@dotobokuri/fleet-console 1.16.0 → 1.17.0

package/dist/cli.mjs

@@ -2,8 +2,8 @@
 import { spawn, execFileSync, execFile, execSync } from 'child_process';
 import * as fs11 from 'fs';
 import fs11__default, { readFileSync, realpathSync, accessSync, constants, existsSync, lstatSync } from 'fs';
-import * as path25 from 'path';
-import path25__default, { join, resolve, relative, sep, dirname } from 'path';
+import * as path26 from 'path';
+import path26__default, { join, resolve, relative, sep, dirname } from 'path';
 import process4 from 'process';
 import { fileURLToPath, pathToFileURL } from 'url';
 import * as os3 from 'os';
@@ -17124,6 +17124,27 @@ function isChildProcessRunning(child) {
 }
 
 // ../../packages/core-unified-agent/src/connection/BaseConnection.ts
+var STDERR_DIAGNOSTIC_LINE_LIMIT = 20;
+var STDERR_DIAGNOSTIC_LINE_CHAR_LIMIT = 2e3;
+var STDERR_DIAGNOSTIC_TOTAL_BYTE_LIMIT = 8e3;
+var ANSI_PATTERN = /\x1b\[[0-?]*[ -/]*[@-~]/g;
+var CONTROL_PATTERN = /[\x00-\x08\x0B\x0C\x0E-\x1F\x7F]/g;
+var SECRET_PATTERNS = [
+  { label: "aws_access_key", pattern: /AKIA[0-9A-Z]{16}/g },
+  { label: "github_token", pattern: /gh[psour]_[A-Za-z0-9]{36}/g },
+  { label: "jwt", pattern: /eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g },
+  { label: "openai_key", pattern: /\bsk-[A-Za-z0-9_-]{20,}\b/g },
+  {
+    label: "generic_secret",
+    pattern: /\b[A-Z0-9_]*(?:KEY|TOKEN|SECRET|PASSWORD|CREDENTIAL)[A-Z0-9_]*\s*[:=]\s*["']?[^\s"']+["']?/gi
+  },
+  {
+    label: "pem_private_key",
+    pattern: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]+?-----END [A-Z ]*PRIVATE KEY-----/g
+  }
+];
+var PEM_BEGIN_PATTERN = /-----BEGIN [A-Z ]*PRIVATE KEY-----/;
+var PEM_END_PATTERN = /-----END [A-Z ]*PRIVATE KEY-----/;
 var BaseConnection = class extends EventEmitter {
   child = null;
   state = "disconnected";
@@ -17137,6 +17158,9 @@ var BaseConnection = class extends EventEmitter {
   initTimeout;
   promptIdleTimeout;
   stderrBuffer = "";
+  diagnosticStderrTail = [];
+  // PEM 블록 내부 여부 추적 (줄 단위 수신 시 바디 라인 누출 방지)
+  inPemBlock = false;
   constructor(options) {
     super();
     this.command = options.command;
@@ -17268,9 +17292,32 @@ var BaseConnection = class extends EventEmitter {
     if (!message) {
       return;
     }
+    this.recordDiagnosticStderrLine(message);
     this.emit("log", message);
     this.emit("logEntry", this.createStructuredLogEntry(message));
   }
+  /** 실패 메시지에 붙일 수 있는 짧고 마스킹된 stderr tail을 반환합니다. */
+  getStderrDiagnosticTail() {
+    return this.diagnosticStderrTail.join("\n");
+  }
+  /** 원본 에러에 stderr tail 진단을 붙여 상위 계층으로 전달합니다. */
+  withStderrDiagnostics(error51, phase) {
+    const baseError = error51 instanceof Error ? error51 : new Error(String(error51));
+    this.flushStderrBuffer();
+    const stderrTail = this.getStderrDiagnosticTail();
+    if (!stderrTail || baseError.message.includes(`${phase} stderr tail:`)) {
+      return baseError;
+    }
+    const diagnosticError = new Error(
+      `${baseError.message}
+
+${phase} stderr tail:
+${stderrTail}`,
+      { cause: baseError }
+    );
+    diagnosticError.name = baseError.name;
+    return diagnosticError;
+  }
   /** 기본 구조화 stderr 로그 항목을 생성합니다. */
   createStructuredLogEntry(message) {
     return {
@@ -17307,6 +17354,27 @@ var BaseConnection = class extends EventEmitter {
       })
     ]);
   }
+  recordDiagnosticStderrLine(message) {
+    const pemMarkerLine = normalizePemMarkerLine(message);
+    if (PEM_BEGIN_PATTERN.test(pemMarkerLine)) {
+      this.inPemBlock = true;
+    }
+    const inBlock = this.inPemBlock;
+    if (PEM_END_PATTERN.test(pemMarkerLine)) {
+      this.inPemBlock = false;
+    }
+    const sanitized = sanitizeDiagnosticStderrLine(message, inBlock);
+    if (!sanitized) {
+      return;
+    }
+    this.diagnosticStderrTail.push(sanitized);
+    while (this.diagnosticStderrTail.length > STDERR_DIAGNOSTIC_LINE_LIMIT) {
+      this.diagnosticStderrTail.shift();
+    }
+    while (byteLength(this.getStderrDiagnosticTail()) > STDERR_DIAGNOSTIC_TOTAL_BYTE_LIMIT && this.diagnosticStderrTail.length > 1) {
+      this.diagnosticStderrTail.shift();
+    }
+  }
 };
 function quoteForCmd(token) {
   if (token === "") {
@@ -17321,6 +17389,26 @@ function buildWindowsCmdArgs(command2, args) {
   const line = [command2, ...args].map(quoteForCmd).join(" ");
   return ["/S", "/C", `"${line}"`];
 }
+function sanitizeDiagnosticStderrLine(value, isPemLine) {
+  const cleaned = (isPemLine ? "[REDACTED:pem_private_key]" : redactDiagnosticSecrets(value.replace(ANSI_PATTERN, "").replace(CONTROL_PATTERN, ""))).trim();
+  if (cleaned.length <= STDERR_DIAGNOSTIC_LINE_CHAR_LIMIT) {
+    return cleaned;
+  }
+  const omitted = cleaned.length - STDERR_DIAGNOSTIC_LINE_CHAR_LIMIT;
+  return `${cleaned.slice(0, STDERR_DIAGNOSTIC_LINE_CHAR_LIMIT)} [truncated ${omitted} chars]`;
+}
+function normalizePemMarkerLine(value) {
+  return value.replace(ANSI_PATTERN, "").replace(CONTROL_PATTERN, "").trim();
+}
+function redactDiagnosticSecrets(value) {
+  return SECRET_PATTERNS.reduce(
+    (text, { label, pattern }) => text.replace(pattern, `[REDACTED:${label}]`),
+    value
+  );
+}
+function byteLength(value) {
+  return Buffer.byteLength(value, "utf8");
+}
 
 // ../../packages/core-unified-agent/src/connection/AcpConnection.ts
 var AcpConnection = class extends BaseConnection {
@@ -17381,7 +17469,7 @@ var AcpConnection = class extends BaseConnection {
         await this.disconnect();
       } catch {
       }
-      throw error51;
+      throw this.withStderrDiagnostics(error51, "ACP initialize");
     }
   }
   /**
@@ -17393,46 +17481,50 @@ var AcpConnection = class extends BaseConnection {
    * @returns 세션 정보
    */
   async createSession(workspace, sessionId, mcpServers, systemPrompt, strictMcp, effort) {
-    const agent = this.getAgent();
-    const servers = mcpServers ?? [];
-    let session;
-    if (sessionId) {
-      if (!agent.loadSession) {
-        throw new Error("\uC5F0\uACB0\uB41C \uC5D0\uC774\uC804\uD2B8\uAC00 session/load\uB97C \uC9C0\uC6D0\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4");
-      }
-      const loadSessionParams = {
-        sessionId,
-        cwd: workspace,
-        mcpServers: servers
-      };
-      const meta3 = this.buildClaudeSessionMeta(systemPrompt, strictMcp, effort);
-      if (meta3) {
-        loadSessionParams._meta = meta3;
+    try {
+      const agent = this.getAgent();
+      const servers = mcpServers ?? [];
+      let session;
+      if (sessionId) {
+        if (!agent.loadSession) {
+          throw new Error("\uC5F0\uACB0\uB41C \uC5D0\uC774\uC804\uD2B8\uAC00 session/load\uB97C \uC9C0\uC6D0\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4");
+        }
+        const loadSessionParams = {
+          sessionId,
+          cwd: workspace,
+          mcpServers: servers
+        };
+        const meta3 = this.buildClaudeSessionMeta(systemPrompt, strictMcp, effort);
+        if (meta3) {
+          loadSessionParams._meta = meta3;
+        }
+        const loadResult = await this.withFixedTimeout(
+          agent.loadSession(loadSessionParams),
+          this.initTimeout,
+          "session/load"
+        );
+        session = { ...loadResult, sessionId };
+      } else {
+        const newSessionParams = {
+          cwd: workspace,
+          mcpServers: servers
+        };
+        const meta3 = this.buildClaudeSessionMeta(systemPrompt, strictMcp, effort);
+        if (meta3) {
+          newSessionParams._meta = meta3;
+        }
+        session = await this.withFixedTimeout(
+          agent.newSession(newSessionParams),
+          this.initTimeout,
+          "session/new"
+        );
       }
-      const loadResult = await this.withFixedTimeout(
-        agent.loadSession(loadSessionParams),
-        this.initTimeout,
-        "session/load"
-      );
-      session = { ...loadResult, sessionId };
-    } else {
-      const newSessionParams = {
-        cwd: workspace,
-        mcpServers: servers
-      };
-      const meta3 = this.buildClaudeSessionMeta(systemPrompt, strictMcp, effort);
-      if (meta3) {
-        newSessionParams._meta = meta3;
-      }
-      session = await this.withFixedTimeout(
-        agent.newSession(newSessionParams),
-        this.initTimeout,
-        "session/new"
-      );
+      this.setState("ready");
+      this.activeSessionId = session.sessionId;
+      return session;
+    } catch (error51) {
+      throw this.withStderrDiagnostics(error51, sessionId ? "ACP session/load" : "ACP session/new");
     }
-    this.setState("ready");
-    this.activeSessionId = session.sessionId;
-    return session;
   }
   /**
    * ACP 연결을 시작합니다.
@@ -17475,14 +17567,18 @@ var AcpConnection = class extends BaseConnection {
     if (meta3) {
       loadSessionParams._meta = meta3;
     }
-    const result = await this.withFixedTimeout(
-      agent.loadSession(loadSessionParams),
-      this.requestTimeout,
-      "session/load"
-    );
-    this.activeSessionId = params.sessionId;
-    this.setState("ready");
-    return result;
+    try {
+      const result = await this.withFixedTimeout(
+        agent.loadSession(loadSessionParams),
+        this.requestTimeout,
+        "session/load"
+      );
+      this.activeSessionId = params.sessionId;
+      this.setState("ready");
+      return result;
+    } catch (error51) {
+      throw this.withStderrDiagnostics(error51, "ACP session/load");
+    }
   }
   /**
    * 현재 세션을 종료합니다 (프로세스는 유지).
@@ -19790,12 +19886,12 @@ var CodexAppServerConnection = class extends BaseConnection {
     );
   }
   findRolloutPathForThreadId(threadId) {
-    const codexHome = this.codexHome ?? this.env.CODEX_HOME ?? path25.join(this.env.HOME ?? "", ".codex");
+    const codexHome = this.codexHome ?? this.env.CODEX_HOME ?? path26.join(this.env.HOME ?? "", ".codex");
     if (!codexHome) {
       return null;
     }
     for (const rootName of ["sessions", "archived_sessions"]) {
-      const found = findRolloutPath(path25.join(codexHome, rootName), threadId);
+      const found = findRolloutPath(path26.join(codexHome, rootName), threadId);
       if (found) {
         return found;
       }
@@ -19906,7 +20002,7 @@ function findRolloutPath(root, threadId) {
     return null;
   }
   for (const entry of fs11.readdirSync(root, { withFileTypes: true })) {
-    const entryPath = path25.join(root, entry.name);
+    const entryPath = path26.join(root, entry.name);
     if (entry.isDirectory()) {
       const found = findRolloutPath(entryPath, threadId);
       if (found) {
@@ -21740,7 +21836,7 @@ function resolvePathBinary(command2, env, options = {}) {
   return resolved ? wrapWindowsShim(resolved, env, platform) : void 0;
 }
 function wrapWindowsShim(resolved, env, platform) {
-  if (platform !== "win32" || !WINDOWS_SHIM_EXTENSIONS.has(path25__default.extname(resolved).toLowerCase())) {
+  if (platform !== "win32" || !WINDOWS_SHIM_EXTENSIONS.has(path26__default.extname(resolved).toLowerCase())) {
     return { bin: resolved, prefixArgs: [] };
   }
   rejectCmdExpansionSensitiveShim(resolved);
@@ -21758,13 +21854,13 @@ function forceWindowsArgQuoting(value) {
   return `${value} `;
 }
 function findOnPath(bin, pathValue, pathExts, platform) {
-  const pathSeparator = platform === "win32" ? WINDOWS_PATH_SEPARATOR : path25__default.delimiter;
-  if (hasPathSeparator(bin, platform) || path25__default.isAbsolute(bin)) {
+  const pathSeparator = platform === "win32" ? WINDOWS_PATH_SEPARATOR : path26__default.delimiter;
+  if (hasPathSeparator(bin, platform) || path26__default.isAbsolute(bin)) {
     return resolveWithExtensions(bin, pathExts, platform);
   }
   for (const entry of pathValue.split(pathSeparator)) {
     const searchDir = entry.length === 0 ? "." : entry;
-    const candidate = resolveWithExtensions(path25__default.join(searchDir, bin), pathExts, platform);
+    const candidate = resolveWithExtensions(path26__default.join(searchDir, bin), pathExts, platform);
     if (candidate) {
       return candidate;
     }
@@ -21772,7 +21868,7 @@ function findOnPath(bin, pathValue, pathExts, platform) {
   return void 0;
 }
 function resolveWithExtensions(candidate, pathExts, platform) {
-  if (platform !== "win32" || path25__default.extname(candidate).length > 0) {
+  if (platform !== "win32" || path26__default.extname(candidate).length > 0) {
     return existsSync(candidate) ? candidate : void 0;
   }
   for (const ext of pathExts) {
@@ -22837,7 +22933,7 @@ function formatInstallCommand(packageNames, command2, versionOrChannel) {
   return `${command2} i -g ${packageNames.map((name) => `${name}@${versionOrChannel}`).join(" ")}`;
 }
 function isPathInside(deps, child, parent) {
-  const separator = deps.platform === "win32" ? "\\" : path25__default.sep;
+  const separator = deps.platform === "win32" ? "\\" : path26__default.sep;
   return child === parent || child.startsWith(`${parent}${separator}`);
 }
 function normalizeExistingPath(deps, value) {
@@ -22852,10 +22948,10 @@ function normalizePath(deps, value) {
   return deps.platform === "win32" ? resolved.toLowerCase() : resolved;
 }
 function resolvePathForPlatform(platform, value) {
-  return platform === "win32" ? path25__default.win32.resolve(value) : path25__default.resolve(value);
+  return platform === "win32" ? path26__default.win32.resolve(value) : path26__default.resolve(value);
 }
 function joinPathForPlatform(platform, ...parts) {
-  return platform === "win32" ? path25__default.win32.join(...parts) : path25__default.join(...parts);
+  return platform === "win32" ? path26__default.win32.join(...parts) : path26__default.join(...parts);
 }
 function defaultExecFile(file2, args) {
   return execFileSync(file2, args, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
@@ -23021,7 +23117,7 @@ function cleanupTempFiles(dir, prefix, minAgeMs, now) {
     if (!entry.startsWith(prefix)) {
       continue;
     }
-    const tempPath = path25.join(dir, entry);
+    const tempPath = path26.join(dir, entry);
     try {
       const stat5 = fs11.lstatSync(tempPath);
       if (stat5?.isFile() && !stat5.isSymbolicLink() && now - stat5.mtimeMs >= minAgeMs) {
@@ -23127,7 +23223,7 @@ function writeLockOwner(lockDir, ownerFileName, startedAt) {
     hostname: os3.hostname(),
     startedAt
   };
-  const ownerPath = path25.join(lockDir, ownerFileName);
+  const ownerPath = path26.join(lockDir, ownerFileName);
   try {
     fs11.writeFileSync(ownerPath, JSON.stringify(owner), { encoding: "utf-8", mode: 384 });
   } catch (error51) {
@@ -23136,7 +23232,7 @@ function writeLockOwner(lockDir, ownerFileName, startedAt) {
   }
 }
 function readLockOwner(lockDir, ownerFileName) {
-  const ownerPath = path25.join(lockDir, ownerFileName);
+  const ownerPath = path26.join(lockDir, ownerFileName);
   try {
     return sanitizeLockOwner(JSON.parse(fs11.readFileSync(ownerPath, "utf-8")));
   } catch (error51) {
@@ -23200,7 +23296,7 @@ function createDurableJsonStore(deps) {
   const sensitivity = deps.sensitivity;
   const mode = sensitivity === "sensitive" ? SECURE_FILE_MODE : 420;
   const minAgeMs = deps.tempCleanupMinAgeMs ?? DEFAULT_TEMP_FILE_MIN_AGE_MS;
-  const dir = path25.dirname(deps.filePath);
+  const dir = path26.dirname(deps.filePath);
   return {
     path: deps.filePath,
     load() {
@@ -23309,7 +23405,7 @@ function readRawCarriersOrDefaultStore() {
 }
 function getCarriersFilePath() {
   if (!runtimeState.storeDir) return null;
-  return path25.join(runtimeState.storeDir, FILENAME);
+  return path26.join(runtimeState.storeDir, FILENAME);
 }
 function updateCarriers(mutator) {
   if (!runtimeState.storeDir) return;
@@ -23324,7 +23420,7 @@ function updateCarriers(mutator) {
 function withStoreLock(operation) {
   if (!runtimeState.storeDir) return operation();
   fs11.mkdirSync(runtimeState.storeDir, { recursive: true });
-  const lockDir = path25.join(runtimeState.storeDir, LOCK_DIRNAME);
+  const lockDir = path26.join(runtimeState.storeDir, LOCK_DIRNAME);
   return withDirectoryLock(
     { lockDir, ownerFileName: LOCK_OWNER_FILENAME },
     operation
@@ -23335,10 +23431,10 @@ function readCarriers() {
   return readCarriersFromDir(runtimeState.storeDir);
 }
 function resolveDefaultStoreDir() {
-  return path25.join(os3.homedir(), DEFAULT_STORE_DIRNAME);
+  return path26.join(os3.homedir(), DEFAULT_STORE_DIRNAME);
 }
 function readCarriersFromDir(dir) {
-  const filePath = path25.join(dir, FILENAME);
+  const filePath = path26.join(dir, FILENAME);
   let fd;
   try {
     const stat5 = fs11.lstatSync(filePath);
@@ -23368,7 +23464,7 @@ function recordLastLocalWriteFingerprint(filePath, generation) {
 function writeCarriers(s) {
   if (!runtimeState.storeDir) throw new Error("Fleet store is not initialized.");
   fs11.mkdirSync(runtimeState.storeDir, { recursive: true });
-  const filePath = path25.join(runtimeState.storeDir, FILENAME);
+  const filePath = path26.join(runtimeState.storeDir, FILENAME);
   const next = serializeFleetCarriers(s);
   writeAtomicSync(filePath, `${JSON.stringify(next, null, 2)}
 `, { fsync: false, mode: 420 });
@@ -23393,7 +23489,7 @@ function sanitizeFleetCarriers(value) {
 }
 function unlinkStaleSubagentModeFile(dir) {
   try {
-    fs11.unlinkSync(path25.join(dir, STALE_SUBAGENT_MODE_FILENAME));
+    fs11.unlinkSync(path26.join(dir, STALE_SUBAGENT_MODE_FILENAME));
   } catch {
   }
 }
@@ -24852,9 +24948,9 @@ function buildJobSummaryText(prefix, status, successCount, failureCount, error51
 var HEAD_BYTE_RATIO = 0.25;
 var MAX_TEXT_CHARS = 24e3;
 var MAX_RAW_OUTPUT_CHARS = 12e3;
-var ANSI_PATTERN = /\x1b\[[0-?]*[ -/]*[@-~]/g;
-var CONTROL_PATTERN = /[\x00-\x08\x0B\x0C\x0E-\x1F\x7F]/g;
-var SECRET_PATTERNS = [
+var ANSI_PATTERN2 = /\x1b\[[0-?]*[ -/]*[@-~]/g;
+var CONTROL_PATTERN2 = /[\x00-\x08\x0B\x0C\x0E-\x1F\x7F]/g;
+var SECRET_PATTERNS2 = [
   { label: "aws_access_key", pattern: /AKIA[0-9A-Z]{16}/g },
   { label: "jwt", pattern: /eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g },
   { label: "github_token", pattern: /gh[psour]_[A-Za-z0-9]{36}/g },
@@ -24936,7 +25032,7 @@ function emptyGroupPlaceholderBlock(label, timestamp) {
 function applyByteCap(blocks, maxBytes, truncatedInLabel, enableSingleBlockCharSlice = false) {
   if (!maxBytes || maxBytes <= 0) return blocks;
   const full = blocks.map((block) => renderBlock(block)).join("\n\n").trimEnd();
-  if (byteLength(full) <= maxBytes) return blocks;
+  if (byteLength2(full) <= maxBytes) return blocks;
   if (enableSingleBlockCharSlice) {
     const sliced = trySliceOversizedSingleOrHeaderPayload(blocks, maxBytes, truncatedInLabel);
     if (sliced) return sliced;
@@ -24975,7 +25071,7 @@ function trySliceOversizedSingleOrHeaderPayload(blocks, maxBytes, truncatedInLab
   if (blocks.length === 1) {
     const block = blocks[0];
     const rendered = renderBlock(block);
-    if (byteLength(rendered) <= maxBytes) return null;
+    if (byteLength2(rendered) <= maxBytes) return null;
     return sliceSingleOversizedTextBlock(block, rendered, maxBytes, truncatedInLabel);
   }
   if (blocks.length === 2 && isSerializerGroupHeaderBlock(blocks[0]) && blocks[1]?.kind === "text") {
@@ -24984,12 +25080,12 @@ function trySliceOversizedSingleOrHeaderPayload(blocks, maxBytes, truncatedInLab
     const headerRendered = renderBlock(headerBlock);
     const bodyRendered = renderBlock(payloadBlock);
     const sep3 = "\n\n";
-    const prefixBytes = byteLength(headerRendered) + byteLength(sep3);
+    const prefixBytes = byteLength2(headerRendered) + byteLength2(sep3);
     const innerBudget = maxBytes - prefixBytes;
     if (innerBudget <= 0) {
       return [headerBlock, buildCharTruncatedMarkerBlock(payloadBlock.timestamp, countCodepointsInUtf8Buffer(Buffer.from(bodyRendered, "utf8")), truncatedInLabel)];
     }
-    if (byteLength(bodyRendered) <= innerBudget) return null;
+    if (byteLength2(bodyRendered) <= innerBudget) return null;
     const { head, marker, tail } = splitRenderedUtf8AtByteCap(bodyRendered, innerBudget, truncatedInLabel);
     return [
       headerBlock,
@@ -25025,7 +25121,7 @@ function splitRenderedUtf8AtByteCap(rendered, maxBytes, charLabel) {
   if (buf.length <= maxBytes) {
     return { head: rendered, marker: "", tail: "" };
   }
-  const sepLen = byteLength("\n\n");
+  const sepLen = byteLength2("\n\n");
   let headBudget = Math.min(buf.length, Math.floor(maxBytes * HEAD_BYTE_RATIO));
   const tailBudget = Math.min(buf.length, Math.floor(maxBytes * (1 - HEAD_BYTE_RATIO)));
   for (let iter = 0; iter < 200; iter++) {
@@ -25042,7 +25138,7 @@ function splitRenderedUtf8AtByteCap(rendered, maxBytes, charLabel) {
     const marker2 = buildCharTruncatedMarker(omittedChars, charLabel);
     const headStr = buf.subarray(0, headLen2).toString("utf8");
     const tailStr = buf.subarray(tailStart2).toString("utf8");
-    const total = byteLength(headStr) + sepLen + byteLength(marker2) + sepLen + byteLength(tailStr);
+    const total = byteLength2(headStr) + sepLen + byteLength2(marker2) + sepLen + byteLength2(tailStr);
     if (total <= maxBytes) {
       return { head: headStr, marker: marker2, tail: tailStr };
     }
@@ -25050,7 +25146,7 @@ function splitRenderedUtf8AtByteCap(rendered, maxBytes, charLabel) {
     if (headBudget === 0) break;
   }
   const marker = buildCharTruncatedMarker(Math.max(1, countCodepointsInUtf8Buffer(buf) - 1), charLabel);
-  const markerTotal = byteLength(marker) + 2 * sepLen;
+  const markerTotal = byteLength2(marker) + 2 * sepLen;
   const room = Math.max(1, maxBytes - markerTotal);
   const tailBudgetFallback = Math.min(buf.length, Math.max(1, Math.floor(room * (1 - HEAD_BYTE_RATIO))));
   let tailStart = utf8SuffixStartIndex(buf, tailBudgetFallback);
@@ -25122,12 +25218,12 @@ function buildTruncatedMarker(blocks, omittedStart, omittedCount, truncatedInLab
   };
 }
 function serializedBlocksBytes(blocks) {
-  return byteLength(blocks.map((block) => renderBlock(block)).join("\n\n").trimEnd());
+  return byteLength2(blocks.map((block) => renderBlock(block)).join("\n\n").trimEnd());
 }
 function serializedBlockBytes(block, includeSeparator) {
-  return byteLength(`${includeSeparator ? "\n\n" : ""}${renderBlock(block)}`);
+  return byteLength2(`${includeSeparator ? "\n\n" : ""}${renderBlock(block)}`);
 }
-function byteLength(value) {
+function byteLength2(value) {
   return Buffer.byteLength(value, "utf8");
 }
 function toArchiveBlock(kind, source, text, label, timestamp = Date.now()) {
@@ -25158,13 +25254,13 @@ function toToolCallArchiveBlock(source, title, status, rawOutput, toolCallId, la
   };
 }
 function sanitizeArchiveText(value, maxChars = MAX_TEXT_CHARS) {
-  const cleaned = value.replace(ANSI_PATTERN, "").replace(CONTROL_PATTERN, "");
+  const cleaned = value.replace(ANSI_PATTERN2, "").replace(CONTROL_PATTERN2, "");
   if (cleaned.length <= maxChars) return cleaned;
   return `${cleaned.slice(0, maxChars)}
 [truncated ${cleaned.length - maxChars} chars]`;
 }
 function redactSecrets(value) {
-  return SECRET_PATTERNS.reduce(
+  return SECRET_PATTERNS2.reduce(
     (text, { label, pattern }) => text.replace(pattern, `[REDACTED:${label}]`),
     value
   );
@@ -30813,6 +30909,9 @@ async function runCarrierJobInBackground(opts) {
   try {
     result = await runSingleCarrier(opts);
     finalStatus = result.status;
+    if (finalStatus === "error") {
+      finalError = result.error ?? result.responseText;
+    }
   } catch (error51) {
     finalStatus = "error";
     finalError = error51 instanceof Error ? error51.message : String(error51);
@@ -31011,7 +31110,7 @@ function resolveDispatchCwd(rawCwd, fallbackCwd) {
   if (rawCwd === void 0) return { ok: true, cwd: fallbackCwd };
   const trimmed = rawCwd.trim();
   if (trimmed.length === 0) return { ok: true, cwd: fallbackCwd };
-  if (!path25__default.isAbsolute(trimmed)) {
+  if (!path26__default.isAbsolute(trimmed)) {
     return {
       ok: false,
       error: `Invalid cwd "${rawCwd}": must be an absolute path. Provide an absolute directory or omit cwd to use the host session cwd.`
@@ -31208,8 +31307,8 @@ function createBoundCarrierJobs(registry3, boundStream = createBoundCarrierStrea
 // core/host/hooks/subagents-context.ts
 var FLEET_PLUGIN_NAME = "fleet";
 function runSubagentsContextHook(env) {
-  const fleetRoot = env.FLEET_ROOT ?? path25__default.join(env.HOME ?? os3__default.homedir(), ".fleet");
-  if (!canReadCarrierState(path25__default.join(fleetRoot, "carriers.json"))) {
+  const fleetRoot = env.FLEET_ROOT ?? path26__default.join(env.HOME ?? os3__default.homedir(), ".fleet");
+  if (!canReadCarrierState(path26__default.join(fleetRoot, "carriers.json"))) {
     return JSON.stringify({ hookSpecificOutput: { hookEventName: "SessionStart", additionalContext: "" } });
   }
   const carrierRuntime = createCarrierRuntime();
@@ -31342,7 +31441,7 @@ function createConsoleLock(deps = {}) {
   }
   function assertLockModes(lockFile) {
     if (typeof process.getuid !== "function") return;
-    const dir = path25__default.dirname(lockFile);
+    const dir = path26__default.dirname(lockFile);
     const dirMode = fsImpl.statSync(dir).mode & 511;
     const fileMode = fsImpl.statSync(lockFile).mode & 511;
     if (dirMode !== LOCK_DIR_MODE) {
@@ -31384,7 +31483,7 @@ function createConsoleLock(deps = {}) {
 }
 var FLEET_DATA_DIR_NAME = ".fleet";
 function getFleetDataDir() {
-  return path25.join(os3.homedir(), FLEET_DATA_DIR_NAME);
+  return path26.join(os3.homedir(), FLEET_DATA_DIR_NAME);
 }
 function readAuthStoreFile(filePath) {
   let fd;
@@ -31407,7 +31506,7 @@ function readAuthStoreFile(filePath) {
 }
 
 // ../../packages/fleet-infra/src/auth/auth-storage.ts
-var DEFAULT_AUTH_PATH = path25.join(getFleetDataDir(), "auth.json");
+var DEFAULT_AUTH_PATH = path26.join(getFleetDataDir(), "auth.json");
 var AUTH_LOCK_OWNER_FILE_NAME = "owner.json";
 var AUTH_LOCK_TIMEOUT_MS = 5e3;
 function createAuthService(deps = {}) {
@@ -31463,7 +31562,7 @@ function createAuthService(deps = {}) {
       }
     },
     async setApiKey(providerId, key) {
-      const dir = path25.dirname(authPath);
+      const dir = path26.dirname(authPath);
       ensureSafeDirectory(dir);
       withAuthLock(authPath, lockDir, () => {
         const data = fs11.existsSync(authPath) ? readAuthStoreFile(authPath) : {};
@@ -31500,8 +31599,8 @@ var LOCK_OWNER_FILE_NAME = "owner";
 var TEMP_FILE_PREFIX = `.tmp-${GLOBAL_OPTIONS_FILE_NAME}-`;
 function createGlobalOptionsStore(deps = {}) {
   const dataDir = deps.dataDir ?? getFleetDataDir();
-  const optionsPath = path25.join(dataDir, GLOBAL_OPTIONS_FILE_NAME);
-  const lockDir = path25.join(dataDir, LOCK_DIR_NAME);
+  const optionsPath = path26.join(dataDir, GLOBAL_OPTIONS_FILE_NAME);
+  const lockDir = path26.join(dataDir, LOCK_DIR_NAME);
   const store2 = createDurableJsonStore({
     filePath: optionsPath,
     lockDir,
@@ -31588,7 +31687,7 @@ function readFleetConsoleRelease() {
   const requireFromHere = createRequire(import.meta.url);
   const packageJsonPath = resolvePackageJsonPath(requireFromHere);
   const pkg = requireFromHere(packageJsonPath);
-  const packageRoot = path25__default.dirname(packageJsonPath);
+  const packageRoot = path26__default.dirname(packageJsonPath);
   const version2 = pkg.version ?? "";
   if (pkg.private === true) {
     return { channel: "local", version: version2, packageRoot };
@@ -31617,15 +31716,15 @@ var CONSOLE_CAPTURES_DIR_NAME = "captures";
 function createConsolePaths(deps = {}) {
   const env = deps.env ?? process.env;
   const base = env.FLEET_CONSOLE_DIR ?? defaultConsoleBaseDir(deps);
-  return { dir: base, lockFile: path25__default.join(base, LOCK_FILE_NAME) };
+  return { dir: base, lockFile: path26__default.join(base, LOCK_FILE_NAME) };
 }
 function createConsoleDataPaths(deps = {}) {
   const dir = defaultConsoleDataBaseDir(deps);
   return {
     dir,
-    stateFile: path25__default.join(dir, CONSOLE_STATE_FILE_NAME),
-    settingsFile: path25__default.join(dir, CONSOLE_SETTINGS_FILE_NAME),
-    capturesDir: path25__default.join(dir, CONSOLE_CAPTURES_DIR_NAME)
+    stateFile: path26__default.join(dir, CONSOLE_STATE_FILE_NAME),
+    settingsFile: path26__default.join(dir, CONSOLE_SETTINGS_FILE_NAME),
+    capturesDir: path26__default.join(dir, CONSOLE_CAPTURES_DIR_NAME)
   };
 }
 function defaultConsoleBaseDir(deps) {
@@ -31636,11 +31735,11 @@ function defaultConsoleBaseDir(deps) {
     return localConsoleDir(packageRoot);
   }
   const uid = deps.uid ?? (typeof process.getuid === "function" ? process.getuid() : 0);
-  return path25__default.join(os3__default.tmpdir(), `${LOCK_DIR_NAME2}-${uid}-${channel}`);
+  return path26__default.join(os3__default.tmpdir(), `${LOCK_DIR_NAME2}-${uid}-${channel}`);
 }
 function defaultConsoleDataBaseDir(deps) {
   if (deps.fleetDataDir !== void 0) {
-    return path25__default.join(deps.fleetDataDir, CONSOLE_DATA_DIR_NAME);
+    return path26__default.join(deps.fleetDataDir, CONSOLE_DATA_DIR_NAME);
   }
   const env = deps.env ?? process.env;
   if (env.FLEET_CONSOLE_DIR) {
@@ -31652,10 +31751,10 @@ function defaultConsoleDataBaseDir(deps) {
     const packageRoot = deps.packageRoot ?? (release ??= readFleetConsoleRelease()).packageRoot;
     return localConsoleDir(packageRoot);
   }
-  return path25__default.join(getFleetDataDir(), CONSOLE_DATA_DIR_NAME);
+  return path26__default.join(getFleetDataDir(), CONSOLE_DATA_DIR_NAME);
 }
 function localConsoleDir(packageRoot) {
-  return path25__default.join(path25__default.resolve(packageRoot, "..", ".."), ".fleet", CONSOLE_RUNTIME_DIR_NAME);
+  return path26__default.join(path26__default.resolve(packageRoot, "..", ".."), ".fleet", CONSOLE_RUNTIME_DIR_NAME);
 }
 
 // core/host/carrier-settings-routes.ts
@@ -32196,6 +32295,147 @@ function isJsonRequest2(req) {
 function isValidConsoleStaticPort(value) {
   return typeof value === "number" && Number.isInteger(value) && value >= MIN_CONSOLE_STATIC_PORT && value <= MAX_CONSOLE_STATIC_PORT;
 }
+var PLUGIN_ID_PATTERN = /^[a-z0-9][a-z0-9._-]*$/;
+var SETTINGS_VERSION = 1;
+var SETTINGS_LOCK_DIR_NAME = "settings.lock";
+var SETTINGS_LOCK_OWNER_FILE_NAME = "owner.json";
+var SETTINGS_TEMP_PREFIX = ".settings.";
+var MIN_CONSOLE_STATIC_PORT2 = 1024;
+var MAX_CONSOLE_STATIC_PORT2 = 65535;
+function createConsoleSettingsStore(deps = {}) {
+  const paths = deps.paths ?? createConsoleDataPaths();
+  const createStore = deps.createStore ?? createDurableJsonStore;
+  return createStore({
+    filePath: paths.settingsFile,
+    lockDir: path26__default.join(paths.dir, SETTINGS_LOCK_DIR_NAME),
+    lockOwnerFileName: SETTINGS_LOCK_OWNER_FILE_NAME,
+    now: deps.now,
+    sanitize: sanitizeConsoleSettingsData,
+    sensitivity: "sensitive",
+    tempCleanupPrefix: SETTINGS_TEMP_PREFIX
+  });
+}
+function sanitizeConsoleSettingsData(value) {
+  if (!isRecord4(value)) return emptyConsoleSettingsData();
+  if (value.version !== SETTINGS_VERSION) return emptyConsoleSettingsData();
+  const general = readConsoleGeneralSettings(value.general);
+  const plugins = readConsolePluginSettings(value.plugins);
+  return {
+    version: SETTINGS_VERSION,
+    general: general ?? {},
+    plugins: plugins ?? {}
+  };
+}
+function emptyConsoleSettingsData() {
+  return { version: 1, general: {}, plugins: {} };
+}
+function readConsoleGeneralSettings(value) {
+  if (!isRecord4(value)) return null;
+  const consolePortMode = value.consolePortMode === "dynamic" || value.consolePortMode === "static" ? value.consolePortMode : void 0;
+  const consoleStaticPort = isValidConsoleStaticPort2(value.consoleStaticPort) ? value.consoleStaticPort : void 0;
+  const theme = value.theme === "maritime" || value.theme === "carbon" ? value.theme : void 0;
+  return {
+    ...consolePortMode !== void 0 ? { consolePortMode } : {},
+    ...consoleStaticPort !== void 0 ? { consoleStaticPort } : {},
+    ...theme !== void 0 ? { theme } : {}
+  };
+}
+function readConsolePluginSettings(value) {
+  if (!isRecord4(value)) return null;
+  const result = {};
+  for (const [key, entry] of Object.entries(value)) {
+    if (!PLUGIN_ID_PATTERN.test(key)) continue;
+    if (!isRecord4(entry)) continue;
+    result[key] = entry;
+  }
+  return result;
+}
+function isRecord4(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isValidConsoleStaticPort2(value) {
+  return typeof value === "number" && Number.isInteger(value) && value >= MIN_CONSOLE_STATIC_PORT2 && value <= MAX_CONSOLE_STATIC_PORT2;
+}
+
+// core/host/plugin-settings-routes.ts
+var PLUGIN_SETTINGS_PREFIX = "/api/v1/settings/plugins/";
+var MAX_PLUGIN_SETTINGS_BYTES = 32 * 1024;
+var PLUGIN_SETTINGS_API_CATALOG = [
+  {
+    method: "GET",
+    path: "/api/v1/settings/plugins/:pluginId",
+    summary: "Get the settings for a specific plugin.",
+    category: "Settings",
+    gate: "loopback"
+  },
+  {
+    method: "PUT",
+    path: "/api/v1/settings/plugins/:pluginId",
+    summary: "Save the settings for a specific plugin.",
+    category: "Settings",
+    gate: "origin-write"
+  }
+];
+function createPluginSettingsRouter(deps) {
+  return async function handlePluginSettingsRoute(context) {
+    const { req, res, pathname } = context;
+    if (!pathname.startsWith(PLUGIN_SETTINGS_PREFIX)) return false;
+    const rest = pathname.slice(PLUGIN_SETTINGS_PREFIX.length);
+    if (rest.includes("/")) return false;
+    let pluginId;
+    try {
+      pluginId = decodeURIComponent(rest);
+    } catch {
+      deps.writeJson(res, 400, { error: "invalid_plugin_id" });
+      return true;
+    }
+    if (!PLUGIN_ID_PATTERN.test(pluginId)) {
+      deps.writeJson(res, 400, { error: "invalid_plugin_id" });
+      return true;
+    }
+    if (req.method === "GET") {
+      const data = deps.consoleSettingsStore.load();
+      const value = data.plugins?.[pluginId] ?? null;
+      deps.writeJson(res, 200, { value });
+      return true;
+    }
+    if (req.method === "PUT") {
+      if (!deps.isAuthorized(req)) {
+        deps.writeJson(res, 401, { error: "unauthorized" });
+        return true;
+      }
+      if (!isJsonRequest3(req)) {
+        deps.writeJson(res, 415, { error: "unsupported_media_type" });
+        return true;
+      }
+      const body = await deps.readJsonBody(req);
+      if (!isRecord5(body)) {
+        deps.writeJson(res, 400, { error: "invalid_json" });
+        return true;
+      }
+      if (Buffer.byteLength(JSON.stringify(body), "utf8") > MAX_PLUGIN_SETTINGS_BYTES) {
+        deps.writeJson(res, 413, { error: "payload_too_large" });
+        return true;
+      }
+      const updated = deps.consoleSettingsStore.update((current) => ({
+        ...current,
+        version: 1,
+        plugins: { ...current.plugins, [pluginId]: body }
+      }));
+      deps.writeJson(res, 200, { value: updated.plugins?.[pluginId] ?? null });
+      return true;
+    }
+    deps.writeJson(res, 405, { error: "Method not allowed" });
+    return true;
+  };
+}
+function isRecord5(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isJsonRequest3(req) {
+  const contentType = req.headers["content-type"];
+  return typeof contentType === "string" && contentType.toLowerCase().split(";")[0]?.trim() === "application/json";
+}
 
 // core/host/api-catalog.ts
 var compareApiCatalogEntries = (left, right) => left.category.localeCompare(right.category) || left.path.localeCompare(right.path) || left.method.localeCompare(right.method);
@@ -32203,7 +32443,8 @@ function buildApiCatalog() {
   return [
     ...SERVER_API_CATALOG,
     ...CARRIER_SETTINGS_API_CATALOG,
-    ...GLOBAL_SETTINGS_API_CATALOG
+    ...GLOBAL_SETTINGS_API_CATALOG,
+    ...PLUGIN_SETTINGS_API_CATALOG
   ].slice().sort(compareApiCatalogEntries);
 }
 
@@ -32613,18 +32854,18 @@ Always read \`schema/wiki-schema.md\` directly before composing or revising entr
 `;
 async function ensureWorkspaceSchema(paths) {
   await mkdir(paths.schemaDir, { recursive: true });
-  await writeDefaultFileIfMissing(path25__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME), DEFAULT_WORKSPACE_SCHEMA_AGENTS);
-  await writeDefaultFileIfMissing(path25__default.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME), DEFAULT_WORKSPACE_WIKI_SCHEMA);
+  await writeDefaultFileIfMissing(path26__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME), DEFAULT_WORKSPACE_SCHEMA_AGENTS);
+  await writeDefaultFileIfMissing(path26__default.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME), DEFAULT_WORKSPACE_WIKI_SCHEMA);
   await writeDefaultFileIfMissing(buildTemplatePath(paths, "prd"), DEFAULT_TEMPLATE_PRD);
   return readWorkspaceSchemaSummary(paths);
 }
 async function ensureWorkspaceDoctrine(paths) {
   await mkdir(paths.root, { recursive: true });
-  await writeDefaultFileIfMissing(path25__default.join(paths.root, WORKSPACE_KNOWLEDGE_AGENTS_FILENAME), DEFAULT_WORKSPACE_KNOWLEDGE_AGENTS);
+  await writeDefaultFileIfMissing(path26__default.join(paths.root, WORKSPACE_KNOWLEDGE_AGENTS_FILENAME), DEFAULT_WORKSPACE_KNOWLEDGE_AGENTS);
 }
 async function readWorkspaceSchemaSummary(paths) {
-  const agentsPath = path25__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME);
-  const wikiSchemaPath = path25__default.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME);
+  const agentsPath = path26__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME);
+  const wikiSchemaPath = path26__default.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME);
   const wikiSchemaContent = await tryReadFile(wikiSchemaPath);
   const templates = await scanTemplates(paths);
   if (wikiSchemaContent === null) {
@@ -32663,7 +32904,7 @@ async function scanTemplates(paths) {
     if (!entry.name.startsWith(WORKSPACE_TEMPLATE_PREFIX) || !entry.name.endsWith(WORKSPACE_TEMPLATE_SUFFIX)) continue;
     const id = entry.name.slice(WORKSPACE_TEMPLATE_PREFIX.length, -WORKSPACE_TEMPLATE_SUFFIX.length);
     if (!id) continue;
-    const filePath = path25__default.join(paths.schemaDir, entry.name);
+    const filePath = path26__default.join(paths.schemaDir, entry.name);
     try {
       const parsed = parseTemplateMarkdown(await readFile(filePath, "utf8"));
       templates.push({
@@ -32697,7 +32938,7 @@ async function validateTemplateCompliance(paths, templateId, body) {
   }
 }
 function inferTemplateIdFromTarget(target, knownTemplateIds) {
-  const basename = path25__default.basename(target, ".md");
+  const basename = path26__default.basename(target, ".md");
   const ids = knownTemplateIds ?? DEFAULT_TEMPLATE_IDS;
   const sorted = [...ids].sort((a, b) => b.length - a.length);
   for (const id of sorted) {
@@ -32726,7 +32967,7 @@ function extractSchemaSummary(content) {
   return lines.find((line) => line.length > 0 && !line.startsWith("#")) ?? "Workspace schema is present.";
 }
 function buildTemplatePath(paths, id) {
-  return path25__default.join(paths.schemaDir, `${WORKSPACE_TEMPLATE_PREFIX}${id}${WORKSPACE_TEMPLATE_SUFFIX}`);
+  return path26__default.join(paths.schemaDir, `${WORKSPACE_TEMPLATE_PREFIX}${id}${WORKSPACE_TEMPLATE_SUFFIX}`);
 }
 function parseTemplateMarkdown(content) {
   const normalized = content.replace(/\r\n/g, "\n");
@@ -32753,16 +32994,16 @@ function isAlreadyExistsError(error51) {
 
 // ../../packages/fleet-wiki/src/paths.ts
 function resolveMemoryPaths(cwd) {
-  const root = path25__default.join(cwd, KNOWLEDGE_ROOT_DIRNAME);
+  const root = path26__default.join(cwd, KNOWLEDGE_ROOT_DIRNAME);
   return {
     root,
-    rawDir: path25__default.join(root, RAW_DIRNAME),
-    wikiDir: path25__default.join(root, WIKI_DIRNAME),
-    schemaDir: path25__default.join(root, SCHEMA_DIRNAME),
-    queueDir: path25__default.join(root, QUEUE_DIRNAME),
-    archiveDir: path25__default.join(root, ARCHIVE_DIRNAME),
-    conflictsDir: path25__default.join(root, CONFLICTS_DIRNAME),
-    indexFile: path25__default.join(root, INDEX_FILENAME)
+    rawDir: path26__default.join(root, RAW_DIRNAME),
+    wikiDir: path26__default.join(root, WIKI_DIRNAME),
+    schemaDir: path26__default.join(root, SCHEMA_DIRNAME),
+    queueDir: path26__default.join(root, QUEUE_DIRNAME),
+    archiveDir: path26__default.join(root, ARCHIVE_DIRNAME),
+    conflictsDir: path26__default.join(root, CONFLICTS_DIRNAME),
+    indexFile: path26__default.join(root, INDEX_FILENAME)
   };
 }
 async function ensureMemoryRoot(paths) {
@@ -32777,10 +33018,10 @@ async function ensureMemoryRoot(paths) {
   await ensureWorkspaceDoctrine(paths);
 }
 function getIndexMarkdownFile(paths) {
-  return path25__default.join(paths.wikiDir, INDEX_MD_FILENAME);
+  return path26__default.join(paths.wikiDir, INDEX_MD_FILENAME);
 }
 function getLogFile(paths) {
-  return path25__default.join(paths.root, LOG_MD_FILENAME);
+  return path26__default.join(paths.root, LOG_MD_FILENAME);
 }
 
 // ../../packages/fleet-wiki/src/log.ts
@@ -32846,12 +33087,12 @@ async function readWikiEntry(id, paths) {
   const index = await loadIndex(paths);
   const indexed = index[id];
   if (indexed) {
-    const resolved = path25__default.resolve(paths.root, indexed.path);
-    const rel = path25__default.relative(paths.wikiDir, resolved);
-    if (!rel || rel.startsWith("..") || path25__default.isAbsolute(rel)) return null;
+    const resolved = path26__default.resolve(paths.root, indexed.path);
+    const rel = path26__default.relative(paths.wikiDir, resolved);
+    if (!rel || rel.startsWith("..") || path26__default.isAbsolute(rel)) return null;
     return readMarkdownFile(resolved);
   }
-  const fallbackPath = path25__default.join(paths.wikiDir, `${id}.md`);
+  const fallbackPath = path26__default.join(paths.wikiDir, `${id}.md`);
   if (await pathExists(fallbackPath)) {
     return readMarkdownFile(fallbackPath);
   }
@@ -32862,20 +33103,20 @@ async function readWikiEntry(id, paths) {
 async function writeWikiEntryAtTarget(entry, target, paths) {
   await ensureMemoryRoot(paths);
   assertSafeEntryId(entry.id);
-  const absoluteTarget = path25__default.resolve(paths.root, target);
-  const relativeTarget = path25__default.relative(paths.wikiDir, absoluteTarget);
-  if (!relativeTarget || relativeTarget.startsWith("..") || path25__default.isAbsolute(relativeTarget)) {
+  const absoluteTarget = path26__default.resolve(paths.root, target);
+  const relativeTarget = path26__default.relative(paths.wikiDir, absoluteTarget);
+  if (!relativeTarget || relativeTarget.startsWith("..") || path26__default.isAbsolute(relativeTarget)) {
     throw new Error(`[fleet-wiki] wiki target escapes wiki/: ${target}`);
   }
   if (!absoluteTarget.endsWith(".md")) {
     throw new Error(`[fleet-wiki] wiki target must end with .md: ${target}`);
   }
-  if (path25__default.basename(absoluteTarget, ".md") !== entry.id) {
+  if (path26__default.basename(absoluteTarget, ".md") !== entry.id) {
     throw new Error("wiki patch body id must match target filename");
   }
-  await mkdir(path25__default.dirname(absoluteTarget), { recursive: true });
+  await mkdir(path26__default.dirname(absoluteTarget), { recursive: true });
   await writeMarkdownAtomic(absoluteTarget, serializeWikiEntry(entry), paths);
-  return path25__default.join("wiki", relativeTarget).replaceAll(path25__default.sep, "/");
+  return path26__default.join("wiki", relativeTarget).replaceAll(path26__default.sep, "/");
 }
 async function listWiki(paths) {
   const entries = await listWikiRecords(paths);
@@ -33098,7 +33339,7 @@ function parseWikiEntry(content) {
 async function listWikiRecords(paths) {
   return listMarkdownEntriesRecursive(paths.wikiDir, paths, (content, filePath) => ({
     entry: parseWikiEntry(content),
-    path: path25__default.relative(paths.root, filePath).replaceAll(path25__default.sep, "/")
+    path: path26__default.relative(paths.root, filePath).replaceAll(path26__default.sep, "/")
   }));
 }
 async function listMarkdownEntriesRecursive(dirPath, paths, parser) {
@@ -33111,7 +33352,7 @@ async function listMarkdownEntriesRecursive(dirPath, paths, parser) {
   }
   const sortedEntries = entries.sort((left, right) => left.name.localeCompare(right.name));
   for (const entry of sortedEntries) {
-    const filePath = path25__default.join(dirPath, entry.name);
+    const filePath = path26__default.join(dirPath, entry.name);
     if (entry.isDirectory()) {
       items.push(...await listMarkdownEntriesRecursive(filePath, paths, parser));
       continue;
@@ -33249,8 +33490,8 @@ async function writeJsonAtomic(filePath, value, paths) {
 }
 async function writeAtomic(filePath, content, paths) {
   await ensureMemoryRoot(paths);
-  const tempPath = path25__default.join(
-    path25__default.dirname(filePath),
+  const tempPath = path26__default.join(
+    path26__default.dirname(filePath),
     `.tmp-${process.pid}-${Date.now()}-${crypto5.randomUUID()}-${os3__default.hostname()}`
   );
   await writeFile(tempPath, content, "utf8");
@@ -33344,7 +33585,7 @@ function toRankedHit(entry, reason, detail, graphBoost, backlinksById) {
     score: basePriority * 100 + statusPriority * 10 + graphScore + (detail.tagBoost ?? 0),
     reason,
     excerpt,
-    path: path25__default.join("wiki", `${entry.id}.md`),
+    path: path26__default.join("wiki", `${entry.id}.md`),
     tags: entry.tags,
     updated: entry.updated,
     version: entry.version,
@@ -33454,15 +33695,15 @@ var PATCH_SET_DIRNAME = "_sets";
 var PATCH_SET_META_FILENAME = PATCH_META_FILENAME;
 function getPatchSetDir(paths, patchSetId) {
   assertSafePatchSetId(patchSetId);
-  const patchSetDir = path25__default.join(paths.queueDir, PATCH_SET_DIRNAME, patchSetId);
-  const relative = path25__default.relative(path25__default.join(paths.queueDir, PATCH_SET_DIRNAME), patchSetDir);
-  if (!relative || relative.startsWith("..") || path25__default.isAbsolute(relative)) {
+  const patchSetDir = path26__default.join(paths.queueDir, PATCH_SET_DIRNAME, patchSetId);
+  const relative = path26__default.relative(path26__default.join(paths.queueDir, PATCH_SET_DIRNAME), patchSetDir);
+  if (!relative || relative.startsWith("..") || path26__default.isAbsolute(relative)) {
     throw new Error(`[fleet-wiki] patch set id escapes queue/_sets: ${patchSetId}`);
   }
   return patchSetDir;
 }
 function getPatchSetMetaFile(paths, patchSetId) {
-  return path25__default.join(getPatchSetDir(paths, patchSetId), PATCH_SET_META_FILENAME);
+  return path26__default.join(getPatchSetDir(paths, patchSetId), PATCH_SET_META_FILENAME);
 }
 async function readPatchSet(paths, patchSetId) {
   const patchSet = await readJsonFile2(getPatchSetMetaFile(paths, patchSetId));
@@ -33485,7 +33726,7 @@ async function createConflict(input, paths) {
   await ensureMemoryRoot(paths);
   const now = input.now ?? /* @__PURE__ */ new Date();
   const conflictId = buildConflictId(now, input.wikiId, input.reason, input.proposed);
-  const conflictDir = path25__default.join(paths.conflictsDir, conflictId);
+  const conflictDir = path26__default.join(paths.conflictsDir, conflictId);
   await mkdir(conflictDir, { recursive: true });
   const meta3 = {
     id: conflictId,
@@ -33505,13 +33746,13 @@ async function createConflict(input, paths) {
     currentHash: input.currentHash,
     warnings: input.warnings
   };
-  await writeJsonFile(path25__default.join(conflictDir, CONFLICT_META_FILENAME), meta3, paths);
-  await writePatchFile(path25__default.join(conflictDir, CONFLICT_PROPOSED_FILENAME), input.proposed, paths);
+  await writeJsonFile(path26__default.join(conflictDir, CONFLICT_META_FILENAME), meta3, paths);
+  await writePatchFile(path26__default.join(conflictDir, CONFLICT_PROPOSED_FILENAME), input.proposed, paths);
   if (input.current !== void 0) {
-    await writePatchFile(path25__default.join(conflictDir, CONFLICT_CURRENT_FILENAME), input.current, paths);
+    await writePatchFile(path26__default.join(conflictDir, CONFLICT_CURRENT_FILENAME), input.current, paths);
   }
   if (input.rawSource !== void 0) {
-    await writePatchFile(path25__default.join(conflictDir, CONFLICT_RAW_SOURCE_FILENAME), input.rawSource, paths);
+    await writePatchFile(path26__default.join(conflictDir, CONFLICT_RAW_SOURCE_FILENAME), input.rawSource, paths);
   }
   return {
     meta: meta3,
@@ -33561,11 +33802,11 @@ async function validatePatch(patch, paths) {
   if (!target || !summary || !proposer || !created) throw new Error("patch frontmatter is incomplete");
   if (summary.length > 120) throw new Error("patch summary exceeds 120 chars");
   assertCanonicalPatchTarget(target);
-  const absoluteTarget = path25__default.resolve(paths.root, target);
-  if (!absoluteTarget.startsWith(`${paths.root}${path25__default.sep}`) && absoluteTarget !== paths.root) {
+  const absoluteTarget = path26__default.resolve(paths.root, target);
+  if (!absoluteTarget.startsWith(`${paths.root}${path26__default.sep}`) && absoluteTarget !== paths.root) {
     throw new Error("patch target escapes wiki root");
   }
-  if (!absoluteTarget.startsWith(`${paths.wikiDir}${path25__default.sep}`)) throw new Error("wiki patch must target wiki/");
+  if (!absoluteTarget.startsWith(`${paths.wikiDir}${path26__default.sep}`)) throw new Error("wiki patch must target wiki/");
   assertNoSymlinkPathComponents(target, paths);
   if (op === "create_wiki" && await pathExists(absoluteTarget)) {
     throw new Error(
@@ -33589,7 +33830,7 @@ async function listQueue(paths) {
   for (const id of ids) {
     if (id === "_sets") continue;
     try {
-      const meta3 = await readJsonFile2(path25__default.join(paths.queueDir, id, PATCH_META_FILENAME));
+      const meta3 = await readJsonFile2(path26__default.join(paths.queueDir, id, PATCH_META_FILENAME));
       results.push({ id, meta: meta3 });
     } catch {
       continue;
@@ -33614,9 +33855,9 @@ async function resolveQueueSelection(id, paths) {
 }
 async function showQueue(id, paths) {
   const selection = await resolveQueueSelection(id, paths);
-  const queueDir = path25__default.join(paths.queueDir, selection.id);
-  const patch = await parsePatch(await readPatchFile(path25__default.join(queueDir, PATCH_FILENAME)));
-  const meta3 = await readJsonFile2(path25__default.join(queueDir, PATCH_META_FILENAME));
+  const queueDir = path26__default.join(paths.queueDir, selection.id);
+  const patch = await parsePatch(await readPatchFile(path26__default.join(queueDir, PATCH_FILENAME)));
+  const meta3 = await readJsonFile2(path26__default.join(queueDir, PATCH_META_FILENAME));
   return { patch, meta: meta3 };
 }
 async function approvePatch(id, paths) {
@@ -33639,8 +33880,8 @@ async function approvePatch(id, paths) {
           rawSourceRef: meta3.rawSourceRef,
           warnings: meta3.warnings
         });
-        const queueDir = path25__default.join(paths.queueDir, id);
-        await writeJsonFile(path25__default.join(queueDir, PATCH_META_FILENAME), {
+        const queueDir = path26__default.join(paths.queueDir, id);
+        await writeJsonFile(path26__default.join(queueDir, PATCH_META_FILENAME), {
           ...meta3,
           conflictId
         }, paths);
@@ -33693,7 +33934,7 @@ async function rejectPatch(id, reason, paths) {
 }
 async function normalizeWikiEntryPatch(entry, target, paths) {
   assertSafeEntryId(entry.id);
-  if (entry.id !== path25__default.basename(target, ".md")) {
+  if (entry.id !== path26__default.basename(target, ".md")) {
     throw new Error("wiki patch body id must match target filename");
   }
   const inlineRawSourceRef = extractInlineRawSourceRef(entry.body);
@@ -33731,9 +33972,9 @@ function extractInlineRawSourceRef(body) {
 }
 async function validatePatchBase(patch, meta3, paths) {
   if (patch.frontmatter.op !== "update_wiki" || !meta3?.baseVersion && !meta3?.baseHash) return;
-  const wikiId = path25__default.basename(patch.frontmatter.target, ".md");
+  const wikiId = path26__default.basename(patch.frontmatter.target, ".md");
   const currentEntry = await readWikiEntry(wikiId, paths);
-  const currentPath = path25__default.join(paths.root, patch.frontmatter.target);
+  const currentPath = path26__default.join(paths.root, patch.frontmatter.target);
   const currentMarkdown = await pathExists(currentPath) ? await readPatchFile(currentPath) : void 0;
   if (meta3.baseVersion !== void 0 && currentEntry?.version !== meta3.baseVersion) {
     throw new Error(
@@ -33792,17 +34033,17 @@ function assertCanonicalPatchTarget(target) {
   if (target.endsWith("/")) {
     throw new Error("patch target must not end with a slash");
   }
-  if (target.startsWith("/") || path25__default.posix.isAbsolute(target) || path25__default.win32.isAbsolute(target)) {
+  if (target.startsWith("/") || path26__default.posix.isAbsolute(target) || path26__default.win32.isAbsolute(target)) {
     throw new Error("patch target must be relative");
   }
-  if (path25__default.posix.normalize(target) !== target) {
+  if (path26__default.posix.normalize(target) !== target) {
     throw new Error("patch target must not contain dot segments or redundant separators");
   }
 }
 function canonicalApprovalLockKey(paths, target) {
   const wikiRoot = realpathSync(paths.wikiDir);
-  const relativeTarget = path25__default.posix.relative("wiki", target);
-  const targetPath = path25__default.join(wikiRoot, ...relativeTarget.split("/"));
+  const relativeTarget = path26__default.posix.relative("wiki", target);
+  const targetPath = path26__default.join(wikiRoot, ...relativeTarget.split("/"));
   return `${wikiRoot}\0${targetPath}`.toLowerCase();
 }
 function canonicalPatchEditLockKey(paths, patchId) {
@@ -33818,7 +34059,7 @@ function assertNoSymlinkPathComponents(target, paths) {
     throw error51;
   }
   for (const part of parts) {
-    current = path25__default.join(current, part);
+    current = path26__default.join(current, part);
     try {
       if (lstatSync(current).isSymbolicLink()) {
         throw new Error("patch target must not include symlink path components");
@@ -33833,8 +34074,8 @@ function assertSafeRawSourceRef(rawSourceRef, paths) {
   if (!rawSourceRef.startsWith("raw/")) {
     throw new Error("raw source provenance must point into raw/");
   }
-  const absoluteRef = path25__default.resolve(paths.root, rawSourceRef);
-  if (!absoluteRef.startsWith(`${paths.rawDir}${path25__default.sep}`)) {
+  const absoluteRef = path26__default.resolve(paths.root, rawSourceRef);
+  if (!absoluteRef.startsWith(`${paths.rawDir}${path26__default.sep}`)) {
     throw new Error("raw source provenance must point into raw/");
   }
 }
@@ -33850,14 +34091,14 @@ function classifyPatchConflict(error51) {
 }
 async function recordPatchConflict(patch, paths, reason, options) {
   const now = /* @__PURE__ */ new Date();
-  const targetPath = path25__default.join(paths.root, patch.frontmatter.target);
+  const targetPath = path26__default.join(paths.root, patch.frontmatter.target);
   const current = await pathExists(targetPath) ? await readPatchFile(targetPath) : void 0;
   const currentEntry = current ? parseStoredWikiEntry(current) : void 0;
   const proposedEntry = parsePatchBodyEntry(patch.body);
   const record2 = await createConflict({
     reason,
     target: patch.frontmatter.target,
-    wikiId: proposedEntry?.id ?? path25__default.basename(patch.frontmatter.target, ".md"),
+    wikiId: proposedEntry?.id ?? path26__default.basename(patch.frontmatter.target, ".md"),
     title: proposedEntry?.title,
     proposer: patch.frontmatter.proposer,
     rawSourceRef: options?.rawSourceRef,
@@ -33953,11 +34194,11 @@ function parseInlineArray(value) {
   return inner.split(",").map((item) => item.trim().replace(/^"(.*)"$/, "$1"));
 }
 async function archiveQueueEntry(id, paths, meta3) {
-  const fromDir = path25__default.join(paths.queueDir, id);
-  const toDir = path25__default.join(paths.archiveDir, id);
+  const fromDir = path26__default.join(paths.queueDir, id);
+  const toDir = path26__default.join(paths.archiveDir, id);
   await removePath(toDir);
   await movePath(fromDir, toDir);
-  await writeJsonFile(path25__default.join(toDir, PATCH_META_FILENAME), meta3, paths);
+  await writeJsonFile(path26__default.join(toDir, PATCH_META_FILENAME), meta3, paths);
 }
 function buildQueueIdHelp(prefix, availableIds) {
   if (availableIds.length === 0) {
@@ -34679,7 +34920,7 @@ async function canonicalizeTheaterPath(cwd) {
   return canonicalizeTheaterPathSync(cwd);
 }
 function canonicalizeTheaterPathSync(cwd) {
-  const resolved = path25__default.resolve(cwd);
+  const resolved = path26__default.resolve(cwd);
   try {
     return fs11__default.realpathSync.native(resolved);
   } catch {
@@ -34687,7 +34928,7 @@ function canonicalizeTheaterPathSync(cwd) {
   }
 }
 function theaterLabel(cwd) {
-  return path25__default.basename(cwd) || cwd;
+  return path26__default.basename(cwd) || cwd;
 }
 
 // core/host/codex/workspaces.ts
@@ -34695,7 +34936,7 @@ var WorkspaceRegistry = class {
   #items = /* @__PURE__ */ new Map();
   #mruId = null;
   async register(cwdInput, lastOpenedAt) {
-    const cwd = path25__default.resolve(cwdInput);
+    const cwd = path26__default.resolve(cwdInput);
     const real = await canonicalizeTheaterPath(cwd);
     const paths = resolveMemoryPaths(real);
     if (!await directoryExists(paths.root)) {
@@ -34711,7 +34952,7 @@ var WorkspaceRegistry = class {
       id,
       cwd,
       realpath: real,
-      label: path25__default.basename(cwd),
+      label: path26__default.basename(cwd),
       paths,
       registeredAt: existing?.registeredAt ?? now,
       // 복원 경로는 durable lastOpenedAt을 그대로 보존해 재시작 후에도 워크스페이스 최근성
@@ -34807,7 +35048,7 @@ function createCodexGateway(deps) {
       return true;
     }
     if (selected.kind === "no-workspace") {
-      if (isJsonRequest3(request)) {
+      if (isJsonRequest4(request)) {
         sendJson2(response, 404, { error: "no_workspace_registered" });
         return true;
       }
@@ -34922,7 +35163,7 @@ function legacyWorkspacePath(url2) {
   }
   return null;
 }
-function isJsonRequest3(request) {
+function isJsonRequest4(request) {
   const accept = Array.isArray(request.headers.accept) ? request.headers.accept.join(",") : request.headers.accept ?? "";
   const requestedWith = Array.isArray(request.headers["x-requested-with"]) ? request.headers["x-requested-with"].join(",") : request.headers["x-requested-with"] ?? "";
   return accept.includes("application/json") || requestedWith.toLowerCase() === "xmlhttprequest";
@@ -34997,54 +35238,6 @@ function readRawHeaderValues(rawHeaders, name) {
 function stripIpv6Brackets2(host) {
   return host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
 }
-var SETTINGS_VERSION = 1;
-var SETTINGS_LOCK_DIR_NAME = "settings.lock";
-var SETTINGS_LOCK_OWNER_FILE_NAME = "owner.json";
-var SETTINGS_TEMP_PREFIX = ".settings.";
-var MIN_CONSOLE_STATIC_PORT2 = 1024;
-var MAX_CONSOLE_STATIC_PORT2 = 65535;
-function createConsoleSettingsStore(deps = {}) {
-  const paths = deps.paths ?? createConsoleDataPaths();
-  const createStore = deps.createStore ?? createDurableJsonStore;
-  return createStore({
-    filePath: paths.settingsFile,
-    lockDir: path25__default.join(paths.dir, SETTINGS_LOCK_DIR_NAME),
-    lockOwnerFileName: SETTINGS_LOCK_OWNER_FILE_NAME,
-    now: deps.now,
-    sanitize: sanitizeConsoleSettingsData,
-    sensitivity: "sensitive",
-    tempCleanupPrefix: SETTINGS_TEMP_PREFIX
-  });
-}
-function sanitizeConsoleSettingsData(value) {
-  if (!isRecord4(value)) return emptyConsoleSettingsData();
-  if (value.version !== SETTINGS_VERSION) return emptyConsoleSettingsData();
-  const general = readConsoleGeneralSettings(value.general);
-  return {
-    version: SETTINGS_VERSION,
-    general: general ?? {}
-  };
-}
-function emptyConsoleSettingsData() {
-  return { version: 1, general: {} };
-}
-function readConsoleGeneralSettings(value) {
-  if (!isRecord4(value)) return null;
-  const consolePortMode = value.consolePortMode === "dynamic" || value.consolePortMode === "static" ? value.consolePortMode : void 0;
-  const consoleStaticPort = isValidConsoleStaticPort2(value.consoleStaticPort) ? value.consoleStaticPort : void 0;
-  const theme = value.theme === "maritime" || value.theme === "carbon" ? value.theme : void 0;
-  return {
-    ...consolePortMode !== void 0 ? { consolePortMode } : {},
-    ...consoleStaticPort !== void 0 ? { consoleStaticPort } : {},
-    ...theme !== void 0 ? { theme } : {}
-  };
-}
-function isRecord4(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function isValidConsoleStaticPort2(value) {
-  return typeof value === "number" && Number.isInteger(value) && value >= MIN_CONSOLE_STATIC_PORT2 && value <= MAX_CONSOLE_STATIC_PORT2;
-}
 
 // core/host/operations/types.ts
 var MAX_GROUP_NAME_LENGTH = 64;
@@ -35077,7 +35270,7 @@ function createConsoleDurableStateStore(deps = {}) {
   const createStore = deps.createStore ?? createDurableJsonStore;
   return createStore({
     filePath: paths.stateFile,
-    lockDir: path25__default.join(paths.dir, STATE_LOCK_DIR_NAME),
+    lockDir: path26__default.join(paths.dir, STATE_LOCK_DIR_NAME),
     lockOwnerFileName: STATE_LOCK_OWNER_FILE_NAME,
     now: deps.now,
     sanitize: sanitizeDurableConsoleState,
@@ -35086,7 +35279,7 @@ function createConsoleDurableStateStore(deps = {}) {
   });
 }
 function sanitizeDurableConsoleState(value) {
-  if (!isRecord5(value)) return emptyDurableConsoleState();
+  if (!isRecord6(value)) return emptyDurableConsoleState();
   const upgraded = migrateToCurrentVersion(value);
   if (upgraded.version !== STATE_VERSION) return emptyDurableConsoleState();
   return {
@@ -35113,13 +35306,13 @@ function migrateV1ToV2(v1) {
   };
 }
 function migrateV1Operation(value) {
-  if (!isRecord5(value)) return null;
+  if (!isRecord6(value)) return null;
   const sessionId = readNonEmptyString(value.sessionId);
   const theaterId = readNonEmptyString(value.theaterId);
   const cwd = readNonEmptyString(value.cwd);
   const createdAt = readFiniteNumber(value.createdAt);
   if (!sessionId || !theaterId || !cwd || createdAt === null) return null;
-  const title = readOptionalString(value.label) ?? (path25__default.basename(cwd) || cwd);
+  const title = readOptionalString(value.label) ?? (path26__default.basename(cwd) || cwd);
   const payload = { cwd };
   const cliId = readOptionalString(value.cliId);
   const cliLabel = readOptionalString(value.cliLabel);
@@ -35127,7 +35320,7 @@ function migrateV1Operation(value) {
   if (cliId) payload.cliId = cliId;
   if (cliLabel) payload.cliLabel = cliLabel;
   if (labelSource) payload.labelSource = labelSource;
-  if (isRecord5(value.providerSession)) payload.providerSession = value.providerSession;
+  if (isRecord6(value.providerSession)) payload.providerSession = value.providerSession;
   return {
     id: sessionId,
     theaterId,
@@ -35158,7 +35351,7 @@ function readOperations(value) {
   return nodes;
 }
 function sanitizeTheaterRegistration(value) {
-  if (!isRecord5(value)) return null;
+  if (!isRecord6(value)) return null;
   const id = readNonEmptyString(value.id);
   const theaterPath = readNonEmptyString(value.path);
   const realpath2 = readNonEmptyString(value.realpath);
@@ -35169,7 +35362,7 @@ function sanitizeTheaterRegistration(value) {
   return { id, path: theaterPath, realpath: realpath2, label, registeredAt, lastOpenedAt };
 }
 function sanitizeOperationNode(value) {
-  if (!isRecord5(value)) return null;
+  if (!isRecord6(value)) return null;
   const id = readNonEmptyString(value.id);
   const theaterId = readNonEmptyString(value.theaterId);
   const type = readNonEmptyString(value.type);
@@ -35193,7 +35386,7 @@ function sanitizeOperationNode(value) {
   };
 }
 function sanitizeOperationTimestamps(value) {
-  if (!isRecord5(value)) return null;
+  if (!isRecord6(value)) return null;
   const createdAt = readFiniteNumber(value.createdAt);
   const updatedAt = readFiniteNumber(value.updatedAt);
   if (createdAt === null || updatedAt === null) return null;
@@ -35201,7 +35394,7 @@ function sanitizeOperationTimestamps(value) {
 }
 function sanitizeOperationGeometry(value) {
   if (value === null || value === void 0) return null;
-  if (!isRecord5(value)) return null;
+  if (!isRecord6(value)) return null;
   const x = readFiniteNumber(value.x);
   const y = readFiniteNumber(value.y);
   const width = readFiniteNumber(value.width);
@@ -35210,7 +35403,7 @@ function sanitizeOperationGeometry(value) {
   if (x === null || y === null || width === null || height === null || zIndex === null) return null;
   return { x, y, width, height, zIndex };
 }
-function isRecord5(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readNonEmptyString(value) {
@@ -35220,7 +35413,7 @@ function readOptionalString(value) {
   return typeof value === "string" && value.length > 0 ? value : void 0;
 }
 function readRecord(value) {
-  return isRecord5(value) ? value : {};
+  return isRecord6(value) ? value : {};
 }
 function remapTerminalPluginId(pluginId) {
   return pluginId === "agent" || pluginId === "shell" ? "terminal" : pluginId;
@@ -35254,7 +35447,7 @@ function readOperationGroups(value) {
   return groups;
 }
 function sanitizeOperationGroup(value) {
-  if (!isRecord5(value)) return null;
+  if (!isRecord6(value)) return null;
   const id = readNonEmptyString(value.id);
   const theaterId = readNonEmptyString(value.theaterId);
   const rawName = readNonEmptyString(value.name);
@@ -35296,10 +35489,10 @@ function sanitizeRecord(value, sensitiveFields) {
 }
 function sanitizeValue(value, sensitiveFields) {
   if (Array.isArray(value)) return value.map((item) => sanitizeValue(item, sensitiveFields));
-  if (!isRecord6(value)) return value;
+  if (!isRecord7(value)) return value;
   return sanitizeRecord(value, sensitiveFields);
 }
-function isRecord6(value) {
+function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -35367,8 +35560,8 @@ async function handleCollection(req, res, deps) {
       pluginId: body.pluginId,
       title: body.title,
       ...typeof body.accent === "string" ? { accent: body.accent } : {},
-      payload: isRecord7(body.payload) ? body.payload : {},
-      geometry: isRecord7(body.geometry) ? readGeometry(body.geometry) : null
+      payload: isRecord8(body.payload) ? body.payload : {},
+      geometry: isRecord8(body.geometry) ? readGeometry(body.geometry) : null
     });
     deps.persist();
     deps.writeJson(res, 201, { operation: sanitizeOperationNode2(node, deps) });
@@ -35425,8 +35618,8 @@ async function handleItem(req, res, id, deps) {
       ...typeof body.title === "string" ? { title: body.title } : {},
       ...typeof body.accent === "string" || body.accent === null ? { accent: body.accent } : {},
       ...typeof body.groupId === "string" || body.groupId === null ? { groupId: body.groupId } : {},
-      ...isRecord7(body.payload) ? { payload: body.payload } : {},
-      ...isRecord7(body.geometry) || body.geometry === null ? { geometry: body.geometry === null ? null : readGeometry(body.geometry) } : {}
+      ...isRecord8(body.payload) ? { payload: body.payload } : {},
+      ...isRecord8(body.geometry) || body.geometry === null ? { geometry: body.geometry === null ? null : readGeometry(body.geometry) } : {}
     });
     if (!node) {
       deps.writeJson(res, 404, { error: "operation_not_found" });
@@ -35530,7 +35723,7 @@ function readFiniteNumber2(value) {
 function readRequestUrl(req) {
   return new URL(req.url ?? "/", "http://127.0.0.1");
 }
-function isRecord7(value) {
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function createOperationStore(deps = {}) {
@@ -35701,7 +35894,7 @@ var SDK_API_VERSION = 1;
 var SHIM_NAMED_EXPORTS = {
   "react": ["Activity", "Children", "Component", "Fragment", "Profiler", "PureComponent", "StrictMode", "Suspense", "__CLIENT_INTERNALS_DO_NOT_USE_OR_WARN_USERS_THEY_CANNOT_UPGRADE", "__COMPILER_RUNTIME", "act", "cache", "cacheSignal", "captureOwnerStack", "cloneElement", "createContext", "createElement", "createRef", "forwardRef", "isValidElement", "lazy", "memo", "startTransition", "unstable_useCacheRefresh", "use", "useActionState", "useCallback", "useContext", "useDebugValue", "useDeferredValue", "useEffect", "useEffectEvent", "useId", "useImperativeHandle", "useInsertionEffect", "useLayoutEffect", "useMemo", "useOptimistic", "useReducer", "useRef", "useState", "useSyncExternalStore", "useTransition", "version"],
   "react/jsx-runtime": ["Fragment", "jsx", "jsxs"],
-  "@fleet-console/sdk/plugin/browser": ["React", "createClientCapabilities", "defineOperationKind", "definePlugin", "useOperationStatus", "useOperations", "usePluginApi", "usePluginStorage", "useStoreSnapshot"],
+  "@fleet-console/sdk/plugin/browser": ["React", "createClientCapabilities", "defineOperationKind", "definePlugin", "useOperationStatus", "useOperations", "usePluginApi", "usePluginSettings", "usePluginStorage", "useStoreSnapshot"],
   "@fleet-console/sdk/settings/browser": ["SettingsCard", "SettingsField", "SettingsRow", "SettingsSelect", "SettingsToggle", "defineSettingsSection"],
   "@fleet-console/sdk/operations/browser": ["ApiError", "OperationBody", "assertOperationNode", "fetchOperationCatalog", "hasForbiddenBrowserPayloadKey"],
   "@fleet-console/sdk/notifications/browser": ["defineNotificationKind"],
@@ -35815,14 +36008,14 @@ function renderShim(definition) {
   ].join("\n");
 }
 function isSubpath(root, target) {
-  const relative = path25__default.relative(root, target);
-  return relative === "" || !relative.startsWith("..") && !path25__default.isAbsolute(relative);
+  const relative = path26__default.relative(root, target);
+  return relative === "" || !relative.startsWith("..") && !path26__default.isAbsolute(relative);
 }
 function discoverFleetPlugins(options = {}) {
-  const builtInSourceRoot = options.builtInSourceRoot ?? (options.cwd ? path25__default.resolve(options.cwd, "runtime/fleet-plugins") : null);
+  const builtInSourceRoot = options.builtInSourceRoot ?? (options.cwd ? path26__default.resolve(options.cwd, "runtime/fleet-plugins") : null);
   const roots = [
     ...builtInSourceRoot ? [{ root: builtInSourceRoot, builtInDistRoot: options.builtInDistRoot ?? null, external: false }] : [],
-    { root: path25__default.join(options.homeDir ?? os3__default.homedir(), ".fleet", "plugins"), builtInDistRoot: null, external: true }
+    { root: path26__default.join(options.homeDir ?? os3__default.homedir(), ".fleet", "plugins"), builtInDistRoot: null, external: true }
   ];
   const sourcePlugins = roots.flatMap((root) => discoverPluginRoot(root.root, root.builtInDistRoot, root.external));
   const sourcePluginIds = new Set(sourcePlugins.map((plugin) => plugin.manifest.id));
@@ -35830,7 +36023,7 @@ function discoverFleetPlugins(options = {}) {
   return [...sourcePlugins, ...distPlugins];
 }
 function parseFleetPluginManifest(value) {
-  if (!isRecord8(value)) return null;
+  if (!isRecord9(value)) return null;
   const id = readPluginId(value.id);
   if (!id) return null;
   return {
@@ -35848,8 +36041,8 @@ function discoverPluginRoot(root, builtInDistRoot, external) {
   const plugins = [];
   for (const entry of entries) {
     if (!entry.isDirectory() || entry.name === "shared") continue;
-    const pluginRoot = path25__default.join(root, entry.name);
-    const manifestPath = path25__default.join(pluginRoot, "plugin.json");
+    const pluginRoot = path26__default.join(root, entry.name);
+    const manifestPath = path26__default.join(pluginRoot, "plugin.json");
     if (!fs11__default.existsSync(manifestPath)) continue;
     const manifest = readManifest(manifestPath);
     if (!manifest) continue;
@@ -35867,8 +36060,8 @@ function discoverDistPluginRoot(root) {
   const plugins = [];
   for (const entry of entries) {
     if (!entry.isDirectory() || entry.name === "shared") continue;
-    const pluginRoot = path25__default.join(root, entry.name);
-    const manifestPath = path25__default.join(pluginRoot, "plugin.json");
+    const pluginRoot = path26__default.join(root, entry.name);
+    const manifestPath = path26__default.join(pluginRoot, "plugin.json");
     const manifest = fs11__default.existsSync(manifestPath) ? readManifest(manifestPath) : readDistPluginManifest(entry.name);
     if (!manifest) continue;
     const clientEntry = resolveOptionalManifestEntry(pluginRoot, manifest.client, "client");
@@ -35895,10 +36088,10 @@ function resolveRoutesEntry(pluginRoot, manifest, builtInDistRoot) {
     if (manifestRoute2 === false) return false;
     if (manifestRoute2) return manifestRoute2;
   }
-  const manifestRoute = path25__default.join(pluginRoot, "routes.ts");
+  const manifestRoute = path26__default.join(pluginRoot, "routes.ts");
   if (fs11__default.existsSync(manifestRoute)) return manifestRoute;
   if (!builtInDistRoot) return null;
-  const builtRoute = path25__default.join(builtInDistRoot, manifest.id, "routes.mjs");
+  const builtRoute = path26__default.join(builtInDistRoot, manifest.id, "routes.mjs");
   return fs11__default.existsSync(builtRoute) ? builtRoute : null;
 }
 function resolveDistRoutesEntry(pluginRoot, manifest) {
@@ -35912,7 +36105,7 @@ function resolveOptionalManifestEntry(pluginRoot, entryPath, label) {
     console.warn(`[fleet-console] Plugin ${label} entry skipped: unsafe relative path ${entryPath}`);
     return false;
   }
-  const candidate = path25__default.resolve(pluginRoot, entryPath);
+  const candidate = path26__default.resolve(pluginRoot, entryPath);
   if (!fs11__default.existsSync(candidate)) return null;
   const rootRealpath = fs11__default.realpathSync.native(pluginRoot);
   const entryRealpath = fs11__default.realpathSync.native(candidate);
@@ -35930,14 +36123,14 @@ function readDistPluginManifest(id) {
   return pluginId ? { id: pluginId, routes: "routes.mjs" } : null;
 }
 function isSafeRelativeEntry(entryPath) {
-  if (path25__default.isAbsolute(entryPath)) return false;
+  if (path26__default.isAbsolute(entryPath)) return false;
   return entryPath.split(/[\\/]+/u).every((segment) => segment !== "..");
 }
 function isSubpath2(root, candidate) {
-  const relative = path25__default.relative(root, candidate);
-  return relative === "" || !relative.startsWith("..") && !path25__default.isAbsolute(relative);
+  const relative = path26__default.relative(root, candidate);
+  return relative === "" || !relative.startsWith("..") && !path26__default.isAbsolute(relative);
 }
-function isRecord8(value) {
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -35958,7 +36151,7 @@ var PLUGIN_DEV_EXTERNALS = [
   "@dotobokuri/*",
   "@fleet-plugins/*"
 ];
-var __dirname$1 = path25__default.dirname(fileURLToPath(import.meta.url));
+var __dirname$1 = path26__default.dirname(fileURLToPath(import.meta.url));
 function createFleetPluginHost(deps) {
   const plugins = filterDiscoveredPlugins(discoverFleetPlugins(deps));
   const sensitiveFieldsByPluginId = new Map(plugins.map((plugin) => [plugin.manifest.id, plugin.manifest.sensitiveFields ?? []]));
@@ -36032,39 +36225,39 @@ async function importPluginModule(entry) {
   return await import(pathToFileURL(entry).href);
 }
 async function writeTemporaryPluginBundle(entry, source) {
-  const cacheRoot = path25__default.join(resolvePluginBundleNodeModules(entry), ".cache");
+  const cacheRoot = path26__default.join(resolvePluginBundleNodeModules(entry), ".cache");
   await mkdir(cacheRoot, { recursive: true });
-  const dir = await mkdtemp(path25__default.join(cacheRoot, "fleet-console-plugin-"));
-  const file2 = path25__default.join(dir, "routes.mjs");
+  const dir = await mkdtemp(path26__default.join(cacheRoot, "fleet-console-plugin-"));
+  const file2 = path26__default.join(dir, "routes.mjs");
   await writeFile(file2, source, "utf8");
   return file2;
 }
 function resolvePluginBundleNodeModules(entry) {
   const packageNodeModules = resolveConsolePackageNodeModules();
-  let dir = path25__default.dirname(entry);
+  let dir = path26__default.dirname(entry);
   let fallback = packageNodeModules;
   while (true) {
-    const workspaceConsoleNodeModules = path25__default.join(dir, "runtime", "fleet-console", "node_modules");
+    const workspaceConsoleNodeModules = path26__default.join(dir, "runtime", "fleet-console", "node_modules");
     if (hasFleetConsoleSdk(workspaceConsoleNodeModules)) return workspaceConsoleNodeModules;
-    const candidate = path25__default.join(dir, "node_modules");
+    const candidate = path26__default.join(dir, "node_modules");
     if (hasFleetConsoleSdk(candidate)) return candidate;
     if (fallback === null && existsSync(candidate)) fallback = candidate;
-    const parent = path25__default.dirname(dir);
-    if (parent === dir) return fallback ?? path25__default.join(path25__default.dirname(entry), "node_modules");
+    const parent = path26__default.dirname(dir);
+    if (parent === dir) return fallback ?? path26__default.join(path26__default.dirname(entry), "node_modules");
     dir = parent;
   }
 }
 function resolveConsolePackageNodeModules() {
   for (const candidate of [
-    path25__default.resolve(__dirname$1, "..", "node_modules"),
-    path25__default.resolve(__dirname$1, "..", "..", "..", "node_modules")
+    path26__default.resolve(__dirname$1, "..", "node_modules"),
+    path26__default.resolve(__dirname$1, "..", "..", "..", "node_modules")
   ]) {
     if (hasFleetConsoleSdk(candidate)) return candidate;
   }
   return null;
 }
 function hasFleetConsoleSdk(nodeModules) {
-  return existsSync(path25__default.join(nodeModules, "@fleet-console", "sdk"));
+  return existsSync(path26__default.join(nodeModules, "@fleet-console", "sdk"));
 }
 function resolveRegister(mod) {
   if (mod.register) return mod.register;
@@ -36332,7 +36525,7 @@ var MIME_TYPES = {
   ".woff2": "font/woff2"
 };
 function createStaticConsoleHandler(packageRoot) {
-  const consoleRoot = path25__default.join(packageRoot, "dist", "client");
+  const consoleRoot = path26__default.join(packageRoot, "dist", "client");
   return (req, res, pathname) => tryServeStaticConsole(req, res, pathname, consoleRoot);
 }
 function tryServeStaticConsole(req, res, pathname, consoleRoot) {
@@ -36348,7 +36541,7 @@ function tryServeStaticConsole(req, res, pathname, consoleRoot) {
     res.end(JSON.stringify({ error: "Not found" }));
     return true;
   }
-  const absolutePath = path25__default.resolve(consoleRoot, relativePath2);
+  const absolutePath = path26__default.resolve(consoleRoot, relativePath2);
   if (!absolutePath.startsWith(consoleRoot)) {
     res.writeHead(404, withSecurityHeaders2({ "Content-Type": "application/json" }));
     res.end(JSON.stringify({ error: "Not found" }));
@@ -36356,7 +36549,7 @@ function tryServeStaticConsole(req, res, pathname, consoleRoot) {
   }
   try {
     const data = fs11__default.readFileSync(absolutePath);
-    const contentType = MIME_TYPES[path25__default.extname(absolutePath)] ?? "application/octet-stream";
+    const contentType = MIME_TYPES[path26__default.extname(absolutePath)] ?? "application/octet-stream";
     res.writeHead(200, withSecurityHeaders2({ "Content-Type": contentType }));
     if (req.method === "HEAD") {
       res.end();
@@ -36376,7 +36569,7 @@ function tryServeStaticConsole(req, res, pathname, consoleRoot) {
 }
 function serveFallbackIndex(req, res, consoleRoot) {
   try {
-    const data = fs11__default.readFileSync(path25__default.join(consoleRoot, "index.html"));
+    const data = fs11__default.readFileSync(path26__default.join(consoleRoot, "index.html"));
     res.writeHead(200, withSecurityHeaders2({ "Content-Type": MIME_TYPES[".html"] }));
     if (req.method === "HEAD") {
       res.end();
@@ -36402,7 +36595,7 @@ function resolveConsolePath(pathname) {
   }
   if (withoutPrefix === "") return "index.html";
   if (withoutPrefix.includes("\0")) return null;
-  if (!path25__default.extname(withoutPrefix)) return "index.html";
+  if (!path26__default.extname(withoutPrefix)) return "index.html";
   return withoutPrefix;
 }
 var TheaterFolderListError = class extends Error {
@@ -36436,14 +36629,14 @@ async function listTheaterFolders(requestedPath, deps = {}) {
 }
 function normalizeFolderBrowserPath(value, platform = process.platform) {
   if (typeof value !== "string" || value.length === 0 || value.includes("\0")) throw new TheaterFolderListError("invalid_path");
-  if (isWindowsAmbiguousPath(value, platform) || !path25__default.isAbsolute(value)) throw new TheaterFolderListError("invalid_path");
-  return path25__default.resolve(value);
+  if (isWindowsAmbiguousPath(value, platform) || !path26__default.isAbsolute(value)) throw new TheaterFolderListError("invalid_path");
+  return path26__default.resolve(value);
 }
 function normalizeListPath(requestedPath, platform, deps) {
   if (requestedPath === null || requestedPath === void 0) {
     const home = deps.homedir?.() ?? os3__default.homedir();
     const start = home || deps.cwd?.() || process.cwd();
-    return path25__default.resolve(start);
+    return path26__default.resolve(start);
   }
   return normalizeFolderBrowserPath(requestedPath, platform);
 }
@@ -36494,7 +36687,7 @@ async function openDirectory(targetPath, opendir) {
 }
 async function toTheaterFolderEntry(targetPath, dirent, stat5) {
   if (!dirent.isDirectory() && !dirent.isSymbolicLink()) return null;
-  const entryPath = path25__default.join(targetPath, dirent.name);
+  const entryPath = path26__default.join(targetPath, dirent.name);
   if (dirent.isDirectory()) return { name: dirent.name, path: entryPath, kind: "dir", accessible: true };
   const accessible = await statSymlinkDirectory(entryPath, stat5);
   if (accessible === null) return null;
@@ -36514,10 +36707,10 @@ function mapFsError(error51) {
   return new TheaterFolderListError("invalid_path");
 }
 function parentPath(targetPath, platform) {
-  const parsed = path25__default.parse(targetPath);
-  const resolved = path25__default.resolve(targetPath);
-  if (resolved === path25__default.resolve(parsed.root)) return null;
-  const parent = path25__default.dirname(resolved);
+  const parsed = path26__default.parse(targetPath);
+  const resolved = path26__default.resolve(targetPath);
+  if (resolved === path26__default.resolve(parsed.root)) return null;
+  const parent = path26__default.dirname(resolved);
   if (platform === "win32" && parent === resolved) return null;
   return parent;
 }
@@ -36557,8 +36750,8 @@ function createFolderGrantStore(deps = {}) {
 }
 function validateAbsoluteDirectory(cwd, statSync2 = fs11__default.statSync) {
   if (typeof cwd !== "string" || cwd.length === 0 || cwd.includes("\0")) throw new Error("invalid_folder");
-  if (isWindowsAmbiguousPath2(cwd) || !path25__default.isAbsolute(cwd)) throw new Error("invalid_folder");
-  const normalized = path25__default.resolve(cwd);
+  if (isWindowsAmbiguousPath2(cwd) || !path26__default.isAbsolute(cwd)) throw new Error("invalid_folder");
+  const normalized = path26__default.resolve(cwd);
   if (!statSync2(normalized).isDirectory()) throw new Error("invalid_folder");
   return normalized;
 }
@@ -36570,7 +36763,7 @@ var TheaterRegistry = class {
   #items = /* @__PURE__ */ new Map();
   #mruId = null;
   async register(cwd) {
-    const resolved = path25__default.resolve(cwd);
+    const resolved = path26__default.resolve(cwd);
     const real = await canonicalizeTheaterPath(resolved);
     const id = workspaceHash(real);
     const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -36649,10 +36842,10 @@ function createConsoleUpdateApplyService(deps = {}) {
   async function start(request) {
     const packageManager = await preflightInstall(request.currentPackageRoot);
     const stamp = `${now()}-${processPid}`;
-    const workerPath = path25__default.join(tmpDir, `${WORKER_FILE_PREFIX}${stamp}${WORKER_FILE_SUFFIX}`);
+    const workerPath = path26__default.join(tmpDir, `${WORKER_FILE_PREFIX}${stamp}${WORKER_FILE_SUFFIX}`);
     makeDir(request.dataDir, { recursive: true, mode: 448 });
-    const statusFile = path25__default.join(request.dataDir, `${WORKER_FILE_PREFIX}${stamp}${STATUS_FILE_SUFFIX}`);
-    const logFile = path25__default.join(request.dataDir, `${WORKER_FILE_PREFIX}${stamp}${LOG_FILE_SUFFIX}`);
+    const statusFile = path26__default.join(request.dataDir, `${WORKER_FILE_PREFIX}${stamp}${STATUS_FILE_SUFFIX}`);
+    const logFile = path26__default.join(request.dataDir, `${WORKER_FILE_PREFIX}${stamp}${LOG_FILE_SUFFIX}`);
     const script = emitConsoleUpdateWorkerScript({
       currentEndpoint: request.currentEndpoint,
       currentPackageRoot: request.currentPackageRoot,
@@ -37000,7 +37193,7 @@ function resolveDefaultServerModulePath() {
   if (sourcePath.endsWith(".ts")) {
     return sourcePath.replace(/update-apply\.ts$/, "cli.ts");
   }
-  return path25__default.join(path25__default.dirname(sourcePath), "cli.mjs");
+  return path26__default.join(path26__default.dirname(sourcePath), "cli.mjs");
 }
 
 // core/host/update-check.ts
@@ -37280,7 +37473,7 @@ function createConsoleServer(deps = {}) {
     paths: {
       dataDir: durablePaths.dir,
       capturesDir: durablePaths.capturesDir,
-      pluginDataDir: (pluginId) => path25__default.join(durablePaths.dir, "plugins", pluginId),
+      pluginDataDir: (pluginId) => path26__default.join(durablePaths.dir, "plugins", pluginId),
       resolveTheaterPath: (theaterId) => theaters.get(theaterId)?.path ?? null,
       canonicalizeTheaterPath: canonicalizeTheaterPathSync,
       workspaceHash
@@ -37366,6 +37559,12 @@ function createConsoleServer(deps = {}) {
     readJsonBody,
     writeJson
   });
+  const pluginSettingsRouter = createPluginSettingsRouter({
+    consoleSettingsStore,
+    isAuthorized: isTerminalAuthorized,
+    readJsonBody,
+    writeJson
+  });
   const operationsRouter = createOperationsRouter({
     store: operations,
     isAuthorized: isTerminalAuthorized,
@@ -37388,6 +37587,7 @@ function createConsoleServer(deps = {}) {
       return true;
     }
     if (await carrierSettingsRouter(ctx)) return true;
+    if (await pluginSettingsRouter(ctx)) return true;
     return globalSettingsRouter(ctx);
   });
   routeRegistry.register("/plugin-runtime", handlePluginRuntimeRoute);
@@ -37934,11 +38134,11 @@ function createConsoleServer(deps = {}) {
   return returnedServer;
 }
 function resolveBuiltInPluginDiscoveryRoots(packageRoot) {
-  const packageRootRepo = path25__default.resolve(packageRoot, "..", "..");
-  const sourceRoot = path25__default.join(packageRootRepo, "runtime", "fleet-plugins");
+  const packageRootRepo = path26__default.resolve(packageRoot, "..", "..");
+  const sourceRoot = path26__default.join(packageRootRepo, "runtime", "fleet-plugins");
   return {
     ...fs11__default.existsSync(sourceRoot) ? { builtInSourceRoot: sourceRoot } : {},
-    builtInDistRoot: path25__default.join(packageRoot, "dist", "fleet-plugins")
+    builtInDistRoot: path26__default.join(packageRoot, "dist", "fleet-plugins")
   };
 }
 function createHttpServer(handler, upgradeRegistry) {
@@ -38091,14 +38291,14 @@ async function readPluginStorageJson(dataDir, pluginId, key) {
 }
 async function writePluginStorageJson(dataDir, pluginId, key, value) {
   const file2 = resolvePluginStorageFile(dataDir, pluginId, key);
-  await fs11__default.promises.mkdir(path25__default.dirname(file2), { recursive: true });
+  await fs11__default.promises.mkdir(path26__default.dirname(file2), { recursive: true });
   await fs11__default.promises.writeFile(file2, JSON.stringify(value), "utf8");
 }
 function resolvePluginStorageFile(dataDir, pluginId, key) {
   if (!/^[a-z0-9][a-z0-9._-]*$/i.test(pluginId) || !/^[a-z0-9][a-z0-9._-]*$/i.test(key)) {
     throw new Error("invalid_plugin_storage_key");
   }
-  return path25__default.join(dataDir, "plugins", pluginId, `${key}.json`);
+  return path26__default.join(dataDir, "plugins", pluginId, `${key}.json`);
 }
 function isNodeError(error51) {
   return error51 instanceof Error && "code" in error51;
@@ -38422,7 +38622,7 @@ function readStdinBestEffort() {
     });
   });
 }
-var isDirectRun = process4.argv[1] && path25__default.resolve(process4.argv[1]) === fileURLToPath(import.meta.url);
+var isDirectRun = process4.argv[1] && path26__default.resolve(process4.argv[1]) === fileURLToPath(import.meta.url);
 if (isDirectRun) {
   await main().catch((error51) => {
     process4.stderr.write(`${error51 instanceof Error ? error51.message : String(error51)}