@dotobokuri/fleet-console 1.18.0 → 1.19.0

package/dist/fleet-plugins/terminal/routes.mjs

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
-import * as fs8 from 'fs';
-import fs8__default, { mkdtempSync, writeFileSync, mkdirSync, existsSync, rmSync, chmodSync, renameSync, readdirSync, readFileSync, constants, openSync, closeSync, realpathSync, fstatSync, lstatSync, unlinkSync, statSync } from 'fs';
+import * as fs2 from 'fs';
+import fs2__default, { existsSync, accessSync, constants, mkdtempSync, writeFileSync, mkdirSync, rmSync, chmodSync, renameSync, readdirSync, readFileSync, openSync, closeSync, realpathSync, fstatSync, lstatSync, unlinkSync, statSync } from 'fs';
 import * as path27 from 'path';
 import path27__default, { dirname } from 'path';
 import * as os3 from 'os';
-import os3__default from 'os';
-import crypto3, { createHash, randomUUID } from 'crypto';
-import process4 from 'process';
+import os3__default, { homedir } from 'os';
+import crypto4, { createHash, randomUUID } from 'crypto';
+import process5 from 'process';
 import { EventEmitter } from 'events';
 import { mkdir, writeFile, access, readFile, stat, readdir, appendFile, rename, rm } from 'fs/promises';
-import { execFile, execSync, spawn, spawnSync } from 'child_process';
+import { execFile, spawn, execSync, spawnSync } from 'child_process';
 import { Writable, Readable } from 'stream';
 import http from 'http';
 import { fileURLToPath, pathToFileURL } from 'url';
@@ -44,10 +44,10 @@ function getFleetDataDir() {
 }
 var SECURE_DIR_MODE = 448;
 var SECURE_FILE_MODE = 384;
-var NOFOLLOW_FLAG = fs8.constants.O_NOFOLLOW ?? 0;
+var NOFOLLOW_FLAG = fs2.constants.O_NOFOLLOW ?? 0;
 function safeLstat(targetPath) {
   try {
-    return fs8.lstatSync(targetPath);
+    return fs2.lstatSync(targetPath);
   } catch (error51) {
     if (error51.code === "ENOENT") {
       return null;
@@ -61,18 +61,18 @@ function ensureSafeDirectory(dirPath) {
     if (!stat3.isDirectory() || stat3.isSymbolicLink()) {
       throw new Error(`Unsafe Fleet directory: ${dirPath}`);
     }
-    fs8.chmodSync(dirPath, SECURE_DIR_MODE);
+    fs2.chmodSync(dirPath, SECURE_DIR_MODE);
     return;
   }
-  fs8.mkdirSync(dirPath, { recursive: true, mode: SECURE_DIR_MODE });
+  fs2.mkdirSync(dirPath, { recursive: true, mode: SECURE_DIR_MODE });
   const created = safeLstat(dirPath);
   if (!created?.isDirectory() || created.isSymbolicLink()) {
     throw new Error(`Unsafe Fleet directory: ${dirPath}`);
   }
-  fs8.chmodSync(dirPath, SECURE_DIR_MODE);
+  fs2.chmodSync(dirPath, SECURE_DIR_MODE);
 }
 
-// ../../packages/fleet-infra/src/fs-store/atomic-write.ts
+// ../../packages/core-infra/src/fs-store/atomic-write.ts
 var DEFAULT_MAX_ATTEMPTS = 10;
 var IGNORED_FSYNC_ERROR_CODES = /* @__PURE__ */ new Set(["EPERM", "EINVAL", "ENOSYS"]);
 function buildTempPath(filePath) {
@@ -88,17 +88,17 @@ function writeAtomicSync(filePath, content, options = {}) {
     const tempPath = buildTempPath(filePath);
     let tempCreated = false;
     try {
-      fs8.writeFileSync(tempPath, content, { encoding: "utf-8", flag: "wx", mode });
+      fs2.writeFileSync(tempPath, content, { encoding: "utf-8", flag: "wx", mode });
       tempCreated = true;
       if (doFsync) {
-        const fd = fs8.openSync(tempPath, "r");
+        const fd = fs2.openSync(tempPath, "r");
         try {
           fsyncSyncBestEffort(fd);
         } finally {
-          fs8.closeSync(fd);
+          fs2.closeSync(fd);
         }
       }
-      fs8.renameSync(tempPath, filePath);
+      fs2.renameSync(tempPath, filePath);
       return;
     } catch (error51) {
       const code = error51.code;
@@ -108,7 +108,7 @@ function writeAtomicSync(filePath, content, options = {}) {
       }
       if (tempCreated) {
         try {
-          fs8.unlinkSync(tempPath);
+          fs2.unlinkSync(tempPath);
         } catch {
         }
       }
@@ -120,7 +120,7 @@ function writeAtomicSync(filePath, content, options = {}) {
 function cleanupTempFiles(dir, prefix, minAgeMs, now) {
   let entries;
   try {
-    entries = fs8.readdirSync(dir);
+    entries = fs2.readdirSync(dir);
   } catch {
     return;
   }
@@ -130,9 +130,9 @@ function cleanupTempFiles(dir, prefix, minAgeMs, now) {
     }
     const tempPath = path27.join(dir, entry);
     try {
-      const stat3 = fs8.lstatSync(tempPath);
+      const stat3 = fs2.lstatSync(tempPath);
       if (stat3?.isFile() && !stat3.isSymbolicLink() && now - stat3.mtimeMs >= minAgeMs) {
-        fs8.unlinkSync(tempPath);
+        fs2.unlinkSync(tempPath);
       }
     } catch {
     }
@@ -144,7 +144,7 @@ function isIgnoredFsyncError(error51) {
 }
 function fsyncSyncBestEffort(fd) {
   try {
-    fs8.fsyncSync(fd);
+    fs2.fsyncSync(fd);
   } catch (error51) {
     if (!isIgnoredFsyncError(error51)) {
       throw error51;
@@ -164,7 +164,7 @@ function withDirectoryLock(deps, operation) {
   const startedAt = now();
   while (true) {
     try {
-      fs8.mkdirSync(deps.lockDir, { mode: 448 });
+      fs2.mkdirSync(deps.lockDir, { mode: 448 });
       writeLockOwner(deps.lockDir, ownerFileName, now());
       try {
         return operation();
@@ -184,7 +184,7 @@ function withDirectoryLock(deps, operation) {
 }
 function releaseLock(lockDir) {
   try {
-    fs8.rmSync(lockDir, { recursive: true, force: true });
+    fs2.rmSync(lockDir, { recursive: true, force: true });
   } catch {
   }
 }
@@ -194,14 +194,14 @@ function recoverStaleLock(lockDir, ownerFileName, now, staleLockMs) {
     if (!isRecoverableSnapshot(initialSnapshot, now, staleLockMs)) return;
     const quarantineDir = buildQuarantinePath(lockDir);
     try {
-      fs8.renameSync(lockDir, quarantineDir);
+      fs2.renameSync(lockDir, quarantineDir);
     } catch {
       return;
     }
     try {
       const quarantinedSnapshot = readLockSnapshot(quarantineDir, ownerFileName);
       if (sameLockSnapshot(initialSnapshot, quarantinedSnapshot) && isRecoverableSnapshot(quarantinedSnapshot, now, staleLockMs)) {
-        fs8.rmSync(quarantineDir, { recursive: true, force: true });
+        fs2.rmSync(quarantineDir, { recursive: true, force: true });
       } else {
         restoreQuarantinedLock(quarantineDir, lockDir);
       }
@@ -215,7 +215,7 @@ function recoverStaleLock(lockDir, ownerFileName, now, staleLockMs) {
   }
 }
 function readLockSnapshot(lockDir, ownerFileName) {
-  const stat3 = fs8.lstatSync(lockDir);
+  const stat3 = fs2.lstatSync(lockDir);
   if (stat3.isSymbolicLink()) {
     return { owner: null, mtimeMs: 0 };
   }
@@ -236,7 +236,7 @@ function writeLockOwner(lockDir, ownerFileName, startedAt) {
   };
   const ownerPath = path27.join(lockDir, ownerFileName);
   try {
-    fs8.writeFileSync(ownerPath, JSON.stringify(owner), { encoding: "utf-8", mode: 384 });
+    fs2.writeFileSync(ownerPath, JSON.stringify(owner), { encoding: "utf-8", mode: 384 });
   } catch (error51) {
     releaseLock(lockDir);
     throw error51;
@@ -245,7 +245,7 @@ function writeLockOwner(lockDir, ownerFileName, startedAt) {
 function readLockOwner(lockDir, ownerFileName) {
   const ownerPath = path27.join(lockDir, ownerFileName);
   try {
-    return sanitizeLockOwner(JSON.parse(fs8.readFileSync(ownerPath, "utf-8")));
+    return sanitizeLockOwner(JSON.parse(fs2.readFileSync(ownerPath, "utf-8")));
   } catch (error51) {
     const code = error51.code;
     if (code === "ENOENT") return null;
@@ -267,7 +267,7 @@ function sameLockSnapshot(a, b) {
 }
 function restoreQuarantinedLock(quarantineDir, lockDir) {
   try {
-    fs8.renameSync(quarantineDir, lockDir);
+    fs2.renameSync(quarantineDir, lockDir);
   } catch {
   }
 }
@@ -302,24 +302,24 @@ function sleepSync(ms) {
 function readAuthStoreFile(filePath) {
   let fd;
   try {
-    fd = fs8.openSync(filePath, fs8.constants.O_RDONLY | NOFOLLOW_FLAG);
-    if (!fs8.fstatSync(fd).isFile()) {
+    fd = fs2.openSync(filePath, fs2.constants.O_RDONLY | NOFOLLOW_FLAG);
+    if (!fs2.fstatSync(fd).isFile()) {
       return {};
     }
-    return JSON.parse(fs8.readFileSync(fd, "utf-8"));
+    return JSON.parse(fs2.readFileSync(fd, "utf-8"));
   } catch {
     return {};
   } finally {
     if (fd !== void 0) {
       try {
-        fs8.closeSync(fd);
+        fs2.closeSync(fd);
       } catch {
       }
     }
   }
 }
 
-// ../../packages/fleet-infra/src/auth/auth-storage.ts
+// ../../packages/core-infra/src/auth/auth-storage.ts
 var DEFAULT_AUTH_PATH = path27.join(getFleetDataDir(), "auth.json");
 var AUTH_LOCK_OWNER_FILE_NAME = "owner.json";
 var AUTH_LOCK_TIMEOUT_MS = 5e3;
@@ -331,7 +331,7 @@ function createAuthService(deps = {}) {
     async deleteApiKey(providerId) {
       let deleted = false;
       withAuthLock(authPath, lockDir, () => {
-        if (!fs8.existsSync(authPath)) return;
+        if (!fs2.existsSync(authPath)) return;
         const data = readAuthStoreFile(authPath);
         if (!Object.prototype.hasOwnProperty.call(data, providerId)) return;
         delete data[providerId];
@@ -344,21 +344,21 @@ function createAuthService(deps = {}) {
     async getApiKey(providerId) {
       let fd;
       try {
-        if (!fs8.existsSync(authPath)) {
+        if (!fs2.existsSync(authPath)) {
           return void 0;
         }
-        fd = fs8.openSync(authPath, fs8.constants.O_RDONLY | NOFOLLOW_FLAG);
-        if (!fs8.fstatSync(fd).isFile()) {
+        fd = fs2.openSync(authPath, fs2.constants.O_RDONLY | NOFOLLOW_FLAG);
+        if (!fs2.fstatSync(fd).isFile()) {
           return void 0;
         }
-        const data = JSON.parse(fs8.readFileSync(fd, "utf-8"));
+        const data = JSON.parse(fs2.readFileSync(fd, "utf-8"));
         return typeof data[providerId]?.key === "string" ? data[providerId].key : void 0;
       } catch {
         return void 0;
       } finally {
         if (fd !== void 0) {
           try {
-            fs8.closeSync(fd);
+            fs2.closeSync(fd);
           } catch {
           }
         }
@@ -366,7 +366,7 @@ function createAuthService(deps = {}) {
     },
     // [HIGH #2] 읽기 경로: fd 기반 O_RDONLY|O_NOFOLLOW 통일
     async listProviderIds() {
-      if (!fs8.existsSync(authPath)) {
+      if (!fs2.existsSync(authPath)) {
         return [];
       }
       try {
@@ -379,7 +379,7 @@ function createAuthService(deps = {}) {
       const dir = path27.dirname(authPath);
       ensureSafeDirectory(dir);
       withAuthLock(authPath, lockDir, () => {
-        const data = fs8.existsSync(authPath) ? readAuthStoreFile(authPath) : {};
+        const data = fs2.existsSync(authPath) ? readAuthStoreFile(authPath) : {};
         data[providerId] = {
           ...data[providerId] ?? {},
           key
@@ -461,21 +461,21 @@ function createDurableJsonStore(deps) {
 function readJsonFile(filePath, sanitize) {
   let fd;
   try {
-    const stat3 = fs8.lstatSync(filePath);
+    const stat3 = fs2.lstatSync(filePath);
     if (!stat3 || !stat3.isFile() || stat3.isSymbolicLink()) {
       return sanitize(void 0);
     }
-    fd = fs8.openSync(filePath, fs8.constants.O_RDONLY | NOFOLLOW_FLAG);
-    if (!fs8.fstatSync(fd).isFile()) {
+    fd = fs2.openSync(filePath, fs2.constants.O_RDONLY | NOFOLLOW_FLAG);
+    if (!fs2.fstatSync(fd).isFile()) {
       return sanitize(void 0);
     }
-    return sanitize(JSON.parse(fs8.readFileSync(fd, "utf-8")));
+    return sanitize(JSON.parse(fs2.readFileSync(fd, "utf-8")));
   } catch {
     return sanitize(void 0);
   } finally {
     if (fd !== void 0) {
       try {
-        fs8.closeSync(fd);
+        fs2.closeSync(fd);
       } catch {
       }
     }
@@ -487,7 +487,7 @@ function ensureSafeDirectoryIfSensitive(dir, sensitivity) {
   }
 }
 
-// ../../packages/fleet-infra/src/global-options/store.ts
+// ../../packages/core-infra/src/data-dir/settings/store.ts
 var GLOBAL_OPTIONS_VERSION = 1;
 var GLOBAL_OPTIONS_FILE_NAME = "settings.json";
 var LOCK_DIR_NAME = "settings.json.lock";
@@ -529,18 +529,17 @@ function sanitizeGlobalOptionsData(value) {
   }
   const data = {
     version: GLOBAL_OPTIONS_VERSION,
-    ...typeof value.replaceSystemPrompt === "boolean" ? { replaceSystemPrompt: value.replaceSystemPrompt } : {},
     ...typeof value.enableMetaphor === "boolean" ? { enableMetaphor: value.enableMetaphor } : {}
   };
-  const allowedKeys = /* @__PURE__ */ new Set(["version", "replaceSystemPrompt", "enableMetaphor"]);
-  const changed = Object.keys(value).some((key) => !allowedKeys.has(key)) || "replaceSystemPrompt" in value && typeof value.replaceSystemPrompt !== "boolean" || "enableMetaphor" in value && typeof value.enableMetaphor !== "boolean";
+  const allowedKeys = /* @__PURE__ */ new Set(["version", "enableMetaphor"]);
+  const changed = Object.keys(value).some((key) => !allowedKeys.has(key)) || "enableMetaphor" in value && typeof value.enableMetaphor !== "boolean";
   return { data, changed };
 }
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
-// ../../packages/fleet-infra/src/global-options/service.ts
+// ../../packages/core-infra/src/data-dir/settings/service.ts
 function createGlobalOptionsService(deps = {}) {
   const store2 = deps.store ?? createGlobalOptionsStore({ dataDir: deps.dataDir });
   return {
@@ -556,7 +555,7 @@ function updateGlobalOptions(store2, mutate) {
   return store2.update(mutate);
 }
 
-// ../../packages/fleet-infra/src/index.ts
+// ../../packages/core-infra/src/index.ts
 function createInfraServices(deps = {}) {
   const globalOptionsService = createGlobalOptionsService();
   const authService = createAuthService({ authPath: deps.authPath ?? DEFAULT_AUTH_PATH });
@@ -17393,6 +17392,122 @@ var RequestError = class _RequestError extends Error {
     };
   }
 };
+var DEFAULT_WINDOWS_PATHEXT = ".COM;.EXE;.BAT;.CMD";
+var WINDOWS_PATH_SEPARATOR = ";";
+var WINDOWS_SHIM_EXTENSIONS = /* @__PURE__ */ new Set([".cmd", ".bat"]);
+var CMD_EXPANSION_SENSITIVE_PATTERN = /[%^]/;
+function resolveBinary(defaultBin, overrideName, env, options = {}) {
+  const override = env[overrideName];
+  if (override && override.trim().length > 0) {
+    const resolvedOverride = resolvePathBinary(override, env, options);
+    if (!resolvedOverride) {
+      throw new Error(`${overrideName}="${override}" did not resolve to an executable; provide an absolute path or a name discoverable on PATH`);
+    }
+    return resolvedOverride;
+  }
+  const resolved = resolvePathBinary(defaultBin, env, options);
+  if (!resolved) {
+    throw new Error(`${defaultBin} binary not found; set ${overrideName} or install ${defaultBin} on PATH`);
+  }
+  return resolved;
+}
+function resolvePathBinary(command, env, options = {}) {
+  const resolved = findBinaryPath(command, env, options);
+  return resolved ? wrapWindowsShim(resolved, env, options.platform ?? process.platform) : void 0;
+}
+function findBinaryPath(command, env, options = {}) {
+  const platform = options.platform ?? process.platform;
+  const isWindows2 = platform === "win32";
+  const pathValue = isWindows2 ? env.Path ?? env.PATH ?? "" : env.PATH ?? "";
+  const pathExts = isWindows2 ? parsePathExt(env.PATHEXT) : [""];
+  return findOnPath(command, pathValue, pathExts, platform);
+}
+function createChildEnv(env, overlay) {
+  const child = {};
+  for (const [key, value] of Object.entries(env)) {
+    if (value !== void 0) {
+      child[key] = value;
+    }
+  }
+  for (const [key, value] of Object.entries(overlay)) {
+    if (value !== void 0) {
+      child[key] = value;
+    }
+  }
+  return child;
+}
+function wrapWindowsShim(resolved, env, platform) {
+  if (platform !== "win32" || !WINDOWS_SHIM_EXTENSIONS.has(path27__default.extname(resolved).toLowerCase())) {
+    return { bin: resolved, prefixArgs: [] };
+  }
+  rejectCmdExpansionSensitiveShim(resolved);
+  return {
+    bin: env.ComSpec ?? "cmd.exe",
+    prefixArgs: ["/d", "/s", "/c", "call", forceWindowsArgQuoting(resolved)]
+  };
+}
+function rejectCmdExpansionSensitiveShim(resolved) {
+  if (CMD_EXPANSION_SENSITIVE_PATTERN.test(resolved)) {
+    throw new Error(`Refusing to run Windows shim path with cmd.exe expansion-sensitive characters (% or ^): ${resolved}`);
+  }
+}
+function forceWindowsArgQuoting(value) {
+  return `${value} `;
+}
+function findOnPath(bin, pathValue, pathExts, platform) {
+  const pathSeparator = platform === "win32" ? WINDOWS_PATH_SEPARATOR : path27__default.delimiter;
+  if (hasPathSeparator(bin, platform) || path27__default.isAbsolute(bin)) {
+    return resolveWithExtensions(bin, pathExts, platform);
+  }
+  for (const entry of pathValue.split(pathSeparator)) {
+    const searchDir = entry.length === 0 ? "." : entry;
+    const candidate = resolveWithExtensions(path27__default.join(searchDir, bin), pathExts, platform);
+    if (candidate) {
+      return candidate;
+    }
+  }
+  return void 0;
+}
+function resolveWithExtensions(candidate, pathExts, platform) {
+  if (platform !== "win32" || path27__default.extname(candidate).length > 0) {
+    return isAccessibleExecutable(candidate, platform) ? candidate : void 0;
+  }
+  for (const ext of pathExts) {
+    if (ext.length === 0) {
+      continue;
+    }
+    const withExt = `${candidate}${ext}`;
+    if (existsSync(withExt)) {
+      return withExt;
+    }
+  }
+  return isAccessibleExecutable(candidate, platform) ? candidate : void 0;
+}
+function isAccessibleExecutable(candidate, platform) {
+  if (!existsSync(candidate)) return false;
+  if (platform === "win32") return true;
+  try {
+    accessSync(candidate, constants.X_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function hasPathSeparator(value, platform) {
+  if (value.includes("/")) {
+    return true;
+  }
+  return platform === "win32" && value.includes("\\");
+}
+function parsePathExt(pathExt) {
+  const raw = pathExt && pathExt.trim().length > 0 ? pathExt : DEFAULT_WINDOWS_PATHEXT;
+  return raw.split(WINDOWS_PATH_SEPARATOR).map((entry) => entry.trim()).filter((entry) => entry.length > 0);
+}
+
+// ../../packages/core-process/src/hidden.ts
+function withHidden(options) {
+  return { ...options ?? {}, windowsHide: true };
+}
 
 // ../../packages/core-unified-agent/src/utils/env.ts
 var REMOVE_KEYS = [
@@ -17430,12 +17545,7 @@ function killProcess(child, forceTimeoutMs = 3e3) {
   markIntentionalKill(child);
   if (isWindows()) {
     try {
-      execSync(`taskkill /PID ${child.pid} /T /F`, {
-        stdio: "pipe",
-        timeout: 5e3,
-        // 콘솔 없는 호스트에서 taskkill 호출 시 새 콘솔 창이 깜빡이는 것을 방지한다.
-        windowsHide: true
-      });
+      execSync(`taskkill /PID ${child.pid} /T /F`, withHidden({ stdio: "pipe", timeout: 5e3 }));
     } catch {
       child.kill("SIGKILL");
     }
@@ -17538,17 +17648,12 @@ var BaseConnection = class extends EventEmitter {
     const child = isWindows() ? spawn(
       this.env.ComSpec ?? "cmd.exe",
       buildWindowsCmdArgs(this.command, this.args),
-      {
+      withHidden({
         cwd: this.cwd,
         stdio: ["pipe", "pipe", "pipe"],
         env: this.env,
-        windowsVerbatimArguments: true,
-        // 콘솔이 없는 호스트(예: fleet-console 백엔드)에서 cmd.exe를 spawn하면
-        // Windows가 새 콘솔 창을 할당해 깜빡인다. stdio는 모두 pipe라 가시 콘솔이
-        // 불필요하므로 CREATE_NO_WINDOW로 창 생성을 억제한다. (fleet-cli처럼 콘솔이
-        // 이미 있는 경우에도 무해하다.)
-        windowsHide: true
-      }
+        windowsVerbatimArguments: true
+      })
     ) : spawn(this.command, this.args, {
       cwd: this.cwd,
       stdio: ["pipe", "pipe", "pipe"],
@@ -18429,35 +18534,14 @@ function createIdleTimeoutRace(promise2, idleMs, label) {
   });
   return [wrapped, resetTimer];
 }
+
+// ../../packages/core-unified-agent/src/utils/npx.ts
 function resolveNpxPath(env) {
-  const windows = isWindows();
-  const whichCmd = windows ? "where npx" : "which npx";
-  try {
-    const result = execSync(whichCmd, {
-      encoding: "utf-8",
-      stdio: "pipe",
-      timeout: 5e3,
-      env,
-      // 콘솔 없는 호스트에서 `where npx` 실행 시 콘솔 창이 깜빡이는 것을 방지한다.
-      windowsHide: true
-    }).trim();
-    const candidates = result.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
-    if (windows) {
-      const executable = candidates.find((p) => /\.(cmd|bat|exe)$/i.test(p));
-      if (executable) {
-        return executable;
-      }
-    }
-    if (candidates.length > 0) {
-      return candidates[0];
-    }
-    return windows ? "npx.cmd" : "npx";
-  } catch {
-    if (windows) {
-      return "npx.cmd";
-    }
-    return "npx";
+  const resolved = findBinaryPath("npx", env ?? process.env);
+  if (resolved) {
+    return resolved;
   }
+  return isWindows() ? "npx.cmd" : "npx";
 }
 function buildNpxArgs(packageName, preferOffline = false) {
   const args = ["--yes"];
@@ -18479,7 +18563,7 @@ var models_default = {
   updatedAt: "2026-07-04T00:00:00Z",
   providers: {
     claude: {
-      name: "Claude Code with Anthropic",
+      name: "Claude Code",
       defaultModel: "opus[1m]",
       models: [
         { modelId: "haiku", name: "Claude Haiku", effort: { supported: true, levels: ["low", "medium", "high", "xhigh", "max"], default: "low" } },
@@ -18492,7 +18576,7 @@ var models_default = {
       ]
     },
     codex: {
-      name: "OpenAI Codex CLI",
+      name: "Codex",
       defaultModel: "gpt-5.4",
       models: [
         { modelId: "gpt-5.4", name: "GPT-5.4", effort: { supported: true, levels: ["low", "medium", "high", "xhigh"], default: "high" } },
@@ -18957,25 +19041,23 @@ var CliDetector = class {
    * @returns 사용 가능 여부
    */
   async isCliAvailable(command) {
-    const whichCommand = isWindows() ? "where" : "which";
-    try {
-      await this.execCommand(whichCommand, [command], 3e3);
+    const resolved = findBinaryPath(command, process.env);
+    if (resolved !== void 0) {
       return true;
-    } catch {
-      if (isWindows()) {
-        try {
-          await this.execCommand(
-            "powershell",
-            ["-NoProfile", "-Command", `Get-Command -All ${command}`],
-            5e3
-          );
-          return true;
-        } catch {
-          return false;
-        }
+    }
+    if (process.platform === "win32") {
+      try {
+        await this.execCommand(
+          "powershell",
+          ["-NoProfile", "-Command", `Get-Command -All ${command}`],
+          5e3
+        );
+        return true;
+      } catch {
+        return false;
       }
-      return false;
     }
+    return false;
   }
   /**
    * CLI의 버전을 감지합니다.
@@ -18999,13 +19081,8 @@ var CliDetector = class {
    * @returns 전체 경로 또는 커맨드 이름
    */
   async getCliPath(command) {
-    const whichCommand = isWindows() ? "where" : "which";
-    try {
-      const result = await this.execCommand(whichCommand, [command], 3e3);
-      return result.split(/\r?\n/)[0].trim();
-    } catch {
-      return command;
-    }
+    const resolved = findBinaryPath(command, process.env);
+    return resolved ?? command;
   }
   /**
    * 외부 명령 실행 결과(stdout)를 문자열로 반환합니다.
@@ -19015,11 +19092,7 @@ var CliDetector = class {
       execFile(
         command,
         args,
-        {
-          encoding: "utf-8",
-          timeout,
-          windowsHide: true
-        },
+        withHidden({ encoding: "utf-8", timeout }),
         (error51, stdout) => {
           if (error51) {
             reject(error51);
@@ -20235,10 +20308,10 @@ function isMissingRolloutError(error51, threadId) {
   return error51 instanceof Error && error51.message.includes(`no rollout found for thread id ${threadId}`);
 }
 function findRolloutPath(root, threadId) {
-  if (!fs8.existsSync(root)) {
+  if (!fs2.existsSync(root)) {
     return null;
   }
-  for (const entry of fs8.readdirSync(root, { withFileTypes: true })) {
+  for (const entry of fs2.readdirSync(root, { withFileTypes: true })) {
     const entryPath = path27.join(root, entry.name);
     if (entry.isDirectory()) {
       const found = findRolloutPath(entryPath, threadId);
@@ -21892,7 +21965,7 @@ function specToMcpTool(spec) {
 }
 function installExecutorToolCallRouter(runtime, sessionToken, ctx) {
   runtime.server.setOnToolCallArrived(sessionToken, (toolName, args) => {
-    const toolCallId = crypto3.randomUUID();
+    const toolCallId = crypto4.randomUUID();
     void runtime.registry.invoke(toolName, args, { cwd: ctx.cwd, sessionLabel: ctx.sessionLabel, toolCallId, signal: ctx.signal }).then((result) => runtime.server.resolveNextToolCall(sessionToken, toolCallId, result)).catch((err) => {
       runtime.server.resolveNextToolCall(sessionToken, toolCallId, {
         content: [{ type: "text", text: err instanceof Error ? err.message : String(err) }],
@@ -22287,7 +22360,7 @@ function createInProcessMcpServer(deps = {}) {
       if (activeStopPromise) await activeStopPromise;
       if (activeServer && activeServerUrl) return activeServerUrl;
       if (activeStartPromise) return activeStartPromise;
-      activeOpaquePath = `/${crypto3.randomUUID()}`;
+      activeOpaquePath = `/${crypto4.randomUUID()}`;
       activeStartPromise = new Promise((resolve2, reject) => {
         const srv = http.createServer(handleRequest);
         srv.timeout = MCP_SERVER_TIMEOUT_MS;
@@ -22544,7 +22617,7 @@ function createExecutorMcpSession(deps, toolTimeoutSeconds, request) {
     throw new Error("Executor session cwd is required");
   }
   assertNonEmptyExecutorTools(request.serverName, request.specs);
-  const token = crypto3.randomUUID();
+  const token = crypto4.randomUUID();
   registerExecutorSessionTools(runtime.runtime, token, [...request.specs]);
   installExecutorToolCallRouter(runtime.runtime, token, {
     cwd,
@@ -22590,7 +22663,7 @@ function issueSessionToken(deps, sessionTokensByLabel, request) {
     for (const { name, runtime } of deps.runtimes) {
       const tools = runtime.registry.getAllAgentTools();
       assertNonEmptyExecutorTools(name, tools);
-      const token = crypto3.randomUUID();
+      const token = crypto4.randomUUID();
       registerExecutorSessionTools(runtime, token, tools);
       installExecutorToolCallRouter(runtime, token, { cwd, sessionLabel: label, signal: request.signal });
       tokens.push({ name, token });
@@ -22728,104 +22801,6 @@ function assertNoAuthorizationHeader(config2) {
     throw new Error(`Builtin external MCP server "${config2.name}" must not define headers.`);
   }
 }
-var DEFAULT_WINDOWS_PATHEXT = ".COM;.EXE;.BAT;.CMD";
-var WINDOWS_PATH_SEPARATOR = ";";
-var WINDOWS_SHIM_EXTENSIONS = /* @__PURE__ */ new Set([".cmd", ".bat"]);
-var CMD_EXPANSION_SENSITIVE_PATTERN = /[%^]/;
-function resolveBinary(defaultBin, overrideName, env, options = {}) {
-  const override = env[overrideName];
-  if (override && override.trim().length > 0) {
-    const resolvedOverride = resolvePathBinary(override, env, options);
-    if (!resolvedOverride) {
-      throw new Error(`${overrideName}="${override}" did not resolve to an executable; provide an absolute path or a name discoverable on PATH`);
-    }
-    return resolvedOverride;
-  }
-  const resolved = resolvePathBinary(defaultBin, env, options);
-  if (!resolved) {
-    throw new Error(`${defaultBin} binary not found; set ${overrideName} or install ${defaultBin} on PATH`);
-  }
-  return resolved;
-}
-function resolvePathBinary(command, env, options = {}) {
-  const platform = options.platform ?? process.platform;
-  const isWindows2 = platform === "win32";
-  const pathValue = isWindows2 ? env.Path ?? env.PATH ?? "" : env.PATH ?? "";
-  const pathExts = isWindows2 ? parsePathExt(env.PATHEXT) : [""];
-  const resolved = findOnPath(command, pathValue, pathExts, platform);
-  return resolved ? wrapWindowsShim(resolved, env, platform) : void 0;
-}
-function createChildEnv(env, overlay) {
-  const child = {};
-  for (const [key, value] of Object.entries(env)) {
-    if (value !== void 0) {
-      child[key] = value;
-    }
-  }
-  for (const [key, value] of Object.entries(overlay)) {
-    if (value !== void 0) {
-      child[key] = value;
-    }
-  }
-  return child;
-}
-function wrapWindowsShim(resolved, env, platform) {
-  if (platform !== "win32" || !WINDOWS_SHIM_EXTENSIONS.has(path27__default.extname(resolved).toLowerCase())) {
-    return { bin: resolved, prefixArgs: [] };
-  }
-  rejectCmdExpansionSensitiveShim(resolved);
-  return {
-    bin: env.ComSpec ?? "cmd.exe",
-    prefixArgs: ["/d", "/s", "/c", "call", forceWindowsArgQuoting(resolved)]
-  };
-}
-function rejectCmdExpansionSensitiveShim(resolved) {
-  if (CMD_EXPANSION_SENSITIVE_PATTERN.test(resolved)) {
-    throw new Error(`Refusing to run Windows shim path with cmd.exe expansion-sensitive characters (% or ^): ${resolved}`);
-  }
-}
-function forceWindowsArgQuoting(value) {
-  return `${value} `;
-}
-function findOnPath(bin, pathValue, pathExts, platform) {
-  const pathSeparator = platform === "win32" ? WINDOWS_PATH_SEPARATOR : path27__default.delimiter;
-  if (hasPathSeparator(bin, platform) || path27__default.isAbsolute(bin)) {
-    return resolveWithExtensions(bin, pathExts, platform);
-  }
-  for (const entry of pathValue.split(pathSeparator)) {
-    const searchDir = entry.length === 0 ? "." : entry;
-    const candidate = resolveWithExtensions(path27__default.join(searchDir, bin), pathExts, platform);
-    if (candidate) {
-      return candidate;
-    }
-  }
-  return void 0;
-}
-function resolveWithExtensions(candidate, pathExts, platform) {
-  if (platform !== "win32" || path27__default.extname(candidate).length > 0) {
-    return existsSync(candidate) ? candidate : void 0;
-  }
-  for (const ext of pathExts) {
-    if (ext.length === 0) {
-      continue;
-    }
-    const withExt = `${candidate}${ext}`;
-    if (existsSync(withExt)) {
-      return withExt;
-    }
-  }
-  return existsSync(candidate) ? candidate : void 0;
-}
-function hasPathSeparator(value, platform) {
-  if (value.includes("/")) {
-    return true;
-  }
-  return platform === "win32" && value.includes("\\");
-}
-function parsePathExt(pathExt) {
-  const raw = pathExt && pathExt.trim().length > 0 ? pathExt : DEFAULT_WINDOWS_PATHEXT;
-  return raw.split(WINDOWS_PATH_SEPARATOR).map((entry) => entry.trim()).filter((entry) => entry.length > 0);
-}
 
 // ../../packages/core-agent/src/internal/session-errors.ts
 var DEAD_SESSION_PATTERNS = [
@@ -23619,7 +23594,6 @@ __export(state_io_exports, {
   withStoreLock: () => withStoreLock
 });
 var FILENAME = "carriers.json";
-var DEFAULT_STORE_DIRNAME = ".fleet";
 var STALE_SUBAGENT_MODE_FILENAME = "carrier-subagent.json";
 var LOCK_DIRNAME = "carriers.json.lock";
 var LOCK_OWNER_FILENAME = "owner.json";
@@ -23629,10 +23603,11 @@ var runtimeState = {
   lastLocalWriteFingerprint: null
 };
 function initStore(dir) {
-  runtimeState.storeDir = dir;
-  ensureSafeDirectory(dir);
+  const resolvedDir = dir ?? getFleetDataDir();
+  runtimeState.storeDir = resolvedDir;
+  ensureSafeDirectory(resolvedDir);
   withStoreLock(() => {
-    unlinkStaleSubagentModeFile(dir);
+    unlinkStaleSubagentModeFile(resolvedDir);
   });
 }
 function resetStoreForTests() {
@@ -23644,14 +23619,12 @@ function readRawCarriers() {
   return readCarriers();
 }
 function readRawCarriersOrDefaultStore() {
-  return runtimeState.storeDir ? readCarriers() : readCarriersFromDir(resolveDefaultStoreDir());
+  return readCarriers();
 }
 function getCarriersFilePath() {
-  if (!runtimeState.storeDir) return null;
-  return path27.join(runtimeState.storeDir, FILENAME);
+  return path27.join(resolveStoreDir(), FILENAME);
 }
 function updateCarriers(mutator) {
-  if (!runtimeState.storeDir) return;
   withStoreLock(() => {
     const carriers = readCarriers();
     const snapshot = structuredClone(carriers);
@@ -23661,36 +23634,35 @@ function updateCarriers(mutator) {
   });
 }
 function withStoreLock(operation) {
-  if (!runtimeState.storeDir) return operation();
-  fs8.mkdirSync(runtimeState.storeDir, { recursive: true });
-  const lockDir = path27.join(runtimeState.storeDir, LOCK_DIRNAME);
+  const dir = resolveStoreDir();
+  ensureSafeDirectory(dir);
+  const lockDir = path27.join(dir, LOCK_DIRNAME);
   return withDirectoryLock(
     { lockDir, ownerFileName: LOCK_OWNER_FILENAME },
     operation
   );
 }
-function readCarriers() {
-  if (!runtimeState.storeDir) return {};
-  return readCarriersFromDir(runtimeState.storeDir);
+function resolveStoreDir() {
+  return runtimeState.storeDir ?? getFleetDataDir();
 }
-function resolveDefaultStoreDir() {
-  return path27.join(os3.homedir(), DEFAULT_STORE_DIRNAME);
+function readCarriers() {
+  return readCarriersFromDir(resolveStoreDir());
 }
 function readCarriersFromDir(dir) {
   const filePath = path27.join(dir, FILENAME);
   let fd;
   try {
-    const stat3 = fs8.lstatSync(filePath);
+    const stat3 = fs2.lstatSync(filePath);
     if (!stat3.isFile() || stat3.isSymbolicLink()) return {};
-    fd = fs8.openSync(filePath, fs8.constants.O_RDONLY | NOFOLLOW_FLAG);
-    if (!fs8.fstatSync(fd).isFile()) return {};
-    return sanitizeFleetCarriers(JSON.parse(fs8.readFileSync(fd, "utf-8")));
+    fd = fs2.openSync(filePath, fs2.constants.O_RDONLY | NOFOLLOW_FLAG);
+    if (!fs2.fstatSync(fd).isFile()) return {};
+    return sanitizeFleetCarriers(JSON.parse(fs2.readFileSync(fd, "utf-8")));
   } catch {
     return {};
   } finally {
     if (fd !== void 0) {
       try {
-        fs8.closeSync(fd);
+        fs2.closeSync(fd);
       } catch {
       }
     }
@@ -23698,16 +23670,15 @@ function readCarriersFromDir(dir) {
 }
 function recordLastLocalWriteFingerprint(filePath, generation) {
   try {
-    const st = fs8.statSync(filePath);
+    const st = fs2.statSync(filePath);
     runtimeState.lastLocalWriteFingerprint = { generation, mtimeMs: st.mtimeMs, size: st.size };
   } catch {
     runtimeState.lastLocalWriteFingerprint = { generation, mtimeMs: 0, size: 0 };
   }
 }
 function writeCarriers(s) {
-  if (!runtimeState.storeDir) throw new Error("Fleet store is not initialized.");
-  fs8.mkdirSync(runtimeState.storeDir, { recursive: true });
-  const filePath = path27.join(runtimeState.storeDir, FILENAME);
+  const dir = resolveStoreDir();
+  const filePath = path27.join(dir, FILENAME);
   const next = serializeFleetCarriers(s);
   writeAtomicSync(filePath, `${JSON.stringify(next, null, 2)}
 `, { fsync: false, mode: 420 });
@@ -23732,7 +23703,7 @@ function sanitizeFleetCarriers(value) {
 }
 function unlinkStaleSubagentModeFile(dir) {
   try {
-    fs8.unlinkSync(path27.join(dir, STALE_SUBAGENT_MODE_FILENAME));
+    fs2.unlinkSync(path27.join(dir, STALE_SUBAGENT_MODE_FILENAME));
   } catch {
   }
 }
@@ -26019,8 +25990,8 @@ function Create(hidden, enumerable, options = {}) {
   Metrics.create += 1;
   const settings2 = settings_exports.Get();
   const withOptions = Merge(enumerable, options);
-  const withHidden = settings2.enumerableKind ? Merge(withOptions, hidden) : MergeHidden(withOptions, hidden);
-  return settings2.immutableTypes ? Object.freeze(withHidden) : withHidden;
+  const withHidden2 = settings2.enumerableKind ? Merge(withOptions, hidden) : MergeHidden(withOptions, hidden);
+  return settings2.immutableTypes ? Object.freeze(withHidden2) : withHidden2;
 }
 
 // ../../node_modules/.pnpm/typebox@1.1.34/node_modules/typebox/build/system/memory/discard.mjs
@@ -31856,11 +31827,39 @@ function buildModelArgs2(model) {
   return model === void 0 ? [] : ["--model", model];
 }
 
+// ../../packages/fleet-admiral/src/agent-cli/cursor/cursor.ts
+var cursorCli = {
+  id: "cursor",
+  label: "Cursor",
+  async createProfile(options) {
+    const { bin, prefixArgs } = resolveBinary("cursor-agent", "CURSOR_AGENT_BIN", options.env);
+    return {
+      args: [...prefixArgs, ...buildModelArgs3(options.model)],
+      bin,
+      binPrefixArgs: prefixArgs,
+      cwd: options.cwd,
+      env: createChildEnv(options.env, {}),
+      id: "cursor",
+      label: "Cursor",
+      messagePolicy: {
+        bracketedPaste: true,
+        lineTerminator: "\r",
+        multilineStrategy: "paste-mode"
+      },
+      terminalName: "xterm-256color"
+    };
+  }
+};
+function buildModelArgs3(model) {
+  return model === void 0 ? [] : ["--model", model];
+}
+
 // ../../packages/fleet-admiral/src/agent-cli/registry.ts
 var DEFAULT_CLI_ID = "claude";
 var DEFINITIONS = {
   claude: claudeCli,
-  codex: codexCli
+  codex: codexCli,
+  cursor: cursorCli
 };
 async function resolveAgentCliProfile(env, cwd, options = {}) {
   const id = resolveAgentCliId(env, options);
@@ -31905,6 +31904,10 @@ var AGENT_CLI_INJECTION_CAPABILITIES = {
   codex: {
     builderId: "codex-native",
     enabled: true
+  },
+  cursor: {
+    builderId: "cursor-native",
+    enabled: true
   }
 };
 function getAgentCliInjectionCapability(cliId) {
@@ -31920,17 +31923,16 @@ function createSessionCaptureHookExec(deps) {
     deps.provider
   ] : [deps.entryPath, "hook", "capture-session", deps.provider];
   return {
-    command: deps.execPath ?? process4.execPath,
+    command: deps.execPath ?? process5.execPath,
     args
   };
 }
 
 // ../../packages/fleet-admiral/src/agent-cli/builders/claude.ts
 function buildClaudeNativeArgs(context) {
-  const systemPromptArg = context.replaceSystemPrompt ? "--system-prompt-file" : "--append-system-prompt-file";
   return [
     ...buildResumeArgs2(context.resumeSessionId),
-    systemPromptArg,
+    "--append-system-prompt-file",
     requireSystemPromptFile(context),
     ...context.pluginRoots.flatMap((pluginRoot) => [
       "--plugin-dir",
@@ -31960,8 +31962,6 @@ function requireSystemPromptFile(context) {
   if (context.systemPromptFile) return context.systemPromptFile;
   throw new Error("Claude system prompt file is required for native injection");
 }
-
-// ../../packages/fleet-admiral/src/agent-cli/builders/toml.ts
 var TOML_BASIC_STRING_ESCAPE_PATTERN = /[\u0000-\u001f"\\\u007f]/g;
 var TOML_MULTILINE_CONTROL_PATTERN = new RegExp("[\\u0000-\\u0008\\u000b-\\u001f\\u007f]", "g");
 var TOML_MULTILINE_QUOTE_RUN_PATTERN = /"+/g;
@@ -32005,9 +32005,16 @@ function escapeTomlMultilineString(value) {
 function buildPosixShellCommand(values) {
   return values.map(posixShellQuote).join(" ");
 }
+function buildHostShellCommand(values, platform = process5.platform) {
+  if (platform === "win32") return values.map(windowsShellQuote).join(" ");
+  return buildPosixShellCommand(values);
+}
 function posixShellQuote(value) {
   return `'${value.replaceAll("'", "'\\''")}'`;
 }
+function windowsShellQuote(value) {
+  return `"${value.replaceAll('"', '""')}"`;
+}
 
 // ../../packages/fleet-admiral/src/agent-cli/builders/codex.ts
 var CODEX_TOOL_TIMEOUT_SEC = 1800;
@@ -32048,6 +32055,24 @@ function requireCodexProfileName(context) {
   throw new Error("Codex profile name is required for native injection");
 }
 
+// ../../packages/fleet-admiral/src/agent-cli/builders/cursor.ts
+function buildCursorNativeArgs(context) {
+  return [
+    ...buildResumeArgs4(context.resumeSessionId),
+    ...context.pluginRoots.flatMap((pluginRoot) => [
+      "--plugin-dir",
+      pluginRoot
+    ]),
+    "--sandbox",
+    "disabled",
+    "--force",
+    ...context.mcpServers.length > 0 ? ["--approve-mcps"] : []
+  ];
+}
+function buildResumeArgs4(resumeSessionId) {
+  return resumeSessionId === void 0 ? [] : ["--resume", resumeSessionId];
+}
+
 // ../../packages/fleet-admiral/src/agent-cli/assets.generated.ts
 var EMBEDDED_AGENT_CLI_SKILL_ASSETS = [
   { relativePath: "assumption-audit/SKILL.md", content: "---\nname: assumption-audit\ndescription: Resolve decision-shaped Context Confidence gate failures one blocking gap at a time before the active protocol re-applies its planning boundary.\n---\n\nUse this auxiliary skill only when the active protocol or Context Confidence re-entry path has already found an unresolved blocking gap and the gap is decision-shaped. This skill is not a protocol mode, does not replace the active protocol, and cannot declare the planning boundary passed by itself.\n\nFor each unresolved blocking gap, triage the gap before questioning:\n\n- **Scout-shaped**: the answer should come from direct file reads, focused reconnaissance, carrier scouting, or another verifiable evidence source. Send the workflow back to that evidence-gathering path instead of asking the user to decide.\n- **Decision-shaped**: the answer depends on preference, scope, risk appetite, product intent, or authority that evidence alone cannot settle. Ask exactly one question for this gap.\n- **Escalation-shaped**: the answer requires authority beyond the current operator, changes the mission boundary, repeatedly fails to resolve, or would weaken the active protocol's required gate. Escalate to the Admiral of the Navy (\uB300\uC6D0\uC218).\n\nWhen a gap is decision-shaped, ask one question at a time. Present your recommended answer first, then give one or two concrete alternatives when useful. Walk decision dependencies one branch at a time until the current gap is resolved; do not bundle unrelated gaps into the same question.\n\nAfter the gap is answered, report the resolved decision in one short line and return control to the active protocol or Context Confidence Standing Order. The active workflow must re-evaluate confidence and re-apply the required planning boundary gate before planning proceeds.\n" },
@@ -32215,6 +32240,36 @@ function assertSegmentRealpathWithinRoot(resolvedBase, segmentPath) {
 }
 
 // ../../packages/fleet-admiral/src/agent-cli/plugin/fleet.ts
+var CURSOR_DOCTRINE_RULE_FILE = "fleet-doctrine.mdc";
+var CURSOR_DOCTRINE_RULE_FRONTMATTER = `---
+description: Fleet Admiral operating doctrine. Always apply in Fleet-launched Cursor Agent sessions.
+globs:
+alwaysApply: true
+---
+`;
+var CURSOR_DOCTRINE_RULE_PREAMBLE = `# Fleet Runtime Doctrine for Cursor Agent
+
+You are running as Cursor Agent inside Fleet. Cursor provides this file as a persistent rule, not as a native system prompt. For this Fleet-launched session, treat the embedded Fleet system prompt below as your active Fleet runtime doctrine.
+
+Priority and interpretation:
+
+- Follow higher-priority platform, system, developer, and direct user instructions first.
+- Within Cursor rules, project instructions, and other same-layer guidance, this Fleet doctrine is the governing instruction set for Fleet identity, roles, workflow, carrier operations, and reporting.
+- Treat Fleet identity and role names from the embedded prompt as the identity anchor for this session. Do not replace them with generic Cursor Agent identity when answering, planning, or delegating.
+- Do not treat this document as optional background or reference material. Apply it continuously when deciding who you are, how Fleet roles are named, which protocol applies, and how to report work.
+- Do not merely summarize or acknowledge the embedded prompt. Execute the operational requirements it defines, including protocol selection, evidence thresholds, carrier routing, and result reporting.
+- If other same-layer Cursor rules conflict with this doctrine, preserve the Fleet doctrine unless the user's latest explicit instruction requires a narrower task-specific exception.
+- When unsure whether a Fleet instruction applies, prefer following the Fleet doctrine and briefly surface the uncertainty instead of silently ignoring it.
+
+## Embedded Fleet System Prompt
+
+The following block is the Fleet system prompt content adapted for Cursor's rules mechanism. It is intentionally embedded verbatim after this wrapper.
+
+<fleet-system-prompt>
+`;
+var CURSOR_DOCTRINE_RULE_FOOTER = `
+</fleet-system-prompt>
+`;
 var assetBundle = {
   description: "Fleet carrier delegation and wiki evidence plugin",
   directoryName: "fleet",
@@ -32228,6 +32283,9 @@ function renderAssetPluginRoot(pluginRoot, bundle, options) {
   if (options.cliId === "claude") {
     writePrivateJson(path27__default.join(pluginRoot, "hooks", "hooks.json"), claudeHooks(options), pluginRoot);
   }
+  if (options.cliId === "cursor") {
+    renderCursorPluginRoot(pluginRoot, options);
+  }
 }
 function claudeHooks(options) {
   const userPromptSubmitExecs = [options.captureSessionHookExec, options.turnStartHookExec, options.autoNameHookExec].filter((exec) => exec !== void 0);
@@ -32267,6 +32325,60 @@ function claudeCommandHook(hookExec) {
     type: "command"
   };
 }
+function renderCursorPluginRoot(pluginRoot, options) {
+  if (options.doctrine !== void 0) {
+    renderCursorDoctrineRule(pluginRoot, options.doctrine);
+  }
+  if ((options.mcpServers ?? []).length > 0) {
+    writePrivateJson(path27__default.join(pluginRoot, "mcp.json"), cursorMcpConfig(options.mcpServers ?? []), pluginRoot);
+  }
+  const hooks = cursorHooks(options);
+  if (hooks !== void 0) {
+    writePrivateJson(path27__default.join(pluginRoot, "hooks", "hooks.json"), hooks, pluginRoot);
+  }
+}
+function renderCursorDoctrineRule(pluginRoot, doctrine) {
+  writePrivateFile(
+    path27__default.join(pluginRoot, "rules", CURSOR_DOCTRINE_RULE_FILE),
+    `${CURSOR_DOCTRINE_RULE_FRONTMATTER}${CURSOR_DOCTRINE_RULE_PREAMBLE}${doctrine}${CURSOR_DOCTRINE_RULE_FOOTER}`,
+    pluginRoot
+  );
+}
+function cursorMcpConfig(servers) {
+  return {
+    mcpServers: Object.fromEntries(
+      servers.map((server) => [server.name, {
+        type: "http",
+        url: server.endpointUrl,
+        headers: {
+          Authorization: `Bearer ${server.bearerToken}`
+        }
+      }])
+    )
+  };
+}
+function cursorHooks(options) {
+  const sessionStartExecs = [options.captureSessionHookExec].filter((exec) => exec !== void 0);
+  const beforeSubmitPromptExecs = [options.turnStartHookExec, options.autoNameHookExec].filter((exec) => exec !== void 0);
+  const stopExecs = [options.turnEndHookExec].filter((exec) => exec !== void 0);
+  if (sessionStartExecs.length === 0 && beforeSubmitPromptExecs.length === 0 && stopExecs.length === 0) return void 0;
+  return {
+    version: 1,
+    hooks: {
+      ...sessionStartExecs.length > 0 ? {
+        sessionStart: sessionStartExecs.map((exec) => cursorCommandHook(exec))
+      } : {},
+      ...beforeSubmitPromptExecs.length > 0 ? { beforeSubmitPrompt: beforeSubmitPromptExecs.map((exec) => cursorCommandHook(exec)) } : {},
+      ...stopExecs.length > 0 ? { stop: stopExecs.map((exec) => cursorCommandHook(exec)) } : {}
+    }
+  };
+}
+function cursorCommandHook(hookExec, extraArgs = []) {
+  return {
+    type: "command",
+    command: buildHostShellCommand([hookExec.command, ...hookExec.args, ...extraArgs])
+  };
+}
 function renderEmbeddedSkillAssets(pluginRoot) {
   for (const asset of EMBEDDED_AGENT_CLI_SKILL_ASSETS) {
     writePrivateFile(path27__default.join(pluginRoot, "skills", asset.relativePath), asset.content, pluginRoot);
@@ -32653,9 +32765,11 @@ var MARKETPLACE_MANAGED_ENTRIES = [
   ".agents",
   ".claude-plugin",
   ".codex-plugin",
+  ".cursor-plugin",
   "hooks",
   "skills",
   "agents",
+  "mcp.json",
   "claude",
   "codex-marketplace",
   "plugins"
@@ -32664,15 +32778,17 @@ var MARKETPLACE_PRUNE_ENTRIES = [
   ".agents",
   ".claude-plugin",
   ".codex-plugin",
+  ".cursor-plugin",
   "hooks",
   "skills",
   "agents",
+  "mcp.json",
   "claude",
   "codex-marketplace"
 ];
 var HASH_IGNORED_RELATIVE_PATHS = new Set(PLUGIN_BUNDLES.map((bundle) => bundle.hashFileName));
 async function createAgentCliPlugin(options) {
-  const fleetRoot = options.rootDir ?? options.dataDir;
+  const fleetRoot = options.rootDir ?? options.dataDir ?? getFleetDataDir();
   const renderableBundles = resolveRenderablePluginBundles(fleetRoot);
   const marketplaceBundles = groupRenderableBundlesByMarketplace(renderableBundles);
   const pluginRoots = /* @__PURE__ */ new Map();
@@ -32738,12 +32854,15 @@ function renderPluginRoot(pluginRoot, bundle, options) {
     writePrivateJson(path27__default.join(stagedPluginRoot, ".claude-plugin", "plugin.json"), claudeManifest(bundle), stagedPluginRoot);
     switch (bundle.source) {
       case "asset":
-        ensurePrivateDir(path27__default.join(stagedPluginRoot, "agents"), stagedPluginRoot);
+        if (options.cliId === "claude") {
+          ensurePrivateDir(path27__default.join(stagedPluginRoot, "agents"), stagedPluginRoot);
+        }
         ensurePrivateDir(path27__default.join(stagedPluginRoot, "skills"), stagedPluginRoot);
         renderAssetPluginRoot(stagedPluginRoot, bundle, options);
         break;
     }
     writePrivateJson(path27__default.join(stagedPluginRoot, ".codex-plugin", "plugin.json"), codexManifest(bundle, stagedPluginRoot), stagedPluginRoot);
+    writePrivateJson(path27__default.join(stagedPluginRoot, ".cursor-plugin", "plugin.json"), cursorManifest(bundle, stagedPluginRoot), stagedPluginRoot);
     removePrivatePath(pluginRoot, parentRoot);
     renameSync(stagedPluginRoot, pluginRoot);
   } finally {
@@ -32757,6 +32876,7 @@ function renderMarketplaceRoot(target, bundles) {
   try {
     writePrivateJson(path27__default.join(stagedRoot, ".agents", "plugins", "marketplace.json"), codexMarketplace(target, bundles), stagedRoot);
     writePrivateJson(path27__default.join(stagedRoot, ".claude-plugin", "marketplace.json"), claudeMarketplace(target, bundles), stagedRoot);
+    writePrivateJson(path27__default.join(stagedRoot, ".cursor-plugin", "marketplace.json"), cursorMarketplace(target, bundles), stagedRoot);
     pruneMarketplaceRoot(target);
     pruneStalePluginDirs(target, bundles);
     for (const entry of readdirSync(stagedRoot)) {
@@ -32781,7 +32901,7 @@ function pruneStalePluginDirs(target, bundles) {
   }
 }
 function buildContentHash(target) {
-  const hash2 = crypto3.createHash("sha256");
+  const hash2 = crypto4.createHash("sha256");
   for (const filePath of listRenderableFiles(target)) {
     const relativePath = path27__default.relative(target.root, filePath);
     hash2.update(relativePath);
@@ -32876,6 +32996,17 @@ function claudeMarketplace(target, bundles) {
     }))
   };
 }
+function cursorMarketplace(target, bundles) {
+  return {
+    name: target.name,
+    owner: "fleet",
+    plugins: bundles.map((bundle) => ({
+      name: bundle.name,
+      description: bundle.description,
+      source: marketplacePluginPath(target, bundle)
+    }))
+  };
+}
 function pluginRootForTarget(target, bundle) {
   return path27__default.join(target.root, PLUGIN_BUNDLES_DIR_NAME, bundle.directoryName);
 }
@@ -32890,8 +33021,30 @@ function codexManifest(bundle, pluginRoot) {
     skills: "./skills/"
   };
 }
+function cursorManifest(bundle, pluginRoot) {
+  return {
+    name: bundle.name,
+    version: cursorManifestVersion(bundle, pluginRoot),
+    description: bundle.description
+  };
+}
+function cursorManifestVersion(bundle, pluginRoot) {
+  const hash2 = crypto4.createHash("sha256");
+  hash2.update(bundle.name);
+  hash2.update("\0");
+  hash2.update(bundle.description);
+  hash2.update("\0");
+  for (const filePath of listCursorEffectivePluginFiles(pluginRoot)) {
+    const relativePath = path27__default.relative(pluginRoot, filePath);
+    hash2.update(relativePath);
+    hash2.update("\0");
+    hash2.update(readFileSync(filePath));
+    hash2.update("\0");
+  }
+  return `0.0.0+${hash2.digest("hex").slice(0, 12)}`;
+}
 function codexManifestVersion(bundle, pluginRoot) {
-  const hash2 = crypto3.createHash("sha256");
+  const hash2 = crypto4.createHash("sha256");
   hash2.update(bundle.name);
   hash2.update("\0");
   hash2.update(bundle.description);
@@ -32912,6 +33065,22 @@ function listCodexEffectivePluginFiles(pluginRoot) {
   collectRenderableFiles(pluginRoot, skillsPath, files, /* @__PURE__ */ new Set());
   return files.sort();
 }
+function listCursorEffectivePluginFiles(pluginRoot) {
+  const files = [];
+  for (const entry of ["skills", "rules", "hooks", "mcp.json"]) {
+    const entryPath = path27__default.join(pluginRoot, entry);
+    if (!existsSync(entryPath)) continue;
+    const stat3 = lstatSync(entryPath);
+    if (stat3.isFile()) {
+      files.push(entryPath);
+      continue;
+    }
+    if (stat3.isDirectory()) {
+      collectRenderableFiles(pluginRoot, entryPath, files, /* @__PURE__ */ new Set());
+    }
+  }
+  return files.sort();
+}
 function claudeManifest(bundle) {
   return {
     name: bundle.name,
@@ -32934,7 +33103,7 @@ async function injectAgentCliProfile(profile, options) {
   }
   const injectTone = options.enableMetaphor ?? false;
   const endpoint = await options.dedicatedMcpSession.getEndpoint();
-  const tokenLabel = options.mcpSessionLabel ?? `agent:${profile.id}:${crypto3.randomUUID()}`;
+  const tokenLabel = options.mcpSessionLabel ?? `agent:${profile.id}:${crypto4.randomUUID()}`;
   const tokens = await options.dedicatedMcpSession.issueSessionToken({ cwd: profile.cwd, label: tokenLabel });
   const mcpServers = buildAgentCliMcpServerConfigs(endpoint.servers, tokens);
   const doctrine = options.buildSystemPrompt(injectTone);
@@ -32946,7 +33115,9 @@ async function injectAgentCliProfile(profile, options) {
       codexCommandRunner: options.codexCommandRunner,
       cwd: profile.cwd,
       dataDir: options.dataDir,
+      doctrine,
       rootDir: options.pluginRootDir,
+      mcpServers,
       captureSessionHookExec: options.captureSessionHookExec,
       turnStartHookExec: options.turnStartHookExec,
       turnEndHookExec: options.turnEndHookExec,
@@ -32970,7 +33141,7 @@ async function injectAgentCliProfile(profile, options) {
         env: { ...profile.env }
       }, requireCodexCommandRunner(options.codexCommandRunner), options.withMarketplaceLock, {
         homeMarketplaceName: FLEET_MARKETPLACE_NAME,
-        homeMarketplaceRoot: path27__default.join(options.pluginRootDir ?? options.dataDir, "marketplace"),
+        homeMarketplaceRoot: path27__default.join(options.pluginRootDir ?? options.dataDir ?? getFleetDataDir(), "marketplace"),
         projectMarketplaceRoot: path27__default.join(profile.cwd, ".fleet")
       });
       if (cleanupWarning !== void 0) {
@@ -33002,7 +33173,6 @@ async function injectAgentCliProfile(profile, options) {
       pluginRoot: plugin.pluginRoot,
       pluginRoots: plugin.pluginRoots,
       codexProfileName: codexProfile?.profileName,
-      replaceSystemPrompt: options.replaceSystemPrompt ?? false,
       resumeSessionId: options.resumeSessionId,
       systemPromptFile
     };
@@ -33198,6 +33368,8 @@ function buildAgentCliArgs(builderId, context) {
       return buildClaudeNativeArgs(context);
     case "codex-native":
       return buildCodexNativeArgs(context);
+    case "cursor-native":
+      return buildCursorNativeArgs(context);
   }
 }
 function mergeAgentCliArgs(profile, builderId, context, injectedArgs) {
@@ -33245,6 +33417,7 @@ var CHRONICLE_WIKI_TOOL_IDS = /* @__PURE__ */ new Set([
 ]);
 function createFleetAgentRuntimeLifecycle(deps) {
   let active = true;
+  const resolvedDataDir = deps.dataDir ?? getFleetDataDir();
   const mcpRuntime = createFleetAgentRuntimeMcpServices();
   const carrierRuntime = createCarrierRuntime();
   const dedicatedMcpSession = createExecutorSessionManager({
@@ -33260,7 +33433,7 @@ function createFleetAgentRuntimeLifecycle(deps) {
     ]
   });
   registerExecutorPort(mcpRuntime.mcpRegistry, carrierRuntime, () => active);
-  carrierRuntime.store.initStore(deps.dataDir);
+  carrierRuntime.store.initStore(resolvedDataDir);
   carrierRuntime.registerCarrierDefaults();
   registerFleetAgentRuntimeTools(mcpRuntime.mcpRegistry, carrierRuntime, deps);
   registerExecutorMcpRuntimeProvider(mcpRuntime, dedicatedMcpSession, () => active);
@@ -34447,7 +34620,7 @@ function stripLeadingFrontmatter(body) {
   return stripped ? next : body;
 }
 function computeContentHash(content) {
-  return crypto3.createHash("sha256").update(content, "utf8").digest("hex").slice(0, 8);
+  return crypto4.createHash("sha256").update(content, "utf8").digest("hex").slice(0, 8);
 }
 function assertWithinRawDir(absolutePath, paths) {
   const relative = path27__default.relative(paths.rawDir, absolutePath);
@@ -34660,7 +34833,7 @@ async function writeAtomic(filePath, content, paths) {
   await ensureMemoryRoot(paths);
   const tempPath = path27__default.join(
     path27__default.dirname(filePath),
-    `.tmp-${process.pid}-${Date.now()}-${crypto3.randomUUID()}-${os3__default.hostname()}`
+    `.tmp-${process.pid}-${Date.now()}-${crypto4.randomUUID()}-${os3__default.hostname()}`
   );
   await writeFile(tempPath, content, "utf8");
   await rename(tempPath, filePath);
@@ -37213,7 +37386,7 @@ function parseOptionalIsoDate(value) {
   return Number.isFinite(timestamp) ? timestamp : null;
 }
 function hashBodyForComparison(body) {
-  return crypto3.createHash("sha256").update(body.replace(/\s+/g, " ").trim(), "utf8").digest("hex").slice(0, 8);
+  return crypto4.createHash("sha256").update(body.replace(/\s+/g, " ").trim(), "utf8").digest("hex").slice(0, 8);
 }
 function hasConflictingStatuses(entries) {
   const statuses = new Set(entries.map((entry) => entry.status).filter((status) => status !== "unknown"));
@@ -39409,7 +39582,7 @@ var DEFAULT_TICKET_TTL_MS = 1e4;
 function createPluginTerminalTicketRegistry(deps = {}) {
   const ttlMs = deps.ttlMs ?? DEFAULT_TICKET_TTL_MS;
   const now = deps.now ?? Date.now;
-  const randomTicket = deps.randomTicket ?? (() => crypto3.randomBytes(32).toString("base64url"));
+  const randomTicket = deps.randomTicket ?? (() => crypto4.randomBytes(32).toString("base64url"));
   const tickets = /* @__PURE__ */ new Map();
   function issue3(context) {
     prune();
@@ -39441,10 +39614,10 @@ var TERMINAL_TERM = "xterm-256color";
 var FLEET_CONSOLE_PACKAGE_NAME = "@dotobokuri/fleet-console";
 var require2 = createRequire(import.meta.url);
 function createShellTerminalLaunchResolver(deps = {}) {
-  const baseCwd = deps.cwd ?? process4.cwd();
-  const env = deps.env ?? process4.env;
+  const baseCwd = deps.cwd ?? process5.cwd();
+  const env = deps.env ?? process5.env;
   const homedir3 = deps.homedir ?? DEFAULT_TERMINAL_CWD_FALLBACK;
-  const platform = deps.platform ?? process4.platform;
+  const platform = deps.platform ?? process5.platform;
   return async (selectedCwd) => {
     const cwd = selectedCwd || baseCwd || homedir3();
     const shell = resolveWindowsLaunchBinary(resolveUserShell(env, platform), [], env, platform, "user shell");
@@ -39455,7 +39628,7 @@ function startTerminalShell(launch, size) {
   const testStartShell = globalThis.__fleetTerminalStartShell;
   if (testStartShell) return testStartShell(launch, size);
   const { spawn: spawnPty } = loadNodePty();
-  const useConptyDll = resolveUseConptyDll(process4.platform, process4.env);
+  const useConptyDll = resolveUseConptyDll(process5.platform, process5.env);
   return spawnPty(launch.bin, [...launch.args], {
     cols: size.cols,
     rows: size.rows,
@@ -40074,7 +40247,8 @@ var BINARY_DISPLAY_NAMES = {
 };
 var OVERRIDE_ENV_BY_COMMAND = {
   claude: "CLAUDE_BIN",
-  codex: "CODEX_BIN"
+  codex: "CODEX_BIN",
+  "cursor-agent": "CURSOR_AGENT_BIN"
 };
 var VERSION_PROBE_TIMEOUT_MS = 5e3;
 var SEMVER_PATTERN = /(\d+\.\d+\.\d+)/;
@@ -40138,7 +40312,7 @@ function execFileVersion(bin, args) {
     execFile(
       bin,
       [...args],
-      { encoding: "utf-8", timeout: VERSION_PROBE_TIMEOUT_MS, windowsHide: true },
+      withHidden({ encoding: "utf-8", timeout: VERSION_PROBE_TIMEOUT_MS }),
       (error51, stdout, stderr) => {
         if (error51) {
           reject(error51);
@@ -40272,7 +40446,7 @@ function readProviderSessionCapture(fleetSessionId, deps = {}) {
   const capturesDir = deps.capturesDir ?? defaultCapturePaths().capturesDir;
   const filePath = path27__default.join(capturesDir, `${fleetSessionId}.json`);
   try {
-    const parsed = JSON.parse(fs8__default.readFileSync(filePath, "utf8"));
+    const parsed = JSON.parse(fs2__default.readFileSync(filePath, "utf8"));
     return sanitizeProviderSession(parsed);
   } catch {
     return null;
@@ -40282,7 +40456,7 @@ function unlinkProviderSessionCapture(fleetSessionId, deps = {}) {
   if (!isSafeCaptureId(fleetSessionId)) return false;
   const capturesDir = deps.capturesDir ?? defaultCapturePaths().capturesDir;
   try {
-    fs8__default.unlinkSync(path27__default.join(capturesDir, `${fleetSessionId}.json`));
+    fs2__default.unlinkSync(path27__default.join(capturesDir, `${fleetSessionId}.json`));
     return true;
   } catch {
     return false;
@@ -40290,20 +40464,20 @@ function unlinkProviderSessionCapture(fleetSessionId, deps = {}) {
 }
 function captureSessionStrict(options) {
   const provider = parseProvider(options.provider);
-  const fleetSessionId = readFleetSessionId(options.env ?? process4.env);
+  const fleetSessionId = readFleetSessionId(options.env ?? process5.env);
   const input = parseHookInput(options.input ?? "");
   const providerSession = toProviderSession(provider, input, options.now ?? (() => /* @__PURE__ */ new Date()));
   const capturesDir = (options.paths ?? defaultCapturePaths()).capturesDir;
   const finalPath = path27__default.join(capturesDir, `${fleetSessionId}.json`);
-  const tempPath = path27__default.join(capturesDir, `${CAPTURE_TEMP_PREFIX}${fleetSessionId}.${process4.pid}.${Date.now()}.tmp`);
-  fs8__default.mkdirSync(capturesDir, { recursive: true, mode: 448 });
-  fs8__default.writeFileSync(tempPath, `${JSON.stringify(providerSession, null, 2)}
+  const tempPath = path27__default.join(capturesDir, `${CAPTURE_TEMP_PREFIX}${fleetSessionId}.${process5.pid}.${Date.now()}.tmp`);
+  fs2__default.mkdirSync(capturesDir, { recursive: true, mode: 448 });
+  fs2__default.writeFileSync(tempPath, `${JSON.stringify(providerSession, null, 2)}
 `, { mode: 384 });
-  fs8__default.renameSync(tempPath, finalPath);
+  fs2__default.renameSync(tempPath, finalPath);
   return { path: finalPath, providerSession };
 }
 function parseProvider(value) {
-  if (value === "claude" || value === "codex") return value;
+  if (isProvider(value)) return value;
   throw new Error("invalid_provider");
 }
 function readFleetSessionId(env) {
@@ -40323,10 +40497,10 @@ function parseHookInput(input) {
   throw new Error("invalid_hook_input");
 }
 function toProviderSession(provider, input, now) {
-  if (typeof input.session_id !== "string" || input.session_id.length === 0) throw new Error("missing_provider_session_id");
+  const sessionId = readProviderSessionId(input);
   return {
     provider,
-    sessionId: input.session_id,
+    sessionId,
     ...typeof input.transcript_path === "string" && input.transcript_path.length > 0 ? { transcriptPath: input.transcript_path } : {},
     ...typeof input.source === "string" && input.source.length > 0 ? { source: input.source } : {},
     capturedAt: now().toISOString()
@@ -40335,7 +40509,7 @@ function toProviderSession(provider, input, now) {
 function sanitizeProviderSession(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return null;
   const candidate = value;
-  if (candidate.provider !== "claude" && candidate.provider !== "codex" || typeof candidate.sessionId !== "string" || typeof candidate.capturedAt !== "string") return null;
+  if (!isProvider(candidate.provider) || typeof candidate.sessionId !== "string" || typeof candidate.capturedAt !== "string") return null;
   return {
     provider: candidate.provider,
     sessionId: candidate.sessionId,
@@ -40344,6 +40518,15 @@ function sanitizeProviderSession(value) {
     capturedAt: candidate.capturedAt
   };
 }
+function readProviderSessionId(input) {
+  for (const value of [input.session_id, input.conversation_id, input.chat_id]) {
+    if (typeof value === "string" && value.length > 0) return value;
+  }
+  throw new Error("missing_provider_session_id");
+}
+function isProvider(value) {
+  return value === "claude" || value === "codex" || value === "cursor";
+}
 function isSafeCaptureId(value) {
   return value.length > 0 && path27__default.basename(value) === value && !value.includes(path27__default.sep) && !value.includes(path27__default.posix.sep);
 }
@@ -40385,16 +40568,12 @@ function buildConsoleCaptureHookCommand(entry, cliId) {
   throw new Error(`Unsupported Fleet Console session hook entry extension: ${extension}`);
 }
 function toCaptureProvider(cliId) {
-  return cliId === "codex" ? "codex" : "claude";
+  if (cliId === "codex") return "codex";
+  if (cliId === "cursor") return "cursor";
+  return "claude";
 }
 function runCodexCommand(command) {
-  const result = spawnSync(command.bin, command.args, {
-    cwd: command.cwd,
-    encoding: "utf8",
-    env: command.env,
-    // 콘솔 없는 fleet-console 백엔드에서 codex 등록 명령 실행 시 콘솔 창이 깜빡이는 것을 방지한다.
-    windowsHide: true
-  });
+  const result = spawnSync(command.bin, command.args, withHidden({ cwd: command.cwd, encoding: "utf8", env: command.env }));
   return {
     status: result.status,
     stderr: result.stderr ?? "",
@@ -40433,12 +40612,12 @@ var CONSOLE_ENTRY_PATH = fileURLToPath(import.meta.url);
 var HOOK_ENTRY_EXTENSIONS = /* @__PURE__ */ new Set([".cjs", ".cts", ".js", ".mjs", ".mts", ".ts", ".tsx"]);
 var require4 = createRequire(import.meta.url);
 function createAgentTerminalLaunchResolver(deps = {}) {
-  const baseCwd = deps.cwd ?? process4.cwd();
-  const env = deps.env ?? process4.env;
-  const execPath = deps.execPath ?? process4.execPath;
+  const baseCwd = deps.cwd ?? process5.cwd();
+  const env = deps.env ?? process5.env;
+  const execPath = deps.execPath ?? process5.execPath;
   const homedir3 = deps.homedir ?? DEFAULT_TERMINAL_CWD_FALLBACK2;
-  const platform = deps.platform ?? process4.platform;
-  const entryPath = resolveHookEntryPath(deps.entryPath ?? process4.argv[1]);
+  const platform = deps.platform ?? process5.platform;
+  const entryPath = resolveHookEntryPath(deps.entryPath ?? process5.argv[1]);
   const tsxLoaderPath = deps.tsxLoaderPath ?? resolveOptionalPackage("tsx");
   const dataDir = deps.dataDir ?? getFleetDataDir();
   const infraServices = deps.infraServices ?? createInfraServices();
@@ -40483,7 +40662,7 @@ function resolveHookEntryPath(candidate) {
   if (candidate && hasHookEntryExtension(candidate)) return candidate;
   if (candidate) {
     try {
-      const realPath = fs8__default.realpathSync(candidate);
+      const realPath = fs2__default.realpathSync(candidate);
       if (hasHookEntryExtension(realPath)) return realPath;
     } catch {
     }
@@ -40517,7 +40696,6 @@ async function createAgentCliLaunchSpec(options) {
       inputWaitingHookExec: buildConsoleAttentionHookCommand(options.hookEntry),
       autoNameHookExec: buildConsoleAutoNameHookCommand(options.hookEntry),
       onCleanup: (cleanup) => cleanupStack.push(cleanup),
-      replaceSystemPrompt: globalSettings.replaceSystemPrompt,
       resumeSessionId: options.resumeSessionId,
       withMarketplaceLock: withConsoleMarketplaceLock,
       mcpSessionLabel: options.sessionId
@@ -40601,12 +40779,9 @@ function resolveOptionalPackage(id) {
 function readGlobalSettingsSnapshot(infraServices) {
   try {
     const data = infraServices.globalOptionsService.load();
-    return {
-      enableMetaphor: data.enableMetaphor ?? false,
-      replaceSystemPrompt: data.replaceSystemPrompt ?? false
-    };
+    return { enableMetaphor: data.enableMetaphor ?? false };
   } catch {
-    return { enableMetaphor: false, replaceSystemPrompt: false };
+    return { enableMetaphor: false };
   }
 }
 var TENANT_EVENT_LIMIT = 1e3;
@@ -40964,12 +41139,12 @@ function toTerminalSessionInfo(state) {
   };
 }
 function defaultWorkspaceHash(canonicalCwd) {
-  return crypto3.createHash("sha256").update(canonicalCwd).digest("hex").slice(0, 12);
+  return crypto4.createHash("sha256").update(canonicalCwd).digest("hex").slice(0, 12);
 }
 function defaultCanonicalizeTheaterPath(cwd) {
   const resolved = path27__default.resolve(cwd);
   try {
-    return fs8__default.realpathSync.native(resolved);
+    return fs2__default.realpathSync.native(resolved);
   } catch {
     return resolved;
   }
@@ -41198,10 +41373,15 @@ function registerAgentRoutes(ctx, terminalRuntime, deps) {
   registerRouter(ctx, "agent", api.handle);
   return api.launchKinds;
 }
+function buildAgentLaunchKindBackfillPatch(operation) {
+  if (operation.pluginId !== TERMINAL_PLUGIN_ID || operation.type !== AGENT_OPERATION_TYPE) return null;
+  const cliId = operation.payload.cliId;
+  if (typeof cliId !== "string" || cliId.length === 0) return null;
+  if (operation.payload.launchKindId !== void 0) return null;
+  return { payload: { ...operation.payload, launchKindId: cliId } };
+}
 function createAgentApi(ctx, terminalRuntime, deps) {
-  const dataDir = ctx.host.paths.dataDir;
   const runtime = createFleetAgentRuntimeLifecycle({
-    dataDir,
     onMcpServerStartError: (error51) => {
       console.error("[fleet-console] Failed to start MCP server", error51);
     },
@@ -41217,7 +41397,6 @@ function createAgentApi(ctx, terminalRuntime, deps) {
   const jobOriginById = /* @__PURE__ */ new Map();
   const launchResolver = createAgentTerminalLaunchResolver({
     agentRuntime: runtime,
-    dataDir,
     infraServices: deps,
     onRuntimeSessionStart: (session) => {
       pendingRuntimeSessions.set(session.sessionId, session);
@@ -41254,6 +41433,7 @@ function createAgentApi(ctx, terminalRuntime, deps) {
     }
     injectRenameCommand(payload.operationId, payload.title);
   });
+  backfillAgentOperationLaunchKinds();
   rehydrateDormantAgentOperations();
   async function handle({ req, res, pathname }) {
     const path42 = pathname.slice(`${ctx.basePath}/agent`.length) || "/";
@@ -41385,7 +41565,7 @@ function createAgentApi(ctx, terminalRuntime, deps) {
       ctx.host.http.writeJson(res, 409, { error: "agent_cli_unavailable" });
       return;
     }
-    const sessionId = crypto3.randomUUID();
+    const sessionId = crypto4.randomUUID();
     const session = observability.createPendingTerminalSession({ sessionId, cwd, cliId });
     ctx.host.operations.create({
       id: session.sessionId,
@@ -41517,8 +41697,8 @@ function createAgentApi(ctx, terminalRuntime, deps) {
       return true;
     }
     const result = captureSession({
-      diagnostics: process4.stderr,
-      env: { ...process4.env, FLEET_CONSOLE_SESSION_ID: sessionId },
+      diagnostics: process5.stderr,
+      env: { ...process5.env, FLEET_CONSOLE_SESSION_ID: sessionId },
       input: body.input,
       paths: ctx.host.paths,
       provider: body.provider
@@ -41537,7 +41717,7 @@ function createAgentApi(ctx, terminalRuntime, deps) {
   }
   async function buildAgentCliLaunchMetadata() {
     const metadata = getAgentCliMetadata();
-    if ((process4.env.FLEET_TERMINAL_CMD ?? "").trim().length > 0) {
+    if ((process5.env.FLEET_TERMINAL_CMD ?? "").trim().length > 0) {
       return metadata.map((meta3) => ({ id: meta3.id, label: meta3.label, available: true, signedIn: true }));
     }
     const detected = await detector.detect();
@@ -41617,6 +41797,13 @@ function createAgentApi(ctx, terminalRuntime, deps) {
       ctx.host.operations.patch(operation.id, { payload: { ...operation.payload, ...toOperationPayload(cwd, dormant, providerSession) } });
     }
   }
+  function backfillAgentOperationLaunchKinds() {
+    for (const operation of ctx.host.operations.list()) {
+      const patch = buildAgentLaunchKindBackfillPatch(operation);
+      if (!patch) continue;
+      ctx.host.operations.patch(operation.id, patch);
+    }
+  }
   return { cleanup, handle, handleExit, launch, launchKinds: buildLaunchKinds };
   function methodNotAllowed(res) {
     ctx.host.http.writeJson(res, 405, { error: "Method not allowed" });
@@ -41631,6 +41818,7 @@ function toOperationPayload(cwd, session, providerSession) {
   return {
     cwd,
     ...session.cliId ? { cliId: session.cliId } : {},
+    ...session.cliId ? { launchKindId: session.cliId } : {},
     ...session.cliLabel ? { cliLabel: session.cliLabel } : {},
     ...providerSession ? { providerSession } : {},
     ...session.labelSource ? { labelSource: session.labelSource } : {}
@@ -41660,7 +41848,7 @@ function readProviderSession(value) {
   const providerSession = value?.providerSession;
   if (!providerSession || typeof providerSession !== "object") return void 0;
   const candidate = providerSession;
-  if (candidate.provider !== "claude" && candidate.provider !== "codex" || typeof candidate.sessionId !== "string" || typeof candidate.capturedAt !== "string") return void 0;
+  if (!isProvider2(candidate.provider) || typeof candidate.sessionId !== "string" || typeof candidate.capturedAt !== "string") return void 0;
   return {
     provider: candidate.provider,
     sessionId: candidate.sessionId,
@@ -41669,6 +41857,9 @@ function readProviderSession(value) {
     ...typeof candidate.source === "string" ? { source: candidate.source } : {}
   };
 }
+function isProvider2(value) {
+  return value === "claude" || value === "codex" || value === "cursor";
+}
 function resolveCarrierEventOrigin(event, jobOriginById) {
   if (event.originSessionId) {
     jobOriginById.set(event.jobId, event.originSessionId);
@@ -41710,6 +41901,47 @@ function withSignatureCli(event, registry3) {
   const signatureCli = resolveAgentCliType2(obj.ownerCarrierId, config2.defaultCliType);
   return { ...obj, signatureCli };
 }
+var GLOBAL_SHELL_SESSION_ID = "global-shell";
+var GLOBAL_SHELL_OPERATION_TYPE = "shell";
+function registerGlobalShellRoutes(ctx, runtime) {
+  registerRouter(ctx, "global/ticket", async ({ req, res }) => {
+    if (req.method !== "POST") {
+      ctx.host.http.writeJson(res, 405, { error: "Method not allowed" });
+      return true;
+    }
+    if (!ctx.host.security.isTerminalAuthorized(req)) {
+      ctx.host.http.writeJson(res, 401, { error: "Unauthorized" });
+      return true;
+    }
+    if (req.headers.origin === void 0) {
+      ctx.host.http.writeJson(res, 401, { error: "Unauthorized" });
+      return true;
+    }
+    const body = await ctx.host.http.readJsonBody(req);
+    const operationId = typeof body?.operationId === "string" ? body.operationId : typeof body?.sessionId === "string" ? body.sessionId : null;
+    if (!operationId) {
+      ctx.host.http.writeJson(res, 400, { error: "operation_id_required" });
+      return true;
+    }
+    if (operationId !== GLOBAL_SHELL_SESSION_ID) {
+      ctx.host.http.writeJson(res, 409, { error: "invalid_global_shell_operation" });
+      return true;
+    }
+    if (!runtime.canAttach(GLOBAL_SHELL_SESSION_ID)) {
+      ctx.host.http.writeJson(res, 503, { error: "Terminal session capacity exhausted" });
+      return true;
+    }
+    ctx.host.http.writeJson(res, 200, runtime.issueTicket({
+      cwd: homedir(),
+      sessionId: GLOBAL_SHELL_SESSION_ID,
+      operationId,
+      operationType: GLOBAL_SHELL_OPERATION_TYPE,
+      pluginId: ctx.pluginId,
+      kind: "shell"
+    }));
+    return true;
+  });
+}
 
 // ../fleet-plugins/terminal/server/settings-routes.ts
 function registerTerminalSettingsRoutes(ctx, deps) {
@@ -41734,7 +41966,6 @@ function registerTerminalSettingsRoutes(ctx, deps) {
       }
       const updated = deps.globalOptionsService.update((current) => ({
         ...current,
-        replaceSystemPrompt: body.replaceSystemPrompt,
         enableMetaphor: body.enableMetaphor
       }));
       ctx.host.http.writeJson(res, 200, toTerminalSettingsState(updated));
@@ -41746,15 +41977,14 @@ function registerTerminalSettingsRoutes(ctx, deps) {
 }
 function toTerminalSettingsState(data) {
   return {
-    replaceSystemPrompt: data.replaceSystemPrompt ?? false,
     enableMetaphor: data.enableMetaphor ?? false
   };
 }
 function isTerminalSettingsBody(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-  if (Object.keys(value).length !== 2) return false;
+  if (Object.keys(value).length !== 1) return false;
   const body = value;
-  return typeof body.replaceSystemPrompt === "boolean" && typeof body.enableMetaphor === "boolean";
+  return typeof body.enableMetaphor === "boolean";
 }
 function isJsonRequest(req) {
   const contentType = req.headers["content-type"];
@@ -41846,6 +42076,7 @@ var routes_default = definePlugin({
     });
     ctx.host.lifecycle.registerCleanup(unsubscribeDelete);
     registerShellRoutes(ctx, runtime);
+    registerGlobalShellRoutes(ctx, runtime);
     registerTerminalSettingsRoutes(ctx, { globalOptionsService: infraServices.globalOptionsService });
     const agentLaunchKinds = registerAgentRoutes(ctx, runtime, {
       globalOptionsService: infraServices.globalOptionsService