query = query.leftJoin(`${joinModel} as join_${joinModelName}`, (join55) => join55.onRef(`join_${joinModelName}.${joinAttr.on.to}`, "=", `primary.${joinAttr.on.from}`));
+                query = query.leftJoin(`${joinModel} as join_${joinModelName}`, (join56) => join56.onRef(`join_${joinModelName}.${joinAttr.on.to}`, "=", `primary.${joinAttr.on.from}`));
               }
-              const { allSelectsStr, allSelects } = selectAllJoins(join54);
+              const { allSelectsStr, allSelects } = selectAllJoins(join55);
               query = query.select(allSelects);
               if (sortBy?.field) query = query.orderBy(`${getFieldName({
                 model: modelKey,
@@ -88504,7 +88575,7 @@ var init_dist8 = __esm({
               })}`, sortBy.direction);
               const res = await query.execute();
               if (!res) return [];
-              if (join54) return processJoinedResults(res, join54, allSelectsStr);
+              if (join55) return processJoinedResults(res, join55, allSelectsStr);
               return res;
             },
             async update({ model, modelKey = model, where, update: values2 }) {
@@ -91437,7 +91508,7 @@ var init_sql2 = __esm({
         return new SQL([new StringChunk(str2)]);
       }
       sql22.raw = raw;
-      function join54(chunks, separator) {
+      function join55(chunks, separator) {
         const result2 = [];
         for (const [i2, chunk] of chunks.entries()) {
           if (i2 > 0 && separator !== void 0) {
@@ -91447,7 +91518,7 @@ var init_sql2 = __esm({
         }
         return new SQL(result2);
       }
-      sql22.join = join54;
+      sql22.join = join55;
       function identifier(value) {
         return new Name(value);
       }
@@ -92798,10 +92869,10 @@ var init_dist11 = __esm({
             checkMissingFields(table2, modelKey, values2);
             return await withReturning(model, modelKey, db2.insert(table2).values(values2), values2);
           },
-          async findOne({ model, modelKey = model, where, select: select2, join: join54 }) {
+          async findOne({ model, modelKey = model, where, select: select2, join: join55 }) {
             const table2 = getSchema2(model);
             const clause = convertWhereClause(where, model, modelKey);
-            if (join54) {
+            if (join55) {
               const queryModel = getQueryModel(model);
               if (!db2.query || !queryModel) {
                 logger2.error(`[# Drizzle Adapter]: The model "${model}" was not found in the query object. Please update your Drizzle schema to include relations or re-generate using "npx auth@latest generate".`);
@@ -92811,7 +92882,7 @@ var init_dist11 = __esm({
                 const renamedJoinResults = [];
                 const relationKeys = getRelationKeysByModel().get(queryModel);
                 includes = {};
-                const joinEntries = Object.entries(join54);
+                const joinEntries = Object.entries(join55);
                 for (const [joinModel, joinAttr] of joinEntries) {
                   const limit = joinAttr.limit ?? options.advanced?.database?.defaultFindManyLimit ?? 100;
                   const isUnique = joinAttr.relation === "one-to-one";
@@ -92853,11 +92924,11 @@ var init_dist11 = __esm({
             if (!res.length) return null;
             return res[0];
           },
-          async findMany({ model, modelKey = model, where, sortBy, limit, select: select2, offset, join: join54 }) {
+          async findMany({ model, modelKey = model, where, sortBy, limit, select: select2, offset, join: join55 }) {
             const table2 = getSchema2(model);
             const clause = where ? convertWhereClause(where, model, modelKey) : [];
             const sortFn = sortBy?.direction === "desc" ? desc : asc;
-            if (join54) {
+            if (join55) {
               const queryModel = getQueryModel(model);
               if (!db2.query || !queryModel) {
                 logger2.error(`[# Drizzle Adapter]: The model "${model}" was not found in the query object. Please update your Drizzle schema to include relations or re-generate using "npx auth@latest generate".`);
@@ -92867,7 +92938,7 @@ var init_dist11 = __esm({
                 const renamedJoinResults = [];
                 const relationKeys = getRelationKeysByModel().get(queryModel);
                 includes = {};
-                const joinEntries = Object.entries(join54);
+                const joinEntries = Object.entries(join55);
                 for (const [joinModel, joinAttr] of joinEntries) {
                   const isUnique = joinAttr.relation === "one-to-one";
                   const limit2 = joinAttr.limit ?? options.advanced?.database?.defaultFindManyLimit ?? 100;
@@ -102930,7 +103001,7 @@ var init_select2 = __esm({
           const baseTableName = this.tableName;
           const tableName = getTableLikeName(table2);
           for (const item of extractUsedTable(table2)) this.usedTables.add(item);
-          if (typeof tableName === "string" && this.config.joins?.some((join54) => join54.alias === tableName)) {
+          if (typeof tableName === "string" && this.config.joins?.some((join55) => join55.alias === tableName)) {
             throw new Error(`Alias "${tableName}" is already used in this query`);
           }
           if (!this.isPartialSelect) {
@@ -103816,7 +103887,7 @@ var init_update = __esm({
       createJoin(joinType) {
         return (table2, on) => {
           const tableName = getTableLikeName(table2);
-          if (typeof tableName === "string" && this.config.joins.some((join54) => join54.alias === tableName)) {
+          if (typeof tableName === "string" && this.config.joins.some((join55) => join55.alias === tableName)) {
             throw new Error(`Alias "${tableName}" is already used in this query`);
           }
           if (typeof on === "function") {
@@ -109103,6 +109174,77 @@ var init_extension_decisions = __esm({
   }
 });
 
+// ../db/src/schema/extensions/extension-agent-sends.ts
+var EXTENSION_AGENT_SEND_STATUSES, extensionAgentSends, extensionAgentChats;
+var init_extension_agent_sends = __esm({
+  "../db/src/schema/extensions/extension-agent-sends.ts"() {
+    "use strict";
+    init_drizzle_orm();
+    init_sqlite_core();
+    EXTENSION_AGENT_SEND_STATUSES = [
+      "held",
+      "queued",
+      "started",
+      "done",
+      "failed"
+    ];
+    extensionAgentSends = sqliteTable(
+      "extension_agent_sends",
+      {
+        /** The message id: on the receipt, the queue row and every delivery event. */
+        id: text("id").primaryKey(),
+        /** The extension that sent it. Part of the key, so one extension's keys never answer another's. */
+        extensionId: text("extension_id").notNull(),
+        /** The extension's own key for this send (1-200 characters). */
+        idempotencyKey: text("idempotency_key").notNull(),
+        /** The Mesh agent it was for, when it was addressed to an agent rather than a chat. */
+        agentId: text("agent_id"),
+        /** The chat it went to (canonical id), or null while an agent's chat is not open yet. */
+        sessionId: text("session_id"),
+        /** The folder the chat runs in, as the dispatch resolved it; what a restart resumes it in. */
+        cwd: text("cwd"),
+        /** See {@link EXTENSION_AGENT_SEND_STATUSES}. */
+        status: text("status", { enum: EXTENSION_AGENT_SEND_STATUSES }).notNull(),
+        /** What the first send was told: running now, or waiting. */
+        receiptStatus: text("receipt_status", { enum: ["started", "queued"] }).notNull(),
+        /** Why the first send was told it is waiting (`busy`, `at_capacity`); null when it started. */
+        receiptReason: text("receipt_reason", { enum: ["busy", "at_capacity"] }),
+        /** Why it will never run, once `failed`; null otherwise. */
+        failureReason: text("failure_reason"),
+        /** The fenced message, kept only while `held`; null once it is dispatched. */
+        content: text("content"),
+        /** When it was sent (ISO 8601). The 24-hour key window is measured from here. */
+        createdAt: text("created_at").notNull(),
+        /** When its status last changed (ISO 8601). */
+        updatedAt: text("updated_at").notNull()
+      },
+      (table2) => [
+        uniqueIndex("extension_agent_sends_key_idx").on(table2.extensionId, table2.idempotencyKey),
+        index("extension_agent_sends_status_idx").on(table2.status),
+        check3(
+          "extension_agent_sends_status",
+          sql2`${table2.status} IN ('held', 'queued', 'started', 'done', 'failed')`
+        ),
+        check3("extension_agent_sends_receipt", sql2`${table2.receiptStatus} IN ('started', 'queued')`)
+      ]
+    );
+    extensionAgentChats = sqliteTable(
+      "extension_agent_chats",
+      {
+        /** The extension. */
+        extensionId: text("extension_id").notNull(),
+        /** The Mesh agent id. */
+        agentId: text("agent_id").notNull(),
+        /** The kept chat (canonical id). */
+        sessionId: text("session_id").notNull(),
+        /** When the chat was opened (ISO 8601). */
+        createdAt: text("created_at").notNull()
+      },
+      (table2) => [primaryKey({ columns: [table2.extensionId, table2.agentId] })]
+    );
+  }
+});
+
 // ../db/src/schema/canvas/channel.ts
 var canvasDocChannels, canvasDocEvents, canvasDocGrants, canvasDocBatches, canvasDocDeliveries, canvasDocIdentityIntents, canvasDocWriteIntents;
 var init_channel = __esm({
@@ -109348,6 +109490,7 @@ var schema_exports = {};
 __export(schema_exports, {
   DEFAULT_AMBIENT_MAX_ENTRIES: () => DEFAULT_AMBIENT_MAX_ENTRIES,
   EVERY_AGENT_GRANT_SUBJECT_ID: () => EVERY_AGENT_GRANT_SUBJECT_ID,
+  EXTENSION_AGENT_SEND_STATUSES: () => EXTENSION_AGENT_SEND_STATUSES,
   EXTENSION_DECISION_DEADLINE_STATES: () => EXTENSION_DECISION_DEADLINE_STATES,
   EXTENSION_DECISION_RESOLVERS: () => EXTENSION_DECISION_RESOLVERS,
   KNOWN_PROJECT_REPORT_KINDS: () => KNOWN_PROJECT_REPORT_KINDS,
@@ -109410,6 +109553,8 @@ __export(schema_exports, {
   connectorRuntimeBindings: () => connectorRuntimeBindings,
   connectorUsageAttempts: () => connectorUsageAttempts,
   connectorUsageTerminalReceipts: () => connectorUsageTerminalReceipts,
+  extensionAgentChats: () => extensionAgentChats,
+  extensionAgentSends: () => extensionAgentSends,
   extensionDecisions: () => extensionDecisions,
   handleTombstones: () => handleTombstones,
   knownProjectReporters: () => knownProjectReporters,
@@ -109497,6 +109642,7 @@ var init_schema4 = __esm({
     init_notifications();
     init_projects();
     init_extension_decisions();
+    init_extension_agent_sends();
     init_channel();
   }
 });
@@ -112612,7 +112758,12 @@ function permissionSeedForOrigin(origin) {
     // A resume after an account's reset goes to a session that is already
     // bound: its row is its power, and the origin must not add to it.
     //
+    // An extension's message to an agent is app data. No extension turns the
+    // operator's stop into a grant of its own, so the chat it opens is born
+    // with nothing seeded, like a connector event's.
+    //
     // The harness is not a surface anybody ships to.
+    case "extension-message":
     case "schedule":
     case "relay-binding":
     case "agent-dm":
@@ -119898,6 +120049,36 @@ var init_hooks_projection = __esm({
   }
 });
 
+// ../harness/src/plan/dev-link-labels.ts
+function devLinkLabel(folder) {
+  return `(dev link: ${folder})`;
+}
+function devLinkMarkerLine(folder) {
+  return `<!-- ${DEV_LINK_MARKER} ${folder.split("-->").join("--&gt;")} -->`;
+}
+function withDevLinkMarker(generatedLine, devLink) {
+  return devLink === void 0 ? generatedLine : `${generatedLine}
+${devLinkMarkerLine(devLink)}`;
+}
+function labelDevLinkActions(actions, plugin) {
+  const folder = plugin.devLink?.path;
+  if (folder === void 0) return actions;
+  const label = devLinkLabel(folder);
+  for (const action of actions) {
+    action.devLink = folder;
+    action.reason = action.reason === void 0 ? label : `${action.reason} ${label}`;
+  }
+  return actions;
+}
+var DEV_LINK_MARKER, MANAGED_HOOK_DEV_LINK_KEY;
+var init_dev_link_labels = __esm({
+  "../harness/src/plan/dev-link-labels.ts"() {
+    "use strict";
+    DEV_LINK_MARKER = "dorkos:dev-link";
+    MANAGED_HOOK_DEV_LINK_KEY = "_dorkosDevLink";
+  }
+});
+
 // ../harness/src/plan/command-formats.ts
 function commandDropReason(harness) {
   const format = HARNESS_COMMAND_FORMATS[harness];
@@ -119958,9 +120139,12 @@ function pluginEnvPrefix(absInstallDir, platform3) {
   const data = shellQuote(pluginDataText(absInstallDir, platform3));
   return `export CLAUDE_PLUGIN_ROOT=${root} CLAUDE_PLUGIN_DATA=${data}; `;
 }
-function buildCommandWrapper(content, absInstallDir, relDir) {
+function buildCommandWrapper(content, absInstallDir, relDir, devLink) {
   const rewritten = rewritePluginTokens(content, absInstallDir);
-  return insertAfterFrontmatter(rewritten, generatedCommandMarkerLine(relDir));
+  return insertAfterFrontmatter(
+    rewritten,
+    withDevLinkMarker(generatedCommandMarkerLine(relDir), devLink)
+  );
 }
 function splitFrontmatter2(content) {
   const lines = content.split("\n");
@@ -119982,11 +120166,11 @@ function frontmatterField(frontmatter, field) {
 function opencodeWrapperFilename(pkg, command) {
   return `${pkg}-${command}.md`;
 }
-function buildOpencodeCommandWrapper(content, absInstallDir, relDir) {
+function buildOpencodeCommandWrapper(content, absInstallDir, relDir, devLink) {
   const rewritten = rewritePluginTokens(content, absInstallDir);
   const { frontmatter, body } = splitFrontmatter2(rewritten);
   const description = frontmatterField(frontmatter, "description");
-  const marker = generatedCommandMarkerLine(relDir);
+  const marker = withDevLinkMarker(generatedCommandMarkerLine(relDir), devLink);
   const reducedFrontmatter = description !== void 0 ? `---
 description: ${description}
 ---
@@ -120051,7 +120235,8 @@ function toManagedHooks(plugin, absInstallDir) {
     out[event] = groups.map((group) => ({
       ...group,
       hooks: group.hooks.map((h2) => ({ ...h2, command: `${prefix}${h2.command}` })),
-      [MANAGED_HOOK_SENTINEL_KEY]: plugin.name
+      [MANAGED_HOOK_SENTINEL_KEY]: plugin.name,
+      ...plugin.devLink !== void 0 && { [MANAGED_HOOK_DEV_LINK_KEY]: plugin.devLink.path }
     }));
   }
   return out;
@@ -120141,6 +120326,7 @@ function planInstalledCommands(harness, plugin, repoRoot) {
 }
 function planClaudeInstalledCommands(plugin, relDir, repoRoot) {
   const absInstallDir = join12(repoRoot, relDir);
+  const devLink = plugin.devLink?.path;
   const pkgDir = `${CLAUDE_COMMANDS_DIR}/${plugin.name}`;
   const actions = [];
   for (const cmd of plugin.commands) {
@@ -120153,7 +120339,7 @@ function planClaudeInstalledCommands(plugin, relDir, repoRoot) {
       source: cmd.sourcePath,
       target: `${pkgDir}/${cmd.name}.md`
     };
-    setActionContent(action, buildCommandWrapper(cmd.content, absInstallDir, relDir));
+    setActionContent(action, buildCommandWrapper(cmd.content, absInstallDir, relDir, devLink));
     actions.push(action);
   }
   const gitignore = {
@@ -120170,6 +120356,7 @@ function planClaudeInstalledCommands(plugin, relDir, repoRoot) {
 }
 function planOpencodeInstalledCommands(plugin, relDir, repoRoot) {
   const absInstallDir = join12(repoRoot, relDir);
+  const devLink = plugin.devLink?.path;
   const actions = [];
   for (const cmd of plugin.commands) {
     const action = {
@@ -120181,7 +120368,10 @@ function planOpencodeInstalledCommands(plugin, relDir, repoRoot) {
       source: cmd.sourcePath,
       target: `${OPENCODE_COMMANDS_DIR}/${opencodeWrapperFilename(plugin.name, cmd.name)}`
     };
-    setActionContent(action, buildOpencodeCommandWrapper(cmd.content, absInstallDir, relDir));
+    setActionContent(
+      action,
+      buildOpencodeCommandWrapper(cmd.content, absInstallDir, relDir, devLink)
+    );
     actions.push(action);
   }
   return actions;
@@ -120309,6 +120499,7 @@ var init_installed_projector = __esm({
     init_schema5();
     init_hooks();
     init_content_map();
+    init_dev_link_labels();
     init_command_formats();
     init_scanner2();
     CLAUDE_COMMANDS_DIR = ".claude/commands";
@@ -120356,7 +120547,10 @@ function bothScopesNoticeReason(pkg, repoRoot) {
   return `is installed twice: once for all your projects, and once in this project. In a session DorkOS runs, Claude Code sees both copies, under different names. On its own, Claude Code sees only this project's copy. So does Codex, until you share it. Uninstall one if you only meant to have one. Run dorkos uninstall ${pkg} --project ${repoRoot}  to remove this project's copy. Run dorkos uninstall ${pkg}  to remove the all-projects copy. Both need DorkOS running, and both ask you first.`;
 }
 function globalInstallDropReason(plugin, opts) {
-  const shared = opts?.sharedWithTools === true;
+  const reason = globalInstallReasonOf(plugin, opts?.sharedWithTools === true);
+  return plugin.devLink === void 0 ? reason : `${reason} ${devLinkLabel(plugin.devLink.path)}`;
+}
+function globalInstallReasonOf(plugin, shared) {
   if (plugin.skills.length === 0) {
     return shared ? GLOBAL_INSTALL_NO_SKILLS_SHARED : GLOBAL_INSTALL_NO_SKILLS;
   }
@@ -120365,11 +120559,11 @@ function globalInstallDropReason(plugin, opts) {
     namedSkills(plugin.skills.map((skill) => skill.name)),
     shared
   );
-  const join54 = (into) => shared ? into : `${into}${into.endsWith(".") ? "" : "."} ${GLOBAL_INSTALL_SHARE_OFFER}`;
+  const join55 = (into) => shared ? into : `${into}${into.endsWith(".") ? "" : "."} ${GLOBAL_INSTALL_SHARE_OFFER}`;
   const timed = plugin.skills.filter((skill) => skill.hasSchedule);
-  if (timed.length === 0) return join54(lead);
+  if (timed.length === 0) return join55(lead);
   const allLinked = timed.every((skill) => skill.linkedInDorkHome === true);
-  return join54(`${lead}. ${allLinked ? GLOBAL_INSTALL_TIMERS_WORK : GLOBAL_INSTALL_TIMERS_PENDING}`);
+  return join55(`${lead}. ${allLinked ? GLOBAL_INSTALL_TIMERS_WORK : GLOBAL_INSTALL_TIMERS_PENDING}`);
 }
 function planGlobalInstallDrops(input4) {
   const projectNames = new Set(
@@ -120379,12 +120573,12 @@ function planGlobalInstallDrops(input4) {
   const drops = [];
   for (const plugin of input4.plugins) {
     if (plugin.location.scope !== "global") continue;
-    drops.push(
-      dropWholePlugin(
-        plugin,
-        globalInstallDropReason(plugin, { sharedWithTools: input4.sharedWithTools === true })
-      )
+    const drop = dropWholePlugin(
+      plugin,
+      globalInstallDropReason(plugin, { sharedWithTools: input4.sharedWithTools === true })
     );
+    if (plugin.devLink !== void 0) drop.devLink = plugin.devLink.path;
+    drops.push(drop);
     if (!projectNames.has(plugin.name) || noticed.has(plugin.name)) continue;
     noticed.add(plugin.name);
     drops.push(dropWholePlugin(plugin, bothScopesNoticeReason(plugin.name, input4.repoRoot)));
@@ -120411,6 +120605,7 @@ var GLOBAL_HOOKS_ATTRIBUTION, GLOBAL_INSTALL_LEAD, GLOBAL_INSTALL_LEAD_SHARED, G
 var init_global_installs = __esm({
   "../harness/src/plan/global-installs.ts"() {
     "use strict";
+    init_dev_link_labels();
     init_installed_projector();
     GLOBAL_HOOKS_ATTRIBUTION = "claude-code";
     GLOBAL_INSTALL_LEAD = "installed for all your projects. Only the Claude Code sessions DorkOS runs can see it.";
@@ -120424,14 +120619,68 @@ var init_global_installs = __esm({
   }
 });
 
-// ../harness/src/sources/installed.ts
-import { existsSync as existsSync6, lstatSync as lstatSync2, readdirSync as readdirSync3 } from "node:fs";
+// ../harness/src/sources/dev-links.ts
+import { lstatSync as lstatSync2, realpathSync as realpathSync3 } from "node:fs";
 import { join as join13 } from "node:path";
+function readDevLinksSync(dorkHome) {
+  if (dorkHome === void 0) return [];
+  let text2;
+  try {
+    text2 = readTextFileWithinSync(
+      join13(dorkHome, DEV_LINKS_FILE),
+      PACKAGE_TEXT_MAX_BYTES,
+      "The dev links file"
+    );
+  } catch {
+    return [];
+  }
+  const parsed = parseDevLinksFile(text2);
+  return parsed === "unreadable" ? [] : parsed.links;
+}
+function isLinkAt(target) {
+  try {
+    return lstatSync2(target, { throwIfNoEntry: false })?.isSymbolicLink() === true;
+  } catch {
+    return false;
+  }
+}
+function realPathOf(target) {
+  try {
+    return realpathSync3.native(target);
+  } catch {
+    return null;
+  }
+}
+function devLinkForSlot(pluginsRoot, entryName, scope, records) {
+  if (records.length === 0) return null;
+  const slot = join13(pluginsRoot, entryName);
+  if (!isLinkAt(slot)) return null;
+  const realRoot = realPathOf(pluginsRoot);
+  if (realRoot === null) return null;
+  const canonicalSlot = join13(realRoot, entryName);
+  const record2 = records.find((r3) => r3.scope === scope && r3.slot === canonicalSlot);
+  if (!record2) return null;
+  return isStillLinked(slot, record2) ? record2 : null;
+}
+function isStillLinked(slot, record2) {
+  return realPathOf(slot) === record2.target;
+}
+var init_dev_links = __esm({
+  "../harness/src/sources/dev-links.ts"() {
+    "use strict";
+    init_bounded_read();
+    init_marketplace_schemas();
+  }
+});
+
+// ../harness/src/sources/installed.ts
+import { existsSync as existsSync6, lstatSync as lstatSync3, readdirSync as readdirSync3 } from "node:fs";
+import { join as join14 } from "node:path";
 function isProjectScoped(plugin) {
   return plugin.location.scope === "project";
 }
 function dorkManifestPath(pluginDir) {
-  return join13(pluginDir, ".dork", "manifest.json");
+  return join14(pluginDir, ".dork", "manifest.json");
 }
 function readPluginManifest(pluginDir) {
   const manifestPath = dorkManifestPath(pluginDir);
@@ -120447,7 +120696,7 @@ function readPluginManifest(pluginDir) {
   return { name: parsed.data.name, type: parsed.data.type, layers: parsed.data.layers };
 }
 function readCcPluginManifest(pluginDir) {
-  const ccManifestPath = join13(pluginDir, ".claude-plugin", "plugin.json");
+  const ccManifestPath = join14(pluginDir, ".claude-plugin", "plugin.json");
   if (!existsSync6(ccManifestPath)) return void 0;
   let raw;
   try {
@@ -120489,7 +120738,7 @@ function readMatcherGroup(group) {
   };
 }
 function readPluginHooks(pluginDir, sourcePrefix) {
-  const hooksPath = join13(pluginDir, "hooks", "hooks.json");
+  const hooksPath = join14(pluginDir, "hooks", "hooks.json");
   if (!existsSync6(hooksPath)) return {};
   const relPath2 = `${sourcePrefix}/hooks/hooks.json`;
   let raw;
@@ -120528,7 +120777,7 @@ function toInstalledSkill(entry, absSkillsRoot, dorkHomeLink) {
   let skillMd = "";
   try {
     skillMd = readTextFileWithinSync(
-      join13(absSkillsRoot, entry.name, "SKILL.md"),
+      join14(absSkillsRoot, entry.name, "SKILL.md"),
       PACKAGE_TEXT_MAX_BYTES,
       "The SKILL.md"
     );
@@ -120545,8 +120794,8 @@ function toInstalledSkill(entry, absSkillsRoot, dorkHomeLink) {
   };
 }
 function collectPortableSkills(pluginDir, sourcePrefix, dorkHomeLink) {
-  const skillsRoot = join13(pluginDir, "skills");
-  const tasksRoot = join13(pluginDir, ".dork", "tasks");
+  const skillsRoot = join14(pluginDir, "skills");
+  const tasksRoot = join14(pluginDir, ".dork", "tasks");
   const contained = { followSymlinks: false };
   const skillsRel = `${sourcePrefix}/skills`;
   const tasksRel = `${sourcePrefix}/.dork/tasks`;
@@ -120573,7 +120822,7 @@ function collectPortableSkills(pluginDir, sourcePrefix, dorkHomeLink) {
   };
 }
 function collectCommands(pluginDir, sourcePrefix) {
-  const commandsRoot = join13(pluginDir, "commands");
+  const commandsRoot = join14(pluginDir, "commands");
   if (!existsSync6(commandsRoot)) return [];
   const commands = [];
   for (const entry of readdirSync3(commandsRoot, { withFileTypes: true })) {
@@ -120581,7 +120830,7 @@ function collectCommands(pluginDir, sourcePrefix) {
     let content;
     try {
       content = readTextFileWithinSync(
-        join13(commandsRoot, entry.name),
+        join14(commandsRoot, entry.name),
         PACKAGE_TEXT_MAX_BYTES,
         "The command"
       );
@@ -120596,13 +120845,15 @@ function collectCommands(pluginDir, sourcePrefix) {
   }
   return commands.sort((a2, b2) => a2.name.localeCompare(b2.name));
 }
-function scanPluginsRoot(pluginsRoot, scope, dorkHome) {
+function scanPluginsRoot(pluginsRoot, scope, devLinks, dorkHome) {
   if (!existsSync6(pluginsRoot)) return { plugins: [], unreadableManifests: [] };
   const plugins = [];
   const unreadableManifests = [];
   for (const entry of readdirSync3(pluginsRoot, { withFileTypes: true })) {
-    if (!entry.isDirectory() || isInstallSiblingName(entry.name)) continue;
-    const pluginDir = join13(pluginsRoot, entry.name);
+    if (isInstallSiblingName(entry.name)) continue;
+    const devLink = entry.isSymbolicLink() ? devLinkForSlot(pluginsRoot, entry.name, scope, devLinks) : null;
+    if (!entry.isDirectory() && devLink === null) continue;
+    const pluginDir = join14(pluginsRoot, entry.name);
     const location = scope === "global" ? { scope, absDir: pluginDir } : { scope, relDir: `${PROJECT_PLUGINS_DIR}/${entry.name}` };
     const sourcePrefix = location.scope === "global" ? location.absDir : location.relDir;
     const manifest = readPluginManifest(pluginDir);
@@ -120622,21 +120873,24 @@ function scanPluginsRoot(pluginsRoot, scope, dorkHome) {
     }
     if (!manifest) continue;
     const { hooks, unreadable } = readPluginHooks(pluginDir, sourcePrefix);
-    const dorkHomeLink = scope === "global" && dorkHome !== void 0 ? (skillName) => lstatSync2(join13(dorkHome, "skills", `${manifest.name}__${skillName}`), {
+    const dorkHomeLink = scope === "global" && dorkHome !== void 0 ? (skillName) => lstatSync3(join14(dorkHome, "skills", `${manifest.name}__${skillName}`), {
       throwIfNoEntry: false
     }) !== void 0 : void 0;
     const portable = collectPortableSkills(pluginDir, sourcePrefix, dorkHomeLink);
+    const commands = collectCommands(pluginDir, sourcePrefix);
+    if (devLink !== null && !isStillLinked(pluginDir, devLink)) continue;
     plugins.push({
       name: manifest.name,
       type: manifest.type,
       location,
       skills: portable.skills,
-      commands: collectCommands(pluginDir, sourcePrefix),
+      commands,
       ...hooks ? { hooks } : {},
       ...unreadable ? { unreadableHooks: unreadable } : {},
       ...portable.unreadableRoots.length > 0 ? { unreadableSkillRoots: portable.unreadableRoots } : {},
       ...portable.unreadableSkills.length > 0 ? { unreadableSkills: portable.unreadableSkills } : {},
-      layers: manifest.layers
+      layers: manifest.layers,
+      ...devLink !== null ? { devLink: { path: devLink.target } } : {}
     });
   }
   return {
@@ -120649,8 +120903,9 @@ function scanInstalledPlugins(opts) {
 }
 function scanInstalledSources(opts) {
   const empty = { plugins: [], unreadableManifests: [] };
-  const global2 = opts.dorkHome ? scanPluginsRoot(join13(opts.dorkHome, "plugins"), "global", opts.dorkHome) : empty;
-  const project2 = opts.projectRoot ? scanPluginsRoot(join13(opts.projectRoot, PROJECT_PLUGINS_DIR), "project") : empty;
+  const devLinks = opts.devLinks ?? readDevLinksSync(opts.dorkHome);
+  const global2 = opts.dorkHome ? scanPluginsRoot(join14(opts.dorkHome, "plugins"), "global", devLinks, opts.dorkHome) : empty;
+  const project2 = opts.projectRoot ? scanPluginsRoot(join14(opts.projectRoot, PROJECT_PLUGINS_DIR), "project", devLinks) : empty;
   return {
     plugins: [...global2.plugins, ...project2.plugins],
     unreadableManifests: [...global2.unreadableManifests, ...project2.unreadableManifests]
@@ -120667,6 +120922,7 @@ var init_installed = __esm({
     init_parser();
     init_scanner2();
     init_hooks();
+    init_dev_links();
     PROJECT_PLUGINS_DIR = ".dork/plugins";
   }
 });
@@ -120752,8 +121008,8 @@ var init_unreadable_skills = __esm({
 });
 
 // ../harness/src/inventory/read.ts
-import { readFileSync as readFileSync7, readdirSync as readdirSync4, lstatSync as lstatSync3, realpathSync as realpathSync3, statSync as statSync4 } from "node:fs";
-import { join as join14, sep as sep3 } from "node:path";
+import { readFileSync as readFileSync7, readdirSync as readdirSync4, lstatSync as lstatSync4, realpathSync as realpathSync4, statSync as statSync4 } from "node:fs";
+import { join as join15, sep as sep3 } from "node:path";
 function relPath(...parts) {
   return parts.join("/").split(sep3).join("/");
 }
@@ -120766,7 +121022,7 @@ function parserMessage(err) {
 }
 function nothingIsThere(absPath) {
   try {
-    lstatSync3(absPath);
+    lstatSync4(absPath);
     return false;
   } catch (err) {
     return err.code === "ENOENT";
@@ -120829,7 +121085,7 @@ function readJsonFile(absPath, relFile, kind) {
 }
 function realpathOr(absPath) {
   try {
-    return realpathSync3(absPath);
+    return realpathSync4(absPath);
   } catch {
     return absPath;
   }
@@ -120845,7 +121101,7 @@ function listMarkdownFiles(absRoot, relRoot, kind, options = {}) {
     const result2 = readDirEntries(absDir, relDir, kind);
     if (result2.unreadable) unreadable.push(result2.unreadable);
     for (const entry of result2.entries) {
-      const absEntry = join14(absDir, entry.name);
+      const absEntry = join15(absDir, entry.name);
       const relEntry = relPath(relDir, entry.name);
       if (entry.isDirectory()) {
         if (options.recursive) walk(absEntry, relEntry);
@@ -120894,10 +121150,10 @@ var init_read = __esm({
 });
 
 // ../harness/src/inventory/mcp.ts
-import { join as join15 } from "node:path";
+import { join as join16 } from "node:path";
 function inventoryMcpServers(repoRoot) {
   const { value, unreadable } = readJsonFile(
-    join15(repoRoot, MCP_CONFIG_SOURCE),
+    join16(repoRoot, MCP_CONFIG_SOURCE),
     MCP_CONFIG_SOURCE,
     "mcp"
   );
@@ -121424,15 +121680,15 @@ var init_types4 = __esm({
 });
 
 // ../harness/src/inventory/skills.ts
-import { existsSync as existsSync7, lstatSync as lstatSync4, readdirSync as readdirSync5, realpathSync as realpathSync4, statSync as statSync5 } from "node:fs";
-import { join as join16, resolve as resolve2, sep as sep4 } from "node:path";
+import { existsSync as existsSync7, lstatSync as lstatSync5, readdirSync as readdirSync5, realpathSync as realpathSync5, statSync as statSync5 } from "node:fs";
+import { join as join17, resolve as resolve2, sep as sep4 } from "node:path";
 function isInside(absPath, absRoot) {
   return absPath === absRoot || absPath.startsWith(absRoot + sep4);
 }
 function isManagedProjection(repoRoot, absEntry) {
   let real2;
   try {
-    real2 = realpathSync4(absEntry);
+    real2 = realpathSync5(absEntry);
   } catch {
     return false;
   }
@@ -121441,14 +121697,14 @@ function isManagedProjection(repoRoot, absEntry) {
 }
 function realpathOr2(absPath) {
   try {
-    return realpathSync4(absPath);
+    return realpathSync5(absPath);
   } catch {
     return absPath;
   }
 }
 function declaredName(repoRoot, sourceDir) {
   const rel = relPath(sourceDir, SKILL_FILENAME);
-  const { text: text2 } = readTextFile(join16(repoRoot, rel), rel, "skill");
+  const { text: text2 } = readTextFile(join17(repoRoot, rel), rel, "skill");
   if (text2 === void 0) return void 0;
   const declared = readRawFrontmatter(text2)?.data.name;
   if (typeof declared !== "string") return void 0;
@@ -121465,14 +121721,14 @@ function inventorySkills(repoRoot) {
   };
 }
 function collect(repoRoot, root, options) {
-  const absRoot = join16(repoRoot, root);
+  const absRoot = join17(repoRoot, root);
   const probe = readDirEntries(absRoot, root, "skill");
   if (probe.unreadable) return { skills: [], unreadable: [probe.unreadable] };
   const scanned = scanSkillDirs(absRoot, root, options);
   const skills = [];
   for (const skill of scanned) {
-    const absEntry = join16(repoRoot, skill.sourceDir);
-    const isSymlink2 = lstatSync4(absEntry, { throwIfNoEntry: false })?.isSymbolicLink() === true;
+    const absEntry = join17(repoRoot, skill.sourceDir);
+    const isSymlink2 = lstatSync5(absEntry, { throwIfNoEntry: false })?.isSymbolicLink() === true;
     if (root === CLAUDE_SKILLS_DIR && isSymlink2 && isManagedProjection(repoRoot, absEntry))
       continue;
     const declared = declaredName(repoRoot, skill.sourceDir);
@@ -121505,7 +121761,7 @@ function lockedSkillFolders(absRoot, root, entries, found, options) {
     const isLink = entry.isSymbolicLink();
     if (isLink && entry.name.includes(INSTALLED_PROJECTION_MARKER) && !options.includeManagedProjections)
       continue;
-    const cause = lockedSkillCause(join16(absRoot, entry.name));
+    const cause = lockedSkillCause(join17(absRoot, entry.name));
     if (cause === void 0) continue;
     records.push({
       kind: "skill",
@@ -121530,7 +121786,7 @@ function lockedSkillCause(absEntry) {
     return "folder";
   }
   if (!listing.includes(SKILL_FILENAME)) return void 0;
-  return existsSync7(join16(absEntry, SKILL_FILENAME)) ? void 0 : "file";
+  return existsSync7(join17(absEntry, SKILL_FILENAME)) ? void 0 : "file";
 }
 var MANAGED_LINK_ROOTS, SKILL_ROOTS, ENGINE_WRITTEN_ROOTS, LOCKED_SKILL_REASONS;
 var init_skills = __esm({
@@ -121558,17 +121814,17 @@ var init_skills = __esm({
 });
 
 // ../harness/src/inventory/commands.ts
-import { join as join17 } from "node:path";
+import { join as join18 } from "node:path";
 function inventoryCommands(repoRoot) {
   const { files, unreadable } = listMarkdownFiles(
-    join17(repoRoot, CLAUDE_COMMANDS_DIR),
+    join18(repoRoot, CLAUDE_COMMANDS_DIR),
     CLAUDE_COMMANDS_DIR,
     "command",
     { recursive: true }
   );
   const commands = [];
   for (const file2 of files) {
-    const read = readTextFile(join17(repoRoot, file2.source), file2.source, "command");
+    const read = readTextFile(join18(repoRoot, file2.source), file2.source, "command");
     if (read.text === void 0) {
       if (read.unreadable) unreadable.push(read.unreadable);
       continue;
@@ -121592,7 +121848,7 @@ var init_commands = __esm({
 });
 
 // ../harness/src/inventory/hooks.ts
-import { join as join18 } from "node:path";
+import { join as join19 } from "node:path";
 function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -121603,7 +121859,7 @@ function isWhollyManaged(groups) {
   );
 }
 function inventorySettingsHooks(repoRoot, source, origin) {
-  const { value, unreadable } = readJsonFile(join18(repoRoot, source), source, "hook");
+  const { value, unreadable } = readJsonFile(join19(repoRoot, source), source, "hook");
   if (unreadable) return { hooks: [], unreadable: [unreadable] };
   if (value === void 0) return { hooks: [], unreadable: [] };
   const declared = value.hooks;
@@ -121637,7 +121893,7 @@ function inventorySkillFrontmatterHooks(repoRoot, skills) {
   const unreadable = [];
   for (const skill of skills) {
     const source = relPath(skill.source, SKILL_FILENAME);
-    const read = readTextFile(join18(repoRoot, source), source, "hook");
+    const read = readTextFile(join19(repoRoot, source), source, "hook");
     if (read.text === void 0) {
       if (read.unreadable) unreadable.push(read.unreadable);
       continue;
@@ -121696,20 +121952,20 @@ var init_hooks2 = __esm({
 });
 
 // ../harness/src/inventory/agents.ts
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 function stemOf(source) {
   return (source.split("/").pop() ?? source).slice(0, -".md".length);
 }
 function inventoryAgents(repoRoot) {
   const { files, unreadable } = listMarkdownFiles(
-    join19(repoRoot, CLAUDE_AGENTS_DIR),
+    join20(repoRoot, CLAUDE_AGENTS_DIR),
     CLAUDE_AGENTS_DIR,
     "agent",
     { recursive: true }
   );
   const agents2 = [];
   for (const file2 of files) {
-    const read = readTextFile(join19(repoRoot, file2.source), file2.source, "agent");
+    const read = readTextFile(join20(repoRoot, file2.source), file2.source, "agent");
     if (read.text === void 0) {
       if (read.unreadable) unreadable.push(read.unreadable);
       continue;
@@ -121745,7 +122001,7 @@ var init_agents = __esm({
 });
 
 // ../harness/src/inventory/rules.ts
-import { join as join20 } from "node:path";
+import { join as join21 } from "node:path";
 function readPathGlobs(value) {
   const globs = typeof value === "string" ? value.split(",") : Array.isArray(value) ? value.filter((item) => typeof item === "string") : [];
   const trimmed = globs.map((glob) => glob.trim()).filter((glob) => glob.length > 0);
@@ -121753,14 +122009,14 @@ function readPathGlobs(value) {
 }
 function inventoryRules(repoRoot) {
   const { files, unreadable } = listMarkdownFiles(
-    join20(repoRoot, CLAUDE_RULES_DIR),
+    join21(repoRoot, CLAUDE_RULES_DIR),
     CLAUDE_RULES_DIR,
     "rule",
     { recursive: true }
   );
   const rules = [];
   for (const file2 of files) {
-    const read = readTextFile(join20(repoRoot, file2.source), file2.source, "rule");
+    const read = readTextFile(join21(repoRoot, file2.source), file2.source, "rule");
     if (read.text === void 0) {
       if (read.unreadable) unreadable.push(read.unreadable);
       continue;
@@ -122611,7 +122867,7 @@ var init_dist13 = __esm({
 });
 
 // ../harness/src/inventory/foreign-mcp.ts
-import { join as join21 } from "node:path";
+import { join as join22 } from "node:path";
 function stripBom(text2) {
   return text2.startsWith(BOM) ? text2.slice(BOM.length) : text2;
 }
@@ -122665,7 +122921,7 @@ function inventoryForeignMcpConfigs(repoRoot) {
   const foreignMcpConfigs = [];
   const unreadable = [];
   for (const shape of FOREIGN_MCP_SHAPES) {
-    const abs = join21(repoRoot, shape.source);
+    const abs = join22(repoRoot, shape.source);
     if (nothingIsThere(abs)) continue;
     const read = readTextFile(abs, shape.source, "mcp");
     if (read.text === void 0) {
@@ -122765,11 +123021,11 @@ var init_inventory = __esm({
 });
 
 // ../harness/src/apply/link-state.ts
-import { lstatSync as lstatSync5, readdirSync as readdirSync6, statSync as statSync6 } from "node:fs";
+import { lstatSync as lstatSync6, readdirSync as readdirSync6, statSync as statSync6 } from "node:fs";
 function occupantKind(absPath) {
   let entry;
   try {
-    entry = lstatSync5(absPath);
+    entry = lstatSync6(absPath);
   } catch {
     return "absent";
   }
@@ -122818,7 +123074,7 @@ var init_link_state = __esm({
 
 // ../harness/src/apply/write-path-occupants.ts
 import { accessSync, constants as constants2, statSync as statSync7 } from "node:fs";
-import { dirname as dirname5, join as join22 } from "node:path";
+import { dirname as dirname5, join as join23 } from "node:path";
 function writePathReason(relDir, cause) {
   return `blocked by \`${relDir}\`, which ${WRITE_PATH_REASONS[cause]}`;
 }
@@ -122856,7 +123112,7 @@ function blockedWritePath(repoRoot, target, probed = /* @__PURE__ */ new Map())
   for (const relDir of writePathDirs(target)) {
     let cause = probed.get(relDir);
     if (!probed.has(relDir)) {
-      cause = directoryWriteBlock(join22(repoRoot, relDir));
+      cause = directoryWriteBlock(join23(repoRoot, relDir));
       probed.set(relDir, cause);
     }
     if (cause !== void 0) return writePathReason(relDir, cause);
@@ -122867,7 +123123,7 @@ function unwritableWritePath(repoRoot, target) {
   if (!CAN_ASK_ABOUT_WRITING) return void 0;
   const dirs = writePathDirs(target).reverse();
   for (const relDir of dirs) {
-    const abs = join22(repoRoot, relDir);
+    const abs = join23(repoRoot, relDir);
     let stats;
     try {
       stats = statSync7(abs);
@@ -122917,8 +123173,8 @@ var init_write_path_occupants = __esm({
 });
 
 // ../harness/src/plan/projector.ts
-import { realpathSync as realpathSync5 } from "node:fs";
-import { join as join23 } from "node:path";
+import { realpathSync as realpathSync6 } from "node:fs";
+import { join as join24 } from "node:path";
 function readsAgentsSkillsReason(harness) {
   return `${HARNESS_LABELS[harness]} reads ${AGENTS_SKILLS_DIR} directly (vendor docs, 2026-09-07)`;
 }
@@ -123087,7 +123343,7 @@ function buildPlan(input4) {
   const mergedHooks = mergeHookConfigs([
     claudeHooks,
     ...hookContributors.map(
-      (p) => rewritePluginRootInHooks(p.hooks, join23(repoRoot, p.location.relDir))
+      (p) => rewritePluginRootInHooks(p.hooks, join24(repoRoot, p.location.relDir))
     )
   ]);
   warnings.push(...planUnreadableHookWarnings(projectable));
@@ -123121,9 +123377,9 @@ function buildPlan(input4) {
     warnings.push(...inventoried.warnings);
     for (const plugin of projectable) {
       const skillResult = planInstalledSkills(harness, plugin);
-      all.push(...skillResult.actions);
+      all.push(...labelDevLinkActions(skillResult.actions, plugin));
       warnings.push(...skillResult.warnings);
-      all.push(...planInstalledCommands(harness, plugin, repoRoot));
+      all.push(...labelDevLinkActions(planInstalledCommands(harness, plugin, repoRoot), plugin));
     }
   }
   if (manifest.harnesses.includes("claude-code")) {
@@ -123144,7 +123400,7 @@ function buildPlan(input4) {
     plugins: projectable,
     harnesses: manifest.harnesses
   });
-  all.push(...canonicalLinks.actions);
+  all.push(...labelCanonicalLinks(canonicalLinks.actions, projectable));
   warnings.push(...canonicalLinks.warnings);
   const claudeOnly = planClaudeOnlySkills({
     manifest,
@@ -123160,7 +123416,9 @@ function buildPlan(input4) {
     })
   );
   all.push(...planForeignMcpDrops(inventory));
-  for (const plugin of projectable) all.push(...dropNonPortableLayers(plugin));
+  for (const plugin of projectable) {
+    all.push(...labelDevLinkActions(dropNonPortableLayers(plugin), plugin));
+  }
   for (const plugin of unsupportedType) {
     all.push(
       dropWholePlugin(plugin, `package type "${plugin.type}" is not a harness-portable plugin`)
@@ -123182,6 +123440,17 @@ function buildPlan(input4) {
     ...unreadableSkillRoots.length > 0 ? { unreadableSkillRoots } : {}
   };
 }
+function labelCanonicalLinks(actions, plugins) {
+  for (const plugin of plugins) {
+    if (plugin.devLink === void 0) continue;
+    const prefix = `${plugin.location.relDir}/`;
+    labelDevLinkActions(
+      actions.filter((action) => action.source?.startsWith(prefix) === true),
+      plugin
+    );
+  }
+  return actions;
+}
 function degradeUnreachableNatives(repoRoot, all) {
   const rides = all.some((a2) => a2.kind === "native" && isCanonicalLinkNative(a2));
   if (!rides) return [...all];
@@ -123200,7 +123469,7 @@ function refusedByPermission(repoRoot, link3, source) {
 }
 function linkAlreadyReaches(repoRoot, link3, source) {
   try {
-    return realpathSync5(join23(repoRoot, link3)) === realpathSync5(join23(repoRoot, source));
+    return realpathSync6(join24(repoRoot, link3)) === realpathSync6(join24(repoRoot, source));
   } catch {
     return false;
   }
@@ -123238,6 +123507,7 @@ var init_projector = __esm({
     init_global_installs();
     init_installed();
     init_installed_projector();
+    init_dev_link_labels();
     init_unreadable_hooks();
     init_unreadable_manifests();
     init_unreadable_skills();
@@ -123252,7 +123522,7 @@ var init_projector = __esm({
 });
 
 // ../harness/src/plan/global-projector.ts
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 function globalClosingNote(roots, boundaryRoot) {
   if (boundaryRoot !== void 0) return globalBoundarySkipLine(boundaryRoot);
   if (roots.agentsSkillsDir !== void 0) return USER_TIER_MEASUREMENT_NOTE;
@@ -123262,10 +123532,10 @@ function globalBoundarySkipLine(root) {
   return `Packages you installed for all your projects stay inside DorkOS on this machine. DorkOS is limited to ${root}, so it will not add links in your home folder.`;
 }
 function globalPluginsDir(dorkHome) {
-  return join24(dorkHome, "plugins");
+  return join25(dorkHome, "plugins");
 }
 function globalSkillsDir(dorkHome) {
-  return join24(dorkHome, "skills");
+  return join25(dorkHome, "skills");
 }
 function globalPlanTiers(input4) {
   const tiers = [
@@ -123318,10 +123588,10 @@ function buildGlobalPlan(input4) {
     for (const skill of plugin.skills) {
       const namespaced = `${plugin.name}__${skill.name}`;
       for (const tier of tiers) {
-        const target = join24(tier.dir, namespaced);
+        const target = join25(tier.dir, namespaced);
         if (planned.has(target)) continue;
         planned.add(target);
-        actions.push({
+        const action = {
           kind: "symlink",
           artifact: "skill",
           harness: tier.harness,
@@ -123332,7 +123602,8 @@ function buildGlobalPlan(input4) {
           source: skill.sourceDir,
           target,
           reason: tier.reason(skill.hasSchedule)
-        });
+        };
+        actions.push(...labelDevLinkActions([action], plugin));
       }
       const tokenReason = pluginTokenSkillWarningReason(skill);
       if (tokenReason !== void 0) {
@@ -123412,6 +123683,7 @@ var init_global_projector = __esm({
     init_installed();
     init_unreadable_manifests();
     init_unreadable_skills();
+    init_dev_link_labels();
     init_installed_projector();
     init_write_path_occupants();
     GLOBAL_LINK_ATTRIBUTION = "codex";
@@ -123439,7 +123711,7 @@ var init_global_projector = __esm({
 
 // ../harness/src/scaffold/instructions.ts
 import { existsSync as existsSync8, mkdirSync as mkdirSync3 } from "node:fs";
-import { dirname as dirname6, join as join25, relative } from "node:path";
+import { dirname as dirname6, join as join26, relative } from "node:path";
 function scaffoldInstructions(rootDir, opts) {
   const created = [];
   const skipped = [];
@@ -123456,7 +123728,7 @@ function scaffoldInstructions(rootDir, opts) {
   return { created, skipped, createdDirs };
 }
 function writeIfAbsent(rootDir, relPath2, content, created, skipped, createdDirs) {
-  const abs = join25(rootDir, relPath2);
+  const abs = join26(rootDir, relPath2);
   if (existsSync8(abs)) {
     skipped.push(relPath2);
     return;
@@ -123587,10 +123859,10 @@ var init_manifest_edit = __esm({
 
 // ../harness/src/scaffold/enable-harness.ts
 import { readFileSync as readFileSync8 } from "node:fs";
-import { join as join26 } from "node:path";
+import { join as join27 } from "node:path";
 function enableHarnessInManifest(repoRoot, harness) {
   const path53 = HARNESS_MANIFEST_PATH;
-  const abs = join26(repoRoot, path53);
+  const abs = join27(repoRoot, path53);
   const before = readFileSync8(abs, "utf8");
   let parsed;
   try {
@@ -123663,10 +123935,10 @@ var init_enable_harness = __esm({
 
 // ../harness/src/scaffold/declare-claude-only.ts
 import { readFileSync as readFileSync9 } from "node:fs";
-import { join as join27 } from "node:path";
+import { join as join28 } from "node:path";
 function declareClaudeOnlySkill(repoRoot, entry) {
   const path53 = HARNESS_MANIFEST_PATH;
-  const abs = join27(repoRoot, path53);
+  const abs = join28(repoRoot, path53);
   const before = readFileSync9(abs, "utf8");
   let parsed;
   try {
@@ -123741,7 +124013,7 @@ var init_declare_claude_only = __esm({
 
 // ../harness/src/apply/generated-ownership.ts
 import { createHash as createHash3 } from "node:crypto";
-import { lstatSync as lstatSync6, readFileSync as readFileSync10 } from "node:fs";
+import { lstatSync as lstatSync7, readFileSync as readFileSync10 } from "node:fs";
 function generatedSidecarPath(absTarget) {
   return `${absTarget}${GENERATED_SIDECAR_SUFFIX}`;
 }
@@ -123757,7 +124029,7 @@ function readFileIfPresent(absPath) {
 }
 function hasGeneratedSidecar(absTarget) {
   try {
-    lstatSync6(generatedSidecarPath(absTarget));
+    lstatSync7(generatedSidecarPath(absTarget));
     return true;
   } catch {
     return false;
@@ -124404,17 +124676,15 @@ var init_using_the_marketplace = __esm({
     init_tool_name_note();
     usingTheMarketplace = {
       name: "using-the-marketplace",
-      description: "Use when finding, inspecting, installing, updating, or removing a DorkOS marketplace package (agent, plugin, skill pack, or adapter), or reading marketplace sources. Covers search, the install confirmation flow, checking for and applying updates and what they keep, packages held back from sessions until a person approves them, the uninstall approval flow, listing what is installed, and why only a person may add or remove a source.",
+      description: "Use when finding, inspecting, installing, updating, or removing a DorkOS marketplace package (agent, plugin, skill pack, or adapter), or reading marketplace sources. Covers search, the install confirmation flow, checking for and applying updates and what they keep, packages held back from sessions until a person approves them, the uninstall approval flow, running a package from a folder (a dev link), listing what is installed, and why only a person may add or remove a source.",
       body: `# Using the marketplace
 
 ${TOOL_NAME_NOTE}
 
-The marketplace distributes installable packages: agents, plugins, skill packs,
-and adapters. Every operation here is a capability, so it is also reachable
-with \`dorkos call marketplace.<verb> --input '<json>'\` from any runtime;
-\`dorkos capabilities\` lists them with their tiers. On the command line,
-\`dorkos marketplace <verb>\` is the home for all of it, and \`dorkos install\`,
-\`dorkos update\` and \`dorkos uninstall\` are shorthand for the same three verbs.
+The marketplace distributes agents, plugins, skill packs and adapters. Every
+operation is a capability (\`dorkos call marketplace.<verb> --input '<json>'\`
+from any runtime; \`dorkos capabilities\` lists the tiers). \`dorkos marketplace
+<verb>\` does it all, with \`dorkos install|update|uninstall\` as shorthand.
 
 ## Find a package (tier: observe)
 
@@ -124498,29 +124768,32 @@ that they can press **Review** on its row under Marketplace, then Installed.
 ## Remove a package (tier: destructive)
 
 Removing a package is gated on a person's approval and returns the APPROVAL
-payload, not a confirmation token. Two gated paths, pick the one your session has:
+payload, not a confirmation token. Pick the gated path your session has:
 
 - **In-session tool:** \`marketplace_uninstall\`, retried with an \`approvalToken\`.
 - **Any runtime, from a shell:** \`dorkos call marketplace.uninstall --input
   '{"name":"<pkg>"}'\`, retried with \`--approval <token>\`. This is the path for a
   Codex or OpenCode session, which has no \`marketplace_uninstall\` tool.
+- **The person's verb,** \`dorkos uninstall <name>\`, is gated for you the same way.
 
 1. Call it with \`name\` (and \`purge: true\` only if the user asked to delete what
    they added). It returns \`status: approval_required\` and an \`approvalToken\`.
 2. Tell the user what would be removed and that a card is waiting in DorkOS.
 3. Call again with the SAME arguments plus the token. Changing any argument,
-   \`purge\` included, invalidates the approval.
-
-Read \`reason\` and \`status\` as operating-dorkos describes: \`awaiting_decision\`
-means present the same token later, and \`status: "denied"\` means stop.
+   \`purge\` included, invalidates the approval. \`awaiting_decision\` means present
+   the same token later; \`status: "denied"\` means stop.
 
 Uninstall keeps what the person and their agents added (see above) and a later
 reinstall picks it up; \`purge: true\` removes it too, so say that out loud.
 Uninstalling an agent package also removes that agent from the team: its rooms,
 schedules, sign-ins and access go for good, even after a reinstall; say so first.
 
-\`dorkos uninstall <name>\` is the person's verb, and it is gated for you
-exactly like the paths above, so it is not a way around an approval.
+## Run a package from a folder (tier: destructive)
+
+\`marketplace_link\` with the folder's absolute real \`path\` (\`projectPath\` for one
+project) always returns \`approval_required\`, whatever the settings: retry with
+the SAME arguments plus the token. Install, update and uninstall refuse a
+dev-linked package (\`package_is_dev_linked\`); unlinking is the person's.
 
 ## Sources: you may read them, only a person may change them
 
@@ -124551,10 +124824,9 @@ marketplace is a separate step.
 
 ## Rule
 
-Installing, updating, uninstalling, and scaffolding all change the user's system.
-State plainly what you are about to do, complete whichever gate the tool asks for
-(\`confirmationToken\` for install, update and scaffold, \`approvalToken\` for
-uninstall), then report what landed.`
+Every change here touches the user's system: say what you are about to do,
+complete the gate the tool asks for (\`confirmationToken\` for install, update and
+scaffold, \`approvalToken\` for uninstall and link), then report what landed.`
     };
   }
 });
@@ -125316,8 +125588,8 @@ var init_plan = __esm({
 });
 
 // ../harness/src/apply/gitignore.ts
-import { existsSync as existsSync9, lstatSync as lstatSync7, readFileSync as readFileSync11, realpathSync as realpathSync6 } from "node:fs";
-import { dirname as dirname7, join as join28, relative as relative2, resolve as resolve3, sep as sep5 } from "node:path";
+import { existsSync as existsSync9, lstatSync as lstatSync8, readFileSync as readFileSync11, realpathSync as realpathSync7 } from "node:fs";
+import { dirname as dirname7, join as join29, relative as relative2, resolve as resolve3, sep as sep5 } from "node:path";
 function isPathIgnored(patterns, relPath2, leafKind = "file") {
   return ignoringLayer([{ dir: "", file: ROOT_GITIGNORE, patterns }], relPath2, leafKind) !== void 0;
 }
@@ -125390,7 +125662,7 @@ function readGitignore(absPath) {
 function gitCheckoutRoot(projectRoot) {
   let dir = physicalPath(projectRoot);
   for (; ; ) {
-    if (existsSync9(join28(dir, ".git"))) return dir;
+    if (existsSync9(join29(dir, ".git"))) return dir;
     const parent = dirname7(dir);
     if (parent === dir) return void 0;
     dir = parent;
@@ -125398,7 +125670,7 @@ function gitCheckoutRoot(projectRoot) {
 }
 function physicalPath(path53) {
   try {
-    return realpathSync6.native(path53);
+    return realpathSync7.native(path53);
   } catch {
     return resolve3(path53);
   }
@@ -125417,7 +125689,7 @@ function checkoutContext(projectRoot) {
 }
 function ignoreLayerAt(checkoutRoot, dir) {
   const file2 = dir === "" ? ROOT_GITIGNORE : `${dir}/${ROOT_GITIGNORE}`;
-  return { dir, file: file2, patterns: readGitignore(join28(checkoutRoot, ...file2.split("/"))) };
+  return { dir, file: file2, patterns: readGitignore(join29(checkoutRoot, ...file2.split("/"))) };
 }
 function ignoreChain(checkoutRoot, relPath2) {
   const segments = relPath2.split("/").filter((segment) => segment !== "");
@@ -125439,7 +125711,7 @@ function pathIgnoredBy(projectRoot, relPath2, leafKind = "file") {
   return layer === void 0 ? void 0 : displayGitignorePath(checkout.project, checkout.root, layer.file);
 }
 function displayGitignorePath(projectRoot, checkoutRoot, file2) {
-  return relative2(projectRoot, join28(checkoutRoot, ...file2.split("/"))).split(sep5).join("/");
+  return relative2(projectRoot, join29(checkoutRoot, ...file2.split("/"))).split(sep5).join("/");
 }
 function ephemeralPaths(plan, repoRoot) {
   const paths2 = /* @__PURE__ */ new Map();
@@ -125454,12 +125726,12 @@ function ephemeralPaths(plan, repoRoot) {
       paths2.set(`${action.target}${GENERATED_SIDECAR_SUFFIX}`, "file");
     }
   }
-  if (existsSync9(join28(repoRoot, PROJECT_PLUGINS_DIR))) paths2.set(INSTALL_ROOT_PROBE, "dir");
+  if (existsSync9(join29(repoRoot, PROJECT_PLUGINS_DIR))) paths2.set(INSTALL_ROOT_PROBE, "dir");
   return [...paths2].map(([path53, kind]) => ({ path: path53, kind }));
 }
 function onDiskKind(repoRoot, relPath2, fallback) {
   try {
-    const stats = lstatSync7(join28(repoRoot, relPath2), { throwIfNoEntry: false });
+    const stats = lstatSync8(join29(repoRoot, relPath2), { throwIfNoEntry: false });
     if (!stats) return fallback;
     return stats.isDirectory() ? "dir" : "file";
   } catch {
@@ -125501,7 +125773,7 @@ function order(declared, line2) {
   return at === -1 ? declared.length : at;
 }
 function appendGitignoreLines(repoRoot, lines) {
-  const abs = join28(repoRoot, ROOT_GITIGNORE);
+  const abs = join29(repoRoot, ROOT_GITIGNORE);
   const existing = existsSync9(abs) ? readFileSync11(abs, "utf8") : "";
   writeFileAtomic(abs, withGitignoreLines(existing, lines));
   return ROOT_GITIGNORE;
@@ -125545,8 +125817,8 @@ var init_gitignore = __esm({
 });
 
 // ../harness/src/adopt/read.ts
-import { lstatSync as lstatSync8, readFileSync as readFileSync12 } from "node:fs";
-import { join as join29 } from "node:path";
+import { lstatSync as lstatSync9, readFileSync as readFileSync12 } from "node:fs";
+import { join as join30 } from "node:path";
 function readAdoptCandidates(repoRoot, inventory, manifest) {
   const canonicalNames = new Set(
     inventory.skills.filter((s2) => s2.root === CANONICAL_SKILLS_ROOT).map((s2) => s2.name)
@@ -125623,7 +125895,7 @@ function readCandidate(repoRoot, skill, probed) {
   const pathBlockedReason = blockedWritePath(repoRoot, `${skill.source}/${SKILL_FILENAME}`, probed) ?? blockedWritePath(repoRoot, `${target}/${SKILL_FILENAME}`, probed);
   let text2;
   try {
-    text2 = readFileSync12(join29(repoRoot, skill.source, SKILL_FILENAME), "utf8");
+    text2 = readFileSync12(join30(repoRoot, skill.source, SKILL_FILENAME), "utf8");
   } catch {
     text2 = void 0;
   }
@@ -125642,7 +125914,7 @@ function readCandidate(repoRoot, skill, probed) {
 }
 function targetStateOf(repoRoot, target) {
   try {
-    lstatSync8(join29(repoRoot, target));
+    lstatSync9(join30(repoRoot, target));
     return "occupied";
   } catch {
     return "absent";
@@ -125698,7 +125970,7 @@ var init_sweep_reasons = __esm({
 
 // ../harness/src/apply/sweep-warnings.ts
 import { accessSync as accessSync2, constants as constants3 } from "node:fs";
-import { dirname as dirname8, join as join30, relative as relative3, sep as sep6 } from "node:path";
+import { dirname as dirname8, join as join31, relative as relative3, sep as sep6 } from "node:path";
 function sweepBlindWarning(relDir) {
   return `DorkOS could not look inside \`${relDir}\`, so it does not know whether anything a sync would remove is in there. Nothing was taken out of it. If it should be a folder DorkOS can read, fix it and re-run.`;
 }
@@ -125712,7 +125984,7 @@ function sweepScanWarnings(repoRoot, plan) {
 function unlistableSweptDirs(repoRoot) {
   const blind = [];
   for (const rel of SWEPT_DIRS) {
-    const abs = join30(repoRoot, rel);
+    const abs = join31(repoRoot, rel);
     if (!pathExists(abs)) continue;
     if (tryListDir(abs) === void 0) {
       blind.push(rel);
@@ -125721,7 +125993,7 @@ function unlistableSweptDirs(repoRoot) {
     if (rel !== CLAUDE_COMMANDS_DIR) continue;
     for (const sub of listDirEntries(abs)) {
       if (!sub.isDirectory()) continue;
-      if (tryListDir(join30(abs, sub.name)) === void 0) blind.push(`${rel}/${sub.name}`);
+      if (tryListDir(join31(abs, sub.name)) === void 0) blind.push(`${rel}/${sub.name}`);
     }
   }
   return blind;
@@ -125749,7 +126021,7 @@ function partitionRemovable(repoRoot, paths2) {
   const warnings = [];
   const probed = /* @__PURE__ */ new Map();
   for (const path53 of paths2) {
-    const absDir = unwritableParent(join30(repoRoot, path53), probed);
+    const absDir = unwritableParent(join31(repoRoot, path53), probed);
     if (absDir === void 0) removable.push(path53);
     else warnings.push(blockedRemovalWarning(path53, spell(repoRoot, absDir)));
   }
@@ -125784,7 +126056,7 @@ var init_sweep_warnings = __esm({
 
 // ../harness/src/apply/authored-orphans.ts
 import { readlinkSync, rmSync as rmSync3 } from "node:fs";
-import { isAbsolute, join as join31, relative as relative4, resolve as resolve4 } from "node:path";
+import { isAbsolute, join as join32, relative as relative4, resolve as resolve4 } from "node:path";
 function findOrphanedAuthoredLinks(repoRoot, plan) {
   return removableOf(repoRoot, allOrphanedAuthoredLinks(repoRoot, plan));
 }
@@ -125793,13 +126065,13 @@ function allOrphanedAuthoredLinks(repoRoot, plan) {
   const planned = new Set(
     plan.actions.filter((a2) => a2.kind === "symlink" && a2.target).map((a2) => a2.target)
   );
-  const skillsDir = join31(repoRoot, CLAUDE_SKILLS_DIR);
+  const skillsDir = join32(repoRoot, CLAUDE_SKILLS_DIR);
   const orphans = [];
   for (const entry of listDir(skillsDir)) {
     if (entry.includes(INSTALLED_PROJECTION_MARKER)) continue;
     const rel = `${CLAUDE_SKILLS_DIR}/${entry}`;
     if (planned.has(rel)) continue;
-    const abs = join31(skillsDir, entry);
+    const abs = join32(skillsDir, entry);
     if (!isSymlink(abs) || !isDanglingSymlink(abs)) continue;
     if (!pointsIntoAuthoredSkills(repoRoot, skillsDir, abs)) continue;
     orphans.push(rel);
@@ -125808,12 +126080,12 @@ function allOrphanedAuthoredLinks(repoRoot, plan) {
 }
 function sweepAuthoredOrphans(repoRoot, plan) {
   const orphans = findOrphanedAuthoredLinks(repoRoot, plan);
-  for (const rel of orphans) rmSync3(join31(repoRoot, rel), { force: true });
+  for (const rel of orphans) rmSync3(join32(repoRoot, rel), { force: true });
   return orphans;
 }
 function pointsIntoAuthoredSkills(repoRoot, linkDir, abs) {
   const target = resolve4(linkDir, readlinkSync(abs));
-  const inside = relative4(join31(repoRoot, AGENTS_SKILLS_DIR), target);
+  const inside = relative4(join32(repoRoot, AGENTS_SKILLS_DIR), target);
   return inside !== "" && !inside.startsWith("..") && !isAbsolute(inside);
 }
 var init_authored_orphans = __esm({
@@ -125827,7 +126099,7 @@ var init_authored_orphans = __esm({
 });
 
 // ../harness/src/apply/symlink-occupants.ts
-import { readdirSync as readdirSync7, readFileSync as readFileSync13, readlinkSync as readlinkSync2, realpathSync as realpathSync7, statSync as statSync8 } from "node:fs";
+import { readdirSync as readdirSync7, readFileSync as readFileSync13, readlinkSync as readlinkSync2, realpathSync as realpathSync8, statSync as statSync8 } from "node:fs";
 import { basename as basename4, dirname as dirname9 } from "node:path";
 function withForwardSlashes(path53) {
   return path53.split("\\").join("/");
@@ -125869,7 +126141,7 @@ function linkCheckFor(platform3) {
 function linkMatchesPlan(absTarget, absSource, linkText, how) {
   try {
     if (how === "link-text") return readlinkSync2(absTarget) === linkText;
-    return realpathSync7.native(absTarget) === realpathSync7.native(absSource);
+    return realpathSync8.native(absTarget) === realpathSync8.native(absSource);
   } catch {
     return false;
   }
@@ -125888,7 +126160,7 @@ var init_symlink_occupants = __esm({
 
 // ../harness/src/apply/windows-links.ts
 import {
-  lstatSync as lstatSync9,
+  lstatSync as lstatSync10,
   mkdirSync as mkdirSync4,
   mkdtempSync,
   readlinkSync as readlinkSync3,
@@ -125897,14 +126169,14 @@ import {
   symlinkSync
 } from "node:fs";
 import { tmpdir } from "node:os";
-import { isAbsolute as isAbsolute2, join as join32 } from "node:path";
+import { isAbsolute as isAbsolute2, join as join33 } from "node:path";
 function probeDirSymlink() {
   let dir;
   try {
-    dir = mkdtempSync(join32(tmpdir(), "dorkos-link-probe-"));
-    const source = join32(dir, "source");
+    dir = mkdtempSync(join33(tmpdir(), "dorkos-link-probe-"));
+    const source = join33(dir, "source");
     mkdirSync4(source);
-    symlinkSync(source, join32(dir, "link"), "dir");
+    symlinkSync(source, join33(dir, "link"), "dir");
     return true;
   } catch {
     return false;
@@ -125931,7 +126203,7 @@ function symlinkTypeFor(absSource) {
 function isJunctionAt(absTarget) {
   if (process.platform !== "win32") return false;
   try {
-    if (!lstatSync9(absTarget).isSymbolicLink()) return false;
+    if (!lstatSync10(absTarget).isSymbolicLink()) return false;
     return isAbsolute2(readlinkSync3(absTarget));
   } catch {
     return false;
@@ -125940,7 +126212,7 @@ function isJunctionAt(absTarget) {
 function junctionCommitWarnings(repoRoot, plan) {
   if (process.platform !== "win32") return [];
   const anyJunction = plan.actions.some(
-    (action) => action.kind === "symlink" && action.target !== void 0 && isJunctionAt(join32(repoRoot, action.target))
+    (action) => action.kind === "symlink" && action.target !== void 0 && isJunctionAt(join33(repoRoot, action.target))
   );
   return anyJunction && gitCheckoutRoot(repoRoot) !== void 0 ? [JUNCTION_COMMIT_WARNING] : [];
 }
@@ -125982,7 +126254,7 @@ var init_generate_occupants = __esm({
 
 // ../harness/src/apply/generated-targets.ts
 import { rmSync as rmSync5 } from "node:fs";
-import { join as join33 } from "node:path";
+import { join as join34 } from "node:path";
 function isGeneratedHookTarget(target) {
   return GENERATED_HOOK_TARGETS.includes(target);
 }
@@ -126023,7 +126295,7 @@ function allGeneratedOrphans(repoRoot, plan) {
   const orphans = [];
   for (const rel of GENERATED_HOOK_TARGETS) {
     if (regenerated.has(rel)) continue;
-    const abs = join33(repoRoot, rel);
+    const abs = join34(repoRoot, rel);
     const sidecarRel = `${rel}${GENERATED_SIDECAR_SUFFIX}`;
     const onDisk = readFileIfPresent(abs);
     if (onDisk === void 0) {
@@ -126037,7 +126309,7 @@ function allGeneratedOrphans(repoRoot, plan) {
 }
 function sweepGeneratedOrphans(repoRoot, plan) {
   const orphans = findGeneratedOrphans(repoRoot, plan);
-  for (const rel of orphans) rmSync5(join33(repoRoot, rel), { force: true });
+  for (const rel of orphans) rmSync5(join34(repoRoot, rel), { force: true });
   return orphans;
 }
 function findLeftAloneGeneratedHookFiles(repoRoot, plan) {
@@ -126047,7 +126319,7 @@ function findLeftAloneGeneratedHookFiles(repoRoot, plan) {
   const leftAlone = [];
   for (const rel of GENERATED_HOOK_TARGETS) {
     if (planned.has(rel)) continue;
-    const abs = join33(repoRoot, rel);
+    const abs = join34(repoRoot, rel);
     const onDisk = readFileIfPresent(abs);
     if (onDisk === void 0) continue;
     if (ownsGeneratedFile(abs, onDisk)) continue;
@@ -126059,7 +126331,7 @@ function findBlockedGenerateTargets(repoRoot, plan) {
   const blocked = [];
   for (const action of plan.actions) {
     if (action.kind !== "generate" || !action.target) continue;
-    const absTarget = join33(repoRoot, action.target);
+    const absTarget = join34(repoRoot, action.target);
     const shape = blockingGenerateOccupant(absTarget);
     if (shape !== void 0) {
       blocked.push({ ...action, reason: shape });
@@ -126177,7 +126449,7 @@ var init_settings_hooks = __esm({
 
 // ../harness/src/apply/apply.ts
 import { existsSync as existsSync11, mkdirSync as mkdirSync5, readFileSync as readFileSync15, rmSync as rmSync6, symlinkSync as symlinkSync2 } from "node:fs";
-import { dirname as dirname10, join as join34, relative as relative5 } from "node:path";
+import { dirname as dirname10, join as join35, relative as relative5 } from "node:path";
 function skillSourcesUnreadable(plan) {
   return (plan.unreadableSkillRoots?.length ?? 0) > 0;
 }
@@ -126188,15 +126460,15 @@ function scaffoldPresent(absTarget) {
   return pathExists(absTarget) && !isDanglingSymlink(absTarget);
 }
 function relativeLink(repoRoot, source, target) {
-  return relative5(dirname10(join34(repoRoot, target)), join34(repoRoot, source));
+  return relative5(dirname10(join35(repoRoot, target)), join35(repoRoot, source));
 }
 function applySymlink(repoRoot, action) {
   if (!action.source || !action.target) {
     throw new Error(`symlink action for "${action.name}" is missing source/target`);
   }
-  const absTarget = join34(repoRoot, action.target);
+  const absTarget = join35(repoRoot, action.target);
   const linkText = relativeLink(repoRoot, action.source, action.target);
-  const absSource = join34(repoRoot, action.source);
+  const absSource = join35(repoRoot, action.source);
   for (let attempt = 0, removalRetries = 0; attempt < SYMLINK_ATTEMPTS; ) {
     if (pathExists(absTarget)) {
       const blocked = blockingSymlinkOccupant(absTarget, linkText);
@@ -126224,13 +126496,13 @@ function applySymlink(repoRoot, action) {
 }
 function applyScaffold(repoRoot, action) {
   if (!action.target) throw new Error(`scaffold action for "${action.name}" is missing target`);
-  const absTarget = join34(repoRoot, action.target);
+  const absTarget = join35(repoRoot, action.target);
   if (scaffoldPresent(absTarget)) return;
   writeFileAtomic(absTarget, requireActionContent(action));
 }
 function applyGenerate(repoRoot, action) {
   if (!action.target) throw new Error(`generate action for "${action.name}" is missing target`);
-  const absTarget = join34(repoRoot, action.target);
+  const absTarget = join35(repoRoot, action.target);
   const shape = blockingGenerateOccupant(absTarget);
   if (shape !== void 0) return shape;
   const content = requireActionContent(action);
@@ -126244,7 +126516,7 @@ function applyGenerate(repoRoot, action) {
 function applyMerge(repoRoot, action) {
   if (!action.target) throw new Error(`merge action for "${action.name}" is missing target`);
   const managed = JSON.parse(requireActionContent(action));
-  return mergeManagedHooks(join34(repoRoot, action.target), managed);
+  return mergeManagedHooks(join35(repoRoot, action.target), managed);
 }
 function findInstalledOrphans(repoRoot, plan) {
   return removableOf(repoRoot, allInstalledOrphans(repoRoot, plan));
@@ -126256,10 +126528,10 @@ function allInstalledOrphans(repoRoot, plan) {
   );
   const orphans = [];
   for (const dir of INSTALLED_SKILL_DIRS) {
-    const skillsDir = join34(repoRoot, dir);
+    const skillsDir = join35(repoRoot, dir);
     for (const entry of listDir(skillsDir)) {
       if (!entry.includes(INSTALLED_PROJECTION_MARKER)) continue;
-      const abs = join34(skillsDir, entry);
+      const abs = join35(skillsDir, entry);
       if (!isSymlink(abs)) continue;
       const rel = `${dir}/${entry}`;
       if (managed.has(rel)) continue;
@@ -126270,7 +126542,7 @@ function allInstalledOrphans(repoRoot, plan) {
 }
 function sweepInstalledOrphans(repoRoot, plan) {
   const orphans = findInstalledOrphans(repoRoot, plan);
-  for (const rel of orphans) rmSync6(join34(repoRoot, rel), { force: true });
+  for (const rel of orphans) rmSync6(join35(repoRoot, rel), { force: true });
   return orphans;
 }
 function findGeneratedCommandOrphans(repoRoot, plan) {
@@ -126280,14 +126552,14 @@ function allGeneratedCommandOrphans(repoRoot, plan) {
   const kept = new Set(
     plan.actions.filter((a2) => a2.kind === "generate" && a2.target?.startsWith(`${CLAUDE_COMMANDS_DIR}/`)).map((a2) => a2.target)
   );
-  const commandsDir = join34(repoRoot, CLAUDE_COMMANDS_DIR);
+  const commandsDir = join35(repoRoot, CLAUDE_COMMANDS_DIR);
   const orphans = [];
   for (const sub of listDirEntries(commandsDir)) {
     if (!sub.isDirectory()) continue;
-    const subAbs = join34(commandsDir, sub.name);
+    const subAbs = join35(commandsDir, sub.name);
     for (const file2 of listDir(subAbs)) {
       const rel = `${CLAUDE_COMMANDS_DIR}/${sub.name}/${file2}`;
-      const abs = join34(subAbs, file2);
+      const abs = join35(subAbs, file2);
       if (isAtomicTempName(file2)) {
         if (isStaleAtomicTemp(abs)) orphans.push(rel);
         continue;
@@ -126301,20 +126573,20 @@ function allGeneratedCommandOrphans(repoRoot, plan) {
 }
 function sweepGeneratedCommandOrphans(repoRoot, plan) {
   const orphans = findGeneratedCommandOrphans(repoRoot, plan);
-  for (const rel of orphans) rmSync6(join34(repoRoot, rel), { force: true });
+  for (const rel of orphans) rmSync6(join35(repoRoot, rel), { force: true });
   for (const rel of removableOf(repoRoot, emptiedWrapperDirs(repoRoot, plan))) {
-    rmSync6(join34(repoRoot, rel), { recursive: true, force: true });
+    rmSync6(join35(repoRoot, rel), { recursive: true, force: true });
   }
   return orphans;
 }
 function emptiedWrapperDirs(repoRoot, plan) {
-  const commandsDir = join34(repoRoot, CLAUDE_COMMANDS_DIR);
+  const commandsDir = join35(repoRoot, CLAUDE_COMMANDS_DIR);
   const taking = new Set(findGeneratedCommandOrphans(repoRoot, plan));
   const dirs = [];
   for (const sub of listDirEntries(commandsDir)) {
     if (!sub.isDirectory()) continue;
     const rel = `${CLAUDE_COMMANDS_DIR}/${sub.name}`;
-    const listing = tryListDir(join34(commandsDir, sub.name));
+    const listing = tryListDir(join35(commandsDir, sub.name));
     if (listing === void 0) continue;
     if (listing.every((entry) => taking.has(`${rel}/${entry}`))) dirs.push(rel);
   }
@@ -126327,12 +126599,12 @@ function allOpencodeCommandOrphans(repoRoot, plan) {
   const kept = new Set(
     plan.actions.filter((a2) => a2.kind === "generate" && a2.target?.startsWith(`${OPENCODE_COMMANDS_DIR}/`)).map((a2) => a2.target)
   );
-  const commandsDir = join34(repoRoot, OPENCODE_COMMANDS_DIR);
+  const commandsDir = join35(repoRoot, OPENCODE_COMMANDS_DIR);
   const orphans = [];
   for (const entry of listDirEntries(commandsDir)) {
     if (!entry.isFile()) continue;
     const rel = `${OPENCODE_COMMANDS_DIR}/${entry.name}`;
-    const abs = join34(commandsDir, entry.name);
+    const abs = join35(commandsDir, entry.name);
     if (isAtomicTempName(entry.name)) {
       if (isStaleAtomicTemp(abs)) orphans.push(rel);
       continue;
@@ -126345,7 +126617,7 @@ function allOpencodeCommandOrphans(repoRoot, plan) {
 }
 function sweepOpencodeCommandOrphans(repoRoot, plan) {
   const orphans = findOpencodeCommandOrphans(repoRoot, plan);
-  for (const rel of orphans) rmSync6(join34(repoRoot, rel), { force: true });
+  for (const rel of orphans) rmSync6(join35(repoRoot, rel), { force: true });
   return orphans;
 }
 function isEngineGeneratedCommand(abs) {
@@ -126361,8 +126633,8 @@ function findBlockedWrapperDirs(repoRoot, plan) {
   );
   const blocked = /* @__PURE__ */ new Set();
   for (const relDir of wrapperDirs) {
-    const abs = join34(repoRoot, relDir);
-    const hasForeignContent = listDir(abs).some((entry) => isForeign(join34(abs, entry), entry));
+    const abs = join35(repoRoot, relDir);
+    const hasForeignContent = listDir(abs).some((entry) => isForeign(join35(abs, entry), entry));
     if (hasForeignContent) blocked.add(relDir);
   }
   return blocked;
@@ -126378,7 +126650,7 @@ function findBlockedOpencodeCommandFiles(repoRoot, plan) {
     if (action.kind !== "generate") continue;
     const target = action.target;
     if (!target?.startsWith(`${OPENCODE_COMMANDS_DIR}/`)) continue;
-    const abs = join34(repoRoot, target);
+    const abs = join35(repoRoot, target);
     if (pathExists(abs) && !isEngineGeneratedCommand(abs)) blocked.add(target);
   }
   return blocked;
@@ -126391,11 +126663,11 @@ function allSettingsHooksOrphan(repoRoot, plan) {
     (a2) => a2.kind === "merge" && a2.target === CLAUDE_SETTINGS_LOCAL_TARGET
   );
   if (hasMerge) return [];
-  return hasManagedHooks(join34(repoRoot, CLAUDE_SETTINGS_LOCAL_TARGET)) ? [CLAUDE_SETTINGS_LOCAL_TARGET] : [];
+  return hasManagedHooks(join35(repoRoot, CLAUDE_SETTINGS_LOCAL_TARGET)) ? [CLAUDE_SETTINGS_LOCAL_TARGET] : [];
 }
 function sweepSettingsHooksOrphan(repoRoot, plan) {
   const orphans = findSettingsHooksOrphan(repoRoot, plan);
-  if (orphans.length > 0) sweepManagedHooks(join34(repoRoot, CLAUDE_SETTINGS_LOCAL_TARGET));
+  if (orphans.length > 0) sweepManagedHooks(join35(repoRoot, CLAUDE_SETTINGS_LOCAL_TARGET));
   return orphans;
 }
 function applyPlan(repoRoot, plan, opts) {
@@ -126483,18 +126755,18 @@ function isDrifted(repoRoot, action) {
   switch (action.kind) {
     case "symlink": {
       if (!action.source || !action.target) return true;
-      const absTarget = join34(repoRoot, action.target);
+      const absTarget = join35(repoRoot, action.target);
       const kind = occupantKind(absTarget);
       if (kind === "absent") return true;
       if (kind === "file" || kind === "directory") return false;
       const linkText = relativeLink(repoRoot, action.source, action.target);
-      return !linkMatchesPlan(absTarget, join34(repoRoot, action.source), linkText, linkCheck());
+      return !linkMatchesPlan(absTarget, join35(repoRoot, action.source), linkText, linkCheck());
     }
     case "scaffold":
-      return !action.target || !scaffoldPresent(join34(repoRoot, action.target));
+      return !action.target || !scaffoldPresent(join35(repoRoot, action.target));
     case "generate": {
       if (!action.target) return true;
-      const absTarget = join34(repoRoot, action.target);
+      const absTarget = join35(repoRoot, action.target);
       if (blockingGenerateOccupant(absTarget) !== void 0) return false;
       const onDisk = readFileIfPresent(absTarget);
       if (onDisk === void 0) return true;
@@ -126506,7 +126778,7 @@ function isDrifted(repoRoot, action) {
     case "merge": {
       if (!action.target) return true;
       const managed = JSON.parse(requireActionContent(action));
-      return managedHooksDrift(join34(repoRoot, action.target), managed);
+      return managedHooksDrift(join35(repoRoot, action.target), managed);
     }
     case "native":
     case "drop":
@@ -126518,7 +126790,7 @@ function findBlockedSymlinkTargets(repoRoot, plan) {
   for (const action of plan.actions) {
     if (action.kind !== "symlink" || !action.source || !action.target) continue;
     const reason = blockingSymlinkOccupant(
-      join34(repoRoot, action.target),
+      join35(repoRoot, action.target),
       relativeLink(repoRoot, action.source, action.target)
     );
     if (reason !== void 0) blocked.push({ ...action, reason });
@@ -126629,8 +126901,8 @@ var init_apply = __esm({
 });
 
 // ../harness/src/adopt/apply.ts
-import { lstatSync as lstatSync10, mkdirSync as mkdirSync6, renameSync as renameSync3, rmdirSync } from "node:fs";
-import { join as join35 } from "node:path";
+import { lstatSync as lstatSync11, mkdirSync as mkdirSync6, renameSync as renameSync3, rmdirSync } from "node:fs";
+import { join as join36 } from "node:path";
 function applyAdopt(repoRoot, plan) {
   const moved = [];
   const declared = [];
@@ -126648,9 +126920,9 @@ function applyAdopt(repoRoot, plan) {
   return { moved, declared, refusals };
 }
 function applyMove(repoRoot, move) {
-  const absFrom = join35(repoRoot, move.from);
-  const absTo = join35(repoRoot, move.to);
-  const canonicalLayer = join35(repoRoot, ADOPT_TARGET_ROOT);
+  const absFrom = join36(repoRoot, move.from);
+  const absTo = join36(repoRoot, move.to);
+  const canonicalLayer = join36(repoRoot, ADOPT_TARGET_ROOT);
   const layerExisted = somethingIsAt(canonicalLayer);
   mkdirSync6(canonicalLayer, { recursive: true });
   try {
@@ -126694,7 +126966,7 @@ function restore(input4) {
   if (!somethingIsAt(absFrom)) {
     try {
       renameSync3(absTo, absFrom);
-      if (!layerExisted) removeIfEmpty(join35(repoRoot, ADOPT_TARGET_ROOT));
+      if (!layerExisted) removeIfEmpty(join36(repoRoot, ADOPT_TARGET_ROOT));
       return { name: move.name, source: move.from, rule: "link-blocked", reason: blocked };
     } catch {
     }
@@ -126714,7 +126986,7 @@ function removeIfEmpty(abs) {
 }
 function somethingIsAt(abs) {
   try {
-    lstatSync10(abs);
+    lstatSync11(abs);
     return true;
   } catch {
     return false;
@@ -126758,13 +127030,13 @@ import {
   accessSync as accessSync3,
   constants as constants4,
   existsSync as existsSync12,
-  lstatSync as lstatSync11,
+  lstatSync as lstatSync12,
   mkdirSync as mkdirSync7,
   readlinkSync as readlinkSync4,
   rmSync as rmSync7,
   symlinkSync as symlinkSync3
 } from "node:fs";
-import { basename as basename5, dirname as dirname11, join as join36, relative as relative6, resolve as resolve5, sep as sep7 } from "node:path";
+import { basename as basename5, dirname as dirname11, join as join37, relative as relative6, resolve as resolve5, sep as sep7 } from "node:path";
 function globalSweepDirs(roots) {
   return [
     ...new Set(
@@ -126781,7 +127053,7 @@ function globalLinkPackage(abs, pluginsRoot) {
   if (!basename5(abs).includes(INSTALLED_PROJECTION_MARKER)) return void 0;
   let stats;
   try {
-    stats = lstatSync11(abs);
+    stats = lstatSync12(abs);
   } catch {
     return void 0;
   }
@@ -126815,7 +127087,7 @@ function globalOrphanCandidates(plan, roots) {
       const pkg = globalLinkPackage(abs, pluginsRoot);
       if (pkg === void 0) continue;
       if (planned.has(abs)) continue;
-      if (!existsSync12(join36(pluginsRoot, pkg))) {
+      if (!existsSync12(join37(pluginsRoot, pkg))) {
         orphans.set(abs, SWEEP_REASONS["global-package-gone"]);
         continue;
       }
@@ -127139,13 +127411,13 @@ var init_adoptable = __esm({
 // ../harness/src/vendor-facts/coverage.ts
 import {
   existsSync as existsSync13,
-  lstatSync as lstatSync12,
+  lstatSync as lstatSync13,
   readdirSync as readdirSync8,
   readFileSync as readFileSync16,
-  realpathSync as realpathSync8,
+  realpathSync as realpathSync9,
   statSync as statSync10
 } from "node:fs";
-import { basename as basename6, isAbsolute as isAbsolute4, join as join37, relative as relative7, resolve as resolve6, sep as sep8 } from "node:path";
+import { basename as basename6, isAbsolute as isAbsolute4, join as join38, relative as relative7, resolve as resolve6, sep as sep8 } from "node:path";
 function statOrUndefined(path53) {
   try {
     return statSync10(path53, { throwIfNoEntry: false });
@@ -127155,7 +127427,7 @@ function statOrUndefined(path53) {
 }
 function lstatOrUndefined(path53) {
   try {
-    return lstatSync12(path53, { throwIfNoEntry: false });
+    return lstatSync13(path53, { throwIfNoEntry: false });
   } catch {
     return void 0;
   }
@@ -127182,7 +127454,7 @@ function ascendLevels(root, cwd, stopAtWorktree) {
   const levels2 = [];
   for (; ; ) {
     levels2.push(current2);
-    if (stopAtWorktree && existsSync13(join37(current2, ".git"))) break;
+    if (stopAtWorktree && existsSync13(join38(current2, ".git"))) break;
     if (current2 === root) break;
     const parent = resolve6(current2, "..");
     if (parent === current2) break;
@@ -127208,7 +127480,7 @@ function descendScopes(root, facts) {
       if (!entry.isDirectory()) continue;
       if (NEVER_DESCEND.has(entry.name)) continue;
       if (entry.name.startsWith(".") && !listedDotDirs.has(entry.name)) continue;
-      visit2(join37(dir, entry.name), depth + 1);
+      visit2(join38(dir, entry.name), depth + 1);
     }
   };
   visit2(root, 0);
@@ -127220,7 +127492,7 @@ function readDirs(facts, root, cwd) {
   const seen = /* @__PURE__ */ new Set();
   for (const scope of scopes) {
     for (const readPath3 of facts.readPaths.project) {
-      const abs = join37(scope, readPath3);
+      const abs = join38(scope, readPath3);
       if (seen.has(abs)) continue;
       seen.add(abs);
       dirs.push({ abs, via: viaOf(root, abs) });
@@ -127249,7 +127521,7 @@ function applyDedupe(harness, facts, root, candidates, uncertain) {
   if (facts.dedupe === "none") return candidates;
   const realpathOf = (dir) => {
     try {
-      return realpathSync8(dir);
+      return realpathSync9(dir);
     } catch {
       return dir;
     }
@@ -127304,9 +127576,9 @@ function harnessCoverage(harness, root, opts) {
       continue;
     }
     for (const entry of [...entries].sort((a2, b2) => a2.name.localeCompare(b2.name))) {
-      const dir = join37(abs, entry.name);
+      const dir = join38(abs, entry.name);
       if (!statOrUndefined(dir)?.isDirectory()) continue;
-      const skillMd = join37(dir, "SKILL.md");
+      const skillMd = join38(dir, "SKILL.md");
       if (!statOrUndefined(skillMd)?.isFile()) continue;
       const reachedThroughSymlink = lstatOrUndefined(dir)?.isSymbolicLink() === true;
       const { found, reasons, loads, droppedReason } = evaluate(
@@ -127342,22 +127614,22 @@ var init_coverage = __esm({
 });
 
 // ../harness/src/engine.ts
-import { existsSync as existsSync14, lstatSync as lstatSync13, readFileSync as readFileSync17, readdirSync as readdirSync9 } from "node:fs";
-import { join as join38 } from "node:path";
+import { existsSync as existsSync14, lstatSync as lstatSync14, readFileSync as readFileSync17, readdirSync as readdirSync9 } from "node:fs";
+import { join as join39 } from "node:path";
 function loadManifest(repoRoot) {
   const raw = JSON.parse(
-    readFileSync17(join38(repoRoot, ".agents", "harness.manifest.json"), "utf8")
+    readFileSync17(join39(repoRoot, ".agents", "harness.manifest.json"), "utf8")
   );
   return parseHarnessManifest(raw);
 }
 function loadClaudeHooks(repoRoot) {
-  const settingsPath = join38(repoRoot, ".claude", "settings.json");
+  const settingsPath = join39(repoRoot, ".claude", "settings.json");
   if (!existsSync14(settingsPath)) return void 0;
   const settings = JSON.parse(readFileSync17(settingsPath, "utf8"));
   return settings.hooks;
 }
 function agentsMdExists(repoRoot) {
-  return existsSync14(join38(repoRoot, "AGENTS.md"));
+  return existsSync14(join39(repoRoot, "AGENTS.md"));
 }
 function claudeCommandsExist(repoRoot) {
   const walk = (dir) => {
@@ -127369,22 +127641,22 @@ function claudeCommandsExist(repoRoot) {
     }
     for (const entry of entries) {
       if (entry.isFile() && entry.name.endsWith(".md")) return true;
-      if (entry.isDirectory() && walk(join38(dir, entry.name))) return true;
+      if (entry.isDirectory() && walk(join39(dir, entry.name))) return true;
     }
     return false;
   };
-  return walk(join38(repoRoot, CLAUDE_COMMANDS_DIR));
+  return walk(join39(repoRoot, CLAUDE_COMMANDS_DIR));
 }
 function scanClaudeOnlySkills(repoRoot, manifest) {
   const resolved = /* @__PURE__ */ new Map();
   for (const entry of manifest.claudeOnlySkills) {
     const defaultPath = `${CLAUDE_SKILLS_DIR}/${entry.name}`;
     const path53 = entry.path.trim() === "" ? defaultPath : entry.path;
-    const abs = join38(repoRoot, path53);
+    const abs = join39(repoRoot, path53);
     let kind = "missing";
-    const stats = lstatSync13(abs, { throwIfNoEntry: false });
+    const stats = lstatSync14(abs, { throwIfNoEntry: false });
     if (stats?.isSymbolicLink()) kind = "symlink";
-    else if (stats?.isDirectory() && existsSync14(join38(abs, "SKILL.md"))) kind = "directory";
+    else if (stats?.isDirectory() && existsSync14(join39(abs, "SKILL.md"))) kind = "directory";
     resolved.set(entry.name, { path: path53, kind, atProjectionTarget: path53 === defaultPath });
   }
   return resolved;
@@ -127392,7 +127664,8 @@ function scanClaudeOnlySkills(repoRoot, manifest) {
 function project(repoRoot, opts) {
   const installed = scanInstalledSources({
     dorkHome: opts?.dorkHome,
-    projectRoot: repoRoot
+    projectRoot: repoRoot,
+    ...opts?.devLinks ? { devLinks: opts.devLinks } : {}
   });
   const manifest = loadManifest(repoRoot);
   return buildPlan({
@@ -127470,6 +127743,7 @@ __export(src_exports, {
   CURSOR_HOOK_EVENTS: () => CURSOR_HOOK_EVENTS,
   CURSOR_TO_CANONICAL_EVENT_NAMES: () => CURSOR_TO_CANONICAL_EVENT_NAMES,
   DEFAULT_HARNESSES: () => DEFAULT_HARNESSES,
+  DEV_LINK_MARKER: () => DEV_LINK_MARKER,
   DORKOS_OWN_FIELDS: () => DORKOS_OWN_FIELDS,
   EMPTY_INVENTORY: () => EMPTY_INVENTORY,
   EPHEMERAL_GITIGNORE_PATTERNS: () => EPHEMERAL_GITIGNORE_PATTERNS,
@@ -127497,6 +127771,7 @@ __export(src_exports, {
   HarnessManifestSchema: () => HarnessManifestSchema,
   INSTALLED_PROJECTION_MARKER: () => INSTALLED_PROJECTION_MARKER,
   JUNCTION_COMMIT_WARNING: () => JUNCTION_COMMIT_WARNING,
+  MANAGED_HOOK_DEV_LINK_KEY: () => MANAGED_HOOK_DEV_LINK_KEY,
   MANAGED_HOOK_SENTINEL_KEY: () => MANAGED_HOOK_SENTINEL_KEY,
   MCP_CONFIG_SOURCE: () => MCP_CONFIG_SOURCE,
   OPENCODE_COMMANDS_DIR: () => OPENCODE_COMMANDS_DIR,
@@ -127539,6 +127814,9 @@ __export(src_exports, {
   declareClaudeOnlySkill: () => declareClaudeOnlySkill,
   detectHarnessFootprints: () => detectHarnessFootprints,
   detectHarnesses: () => detectHarnesses,
+  devLinkForSlot: () => devLinkForSlot,
+  devLinkLabel: () => devLinkLabel,
+  devLinkMarkerLine: () => devLinkMarkerLine,
   dorkosHarnessScaffoldNotice: () => dorkosHarnessScaffoldNotice,
   dropNonPortableLayers: () => dropNonPortableLayers,
   dropSuppressedPluginHookMerge: () => dropSuppressedPluginHookMerge,
@@ -127583,8 +127861,10 @@ __export(src_exports, {
   isJunctionAt: () => isJunctionAt,
   isPathIgnored: () => isPathIgnored,
   isProjectScoped: () => isProjectScoped,
+  isStillLinked: () => isStillLinked,
   joinNames: () => joinNames2,
   junctionCommitWarnings: () => junctionCommitWarnings,
+  labelDevLinkActions: () => labelDevLinkActions,
   listAuthoredSkills: () => listAuthoredSkills,
   listSkillDirs: () => listSkillDirs,
   loadClaudeHooks: () => loadClaudeHooks,
@@ -127625,6 +127905,7 @@ __export(src_exports, {
   projectGlobal: () => projectGlobal,
   projectedHooks: () => projectedHooks,
   readAdoptCandidates: () => readAdoptCandidates,
+  readDevLinksSync: () => readDevLinksSync,
   removableOf: () => removableOf,
   resolveSourceRoots: () => resolveSourceRoots,
   rewritePluginRootInHooks: () => rewritePluginRootInHooks,
@@ -127647,7 +127928,8 @@ __export(src_exports, {
   sweepSettingsHooksOrphan: () => sweepSettingsHooksOrphan,
   symlinkTypeFor: () => symlinkTypeFor,
   unlistableSweptDirs: () => unlistableSweptDirs,
-  unreachableNativeReason: () => unreachableNativeReason
+  unreachableNativeReason: () => unreachableNativeReason,
+  withDevLinkMarker: () => withDevLinkMarker
 });
 var init_src4 = __esm({
   "../harness/src/index.ts"() {
@@ -127661,6 +127943,7 @@ var init_src4 = __esm({
     init_instructions();
     init_command_formats();
     init_installed_projector();
+    init_dev_link_labels();
     init_global_projector();
     init_global_installs();
     init_unreadable_hooks();
@@ -127675,6 +127958,7 @@ var init_src4 = __esm({
     init_declare_claude_only();
     init_resolve_roots();
     init_installed();
+    init_dev_links();
     init_hooks();
     init_adopt();
     init_apply();
@@ -127698,7 +127982,7 @@ __export(adopt_owned_workspace_exports, {
   autoAdoptFromDisk: () => autoAdoptFromDisk
 });
 import { readFileSync as readFileSync18 } from "node:fs";
-import { join as join39 } from "node:path";
+import { join as join40 } from "node:path";
 function autoAdoptPermitted() {
   return configManager.get("harness").autoAdopt;
 }
@@ -127706,7 +127990,7 @@ function autoAdoptFromDisk(dorkHome) {
   const fallback = UserConfigSchema.shape.harness.parse(void 0).autoAdopt;
   let raw;
   try {
-    raw = JSON.parse(readFileSync18(join39(dorkHome, "config.json"), "utf8"));
+    raw = JSON.parse(readFileSync18(join40(dorkHome, "config.json"), "utf8"));
   } catch {
     return fallback;
   }
@@ -127807,18 +128091,18 @@ var init_adopt_owned_workspace = __esm({
 });
 
 // ../../apps/server/src/services/harness/project-agent-workspace.ts
-import { existsSync as existsSync15, realpathSync as realpathSync9 } from "node:fs";
-import { join as join40, relative as relative8, resolve as resolve7, isAbsolute as isAbsolute5 } from "node:path";
+import { existsSync as existsSync15, realpathSync as realpathSync10 } from "node:fs";
+import { join as join41, relative as relative8, resolve as resolve7, isAbsolute as isAbsolute5 } from "node:path";
 function canonicalize(p) {
   const absolute = resolve7(p);
   try {
-    return realpathSync9(absolute);
+    return realpathSync10(absolute);
   } catch {
     return absolute;
   }
 }
 function isAgentHome(dir, dorkHome) {
-  const rel = relative8(canonicalize(join40(dorkHome, "agents")), canonicalize(dir));
+  const rel = relative8(canonicalize(join41(dorkHome, "agents")), canonicalize(dir));
   return rel !== "" && !rel.startsWith("..") && !isAbsolute5(rel);
 }
 var AGENT_SKILLS_DIR;
@@ -127827,9 +128111,10 @@ var init_project_agent_workspace = __esm({
     "use strict";
     init_src4();
     init_src3();
+    init_dork_home();
     init_logger();
     init_adopt_owned_workspace();
-    AGENT_SKILLS_DIR = join40(".agents", "skills");
+    AGENT_SKILLS_DIR = join41(".agents", "skills");
   }
 });
 
@@ -127838,14 +128123,14 @@ var directory_ownership_exports = {};
 __export(directory_ownership_exports, {
   resolveDirectoryOwnership: () => resolveDirectoryOwnership
 });
-import { join as join41, relative as relative9, sep as sep9 } from "node:path";
+import { join as join42, relative as relative9, sep as sep9 } from "node:path";
 function resolveDirectoryOwnership(dir, dorkHome) {
   if (isAgentHome(dir, dorkHome)) return "agent-home";
   if (isRoomWorktree(dir, dorkHome)) return "room-worktree";
   return "plain";
 }
 function isRoomWorktree(dir, dorkHome) {
-  const rel = relative9(canonicalize(join41(dorkHome, "rooms")), canonicalize(dir));
+  const rel = relative9(canonicalize(join42(dorkHome, "rooms")), canonicalize(dir));
   if (rel === "" || rel.startsWith("..")) return false;
   const parts = rel.split(sep9);
   return parts.length === 3 && parts[1] === "worktrees";
@@ -127857,9 +128142,9 @@ var init_directory_ownership = __esm({
 });
 
 // src/harness-consent.ts
-import { join as join42 } from "node:path";
+import { join as join43 } from "node:path";
 function configPathFor(dorkHome) {
-  return join42(dorkHome, "config.json");
+  return join43(dorkHome, "config.json");
 }
 async function readStoredDecisions(dorkHome) {
   const { readHookDecisionsFromDisk: readHookDecisionsFromDisk2 } = await Promise.resolve().then(() => (init_hook_consent(), hook_consent_exports));
@@ -128020,11 +128305,11 @@ __export(global_scope_exports, {
   writeGlobalSharing: () => writeGlobalSharing
 });
 import { readFileSync as readFileSync19 } from "node:fs";
-import { join as join43 } from "node:path";
+import { join as join44 } from "node:path";
 function readGlobalSharingFromDisk(dorkHome) {
   let text2;
   try {
-    text2 = readFileSync19(join43(dorkHome, "config.json"), "utf8");
+    text2 = readFileSync19(join44(dorkHome, "config.json"), "utf8");
   } catch (err) {
     if (err.code === "ENOENT") return NOTHING_SHARED;
     return { ...NOTHING_SHARED, unreadable: describeReadFailure2(err) };
@@ -128053,7 +128338,7 @@ function boundaryConfigFromDisk(dorkHome) {
     getDot: (key) => {
       if (key !== "server.boundary") return void 0;
       try {
-        const raw = JSON.parse(readFileSync19(join43(dorkHome, "config.json"), "utf8"));
+        const raw = JSON.parse(readFileSync19(join44(dorkHome, "config.json"), "utf8"));
         const server2 = raw?.server;
         return server2?.boundary;
       } catch {
@@ -128084,7 +128369,7 @@ function resolveGlobalScopeInputs(dorkHome, env5, config3) {
     roots: {
       dorkHome,
       ...AGENTS_SKILLS_DIR_READERS.some((harness) => enabled3.has(harness)) ? { agentsSkillsDir: agentsUserSkillsDir() } : {},
-      ...enabled3.has("claude-code") ? { claudeSkillsDir: join43(inheritedClaudeRoot(), "skills") } : {}
+      ...enabled3.has("claude-code") ? { claudeSkillsDir: join44(inheritedClaudeRoot(), "skills") } : {}
     }
   };
 }
@@ -128094,7 +128379,7 @@ function globalRootsFor(dorkHome, harnesses, env5, config3) {
   return {
     dorkHome,
     ...AGENTS_SKILLS_DIR_READERS.some((harness) => enabled3.has(harness)) ? { agentsSkillsDir: agentsUserSkillsDir() } : {},
-    ...enabled3.has("claude-code") ? { claudeSkillsDir: join43(inheritedClaudeRoot(), "skills") } : {}
+    ...enabled3.has("claude-code") ? { claudeSkillsDir: join44(inheritedClaudeRoot(), "skills") } : {}
   };
 }
 function writeGlobalSharing(harnesses, reason, now2 = /* @__PURE__ */ new Date()) {
@@ -128585,11 +128870,11 @@ __export(project_with_consent_exports, {
   withProjectLock: () => withProjectLock
 });
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
-import { realpathSync as realpathSync10 } from "node:fs";
+import { realpathSync as realpathSync11 } from "node:fs";
 import { resolve as resolve8 } from "node:path";
 function projectLockKey(projectPath) {
   try {
-    return realpathSync10(projectPath);
+    return realpathSync11(projectPath);
   } catch {
     return resolve8(projectPath);
   }
@@ -128704,11 +128989,11 @@ var init_project_with_consent = __esm({
 import { AsyncLocalStorage as AsyncLocalStorage3 } from "node:async_hooks";
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { chmod, mkdir as mkdir3, rename, rm, writeFile as writeFile3 } from "node:fs/promises";
-import { basename as basename7, dirname as dirname12, join as join44, resolve as resolve9 } from "node:path";
+import { basename as basename7, dirname as dirname12, join as join45, resolve as resolve9 } from "node:path";
 async function writeUnlocked(filePath, data, options) {
   const dir = dirname12(filePath);
   await mkdir3(dir, { recursive: true });
-  const tempPath = join44(dir, `.${basename7(filePath)}.${process.pid}.${randomUUID3()}.tmp`);
+  const tempPath = join45(dir, `.${basename7(filePath)}.${process.pid}.${randomUUID3()}.tmp`);
   try {
     await writeFile3(tempPath, data, {
       encoding: "utf-8",
@@ -128865,7 +129150,7 @@ var init_git_tree = __esm({
 
 // ../../apps/server/src/services/marketplace/lib/directory-size.ts
 import { lstat as lstat3, readdir as readdir3 } from "node:fs/promises";
-import { join as join45 } from "node:path";
+import { join as join46 } from "node:path";
 async function directorySize(root) {
   let total = 0;
   const walk = async (dir, depth) => {
@@ -128877,7 +129162,7 @@ async function directorySize(root) {
       return;
     }
     for (const entry of entries) {
-      const entryPath = join45(dir, entry.name);
+      const entryPath = join46(dir, entry.name);
       if (entry.isDirectory()) {
         await walk(entryPath, depth + 1);
       } else if (entry.isFile()) {
@@ -128913,7 +129198,7 @@ import {
   stat as stat2,
   utimes
 } from "node:fs/promises";
-import { join as join46 } from "node:path";
+import { join as join47 } from "node:path";
 function isFetchStatus(value) {
   if (typeof value !== "object" || value === null) return false;
   const v2 = value;
@@ -129005,7 +129290,7 @@ var init_marketplace_cache = __esm({
       entryWrittenListeners = /* @__PURE__ */ new Set();
       /** Compute the cache root path: `${dorkHome}/cache/marketplace`. */
       get cacheRoot() {
-        return join46(this.dorkHome, "cache", "marketplace");
+        return join47(this.dorkHome, "cache", "marketplace");
       }
       /**
        * Read a cached marketplace.json document.
@@ -129036,8 +129321,8 @@ var init_marketplace_cache = __esm({
           if (err instanceof PathEscapeError) return null;
           throw err;
         }
-        const jsonPath = join46(dir, MARKETPLACE_FILENAME);
-        const stampPath = join46(dir, LAST_FETCHED_FILENAME);
+        const jsonPath = join47(dir, MARKETPLACE_FILENAME);
+        const stampPath = join47(dir, LAST_FETCHED_FILENAME);
         let raw;
         let stamp2;
         try {
@@ -129072,9 +129357,9 @@ var init_marketplace_cache = __esm({
       async writeMarketplace(marketplaceName, json3) {
         const dir = this.marketplaceDir(marketplaceName);
         await mkdir4(dir, { recursive: true });
-        await writeFile4(join46(dir, MARKETPLACE_FILENAME), `${JSON.stringify(json3, null, 2)}
+        await writeFile4(join47(dir, MARKETPLACE_FILENAME), `${JSON.stringify(json3, null, 2)}
 `);
-        await writeFile4(join46(dir, LAST_FETCHED_FILENAME), (/* @__PURE__ */ new Date()).toISOString());
+        await writeFile4(join47(dir, LAST_FETCHED_FILENAME), (/* @__PURE__ */ new Date()).toISOString());
       }
       /**
        * Record how an attempt to fetch a marketplace's listing went.
@@ -129093,7 +129378,7 @@ var init_marketplace_cache = __esm({
        *   cache. Callers treat recording as best effort.
        */
       async writeFetchStatus(marketplaceName, status) {
-        const file2 = join46(this.marketplaceDir(marketplaceName), LAST_CHECK_FILENAME);
+        const file2 = join47(this.marketplaceDir(marketplaceName), LAST_CHECK_FILENAME);
         await withFileLock(file2, async (write) => {
           const current2 = await this.readFetchStatus(marketplaceName);
           if (current2 && current2.startedAt > status.startedAt) return;
@@ -129113,8 +129398,8 @@ var init_marketplace_cache = __esm({
         try {
           const dir = this.marketplaceDir(marketplaceName);
           const [stamp2] = await Promise.all([
-            readFile3(join46(dir, LAST_FETCHED_FILENAME), "utf-8"),
-            access(join46(dir, MARKETPLACE_FILENAME))
+            readFile3(join47(dir, LAST_FETCHED_FILENAME), "utf-8"),
+            access(join47(dir, MARKETPLACE_FILENAME))
           ]);
           const at = new Date(stamp2.trim());
           return Number.isNaN(at.getTime()) ? null : at;
@@ -129132,7 +129417,7 @@ var init_marketplace_cache = __esm({
       async readFetchStatus(marketplaceName) {
         try {
           const raw = await readFile3(
-            join46(this.marketplaceDir(marketplaceName), LAST_CHECK_FILENAME),
+            join47(this.marketplaceDir(marketplaceName), LAST_CHECK_FILENAME),
             "utf-8"
           );
           const parsed = JSON.parse(raw);
@@ -129244,8 +129529,8 @@ var init_marketplace_cache = __esm({
        * Idempotent. Not safe while a fetch is running in this cache.
        */
       async removeLeftovers() {
-        await rm2(join46(this.cacheRoot, LEGACY_PACKAGES_DIRNAME), { recursive: true, force: true });
-        const treesRoot = join46(this.cacheRoot, TREES_DIRNAME);
+        await rm2(join47(this.cacheRoot, LEGACY_PACKAGES_DIRNAME), { recursive: true, force: true });
+        const treesRoot = join47(this.cacheRoot, TREES_DIRNAME);
         let entries;
         try {
           entries = await readdir4(treesRoot);
@@ -129255,7 +129540,7 @@ var init_marketplace_cache = __esm({
         await Promise.all(
           entries.filter(
             (entry) => entry.startsWith(TEMP_FETCH_PREFIX) || entry.startsWith(TEMP_PRUNE_PREFIX)
-          ).map((entry) => rm2(join46(treesRoot, entry), { recursive: true, force: true }))
+          ).map((entry) => rm2(join47(treesRoot, entry), { recursive: true, force: true }))
         );
       }
       /**
@@ -129266,9 +129551,9 @@ var init_marketplace_cache = __esm({
        * @internal
        */
       async fetchAndPromote(packageName, subpath, fetch2) {
-        const treesRoot = join46(this.cacheRoot, TREES_DIRNAME);
+        const treesRoot = join47(this.cacheRoot, TREES_DIRNAME);
         await mkdir4(treesRoot, { recursive: true });
-        const tempDir = await mkdtemp(join46(treesRoot, TEMP_FETCH_PREFIX));
+        const tempDir = await mkdtemp(join47(treesRoot, TEMP_FETCH_PREFIX));
         let commitSha;
         let finalPath;
         try {
@@ -129332,7 +129617,7 @@ var init_marketplace_cache = __esm({
        *   removed (the others still are).
        */
       async removeUnused(keep) {
-        const treesRoot = join46(this.cacheRoot, TREES_DIRNAME);
+        const treesRoot = join47(this.cacheRoot, TREES_DIRNAME);
         const entries = await this.listPackages();
         const kept = keep(entries);
         const result2 = { removed: [], freedBytes: 0, failed: [] };
@@ -129347,7 +129632,7 @@ var init_marketplace_cache = __esm({
                 return null;
               }
               if (Date.now() - lastUsedMs < IN_USE_GRACE_MS) return null;
-              const target = join46(treesRoot, `${TEMP_PRUNE_PREFIX}${randomUUID4()}`);
+              const target = join47(treesRoot, `${TEMP_PRUNE_PREFIX}${randomUUID4()}`);
               await rename2(entry.path, target);
               return target;
             });
@@ -129396,7 +129681,7 @@ var init_marketplace_cache = __esm({
        * Listing is not use: it stamps nothing.
        */
       async listPackages() {
-        const root = join46(this.cacheRoot, TREES_DIRNAME);
+        const root = join47(this.cacheRoot, TREES_DIRNAME);
         let entries;
         try {
           entries = await readdir4(root);
@@ -129410,7 +129695,7 @@ var init_marketplace_cache = __esm({
           if (!parsed) {
             continue;
           }
-          const path53 = join46(root, entry);
+          const path53 = join47(root, entry);
           try {
             const info2 = await stat2(path53);
             if (!info2.isDirectory()) {
@@ -129439,8 +129724,8 @@ var init_marketplace_cache = __esm({
        *   the cache.
        */
       marketplaceDir(marketplaceName) {
-        const root = join46(this.cacheRoot, "marketplaces");
-        return assertContainedIn(root, join46(root, marketplaceName));
+        const root = join47(this.cacheRoot, "marketplaces");
+        return assertContainedIn(root, join47(root, marketplaceName));
       }
       /**
        * Compute the directory path for a content-addressable package tree:
@@ -129460,10 +129745,10 @@ var init_marketplace_cache = __esm({
        *   the cache.
        */
       packageDir(packageName, commitSha, subpath) {
-        const root = join46(this.cacheRoot, TREES_DIRNAME);
+        const root = join47(this.cacheRoot, TREES_DIRNAME);
         const digest2 = subpathDigest(subpath);
         const tree = digest2 === "" ? "" : `${SUBPATH_SEPARATOR}${digest2}`;
-        return assertContainedIn(root, join46(root, `${packageName}@${commitSha}${tree}`));
+        return assertContainedIn(root, join47(root, `${packageName}@${commitSha}${tree}`));
       }
     };
   }
@@ -129524,7 +129809,7 @@ var init_source_url_policy = __esm({
 
 // ../../apps/server/src/services/marketplace/sources/marketplace-source-manager.ts
 import { readFile as readFile4 } from "node:fs/promises";
-import { join as join47 } from "node:path";
+import { join as join48 } from "node:path";
 function buildDefaultSources() {
   const now2 = (/* @__PURE__ */ new Date()).toISOString();
   return [
@@ -129599,7 +129884,7 @@ var init_marketplace_source_manager = __esm({
        */
       constructor(dorkHome) {
         this.dorkHome = dorkHome;
-        this.filePath = join47(dorkHome, MARKETPLACES_FILENAME);
+        this.filePath = join48(dorkHome, MARKETPLACES_FILENAME);
       }
       dorkHome;
       filePath;
@@ -130039,7 +130324,7 @@ __export(harness_sync_command_exports, {
   runHarnessSync: () => runHarnessSync
 });
 import { existsSync as existsSync17, readFileSync as readFileSync20 } from "node:fs";
-import { join as join48 } from "node:path";
+import { join as join49 } from "node:path";
 import { parseArgs as parseArgs3 } from "node:util";
 function parseHarnessSyncArgs(rawArgs) {
   let parsed;
@@ -130166,7 +130451,7 @@ function reportCodexTrust(before, after) {
 }
 function reportClaudeSkillsRestart(existedBefore, repoRoot) {
   if (existedBefore) return;
-  if (!existsSync17(join48(repoRoot, CLAUDE_SKILLS_DIR))) return;
+  if (!existsSync17(join49(repoRoot, CLAUDE_SKILLS_DIR))) return;
   const facts = skillsFactsFor("claude-code");
   console.log("");
   console.log(`Created ${CLAUDE_SKILLS_DIR}/, which is where Claude Code reads skills.`);
@@ -130177,7 +130462,7 @@ function reportClaudeSkillsRestart(existedBefore, repoRoot) {
 }
 function readIfPresent(repoRoot, rel) {
   try {
-    return readFileSync20(join48(repoRoot, rel), "utf8");
+    return readFileSync20(join49(repoRoot, rel), "utf8");
   } catch {
     return void 0;
   }
@@ -130504,7 +130789,7 @@ async function runHarnessSync(args) {
   }
   const repoRoot = process.cwd();
   const ourHarness = await readDorkosHarness(resolveDorkHome2());
-  if (!existsSync17(join48(repoRoot, HARNESS_MANIFEST_PATH))) {
+  if (!existsSync17(join49(repoRoot, HARNESS_MANIFEST_PATH))) {
     if (!args.fix) {
       console.error(`No harness manifest in ${repoRoot}`);
       console.error(`  looked for: ${HARNESS_MANIFEST_PATH}`);
@@ -130584,7 +130869,7 @@ async function runHarnessSync(args) {
       return { exitCode: strictExit(exitCode2, withheld, args.strict) };
     }
     const codexHooksBefore = readIfPresent(repoRoot, CODEX_HOOKS_TARGET);
-    const claudeSkillsExistedBefore = existsSync17(join48(repoRoot, CLAUDE_SKILLS_DIR));
+    const claudeSkillsExistedBefore = existsSync17(join49(repoRoot, CLAUDE_SKILLS_DIR));
     const result2 = projectWithConsent2(repoRoot, {
       ...consentOpts,
       sweepOrphans: harnessFilter === void 0
@@ -130642,7 +130927,7 @@ __export(harness_adopt_command_exports, {
   runHarnessAdopt: () => runHarnessAdopt
 });
 import { existsSync as existsSync18 } from "node:fs";
-import { join as join49, resolve as resolve10 } from "node:path";
+import { join as join50, resolve as resolve10 } from "node:path";
 import { parseArgs as parseArgs4 } from "node:util";
 function parseHarnessAdoptArgs(rawArgs) {
   let parsed;
@@ -130683,7 +130968,7 @@ ${USAGE_LINE6}`
 }
 async function runHarnessAdopt(args) {
   const repoRoot = args.project === void 0 ? process.cwd() : resolve10(process.cwd(), args.project);
-  if (!existsSync18(join49(repoRoot, HARNESS_MANIFEST_PATH))) {
+  if (!existsSync18(join50(repoRoot, HARNESS_MANIFEST_PATH))) {
     console.error(`No harness manifest in ${repoRoot}`);
     console.error(`  looked for: ${HARNESS_MANIFEST_PATH}`);
     console.error("");
@@ -134852,8 +135137,14 @@ var init_release_resolver = __esm({
 
 // src/commands/community-deploy/provider-process.ts
 import { spawn as spawn3 } from "node:child_process";
+function errorLines(stderr) {
+  return stderr.replace(ANSI_ESCAPE, "").split(/\r?\n/u).map((line2) => line2.trim());
+}
 function isProviderAccessRefusal(stderr) {
-  return stderr.replace(ANSI_ESCAPE, "").split(/\r?\n/u).map((line2) => line2.trim()).some((line2) => FLY_REFUSAL.test(line2) || NEON_REFUSAL.test(line2));
+  return errorLines(stderr).some((line2) => FLY_REFUSAL.test(line2) || NEON_REFUSAL.test(line2));
+}
+function isProviderKeyKindLimit(stderr) {
+  return errorLines(stderr).some((line2) => NEON_KEY_KIND_LIMIT.test(line2));
 }
 function runProviderCommand(options) {
   return new Promise((resolve11, reject) => {
@@ -134922,10 +135213,12 @@ function runProviderCommand(options) {
       }
       if (code !== 0) {
         const errorOutput = Buffer.concat(stderrHead);
-        const refused = isProviderAccessRefusal(errorOutput.toString("utf8"));
+        const text2 = errorOutput.toString("utf8");
+        const refused = isProviderAccessRefusal(text2);
+        const keyKindLimited = isProviderKeyKindLimit(text2);
         errorOutput.fill(0);
         scrubStdout();
-        return reject(new ProviderCommandError("EXIT", refused));
+        return reject(new ProviderCommandError("EXIT", refused, keyKindLimited));
       }
       const output2 = Buffer.concat(stdout3);
       try {
@@ -134941,7 +135234,7 @@ function runProviderCommand(options) {
     child.stdin.end(options.stdin);
   });
 }
-var DEFAULT_MAX_BYTES, REFUSAL_SCAN_BYTES, ANSI_ESCAPE, FLY_REFUSAL, NEON_REFUSAL, COMMUNITY_SERVICE_TIMEOUT_MS, TERMINATION_GRACE_MS, ProviderCommandError;
+var DEFAULT_MAX_BYTES, REFUSAL_SCAN_BYTES, ANSI_ESCAPE, FLY_REFUSAL, NEON_REFUSAL, NEON_KEY_KIND_LIMIT, COMMUNITY_SERVICE_TIMEOUT_MS, TERMINATION_GRACE_MS, ProviderCommandError;
 var init_provider_process = __esm({
   "src/commands/community-deploy/provider-process.ts"() {
     "use strict";
@@ -134950,6 +135243,7 @@ var init_provider_process = __esm({
     ANSI_ESCAPE = /\u001b\[[0-9;]*m/gu;
     FLY_REFUSAL = /^Error: (?:unauthorized|forbidden)(?: \(Request ID: [^)]*\))?(?: \(Trace ID: [^)]*\))?$/u;
     NEON_REFUSAL = /^ERROR: (?:not allowed to |[a-z-]+ keys are not allowed to |permission denied\b)/u;
+    NEON_KEY_KIND_LIMIT = /^ERROR: not allowed for [a-z][a-z -]* API keys$/u;
     COMMUNITY_SERVICE_TIMEOUT_MS = 3e4;
     TERMINATION_GRACE_MS = 250;
     ProviderCommandError = class extends Error {
@@ -134960,17 +135254,24 @@ var init_provider_process = __esm({
        * ({@link isProviderAccessRefusal}). The output itself is never kept.
        */
       refused;
+      /**
+       * True only for an `EXIT` whose error output said the endpoint does not serve this kind of key
+       * ({@link isProviderKeyKindLimit}). The output itself is never kept.
+       */
+      keyKindLimited;
       /**
        * Create a provider command error without raw stdout or stderr.
        *
        * @param code - Stable failure category.
        * @param refused - Whether the service definitely refused the credential.
+       * @param keyKindLimited - Whether the endpoint does not serve this kind of key.
        */
-      constructor(code, refused = false) {
+      constructor(code, refused = false, keyKindLimited = false) {
         super(`Provider command failed (${code})`);
         this.name = "ProviderCommandError";
         this.code = code;
         this.refused = code === "EXIT" && refused;
+        this.keyKindLimited = code === "EXIT" && !refused && keyKindLimited;
       }
     };
   }
@@ -134979,7 +135280,7 @@ var init_provider_process = __esm({
 // src/commands/community-deploy/runtime/github-release-source.ts
 import { mkdtemp as mkdtemp2, rm as rm3, writeFile as writeFile5 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join50 } from "node:path";
+import { join as join51 } from "node:path";
 function createGitHubCommunityReleaseSource(options) {
   const verify = async (subject, trusted) => {
     await runProviderCommand({
@@ -135025,8 +135326,8 @@ function createGitHubCommunityReleaseSource(options) {
       return result2.value;
     },
     verifyManifest: async (bytes, trusted) => {
-      const directory = await mkdtemp2(join50(tmpdir2(), "dorkos-community-manifest-"));
-      const path53 = join50(directory, "manifest.json");
+      const directory = await mkdtemp2(join51(tmpdir2(), "dorkos-community-manifest-"));
+      const path53 = join51(directory, "manifest.json");
       try {
         await writeFile5(path53, bytes, { mode: 384, flag: "wx" });
         return await verify(path53, trusted);
@@ -135134,6 +135435,12 @@ function buildCommunityPreflight(release, selection, inventory, resume = {}) {
   );
   if (!neonOrganization) throw new CommunityPreflightError("NEON_ORGANIZATION_NOT_FOUND");
   const neonRegion = inventory.neonRegions.find(({ id }) => id === selection.neonRegion);
+  if (!neonRegion && inventory.neonRegionsFromSavedList) {
+    throw new CommunityPreflightError(
+      "NEON_REGION_UNAVAILABLE",
+      `This Neon key can't read Neon's live list of regions, so setup checked ${selection.neonRegion} against a saved list, and it isn't there. Check the region name. If it's a new Neon region, use a personal key or sign in with neonctl auth, so setup can read the live list.`
+    );
+  }
   if (!neonRegion) throw new CommunityPreflightError("NEON_REGION_UNAVAILABLE");
   const matchingNeonProjects = inventory.neonProjects.filter(
     ({ name }) => name === selection.neonProjectName
@@ -135181,9 +135488,14 @@ var init_preflight = __esm({
     CommunityPreflightError = class extends Error {
       /** Safe failure classification. */
       code;
-      /** Create one secret-free preflight rejection. */
-      constructor(code) {
-        super(`Space server launch preflight failed (${code})`);
+      /**
+       * Create one secret-free preflight rejection.
+       *
+       * @param code - Safe failure classification.
+       * @param message - Plain guidance for the person, when there is more to say than the code.
+       */
+      constructor(code, message2) {
+        super(message2 ?? `Space server launch preflight failed (${code})`);
         this.name = "CommunityPreflightError";
         this.code = code;
       }
@@ -135494,17 +135806,27 @@ async function runProviderMutation(options) {
     throw new ProviderMutationError("CREATION_OUTCOME_UNCERTAIN");
   }
 }
-var ProviderMutationError, PROVIDER_WRITE_TIMEOUT_MS;
+var PLAIN_MESSAGES, ProviderMutationError, PROVIDER_WRITE_TIMEOUT_MS;
 var init_provider_mutation = __esm({
   "src/commands/community-deploy/provider-mutation.ts"() {
     "use strict";
     init_provider_process();
+    PLAIN_MESSAGES = {
+      INVALID_INPUT: "Setup was given a value it cannot use, so it stopped before that change.",
+      INVALID_RESPONSE: "Fly, Neon or Tigris answered in a way setup could not check, so setup stopped to stay safe.",
+      PROVIDER_UNAVAILABLE: "Setup could not reach Fly, Neon or the image registry. Check your connection and that fly and neonctl are installed, then try again.",
+      // The error does not know which credential acted, so it names every one it could be, the way
+      // `describeCommunityCredential` does; the create path names the exact one (refused-create.ts).
+      ACCESS_DENIED: "Fly or Neon refused the credential setup used: FLY_API_TOKEN, FLY_ACCESS_TOKEN or NEON_API_KEY if set, otherwise your saved sign-in. Use one that can create these resources.",
+      // Also true for a command that ran to the end and failed, such as a deploy whose check failed.
+      CREATION_OUTCOME_UNCERTAIN: "A Fly, Neon or Tigris step did not finish cleanly, so setup cannot be sure what it changed. Its progress is saved: run the resume command printed above (dorkos community deploy --list-incomplete finds the run)."
+    };
     ProviderMutationError = class extends Error {
       /** Safe classification suitable for the launch journal. */
       code;
       /** Create a mutation error without provider output. */
       constructor(code) {
-        super(`Provider mutation failed (${code})`);
+        super(PLAIN_MESSAGES[code]);
         this.name = "ProviderMutationError";
         this.code = code;
       }
@@ -136221,6 +136543,23 @@ async function readNeonRegions(options) {
     longitude: coordinate(region.geo_long)
   }));
 }
+async function readNeonRegionsForKey(options) {
+  try {
+    return { regions: await readNeonRegions(options), savedList: false };
+  } catch (error63) {
+    if (!(error63 instanceof ProviderCommandError) || !error63.keyKindLimited) throw error63;
+    return {
+      regions: NEON_REGIONS_SNAPSHOT.map((id) => ({
+        id,
+        name: id,
+        isDefault: id === NEON_REGIONS_SNAPSHOT_DEFAULT,
+        latitude: null,
+        longitude: null
+      })),
+      savedList: true
+    };
+  }
+}
 async function readNeonProjects(options, organizationId) {
   const id = ExternalIdentifierSchema.parse(organizationId);
   const projects = await runNeonJson(
@@ -136379,7 +136718,7 @@ async function readNeonDirectConnection(options, projectId, branchId, databaseNa
     }
   })).value;
 }
-var NeonOrganizationSchema, NeonCreatedAtSchema, NeonProjectSchema, NeonBranchSchema, NeonDatabaseIdSchema, NeonDatabaseSchema, NeonRoleSchema, NeonCoordinateSchema, NeonRegionSchema, NeonRegionsEnvelopeSchema, NeonEndpointSchema, NeonEndpointsEnvelopeSchema, NeonCredentialError, NeonConnectionCredential;
+var NeonOrganizationSchema, NeonCreatedAtSchema, NeonProjectSchema, NeonBranchSchema, NeonDatabaseIdSchema, NeonDatabaseSchema, NeonRoleSchema, NeonCoordinateSchema, NeonRegionSchema, NeonRegionsEnvelopeSchema, NeonEndpointSchema, NeonEndpointsEnvelopeSchema, NeonCredentialError, NeonConnectionCredential, NEON_REGIONS_SNAPSHOT, NEON_REGIONS_SNAPSHOT_DEFAULT;
 var init_neon_read = __esm({
   "src/commands/community-deploy/neon-read.ts"() {
     "use strict";
@@ -136471,6 +136810,20 @@ var init_neon_read = __esm({
         return "[REDACTED Neon connection credential]";
       }
     };
+    NEON_REGIONS_SNAPSHOT = [
+      "aws-us-east-1",
+      "aws-us-east-2",
+      "aws-us-west-2",
+      "aws-eu-central-1",
+      "aws-eu-west-2",
+      "aws-ap-southeast-1",
+      "aws-ap-southeast-2",
+      "aws-sa-east-1",
+      "azure-eastus2",
+      "azure-westus3",
+      "azure-gwc"
+    ];
+    NEON_REGIONS_SNAPSHOT_DEFAULT = "aws-us-east-1";
   }
 });
 
@@ -137114,16 +137467,44 @@ var init_credential_env = __esm({
 });
 
 // src/commands/community-deploy/runtime/versions.ts
-function classifyCommunityProviderPreflightFailure(provider, error63, access3) {
-  if (error63 instanceof CommunityProviderPreflightError) throw error63;
+function describeCommunityProviderPreflightFailure(provider, error63, access3) {
+  if (error63 instanceof CommunityProviderPreflightError) return error63;
   if (error63 instanceof ProviderCommandError) {
     if (error63.code === "SPAWN")
-      throw new CommunityProviderPreflightError(provider, "CLI_NOT_FOUND");
+      return new CommunityProviderPreflightError(provider, "CLI_NOT_FOUND");
     if (error63.refused && access3) {
-      throw new CommunityProviderPreflightError(provider, "ACCESS_DENIED", access3);
+      return new CommunityProviderPreflightError(provider, "ACCESS_DENIED", access3);
+    }
+    if (error63.keyKindLimited && access3 && provider === "neon") {
+      return new CommunityProviderPreflightError(provider, "KEY_KIND_UNSUPPORTED", access3);
     }
   }
-  throw new CommunityProviderPreflightError(provider, "PROVIDER_UNAVAILABLE");
+  return new CommunityProviderPreflightError(provider, "PROVIDER_UNAVAILABLE");
+}
+function classifyCommunityProviderPreflightFailure(provider, error63, access3) {
+  throw describeCommunityProviderPreflightFailure(provider, error63, access3);
+}
+function failureRank(reason) {
+  return reason instanceof CommunityProviderPreflightError ? PREFLIGHT_FAILURE_RANK[reason.code] : Object.keys(PREFLIGHT_FAILURE_RANK).length;
+}
+async function settleCommunityPreflightReads(reads) {
+  const settled = await Promise.allSettled(reads);
+  let chosen;
+  for (const result2 of settled) {
+    if (result2.status !== "rejected") continue;
+    if (!chosen || failureRank(result2.reason) < failureRank(chosen.reason)) chosen = result2;
+  }
+  if (chosen) throw chosen.reason;
+  return settled.map((result2) => result2.value);
+}
+function settleCommunityProviderPreflight(provider, reads, access3) {
+  return settleCommunityPreflightReads(
+    reads.map(
+      (read) => Promise.resolve(read).catch(
+        (error63) => classifyCommunityProviderPreflightFailure(provider, error63, access3)
+      )
+    )
+  );
 }
 function compare(left, right) {
   const tuple2 = (value) => VersionSchema.parse(value).split("-", 1)[0].split(".").map(Number);
@@ -137135,24 +137516,28 @@ function compare(left, right) {
   return 0;
 }
 async function assertCommunityCliVersions(fly, neon, minimums) {
-  const [flyVersion, neonVersion] = await Promise.all([
-    runProviderCommand({
-      ...fly,
-      args: ["version", "--json"],
-      parse: (stdout3) => FlyVersionSchema.parse(JSON.parse(stdout3)).Version
-    }).catch((error63) => classifyCommunityProviderPreflightFailure("fly", error63)),
-    runProviderCommand({
-      ...neon,
-      args: ["--version"],
-      parse: (stdout3) => VersionSchema.parse(stdout3.trim())
-    }).catch((error63) => classifyCommunityProviderPreflightFailure("neon", error63))
+  const [flyVersion, neonVersion] = await settleCommunityPreflightReads([
+    settleCommunityProviderPreflight("fly", [
+      runProviderCommand({
+        ...fly,
+        args: ["version", "--json"],
+        parse: (stdout3) => FlyVersionSchema.parse(JSON.parse(stdout3)).Version
+      })
+    ]).then(([version4]) => version4),
+    settleCommunityProviderPreflight("neon", [
+      runProviderCommand({
+        ...neon,
+        args: ["--version"],
+        parse: (stdout3) => VersionSchema.parse(stdout3.trim())
+      })
+    ]).then(([version4]) => version4)
   ]);
   if (compare(flyVersion.value, minimums.fly) < 0) throw new CommunityCliVersionError("fly");
   if (compare(neonVersion.value, minimums.neon) < 0) {
     throw new CommunityCliVersionError("neonctl");
   }
 }
-var VersionSchema, FlyVersionSchema, PROVIDER_HELP, CommunityProviderPreflightError, CommunityCliVersionError;
+var VersionSchema, FlyVersionSchema, PROVIDER_HELP, CommunityProviderPreflightError, PREFLIGHT_FAILURE_RANK, CommunityCliVersionError;
 var init_versions2 = __esm({
   "src/commands/community-deploy/runtime/versions.ts"() {
     "use strict";
@@ -137183,11 +137568,16 @@ var init_versions2 = __esm({
        *
        * @param provider - The service whose read failed.
        * @param code - What kind of failure it was.
-       * @param access - For `ACCESS_DENIED`: the credential and organization to name.
+       * @param access - For `ACCESS_DENIED` and `KEY_KIND_UNSUPPORTED`: the credential (and
+       *   organization) to name. Without it either is worded, and coded, as unavailable.
        */
       constructor(provider, code, access3) {
         const help = PROVIDER_HELP[provider];
-        const message2 = code === "CLI_NOT_FOUND" ? `${provider === "fly" ? "Fly CLI" : "Neon CLI"} is required. Install it from ${help.install}` : code === "AUTH_REQUIRED" ? `${provider === "fly" ? "Fly" : "Neon"} sign-in is required. Run ${help.command}, then retry. ${help.auth}` : code === "ACCESS_DENIED" && access3 ? provider === "fly" ? (
+        const message2 = code === "CLI_NOT_FOUND" ? `${provider === "fly" ? "Fly CLI" : "Neon CLI"} is required. Install it from ${help.install}` : code === "KEY_KIND_UNSUPPORTED" && access3 ? (
+          // Only Neon answers this way (`isProviderKeyKindLimit`). It names the key's kind, not
+          // the organization, so the message names the kinds that work instead.
+          `Neon turned down one of the reads setup needs because of the kind of key ${access3.env.NEON_API_KEY ? "in NEON_API_KEY" : "your Neon sign-in uses"}. Setup works with an organization key, a personal key, or a ${help.command} sign-in. ${help.auth}`
+        ) : code === "ACCESS_DENIED" && access3 ? provider === "fly" ? (
           // Fly answers `unauthorized` both for a token without access and for one that has
           // expired or was revoked, so the message names both.
           `${describeCommunityCredential("fly", access3.env)} can't read organization ${access3.organization}. It may have expired, or it may not have access there. Setup needs a token or sign-in that can create apps in it.`
@@ -137195,9 +137585,15 @@ var init_versions2 = __esm({
         super(message2);
         this.name = "CommunityProviderPreflightError";
         this.provider = provider;
-        this.code = code === "ACCESS_DENIED" && !access3 ? "PROVIDER_UNAVAILABLE" : code;
+        this.code = (code === "ACCESS_DENIED" || code === "KEY_KIND_UNSUPPORTED") && !access3 ? "PROVIDER_UNAVAILABLE" : code;
       }
     };
+    PREFLIGHT_FAILURE_RANK = {
+      CLI_NOT_FOUND: 0,
+      ACCESS_DENIED: 1,
+      KEY_KIND_UNSUPPORTED: 2,
+      PROVIDER_UNAVAILABLE: 3
+    };
     CommunityCliVersionError = class extends Error {
       /** CLI whose installed version is below the signed release minimum. */
       cli;
@@ -137216,31 +137612,37 @@ var init_versions2 = __esm({
 
 // src/commands/community-deploy/runtime/default-services.ts
 async function readDefaultCommunityPreflight(options, selection) {
-  const [flyInventory, neonInventory] = await Promise.all([
-    Promise.all([
-      readFlyOrganizations(options.fly),
-      readFlyRegions(options.fly),
-      readFlyApps(options.fly, selection.flyOrganization)
-    ]).catch(
-      (error63) => classifyCommunityProviderPreflightFailure("fly", error63, {
-        env: options.fly.env,
-        organization: selection.flyOrganization
-      })
+  const [flyInventory, neonInventory] = await settleCommunityPreflightReads([
+    settleCommunityProviderPreflight(
+      "fly",
+      [
+        readFlyOrganizations(options.fly),
+        readFlyRegions(options.fly),
+        readFlyApps(options.fly, selection.flyOrganization)
+      ],
+      { env: options.fly.env, organization: selection.flyOrganization }
     ),
-    Promise.all([
-      readNeonOrganizations(options.neon),
-      readNeonRegions(options.neon),
-      readNeonProjects(options.neon, selection.neonOrganization)
-    ]).catch(
-      (error63) => classifyCommunityProviderPreflightFailure("neon", error63, {
-        env: options.neon.env,
-        organization: selection.neonOrganization
-      })
+    settleCommunityProviderPreflight(
+      "neon",
+      [
+        readNeonOrganizations(options.neon),
+        readNeonRegionsForKey(options.neon),
+        readNeonProjects(options.neon, selection.neonOrganization)
+      ],
+      { env: options.neon.env, organization: selection.neonOrganization }
     )
   ]);
   const [flyOrganizations, flyRegions, flyApps] = flyInventory;
-  const [neonOrganizations, neonRegions, neonProjects] = neonInventory;
-  return { flyOrganizations, flyRegions, flyApps, neonOrganizations, neonRegions, neonProjects };
+  const [neonOrganizations, { regions: neonRegions, savedList }, neonProjects] = neonInventory;
+  return {
+    flyOrganizations,
+    flyRegions,
+    flyApps,
+    neonOrganizations,
+    neonRegions,
+    ...savedList ? { neonRegionsFromSavedList: true } : {},
+    neonProjects
+  };
 }
 async function exactFlyApp(options, organizationSlug, appId, appName) {
   const matches = (await readFlyApps(options.fly, organizationSlug)).filter(
@@ -137547,7 +137949,7 @@ var init_default_services = __esm({
 // src/commands/community-deploy/fly-config.ts
 import { mkdtemp as mkdtemp3, rm as rm4, writeFile as writeFile6 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join51 } from "node:path";
+import { join as join52 } from "node:path";
 function tomlString(value) {
   return JSON.stringify(value);
 }
@@ -137600,8 +138002,8 @@ kill_timeout = "30s"
 `;
 }
 async function withCommunityFlyConfig(plan, consumer) {
-  const directory = await mkdtemp3(join51(tmpdir3(), "dorkos-community-fly-"));
-  const path53 = join51(directory, "fly.toml");
+  const directory = await mkdtemp3(join52(tmpdir3(), "dorkos-community-fly-"));
+  const path53 = join52(directory, "fly.toml");
   try {
     await writeFile6(path53, renderCommunityFlyConfig(plan), { mode: 384, flag: "wx" });
     return await consumer(path53);
@@ -137810,6 +138212,135 @@ var init_image_platform = __esm({
   }
 });
 
+// src/commands/community-deploy/runtime/fly-lease.ts
+async function readFlyMachineLease(options, appName, machineId) {
+  const app = ExternalIdentifierSchema.parse(appName);
+  const machine = ExternalIdentifierSchema.parse(machineId);
+  return (await runProviderCommand({
+    ...options,
+    args: ["machine", "leases", "view", machine, "--app", app, "--json"],
+    parse: (stdout3) => {
+      const lease = FlyLeaseViewSchema.parse(parseExternalJson(stdout3))[machine];
+      if (!lease) return null;
+      const expiresAt = lease.data?.expires_at;
+      return { expiresAtMs: expiresAt === void 0 ? null : expiresAt * 1e3 };
+    }
+  })).value;
+}
+function minutesText(minutes) {
+  return minutes <= 1 ? "1 minute" : `${minutes} minutes`;
+}
+function minutesUntil(endMs, nowMs) {
+  return Math.max(1, Math.ceil((endMs - nowMs) / 6e4));
+}
+async function waitForFlyMachineLeases(options) {
+  const limitMs = options.limitMs ?? FLY_LEASE_WAIT_LIMIT_MS;
+  const started = options.now();
+  const deadline = started + limitMs;
+  let lastProgress = null;
+  for (; ; ) {
+    const ends = await latestLeaseEnd(options);
+    if (ends === void 0) {
+      if (lastProgress !== null) options.progress("Fly has let go of the Machine. Deploying now\u2026");
+      return;
+    }
+    const now2 = options.now();
+    if (lastProgress === null && ends !== null && ends > deadline) {
+      throw new FlyMachineBusyError(options.appName, minutesUntil(ends, now2));
+    }
+    if (now2 >= deadline) throw new FlyMachineBusyError(options.appName, null);
+    if (lastProgress === null) {
+      options.progress(
+        `Fly is still holding the Machine of ${options.appName} for another deploy. ` + (ends === null ? "Waiting for Fly to let go of it\u2026" : `Waiting up to about ${minutesText(minutesUntil(ends, now2))} for Fly to let go of it\u2026`)
+      );
+      lastProgress = now2;
+    } else if (now2 - lastProgress >= PROGRESS_EVERY_MS) {
+      options.progress("Still waiting for Fly to let go of the Machine\u2026");
+      lastProgress = now2;
+    }
+    const untilEnd = ends === null ? FLY_LEASE_POLL_MS : ends - now2 + 2e3;
+    await options.sleep(
+      Math.min(deadline - now2, Math.max(1e3, Math.min(untilEnd, FLY_LEASE_POLL_MS)))
+    );
+  }
+}
+async function latestLeaseEnd(options) {
+  let latest;
+  for (const machineId of options.machineIds) {
+    let lease;
+    try {
+      lease = await options.readLease(machineId);
+    } catch (error63) {
+      if (error63 instanceof ProviderCommandError && error63.code === "CANCELLED") throw error63;
+      continue;
+    }
+    if (!lease) continue;
+    if (lease.expiresAtMs !== null && lease.expiresAtMs <= options.now()) continue;
+    if (lease.expiresAtMs === null || latest === null) latest = null;
+    else latest = latest === void 0 ? lease.expiresAtMs : Math.max(latest, lease.expiresAtMs);
+  }
+  return latest;
+}
+async function heldLeaseMinutes(options) {
+  const ends = await latestLeaseEnd({
+    ...options,
+    appName: "",
+    progress: () => void 0,
+    sleep: async () => void 0
+  }).catch(() => void 0);
+  if (ends === void 0) return false;
+  return ends === null ? null : minutesUntil(ends, options.now());
+}
+function cancellableSleep(ms, signal) {
+  return new Promise((resolve11, reject) => {
+    if (signal?.aborted) {
+      reject(new ProviderCommandError("CANCELLED"));
+      return;
+    }
+    const onAbort = () => {
+      clearTimeout(timer);
+      reject(new ProviderCommandError("CANCELLED"));
+    };
+    const timer = setTimeout(() => {
+      signal?.removeEventListener("abort", onAbort);
+      resolve11();
+    }, ms);
+    signal?.addEventListener("abort", onAbort, { once: true });
+  });
+}
+var FLY_LEASE_WAIT_LIMIT_MS, FLY_LEASE_POLL_MS, PROGRESS_EVERY_MS, FlyLeaseViewSchema, FlyMachineBusyError;
+var init_fly_lease = __esm({
+  "src/commands/community-deploy/runtime/fly-lease.ts"() {
+    "use strict";
+    init_zod();
+    init_provider_contract();
+    init_provider_process();
+    init_provider_mutation();
+    FLY_LEASE_WAIT_LIMIT_MS = 6 * 6e4;
+    FLY_LEASE_POLL_MS = 15e3;
+    PROGRESS_EVERY_MS = 6e4;
+    FlyLeaseViewSchema = external_exports.record(
+      ExternalIdentifierSchema,
+      external_exports.object({
+        data: external_exports.object({ expires_at: external_exports.number().int().nonnegative().optional() }).passthrough().nullish()
+      }).passthrough().nullable()
+    );
+    FlyMachineBusyError = class extends ProviderMutationError {
+      /**
+       * Create the refusal for one app.
+       *
+       * @param appName - The Fly app setup created.
+       * @param minutes - Roughly how long until Fly lets go, when known.
+       */
+      constructor(appName, minutes) {
+        super("PROVIDER_UNAVAILABLE");
+        this.name = "FlyMachineBusyError";
+        this.message = `Fly is still holding the Machine of ${appName} for another deploy, so setup did not deploy over it. ` + (minutes === null ? "Wait a few minutes, then run the resume command above again." : `Wait about ${minutesText(minutes)}, then run the resume command above again.`);
+      }
+    };
+  }
+});
+
 // src/commands/community-deploy/runtime/default-deploy.ts
 async function resolveCommunityPlatformDigest(input4) {
   if (input4.release && input4.release.image.digest !== input4.plan.imageDigest) {
@@ -137828,6 +138359,13 @@ async function resolveCommunityPlatformDigest(input4) {
   });
 }
 function createDefaultCommunityDeployDependencies(input4) {
+  const readLease = (machineId) => readFlyMachineLease(input4.options.fly, input4.plan.fly.appName, machineId);
+  const progress = input4.progress ?? ((line2) => void process.stdout.write(`${line2}
+`));
+  const clock = input4.leaseClock ?? {
+    now: Date.now,
+    sleep: (ms) => cancellableSleep(ms, input4.options.fly.signal)
+  };
   return {
     persist: input4.persist,
     now: input4.now,
@@ -137866,6 +138404,19 @@ function createDefaultCommunityDeployDependencies(input4) {
         configPath
       );
     }),
+    waitForMachineLeases: (machineIds) => waitForFlyMachineLeases({
+      appName: input4.plan.fly.appName,
+      machineIds,
+      readLease,
+      progress,
+      now: clock.now,
+      sleep: clock.sleep
+    }),
+    explainDeployFailure: async (error63, machineIds) => {
+      if (machineIds.length === 0) return error63;
+      const minutes = await heldLeaseMinutes({ machineIds, readLease, now: clock.now });
+      return minutes === false ? error63 : new FlyMachineBusyError(input4.plan.fly.appName, minutes);
+    },
     resolvePlatformDigest: input4.resolvePlatformDigest,
     verifyNewRuntime: (inventory, previous, platformDigest) => verifyFlyDeployment(inventory, previous, COMMUNITY_IMAGE_REPOSITORY, platformDigest),
     verifyExistingRuntime: (inventory, platformDigest) => verifyExistingFlyDeployment(inventory, COMMUNITY_IMAGE_REPOSITORY, platformDigest),
@@ -137888,6 +138439,7 @@ var init_default_deploy = __esm({
     init_health();
     init_provider_mutation();
     init_image_platform();
+    init_fly_lease();
     COMMUNITY_IMAGE_REPOSITORY = "ghcr.io/dork-labs/dorkos-community";
   }
 });
@@ -137895,7 +138447,7 @@ var init_default_deploy = __esm({
 // src/commands/community-deploy/runtime/default-owner.ts
 import { access as access2, constants as constants5, stat as stat3 } from "node:fs/promises";
 import { platform as platform2 } from "node:os";
-import { delimiter, join as join52 } from "node:path";
+import { delimiter, join as join53 } from "node:path";
 import { createInterface as createInterface4 } from "node:readline/promises";
 import { stdin as stdin2, stdout as stdout2 } from "node:process";
 async function ask(question, signal) {
@@ -137928,7 +138480,7 @@ function handoffCommands(system) {
 async function executableOnPath(executable, path53) {
   for (const directory of path53.split(delimiter).filter(Boolean)) {
     try {
-      await access2(join52(directory, executable), constants5.X_OK);
+      await access2(join53(directory, executable), constants5.X_OK);
       return true;
     } catch {
     }
@@ -137962,7 +138514,7 @@ async function assertOwnerHandoffPrerequisites(env5, system = platform2()) {
         "Owner handoff needs an active Wayland clipboard session before setup can create resources. See https://github.com/dork-labs/dorkos/blob/main/apps/community/FLY.md"
       );
     }
-    const socketAvailable = await stat3(join52(runtimeDirectory, display)).then(
+    const socketAvailable = await stat3(join53(runtimeDirectory, display)).then(
       (value) => value.isSocket(),
       () => false
     );
@@ -138145,10 +138697,10 @@ import {
   rm as rm5,
   unlink
 } from "node:fs/promises";
-import { basename as basename8, dirname as dirname13, join as join53 } from "node:path";
+import { basename as basename8, dirname as dirname13, join as join54 } from "node:path";
 function launchJournalPath(dorkHome, runId) {
   const safeRunId = external_exports.uuid().parse(runId);
-  return join53(dorkHome, "launches", "community", `${safeRunId}.json`);
+  return join54(dorkHome, "launches", "community", `${safeRunId}.json`);
 }
 async function rejectSymlink(path53) {
   try {
@@ -138185,7 +138737,7 @@ async function exists2(path53) {
 }
 async function writeDurably(filePath, data) {
   const directory = dirname13(filePath);
-  const temporary = join53(
+  const temporary = join54(
     directory,
     `.${basename8(filePath)}.${process.pid}.${randomUUID5()}.durable`
   );
@@ -138282,7 +138834,7 @@ async function readLaunchJournal(filePath) {
   }
 }
 async function listIncompleteLaunchJournals(dorkHome) {
-  const directory = join53(dorkHome, "launches", "community");
+  const directory = join54(dorkHome, "launches", "community");
   await rejectSymlink(dirname13(directory));
   await rejectSymlink(directory);
   let filenames;
@@ -138903,8 +139455,15 @@ async function executeCommunityDeployPhase(plan, journal, dependencies) {
     const deployedRows = runtimeSecretRows(existingSecrets);
     const settled = platformDigest;
     const deployAndVerify = async () => {
-      const previous = (await dependencies.readRuntime()).releases;
-      await dependencies.deploy(`${plan.imageDigest}`);
+      const before = await dependencies.readRuntime();
+      const previous = before.releases;
+      const machineIds = before.machines.map((machine2) => machine2.id);
+      await dependencies.waitForMachineLeases(machineIds);
+      try {
+        await dependencies.deploy(`${plan.imageDigest}`);
+      } catch (error63) {
+        throw await dependencies.explainDeployFailure(error63, machineIds);
+      }
       const afterSecrets = exactSecretDigests(await dependencies.readSecrets(), "Deployed");
       if (!sameDigests(afterSecrets, expectedDigests)) {
         throw new ProviderMutationError("INVALID_RESPONSE");
@@ -140172,6 +140731,61 @@ var init_removal_command = __esm({
   }
 });
 
+// src/commands/community-deploy/runtime/stop-record.ts
+function stopExitCode(signal) {
+  return signal === "SIGTERM" ? 143 : 130;
+}
+function describeStoppedLaunch(journal) {
+  if (journal.lastSafeError?.code === "CANCELLED") {
+    return "Setup was stopped. What it made so far is kept: run the resume command above to carry on.";
+  }
+  const unsure = "Setup was stopped while a change was still in progress, so it cannot tell yet whether that change happened.";
+  return journal.pendingIntent ? `${unsure} Follow the steps above before you resume.` : `${unsure} Check the resources listed above, then run the resume command above.`;
+}
+function categoryFor(code) {
+  switch (code) {
+    case "AUTH_REQUIRED":
+      return "authentication";
+    case "ACCESS_DENIED":
+    case "TERMS_NOT_ACCEPTED":
+      return "authorization";
+    case "BILLING_BLOCKED":
+      return "billing";
+    case "QUOTA_EXCEEDED":
+      return "capacity";
+    case "NAME_CONFLICT":
+      return "conflict";
+    case "INVALID_RESPONSE":
+    case "INVALID_INPUT":
+    case "MISSING_TIGRIS_SECRETS":
+      return "invalid-response";
+    case "CREATION_OUTCOME_UNCERTAIN":
+    case "REMOVAL_OUTCOME_UNCERTAIN":
+      return "uncertain";
+    default:
+      return "transient";
+  }
+}
+function recordLaunchFailure(journal, error63, now2) {
+  if (journal.pendingRemoval || journal.state === "complete") return null;
+  if (journal.lastSafeError !== null && journal.lastSafeError.code !== "CANCELLED") return null;
+  const raw = error63 && typeof error63 === "object" && "code" in error63 && typeof error63.code === "string" ? error63.code : null;
+  const code = LaunchSafeErrorCodeSchema.safeParse(raw);
+  if (!code.success || code.data === "CANCELLED") return null;
+  return {
+    ...journal,
+    revision: journal.revision + 1,
+    lastSafeError: { category: categoryFor(code.data), code: code.data },
+    updatedAt: now2
+  };
+}
+var init_stop_record = __esm({
+  "src/commands/community-deploy/runtime/stop-record.ts"() {
+    "use strict";
+    init_journal();
+  }
+});
+
 // src/commands/community-deploy/community-dispatcher.ts
 var community_dispatcher_exports = {};
 __export(community_dispatcher_exports, {
@@ -140221,9 +140835,10 @@ function formatCommunityRecovery(journal) {
     journal.resources.neonProjectId ? selection ? `  Neon project ${journal.resources.neonProjectId} \u2014 owner ${selection.neonOrganization}; may incur charges; database data may exist.
     Inspect: neonctl projects get ${journal.resources.neonProjectId} --output json
     Console: https://console.neon.tech` : `  Neon project ${journal.resources.neonProjectId} \u2014 saved owner unavailable; may incur charges; database data may exist.` : null,
-    journal.resources.tigrisBucketId ? selection ? `  Tigris bucket ${journal.resources.tigrisBucketId} \u2014 owner ${selection.flyOrganization}; may incur charges; private files may exist.
+    journal.resources.tigrisBucketId ? selection ? `  Tigris bucket ${selection.bucketName} \u2014 owner ${selection.flyOrganization}; may incur charges; private files may exist.
     Inspect: fly storage status ${selection.bucketName} --app ${selection.appName}
-    Console: https://fly.io/apps/${selection.appName}` : `  Tigris bucket ${journal.resources.tigrisBucketId} \u2014 saved owner unavailable; may incur charges; private files may exist.` : null
+    Console: https://fly.io/apps/${selection.appName}
+    Access key: usually ${tigrisAccessKeyName(selection.bucketName)} in Tigris. Removing the bucket does not remove this key; it keeps working until you remove it in Tigris.` : `  Tigris bucket ${journal.resources.tigrisBucketId} \u2014 saved owner unavailable; may incur charges; private files may exist.` : null
   ].filter((row2) => row2 !== null);
   const pending = journal.pendingIntent;
   const tigrisKeysMissing = pending?.provider === "tigris" && journal.resources.tigrisBucketId !== void 0 && journal.lastSafeError?.code === "MISSING_TIGRIS_SECRETS";
@@ -140393,9 +141008,15 @@ ${formatCommunityRecovery(latest)}
   const childEnv = context2.processEnv;
   const localEnv = withoutCommunityCredentialEnv(childEnv);
   const cancellation = new AbortController();
-  const cancel = () => cancellation.abort();
-  process.once("SIGINT", cancel);
-  process.once("SIGTERM", cancel);
+  let stopSignal = "SIGINT";
+  const cancelOn = (signal) => () => {
+    if (!cancellation.signal.aborted) stopSignal = signal;
+    cancellation.abort();
+  };
+  const onSigint = cancelOn("SIGINT");
+  const onSigterm = cancelOn("SIGTERM");
+  process.once("SIGINT", onSigint);
+  process.once("SIGTERM", onSigterm);
   const serviceOptions = {
     fly: {
       executable: "fly",
@@ -140568,6 +141189,12 @@ ${formatCommunityRecovery(latest)}
       await writeLaunchJournal(journalPath, cancelled, latest.revision).catch(() => void 0);
       latest = cancelled;
     }
+    const failed = latest && !cancellation.signal.aborted && !(error63 instanceof CommunityCreationRefusedError) ? recordLaunchFailure(latest, error63, (/* @__PURE__ */ new Date()).toISOString()) : null;
+    if (latest && failed) {
+      const previous = latest;
+      await writeLaunchJournal(journalPath, failed, previous.revision).catch(() => void 0);
+      latest = failed;
+    }
     if (error63 instanceof CommunityCreationRefusedError && latest) {
       await stopForRefusedCreate(error63, latest, journalPath, childEnv, formatCommunityRecovery);
     }
@@ -140575,11 +141202,16 @@ ${formatCommunityRecovery(latest)}
       process.stderr.write(`Space setup stopped.
 ${formatCommunityRecovery(latest)}
 `);
+      if (cancellation.signal.aborted && !latest.pendingRemoval) {
+        process.stderr.write(`${describeStoppedLaunch(latest)}
+`);
+        return stopExitCode(stopSignal);
+      }
     }
     throw error63;
   } finally {
-    process.removeListener("SIGINT", cancel);
-    process.removeListener("SIGTERM", cancel);
+    process.removeListener("SIGINT", onSigint);
+    process.removeListener("SIGTERM", onSigterm);
   }
 }
 var COMMUNITY_DEPLOY_HELP;
@@ -140602,6 +141234,8 @@ var init_community_dispatcher = __esm({
     init_journal();
     init_resume();
     init_removal_command();
+    init_tigris_access_key();
+    init_stop_record();
     init_provider_process();
     COMMUNITY_DEPLOY_HELP = `
 Usage: dorkos community deploy [options]
@@ -142134,7 +142768,6 @@ var init_connector_authentication_setup = __esm({
 var CONNECTOR_OPERATION_SELECTION_LIMIT, CONNECTOR_AUTHENTICATION_FLOW_TTL_MS, CONNECTOR_EVENT_REVIEW_SCOPE_LIMIT, ConnectorJsonValueSchema, ConnectorJsonObjectSchema, ConnectorProviderInstanceIdSchema, ConnectionIdSchema, ConnectorExternalAccountRefSchema, ConnectorProviderModeSchema, ConnectorProviderHealthSchema, ConnectorGrantReconciliationStatusSchema, ConnectorOperationClassificationSchema, ConnectorAccessLevelSchema, ConnectorRetryPolicySchema, ConnectorOperationRevisionSchema, ConnectorOperationPageSchema, ConnectorCapabilityAvailabilitySchema, ConnectorUnsupportedResultSchema, ConnectorProviderCapabilitySetSchema, ConnectorToolkitVersionResultSchema, ConnectorProviderExecuteResultSchema, ConnectorAuthenticationFlowSchema, ConnectorExecutionTargetSchema, ConnectorProgramExecutionRequestSchema, ConnectorExecutionPublicResultSchema, ConnectorExecutionResponseSchema, ConnectionReadinessStateSchema, ConnectionReadinessReasonSchema, ConnectionFixActionSchema, ConnectionFixSchema, ConnectionReadinessSchema, READINESS_ASK_ON_CONNECTIONS, CONNECTION_GONE_AGENT_COPY, CONNECTION_READINESS_COPY, AccessibleConnectorConnectionSchema, AccessibleConnectorOperationSchema, ConnectorAccessibleConnectionsResponseSchema, ConnectorAccessibleOperationsResponseSchema, ConnectorUsageItemSchema, ConnectorUsagePageSchema, ConnectorReconciliationPreviewRequestSchema, ConnectorReconciliationGrantSelectionSchema, ConnectorReconciliationEveryAgentSelectionSchema, ConnectorReconciliationEveryAgentStateSchema, ConnectorEveryAgentRevokeResponseSchema, ConnectorReconciliationAgentSchema, ConnectorReconciliationCandidateSchema, ConnectorReconciliationPreviewSchema, ConnectorReconciliationApplyRequestSchema, ConnectorReconciliationApplyResponseSchema, ReviewActionBaseSchema, ConnectionTargetSchema, ConnectorRequestAccessSchema, ConnectorReviewActionSchema, ConnectorAgentConnectionRequestInputSchema, ConnectorAgentRequestBaseSchema, ConnectorRequestNotGrantedSchema, ConnectorAgentRequestStatusSchema, ConnectorAgentRequestItemSchema, ConnectorAgentRequestListResponseSchema, ConnectorManagementConnectActionSchema, ConnectorManagementAppliedActionSchema, ConnectorManagementReviewActionSchema, ConnectorManagementReviewCreateRequestSchema, ConnectorManagementReviewOutcomeSchema, ConnectorManagementReviewOperationContextSchema, ConnectorManagementReviewConnectionContextSchema, ConnectorManagementReviewAgentContextSchema, ConnectorManagementReviewContextSchema, ManagementReviewItemBaseShape, ConnectorPendingManagementReviewItemSchema, ConnectorResolvingManagementReviewItemSchema, ConnectorExpiredManagementReviewItemSchema, ConnectorDeniedManagementReviewItemSchema, ConnectorApprovedAppliedManagementReviewItemSchema, ConnectorApprovedConnectManagementReviewItemSchema, ConnectorApprovedUnknownManagementReviewItemSchema, ConnectorManagementReviewItemSchema, ProgramReviewStatusBaseShape, ConnectorProgramReviewStatusSchema, ConnectorManagementReviewDecisionSchema, ConnectorManagementReviewDecisionResultSchema;
 var init_connector_schemas = __esm({
   "../shared/src/connector-schemas.ts"() {
-    "use strict";
     init_zod();
     CONNECTOR_OPERATION_SELECTION_LIMIT = 1e5;
     CONNECTOR_AUTHENTICATION_FLOW_TTL_MS = 15 * 60 * 1e3;
@@ -144771,7 +145404,7 @@ var init_connector_managed_discovery_schemas = __esm({
       retryPolicy: ConnectorRetryPolicySchema,
       inputSchema: ConnectorJsonObjectSchema,
       // Presentation hints only, mirroring ConnectorOperationPageSchema's own
-      // displayName/important. Optional until every supported app accepts them.
+      // displayName/important; a provider may leave either out.
       displayName: external_exports.string().min(1).max(200).optional(),
       important: external_exports.boolean().optional()
     }).strict();
@@ -149211,7 +149844,7 @@ if (process.argv[2] === "community") {
     );
     Object.assign(childEnv, credentialEnv.pickCommunityCredentialEnv(rawProcessEnv));
     const exitCode = await dispatcher.runCommunityDispatcher(process.argv.slice(3), {
-      cliVersion: "0.96.0",
+      cliVersion: "0.97.0",
       dorkHome: DORK_HOME,
       processEnv: childEnv,
       parseRelease: (bytes) => releaseContract.parseCompatibleCommunityReleaseManifest(
@@ -149229,7 +149862,7 @@ if (process.argv[2] === "community") {
     process.exit(1);
   }
 }
-var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.96.0" });
+var cliErrorReporter = initCliErrorReporting({ dorkHome: DORK_HOME, version: "0.97.0" });
 var uninstallCliErrorHandlers = cliErrorReporter ? installCliErrorHandlers(cliErrorReporter) : void 0;
 if (process.argv[2] === "doctor") {
   process.env.DORK_HOME = DORK_HOME;
@@ -149239,7 +149872,7 @@ if (process.argv[2] === "doctor") {
 if (process.argv[2] === "feedback") {
   process.env.DORK_HOME = DORK_HOME;
   const { runFeedback: runFeedback2 } = await Promise.resolve().then(() => (init_feedback2(), feedback_exports));
-  process.exit(await runFeedback2(DORK_HOME, "0.96.0", process.argv.slice(3)));
+  process.exit(await runFeedback2(DORK_HOME, "0.97.0", process.argv.slice(3)));
 }
 if (process.argv[2] === "auth") {
   process.env.DORK_HOME = DORK_HOME;
@@ -149338,7 +149971,7 @@ if (process.argv[2] === "agent" || process.argv[2] === "task" || process.argv[2]
     }
   }
   const { runVersionDispatcher: runVersionDispatcher2 } = await Promise.resolve().then(() => (init_version5(), version_exports));
-  process.exit(await runVersionDispatcher2("0.96.0", DORK_HOME, subArgs));
+  process.exit(await runVersionDispatcher2("0.97.0", DORK_HOME, subArgs));
 }
 function parseCliArgs() {
   try {
@@ -149463,14 +150096,14 @@ Examples:
   process.exit(0);
 }
 if (values.version) {
-  console.log("0.96.0");
+  console.log("0.97.0");
   process.exit(0);
 }
 if (values["post-install-check"]) {
   const claudeFound = checkClaude();
   const coreExtensionsFound = checkCoreExtensions();
   const extensionsCompile = await checkExtensionCompilation();
-  console.log(`dorkos ${"0.96.0"}`);
+  console.log(`dorkos ${"0.97.0"}`);
   if (!coreExtensionsFound) {
     console.log("Installation incomplete \u2014 bundled core extensions are missing.");
   }
@@ -149624,7 +150257,7 @@ if (fs31.existsSync(envPath)) {
 }
 uninstallCliErrorHandlers?.();
 process.env.DORKOS_CLI_ENTRYPOINT = fileURLToPath6(import.meta.url);
-process.env.DORKOS_CLI_VERSION = "0.96.0";
+process.env.DORKOS_CLI_VERSION = "0.97.0";
 var server;
 try {
   server = await import("../server/index.js");
@@ -149649,7 +150282,7 @@ var ansiReset = "\x1B[0m";
 console.log("");
 console.log(`${purple}${logo}${ansiReset}`);
 console.log("");
-console.log(`  DorkOS v${"0.96.0"}`);
+console.log(`  DorkOS v${"0.97.0"}`);
 console.log(`  Local:   ${link(localUrl, localUrl)}`);
 var nets = networkInterfaces();
 var networkUrl = null;
@@ -149675,9 +150308,9 @@ if (shouldOpenBrowser && process.stdin.isTTY) {
   const openCmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
   exec(`${openCmd} ${localUrl}`);
 }
-checkForUpdate("0.96.0").then((latestVersion) => {
+checkForUpdate("0.97.0").then((latestVersion) => {
   if (latestVersion) {
-    const msg = `Update available: ${"0.96.0"} \u2192 ${latestVersion}`;
+    const msg = `Update available: ${"0.97.0"} \u2192 ${latestVersion}`;
     const cmd = "Run npm install -g dorkos@latest to update";
     const width = Math.max(msg.length, cmd.length) + 6;
     const pad2 = (s2) => `\u2502   ${s2}${" ".repeat(width - s2.length - 6)}   \u2502`;