# Owner access and reviews

Use `owner.mjs` for owner work without the dashboard. This covers workspace selection and grants, as well as terms and pending reviews. Access remains admission-gated.

## Sign in

[Install the skill](/docs/guides/quickstart.md) and set `BARUA_SKILL` to its directory. Follow [Sign in privately](/skills/barua-setup/references/owner.md#sign-in-privately) to create a private credentials input and session file. Use the documented `login` command; never pass a password as a command-line value.

With `BARUA_OWNER_SESSION_FILE` configured:

```sh
node "$BARUA_SKILL/scripts/owner.mjs" workspaces
```

Success returns the workspaces this account can access. Select the intended workspace using the reference's `workspace-select` procedure before workspace changes. A session refresh does not substitute for checking current membership.

## Terms and grants

Read [Admission, workspaces and terms](/skills/barua-setup/references/owner.md#admission-workspaces-and-terms) for the current legal version and admission state. The owner must explicitly accept the applicable terms. An agent must not accept them as a setup shortcut.

Read [Grants, reviews and email controls](/skills/barua-setup/references/owner.md#grants-reviews-and-email-controls) before creating a management connection. Grant only the required scopes and preserve the owner's checkpoints. Save secrets through the helper's private output mechanism.

## Review a pending request

```sh
node "$BARUA_SKILL/scripts/owner.mjs" reviews
```

Fetch `review-context` for the selected request before deciding. Approval must use its current input hash and policy version. A changed request needs a new review; never approve a stale copy.

Approval records the decision. It does not resume the management operation. Read the operation's current status and follow its allowed next step after approval. See [Recover a blocked task](/docs/guides/troubleshooting.md).

## Other owner work

[Recovery and team](/skills/barua-setup/references/owner.md#recovery-and-team) covers invitations and account recovery. [Workspace closure](/docs/guides/workspace-closure.md) and [account deletion](/docs/guides/account-deletion.md) have separate confirmation and retention rules.