@dotobokuri/fleet-console 1.18.0 → 1.19.0

package/dist/fleet-plugins/diff/routes.mjs

@@ -1,19 +1,27 @@
 #!/usr/bin/env node
-import fs from 'fs/promises';
-import path2 from 'path';
 import { spawn } from 'child_process';
+import 'fs';
+import path3 from 'path';
+import fs from 'fs/promises';
 
 // sdk/plugin/node.ts
 function definePlugin(definition) {
   return definition;
 }
-function registerRouter(ctx, path3, handler) {
-  ctx.registerRouter(normalizePath(path3), handler);
+function registerRouter(ctx, path4, handler) {
+  ctx.registerRouter(normalizePath(path4), handler);
 }
-function normalizePath(path3) {
-  if (path3.length === 0 || path3 === "/") return "/";
-  return path3;
+function normalizePath(path4) {
+  if (path4.length === 0 || path4 === "/") return "/";
+  return path4;
+}
+
+// ../../packages/core-process/src/hidden.ts
+function withHidden(options) {
+  return { ...options ?? {}, windowsHide: true };
 }
+
+// ../fleet-plugins/diff/server/git-executor.ts
 var GitExecutorError = class extends Error {
   code;
   exitCode;
@@ -34,7 +42,7 @@ function runGit(args, opts) {
   return new Promise((resolve, reject) => {
     let child;
     try {
-      child = spawn("git", args, { cwd: opts.cwd, shell: false, windowsHide: true });
+      child = spawn("git", args, withHidden({ cwd: opts.cwd, shell: false }));
     } catch (error) {
       const code = error.code === "ENOENT" ? "git_unavailable" : "spawn_failed";
       reject(new GitExecutorError(code, String(error)));
@@ -89,8 +97,6 @@ function runGit(args, opts) {
     });
   });
 }
-
-// ../fleet-plugins/diff/server/diff.ts
 function isPlainObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -141,9 +147,9 @@ function isNoHeadError(error) {
 }
 async function resolveGitCwd(theaterPath, rawSubPath) {
   if (rawSubPath === "") return { gitCwd: theaterPath };
-  const resolvedSub = path2.resolve(theaterPath, rawSubPath);
-  if (!resolvedSub.startsWith(theaterPath + path2.sep) && resolvedSub !== theaterPath) return null;
-  if (path2.normalize(rawSubPath).startsWith("..")) return null;
+  const resolvedSub = path3.resolve(theaterPath, rawSubPath);
+  if (!resolvedSub.startsWith(theaterPath + path3.sep) && resolvedSub !== theaterPath) return null;
+  if (path3.normalize(rawSubPath).startsWith("..")) return null;
   let realTheater;
   let realSub;
   try {
@@ -154,7 +160,7 @@ async function resolveGitCwd(theaterPath, rawSubPath) {
   } catch {
     return null;
   }
-  const norm = realTheater.endsWith(path2.sep) ? realTheater : realTheater + path2.sep;
+  const norm = realTheater.endsWith(path3.sep) ? realTheater : realTheater + path3.sep;
   if (realSub !== realTheater && !realSub.startsWith(norm)) return null;
   return { gitCwd: resolvedSub };
 }
@@ -263,12 +269,12 @@ async function handleDiffFile(req, res, ctx) {
   }
   const { gitCwd } = cwdResult;
   const rawFilePath = body.filePath;
-  const resolvedFilePath = path2.resolve(gitCwd, rawFilePath);
-  if (!resolvedFilePath.startsWith(gitCwd + path2.sep) && resolvedFilePath !== gitCwd) {
+  const resolvedFilePath = path3.resolve(gitCwd, rawFilePath);
+  if (!resolvedFilePath.startsWith(gitCwd + path3.sep) && resolvedFilePath !== gitCwd) {
     ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
     return;
   }
-  const relativePath = path2.normalize(rawFilePath);
+  const relativePath = path3.normalize(rawFilePath);
   if (relativePath.startsWith("..")) {
     ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
     return;
@@ -286,7 +292,7 @@ async function handleDiffFile(req, res, ctx) {
         ctx.host.http.writeJson(res, 404, { error: "file_not_found" });
         return;
       }
-      if (realFile !== realGitCwd && !realFile.startsWith(realGitCwd + path2.sep)) {
+      if (realFile !== realGitCwd && !realFile.startsWith(realGitCwd + path3.sep)) {
         ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
         return;
       }
@@ -302,7 +308,7 @@ async function handleDiffFile(req, res, ctx) {
         fs.realpath(gitCwd),
         fs.realpath(resolvedFilePath)
       ]);
-      if (realFile !== realGitCwd && !realFile.startsWith(realGitCwd + path2.sep)) {
+      if (realFile !== realGitCwd && !realFile.startsWith(realGitCwd + path3.sep)) {
         ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
         return;
       }
@@ -328,10 +334,169 @@ async function handleDiffFile(req, res, ctx) {
     throw error;
   }
 }
+
+// ../fleet-plugins/diff/server/commit.ts
+var REF_RE = /^[0-9a-f]{7,40}$/i;
+function isPlainObject2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+async function handleDiffCommit(req, res, ctx) {
+  if (req.method !== "POST") {
+    ctx.host.http.writeJson(res, 405, { error: "Method not allowed" });
+    return;
+  }
+  if (!ctx.host.security.isTerminalAuthorized(req)) {
+    ctx.host.http.writeJson(res, 401, { error: "unauthorized" });
+    return;
+  }
+  const body = await ctx.host.http.readJsonBody(req);
+  if (!isPlainObject2(body)) {
+    ctx.host.http.writeJson(res, 400, { error: "invalid_request" });
+    return;
+  }
+  const theaterId = body.theaterId;
+  if (typeof theaterId !== "string") {
+    ctx.host.http.writeJson(res, 400, { error: "invalid_request" });
+    return;
+  }
+  const ref = body.ref;
+  if (typeof ref !== "string" || !REF_RE.test(ref)) {
+    ctx.host.http.writeJson(res, 400, { error: "invalid_ref" });
+    return;
+  }
+  const theaterPath = ctx.host.paths.resolveTheaterPath(theaterId);
+  if (!theaterPath) {
+    ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
+    return;
+  }
+  const rawSubPath = typeof body.subPath === "string" ? body.subPath : "";
+  const cwdResult = await resolveGitCwd(theaterPath, rawSubPath);
+  if (!cwdResult) {
+    ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
+    return;
+  }
+  const { gitCwd } = cwdResult;
+  try {
+    const result = await runGit(["show", ref, "--unified=3", "--format="], { cwd: gitCwd });
+    ctx.host.http.writeJson(res, 200, { content: result.stdout, ...result.truncated ? { truncated: true } : {} });
+  } catch (error) {
+    if (error instanceof GitExecutorError) {
+      if (error.code === "no_git_repo" || error.code === "git_unavailable") {
+        ctx.host.http.writeJson(res, 422, { error: error.code });
+        return;
+      }
+      ctx.host.http.writeJson(res, 500, { error: "git_failed" });
+      return;
+    }
+    throw error;
+  }
+}
+
+// ../fleet-plugins/diff/server/log.ts
+function isPlainObject3(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseLogOutput(stdout) {
+  if (!stdout.trim()) return [];
+  const commits = [];
+  for (const chunk of stdout.split("")) {
+    const trimmed = chunk.trimStart();
+    if (!trimmed) continue;
+    const lines = trimmed.split("\n");
+    const firstLine = lines[0] ?? "";
+    const fields = firstLine.split("\0");
+    const fullHash = fields[0] ?? "";
+    const shortHash = fields[1] ?? "";
+    const subject = fields[2] ?? "";
+    const authorName = fields[3] ?? "";
+    const relTime = fields[4] ?? "";
+    const refsRaw = fields[5] ?? "";
+    const parentsRaw = fields[6] ?? "";
+    if (!fullHash) continue;
+    const refs = refsRaw.split(",").map((r) => r.trim()).filter(Boolean);
+    const parents = parentsRaw.split(" ").map((p) => p.trim()).filter(Boolean);
+    let additions = 0;
+    let deletions = 0;
+    for (const line of lines.slice(1)) {
+      if (!line.trim()) continue;
+      const parts = line.split("	");
+      if (parts.length < 2) continue;
+      const a = parseInt(parts[0] ?? "0", 10);
+      const d = parseInt(parts[1] ?? "0", 10);
+      if (!isNaN(a)) additions += a;
+      if (!isNaN(d)) deletions += d;
+    }
+    commits.push({ shortHash, fullHash, subject, authorName, relTime, refs, parents, additions, deletions });
+  }
+  return commits;
+}
+function isNoHeadError2(error) {
+  if (!(error instanceof GitExecutorError)) return false;
+  if (error.code !== "non_zero_exit") return false;
+  return error.stderr.includes("unknown revision") || error.stderr.includes("bad revision");
+}
+async function handleDiffLog(req, res, ctx) {
+  if (req.method !== "POST") {
+    ctx.host.http.writeJson(res, 405, { error: "Method not allowed" });
+    return;
+  }
+  if (!ctx.host.security.isTerminalAuthorized(req)) {
+    ctx.host.http.writeJson(res, 401, { error: "unauthorized" });
+    return;
+  }
+  const body = await ctx.host.http.readJsonBody(req);
+  if (!isPlainObject3(body)) {
+    ctx.host.http.writeJson(res, 400, { error: "invalid_request" });
+    return;
+  }
+  const theaterId = body.theaterId;
+  if (typeof theaterId !== "string") {
+    ctx.host.http.writeJson(res, 400, { error: "invalid_request" });
+    return;
+  }
+  const theaterPath = ctx.host.paths.resolveTheaterPath(theaterId);
+  if (!theaterPath) {
+    ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
+    return;
+  }
+  const rawSubPath = typeof body.subPath === "string" ? body.subPath : "";
+  const cwdResult = await resolveGitCwd(theaterPath, rawSubPath);
+  if (!cwdResult) {
+    ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
+    return;
+  }
+  const { gitCwd } = cwdResult;
+  try {
+    const result = await runGit(
+      ["log", "-n", "50", "--numstat", "--pretty=format:%x1e%H%x00%h%x00%s%x00%an%x00%ar%x00%D%x00%P"],
+      { cwd: gitCwd }
+    );
+    const commits = parseLogOutput(result.stdout);
+    ctx.host.http.writeJson(res, 200, { commits, ...result.truncated ? { truncated: true } : {} });
+  } catch (error) {
+    if (error instanceof GitExecutorError) {
+      if (error.code === "no_git_repo") {
+        ctx.host.http.writeJson(res, 200, { commits: [] });
+        return;
+      }
+      if (error.code === "git_unavailable") {
+        ctx.host.http.writeJson(res, 422, { error: error.code });
+        return;
+      }
+      if (isNoHeadError2(error)) {
+        ctx.host.http.writeJson(res, 200, { commits: [] });
+        return;
+      }
+      ctx.host.http.writeJson(res, 500, { error: "git_failed" });
+      return;
+    }
+    throw error;
+  }
+}
 var REPOS_CAP = 200;
 var HARD_CAP_DEPTH = 8;
 var DEFAULT_DEPTH = 3;
-function isPlainObject2(value) {
+function isPlainObject4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function resolveRepoBranch(repoDir) {
@@ -351,13 +516,13 @@ async function detectWorktreeParent(dir, gitFileContent) {
   const match = gitFileContent.trim().match(/^gitdir:\s*(.+)$/m);
   if (!match) return null;
   const rawPointer = match[1].trim();
-  const resolvedGitdir = path2.normalize(
-    path2.isAbsolute(rawPointer) ? rawPointer : path2.resolve(dir, rawPointer)
+  const resolvedGitdir = path3.normalize(
+    path3.isAbsolute(rawPointer) ? rawPointer : path3.resolve(dir, rawPointer)
   );
-  if (resolvedGitdir.includes(`${path2.sep}modules${path2.sep}`)) {
+  if (resolvedGitdir.includes(`${path3.sep}modules${path3.sep}`)) {
     return null;
   }
-  const worktreesSegment = `${path2.sep}.git${path2.sep}worktrees${path2.sep}`;
+  const worktreesSegment = `${path3.sep}.git${path3.sep}worktrees${path3.sep}`;
   const wtIdx = resolvedGitdir.indexOf(worktreesSegment);
   if (wtIdx === -1) {
     return null;
@@ -367,17 +532,17 @@ async function detectWorktreeParent(dir, gitFileContent) {
   try {
     parentAbs = await fs.realpath(parentAbsRaw);
   } catch {
-    parentAbs = path2.normalize(parentAbsRaw);
+    parentAbs = path3.normalize(parentAbsRaw);
   }
   return { isWorktree: true, parentAbs };
 }
 async function scanRepos(theaterPath, realTheaterPath, dir, currentDepth, maxDepth, repos, cap = REPOS_CAP) {
   if (repos.length >= cap) return true;
-  const gitPath = path2.join(dir, ".git");
+  const gitPath = path3.join(dir, ".git");
   try {
     const gitStat = await fs.stat(gitPath);
-    const relPath = path2.relative(theaterPath, dir);
-    const name = relPath === "" ? path2.basename(theaterPath) : path2.basename(dir);
+    const relPath = path3.relative(theaterPath, dir);
+    const name = relPath === "" ? path3.basename(theaterPath) : path3.basename(dir);
     const branch = await resolveRepoBranch(dir);
     if (gitStat.isFile()) {
       const content = await fs.readFile(gitPath, "utf8");
@@ -407,7 +572,7 @@ async function scanRepos(theaterPath, realTheaterPath, dir, currentDepth, maxDep
             dirent = await dirHandle.read();
             continue;
           }
-          const childPath = path2.join(dir, childName);
+          const childPath = path3.join(dir, childName);
           let realChildPath;
           try {
             realChildPath = await fs.realpath(childPath);
@@ -415,7 +580,7 @@ async function scanRepos(theaterPath, realTheaterPath, dir, currentDepth, maxDep
             dirent = await dirHandle.read();
             continue;
           }
-          const normalizedReal = realTheaterPath.endsWith(path2.sep) ? realTheaterPath : realTheaterPath + path2.sep;
+          const normalizedReal = realTheaterPath.endsWith(path3.sep) ? realTheaterPath : realTheaterPath + path3.sep;
           if (realChildPath !== realTheaterPath && !realChildPath.startsWith(normalizedReal)) {
             dirent = await dirHandle.read();
             continue;
@@ -442,15 +607,15 @@ async function scanRepos(theaterPath, realTheaterPath, dir, currentDepth, maxDep
 function resolveWorktreeParents(raw, realTheaterPath) {
   const absToRelPath = /* @__PURE__ */ new Map();
   for (const entry of raw) {
-    const absDir = path2.normalize(
-      entry.relPath === "" ? realTheaterPath : path2.join(realTheaterPath, entry.relPath)
+    const absDir = path3.normalize(
+      entry.relPath === "" ? realTheaterPath : path3.join(realTheaterPath, entry.relPath)
     );
     absToRelPath.set(absDir, entry.relPath);
   }
   return raw.map((entry) => {
     const { _wtParentAbs, ...rest } = entry;
     if (_wtParentAbs && entry.isWorktree) {
-      const normalizedParent = path2.normalize(_wtParentAbs);
+      const normalizedParent = path3.normalize(_wtParentAbs);
       const parentRelPath = absToRelPath.get(normalizedParent);
       if (parentRelPath !== void 0) {
         return { ...rest, worktreeOf: parentRelPath };
@@ -469,7 +634,7 @@ async function handleDiffRepos(req, res, ctx) {
     return;
   }
   const body = await ctx.host.http.readJsonBody(req);
-  if (!isPlainObject2(body)) {
+  if (!isPlainObject4(body)) {
     ctx.host.http.writeJson(res, 400, { error: "invalid_request" });
     return;
   }
@@ -520,6 +685,14 @@ var routes_default = definePlugin({
       await handleDiffFile(req, res, ctx);
       return true;
     });
+    registerRouter(ctx, "log", async ({ req, res }) => {
+      await handleDiffLog(req, res, ctx);
+      return true;
+    });
+    registerRouter(ctx, "commit", async ({ req, res }) => {
+      await handleDiffCommit(req, res, ctx);
+      return true;
+    });
   }
 });
 

package/dist/fleet-plugins/file-explorer/routes.mjs

@@ -243,7 +243,7 @@ var ImageServeError = class extends Error {
     this.code = code;
   }
 };
-var IMAGE_SIZE_CAP = 4 * 1024 * 1024;
+var IMAGE_SIZE_CAP = 16 * 1024 * 1024;
 var MIME_ALLOWLIST = {
   ".png": "image/png",
   ".jpg": "image/jpeg",

package/dist/fleet-plugins/skills/routes.mjs

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
-import path2 from 'path';
+import path from 'path';
 import { execFile } from 'child_process';
 import fs3 from 'fs/promises';
 import os2 from 'os';
 import crypto4 from 'crypto';
 import 'http';
 import 'stream';
-import { existsSync } from 'fs';
+import { existsSync, accessSync, constants } from 'fs';
 
 var __defProp = Object.defineProperty;
 var __export = (target, all) => {
@@ -15932,6 +15932,93 @@ external_exports.union([
     id: zRequestId
   })
 ]);
+var DEFAULT_WINDOWS_PATHEXT = ".COM;.EXE;.BAT;.CMD";
+var WINDOWS_PATH_SEPARATOR = ";";
+var WINDOWS_SHIM_EXTENSIONS = /* @__PURE__ */ new Set([".cmd", ".bat"]);
+var CMD_EXPANSION_SENSITIVE_PATTERN = /[%^]/;
+function resolvePathBinary(command, env, options = {}) {
+  const resolved = findBinaryPath(command, env, options);
+  return resolved ? wrapWindowsShim(resolved, env, options.platform ?? process.platform) : void 0;
+}
+function findBinaryPath(command, env, options = {}) {
+  const platform = options.platform ?? process.platform;
+  const isWindows2 = platform === "win32";
+  const pathValue = isWindows2 ? env.Path ?? env.PATH ?? "" : env.PATH ?? "";
+  const pathExts = isWindows2 ? parsePathExt(env.PATHEXT) : [""];
+  return findOnPath(command, pathValue, pathExts, platform);
+}
+function wrapWindowsShim(resolved, env, platform) {
+  if (platform !== "win32" || !WINDOWS_SHIM_EXTENSIONS.has(path.extname(resolved).toLowerCase())) {
+    return { bin: resolved, prefixArgs: [] };
+  }
+  rejectCmdExpansionSensitiveShim(resolved);
+  return {
+    bin: env.ComSpec ?? "cmd.exe",
+    prefixArgs: ["/d", "/s", "/c", "call", forceWindowsArgQuoting(resolved)]
+  };
+}
+function rejectCmdExpansionSensitiveShim(resolved) {
+  if (CMD_EXPANSION_SENSITIVE_PATTERN.test(resolved)) {
+    throw new Error(`Refusing to run Windows shim path with cmd.exe expansion-sensitive characters (% or ^): ${resolved}`);
+  }
+}
+function forceWindowsArgQuoting(value) {
+  return `${value} `;
+}
+function findOnPath(bin, pathValue, pathExts, platform) {
+  const pathSeparator = platform === "win32" ? WINDOWS_PATH_SEPARATOR : path.delimiter;
+  if (hasPathSeparator(bin, platform) || path.isAbsolute(bin)) {
+    return resolveWithExtensions(bin, pathExts, platform);
+  }
+  for (const entry of pathValue.split(pathSeparator)) {
+    const searchDir = entry.length === 0 ? "." : entry;
+    const candidate = resolveWithExtensions(path.join(searchDir, bin), pathExts, platform);
+    if (candidate) {
+      return candidate;
+    }
+  }
+  return void 0;
+}
+function resolveWithExtensions(candidate, pathExts, platform) {
+  if (platform !== "win32" || path.extname(candidate).length > 0) {
+    return isAccessibleExecutable(candidate, platform) ? candidate : void 0;
+  }
+  for (const ext of pathExts) {
+    if (ext.length === 0) {
+      continue;
+    }
+    const withExt = `${candidate}${ext}`;
+    if (existsSync(withExt)) {
+      return withExt;
+    }
+  }
+  return isAccessibleExecutable(candidate, platform) ? candidate : void 0;
+}
+function isAccessibleExecutable(candidate, platform) {
+  if (!existsSync(candidate)) return false;
+  if (platform === "win32") return true;
+  try {
+    accessSync(candidate, constants.X_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function hasPathSeparator(value, platform) {
+  if (value.includes("/")) {
+    return true;
+  }
+  return platform === "win32" && value.includes("\\");
+}
+function parsePathExt(pathExt) {
+  const raw = pathExt && pathExt.trim().length > 0 ? pathExt : DEFAULT_WINDOWS_PATHEXT;
+  return raw.split(WINDOWS_PATH_SEPARATOR).map((entry) => entry.trim()).filter((entry) => entry.length > 0);
+}
+
+// ../../packages/core-process/src/hidden.ts
+function withHidden(options) {
+  return { ...options ?? {}, windowsHide: true };
+}
 
 // ../../packages/core-unified-agent/models.json
 var models_default = {
@@ -15939,7 +16026,7 @@ var models_default = {
   updatedAt: "2026-07-04T00:00:00Z",
   providers: {
     claude: {
-      name: "Claude Code with Anthropic",
+      name: "Claude Code",
       defaultModel: "opus[1m]",
       models: [
         { modelId: "haiku", name: "Claude Haiku", effort: { supported: true, levels: ["low", "medium", "high", "xhigh", "max"], default: "low" } },
@@ -15952,7 +16039,7 @@ var models_default = {
       ]
     },
     codex: {
-      name: "OpenAI Codex CLI",
+      name: "Codex",
       defaultModel: "gpt-5.4",
       models: [
         { modelId: "gpt-5.4", name: "GPT-5.4", effort: { supported: true, levels: ["low", "medium", "high", "xhigh"], default: "high" } },
@@ -16160,75 +16247,6 @@ Object.entries(CLI_BACKENDS).map(([id, backend]) => ({
 
 // ../../packages/core-unified-agent/src/client/UnifiedCodexAgentClient.ts
 process.platform === "win32";
-var DEFAULT_WINDOWS_PATHEXT = ".COM;.EXE;.BAT;.CMD";
-var WINDOWS_PATH_SEPARATOR = ";";
-var WINDOWS_SHIM_EXTENSIONS = /* @__PURE__ */ new Set([".cmd", ".bat"]);
-var CMD_EXPANSION_SENSITIVE_PATTERN = /[%^]/;
-function resolvePathBinary(command, env, options = {}) {
-  const platform = options.platform ?? process.platform;
-  const isWindows2 = platform === "win32";
-  const pathValue = isWindows2 ? env.Path ?? env.PATH ?? "" : env.PATH ?? "";
-  const pathExts = isWindows2 ? parsePathExt(env.PATHEXT) : [""];
-  const resolved = findOnPath(command, pathValue, pathExts, platform);
-  return resolved ? wrapWindowsShim(resolved, env, platform) : void 0;
-}
-function wrapWindowsShim(resolved, env, platform) {
-  if (platform !== "win32" || !WINDOWS_SHIM_EXTENSIONS.has(path2.extname(resolved).toLowerCase())) {
-    return { bin: resolved, prefixArgs: [] };
-  }
-  rejectCmdExpansionSensitiveShim(resolved);
-  return {
-    bin: env.ComSpec ?? "cmd.exe",
-    prefixArgs: ["/d", "/s", "/c", "call", forceWindowsArgQuoting(resolved)]
-  };
-}
-function rejectCmdExpansionSensitiveShim(resolved) {
-  if (CMD_EXPANSION_SENSITIVE_PATTERN.test(resolved)) {
-    throw new Error(`Refusing to run Windows shim path with cmd.exe expansion-sensitive characters (% or ^): ${resolved}`);
-  }
-}
-function forceWindowsArgQuoting(value) {
-  return `${value} `;
-}
-function findOnPath(bin, pathValue, pathExts, platform) {
-  const pathSeparator = platform === "win32" ? WINDOWS_PATH_SEPARATOR : path2.delimiter;
-  if (hasPathSeparator(bin, platform) || path2.isAbsolute(bin)) {
-    return resolveWithExtensions(bin, pathExts, platform);
-  }
-  for (const entry of pathValue.split(pathSeparator)) {
-    const searchDir = entry.length === 0 ? "." : entry;
-    const candidate = resolveWithExtensions(path2.join(searchDir, bin), pathExts, platform);
-    if (candidate) {
-      return candidate;
-    }
-  }
-  return void 0;
-}
-function resolveWithExtensions(candidate, pathExts, platform) {
-  if (platform !== "win32" || path2.extname(candidate).length > 0) {
-    return existsSync(candidate) ? candidate : void 0;
-  }
-  for (const ext of pathExts) {
-    if (ext.length === 0) {
-      continue;
-    }
-    const withExt = `${candidate}${ext}`;
-    if (existsSync(withExt)) {
-      return withExt;
-    }
-  }
-  return existsSync(candidate) ? candidate : void 0;
-}
-function hasPathSeparator(value, platform) {
-  if (value.includes("/")) {
-    return true;
-  }
-  return platform === "win32" && value.includes("\\");
-}
-function parsePathExt(pathExt) {
-  const raw = pathExt && pathExt.trim().length > 0 ? pathExt : DEFAULT_WINDOWS_PATHEXT;
-  return raw.split(WINDOWS_PATH_SEPARATOR).map((entry) => entry.trim()).filter((entry) => entry.length > 0);
-}
 
 // ../fleet-plugins/skills/server/cli.ts
 var SKILLS_VERSION = "1.5.14";
@@ -16267,7 +16285,7 @@ async function runNpmInstall(cliHome) {
       file2,
       args,
       // windowsHide: GUI 콘솔에서 하위 프로세스(cmd.exe 심 래퍼) 콘솔 창이 순간 표시되는 것을 막는다.
-      { shell: false, windowsHide: true, timeout: BOOTSTRAP_TIMEOUT_MS }
+      withHidden({ shell: false, timeout: BOOTSTRAP_TIMEOUT_MS })
     );
     child.on("close", (code) => {
       if (code === 0) resolve();
@@ -16280,8 +16298,8 @@ async function ensureCliMjs(cliHome, onBootstrap) {
   if (_cliMjsPath) return _cliMjsPath;
   if (_bootstrapPromise) return _bootstrapPromise;
   _bootstrapPromise = (async () => {
-    const mjsPath = path2.join(cliHome, "node_modules", SKILLS_PACKAGE, "bin", "cli.mjs");
-    const pkgPath = path2.join(cliHome, "node_modules", SKILLS_PACKAGE, "package.json");
+    const mjsPath = path.join(cliHome, "node_modules", SKILLS_PACKAGE, "bin", "cli.mjs");
+    const pkgPath = path.join(cliHome, "node_modules", SKILLS_PACKAGE, "package.json");
     let needsInstall = true;
     try {
       const raw = await fs3.readFile(pkgPath, "utf-8");
@@ -16310,7 +16328,7 @@ function createDefaultExecutor(cliHome) {
         process.execPath,
         [mjsPath, ...args],
         // windowsHide: GUI 콘솔에서 하위 node.exe 콘솔 창이 순간 표시되는 것을 막는다.
-        { shell: false, windowsHide: true, cwd, timeout, maxBuffer: 10 * 1024 * 1024 }
+        withHidden({ shell: false, cwd, timeout, maxBuffer: 10 * 1024 * 1024 })
       );
       const stdoutParts = [];
       const stderrParts = [];
@@ -16493,7 +16511,7 @@ var CLI_TIMEOUT_MS = 12e4;
 async function readSkillSources(cwd) {
   const sources = /* @__PURE__ */ new Map();
   try {
-    const raw = await fs3.readFile(path2.join(cwd, "skills-lock.json"), "utf-8");
+    const raw = await fs3.readFile(path.join(cwd, "skills-lock.json"), "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null) {
       for (const [name, entry] of Object.entries(parsed)) {
@@ -16504,7 +16522,7 @@ async function readSkillSources(cwd) {
   } catch {
   }
   try {
-    const raw = await fs3.readFile(path2.join(cwd, ".agents", ".skill-lock.json"), "utf-8");
+    const raw = await fs3.readFile(path.join(cwd, ".agents", ".skill-lock.json"), "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null) {
       for (const [name, entry] of Object.entries(parsed)) {
@@ -16869,7 +16887,7 @@ async function handleInstalledFile(req, res, ctx, executor) {
       return;
     }
     const skillRoot = entry.path;
-    const skillMdPath = path2.join(skillRoot, "SKILL.md");
+    const skillMdPath = path.join(skillRoot, "SKILL.md");
     const [realAllowedRoot, realRoot, realMd] = await Promise.all([
       // CLI가 보고한 skillRoot 자체도 신뢰하지 않는다 — scope의 정당한 상위 경계
       // (project=theater 루트, global=홈)를 벗어나면 읽지 않는다. `.agents/skills`로
@@ -16882,11 +16900,11 @@ async function handleInstalledFile(req, res, ctx, executor) {
       ctx.host.http.writeJson(res, 404, { error: "skill_not_found" });
       return;
     }
-    if (realRoot !== realAllowedRoot && !realRoot.startsWith(realAllowedRoot + path2.sep)) {
+    if (realRoot !== realAllowedRoot && !realRoot.startsWith(realAllowedRoot + path.sep)) {
       ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
       return;
     }
-    if (realMd !== realRoot && !realMd.startsWith(realRoot + path2.sep)) {
+    if (realMd !== realRoot && !realMd.startsWith(realRoot + path.sep)) {
       ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
       return;
     }
@@ -16901,7 +16919,7 @@ async function handleInstalledFile(req, res, ctx, executor) {
 var routes_default = definePlugin({
   id: "skills",
   register(ctx) {
-    const cliHome = path2.join(ctx.host.paths.pluginDataDir("skills"), "cli");
+    const cliHome = path.join(ctx.host.paths.pluginDataDir("skills"), "cli");
     const executor = createDefaultExecutor(cliHome);
     registerRouter(ctx, "list", async ({ req, res }) => {
       await handleList(req, res, ctx, executor);