npm - flyspace-cli - Versions diffs - 0.1.0 → 0.1.1 - Mend

flyspace-cli 0.1.0 → 0.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (4) hide show

package/dist/{chunk-DCCECKHH.js → chunk-6D2PIFEA.js} +326 -230
package/dist/cli.js +744 -374
package/dist/index.js +1 -1
package/package.json +1 -1

package/dist/cli.js CHANGED Viewed

@@ -4,11 +4,13 @@ import {
   AutomationRunStore,
   BOT_PROFILE_KEY,
   BRANDING_DEFAULTS,
+  BUILT_IN_OUTPUT_STYLES,
   DEFAULT_CODEX_MODEL,
   DEFAULT_TIMEZONE,
   InvalidTransferError,
   LastAdminError,
   MessageQueue,
+  OutputStyleConflictError,
   SKIP_SUBTYPES,
   SLACK_ENV,
   SessionStore,
@@ -28,6 +30,7 @@ import {
   codexAuthAvailable,
   createChannel,
   createMembership,
+  createOutputStyle,
   createSkillFile,
   createWorkspace,
   deleteMembership,
@@ -46,16 +49,14 @@ import {
   getChannelRegistry,
   getMembershipByEmail,
   getMembershipByUserId,
-  getOutputStyle,
+  getOutputStyleDefault,
   getProfileChannelRegistry,
   getWorkspaceBilling,
   getWorkspaceBranding,
   getWorkspaceById,
   getWorkspaceBySlug,
   getWorkspaceByStripeCustomerId,
-  getWorkspaceOutputStyleDefault,
   getWorkspacePlanStatus,
-  insertOutputStyle,
   installUsageRecording,
   isAllowedModel,
   isCodexModel,
@@ -104,7 +105,7 @@ import {
   resolveChannelId,
   resolveChannelPrompt,
   resolveCwd,
-  resolveOutputStyleForProfile,
+  resolveSelectedOutputStyle,
   resolveUserId,
   runAutomation,
   runScriptAutomation,
@@ -116,7 +117,7 @@ import {
   saveWorkspacePrompt,
   setAgentPaused,
   setAllowGuestAccess,
-  setWorkspaceOutputStyleDefault,
+  setOutputStyleDefault,
   setWorkspaceStripeSubscription,
   slackConfigured,
   startAutomationRegistryPolling,
@@ -135,7 +136,7 @@ import {
   warnOnBrokenChannelCwds,
   workspaceSkillsDir,
   writeSkillFile
-} from "./chunk-DCCECKHH.js";
+} from "./chunk-6D2PIFEA.js";
 import {
   firstReplyBody,
   getThread,
@@ -312,10 +313,10 @@ async function runPrompt() {
   const editor = process.env["EDITOR"] || "vi";
   console.log(`[flyspace] Opening ${paths.PROMPT_FILE} in ${editor}...`);
   const child = spawn(editor, [paths.PROMPT_FILE], { stdio: "inherit" });
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve8, reject) => {
     child.on("close", (code) => {
       if (code === 0) {
-        resolve7();
+        resolve8();
       } else {
         reject(new Error(`Editor exited with code ${code}`));
       }
@@ -387,10 +388,10 @@ function editConfig() {
   const editor = process.env["EDITOR"] || "vi";
   console.log(`[flyspace] Opening ${paths.CONFIG_FILE} in ${editor}...`);
   const child = spawn2(editor, [paths.CONFIG_FILE], { stdio: "inherit" });
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve8, reject) => {
     child.on("close", (code) => {
       if (code === 0) {
-        resolve7();
+        resolve8();
       } else {
         reject(new Error(`Editor exited with code ${code}`));
       }
@@ -851,7 +852,7 @@ Restarting ${installed.length} instance(s)...`);
   }
 }
 async function runUpgrade() {
-  const current = "0.1.0";
+  const current = "0.1.1";
   console.log(`Current version: ${current}`);
   console.log("Checking for updates...\n");
   try {
@@ -1490,10 +1491,10 @@ async function runLogs(args) {
 }
 // src/commands/slack.ts
-import { execFileSync as execFileSync2 } from "child_process";
-import { existsSync as existsSync27, readFileSync as readFileSync15, writeFileSync as writeFileSync9 } from "fs";
-import { resolve as resolve6 } from "path";
-import { tmpdir as tmpdir3, homedir as homedir7 } from "os";
+import { execFileSync as execFileSync3 } from "child_process";
+import { existsSync as existsSync28, readFileSync as readFileSync16, writeFileSync as writeFileSync9 } from "fs";
+import { resolve as resolve7 } from "path";
+import { tmpdir as tmpdir3, homedir as homedir8 } from "os";
 import { input, confirm, select, checkbox } from "@inquirer/prompts";
 import { WebClient as WebClient3 } from "@slack/web-api";
@@ -1931,13 +1932,14 @@ function inviteEmail({
 }
 function workspaceSetupEmail({
   actionLink,
+  logoUrl,
   invitedBy,
   message
 }) {
   const who = invitedBy?.trim();
   const note = message?.trim();
   return render({
-    brand: { name: "Flyspace" },
+    brand: { name: "Flyspace", ...logoUrl ? { logoUrl } : {} },
     subject: who ? `${who} invited you to create a Flyspace workspace` : "Create your Flyspace workspace",
     heading: "Create your workspace",
     paragraphs: [
@@ -2178,6 +2180,7 @@ var RESERVED = /* @__PURE__ */ new Set([
   // Platform hosts and routes (`app`, `www`, `admin` are also host-profile.ts's RESERVED_LABELS).
   "app",
   "www",
+  "get",
   "admin",
   "api",
   "auth",
@@ -2532,7 +2535,7 @@ var COPY = {
     cta: "Continue"
   }
 };
-function page(body, font, theme, dark = false, maxWidth = 420) {
+function page(body, font, theme, dark = false, maxWidth = 420, title = "Confirm sign-in") {
   const base = dark ? DARK : LIGHT;
   return `<!doctype html>
 <html lang="en">
@@ -2544,7 +2547,10 @@ function page(body, font, theme, dark = false, maxWidth = 420) {
 <!-- The token sits in this page's URL, so it must not travel to Supabase (or
      anywhere else) in a Referer header. -->
 <meta name="referrer" content="no-referrer">
-<title>Confirm sign-in</title>
+<title>${title}</title>
+<link rel="icon" type="image/png" sizes="32x32" href="/icons/favicon-32.png">
+<link rel="icon" type="image/png" sizes="64x64" href="/icons/favicon-64.png">
+<link rel="apple-touch-icon" href="/icons/apple-touch-icon.png">
 ${fontLink(font)}
 <style>${dark ? "" : darkModeCss(accentOf(theme))}
 body { margin:0; }
@@ -2587,14 +2593,18 @@ async function findInvite(token) {
 }
 var PASSWORD_MIN = 8;
 function passwordField(name, label2, autocomplete, display, invalid) {
-  return `<label for="${name}" class="fs-ink" style="display:block;font:600 13px/1.4 ${display};color:${DARK.ink};margin-bottom:6px;">${label2}</label><input id="${name}" name="${name}" type="password" required${name === "password" ? " autofocus" : ""} minlength="${PASSWORD_MIN}" autocomplete="${autocomplete}" style="display:block;box-sizing:border-box;width:100%;margin-bottom:16px;border:1px solid ${invalid ? "#d33" : DARK.line};border-radius:8px;background:transparent;padding:12px;font:500 15px/1.2 ${display};color:inherit;outline:0;">`;
+  return `<label for="${name}" class="fs-ink" style="display:block;font:600 13px/1.4 ${display};color:${DARK.ink};margin-bottom:6px;">${label2}</label><div style="position:relative;margin-bottom:16px;"><input id="${name}" name="${name}" type="password" required${name === "password" ? " autofocus" : ""} minlength="${PASSWORD_MIN}" autocomplete="${autocomplete}" style="display:block;box-sizing:border-box;width:100%;border:1px solid ${invalid ? "#d33" : DARK.line};border-radius:8px;background:transparent;padding:12px 44px 12px 12px;font:500 15px/1.2 ${display};color:inherit;outline:0;"><button type="button" data-toggle-password="${name}" aria-label="Show password" aria-pressed="false" class="fs-dim" style="position:absolute;top:0;right:0;height:100%;width:44px;display:flex;align-items:center;justify-content:center;border:0;background:transparent;color:${DARK.dim};cursor:pointer;"><svg data-eye viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M2 12s3.5-7 10-7 10 7 10 7-3.5 7-10 7S2 12 2 12z"/><circle cx="12" cy="12" r="3"/></svg><svg data-eye-off viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" style="display:none"><path d="M17.94 17.94A10.9 10.9 0 0 1 12 19c-6.5 0-10-7-10-7a18.5 18.5 0 0 1 5.06-5.94M9.9 4.24A10.9 10.9 0 0 1 12 5c6.5 0 10 7 10 7a18.5 18.5 0 0 1-2.16 3.19M1 1l22 22"/><path d="M14.12 14.12a3 3 0 1 1-4.24-4.24"/></svg></button></div>`;
 }
 var CLAUDE_PATH = "m4.7144 15.9555 4.7174-2.6471.079-.2307-.079-.1275h-.2307l-.7893-.0486-2.6956-.0729-2.3375-.0971-2.2646-.1214-.5707-.1215-.5343-.7042.0546-.3522.4797-.3218.686.0608 1.5179.1032 2.2767.1578 1.6514.0972 2.4468.255h.3886l.0546-.1579-.1336-.0971-.1032-.0972L6.973 9.8356l-2.55-1.6879-1.3356-.9714-.7225-.4918-.3643-.4614-.1578-1.0078.6557-.7225.8803.0607.2246.0607.8925.686 1.9064 1.4754 2.4893 1.8336.3643.3035.1457-.1032.0182-.0728-.164-.2733-1.3539-2.4467-1.445-2.4893-.6435-1.032-.17-.6194c-.0607-.255-.1032-.4674-.1032-.7285L6.287.1335 6.6997 0l.9957.1336.419.3642.6192 1.4147 1.0018 2.2282 1.5543 3.0296.4553.8985.2429.8318.091.255h.1579v-.1457l.1275-1.706.2368-2.0947.2307-2.6957.0789-.7589.3764-.9107.7468-.4918.5828.2793.4797.686-.0668.4433-.2853 1.8517-.5586 2.9021-.3643 1.9429h.2125l.2429-.2429.9835-1.3053 1.6514-2.0643.7286-.8196.85-.9046.5464-.4311h1.0321l.759 1.1293-.34 1.1657-1.0625 1.3478-.8804 1.1414-1.2628 1.7-.7893 1.36.0729.1093.1882-.0183 2.8535-.607 1.5421-.2794 1.8396-.3157.8318.3886.091.3946-.3278.8075-1.967.4857-2.3072.4614-3.4364.8136-.0425.0304.0486.0607 1.5482.1457.6618.0364h1.621l3.0175.2247.7892.522.4736.6376-.079.4857-1.2142.6193-1.6393-.3886-3.825-.9107-1.3113-.3279h-.1822v.1093l1.0929 1.0686 2.0035 1.8092 2.5075 2.3314.1275.5768-.3218.4554-.34-.0486-2.2039-1.6575-.85-.7468-1.9246-1.621h-.1275v.17l.4432.6496 2.3436 3.5214.1214 1.0807-.17.3521-.6071.2125-.6679-.1214-1.3721-1.9246L14.38 17.959l-1.1414-1.9428-.1397.079-.674 7.2552-.3156.3703-.7286.2793-.6071-.4614-.3218-.7468.3218-1.4753.3886-1.9246.3157-1.53.2853-1.9004.17-.6314-.0121-.0425-.1397.0182-1.4328 1.9672-2.1796 2.9446-1.7243 1.8456-.4128.164-.7164-.3704.0667-.6618.4008-.5889 2.386-3.0357 1.4389-1.882.929-1.0868-.0062-.1579h-.0546l-6.3385 4.1164-1.1293.1457-.4857-.4554.0608-.7467.2307-.2429 1.9064-1.3114Z";
 var CODEX_PATH = "M8.086.457a6.105 6.105 0 013.046-.415c1.333.153 2.521.72 3.564 1.7a.117.117 0 00.107.029c1.408-.346 2.762-.224 4.061.366l.063.03.154.076c1.357.703 2.33 1.77 2.918 3.198.278.679.418 1.388.421 2.126a5.655 5.655 0 01-.18 1.631.167.167 0 00.04.155 5.982 5.982 0 011.578 2.891c.385 1.901-.01 3.615-1.183 5.14l-.182.22a6.063 6.063 0 01-2.934 1.851.162.162 0 00-.108.102c-.255.736-.511 1.364-.987 1.992-1.199 1.582-2.962 2.462-4.948 2.451-1.583-.008-2.986-.587-4.21-1.736a.145.145 0 00-.14-.032c-.518.167-1.04.191-1.604.185a5.924 5.924 0 01-2.595-.622 6.058 6.058 0 01-2.146-1.781c-.203-.269-.404-.522-.551-.821a7.74 7.74 0 01-.495-1.283 6.11 6.11 0 01-.017-3.064.166.166 0 00.008-.074.115.115 0 00-.037-.064 5.958 5.958 0 01-1.38-2.202 5.196 5.196 0 01-.333-1.589 6.915 6.915 0 01.188-2.132c.45-1.484 1.309-2.648 2.577-3.493.282-.188.55-.334.802-.438.286-.12.573-.22.861-.304a.129.129 0 00.087-.087A6.016 6.016 0 015.635 2.31C6.315 1.464 7.132.846 8.086.457zm-.804 7.85a.848.848 0 00-1.473.842l1.694 2.965-1.688 2.848a.849.849 0 001.46.864l1.94-3.272a.849.849 0 00.007-.854l-1.94-3.393zm5.446 6.24a.849.849 0 000 1.695h4.848a.849.849 0 000-1.696h-4.848z";
 function hostDiagram(display, accent) {
-  const box = (y, title) => `<rect x="20" y="${y}" width="280" height="38" rx="8" fill="${DARK.bg}" stroke="${DARK.line}"/><text x="36" y="${y + 24}" fill="${DARK.ink}" font-size="13" font-weight="600">${title}</text>`;
+  const box = (y, title) => `<rect x="20" y="${y}" width="280" height="38" rx="8" fill="${DARK.bg}" stroke="${DARK.line}"/><text x="160" y="${y + 19}" text-anchor="middle" dominant-baseline="central" fill="${DARK.ink}" font-size="13" font-weight="600">${title}</text>`;
   const arrow = (from, to, x = 160) => `<line x1="${x}" y1="${from}" x2="${x}" y2="${to}" stroke="${accent}" stroke-width="1.5" marker-end="url(#fs-arrow)"/>`;
-  const agent = (x, title, path, fill) => `<rect x="${x}" y="182" width="134" height="38" rx="8" fill="${DARK.bg}" stroke="${DARK.line}"/><svg x="${x + 12}" y="193" width="16" height="16" viewBox="0 0 24 24"><path d="${path}" fill="${fill}" fill-rule="evenodd"/></svg><text x="${x + 36}" y="206" fill="${DARK.ink}" font-size="13" font-weight="600">${title}</text>`;
+  const agent = (x, title, path, fill) => {
+    const unit = 16 + 8 + title.length * 7;
+    const start = x + 67 - unit / 2;
+    return `<rect x="${x}" y="182" width="134" height="38" rx="8" fill="${DARK.bg}" stroke="${DARK.line}"/><svg x="${start}" y="193" width="16" height="16" viewBox="0 0 24 24"><path d="${path}" fill="${fill}" fill-rule="evenodd"/></svg><text x="${start + 24}" y="201" dominant-baseline="central" fill="${DARK.ink}" font-size="13" font-weight="600">${title}</text>`;
+  };
   return `<svg viewBox="0 0 320 232" width="100%" role="img" aria-labelledby="fs-host-title" style="display:block;max-width:360px;margin:20px 0 0;font-family:${display};"><title id="fs-host-title">The Flyspace Host on your machine connects to your workspace over a WebSocket and runs Claude Code or Codex CLI.</title><defs><marker id="fs-arrow" viewBox="0 0 10 10" refX="8" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse"><path d="M0 0L10 5L0 10z" fill="${accent}"/></marker></defs>` + box(10, "Your Workspace") + arrow(88, 51) + `<text x="172" y="73" fill="${DARK.dim}" font-size="11">WebSocket</text><rect x="8" y="90" width="304" height="136" rx="10" fill="none" stroke="${DARK.dim}" stroke-dasharray="4 4"/><text x="20" y="108" fill="${DARK.dim}" font-size="10" font-weight="600" letter-spacing="0.06em">YOUR MACHINE</text>` + box(116, "Flyspace Host") + arrow(156, 180, 87) + arrow(156, 180, 233) + agent(20, "Claude Code", CLAUDE_PATH, "#D97757") + agent(166, "Codex CLI", CODEX_PATH, DARK.ink) + `</svg>`;
 }
 function setupPage(c, token, invite, form = {}) {
@@ -2603,11 +2613,12 @@ function setupPage(c, token, invite, form = {}) {
   const host = trustedHost(c) ?? "";
   const suffix = `.${host.replace(/:\d+$/, "").split(".").slice(1).join(".")}`;
   return page(
-    `<div class="fs-split"><div>` + masthead2("Flyspace", FLYSPACE_MARK, display, true) + `<div class="fs-ink" style="font:600 20px/1.3 ${display};color:${DARK.ink};margin-bottom:10px;">Create your workspace</div><p class="fs-ink" style="margin:0 0 8px;font:500 15px/1.5 ${display};color:${DARK.ink};">Welcome to the early access cohort.</p><p class="fs-muted" style="margin:0;font:400 14px/1.6 ${display};color:${DARK.muted};">Your agents run on your own machine. The Flyspace Host connects out to this workspace, so Claude Code or Codex works in each channel's real folder, with your own tools and keys.</p>` + hostDiagram(display, accent) + `</div><div><form method="post" action="/auth/new-workspace"><input type="hidden" name="token" value="${escapeHtml(token)}"><div class="fs-dim" style="margin:0 0 14px;font:600 11px/1.4 ${display};letter-spacing:0.06em;text-transform:uppercase;color:${DARK.dim};">Your account</div><label for="username" class="fs-muted" style="display:block;font:400 13px/1.4 ${display};color:${DARK.muted};margin-bottom:4px;">You'll be its Owner, signed in as</label><input id="username" name="username" type="email" autocomplete="username" readonly tabindex="-1" value="${escapeHtml(invite.email)}" style="display:block;width:100%;box-sizing:border-box;border:0;outline:0;background:transparent;padding:0;margin-bottom:20px;font:600 15px/1.4 ${display};color:${DARK.ink};text-overflow:ellipsis;"><div class="fs-pair"><div>` + passwordField("password", "Password", "new-password", display, !!form.passwordError) + `</div><div>` + passwordField("confirm", "Confirm password", "new-password", display, !!form.passwordError) + `</div></div>` + (form.passwordError ? `<p style="margin:-8px 0 16px;font:500 13px/1.5 ${display};color:#d33;">${escapeHtml(form.passwordError)}</p>` : `<p class="fs-dim" style="margin:-8px 0 20px;font:400 12px/1.6 ${display};color:${DARK.dim};">At least ${PASSWORD_MIN} characters. You'll use it to sign in to your workspace.</p>`) + `<div style="border-top:1px solid ${DARK.line};margin:4px 0 24px;"></div><div class="fs-dim" style="margin:0 0 14px;font:600 11px/1.4 ${display};letter-spacing:0.06em;text-transform:uppercase;color:${DARK.dim};">Your workspace</div><label for="name" class="fs-ink" style="display:block;font:600 13px/1.4 ${display};color:${DARK.ink};margin-bottom:6px;">Workspace name</label><input id="name" name="name" required autocomplete="organization" maxlength="${DISPLAY_NAME_MAX}" value="${escapeHtml(form.name ?? "")}" placeholder="My Team" class="fs-card" style="display:block;width:100%;box-sizing:border-box;border:1px solid ${DARK.line};border-radius:8px;padding:12px;outline:0;background:transparent;font:500 15px/1.2 ${display};color:inherit;"><p class="fs-dim" style="margin:8px 0 20px;font:400 12px/1.6 ${display};color:${DARK.dim};">Shown across your workspace. You can change it later.</p><label for="slug" class="fs-ink" style="display:block;font:600 13px/1.4 ${display};color:${DARK.ink};margin-bottom:6px;">Workspace URL</label><div class="fs-card" style="display:flex;align-items:center;border:1px solid ${form.error ? "#d33" : DARK.line};border-radius:8px;padding:0 12px;"><input id="slug" name="slug" required autocomplete="off" autocapitalize="none" spellcheck="false" minlength="${SLUG_MIN}" maxlength="${SLUG_MAX}" pattern="[a-z](?:[a-z0-9]|-(?!-))*[a-z0-9]" value="${escapeHtml(form.slug ?? "")}" placeholder="my-team" style="flex:1;min-width:0;border:0;outline:0;background:transparent;padding:12px 0;font:500 15px/1.2 ${display};color:inherit;"><span class="fs-dim" style="font:400 15px/1 ${display};color:${DARK.dim};white-space:nowrap;">${escapeHtml(suffix)}</span></div>` + (form.error ? `<p style="margin:8px 0 0;font:500 13px/1.5 ${display};color:#d33;">${escapeHtml(form.error)}</p>` : "") + `<p class="fs-dim" style="margin:8px 0 20px;font:400 12px/1.6 ${display};color:${DARK.dim};">Lowercase letters, digits and hyphens, ${SLUG_MIN} to ${SLUG_MAX} characters. <strong style="font-weight:600;color:${DARK.ink};">It can't be changed later.</strong></p><button class="fs-btn" type="submit" style="background:${accent};color:${DARK.onAccent};border-radius:8px;padding:13px 24px;width:100%;font:600 15px/1 ${display};">Create workspace</button></form><div style="margin-top:20px;border-left:2px solid ${accent};padding:2px 0 2px 12px;"><p class="fs-muted" style="margin:0;font:400 13px/1.6 ${display};color:${DARK.muted};"><strong class="fs-ink" style="font-weight:600;color:${DARK.ink};">Next:</strong> we'll help you connect Claude Code or Codex CLI.</p></div><p class="fs-dim" style="margin:16px 0 0;font:400 12px/1.6 ${display};color:${DARK.dim};">By creating a workspace, you agree to the <a href="https://flyspace.ai/terms/" target="_blank" rel="noreferrer" style="color:inherit;text-decoration:underline;text-underline-offset:2px;">Terms</a> and <a href="https://flyspace.ai/privacy/" target="_blank" rel="noreferrer" style="color:inherit;text-decoration:underline;text-underline-offset:2px;">Privacy Policy</a>.</p></div></div><script>(()=>{const n=document.getElementById('name'),s=document.getElementById('slug');let touched=!!s.value;s.addEventListener('input',()=>{touched=true});n.addEventListener('input',()=>{if(touched)return;s.value=n.value.normalize('NFKD').toLowerCase().replace(/[^a-z0-9]+/g,'-').replace(/^-+|-+$/g,'').replace(/^[^a-z]+/,'').slice(0,${SLUG_MAX}).replace(/-+$/,'')})})()</script>`,
+    `<div class="fs-split"><div>` + masthead2("Flyspace", FLYSPACE_MARK, display, true) + `<div class="fs-ink" style="font:600 20px/1.3 ${display};color:${DARK.ink};margin-bottom:10px;">Create your workspace</div><p class="fs-ink" style="margin:0 0 8px;font:500 15px/1.5 ${display};color:${DARK.ink};">Welcome to the early access cohort.</p><p class="fs-muted" style="margin:0;font:400 14px/1.6 ${display};color:${DARK.muted};">Your agents run on your own machine. The Flyspace Host connects out to this workspace, so Claude Code or Codex works in each channel's real folder, with your own tools and keys.</p>` + hostDiagram(display, accent) + `</div><div><form id="setup" method="post" action="/auth/new-workspace"><input type="hidden" name="token" value="${escapeHtml(token)}"><div class="fs-dim" style="margin:0 0 14px;font:600 11px/1.4 ${display};letter-spacing:0.06em;text-transform:uppercase;color:${DARK.dim};">Your account</div><label for="username" class="fs-muted" style="display:block;font:400 13px/1.4 ${display};color:${DARK.muted};margin-bottom:4px;">You'll be its Owner, signed in as</label><input id="username" name="username" type="email" autocomplete="username" readonly tabindex="-1" value="${escapeHtml(invite.email)}" style="display:block;width:100%;box-sizing:border-box;border:0;outline:0;background:transparent;padding:0;margin-bottom:20px;font:600 15px/1.4 ${display};color:${DARK.ink};text-overflow:ellipsis;"><div class="fs-pair"><div>` + passwordField("password", "Password", "new-password", display, !!form.passwordError) + `</div><div>` + passwordField("confirm", "Confirm password", "new-password", display, !!form.passwordError) + `</div></div>` + (form.passwordError ? `<p style="margin:-8px 0 16px;font:500 13px/1.5 ${display};color:#d33;">${escapeHtml(form.passwordError)}</p>` : `<p class="fs-dim" style="margin:-8px 0 20px;font:400 12px/1.6 ${display};color:${DARK.dim};">At least ${PASSWORD_MIN} characters. You'll use it to sign in to your workspace.</p>`) + `<div style="border-top:1px solid ${DARK.line};margin:4px 0 24px;"></div><div class="fs-dim" style="margin:0 0 14px;font:600 11px/1.4 ${display};letter-spacing:0.06em;text-transform:uppercase;color:${DARK.dim};">Your workspace</div><label for="name" class="fs-ink" style="display:block;font:600 13px/1.4 ${display};color:${DARK.ink};margin-bottom:6px;">Workspace name</label><input id="name" name="name" required autocomplete="organization" maxlength="${DISPLAY_NAME_MAX}" value="${escapeHtml(form.name ?? "")}" placeholder="My Team" class="fs-card" style="display:block;width:100%;box-sizing:border-box;border:1px solid ${DARK.line};border-radius:8px;padding:12px;outline:0;background:transparent;font:500 15px/1.2 ${display};color:inherit;"><p class="fs-dim" style="margin:8px 0 20px;font:400 12px/1.6 ${display};color:${DARK.dim};">Shown across your workspace. You can change it later.</p><label for="slug" class="fs-ink" style="display:block;font:600 13px/1.4 ${display};color:${DARK.ink};margin-bottom:6px;">Workspace URL</label><div class="fs-card" style="display:flex;align-items:center;border:1px solid ${form.error ? "#d33" : DARK.line};border-radius:8px;padding:0 12px;"><input id="slug" name="slug" required autocomplete="off" autocapitalize="none" spellcheck="false" minlength="${SLUG_MIN}" maxlength="${SLUG_MAX}" pattern="[a-z](?:[a-z0-9]|-(?!-))*[a-z0-9]" value="${escapeHtml(form.slug ?? "")}" placeholder="my-team" style="flex:1;min-width:0;border:0;outline:0;background:transparent;padding:12px 0;font:500 15px/1.2 ${display};color:inherit;"><span class="fs-dim" style="font:400 15px/1 ${display};color:${DARK.dim};white-space:nowrap;">${escapeHtml(suffix)}</span></div>` + (form.error ? `<p style="margin:8px 0 0;font:500 13px/1.5 ${display};color:#d33;">${escapeHtml(form.error)}</p>` : "") + `<p class="fs-dim" style="margin:8px 0 20px;font:400 12px/1.6 ${display};color:${DARK.dim};">Lowercase letters, digits and hyphens, ${SLUG_MIN} to ${SLUG_MAX} characters. <strong style="font-weight:600;color:${DARK.ink};">It can't be changed later.</strong></p><button id="setup-submit" class="fs-btn" type="submit" style="background:${accent};color:${DARK.onAccent};border-radius:8px;padding:13px 24px;width:100%;font:600 15px/1 ${display};">Create workspace</button></form><div style="margin-top:20px;border-left:2px solid ${accent};padding:2px 0 2px 12px;"><p class="fs-muted" style="margin:0;font:400 13px/1.6 ${display};color:${DARK.muted};"><strong class="fs-ink" style="font-weight:600;color:${DARK.ink};">Next:</strong> we'll help you connect Claude Code or Codex CLI.</p></div><p class="fs-dim" style="margin:16px 0 0;font:400 12px/1.6 ${display};color:${DARK.dim};">By creating a workspace, you agree to the <a href="https://flyspace.ai/terms/" target="_blank" rel="noreferrer" style="color:inherit;text-decoration:underline;text-underline-offset:2px;">Terms</a> and <a href="https://flyspace.ai/privacy/" target="_blank" rel="noreferrer" style="color:inherit;text-decoration:underline;text-underline-offset:2px;">Privacy Policy</a>.</p></div></div><script>(()=>{const n=document.getElementById('name'),s=document.getElementById('slug');let touched=!!s.value;s.addEventListener('input',()=>{touched=true});n.addEventListener('input',()=>{if(touched)return;s.value=n.value.normalize('NFKD').toLowerCase().replace(/[^a-z0-9]+/g,'-').replace(/^-+|-+$/g,'').replace(/^[^a-z]+/,'').slice(0,${SLUG_MAX}).replace(/-+$/,'')})})()</script><script>document.getElementById('setup').addEventListener('submit',()=>{const b=document.getElementById('setup-submit');b.disabled=true;b.style.opacity='0.7';b.style.cursor='progress';b.textContent='Creating workspace\u2026'})</script><script>document.querySelectorAll('[data-toggle-password]').forEach(b=>b.addEventListener('click',()=>{const i=document.getElementById(b.dataset.togglePassword),show=i.type==='password';i.type=show?'text':'password';b.setAttribute('aria-pressed',String(show));b.setAttribute('aria-label',show?'Hide password':'Show password');b.querySelector('[data-eye]').style.display=show?'none':'';b.querySelector('[data-eye-off]').style.display=show?'':'none'}))</script>`,
     void 0,
     void 0,
     true,
-    960
+    960,
+    "Create your workspace \xB7 Flyspace"
   );
 }
 function createAuthConfirmRouter() {
@@ -2773,6 +2784,35 @@ function createAuthConfirmRouter() {
     const passwordError = password.length < PASSWORD_MIN ? `Password must be at least ${PASSWORD_MIN} characters.` : password !== form["confirm"] ? "Passwords do not match." : null;
     if (passwordError)
       return c.html(setupPage(c, token, invite, { name, slug, passwordError }), 400);
+    try {
+      const { userId } = await ensureInviteUser(
+        invite.email,
+        invite.ownerName ? { name: invite.ownerName } : {}
+      );
+      const { error: error2 } = await getSupabaseClient().auth.admin.updateUserById(userId, { password });
+      if (error2) {
+        const weak = error2.code === "weak_password";
+        if (!weak) console.error(`[new-workspace] setting the password for ${invite.email} failed:`, error2);
+        return c.html(
+          setupPage(c, token, invite, {
+            name,
+            slug,
+            passwordError: weak ? "This password is too easy to guess or has appeared in a data breach. Please choose another." : "We could not set your password. Please try again in a moment."
+          }),
+          weak ? 400 : 500
+        );
+      }
+    } catch (err) {
+      console.error(`[new-workspace] preparing the owner account for ${invite.email} failed:`, err);
+      return c.html(
+        setupPage(c, token, invite, {
+          name,
+          slug,
+          error: "Something went wrong creating your workspace. Please try again in a moment."
+        }),
+        500
+      );
+    }
     if (!await claimSetupInvite(invite.id)) return c.redirect(back, 303);
     let workspace;
     try {
@@ -2804,16 +2844,6 @@ function createAuthConfirmRouter() {
       );
     }
     const origin = workspaceOrigin(c, workspace.slug);
-    let passwordSet = false;
-    try {
-      const userId = await authUserIdForEmail(invite.email);
-      if (!userId) throw new Error("owner has no auth user");
-      const { error: error2 } = await getSupabaseClient().auth.admin.updateUserById(userId, { password });
-      if (error2) throw new Error(error2.message);
-      passwordSet = true;
-    } catch (err) {
-      console.error(`[new-workspace] setting the password for ${workspace.slug} failed:`, err);
-    }
     try {
       const session = await mintSession(invite.email);
       const fragment = new URLSearchParams({
@@ -2827,8 +2857,7 @@ function createAuthConfirmRouter() {
     } catch (err) {
       console.error(`[new-workspace] signing in the owner of ${workspace.slug} failed:`, err);
     }
-    const login = passwordSet ? `?email=${encodeURIComponent(invite.email)}` : "";
-    return c.redirect(`${origin}/login${login}`, 303);
+    return c.redirect(`${origin}/login?email=${encodeURIComponent(invite.email)}`, 303);
   });
   return confirm3;
 }
@@ -2887,10 +2916,20 @@ async function deliverInvite({
   });
   await sendEmail({ to: email, ...content });
 }
+function flyspaceLogo(origin) {
+  try {
+    const url = new URL(origin);
+    const local = url.hostname === "localhost" || url.hostname === "127.0.0.1";
+    return url.protocol === "https:" && !local ? { logoUrl: `${url.origin}/icons/icon-192.png` } : {};
+  } catch {
+    return {};
+  }
+}
 async function deliverWorkspaceSetupInvite(params) {
   if (!isMailConfigured()) throw new MailNotConfiguredError();
   const content = workspaceSetupEmail({
     actionLink: params.inviteLink,
+    ...flyspaceLogo(originOf(params.inviteLink)),
     ...params.invitedBy ? { invitedBy: params.invitedBy } : {},
     ...params.message?.trim() ? { message: params.message } : {}
   });
@@ -2916,10 +2955,10 @@ async function deliverSignInLink(email, redirectTo) {
 }
 // src/dashboard/server.ts
-import { existsSync as existsSync26 } from "fs";
+import { existsSync as existsSync27 } from "fs";
 import { createServer } from "net";
-import { join as join18 } from "path";
-import { Hono as Hono29 } from "hono";
+import { join as join19 } from "path";
+import { Hono as Hono30 } from "hono";
 import { serve } from "@hono/node-server";
 import { serveStatic } from "@hono/node-server/serve-static";
@@ -2965,7 +3004,7 @@ async function reconcileAll() {
 }
 // src/dashboard/api.ts
-import { Hono as Hono26 } from "hono";
+import { Hono as Hono27 } from "hono";
 // src/dashboard/public-share-routes.ts
 import { existsSync as existsSync11, readFileSync as readFileSync6, statSync as statSync2 } from "fs";
@@ -4022,7 +4061,7 @@ function truncationNotice(lang, voice) {
   if (lang === "en" || lang.startsWith("en-")) return TRUNCATION_NOTICE.en;
   return null;
 }
-var sleep = (ms) => new Promise((resolve7) => setTimeout(resolve7, ms));
+var sleep = (ms) => new Promise((resolve8) => setTimeout(resolve8, ms));
 async function synthesizeWithRetry(script, voice) {
   let lastError;
   for (let attempt = 1; attempt <= SYNTH_ATTEMPTS; attempt += 1) {
@@ -5035,6 +5074,9 @@ import { isAuthApiError, isAuthRetryableFetchError } from "@supabase/supabase-js
 var inFlight3 = /* @__PURE__ */ new Map();
 var CACHE_TTL_MS = 3e4;
 var resolved = /* @__PURE__ */ new Map();
+function invalidateAuthContextCache() {
+  resolved.clear();
+}
 function pruneExpired(now) {
   for (const [key, entry] of resolved) {
     if (entry.expires <= now) resolved.delete(key);
@@ -5138,7 +5180,10 @@ function siteverify(secret, token) {
 async function verifyTurnstileToken(token) {
   const secret = profileEnv("TURNSTILE_SECRET_KEY")?.trim();
   if (!secret) return true;
-  if (!token) return false;
+  if (!token) {
+    console.warn("[turnstile] no token sent (widget failed to load or errored in the browser)");
+    return false;
+  }
   let res;
   try {
     res = await siteverify(secret, token);
@@ -5149,9 +5194,15 @@ async function verifyTurnstileToken(token) {
       return false;
     }
   }
-  if (!res.ok) return false;
+  if (!res.ok) {
+    console.warn("[turnstile] siteverify HTTP", res.status);
+    return false;
+  }
   const data = await res.json().catch(() => ({}));
-  if (data.success !== true) return false;
+  if (data.success !== true) {
+    console.warn("[turnstile] rejected", data["error-codes"] ?? [], data.hostname ?? "");
+    return false;
+  }
   return data.action === void 0 || data.action === "login";
 }
@@ -6413,7 +6464,7 @@ function needsRefresh(expiresAt, now = Date.now()) {
   if (!expiresAt) return false;
   return new Date(expiresAt).getTime() - now < REFRESH_SKEW_MS;
 }
-var sleep2 = (ms) => new Promise((resolve7) => setTimeout(resolve7, ms));
+var sleep2 = (ms) => new Promise((resolve8) => setTimeout(resolve8, ms));
 async function refreshConnection(params) {
   const { workspaceId, connection, provider } = params;
   const deps = params.deps ?? {};
@@ -6657,8 +6708,8 @@ function collectFrom(root, source) {
     return { name, description: (fm.description ?? "").trim(), source, path };
   });
 }
-function listAgents(configDir, cwd) {
-  const base = configDir ? expandHome(configDir) : defaultConfigDir();
+function listAgents(configDir2, cwd) {
+  const base = configDir2 ? expandHome(configDir2) : defaultConfigDir();
   const collected = [
     ...collectFrom(join11(cwd, ".claude", "agents"), "project"),
     ...collectFrom(join11(base, "agents"), "user")
@@ -6669,8 +6720,8 @@ function listAgents(configDir, cwd) {
   }
   return [...byName.values()].sort((a, b) => a.name.localeCompare(b.name));
 }
-function readAgentPersona(configDir, cwd, name) {
-  const agent = listAgents(configDir, cwd).find((a) => a.name === name);
+function readAgentPersona(configDir2, cwd, name) {
+  const agent = listAgents(configDir2, cwd).find((a) => a.name === name);
   if (!agent) return void 0;
   try {
     const content = readFileSync7(agent.path, "utf-8");
@@ -6722,7 +6773,7 @@ Rules:
 - No preamble like "Summary:" \u2014 start directly with the summary text.`;
 var HAIKU_TIMEOUT_MS = 6e4;
 function runHaikuPrint(input2, claudeConfigDir, claudeCodeOauthToken) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve8, reject) => {
     const args = [
       "--print",
       "--model",
@@ -6773,7 +6824,7 @@ function runHaikuPrint(input2, claudeConfigDir, claudeCodeOauthToken) {
         reject(new Error("claude -p --model haiku returned empty output"));
         return;
       }
-      resolve7(text);
+      resolve8(text);
     });
   });
 }
@@ -7672,22 +7723,22 @@ var ChatAgent = class {
     let ready;
     try {
       channel = this.supabase().channel(`agent-thinking:${threadId}`);
-      ready = new Promise((resolve7) => {
+      ready = new Promise((resolve8) => {
         const timeout = setTimeout(() => {
           console.error(`[chat-agent] thinking-channel ${threadId}: subscribe timed out after 10s`);
-          resolve7(false);
+          resolve8(false);
         }, 1e4);
         channel.subscribe((status, err) => {
           if (status === "SUBSCRIBED") {
             clearTimeout(timeout);
-            resolve7(true);
+            resolve8(true);
           } else if (status === "CHANNEL_ERROR" || status === "TIMED_OUT" || status === "CLOSED") {
             console.error(
               `[chat-agent] thinking-channel ${threadId}: ${status}`,
               err?.message ?? ""
             );
             clearTimeout(timeout);
-            resolve7(false);
+            resolve8(false);
           }
         });
       });
@@ -7734,19 +7785,19 @@ var ChatAgent = class {
     let ready;
     try {
       channel = this.supabase().channel("channel-activity");
-      ready = new Promise((resolve7) => {
+      ready = new Promise((resolve8) => {
         const timeout = setTimeout(() => {
           console.error("[chat-agent] channel-activity: subscribe timed out after 10s");
-          resolve7(false);
+          resolve8(false);
         }, 1e4);
         channel.subscribe((status, err) => {
           if (status === "SUBSCRIBED") {
             clearTimeout(timeout);
-            resolve7(true);
+            resolve8(true);
           } else if (status === "CHANNEL_ERROR" || status === "TIMED_OUT" || status === "CLOSED") {
             console.error(`[chat-agent] channel-activity: ${status}`, err?.message ?? "");
             clearTimeout(timeout);
-            resolve7(false);
+            resolve8(false);
           }
         });
       });
@@ -7773,7 +7824,6 @@ var ChatAgent = class {
   async tryAsk(channelConfig, prompt, sessionId, onActivity, signal, usageContext) {
     const name = subAgentName(channelConfig.agentName);
     const agentPersona = name ? readAgentPersona(channelConfig.claudeConfigDir, channelConfig.cwd, name) : void 0;
-    const outputStyle = await resolveOutputStyleForProfile(channelConfig.profile);
     try {
       return await withMcpConfig(
         channelConfig.profile,
@@ -7790,7 +7840,6 @@ var ChatAgent = class {
             maxBudgetUsd: this.config.maxBudgetUsd,
             agentPersona,
             channelPrompt: channelConfig.prompt,
-            outputStyle,
             onActivity,
             signal,
             mcpConfigPath,
@@ -7809,7 +7858,6 @@ var ChatAgent = class {
   async tryAskCodex(channelConfig, prompt, sessionId, signal, onActivity, usageContext) {
     const name = subAgentName(channelConfig.agentName);
     const agentPersona = name ? readAgentPersona(channelConfig.claudeConfigDir, channelConfig.cwd, name) : void 0;
-    const outputStyle = await resolveOutputStyleForProfile(channelConfig.profile);
     try {
       return await askCodex(
         prompt,
@@ -7829,7 +7877,7 @@ var ChatAgent = class {
             this.config.botName,
             agentPersona,
             channelConfig.prompt,
-            outputStyle?.body
+            resolveSelectedOutputStyle(channelConfig.claudeConfigDir)?.body
           ),
           ...onActivity ? { onActivity } : {},
           ...signal ? { signal } : {},
@@ -8096,10 +8144,10 @@ ${lines}
 // src/dashboard/artifact-export.ts
 async function exportDocAsArtifact(channelId, docPath) {
   const owningProfile = findOwningProfile(channelId);
-  const { channelConfig, outputStyle } = await runWithProfile(owningProfile, async () => ({
-    channelConfig: resolveChannelConfig(channelId),
-    outputStyle: await resolveOutputStyleForProfile(getProfile())
-  }));
+  const channelConfig = await runWithProfile(
+    owningProfile,
+    async () => resolveChannelConfig(channelId)
+  );
   const abs = resolveDocPath(channelConfig.cwd, docPath);
   if (!abs) throw new Error(`doc not found: ${docPath}`);
   const content = readFileSync8(abs, "utf8");
@@ -8133,7 +8181,6 @@ ${content}`;
         runtime: channelConfig.runtime,
         mounts: channelConfig.mounts,
         channelPrompt: resolveChannelPrompt(channelId),
-        outputStyle,
         usageContext: { source: "automation", channelId, label: "export-artifact" }
       },
       channelConfig.claudeConfigDir,
@@ -8980,10 +9027,123 @@ function createDocsRouter() {
   return app;
 }
+// src/dashboard/output-styles-routes.ts
+import { Hono as Hono10 } from "hono";
+function requireAdmin(auth) {
+  return auth?.role === "admin" ? null : "admin access required";
+}
+function toResponse3(style) {
+  return {
+    id: style.id,
+    name: style.name,
+    description: style.description,
+    body: style.body,
+    createdAt: style.createdAt,
+    updatedAt: style.updatedAt
+  };
+}
+var configDir = () => profileEnv("CLAUDE_CONFIG_DIR");
+function failure(c, err) {
+  const message = err.message;
+  return c.json({ error: message }, err instanceof OutputStyleConflictError ? 409 : 500);
+}
+function createOutputStylesRouter() {
+  const app = new Hono10();
+  app.get("/", (c) => {
+    const auth = c.get("auth");
+    const denied = requireAdmin(auth);
+    if (denied) return c.json({ error: denied }, 403);
+    try {
+      return c.json({
+        builtIn: BUILT_IN_OUTPUT_STYLES,
+        custom: listOutputStyles(configDir()).map(toResponse3),
+        defaultId: getOutputStyleDefault(configDir())
+      });
+    } catch (err) {
+      return failure(c, err);
+    }
+  });
+  app.post("/", async (c) => {
+    const auth = c.get("auth");
+    const denied = requireAdmin(auth);
+    if (denied) return c.json({ error: denied }, 403);
+    const body = await c.req.json().catch(() => null);
+    const name = typeof body?.name === "string" ? body.name.trim() : "";
+    if (!name) return c.json({ error: "name is required" }, 400);
+    const description = typeof body?.description === "string" ? body.description.trim() : "";
+    const content = typeof body?.body === "string" ? body.body : "";
+    try {
+      return c.json(
+        toResponse3(createOutputStyle(configDir(), { name, description, body: content })),
+        201
+      );
+    } catch (err) {
+      return failure(c, err);
+    }
+  });
+  app.put("/default", async (c) => {
+    const auth = c.get("auth");
+    const denied = requireAdmin(auth);
+    if (denied) return c.json({ error: denied }, 403);
+    const body = await c.req.json().catch(() => null);
+    const id = typeof body?.id === "string" ? body.id : "";
+    if (!id) return c.json({ error: "id is required" }, 400);
+    try {
+      if (!setOutputStyleDefault(configDir(), id)) {
+        return c.json({ error: "output style not found" }, 404);
+      }
+    } catch (err) {
+      return failure(c, err);
+    }
+    return c.json({ defaultId: id });
+  });
+  app.put("/:id", async (c) => {
+    const auth = c.get("auth");
+    const denied = requireAdmin(auth);
+    if (denied) return c.json({ error: denied }, 403);
+    const body = await c.req.json().catch(() => null);
+    if (!body) return c.json({ error: "a body is required" }, 400);
+    const patch = {};
+    if (body.name !== void 0) {
+      const name = typeof body.name === "string" ? body.name.trim() : "";
+      if (!name) return c.json({ error: "name cannot be empty" }, 400);
+      patch.name = name;
+    }
+    if (body.description !== void 0) {
+      patch.description = typeof body.description === "string" ? body.description.trim() : "";
+    }
+    if (body.body !== void 0) {
+      patch.body = typeof body.body === "string" ? body.body : "";
+    }
+    if (!Object.keys(patch).length) return c.json({ error: "nothing to update" }, 400);
+    try {
+      const updated = updateOutputStyle(configDir(), c.req.param("id"), patch);
+      if (!updated) return c.json({ error: "output style not found" }, 404);
+      return c.json(toResponse3(updated));
+    } catch (err) {
+      return failure(c, err);
+    }
+  });
+  app.delete("/:id", async (c) => {
+    const auth = c.get("auth");
+    const denied = requireAdmin(auth);
+    if (denied) return c.json({ error: denied }, 403);
+    try {
+      if (!deleteOutputStyle(configDir(), c.req.param("id"))) {
+        return c.json({ error: "output style not found" }, 404);
+      }
+    } catch (err) {
+      return failure(c, err);
+    }
+    return c.json({ ok: true });
+  });
+  return app;
+}
 // src/dashboard/skills-routes.ts
 import { existsSync as existsSync18, statSync as statSync6 } from "fs";
 import { dirname as dirname4 } from "path";
-import { Hono as Hono10 } from "hono";
+import { Hono as Hono11 } from "hono";
 // src/dashboard/skill-mirror.ts
 import { createHash as createHash8 } from "crypto";
@@ -9010,11 +9170,11 @@ function ownSkills(scope, dir) {
 }
 function snapshot(scopes) {
   const wants = (scope) => !scopes || scopes.has(scope);
-  const configDir = profileEnv("CLAUDE_CONFIG_DIR");
+  const configDir2 = profileEnv("CLAUDE_CONFIG_DIR");
   const rows = [];
-  if (wants("workspace")) rows.push(...ownSkills("workspace", workspaceSkillsDir(configDir)));
+  if (wants("workspace")) rows.push(...ownSkills("workspace", workspaceSkillsDir(configDir2)));
   if (wants("plugin")) {
-    for (const s of listPluginSkillDetails(configDir, defaultClaudeCwd())) {
+    for (const s of listPluginSkillDetails(configDir2, defaultClaudeCwd())) {
       rows.push({
         scope: "plugin",
         name: s.name,
@@ -9131,7 +9291,7 @@ function channelScope(channelId) {
 function inheritedSkills(scope, own) {
   return listSkills(scope.claudeConfigDir, scope.cwd).filter((s) => scope.inheritFrom.includes(s.source) && !own.has(s.name)).sort((a, b) => a.name.localeCompare(b.name));
 }
-function requireAdmin(auth) {
+function requireAdmin2(auth) {
   return auth?.role === "admin" ? null : "admin access required";
 }
 function rootExists(dir) {
@@ -9271,7 +9431,7 @@ function mountSkillRoutes(app, base, refOf, backend) {
     return detail ? c.json(detail) : c.json({ error: "not found" }, 404);
   });
   app.post(base, async (c) => {
-    const denied = requireAdmin(c.get("auth"));
+    const denied = requireAdmin2(c.get("auth"));
     if (denied) return c.json({ error: denied }, 403);
     const body = await c.req.json().catch(() => null);
     const name = typeof body?.name === "string" ? body.name.trim() : "";
@@ -9283,7 +9443,7 @@ function mountSkillRoutes(app, base, refOf, backend) {
     return c.json(result.body, result.status);
   });
   app.put(`${base}/:name`, async (c) => {
-    const denied = requireAdmin(c.get("auth"));
+    const denied = requireAdmin2(c.get("auth"));
     if (denied) return c.json({ error: denied }, 403);
     const body = await c.req.json().catch(() => null);
     if (!body || typeof body.body !== "string" || typeof body.description !== "string") {
@@ -9299,7 +9459,7 @@ function mountSkillRoutes(app, base, refOf, backend) {
     return c.json(result.body, result.status);
   });
   app.delete(`${base}/:name`, async (c) => {
-    const denied = requireAdmin(c.get("auth"));
+    const denied = requireAdmin2(c.get("auth"));
     if (denied) return c.json({ error: denied }, 403);
     const result = await backend.write(refOf(c), { op: "delete", name: c.req.param("name") });
     return c.json(result.body, result.status);
@@ -9308,12 +9468,12 @@ function mountSkillRoutes(app, base, refOf, backend) {
 var workspaceRef = () => ({ kind: "workspace" });
 var channelRef = (c) => ({ kind: "channel", channelId: c.req.param("id") });
 function createWorkspaceSkillsRouter() {
-  const app = new Hono10();
+  const app = new Hono11();
   mountSkillRoutes(app, "/skills", workspaceRef, diskBackend);
   return app;
 }
 function createChannelSkillsRouter() {
-  const app = new Hono10();
+  const app = new Hono11();
   mountSkillRoutes(app, "/:id/skill-files", channelRef, diskBackend);
   return app;
 }
@@ -9370,8 +9530,8 @@ function binaryOnPath(bin) {
 }
 function claudeAuthAvailable() {
   if (profileEnv("CLAUDE_CODE_OAUTH_TOKEN")?.trim()) return true;
-  const configDir = profileEnv("CLAUDE_CONFIG_DIR")?.trim() || resolve5(homedir6(), ".claude");
-  if (existsSync19(join14(configDir, ".credentials.json"))) return true;
+  const configDir2 = profileEnv("CLAUDE_CONFIG_DIR")?.trim() || resolve5(homedir6(), ".claude");
+  if (existsSync19(join14(configDir2, ".credentials.json"))) return true;
   if (process.platform !== "darwin") return false;
   try {
     execFileSync("security", ["find-generic-password", "-s", "Claude Code-credentials"], {
@@ -9420,6 +9580,7 @@ function registerHostRoutes(api) {
   });
   api.route("/channels", createChannelSkillsRouter());
   api.route("/", createWorkspaceSkillsRouter());
+  api.route("/output-styles", createOutputStylesRouter());
   api.route("/channels", createDocsRouter());
   api.route("/channels", createChannelWriteRouter());
   api.get("/settings", async (c) => c.json(await loadFullDashboardSettings()));
@@ -9529,11 +9690,11 @@ function tailFile(file, limit) {
 }
 // src/dashboard/data-api.ts
-import { existsSync as existsSync22 } from "fs";
+import { existsSync as existsSync23 } from "fs";
 import sharp5 from "sharp";
 // src/dashboard/automations-routes.ts
-import { Hono as Hono11 } from "hono";
+import { Hono as Hono12 } from "hono";
 var TYPES2 = ["schedule", "trigger", "mention-trigger"];
 function isType(t) {
   return TYPES2.includes(t);
@@ -9550,7 +9711,7 @@ function statusFor(message) {
   return 400;
 }
 function createAutomationWriteRouter() {
-  const app = new Hono11();
+  const app = new Hono12();
   const manager = () => new AutomationManager();
   app.get("/:type/:name", (c) => {
     const item = manager().get(c.req.param("name"));
@@ -9606,9 +9767,9 @@ function createAutomationWriteRouter() {
 }
 // src/dashboard/categories-routes.ts
-import { Hono as Hono12 } from "hono";
+import { Hono as Hono13 } from "hono";
 function createCategoryWriteRouter() {
-  const app = new Hono12();
+  const app = new Hono13();
   app.get("/", async (c) => {
     const { data, error: error2 } = await getSupabaseClient().from("categories").select("*").eq("profile", getProfile()).order("position", { ascending: true });
     if (error2) return c.json({ error: error2.message }, 500);
@@ -9662,7 +9823,7 @@ function createCategoryWriteRouter() {
 }
 // src/dashboard/chat-routes.ts
-import { Hono as Hono13 } from "hono";
+import { Hono as Hono14 } from "hono";
 // src/dashboard/fork-summary.ts
 var GROQ_API_URL5 = "https://api.groq.com/openai/v1/chat/completions";
@@ -10106,7 +10267,7 @@ async function withPreviews(supabase, threads) {
   });
 }
 function createChatRouter(agent = {}) {
-  const app = new Hono13();
+  const app = new Hono14();
   const {
     onChatMessage: onMessage,
     isAgentThinking,
@@ -10596,7 +10757,7 @@ function createChatRouter(agent = {}) {
 }
 // src/dashboard/doc-shares-routes.ts
-import { Hono as Hono14 } from "hono";
+import { Hono as Hono15 } from "hono";
 // src/dashboard/doc-share-features.ts
 import { DeleteObjectCommand as DeleteObjectCommand3 } from "@aws-sdk/client-s3";
@@ -10756,7 +10917,7 @@ function resolveChannel2(c) {
 }
 var LIST_LIMIT = 500;
 function createDocShareListRouter() {
-  const app = new Hono14();
+  const app = new Hono15();
   app.get("/shares", async (c) => {
     const viewer = c.get("auth");
     const channels = new Map(
@@ -10792,7 +10953,7 @@ function createDocShareListRouter() {
   return app;
 }
 function createDocShareWriteRouter(agent = {}) {
-  const app = new Hono14();
+  const app = new Hono15();
   app.get("/:id/docs/share", async (c) => {
     const resolved2 = resolveChannel2(c);
     if ("error" in resolved2) return resolved2.error;
@@ -10939,7 +11100,7 @@ function createDocShareWriteRouter(agent = {}) {
 }
 // src/dashboard/search-routes.ts
-import { Hono as Hono15 } from "hono";
+import { Hono as Hono16 } from "hono";
 function matchScore(q, fields) {
   const terms = q.toLowerCase().split(/\s+/).filter(Boolean);
   if (terms.length === 0) return 0;
@@ -11058,7 +11219,7 @@ function searchAutomations(q) {
 }
 var RESULT_LIMIT = 30;
 function createSearchRouter() {
-  const app = new Hono15();
+  const app = new Hono16();
   app.get("/", async (c) => {
     const q = c.req.query("q")?.trim();
     if (!q) return c.json({ results: [] });
@@ -11075,7 +11236,7 @@ function createSearchRouter() {
 // src/dashboard/uploads-routes.ts
 import { randomUUID } from "crypto";
-import { Hono as Hono16 } from "hono";
+import { Hono as Hono17 } from "hono";
 import { PutObjectCommand as PutObjectCommand3, GetObjectCommand as GetObjectCommand5 } from "@aws-sdk/client-s3";
 import { getSignedUrl as getSignedUrl4 } from "@aws-sdk/s3-request-presigner";
 var MAX_FILE_BYTES = 10 * 1024 * 1024;
@@ -11090,7 +11251,7 @@ function encodeKeyForUrl(key) {
   return key.split("/").map(encodeURIComponent).join("/");
 }
 function createUploadsRouter() {
-  const app = new Hono16();
+  const app = new Hono17();
   app.post("/uploads", async (c) => {
     const body = await c.req.parseBody().catch(() => null);
     const file = body?.["file"];
@@ -11136,7 +11297,7 @@ function createUploadsRouter() {
 // src/dashboard/avatars-routes.ts
 import { randomUUID as randomUUID2 } from "crypto";
-import { Hono as Hono17 } from "hono";
+import { Hono as Hono18 } from "hono";
 import sharp4 from "sharp";
 import { PutObjectCommand as PutObjectCommand4, DeleteObjectCommand as DeleteObjectCommand4 } from "@aws-sdk/client-s3";
 var AVATAR_SIZE = 192;
@@ -11155,10 +11316,12 @@ async function saveAvatarKey(userId, avatarKey) {
     user_metadata: metadata
   });
   if (error2) throw new Error(`saveAvatarKey(${userId}): ${error2.message}`);
+  invalidateAuthContextCache();
 }
 async function storeAvatar(file, owner) {
   if (!(file instanceof File)) return { error: "missing file" };
-  if (!AVATAR_MIME_TYPES.includes(file.type)) return { error: "avatar must be a PNG or JPEG image" };
+  if (!AVATAR_MIME_TYPES.includes(file.type))
+    return { error: "avatar must be a PNG or JPEG image" };
   if (file.size > MAX_AVATAR_BYTES) return { error: "avatar must be 2MB or smaller" };
   const original = Buffer.from(await file.arrayBuffer());
   const resized = await sharp4(original).resize({ width: AVATAR_SIZE, height: AVATAR_SIZE, fit: "cover" }).png().toBuffer();
@@ -11177,7 +11340,7 @@ function avatarKeyPrefix() {
   return `${KEY_PREFIX3}/${getProfile()}/`;
 }
 function createAvatarsRouter() {
-  const app = new Hono17();
+  const app = new Hono18();
   app.get("/avatars/slack", async (c) => {
     const ctx = await resolveAuthContext(c);
     if (!ctx) return c.json({ error: "not signed in" }, 401);
@@ -11215,7 +11378,7 @@ function createAvatarsRouter() {
 }
 // src/dashboard/members-routes.ts
-import { Hono as Hono18 } from "hono";
+import { Hono as Hono19 } from "hono";
 function inviteLinkFor(c, token) {
   const url = new URL("/auth/invite", callbackUrl(c));
   url.searchParams.set("token", token);
@@ -11223,7 +11386,7 @@ function inviteLinkFor(c, token) {
 }
 var EMAIL_RE2 = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
 function createMembersRouter() {
-  const members = new Hono18();
+  const members = new Hono19();
   members.get("/", async (c) => {
     const ctx = await resolveAuthContext(c);
     if (ctx?.role !== "admin") return c.json({ error: "admin access required" }, 403);
@@ -11407,7 +11570,7 @@ function createMembersRouter() {
 }
 // src/dashboard/notifications-routes.ts
-import { Hono as Hono19 } from "hono";
+import { Hono as Hono20 } from "hono";
 // src/store/notification-store.ts
 function rowToNotification(row) {
@@ -11475,7 +11638,7 @@ async function markAllRead(channelIds, userId) {
 // src/dashboard/notifications-routes.ts
 function createNotificationsRouter() {
-  const notifications = new Hono19();
+  const notifications = new Hono20();
   notifications.get("/", async (c) => {
     const auth = c.get("auth");
     const channelIds = getProfileChannelRegistry().filter((ch) => canSeeChannel(ch, auth)).map((ch) => ch.id);
@@ -11502,7 +11665,7 @@ function createNotificationsRouter() {
   return notifications;
 }
 function createThreadReadRouter() {
-  const threads = new Hono19();
+  const threads = new Hono20();
   threads.post("/threads/:threadId/read", async (c) => {
     const { userId } = c.get("auth");
     const threadId = c.req.param("threadId");
@@ -11514,7 +11677,7 @@ function createThreadReadRouter() {
 }
 // src/dashboard/push-routes.ts
-import { Hono as Hono20 } from "hono";
+import { Hono as Hono21 } from "hono";
 // src/push/send.ts
 import webpush from "web-push";
@@ -11617,7 +11780,7 @@ async function pushToUser(userId, payload) {
 // src/dashboard/push-routes.ts
 function createPushRouter() {
-  const push = new Hono20();
+  const push = new Hono21();
   push.get("/key", (c) => c.json({ publicKey: getVapidPublicKey() }));
   push.post("/subscribe", async (c) => {
     const { userId } = c.get("auth");
@@ -11648,7 +11811,7 @@ function createPushRouter() {
 }
 // src/dashboard/mcp-oauth-routes.ts
-import { Hono as Hono21 } from "hono";
+import { Hono as Hono22 } from "hono";
 var CONNECTIONS_PAGE = "/settings/connections";
 function callbackUri(c) {
   const proto = c.req.header("x-forwarded-proto") ?? "http";
@@ -11663,7 +11826,7 @@ function backToDashboard(c, to, params) {
   return c.redirect(`${target.pathname}${target.search}`);
 }
 function createMcpOAuthRouter() {
-  const app = new Hono21();
+  const app = new Hono22();
   app.get("/oauth/:provider/start", async (c) => {
     const auth = c.get("auth");
     if (auth.role !== "admin") return c.json({ error: "admin access required" }, 403);
@@ -11790,7 +11953,7 @@ function createMcpOAuthRouter() {
 }
 // src/dashboard/mcp-routes.ts
-import { Hono as Hono22 } from "hono";
+import { Hono as Hono23 } from "hono";
 // src/mcp/transport.ts
 var KINDS = ["inherit", "npx", "local", "http", "sse"];
@@ -11884,10 +12047,10 @@ function fromServerCommand(command) {
 // src/dashboard/mcp-routes.ts
 var CUSTOM_PROVIDER = "custom";
-function requireAdmin2(auth) {
+function requireAdmin3(auth) {
   return auth?.role === "admin" ? null : "admin access required";
 }
-function toResponse3(connection, channelIds, providerCommand = null) {
+function toResponse4(connection, channelIds, providerCommand = null) {
   return {
     id: connection.id,
     providerSlug: connection.providerSlug,
@@ -11920,9 +12083,9 @@ function bindingsByConnection() {
   return map;
 }
 function createMcpRouter() {
-  const app = new Hono22();
+  const app = new Hono23();
   app.get("/providers", async (c) => {
-    const denied = requireAdmin2(c.get("auth"));
+    const denied = requireAdmin3(c.get("auth"));
     if (denied) return c.json({ error: denied }, 403);
     const providers = await listMcpProviders();
     return c.json({
@@ -11940,7 +12103,7 @@ function createMcpRouter() {
   });
   app.get("/connections", async (c) => {
     const auth = c.get("auth");
-    const denied = requireAdmin2(auth);
+    const denied = requireAdmin3(auth);
     if (denied) return c.json({ error: denied }, 403);
     const connections = await listMcpConnections(auth.workspaceId);
     const commands = new Map(
@@ -11949,13 +12112,13 @@ function createMcpRouter() {
     const bindings = bindingsByConnection();
     return c.json({
       connections: connections.map(
-        (conn) => toResponse3(conn, bindings.get(conn.id) ?? [], commands.get(conn.providerSlug) ?? null)
+        (conn) => toResponse4(conn, bindings.get(conn.id) ?? [], commands.get(conn.providerSlug) ?? null)
       )
     });
   });
   app.post("/connections", async (c) => {
     const auth = c.get("auth");
-    const denied = requireAdmin2(auth);
+    const denied = requireAdmin3(auth);
     if (denied) return c.json({ error: denied }, 403);
     const body = await c.req.json().catch(() => null);
     const label2 = typeof body?.label === "string" ? body.label.trim() : "";
@@ -11981,7 +12144,7 @@ function createMcpRouter() {
         serverCommand: toServerCommand(parsed.transport),
         createdBy: auth.userId ?? null
       });
-      return c.json(toResponse3(created, []), 201);
+      return c.json(toResponse4(created, []), 201);
     } catch (err) {
       const message = err.message;
       if (/duplicate key|unique/i.test(message)) {
@@ -11992,7 +12155,7 @@ function createMcpRouter() {
   });
   app.patch("/connections/:id", async (c) => {
     const auth = c.get("auth");
-    const denied = requireAdmin2(auth);
+    const denied = requireAdmin3(auth);
     if (denied) return c.json({ error: denied }, 403);
     const body = await c.req.json().catch(() => null);
     if (!body) return c.json({ error: "a body is required" }, 400);
@@ -12018,12 +12181,12 @@ function createMcpRouter() {
     const provider = await getMcpProvider(updated.providerSlug);
     const bindings = bindingsByConnection();
     return c.json(
-      toResponse3(updated, bindings.get(updated.id) ?? [], provider?.serverCommand ?? null)
+      toResponse4(updated, bindings.get(updated.id) ?? [], provider?.serverCommand ?? null)
     );
   });
   app.put("/connections/:id/credential", async (c) => {
     const auth = c.get("auth");
-    const denied = requireAdmin2(auth);
+    const denied = requireAdmin3(auth);
     if (denied) return c.json({ error: denied }, 403);
     const body = await c.req.json().catch(() => null);
     const raw = body?.apiKey;
@@ -12036,12 +12199,12 @@ function createMcpRouter() {
     const provider = await getMcpProvider(updated.providerSlug);
     const bindings = bindingsByConnection();
     return c.json(
-      toResponse3(updated, bindings.get(updated.id) ?? [], provider?.serverCommand ?? null)
+      toResponse4(updated, bindings.get(updated.id) ?? [], provider?.serverCommand ?? null)
     );
   });
   app.put("/connections/:id/channels", async (c) => {
     const auth = c.get("auth");
-    const denied = requireAdmin2(auth);
+    const denied = requireAdmin3(auth);
     if (denied) return c.json({ error: denied }, 403);
     const id = c.req.param("id");
     const connection = await getMcpConnection(auth.workspaceId, id);
@@ -12064,11 +12227,11 @@ function createMcpRouter() {
     } catch (err) {
       return c.json({ error: err.message }, 500);
     }
-    return c.json(toResponse3(connection, [...wanted]));
+    return c.json(toResponse4(connection, [...wanted]));
   });
   app.delete("/connections/:id", async (c) => {
     const auth = c.get("auth");
-    const denied = requireAdmin2(auth);
+    const denied = requireAdmin3(auth);
     if (denied) return c.json({ error: denied }, 403);
     const deleted = await deleteMcpConnection(auth.workspaceId, c.req.param("id"));
     if (!deleted) return c.json({ error: "connection not found" }, 404);
@@ -12078,143 +12241,6 @@ function createMcpRouter() {
   return app;
 }
-// src/dashboard/output-styles-routes.ts
-import { Hono as Hono23 } from "hono";
-var BUILT_IN_OUTPUT_STYLES = [
-  {
-    slug: "default",
-    name: "Default",
-    description: "Balanced detail: enough context to act on, without padding."
-  },
-  {
-    slug: "concise",
-    name: "Concise",
-    description: "The shortest answer that fully addresses the question."
-  },
-  {
-    slug: "explanatory",
-    name: "Explanatory",
-    description: "Walks through the reasoning and trade-offs, not just the result."
-  },
-  {
-    slug: "formal",
-    name: "Formal",
-    description: "Structured, businesslike phrasing with no casual asides."
-  }
-];
-function requireAdmin3(auth) {
-  return auth?.role === "admin" ? null : "admin access required";
-}
-function toResponse4(style) {
-  return {
-    id: style.id,
-    name: style.name,
-    description: style.description,
-    body: style.body,
-    createdAt: style.createdAt,
-    updatedAt: style.updatedAt
-  };
-}
-function createOutputStylesRouter() {
-  const app = new Hono23();
-  app.get("/", async (c) => {
-    const auth = c.get("auth");
-    const denied = requireAdmin3(auth);
-    if (denied) return c.json({ error: denied }, 403);
-    const [custom, defaultId] = await Promise.all([
-      listOutputStyles(auth.workspaceId),
-      getWorkspaceOutputStyleDefault(auth.workspaceId)
-    ]);
-    return c.json({
-      builtIn: BUILT_IN_OUTPUT_STYLES,
-      custom: custom.map(toResponse4),
-      defaultId
-    });
-  });
-  app.post("/", async (c) => {
-    const auth = c.get("auth");
-    const denied = requireAdmin3(auth);
-    if (denied) return c.json({ error: denied }, 403);
-    const body = await c.req.json().catch(() => null);
-    const name = typeof body?.name === "string" ? body.name.trim() : "";
-    if (!name) return c.json({ error: "name is required" }, 400);
-    const description = typeof body?.description === "string" ? body.description.trim() : "";
-    const content = typeof body?.body === "string" ? body.body : "";
-    try {
-      const created = await insertOutputStyle({
-        workspaceId: auth.workspaceId,
-        name,
-        description,
-        body: content
-      });
-      return c.json(toResponse4(created), 201);
-    } catch (err) {
-      const message = err.message;
-      if (/duplicate key|unique/i.test(message)) {
-        return c.json({ error: `an output style named "${name}" already exists` }, 409);
-      }
-      return c.json({ error: message }, 500);
-    }
-  });
-  app.put("/default", async (c) => {
-    const auth = c.get("auth");
-    const denied = requireAdmin3(auth);
-    if (denied) return c.json({ error: denied }, 403);
-    const body = await c.req.json().catch(() => null);
-    const id = typeof body?.id === "string" ? body.id : "";
-    if (!id) return c.json({ error: "id is required" }, 400);
-    const isBuiltIn = BUILT_IN_OUTPUT_STYLES.some((s) => s.slug === id);
-    if (!isBuiltIn && !await getOutputStyle(auth.workspaceId, id)) {
-      return c.json({ error: "output style not found" }, 404);
-    }
-    await setWorkspaceOutputStyleDefault(auth.workspaceId, id);
-    return c.json({ defaultId: id });
-  });
-  app.put("/:id", async (c) => {
-    const auth = c.get("auth");
-    const denied = requireAdmin3(auth);
-    if (denied) return c.json({ error: denied }, 403);
-    const body = await c.req.json().catch(() => null);
-    if (!body) return c.json({ error: "a body is required" }, 400);
-    const patch = {};
-    if (body.name !== void 0) {
-      const name = typeof body.name === "string" ? body.name.trim() : "";
-      if (!name) return c.json({ error: "name cannot be empty" }, 400);
-      patch.name = name;
-    }
-    if (body.description !== void 0) {
-      patch.description = typeof body.description === "string" ? body.description.trim() : "";
-    }
-    if (body.body !== void 0) {
-      patch.body = typeof body.body === "string" ? body.body : "";
-    }
-    if (!Object.keys(patch).length) return c.json({ error: "nothing to update" }, 400);
-    try {
-      const updated = await updateOutputStyle(auth.workspaceId, c.req.param("id"), patch);
-      if (!updated) return c.json({ error: "output style not found" }, 404);
-      return c.json(toResponse4(updated));
-    } catch (err) {
-      const message = err.message;
-      if (/duplicate key|unique/i.test(message)) {
-        return c.json({ error: `an output style named "${patch.name}" already exists` }, 409);
-      }
-      return c.json({ error: message }, 500);
-    }
-  });
-  app.delete("/:id", async (c) => {
-    const auth = c.get("auth");
-    const denied = requireAdmin3(auth);
-    if (denied) return c.json({ error: denied }, 403);
-    const id = c.req.param("id");
-    const currentDefault = await getWorkspaceOutputStyleDefault(auth.workspaceId);
-    const deleted = await deleteOutputStyle(auth.workspaceId, id);
-    if (!deleted) return c.json({ error: "output style not found" }, 404);
-    if (currentDefault === id) await setWorkspaceOutputStyleDefault(auth.workspaceId, "default");
-    return c.json({ ok: true });
-  });
-  return app;
-}
 // src/store/usage-query.ts
 var COLUMNS = "ran_at, channel_id, thread_ts, user_id, source, model, provider, label, input_tokens, output_tokens, cache_read_tokens, cache_creation_tokens, cost_usd, num_turns, is_error";
 var EMPTY_TOTALS = {
@@ -12522,14 +12548,320 @@ function createChannelMembersRouter() {
   return router;
 }
+// src/dashboard/onboarding-routes.ts
+import { Hono as Hono25 } from "hono";
+// src/dashboard/onboarding-scan.ts
+import { execFileSync as execFileSync2 } from "child_process";
+import {
+  existsSync as existsSync22,
+  lstatSync as lstatSync2,
+  mkdirSync as mkdirSync6,
+  readdirSync as readdirSync4,
+  readFileSync as readFileSync11,
+  statSync as statSync8,
+  symlinkSync
+} from "fs";
+import { homedir as homedir7 } from "os";
+import { basename as basename5, join as join16, resolve as resolve6 } from "path";
+var MAX_JSONL_HEAD_BYTES = 64 * 1024;
+var GIT_SCAN_ROOTS = ["Workspaces", "Projects", "code"];
+function flyspaceRoot() {
+  return process.env["FLYSPACE_ROOT"] || join16(homedir7(), "Flyspace");
+}
+function onPath(cmd) {
+  try {
+    execFileSync2(process.platform === "win32" ? "where" : "which", [cmd], { stdio: "ignore" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function claudeDir() {
+  return process.env["CLAUDE_CONFIG_DIR"] || join16(homedir7(), ".claude");
+}
+function codexDir() {
+  return process.env["CODEX_HOME"] || join16(homedir7(), ".codex");
+}
+function claudeLoggedIn() {
+  if (process.env["ANTHROPIC_API_KEY"]) return true;
+  if (existsSync22(join16(claudeDir(), ".credentials.json"))) return true;
+  try {
+    const raw = JSON.parse(readFileSync11(join16(homedir7(), ".claude.json"), "utf-8"));
+    if (raw.oauthAccount) return true;
+  } catch {
+  }
+  if (process.platform !== "darwin") return false;
+  try {
+    execFileSync2("security", ["find-generic-password", "-s", "Claude Code-credentials"], {
+      stdio: "ignore"
+    });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function codexLoggedIn() {
+  return !!process.env["OPENAI_API_KEY"] || existsSync22(join16(codexDir(), "auth.json"));
+}
+function jsonlFiles(dir, depth) {
+  const out = [];
+  let entries2;
+  try {
+    entries2 = readdirSync4(dir, { withFileTypes: true });
+  } catch {
+    return out;
+  }
+  for (const e of entries2) {
+    const full = join16(dir, e.name);
+    if (e.isDirectory()) {
+      if (depth > 0) out.push(...jsonlFiles(full, depth - 1));
+    } else if (e.name.endsWith(".jsonl")) {
+      try {
+        out.push({ file: full, mtime: statSync8(full).mtimeMs });
+      } catch {
+      }
+    }
+  }
+  return out;
+}
+function cwdFromTranscript(file) {
+  let head;
+  try {
+    head = readFileSync11(file, { encoding: "utf-8", flag: "r" }).slice(0, MAX_JSONL_HEAD_BYTES);
+  } catch {
+    return null;
+  }
+  for (const line of head.split("\n")) {
+    if (!line.includes('"cwd"')) continue;
+    try {
+      const obj = JSON.parse(line);
+      const cwd = obj.cwd ?? obj.payload?.cwd;
+      if (typeof cwd === "string" && cwd) return cwd;
+    } catch {
+    }
+  }
+  return null;
+}
+function codexTrustedPaths() {
+  try {
+    const toml = readFileSync11(join16(codexDir(), "config.toml"), "utf-8");
+    return [...toml.matchAll(/^\[projects\.(?:"([^"]+)"|'([^']+)')\]/gm)].map((m) => m[1] ?? m[2]);
+  } catch {
+    return [];
+  }
+}
+function isExcluded(path) {
+  const home = homedir7();
+  if (path === home || path === "/") return true;
+  if (path === "/tmp" || path.startsWith("/tmp/")) return true;
+  if (path === "/private/tmp" || path.startsWith("/private/tmp/")) return true;
+  const root = flyspaceRoot();
+  if (path === root || path.startsWith(`${root}/`)) return true;
+  try {
+    return !statSync8(path).isDirectory();
+  } catch {
+    return true;
+  }
+}
+function gitRepos() {
+  const home = homedir7();
+  const found = [];
+  for (const rootName of GIT_SCAN_ROOTS) {
+    const root = join16(home, rootName);
+    let entries2;
+    try {
+      entries2 = readdirSync4(root, { withFileTypes: true });
+    } catch {
+      continue;
+    }
+    for (const e of entries2) {
+      if (e.isDirectory() && existsSync22(join16(root, e.name, ".git"))) found.push(join16(root, e.name));
+    }
+  }
+  return found;
+}
+function detectRunners(history = { claude: false, codex: false }) {
+  return [
+    {
+      id: "claude",
+      installed: onPath("claude"),
+      loggedIn: claudeLoggedIn(),
+      hasHistory: history.claude
+    },
+    {
+      id: "codex",
+      installed: onPath("codex"),
+      loggedIn: codexLoggedIn(),
+      hasHistory: history.codex
+    }
+  ];
+}
+function scanOnboarding() {
+  const byPath = /* @__PURE__ */ new Map();
+  const history = { claude: false, codex: false };
+  const add = (rawPath, source, mtime, sessions, trusted = false) => {
+    const path = resolve6(rawPath);
+    if (isExcluded(path)) return;
+    const existing = byPath.get(path);
+    if (existing) {
+      if (!existing.sources.includes(source)) existing.sources.push(source);
+      existing.lastUsed = Math.max(existing.lastUsed, mtime);
+      existing.sessions += sessions;
+      existing.trusted ||= trusted;
+    } else {
+      byPath.set(path, {
+        path,
+        name: basename5(path),
+        sources: [source],
+        lastUsed: mtime,
+        sessions,
+        trusted
+      });
+    }
+  };
+  const claudeProjects = join16(claudeDir(), "projects");
+  try {
+    for (const e of readdirSync4(claudeProjects, { withFileTypes: true })) {
+      if (!e.isDirectory()) continue;
+      const files = jsonlFiles(join16(claudeProjects, e.name), 0);
+      if (!files.length) continue;
+      history.claude = true;
+      files.sort((a, b) => b.mtime - a.mtime);
+      let cwd = null;
+      for (const f of files.slice(0, 3)) {
+        cwd = cwdFromTranscript(f.file);
+        if (cwd) break;
+      }
+      if (cwd) add(cwd, "claude", files[0].mtime, files.length);
+    }
+  } catch {
+  }
+  const codexSessions = jsonlFiles(join16(codexDir(), "sessions"), 4);
+  if (codexSessions.length) history.codex = true;
+  const perCwd = /* @__PURE__ */ new Map();
+  for (const f of codexSessions) {
+    const cwd = cwdFromTranscript(f.file);
+    if (!cwd) continue;
+    const cur = perCwd.get(cwd) ?? { mtime: 0, count: 0 };
+    cur.mtime = Math.max(cur.mtime, f.mtime);
+    cur.count += 1;
+    perCwd.set(cwd, cur);
+  }
+  for (const [cwd, v] of perCwd) add(cwd, "codex", v.mtime, v.count);
+  for (const p of codexTrustedPaths()) add(p, "codex", 0, 0, true);
+  let projects = [...byPath.values()];
+  let fromGitScan = false;
+  if (!projects.length) {
+    fromGitScan = true;
+    for (const repo of gitRepos()) {
+      let mtime = 0;
+      try {
+        mtime = statSync8(repo).mtimeMs;
+      } catch {
+      }
+      add(repo, "git", mtime, 0);
+    }
+    projects = [...byPath.values()];
+  }
+  projects.sort(
+    (a, b) => Number(b.sources.length > 1) - Number(a.sources.length > 1) || Number(b.trusted) - Number(a.trusted) || b.lastUsed - a.lastUsed || b.sessions - a.sessions
+  );
+  return {
+    root: flyspaceRoot(),
+    runners: detectRunners(history),
+    projects,
+    fromGitScan
+  };
+}
+function uniqueChannelName(raw, taken) {
+  const base = raw.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "project";
+  let name = base;
+  for (let i = 2; taken.has(name); i += 1) name = `${base}-${i}`;
+  taken.add(name);
+  return name;
+}
+function makeLink(target, linkPath) {
+  symlinkSync(target, linkPath, process.platform === "win32" ? "junction" : "dir");
+}
+function linkProjectFolders(slug, items) {
+  if (!/^[a-z0-9][a-z0-9-]*$/.test(slug)) throw new Error(`invalid workspace slug: ${slug}`);
+  const dir = join16(flyspaceRoot(), slug);
+  mkdirSync6(dir, { recursive: true });
+  const results = [];
+  for (const item of items) {
+    if (!/^[a-z0-9][a-z0-9-]*$/.test(item.name)) throw new Error(`invalid channel name: ${item.name}`);
+    const dest = join16(dir, item.name);
+    let exists = true;
+    try {
+      lstatSync2(dest);
+    } catch {
+      exists = false;
+    }
+    if (!exists) {
+      if (item.path) {
+        const target = resolve6(item.path);
+        if (!statSync8(target).isDirectory()) throw new Error(`not a directory: ${target}`);
+        makeLink(target, dest);
+      } else {
+        mkdirSync6(dest, { recursive: true });
+      }
+    }
+    results.push({ name: item.name, cwd: `${slug}/${item.name}` });
+  }
+  return results;
+}
+// src/dashboard/onboarding-routes.ts
+var MAX_FOLDERS = 20;
+function createOnboardingRouter(agent) {
+  const app = new Hono25();
+  app.get("/scan", async (c) => {
+    const ctx = await resolveAuthContext(c);
+    if (ctx?.role !== "admin") return c.json({ error: "admin access required" }, 403);
+    const scan = await agent.scanOnboarding?.();
+    if (!scan) return c.json({ error: "host offline" }, 503);
+    return c.json(scan);
+  });
+  app.post("/channels", async (c) => {
+    const ctx = await resolveAuthContext(c);
+    if (ctx?.role !== "admin") return c.json({ error: "admin access required" }, 403);
+    const body = await c.req.json().catch(() => ({}));
+    const runner = body["agent"];
+    const folders = Array.isArray(body["folders"]) ? body["folders"].filter((f) => typeof f === "string" && f.length > 0) : [];
+    if (folders.length > MAX_FOLDERS) return c.json({ error: `at most ${MAX_FOLDERS} folders` }, 400);
+    const scan = await agent.scanOnboarding?.();
+    if (!scan) return c.json({ error: "host offline" }, 503);
+    const offered = new Map(scan.projects.map((p) => [p.path, p]));
+    const unknown = folders.find((f) => !offered.has(f));
+    if (unknown) return c.json({ error: "folder was not offered by the scan" }, 400);
+    const taken = new Set(getProfileChannelRegistry().map((ch) => ch.name));
+    const items = [];
+    if (!taken.has("general")) {
+      taken.add("general");
+      items.push({ name: "general" });
+    }
+    for (const path of folders) items.push({ name: uniqueChannelName(offered.get(path).name, taken), path });
+    const linked = await agent.linkProjectFolders?.(getProfile(), items);
+    if (!linked) return c.json({ error: "host offline" }, 503);
+    if (runner === "claude" || runner === "codex") {
+      await agent.saveLocalDashboardSettings?.({ providers: [{ runner }] });
+    }
+    const created = [];
+    for (const l of linked) created.push(await createChannel({ name: l.name, cwd: l.cwd }));
+    return c.json({ channels: created.map((ch) => ({ id: ch.id, name: ch.name })) }, 201);
+  });
+  return app;
+}
 // src/dashboard/host-status-signal.ts
 var HOST_STATUS_CHANNEL = "host-status";
 var channelReady = null;
 function getHostStatusChannel() {
-  channelReady ??= new Promise((resolve7) => {
+  channelReady ??= new Promise((resolve8) => {
     const channel = getSupabaseClient().channel(HOST_STATUS_CHANNEL);
     channel.subscribe((state) => {
-      if (state === "SUBSCRIBED") resolve7(channel);
+      if (state === "SUBSCRIBED") resolve8(channel);
     });
   });
   return channelReady;
@@ -12630,10 +12962,10 @@ async function resolveThreadLinks(sessions) {
 function registerDataRoutes(api, agent = {}) {
   api.get("/profile", (c) => c.json({ profile: getProfile() }));
   api.get("/host/status", async (c) => {
-    const online = agent.isHostOnline?.() ?? false;
+    const online = agent.isHostOnline?.(getProfile()) ?? false;
     if (!online) {
-      const failure = agent.getHostOfflineReason?.() ?? null;
-      return c.json({ online: false, reason: failure?.reason ?? null, since: failure?.since ?? null });
+      const failure2 = agent.getHostOfflineReason?.() ?? null;
+      return c.json({ online: false, reason: failure2?.reason ?? null, since: failure2?.since ?? null });
     }
     const auth = c.get("auth");
     const paused = await getAgentPaused(auth.workspaceId);
@@ -12678,6 +13010,7 @@ function registerDataRoutes(api, agent = {}) {
     return c.json(await buildChannelUsageReport(c.req.param("id"), days, channelLabel));
   });
   api.route("/channels", createDocShareWriteRouter(agent));
+  api.route("/onboarding", createOnboardingRouter(agent));
   api.route("/channels", createChannelMembersRouter());
   api.route("/docs", createDocShareListRouter());
   api.get("/users", (c) => c.json({ users: listActiveUsers() }));
@@ -12690,7 +13023,7 @@ function registerDataRoutes(api, agent = {}) {
         runs.set(name, { lastRun: run3.lastRunAt.toISOString(), lastStatus: run3.lastStatus });
       }
     } catch {
-      if (existsSync22(paths.DB_FILE)) {
+      if (existsSync23(paths.DB_FILE)) {
         const runStore = new AutomationRunStore(paths.DB_FILE);
         try {
           for (const run3 of runStore.listLastRuns()) {
@@ -12752,7 +13085,7 @@ function registerDataRoutes(api, agent = {}) {
       const runs = (await recentRunsForWorkspace(getProfile(), 200)).map(toResponse5);
       return c.json({ runs });
     } catch {
-      if (!existsSync22(paths.DB_FILE)) return c.json({ runs: [] });
+      if (!existsSync23(paths.DB_FILE)) return c.json({ runs: [] });
       const runStore = new AutomationRunStore(paths.DB_FILE);
       try {
         const runs = runStore.listRuns(200).map(toResponse5);
@@ -12799,7 +13132,6 @@ function registerDataRoutes(api, agent = {}) {
   });
   api.route("/mcp", createMcpOAuthRouter());
   api.route("/mcp", createMcpRouter());
-  api.route("/output-styles", createOutputStylesRouter());
   api.get("/agent-pause", async (c) => {
     const auth = c.get("auth");
     return c.json({ paused: await getAgentPaused(auth.workspaceId) });
@@ -12868,7 +13200,7 @@ function registerDataRoutes(api, agent = {}) {
     } catch {
       latest = /* @__PURE__ */ new Map();
       totals = /* @__PURE__ */ new Map();
-      if (existsSync22(paths.DB_FILE)) {
+      if (existsSync23(paths.DB_FILE)) {
         const usageStore = new UsageStore(paths.DB_FILE);
         try {
           latest = usageStore.latestByThread(threadTsList);
@@ -12923,28 +13255,28 @@ function registerDataRoutes(api, agent = {}) {
 // src/dashboard/device-auth-routes.ts
 import { verify } from "crypto";
 import { getConnInfo } from "@hono/node-server/conninfo";
-import { Hono as Hono25 } from "hono";
+import { Hono as Hono26 } from "hono";
 // src/dashboard/agent-bridge.ts
 import { randomBytes as randomBytes7, randomUUID as randomUUID3, sign as signRaw, verify as verifyRaw } from "crypto";
-import { existsSync as existsSync25, readFileSync as readFileSync14 } from "fs";
+import { existsSync as existsSync26, readFileSync as readFileSync15 } from "fs";
 import dotenv from "dotenv";
 import { WebSocket, WebSocketServer } from "ws";
 // src/dashboard/host-identity.ts
 import { createPrivateKey, createPublicKey, generateKeyPairSync } from "crypto";
-import { existsSync as existsSync23, mkdirSync as mkdirSync6, readFileSync as readFileSync11, writeFileSync as writeFileSync7 } from "fs";
-import { dirname as dirname5, join as join16 } from "path";
+import { existsSync as existsSync24, mkdirSync as mkdirSync7, readFileSync as readFileSync12, writeFileSync as writeFileSync7 } from "fs";
+import { dirname as dirname5, join as join17 } from "path";
 function hostPrivateKeyPath() {
-  return process.env["FLYSPACE_HOST_KEY_PATH"] || join16(paths.BASE_CONFIG_DIR, "host.key");
+  return process.env["FLYSPACE_HOST_KEY_PATH"] || join17(paths.BASE_CONFIG_DIR, "host.key");
 }
 function loadHostPrivateKey(path = hostPrivateKeyPath()) {
-  if (!existsSync23(path)) {
+  if (!existsSync24(path)) {
     throw new Error(
       `No Host identity at ${path}. Run \`pnpm run generate-host-key\` on this machine, then set FLYSPACE_HOST_PUBLIC_KEY on the Data process to the printed public key.`
     );
   }
-  return createPrivateKey(readFileSync11(path, "utf8"));
+  return createPrivateKey(readFileSync12(path, "utf8"));
 }
 function loadHostPublicKey() {
   const b64 = process.env["FLYSPACE_HOST_PUBLIC_KEY"];
@@ -13146,8 +13478,8 @@ async function userEmail(userId) {
 // src/auth/device-auth.ts
 import { createPrivateKey as createPrivateKey2, createPublicKey as createPublicKey3, generateKeyPairSync as generateKeyPairSync2, sign } from "crypto";
-import { existsSync as existsSync24, mkdirSync as mkdirSync7, readFileSync as readFileSync12, rmSync as rmSync4, writeFileSync as writeFileSync8 } from "fs";
-import { dirname as dirname6, join as join17 } from "path";
+import { existsSync as existsSync25, mkdirSync as mkdirSync8, readFileSync as readFileSync13, rmSync as rmSync4, writeFileSync as writeFileSync8 } from "fs";
+import { dirname as dirname6, join as join18 } from "path";
 var DEFAULT_API_URL = "https://app.flyspace.ai";
 var EXPIRY_SKEW_MS = 6e4;
 var AuthApiError = class extends Error {
@@ -13161,35 +13493,35 @@ function apiUrl() {
   return (process.env["FLYSPACE_API_URL"] || DEFAULT_API_URL).replace(/\/+$/, "");
 }
 function deviceKeyPath() {
-  return join17(paths.BASE_CONFIG_DIR, "device.key");
+  return join18(paths.BASE_CONFIG_DIR, "device.key");
 }
 function credentialsPath() {
-  return join17(paths.BASE_CONFIG_DIR, "credentials.json");
+  return join18(paths.BASE_CONFIG_DIR, "credentials.json");
 }
 function ensureDeviceKey(path = deviceKeyPath()) {
   let created = false;
-  if (!existsSync24(path)) {
+  if (!existsSync25(path)) {
     const { privateKey: privateKey2 } = generateKeyPairSync2("ed25519");
-    mkdirSync7(dirname6(path), { recursive: true });
+    mkdirSync8(dirname6(path), { recursive: true });
     writeFileSync8(path, privateKey2.export({ type: "pkcs8", format: "pem" }), { mode: 384 });
     created = true;
   }
-  const privateKey = createPrivateKey2(readFileSync12(path, "utf8"));
+  const privateKey = createPrivateKey2(readFileSync13(path, "utf8"));
   const publicKeyBase64 = createPublicKey3(privateKey).export({ type: "spki", format: "der" }).toString(
     "base64"
   );
   return { privateKey, publicKeyBase64, created };
 }
 function loadCredentials(path = credentialsPath()) {
-  if (!existsSync24(path)) return null;
+  if (!existsSync25(path)) return null;
   try {
-    return JSON.parse(readFileSync12(path, "utf8"));
+    return JSON.parse(readFileSync13(path, "utf8"));
   } catch {
     return null;
   }
 }
 function saveCredentials(creds, path = credentialsPath()) {
-  mkdirSync7(dirname6(path), { recursive: true });
+  mkdirSync8(dirname6(path), { recursive: true });
   writeFileSync8(path, `${JSON.stringify(creds, null, 2)}
 `, { mode: 384 });
 }
@@ -13313,7 +13645,7 @@ async function getAccessToken() {
 // src/dashboard/doc-share-publisher.ts
 import { randomBytes as randomBytes6 } from "crypto";
-import { readFileSync as readFileSync13, statSync as statSync8 } from "fs";
+import { readFileSync as readFileSync14, statSync as statSync9 } from "fs";
 import { extname as extname2, posix } from "path";
 import { CopyObjectCommand, PutObjectCommand as PutObjectCommand5 } from "@aws-sdk/client-s3";
@@ -13493,13 +13825,13 @@ async function buildSnapshot(cwd, sourcePath, shareId) {
   if (!kind) return { status: "unsupported" };
   let stat;
   try {
-    stat = statSync8(abs);
+    stat = statSync9(abs);
   } catch {
     return { status: "not-found" };
   }
   if (!stat.isFile()) return { status: "not-found" };
   if (stat.size > MAX_CONTENT_BYTES2) return { status: "too-large" };
-  const source = readFileSync13(abs, "utf8");
+  const source = readFileSync14(abs, "utf8");
   const title = extractTitle(abs, kind === "html" ? "html" : "md");
   const docDir = sourcePath.includes("/") ? sourcePath.slice(0, sourcePath.lastIndexOf("/")) : "";
   const client2 = getR2Client();
@@ -13569,8 +13901,8 @@ async function buildSnapshot(cwd, sourcePath, shareId) {
       const budget = Math.min(MAX_INLINE_BYTES, MAX_TOTAL_INLINE_BYTES - inlinedBytes);
       let text = null;
       try {
-        const size = statSync8(docAbs).size;
-        if (size <= budget) text = readFileSync13(docAbs, "utf8");
+        const size = statSync9(docAbs).size;
+        if (size <= budget) text = readFileSync14(docAbs, "utf8");
       } catch {
         continue;
       }
@@ -13586,8 +13918,8 @@ async function buildSnapshot(cwd, sourcePath, shareId) {
     if (!resolved2) continue;
     let body;
     try {
-      if (statSync8(resolved2.abs).size > MAX_ASSET_BYTES) continue;
-      body = readFileSync13(resolved2.abs);
+      if (statSync9(resolved2.abs).size > MAX_ASSET_BYTES) continue;
+      body = readFileSync14(resolved2.abs);
     } catch {
       continue;
     }
@@ -13661,11 +13993,15 @@ async function publishDocShare(input2) {
 // src/dashboard/agent-bridge.ts
 var HOST_SOCKET_PATH = "/internal/host-socket";
 var DEFAULT_DATA_API_PORT = 4757;
+var HOSTED_DATA_SOCKET_ORIGIN = "wss://flyspace-api.fly.dev";
 function dataSocketUrl() {
-  return process.env["FLYSPACE_DATA_SOCKET_URL"] || `ws://127.0.0.1:${process.env["FLYSPACE_DATA_API_PORT"] ?? DEFAULT_DATA_API_PORT}${HOST_SOCKET_PATH}`;
+  const explicit = process.env["FLYSPACE_DATA_SOCKET_URL"];
+  if (explicit) return explicit;
+  if (!process.env["FLYSPACE_DATA_API_PORT"] && loadCredentials()) return `${HOSTED_DATA_SOCKET_ORIGIN}${HOST_SOCKET_PATH}`;
+  return `ws://127.0.0.1:${process.env["FLYSPACE_DATA_API_PORT"] ?? DEFAULT_DATA_API_PORT}${HOST_SOCKET_PATH}`;
 }
 function listLocalSessions() {
-  if (!existsSync25(paths.DB_FILE)) return [];
+  if (!existsSync26(paths.DB_FILE)) return [];
   const store = new SessionStore(paths.DB_FILE);
   try {
     return store.listSessions();
@@ -13691,6 +14027,8 @@ function localAgentCallbacks(chatAgent) {
     saveLocalDashboardSettings: (patch) => saveDashboardSettings(patch),
     writeSkill: (ref, write) => writeSkillAndSync(ref, write),
     listSessions: () => listLocalSessions(),
+    scanOnboarding: () => scanOnboarding(),
+    linkProjectFolders: (slug, items) => linkProjectFolders(slug, items),
     isHostOnline: () => true
   };
 }
@@ -13699,7 +14037,7 @@ function buildHostConfigSnapshot() {
   const snapshot2 = {};
   for (const profile of listProfiles()) {
     snapshot2[profile] = runWithProfile(profile, () => ({
-      env: existsSync25(paths.CONFIG_FILE) ? dotenv.parse(readFileSync14(paths.CONFIG_FILE, "utf-8")) : {},
+      env: existsSync26(paths.CONFIG_FILE) ? dotenv.parse(readFileSync15(paths.CONFIG_FILE, "utf-8")) : {},
       agentModel: loadDashboardSettings().agent
     }));
   }
@@ -13715,13 +14053,24 @@ var AUTH_TIMEOUT_MS = 5e3;
 var HEARTBEAT_INTERVAL_MS = 15e3;
 var HEARTBEAT_TIMEOUT_MS = HEARTBEAT_INTERVAL_MS * 2.5;
 var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-var activeHost = null;
-var activeHostScope = null;
+var hosts = /* @__PURE__ */ new Map();
 var pending = /* @__PURE__ */ new Map();
 var hostStatusListeners = /* @__PURE__ */ new Set();
 var lastAuthFailure = null;
-function isHostConnected() {
-  return activeHost !== null && activeHost.readyState === WebSocket.OPEN;
+function hostFor(profile) {
+  let legacy = null;
+  let scoped = null;
+  for (const [ws, scope] of hosts) {
+    if (ws.readyState !== WebSocket.OPEN) continue;
+    if (scope.workspaces === null) legacy = ws;
+    else if (scope.workspaces.includes(profile)) scoped = ws;
+  }
+  return scoped ?? legacy;
+}
+function isHostConnected(profile) {
+  if (profile) return hostFor(profile) !== null;
+  for (const ws of hosts.keys()) if (ws.readyState === WebSocket.OPEN) return true;
+  return false;
 }
 function getHostOfflineReason() {
   return lastAuthFailure;
@@ -13730,11 +14079,26 @@ function onHostStatusChange(listener) {
   hostStatusListeners.add(listener);
   return () => hostStatusListeners.delete(listener);
 }
-function setActiveHost(ws, scope = null) {
-  const was = activeHost !== null;
-  activeHost = ws;
-  activeHostScope = ws ? scope : null;
-  if (was !== (ws !== null)) for (const l of hostStatusListeners) l(ws !== null);
+function notifyHostStatus() {
+  const online = hosts.size > 0;
+  for (const l of hostStatusListeners) l(online);
+}
+function addHost(ws, scope) {
+  hosts.set(ws, scope);
+  notifyHostStatus();
+}
+function removeHost(ws) {
+  if (hosts.delete(ws)) notifyHostStatus();
+}
+function supersedeSameIdentity(scope, except) {
+  for (const [ws, other] of hosts) {
+    if (ws === except) continue;
+    const same = scope.deviceId ? other.deviceId === scope.deviceId : other.workspaces === null;
+    if (!same) continue;
+    console.log("[host-socket] new Host connection replacing the previous one");
+    removeHost(ws);
+    ws.close(1e3, "superseded");
+  }
 }
 async function markAgentConnected(slugs) {
   for (const slug of slugs) {
@@ -13747,20 +14111,27 @@ async function markAgentConnected(slugs) {
   }
 }
 function disconnectHostDevice(deviceId) {
-  if (activeHost && activeHostScope?.deviceId === deviceId) {
+  for (const [ws, scope] of hosts) {
+    if (scope.deviceId !== deviceId) continue;
     console.log(`[host-socket] closing connection for revoked device ${deviceId}`);
-    activeHost.close(1008, "device revoked");
-    setActiveHost(null);
+    removeHost(ws);
+    ws.close(1008, "device revoked");
   }
 }
-async function revalidateActiveDeviceScope() {
-  if (!activeHost || activeHostScope?.authPath !== "device" || !activeHostScope.deviceId) return;
-  const device = await getDevice(activeHostScope.deviceId);
-  if (!device || device.revokedAt) {
-    disconnectHostDevice(activeHostScope.deviceId);
-    return;
+async function revalidateDeviceScopes() {
+  const deviceIds = /* @__PURE__ */ new Set();
+  for (const scope of hosts.values()) {
+    if (scope.authPath === "device" && scope.deviceId) deviceIds.add(scope.deviceId);
+  }
+  for (const deviceId of deviceIds) {
+    const device = await getDevice(deviceId);
+    if (!device || device.revokedAt) {
+      disconnectHostDevice(deviceId);
+      continue;
+    }
+    const workspaces = (await listDeviceWorkspaces(device)).map((w) => w.slug);
+    for (const scope of hosts.values()) if (scope.deviceId === deviceId) scope.workspaces = workspaces;
   }
-  activeHostScope.workspaces = (await listDeviceWorkspaces(device)).map((w) => w.slug);
 }
 function attachHostSocket(server) {
   const wss = new WebSocketServer({ server, path: HOST_SOCKET_PATH });
@@ -13775,7 +14146,7 @@ function attachHostSocket(server) {
       alive.delete(ws);
       ws.ping();
     }
-    void revalidateActiveDeviceScope();
+    void revalidateDeviceScopes();
   }, HEARTBEAT_INTERVAL_MS);
   heartbeat.unref();
   server.on("close", () => clearInterval(heartbeat));
@@ -13802,12 +14173,9 @@ function attachHostSocket(server) {
             ws.close(1008, "bad signature");
             return;
           }
-          if (activeHost && activeHost !== ws && activeHost.readyState === WebSocket.OPEN) {
-            console.log("[host-socket] new Host connection replacing the previous one");
-            activeHost.close(1e3, "superseded");
-          }
+          supersedeSameIdentity(scope, ws);
           lastAuthFailure = null;
-          setActiveHost(ws, scope);
+          addHost(ws, scope);
           send(ws, { type: "auth-ok" });
           console.log(`[host-socket] Host authenticated (authPath: ${scope.authPath})`);
           if (scope.workspaces) void markAgentConnected(scope.workspaces);
@@ -13827,34 +14195,32 @@ function attachHostSocket(server) {
     });
     ws.on("close", () => {
       clearTimeout(authTimer);
-      if (activeHost === ws) setActiveHost(null);
+      removeHost(ws);
     });
     ws.on("error", (err) => console.error("[host-socket] connection error:", err.message));
   });
   return wss;
 }
 function callHost(method, args) {
-  if (!activeHost || activeHost.readyState !== WebSocket.OPEN) {
-    console.error(`[host-socket] ${method} -> no Host connected`);
-    return Promise.resolve(null);
-  }
   const profile = getProfile();
-  if (activeHostScope && activeHostScope.workspaces !== null && !activeHostScope.workspaces.includes(profile)) {
-    console.error(`[host-socket] ${method} -> Host not scoped to workspace "${profile}"`);
+  const ws = hostFor(profile);
+  if (!ws) {
+    console.error(
+      isHostConnected() ? `[host-socket] ${method} -> not scoped to workspace "${profile}"` : `[host-socket] ${method} -> no Host connected`
+    );
     return Promise.resolve(null);
   }
   const id = randomUUID3();
-  const ws = activeHost;
-  return new Promise((resolve7) => {
+  return new Promise((resolve8) => {
     const timer2 = setTimeout(() => {
       pending.delete(id);
       console.error(`[host-socket] ${method} -> timed out`);
-      resolve7(null);
+      resolve8(null);
     }, CALL_TIMEOUT_MS);
     pending.set(id, {
       resolve: (value) => {
         clearTimeout(timer2);
-        resolve7(value);
+        resolve8(value);
       }
     });
     send(ws, { type: "call", id, method, profile, args });
@@ -13905,7 +14271,11 @@ function remoteAgentCallbacks() {
     // `null` (no Host connected) is passed through rather than defaulting to
     // `[]` — see listSessions's doc comment on AgentCallbacks.
     listSessions: () => callHost("listSessions", []),
-    isHostOnline: isHostConnected,
+    // Both need this machine's disk and CLI history, so `null` (no Host)
+    // surfaces as a 503 rather than an empty scan or a fake success.
+    scanOnboarding: () => callHost("scanOnboarding", []),
+    linkProjectFolders: (slug, items) => callHost("linkProjectFolders", [slug, items]),
+    isHostOnline: (profile) => isHostConnected(profile),
     getHostOfflineReason
   };
 }
@@ -14084,7 +14454,7 @@ async function bearerDevice(c) {
   return token ? deviceForAccessToken(token) : null;
 }
 function createDeviceAuthRouter() {
-  const app = new Hono25();
+  const app = new Hono26();
   app.post("/code", async (c) => {
     const body = await readBody(c);
     const publicKey = typeof body["public_key"] === "string" ? body["public_key"] : "";
@@ -14234,7 +14604,7 @@ function createDeviceAuthRouter() {
 // src/dashboard/api.ts
 function createApiRouter(agent = {}, mode = "all") {
-  const api = new Hono26();
+  const api = new Hono27();
   api.use("*", async (c, next) => {
     const known = await listKnownWorkspaces();
     const fromHost = profileFromHost(trustedHost(c), known);
@@ -14341,7 +14711,7 @@ function createApiRouter(agent = {}, mode = "all") {
 }
 // src/dashboard/app-icon-routes.ts
-import { Hono as Hono27 } from "hono";
+import { Hono as Hono28 } from "hono";
 var NEUTRAL_MANIFEST = {
   id: "/",
   name: "Flyspace",
@@ -14379,7 +14749,7 @@ async function withResolvedProfile2(c, next) {
   return profile ? runWithProfile(profile, () => next()) : next();
 }
 function createAppIconRouter() {
-  const app = new Hono27();
+  const app = new Hono28();
   app.get("/manifest.json", withResolvedProfile2, async (c) => {
     if (!await resolvedProfileHost(c)) return c.json(NEUTRAL_MANIFEST);
     const profile = getProfile();
@@ -14419,7 +14789,7 @@ function pngResponse(c, png) {
 }
 // src/dashboard/stripe-routes.ts
-import { Hono as Hono28 } from "hono";
+import { Hono as Hono29 } from "hono";
 function planStatusFor(status) {
   const known = ["trialing", "active", "paused", "canceled"];
   return known.includes(status) ? status : null;
@@ -14462,7 +14832,7 @@ async function handleCardAdded(session) {
   }
 }
 function createStripeWebhookRouter() {
-  const stripeRouter = new Hono28();
+  const stripeRouter = new Hono29();
   stripeRouter.post("/webhook", async (c) => {
     const secret = process.env["STRIPE_WEBHOOK_SECRET"];
     const signature = c.req.header("stripe-signature");
@@ -14573,14 +14943,14 @@ function startHostStatusBroadcast() {
 // src/dashboard/server.ts
 var DEFAULT_DASHBOARD_PORT = 4747;
-var WEB_DIST = join18(paths.PACKAGE_ROOT, "web", "dist");
+var WEB_DIST = join19(paths.PACKAGE_ROOT, "web", "dist");
 var DEFAULT_DASHBOARD_HOST = "127.0.0.1";
 async function findFreePort(start, host = DEFAULT_DASHBOARD_HOST, attempts = 50) {
   for (let port = start; port < start + attempts; port++) {
-    const free = await new Promise((resolve7) => {
+    const free = await new Promise((resolve8) => {
       const probe2 = createServer();
-      probe2.once("error", () => resolve7(false));
-      probe2.once("listening", () => probe2.close(() => resolve7(true)));
+      probe2.once("error", () => resolve8(false));
+      probe2.once("listening", () => probe2.close(() => resolve8(true)));
       probe2.listen(port, host);
     });
     if (free) return port;
@@ -14607,7 +14977,7 @@ async function startDashboardServer(preferredPort = DEFAULT_DASHBOARD_PORT, host
   if (servesHost) installUsageRecording();
   const stopSkillSync = servesHost ? installSkillSync(listProfiles()) : () => {
   };
-  const app = new Hono29();
+  const app = new Hono30();
   app.use("*", async (c, next) => {
     await next();
     if (c.req.path.startsWith("/assets/")) {
@@ -14630,9 +15000,9 @@ async function startDashboardServer(preferredPort = DEFAULT_DASHBOARD_PORT, host
     app.route("/", createAppIconRouter());
     app.use("/*", serveStatic({ root: WEB_DIST }));
     app.get("/assets/*", (c) => c.text("stale asset \u2014 reload for the current build", 404));
-    const spaFallback = serveStatic({ path: join18(WEB_DIST, "index.html") });
+    const spaFallback = serveStatic({ path: join19(WEB_DIST, "index.html") });
     app.get("*", (c, next) => {
-      if (!existsSync26(join18(WEB_DIST, "index.html"))) {
+      if (!existsSync27(join19(WEB_DIST, "index.html"))) {
         return c.text(
           `Dashboard UI build missing (${WEB_DIST}).
 Run \`pnpm --dir web build\` (or \`pnpm --dir web dev\`).
@@ -14669,7 +15039,7 @@ The JSON API is live under /api.`,
 // src/slack/image-uploader.ts
 import { readFile } from "fs/promises";
-import { basename as basename5 } from "path";
+import { basename as basename6 } from "path";
 import sharp6 from "sharp";
 var MAX_WIDTH = 800;
 async function uploadImage(client2, { channel, filePath, threadTs, text }) {
@@ -14678,7 +15048,7 @@ async function uploadImage(client2, { channel, filePath, threadTs, text }) {
   const base = {
     channel_id: channel,
     file: resized,
-    filename: basename5(filePath),
+    filename: basename6(filePath),
     ...text ? { initial_comment: text } : {}
   };
   const result = await client2.filesUploadV2(threadTs ? { ...base, thread_ts: threadTs } : base);
@@ -15050,7 +15420,7 @@ async function threadReplies(client2, nameOrId, ts2) {
 async function postMessage(client2, args) {
   const channelArg = getArg2(args, "--channel");
   const textFilePath = getArg2(args, "--text-file");
-  const text = textFilePath ? readFileSync15(textFilePath, "utf8") : getArg2(args, "--text");
+  const text = textFilePath ? readFileSync16(textFilePath, "utf8") : getArg2(args, "--text");
   const threadTs = getArg2(args, "--thread");
   const markdown = args.includes("--markdown");
   const broadcast = args.includes("--broadcast") && Boolean(threadTs);
@@ -15140,22 +15510,22 @@ function mask(token) {
 }
 function hasClaudeBinary() {
   try {
-    execFileSync2("claude", ["--version"], { stdio: "ignore" });
+    execFileSync3("claude", ["--version"], { stdio: "ignore" });
     return true;
   } catch {
     return false;
   }
 }
 function defaultClaudeConfigDir() {
-  return process.env.CLAUDE_CONFIG_DIR || resolve6(homedir7(), ".claude");
+  return process.env.CLAUDE_CONFIG_DIR || resolve7(homedir8(), ".claude");
 }
-function hasClaudeCredentials(configDir) {
-  if (existsSync27(resolve6(configDir, ".credentials.json"))) {
+function hasClaudeCredentials(configDir2) {
+  if (existsSync28(resolve7(configDir2, ".credentials.json"))) {
     return true;
   }
   if (process.platform === "darwin") {
     try {
-      execFileSync2(
+      execFileSync3(
         "security",
         ["find-generic-password", "-s", "Claude Code-credentials"],
         { stdio: "ignore" }
@@ -15187,7 +15557,7 @@ async function ensureClaudeCodeReady() {
     console.log("  Flyspace spawns Claude Code as a subprocess. Without credentials, the bot");
     console.log("  will prompt /login inside Slack at runtime and you cannot complete the");
     console.log("  browser sign-in from there.\n");
-    if (claudeConfigDir !== resolve6(homedir7(), ".claude")) {
+    if (claudeConfigDir !== resolve7(homedir8(), ".claude")) {
       console.log("  Tip: run with the same CLAUDE_CONFIG_DIR you use for this Claude Code install:");
       console.log(`    \x1B[1mCLAUDE_CONFIG_DIR=${claudeConfigDir} claude\x1B[0m
 `);
@@ -15206,8 +15576,8 @@ async function ensureClaudeCodeReady() {
   return { claudeConfigDir };
 }
 function getManifestYaml(botName) {
-  const manifestPath = resolve6(paths.PACKAGE_ROOT, "slack-app-manifest.yml");
-  const raw = readFileSync15(manifestPath, "utf-8");
+  const manifestPath = resolve7(paths.PACKAGE_ROOT, "slack-app-manifest.yml");
+  const raw = readFileSync16(manifestPath, "utf-8");
   return raw.replace(/name: Custie/g, `name: ${botName}`);
 }
 async function stepPersonalise() {
@@ -15420,7 +15790,7 @@ async function stepBrowserTokens(botName) {
     })
   ));
   const DEBUG = process.argv.includes("--debug");
-  const USER_DATA_DIR = resolve6(tmpdir3(), "custie-playwright-profile");
+  const USER_DATA_DIR = resolve7(tmpdir3(), "custie-playwright-profile");
   let context;
   try {
     log4("Opening browser \u2014 a Slack login page will appear.\n");
@@ -15452,14 +15822,14 @@ async function stepBrowserTokens(botName) {
     const appLink = page2.locator('a[href*="/apps/A"]').first();
     const hasExistingApp = await appLink.isVisible({ timeout: 3e3 }).catch(() => false);
     if (hasExistingApp) {
-      const tokenPromise = new Promise((resolve7) => {
+      const tokenPromise = new Promise((resolve8) => {
         page2.on("request", (req) => {
           if (token) return;
           const postData = req.postData() || "";
           const match = postData.match(/xoxc-[a-f0-9-]+/);
           if (match) {
             token = match[0];
-            resolve7(token);
+            resolve8(token);
           }
         });
       });
@@ -15510,7 +15880,7 @@ async function stepBrowserTokens(botName) {
     log4("Almost done! The browser will now open an install page.\n");
     console.log('  \x1B[1mPlease click "Install to Workspace", then click "Allow".\x1B[0m\n');
     await page2.goto(installUrl);
-    const installPage = await new Promise((resolve7, reject) => {
+    const installPage = await new Promise((resolve8, reject) => {
       let settled = false;
       let interval;
       let timeout;
@@ -15523,7 +15893,7 @@ async function stepBrowserTokens(botName) {
       };
       const checkUrl = (p) => {
         if (p.url().includes("install-on-team?success=1")) {
-          finish(() => resolve7(p));
+          finish(() => resolve8(p));
         }
       };
       context.on("page", (newPage) => {
@@ -15582,7 +15952,7 @@ async function stepBrowserTokens(botName) {
     try {
       const pages = context?.pages();
       if (pages?.[0]) {
-        const screenshotPath = resolve6(paths.PACKAGE_ROOT, "setup-error.png");
+        const screenshotPath = resolve7(paths.PACKAGE_ROOT, "setup-error.png");
         await pages[0].screenshot({ path: screenshotPath, fullPage: true });
         warn4(`Screenshot saved to: ${screenshotPath}`);
       }
@@ -15638,10 +16008,10 @@ function printNextSteps() {
   console.log("     Run \x1B[1mflyspace install\x1B[0m\n");
 }
 function copyDefaultPrompt(botName) {
-  if (!existsSync27(paths.PROMPT_FILE)) {
-    const defaultPrompt = resolve6(paths.PACKAGE_ROOT, "system.default.md");
-    if (existsSync27(defaultPrompt)) {
-      const content = readFileSync15(defaultPrompt, "utf-8").replace(/\{\{botName\}\}/g, botName);
+  if (!existsSync28(paths.PROMPT_FILE)) {
+    const defaultPrompt = resolve7(paths.PACKAGE_ROOT, "system.default.md");
+    if (existsSync28(defaultPrompt)) {
+      const content = readFileSync16(defaultPrompt, "utf-8").replace(/\{\{botName\}\}/g, botName);
       writeFileSync9(paths.PROMPT_FILE, content);
       success4(`Default prompt copied to ${paths.PROMPT_FILE}`);
     }
@@ -15654,7 +16024,7 @@ async function runSlackSetup(args) {
     const prereq = await ensureClaudeCodeReady();
     if (!prereq) return;
     const { claudeConfigDir } = prereq;
-    if (existsSync27(paths.CONFIG_FILE)) {
+    if (existsSync28(paths.CONFIG_FILE)) {
       const reconfigure = await confirm({
         message: `Config already exists at ${paths.CONFIG_FILE}. Reconfigure?`,
         default: false
@@ -16001,9 +16371,9 @@ async function runMcpCmd(args) {
 // src/commands/dashboard.ts
 import { spawn as spawn5, spawnSync } from "child_process";
-import { existsSync as existsSync28 } from "fs";
+import { existsSync as existsSync29 } from "fs";
 import { platform as platform6 } from "os";
-import { join as join19 } from "path";
+import { join as join20 } from "path";
 function flagValue(args, name) {
   const eq = args.find((a) => a.startsWith(`--${name}=`));
   if (eq) return eq.slice(`--${name}=`.length);
@@ -16018,7 +16388,7 @@ function openBrowser(url) {
   }
 }
 function ensureWebBuild() {
-  if (existsSync28(join19(paths.PACKAGE_ROOT, "web", "dist", "index.html"))) return;
+  if (existsSync29(join20(paths.PACKAGE_ROOT, "web", "dist", "index.html"))) return;
   console.log("  web/dist missing \u2014 building the dashboard UI (pnpm --dir web build)...");
   const result = spawnSync("pnpm", ["--dir", "web", "build"], {
     cwd: paths.PACKAGE_ROOT,
@@ -16066,7 +16436,7 @@ async function runDashboard(args) {
 }
 // src/commands/workspace.ts
-import { existsSync as existsSync29, mkdirSync as mkdirSync8, writeFileSync as writeFileSync10 } from "fs";
+import { existsSync as existsSync30, mkdirSync as mkdirSync9, writeFileSync as writeFileSync10 } from "fs";
 var USAGE5 = `
   Usage: flyspace workspace <subcommand> [options]
@@ -16141,7 +16511,7 @@ function provisionLocal(botName) {
   ensureDirs();
   console.log(`  config dir ready (${paths.CONFIG_DIR})`);
   console.log(`  data dir ready (${paths.DATA_DIR})`);
-  if (existsSync29(paths.CONFIG_FILE)) {
+  if (existsSync30(paths.CONFIG_FILE)) {
     console.log("  config.env exists");
   } else {
     writeFileSync10(paths.CONFIG_FILE, `BOT_NAME=${botName}
@@ -16158,8 +16528,8 @@ async function provisionChannels(specs) {
       continue;
     }
     const cwd = expandPath(spec.cwd);
-    if (!existsSync29(cwd)) {
-      mkdirSync8(cwd, { recursive: true });
+    if (!existsSync30(cwd)) {
+      mkdirSync9(cwd, { recursive: true });
       console.log(`  created cwd ${cwd}`);
     }
     await createChannel({ name: spec.name, cwd, position: index });
@@ -16664,7 +17034,7 @@ async function main() {
       break;
     case "-v":
     case "--version":
-      printRaw("0.1.0");
+      printRaw("0.1.1");
       break;
     case "-h":
     case "--help":