@dotobokuri/fleet-console 1.18.0 → 1.19.0

package/AGENTS.md

@@ -126,7 +126,7 @@ These guards are robustness measures on top of the trust model, not a replacemen
 - `theme` is passed to plugins through `OperationRenderContext` (not through a capability), so plugins receive the current `ConsoleTheme` reactively on every canvas render. Host token boundaries remain unchanged: these are transient client-only values; no tokens, paths, or credentials cross into plugin code.
 - Terminal renderer and font preferences are **not** in `OperationRenderContext`. The Terminal plugin owns these prefs end-to-end through a module-scoped `useSyncExternalStore` store (`client/shared/terminal-prefs-store.ts`). All mounted terminal panels subscribe directly and react instantly to settings changes. **Terminal Renderer** is persisted in localStorage under `fleet-plugin.terminal.renderer` (per-browser volatile). **Terminal Font** (name + size) is persisted on the console server under `plugins.terminal.font` via `ClientSettingsCapability` (`GET`/`PUT /api/v1/settings/plugins/terminal`); it survives browser changes and console restarts. On first load the store seeds the server from `fleet-plugin.terminal.font` localStorage if the server has no value (1-time migration), then removes the local key. `fleet-plugin.terminal.*` localStorage keys are Terminal plugin-owned; core and other plugins must not read or write them.
 - **Preferences vs Settings semantics**: `ClientPreferencesCapability` is per-browser volatile (localStorage). `ClientSettingsCapability` is per-server durable (stored in the console `settings.json` `plugins` record; the server is the SSoT). Use preferences for transient display choices (e.g. renderer backend); use settings for durable configuration (e.g. font, feature toggles) that must survive browser changes and console restarts.
-- **Plugin settings safety**: Values written through `ClientSettingsCapability` must not contain secrets, tokens, credentials, or raw filesystem paths. The Token Boundary applies to plugin settings payloads the same as to all other browser-facing payloads. Model API keys persist through `@dotobokuri/fleet-infra` auth storage, not plugin settings.
+- **Plugin settings safety**: Values written through `ClientSettingsCapability` must not contain secrets, tokens, credentials, or raw filesystem paths. The Token Boundary applies to plugin settings payloads the same as to all other browser-facing payloads. Model API keys persist through `@dotobokuri/core-infra` auth storage, not plugin settings.
 - The SDK contract is invariant. Host code may only extend capability implementations; it must not add new capability surface areas or require plugins to import core modules.
 
 ## Window System
@@ -135,7 +135,7 @@ Operation chrome (maximize, minimize, focus, and the Operations Left SideBar) is
 
 - **Per-panel maximize** (`maximizedOperationId` in `core/client/src/canvas/canvas-store.ts`) is orthogonal to **map fullscreen** (`mapFullscreen`, renamed from the earlier map-level maximize while keeping the same storage key). A maximized panel renders in a temporary full-canvas geometry — the map canvas column (col2), which excludes the SideBar (col1) and the Activity Rail (col3) — over the same instance without remounting. Drag, resize, and geometry persistence are blocked while maximized.
 - **Minimize preserves PTY**: minimized panels stay in the DOM with `visibility:hidden` and `inert` instead of unmounting, preserving terminal PTY / WebSocket state. Because the host chrome handles this, all plugins benefit uniformly and plugins need not be PTY-aware.
-- **Operations Left SideBar = all-panel chip list**: the left progressive 3-tier SideBar (`rail` 56px / `list` 180px / `detail` 280px) shows every Operation in the current Theater as a vertical chip, sorted by `operationOrder` (drag reorder / Alt+Shift+↑↓). Chips show active highlight (brass), minimized dim, close button (two-step ARM), accent (`--chip-accent` border + 1px ring), and notification count. **Chip leading slot**: a 24×24 non-interactive `<span aria-hidden>` hosts the Operation's kind icon (resolved via `renderKindIcon` — no new SDK surface); if no icon resolves, a neutral fallback glyph is shown. Underway/status state is reflected through CSS class modifiers on the chip (`side-bar-chip--underway-{live|turn|awaiting}`, `side-bar-chip--underway-ring`). Right-clicking a chip opens the accent popover (`onContextMenu` on `<li>`). Accent tints the chip's focus-border channel only — never the icon fill. In `rail` tier, chips are horizontally centred (justify-content:center, padding 0) and labels are hidden. The SideBar header hosts **＋New** (opens a `createPortal` global overlay with `mode="launch"` — Operations catalog only — positioned to the right of the button at `rect.right+8, rect.top`; no transient sidebar width expansion) and a **⚙ Settings** button (active, rail tier hidden) that opens a `createPortal` global overlay with `mode="controls"` — Map fullscreen, Radar sweep, Panel pulse, and Shortcuts (collapsed in `<details>`) — positioned to the right of the button. There is no footer on the SideBar; Map/Radar/PanelPulse controls live exclusively in the ⚙ controls overlay. Width persists per browser at `fleet-console.operations.side-width`; collapsed state at `fleet-console.operations.side-collapsed`. Clicking a chip focuses the Operation (restoring it if minimized); if a panel is currently maximized and the clicked chip is a different Operation, the maximized panel is switched to the clicked Operation (`setMaximizedOperationId`) without triggering a canvas pan. Double-clicking a chip's name opens an inline rename input that reuses the canvas panel rename flow through the shared `useInlineRename` hook (Enter commits, Escape cancels, blur commits); the rename input is hidden in `rail` tier alongside the name, so rename is only reachable from `list`/`detail` tiers.
+- **Operations Left SideBar = all-panel chip list**: the left progressive 3-tier SideBar (`rail` 56px / `list` 180px / `detail` 280px) shows every Operation in the current Theater as a vertical chip, sorted by `operationOrder` (drag reorder / Alt+Shift+↑↓). Chips show active highlight (brass), minimized dim, close button (two-step ARM), accent (`--chip-accent` border + 1px ring), and notification count. **Chip leading slot**: a 24×24 non-interactive `<span aria-hidden>` hosts the Operation's kind icon (resolved via `renderKindIcon` — no new SDK surface); if no icon resolves, a neutral fallback glyph is shown. Plugins may declare which launch kind created an Operation through `payload.launchKindId`; when multiple kinds share the same type and no matching launch kind is present, the chip shows the neutral fallback glyph. Underway/status state is reflected through CSS class modifiers on the chip (`side-bar-chip--underway-{live|turn|awaiting}`, `side-bar-chip--underway-ring`). Right-clicking a chip opens the accent popover (`onContextMenu` on `<li>`). Accent tints the chip's focus-border channel only — never the icon fill. In `rail` tier, chips are horizontally centred (justify-content:center, padding 0) and labels are hidden. The SideBar header hosts **＋New** (opens a `createPortal` global overlay with `mode="launch"` — Operations catalog only — positioned to the right of the button at `rect.right+8, rect.top`; no transient sidebar width expansion) and a **⚙ Settings** button (active, rail tier hidden) that opens a `createPortal` global overlay with `mode="controls"` — Map fullscreen, Radar sweep, Panel pulse, and Shortcuts (collapsed in `<details>`) — positioned to the right of the button. There is no footer on the SideBar; Map/Radar/PanelPulse controls live exclusively in the ⚙ controls overlay. Width persists per browser at `fleet-console.operations.side-width`; collapsed state at `fleet-console.operations.side-collapsed`. Clicking a chip focuses the Operation (restoring it if minimized); if a panel is currently maximized and the clicked chip is a different Operation, the maximized panel is switched to the clicked Operation (`setMaximizedOperationId`) without triggering a canvas pan. Double-clicking a chip's name opens an inline rename input that reuses the canvas panel rename flow through the shared `useInlineRename` hook (Enter commits, Escape cancels, blur commits); the rename input is hidden in `rail` tier alongside the name, so rename is only reachable from `list`/`detail` tiers.
 - **Active Operation SSoT**: `activeOperationId` (`core/client/src/store.ts`) is the single source of truth for active highlight and for `Alt + Left / Right` cycling. The cycle order is the same as the Left SideBar's visible order — the shared `sortOperationsByOrder` helper (`store.ts`) ranks by the canvas `operationOrder` (drag reorder) and falls back to createdAt for unranked Operations — so `Alt + Left / Right` never diverges from the chip list. If the active Operation is minimized, active is cleared. When a new panel is added while maximized, the maximized state is kept and the new panel becomes the maximized one. The same maximize-preserving rule applies to the one-shot jump path — ALERTS "Open" and the Cmd/Ctrl+K quick-search, both routed through `pendingOperationFocus` consumed in `operations.tsx`: when a panel is maximized as the jump resolves, the maximized target is swapped to the destination Operation (`setMaximizedOperationId`) instead of clearing maximize, matching the chip-click and `Alt + Left / Right` policy. The jump handlers themselves must not call `clearMaximizedOperationId()` directly — the consume effect owns that decision after `loadForTheater` restores the destination Theater's maximize state.
 - **`operationsHydrated`**: the canvas prunes stale Operation geometries only after the first `operations` fetch has set `operationsHydrated` to `true` (`core/client/src/store.ts`). Until then, pruning is deferred so restored geometry is not discarded during initial load.
 
@@ -156,8 +156,8 @@ Operation chrome (maximize, minimize, focus, and the Operations Left SideBar) is
 - `core/host/` — Node-side backend and CLI lifecycle: the HTTP server (`server.ts`), security headers, static serving (`static-console.ts`), observer routes (including Theater registry and cascading Operation/capture removal), generic plugin route and upgrade registration, Theater folder routes (`theater-folder-browser.ts`, `theater-folder-grants.ts`), the SSE helper, `codex/` (Fleet Wiki/Codex API gateway and workspace registration), `theaters.ts` (console-level in-memory TheaterRegistry backed by durable state), `theater.ts` (Theater id hash, realpath canonicalization, and label helpers), the lifecycle modules (`lock.ts`, `paths.ts`, `health.ts`, `stale.ts`), the self-update orchestrator (`update-apply.ts`), and the CLI (`cli.ts`, `cli-bin.ts`, `browser.ts`, `help-style.ts`). Terminal PTY tickets, WebSocket upgrade, session lifecycle, shell launch, and agent launch live in the Terminal plugin under `../fleet-plugins/terminal/server/`. Built by tsup to `dist/cli.mjs` and `dist/cli-bin.mjs`. `help-style.ts` is a CLI-help-only **self-hosted** style helper shared by the console and Codex compatibility CLIs; it must not import from `fleet-cli`, `packages/*`, or `core/client/`, and changes to the shared banner/SGR vocabulary require manual sync across those copies.
 - `core/client/` — the Vite React SPA (`core/client/src/`, `core/client/index.html`, `core/client/vite.config.ts`). Must not import Node-only modules or the console backend (`core/host/`).
 - `../fleet-plugins/terminal/` — the built-in Terminal plugin package. It provides the Shell and Agent browser panels, plugin route handlers, launch metadata, and absorbed shared/server-shared/client-shared helpers for the single `terminal` plugin.
-- `../fleet-plugins/diff/` — the built-in Diff plugin package. It owns git diff backend routes (`/plugins/diff/changed`, `/plugins/diff/file`), `isSafeGitRef` validation, and the Diff rail panel client. Server code (`server/`) and client code (`client/`) are self-contained; no git or file helpers live in `core/host/`. **Extended Bridge layout**: selecting a file expands the panel 400 px to the left via `ctx.requestExtraWidth(400)` (single `useLayoutEffect` call site) and renders an inline two-pane layout — left diff document pane (`hunk-view.tsx` with `hunk-parse.ts` line-number gutter and `@@` summary labels) / right file list pane. A 4 px drag divider between the panes adjusts the split ratio (persisted per browser as `PREFS_SPLIT_RATIO`, default 0.56 ≈ a 400 px document pane at the extended width; pane minimums 140 px document / 220 px list, so the document pane yields first under viewport clamping, and dragging is a no-op when the container is narrower than both minimums combined). Deselecting or closing resets to 0. The repository picker opens as an opaque in-panel Command Deck (`var(--ink-deep)` background, `inset: 0`) with worktree children always rendered inline, ROOT badge = brass, WORKTREE badge = aurora, and DEPTH + Rescan footer preserved.
-- `../fleet-plugins/file-explorer/` — the built-in File Explorer plugin package. It owns file listing (`/plugins/file-explorer/files/list`), file reading (`/plugins/file-explorer/files/read`), image serving (`/plugins/file-explorer/files/image`), symlink-aware containment, and the File Explorer rail panel client. Server code (`server/`) and client code (`client/`) are self-contained.
+- `../fleet-plugins/diff/` — the built-in Diff plugin package. It owns git diff backend routes (`/plugins/diff/changed`, `/plugins/diff/file`), `isSafeGitRef` validation, and the Diff rail panel client. Server code (`server/`) and client code (`client/`) are self-contained; no git or file helpers live in `core/host/`. **Extended Bridge layout**: selecting a file or commit expands the panel 400 px to the left via `ctx.requestExtraWidth(400)` (single `useLayoutEffect` call site) — the full extra width goes to the left diff document pane (`hunk-view.tsx` with `hunk-parse.ts` line-number gutter and `@@` summary labels); the right file list pane stays a **fixed px column** (default 248 px, drag minimum 220 px, persisted per browser as `fleet-console.diff.listPaneWidth`). A 4 px drag divider adjusts list width; drag clamping is a pure function in `client/rail-layout.ts` (inversion guard: no-op when the container cannot satisfy both pane minimums). The split grid is `minmax(0, 1fr) 4px minmax(0, min(<listPaneWidth>px, calc(100% - 144px)))` — when the container narrows, the document pane minimum (140 px) is preserved and the list column shrinks instead (the stored width value is unchanged). History commit rows (`.diff-tree-pane`) use container queries: author/time meta hides at ≤300 px; badges hide at ≤248 px. Pane grids (`.diff-tree-pane`, `.diff-hunk-pane`) declare `grid-template-columns: minmax(0, 1fr)` explicitly — undeclared columns default to implicit `auto` tracks sized to content min-width (toolbar fixed-width sums can exceed the pane and overflow the row). Deselecting or closing resets extra width to 0. The repository picker opens as an opaque in-panel Command Deck (`var(--ink-deep)` background, `inset: 0`) with worktree children always rendered inline, ROOT badge = brass, WORKTREE badge = aurora, and DEPTH + Rescan footer preserved.
+- `../fleet-plugins/file-explorer/` — the built-in File Explorer plugin package. It owns file listing (`/plugins/file-explorer/files/list`), file reading (`/plugins/file-explorer/files/read`), image serving (`/plugins/file-explorer/files/image`), symlink-aware containment, and the File Explorer rail panel client. Server code (`server/`) and client code (`client/`) are self-contained. **Two-tier layout**: with no file selected the panel is tree-only (single column, no extra width); selecting a file switches to a 2-pane split via a single `useLayoutEffect` calling `ctx.requestExtraWidth(360)` — left viewer pane + right fixed tree column (default 248 px, drag minimum 160 px, persisted per browser as `fleet-console.file-explorer.treePaneWidth`). Closing the viewer returns to tree-only and clears extra width. The viewer minimum (200 px) is preserved by the same CSS `min()` clamp pattern as Diff (`minmax(0, min(<treePaneWidth>px, calc(100% - 204px)))`). File Explorer does not use `RailPanelDescriptor.preferredExtraWidth` (the SDK field remains for other panels). Pane grids declare `grid-template-columns: minmax(0, 1fr)` for the same implicit-auto overflow pitfall as Diff.
 - `../fleet-plugins/skills/` — the built-in Skills plugin package. It wraps the Vercel Labs `skills` CLI (pinned version, self-bootstrapped into the plugin data directory via `npm install --prefix --global=false --force=false` and executed directly as `node <…>/node_modules/skills/bin/cli.mjs` — never `npx`, whose multi-bin resolution breaks under non-default user npm configs) to provide skill list, install, update, remove, and SKILL.md preview routes under `/plugins/skills/*`, proxies the skills.sh registry search API, manages an in-memory job registry with 750ms cursor polling, and renders the Skills Activity Rail panel (Installed/Find tabs, inline install flow, reading overlay).
 - `tests/` — vitest suites for the reducer, SSE parser, store, terminal, and CLI lifecycle.
 
@@ -211,7 +211,7 @@ These CSS variables are declared in `rail.css` and must not be inlined elsewhere
 - Active icon = `--brass`; idle = `--ink-fog`; hover = `--ink-spectral`. Do **not** use `--aurora` for rail icon states.
 - Active icon carries a left-edge 2px `--brass` bar (`.right-rail-ico.is-active::before`).
 - Panel open/close transition = `width var(--duration-base) var(--ease-spring)`. `prefers-reduced-motion: reduce` must short-circuit to `0.01ms`.
-- Panel chrome (header 46px min-height + body 1fr) follows the mock `.panel` pattern. Panel body content is plugin-owned; chrome is host-owned.
+- Panel chrome (header 46px min-height + body 1fr; head and body `min-width: 240px`, aligned with `MIN_PANEL_WIDTH` in `right-rail.tsx`) follows the mock `.panel` pattern. Panel body content is plugin-owned; chrome is host-owned.
 - Viewer-surface syntax/diff colors go in new surface CSS files (e.g., `rail-viewer.css`); `theme.css` is immutable.
 
 ## Design Identity — "Maritime Console"
@@ -244,6 +244,7 @@ imports -> types/interfaces -> constants -> functions/components
 - This package **is** the HTTP server. The backend owns its own loopback server, lifecycle, and `/console/` serving; the CLI starts and stops that server rather than launching a separate daemon.
 - **npm publish contract**: tsup bundles every `@dotobokuri/*` workspace dependency and `@fleet-console/sdk` inline (`noExternal: [/^@dotobokuri\//, /^@fleet-console\/sdk(\/|$)/]`) so the published package is self-contained; only `node-pty` (native binding) and `ws` (dynamic `require`) stay external. `scripts/publish-fleet-console.mjs` drops `private`, replaces `dependencies` with just those two externals, and injects the `node-pty` `postinstall`. Do **not** add a statically-imported workspace package without confirming it bundles, and re-verify the published manifest with `npm pack` after touching `noExternal` or runtime deps — leaving a `workspace:*` dependency in the manifest breaks `npm install`.
 - **Plugin native/external module resolution**: a built-in plugin's server code that `require()`s a native or `external` module (`node-pty`, `ws`) must resolve it against the `@dotobokuri/fleet-console` package, not via a bare `createRequire(import.meta.url)`. Plugins load from an esbuild **cache bundle** (`node_modules/.cache/fleet-console-plugin-*`), so a `createRequire` rooted there can resolve a **stale copy from a parent-workspace `node_modules`** and fail at runtime with `posix_spawnp failed` — typecheck and build stay green, so only a runtime/e2e run catches it. The Terminal plugin's `server/shared/pty.ts` (`findConsolePackageRequire`) is the reference, guarded by a `launch.test.ts` regression test.
+- **Plugin external-bundle module-singleton split**: a `@dotobokuri/*` package holding module-scoped mutable singleton state (e.g. `fleet-carriers` `state-io.ts` `runtimeState`) is inlined into `dist/cli.mjs` for host code (tsup `noExternal`) but loaded as a **separate esbuild-external copy** for plugins — so host code and plugin code see **different singleton instances**. State the host sets (e.g. a boot-time `initStore(dir)` in `server.ts`) is invisible to the plugin's copy and vice versa. Symptom: a mutation routed through one copy silently no-ops or writes to the wrong path while the other copy holds the initialized state (PR#175: console carrier-settings PATCH returned 200 but never wrote `carriers.json`). Fix: do **not** depend on cross-boundary singleton state — make the resolver **self-contained** (`runtimeState.storeDir ?? getFleetDataDir()`) so both copies converge regardless of which one had its setter called. Unit tests import a single source singleton and stay green; only a **dist real-boot e2e** catches this.
 
 ## Tests
 

package/dist/cli.d.ts

@@ -71,17 +71,7 @@ interface ConsoleStatusDeps {
 interface ConsoleStopDeps {
     readonly lifecycle?: Pick<ReturnType<typeof createConsoleDaemonLifecycle>, "stop">;
 }
-interface ConsoleRestartDeps {
-    readonly lifecycle?: Pick<ReturnType<typeof createConsoleDaemonLifecycle>, "stop" | "ensureDaemon" | "probe">;
-    readonly openBrowser?: (url: string, deps?: OpenBrowserDeps) => void;
-}
-interface BuildConsoleHelpTextOptions {
-    readonly env?: NodeJS.ProcessEnv;
-    readonly isTTY?: boolean;
-    readonly release?: string;
-}
-declare function parseConsoleCliMode(argv: readonly string[]): ConsoleCliMode;
-declare function parseConsoleHookCommand(argv: readonly string[]): {
+type ConsoleHookCommand = {
     readonly command: "capture-session";
     readonly provider: string;
 } | {
@@ -93,6 +83,17 @@ declare function parseConsoleHookCommand(argv: readonly string[]): {
 } | {
     readonly command: "auto-name";
 };
+interface ConsoleRestartDeps {
+    readonly lifecycle?: Pick<ReturnType<typeof createConsoleDaemonLifecycle>, "stop" | "ensureDaemon" | "probe">;
+    readonly openBrowser?: (url: string, deps?: OpenBrowserDeps) => void;
+}
+interface BuildConsoleHelpTextOptions {
+    readonly env?: NodeJS.ProcessEnv;
+    readonly isTTY?: boolean;
+    readonly release?: string;
+}
+declare function parseConsoleCliMode(argv: readonly string[]): ConsoleCliMode;
+declare function parseConsoleHookCommand(argv: readonly string[]): ConsoleHookCommand;
 declare function buildConsoleHelpText(options?: BuildConsoleHelpTextOptions): string;
 declare function createConsoleDaemonLifecycle(deps?: ConsoleDaemonLifecycleDeps): {
     ensureDaemon: () => Promise<string>;
@@ -112,4 +113,4 @@ declare function runConsoleStop(deps?: ConsoleStopDeps): Promise<string>;
 declare function runConsoleRestart(deps?: ConsoleRestartDeps): Promise<OpenFleetConsoleResult>;
 declare function main(): Promise<void>;
 
-export { type BuildConsoleHelpTextOptions, type ConsoleCliMode, type ConsoleDaemonLifecycleDeps, type ConsoleRestartDeps, type ConsoleStatusDeps, type ConsoleStopDeps, type OpenFleetConsoleDeps, type OpenFleetConsoleResult, buildConsoleHelpText, createConsoleDaemonLifecycle, main, openFleetConsole, parseConsoleCliMode, parseConsoleHookCommand, runConsoleRestart, runConsoleStatus, runConsoleStop };
+export { type BuildConsoleHelpTextOptions, type ConsoleCliMode, type ConsoleDaemonLifecycleDeps, type ConsoleHookCommand, type ConsoleRestartDeps, type ConsoleStatusDeps, type ConsoleStopDeps, type OpenFleetConsoleDeps, type OpenFleetConsoleResult, buildConsoleHelpText, createConsoleDaemonLifecycle, main, openFleetConsole, parseConsoleCliMode, parseConsoleHookCommand, runConsoleRestart, runConsoleStatus, runConsoleStop };

package/dist/cli.mjs

@@ -21,6 +21,93 @@ var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, { get: all[name], enumerable: true });
 };
+var DEFAULT_WINDOWS_PATHEXT = ".COM;.EXE;.BAT;.CMD";
+var WINDOWS_PATH_SEPARATOR = ";";
+var WINDOWS_SHIM_EXTENSIONS = /* @__PURE__ */ new Set([".cmd", ".bat"]);
+var CMD_EXPANSION_SENSITIVE_PATTERN = /[%^]/;
+function resolvePathBinary(command2, env, options = {}) {
+  const resolved = findBinaryPath(command2, env, options);
+  return resolved ? wrapWindowsShim(resolved, env, options.platform ?? process.platform) : void 0;
+}
+function findBinaryPath(command2, env, options = {}) {
+  const platform = options.platform ?? process.platform;
+  const isWindows2 = platform === "win32";
+  const pathValue = isWindows2 ? env.Path ?? env.PATH ?? "" : env.PATH ?? "";
+  const pathExts = isWindows2 ? parsePathExt(env.PATHEXT) : [""];
+  return findOnPath(command2, pathValue, pathExts, platform);
+}
+function wrapWindowsShim(resolved, env, platform) {
+  if (platform !== "win32" || !WINDOWS_SHIM_EXTENSIONS.has(path25__default.extname(resolved).toLowerCase())) {
+    return { bin: resolved, prefixArgs: [] };
+  }
+  rejectCmdExpansionSensitiveShim(resolved);
+  return {
+    bin: env.ComSpec ?? "cmd.exe",
+    prefixArgs: ["/d", "/s", "/c", "call", forceWindowsArgQuoting(resolved)]
+  };
+}
+function rejectCmdExpansionSensitiveShim(resolved) {
+  if (CMD_EXPANSION_SENSITIVE_PATTERN.test(resolved)) {
+    throw new Error(`Refusing to run Windows shim path with cmd.exe expansion-sensitive characters (% or ^): ${resolved}`);
+  }
+}
+function forceWindowsArgQuoting(value) {
+  return `${value} `;
+}
+function findOnPath(bin, pathValue, pathExts, platform) {
+  const pathSeparator = platform === "win32" ? WINDOWS_PATH_SEPARATOR : path25__default.delimiter;
+  if (hasPathSeparator(bin, platform) || path25__default.isAbsolute(bin)) {
+    return resolveWithExtensions(bin, pathExts, platform);
+  }
+  for (const entry of pathValue.split(pathSeparator)) {
+    const searchDir = entry.length === 0 ? "." : entry;
+    const candidate = resolveWithExtensions(path25__default.join(searchDir, bin), pathExts, platform);
+    if (candidate) {
+      return candidate;
+    }
+  }
+  return void 0;
+}
+function resolveWithExtensions(candidate, pathExts, platform) {
+  if (platform !== "win32" || path25__default.extname(candidate).length > 0) {
+    return isAccessibleExecutable(candidate, platform) ? candidate : void 0;
+  }
+  for (const ext of pathExts) {
+    if (ext.length === 0) {
+      continue;
+    }
+    const withExt = `${candidate}${ext}`;
+    if (existsSync(withExt)) {
+      return withExt;
+    }
+  }
+  return isAccessibleExecutable(candidate, platform) ? candidate : void 0;
+}
+function isAccessibleExecutable(candidate, platform) {
+  if (!existsSync(candidate)) return false;
+  if (platform === "win32") return true;
+  try {
+    accessSync(candidate, constants.X_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function hasPathSeparator(value, platform) {
+  if (value.includes("/")) {
+    return true;
+  }
+  return platform === "win32" && value.includes("\\");
+}
+function parsePathExt(pathExt) {
+  const raw = pathExt && pathExt.trim().length > 0 ? pathExt : DEFAULT_WINDOWS_PATHEXT;
+  return raw.split(WINDOWS_PATH_SEPARATOR).map((entry) => entry.trim()).filter((entry) => entry.length > 0);
+}
+
+// ../../packages/core-process/src/hidden.ts
+function withHidden(options) {
+  return { ...options ?? {}, windowsHide: true };
+}
 function openBrowser(url2, deps = {}) {
   const platform = deps.platform ?? os4__default.platform();
   const spawnBrowser = deps.spawnBrowser ?? ((command2, args, options) => {
@@ -348,7 +435,7 @@ function ensureSafeDirectory(dirPath) {
   fs11.chmodSync(dirPath, SECURE_DIR_MODE);
 }
 
-// ../../packages/fleet-infra/src/fs-store/atomic-write.ts
+// ../../packages/core-infra/src/fs-store/atomic-write.ts
 var DEFAULT_MAX_ATTEMPTS = 10;
 var IGNORED_FSYNC_ERROR_CODES = /* @__PURE__ */ new Set(["EPERM", "EINVAL", "ENOSYS"]);
 function buildTempPath(filePath) {
@@ -595,7 +682,7 @@ function readAuthStoreFile(filePath) {
   }
 }
 
-// ../../packages/fleet-infra/src/auth/auth-storage.ts
+// ../../packages/core-infra/src/auth/auth-storage.ts
 var DEFAULT_AUTH_PATH = path25.join(getFleetDataDir(), "auth.json");
 var AUTH_LOCK_OWNER_FILE_NAME = "owner.json";
 var AUTH_LOCK_TIMEOUT_MS = 5e3;
@@ -766,7 +853,7 @@ function ensureSafeDirectoryIfSensitive(dir, sensitivity) {
   }
 }
 
-// ../../packages/fleet-infra/src/global-options/store.ts
+// ../../packages/core-infra/src/data-dir/settings/store.ts
 var GLOBAL_OPTIONS_VERSION = 1;
 var GLOBAL_OPTIONS_FILE_NAME = "settings.json";
 var LOCK_DIR_NAME = "settings.json.lock";
@@ -808,18 +895,17 @@ function sanitizeGlobalOptionsData(value) {
   }
   const data = {
     version: GLOBAL_OPTIONS_VERSION,
-    ...typeof value.replaceSystemPrompt === "boolean" ? { replaceSystemPrompt: value.replaceSystemPrompt } : {},
     ...typeof value.enableMetaphor === "boolean" ? { enableMetaphor: value.enableMetaphor } : {}
   };
-  const allowedKeys = /* @__PURE__ */ new Set(["version", "replaceSystemPrompt", "enableMetaphor"]);
-  const changed = Object.keys(value).some((key) => !allowedKeys.has(key)) || "replaceSystemPrompt" in value && typeof value.replaceSystemPrompt !== "boolean" || "enableMetaphor" in value && typeof value.enableMetaphor !== "boolean";
+  const allowedKeys = /* @__PURE__ */ new Set(["version", "enableMetaphor"]);
+  const changed = Object.keys(value).some((key) => !allowedKeys.has(key)) || "enableMetaphor" in value && typeof value.enableMetaphor !== "boolean";
   return { data, changed };
 }
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
-// ../../packages/fleet-infra/src/global-options/service.ts
+// ../../packages/core-infra/src/data-dir/settings/service.ts
 function createGlobalOptionsService(deps = {}) {
   const store2 = deps.store ?? createGlobalOptionsStore({ dataDir: deps.dataDir });
   return {
@@ -835,7 +921,7 @@ function updateGlobalOptions(store2, mutate) {
   return store2.update(mutate);
 }
 
-// ../../packages/fleet-infra/src/index.ts
+// ../../packages/core-infra/src/index.ts
 function createInfraServices(deps = {}) {
   const globalOptionsService = createGlobalOptionsService();
   const authService = createAuthService({ authPath: deps.authPath ?? DEFAULT_AUTH_PATH });
@@ -17782,12 +17868,7 @@ function killProcess(child, forceTimeoutMs = 3e3) {
   markIntentionalKill(child);
   if (isWindows()) {
     try {
-      execSync(`taskkill /PID ${child.pid} /T /F`, {
-        stdio: "pipe",
-        timeout: 5e3,
-        // 콘솔 없는 호스트에서 taskkill 호출 시 새 콘솔 창이 깜빡이는 것을 방지한다.
-        windowsHide: true
-      });
+      execSync(`taskkill /PID ${child.pid} /T /F`, withHidden({ stdio: "pipe", timeout: 5e3 }));
     } catch {
       child.kill("SIGKILL");
     }
@@ -17890,17 +17971,12 @@ var BaseConnection = class extends EventEmitter {
     const child = isWindows() ? spawn(
       this.env.ComSpec ?? "cmd.exe",
       buildWindowsCmdArgs(this.command, this.args),
-      {
+      withHidden({
         cwd: this.cwd,
         stdio: ["pipe", "pipe", "pipe"],
         env: this.env,
-        windowsVerbatimArguments: true,
-        // 콘솔이 없는 호스트(예: fleet-console 백엔드)에서 cmd.exe를 spawn하면
-        // Windows가 새 콘솔 창을 할당해 깜빡인다. stdio는 모두 pipe라 가시 콘솔이
-        // 불필요하므로 CREATE_NO_WINDOW로 창 생성을 억제한다. (fleet-cli처럼 콘솔이
-        // 이미 있는 경우에도 무해하다.)
-        windowsHide: true
-      }
+        windowsVerbatimArguments: true
+      })
     ) : spawn(this.command, this.args, {
       cwd: this.cwd,
       stdio: ["pipe", "pipe", "pipe"],
@@ -18781,35 +18857,14 @@ function createIdleTimeoutRace(promise2, idleMs, label) {
   });
   return [wrapped, resetTimer];
 }
+
+// ../../packages/core-unified-agent/src/utils/npx.ts
 function resolveNpxPath(env) {
-  const windows = isWindows();
-  const whichCmd = windows ? "where npx" : "which npx";
-  try {
-    const result = execSync(whichCmd, {
-      encoding: "utf-8",
-      stdio: "pipe",
-      timeout: 5e3,
-      env,
-      // 콘솔 없는 호스트에서 `where npx` 실행 시 콘솔 창이 깜빡이는 것을 방지한다.
-      windowsHide: true
-    }).trim();
-    const candidates = result.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
-    if (windows) {
-      const executable = candidates.find((p) => /\.(cmd|bat|exe)$/i.test(p));
-      if (executable) {
-        return executable;
-      }
-    }
-    if (candidates.length > 0) {
-      return candidates[0];
-    }
-    return windows ? "npx.cmd" : "npx";
-  } catch {
-    if (windows) {
-      return "npx.cmd";
-    }
-    return "npx";
+  const resolved = findBinaryPath("npx", env ?? process.env);
+  if (resolved) {
+    return resolved;
   }
+  return isWindows() ? "npx.cmd" : "npx";
 }
 function buildNpxArgs(packageName, preferOffline = false) {
   const args = ["--yes"];
@@ -18831,7 +18886,7 @@ var models_default = {
   updatedAt: "2026-07-04T00:00:00Z",
   providers: {
     claude: {
-      name: "Claude Code with Anthropic",
+      name: "Claude Code",
       defaultModel: "opus[1m]",
       models: [
         { modelId: "haiku", name: "Claude Haiku", effort: { supported: true, levels: ["low", "medium", "high", "xhigh", "max"], default: "low" } },
@@ -18844,7 +18899,7 @@ var models_default = {
       ]
     },
     codex: {
-      name: "OpenAI Codex CLI",
+      name: "Codex",
       defaultModel: "gpt-5.4",
       models: [
         { modelId: "gpt-5.4", name: "GPT-5.4", effort: { supported: true, levels: ["low", "medium", "high", "xhigh"], default: "high" } },
@@ -19309,25 +19364,23 @@ var CliDetector = class {
    * @returns 사용 가능 여부
    */
   async isCliAvailable(command2) {
-    const whichCommand = isWindows() ? "where" : "which";
-    try {
-      await this.execCommand(whichCommand, [command2], 3e3);
+    const resolved = findBinaryPath(command2, process.env);
+    if (resolved !== void 0) {
       return true;
-    } catch {
-      if (isWindows()) {
-        try {
-          await this.execCommand(
-            "powershell",
-            ["-NoProfile", "-Command", `Get-Command -All ${command2}`],
-            5e3
-          );
-          return true;
-        } catch {
-          return false;
-        }
+    }
+    if (process.platform === "win32") {
+      try {
+        await this.execCommand(
+          "powershell",
+          ["-NoProfile", "-Command", `Get-Command -All ${command2}`],
+          5e3
+        );
+        return true;
+      } catch {
+        return false;
       }
-      return false;
     }
+    return false;
   }
   /**
    * CLI의 버전을 감지합니다.
@@ -19351,13 +19404,8 @@ var CliDetector = class {
    * @returns 전체 경로 또는 커맨드 이름
    */
   async getCliPath(command2) {
-    const whichCommand = isWindows() ? "where" : "which";
-    try {
-      const result = await this.execCommand(whichCommand, [command2], 3e3);
-      return result.split(/\r?\n/)[0].trim();
-    } catch {
-      return command2;
-    }
+    const resolved = findBinaryPath(command2, process.env);
+    return resolved ?? command2;
   }
   /**
    * 외부 명령 실행 결과(stdout)를 문자열로 반환합니다.
@@ -19367,11 +19415,7 @@ var CliDetector = class {
       execFile(
         command2,
         args,
-        {
-          encoding: "utf-8",
-          timeout,
-          windowsHide: true
-        },
+        withHidden({ encoding: "utf-8", timeout }),
         (error51, stdout) => {
           if (error51) {
             reject(error51);
@@ -22363,75 +22407,6 @@ function assertNoAuthorizationHeader(config2) {
     throw new Error(`Builtin external MCP server "${config2.name}" must not define headers.`);
   }
 }
-var DEFAULT_WINDOWS_PATHEXT = ".COM;.EXE;.BAT;.CMD";
-var WINDOWS_PATH_SEPARATOR = ";";
-var WINDOWS_SHIM_EXTENSIONS = /* @__PURE__ */ new Set([".cmd", ".bat"]);
-var CMD_EXPANSION_SENSITIVE_PATTERN = /[%^]/;
-function resolvePathBinary(command2, env, options = {}) {
-  const platform = options.platform ?? process.platform;
-  const isWindows2 = platform === "win32";
-  const pathValue = isWindows2 ? env.Path ?? env.PATH ?? "" : env.PATH ?? "";
-  const pathExts = isWindows2 ? parsePathExt(env.PATHEXT) : [""];
-  const resolved = findOnPath(command2, pathValue, pathExts, platform);
-  return resolved ? wrapWindowsShim(resolved, env, platform) : void 0;
-}
-function wrapWindowsShim(resolved, env, platform) {
-  if (platform !== "win32" || !WINDOWS_SHIM_EXTENSIONS.has(path25__default.extname(resolved).toLowerCase())) {
-    return { bin: resolved, prefixArgs: [] };
-  }
-  rejectCmdExpansionSensitiveShim(resolved);
-  return {
-    bin: env.ComSpec ?? "cmd.exe",
-    prefixArgs: ["/d", "/s", "/c", "call", forceWindowsArgQuoting(resolved)]
-  };
-}
-function rejectCmdExpansionSensitiveShim(resolved) {
-  if (CMD_EXPANSION_SENSITIVE_PATTERN.test(resolved)) {
-    throw new Error(`Refusing to run Windows shim path with cmd.exe expansion-sensitive characters (% or ^): ${resolved}`);
-  }
-}
-function forceWindowsArgQuoting(value) {
-  return `${value} `;
-}
-function findOnPath(bin, pathValue, pathExts, platform) {
-  const pathSeparator = platform === "win32" ? WINDOWS_PATH_SEPARATOR : path25__default.delimiter;
-  if (hasPathSeparator(bin, platform) || path25__default.isAbsolute(bin)) {
-    return resolveWithExtensions(bin, pathExts, platform);
-  }
-  for (const entry of pathValue.split(pathSeparator)) {
-    const searchDir = entry.length === 0 ? "." : entry;
-    const candidate = resolveWithExtensions(path25__default.join(searchDir, bin), pathExts, platform);
-    if (candidate) {
-      return candidate;
-    }
-  }
-  return void 0;
-}
-function resolveWithExtensions(candidate, pathExts, platform) {
-  if (platform !== "win32" || path25__default.extname(candidate).length > 0) {
-    return existsSync(candidate) ? candidate : void 0;
-  }
-  for (const ext of pathExts) {
-    if (ext.length === 0) {
-      continue;
-    }
-    const withExt = `${candidate}${ext}`;
-    if (existsSync(withExt)) {
-      return withExt;
-    }
-  }
-  return existsSync(candidate) ? candidate : void 0;
-}
-function hasPathSeparator(value, platform) {
-  if (value.includes("/")) {
-    return true;
-  }
-  return platform === "win32" && value.includes("\\");
-}
-function parsePathExt(pathExt) {
-  const raw = pathExt && pathExt.trim().length > 0 ? pathExt : DEFAULT_WINDOWS_PATHEXT;
-  return raw.split(WINDOWS_PATH_SEPARATOR).map((entry) => entry.trim()).filter((entry) => entry.length > 0);
-}
 
 // ../../packages/core-agent/src/internal/session-errors.ts
 var DEAD_SESSION_PATTERNS = [
@@ -23572,7 +23547,6 @@ __export(state_io_exports, {
   withStoreLock: () => withStoreLock
 });
 var FILENAME = "carriers.json";
-var DEFAULT_STORE_DIRNAME = ".fleet";
 var STALE_SUBAGENT_MODE_FILENAME = "carrier-subagent.json";
 var LOCK_DIRNAME = "carriers.json.lock";
 var LOCK_OWNER_FILENAME = "owner.json";
@@ -23582,10 +23556,11 @@ var runtimeState = {
   lastLocalWriteFingerprint: null
 };
 function initStore(dir) {
-  runtimeState.storeDir = dir;
-  ensureSafeDirectory(dir);
+  const resolvedDir = dir ?? getFleetDataDir();
+  runtimeState.storeDir = resolvedDir;
+  ensureSafeDirectory(resolvedDir);
   withStoreLock(() => {
-    unlinkStaleSubagentModeFile(dir);
+    unlinkStaleSubagentModeFile(resolvedDir);
   });
 }
 function resetStoreForTests() {
@@ -23597,14 +23572,12 @@ function readRawCarriers() {
   return readCarriers();
 }
 function readRawCarriersOrDefaultStore() {
-  return runtimeState.storeDir ? readCarriers() : readCarriersFromDir(resolveDefaultStoreDir());
+  return readCarriers();
 }
 function getCarriersFilePath() {
-  if (!runtimeState.storeDir) return null;
-  return path25.join(runtimeState.storeDir, FILENAME);
+  return path25.join(resolveStoreDir(), FILENAME);
 }
 function updateCarriers(mutator) {
-  if (!runtimeState.storeDir) return;
   withStoreLock(() => {
     const carriers = readCarriers();
     const snapshot = structuredClone(carriers);
@@ -23614,20 +23587,19 @@ function updateCarriers(mutator) {
   });
 }
 function withStoreLock(operation) {
-  if (!runtimeState.storeDir) return operation();
-  fs11.mkdirSync(runtimeState.storeDir, { recursive: true });
-  const lockDir = path25.join(runtimeState.storeDir, LOCK_DIRNAME);
+  const dir = resolveStoreDir();
+  ensureSafeDirectory(dir);
+  const lockDir = path25.join(dir, LOCK_DIRNAME);
   return withDirectoryLock(
     { lockDir, ownerFileName: LOCK_OWNER_FILENAME },
     operation
   );
 }
-function readCarriers() {
-  if (!runtimeState.storeDir) return {};
-  return readCarriersFromDir(runtimeState.storeDir);
+function resolveStoreDir() {
+  return runtimeState.storeDir ?? getFleetDataDir();
 }
-function resolveDefaultStoreDir() {
-  return path25.join(os4.homedir(), DEFAULT_STORE_DIRNAME);
+function readCarriers() {
+  return readCarriersFromDir(resolveStoreDir());
 }
 function readCarriersFromDir(dir) {
   const filePath = path25.join(dir, FILENAME);
@@ -23658,9 +23630,8 @@ function recordLastLocalWriteFingerprint(filePath, generation) {
   }
 }
 function writeCarriers(s) {
-  if (!runtimeState.storeDir) throw new Error("Fleet store is not initialized.");
-  fs11.mkdirSync(runtimeState.storeDir, { recursive: true });
-  const filePath = path25.join(runtimeState.storeDir, FILENAME);
+  const dir = resolveStoreDir();
+  const filePath = path25.join(dir, FILENAME);
   const next = serializeFleetCarriers(s);
   writeAtomicSync(filePath, `${JSON.stringify(next, null, 2)}
 `, { fsync: false, mode: 420 });
@@ -25567,8 +25538,8 @@ function Create(hidden, enumerable, options = {}) {
   Metrics.create += 1;
   const settings2 = settings_exports.Get();
   const withOptions = Merge(enumerable, options);
-  const withHidden = settings2.enumerableKind ? Merge(withOptions, hidden) : MergeHidden(withOptions, hidden);
-  return settings2.immutableTypes ? Object.freeze(withHidden) : withHidden;
+  const withHidden2 = settings2.enumerableKind ? Merge(withOptions, hidden) : MergeHidden(withOptions, hidden);
+  return settings2.immutableTypes ? Object.freeze(withHidden2) : withHidden2;
 }
 
 // ../../node_modules/.pnpm/typebox@1.1.34/node_modules/typebox/build/system/memory/discard.mjs
@@ -33764,7 +33735,7 @@ async function directoryExists(dirPath) {
 
 // core/host/security-headers.ts
 var CONSOLE_SECURITY_HEADERS = {
-  "Content-Security-Policy": "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:; connect-src 'self' ws: wss: https://api.github.com; object-src 'none'; base-uri 'none'",
+  "Content-Security-Policy": "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://img.shields.io; font-src 'self' data:; connect-src 'self' ws: wss: https://api.github.com; object-src 'none'; base-uri 'none'",
   "X-Content-Type-Options": "nosniff",
   "Referrer-Policy": "no-referrer",
   "Cache-Control": "no-store"
@@ -35945,7 +35916,7 @@ async function preflightPackageManager(packageRoot, env) {
 }
 function spawnDetachedWorker(spawnWorker, execPath, args, env) {
   return new Promise((resolve2, reject) => {
-    const child = spawnWorker(execPath, args, { detached: true, env, stdio: "ignore", windowsHide: true });
+    const child = spawnWorker(execPath, args, withHidden({ detached: true, env, stdio: "ignore" }));
     let settled = false;
     child.once("error", (error51) => {
       if (settled) return;
@@ -36149,8 +36120,6 @@ function createConsoleServer(deps = {}) {
   const operations = createOperationStore();
   const folderGrants = createFolderGrantStore();
   createInfraServices();
-  const dataDir = deps.dataDir ?? getFleetDataDir();
-  initStore(dataDir);
   const durablePaths = createConsoleDataPaths({ fleetDataDir: deps.dataDir });
   const durableStateStore = createConsoleDurableStateStore({ paths: durablePaths });
   const consoleSettingsStore = createConsoleSettingsStore({ paths: durablePaths });
@@ -36237,7 +36206,6 @@ function createConsoleServer(deps = {}) {
       registerSseChannel: () => () => void 0
     },
     paths: {
-      dataDir: durablePaths.dir,
       capturesDir: durablePaths.capturesDir,
       pluginDataDir: (pluginId) => path25__default.join(durablePaths.dir, "plugins", pluginId),
       resolveTheaterPath: (theaterId) => theaters.get(theaterId)?.path ?? null,
@@ -37240,7 +37208,7 @@ function createConsoleDaemonLifecycle(deps = {}) {
       if (typeof probeResult.health?.workspaceCount === "number" && probeResult.health.workspaceCount > 0) return current.endpoint;
     }
     if (current) await stop();
-    spawnDetached(execPath, [serverModulePath, "serve"], { detached: true, env, stdio: "ignore", windowsHide: true });
+    spawnDetached(execPath, [serverModulePath, "serve"], withHidden({ detached: true, env, stdio: "ignore" }));
     for (let i = 0; i < 30; i += 1) {
       await sleep(100);
       const next = await probe();