* refactor(repo): move OpenWork apps into apps and ee layout
Rebase the monorepo layout migration onto the latest dev changes so the moved app, desktop, share, and cloud surfaces keep working from their new paths. Carry the latest deeplink, token persistence, build, Vercel, and docs updates forward to avoid stale references and broken deploy tooling.
* chore(repo): drop generated desktop artifacts
Ignore the moved Tauri target and sidecar paths so local cargo checks do not pollute the branch. Remove the accidentally committed outputs from the repo while keeping the layout migration intact.
* fix(release): drop built server cli artifact
Stop tracking the locally built apps/server/cli binary so generated server outputs do not leak into commits. Also update the release workflow to check the published scoped package name for @openwork/server before deciding whether npm publish is needed.
* fix(workspace): add stable CLI bin wrappers
Point the server and router package bins at committed wrapper scripts so workspace installs can create shims before dist outputs exist. Keep the wrappers compatible with built binaries and source checkouts to avoid Vercel install warnings without changing runtime behavior.
* fix(desktop): forward warm deeplinks to running app
* chore(desktop): log warm deeplink delivery for h1
* build(desktop): update lockfile for single-instance plugin
* refactor(app): route deeplinks through a bootstrap bridge
* feat(desktop): hand warm deeplinks to the app bridge
* fix(desktop): use opened events as the deeplink source
* fix(app): preserve repeated shared deeplinks
* chore(app): remove deeplink debug instrumentation
* fix(desktop): gate opened deeplinks to macos
* Persist orchestrator remote tokens across restarts
Store the CLI OpenWork collaborator token, owner token, host token, and port per workspace so remote clients can reconnect after the orchestrator restarts without re-copying credentials.
* Add orchestrator token persistence test
Cover the CLI restart path by starting the built orchestrator twice with the same data dir and asserting the collaborator token, owner token, host token, and port stay stable.
* fix(web): stabilize Den onboarding flow with app routes
* fix(web): apply storybook provisioning layout
* fix(web): simplify Den dashboard chrome
* fix(web): prioritize mobile Den web launch
* fix(web): wrap worker controls in progressive disclosure
Keep the worker rename step focused on small screens, and point the Den Docker services at their built entrypoints so the onboarding flow can be verified end to end.
Preserve provider auth method indices so OpenWork can launch the exact OAuth flow returned by OpenCode, including OpenAI's headless device flow. Hide OpenAI OAuth options on web deployments where that setup should stay API-key only.
