@dotobokuri/fleet-console 1.22.1 → 1.23.0

package/dist/fleet-plugins/terminal/routes.mjs

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import * as fs2 from 'fs';
 import fs2__default, { existsSync, accessSync, constants, mkdtempSync, writeFileSync, mkdirSync, rmSync, chmodSync, renameSync, readdirSync, readFileSync, openSync, closeSync, realpathSync, fstatSync, lstatSync, unlinkSync, statSync } from 'fs';
-import * as path27 from 'path';
-import path27__default, { dirname } from 'path';
+import * as path28 from 'path';
+import path28__default, { dirname } from 'path';
 import * as os3 from 'os';
 import os3__default, { homedir } from 'os';
 import crypto4, { createHash, randomUUID } from 'crypto';
@@ -25,22 +25,22 @@ var __export = (target, all) => {
 function definePlugin(definition) {
   return definition;
 }
-function registerRouter(ctx, path42, handler) {
-  ctx.registerRouter(normalizePath(path42), handler);
+function registerRouter(ctx, path43, handler) {
+  ctx.registerRouter(normalizePath(path43), handler);
 }
-function registerWsHandler(ctx, path42, handler) {
-  ctx.registerWsHandler(normalizePath(path42), handler);
+function registerWsHandler(ctx, path43, handler) {
+  ctx.registerWsHandler(normalizePath(path43), handler);
 }
 function registerLaunchCatalog(ctx, provider) {
   return ctx.host.operations.registerLaunchCatalog(ctx.pluginId, provider);
 }
-function normalizePath(path42) {
-  if (path42.length === 0 || path42 === "/") return "/";
-  return path42;
+function normalizePath(path43) {
+  if (path43.length === 0 || path43 === "/") return "/";
+  return path43;
 }
 var FLEET_DATA_DIR_NAME = ".fleet";
 function getFleetDataDir() {
-  return path27.join(os3.homedir(), FLEET_DATA_DIR_NAME);
+  return path28.join(os3.homedir(), FLEET_DATA_DIR_NAME);
 }
 var SECURE_DIR_MODE = 448;
 var SECURE_FILE_MODE = 384;
@@ -128,7 +128,7 @@ function cleanupTempFiles(dir, prefix, minAgeMs, now) {
     if (!entry.startsWith(prefix)) {
       continue;
     }
-    const tempPath = path27.join(dir, entry);
+    const tempPath = path28.join(dir, entry);
     try {
       const stat3 = fs2.lstatSync(tempPath);
       if (stat3?.isFile() && !stat3.isSymbolicLink() && now - stat3.mtimeMs >= minAgeMs) {
@@ -234,7 +234,7 @@ function writeLockOwner(lockDir, ownerFileName, startedAt) {
     hostname: os3.hostname(),
     startedAt
   };
-  const ownerPath = path27.join(lockDir, ownerFileName);
+  const ownerPath = path28.join(lockDir, ownerFileName);
   try {
     fs2.writeFileSync(ownerPath, JSON.stringify(owner), { encoding: "utf-8", mode: 384 });
   } catch (error51) {
@@ -243,7 +243,7 @@ function writeLockOwner(lockDir, ownerFileName, startedAt) {
   }
 }
 function readLockOwner(lockDir, ownerFileName) {
-  const ownerPath = path27.join(lockDir, ownerFileName);
+  const ownerPath = path28.join(lockDir, ownerFileName);
   try {
     return sanitizeLockOwner(JSON.parse(fs2.readFileSync(ownerPath, "utf-8")));
   } catch (error51) {
@@ -320,7 +320,7 @@ function readAuthStoreFile(filePath) {
 }
 
 // ../../packages/core-infra/src/auth/auth-storage.ts
-var DEFAULT_AUTH_PATH = path27.join(getFleetDataDir(), "auth.json");
+var DEFAULT_AUTH_PATH = path28.join(getFleetDataDir(), "auth.json");
 var AUTH_LOCK_OWNER_FILE_NAME = "owner.json";
 var AUTH_LOCK_TIMEOUT_MS = 5e3;
 function createAuthService(deps = {}) {
@@ -376,7 +376,7 @@ function createAuthService(deps = {}) {
       }
     },
     async setApiKey(providerId, key) {
-      const dir = path27.dirname(authPath);
+      const dir = path28.dirname(authPath);
       ensureSafeDirectory(dir);
       withAuthLock(authPath, lockDir, () => {
         const data = fs2.existsSync(authPath) ? readAuthStoreFile(authPath) : {};
@@ -411,7 +411,7 @@ function createDurableJsonStore(deps) {
   const now = deps.now ?? (() => Date.now());
   const mode = SECURE_FILE_MODE ;
   const minAgeMs = deps.tempCleanupMinAgeMs ?? DEFAULT_TEMP_FILE_MIN_AGE_MS;
-  const dir = path27.dirname(deps.filePath);
+  const dir = path28.dirname(deps.filePath);
   return {
     path: deps.filePath,
     load() {
@@ -495,8 +495,8 @@ var LOCK_OWNER_FILE_NAME = "owner";
 var TEMP_FILE_PREFIX = `.tmp-${GLOBAL_OPTIONS_FILE_NAME}-`;
 function createGlobalOptionsStore(deps = {}) {
   const dataDir = deps.dataDir ?? getFleetDataDir();
-  const optionsPath = path27.join(dataDir, GLOBAL_OPTIONS_FILE_NAME);
-  const lockDir = path27.join(dataDir, LOCK_DIR_NAME);
+  const optionsPath = path28.join(dataDir, GLOBAL_OPTIONS_FILE_NAME);
+  const lockDir = path28.join(dataDir, LOCK_DIR_NAME);
   const store2 = createDurableJsonStore({
     filePath: optionsPath,
     lockDir,
@@ -1398,10 +1398,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path42) {
-  if (!path42)
+function getElementAtPath(obj, path43) {
+  if (!path43)
     return obj;
-  return path42.reduce((acc, key) => acc?.[key], obj);
+  return path43.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -1810,11 +1810,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path42, issues) {
+function prefixIssues(path43, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path42);
+    iss.path.unshift(path43);
     return iss;
   });
 }
@@ -1961,16 +1961,16 @@ function flattenError(error51, mapper = (issue3) => issue3.message) {
 }
 function formatError(error51, mapper = (issue3) => issue3.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path42 = []) => {
+  const processError = (error52, path43 = []) => {
     for (const issue3 of error52.issues) {
       if (issue3.code === "invalid_union" && issue3.errors.length) {
-        issue3.errors.map((issues) => processError({ issues }, [...path42, ...issue3.path]));
+        issue3.errors.map((issues) => processError({ issues }, [...path43, ...issue3.path]));
       } else if (issue3.code === "invalid_key") {
-        processError({ issues: issue3.issues }, [...path42, ...issue3.path]);
+        processError({ issues: issue3.issues }, [...path43, ...issue3.path]);
       } else if (issue3.code === "invalid_element") {
-        processError({ issues: issue3.issues }, [...path42, ...issue3.path]);
+        processError({ issues: issue3.issues }, [...path43, ...issue3.path]);
       } else {
-        const fullpath = [...path42, ...issue3.path];
+        const fullpath = [...path43, ...issue3.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue3));
         } else {
@@ -1997,17 +1997,17 @@ function formatError(error51, mapper = (issue3) => issue3.message) {
 }
 function treeifyError(error51, mapper = (issue3) => issue3.message) {
   const result = { errors: [] };
-  const processError = (error52, path42 = []) => {
+  const processError = (error52, path43 = []) => {
     var _a3, _b;
     for (const issue3 of error52.issues) {
       if (issue3.code === "invalid_union" && issue3.errors.length) {
-        issue3.errors.map((issues) => processError({ issues }, [...path42, ...issue3.path]));
+        issue3.errors.map((issues) => processError({ issues }, [...path43, ...issue3.path]));
       } else if (issue3.code === "invalid_key") {
-        processError({ issues: issue3.issues }, [...path42, ...issue3.path]);
+        processError({ issues: issue3.issues }, [...path43, ...issue3.path]);
       } else if (issue3.code === "invalid_element") {
-        processError({ issues: issue3.issues }, [...path42, ...issue3.path]);
+        processError({ issues: issue3.issues }, [...path43, ...issue3.path]);
       } else {
-        const fullpath = [...path42, ...issue3.path];
+        const fullpath = [...path43, ...issue3.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue3));
           continue;
@@ -2039,8 +2039,8 @@ function treeifyError(error51, mapper = (issue3) => issue3.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path42 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path42) {
+  const path43 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path43) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -14704,13 +14704,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path42 = ref.slice(1).split("/").filter(Boolean);
-  if (path42.length === 0) {
+  const path43 = ref.slice(1).split("/").filter(Boolean);
+  if (path43.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path42[0] === defsKey) {
-    const key = path42[1];
+  if (path43[0] === defsKey) {
+    const key = path43[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -18883,7 +18883,7 @@ function createChildEnv(env, overlay) {
   return child;
 }
 function wrapWindowsShim(resolved, env, platform) {
-  if (platform !== "win32" || !WINDOWS_SHIM_EXTENSIONS.has(path27__default.extname(resolved).toLowerCase())) {
+  if (platform !== "win32" || !WINDOWS_SHIM_EXTENSIONS.has(path28__default.extname(resolved).toLowerCase())) {
     return { bin: resolved, prefixArgs: [] };
   }
   rejectCmdExpansionSensitiveShim(resolved);
@@ -18901,13 +18901,13 @@ function forceWindowsArgQuoting(value) {
   return `${value} `;
 }
 function findOnPath(bin, pathValue, pathExts, platform) {
-  const pathSeparator = platform === "win32" ? WINDOWS_PATH_SEPARATOR : path27__default.delimiter;
-  if (hasPathSeparator(bin, platform) || path27__default.isAbsolute(bin)) {
+  const pathSeparator = platform === "win32" ? WINDOWS_PATH_SEPARATOR : path28__default.delimiter;
+  if (hasPathSeparator(bin, platform) || path28__default.isAbsolute(bin)) {
     return resolveWithExtensions(bin, pathExts, platform);
   }
   for (const entry of pathValue.split(pathSeparator)) {
     const searchDir = entry.length === 0 ? "." : entry;
-    const candidate = resolveWithExtensions(path27__default.join(searchDir, bin), pathExts, platform);
+    const candidate = resolveWithExtensions(path28__default.join(searchDir, bin), pathExts, platform);
     if (candidate) {
       return candidate;
     }
@@ -18915,7 +18915,7 @@ function findOnPath(bin, pathValue, pathExts, platform) {
   return void 0;
 }
 function resolveWithExtensions(candidate, pathExts, platform) {
-  if (platform !== "win32" || path27__default.extname(candidate).length > 0) {
+  if (platform !== "win32" || path28__default.extname(candidate).length > 0) {
     return isAccessibleExecutable(candidate, platform) ? candidate : void 0;
   }
   for (const ext of pathExts) {
@@ -20329,11 +20329,24 @@ function getYoloModeId(cli) {
       return "yolo";
   }
 }
-function buildCodexDeveloperInstructionConfig(systemPrompt) {
-  if (!systemPrompt) {
-    return [];
+function buildCodexConfigEnv(systemPrompt, configOverrides, baseConfigJson) {
+  const map2 = parseBaseConfigMap(baseConfigJson);
+  for (const override of configOverrides ?? []) {
+    const eqIndex = override.indexOf("=");
+    if (eqIndex < 0) {
+      continue;
+    }
+    const key = override.slice(0, eqIndex);
+    const rawValue = override.slice(eqIndex + 1);
+    assignNestedKey(map2, key, parseOverrideValue(rawValue));
+  }
+  if (systemPrompt) {
+    map2.developer_instructions = systemPrompt;
+  }
+  if (Object.keys(map2).length === 0) {
+    return void 0;
   }
-  return [`developer_instructions="${escapeTomlBasicString(systemPrompt)}"`];
+  return JSON.stringify(map2);
 }
 function buildConfigOverrideArgs(overrides) {
   return overrides.flatMap((override) => ["-c", override]);
@@ -20361,27 +20374,44 @@ function mcpServerConfigsToAcp(servers) {
     headers: server.headers ?? []
   }));
 }
-function escapeTomlBasicString(value) {
-  return value.replace(/[\u0000-\u001f"\\\u007f]/g, (char) => {
-    switch (char) {
-      case "\b":
-        return "\\b";
-      case "	":
-        return "\\t";
-      case "\n":
-        return "\\n";
-      case "\f":
-        return "\\f";
-      case "\r":
-        return "\\r";
-      case '"':
-        return '\\"';
-      case "\\":
-        return "\\\\";
-      default:
-        return `\\u${char.charCodeAt(0).toString(16).padStart(4, "0")}`;
+function parseBaseConfigMap(baseConfigJson) {
+  if (!baseConfigJson) {
+    return {};
+  }
+  try {
+    const parsed = JSON.parse(baseConfigJson);
+    if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)) {
+      return parsed;
     }
-  });
+  } catch {
+  }
+  return {};
+}
+function parseOverrideValue(raw) {
+  try {
+    return JSON.parse(raw);
+  } catch {
+    if (raw.length >= 2 && raw.startsWith('"') && raw.endsWith('"')) {
+      return raw.slice(1, -1);
+    }
+    return raw;
+  }
+}
+function assignNestedKey(target, dottedKey, value) {
+  const segments = dottedKey.split(".");
+  let cursor = target;
+  for (let i = 0; i < segments.length - 1; i += 1) {
+    const segment = segments[i];
+    const existing = cursor[segment];
+    if (typeof existing === "object" && existing !== null && !Array.isArray(existing)) {
+      cursor = existing;
+    } else {
+      const nested = {};
+      cursor[segment] = nested;
+      cursor = nested;
+    }
+  }
+  cursor[segments[segments.length - 1]] = value;
 }
 
 // ../../packages/core-unified-agent/src/detector/CliDetector.ts
@@ -21642,12 +21672,12 @@ var CodexAppServerConnection = class extends BaseConnection {
     );
   }
   findRolloutPathForThreadId(threadId) {
-    const codexHome = this.codexHome ?? this.env.CODEX_HOME ?? path27.join(this.env.HOME ?? "", ".codex");
+    const codexHome = this.codexHome ?? this.env.CODEX_HOME ?? path28.join(this.env.HOME ?? "", ".codex");
     if (!codexHome) {
       return null;
     }
     for (const rootName of ["sessions", "archived_sessions"]) {
-      const found = findRolloutPath(path27.join(codexHome, rootName), threadId);
+      const found = findRolloutPath(path28.join(codexHome, rootName), threadId);
       if (found) {
         return found;
       }
@@ -21758,7 +21788,7 @@ function findRolloutPath(root, threadId) {
     return null;
   }
   for (const entry of fs2.readdirSync(root, { withFileTypes: true })) {
-    const entryPath = path27.join(root, entry.name);
+    const entryPath = path28.join(root, entry.name);
     if (entry.isDirectory()) {
       const found = findRolloutPath(entryPath, threadId);
       if (found) {
@@ -21776,13 +21806,11 @@ function findRolloutPath(root, threadId) {
 // ../../packages/core-unified-agent/src/client/UnifiedCodexAgentClient.ts
 var CODEX_TURN_LEVEL_CONFIG_KEYS = /* @__PURE__ */ new Set(["effort", "model"]);
 var CODEX_THREAD_POLICY_CONFIG_KEYS = /* @__PURE__ */ new Set(["approvalPolicy", "sandbox"]);
-var CODEX_ACP_PROMPT_FALLBACK = process.platform === "win32";
 var UnifiedCodexAgentClient = class extends EventEmitter {
   connection = null;
   sessionId = null;
   sessionCwd = null;
   currentSystemPrompt = null;
-  firstPromptPending = null;
   pendingOverrides = null;
   detector = new CliDetector();
   on(event, listener) {
@@ -21874,22 +21902,17 @@ var UnifiedCodexAgentClient = class extends EventEmitter {
   async connectAcp(options) {
     const cleanEnv = cleanEnvironment(process.env, options.env);
     const spawnConfig = createSpawnConfig("codex", options);
-    const developerInstructions = CODEX_ACP_PROMPT_FALLBACK ? void 0 : options.systemPrompt ?? void 0;
-    const args = [
-      ...spawnConfig.args,
-      ...this.buildStartupConfigArgs(
-        options.configOverrides,
-        void 0,
-        void 0,
-        developerInstructions
-      )
-    ];
+    const codexConfigEnv = buildCodexConfigEnv(
+      options.systemPrompt,
+      options.configOverrides,
+      cleanEnv.CODEX_CONFIG
+    );
     const connection = new AcpConnection({
       command: spawnConfig.command,
-      args,
+      args: spawnConfig.args,
       cliType: "codex",
       cwd: options.cwd,
-      env: { ...cleanEnv },
+      env: { ...cleanEnv, ...codexConfigEnv ? { CODEX_CONFIG: codexConfigEnv } : {} },
       requestTimeout: options.timeout ?? 6e5,
       initTimeout: options.timeout ?? 6e4,
       promptIdleTimeout: options.promptIdleTimeout ?? 6e5,
@@ -21986,17 +22009,7 @@ var UnifiedCodexAgentClient = class extends EventEmitter {
       if (!this.sessionId) {
         throw new Error("\uC5F0\uACB0\uB418\uC5B4 \uC788\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4");
       }
-      const systemPrompt = this.firstPromptPending;
-      if (!systemPrompt) {
-        return this.connection.sendPrompt(this.sessionId, content);
-      }
-      const userBlocks = typeof content === "string" ? [{ type: "text", text: content }] : content;
-      const response = await this.connection.sendPrompt(this.sessionId, [
-        { type: "text", text: systemPrompt },
-        ...userBlocks
-      ]);
-      this.firstPromptPending = null;
-      return response;
+      return this.connection.sendPrompt(this.sessionId, content);
     }
     this.applyPendingOverrides();
     const input = typeof content === "string" ? [{ type: "text", text: content, text_elements: [] }] : content.map((block) => "text" in block ? { type: "text", text: block.text, text_elements: [] } : { type: "text", text: JSON.stringify(block), text_elements: [] });
@@ -22078,8 +22091,6 @@ var UnifiedCodexAgentClient = class extends EventEmitter {
         mcpServers: this.resolveAcpMcpServers(mcpServers)
       });
       this.sessionId = sessionId;
-      this.currentSystemPrompt = null;
-      this.firstPromptPending = null;
       return;
     }
     if (mcpServers?.length) {
@@ -22116,7 +22127,6 @@ var UnifiedCodexAgentClient = class extends EventEmitter {
       const session = await this.connection.reconnectSession(targetCwd);
       this.sessionId = session.sessionId;
       this.sessionCwd = targetCwd;
-      this.firstPromptPending = this.currentSystemPrompt;
       return {
         cli: "codex",
         protocol: "acp",
@@ -22144,7 +22154,6 @@ var UnifiedCodexAgentClient = class extends EventEmitter {
     this.sessionId = session.sessionId;
     this.sessionCwd = options.cwd;
     this.currentSystemPrompt = options.systemPrompt ?? null;
-    this.firstPromptPending = CODEX_ACP_PROMPT_FALLBACK && !options.sessionId ? options.systemPrompt ?? null : null;
     this.pendingOverrides = {
       turnConfig: {},
       threadConfig: {}
@@ -22162,7 +22171,6 @@ var UnifiedCodexAgentClient = class extends EventEmitter {
     this.sessionId = null;
     this.sessionCwd = null;
     this.currentSystemPrompt = null;
-    this.firstPromptPending = null;
     this.pendingOverrides = null;
   }
   validateModelEffort(modelId, effort) {
@@ -22373,9 +22381,8 @@ var UnifiedCodexAgentClient = class extends EventEmitter {
         return "read-only";
     }
   }
-  buildStartupConfigArgs(overrides, servers, modeMapping, developerInstructions) {
+  buildStartupConfigArgs(overrides, servers, modeMapping) {
     const configArgs = [
-      ...buildCodexDeveloperInstructionConfig(developerInstructions),
       ...modeMapping ? [
         `approval_policy="${modeMapping.approvalPolicy}"`,
         `sandbox_mode="${modeMapping.sandbox}"`
@@ -25085,7 +25092,7 @@ function readRawCarriersOrDefaultStore() {
   return readCarriers();
 }
 function getCarriersFilePath() {
-  return path27.join(resolveStoreDir(), FILENAME);
+  return path28.join(resolveStoreDir(), FILENAME);
 }
 function updateCarriers(mutator) {
   withStoreLock(() => {
@@ -25099,7 +25106,7 @@ function updateCarriers(mutator) {
 function withStoreLock(operation) {
   const dir = resolveStoreDir();
   ensureSafeDirectory(dir);
-  const lockDir = path27.join(dir, LOCK_DIRNAME);
+  const lockDir = path28.join(dir, LOCK_DIRNAME);
   return withDirectoryLock(
     { lockDir, ownerFileName: LOCK_OWNER_FILENAME },
     operation
@@ -25112,7 +25119,7 @@ function readCarriers() {
   return readCarriersFromDir(resolveStoreDir());
 }
 function readCarriersFromDir(dir) {
-  const filePath = path27.join(dir, FILENAME);
+  const filePath = path28.join(dir, FILENAME);
   let fd;
   try {
     const stat3 = fs2.lstatSync(filePath);
@@ -25141,7 +25148,7 @@ function recordLastLocalWriteFingerprint(filePath, generation) {
 }
 function writeCarriers(s) {
   const dir = resolveStoreDir();
-  const filePath = path27.join(dir, FILENAME);
+  const filePath = path28.join(dir, FILENAME);
   const next = serializeFleetCarriers(s);
   writeAtomicSync(filePath, `${JSON.stringify(next, null, 2)}
 `, { fsync: false, mode: 420 });
@@ -25166,7 +25173,7 @@ function sanitizeFleetCarriers(value) {
 }
 function unlinkStaleSubagentModeFile(dir) {
   try {
-    fs2.unlinkSync(path27.join(dir, STALE_SUBAGENT_MODE_FILENAME));
+    fs2.unlinkSync(path28.join(dir, STALE_SUBAGENT_MODE_FILENAME));
   } catch {
   }
 }
@@ -32710,7 +32717,7 @@ function resolveDispatchCwd(rawCwd, fallbackCwd) {
   if (rawCwd === void 0) return { ok: true, cwd: fallbackCwd };
   const trimmed = rawCwd.trim();
   if (trimmed.length === 0) return { ok: true, cwd: fallbackCwd };
-  if (!path27__default.isAbsolute(trimmed)) {
+  if (!path28__default.isAbsolute(trimmed)) {
     return {
       ok: false,
       error: `Invalid cwd "${rawCwd}": must be an absolute path. Provide an absolute directory or omit cwd to use the host session cwd.`
@@ -33420,7 +33427,7 @@ function requireSystemPromptFile(context) {
 var TOML_BASIC_STRING_ESCAPE_PATTERN = /[\u0000-\u001f"\\\u007f]/g;
 var TOML_MULTILINE_CONTROL_PATTERN = new RegExp("[\\u0000-\\u0008\\u000b-\\u001f\\u007f]", "g");
 var TOML_MULTILINE_QUOTE_RUN_PATTERN = /"+/g;
-function escapeTomlBasicString2(value) {
+function escapeTomlBasicString(value) {
   return value.replace(TOML_BASIC_STRING_ESCAPE_PATTERN, (char) => {
     switch (char) {
       case "\b":
@@ -33493,9 +33500,9 @@ function buildCodexNativeArgs(context) {
     const bearerHeader = `Bearer ${server.bearerToken}`;
     args.push(
       "-c",
-      `${prefix}.url="${escapeTomlBasicString2(server.endpointUrl)}"`,
+      `${prefix}.url="${escapeTomlBasicString(server.endpointUrl)}"`,
       "-c",
-      `${prefix}.http_headers={"Authorization" = "${escapeTomlBasicString2(bearerHeader)}"}`,
+      `${prefix}.http_headers={"Authorization" = "${escapeTomlBasicString(bearerHeader)}"}`,
       "-c",
       `${prefix}.tool_timeout_sec=${CODEX_TOOL_TIMEOUT_SEC}`
     );
@@ -33606,7 +33613,7 @@ function writePrivateJson(filePath, value, rootBase) {
 function writePrivateFile(filePath, content, rootBase) {
   const resolvedBase = ensureRootBase(rootBase);
   ensurePathWithinRoot(resolvedBase, filePath);
-  ensureDirectorySegments(resolvedBase, path27__default.dirname(filePath));
+  ensureDirectorySegments(resolvedBase, path28__default.dirname(filePath));
   writeFileNoFollow(filePath, content);
   chmodBestEffort(filePath, FILE_MODE);
 }
@@ -33653,20 +33660,20 @@ function writeFileNoFollow(filePath, content) {
   }
 }
 function ensureRootBase(rootBase) {
-  const resolvedBase = path27__default.resolve(rootBase);
-  const anchor = findExistingDirectoryAnchor(path27__default.dirname(resolvedBase));
+  const resolvedBase = path28__default.resolve(rootBase);
+  const anchor = findExistingDirectoryAnchor(path28__default.dirname(resolvedBase));
   ensureDirectorySegments(anchor, resolvedBase);
   assertDirectorySafe(resolvedBase, "Plugin root base");
   return resolvedBase;
 }
 function assertRootBaseSafe(rootBase) {
-  const resolvedBase = path27__default.resolve(rootBase);
-  assertExistingSegmentsSafe(findExistingDirectoryAnchor(path27__default.dirname(resolvedBase)), resolvedBase);
+  const resolvedBase = path28__default.resolve(rootBase);
+  assertExistingSegmentsSafe(findExistingDirectoryAnchor(path28__default.dirname(resolvedBase)), resolvedBase);
   assertDirectorySafe(resolvedBase, "Plugin root base");
   return resolvedBase;
 }
 function findExistingDirectoryAnchor(targetPath) {
-  const resolvedTarget = path27__default.resolve(targetPath);
+  const resolvedTarget = path28__default.resolve(targetPath);
   let current = resolvedTarget;
   while (true) {
     try {
@@ -33674,7 +33681,7 @@ function findExistingDirectoryAnchor(targetPath) {
       return current;
     } catch (error51) {
       if (error51 instanceof Error && "code" in error51 && error51.code === "ENOENT") {
-        const parent = path27__default.dirname(current);
+        const parent = path28__default.dirname(current);
         if (parent === current) throw error51;
         current = parent;
         continue;
@@ -33693,17 +33700,17 @@ function assertDirectorySafe(dirPath, label) {
   }
 }
 function ensurePathWithinRoot(resolvedBase, candidatePath) {
-  const resolvedCandidate = path27__default.resolve(candidatePath);
-  const relative = path27__default.relative(resolvedBase, resolvedCandidate);
-  if (relative === "" || !relative.startsWith("..") && !path27__default.isAbsolute(relative)) return;
+  const resolvedCandidate = path28__default.resolve(candidatePath);
+  const relative = path28__default.relative(resolvedBase, resolvedCandidate);
+  if (relative === "" || !relative.startsWith("..") && !path28__default.isAbsolute(relative)) return;
   throw new Error(`Plugin path escapes root base: ${candidatePath}`);
 }
 function ensureDirectorySegments(resolvedBase, dirPath) {
-  const target = path27__default.resolve(dirPath);
-  const relative = path27__default.relative(resolvedBase, target);
+  const target = path28__default.resolve(dirPath);
+  const relative = path28__default.relative(resolvedBase, target);
   let current = resolvedBase;
-  for (const segment of relative.split(path27__default.sep).filter(Boolean)) {
-    current = path27__default.join(current, segment);
+  for (const segment of relative.split(path28__default.sep).filter(Boolean)) {
+    current = path28__default.join(current, segment);
     try {
       const stat3 = lstatSync(current);
       if (stat3.isSymbolicLink()) {
@@ -33724,11 +33731,11 @@ function ensureDirectorySegments(resolvedBase, dirPath) {
   }
 }
 function assertExistingSegmentsSafe(resolvedBase, targetPath) {
-  const target = path27__default.resolve(targetPath);
-  const relative = path27__default.relative(resolvedBase, target);
+  const target = path28__default.resolve(targetPath);
+  const relative = path28__default.relative(resolvedBase, target);
   let current = resolvedBase;
-  for (const segment of relative.split(path27__default.sep).filter(Boolean)) {
-    current = path27__default.join(current, segment);
+  for (const segment of relative.split(path28__default.sep).filter(Boolean)) {
+    current = path28__default.join(current, segment);
     const stat3 = lstatSync(current);
     if (stat3.isSymbolicLink()) {
       throw new Error(`Plugin path segment is a symlink: ${current}`);
@@ -33740,27 +33747,22 @@ function assertExistingSegmentsSafe(resolvedBase, targetPath) {
   }
 }
 function assertExistingParentSegmentsSafe(resolvedBase, targetPath) {
-  assertExistingSegmentsSafe(resolvedBase, path27__default.dirname(targetPath));
+  assertExistingSegmentsSafe(resolvedBase, path28__default.dirname(targetPath));
 }
 function assertSegmentRealpathWithinRoot(resolvedBase, segmentPath) {
   const baseRealpath = realpathSync(resolvedBase);
   const segmentRealpath = realpathSync(segmentPath);
-  const relative = path27__default.relative(baseRealpath, segmentRealpath);
-  if (relative === "" || !relative.startsWith("..") && !path27__default.isAbsolute(relative)) return;
+  const relative = path28__default.relative(baseRealpath, segmentRealpath);
+  if (relative === "" || !relative.startsWith("..") && !path28__default.isAbsolute(relative)) return;
   throw new Error(`Plugin path segment escapes root base: ${segmentPath}`);
 }
 
-// ../../packages/fleet-admiral/src/agent-cli/plugin/fleet.ts
-var CURSOR_DOCTRINE_RULE_FILE = "fleet-doctrine.mdc";
-var CURSOR_DOCTRINE_RULE_FRONTMATTER = `---
-description: Fleet Admiral operating doctrine. Always apply in Fleet-launched Cursor Agent sessions.
-globs:
-alwaysApply: true
----
-`;
-var CURSOR_DOCTRINE_RULE_PREAMBLE = `# Fleet Runtime Doctrine for Cursor Agent
+// ../../packages/fleet-admiral/src/agent-cli/doctrine-hook.ts
+var DOCTRINE_FILE_NAME = "doctrine.md";
+var DOCTRINE_HOOK_SCRIPT_NAME = "inject-doctrine.mjs";
+var CURSOR_DOCTRINE_PREAMBLE = `# Fleet Runtime Doctrine for Cursor Agent
 
-You are running as Cursor Agent inside Fleet. Cursor provides this file as a persistent rule, not as a native system prompt. For this Fleet-launched session, treat the embedded Fleet system prompt below as your active Fleet runtime doctrine.
+You are running as Cursor Agent inside Fleet. This context was injected through a Fleet sessionStart hook. Treat the embedded Fleet system prompt below as your active Fleet runtime doctrine.
 
 Priority and interpretation:
 
@@ -33774,13 +33776,39 @@ Priority and interpretation:
 
 ## Embedded Fleet System Prompt
 
-The following block is the Fleet system prompt content adapted for Cursor's rules mechanism. It is intentionally embedded verbatim after this wrapper.
+The following block is the Fleet system prompt content adapted for Cursor hook injection. It is intentionally embedded verbatim after this wrapper.
 
 <fleet-system-prompt>
 `;
-var CURSOR_DOCTRINE_RULE_FOOTER = `
+var CURSOR_DOCTRINE_FOOTER = `
 </fleet-system-prompt>
 `;
+var INJECT_DOCTRINE_HOOK_SCRIPT = `import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const pluginRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const doctrine = fs.readFileSync(path.join(pluginRoot, "${DOCTRINE_FILE_NAME}"), "utf8");
+process.stdout.write(JSON.stringify({ additional_context: doctrine }));
+`;
+function formatCursorDoctrine(doctrine) {
+  return `${CURSOR_DOCTRINE_PREAMBLE}${doctrine}${CURSOR_DOCTRINE_FOOTER}`;
+}
+function renderCursorDoctrineHookAssets(pluginRoot, doctrine, hookCommandRoot = pluginRoot) {
+  writePrivateFile(
+    path28__default.join(pluginRoot, DOCTRINE_FILE_NAME),
+    formatCursorDoctrine(doctrine),
+    pluginRoot
+  );
+  const scriptPath = path28__default.join(hookCommandRoot, "hooks", DOCTRINE_HOOK_SCRIPT_NAME);
+  writePrivateFile(path28__default.join(pluginRoot, "hooks", DOCTRINE_HOOK_SCRIPT_NAME), INJECT_DOCTRINE_HOOK_SCRIPT, pluginRoot);
+  return {
+    command: process.execPath,
+    args: [scriptPath]
+  };
+}
+
+// ../../packages/fleet-admiral/src/agent-cli/plugin/fleet.ts
 var assetBundle = {
   description: "Fleet carrier delegation and wiki evidence plugin",
   directoryName: "fleet",
@@ -33791,11 +33819,16 @@ var assetBundle = {
 };
 function renderAssetPluginRoot(pluginRoot, bundle, options) {
   renderEmbeddedSkillAssets(pluginRoot);
+  const doctrineHookExec = options.cliId === "cursor" && options.doctrine !== void 0 ? renderCursorDoctrineHookAssets(
+    pluginRoot,
+    options.doctrine,
+    options.installedPluginRoot ?? pluginRoot
+  ) : void 0;
   if (options.cliId === "claude") {
-    writePrivateJson(path27__default.join(pluginRoot, "hooks", "hooks.json"), claudeHooks(options), pluginRoot);
+    writePrivateJson(path28__default.join(pluginRoot, "hooks", "hooks.json"), claudeHooks(options), pluginRoot);
   }
   if (options.cliId === "cursor") {
-    renderCursorPluginRoot(pluginRoot, options);
+    renderCursorPluginRoot(pluginRoot, options, doctrineHookExec);
   }
 }
 function claudeHooks(options) {
@@ -33836,25 +33869,15 @@ function claudeCommandHook(hookExec) {
     type: "command"
   };
 }
-function renderCursorPluginRoot(pluginRoot, options) {
-  if (options.doctrine !== void 0) {
-    renderCursorDoctrineRule(pluginRoot, options.doctrine);
-  }
+function renderCursorPluginRoot(pluginRoot, options, doctrineHookExec) {
   if ((options.mcpServers ?? []).length > 0) {
-    writePrivateJson(path27__default.join(pluginRoot, "mcp.json"), cursorMcpConfig(options.mcpServers ?? []), pluginRoot);
+    writePrivateJson(path28__default.join(pluginRoot, "mcp.json"), cursorMcpConfig(options.mcpServers ?? []), pluginRoot);
   }
-  const hooks = cursorHooks(options);
+  const hooks = cursorHooks(options, doctrineHookExec);
   if (hooks !== void 0) {
-    writePrivateJson(path27__default.join(pluginRoot, "hooks", "hooks.json"), hooks, pluginRoot);
+    writePrivateJson(path28__default.join(pluginRoot, "hooks", "hooks.json"), hooks, pluginRoot);
   }
 }
-function renderCursorDoctrineRule(pluginRoot, doctrine) {
-  writePrivateFile(
-    path27__default.join(pluginRoot, "rules", CURSOR_DOCTRINE_RULE_FILE),
-    `${CURSOR_DOCTRINE_RULE_FRONTMATTER}${CURSOR_DOCTRINE_RULE_PREAMBLE}${doctrine}${CURSOR_DOCTRINE_RULE_FOOTER}`,
-    pluginRoot
-  );
-}
 function cursorMcpConfig(servers) {
   return {
     mcpServers: Object.fromEntries(
@@ -33868,8 +33891,8 @@ function cursorMcpConfig(servers) {
     )
   };
 }
-function cursorHooks(options) {
-  const sessionStartExecs = [options.captureSessionHookExec].filter((exec) => exec !== void 0);
+function cursorHooks(options, doctrineHookExec) {
+  const sessionStartExecs = [doctrineHookExec, options.captureSessionHookExec].filter((exec) => exec !== void 0);
   const beforeSubmitPromptExecs = [options.turnStartHookExec, options.autoNameHookExec].filter((exec) => exec !== void 0);
   const stopExecs = [options.turnEndHookExec].filter((exec) => exec !== void 0);
   if (sessionStartExecs.length === 0 && beforeSubmitPromptExecs.length === 0 && stopExecs.length === 0) return void 0;
@@ -33892,7 +33915,7 @@ function cursorCommandHook(hookExec, extraArgs = []) {
 }
 function renderEmbeddedSkillAssets(pluginRoot) {
   for (const asset of EMBEDDED_AGENT_CLI_SKILL_ASSETS) {
-    writePrivateFile(path27__default.join(pluginRoot, "skills", asset.relativePath), asset.content, pluginRoot);
+    writePrivateFile(path28__default.join(pluginRoot, "skills", asset.relativePath), asset.content, pluginRoot);
   }
 }
 var CONFIG_FILE_NAME = "config.toml";
@@ -33907,7 +33930,7 @@ function neutralizeCodexFleetPluginConfig(options) {
   mutateCodexConfigWithRetry(options, 0);
 }
 function mutateCodexConfigWithRetry(options, attempt) {
-  const configPath = path27__default.join(options.codexHome, CONFIG_FILE_NAME);
+  const configPath = path28__default.join(options.codexHome, CONFIG_FILE_NAME);
   const targetPath = resolveRealConfigPath(configPath);
   const snapshot = readConfigSnapshot(targetPath);
   const nextContent = patchCodexConfig(snapshot.content, options);
@@ -33928,7 +33951,7 @@ function resolveRealConfigPath(configPath) {
   } catch (error51) {
     if (!isNodeError(error51, "ENOENT")) throw error51;
     try {
-      return path27__default.join(realpathSync(path27__default.dirname(configPath)), path27__default.basename(configPath));
+      return path28__default.join(realpathSync(path28__default.dirname(configPath)), path28__default.basename(configPath));
     } catch (dirError) {
       if (isNodeError(dirError, "ENOENT")) return configPath;
       throw dirError;
@@ -33965,9 +33988,9 @@ function readConfigSnapshot(configPath) {
   }
 }
 function writeConfigIfUnchanged(configPath, snapshot, content) {
-  mkdirSync(path27__default.dirname(configPath), { recursive: true, mode: 448 });
+  mkdirSync(path28__default.dirname(configPath), { recursive: true, mode: 448 });
   assertConfigUnchanged(configPath, snapshot);
-  const tempPath = path27__default.join(path27__default.dirname(configPath), `.${path27__default.basename(configPath)}.${process.pid}.${Date.now()}.${Math.random().toString(16).slice(2)}.tmp`);
+  const tempPath = path28__default.join(path28__default.dirname(configPath), `.${path28__default.basename(configPath)}.${process.pid}.${Date.now()}.${Math.random().toString(16).slice(2)}.tmp`);
   let fd;
   try {
     fd = openSync(tempPath, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, CONFIG_FILE_MODE);
@@ -34215,7 +34238,7 @@ function ensureCodexPluginRegisteredOrThrow(registration, command, runCommand) {
     pluginKey
   });
   writePrivateFile(registration.hashPath, `${registration.contentHash}
-`, path27__default.dirname(registration.hashPath));
+`, path28__default.dirname(registration.hashPath));
 }
 function assertCommandSucceeded(label, result) {
   if (result.status === 0) return;
@@ -34223,7 +34246,7 @@ function assertCommandSucceeded(label, result) {
   throw new Error(`${label} failed${detail.length > 0 ? `: ${detail}` : ""}`);
 }
 function resolveCodexHome(env) {
-  return env.CODEX_HOME ?? path27__default.join(env.HOME ?? os3__default.homedir(), ".codex");
+  return env.CODEX_HOME ?? path28__default.join(env.HOME ?? os3__default.homedir(), ".codex");
 }
 function findMarketplaceEntries(result, marketplaceName) {
   return parseMarketplaceEntries(result).filter((entry) => entry.name === marketplaceName);
@@ -34239,7 +34262,7 @@ function parseMarketplaceEntries(result) {
   return entries;
 }
 function normalizeMarketplaceRoot(rootPath, cwd) {
-  const resolved = path27__default.resolve(cwd, rootPath);
+  const resolved = path28__default.resolve(cwd, rootPath);
   try {
     return realpathSync(resolved);
   } catch (error51) {
@@ -34263,7 +34286,7 @@ function readHash(hashPath) {
 }
 function removeFlatMarketplaceResidue(projectMarketplaceRoot) {
   for (const entry of FLAT_MARKETPLACE_FS_RESIDUE_ENTRIES) {
-    removePrivatePath(path27__default.join(projectMarketplaceRoot, entry), projectMarketplaceRoot);
+    removePrivatePath(path28__default.join(projectMarketplaceRoot, entry), projectMarketplaceRoot);
   }
 }
 
@@ -34323,7 +34346,7 @@ async function createAgentCliPlugin(options) {
     cleanup,
     codexRegistrations: options.cliId === "codex" ? renderableBundles.map(({ bundle, target }, index) => ({
       contentHash: contentHashes.get(target.root),
-      hashPath: path27__default.join(target.root, bundle.hashFileName),
+      hashPath: path28__default.join(target.root, bundle.hashFileName),
       marketplaceDir: target.root,
       marketplaceName: target.name,
       pluginName: bundle.name,
@@ -34340,7 +34363,7 @@ function resolveRenderablePluginBundles(fleetRoot) {
 function homeMarketplaceTarget(fleetRoot) {
   return {
     name: FLEET_MARKETPLACE_NAME,
-    root: path27__default.join(fleetRoot, MARKETPLACE_DIR_NAME)
+    root: path28__default.join(fleetRoot, MARKETPLACE_DIR_NAME)
   };
 }
 function groupRenderableBundlesByMarketplace(bundles) {
@@ -34356,24 +34379,24 @@ function groupRenderableBundlesByMarketplace(bundles) {
   return groups;
 }
 function renderPluginRoot(pluginRoot, bundle, options) {
-  const parentRoot = path27__default.dirname(pluginRoot);
+  const parentRoot = path28__default.dirname(pluginRoot);
   ensurePrivateDir(parentRoot, parentRoot);
   const stageParent = createStagingDir(parentRoot);
-  const stagedPluginRoot = path27__default.join(stageParent, path27__default.basename(pluginRoot));
+  const stagedPluginRoot = path28__default.join(stageParent, path28__default.basename(pluginRoot));
   try {
     ensurePrivateDir(stagedPluginRoot, stagedPluginRoot);
-    writePrivateJson(path27__default.join(stagedPluginRoot, ".claude-plugin", "plugin.json"), claudeManifest(bundle), stagedPluginRoot);
+    writePrivateJson(path28__default.join(stagedPluginRoot, ".claude-plugin", "plugin.json"), claudeManifest(bundle), stagedPluginRoot);
     switch (bundle.source) {
       case "asset":
         if (options.cliId === "claude") {
-          ensurePrivateDir(path27__default.join(stagedPluginRoot, "agents"), stagedPluginRoot);
+          ensurePrivateDir(path28__default.join(stagedPluginRoot, "agents"), stagedPluginRoot);
         }
-        ensurePrivateDir(path27__default.join(stagedPluginRoot, "skills"), stagedPluginRoot);
-        renderAssetPluginRoot(stagedPluginRoot, bundle, options);
+        ensurePrivateDir(path28__default.join(stagedPluginRoot, "skills"), stagedPluginRoot);
+        renderAssetPluginRoot(stagedPluginRoot, bundle, { ...options, installedPluginRoot: pluginRoot });
         break;
     }
-    writePrivateJson(path27__default.join(stagedPluginRoot, ".codex-plugin", "plugin.json"), codexManifest(bundle, stagedPluginRoot), stagedPluginRoot);
-    writePrivateJson(path27__default.join(stagedPluginRoot, ".cursor-plugin", "plugin.json"), cursorManifest(bundle, stagedPluginRoot), stagedPluginRoot);
+    writePrivateJson(path28__default.join(stagedPluginRoot, ".codex-plugin", "plugin.json"), codexManifest(bundle, stagedPluginRoot), stagedPluginRoot);
+    writePrivateJson(path28__default.join(stagedPluginRoot, ".cursor-plugin", "plugin.json"), cursorManifest(bundle, stagedPluginRoot), stagedPluginRoot);
     removePrivatePath(pluginRoot, parentRoot);
     renameSync(stagedPluginRoot, pluginRoot);
   } finally {
@@ -34385,13 +34408,13 @@ function renderMarketplaceRoot(target, bundles) {
   ensurePrivateDir(marketplaceRoot, marketplaceRoot);
   const stagedRoot = createStagingDir(marketplaceRoot);
   try {
-    writePrivateJson(path27__default.join(stagedRoot, ".agents", "plugins", "marketplace.json"), codexMarketplace(target, bundles), stagedRoot);
-    writePrivateJson(path27__default.join(stagedRoot, ".claude-plugin", "marketplace.json"), claudeMarketplace(target, bundles), stagedRoot);
-    writePrivateJson(path27__default.join(stagedRoot, ".cursor-plugin", "marketplace.json"), cursorMarketplace(target, bundles), stagedRoot);
+    writePrivateJson(path28__default.join(stagedRoot, ".agents", "plugins", "marketplace.json"), codexMarketplace(target, bundles), stagedRoot);
+    writePrivateJson(path28__default.join(stagedRoot, ".claude-plugin", "marketplace.json"), claudeMarketplace(target, bundles), stagedRoot);
+    writePrivateJson(path28__default.join(stagedRoot, ".cursor-plugin", "marketplace.json"), cursorMarketplace(target, bundles), stagedRoot);
     pruneMarketplaceRoot(target);
     pruneStalePluginDirs(target, bundles);
     for (const entry of readdirSync(stagedRoot)) {
-      renameSync(path27__default.join(stagedRoot, entry), path27__default.join(marketplaceRoot, entry));
+      renameSync(path28__default.join(stagedRoot, entry), path28__default.join(marketplaceRoot, entry));
     }
   } finally {
     cleanupPrivateRoot(stagedRoot, marketplaceRoot);
@@ -34399,22 +34422,22 @@ function renderMarketplaceRoot(target, bundles) {
 }
 function pruneMarketplaceRoot(target) {
   for (const entry of MARKETPLACE_PRUNE_ENTRIES) {
-    removePrivatePath(path27__default.join(target.root, entry), target.root);
+    removePrivatePath(path28__default.join(target.root, entry), target.root);
   }
 }
 function pruneStalePluginDirs(target, bundles) {
-  const pluginsDir = path27__default.join(target.root, PLUGIN_BUNDLES_DIR_NAME);
+  const pluginsDir = path28__default.join(target.root, PLUGIN_BUNDLES_DIR_NAME);
   if (!existsSync(pluginsDir)) return;
   const activeDirectoryNames = new Set(bundles.map((bundle) => bundle.directoryName));
   for (const entry of readdirSync(pluginsDir)) {
     if (activeDirectoryNames.has(entry)) continue;
-    removePrivatePath(path27__default.join(pluginsDir, entry), target.root);
+    removePrivatePath(path28__default.join(pluginsDir, entry), target.root);
   }
 }
 function buildContentHash(target) {
   const hash2 = crypto4.createHash("sha256");
   for (const filePath of listRenderableFiles(target)) {
-    const relativePath = path27__default.relative(target.root, filePath);
+    const relativePath = path28__default.relative(target.root, filePath);
     hash2.update(relativePath);
     hash2.update("\0");
     hash2.update(readFileSync(filePath));
@@ -34423,14 +34446,14 @@ function buildContentHash(target) {
   return hash2.digest("hex");
 }
 function createStagingDir(rootPath) {
-  const stageRoot = mkdtempSync(path27__default.join(rootPath, `.fleet-stage-${process.pid}-${Date.now()}-`));
+  const stageRoot = mkdtempSync(path28__default.join(rootPath, `.fleet-stage-${process.pid}-${Date.now()}-`));
   return stageRoot;
 }
 function listRenderableFiles(target) {
   const files = [];
   const ancestorRealDirs = /* @__PURE__ */ new Set();
   for (const entry of MARKETPLACE_MANAGED_ENTRIES) {
-    const entryPath = path27__default.join(target.root, entry);
+    const entryPath = path28__default.join(target.root, entry);
     if (!existsSync(entryPath)) continue;
     collectRenderableFiles(target.root, entryPath, files, ancestorRealDirs);
   }
@@ -34441,8 +34464,8 @@ function collectRenderableFiles(rootPath, currentPath, files, ancestorRealDirs)
   if (ancestorRealDirs.has(realDir)) return;
   ancestorRealDirs.add(realDir);
   for (const entry of readdirSync(currentPath)) {
-    const entryPath = path27__default.join(currentPath, entry);
-    const relativePath = path27__default.relative(rootPath, entryPath);
+    const entryPath = path28__default.join(currentPath, entry);
+    const relativePath = path28__default.relative(rootPath, entryPath);
     if (HASH_IGNORED_RELATIVE_PATHS.has(relativePath)) continue;
     const stat3 = lstatSync(entryPath);
     if (stat3.isSymbolicLink()) {
@@ -34519,7 +34542,7 @@ function cursorMarketplace(target, bundles) {
   };
 }
 function pluginRootForTarget(target, bundle) {
-  return path27__default.join(target.root, PLUGIN_BUNDLES_DIR_NAME, bundle.directoryName);
+  return path28__default.join(target.root, PLUGIN_BUNDLES_DIR_NAME, bundle.directoryName);
 }
 function marketplacePluginPath(target, bundle) {
   return `./${PLUGIN_BUNDLES_DIR_NAME}/${bundle.directoryName}`;
@@ -34546,7 +34569,7 @@ function cursorManifestVersion(bundle, pluginRoot) {
   hash2.update(bundle.description);
   hash2.update("\0");
   for (const filePath of listCursorEffectivePluginFiles(pluginRoot)) {
-    const relativePath = path27__default.relative(pluginRoot, filePath);
+    const relativePath = path28__default.relative(pluginRoot, filePath);
     hash2.update(relativePath);
     hash2.update("\0");
     hash2.update(readFileSync(filePath));
@@ -34561,7 +34584,7 @@ function codexManifestVersion(bundle, pluginRoot) {
   hash2.update(bundle.description);
   hash2.update("\0");
   for (const filePath of listCodexEffectivePluginFiles(pluginRoot)) {
-    const relativePath = path27__default.relative(pluginRoot, filePath);
+    const relativePath = path28__default.relative(pluginRoot, filePath);
     hash2.update(relativePath);
     hash2.update("\0");
     hash2.update(readFileSync(filePath));
@@ -34570,7 +34593,7 @@ function codexManifestVersion(bundle, pluginRoot) {
   return `0.0.0+${hash2.digest("hex").slice(0, 12)}`;
 }
 function listCodexEffectivePluginFiles(pluginRoot) {
-  const skillsPath = path27__default.join(pluginRoot, "skills");
+  const skillsPath = path28__default.join(pluginRoot, "skills");
   if (!existsSync(skillsPath)) return [];
   const files = [];
   collectRenderableFiles(pluginRoot, skillsPath, files, /* @__PURE__ */ new Set());
@@ -34578,8 +34601,8 @@ function listCodexEffectivePluginFiles(pluginRoot) {
 }
 function listCursorEffectivePluginFiles(pluginRoot) {
   const files = [];
-  for (const entry of ["skills", "rules", "hooks", "mcp.json"]) {
-    const entryPath = path27__default.join(pluginRoot, entry);
+  for (const entry of ["skills", "hooks", "doctrine.md", "mcp.json"]) {
+    const entryPath = path28__default.join(pluginRoot, entry);
     if (!existsSync(entryPath)) continue;
     const stat3 = lstatSync(entryPath);
     if (stat3.isFile()) {
@@ -34652,8 +34675,8 @@ async function injectAgentCliProfile(profile, options) {
         env: { ...profile.env }
       }, requireCodexCommandRunner(options.codexCommandRunner), options.withMarketplaceLock, {
         homeMarketplaceName: FLEET_MARKETPLACE_NAME,
-        homeMarketplaceRoot: path27__default.join(options.pluginRootDir ?? options.dataDir ?? getFleetDataDir(), "marketplace"),
-        projectMarketplaceRoot: path27__default.join(profile.cwd, ".fleet")
+        homeMarketplaceRoot: path28__default.join(options.pluginRootDir ?? options.dataDir ?? getFleetDataDir(), "marketplace"),
+        projectMarketplaceRoot: path28__default.join(profile.cwd, ".fleet")
       });
       if (cleanupWarning !== void 0) {
         launchWarnings.push(`Deprecated Codex plugin cleanup failed: ${cleanupWarning}`);
@@ -34716,19 +34739,19 @@ function buildAgentCliMcpServerConfigs(endpoints, tokens) {
   });
 }
 function writeSystemPromptFile(cliId, systemPrompt, onCleanup) {
-  const tempDir = mkdtempSync(path27__default.join(os3__default.tmpdir(), `fleet-${cliId}-`));
+  const tempDir = mkdtempSync(path28__default.join(os3__default.tmpdir(), `fleet-${cliId}-`));
   onCleanup(() => rmBestEffort(tempDir));
-  const filePath = path27__default.join(tempDir, "system-prompt.md");
+  const filePath = path28__default.join(tempDir, "system-prompt.md");
   writeFileSync(filePath, systemPrompt, { encoding: "utf8", flag: "wx", mode: SYSTEM_PROMPT_FILE_MODE });
   chmodBestEffort2(filePath, SYSTEM_PROMPT_FILE_MODE);
   return filePath;
 }
 function writeCodexFleetProfile(env, doctrine, pluginKeys, hookExecs) {
-  const codexHome = env.CODEX_HOME ?? path27__default.join(env.HOME ?? os3__default.homedir(), ".codex");
+  const codexHome = env.CODEX_HOME ?? path28__default.join(env.HOME ?? os3__default.homedir(), ".codex");
   mkdirSync(codexHome, { recursive: true });
   pruneLegacyCodexFleetProfiles(codexHome);
   const profileName = CODEX_FLEET_PROFILE_NAME;
-  const profilePath = path27__default.join(codexHome, CODEX_FLEET_PROFILE_FILE_NAME);
+  const profilePath = path28__default.join(codexHome, CODEX_FLEET_PROFILE_FILE_NAME);
   const hookTrustState = readCodexFleetHookTrustState(profilePath);
   writeFileNoFollow2(profilePath, [
     CODEX_FLEET_PROFILE_MARKER,
@@ -34742,7 +34765,7 @@ function writeCodexFleetProfile(env, doctrine, pluginKeys, hookExecs) {
     "hooks = true",
     "",
     ...pluginKeys.flatMap((pluginKey) => [
-      `[plugins."${escapeTomlBasicString2(pluginKey)}"]`,
+      `[plugins."${escapeTomlBasicString(pluginKey)}"]`,
       "enabled = true",
       ""
     ]),
@@ -34769,7 +34792,7 @@ function codexHooksConfig(hookExecs) {
 function codexHookHandlersInline(execs) {
   const handlers = execs.map((exec) => {
     const command = buildPosixShellCommand([exec.command, ...exec.args]);
-    return `{ type = "command", command = "${escapeTomlBasicString2(command)}" }`;
+    return `{ type = "command", command = "${escapeTomlBasicString(command)}" }`;
   }).join(", ");
   return `[{ hooks = [${handlers}] }]`;
 }
@@ -34832,7 +34855,7 @@ function pruneLegacyCodexFleetProfiles(codexHome) {
   }
   for (const entry of entries) {
     if (!CODEX_LEGACY_FLEET_PROFILE_FILE_NAME_PATTERN.test(entry)) continue;
-    const filePath = path27__default.join(codexHome, entry);
+    const filePath = path28__default.join(codexHome, entry);
     if (!isLegacyFleetCodexProfile(filePath)) continue;
     unlinkBestEffort2(filePath);
   }
@@ -35285,7 +35308,7 @@ function extractLegacyMarkdownWikiLinks(body, wikiDir, basePath) {
 }
 function resolveLegacyWikiTarget(target, wikiDir, basePath) {
   if (!target || target.startsWith("#")) return null;
-  if (path27__default.isAbsolute(target)) return null;
+  if (path28__default.isAbsolute(target)) return null;
   if (/^[a-z][a-z0-9+.-]*:/i.test(target)) return null;
   const withoutFragment = target.split("#", 1)[0]?.split("?", 1)[0] ?? "";
   if (!withoutFragment.endsWith(".md")) return null;
@@ -35295,12 +35318,12 @@ function resolveLegacyWikiTarget(target, wikiDir, basePath) {
   } catch {
     return null;
   }
-  const resolved = path27__default.resolve(path27__default.dirname(basePath), decodedTarget);
-  const relative = path27__default.relative(wikiDir, resolved);
-  if (!relative || relative.startsWith("..") || path27__default.isAbsolute(relative)) return null;
+  const resolved = path28__default.resolve(path28__default.dirname(basePath), decodedTarget);
+  const relative = path28__default.relative(wikiDir, resolved);
+  if (!relative || relative.startsWith("..") || path28__default.isAbsolute(relative)) return null;
   return {
     target,
-    entryId: path27__default.basename(relative, ".md")
+    entryId: path28__default.basename(relative, ".md")
   };
 }
 
@@ -35560,18 +35583,18 @@ Always read \`schema/wiki-schema.md\` directly before composing or revising entr
 `;
 async function ensureWorkspaceSchema(paths) {
   await mkdir(paths.schemaDir, { recursive: true });
-  await writeDefaultFileIfMissing(path27__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME), DEFAULT_WORKSPACE_SCHEMA_AGENTS);
-  await writeDefaultFileIfMissing(path27__default.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME), DEFAULT_WORKSPACE_WIKI_SCHEMA);
+  await writeDefaultFileIfMissing(path28__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME), DEFAULT_WORKSPACE_SCHEMA_AGENTS);
+  await writeDefaultFileIfMissing(path28__default.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME), DEFAULT_WORKSPACE_WIKI_SCHEMA);
   await writeDefaultFileIfMissing(buildTemplatePath(paths, "prd"), DEFAULT_TEMPLATE_PRD);
   return readWorkspaceSchemaSummary(paths);
 }
 async function ensureWorkspaceDoctrine(paths) {
   await mkdir(paths.root, { recursive: true });
-  await writeDefaultFileIfMissing(path27__default.join(paths.root, WORKSPACE_KNOWLEDGE_AGENTS_FILENAME), DEFAULT_WORKSPACE_KNOWLEDGE_AGENTS);
+  await writeDefaultFileIfMissing(path28__default.join(paths.root, WORKSPACE_KNOWLEDGE_AGENTS_FILENAME), DEFAULT_WORKSPACE_KNOWLEDGE_AGENTS);
 }
 async function readWorkspaceSchemaSummary(paths) {
-  const agentsPath = path27__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME);
-  const wikiSchemaPath = path27__default.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME);
+  const agentsPath = path28__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME);
+  const wikiSchemaPath = path28__default.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME);
   const wikiSchemaContent = await tryReadFile(wikiSchemaPath);
   const templates = await scanTemplates(paths);
   if (wikiSchemaContent === null) {
@@ -35610,7 +35633,7 @@ async function scanTemplates(paths) {
     if (!entry.name.startsWith(WORKSPACE_TEMPLATE_PREFIX) || !entry.name.endsWith(WORKSPACE_TEMPLATE_SUFFIX)) continue;
     const id = entry.name.slice(WORKSPACE_TEMPLATE_PREFIX.length, -WORKSPACE_TEMPLATE_SUFFIX.length);
     if (!id) continue;
-    const filePath = path27__default.join(paths.schemaDir, entry.name);
+    const filePath = path28__default.join(paths.schemaDir, entry.name);
     try {
       const parsed = parseTemplateMarkdown(await readFile(filePath, "utf8"));
       templates.push({
@@ -35644,7 +35667,7 @@ async function validateTemplateCompliance(paths, templateId, body) {
   }
 }
 function inferTemplateIdFromTarget(target, knownTemplateIds) {
-  const basename = path27__default.basename(target, ".md");
+  const basename = path28__default.basename(target, ".md");
   const ids = knownTemplateIds ?? DEFAULT_TEMPLATE_IDS;
   const sorted = [...ids].sort((a, b) => b.length - a.length);
   for (const id of sorted) {
@@ -35673,7 +35696,7 @@ function extractSchemaSummary(content) {
   return lines.find((line) => line.length > 0 && !line.startsWith("#")) ?? "Workspace schema is present.";
 }
 function buildTemplatePath(paths, id) {
-  return path27__default.join(paths.schemaDir, `${WORKSPACE_TEMPLATE_PREFIX}${id}${WORKSPACE_TEMPLATE_SUFFIX}`);
+  return path28__default.join(paths.schemaDir, `${WORKSPACE_TEMPLATE_PREFIX}${id}${WORKSPACE_TEMPLATE_SUFFIX}`);
 }
 function parseTemplateMarkdown(content) {
   const normalized = content.replace(/\r\n/g, "\n");
@@ -35700,16 +35723,16 @@ function isAlreadyExistsError(error51) {
 
 // ../../packages/fleet-wiki/src/paths.ts
 function resolveMemoryPaths(cwd) {
-  const root = path27__default.join(cwd, KNOWLEDGE_ROOT_DIRNAME);
+  const root = path28__default.join(cwd, KNOWLEDGE_ROOT_DIRNAME);
   return {
     root,
-    rawDir: path27__default.join(root, RAW_DIRNAME),
-    wikiDir: path27__default.join(root, WIKI_DIRNAME),
-    schemaDir: path27__default.join(root, SCHEMA_DIRNAME),
-    queueDir: path27__default.join(root, QUEUE_DIRNAME),
-    archiveDir: path27__default.join(root, ARCHIVE_DIRNAME),
-    conflictsDir: path27__default.join(root, CONFLICTS_DIRNAME),
-    indexFile: path27__default.join(root, INDEX_FILENAME)
+    rawDir: path28__default.join(root, RAW_DIRNAME),
+    wikiDir: path28__default.join(root, WIKI_DIRNAME),
+    schemaDir: path28__default.join(root, SCHEMA_DIRNAME),
+    queueDir: path28__default.join(root, QUEUE_DIRNAME),
+    archiveDir: path28__default.join(root, ARCHIVE_DIRNAME),
+    conflictsDir: path28__default.join(root, CONFLICTS_DIRNAME),
+    indexFile: path28__default.join(root, INDEX_FILENAME)
   };
 }
 async function ensureMemoryRoot(paths) {
@@ -35724,10 +35747,10 @@ async function ensureMemoryRoot(paths) {
   await ensureWorkspaceDoctrine(paths);
 }
 function getIndexMarkdownFile(paths) {
-  return path27__default.join(paths.wikiDir, INDEX_MD_FILENAME);
+  return path28__default.join(paths.wikiDir, INDEX_MD_FILENAME);
 }
 function getLogFile(paths) {
-  return path27__default.join(paths.root, LOG_MD_FILENAME);
+  return path28__default.join(paths.root, LOG_MD_FILENAME);
 }
 
 // ../../packages/fleet-wiki/src/log.ts
@@ -35891,12 +35914,12 @@ async function readWikiEntry(id, paths) {
   const index = await loadIndex(paths);
   const indexed = index[id];
   if (indexed) {
-    const resolved = path27__default.resolve(paths.root, indexed.path);
-    const rel = path27__default.relative(paths.wikiDir, resolved);
-    if (!rel || rel.startsWith("..") || path27__default.isAbsolute(rel)) return null;
+    const resolved = path28__default.resolve(paths.root, indexed.path);
+    const rel = path28__default.relative(paths.wikiDir, resolved);
+    if (!rel || rel.startsWith("..") || path28__default.isAbsolute(rel)) return null;
     return readMarkdownFile(resolved);
   }
-  const fallbackPath = path27__default.join(paths.wikiDir, `${id}.md`);
+  const fallbackPath = path28__default.join(paths.wikiDir, `${id}.md`);
   if (await pathExists(fallbackPath)) {
     return readMarkdownFile(fallbackPath);
   }
@@ -35907,20 +35930,20 @@ async function readWikiEntry(id, paths) {
 async function writeWikiEntryAtTarget(entry, target, paths) {
   await ensureMemoryRoot(paths);
   assertSafeEntryId(entry.id);
-  const absoluteTarget = path27__default.resolve(paths.root, target);
-  const relativeTarget = path27__default.relative(paths.wikiDir, absoluteTarget);
-  if (!relativeTarget || relativeTarget.startsWith("..") || path27__default.isAbsolute(relativeTarget)) {
+  const absoluteTarget = path28__default.resolve(paths.root, target);
+  const relativeTarget = path28__default.relative(paths.wikiDir, absoluteTarget);
+  if (!relativeTarget || relativeTarget.startsWith("..") || path28__default.isAbsolute(relativeTarget)) {
     throw new Error(`[fleet-wiki] wiki target escapes wiki/: ${target}`);
   }
   if (!absoluteTarget.endsWith(".md")) {
     throw new Error(`[fleet-wiki] wiki target must end with .md: ${target}`);
   }
-  if (path27__default.basename(absoluteTarget, ".md") !== entry.id) {
+  if (path28__default.basename(absoluteTarget, ".md") !== entry.id) {
     throw new Error("wiki patch body id must match target filename");
   }
-  await mkdir(path27__default.dirname(absoluteTarget), { recursive: true });
+  await mkdir(path28__default.dirname(absoluteTarget), { recursive: true });
   await writeMarkdownAtomic(absoluteTarget, serializeWikiEntry(entry), paths);
-  return path27__default.join("wiki", relativeTarget).replaceAll(path27__default.sep, "/");
+  return path28__default.join("wiki", relativeTarget).replaceAll(path28__default.sep, "/");
 }
 async function writeRawSourceEntry(entry, paths) {
   await ensureMemoryRoot(paths);
@@ -35939,11 +35962,11 @@ async function writeRawSourceEntry(entry, paths) {
     },
     entry.content
   );
-  await writeMarkdownAtomic(path27__default.join(paths.root, relativePath), content, paths);
+  await writeMarkdownAtomic(path28__default.join(paths.root, relativePath), content, paths);
   return relativePath;
 }
 async function readRawSourceEntry(rawSourceRef, paths) {
-  const absolutePath = path27__default.resolve(paths.root, rawSourceRef);
+  const absolutePath = path28__default.resolve(paths.root, rawSourceRef);
   assertWithinRawDir(absolutePath, paths);
   const parsed = parseMarkdown(await readFile(absolutePath, "utf8"));
   return {
@@ -36134,8 +36157,8 @@ function computeContentHash(content) {
   return crypto4.createHash("sha256").update(content, "utf8").digest("hex").slice(0, 8);
 }
 function assertWithinRawDir(absolutePath, paths) {
-  const relative = path27__default.relative(paths.rawDir, absolutePath);
-  if (!relative || relative.startsWith("..") || path27__default.isAbsolute(relative)) {
+  const relative = path28__default.relative(paths.rawDir, absolutePath);
+  if (!relative || relative.startsWith("..") || path28__default.isAbsolute(relative)) {
     throw new Error(`[fleet-wiki] raw source ref escapes raw/: ${absolutePath}`);
   }
 }
@@ -36191,7 +36214,7 @@ function parseWikiEntry(content) {
 async function listWikiRecords(paths) {
   return listMarkdownEntriesRecursive(paths.wikiDir, paths, (content, filePath) => ({
     entry: parseWikiEntry(content),
-    path: path27__default.relative(paths.root, filePath).replaceAll(path27__default.sep, "/")
+    path: path28__default.relative(paths.root, filePath).replaceAll(path28__default.sep, "/")
   }));
 }
 async function listMarkdownEntriesRecursive(dirPath, paths, parser) {
@@ -36204,7 +36227,7 @@ async function listMarkdownEntriesRecursive(dirPath, paths, parser) {
   }
   const sortedEntries = entries.sort((left, right) => left.name.localeCompare(right.name));
   for (const entry of sortedEntries) {
-    const filePath = path27__default.join(dirPath, entry.name);
+    const filePath = path28__default.join(dirPath, entry.name);
     if (entry.isDirectory()) {
       items.push(...await listMarkdownEntriesRecursive(filePath, paths, parser));
       continue;
@@ -36342,8 +36365,8 @@ async function writeJsonAtomic(filePath, value, paths) {
 }
 async function writeAtomic(filePath, content, paths) {
   await ensureMemoryRoot(paths);
-  const tempPath = path27__default.join(
-    path27__default.dirname(filePath),
+  const tempPath = path28__default.join(
+    path28__default.dirname(filePath),
     `.tmp-${process.pid}-${Date.now()}-${crypto4.randomUUID()}-${os3__default.hostname()}`
   );
   await writeFile(tempPath, content, "utf8");
@@ -36390,7 +36413,7 @@ async function enhancedSearch(paths, options) {
   for (const entry of entries) {
     if (!index[entry.id]) {
       index[entry.id] = {
-        path: path27__default.join("wiki", `${entry.id}.md`),
+        path: path28__default.join("wiki", `${entry.id}.md`),
         title: entry.title,
         tags: entry.tags,
         updated: entry.updated
@@ -36526,7 +36549,7 @@ function toEnhancedHit(entry, signals) {
     score: enhancedScore,
     reason: signals.legacyReason ?? "body",
     excerpt,
-    path: path27__default.join("wiki", `${entry.id}.md`),
+    path: path28__default.join("wiki", `${entry.id}.md`),
     tags: entry.tags,
     updated: entry.updated,
     version: entry.version,
@@ -36722,7 +36745,7 @@ function toRankedHit(entry, reason, detail, graphBoost, backlinksById) {
     score: basePriority * 100 + statusPriority * 10 + graphScore + (detail.tagBoost ?? 0),
     reason,
     excerpt,
-    path: path27__default.join("wiki", `${entry.id}.md`),
+    path: path28__default.join("wiki", `${entry.id}.md`),
     tags: entry.tags,
     updated: entry.updated,
     version: entry.version,
@@ -37150,15 +37173,15 @@ var PATCH_SET_DIRNAME = "_sets";
 var PATCH_SET_META_FILENAME = PATCH_META_FILENAME;
 function getPatchSetDir(paths, patchSetId) {
   assertSafePatchSetId(patchSetId);
-  const patchSetDir = path27__default.join(paths.queueDir, PATCH_SET_DIRNAME, patchSetId);
-  const relative = path27__default.relative(path27__default.join(paths.queueDir, PATCH_SET_DIRNAME), patchSetDir);
-  if (!relative || relative.startsWith("..") || path27__default.isAbsolute(relative)) {
+  const patchSetDir = path28__default.join(paths.queueDir, PATCH_SET_DIRNAME, patchSetId);
+  const relative = path28__default.relative(path28__default.join(paths.queueDir, PATCH_SET_DIRNAME), patchSetDir);
+  if (!relative || relative.startsWith("..") || path28__default.isAbsolute(relative)) {
     throw new Error(`[fleet-wiki] patch set id escapes queue/_sets: ${patchSetId}`);
   }
   return patchSetDir;
 }
 function getPatchSetMetaFile(paths, patchSetId) {
-  return path27__default.join(getPatchSetDir(paths, patchSetId), PATCH_SET_META_FILENAME);
+  return path28__default.join(getPatchSetDir(paths, patchSetId), PATCH_SET_META_FILENAME);
 }
 function buildPatchSetId(createdAt, sourceRef) {
   const compact = createdAt.replace(/[:.]/g, "-");
@@ -37191,7 +37214,7 @@ async function createConflict(input, paths) {
   await ensureMemoryRoot(paths);
   const now = input.now ?? /* @__PURE__ */ new Date();
   const conflictId = buildConflictId(now, input.wikiId, input.reason, input.proposed);
-  const conflictDir = path27__default.join(paths.conflictsDir, conflictId);
+  const conflictDir = path28__default.join(paths.conflictsDir, conflictId);
   await mkdir(conflictDir, { recursive: true });
   const meta3 = {
     id: conflictId,
@@ -37211,13 +37234,13 @@ async function createConflict(input, paths) {
     currentHash: input.currentHash,
     warnings: input.warnings
   };
-  await writeJsonFile(path27__default.join(conflictDir, CONFLICT_META_FILENAME), meta3, paths);
-  await writePatchFile(path27__default.join(conflictDir, CONFLICT_PROPOSED_FILENAME), input.proposed, paths);
+  await writeJsonFile(path28__default.join(conflictDir, CONFLICT_META_FILENAME), meta3, paths);
+  await writePatchFile(path28__default.join(conflictDir, CONFLICT_PROPOSED_FILENAME), input.proposed, paths);
   if (input.current !== void 0) {
-    await writePatchFile(path27__default.join(conflictDir, CONFLICT_CURRENT_FILENAME), input.current, paths);
+    await writePatchFile(path28__default.join(conflictDir, CONFLICT_CURRENT_FILENAME), input.current, paths);
   }
   if (input.rawSource !== void 0) {
-    await writePatchFile(path27__default.join(conflictDir, CONFLICT_RAW_SOURCE_FILENAME), input.rawSource, paths);
+    await writePatchFile(path28__default.join(conflictDir, CONFLICT_RAW_SOURCE_FILENAME), input.rawSource, paths);
   }
   return {
     meta: meta3,
@@ -37231,7 +37254,7 @@ async function listConflicts(paths) {
   const metas = [];
   for (const id of ids) {
     try {
-      metas.push(await readJsonFile2(path27__default.join(paths.conflictsDir, id, CONFLICT_META_FILENAME)));
+      metas.push(await readJsonFile2(path28__default.join(paths.conflictsDir, id, CONFLICT_META_FILENAME)));
     } catch {
       continue;
     }
@@ -37240,13 +37263,13 @@ async function listConflicts(paths) {
 }
 async function readConflict(conflictId, paths) {
   const conflictDir = resolveConflictDir(conflictId, paths);
-  const meta3 = await readJsonFile2(path27__default.join(conflictDir, CONFLICT_META_FILENAME));
-  const currentPath = path27__default.join(conflictDir, CONFLICT_CURRENT_FILENAME);
-  const rawSourcePath = path27__default.join(conflictDir, CONFLICT_RAW_SOURCE_FILENAME);
+  const meta3 = await readJsonFile2(path28__default.join(conflictDir, CONFLICT_META_FILENAME));
+  const currentPath = path28__default.join(conflictDir, CONFLICT_CURRENT_FILENAME);
+  const rawSourcePath = path28__default.join(conflictDir, CONFLICT_RAW_SOURCE_FILENAME);
   return {
     meta: meta3,
     current: await pathExists(currentPath) ? await readPatchFile(currentPath) : void 0,
-    proposed: await readPatchFile(path27__default.join(conflictDir, CONFLICT_PROPOSED_FILENAME)),
+    proposed: await readPatchFile(path28__default.join(conflictDir, CONFLICT_PROPOSED_FILENAME)),
     rawSource: await pathExists(rawSourcePath) ? await readPatchFile(rawSourcePath) : void 0
   };
 }
@@ -37265,9 +37288,9 @@ function sanitizeConflictToken(value) {
   return value.toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 64) || "unknown";
 }
 function resolveConflictDir(conflictId, paths) {
-  const conflictDir = path27__default.resolve(paths.conflictsDir, conflictId);
-  const relative = path27__default.relative(paths.conflictsDir, conflictDir);
-  if (!relative || relative.startsWith("..") || path27__default.isAbsolute(relative)) {
+  const conflictDir = path28__default.resolve(paths.conflictsDir, conflictId);
+  const relative = path28__default.relative(paths.conflictsDir, conflictDir);
+  if (!relative || relative.startsWith("..") || path28__default.isAbsolute(relative)) {
     throw new Error(`[fleet-wiki] conflict id escapes conflicts/: ${conflictId}`);
   }
   return conflictDir;
@@ -37305,11 +37328,11 @@ async function validatePatch(patch, paths) {
   if (!target || !summary || !proposer || !created) throw new Error("patch frontmatter is incomplete");
   if (summary.length > 120) throw new Error("patch summary exceeds 120 chars");
   assertCanonicalPatchTarget(target);
-  const absoluteTarget = path27__default.resolve(paths.root, target);
-  if (!absoluteTarget.startsWith(`${paths.root}${path27__default.sep}`) && absoluteTarget !== paths.root) {
+  const absoluteTarget = path28__default.resolve(paths.root, target);
+  if (!absoluteTarget.startsWith(`${paths.root}${path28__default.sep}`) && absoluteTarget !== paths.root) {
     throw new Error("patch target escapes wiki root");
   }
-  if (!absoluteTarget.startsWith(`${paths.wikiDir}${path27__default.sep}`)) throw new Error("wiki patch must target wiki/");
+  if (!absoluteTarget.startsWith(`${paths.wikiDir}${path28__default.sep}`)) throw new Error("wiki patch must target wiki/");
   assertNoSymlinkPathComponents(target, paths);
   if (op === "create_wiki" && await pathExists(absoluteTarget)) {
     throw new Error(
@@ -37330,19 +37353,19 @@ async function applyPatch(patch, paths) {
 async function enqueuePatch(patch, paths, metaOverrides) {
   await ensureMemoryRoot(paths);
   const patchId = buildPatchId(patch.frontmatter.created, patch.frontmatter.summary, patch.frontmatter.target, patch.body);
-  const queueDir = path27__default.join(paths.queueDir, patchId);
+  const queueDir = path28__default.join(paths.queueDir, patchId);
   if (await pathExists(queueDir)) {
     throw new Error(`[fleet-wiki] patch id collision: ${patchId} - this should never happen with target+body hashing`);
   }
   await mkdir(queueDir, { recursive: true });
-  await writePatchFile(path27__default.join(queueDir, PATCH_FILENAME), serializePatch(patch), paths);
+  await writePatchFile(path28__default.join(queueDir, PATCH_FILENAME), serializePatch(patch), paths);
   const meta3 = {
     id: patchId,
     status: "pending",
     createdAt: patch.frontmatter.created,
     ...metaOverrides
   };
-  await writeJsonFile(path27__default.join(queueDir, PATCH_META_FILENAME), meta3, paths);
+  await writeJsonFile(path28__default.join(queueDir, PATCH_META_FILENAME), meta3, paths);
   await appendLog(paths, "patch enqueued", {
     patch_id: patchId,
     patch_set_id: meta3.patch_set_id ?? null,
@@ -37360,7 +37383,7 @@ async function listQueue(paths) {
   for (const id of ids) {
     if (id === "_sets") continue;
     try {
-      const meta3 = await readJsonFile2(path27__default.join(paths.queueDir, id, PATCH_META_FILENAME));
+      const meta3 = await readJsonFile2(path28__default.join(paths.queueDir, id, PATCH_META_FILENAME));
       results.push({ id, meta: meta3 });
     } catch {
       continue;
@@ -37385,17 +37408,17 @@ async function resolveQueueSelection(id, paths) {
 }
 async function showQueue(id, paths) {
   const selection = await resolveQueueSelection(id, paths);
-  const queueDir = path27__default.join(paths.queueDir, selection.id);
-  const patch = await parsePatch(await readPatchFile(path27__default.join(queueDir, PATCH_FILENAME)));
-  const meta3 = await readJsonFile2(path27__default.join(queueDir, PATCH_META_FILENAME));
+  const queueDir = path28__default.join(paths.queueDir, selection.id);
+  const patch = await parsePatch(await readPatchFile(path28__default.join(queueDir, PATCH_FILENAME)));
+  const meta3 = await readJsonFile2(path28__default.join(queueDir, PATCH_META_FILENAME));
   return { patch, meta: meta3 };
 }
 async function rewriteQueuedPatch(id, paths, patch, meta3, expectedPatchHash) {
   assertSafeQueueId(id);
   return withPatchEditLock(paths, id, async () => {
-    const queueDir = path27__default.join(paths.queueDir, id);
+    const queueDir = path28__default.join(paths.queueDir, id);
     if (expectedPatchHash !== void 0) {
-      const currentMarkdown = await readPatchFile(path27__default.join(queueDir, PATCH_FILENAME));
+      const currentMarkdown = await readPatchFile(path28__default.join(queueDir, PATCH_FILENAME));
       const currentHash = computeContentHash(currentMarkdown);
       if (currentHash !== expectedPatchHash) {
         throw new Error(`[fleet-wiki] wiki_patch_edit stale base_patch_hash: expected ${currentHash}, got ${expectedPatchHash}`);
@@ -37404,8 +37427,8 @@ async function rewriteQueuedPatch(id, paths, patch, meta3, expectedPatchHash) {
     const patchMarkdown = serializePatch(patch);
     const patchHash = computeContentHash(patchMarkdown);
     const nextMeta = { ...meta3, lastEditHash: patchHash };
-    await writePatchFile(path27__default.join(queueDir, PATCH_FILENAME), patchMarkdown, paths);
-    await writeJsonFile(path27__default.join(queueDir, PATCH_META_FILENAME), nextMeta, paths);
+    await writePatchFile(path28__default.join(queueDir, PATCH_FILENAME), patchMarkdown, paths);
+    await writeJsonFile(path28__default.join(queueDir, PATCH_META_FILENAME), nextMeta, paths);
     return patchHash;
   });
 }
@@ -37429,8 +37452,8 @@ async function approvePatch(id, paths) {
           rawSourceRef: meta3.rawSourceRef,
           warnings: meta3.warnings
         });
-        const queueDir = path27__default.join(paths.queueDir, id);
-        await writeJsonFile(path27__default.join(queueDir, PATCH_META_FILENAME), {
+        const queueDir = path28__default.join(paths.queueDir, id);
+        await writeJsonFile(path28__default.join(queueDir, PATCH_META_FILENAME), {
           ...meta3,
           conflictId
         }, paths);
@@ -37466,7 +37489,7 @@ async function approvePatchSet(patchSetId, paths) {
   const failed = [];
   const missing = [];
   for (const patchId of patchSet.patchIds) {
-    const queueDir = path27__default.join(paths.queueDir, patchId);
+    const queueDir = path28__default.join(paths.queueDir, patchId);
     if (!await pathExists(queueDir)) {
       missing.push(patchId);
       continue;
@@ -37532,7 +37555,7 @@ ${patch.body}`;
 }
 async function normalizeWikiEntryPatch(entry, target, paths) {
   assertSafeEntryId(entry.id);
-  if (entry.id !== path27__default.basename(target, ".md")) {
+  if (entry.id !== path28__default.basename(target, ".md")) {
     throw new Error("wiki patch body id must match target filename");
   }
   const inlineRawSourceRef = extractInlineRawSourceRef(entry.body);
@@ -37575,9 +37598,9 @@ function buildPatchId(createdAt, summary, target, body) {
 }
 async function validatePatchBase(patch, meta3, paths) {
   if (patch.frontmatter.op !== "update_wiki" || !meta3?.baseVersion && !meta3?.baseHash) return;
-  const wikiId = path27__default.basename(patch.frontmatter.target, ".md");
+  const wikiId = path28__default.basename(patch.frontmatter.target, ".md");
   const currentEntry = await readWikiEntry(wikiId, paths);
-  const currentPath = path27__default.join(paths.root, patch.frontmatter.target);
+  const currentPath = path28__default.join(paths.root, patch.frontmatter.target);
   const currentMarkdown = await pathExists(currentPath) ? await readPatchFile(currentPath) : void 0;
   if (meta3.baseVersion !== void 0 && currentEntry?.version !== meta3.baseVersion) {
     throw new Error(
@@ -37636,17 +37659,17 @@ function assertCanonicalPatchTarget(target) {
   if (target.endsWith("/")) {
     throw new Error("patch target must not end with a slash");
   }
-  if (target.startsWith("/") || path27__default.posix.isAbsolute(target) || path27__default.win32.isAbsolute(target)) {
+  if (target.startsWith("/") || path28__default.posix.isAbsolute(target) || path28__default.win32.isAbsolute(target)) {
     throw new Error("patch target must be relative");
   }
-  if (path27__default.posix.normalize(target) !== target) {
+  if (path28__default.posix.normalize(target) !== target) {
     throw new Error("patch target must not contain dot segments or redundant separators");
   }
 }
 function canonicalApprovalLockKey(paths, target) {
   const wikiRoot = realpathSync(paths.wikiDir);
-  const relativeTarget = path27__default.posix.relative("wiki", target);
-  const targetPath = path27__default.join(wikiRoot, ...relativeTarget.split("/"));
+  const relativeTarget = path28__default.posix.relative("wiki", target);
+  const targetPath = path28__default.join(wikiRoot, ...relativeTarget.split("/"));
   return `${wikiRoot}\0${targetPath}`.toLowerCase();
 }
 function canonicalPatchEditLockKey(paths, patchId) {
@@ -37662,7 +37685,7 @@ function assertNoSymlinkPathComponents(target, paths) {
     throw error51;
   }
   for (const part of parts) {
-    current = path27__default.join(current, part);
+    current = path28__default.join(current, part);
     try {
       if (lstatSync(current).isSymbolicLink()) {
         throw new Error("patch target must not include symlink path components");
@@ -37677,8 +37700,8 @@ function assertSafeRawSourceRef(rawSourceRef, paths) {
   if (!rawSourceRef.startsWith("raw/")) {
     throw new Error("raw source provenance must point into raw/");
   }
-  const absoluteRef = path27__default.resolve(paths.root, rawSourceRef);
-  if (!absoluteRef.startsWith(`${paths.rawDir}${path27__default.sep}`)) {
+  const absoluteRef = path28__default.resolve(paths.root, rawSourceRef);
+  if (!absoluteRef.startsWith(`${paths.rawDir}${path28__default.sep}`)) {
     throw new Error("raw source provenance must point into raw/");
   }
 }
@@ -37694,14 +37717,14 @@ function classifyPatchConflict(error51) {
 }
 async function recordPatchConflict(patch, paths, reason, options) {
   const now = /* @__PURE__ */ new Date();
-  const targetPath = path27__default.join(paths.root, patch.frontmatter.target);
+  const targetPath = path28__default.join(paths.root, patch.frontmatter.target);
   const current = await pathExists(targetPath) ? await readPatchFile(targetPath) : void 0;
   const currentEntry = current ? parseStoredWikiEntry(current) : void 0;
   const proposedEntry = parsePatchBodyEntry(patch.body);
   const record2 = await createConflict({
     reason,
     target: patch.frontmatter.target,
-    wikiId: proposedEntry?.id ?? path27__default.basename(patch.frontmatter.target, ".md"),
+    wikiId: proposedEntry?.id ?? path28__default.basename(patch.frontmatter.target, ".md"),
     title: proposedEntry?.title,
     proposer: patch.frontmatter.proposer,
     rawSourceRef: options?.rawSourceRef,
@@ -37797,11 +37820,11 @@ function parseInlineArray(value) {
   return inner.split(",").map((item) => item.trim().replace(/^"(.*)"$/, "$1"));
 }
 async function archiveQueueEntry(id, paths, meta3) {
-  const fromDir = path27__default.join(paths.queueDir, id);
-  const toDir = path27__default.join(paths.archiveDir, id);
+  const fromDir = path28__default.join(paths.queueDir, id);
+  const toDir = path28__default.join(paths.archiveDir, id);
   await removePath(toDir);
   await movePath(fromDir, toDir);
-  await writeJsonFile(path27__default.join(toDir, PATCH_META_FILENAME), meta3, paths);
+  await writeJsonFile(path28__default.join(toDir, PATCH_META_FILENAME), meta3, paths);
 }
 function buildQueueIdHelp(prefix, availableIds) {
   if (availableIds.length === 0) {
@@ -38013,7 +38036,7 @@ async function resolveCompileSource(input, paths, now) {
 }
 async function buildCompileProposals(input, paths, now, resolvedSource) {
   const sourceTarget = `wiki/sources/${resolvedSource.sourcePageId}.md`;
-  const sourceExists = await pathExists(path27__default.join(paths.root, sourceTarget));
+  const sourceExists = await pathExists(path28__default.join(paths.root, sourceTarget));
   const existingEntries = await listWiki(paths);
   const sourcePageTitle = resolvedSource.sourceTitle?.trim() || `Source ${resolvedSource.sourcePageId}`;
   const existingSourceEntry = existingEntries.find((entry) => entry.id === resolvedSource.sourcePageId);
@@ -38035,7 +38058,7 @@ async function buildCompileProposals(input, paths, now, resolvedSource) {
     target: sourceTarget,
     summary: truncateSummary(`Compile source page ${sourcePageTitle}`),
     entry: sourceEntry,
-    baseHash: sourceExists ? computeContentHash(await readPatchFile(path27__default.join(paths.root, sourceTarget))) : void 0,
+    baseHash: sourceExists ? computeContentHash(await readPatchFile(path28__default.join(paths.root, sourceTarget))) : void 0,
     baseVersion: existingSourceEntry?.version
   }];
   const relatedCandidates = await discoverRelatedEntryCandidates(paths, resolvedSource.sourceContent, resolvedSource.sourceTitle);
@@ -38055,7 +38078,7 @@ async function buildCompileProposals(input, paths, now, resolvedSource) {
         rawSourceRefs: mergeRawSourceRefs(existing.rawSourceRefs, existing.rawSourceRef, { ref: resolvedSource.rawSourceRef }),
         body: appendSourceCompileNote(existing.body, resolvedSource.sourcePageId, resolvedSource.rawSourceRef)
       },
-      baseHash: computeContentHash(await readPatchFile(path27__default.join(paths.wikiDir, `${existing.id}.md`))),
+      baseHash: computeContentHash(await readPatchFile(path28__default.join(paths.wikiDir, `${existing.id}.md`))),
       baseVersion: existing.version
     });
   }
@@ -38190,13 +38213,13 @@ async function readClaims(entryId, paths) {
   }
 }
 function getClaimsDir(paths) {
-  return path27__default.join(paths.wikiDir, CLAIMS_DIRNAME);
+  return path28__default.join(paths.wikiDir, CLAIMS_DIRNAME);
 }
 function getClaimsFile(paths, entryId) {
   assertSafeEntryId(entryId);
-  const claimsFile = path27__default.join(getClaimsDir(paths), `${entryId}.json`);
-  const relative = path27__default.relative(getClaimsDir(paths), claimsFile);
-  if (!relative || relative.startsWith("..") || path27__default.isAbsolute(relative)) {
+  const claimsFile = path28__default.join(getClaimsDir(paths), `${entryId}.json`);
+  const relative = path28__default.relative(getClaimsDir(paths), claimsFile);
+  if (!relative || relative.startsWith("..") || path28__default.isAbsolute(relative)) {
     throw new Error(`[fleet-wiki] claims sidecar escapes wiki/.claims: ${entryId}`);
   }
   return claimsFile;
@@ -38287,7 +38310,7 @@ function assertSafeClaimRawRef(ref) {
   if (!ref.startsWith("raw/")) {
     throw new Error(`claim sourceRef must point into raw/: ${ref}`);
   }
-  if (ref.includes("..") || path27__default.isAbsolute(ref)) {
+  if (ref.includes("..") || path28__default.isAbsolute(ref)) {
     throw new Error(`claim sourceRef escapes raw/: ${ref}`);
   }
 }
@@ -38365,22 +38388,22 @@ async function runDryDock(paths, options = {}) {
   }
   for (const fileName of await listFileNames(paths.rawDir)) {
     if (!fileName.endsWith(".md")) continue;
-    const filePath = path27__default.join(paths.rawDir, fileName);
+    const filePath = path28__default.join(paths.rawDir, fileName);
     issues.push(...safetyIssues(await readPatchFile(filePath), filePath));
   }
   for (const queueId of await listDirectoryNames(paths.queueDir)) {
     if (queueId === PATCH_SET_DIRNAME) continue;
-    const queueDir = path27__default.join(paths.queueDir, queueId);
+    const queueDir = path28__default.join(paths.queueDir, queueId);
     try {
-      const patchContent = await readPatchFile(path27__default.join(queueDir, PATCH_FILENAME));
-      issues.push(...safetyIssues(patchContent, path27__default.join(queueDir, PATCH_FILENAME)));
-      await readJsonFile2(path27__default.join(queueDir, PATCH_META_FILENAME));
+      const patchContent = await readPatchFile(path28__default.join(queueDir, PATCH_FILENAME));
+      issues.push(...safetyIssues(patchContent, path28__default.join(queueDir, PATCH_FILENAME)));
+      await readJsonFile2(path28__default.join(queueDir, PATCH_META_FILENAME));
     } catch {
       issues.push(issue2("malformed_queue", "error", "\uC190\uC0C1\uB41C queue \uC5D4\uD2B8\uB9AC", queueDir));
     }
   }
-  for (const patchSetId of await listDirectoryNames(path27__default.join(paths.queueDir, PATCH_SET_DIRNAME))) {
-    const patchSetMetaFile = path27__default.join(paths.queueDir, PATCH_SET_DIRNAME, patchSetId, PATCH_META_FILENAME);
+  for (const patchSetId of await listDirectoryNames(path28__default.join(paths.queueDir, PATCH_SET_DIRNAME))) {
+    const patchSetMetaFile = path28__default.join(paths.queueDir, PATCH_SET_DIRNAME, patchSetId, PATCH_META_FILENAME);
     let patchSet;
     try {
       patchSet = await readPatchSet(paths, patchSetId);
@@ -38389,8 +38412,8 @@ async function runDryDock(paths, options = {}) {
       continue;
     }
     for (const patchId of patchSet.patchIds) {
-      const queueMetaFile = path27__default.join(paths.queueDir, patchId, PATCH_META_FILENAME);
-      const archiveMetaFile = path27__default.join(paths.archiveDir, patchId, PATCH_META_FILENAME);
+      const queueMetaFile = path28__default.join(paths.queueDir, patchId, PATCH_META_FILENAME);
+      const archiveMetaFile = path28__default.join(paths.archiveDir, patchId, PATCH_META_FILENAME);
       if (!await pathExists(queueMetaFile) && !await pathExists(archiveMetaFile)) {
         issues.push(
           issue2(
@@ -38427,7 +38450,7 @@ async function runDryDock(paths, options = {}) {
         "conflict_unresolved",
         "warning",
         `\uBBF8\uD574\uACB0 conflict: ${conflict.reason} (${conflict.target})`,
-        path27__default.join(paths.conflictsDir, conflict.id, "meta.json")
+        path28__default.join(paths.conflictsDir, conflict.id, "meta.json")
       )
     );
   }
@@ -38440,7 +38463,7 @@ async function runDryDock(paths, options = {}) {
           "unresolved_conflict",
           "warning",
           "\uC190\uC0C1\uB41C conflict \uC5D4\uD2B8\uB9AC",
-          path27__default.join(paths.conflictsDir, conflictId, "meta.json")
+          path28__default.join(paths.conflictsDir, conflictId, "meta.json")
         )
       );
     }
@@ -38497,8 +38520,8 @@ async function claimIssues(paths, wikiIds) {
   const claimsDir = getClaimsDir(paths);
   for (const fileName of await listFileNames(claimsDir)) {
     if (!fileName.endsWith(".json")) continue;
-    const filePath = path27__default.join(claimsDir, fileName);
-    const entryIdFromFile = path27__default.basename(fileName, ".json");
+    const filePath = path28__default.join(claimsDir, fileName);
+    const entryIdFromFile = path28__default.basename(fileName, ".json");
     let raw;
     try {
       raw = await readJsonFile2(filePath);
@@ -38577,7 +38600,7 @@ function toSemanticEntry(filePath, frontmatter, body) {
 async function schemaIssues(paths) {
   const issues = [];
   const schema = await readWorkspaceSchemaSummary(paths);
-  const agentsPath = path27__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME);
+  const agentsPath = path28__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME);
   if (!await pathExists(schema.wikiSchemaPath)) {
     issues.push(issue2("schema_missing", "warning", `Workspace schema file is missing: schema/${WORKSPACE_SCHEMA_FILENAME}`, schema.wikiSchemaPath));
   } else {
@@ -38964,7 +38987,7 @@ async function listWikiMarkdownFiles(dirPath) {
   const files = [];
   const sortedEntries = entries.sort((left, right) => left.name.localeCompare(right.name));
   for (const entry of sortedEntries) {
-    const filePath = path27__default.join(dirPath, entry.name);
+    const filePath = path28__default.join(dirPath, entry.name);
     if (entry.isDirectory()) {
       files.push(...await listWikiMarkdownFiles(filePath));
       continue;
@@ -39048,7 +39071,7 @@ async function planIngest(input, paths, now) {
   const target = `wiki/${input.id}.md`;
   const proposer = input.proposer ?? "tool:wiki_ingest";
   const currentEntry = await readWikiEntry(input.id, paths);
-  const currentMarkdown = currentEntry ? await readPatchFile(path27__default.join(paths.wikiDir, `${input.id}.md`)) : void 0;
+  const currentMarkdown = currentEntry ? await readPatchFile(path28__default.join(paths.wikiDir, `${input.id}.md`)) : void 0;
   const currentHash = currentMarkdown ? computeContentHash(currentMarkdown) : void 0;
   const rawSource = buildRawSourceEntry(input, now);
   await ensureWorkspaceSchema(paths);
@@ -39727,11 +39750,11 @@ async function editQueuedPatch(input, paths) {
   };
 }
 async function readQueuedPatchSnapshot(paths, patchId) {
-  const queueDir = path27__default.join(paths.queueDir, patchId);
-  const markdown = await readPatchFile(path27__default.join(queueDir, PATCH_FILENAME));
+  const queueDir = path28__default.join(paths.queueDir, patchId);
+  const markdown = await readPatchFile(path28__default.join(queueDir, PATCH_FILENAME));
   return {
     patch: await parsePatch(markdown),
-    meta: await readJsonFile2(path27__default.join(queueDir, PATCH_META_FILENAME)),
+    meta: await readJsonFile2(path28__default.join(queueDir, PATCH_META_FILENAME)),
     patchHash: computeContentHash(markdown)
   };
 }
@@ -40493,7 +40516,7 @@ ${input.answer ?? ""}`)}`;
   assertSafeEntryId(targetId);
   const subdir = input.targetType === "synthesis" ? "synthesis" : "queries";
   const target = `wiki/${subdir}/${targetId}.md`;
-  const absoluteTarget = path27__default.join(paths.root, target);
+  const absoluteTarget = path28__default.join(paths.root, target);
   const exists = await pathExists(absoluteTarget);
   const existingEntry = exists ? await readWikiEntry(targetId, paths) : null;
   if (exists && !existingEntry) {
@@ -40575,7 +40598,7 @@ function assertSafeRawRef(rawRef) {
   if (!rawRef.startsWith("raw/")) {
     throw new Error(`[fleet-wiki] wiki_query raw source ref must point into raw/: ${rawRef}`);
   }
-  if (rawRef.includes("..") || path27__default.isAbsolute(rawRef)) {
+  if (rawRef.includes("..") || path28__default.isAbsolute(rawRef)) {
     throw new Error(`[fleet-wiki] wiki_query raw source ref escapes raw/: ${rawRef}`);
   }
 }
@@ -40694,7 +40717,7 @@ async function buildReadEntryResult(entry, paths, graph, input) {
     rawSourceRef: entry.rawSourceRef,
     rawSourceRefs,
     source: {
-      path: path27__default.join("wiki", `${entry.id}.md`),
+      path: path28__default.join("wiki", `${entry.id}.md`),
       rawSourceRef: entry.rawSourceRef,
       rawSourceRefs
     },
@@ -40820,7 +40843,7 @@ function buildRelatedEntries(entry, graph) {
     deduped.set(candidate.id, {
       id: relatedEntry.id,
       title: relatedEntry.title,
-      path: path27__default.join("wiki", `${relatedEntry.id}.md`),
+      path: path28__default.join("wiki", `${relatedEntry.id}.md`),
       reason: candidate.reason
     });
   }
@@ -41162,15 +41185,15 @@ function loadNodePtyRequire(currentFile) {
   return consolePackageRequire ?? require2;
 }
 function findConsolePackageRequire(currentFile) {
-  let dir = path27__default.dirname(currentFile);
+  let dir = path28__default.dirname(currentFile);
   while (true) {
-    const packageJson = path27__default.join(dir, "package.json");
+    const packageJson = path28__default.join(dir, "package.json");
     if (isFleetConsolePackage(packageJson)) return createRequire(packageJson);
-    const nestedConsolePackage = path27__default.join(dir, "runtime", "fleet-console", "package.json");
+    const nestedConsolePackage = path28__default.join(dir, "runtime", "fleet-console", "package.json");
     if (isFleetConsolePackage(nestedConsolePackage)) return createRequire(nestedConsolePackage);
-    const siblingConsolePackage = path27__default.join(dir, "..", "..", "fleet-console", "package.json");
+    const siblingConsolePackage = path28__default.join(dir, "..", "..", "fleet-console", "package.json");
     if (isFleetConsolePackage(siblingConsolePackage)) return createRequire(siblingConsolePackage);
-    const parent = path27__default.dirname(dir);
+    const parent = path28__default.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -41955,7 +41978,7 @@ function captureSession(options) {
 function readProviderSessionCapture(fleetSessionId, deps = {}) {
   if (!isSafeCaptureId(fleetSessionId)) return null;
   const capturesDir = deps.capturesDir ?? defaultCapturePaths().capturesDir;
-  const filePath = path27__default.join(capturesDir, `${fleetSessionId}.json`);
+  const filePath = path28__default.join(capturesDir, `${fleetSessionId}.json`);
   try {
     const parsed = JSON.parse(fs2__default.readFileSync(filePath, "utf8"));
     return sanitizeProviderSession(parsed);
@@ -41967,7 +41990,7 @@ function unlinkProviderSessionCapture(fleetSessionId, deps = {}) {
   if (!isSafeCaptureId(fleetSessionId)) return false;
   const capturesDir = deps.capturesDir ?? defaultCapturePaths().capturesDir;
   try {
-    fs2__default.unlinkSync(path27__default.join(capturesDir, `${fleetSessionId}.json`));
+    fs2__default.unlinkSync(path28__default.join(capturesDir, `${fleetSessionId}.json`));
     return true;
   } catch {
     return false;
@@ -41979,8 +42002,8 @@ function captureSessionStrict(options) {
   const input = parseHookInput(options.input ?? "");
   const providerSession = toProviderSession(provider, input, options.now ?? (() => /* @__PURE__ */ new Date()));
   const capturesDir = (options.paths ?? defaultCapturePaths()).capturesDir;
-  const finalPath = path27__default.join(capturesDir, `${fleetSessionId}.json`);
-  const tempPath = path27__default.join(capturesDir, `${CAPTURE_TEMP_PREFIX}${fleetSessionId}.${process5.pid}.${Date.now()}.tmp`);
+  const finalPath = path28__default.join(capturesDir, `${fleetSessionId}.json`);
+  const tempPath = path28__default.join(capturesDir, `${CAPTURE_TEMP_PREFIX}${fleetSessionId}.${process5.pid}.${Date.now()}.tmp`);
   fs2__default.mkdirSync(capturesDir, { recursive: true, mode: 448 });
   fs2__default.writeFileSync(tempPath, `${JSON.stringify(providerSession, null, 2)}
 `, { mode: 384 });
@@ -41994,7 +42017,7 @@ function parseProvider(value) {
 function readFleetSessionId(env) {
   const value = env.FLEET_CONSOLE_SESSION_ID;
   if (!value) throw new Error("missing_fleet_session_id");
-  if (path27__default.basename(value) !== value || value.includes(path27__default.sep) || value.includes(path27__default.posix.sep)) {
+  if (path28__default.basename(value) !== value || value.includes(path28__default.sep) || value.includes(path28__default.posix.sep)) {
     throw new Error("invalid_fleet_session_id");
   }
   return value;
@@ -42039,10 +42062,10 @@ function isProvider(value) {
   return value === "claude" || value === "codex" || value === "cursor";
 }
 function isSafeCaptureId(value) {
-  return value.length > 0 && path27__default.basename(value) === value && !value.includes(path27__default.sep) && !value.includes(path27__default.posix.sep);
+  return value.length > 0 && path28__default.basename(value) === value && !value.includes(path28__default.sep) && !value.includes(path28__default.posix.sep);
 }
 function defaultCapturePaths() {
-  return { capturesDir: path27__default.join(getFleetDataDir(), CONSOLE_DATA_DIR_NAME, CONSOLE_CAPTURES_DIR_NAME) };
+  return { capturesDir: path28__default.join(getFleetDataDir(), CONSOLE_DATA_DIR_NAME, CONSOLE_CAPTURES_DIR_NAME) };
 }
 var JAVASCRIPT_ENTRY_EXTENSIONS = /* @__PURE__ */ new Set([".cjs", ".js", ".mjs"]);
 var TYPESCRIPT_ENTRY_EXTENSIONS = /* @__PURE__ */ new Set([".cts", ".mts", ".ts", ".tsx"]);
@@ -42057,7 +42080,7 @@ function buildConsoleAutoNameHookCommand(entry) {
   return buildConsoleCliHookExec(entry, ["hook", "auto-name"]);
 }
 function buildConsoleCaptureHookCommand(entry, cliId) {
-  const extension = path27__default.extname(entry.entryPath);
+  const extension = path28__default.extname(entry.entryPath);
   if (JAVASCRIPT_ENTRY_EXTENSIONS.has(extension)) {
     return createSessionCaptureHookExec({
       entryPath: entry.entryPath,
@@ -42093,11 +42116,11 @@ function runCodexCommand(command) {
 }
 function withConsoleMarketplaceLock(target, fn) {
   const lockDir = `${target}${MARKETPLACE_LOCK_DIR_SUFFIX}`;
-  mkdirSync(path27__default.dirname(lockDir), { recursive: true });
+  mkdirSync(path28__default.dirname(lockDir), { recursive: true });
   return withDirectoryLock({ lockDir }, fn);
 }
 function buildConsoleCliHookExec(entry, trailingArgs) {
-  const extension = path27__default.extname(entry.entryPath);
+  const extension = path28__default.extname(entry.entryPath);
   if (JAVASCRIPT_ENTRY_EXTENSIONS.has(extension)) {
     return {
       command: entry.execPath,
@@ -42181,7 +42204,7 @@ function resolveHookEntryPath(candidate) {
   return CONSOLE_ENTRY_PATH;
 }
 function hasHookEntryExtension(entryPath) {
-  return HOOK_ENTRY_EXTENSIONS.has(path27__default.extname(entryPath));
+  return HOOK_ENTRY_EXTENSIONS.has(path28__default.extname(entryPath));
 }
 async function createAgentCliLaunchSpec(options) {
   const cleanupStack = [];
@@ -42403,7 +42426,7 @@ function createConsoleObservabilityStore(deps = {}) {
     return terminalSessionsById.get(sessionId)?.cwd ?? workspacesByCliRunId.get(sessionId)?.session.cwd ?? null;
   }
   function createPendingTerminalSession(input) {
-    if (!path27__default.isAbsolute(input.cwd)) throw new Error("Terminal session cwd must be absolute");
+    if (!path28__default.isAbsolute(input.cwd)) throw new Error("Terminal session cwd must be absolute");
     const createdAt = input.createdAt ?? now();
     const canonicalCwd = canonicalizeTheaterPath(input.cwd);
     const theaterId = workspaceHash(canonicalCwd);
@@ -42411,7 +42434,7 @@ function createConsoleObservabilityStore(deps = {}) {
       sessionId: input.sessionId,
       cwd: input.cwd,
       canonicalCwd,
-      cwdLabel: path27__default.basename(input.cwd) || input.cwd,
+      cwdLabel: path28__default.basename(input.cwd) || input.cwd,
       cliId: input.cliId,
       createdAt,
       theaterId,
@@ -42426,7 +42449,7 @@ function createConsoleObservabilityStore(deps = {}) {
       sessionId: operation.sessionId,
       cwd: operation.cwd,
       canonicalCwd: canonicalizeTheaterPath(operation.cwd),
-      cwdLabel: path27__default.basename(operation.cwd) || operation.cwd,
+      cwdLabel: path28__default.basename(operation.cwd) || operation.cwd,
       label: operation.label,
       labelSource: operation.labelSource,
       cliId: operation.cliId,
@@ -42653,7 +42676,7 @@ function defaultWorkspaceHash(canonicalCwd) {
   return crypto4.createHash("sha256").update(canonicalCwd).digest("hex").slice(0, 12);
 }
 function defaultCanonicalizeTheaterPath(cwd) {
-  const resolved = path27__default.resolve(cwd);
+  const resolved = path28__default.resolve(cwd);
   try {
     return fs2__default.realpathSync.native(resolved);
   } catch {
@@ -42947,23 +42970,23 @@ function createAgentApi(ctx, terminalRuntime, deps) {
   backfillAgentOperationLaunchKinds();
   rehydrateDormantAgentOperations();
   async function handle({ req, res, pathname }) {
-    const path42 = pathname.slice(`${ctx.basePath}/agent`.length) || "/";
-    if (path42 === "/state") {
+    const path43 = pathname.slice(`${ctx.basePath}/agent`.length) || "/";
+    if (path43 === "/state") {
       if (req.method !== "GET") return methodNotAllowed(res);
       ctx.host.http.writeJson(res, 200, { agentClis: await buildAgentCliLaunchMetadata() });
       return true;
     }
-    if (path42 === "/agent-cli/state") {
+    if (path43 === "/agent-cli/state") {
       if (req.method !== "GET") return methodNotAllowed(res);
       ctx.host.http.writeJson(res, 200, { clis: await detector.detect() });
       return true;
     }
-    if (path42 === "/tenants") {
+    if (path43 === "/tenants") {
       if (req.method !== "GET") return methodNotAllowed(res);
       ctx.host.http.writeJson(res, 200, { tenants: observability.listWorkspaces() });
       return true;
     }
-    if (path42 === "/jobs") {
+    if (path43 === "/jobs") {
       if (req.method !== "GET") return methodNotAllowed(res);
       const requestedTenantId = new URL(req.url ?? "/", "http://127.0.0.1").searchParams.get("tenant");
       const visible = requestedTenantId ? observability.listWorkspaces().filter((workspace) => workspace.tenantId === requestedTenantId) : observability.listWorkspaces();
@@ -42974,7 +42997,7 @@ function createAgentApi(ctx, terminalRuntime, deps) {
       ctx.host.http.writeJson(res, 200, { tenants: visible.map((workspace) => ({ tenantId: workspace.tenantId, tenantLabel: workspace.tenantLabel, jobs: observability.listJobs(workspace.tenantId), truncation: observability.getTruncation(workspace.tenantId) })) });
       return true;
     }
-    if (path42 === "/events") {
+    if (path43 === "/events") {
       if (req.method !== "GET") return methodNotAllowed(res);
       const requestedTenantId = new URL(req.url ?? "/", "http://127.0.0.1").searchParams.get("tenant");
       const visible = requestedTenantId ? observability.listWorkspaces().filter((workspace) => workspace.tenantId === requestedTenantId) : observability.listWorkspaces();
@@ -42985,11 +43008,11 @@ function createAgentApi(ctx, terminalRuntime, deps) {
       writeAggregateObserverEvents(req, res, visible, observability, (tenantId) => observability.getWorkspace(tenantId), { subscribeAll: true });
       return true;
     }
-    if (path42 === "/sessions") return handleSessions(req, res);
-    if (path42 === "/capture") return handleCapture(req, res, "");
-    const sessionMatch = path42.match(/^\/sessions\/([^/]+)(?:\/([^/]+))?$/);
+    if (path43 === "/sessions") return handleSessions(req, res);
+    if (path43 === "/capture") return handleCapture(req, res, "");
+    const sessionMatch = path43.match(/^\/sessions\/([^/]+)(?:\/([^/]+))?$/);
     if (sessionMatch) return handleSessionItem(req, res, decodeURIComponent(sessionMatch[1] ?? ""), sessionMatch[2] ?? "");
-    if (path42 === "/ticket") {
+    if (path43 === "/ticket") {
       if (req.method !== "POST") return methodNotAllowed(res);
       if (!ctx.host.security.isTerminalAuthorized(req)) {
         ctx.host.http.writeJson(res, 401, { error: "Unauthorized" });
@@ -43083,7 +43106,7 @@ function createAgentApi(ctx, terminalRuntime, deps) {
       theaterId,
       type: AGENT_OPERATION_TYPE,
       pluginId: ctx.pluginId,
-      title: session.label ?? path27__default.basename(cwd),
+      title: session.label ?? path28__default.basename(cwd),
       payload: toOperationPayload(cwd, session),
       createdAt: session.createdAt
     });
@@ -43194,7 +43217,7 @@ function createAgentApi(ctx, terminalRuntime, deps) {
     if (result?.renamed) {
       observability.notifySessionUpdated(result.session);
       const autoNameCwd = readPayloadString(ctx.host.operations.get(sessionId)?.payload ?? {}, "cwd") ?? result.session.cwdLabel;
-      ctx.host.operations.patch(sessionId, { title: result.session.label ?? path27__default.basename(autoNameCwd) });
+      ctx.host.operations.patch(sessionId, { title: result.session.label ?? path28__default.basename(autoNameCwd) });
     }
     ctx.host.http.writeJson(res, 200, { ok: true, renamed: result?.renamed === true });
     return true;