@dotobokuri/fleet-cli 1.9.0 → 1.10.0

package/dist/index.js

@@ -29321,6 +29321,7 @@ __export(typebox_exports, {
 
 // ../../packages/fleet-carriers/dist/index.js
 init_dist2();
+import path23 from "path";
 init_dist2();
 init_dist();
 var __defProp2 = Object.defineProperty;
@@ -29515,11 +29516,11 @@ function sanitizeCarriersMap(value) {
   return result;
 }
 var TASK_FORCE_POOL_KEY_PATTERN = /(?:^|:)taskforce:[^:]+:([^:]+)$/;
-function buildCarrierExecutorPoolKey(carrierId, originSessionId) {
-  return namespacePoolKey(carrierId, originSessionId);
+function buildCarrierExecutorPoolKey(carrierId, originSessionId, cwd) {
+  return namespacePoolKey(carrierId, joinSessionCwdNamespace(originSessionId, cwd));
 }
-function buildTaskForceExecutorPoolKey(carrierId, cliType, originSessionId) {
-  return namespacePoolKey(buildTaskForceRunId(carrierId, cliType), originSessionId);
+function buildTaskForceExecutorPoolKey(carrierId, cliType, originSessionId, cwd) {
+  return namespacePoolKey(buildTaskForceRunId(carrierId, cliType), joinSessionCwdNamespace(originSessionId, cwd));
 }
 function buildTaskForceRunId(carrierId, cliType) {
   const encodedCarrierId = Buffer.from(carrierId, "utf-8").toString("base64url");
@@ -29534,6 +29535,11 @@ function matchesCarrierPoolKey(poolKey, carrierId) {
 function namespacePoolKey(baseKey, originSessionId) {
   return originSessionId ? `${originSessionId}:${baseKey}` : baseKey;
 }
+function joinSessionCwdNamespace(originSessionId, cwd) {
+  const cwdNamespace = cwd ? `cwd-${Buffer.from(cwd, "utf-8").toString("base64url")}` : void 0;
+  if (originSessionId && cwdNamespace) return `${originSessionId}:${cwdNamespace}`;
+  return originSessionId ?? cwdNamespace;
+}
 async function disconnectCarrierExecutorPools(carrierId) {
   const poolKeys = new Set(listActivePoolKeys().filter((poolKey) => matchesCarrierPoolKey(poolKey, carrierId)));
   poolKeys.add(carrierId);
@@ -32338,7 +32344,7 @@ function escapeRegExp(str) {
 }
 var taskForceStateStore = /* @__PURE__ */ new Map();
 function launchTaskForceJob(options2) {
-  const { registry: registry4, carrierId, request, label, startedAt, toolName, ctx, deps } = options2;
+  const { registry: registry4, carrierId, request, label, startedAt, toolName, ctx, cwd, deps } = options2;
   const requestKey = buildTaskForceRequestKey(carrierId, request);
   const backendIds = getConfiguredTaskForceBackends(carrierId);
   assertRegisteredCarrier(registry4, carrierId);
@@ -32391,7 +32397,7 @@ function launchTaskForceJob(options2) {
     request,
     state,
     signal: launch.signal,
-    cwd: ctx.cwd,
+    cwd,
     permit: launch.permit,
     startedAt,
     toolName,
@@ -32483,7 +32489,7 @@ function getRequiredTaskForceModelConfig(carrierId, cliType) {
 async function runTaskForceBackend(registry4, cliType, carrierId, originSessionId, requestKey, request, state, signal, cwd, jobId, trackModelInfoByCli, deps) {
   const execStartedAt = Date.now();
   const progress = state.backends.get(cliType);
-  const poolKey = buildTaskForceExecutorPoolKey(carrierId, cliType, originSessionId);
+  const poolKey = buildTaskForceExecutorPoolKey(carrierId, cliType, originSessionId, cwd);
   const streamKey = buildTaskForceScopedRunId(requestKey, cliType);
   const modelInfo = trackModelInfoByCli.get(cliType);
   if (!modelInfo) throw new Error(`Task Force config missing for ${cliType} on carrier "${carrierId}".`);
@@ -32688,7 +32694,8 @@ function buildCarrierDispatchToolSpec(registry4, deps) {
       CARRIER_REQUEST_BREVITY_GUIDELINE
     ],
     guardrails: [
-      `Multiple agents may be working on this codebase at the same time on a single filesystem and branch. Only touch changes you made \u2014 never revert or overwrite modifications made by others. Prefer precise edits (edit) over full-file writes (write). Always re-read a file before modifying it, as it may have changed since your last read.`
+      `Multiple agents may be working on this codebase at the same time on a single filesystem and branch. Only touch changes you made \u2014 never revert or overwrite modifications made by others. Prefer precise edits (edit) over full-file writes (write). Always re-read a file before modifying it, as it may have changed since your last read.`,
+      `When the carrier must work in a directory other than the host session cwd (e.g. a git worktree checkout), pass cwd as an absolute path so the carrier's CLI spawns there; never pass a relative path. Omit cwd to use the host session cwd.`
     ],
     get parameters() {
       const carrierIds = getRegisteredOrder(registry4);
@@ -32702,12 +32709,14 @@ function buildCarrierDispatchToolSpec(registry4, deps) {
         }),
         request: typebox_exports.String({
           description: `The task/prompt to send to the carrier. Required blocks per carrier -- see <fleet section="roster">. Missing blocks cause hard-error rejection.`
-        })
+        }),
+        cwd: typebox_exports.Optional(typebox_exports.String({
+          description: `Optional absolute working directory for the carrier's CLI spawn. MUST be an absolute path. Provide it when delegating work to a directory other than the host session cwd (e.g. a git worktree checkout) so the carrier spawns deterministically at that path. Omit to default to the host session cwd.`
+        }))
       });
     },
     async execute(args, ctx) {
       const t0 = Date.now();
-      const cwd = ctx.cwd;
       const toolCallId = ctx.toolCallId ?? "";
       const jobId = buildCarrierJobId("carrier", toolCallId);
       const toolName = "carrier_dispatch";
@@ -32718,6 +32727,11 @@ function buildCarrierDispatchToolSpec(registry4, deps) {
           error: "Invalid arguments: carrier_id, label, and request must be non-empty strings."
         });
       }
+      const cwdResolution = resolveDispatchCwd(args.cwd, ctx.cwd);
+      if (!cwdResolution.ok) {
+        return launchResponseResult({ job_id: jobId, accepted: false, error: cwdResolution.error });
+      }
+      const cwd = cwdResolution.cwd;
       const carrierId = args.carrier_id.trim();
       const label = args.label.trim();
       const request = args.request;
@@ -32750,6 +32764,7 @@ function buildCarrierDispatchToolSpec(registry4, deps) {
           startedAt: t0,
           toolName,
           ctx,
+          cwd,
           deps
         });
       }
@@ -32862,7 +32877,7 @@ async function runSingleCarrier(opts) {
   });
   try {
     const execResult = await executeWithPool({
-      poolKey: buildCarrierExecutorPoolKey(opts.carrierId, opts.originSessionId),
+      poolKey: buildCarrierExecutorPoolKey(opts.carrierId, opts.originSessionId, opts.cwd),
       scopeId: opts.carrierId,
       authEnvResolver: opts.deps.authEnvResolver,
       reservedExternalMcpServerIds: opts.deps.reservedExternalMcpServerIds,
@@ -32992,7 +33007,19 @@ function buildCarrierDispatchRunId(jobId, carrierId) {
 function isDispatchArgs(v) {
   if (typeof v !== "object" || v === null) return false;
   const obj = v;
-  return typeof obj.carrier_id === "string" && obj.carrier_id.trim().length > 0 && typeof obj.label === "string" && obj.label.trim().length > 0 && typeof obj.request === "string" && obj.request.trim().length > 0;
+  return typeof obj.carrier_id === "string" && obj.carrier_id.trim().length > 0 && typeof obj.label === "string" && obj.label.trim().length > 0 && typeof obj.request === "string" && obj.request.trim().length > 0 && (obj.cwd === void 0 || typeof obj.cwd === "string");
+}
+function resolveDispatchCwd(rawCwd, fallbackCwd) {
+  if (rawCwd === void 0) return { ok: true, cwd: fallbackCwd };
+  const trimmed = rawCwd.trim();
+  if (trimmed.length === 0) return { ok: true, cwd: fallbackCwd };
+  if (!path23.isAbsolute(trimmed)) {
+    return {
+      ok: false,
+      error: `Invalid cwd "${rawCwd}": must be an absolute path. Provide an absolute directory or omit cwd to use the host session cwd.`
+    };
+  }
+  return { ok: true, cwd: trimmed };
 }
 function buildCarrierRoster(registry4, carrierIds, options2) {
   const { excludeCarrierIds, heading, preambleLines, extraLines } = options2 ?? {};
@@ -33185,7 +33212,7 @@ init_dist2();
 import crypto4 from "crypto";
 import { existsSync as existsSync32, lstatSync as lstatSync22, mkdtempSync, readFileSync as readFileSync32, readdirSync as readdirSync3, realpathSync as realpathSync4, renameSync as renameSync22, statSync as statSync2 } from "fs";
 import path52 from "path";
-import path23 from "path";
+import path24 from "path";
 import { chmodSync as chmodSync3, closeSync as closeSync6, constants as constants7, lstatSync as lstatSync6, mkdirSync as mkdirSync5, openSync as openSync6, realpathSync as realpathSync2, rmSync as rmSync3, symlinkSync, writeFileSync as writeFileSync4 } from "fs";
 import path10 from "path";
 import { existsSync as existsSync22, readFileSync as readFileSync22, realpathSync as realpathSync3 } from "fs";
@@ -34031,11 +34058,11 @@ function renderAssetPluginRoot(pluginRoot, bundle, options2) {
   if (bundle.includeClaudeAgents) {
     for (const subagent of options2.claudeDefinitions) {
       const fileStem = parseClaudeAgentFileStem(subagent.name);
-      writePrivateFile(path23.join(pluginRoot, "agents", `${fileStem}.md`), claudeAgentFile(subagent), pluginRoot);
+      writePrivateFile(path24.join(pluginRoot, "agents", `${fileStem}.md`), claudeAgentFile(subagent), pluginRoot);
     }
   }
   if (options2.cliId === "claude" || options2.cliId === "claude-kimi" || options2.cliId === "claude-glm") {
-    writePrivateJson(path23.join(pluginRoot, "hooks", "hooks.json"), claudeHooks(options2), pluginRoot);
+    writePrivateJson(path24.join(pluginRoot, "hooks", "hooks.json"), claudeHooks(options2), pluginRoot);
   }
 }
 function validateClaudeAgentFileStems(subagents) {
@@ -34044,7 +34071,7 @@ function validateClaudeAgentFileStems(subagents) {
   }
 }
 function parseClaudeAgentFileStem(name) {
-  if (CLAUDE_AGENT_FILE_STEM_ALLOWLIST.test(name) && path23.basename(name) === name) return name;
+  if (CLAUDE_AGENT_FILE_STEM_ALLOWLIST.test(name) && path24.basename(name) === name) return name;
   throw new Error(`Invalid Claude agent file name: ${name}`);
 }
 function claudeHooks(options2) {
@@ -34114,7 +34141,7 @@ function yamlScalar(value) {
 }
 function renderEmbeddedSkillAssets(pluginRoot) {
   for (const asset of EMBEDDED_AGENT_CLI_SKILL_ASSETS) {
-    writePrivateFile(path23.join(pluginRoot, "skills", asset.relativePath), asset.content, pluginRoot);
+    writePrivateFile(path24.join(pluginRoot, "skills", asset.relativePath), asset.content, pluginRoot);
   }
 }
 var CONFIG_FILE_NAME = "config.toml";
@@ -40974,10 +41001,10 @@ function mergeDefs2(...defs) {
 function cloneDef2(schema) {
   return mergeDefs2(schema._zod.def);
 }
-function getElementAtPath2(obj, path36) {
-  if (!path36)
+function getElementAtPath2(obj, path37) {
+  if (!path37)
     return obj;
-  return path36.reduce((acc, key) => acc?.[key], obj);
+  return path37.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject2(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -41386,11 +41413,11 @@ function explicitlyAborted2(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues2(path36, issues) {
+function prefixIssues2(path37, issues) {
   return issues.map((iss) => {
     var _a32;
     (_a32 = iss).path ?? (_a32.path = []);
-    iss.path.unshift(path36);
+    iss.path.unshift(path37);
     return iss;
   });
 }
@@ -41535,16 +41562,16 @@ function flattenError2(error512, mapper = (issue32) => issue32.message) {
 }
 function formatError4(error512, mapper = (issue32) => issue32.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error522, path36 = []) => {
+  const processError = (error522, path37 = []) => {
     for (const issue32 of error522.issues) {
       if (issue32.code === "invalid_union" && issue32.errors.length) {
-        issue32.errors.map((issues) => processError({ issues }, [...path36, ...issue32.path]));
+        issue32.errors.map((issues) => processError({ issues }, [...path37, ...issue32.path]));
       } else if (issue32.code === "invalid_key") {
-        processError({ issues: issue32.issues }, [...path36, ...issue32.path]);
+        processError({ issues: issue32.issues }, [...path37, ...issue32.path]);
       } else if (issue32.code === "invalid_element") {
-        processError({ issues: issue32.issues }, [...path36, ...issue32.path]);
+        processError({ issues: issue32.issues }, [...path37, ...issue32.path]);
       } else {
-        const fullpath = [...path36, ...issue32.path];
+        const fullpath = [...path37, ...issue32.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue32));
         } else {
@@ -41571,17 +41598,17 @@ function formatError4(error512, mapper = (issue32) => issue32.message) {
 }
 function treeifyError2(error512, mapper = (issue32) => issue32.message) {
   const result = { errors: [] };
-  const processError = (error522, path36 = []) => {
+  const processError = (error522, path37 = []) => {
     var _a32, _b;
     for (const issue32 of error522.issues) {
       if (issue32.code === "invalid_union" && issue32.errors.length) {
-        issue32.errors.map((issues) => processError({ issues }, [...path36, ...issue32.path]));
+        issue32.errors.map((issues) => processError({ issues }, [...path37, ...issue32.path]));
       } else if (issue32.code === "invalid_key") {
-        processError({ issues: issue32.issues }, [...path36, ...issue32.path]);
+        processError({ issues: issue32.issues }, [...path37, ...issue32.path]);
       } else if (issue32.code === "invalid_element") {
-        processError({ issues: issue32.issues }, [...path36, ...issue32.path]);
+        processError({ issues: issue32.issues }, [...path37, ...issue32.path]);
       } else {
-        const fullpath = [...path36, ...issue32.path];
+        const fullpath = [...path37, ...issue32.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue32));
           continue;
@@ -41613,8 +41640,8 @@ function treeifyError2(error512, mapper = (issue32) => issue32.message) {
 }
 function toDotPath2(_path) {
   const segs = [];
-  const path36 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path36) {
+  const path37 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path37) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -54135,13 +54162,13 @@ function resolveRef2(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path36 = ref.slice(1).split("/").filter(Boolean);
-  if (path36.length === 0) {
+  const path37 = ref.slice(1).split("/").filter(Boolean);
+  if (path37.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path36[0] === defsKey) {
-    const key = path36[1];
+  if (path37[0] === defsKey) {
+    const key = path37[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -67593,11 +67620,11 @@ function sanitizeCarriersMap2(value) {
   return result;
 }
 var TASK_FORCE_POOL_KEY_PATTERN2 = /(?:^|:)taskforce:[^:]+:([^:]+)$/;
-function buildCarrierExecutorPoolKey2(carrierId, originSessionId) {
-  return namespacePoolKey2(carrierId, originSessionId);
+function buildCarrierExecutorPoolKey2(carrierId, originSessionId, cwd) {
+  return namespacePoolKey2(carrierId, joinSessionCwdNamespace2(originSessionId, cwd));
 }
-function buildTaskForceExecutorPoolKey2(carrierId, cliType, originSessionId) {
-  return namespacePoolKey2(buildTaskForceRunId2(carrierId, cliType), originSessionId);
+function buildTaskForceExecutorPoolKey2(carrierId, cliType, originSessionId, cwd) {
+  return namespacePoolKey2(buildTaskForceRunId2(carrierId, cliType), joinSessionCwdNamespace2(originSessionId, cwd));
 }
 function buildTaskForceRunId2(carrierId, cliType) {
   const encodedCarrierId = Buffer.from(carrierId, "utf-8").toString("base64url");
@@ -67612,6 +67639,11 @@ function matchesCarrierPoolKey2(poolKey, carrierId) {
 function namespacePoolKey2(baseKey, originSessionId) {
   return originSessionId ? `${originSessionId}:${baseKey}` : baseKey;
 }
+function joinSessionCwdNamespace2(originSessionId, cwd) {
+  const cwdNamespace = cwd ? `cwd-${Buffer.from(cwd, "utf-8").toString("base64url")}` : void 0;
+  if (originSessionId && cwdNamespace) return `${originSessionId}:${cwdNamespace}`;
+  return originSessionId ?? cwdNamespace;
+}
 async function disconnectCarrierExecutorPools2(carrierId) {
   const poolKeys = new Set(listActivePoolKeys2().filter((poolKey) => matchesCarrierPoolKey2(poolKey, carrierId)));
   poolKeys.add(carrierId);
@@ -70415,7 +70447,7 @@ function escapeRegExp2(str) {
 }
 var taskForceStateStore2 = /* @__PURE__ */ new Map();
 function launchTaskForceJob2(options2) {
-  const { registry: registry32, carrierId, request, label, startedAt, toolName, ctx, deps } = options2;
+  const { registry: registry32, carrierId, request, label, startedAt, toolName, ctx, cwd, deps } = options2;
   const requestKey = buildTaskForceRequestKey2(carrierId, request);
   getConfiguredTaskForceBackends2(carrierId);
   assertRegisteredCarrier2(registry32, carrierId);
@@ -70468,7 +70500,7 @@ function launchTaskForceJob2(options2) {
     request,
     state,
     signal: launch.signal,
-    cwd: ctx.cwd,
+    cwd,
     permit: launch.permit,
     startedAt,
     toolName,
@@ -70560,7 +70592,7 @@ function getRequiredTaskForceModelConfig2(carrierId, cliType) {
 async function runTaskForceBackend2(registry32, cliType, carrierId, originSessionId, requestKey, request, state, signal, cwd, jobId, trackModelInfoByCli, deps) {
   const execStartedAt = Date.now();
   const progress = state.backends.get(cliType);
-  const poolKey = buildTaskForceExecutorPoolKey2(carrierId, cliType, originSessionId);
+  const poolKey = buildTaskForceExecutorPoolKey2(carrierId, cliType, originSessionId, cwd);
   buildTaskForceScopedRunId2(requestKey, cliType);
   const modelInfo = trackModelInfoByCli.get(cliType);
   if (!modelInfo) throw new Error(`Task Force config missing for ${cliType} on carrier "${carrierId}".`);
@@ -70765,7 +70797,8 @@ function buildCarrierDispatchToolSpec2(registry32, deps) {
       CARRIER_REQUEST_BREVITY_GUIDELINE2
     ],
     guardrails: [
-      `Multiple agents may be working on this codebase at the same time on a single filesystem and branch. Only touch changes you made \u2014 never revert or overwrite modifications made by others. Prefer precise edits (edit) over full-file writes (write). Always re-read a file before modifying it, as it may have changed since your last read.`
+      `Multiple agents may be working on this codebase at the same time on a single filesystem and branch. Only touch changes you made \u2014 never revert or overwrite modifications made by others. Prefer precise edits (edit) over full-file writes (write). Always re-read a file before modifying it, as it may have changed since your last read.`,
+      `When the carrier must work in a directory other than the host session cwd (e.g. a git worktree checkout), pass cwd as an absolute path so the carrier's CLI spawns there; never pass a relative path. Omit cwd to use the host session cwd.`
     ],
     get parameters() {
       const carrierIds = getRegisteredOrder2(registry32);
@@ -70779,12 +70812,14 @@ function buildCarrierDispatchToolSpec2(registry32, deps) {
         }),
         request: typebox_exports2.String({
           description: `The task/prompt to send to the carrier. Required blocks per carrier -- see <fleet section="roster">. Missing blocks cause hard-error rejection.`
-        })
+        }),
+        cwd: typebox_exports2.Optional(typebox_exports2.String({
+          description: `Optional absolute working directory for the carrier's CLI spawn. MUST be an absolute path. Provide it when delegating work to a directory other than the host session cwd (e.g. a git worktree checkout) so the carrier spawns deterministically at that path. Omit to default to the host session cwd.`
+        }))
       });
     },
     async execute(args, ctx) {
       const t0 = Date.now();
-      const cwd = ctx.cwd;
       const toolCallId = ctx.toolCallId ?? "";
       const jobId = buildCarrierJobId2("carrier", toolCallId);
       const toolName = "carrier_dispatch";
@@ -70795,6 +70830,11 @@ function buildCarrierDispatchToolSpec2(registry32, deps) {
           error: "Invalid arguments: carrier_id, label, and request must be non-empty strings."
         });
       }
+      const cwdResolution = resolveDispatchCwd2(args.cwd, ctx.cwd);
+      if (!cwdResolution.ok) {
+        return launchResponseResult2({ job_id: jobId, accepted: false, error: cwdResolution.error });
+      }
+      const cwd = cwdResolution.cwd;
       const carrierId = args.carrier_id.trim();
       const label = args.label.trim();
       const request = args.request;
@@ -70827,6 +70867,7 @@ function buildCarrierDispatchToolSpec2(registry32, deps) {
           startedAt: t0,
           toolName,
           ctx,
+          cwd,
           deps
         });
       }
@@ -70939,7 +70980,7 @@ async function runSingleCarrier2(opts) {
   });
   try {
     const execResult = await executeWithPool2({
-      poolKey: buildCarrierExecutorPoolKey2(opts.carrierId, opts.originSessionId),
+      poolKey: buildCarrierExecutorPoolKey2(opts.carrierId, opts.originSessionId, opts.cwd),
       scopeId: opts.carrierId,
       authEnvResolver: opts.deps.authEnvResolver,
       reservedExternalMcpServerIds: opts.deps.reservedExternalMcpServerIds,
@@ -71069,7 +71110,19 @@ function buildCarrierDispatchRunId2(jobId, carrierId) {
 function isDispatchArgs2(v) {
   if (typeof v !== "object" || v === null) return false;
   const obj = v;
-  return typeof obj.carrier_id === "string" && obj.carrier_id.trim().length > 0 && typeof obj.label === "string" && obj.label.trim().length > 0 && typeof obj.request === "string" && obj.request.trim().length > 0;
+  return typeof obj.carrier_id === "string" && obj.carrier_id.trim().length > 0 && typeof obj.label === "string" && obj.label.trim().length > 0 && typeof obj.request === "string" && obj.request.trim().length > 0 && (obj.cwd === void 0 || typeof obj.cwd === "string");
+}
+function resolveDispatchCwd2(rawCwd, fallbackCwd) {
+  if (rawCwd === void 0) return { ok: true, cwd: fallbackCwd };
+  const trimmed = rawCwd.trim();
+  if (trimmed.length === 0) return { ok: true, cwd: fallbackCwd };
+  if (!path92__default.isAbsolute(trimmed)) {
+    return {
+      ok: false,
+      error: `Invalid cwd "${rawCwd}": must be an absolute path. Provide an absolute directory or omit cwd to use the host session cwd.`
+    };
+  }
+  return { ok: true, cwd: trimmed };
 }
 function buildCarrierRoster2(registry32, carrierIds, options2) {
   const { excludeCarrierIds, heading, preambleLines, extraLines } = options2 ?? {};
@@ -71186,68 +71239,6 @@ function getClaudeModel2(config22) {
 function clampClaudeEffort2(effort) {
   return effort === "max" ? CLAUDE_MAX_EFFORT2 : effort;
 }
-var ROLE_DESCRIPTION_SEPARATOR2 = " - ";
-function readCarrierStatusEntries(registry32) {
-  const carrierDefaults = buildCarrierDefaultsByCarrier(registry32);
-  return buildCarrierStatusEntriesFromSnapshot(registry32, readFileBackedCarriersSnapshot2(carrierDefaults));
-}
-function buildCarrierStatusEntriesFromSnapshot(registry32, snapshot) {
-  const entries = [];
-  for (const carrierId of getRegisteredOrder2(registry32)) {
-    const config22 = getRegisteredCarrierConfig2(registry32, carrierId);
-    if (!config22) continue;
-    const state = snapshot.carriers[carrierId];
-    const cliType = snapshot.carriers[carrierId]?.agentCliType ?? config22.defaultCliType;
-    const selection = snapshot.carriers[carrierId]?.agentCli[cliType];
-    const provider = getProviderModels2(cliType);
-    const role = sanitizeCarrierMetadataText2(config22.carrierMetadata?.title);
-    const roleSummary = sanitizeCarrierMetadataText2(config22.carrierMetadata?.summary);
-    entries.push({
-      carrierId,
-      category: config22.carrierMetadata?.category,
-      cliType,
-      defaultCliType: config22.defaultCliType,
-      displayName: state?.displayName ?? getCarrierSourceDisplayName2(registry32, carrierId),
-      effort: selection?.effort ?? null,
-      isDefault: !selection?.model,
-      model: selection?.model || provider.defaultModel,
-      role,
-      roleDescription: buildRoleDescription2(role, roleSummary),
-      slot: config22.slot,
-      subagentMode: state?.agentMode === "subagent",
-      taskForceBackendCount: getConfiguredTaskForceBackendsFromSnapshot2(snapshot, carrierId).length
-    });
-  }
-  return entries;
-}
-function buildCarrierDefaultsByCarrier(registry32) {
-  return Object.fromEntries(
-    getRegisteredOrder2(registry32).map((carrierId) => {
-      const config22 = getRegisteredCarrierConfig2(registry32, carrierId);
-      if (!config22) return null;
-      return [carrierId, buildCarrierDefaults(config22)];
-    }).filter((entry) => entry !== null)
-  );
-}
-function buildCarrierDefaults(config22) {
-  const cliType = resolveAgentCliType22(config22.id, config22.defaultCliType);
-  const cliDefaults = buildCarrierModelDefaults2(config22, cliType);
-  return {
-    cliType,
-    ...config22.defaultAgentMode ? { defaultAgentMode: config22.defaultAgentMode } : {},
-    ...cliDefaults.defaultEffort ? { defaultEffort: cliDefaults.defaultEffort } : {},
-    ...cliDefaults.defaultModel ? { defaultModel: cliDefaults.defaultModel } : {}
-  };
-}
-function buildRoleDescription2(role, summary) {
-  if (role && summary) return `${role}${ROLE_DESCRIPTION_SEPARATOR2}${summary}`;
-  return role ?? summary;
-}
-function sanitizeCarrierMetadataText2(value) {
-  if (typeof value !== "string") return null;
-  const sanitized = sanitizeToolBlockLabel2(value).trim();
-  return sanitized.length > 0 ? sanitized : null;
-}
 var dispatch2 = {
   ...framework_exports2,
   framework: framework_exports2,
@@ -79375,8 +79366,98 @@ function buildWikiToolSpec(config22, usage) {
     }
   };
 }
+var AGENT_CLI_API_CATALOG = [
+  {
+    method: "GET",
+    path: "/agent-cli/state",
+    summary: "\uC124\uCE58\uB41C Agent CLI \uC0C1\uD0DC\uB97C \uC870\uD68C\uD569\uB2C8\uB2E4.",
+    category: "Agent CLI",
+    gate: "loopback"
+  }
+];
+function createAgentCliRouter(deps) {
+  return async function handleAgentCliRoute(context) {
+    const { req, res, pathname } = context;
+    if (pathname === "/agent-cli/state") {
+      if (req.method !== "GET") {
+        deps.writeJson(res, 405, { error: "Method not allowed" });
+        return true;
+      }
+      const clis = await deps.detect();
+      const body = { clis };
+      deps.writeJson(res, 200, body);
+      return true;
+    }
+    return false;
+  };
+}
 var SUBAGENT_CLI_TYPES = /* @__PURE__ */ new Set(["claude", "claude-zai", "claude-kimi", "claude-glm"]);
 var TASKFORCE_MIN_BACKENDS = 2;
+var CARRIER_SETTINGS_API_CATALOG = [
+  {
+    method: "GET",
+    path: "/carrier-settings/state",
+    summary: "\uCE90\uB9AC\uC5B4 \uC124\uC815 \uC0C1\uD0DC\uB97C \uC870\uD68C\uD569\uB2C8\uB2E4.",
+    category: "Carrier Settings",
+    gate: "loopback"
+  },
+  {
+    method: "GET",
+    path: "/carrier-settings/options",
+    summary: "\uCE90\uB9AC\uC5B4 \uC124\uC815 \uC120\uD0DD\uC9C0\uB97C \uC870\uD68C\uD569\uB2C8\uB2E4.",
+    category: "Carrier Settings",
+    gate: "loopback"
+  },
+  {
+    method: "PUT",
+    path: "/carrier-settings/carriers/:id/cli",
+    summary: "\uCE90\uB9AC\uC5B4 Agent CLI\uB97C \uBCC0\uACBD\uD569\uB2C8\uB2E4.",
+    category: "Carrier Settings",
+    gate: "terminal-origin"
+  },
+  {
+    method: "PUT",
+    path: "/carrier-settings/carriers/:id/model",
+    summary: "\uCE90\uB9AC\uC5B4 \uBAA8\uB378 \uC120\uD0DD\uC744 \uBCC0\uACBD\uD569\uB2C8\uB2E4.",
+    category: "Carrier Settings",
+    gate: "terminal-origin"
+  },
+  {
+    method: "PATCH",
+    path: "/carrier-settings/carriers/:id/display-name",
+    summary: "\uCE90\uB9AC\uC5B4 \uD45C\uC2DC \uC774\uB984\uC744 \uBCC0\uACBD\uD569\uB2C8\uB2E4.",
+    category: "Carrier Settings",
+    gate: "terminal-origin"
+  },
+  {
+    method: "PUT",
+    path: "/carrier-settings/carriers/:id/agent-mode",
+    summary: "\uCE90\uB9AC\uC5B4 \uC2E4\uD589 \uBAA8\uB4DC\uB97C \uBCC0\uACBD\uD569\uB2C8\uB2E4.",
+    category: "Carrier Settings",
+    gate: "terminal-origin"
+  },
+  {
+    method: "PUT",
+    path: "/carrier-settings/carriers/:id/taskforce/:cliType",
+    summary: "Task Force \uBC31\uC5D4\uB4DC \uBAA8\uB378\uC744 \uC124\uC815\uD569\uB2C8\uB2E4.",
+    category: "Carrier Settings",
+    gate: "terminal-origin"
+  },
+  {
+    method: "DELETE",
+    path: "/carrier-settings/carriers/:id/taskforce/:cliType",
+    summary: "Task Force \uBC31\uC5D4\uB4DC \uBAA8\uB378 \uC124\uC815\uC744 \uD574\uC81C\uD569\uB2C8\uB2E4.",
+    category: "Carrier Settings",
+    gate: "terminal-origin"
+  },
+  {
+    method: "DELETE",
+    path: "/carrier-settings/carriers/:id/taskforce",
+    summary: "\uCE90\uB9AC\uC5B4 Task Force \uC124\uC815\uC744 \uCD08\uAE30\uD654\uD569\uB2C8\uB2E4.",
+    category: "Carrier Settings",
+    gate: "terminal-origin"
+  }
+];
 function createCarrierSettingsRouter(deps) {
   const controller = createStatusOverlayController(deps.registry);
   return async function handleCarrierSettingsRoute(context) {
@@ -79787,6 +79868,255 @@ function requireCarrierConfig(registry32, carrierId) {
   if (!config22) throw new Error(`Carrier not found: ${carrierId}`);
   return config22;
 }
+var GLOBAL_SETTINGS_API_CATALOG = [
+  {
+    method: "GET",
+    path: "/global-settings/state",
+    summary: "\uC804\uC5ED \uCF58\uC194 \uC124\uC815 \uC0C1\uD0DC\uB97C \uC870\uD68C\uD569\uB2C8\uB2E4.",
+    category: "Global Settings",
+    gate: "loopback"
+  },
+  {
+    method: "PUT",
+    path: "/global-settings",
+    summary: "\uC804\uC5ED \uCF58\uC194 \uC124\uC815\uC744 \uC800\uC7A5\uD569\uB2C8\uB2E4.",
+    category: "Global Settings",
+    gate: "terminal-origin"
+  }
+];
+function createGlobalSettingsRouter(deps) {
+  return async function handleGlobalSettingsRoute(context) {
+    const { req, res, pathname } = context;
+    if (pathname === "/global-settings/state") {
+      if (req.method !== "GET") {
+        deps.writeJson(res, 405, { error: "Method not allowed" });
+        return true;
+      }
+      deps.writeJson(res, 200, buildGlobalSettingsState(deps.globalOptionsService));
+      return true;
+    }
+    if (pathname === "/global-settings") {
+      if (req.method !== "PUT") {
+        deps.writeJson(res, 405, { error: "Method not allowed" });
+        return true;
+      }
+      await mutateGlobalSettings(req, res, deps);
+      return true;
+    }
+    return false;
+  };
+}
+function buildGlobalSettingsState(service) {
+  return toGlobalSettingsState(service.load());
+}
+async function mutateGlobalSettings(req, res, deps) {
+  if (!deps.isAuthorized(req)) {
+    deps.writeJson(res, 401, { error: "unauthorized" });
+    return;
+  }
+  if (!isJsonRequest2(req)) {
+    deps.writeJson(res, 415, { error: "unsupported_media_type" });
+    return;
+  }
+  const body = await deps.readJsonBody(req);
+  if (!body || typeof body !== "object" || Array.isArray(body)) {
+    deps.writeJson(res, 400, { error: "invalid_json" });
+    return;
+  }
+  if (body.replaceSystemPrompt !== void 0 && typeof body.replaceSystemPrompt !== "boolean") {
+    deps.writeJson(res, 400, { error: "invalid_replace_system_prompt" });
+    return;
+  }
+  if (body.enableMetaphor !== void 0 && typeof body.enableMetaphor !== "boolean") {
+    deps.writeJson(res, 400, { error: "invalid_enable_metaphor" });
+    return;
+  }
+  const updated = deps.globalOptionsService.update((current) => ({
+    ...current,
+    ...typeof body.replaceSystemPrompt === "boolean" ? { replaceSystemPrompt: body.replaceSystemPrompt } : {},
+    ...typeof body.enableMetaphor === "boolean" ? { enableMetaphor: body.enableMetaphor } : {}
+  }));
+  const response = { state: toGlobalSettingsState(updated) };
+  deps.writeJson(res, 200, response);
+}
+function toGlobalSettingsState(data) {
+  return {
+    replaceSystemPrompt: data.replaceSystemPrompt ?? false,
+    enableMetaphor: data.enableMetaphor ?? false
+  };
+}
+function isJsonRequest2(req) {
+  const contentType = req.headers["content-type"];
+  return typeof contentType === "string" && contentType.toLowerCase().split(";")[0]?.trim() === "application/json";
+}
+var MODEL_AUTH_PROVIDERS = [
+  { cli: "claude-kimi", displayName: "Moonshot Kimi" },
+  { cli: "claude-glm", displayName: "ZhipuAI GLM" }
+];
+var UPSTREAM_FAILURE_STATUSES = /* @__PURE__ */ new Set(["timeout", "network", "server"]);
+var MODEL_AUTH_API_CATALOG = [
+  {
+    method: "GET",
+    path: "/model-auth/state",
+    summary: "\uBAA8\uB378 \uB85C\uADF8\uC778 \uC0C1\uD0DC\uB97C \uC870\uD68C\uD569\uB2C8\uB2E4.",
+    category: "Model Auth",
+    gate: "loopback"
+  },
+  {
+    method: "PUT",
+    path: "/model-auth/providers/:cli",
+    summary: "\uBAA8\uB378 \uC81C\uACF5\uC790 API \uD0A4\uB97C \uB4F1\uB85D\uD569\uB2C8\uB2E4.",
+    category: "Model Auth",
+    gate: "terminal-origin"
+  },
+  {
+    method: "DELETE",
+    path: "/model-auth/providers/:cli",
+    summary: "\uBAA8\uB378 \uC81C\uACF5\uC790 API \uD0A4\uB97C \uC0AD\uC81C\uD569\uB2C8\uB2E4.",
+    category: "Model Auth",
+    gate: "terminal-origin"
+  }
+];
+function createModelAuthRouter(deps) {
+  return async function handleModelAuthRoute(context) {
+    const { req, res, pathname } = context;
+    if (pathname === "/model-auth/state") {
+      if (req.method !== "GET") {
+        deps.writeJson(res, 405, { error: "Method not allowed" });
+        return true;
+      }
+      deps.writeJson(res, 200, await buildModelAuthState(deps.authService));
+      return true;
+    }
+    const cli = parseProviderPath(pathname);
+    if (!cli) return false;
+    const provider = MODEL_AUTH_PROVIDERS.find((entry) => entry.cli === cli);
+    if (!provider) {
+      deps.writeJson(res, 404, { error: "provider_not_found" });
+      return true;
+    }
+    if (req.method === "PUT") {
+      await signInProvider(req, res, deps, provider);
+      return true;
+    }
+    if (req.method === "DELETE") {
+      await signOutProvider(req, res, deps, provider);
+      return true;
+    }
+    deps.writeJson(res, 405, { error: "Method not allowed" });
+    return true;
+  };
+}
+async function buildModelAuthState(authService) {
+  const signedInIds = new Set(await authService.listProviderIds());
+  return {
+    providers: MODEL_AUTH_PROVIDERS.map((provider) => toProviderState(provider, signedInIds))
+  };
+}
+async function signInProvider(req, res, deps, provider) {
+  if (!deps.isAuthorized(req)) {
+    deps.writeJson(res, 401, { error: "unauthorized" });
+    return;
+  }
+  if (!isJsonRequest3(req)) {
+    deps.writeJson(res, 415, { error: "unsupported_media_type" });
+    return;
+  }
+  const body = await deps.readJsonBody(req);
+  if (!body || typeof body !== "object" || Array.isArray(body)) {
+    deps.writeJson(res, 400, { error: "invalid_json" });
+    return;
+  }
+  const apiKey = typeof body.apiKey === "string" ? body.apiKey.trim() : "";
+  if (apiKey.length === 0) {
+    deps.writeJson(res, 400, { error: "invalid_api_key" });
+    return;
+  }
+  const providerId = CLI_TO_AUTH_PROVIDER_ID2[provider.cli];
+  if (!providerId) {
+    deps.writeJson(res, 500, { error: "provider_unavailable" });
+    return;
+  }
+  const validation = await deps.validateApiKey(provider.cli, apiKey);
+  if (validation.status !== "success") {
+    const status = UPSTREAM_FAILURE_STATUSES.has(validation.status) ? 502 : 400;
+    deps.writeJson(res, status, {
+      error: formatSignInFailureMessage(provider.displayName, validation.status),
+      status: validation.status
+    });
+    return;
+  }
+  await deps.authService.setApiKey(providerId, apiKey);
+  await writeMutationState2(res, deps);
+}
+async function signOutProvider(req, res, deps, provider) {
+  if (!deps.isAuthorized(req)) {
+    deps.writeJson(res, 401, { error: "unauthorized" });
+    return;
+  }
+  const providerId = CLI_TO_AUTH_PROVIDER_ID2[provider.cli];
+  if (!providerId) {
+    deps.writeJson(res, 500, { error: "provider_unavailable" });
+    return;
+  }
+  await deps.authService.deleteApiKey(providerId);
+  await writeMutationState2(res, deps);
+}
+async function writeMutationState2(res, deps) {
+  const response = { state: await buildModelAuthState(deps.authService) };
+  deps.writeJson(res, 200, response);
+}
+function toProviderState(provider, signedInIds) {
+  const providerId = CLI_TO_AUTH_PROVIDER_ID2[provider.cli] ?? provider.cli;
+  return {
+    cli: provider.cli,
+    displayName: provider.displayName,
+    signedIn: signedInIds.has(providerId)
+  };
+}
+function parseProviderPath(pathname) {
+  const parts = pathname.split("/").filter(Boolean);
+  if (parts.length !== 3 || parts[0] !== "model-auth" || parts[1] !== "providers") return null;
+  const cli = safeDecodeURIComponent2(parts[2] ?? "");
+  return cli ? cli : null;
+}
+function safeDecodeURIComponent2(value) {
+  try {
+    return decodeURIComponent(value);
+  } catch {
+    return null;
+  }
+}
+function isJsonRequest3(req) {
+  const contentType = req.headers["content-type"];
+  return typeof contentType === "string" && contentType.toLowerCase().split(";")[0]?.trim() === "application/json";
+}
+function formatSignInFailureMessage(displayName, status) {
+  switch (status) {
+    case "unauthorized":
+      return `${displayName} rejected the API key. Check the key and try again.`;
+    case "forbidden":
+      return `The API key is not allowed for ${displayName}. Check its permissions.`;
+    case "timeout":
+      return `Validating the ${displayName} API key timed out. Check your connection and try again.`;
+    case "network":
+      return `Could not reach ${displayName} to validate the API key. Check your connection and try again.`;
+    case "server":
+      return `${displayName} returned an error while validating the API key. Try again later.`;
+    default:
+      return `Could not validate the ${displayName} API key. Check the key and try again.`;
+  }
+}
+var compareApiCatalogEntries = (left, right) => left.category.localeCompare(right.category) || left.path.localeCompare(right.path) || left.method.localeCompare(right.method);
+function buildApiCatalog() {
+  return [
+    ...SERVER_API_CATALOG,
+    ...CARRIER_SETTINGS_API_CATALOG,
+    ...GLOBAL_SETTINGS_API_CATALOG,
+    ...AGENT_CLI_API_CATALOG,
+    ...MODEL_AUTH_API_CATALOG
+  ].slice().sort(compareApiCatalogEntries);
+}
 var CONTENT_SECURITY_POLICY = "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; object-src 'none'; base-uri 'none'";
 var SECURITY_HEADERS = {
   "content-security-policy": CONTENT_SECURITY_POLICY,
@@ -80693,7 +81023,7 @@ function createCodexGateway(deps) {
       return true;
     }
     if (selected.kind === "no-workspace") {
-      if (isJsonRequest2(request)) {
+      if (isJsonRequest4(request)) {
         sendJson2(response, 404, { error: "no_workspace_registered" });
         return true;
       }
@@ -80814,7 +81144,7 @@ function legacyWorkspacePath(url22) {
   }
   return null;
 }
-function isJsonRequest2(request) {
+function isJsonRequest4(request) {
   const accept = Array.isArray(request.headers.accept) ? request.headers.accept.join(",") : request.headers.accept ?? "";
   const requestedWith = Array.isArray(request.headers["x-requested-with"]) ? request.headers["x-requested-with"].join(",") : request.headers["x-requested-with"] ?? "";
   return accept.includes("application/json") || requestedWith.toLowerCase() === "xmlhttprequest";
@@ -81107,71 +81437,6 @@ function looksSecretToken(rawToken) {
   if (SECRET_PREFIX_PATTERN.test(token)) return true;
   return token.length >= SECRET_MIN_TOKEN_LENGTH && SECRET_CHARSET_PATTERN.test(token) && /[0-9]/.test(token) && /[A-Za-z]/.test(token);
 }
-function createGlobalSettingsRouter(deps) {
-  return async function handleGlobalSettingsRoute(context) {
-    const { req, res, pathname } = context;
-    if (pathname === "/global-settings/state") {
-      if (req.method !== "GET") {
-        deps.writeJson(res, 405, { error: "Method not allowed" });
-        return true;
-      }
-      deps.writeJson(res, 200, buildGlobalSettingsState(deps.globalOptionsService));
-      return true;
-    }
-    if (pathname === "/global-settings") {
-      if (req.method !== "PUT") {
-        deps.writeJson(res, 405, { error: "Method not allowed" });
-        return true;
-      }
-      await mutateGlobalSettings(req, res, deps);
-      return true;
-    }
-    return false;
-  };
-}
-function buildGlobalSettingsState(service) {
-  return toGlobalSettingsState(service.load());
-}
-async function mutateGlobalSettings(req, res, deps) {
-  if (!deps.isAuthorized(req)) {
-    deps.writeJson(res, 401, { error: "unauthorized" });
-    return;
-  }
-  if (!isJsonRequest3(req)) {
-    deps.writeJson(res, 415, { error: "unsupported_media_type" });
-    return;
-  }
-  const body = await deps.readJsonBody(req);
-  if (!body || typeof body !== "object" || Array.isArray(body)) {
-    deps.writeJson(res, 400, { error: "invalid_json" });
-    return;
-  }
-  if (body.replaceSystemPrompt !== void 0 && typeof body.replaceSystemPrompt !== "boolean") {
-    deps.writeJson(res, 400, { error: "invalid_replace_system_prompt" });
-    return;
-  }
-  if (body.enableMetaphor !== void 0 && typeof body.enableMetaphor !== "boolean") {
-    deps.writeJson(res, 400, { error: "invalid_enable_metaphor" });
-    return;
-  }
-  const updated = deps.globalOptionsService.update((current) => ({
-    ...current,
-    ...typeof body.replaceSystemPrompt === "boolean" ? { replaceSystemPrompt: body.replaceSystemPrompt } : {},
-    ...typeof body.enableMetaphor === "boolean" ? { enableMetaphor: body.enableMetaphor } : {}
-  }));
-  const response = { state: toGlobalSettingsState(updated) };
-  deps.writeJson(res, 200, response);
-}
-function toGlobalSettingsState(data) {
-  return {
-    replaceSystemPrompt: data.replaceSystemPrompt ?? false,
-    enableMetaphor: data.enableMetaphor ?? false
-  };
-}
-function isJsonRequest3(req) {
-  const contentType = req.headers["content-type"];
-  return typeof contentType === "string" && contentType.toLowerCase().split(";")[0]?.trim() === "application/json";
-}
 var BINARY_DISPLAY_NAMES = {
   claude: "Claude Code",
   codex: "Codex CLI",
@@ -81268,157 +81533,6 @@ function combineAgentCliLaunchMetadata(metadata, installStatuses, authStatuses)
     signedIn: signedInByCli.has(meta32.id) ? signedInByCli.get(meta32.id) ?? false : true
   }));
 }
-function createAgentCliRouter(deps) {
-  return async function handleAgentCliRoute(context) {
-    const { req, res, pathname } = context;
-    if (pathname === "/agent-cli/state") {
-      if (req.method !== "GET") {
-        deps.writeJson(res, 405, { error: "Method not allowed" });
-        return true;
-      }
-      const clis = await deps.detect();
-      const body = { clis };
-      deps.writeJson(res, 200, body);
-      return true;
-    }
-    return false;
-  };
-}
-var MODEL_AUTH_PROVIDERS = [
-  { cli: "claude-kimi", displayName: "Moonshot Kimi" },
-  { cli: "claude-glm", displayName: "ZhipuAI GLM" }
-];
-var UPSTREAM_FAILURE_STATUSES = /* @__PURE__ */ new Set(["timeout", "network", "server"]);
-function createModelAuthRouter(deps) {
-  return async function handleModelAuthRoute(context) {
-    const { req, res, pathname } = context;
-    if (pathname === "/model-auth/state") {
-      if (req.method !== "GET") {
-        deps.writeJson(res, 405, { error: "Method not allowed" });
-        return true;
-      }
-      deps.writeJson(res, 200, await buildModelAuthState(deps.authService));
-      return true;
-    }
-    const cli = parseProviderPath(pathname);
-    if (!cli) return false;
-    const provider = MODEL_AUTH_PROVIDERS.find((entry) => entry.cli === cli);
-    if (!provider) {
-      deps.writeJson(res, 404, { error: "provider_not_found" });
-      return true;
-    }
-    if (req.method === "PUT") {
-      await signInProvider(req, res, deps, provider);
-      return true;
-    }
-    if (req.method === "DELETE") {
-      await signOutProvider(req, res, deps, provider);
-      return true;
-    }
-    deps.writeJson(res, 405, { error: "Method not allowed" });
-    return true;
-  };
-}
-async function buildModelAuthState(authService) {
-  const signedInIds = new Set(await authService.listProviderIds());
-  return {
-    providers: MODEL_AUTH_PROVIDERS.map((provider) => toProviderState(provider, signedInIds))
-  };
-}
-async function signInProvider(req, res, deps, provider) {
-  if (!deps.isAuthorized(req)) {
-    deps.writeJson(res, 401, { error: "unauthorized" });
-    return;
-  }
-  if (!isJsonRequest4(req)) {
-    deps.writeJson(res, 415, { error: "unsupported_media_type" });
-    return;
-  }
-  const body = await deps.readJsonBody(req);
-  if (!body || typeof body !== "object" || Array.isArray(body)) {
-    deps.writeJson(res, 400, { error: "invalid_json" });
-    return;
-  }
-  const apiKey = typeof body.apiKey === "string" ? body.apiKey.trim() : "";
-  if (apiKey.length === 0) {
-    deps.writeJson(res, 400, { error: "invalid_api_key" });
-    return;
-  }
-  const providerId = CLI_TO_AUTH_PROVIDER_ID2[provider.cli];
-  if (!providerId) {
-    deps.writeJson(res, 500, { error: "provider_unavailable" });
-    return;
-  }
-  const validation = await deps.validateApiKey(provider.cli, apiKey);
-  if (validation.status !== "success") {
-    const status = UPSTREAM_FAILURE_STATUSES.has(validation.status) ? 502 : 400;
-    deps.writeJson(res, status, {
-      error: formatSignInFailureMessage(provider.displayName, validation.status),
-      status: validation.status
-    });
-    return;
-  }
-  await deps.authService.setApiKey(providerId, apiKey);
-  await writeMutationState2(res, deps);
-}
-async function signOutProvider(req, res, deps, provider) {
-  if (!deps.isAuthorized(req)) {
-    deps.writeJson(res, 401, { error: "unauthorized" });
-    return;
-  }
-  const providerId = CLI_TO_AUTH_PROVIDER_ID2[provider.cli];
-  if (!providerId) {
-    deps.writeJson(res, 500, { error: "provider_unavailable" });
-    return;
-  }
-  await deps.authService.deleteApiKey(providerId);
-  await writeMutationState2(res, deps);
-}
-async function writeMutationState2(res, deps) {
-  const response = { state: await buildModelAuthState(deps.authService) };
-  deps.writeJson(res, 200, response);
-}
-function toProviderState(provider, signedInIds) {
-  const providerId = CLI_TO_AUTH_PROVIDER_ID2[provider.cli] ?? provider.cli;
-  return {
-    cli: provider.cli,
-    displayName: provider.displayName,
-    signedIn: signedInIds.has(providerId)
-  };
-}
-function parseProviderPath(pathname) {
-  const parts = pathname.split("/").filter(Boolean);
-  if (parts.length !== 3 || parts[0] !== "model-auth" || parts[1] !== "providers") return null;
-  const cli = safeDecodeURIComponent2(parts[2] ?? "");
-  return cli ? cli : null;
-}
-function safeDecodeURIComponent2(value) {
-  try {
-    return decodeURIComponent(value);
-  } catch {
-    return null;
-  }
-}
-function isJsonRequest4(req) {
-  const contentType = req.headers["content-type"];
-  return typeof contentType === "string" && contentType.toLowerCase().split(";")[0]?.trim() === "application/json";
-}
-function formatSignInFailureMessage(displayName, status) {
-  switch (status) {
-    case "unauthorized":
-      return `${displayName} rejected the API key. Check the key and try again.`;
-    case "forbidden":
-      return `The API key is not allowed for ${displayName}. Check its permissions.`;
-    case "timeout":
-      return `Validating the ${displayName} API key timed out. Check your connection and try again.`;
-    case "network":
-      return `Could not reach ${displayName} to validate the API key. Check your connection and try again.`;
-    case "server":
-      return `${displayName} returned an error while validating the API key. Try again later.`;
-    default:
-      return `Could not validate the ${displayName} API key. Check the key and try again.`;
-  }
-}
 function writeObserverEvents(req, res, workspace, store22) {
   res.writeHead(200, withSecurityHeaders2({
     "Content-Type": "text/event-stream",
@@ -83411,6 +83525,162 @@ var THEATER_SHELL_SESSION_PREFIX2 = "shell:";
 var SERVER_TIMEOUT_MS = 30 * 60 * 1e3;
 var MAX_BODY_BYTES = 1024 * 1024;
 var UPDATE_APPLY_FORBIDDEN_BODY_KEYS = /* @__PURE__ */ new Set(["channel", "package", "packageName", "packageVersion", "packages", "targetVersion", "version"]);
+var SERVER_API_CATALOG = [
+  {
+    method: "GET",
+    path: "/observer/status",
+    summary: "Get the console observation status.",
+    category: "Observer",
+    gate: "loopback"
+  },
+  {
+    method: "GET",
+    path: "/observer/api-catalog",
+    summary: "Get the backend API catalog.",
+    category: "Observer",
+    gate: "loopback"
+  },
+  {
+    method: "GET",
+    path: "/observer/tenants",
+    summary: "List observed terminal workspaces.",
+    category: "Observer",
+    gate: "loopback"
+  },
+  {
+    method: "GET",
+    path: "/observer/jobs",
+    summary: "List observed carrier jobs.",
+    category: "Observer",
+    gate: "loopback"
+  },
+  {
+    method: "GET",
+    path: "/observer/events",
+    summary: "Open the observation event stream.",
+    category: "Observer",
+    gate: "loopback"
+  },
+  {
+    method: "GET",
+    path: "/observer/theaters",
+    summary: "List Theaters.",
+    category: "Observer",
+    gate: "loopback"
+  },
+  {
+    method: "POST",
+    path: "/observer/theaters",
+    summary: "Register a new Theater.",
+    category: "Observer",
+    gate: "terminal-origin"
+  },
+  {
+    method: "DELETE",
+    path: "/observer/theaters/:theaterId",
+    summary: "Remove a Theater and its Operations.",
+    category: "Observer",
+    gate: "terminal-origin"
+  },
+  {
+    method: "POST",
+    path: "/observer/theaters/:theaterId/sessions",
+    summary: "Create a new Operation in a Theater.",
+    category: "Observer",
+    gate: "terminal-origin"
+  },
+  {
+    method: "POST",
+    path: "/terminal/ticket",
+    summary: "Issue a terminal WebSocket connection ticket.",
+    category: "Terminal",
+    gate: "terminal-origin"
+  },
+  {
+    method: "POST",
+    path: "/terminal/folders/list",
+    summary: "List terminal folder selection entries.",
+    category: "Terminal",
+    gate: "terminal-origin"
+  },
+  {
+    method: "POST",
+    path: "/terminal/folders/grants",
+    summary: "Issue a terminal folder access grant.",
+    category: "Terminal",
+    gate: "terminal-origin"
+  },
+  {
+    method: "GET",
+    path: "/terminal/sessions",
+    summary: "List terminal Operations.",
+    category: "Terminal",
+    gate: "terminal-origin"
+  },
+  {
+    method: "POST",
+    path: "/terminal/sessions",
+    summary: "Create a new terminal Operation.",
+    category: "Terminal",
+    gate: "terminal-origin"
+  },
+  {
+    method: "POST",
+    path: "/terminal/sessions/:sessionId/resume",
+    summary: "Resume a dormant Operation.",
+    category: "Terminal",
+    gate: "terminal-origin"
+  },
+  {
+    method: "POST",
+    path: "/terminal/sessions/:sessionId/turn",
+    summary: "Receive an Agent CLI turn state hook.",
+    category: "Terminal",
+    gate: "lock-token"
+  },
+  {
+    method: "POST",
+    path: "/terminal/sessions/:sessionId/attention",
+    summary: "Receive an input-waiting attention hook.",
+    category: "Terminal",
+    gate: "lock-token"
+  },
+  {
+    method: "POST",
+    path: "/terminal/sessions/:sessionId/auto-name",
+    summary: "Receive an Operation auto-name hook.",
+    category: "Terminal",
+    gate: "lock-token"
+  },
+  {
+    method: "DELETE",
+    path: "/terminal/sessions/:sessionId",
+    summary: "Remove a terminal Operation.",
+    category: "Terminal",
+    gate: "terminal-origin"
+  },
+  {
+    method: "PATCH",
+    path: "/terminal/sessions/:sessionId",
+    summary: "Rename a terminal Operation.",
+    category: "Terminal",
+    gate: "terminal-origin"
+  },
+  {
+    method: "POST",
+    path: "/update/apply",
+    summary: "Request console update application.",
+    category: "Update",
+    gate: "console-origin"
+  },
+  {
+    method: "GET",
+    path: "/health",
+    summary: "Check console status with the lock token.",
+    category: "Health",
+    gate: "lock-token"
+  }
+];
 function createConsoleServer(deps = {}) {
   const host = deps.host ?? DEFAULT_HOST22;
   const port = deps.port ?? DEFAULT_PORT22;
@@ -83611,12 +83881,12 @@ function createConsoleServer(deps = {}) {
       handleObserverStatus(req, res);
       return;
     }
-    if (pathname === "/update/apply") {
-      runAsyncHandler(handleUpdateApply(req, res), res);
+    if (pathname === "/observer/api-catalog") {
+      handleObserverApiCatalog(req, res);
       return;
     }
-    if (pathname === "/observer/carriers") {
-      handleObserverCarriers(req, res);
+    if (pathname === "/update/apply") {
+      runAsyncHandler(handleUpdateApply(req, res), res);
       return;
     }
     if (pathname === "/carrier-settings" || pathname.startsWith("/carrier-settings/")) {
@@ -84062,6 +84332,9 @@ function createConsoleServer(deps = {}) {
     };
     writeJson(res, 200, payload);
   }
+  function handleObserverApiCatalog(_req, res) {
+    writeJson(res, 200, { version: version22, routes: buildApiCatalog() });
+  }
   async function handleUpdateApply(req, res) {
     if (req.method !== "POST") {
       writeJson(res, 405, { error: "Method not allowed" });
@@ -84125,11 +84398,6 @@ function createConsoleServer(deps = {}) {
     const payload = { status: "accepted" };
     writeJson(res, 202, payload);
   }
-  function handleObserverCarriers(_req, res) {
-    writeJson(res, 200, {
-      carriers: readCarrierStatusEntries(carrierRegistry).map(toCarrierReadinessEntry)
-    });
-  }
   function handleObserverWorkspaces(_req, res) {
     writeJson(res, 200, { tenants: observability.listWorkspaces() });
   }
@@ -84199,20 +84467,6 @@ function createConsoleServer(deps = {}) {
       activeAdmiralCount: observability.listWorkspaces().filter((workspace) => workspace.theaterId === theater.id).length
     };
   }
-  function toCarrierReadinessEntry(entry) {
-    return {
-      carrierId: entry.carrierId,
-      displayName: entry.displayName,
-      role: entry.role,
-      model: entry.model,
-      effort: entry.effort,
-      taskForceBackendCount: entry.taskForceBackendCount,
-      subagentMode: entry.subagentMode,
-      ...entry.category ? { category: entry.category } : {},
-      slot: entry.slot,
-      cliType: entry.cliType
-    };
-  }
   function resolveWikiServerStatus(theaterId) {
     if (!theaterId) return "unknown";
     if (!theaters.get(theaterId)) return "unknown";
@@ -85902,7 +86156,7 @@ import { appendFile as appendFile2, mkdir as mkdir3, readFile as readFile22 } fr
 import { mkdir as mkdir22 } from "fs/promises";
 import path33 from "path";
 import { mkdir as mkdir5, readdir as readdir3, readFile as readFile4, writeFile as writeFile3 } from "fs/promises";
-import path24 from "path";
+import path25 from "path";
 import path102 from "path";
 import { mkdir as mkdir52 } from "fs/promises";
 import path72 from "path";
@@ -86384,18 +86638,18 @@ Always read \`schema/wiki-schema.md\` directly before composing or revising entr
 `;
 async function ensureWorkspaceSchema2(paths) {
   await mkdir5(paths.schemaDir, { recursive: true });
-  await writeDefaultFileIfMissing2(path24.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME2), DEFAULT_WORKSPACE_SCHEMA_AGENTS2);
-  await writeDefaultFileIfMissing2(path24.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME2), DEFAULT_WORKSPACE_WIKI_SCHEMA2);
+  await writeDefaultFileIfMissing2(path25.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME2), DEFAULT_WORKSPACE_SCHEMA_AGENTS2);
+  await writeDefaultFileIfMissing2(path25.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME2), DEFAULT_WORKSPACE_WIKI_SCHEMA2);
   await writeDefaultFileIfMissing2(buildTemplatePath2(paths, "prd"), DEFAULT_TEMPLATE_PRD2);
   return readWorkspaceSchemaSummary2(paths);
 }
 async function ensureWorkspaceDoctrine2(paths) {
   await mkdir5(paths.root, { recursive: true });
-  await writeDefaultFileIfMissing2(path24.join(paths.root, WORKSPACE_KNOWLEDGE_AGENTS_FILENAME2), DEFAULT_WORKSPACE_KNOWLEDGE_AGENTS2);
+  await writeDefaultFileIfMissing2(path25.join(paths.root, WORKSPACE_KNOWLEDGE_AGENTS_FILENAME2), DEFAULT_WORKSPACE_KNOWLEDGE_AGENTS2);
 }
 async function readWorkspaceSchemaSummary2(paths) {
-  const agentsPath = path24.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME2);
-  const wikiSchemaPath = path24.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME2);
+  const agentsPath = path25.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME2);
+  const wikiSchemaPath = path25.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME2);
   const wikiSchemaContent = await tryReadFile2(wikiSchemaPath);
   const templates = await scanTemplates2(paths);
   if (wikiSchemaContent === null) {
@@ -86434,7 +86688,7 @@ async function scanTemplates2(paths) {
     if (!entry.name.startsWith(WORKSPACE_TEMPLATE_PREFIX2) || !entry.name.endsWith(WORKSPACE_TEMPLATE_SUFFIX2)) continue;
     const id = entry.name.slice(WORKSPACE_TEMPLATE_PREFIX2.length, -WORKSPACE_TEMPLATE_SUFFIX2.length);
     if (!id) continue;
-    const filePath = path24.join(paths.schemaDir, entry.name);
+    const filePath = path25.join(paths.schemaDir, entry.name);
     try {
       const parsed = parseTemplateMarkdown2(await readFile4(filePath, "utf8"));
       templates.push({
@@ -86468,7 +86722,7 @@ async function validateTemplateCompliance2(paths, templateId, body) {
   }
 }
 function inferTemplateIdFromTarget2(target, knownTemplateIds) {
-  const basename = path24.basename(target, ".md");
+  const basename = path25.basename(target, ".md");
   const ids = knownTemplateIds ?? DEFAULT_TEMPLATE_IDS2;
   const sorted = [...ids].sort((a, b) => b.length - a.length);
   for (const id of sorted) {
@@ -86497,7 +86751,7 @@ function extractSchemaSummary2(content) {
   return lines.find((line) => line.length > 0 && !line.startsWith("#")) ?? "Workspace schema is present.";
 }
 function buildTemplatePath2(paths, id) {
-  return path24.join(paths.schemaDir, `${WORKSPACE_TEMPLATE_PREFIX2}${id}${WORKSPACE_TEMPLATE_SUFFIX2}`);
+  return path25.join(paths.schemaDir, `${WORKSPACE_TEMPLATE_PREFIX2}${id}${WORKSPACE_TEMPLATE_SUFFIX2}`);
 }
 function parseTemplateMarkdown2(content) {
   const normalized = content.replace(/\r\n/g, "\n");
@@ -92314,7 +92568,7 @@ function renderCarrierHudStrip(width, carriers, frame, theme) {
   return [line];
 }
 function appendWidgetJobSummary(carrierRuntime, lines, width, jobs3, frame, theme, now) {
-  const subagentModes = readCarrierAgentModeSnapshot(buildCarrierDefaults2(carrierRuntime)).agentModes;
+  const subagentModes = readCarrierAgentModeSnapshot(buildCarrierDefaults(carrierRuntime)).agentModes;
   const groups = buildCarrierJobGroups(
     jobs3,
     getRegisteredOrder(carrierRuntime.registry),
@@ -92365,7 +92619,7 @@ function appendTrackRows(carrierRuntime, lines, width, job, jobColor, frame, the
 }
 function buildCarrierTiles(carrierRuntime, activeJobs) {
   const snapshot = readCarriersSnapshot();
-  const subagentModes = readCarrierAgentModeSnapshot(buildCarrierDefaults2(carrierRuntime)).agentModes;
+  const subagentModes = readCarrierAgentModeSnapshot(buildCarrierDefaults(carrierRuntime)).agentModes;
   return getRegisteredOrder(carrierRuntime.registry).map((carrierId) => {
     const activeCarrierJobs = activeJobs.filter((job) => job.ownerCarrierId === carrierId);
     const taskForceBackendCount = getConfiguredTaskForceBackendsFromSnapshot(snapshot, carrierId).length;
@@ -92450,7 +92704,7 @@ function groupTrackModelEffortLabel(group) {
   const track = carrierJobs[0]?.tracks[0];
   return track ? trackModelEffortLabel(track) : "";
 }
-function buildCarrierDefaults2(carrierRuntime) {
+function buildCarrierDefaults(carrierRuntime) {
   return Object.fromEntries(
     getRegisteredOrder(carrierRuntime.registry).map((carrierId) => {
       const config3 = getCarrierConfig(carrierRuntime.registry, carrierId);