@dotobokuri/fleet-console 1.23.0 → 1.24.0

package/dist/cli.mjs

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
-import { spawn, execFileSync, execFile, execSync } from 'child_process';
-import * as fs11 from 'fs';
-import fs11__default, { realpathSync, accessSync, constants, existsSync, lstatSync } from 'fs';
-import * as path25 from 'path';
-import path25__default, { join, resolve, relative, sep, dirname } from 'path';
+import { execFile, spawn, execFileSync, execSync } from 'child_process';
+import * as fs14 from 'fs';
+import fs14__default, { realpathSync, accessSync, constants, existsSync, lstatSync } from 'fs';
+import * as path27 from 'path';
+import path27__default, { join, resolve, relative, sep, dirname } from 'path';
 import process4 from 'process';
 import { fileURLToPath, pathToFileURL } from 'url';
 import * as os4 from 'os';
@@ -12,9 +12,11 @@ import crypto5, { createHash, randomUUID } from 'crypto';
 import { builtinModules, createRequire } from 'module';
 import http2 from 'http';
 import { EventEmitter } from 'events';
-import { stat, readFile, realpath, readdir, mkdir, mkdtemp, writeFile, appendFile, rm, rename, access } from 'fs/promises';
+import { stat, mkdir, readdir, readFile, rm, realpath, mkdtemp, writeFile, appendFile, rename, access } from 'fs/promises';
 import { Writable, Readable } from 'stream';
+import fontList from 'font-list';
 import net2 from 'net';
+import { promisify } from 'util';
 
 var __defProp = Object.defineProperty;
 var __export = (target, all) => {
@@ -37,7 +39,7 @@ function findBinaryPath(command2, env, options = {}) {
   return findOnPath(command2, pathValue, pathExts, platform);
 }
 function wrapWindowsShim(resolved, env, platform) {
-  if (platform !== "win32" || !WINDOWS_SHIM_EXTENSIONS.has(path25__default.extname(resolved).toLowerCase())) {
+  if (platform !== "win32" || !WINDOWS_SHIM_EXTENSIONS.has(path27__default.extname(resolved).toLowerCase())) {
     return { bin: resolved, prefixArgs: [] };
   }
   rejectCmdExpansionSensitiveShim(resolved);
@@ -55,13 +57,13 @@ function forceWindowsArgQuoting(value) {
   return `${value} `;
 }
 function findOnPath(bin, pathValue, pathExts, platform) {
-  const pathSeparator = platform === "win32" ? WINDOWS_PATH_SEPARATOR : path25__default.delimiter;
-  if (hasPathSeparator(bin, platform) || path25__default.isAbsolute(bin)) {
+  const pathSeparator = platform === "win32" ? WINDOWS_PATH_SEPARATOR : path27__default.delimiter;
+  if (hasPathSeparator(bin, platform) || path27__default.isAbsolute(bin)) {
     return resolveWithExtensions(bin, pathExts, platform);
   }
   for (const entry of pathValue.split(pathSeparator)) {
     const searchDir = entry.length === 0 ? "." : entry;
-    const candidate = resolveWithExtensions(path25__default.join(searchDir, bin), pathExts, platform);
+    const candidate = resolveWithExtensions(path27__default.join(searchDir, bin), pathExts, platform);
     if (candidate) {
       return candidate;
     }
@@ -69,7 +71,7 @@ function findOnPath(bin, pathValue, pathExts, platform) {
   return void 0;
 }
 function resolveWithExtensions(candidate, pathExts, platform) {
-  if (platform !== "win32" || path25__default.extname(candidate).length > 0) {
+  if (platform !== "win32" || path27__default.extname(candidate).length > 0) {
     return isAccessibleExecutable(candidate, platform) ? candidate : void 0;
   }
   for (const ext of pathExts) {
@@ -304,7 +306,7 @@ function isC1Control(code) {
 var LOCK_DIR_MODE = 448;
 var LOCK_FILE_MODE = 384;
 function createConsoleLock(deps = {}) {
-  const fsImpl = deps.fs ?? fs11__default;
+  const fsImpl = deps.fs ?? fs14__default;
   const now = deps.now ?? Date.now;
   const randomToken = deps.randomToken ?? (() => crypto5.randomBytes(32).toString("base64url"));
   const hostname5 = deps.hostname ?? (() => "127.0.0.1");
@@ -333,9 +335,10 @@ function createConsoleLock(deps = {}) {
       endpoint: input.endpoint,
       startedAt: now(),
       token: randomToken(),
-      version: input.version
+      version: input.version,
+      ...input.owner ? { owner: input.owner } : {}
     };
-    const fd = fsImpl.openSync(input.lockFile, fs11__default.constants.O_CREAT | fs11__default.constants.O_EXCL | fs11__default.constants.O_WRONLY, LOCK_FILE_MODE);
+    const fd = fsImpl.openSync(input.lockFile, fs14__default.constants.O_CREAT | fs14__default.constants.O_EXCL | fs14__default.constants.O_WRONLY, LOCK_FILE_MODE);
     try {
       fsImpl.writeFileSync(fd, `${JSON.stringify(payload, null, 2)}
 `, "utf8");
@@ -361,7 +364,7 @@ function createConsoleLock(deps = {}) {
   }
   function assertLockModes(lockFile) {
     if (typeof process.getuid !== "function") return;
-    const dir = path25__default.dirname(lockFile);
+    const dir = path27__default.dirname(lockFile);
     const dirMode = fsImpl.statSync(dir).mode & 511;
     const fileMode = fsImpl.statSync(lockFile).mode & 511;
     if (dirMode !== LOCK_DIR_MODE) {
@@ -403,14 +406,14 @@ function createConsoleLock(deps = {}) {
 }
 var FLEET_DATA_DIR_NAME = ".fleet";
 function getFleetDataDir() {
-  return path25.join(os4.homedir(), FLEET_DATA_DIR_NAME);
+  return path27.join(os4.homedir(), FLEET_DATA_DIR_NAME);
 }
 var SECURE_DIR_MODE = 448;
 var SECURE_FILE_MODE = 384;
-var NOFOLLOW_FLAG = fs11.constants.O_NOFOLLOW ?? 0;
+var NOFOLLOW_FLAG = fs14.constants.O_NOFOLLOW ?? 0;
 function safeLstat(targetPath) {
   try {
-    return fs11.lstatSync(targetPath);
+    return fs14.lstatSync(targetPath);
   } catch (error51) {
     if (error51.code === "ENOENT") {
       return null;
@@ -424,15 +427,15 @@ function ensureSafeDirectory(dirPath) {
     if (!stat5.isDirectory() || stat5.isSymbolicLink()) {
       throw new Error(`Unsafe Fleet directory: ${dirPath}`);
     }
-    fs11.chmodSync(dirPath, SECURE_DIR_MODE);
+    fs14.chmodSync(dirPath, SECURE_DIR_MODE);
     return;
   }
-  fs11.mkdirSync(dirPath, { recursive: true, mode: SECURE_DIR_MODE });
+  fs14.mkdirSync(dirPath, { recursive: true, mode: SECURE_DIR_MODE });
   const created = safeLstat(dirPath);
   if (!created?.isDirectory() || created.isSymbolicLink()) {
     throw new Error(`Unsafe Fleet directory: ${dirPath}`);
   }
-  fs11.chmodSync(dirPath, SECURE_DIR_MODE);
+  fs14.chmodSync(dirPath, SECURE_DIR_MODE);
 }
 
 // ../../packages/core-infra/src/fs-store/atomic-write.ts
@@ -451,17 +454,17 @@ function writeAtomicSync(filePath, content, options = {}) {
     const tempPath = buildTempPath(filePath);
     let tempCreated = false;
     try {
-      fs11.writeFileSync(tempPath, content, { encoding: "utf-8", flag: "wx", mode });
+      fs14.writeFileSync(tempPath, content, { encoding: "utf-8", flag: "wx", mode });
       tempCreated = true;
       if (doFsync) {
-        const fd = fs11.openSync(tempPath, "r");
+        const fd = fs14.openSync(tempPath, "r");
         try {
           fsyncSyncBestEffort(fd);
         } finally {
-          fs11.closeSync(fd);
+          fs14.closeSync(fd);
         }
       }
-      fs11.renameSync(tempPath, filePath);
+      fs14.renameSync(tempPath, filePath);
       return;
     } catch (error51) {
       const code = error51.code;
@@ -471,7 +474,7 @@ function writeAtomicSync(filePath, content, options = {}) {
       }
       if (tempCreated) {
         try {
-          fs11.unlinkSync(tempPath);
+          fs14.unlinkSync(tempPath);
         } catch {
         }
       }
@@ -483,7 +486,7 @@ function writeAtomicSync(filePath, content, options = {}) {
 function cleanupTempFiles(dir, prefix, minAgeMs, now) {
   let entries;
   try {
-    entries = fs11.readdirSync(dir);
+    entries = fs14.readdirSync(dir);
   } catch {
     return;
   }
@@ -491,11 +494,11 @@ function cleanupTempFiles(dir, prefix, minAgeMs, now) {
     if (!entry.startsWith(prefix)) {
       continue;
     }
-    const tempPath = path25.join(dir, entry);
+    const tempPath = path27.join(dir, entry);
     try {
-      const stat5 = fs11.lstatSync(tempPath);
+      const stat5 = fs14.lstatSync(tempPath);
       if (stat5?.isFile() && !stat5.isSymbolicLink() && now - stat5.mtimeMs >= minAgeMs) {
-        fs11.unlinkSync(tempPath);
+        fs14.unlinkSync(tempPath);
       }
     } catch {
     }
@@ -507,7 +510,7 @@ function isIgnoredFsyncError(error51) {
 }
 function fsyncSyncBestEffort(fd) {
   try {
-    fs11.fsyncSync(fd);
+    fs14.fsyncSync(fd);
   } catch (error51) {
     if (!isIgnoredFsyncError(error51)) {
       throw error51;
@@ -527,7 +530,7 @@ function withDirectoryLock(deps, operation) {
   const startedAt = now();
   while (true) {
     try {
-      fs11.mkdirSync(deps.lockDir, { mode: 448 });
+      fs14.mkdirSync(deps.lockDir, { mode: 448 });
       writeLockOwner(deps.lockDir, ownerFileName, now());
       try {
         return operation();
@@ -547,7 +550,7 @@ function withDirectoryLock(deps, operation) {
 }
 function releaseLock(lockDir) {
   try {
-    fs11.rmSync(lockDir, { recursive: true, force: true });
+    fs14.rmSync(lockDir, { recursive: true, force: true });
   } catch {
   }
 }
@@ -557,14 +560,14 @@ function recoverStaleLock(lockDir, ownerFileName, now, staleLockMs) {
     if (!isRecoverableSnapshot(initialSnapshot, now, staleLockMs)) return;
     const quarantineDir = buildQuarantinePath(lockDir);
     try {
-      fs11.renameSync(lockDir, quarantineDir);
+      fs14.renameSync(lockDir, quarantineDir);
     } catch {
       return;
     }
     try {
       const quarantinedSnapshot = readLockSnapshot(quarantineDir, ownerFileName);
       if (sameLockSnapshot(initialSnapshot, quarantinedSnapshot) && isRecoverableSnapshot(quarantinedSnapshot, now, staleLockMs)) {
-        fs11.rmSync(quarantineDir, { recursive: true, force: true });
+        fs14.rmSync(quarantineDir, { recursive: true, force: true });
       } else {
         restoreQuarantinedLock(quarantineDir, lockDir);
       }
@@ -578,7 +581,7 @@ function recoverStaleLock(lockDir, ownerFileName, now, staleLockMs) {
   }
 }
 function readLockSnapshot(lockDir, ownerFileName) {
-  const stat5 = fs11.lstatSync(lockDir);
+  const stat5 = fs14.lstatSync(lockDir);
   if (stat5.isSymbolicLink()) {
     return { owner: null, mtimeMs: 0 };
   }
@@ -597,18 +600,18 @@ function writeLockOwner(lockDir, ownerFileName, startedAt) {
     hostname: os4.hostname(),
     startedAt
   };
-  const ownerPath = path25.join(lockDir, ownerFileName);
+  const ownerPath = path27.join(lockDir, ownerFileName);
   try {
-    fs11.writeFileSync(ownerPath, JSON.stringify(owner), { encoding: "utf-8", mode: 384 });
+    fs14.writeFileSync(ownerPath, JSON.stringify(owner), { encoding: "utf-8", mode: 384 });
   } catch (error51) {
     releaseLock(lockDir);
     throw error51;
   }
 }
 function readLockOwner(lockDir, ownerFileName) {
-  const ownerPath = path25.join(lockDir, ownerFileName);
+  const ownerPath = path27.join(lockDir, ownerFileName);
   try {
-    return sanitizeLockOwner(JSON.parse(fs11.readFileSync(ownerPath, "utf-8")));
+    return sanitizeLockOwner(JSON.parse(fs14.readFileSync(ownerPath, "utf-8")));
   } catch (error51) {
     const code = error51.code;
     if (code === "ENOENT") return null;
@@ -630,7 +633,7 @@ function sameLockSnapshot(a, b) {
 }
 function restoreQuarantinedLock(quarantineDir, lockDir) {
   try {
-    fs11.renameSync(quarantineDir, lockDir);
+    fs14.renameSync(quarantineDir, lockDir);
   } catch {
   }
 }
@@ -665,17 +668,17 @@ function sleepSync(ms) {
 function readAuthStoreFile(filePath) {
   let fd;
   try {
-    fd = fs11.openSync(filePath, fs11.constants.O_RDONLY | NOFOLLOW_FLAG);
-    if (!fs11.fstatSync(fd).isFile()) {
+    fd = fs14.openSync(filePath, fs14.constants.O_RDONLY | NOFOLLOW_FLAG);
+    if (!fs14.fstatSync(fd).isFile()) {
       return {};
     }
-    return JSON.parse(fs11.readFileSync(fd, "utf-8"));
+    return JSON.parse(fs14.readFileSync(fd, "utf-8"));
   } catch {
     return {};
   } finally {
     if (fd !== void 0) {
       try {
-        fs11.closeSync(fd);
+        fs14.closeSync(fd);
       } catch {
       }
     }
@@ -683,7 +686,7 @@ function readAuthStoreFile(filePath) {
 }
 
 // ../../packages/core-infra/src/auth/auth-storage.ts
-var DEFAULT_AUTH_PATH = path25.join(getFleetDataDir(), "auth.json");
+var DEFAULT_AUTH_PATH = path27.join(getFleetDataDir(), "auth.json");
 var AUTH_LOCK_OWNER_FILE_NAME = "owner.json";
 var AUTH_LOCK_TIMEOUT_MS = 5e3;
 function createAuthService(deps = {}) {
@@ -694,7 +697,7 @@ function createAuthService(deps = {}) {
     async deleteApiKey(providerId) {
       let deleted = false;
       withAuthLock(authPath, lockDir, () => {
-        if (!fs11.existsSync(authPath)) return;
+        if (!fs14.existsSync(authPath)) return;
         const data = readAuthStoreFile(authPath);
         if (!Object.prototype.hasOwnProperty.call(data, providerId)) return;
         delete data[providerId];
@@ -707,21 +710,21 @@ function createAuthService(deps = {}) {
     async getApiKey(providerId) {
       let fd;
       try {
-        if (!fs11.existsSync(authPath)) {
+        if (!fs14.existsSync(authPath)) {
           return void 0;
         }
-        fd = fs11.openSync(authPath, fs11.constants.O_RDONLY | NOFOLLOW_FLAG);
-        if (!fs11.fstatSync(fd).isFile()) {
+        fd = fs14.openSync(authPath, fs14.constants.O_RDONLY | NOFOLLOW_FLAG);
+        if (!fs14.fstatSync(fd).isFile()) {
           return void 0;
         }
-        const data = JSON.parse(fs11.readFileSync(fd, "utf-8"));
+        const data = JSON.parse(fs14.readFileSync(fd, "utf-8"));
         return typeof data[providerId]?.key === "string" ? data[providerId].key : void 0;
       } catch {
         return void 0;
       } finally {
         if (fd !== void 0) {
           try {
-            fs11.closeSync(fd);
+            fs14.closeSync(fd);
           } catch {
           }
         }
@@ -729,7 +732,7 @@ function createAuthService(deps = {}) {
     },
     // [HIGH #2] 읽기 경로: fd 기반 O_RDONLY|O_NOFOLLOW 통일
     async listProviderIds() {
-      if (!fs11.existsSync(authPath)) {
+      if (!fs14.existsSync(authPath)) {
         return [];
       }
       try {
@@ -739,10 +742,10 @@ function createAuthService(deps = {}) {
       }
     },
     async setApiKey(providerId, key) {
-      const dir = path25.dirname(authPath);
+      const dir = path27.dirname(authPath);
       ensureSafeDirectory(dir);
       withAuthLock(authPath, lockDir, () => {
-        const data = fs11.existsSync(authPath) ? readAuthStoreFile(authPath) : {};
+        const data = fs14.existsSync(authPath) ? readAuthStoreFile(authPath) : {};
         data[providerId] = {
           ...data[providerId] ?? {},
           key
@@ -775,7 +778,7 @@ function createDurableJsonStore(deps) {
   const sensitivity = deps.sensitivity;
   const mode = sensitivity === "sensitive" ? SECURE_FILE_MODE : 420;
   const minAgeMs = deps.tempCleanupMinAgeMs ?? DEFAULT_TEMP_FILE_MIN_AGE_MS;
-  const dir = path25.dirname(deps.filePath);
+  const dir = path27.dirname(deps.filePath);
   return {
     path: deps.filePath,
     load() {
@@ -825,21 +828,21 @@ function createDurableJsonStore(deps) {
 function readJsonFile(filePath, sanitize) {
   let fd;
   try {
-    const stat5 = fs11.lstatSync(filePath);
+    const stat5 = fs14.lstatSync(filePath);
     if (!stat5 || !stat5.isFile() || stat5.isSymbolicLink()) {
       return sanitize(void 0);
     }
-    fd = fs11.openSync(filePath, fs11.constants.O_RDONLY | NOFOLLOW_FLAG);
-    if (!fs11.fstatSync(fd).isFile()) {
+    fd = fs14.openSync(filePath, fs14.constants.O_RDONLY | NOFOLLOW_FLAG);
+    if (!fs14.fstatSync(fd).isFile()) {
       return sanitize(void 0);
     }
-    return sanitize(JSON.parse(fs11.readFileSync(fd, "utf-8")));
+    return sanitize(JSON.parse(fs14.readFileSync(fd, "utf-8")));
   } catch {
     return sanitize(void 0);
   } finally {
     if (fd !== void 0) {
       try {
-        fs11.closeSync(fd);
+        fs14.closeSync(fd);
       } catch {
       }
     }
@@ -849,7 +852,7 @@ function ensureSafeDirectoryIfSensitive(dir, sensitivity) {
   if (sensitivity === "sensitive") {
     ensureSafeDirectory(dir);
   } else {
-    fs11.mkdirSync(dir, { recursive: true });
+    fs14.mkdirSync(dir, { recursive: true });
   }
 }
 
@@ -861,8 +864,8 @@ var LOCK_OWNER_FILE_NAME = "owner";
 var TEMP_FILE_PREFIX = `.tmp-${GLOBAL_OPTIONS_FILE_NAME}-`;
 function createGlobalOptionsStore(deps = {}) {
   const dataDir = deps.dataDir ?? getFleetDataDir();
-  const optionsPath = path25.join(dataDir, GLOBAL_OPTIONS_FILE_NAME);
-  const lockDir = path25.join(dataDir, LOCK_DIR_NAME);
+  const optionsPath = path27.join(dataDir, GLOBAL_OPTIONS_FILE_NAME);
+  const lockDir = path27.join(dataDir, LOCK_DIR_NAME);
   const store2 = createDurableJsonStore({
     filePath: optionsPath,
     lockDir,
@@ -895,10 +898,11 @@ function sanitizeGlobalOptionsData(value) {
   }
   const data = {
     version: GLOBAL_OPTIONS_VERSION,
-    ...typeof value.enableMetaphor === "boolean" ? { enableMetaphor: value.enableMetaphor } : {}
+    ...typeof value.enableMetaphor === "boolean" ? { enableMetaphor: value.enableMetaphor } : {},
+    ...value.codexLaunchMode === "acp" || value.codexLaunchMode === "app-server" ? { codexLaunchMode: value.codexLaunchMode } : {}
   };
-  const allowedKeys = /* @__PURE__ */ new Set(["version", "enableMetaphor"]);
-  const changed = Object.keys(value).some((key) => !allowedKeys.has(key)) || "enableMetaphor" in value && typeof value.enableMetaphor !== "boolean";
+  const allowedKeys = /* @__PURE__ */ new Set(["version", "enableMetaphor", "codexLaunchMode"]);
+  const changed = Object.keys(value).some((key) => !allowedKeys.has(key)) || "enableMetaphor" in value && typeof value.enableMetaphor !== "boolean" || "codexLaunchMode" in value && value.codexLaunchMode !== "acp" && value.codexLaunchMode !== "app-server";
   return { data, changed };
 }
 function isRecord(value) {
@@ -930,16 +934,100 @@ function createInfraServices(deps = {}) {
     globalOptionsService
   };
 }
-function readFleetConsoleRelease() {
+var DESKTOP_PROTOCOL_VERSION = 1;
+var DESKTOP_RESOURCE_ROOT_ENV = "FLEET_CONSOLE_RESOURCE_ROOT";
+var DESKTOP_OWNER_ID_ENV = "FLEET_CONSOLE_OWNER_ID";
+var DESKTOP_OWNER_KIND_ENV = "FLEET_CONSOLE_OWNER_KIND";
+var DESKTOP_PROTOCOL_VERSION_ENV = "FLEET_CONSOLE_PROTOCOL_VERSION";
+var DESKTOP_RESOURCE_ROOT_MARKER = ".fleet-console-resource-root";
+var DESKTOP_DEVELOPMENT_ENV = "FLEET_CONSOLE_DESKTOP_DEVELOPMENT";
+var LOCK_DIR_NAME2 = "fleet-console";
+var LOCK_FILE_NAME = "console.lock";
+var CONSOLE_DATA_DIR_NAME = "console";
+var CONSOLE_STATE_FILE_NAME = "state.json";
+var CONSOLE_SETTINGS_FILE_NAME = "settings.json";
+var CONSOLE_CAPTURES_DIR_NAME = "captures";
+function readDesktopProtocolEnvironment(env = process.env, deps = {}) {
+  const resourceRoot = env[DESKTOP_RESOURCE_ROOT_ENV];
+  const ownerId = env[DESKTOP_OWNER_ID_ENV];
+  const ownerKind = env[DESKTOP_OWNER_KIND_ENV];
+  const protocolVersion = env[DESKTOP_PROTOCOL_VERSION_ENV];
+  const values = [resourceRoot, ownerId, ownerKind, protocolVersion];
+  if (values.every((value) => value === void 0)) return null;
+  if (values.some((value) => !value)) throw new Error("desktop_protocol_environment_incomplete");
+  if (ownerKind !== "desktop") throw new Error("desktop_owner_kind_invalid");
+  if (!isSafeOwnerId(ownerId)) throw new Error("desktop_owner_id_invalid");
+  if (protocolVersion !== String(DESKTOP_PROTOCOL_VERSION)) throw new Error("desktop_protocol_version_unsupported");
+  const resolvedRoot = isDesktopDevelopmentEnvironment(env) ? validateDesktopDevelopmentResourceRoot(resourceRoot) : validateDesktopResourceRoot(resourceRoot, deps.expectedPackageRoot);
+  return { owner: { kind: "desktop", id: ownerId, protocolVersion: DESKTOP_PROTOCOL_VERSION }, resourceRoot: resolvedRoot };
+}
+function isDesktopDevelopmentEnvironment(env = process.env) {
+  return env[DESKTOP_DEVELOPMENT_ENV] === "1";
+}
+function resolveCanonicalStableConsolePaths(input) {
+  const dir = input.consoleDirOverride ?? path27__default.join(input.tmpDir, `${LOCK_DIR_NAME2}-${input.uid}-stable`);
+  const dataDir = input.consoleDirOverride ?? path27__default.join(input.fleetDataDir, CONSOLE_DATA_DIR_NAME);
+  return {
+    dir,
+    lockFile: path27__default.join(dir, LOCK_FILE_NAME),
+    dataDir,
+    stateFile: path27__default.join(dataDir, CONSOLE_STATE_FILE_NAME),
+    settingsFile: path27__default.join(dataDir, CONSOLE_SETTINGS_FILE_NAME),
+    capturesDir: path27__default.join(dataDir, CONSOLE_CAPTURES_DIR_NAME)
+  };
+}
+function validateDesktopResourceRoot(root, expectedPackageRoot = resolveDesktopProtocolPackageRoot()) {
+  if (!path27__default.isAbsolute(root)) throw new Error("desktop_resource_root_not_absolute");
+  const resolvedRoot = fs14__default.realpathSync(root);
+  const expectedRoot = fs14__default.realpathSync(expectedPackageRoot);
+  if (resolvedRoot !== expectedRoot) throw new Error("desktop_resource_root_invalid");
+  const markerPath = path27__default.join(resolvedRoot, DESKTOP_RESOURCE_ROOT_MARKER);
+  const marker = fs14__default.readFileSync(markerPath, "utf8").trim();
+  if (marker !== String(DESKTOP_PROTOCOL_VERSION)) throw new Error("desktop_resource_root_marker_invalid");
+  return resolvedRoot;
+}
+function validateDesktopDevelopmentResourceRoot(root) {
+  if (!path27__default.isAbsolute(root)) throw new Error("desktop_resource_root_not_absolute");
+  let resolvedRoot;
+  try {
+    resolvedRoot = fs14__default.realpathSync(root);
+  } catch {
+    throw new Error("desktop_development_resource_root_invalid");
+  }
+  const expectedRoot = fs14__default.realpathSync(resolveDesktopProtocolPackageRoot());
+  if (resolvedRoot !== expectedRoot) throw new Error("desktop_development_resource_root_invalid");
+  return resolvedRoot;
+}
+function resolveDesktopProtocolPackageRoot() {
+  const requireFromHere = createRequire(import.meta.url);
+  for (const candidate of ["../package.json", "../../package.json"]) {
+    try {
+      return path27__default.dirname(requireFromHere.resolve(candidate));
+    } catch (error51) {
+      if (error51.code !== "MODULE_NOT_FOUND") throw error51;
+    }
+  }
+  throw new Error("fleet_console_package_json_not_found");
+}
+function isSafeOwnerId(value) {
+  return value.length > 0 && value.length <= 256 && /^[A-Za-z0-9._-]+$/.test(value);
+}
+function readFleetConsoleRelease(env = process.env) {
+  const desktop = readDesktopProtocolEnvironment(env);
+  if (desktop) return readReleaseAt(desktop.resourceRoot, isDesktopDevelopmentEnvironment(env) ? "local" : "desktop");
   const requireFromHere = createRequire(import.meta.url);
   const packageJsonPath = resolvePackageJsonPath(requireFromHere);
+  const packageRoot = path27__default.dirname(packageJsonPath);
   const pkg = requireFromHere(packageJsonPath);
-  const packageRoot = path25__default.dirname(packageJsonPath);
-  const version2 = pkg.version ?? "";
   if (pkg.private === true) {
-    return { channel: "local", version: version2, packageRoot };
+    return readReleaseAt(packageRoot, "local", requireFromHere);
   }
-  return { channel: "stable", version: version2, packageRoot };
+  return readReleaseAt(packageRoot, "stable", requireFromHere);
+}
+function readReleaseAt(packageRoot, channel, requireFromHere = createRequire(import.meta.url)) {
+  const packageJsonPath = path27__default.join(packageRoot, "package.json");
+  const pkg = requireFromHere(packageJsonPath);
+  return { channel, version: pkg.version ?? "", packageRoot };
 }
 function resolvePackageJsonPath(requireFromHere) {
   for (const candidate of ["../package.json", "../../package.json"]) {
@@ -953,25 +1041,23 @@ function resolvePackageJsonPath(requireFromHere) {
 }
 
 // core/host/paths.ts
-var LOCK_DIR_NAME2 = "fleet-console";
 var CONSOLE_RUNTIME_DIR_NAME = "console";
-var LOCK_FILE_NAME = "console.lock";
-var CONSOLE_DATA_DIR_NAME = "console";
-var CONSOLE_STATE_FILE_NAME = "state.json";
-var CONSOLE_SETTINGS_FILE_NAME = "settings.json";
-var CONSOLE_CAPTURES_DIR_NAME = "captures";
+var CONSOLE_DATA_DIR_NAME2 = "console";
+var CONSOLE_STATE_FILE_NAME2 = "state.json";
+var CONSOLE_SETTINGS_FILE_NAME2 = "settings.json";
+var CONSOLE_CAPTURES_DIR_NAME2 = "captures";
 function createConsolePaths(deps = {}) {
   const env = deps.env ?? process.env;
   const base = env.FLEET_CONSOLE_DIR ?? defaultConsoleBaseDir(deps);
-  return { dir: base, lockFile: path25__default.join(base, LOCK_FILE_NAME) };
+  return { dir: base, lockFile: path27__default.join(base, "console.lock") };
 }
 function createConsoleDataPaths(deps = {}) {
   const dir = defaultConsoleDataBaseDir(deps);
   return {
     dir,
-    stateFile: path25__default.join(dir, CONSOLE_STATE_FILE_NAME),
-    settingsFile: path25__default.join(dir, CONSOLE_SETTINGS_FILE_NAME),
-    capturesDir: path25__default.join(dir, CONSOLE_CAPTURES_DIR_NAME)
+    stateFile: path27__default.join(dir, CONSOLE_STATE_FILE_NAME2),
+    settingsFile: path27__default.join(dir, CONSOLE_SETTINGS_FILE_NAME2),
+    capturesDir: path27__default.join(dir, CONSOLE_CAPTURES_DIR_NAME2)
   };
 }
 function defaultConsoleBaseDir(deps) {
@@ -982,11 +1068,15 @@ function defaultConsoleBaseDir(deps) {
     return localConsoleDir(packageRoot);
   }
   const uid = deps.uid ?? (typeof process.getuid === "function" ? process.getuid() : 0);
-  return path25__default.join(os4__default.tmpdir(), `${LOCK_DIR_NAME2}-${uid}-${channel}`);
+  return resolveCanonicalStableConsolePaths({
+    tmpDir: os4__default.tmpdir(),
+    uid,
+    fleetDataDir: getFleetDataDir()
+  }).dir;
 }
 function defaultConsoleDataBaseDir(deps) {
   if (deps.fleetDataDir !== void 0) {
-    return path25__default.join(deps.fleetDataDir, CONSOLE_DATA_DIR_NAME);
+    return path27__default.join(deps.fleetDataDir, CONSOLE_DATA_DIR_NAME2);
   }
   const env = deps.env ?? process.env;
   if (env.FLEET_CONSOLE_DIR) {
@@ -998,10 +1088,14 @@ function defaultConsoleDataBaseDir(deps) {
     const packageRoot = deps.packageRoot ?? (release ??= readFleetConsoleRelease()).packageRoot;
     return localConsoleDir(packageRoot);
   }
-  return path25__default.join(getFleetDataDir(), CONSOLE_DATA_DIR_NAME);
+  return resolveCanonicalStableConsolePaths({
+    tmpDir: os4__default.tmpdir(),
+    uid: typeof process.getuid === "function" ? process.getuid() : 0,
+    fleetDataDir: getFleetDataDir()
+  }).dataDir;
 }
 function localConsoleDir(packageRoot) {
-  return path25__default.join(path25__default.resolve(packageRoot, "..", ".."), ".fleet", CONSOLE_RUNTIME_DIR_NAME);
+  return path27__default.join(path27__default.resolve(packageRoot, "..", ".."), ".fleet", CONSOLE_RUNTIME_DIR_NAME);
 }
 
 // ../../packages/fleet-carriers/src/dispatch/framework.ts
@@ -1837,10 +1931,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path46) {
-  if (!path46)
+function getElementAtPath(obj, path50) {
+  if (!path50)
     return obj;
-  return path46.reduce((acc, key) => acc?.[key], obj);
+  return path50.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -2249,11 +2343,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path46, issues) {
+function prefixIssues(path50, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path46);
+    iss.path.unshift(path50);
     return iss;
   });
 }
@@ -2400,16 +2494,16 @@ function flattenError(error51, mapper = (issue2) => issue2.message) {
 }
 function formatError(error51, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path46 = []) => {
+  const processError = (error52, path50 = []) => {
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path46, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path50, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path46, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path50, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path46, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path50, ...issue2.path]);
       } else {
-        const fullpath = [...path46, ...issue2.path];
+        const fullpath = [...path50, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -2436,17 +2530,17 @@ function formatError(error51, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error51, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error52, path46 = []) => {
+  const processError = (error52, path50 = []) => {
     var _a3, _b;
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path46, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path50, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path46, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path50, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path46, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path50, ...issue2.path]);
       } else {
-        const fullpath = [...path46, ...issue2.path];
+        const fullpath = [...path50, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -2478,8 +2572,8 @@ function treeifyError(error51, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path46 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path46) {
+  const path50 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path50) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -15143,13 +15237,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path46 = ref.slice(1).split("/").filter(Boolean);
-  if (path46.length === 0) {
+  const path50 = ref.slice(1).split("/").filter(Boolean);
+  if (path50.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path46[0] === defsKey) {
-    const key = path46[1];
+  if (path50[0] === defsKey) {
+    const key = path50[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -21995,12 +22089,12 @@ var CodexAppServerConnection = class extends BaseConnection {
     );
   }
   findRolloutPathForThreadId(threadId) {
-    const codexHome = this.codexHome ?? this.env.CODEX_HOME ?? path25.join(this.env.HOME ?? "", ".codex");
+    const codexHome = this.codexHome ?? this.env.CODEX_HOME ?? path27.join(this.env.HOME ?? "", ".codex");
     if (!codexHome) {
       return null;
     }
     for (const rootName of ["sessions", "archived_sessions"]) {
-      const found = findRolloutPath(path25.join(codexHome, rootName), threadId);
+      const found = findRolloutPath(path27.join(codexHome, rootName), threadId);
       if (found) {
         return found;
       }
@@ -22107,11 +22201,11 @@ function isMissingRolloutError(error51, threadId) {
   return error51 instanceof Error && error51.message.includes(`no rollout found for thread id ${threadId}`);
 }
 function findRolloutPath(root, threadId) {
-  if (!fs11.existsSync(root)) {
+  if (!fs14.existsSync(root)) {
     return null;
   }
-  for (const entry of fs11.readdirSync(root, { withFileTypes: true })) {
-    const entryPath = path25.join(root, entry.name);
+  for (const entry of fs14.readdirSync(root, { withFileTypes: true })) {
+    const entryPath = path27.join(root, entry.name);
     if (entry.isDirectory()) {
       const found = findRolloutPath(entryPath, threadId);
       if (found) {
@@ -22154,9 +22248,10 @@ var UnifiedCodexAgentClient = class extends EventEmitter {
       throw new Error("UnifiedCodexAgentClient\uB294 codex CLI\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4.");
     }
     this.validateModelEffort(options.model, options.effort);
-    {
+    if (shouldUseCodexAcp(options)) {
       return this.connectAcp(options);
     }
+    return this.connectAppServer(options);
   }
   async connectAppServer(options) {
     const backend = getBackendConfig("codex");
@@ -22794,6 +22889,11 @@ var UnifiedCodexAgentClient = class extends EventEmitter {
     return patterns.some((pattern) => pattern.test(text));
   }
 };
+function shouldUseCodexAcp(options) {
+  const value = options.env?.CODEX_USE_ACP ?? process.env.CODEX_USE_ACP;
+  const normalized = value?.trim().toLowerCase();
+  return normalized !== "false" && normalized !== "0";
+}
 var UnifiedCursorAgentClient = class extends EventEmitter {
   connection = null;
   sessionId = null;
@@ -24919,7 +25019,7 @@ function formatInstallCommand(packageNames, command2, versionOrChannel) {
   return `${command2} i -g ${packageNames.map((name) => `${name}@${versionOrChannel}`).join(" ")}`;
 }
 function isPathInside(deps, child, parent) {
-  const separator = deps.platform === "win32" ? "\\" : path25__default.sep;
+  const separator = deps.platform === "win32" ? "\\" : path27__default.sep;
   return child === parent || child.startsWith(`${parent}${separator}`);
 }
 function normalizeExistingPath(deps, value) {
@@ -24934,10 +25034,10 @@ function normalizePath(deps, value) {
   return deps.platform === "win32" ? resolved.toLowerCase() : resolved;
 }
 function resolvePathForPlatform(platform, value) {
-  return platform === "win32" ? path25__default.win32.resolve(value) : path25__default.resolve(value);
+  return platform === "win32" ? path27__default.win32.resolve(value) : path27__default.resolve(value);
 }
 function joinPathForPlatform(platform, ...parts) {
-  return platform === "win32" ? path25__default.win32.join(...parts) : path25__default.join(...parts);
+  return platform === "win32" ? path27__default.win32.join(...parts) : path27__default.join(...parts);
 }
 function defaultExecFile(file2, args) {
   return execFileSync(file2, args, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
@@ -25046,7 +25146,7 @@ function readRawCarriersOrDefaultStore() {
   return readCarriers();
 }
 function getCarriersFilePath() {
-  return path25.join(resolveStoreDir(), FILENAME);
+  return path27.join(resolveStoreDir(), FILENAME);
 }
 function updateCarriers(mutator) {
   withStoreLock(() => {
@@ -25060,7 +25160,7 @@ function updateCarriers(mutator) {
 function withStoreLock(operation) {
   const dir = resolveStoreDir();
   ensureSafeDirectory(dir);
-  const lockDir = path25.join(dir, LOCK_DIRNAME);
+  const lockDir = path27.join(dir, LOCK_DIRNAME);
   return withDirectoryLock(
     { lockDir, ownerFileName: LOCK_OWNER_FILENAME },
     operation
@@ -25073,20 +25173,20 @@ function readCarriers() {
   return readCarriersFromDir(resolveStoreDir());
 }
 function readCarriersFromDir(dir) {
-  const filePath = path25.join(dir, FILENAME);
+  const filePath = path27.join(dir, FILENAME);
   let fd;
   try {
-    const stat5 = fs11.lstatSync(filePath);
+    const stat5 = fs14.lstatSync(filePath);
     if (!stat5.isFile() || stat5.isSymbolicLink()) return {};
-    fd = fs11.openSync(filePath, fs11.constants.O_RDONLY | NOFOLLOW_FLAG);
-    if (!fs11.fstatSync(fd).isFile()) return {};
-    return sanitizeFleetCarriers(JSON.parse(fs11.readFileSync(fd, "utf-8")));
+    fd = fs14.openSync(filePath, fs14.constants.O_RDONLY | NOFOLLOW_FLAG);
+    if (!fs14.fstatSync(fd).isFile()) return {};
+    return sanitizeFleetCarriers(JSON.parse(fs14.readFileSync(fd, "utf-8")));
   } catch {
     return {};
   } finally {
     if (fd !== void 0) {
       try {
-        fs11.closeSync(fd);
+        fs14.closeSync(fd);
       } catch {
       }
     }
@@ -25094,7 +25194,7 @@ function readCarriersFromDir(dir) {
 }
 function recordLastLocalWriteFingerprint(filePath, generation) {
   try {
-    const st = fs11.statSync(filePath);
+    const st = fs14.statSync(filePath);
     runtimeState.lastLocalWriteFingerprint = { generation, mtimeMs: st.mtimeMs, size: st.size };
   } catch {
     runtimeState.lastLocalWriteFingerprint = { generation, mtimeMs: 0, size: 0 };
@@ -25102,7 +25202,7 @@ function recordLastLocalWriteFingerprint(filePath, generation) {
 }
 function writeCarriers(s) {
   const dir = resolveStoreDir();
-  const filePath = path25.join(dir, FILENAME);
+  const filePath = path27.join(dir, FILENAME);
   const next = serializeFleetCarriers(s);
   writeAtomicSync(filePath, `${JSON.stringify(next, null, 2)}
 `, { fsync: false, mode: 420 });
@@ -25127,7 +25227,7 @@ function sanitizeFleetCarriers(value) {
 }
 function unlinkStaleSubagentModeFile(dir) {
   try {
-    fs11.unlinkSync(path25.join(dir, STALE_SUBAGENT_MODE_FILENAME));
+    fs14.unlinkSync(path27.join(dir, STALE_SUBAGENT_MODE_FILENAME));
   } catch {
   }
 }
@@ -25656,7 +25756,7 @@ var CHRONICLE_DEFAULTS = {
 };
 var CARRIER_METADATA = {
   // ── Tier 1: Routing ──
-  title: "Captain \xB7 Chief Knowledge Officer",
+  title: "Chief Knowledge Officer",
   summary: "Documentation steward across two surfaces: codebase markdown (AGENTS.md/README/CHANGELOG/inline docs) and Fleet Wiki entries proposed via the wiki patch queue.",
   category: "operations",
   whenToUse: [
@@ -25669,7 +25769,7 @@ var CARRIER_METADATA = {
     "before implementation and verification are complete",
     "code modification (\u2192genesis) or code review (\u2192sentinel)",
     "architectural judgment (\u2192nimitz) or release-scope planning decisions (\u2192kirov)",
-    "Fleet Wiki patch approval \u2014 Admiral retains the wiki_patch_queue approve/reject gate"
+    "Fleet Wiki patch approval \u2014 host agent retains the wiki_patch_queue approve/reject gate"
   ],
   requestBlocks: [
     {
@@ -25705,18 +25805,18 @@ var CARRIER_METADATA = {
   ],
   // ── Tier 2: Composition ──
   permissions: [
-    "CRITICAL: Fleet Wiki entries are governed by the Fleet Wiki workspace AGENTS.md doctrine \u2014 propose via wiki_ingest only, and NEVER edit wiki entries or system-managed indexes/logs by hand. Admiral holds the wiki_patch_queue approve/reject gate.",
+    "CRITICAL: Fleet Wiki entries are governed by the Fleet Wiki workspace AGENTS.md doctrine \u2014 propose via wiki_ingest only, and NEVER edit wiki entries or system-managed indexes/logs by hand. The host agent holds the wiki_patch_queue approve/reject gate.",
     "CRITICAL: Owns codebase markdown \u2014 AGENTS.md, README, CHANGELOG, and inline doc files outside the Fleet Wiki workspace \u2014 and may write them directly. NEVER modify source code logic (report issues instead).",
-    "MUST treat the Admiral's <doc_type>, <audience>, <scope>, and <change_scope> as binding contracts. NEVER redefine or expand documentation scope autonomously.",
-    "Owns expression details (tone, wording, paragraph flow within domain conventions) but MUST NOT silently change structural decisions specified by the Admiral (sections, items, target files).",
+    "MUST treat the host agent's <doc_type>, <audience>, <scope>, and <change_scope> as binding contracts. NEVER redefine or expand documentation scope autonomously.",
+    "Owns expression details (tone, wording, paragraph flow within domain conventions) but MUST NOT silently change structural decisions specified by the host agent (sections, items, target files).",
     "MUST NOT make go/no-go, release timing, or release-scope decisions (escalate to Kirov/Nimitz). May detect and document breaking changes only."
   ],
   outputFormat: `Deliver the documentation artifact directly.
 [Codebase Doc] Write the .md/AGENTS.md/README/CHANGELOG file(s) directly via filesystem tools.
-[Fleet Wiki] Compose the entry body and enqueue via wiki_ingest. Report the patch_id; never edit wiki entries or system-managed files by hand. Admiral approves via wiki_patch_queue.
+[Fleet Wiki] Compose the entry body and enqueue via wiki_ingest. Report the patch_id; never edit wiki entries or system-managed files by hand. The host agent approves via wiki_patch_queue.
 After delivery, provide a brief completion report.
 [Required] always include:
-  **Workflow** \u2014 One of: 'Codebase Doc' or 'Fleet Wiki' (state which workflow this sortie used).
+  **Workflow** \u2014 One of: 'Codebase Doc' or 'Fleet Wiki' (state which workflow this task used).
   **Documents written / Patches enqueued** \u2014 Each file created/modified (Codebase Doc) OR each patch_id enqueued (Fleet Wiki) with target path.
   **Cascade .md audit** \u2014 (Codebase Doc only) Each .md inspected: path, status (updated / already consistent / not applicable), 1-line summary if updated.
 [If applicable] omit if not relevant:
@@ -25725,10 +25825,10 @@ After delivery, provide a brief completion report.
 Keep the completion report concise \u2014 the documentation/patch itself is the primary deliverable.`,
   principles: [
     CARRIER_JOBS_SELF_CALL_HINT,
-    "Two workflows, one carrier \u2014 never mix the two surfaces. (A) Codebase Doc: direct filesystem edits to .md/AGENTS.md/README/CHANGELOG outside the Fleet Wiki workspace. (B) Fleet Wiki: orient \u2192 consult \u2192 lint \u2192 wiki_ingest to enqueue \u2192 Admiral approves via wiki_patch_queue. Decide the workflow from <doc_type>; if ambiguous, escalate before acting.",
-    "[Fleet Wiki] Read the Fleet Wiki workspace AGENTS.md before the first wiki operation in a sortie \u2014 it is the authoritative doctrine for boundaries, roles, gates, schema reference, and escalation. The active entry schema may evolve; always consult the workspace doctrine and current schema each sortie rather than relying on prior memory.",
+    "Two workflows, one carrier \u2014 never mix the two surfaces. (A) Codebase Doc: direct filesystem edits to .md/AGENTS.md/README/CHANGELOG outside the Fleet Wiki workspace. (B) Fleet Wiki: orient \u2192 consult \u2192 lint \u2192 wiki_ingest to enqueue \u2192 host agent approves via wiki_patch_queue. Decide the workflow from <doc_type>; if ambiguous, escalate before acting.",
+    "[Fleet Wiki] Read the Fleet Wiki workspace AGENTS.md before the first wiki operation in a task \u2014 it is the authoritative doctrine for boundaries, roles, gates, schema reference, and escalation. The active entry schema may evolve; always consult the workspace doctrine and current schema each task rather than relying on prior memory.",
     "[Fleet Wiki] Provide raw evidence (source) alongside every wiki_ingest call \u2014 synthesized entry body must cite raw substance without copying verbatim. The system writes raw, queue, and index automatically.",
-    "[Codebase Doc] Every sortie must include a cascade .md audit \u2014 identify all .md files within the change scope, verify they reflect current state, and cross-reference parent/child AGENTS.md to prevent doctrinal conflicts.",
+    "[Codebase Doc] Every task must include a cascade .md audit \u2014 identify all .md files within the change scope, verify they reflect current state, and cross-reference parent/child AGENTS.md to prevent doctrinal conflicts.",
     "[Codebase Doc] CRITICAL: README.md files must ONLY be updated where they already exist \u2014 NEVER create new README.md files. If a directory lacks a README.md, leave it as-is and note the absence in the audit report.",
     "If additional documentation scope seems needed, MUST report it as a follow-up suggestion in the completion report. NEVER silently expand the audit/update scope.",
     "Change-impact documentation must be factual and observable \u2014 never recommend whether a change should ship, be reverted, or be delayed."
@@ -25750,8 +25850,8 @@ var GENESIS_DEFAULTS = {
 };
 var CARRIER_METADATA2 = {
   // ── Tier 1: Routing ──
-  title: "Captain \xB7 Chief Engineer",
-  summary: "Full-stack implementation workhorse \u2014 builds features, writes production-quality clean code, and maintains structural integrity throughout. As the Captain (\uD568\uC7A5) of this Carrier, Genesis takes direct command of build and implementation operations.",
+  title: "Chief Engineer",
+  summary: "Full-stack implementation workhorse \u2014 builds features, writes production-quality clean code, and maintains structural integrity throughout.",
   category: "operations",
   whenToUse: [
     "new features",
@@ -25778,14 +25878,14 @@ var CARRIER_METADATA2 = {
   // ── Tier 2: Composition ──
   permissions: [
     "Full access to the codebase \u2014 read, write, and execute commands.",
-    "Owns implementation details (internal helper structure, code organization, local naming) ONLY within the design boundaries set by the Admiral's instructions.",
-    "MUST NOT substitute autonomous design judgment for the Admiral's explicit design decisions \u2014 interface unification vs separation, type/function names, directory structure, public surface shape, and any choice the Admiral has specified are BINDING contracts, not suggestions.",
+    "Owns implementation details (internal helper structure, code organization, local naming) ONLY within the design boundaries set by the host agent's instructions.",
+    "MUST NOT substitute autonomous design judgment for the host agent's explicit design decisions \u2014 interface unification vs separation, type/function names, directory structure, public surface shape, and any choice the host agent has specified are BINDING contracts, not suggestions.",
     "MUST NOT silently re-plan, expand scope, invent alternative workflows, or shrink the assigned work beyond what the instructions specify.",
     "MUST NOT silently absorb Kirov's planning role or Nimitz's architecture arbitration role when those inputs are clearly missing."
   ],
   principles: [
     CARRIER_JOBS_SELF_CALL_HINT,
-    "MUST treat the Admiral's <objective>, <scope>, <constraints>, and <references> as binding design contracts. Specific design decisions stated in the instructions MUST be implemented as-instructed, not as 'cleaner' or 'better' substitutions.",
+    "MUST treat the host agent's <objective>, <scope>, <constraints>, and <references> as binding design contracts. Specific design decisions stated in the instructions MUST be implemented as-instructed, not as 'cleaner' or 'better' substitutions.",
     "If an alternative design seems superior, MUST complete the assigned work AS-INSTRUCTED first, then report the alternative ONLY as a follow-up suggestion. NEVER substitute the alternative silently.",
     "On ambiguity or apparent conflict in the instructions, MUST report back and request clarification instead of choosing autonomously.",
     "Follow planning artifacts when provided \u2014 do not re-plan work that Kirov has already structured unless the input is clearly invalid.",
@@ -25819,8 +25919,8 @@ var KIROV_DEFAULTS = {
 };
 var CARRIER_METADATA3 = {
   // ── Tier 1: Routing ──
-  title: "Captain \xB7 Operational Planning Bridge",
-  summary: "Clarifies requirements, closes planning gaps, and writes executable .fleet/plans/*.md plan_files with ordered waves, ownership, dependencies, QA gates, acceptance criteria, documentation impacts, and escalation triggers.",
+  title: "Operational Planning",
+  summary: "Clarifies requirements, closes planning gaps, and writes one executable .fleet/plans/*.md plan_file SSoT with explicit parallel lanes, ownership, dependencies, QA gates, acceptance criteria, documentation impacts, and escalation triggers.",
   category: "planning",
   whenToUse: [
     "structured .fleet/plans/*.md plan_file requests, PRD decomposition, or Ohio-executable execution plans",
@@ -25828,14 +25928,14 @@ var CARRIER_METADATA3 = {
     "medium/large refactors, migrations, cross-module work, or materially ambiguous requirements where planning must close gaps before execution"
   ],
   whenNotToUse: [
-    "single-Carrier tasks with \u22643 dependent steps and clear acceptance criteria (\u2192Admiral plans directly)",
+    "single-Carrier tasks with \u22643 dependent steps and clear acceptance criteria (\u2192host agent plans directly)",
     "direct code implementation, single-shot (\u2192genesis) or plan-driven (\u2192ohio)",
-    "final architecture arbitration (\u2192nimitz) or sorties needing reconnaissance first (\u2192vanguard/tempest)"
+    "final architecture arbitration (\u2192nimitz) or dispatches needing reconnaissance first (\u2192vanguard/tempest)"
   ],
   requestBlocks: [
     { tag: "goal", hint: "What the user wants to build, fix, or achieve \u2014 specific feature, PRD, behavior, and any stated constraints.", required: true },
     { tag: "plan_file", hint: "If provided, exact repo-relative .fleet/plans/{name}.md path Kirov must create or update. Do not choose a different filename.", required: false },
-    { tag: "context", hint: "Relevant codebase context \u2014 files, modules, patterns, prior Admiral direction, or implementation realities the planner should respect.", required: false },
+    { tag: "context", hint: "Relevant codebase context \u2014 files, modules, patterns, prior host-agent direction, or implementation realities the planner should respect.", required: false },
     { tag: "constraints", hint: "Business rules, tech stack requirements, scope boundaries, fixed decisions, or explicit exclusions the plan must respect.", required: false },
     { tag: "intent_type", hint: "If known: Refactoring | Build from Scratch | Mid-sized | Collaborative | Architecture Follow-through | Research-to-Plan.", required: false }
   ],
@@ -25843,27 +25943,31 @@ var CARRIER_METADATA3 = {
   // ── Tier 2: Composition ──
   permissions: [
     "CRITICAL: Write access strictly limited to .fleet/plans/*.md and .fleet/drafts/*.md. NEVER modify source code, configs, or any non-markdown file.",
-    "MUST honor exact provided .fleet/plans/*.md paths. Success means creating or updating an executable plan_file unless the Admiral explicitly requests draft-only work.",
-    "MUST return unresolved architecture choices, system-design trade-offs, and technical path decisions to the Admiral for direction instead of silently deciding them.",
-    "MUST report Blockers or Admiral Direction Needed instead of claiming completion when the plan file cannot be written or the schema cannot be filled."
+    "MUST honor exact provided .fleet/plans/*.md paths. Keep one plan_file as the execution SSoT: Success means creating or updating that executable plan_file unless the host agent explicitly requests draft-only work. Do not create split plan files for parallel lanes.",
+    "MUST return unresolved architecture choices, system-design trade-offs, and technical path decisions to the host agent for direction instead of silently deciding them.",
+    "MUST report Blockers or Host Direction Needed instead of claiming completion when the plan file cannot be written or the schema cannot be filled."
   ],
   outputFormat: `After completing the plan, provide a structured plan summary.
 [Required] always include:
   **Plan file** \u2014 Exact generated or updated .fleet/plans/{name}.md path.
-  **Execution Waves** \u2014 Ordered waves with parallel markers (e.g., "W1 \u2192 W2 || W3 \u2192 W4") and critical dependencies.
+  **Execution Topology** \u2014 Ordered waves, stable Wave/Lane IDs, parallel markers (e.g., "W1 \u2192 W2 || W3 \u2192 W4"), and critical dependencies.
+  **Dispatch Manifest** \u2014 Each lane's exact write set, start condition, eligible concurrent lanes, integration gate, handoff, and rollback unit.
   **Scope: IN** \u2014 What is explicitly included in the plan.
   **Scope: OUT** \u2014 What is explicitly excluded.
   **Next step** \u2014 Run \`/start-work {name}\` to execute the plan.
 [If applicable] omit if not relevant:
   **Blockers** \u2014 Why no plan file was written or why the schema cannot be filled.
-  **Admiral Direction Needed** \u2014 Architecture, trade-off, or path choices needing confirmation.
+  **Host Direction Needed** \u2014 Architecture, trade-off, or path choices needing confirmation.
 Keep the summary concise \u2014 bullets and short lines only. No narrative paragraphs.`,
   principles: [
     CARRIER_JOBS_SELF_CALL_HINT,
     "Clarify only to unlock planning \u2014 ask the minimum questions needed to produce a reliable execution plan.",
     "Pre-plan gap analysis is mandatory internal input, never a substitute final output. May launch background explore/librarian sub-agents for context gathering. Use incremental write protocol: Write() skeleton first, then Edit() in 2-4 task batches.",
-    'The .fleet/plans/*.md file MUST contain this exact default Markdown template unless the Admiral provides a different template: # Objective, # File Ownership, # Waves, ## Wave N \u2014 <name>, - Target files/modules:, - Dependencies:, - Parallelizable:, - Implementation summary:, - Verification/static checks:, - Escalation triggers:, # QA Gates, # Acceptance Criteria, # Documentation Updates, # Final Review Loop. Required headings must not be renamed, reordered, or omitted; extra sections allowed only after them. Write headings into the plan_file itself, not just mentioned in the response. For tiny tasks, mark non-applicable fields "Not applicable" rather than deleting them.',
-    "Return unresolved architecture and deep trade-off decisions to the Admiral for direction.",
+    'The .fleet/plans/*.md file MUST contain this exact default Markdown template unless the host agent provides a different template: # Objective, # File Ownership, # Execution Topology, - Execution mode: Sequential | Parallel, - Shared mutable resources:, # Waves, ## Wave N \u2014 <name>, ### Lane WN-X \u2014 <name>, - Exact write set:, - Read dependencies:, - Dependency/start condition:, - Eligible concurrent lanes: (use "none" for serialized work), - Integration gate:, - Handoff:, - Rollback unit:, - Implementation summary:, - Verification/static checks:, - Escalation triggers:, # Dispatch Manifest, - Full-plan Ohio invocation (execution_scope omitted or all): allowed sequentially only when Execution mode is Sequential or Execution Topology is absent; for Parallel, dispatch exact Lane IDs only and never combine a full-plan invocation with lane jobs, - Lane WN-X \u2014 <name>: exact write set, read dependencies, dependency/start condition, eligible concurrent lanes, integration gate, handoff, and rollback unit summary for dispatch, # QA Gates, # Acceptance Criteria, # Documentation Updates, # Final Review Loop. Required headings must not be renamed, reordered, or omitted; extra sections allowed only after them. Write headings into the plan_file itself, not just mentioned in the response. For tiny tasks, mark non-applicable fields "Not applicable" rather than deleting them.',
+    "Execution Topology is mandatory for every plan. It MUST declare Execution mode: Sequential | Parallel, shared mutable resources, ordered waves, and stable Wave/Lane IDs; a lane may be marked parallel only when its exact non-overlapping write set and read dependencies prove it is safe to run concurrently.",
+    "Dispatch Manifest is mandatory for every plan. For each parallel lane, declare: stable Wave/Lane ID; exact non-overlapping write set; read dependencies; dependency/start condition; eligible concurrent lanes; integration gate; handoff; and rollback unit. It MUST also state that full-plan Ohio invocation (execution_scope omitted or all) is allowed sequentially only for Sequential or absent Execution Topology; Parallel requires exact Lane IDs, makes full-plan invocation unavailable as an alternative dispatch path, and never combines it with lane jobs. If disjoint lanes cannot be proven safe, mark the work sequential rather than calling it parallel.",
+    "Under each lane's '- Implementation summary:' (or the wave's when a wave declares no lanes), enumerate the concrete implementation steps as a Markdown checkbox task list \u2014 one '- [ ]' line per step, roughly 3-7 per lane; use '- [x]' only for work already completed at planning time. These checkboxes are the machine-readable progress contract consumed by the execution carrier and the Console Plans surface \u2014 do not encode task state in any other notation (no emoji, no status words, no strikethrough).",
+    "Return unresolved architecture and deep trade-off decisions to the host agent for direction.",
     "Optimize for direct execution from the resulting plan_file."
   ]
 };
@@ -25883,8 +25987,8 @@ var NIMITZ_DEFAULTS = {
 };
 var CARRIER_METADATA4 = {
   // ── Tier 1: Routing ──
-  title: "Captain \xB7 Strategic Command & Judgment",
-  summary: "Read-only strategic command \u2014 decides the technical path through doctrinal judgment, architecture decisions, deep analysis, and trade-off adjudication. As the Captain (\uD568\uC7A5) of this Carrier, Nimitz commands strategic technical judgment from the flagship bridge without entering the implementation path.",
+  title: "Strategic Command & Judgment",
+  summary: "Read-only strategic command \u2014 decides the technical path through doctrinal judgment, architecture decisions, deep analysis, and trade-off adjudication without entering the implementation path.",
   category: "strategy",
   whenToUse: [
     "architecture and design decisions",
@@ -25907,7 +26011,7 @@ var CARRIER_METADATA4 = {
   // ── Tier 2: Composition ──
   permissions: [
     "CRITICAL: Strictly read-only. NEVER delegate code modification or file editing to this carrier.",
-    "CRITICAL: NEVER sortie Nimitz without prior reconnaissance \u2014 if recon is needed, sortie vanguard/tempest FIRST. Hard prerequisite, not a suggestion.",
+    "CRITICAL: NEVER dispatch Nimitz without prior reconnaissance \u2014 if recon is needed, dispatch vanguard/tempest FIRST. Hard prerequisite, not a suggestion.",
     "Full access to read the codebase and execute read-only commands for analysis.",
     "MUST NOT decompose work into task waves, delivery schedules, or implementation checklists \u2014 handoff belongs to Kirov."
   ],
@@ -25948,8 +26052,8 @@ var OHIO_DEFAULTS = {
 };
 var CARRIER_METADATA5 = {
   // ── Tier 1: Routing ──
-  title: "Captain \xB7 Multi-Wave Strike Execution",
-  summary: "Receives a Kirov-authored plan_file and executes it wave-by-wave to completion \u2014 silent, patient, sequential delivery of plan steps. As the Captain (\uD568\uC7A5) of this Carrier, Ohio commands multi-wave strike execution and is the sole carrier authorised to consume plan_file inputs.",
+  title: "Multi-Wave Execution",
+  summary: "Receives a Kirov-authored plan_file and executes it wave-by-wave to completion, or one manifest-declared lane when explicitly scoped. Ohio is the sole carrier authorised to consume plan_file inputs.",
   category: "planning",
   whenToUse: [
     "multi-wave builds driven by an explicit plan_file",
@@ -25958,13 +26062,14 @@ var CARRIER_METADATA5 = {
     "cross-module coordinated changes following a Kirov plan"
   ],
   whenNotToUse: [
-    "single-file edits or admiral-direct single-shot tasks (\u2192genesis)",
+    "single-file edits or host-directed single-shot tasks (\u2192genesis)",
     "architecture decisions (\u2192nimitz)",
     "planning work itself (\u2192kirov)",
     "reconnaissance before planning (\u2192vanguard/tempest)"
   ],
   requestBlocks: [
     { tag: "plan_file", hint: "Required repo-relative path to a Markdown plan file under .fleet/plans/*.md only. Ohio reads this file and follows it as the authoritative execution plan.", required: true },
+    { tag: "execution_scope", hint: "Optional: for legacy plans without Execution Topology or plans marked Execution mode: Sequential, omitted or `all` executes the full plan sequentially. For Execution mode: Parallel, provide one exact Wave/Lane ID declared by the Dispatch Manifest; omitted or `all` is rejected. Never combine a full-plan invocation with scoped-lane Ohio invocation(s).", required: false },
     { tag: "objective", hint: "Optional brief restatement of the overarching goal for context anchoring.", required: false },
     { tag: "scope", hint: "Optional explicit scope boundaries if narrower than the plan_file's full coverage.", required: false },
     { tag: "constraints", hint: "Optional hard constraints, deadlines, or compatibility requirements that override or supplement the plan.", required: false }
@@ -25974,7 +26079,9 @@ var CARRIER_METADATA5 = {
   permissions: [
     "Full access to the codebase \u2014 read, write, and execute commands.",
     "MUST consult plan_file as the authoritative execution contract \u2014 plan steps are not optional or negotiable.",
-    "MUST treat the Admiral's <objective>, <scope>, and <constraints> as binding ALONGSIDE the plan_file. Even if a step or constraint seems suboptimal, MUST NOT substitute autonomous design judgment.",
+    "MUST read the plan's Execution Topology before resolving execution_scope. For legacy plans without Execution Topology or plans marked Execution mode: Sequential, omitted scope or `all` executes the full plan sequentially. For Execution mode: Parallel, require one exact Dispatch Manifest Wave/Lane ID and reject omitted or `all` scope rather than silently serializing available parallelism. A full-plan invocation (omitted or `all`) MUST NEVER be used alongside scoped-lane Ohio invocation(s).",
+    "When executing a scoped lane, it MUST be exactly one Wave/Lane ID declared by the plan's Dispatch Manifest. A scoped Ohio may change only that lane's declared write set; it MUST NOT edit plan_file, execute unassigned lanes, or guess an ambiguous scope. Before execution, it MUST satisfy the lane's dependency/start condition and required predecessor integration gates; its own QA/integration gate occurs after execution and MUST be satisfied before Ohio reports the lane eligible to release downstream work.",
+    "MUST treat the host agent's <objective>, <scope>, and <constraints> as binding ALONGSIDE the plan_file. Even if a step or constraint seems suboptimal, MUST NOT substitute autonomous design judgment.",
     "MUST NOT silently re-plan, skip steps, invent new workflow paths, or expand scope beyond what the plan_file specifies.",
     "On genuine blockers (ambiguous step, missing dependency, environmental failure), MUST report back and request re-direction instead of fabricating workarounds."
   ],
@@ -25982,13 +26089,17 @@ var CARRIER_METADATA5 = {
     CARRIER_JOBS_SELF_CALL_HINT,
     "Read plan_file as the binding execution contract \u2014 do not deviate, re-plan, or skip steps.",
     "Accept only repo-relative Markdown plan paths under .fleet/plans/*.md. If the path is missing, unreadable, outside .fleet/plans/, not repo-relative, or not a .md file, do not guess, do not silently re-plan, and do not invent a replacement workflow \u2014 report the problem back and ask for re-direction.",
+    "Read Execution Topology before resolving execution_scope. For legacy plans without Execution Topology or Execution mode: Sequential, omitted scope or `all` retains full-plan sequential compatibility. For Execution mode: Parallel, require one exact manifest-declared Wave/Lane ID and reject omitted or `all` scope rather than silently serializing available parallelism. Never use a full-plan invocation alongside scoped-lane Ohio invocation(s).",
+    "For a lane scope, change only that lane's declared write set. Never edit plan_file or execute another lane. Before execution, satisfy the lane's dependency/start condition and required predecessor integration gates; after execution, satisfy that lane's own QA/integration gate before reporting it eligible to release downstream work.",
     "Execute waves in the declared order; preserve QA checkpoints between waves and do not collapse them.",
-    "If a wave or constraint should be redesigned, MUST escalate to the Admiral via the completion report instead of silently altering the wave's intent.",
+    "Progress write-back applies to full-plan scope only (execution_scope omitted or `all`): immediately after a wave's QA checkpoint passes, update the plan_file by flipping that wave's completed task checkboxes from '- [ ]' to '- [x]'. This is a state-marker edit only \u2014 never reword, reorder, add, or delete any other plan content while doing it. Flip only steps actually completed; if a completed step has no matching checkbox, leave the text untouched and record the mismatch under Deviations in the completion report. A scoped-lane Ohio never edits plan_file (lane jobs may run concurrently) \u2014 instead it lists the lane's completed task checkboxes in its completion report so the integrator flips them after the lane's integration gate.",
+    "If a wave or constraint should be redesigned, MUST escalate to the host agent via the completion report instead of silently altering the wave's intent.",
     "Escalate genuine blockers (ambiguous step, missing dependency, environmental failure) instead of fabricating workarounds.",
     "Do not absorb planning, architecture, or QA roles \u2014 if the plan demands a decision Ohio cannot make, escalate to the appropriate carrier (Kirov/Nimitz/Sentinel)."
   ],
   outputFormat: `After completing the assigned wave(s), provide a structured wave-completion report.
 [Required] always include:
+  **Execution scope** \u2014 \`all\` or the exact Wave/Lane ID executed from the plan's Dispatch Manifest.
   **Wave(s) executed** \u2014 Ordered list of wave/step IDs from the plan_file actually completed.
   **Changes** \u2014 Every file created/modified/deleted with a 1-line summary each.
   **QA results** \u2014 Outcome of each wave's QA checkpoint (pass/fail with detail).
@@ -26014,8 +26125,8 @@ var SENTINEL_DEFAULTS = {
 };
 var CARRIER_METADATA6 = {
   // ── Tier 1: Routing ──
-  title: "Captain \xB7 The Inquisitor / QA & Security Lead",
-  summary: "Bug hunter and security specialist \u2014 code review, defect detection, quality audits, vulnerability hunting, and penetration testing with ruthless precision. As the Captain (\uD568\uC7A5) of this Carrier, Sentinel commands the fleet's quality and security inspections.",
+  title: "QA & Security Lead",
+  summary: "Bug hunter and security specialist \u2014 code review, defect detection, quality audits, vulnerability hunting, and penetration testing with ruthless precision.",
   category: "strategy",
   whenToUse: [
     "code review, bug hunting, quality audits, test execution",
@@ -26071,8 +26182,8 @@ var TEMPEST_DEFAULTS = {
 };
 var CARRIER_METADATA7 = {
   // ── Tier 1: Routing ──
-  title: "Captain \xB7 External Intelligence Strike",
-  summary: "GitHub intelligence \u2014 external repo investigation via API and clone-based deep analysis. As the Captain (\uD568\uC7A5) of this Carrier, Tempest sprints across foreign waters to collect remote intelligence from upstream repositories and external codebases.",
+  title: "External Intelligence",
+  summary: "GitHub intelligence \u2014 external repo investigation via API and clone-based deep analysis of upstream repositories and unfamiliar codebases.",
   category: "operations",
   whenToUse: [
     "external GitHub repo investigation (library internals, upstream dependencies)",
@@ -26127,8 +26238,8 @@ var VANGUARD_DEFAULTS = {
 };
 var CARRIER_METADATA8 = {
   // ── Tier 1: Routing ──
-  title: "Captain \xB7 Scout Specialist",
-  summary: "Fast reconnaissance \u2014 codebase exploration, symbol tracing, web research. As the Captain (\uD568\uC7A5) of this Carrier, Vanguard leads forward scouting and fast intelligence gathering before heavier operations begin.",
+  title: "Reconnaissance Specialist",
+  summary: "Fast reconnaissance \u2014 codebase exploration, symbol tracing, web research, and external knowledge gathering.",
   category: "operations",
   whenToUse: [
     "codebase reconnaissance \u2014 exploration, multi-file scanning, symbol tracing",
@@ -31947,7 +32058,7 @@ function resolveDispatchCwd(rawCwd, fallbackCwd) {
   if (rawCwd === void 0) return { ok: true, cwd: fallbackCwd };
   const trimmed = rawCwd.trim();
   if (trimmed.length === 0) return { ok: true, cwd: fallbackCwd };
-  if (!path25__default.isAbsolute(trimmed)) {
+  if (!path27__default.isAbsolute(trimmed)) {
     return {
       ok: false,
       error: `Invalid cwd "${rawCwd}": must be an absolute path. Provide an absolute directory or omit cwd to use the host session cwd.`
@@ -32422,10 +32533,103 @@ function requireCarrierConfig(registry3, carrierId) {
   if (!config2) throw new Error(`Carrier not found: ${carrierId}`);
   return config2;
 }
-
-// core/host/global-settings-routes.ts
+var PLUGIN_ID_PATTERN = /^[a-z0-9][a-z0-9._-]*$/;
+var UI_FONT_SIZE_RANGE = { min: 12, max: 18};
+var DEFAULT_UI_FONT_SETTINGS = { source: "builtin", id: "manrope", size: 14 };
+var SETTINGS_VERSION = 1;
+var SETTINGS_LOCK_DIR_NAME = "settings.lock";
+var SETTINGS_LOCK_OWNER_FILE_NAME = "owner.json";
+var SETTINGS_TEMP_PREFIX = ".settings.";
 var MIN_CONSOLE_STATIC_PORT = 1024;
 var MAX_CONSOLE_STATIC_PORT = 65535;
+function createConsoleSettingsStore(deps = {}) {
+  const paths = deps.paths ?? createConsoleDataPaths();
+  const createStore = deps.createStore ?? createDurableJsonStore;
+  return createStore({
+    filePath: paths.settingsFile,
+    lockDir: path27__default.join(paths.dir, SETTINGS_LOCK_DIR_NAME),
+    lockOwnerFileName: SETTINGS_LOCK_OWNER_FILE_NAME,
+    now: deps.now,
+    sanitize: sanitizeConsoleSettingsData,
+    sensitivity: "sensitive",
+    tempCleanupPrefix: SETTINGS_TEMP_PREFIX
+  });
+}
+function sanitizeConsoleSettingsData(value) {
+  if (!isRecord4(value)) return emptyConsoleSettingsData();
+  if (value.version !== SETTINGS_VERSION) return emptyConsoleSettingsData();
+  const general = readConsoleGeneralSettings(value.general);
+  const plugins = readConsolePluginSettings(value.plugins);
+  return {
+    version: SETTINGS_VERSION,
+    general: general ?? {},
+    plugins: plugins ?? {}
+  };
+}
+function emptyConsoleSettingsData() {
+  return { version: 1, general: {}, plugins: {} };
+}
+function sanitizeUiFontSettings(value) {
+  if (isConsoleUiFontId(value)) return { source: "builtin", id: value, size: DEFAULT_UI_FONT_SETTINGS.size };
+  if (!isRecord4(value) || !isValidUiFontSize(value.size)) return void 0;
+  if (value.source === "builtin" && isConsoleUiFontId(value.id)) {
+    return { source: "builtin", id: value.id, size: value.size };
+  }
+  if (value.source === "system" && typeof value.familyName === "string") {
+    const familyName = sanitizeSystemFontFamily(value.familyName);
+    return familyName ? { source: "system", familyName, size: value.size } : void 0;
+  }
+  return void 0;
+}
+function isUiFontSettings(value) {
+  if (!isRecord4(value) || !isValidUiFontSize(value.size)) return false;
+  if (value.source === "builtin") return isConsoleUiFontId(value.id);
+  return value.source === "system" && typeof value.familyName === "string" && value.familyName.length > 0 && value.familyName === sanitizeSystemFontFamily(value.familyName);
+}
+function readConsoleGeneralSettings(value) {
+  if (!isRecord4(value)) return null;
+  const consolePortMode = value.consolePortMode === "dynamic" || value.consolePortMode === "static" ? value.consolePortMode : void 0;
+  const consoleStaticPort = isValidConsoleStaticPort(value.consoleStaticPort) ? value.consoleStaticPort : void 0;
+  const language = value.language === "auto" || value.language === "en" || value.language === "ko" ? value.language : void 0;
+  const theme = value.theme === "instrument" || value.theme === "maritime" || value.theme === "carbon" ? value.theme : void 0;
+  const uiFont = sanitizeUiFontSettings(value.uiFont);
+  return {
+    ...consolePortMode !== void 0 ? { consolePortMode } : {},
+    ...consoleStaticPort !== void 0 ? { consoleStaticPort } : {},
+    ...language !== void 0 ? { language } : {},
+    ...theme !== void 0 ? { theme } : {},
+    ...uiFont !== void 0 ? { uiFont } : {}
+  };
+}
+function readConsolePluginSettings(value) {
+  if (!isRecord4(value)) return null;
+  const result = {};
+  for (const [key, entry] of Object.entries(value)) {
+    if (!PLUGIN_ID_PATTERN.test(key)) continue;
+    if (!isRecord4(entry)) continue;
+    result[key] = entry;
+  }
+  return result;
+}
+function isRecord4(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isValidConsoleStaticPort(value) {
+  return typeof value === "number" && Number.isInteger(value) && value >= MIN_CONSOLE_STATIC_PORT && value <= MAX_CONSOLE_STATIC_PORT;
+}
+function isConsoleUiFontId(value) {
+  return value === "manrope" || value === "jetbrains-mono" || value === "source-code-pro";
+}
+function isValidUiFontSize(value) {
+  return typeof value === "number" && Number.isInteger(value) && value >= UI_FONT_SIZE_RANGE.min && value <= UI_FONT_SIZE_RANGE.max;
+}
+function sanitizeSystemFontFamily(value) {
+  return value.replace(/[\x00-\x1F\x7F]/g, "").trim().slice(0, 128);
+}
+
+// core/host/global-settings-routes.ts
+var MIN_CONSOLE_STATIC_PORT2 = 1024;
+var MAX_CONSOLE_STATIC_PORT2 = 65535;
 var GLOBAL_SETTINGS_API_CATALOG = [
   {
     method: "GET",
@@ -32481,22 +32685,34 @@ async function mutateGlobalSettings(req, res, deps) {
     deps.writeJson(res, 400, { error: "invalid_console_port_mode" });
     return;
   }
-  if (body.consoleStaticPort !== void 0 && body.consoleStaticPort !== null && !isValidConsoleStaticPort(body.consoleStaticPort)) {
+  if (body.consoleStaticPort !== void 0 && body.consoleStaticPort !== null && !isValidConsoleStaticPort2(body.consoleStaticPort)) {
     deps.writeJson(res, 400, { error: "invalid_console_static_port" });
     return;
   }
-  if (body.theme !== void 0 && body.theme !== "maritime" && body.theme !== "carbon") {
+  if (body.language !== void 0 && body.language !== "auto" && body.language !== "en" && body.language !== "ko") {
+    deps.writeJson(res, 400, { error: "invalid_language" });
+    return;
+  }
+  if (body.theme !== void 0 && body.theme !== "instrument" && body.theme !== "maritime" && body.theme !== "carbon") {
     deps.writeJson(res, 400, { error: "invalid_theme" });
     return;
   }
+  if (!isUiFontSettingsOrUndefined(body.uiFont)) {
+    deps.writeJson(res, 400, { error: "invalid_ui_font" });
+    return;
+  }
   const updated = deps.consoleSettingsStore.update((current) => ({
+    ...current,
     version: 1,
     general: {
       ...current.general,
       ...body.consolePortMode === "dynamic" || body.consolePortMode === "static" ? { consolePortMode: body.consolePortMode } : {},
-      ...isValidConsoleStaticPort(body.consoleStaticPort) ? { consoleStaticPort: body.consoleStaticPort } : {},
-      ...body.theme === "maritime" || body.theme === "carbon" ? { theme: body.theme } : {}
-    }
+      ...isValidConsoleStaticPort2(body.consoleStaticPort) ? { consoleStaticPort: body.consoleStaticPort } : {},
+      ...body.language === "auto" || body.language === "en" || body.language === "ko" ? { language: body.language } : {},
+      ...body.theme === "instrument" || body.theme === "maritime" || body.theme === "carbon" ? { theme: body.theme } : {},
+      ...isUiFontSettings(body.uiFont) ? { uiFont: body.uiFont } : {}
+    },
+    plugins: current.plugins
   }));
   const response = { state: toGlobalSettingsState(updated) };
   deps.writeJson(res, 200, response);
@@ -32506,77 +32722,21 @@ function toGlobalSettingsState(data) {
   return {
     consolePortMode: general.consolePortMode ?? "dynamic",
     consoleStaticPort: general.consoleStaticPort ?? null,
-    theme: general.theme ?? "maritime"
+    language: general.language ?? "auto",
+    theme: general.theme ?? "instrument",
+    uiFont: general.uiFont ?? DEFAULT_UI_FONT_SETTINGS
   };
 }
 function isJsonRequest2(req) {
   const contentType = req.headers["content-type"];
   return typeof contentType === "string" && contentType.toLowerCase().split(";")[0]?.trim() === "application/json";
 }
-function isValidConsoleStaticPort(value) {
-  return typeof value === "number" && Number.isInteger(value) && value >= MIN_CONSOLE_STATIC_PORT && value <= MAX_CONSOLE_STATIC_PORT;
-}
-var PLUGIN_ID_PATTERN = /^[a-z0-9][a-z0-9._-]*$/;
-var SETTINGS_VERSION = 1;
-var SETTINGS_LOCK_DIR_NAME = "settings.lock";
-var SETTINGS_LOCK_OWNER_FILE_NAME = "owner.json";
-var SETTINGS_TEMP_PREFIX = ".settings.";
-var MIN_CONSOLE_STATIC_PORT2 = 1024;
-var MAX_CONSOLE_STATIC_PORT2 = 65535;
-function createConsoleSettingsStore(deps = {}) {
-  const paths = deps.paths ?? createConsoleDataPaths();
-  const createStore = deps.createStore ?? createDurableJsonStore;
-  return createStore({
-    filePath: paths.settingsFile,
-    lockDir: path25__default.join(paths.dir, SETTINGS_LOCK_DIR_NAME),
-    lockOwnerFileName: SETTINGS_LOCK_OWNER_FILE_NAME,
-    now: deps.now,
-    sanitize: sanitizeConsoleSettingsData,
-    sensitivity: "sensitive",
-    tempCleanupPrefix: SETTINGS_TEMP_PREFIX
-  });
-}
-function sanitizeConsoleSettingsData(value) {
-  if (!isRecord4(value)) return emptyConsoleSettingsData();
-  if (value.version !== SETTINGS_VERSION) return emptyConsoleSettingsData();
-  const general = readConsoleGeneralSettings(value.general);
-  const plugins = readConsolePluginSettings(value.plugins);
-  return {
-    version: SETTINGS_VERSION,
-    general: general ?? {},
-    plugins: plugins ?? {}
-  };
-}
-function emptyConsoleSettingsData() {
-  return { version: 1, general: {}, plugins: {} };
-}
-function readConsoleGeneralSettings(value) {
-  if (!isRecord4(value)) return null;
-  const consolePortMode = value.consolePortMode === "dynamic" || value.consolePortMode === "static" ? value.consolePortMode : void 0;
-  const consoleStaticPort = isValidConsoleStaticPort2(value.consoleStaticPort) ? value.consoleStaticPort : void 0;
-  const theme = value.theme === "maritime" || value.theme === "carbon" ? value.theme : void 0;
-  return {
-    ...consolePortMode !== void 0 ? { consolePortMode } : {},
-    ...consoleStaticPort !== void 0 ? { consoleStaticPort } : {},
-    ...theme !== void 0 ? { theme } : {}
-  };
-}
-function readConsolePluginSettings(value) {
-  if (!isRecord4(value)) return null;
-  const result = {};
-  for (const [key, entry] of Object.entries(value)) {
-    if (!PLUGIN_ID_PATTERN.test(key)) continue;
-    if (!isRecord4(entry)) continue;
-    result[key] = entry;
-  }
-  return result;
-}
-function isRecord4(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function isValidConsoleStaticPort2(value) {
   return typeof value === "number" && Number.isInteger(value) && value >= MIN_CONSOLE_STATIC_PORT2 && value <= MAX_CONSOLE_STATIC_PORT2;
 }
+function isUiFontSettingsOrUndefined(value) {
+  return value === void 0 || isUiFontSettings(value);
+}
 
 // core/host/plugin-settings-routes.ts
 var PLUGIN_SETTINGS_PREFIX = "/api/v1/settings/plugins/";
@@ -32657,6 +32817,133 @@ function isJsonRequest3(req) {
   const contentType = req.headers["content-type"];
   return typeof contentType === "string" && contentType.toLowerCase().split(";")[0]?.trim() === "application/json";
 }
+var MAX_FAMILY_LENGTH = 128;
+var SUCCESS_TTL_MS = 5 * 60 * 1e3;
+var FAILURE_TTL_MS = 30 * 1e3;
+var CONTROL_CHARACTER_PATTERN = /[\x00-\x1F\x7F]/g;
+var NORMAL_FACE_MARKERS = ["normal", "regular", "roman", "book"];
+var TEXT_FAMILY_ALLOWLIST = /* @__PURE__ */ new Set([
+  "arial",
+  "arial nova",
+  "avenir",
+  "avenir next",
+  "calibri",
+  "candara",
+  "helvetica",
+  "helvetica neue",
+  "inter",
+  "manrope",
+  "noto sans",
+  "noto serif",
+  "segoe ui",
+  "sf pro text",
+  "system ui",
+  "times new roman",
+  "verdana",
+  "apple sd gothic neo",
+  "hiragino sans",
+  "hiragino kaku gothic pro",
+  "malgun gothic",
+  "meiryo",
+  "microsoft yahei",
+  "noto sans cjk",
+  "noto serif cjk",
+  "pingfang sc",
+  "pingfang tc",
+  "yu gothic"
+]);
+var TEXT_FAMILY_MARKERS = ["sans", "serif", "text", "grotesk", "gothic", "roman", "book", "humanist"];
+var DENY_FAMILY_MARKERS = ["hidden", "vertical", "symbol", "icon", "emoji", "dingbat", "ornament", "music", "math", "display", "decorative"];
+var EMPTY_SYSTEM_FONTS_ERROR = new Error("system font enumeration returned no usable families");
+function createSystemFontsService(deps = {}) {
+  const loadFonts = deps.loadFonts ?? (() => fontList.getFonts2({ disableQuoting: true }));
+  const now = deps.now ?? Date.now;
+  const successTtlMs = deps.successTtlMs ?? SUCCESS_TTL_MS;
+  const failureTtlMs = deps.failureTtlMs ?? FAILURE_TTL_MS;
+  let cached2 = null;
+  let cachedFailure = null;
+  let inFlight = null;
+  const getFonts = () => {
+    if (cached2 && now() - cached2.cachedAt < successTtlMs) return Promise.resolve(cached2.fonts);
+    if (cachedFailure && now() - cachedFailure.cachedAt < failureTtlMs) return Promise.reject(cachedFailure.error);
+    if (inFlight) return inFlight;
+    inFlight = loadFonts().then((fonts) => {
+      const normalized = normalizeSystemFonts(fonts);
+      if (normalized.length === 0) throw EMPTY_SYSTEM_FONTS_ERROR;
+      cached2 = { fonts: normalized, cachedAt: now() };
+      cachedFailure = null;
+      return normalized;
+    }).catch((error51) => {
+      cachedFailure = { error: error51, cachedAt: now() };
+      throw error51;
+    }).finally(() => {
+      inFlight = null;
+    });
+    return inFlight;
+  };
+  return { getFonts };
+}
+function normalizeSystemFonts(fonts) {
+  const groups = /* @__PURE__ */ new Map();
+  for (const font of fonts) {
+    if (!isFontInfo(font)) continue;
+    const family = sanitizeFamilyName(font.familyName);
+    if (!family) continue;
+    const key = family.toLocaleLowerCase();
+    const group = groups.get(key) ?? { family, faces: [] };
+    group.faces.push(font);
+    groups.set(key, group);
+  }
+  return [...groups.values()].map(toSystemFontRecord).sort((left, right) => left.family.localeCompare(right.family, void 0, { sensitivity: "base" }) || left.family.localeCompare(right.family));
+}
+function buildSystemFontsResponse(fonts) {
+  return { version: 1, fonts };
+}
+function isFontInfo(value) {
+  return typeof value === "object" && value !== null && typeof value.familyName === "string" && typeof value.monospace === "boolean" && typeof value.style === "string";
+}
+function sanitizeFamilyName(value) {
+  return value.replace(CONTROL_CHARACTER_PATTERN, "").trim().slice(0, MAX_FAMILY_LENGTH);
+}
+function toSystemFontRecord(group) {
+  const normalizedFamily = group.family.toLocaleLowerCase();
+  const monospace = group.faces.length > 0 && group.faces.every((face) => face.monospace);
+  const hasNormalNonMonospaceFace = group.faces.some((face) => !face.monospace && isNormalFace(face));
+  const denied = DENY_FAMILY_MARKERS.some((marker) => normalizedFamily.includes(marker));
+  const textFamily = TEXT_FAMILY_ALLOWLIST.has(normalizedFamily) || TEXT_FAMILY_MARKERS.some((marker) => normalizedFamily.includes(marker));
+  return { family: group.family, monospace, uiSuitable: !denied && hasNormalNonMonospaceFace && textFamily };
+}
+function isNormalFace(face) {
+  const style = face.style.toLocaleLowerCase();
+  return NORMAL_FACE_MARKERS.some((marker) => style.includes(marker));
+}
+
+// core/host/system-fonts-routes.ts
+var SYSTEM_FONTS_PATH = "/api/v1/settings/fonts/system";
+var SYSTEM_FONTS_API_CATALOG = [
+  {
+    method: "GET",
+    path: SYSTEM_FONTS_PATH,
+    summary: "List sanitized system font families for built-in settings.",
+    category: "Settings",
+    gate: "loopback"
+  }
+];
+function createSystemFontsRouter(deps) {
+  return async function handleSystemFontsRoute(context) {
+    if (context.pathname !== SYSTEM_FONTS_PATH) return false;
+    if (context.req.method !== "GET") {
+      deps.writeJson(context.res, 405, { error: "Method not allowed" });
+      return true;
+    }
+    try {
+      deps.writeJson(context.res, 200, buildSystemFontsResponse(await deps.systemFonts.getFonts()));
+    } catch {
+      deps.writeJson(context.res, 503, { error: "system_fonts_unavailable" });
+    }
+    return true;
+  };
+}
 
 // core/host/api-catalog.ts
 var compareApiCatalogEntries = (left, right) => left.category.localeCompare(right.category) || left.path.localeCompare(right.path) || left.method.localeCompare(right.method);
@@ -32665,9 +32952,115 @@ function buildApiCatalog() {
     ...SERVER_API_CATALOG,
     ...CARRIER_SETTINGS_API_CATALOG,
     ...GLOBAL_SETTINGS_API_CATALOG,
-    ...PLUGIN_SETTINGS_API_CATALOG
+    ...PLUGIN_SETTINGS_API_CATALOG,
+    ...SYSTEM_FONTS_API_CATALOG
   ].slice().sort(compareApiCatalogEntries);
 }
+var TheaterPathContextError = class extends Error {
+  code;
+  constructor(code) {
+    super(code);
+    this.code = code;
+  }
+};
+var DIRECTORY_ENTRY_CAP = 500;
+async function resolveTheaterPathContext(theaterRoot, relPath) {
+  if (relPath !== null && !isSafeRelativePath(relPath)) throw new TheaterPathContextError("invalid_path");
+  const nominalRoot = path27__default.resolve(theaterRoot);
+  const nominalTarget = relPath === null ? nominalRoot : path27__default.resolve(nominalRoot, ...relPath.split("/"));
+  if (!isWithinRoot(nominalTarget, nominalRoot)) throw new TheaterPathContextError("forbidden");
+  let realRoot;
+  let realPath;
+  try {
+    [realRoot, realPath] = await Promise.all([fs14__default.promises.realpath(nominalRoot), fs14__default.promises.realpath(nominalTarget)]);
+  } catch (error51) {
+    throw mapFsError(error51);
+  }
+  if (!isWithinRoot(realPath, realRoot)) throw new TheaterPathContextError("forbidden");
+  let stat5;
+  try {
+    stat5 = await fs14__default.promises.stat(realPath);
+  } catch (error51) {
+    throw mapFsError(error51);
+  }
+  if (!stat5.isDirectory()) throw new TheaterPathContextError("invalid_path");
+  const canonicalRel = path27__default.relative(realRoot, realPath).split(path27__default.sep).join("/");
+  return { realRoot, realPath, relPath: canonicalRel === "" ? null : canonicalRel, label: path27__default.basename(realPath) || path27__default.basename(realRoot) || "Theater" };
+}
+async function listTheaterDirectories(theaterRoot, parentRelPath) {
+  const parent = await resolveTheaterPathContext(theaterRoot, parentRelPath);
+  let entries;
+  try {
+    entries = await fs14__default.promises.readdir(parent.realPath, { withFileTypes: true });
+  } catch (error51) {
+    throw mapFsError(error51);
+  }
+  const result = [];
+  for (const entry of entries) {
+    if (result.length >= DIRECTORY_ENTRY_CAP) break;
+    const candidate = path27__default.join(parent.realPath, entry.name);
+    try {
+      const realCandidate = await fs14__default.promises.realpath(candidate);
+      if (!isWithinRoot(realCandidate, parent.realRoot)) continue;
+      const stat5 = await fs14__default.promises.stat(realCandidate);
+      if (!stat5.isDirectory()) continue;
+      const relPath = path27__default.relative(parent.realRoot, realCandidate).split(path27__default.sep).join("/");
+      if (relPath) result.push({ relPath, label: path27__default.basename(realCandidate) });
+    } catch {
+    }
+  }
+  return result.sort((left, right) => left.label.localeCompare(right.label));
+}
+function isSafeRelativePath(value) {
+  return value.length > 0 && value.length <= 4096 && !value.includes("\0") && !value.includes("\\") && !value.startsWith("/") && !/^[A-Za-z]:/.test(value) && !value.split("/").some((segment) => segment === "" || segment === "." || segment === "..");
+}
+function isWithinRoot(candidate, root) {
+  const normalizedRoot = root.endsWith(path27__default.sep) ? root : `${root}${path27__default.sep}`;
+  return candidate === root || candidate.startsWith(normalizedRoot);
+}
+function mapFsError(error51) {
+  return error51.code === "ENOENT" ? new TheaterPathContextError("not_found") : new TheaterPathContextError("invalid_path");
+}
+
+// core/host/codex/context-routes.ts
+function createCodexWorkspaceContextRouter(deps) {
+  return async function handleCodexWorkspaceContextRoute({ req, res, pathname }) {
+    const match = pathname.match(/^\/api\/v1\/theaters\/([^/]+)\/codex-workspace$/u);
+    if (!match) return false;
+    const theater = deps.getTheater(decodeURIComponent(match[1] ?? ""));
+    if (!theater) {
+      deps.writeJson(res, 400, { error: "invalid_theater" });
+      return true;
+    }
+    if (req.method !== "POST") {
+      deps.writeJson(res, 405, { error: "method_not_allowed" });
+      return true;
+    }
+    if (!deps.isAuthorized(req)) {
+      deps.writeJson(res, 401, { error: "unauthorized" });
+      return true;
+    }
+    const body = await deps.readJsonBody(req);
+    if (!isResolveWorkspaceBody(body)) {
+      deps.writeJson(res, 400, { error: "invalid_request" });
+      return true;
+    }
+    try {
+      deps.writeJson(res, 200, await deps.resolveWorkspace(theater.id, theater.realpath, body.relPath));
+    } catch (error51) {
+      writePathError(res, deps, error51);
+    }
+    return true;
+  };
+}
+function isResolveWorkspaceBody(value) {
+  return typeof value === "object" && value !== null && Object.keys(value).length === 1 && (value.relPath === null || typeof value.relPath === "string");
+}
+function writePathError(res, deps, error51) {
+  if (!(error51 instanceof TheaterPathContextError)) throw error51;
+  const status = error51.code === "not_found" ? 404 : error51.code === "forbidden" ? 403 : 400;
+  deps.writeJson(res, status, { error: error51.code });
+}
 
 // ../../packages/fleet-wiki/src/boundaries.ts
 var FLEET_WIKI_ENTRY_BEGIN = "<<<FLEET_WIKI_ENTRY_BEGIN";
@@ -33075,18 +33468,18 @@ Always read \`schema/wiki-schema.md\` directly before composing or revising entr
 `;
 async function ensureWorkspaceSchema(paths) {
   await mkdir(paths.schemaDir, { recursive: true });
-  await writeDefaultFileIfMissing(path25__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME), DEFAULT_WORKSPACE_SCHEMA_AGENTS);
-  await writeDefaultFileIfMissing(path25__default.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME), DEFAULT_WORKSPACE_WIKI_SCHEMA);
+  await writeDefaultFileIfMissing(path27__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME), DEFAULT_WORKSPACE_SCHEMA_AGENTS);
+  await writeDefaultFileIfMissing(path27__default.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME), DEFAULT_WORKSPACE_WIKI_SCHEMA);
   await writeDefaultFileIfMissing(buildTemplatePath(paths, "prd"), DEFAULT_TEMPLATE_PRD);
   return readWorkspaceSchemaSummary(paths);
 }
 async function ensureWorkspaceDoctrine(paths) {
   await mkdir(paths.root, { recursive: true });
-  await writeDefaultFileIfMissing(path25__default.join(paths.root, WORKSPACE_KNOWLEDGE_AGENTS_FILENAME), DEFAULT_WORKSPACE_KNOWLEDGE_AGENTS);
+  await writeDefaultFileIfMissing(path27__default.join(paths.root, WORKSPACE_KNOWLEDGE_AGENTS_FILENAME), DEFAULT_WORKSPACE_KNOWLEDGE_AGENTS);
 }
 async function readWorkspaceSchemaSummary(paths) {
-  const agentsPath = path25__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME);
-  const wikiSchemaPath = path25__default.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME);
+  const agentsPath = path27__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME);
+  const wikiSchemaPath = path27__default.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME);
   const wikiSchemaContent = await tryReadFile(wikiSchemaPath);
   const templates = await scanTemplates(paths);
   if (wikiSchemaContent === null) {
@@ -33125,7 +33518,7 @@ async function scanTemplates(paths) {
     if (!entry.name.startsWith(WORKSPACE_TEMPLATE_PREFIX) || !entry.name.endsWith(WORKSPACE_TEMPLATE_SUFFIX)) continue;
     const id = entry.name.slice(WORKSPACE_TEMPLATE_PREFIX.length, -WORKSPACE_TEMPLATE_SUFFIX.length);
     if (!id) continue;
-    const filePath = path25__default.join(paths.schemaDir, entry.name);
+    const filePath = path27__default.join(paths.schemaDir, entry.name);
     try {
       const parsed = parseTemplateMarkdown(await readFile(filePath, "utf8"));
       templates.push({
@@ -33159,7 +33552,7 @@ async function validateTemplateCompliance(paths, templateId, body) {
   }
 }
 function inferTemplateIdFromTarget(target, knownTemplateIds) {
-  const basename = path25__default.basename(target, ".md");
+  const basename = path27__default.basename(target, ".md");
   const ids = knownTemplateIds ?? DEFAULT_TEMPLATE_IDS;
   const sorted = [...ids].sort((a, b) => b.length - a.length);
   for (const id of sorted) {
@@ -33188,7 +33581,7 @@ function extractSchemaSummary(content) {
   return lines.find((line) => line.length > 0 && !line.startsWith("#")) ?? "Workspace schema is present.";
 }
 function buildTemplatePath(paths, id) {
-  return path25__default.join(paths.schemaDir, `${WORKSPACE_TEMPLATE_PREFIX}${id}${WORKSPACE_TEMPLATE_SUFFIX}`);
+  return path27__default.join(paths.schemaDir, `${WORKSPACE_TEMPLATE_PREFIX}${id}${WORKSPACE_TEMPLATE_SUFFIX}`);
 }
 function parseTemplateMarkdown(content) {
   const normalized = content.replace(/\r\n/g, "\n");
@@ -33215,16 +33608,16 @@ function isAlreadyExistsError(error51) {
 
 // ../../packages/fleet-wiki/src/paths.ts
 function resolveMemoryPaths(cwd) {
-  const root = path25__default.join(cwd, KNOWLEDGE_ROOT_DIRNAME);
+  const root = path27__default.join(cwd, KNOWLEDGE_ROOT_DIRNAME);
   return {
     root,
-    rawDir: path25__default.join(root, RAW_DIRNAME),
-    wikiDir: path25__default.join(root, WIKI_DIRNAME),
-    schemaDir: path25__default.join(root, SCHEMA_DIRNAME),
-    queueDir: path25__default.join(root, QUEUE_DIRNAME),
-    archiveDir: path25__default.join(root, ARCHIVE_DIRNAME),
-    conflictsDir: path25__default.join(root, CONFLICTS_DIRNAME),
-    indexFile: path25__default.join(root, INDEX_FILENAME)
+    rawDir: path27__default.join(root, RAW_DIRNAME),
+    wikiDir: path27__default.join(root, WIKI_DIRNAME),
+    schemaDir: path27__default.join(root, SCHEMA_DIRNAME),
+    queueDir: path27__default.join(root, QUEUE_DIRNAME),
+    archiveDir: path27__default.join(root, ARCHIVE_DIRNAME),
+    conflictsDir: path27__default.join(root, CONFLICTS_DIRNAME),
+    indexFile: path27__default.join(root, INDEX_FILENAME)
   };
 }
 async function ensureMemoryRoot(paths) {
@@ -33239,10 +33632,10 @@ async function ensureMemoryRoot(paths) {
   await ensureWorkspaceDoctrine(paths);
 }
 function getIndexMarkdownFile(paths) {
-  return path25__default.join(paths.wikiDir, INDEX_MD_FILENAME);
+  return path27__default.join(paths.wikiDir, INDEX_MD_FILENAME);
 }
 function getLogFile(paths) {
-  return path25__default.join(paths.root, LOG_MD_FILENAME);
+  return path27__default.join(paths.root, LOG_MD_FILENAME);
 }
 
 // ../../packages/fleet-wiki/src/log.ts
@@ -33308,12 +33701,12 @@ async function readWikiEntry(id, paths) {
   const index = await loadIndex(paths);
   const indexed = index[id];
   if (indexed) {
-    const resolved = path25__default.resolve(paths.root, indexed.path);
-    const rel = path25__default.relative(paths.wikiDir, resolved);
-    if (!rel || rel.startsWith("..") || path25__default.isAbsolute(rel)) return null;
+    const resolved = path27__default.resolve(paths.root, indexed.path);
+    const rel = path27__default.relative(paths.wikiDir, resolved);
+    if (!rel || rel.startsWith("..") || path27__default.isAbsolute(rel)) return null;
     return readMarkdownFile(resolved);
   }
-  const fallbackPath = path25__default.join(paths.wikiDir, `${id}.md`);
+  const fallbackPath = path27__default.join(paths.wikiDir, `${id}.md`);
   if (await pathExists(fallbackPath)) {
     return readMarkdownFile(fallbackPath);
   }
@@ -33324,20 +33717,20 @@ async function readWikiEntry(id, paths) {
 async function writeWikiEntryAtTarget(entry, target, paths) {
   await ensureMemoryRoot(paths);
   assertSafeEntryId(entry.id);
-  const absoluteTarget = path25__default.resolve(paths.root, target);
-  const relativeTarget = path25__default.relative(paths.wikiDir, absoluteTarget);
-  if (!relativeTarget || relativeTarget.startsWith("..") || path25__default.isAbsolute(relativeTarget)) {
+  const absoluteTarget = path27__default.resolve(paths.root, target);
+  const relativeTarget = path27__default.relative(paths.wikiDir, absoluteTarget);
+  if (!relativeTarget || relativeTarget.startsWith("..") || path27__default.isAbsolute(relativeTarget)) {
     throw new Error(`[fleet-wiki] wiki target escapes wiki/: ${target}`);
   }
   if (!absoluteTarget.endsWith(".md")) {
     throw new Error(`[fleet-wiki] wiki target must end with .md: ${target}`);
   }
-  if (path25__default.basename(absoluteTarget, ".md") !== entry.id) {
+  if (path27__default.basename(absoluteTarget, ".md") !== entry.id) {
     throw new Error("wiki patch body id must match target filename");
   }
-  await mkdir(path25__default.dirname(absoluteTarget), { recursive: true });
+  await mkdir(path27__default.dirname(absoluteTarget), { recursive: true });
   await writeMarkdownAtomic(absoluteTarget, serializeWikiEntry(entry), paths);
-  return path25__default.join("wiki", relativeTarget).replaceAll(path25__default.sep, "/");
+  return path27__default.join("wiki", relativeTarget).replaceAll(path27__default.sep, "/");
 }
 async function listWiki(paths) {
   const entries = await listWikiRecords(paths);
@@ -33560,7 +33953,7 @@ function parseWikiEntry(content) {
 async function listWikiRecords(paths) {
   return listMarkdownEntriesRecursive(paths.wikiDir, paths, (content, filePath) => ({
     entry: parseWikiEntry(content),
-    path: path25__default.relative(paths.root, filePath).replaceAll(path25__default.sep, "/")
+    path: path27__default.relative(paths.root, filePath).replaceAll(path27__default.sep, "/")
   }));
 }
 async function listMarkdownEntriesRecursive(dirPath, paths, parser) {
@@ -33573,7 +33966,7 @@ async function listMarkdownEntriesRecursive(dirPath, paths, parser) {
   }
   const sortedEntries = entries.sort((left, right) => left.name.localeCompare(right.name));
   for (const entry of sortedEntries) {
-    const filePath = path25__default.join(dirPath, entry.name);
+    const filePath = path27__default.join(dirPath, entry.name);
     if (entry.isDirectory()) {
       items.push(...await listMarkdownEntriesRecursive(filePath, paths, parser));
       continue;
@@ -33711,8 +34104,8 @@ async function writeJsonAtomic(filePath, value, paths) {
 }
 async function writeAtomic(filePath, content, paths) {
   await ensureMemoryRoot(paths);
-  const tempPath = path25__default.join(
-    path25__default.dirname(filePath),
+  const tempPath = path27__default.join(
+    path27__default.dirname(filePath),
     `.tmp-${process.pid}-${Date.now()}-${crypto5.randomUUID()}-${os4__default.hostname()}`
   );
   await writeFile(tempPath, content, "utf8");
@@ -33806,7 +34199,7 @@ function toRankedHit(entry, reason, detail, graphBoost, backlinksById) {
     score: basePriority * 100 + statusPriority * 10 + graphScore + (detail.tagBoost ?? 0),
     reason,
     excerpt,
-    path: path25__default.join("wiki", `${entry.id}.md`),
+    path: path27__default.join("wiki", `${entry.id}.md`),
     tags: entry.tags,
     updated: entry.updated,
     version: entry.version,
@@ -33916,15 +34309,15 @@ var PATCH_SET_DIRNAME = "_sets";
 var PATCH_SET_META_FILENAME = PATCH_META_FILENAME;
 function getPatchSetDir(paths, patchSetId) {
   assertSafePatchSetId(patchSetId);
-  const patchSetDir = path25__default.join(paths.queueDir, PATCH_SET_DIRNAME, patchSetId);
-  const relative = path25__default.relative(path25__default.join(paths.queueDir, PATCH_SET_DIRNAME), patchSetDir);
-  if (!relative || relative.startsWith("..") || path25__default.isAbsolute(relative)) {
+  const patchSetDir = path27__default.join(paths.queueDir, PATCH_SET_DIRNAME, patchSetId);
+  const relative = path27__default.relative(path27__default.join(paths.queueDir, PATCH_SET_DIRNAME), patchSetDir);
+  if (!relative || relative.startsWith("..") || path27__default.isAbsolute(relative)) {
     throw new Error(`[fleet-wiki] patch set id escapes queue/_sets: ${patchSetId}`);
   }
   return patchSetDir;
 }
 function getPatchSetMetaFile(paths, patchSetId) {
-  return path25__default.join(getPatchSetDir(paths, patchSetId), PATCH_SET_META_FILENAME);
+  return path27__default.join(getPatchSetDir(paths, patchSetId), PATCH_SET_META_FILENAME);
 }
 async function readPatchSet(paths, patchSetId) {
   const patchSet = await readJsonFile2(getPatchSetMetaFile(paths, patchSetId));
@@ -33947,7 +34340,7 @@ async function createConflict(input, paths) {
   await ensureMemoryRoot(paths);
   const now = input.now ?? /* @__PURE__ */ new Date();
   const conflictId = buildConflictId(now, input.wikiId, input.reason, input.proposed);
-  const conflictDir = path25__default.join(paths.conflictsDir, conflictId);
+  const conflictDir = path27__default.join(paths.conflictsDir, conflictId);
   await mkdir(conflictDir, { recursive: true });
   const meta3 = {
     id: conflictId,
@@ -33967,13 +34360,13 @@ async function createConflict(input, paths) {
     currentHash: input.currentHash,
     warnings: input.warnings
   };
-  await writeJsonFile(path25__default.join(conflictDir, CONFLICT_META_FILENAME), meta3, paths);
-  await writePatchFile(path25__default.join(conflictDir, CONFLICT_PROPOSED_FILENAME), input.proposed, paths);
+  await writeJsonFile(path27__default.join(conflictDir, CONFLICT_META_FILENAME), meta3, paths);
+  await writePatchFile(path27__default.join(conflictDir, CONFLICT_PROPOSED_FILENAME), input.proposed, paths);
   if (input.current !== void 0) {
-    await writePatchFile(path25__default.join(conflictDir, CONFLICT_CURRENT_FILENAME), input.current, paths);
+    await writePatchFile(path27__default.join(conflictDir, CONFLICT_CURRENT_FILENAME), input.current, paths);
   }
   if (input.rawSource !== void 0) {
-    await writePatchFile(path25__default.join(conflictDir, CONFLICT_RAW_SOURCE_FILENAME), input.rawSource, paths);
+    await writePatchFile(path27__default.join(conflictDir, CONFLICT_RAW_SOURCE_FILENAME), input.rawSource, paths);
   }
   return {
     meta: meta3,
@@ -34023,11 +34416,11 @@ async function validatePatch(patch, paths) {
   if (!target || !summary || !proposer || !created) throw new Error("patch frontmatter is incomplete");
   if (summary.length > 120) throw new Error("patch summary exceeds 120 chars");
   assertCanonicalPatchTarget(target);
-  const absoluteTarget = path25__default.resolve(paths.root, target);
-  if (!absoluteTarget.startsWith(`${paths.root}${path25__default.sep}`) && absoluteTarget !== paths.root) {
+  const absoluteTarget = path27__default.resolve(paths.root, target);
+  if (!absoluteTarget.startsWith(`${paths.root}${path27__default.sep}`) && absoluteTarget !== paths.root) {
     throw new Error("patch target escapes wiki root");
   }
-  if (!absoluteTarget.startsWith(`${paths.wikiDir}${path25__default.sep}`)) throw new Error("wiki patch must target wiki/");
+  if (!absoluteTarget.startsWith(`${paths.wikiDir}${path27__default.sep}`)) throw new Error("wiki patch must target wiki/");
   assertNoSymlinkPathComponents(target, paths);
   if (op === "create_wiki" && await pathExists(absoluteTarget)) {
     throw new Error(
@@ -34051,7 +34444,7 @@ async function listQueue(paths) {
   for (const id of ids) {
     if (id === "_sets") continue;
     try {
-      const meta3 = await readJsonFile2(path25__default.join(paths.queueDir, id, PATCH_META_FILENAME));
+      const meta3 = await readJsonFile2(path27__default.join(paths.queueDir, id, PATCH_META_FILENAME));
       results.push({ id, meta: meta3 });
     } catch {
       continue;
@@ -34076,9 +34469,9 @@ async function resolveQueueSelection(id, paths) {
 }
 async function showQueue(id, paths) {
   const selection = await resolveQueueSelection(id, paths);
-  const queueDir = path25__default.join(paths.queueDir, selection.id);
-  const patch = await parsePatch(await readPatchFile(path25__default.join(queueDir, PATCH_FILENAME)));
-  const meta3 = await readJsonFile2(path25__default.join(queueDir, PATCH_META_FILENAME));
+  const queueDir = path27__default.join(paths.queueDir, selection.id);
+  const patch = await parsePatch(await readPatchFile(path27__default.join(queueDir, PATCH_FILENAME)));
+  const meta3 = await readJsonFile2(path27__default.join(queueDir, PATCH_META_FILENAME));
   return { patch, meta: meta3 };
 }
 async function approvePatch(id, paths) {
@@ -34101,8 +34494,8 @@ async function approvePatch(id, paths) {
           rawSourceRef: meta3.rawSourceRef,
           warnings: meta3.warnings
         });
-        const queueDir = path25__default.join(paths.queueDir, id);
-        await writeJsonFile(path25__default.join(queueDir, PATCH_META_FILENAME), {
+        const queueDir = path27__default.join(paths.queueDir, id);
+        await writeJsonFile(path27__default.join(queueDir, PATCH_META_FILENAME), {
           ...meta3,
           conflictId
         }, paths);
@@ -34155,7 +34548,7 @@ async function rejectPatch(id, reason, paths) {
 }
 async function normalizeWikiEntryPatch(entry, target, paths) {
   assertSafeEntryId(entry.id);
-  if (entry.id !== path25__default.basename(target, ".md")) {
+  if (entry.id !== path27__default.basename(target, ".md")) {
     throw new Error("wiki patch body id must match target filename");
   }
   const inlineRawSourceRef = extractInlineRawSourceRef(entry.body);
@@ -34193,9 +34586,9 @@ function extractInlineRawSourceRef(body) {
 }
 async function validatePatchBase(patch, meta3, paths) {
   if (patch.frontmatter.op !== "update_wiki" || !meta3?.baseVersion && !meta3?.baseHash) return;
-  const wikiId = path25__default.basename(patch.frontmatter.target, ".md");
+  const wikiId = path27__default.basename(patch.frontmatter.target, ".md");
   const currentEntry = await readWikiEntry(wikiId, paths);
-  const currentPath = path25__default.join(paths.root, patch.frontmatter.target);
+  const currentPath = path27__default.join(paths.root, patch.frontmatter.target);
   const currentMarkdown = await pathExists(currentPath) ? await readPatchFile(currentPath) : void 0;
   if (meta3.baseVersion !== void 0 && currentEntry?.version !== meta3.baseVersion) {
     throw new Error(
@@ -34254,17 +34647,17 @@ function assertCanonicalPatchTarget(target) {
   if (target.endsWith("/")) {
     throw new Error("patch target must not end with a slash");
   }
-  if (target.startsWith("/") || path25__default.posix.isAbsolute(target) || path25__default.win32.isAbsolute(target)) {
+  if (target.startsWith("/") || path27__default.posix.isAbsolute(target) || path27__default.win32.isAbsolute(target)) {
     throw new Error("patch target must be relative");
   }
-  if (path25__default.posix.normalize(target) !== target) {
+  if (path27__default.posix.normalize(target) !== target) {
     throw new Error("patch target must not contain dot segments or redundant separators");
   }
 }
 function canonicalApprovalLockKey(paths, target) {
   const wikiRoot = realpathSync(paths.wikiDir);
-  const relativeTarget = path25__default.posix.relative("wiki", target);
-  const targetPath = path25__default.join(wikiRoot, ...relativeTarget.split("/"));
+  const relativeTarget = path27__default.posix.relative("wiki", target);
+  const targetPath = path27__default.join(wikiRoot, ...relativeTarget.split("/"));
   return `${wikiRoot}\0${targetPath}`.toLowerCase();
 }
 function canonicalPatchEditLockKey(paths, patchId) {
@@ -34280,7 +34673,7 @@ function assertNoSymlinkPathComponents(target, paths) {
     throw error51;
   }
   for (const part of parts) {
-    current = path25__default.join(current, part);
+    current = path27__default.join(current, part);
     try {
       if (lstatSync(current).isSymbolicLink()) {
         throw new Error("patch target must not include symlink path components");
@@ -34295,8 +34688,8 @@ function assertSafeRawSourceRef(rawSourceRef, paths) {
   if (!rawSourceRef.startsWith("raw/")) {
     throw new Error("raw source provenance must point into raw/");
   }
-  const absoluteRef = path25__default.resolve(paths.root, rawSourceRef);
-  if (!absoluteRef.startsWith(`${paths.rawDir}${path25__default.sep}`)) {
+  const absoluteRef = path27__default.resolve(paths.root, rawSourceRef);
+  if (!absoluteRef.startsWith(`${paths.rawDir}${path27__default.sep}`)) {
     throw new Error("raw source provenance must point into raw/");
   }
 }
@@ -34312,14 +34705,14 @@ function classifyPatchConflict(error51) {
 }
 async function recordPatchConflict(patch, paths, reason, options) {
   const now = /* @__PURE__ */ new Date();
-  const targetPath = path25__default.join(paths.root, patch.frontmatter.target);
+  const targetPath = path27__default.join(paths.root, patch.frontmatter.target);
   const current = await pathExists(targetPath) ? await readPatchFile(targetPath) : void 0;
   const currentEntry = current ? parseStoredWikiEntry(current) : void 0;
   const proposedEntry = parsePatchBodyEntry(patch.body);
   const record2 = await createConflict({
     reason,
     target: patch.frontmatter.target,
-    wikiId: proposedEntry?.id ?? path25__default.basename(patch.frontmatter.target, ".md"),
+    wikiId: proposedEntry?.id ?? path27__default.basename(patch.frontmatter.target, ".md"),
     title: proposedEntry?.title,
     proposer: patch.frontmatter.proposer,
     rawSourceRef: options?.rawSourceRef,
@@ -34415,11 +34808,11 @@ function parseInlineArray(value) {
   return inner.split(",").map((item) => item.trim().replace(/^"(.*)"$/, "$1"));
 }
 async function archiveQueueEntry(id, paths, meta3) {
-  const fromDir = path25__default.join(paths.queueDir, id);
-  const toDir = path25__default.join(paths.archiveDir, id);
+  const fromDir = path27__default.join(paths.queueDir, id);
+  const toDir = path27__default.join(paths.archiveDir, id);
   await removePath(toDir);
   await movePath(fromDir, toDir);
-  await writeJsonFile(path25__default.join(toDir, PATCH_META_FILENAME), meta3, paths);
+  await writeJsonFile(path27__default.join(toDir, PATCH_META_FILENAME), meta3, paths);
 }
 function buildQueueIdHelp(prefix, availableIds) {
   if (availableIds.length === 0) {
@@ -35141,15 +35534,15 @@ async function canonicalizeTheaterPath(cwd) {
   return canonicalizeTheaterPathSync(cwd);
 }
 function canonicalizeTheaterPathSync(cwd) {
-  const resolved = path25__default.resolve(cwd);
+  const resolved = path27__default.resolve(cwd);
   try {
-    return fs11__default.realpathSync.native(resolved);
+    return fs14__default.realpathSync.native(resolved);
   } catch {
     return resolved;
   }
 }
 function theaterLabel(cwd) {
-  return path25__default.basename(cwd) || cwd;
+  return path27__default.basename(cwd) || cwd;
 }
 
 // core/host/codex/workspaces.ts
@@ -35157,7 +35550,7 @@ var WorkspaceRegistry = class {
   #items = /* @__PURE__ */ new Map();
   #mruId = null;
   async register(cwdInput, lastOpenedAt) {
-    const cwd = path25__default.resolve(cwdInput);
+    const cwd = path27__default.resolve(cwdInput);
     const real = await canonicalizeTheaterPath(cwd);
     const paths = resolveMemoryPaths(real);
     if (!await directoryExists(paths.root)) {
@@ -35173,7 +35566,7 @@ var WorkspaceRegistry = class {
       id,
       cwd,
       realpath: real,
-      label: path25__default.basename(cwd),
+      label: path27__default.basename(cwd),
       paths,
       registeredAt: existing?.registeredAt ?? now,
       // 복원 경로는 durable lastOpenedAt을 그대로 보존해 재시작 후에도 워크스페이스 최근성
@@ -35239,6 +35632,7 @@ var LOOPBACK_ACCESS_HOSTS = ["127.0.0.1", "::1"];
 var LOOPBACK_HOST = "127.0.0.1";
 function createCodexGateway(deps) {
   const workspaces = new WorkspaceRegistry();
+  const workspaceOwners = /* @__PURE__ */ new Map();
   let accessSets = null;
   let initialWorkspace = null;
   let initialWorkspaceId = null;
@@ -35268,6 +35662,10 @@ function createCodexGateway(deps) {
       redirect(response, `${CODEX_BASE}${selected.location}`);
       return true;
     }
+    if (selected.kind === "missing-workspace") {
+      sendJson2(response, 404, { error: "workspace_not_found" });
+      return true;
+    }
     if (selected.kind === "no-workspace") {
       if (isJsonRequest4(request)) {
         sendJson2(response, 404, { error: "no_workspace_registered" });
@@ -35298,18 +35696,50 @@ function createCodexGateway(deps) {
     initialWorkspaceId = workspace.id;
     return workspace;
   }
+  async function registerWorkspace(cwd, lastOpenedAt, ownerTheaterId) {
+    const workspace = await workspaces.register(cwd, lastOpenedAt);
+    if (ownerTheaterId) {
+      const owners = workspaceOwners.get(workspace.id) ?? /* @__PURE__ */ new Set();
+      owners.add(ownerTheaterId);
+      workspaceOwners.set(workspace.id, owners);
+    }
+    return workspace;
+  }
+  async function resolveWorkspaceForPath(theaterId, theaterRoot, relPath) {
+    const pathContext = await resolveTheaterPathContext(theaterRoot, relPath);
+    try {
+      const workspace = await registerWorkspace(pathContext.realPath, void 0, theaterId);
+      return { hasWiki: true, id: workspace.id };
+    } catch (error51) {
+      if (error51 instanceof Error && error51.message === "knowledge_root_missing") {
+        return { hasWiki: false, id: null };
+      }
+      throw error51;
+    }
+  }
+  function unregisterWorkspace(id) {
+    if (initialWorkspaceId === id) {
+      initialWorkspace = null;
+      initialWorkspaceId = null;
+    }
+    return workspaces.remove(id);
+  }
+  function unregisterTheaterWorkspaces(theaterId) {
+    for (const [workspaceId, owners] of workspaceOwners) {
+      owners.delete(theaterId);
+      if (owners.size === 0) {
+        workspaceOwners.delete(workspaceId);
+        unregisterWorkspace(workspaceId);
+      }
+    }
+  }
   return {
     getWorkspace: (id) => workspaces.get(id),
     handle,
     listWorkspaceRegistrations: () => workspaces.listRegistrations(),
-    registerWorkspace: (cwd, lastOpenedAt) => workspaces.register(cwd, lastOpenedAt),
-    unregisterWorkspace: (id) => {
-      if (initialWorkspaceId === id) {
-        initialWorkspace = null;
-        initialWorkspaceId = null;
-      }
-      return workspaces.remove(id);
-    }
+    registerWorkspace,
+    resolveWorkspaceForPath,
+    unregisterTheaterWorkspaces
   };
 }
 function buildAllowedAccessSets(host, port, interfaces = os4__default.networkInterfaces()) {
@@ -35337,8 +35767,10 @@ function selectWorkspace(requestUrl, workspaces, cwd) {
   const prefixed = url2.pathname.match(/^\/w\/([^/]+)(\/.*)?$/);
   if (prefixed) {
     const workspace = workspaces.get(decodeURIComponent(prefixed[1] ?? ""));
-    if (!workspace) return { kind: "redirect", location: "/" };
     const suffix = prefixed[2] ?? "/";
+    if (!workspace) {
+      return suffix.startsWith("/api/") ? { kind: "missing-workspace" } : { kind: "redirect", location: "/" };
+    }
     url2.pathname = suffix;
     return { kind: "workspace", workspace, rewrittenUrl: `${url2.pathname}${url2.search}` };
   }
@@ -35491,7 +35923,7 @@ function createConsoleDurableStateStore(deps = {}) {
   const createStore = deps.createStore ?? createDurableJsonStore;
   return createStore({
     filePath: paths.stateFile,
-    lockDir: path25__default.join(paths.dir, STATE_LOCK_DIR_NAME),
+    lockDir: path27__default.join(paths.dir, STATE_LOCK_DIR_NAME),
     lockOwnerFileName: STATE_LOCK_OWNER_FILE_NAME,
     now: deps.now,
     sanitize: sanitizeDurableConsoleState,
@@ -35533,7 +35965,7 @@ function migrateV1Operation(value) {
   const cwd = readNonEmptyString(value.cwd);
   const createdAt = readFiniteNumber(value.createdAt);
   if (!sessionId || !theaterId || !cwd || createdAt === null) return null;
-  const title = readOptionalString(value.label) ?? (path25__default.basename(cwd) || cwd);
+  const title = readOptionalString(value.label) ?? (path27__default.basename(cwd) || cwd);
   const payload = { cwd };
   const cliId = readOptionalString(value.cliId);
   const cliLabel = readOptionalString(value.cliLabel);
@@ -35580,7 +36012,11 @@ function sanitizeTheaterRegistration(value) {
   const registeredAt = readNonEmptyString(value.registeredAt);
   const lastOpenedAt = readNonEmptyString(value.lastOpenedAt);
   if (!id || !theaterPath || !realpath2 || !label || !registeredAt || !lastOpenedAt) return null;
-  return { id, path: theaterPath, realpath: realpath2, label, registeredAt, lastOpenedAt };
+  const pathContext = typeof value.pathContext === "string" && isSafeDurableRelPath(value.pathContext) ? value.pathContext : null;
+  return { id, path: theaterPath, realpath: realpath2, label, registeredAt, lastOpenedAt, pathContext };
+}
+function isSafeDurableRelPath(value) {
+  return value.length > 0 && !value.includes("\0") && !value.startsWith("/") && !value.startsWith("\\") && !/^[A-Za-z]:/.test(value) && !value.split("/").some((part) => part === "" || part === "." || part === "..");
 }
 function sanitizeOperationNode(value) {
   if (!isRecord6(value)) return null;
@@ -36117,6 +36553,359 @@ function sanitizeReplacementNodes(nextNodes) {
   return result;
 }
 
+// core/host/plans/plan-parse.ts
+var TITLE_PATTERN = /^#\s+(.+)$/;
+var EXECUTION_MODE_PATTERN = /^-\s*Execution mode:\s*(sequential|parallel)\b/i;
+var WAVE_PATTERN = /^##\s+wave\s+(\d+)\b/i;
+var LANE_PATTERN = /^###\s+lane\s+(.+)$/i;
+var LANE_ID_PATTERN = /^(W\d+-[A-Za-z0-9]+)\b/i;
+var LANE_BOUNDARY_PATTERN = /^#{1,3}\s/;
+var SECTION_HEADING_PATTERN = /^#{1,2}\s/;
+var CHECKBOX_PATTERN = /^\s*-\s*\[( |x|X)\]/;
+var FENCE_PATTERN = /^\s*(`{3,}|~{3,})/;
+var CLOSING_FENCE_PATTERN = /^\s*(`{3,}|~{3,})\s*$/;
+var TEMPLATE_SECTION_TITLES = /* @__PURE__ */ new Set([
+  "objective",
+  "file ownership",
+  "waves",
+  "qa gates",
+  "acceptance criteria",
+  "documentation updates",
+  "final review loop"
+]);
+function parsePlan(content) {
+  const lines = scanPlanLines(content.split(/\r?\n/));
+  const title = findTitle(lines);
+  const executionMode = findExecutionMode(lines);
+  const waveStarts = findWaveStarts(lines);
+  const waves = waveStarts.map(({ index, heading, lineIndex }, waveIndex) => {
+    const nextWaveLineIndex = waveStarts[waveIndex + 1]?.lineIndex ?? lines.length;
+    const endLineIndex = findSectionEnd(lines, lineIndex + 1, nextWaveLineIndex);
+    const waveLines = lines.slice(lineIndex + 1, endLineIndex);
+    const counts = countTasks(waveLines);
+    return { index, heading, lanes: findLanes(waveLines), ...counts };
+  });
+  return { title, executionMode, waves, ...countTasks(lines) };
+}
+function scanPlanLines(lines) {
+  let activeFence = null;
+  return lines.map((text) => {
+    if (activeFence !== null) {
+      const closer = CLOSING_FENCE_PATTERN.exec(text)?.[1];
+      if (closer !== void 0 && closer.startsWith(activeFence.char) && closer.length >= activeFence.length) {
+        activeFence = null;
+      }
+      return { text, isFenced: true };
+    }
+    const marker = FENCE_PATTERN.exec(text)?.[1];
+    if (marker !== void 0) {
+      activeFence = { char: marker[0] ?? "`", length: marker.length };
+      return { text, isFenced: true };
+    }
+    return { text, isFenced: false };
+  });
+}
+function findTitle(lines) {
+  for (const line of lines) {
+    if (line.isFenced) continue;
+    const match = TITLE_PATTERN.exec(line.text);
+    if (!match?.[1]) continue;
+    const heading = match[1].trim();
+    if (TEMPLATE_SECTION_TITLES.has(heading.toLowerCase())) return null;
+    return heading;
+  }
+  return null;
+}
+function findExecutionMode(lines) {
+  for (const line of lines) {
+    if (line.isFenced) continue;
+    const match = EXECUTION_MODE_PATTERN.exec(line.text.trim());
+    if (match?.[1]) return match[1].toLowerCase();
+  }
+  return null;
+}
+function findWaveStarts(lines) {
+  const waves = [];
+  for (const [lineIndex, line] of lines.entries()) {
+    if (line.isFenced) continue;
+    const match = WAVE_PATTERN.exec(line.text);
+    if (!match?.[1]) continue;
+    waves.push({
+      index: Number(match[1]),
+      heading: line.text.replace(/^##\s+/, ""),
+      lineIndex
+    });
+  }
+  return waves;
+}
+function findLanes(waveLines) {
+  const laneStarts = [];
+  for (const [lineIndex, line] of waveLines.entries()) {
+    if (line.isFenced) continue;
+    const match = LANE_PATTERN.exec(line.text);
+    if (!match?.[1]) continue;
+    const heading = match[1].trim();
+    laneStarts.push({ heading, id: LANE_ID_PATTERN.exec(heading)?.[1]?.toUpperCase() ?? null, lineIndex });
+  }
+  return laneStarts.map(({ heading, id, lineIndex }, laneIndex) => {
+    const nextLaneLineIndex = laneStarts[laneIndex + 1]?.lineIndex ?? waveLines.length;
+    let endLineIndex = nextLaneLineIndex;
+    for (let cursor = lineIndex + 1; cursor < nextLaneLineIndex; cursor++) {
+      const line = waveLines[cursor];
+      if (!line?.isFenced && LANE_BOUNDARY_PATTERN.test(line?.text ?? "")) {
+        endLineIndex = cursor;
+        break;
+      }
+    }
+    return { id, heading, ...countTasks(waveLines.slice(lineIndex + 1, endLineIndex)) };
+  });
+}
+function findSectionEnd(lines, startLineIndex, maxLineIndex) {
+  for (let lineIndex = startLineIndex; lineIndex < maxLineIndex; lineIndex++) {
+    const line = lines[lineIndex];
+    if (!line?.isFenced && SECTION_HEADING_PATTERN.test(line?.text ?? "")) return lineIndex;
+  }
+  return maxLineIndex;
+}
+function countTasks(lines) {
+  let tasksDone = 0;
+  let tasksTotal = 0;
+  for (const line of lines) {
+    if (line.isFenced) continue;
+    const match = CHECKBOX_PATTERN.exec(line.text);
+    if (!match) continue;
+    tasksTotal++;
+    if (match[1] === "x" || match[1] === "X") tasksDone++;
+  }
+  return { tasksDone, tasksTotal };
+}
+
+// core/host/plans/plan-store.ts
+var PLANS_DIRECTORY_SEGMENTS = [".fleet", "plans"];
+var MARKDOWN_EXTENSION = ".md";
+var PLAN_NAME_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]*\.md$/;
+var LIST_READ_CONCURRENCY = 16;
+var PLAN_READ_SIZE_CAP = 2 * 1024 * 1024;
+var PlanStoreError = class extends Error {
+  code;
+  constructor(code) {
+    super(code);
+    this.name = "PlanStoreError";
+    this.code = code;
+  }
+};
+async function listPlansForTheater(theaterPath) {
+  const plansRoot = await resolvePlansRoot(theaterPath, true);
+  if (plansRoot === null) return [];
+  let entries;
+  try {
+    entries = await fs14__default.promises.readdir(plansRoot.realPlansPath, { withFileTypes: true });
+  } catch (error51) {
+    throw toPlanStoreError(error51);
+  }
+  const names = entries.filter((entry) => (entry.isFile() || entry.isSymbolicLink()) && entry.name.endsWith(MARKDOWN_EXTENSION) && isValidPlanName(entry.name)).map((entry) => entry.name);
+  const plans = [];
+  for (let startIndex = 0; startIndex < names.length; startIndex += LIST_READ_CONCURRENCY) {
+    const chunk = names.slice(startIndex, startIndex + LIST_READ_CONCURRENCY);
+    const results = await Promise.all(chunk.map((name) => toPlanListItem(plansRoot, name).catch(() => null)));
+    plans.push(...results.filter((plan) => plan !== null));
+  }
+  return plans.sort((left, right) => right.updatedAt.localeCompare(left.updatedAt));
+}
+function isValidPlanName(name) {
+  return PLAN_NAME_PATTERN.test(name) && !name.includes("..");
+}
+async function readPlanForTheater(theaterPath, name) {
+  const plansRoot = await resolvePlansRoot(theaterPath, false);
+  if (plansRoot === null) throw new PlanStoreError("not_found");
+  const file2 = await resolvePlanFile(plansRoot, name);
+  if (file2.stat.size > PLAN_READ_SIZE_CAP) throw new PlanStoreError("too_large");
+  let content;
+  try {
+    content = await fs14__default.promises.readFile(file2.realPath, "utf8");
+  } catch (error51) {
+    throw toPlanStoreError(error51);
+  }
+  const parsed = parsePlan(content);
+  return {
+    name,
+    title: parsed.title ?? name,
+    executionMode: parsed.executionMode,
+    updatedAt: file2.stat.mtime.toISOString(),
+    content,
+    waves: parsed.waves,
+    tasksDone: parsed.tasksDone,
+    tasksTotal: parsed.tasksTotal
+  };
+}
+async function toPlanListItem(plansRoot, name) {
+  const file2 = await resolvePlanFile(plansRoot, name);
+  if (file2.stat.size > PLAN_READ_SIZE_CAP) {
+    return {
+      name,
+      title: name,
+      executionMode: null,
+      waveCount: 0,
+      tasksDone: 0,
+      tasksTotal: 0,
+      updatedAt: file2.stat.mtime.toISOString(),
+      sizeBytes: file2.stat.size
+    };
+  }
+  const content = await fs14__default.promises.readFile(file2.realPath, "utf8").catch((error51) => {
+    throw toPlanStoreError(error51);
+  });
+  const parsed = parsePlan(content);
+  return {
+    name,
+    title: parsed.title ?? name,
+    executionMode: parsed.executionMode,
+    waveCount: parsed.waves.length,
+    tasksDone: parsed.tasksDone,
+    tasksTotal: parsed.tasksTotal,
+    updatedAt: file2.stat.mtime.toISOString(),
+    sizeBytes: file2.stat.size
+  };
+}
+async function resolvePlansRoot(contextPath, allowMissing) {
+  const nominalContextPath = path27__default.resolve(contextPath);
+  const plansPath = path27__default.resolve(nominalContextPath, ...PLANS_DIRECTORY_SEGMENTS);
+  if (!isWithinRoot2(plansPath, nominalContextPath)) throw new PlanStoreError("path_outside_theater");
+  let realContextPath;
+  let realPlansPath;
+  try {
+    [realContextPath, realPlansPath] = await Promise.all([
+      fs14__default.promises.realpath(nominalContextPath),
+      fs14__default.promises.realpath(plansPath)
+    ]);
+  } catch (error51) {
+    if (allowMissing && isNotFoundError(error51)) return null;
+    throw toPlanStoreError(error51);
+  }
+  if (!isWithinRoot2(realPlansPath, realContextPath)) throw new PlanStoreError("path_outside_theater");
+  return { realContextPath, realPlansPath };
+}
+async function resolvePlanFile(plansRoot, name) {
+  const candidatePath = path27__default.resolve(plansRoot.realPlansPath, name);
+  if (!isWithinRoot2(candidatePath, plansRoot.realPlansPath)) throw new PlanStoreError("path_outside_theater");
+  let realPath;
+  try {
+    realPath = await fs14__default.promises.realpath(candidatePath);
+  } catch (error51) {
+    throw toPlanStoreError(error51);
+  }
+  if (!isWithinRoot2(realPath, plansRoot.realPlansPath) || !isWithinRoot2(realPath, plansRoot.realContextPath)) {
+    throw new PlanStoreError("path_outside_theater");
+  }
+  let stat5;
+  try {
+    stat5 = await fs14__default.promises.stat(realPath);
+  } catch (error51) {
+    throw toPlanStoreError(error51);
+  }
+  if (!stat5.isFile()) throw new PlanStoreError("not_found");
+  return { realPath, stat: stat5 };
+}
+function isWithinRoot2(resolvedPath, rootPath) {
+  const normalizedRoot = rootPath.endsWith(path27__default.sep) ? rootPath : rootPath + path27__default.sep;
+  return resolvedPath === rootPath || resolvedPath.startsWith(normalizedRoot);
+}
+function isNotFoundError(error51) {
+  return error51.code === "ENOENT";
+}
+function toPlanStoreError(error51) {
+  if (error51 instanceof PlanStoreError) return error51;
+  return new PlanStoreError("not_found");
+}
+
+// core/host/plans/routes.ts
+function createPlansRouter(deps) {
+  return async function handlePlansRoute(context) {
+    const { req, res, pathname } = context;
+    if (pathname === "/api/v1/plans/list") {
+      await handlePlansList(req, res, deps);
+      return true;
+    }
+    if (pathname === "/api/v1/plans/read") {
+      await handlePlansRead(req, res, deps);
+      return true;
+    }
+    return false;
+  };
+}
+async function handlePlansList(req, res, deps) {
+  if (req.method !== "POST") {
+    deps.writeJson(res, 405, { error: "Method not allowed" });
+    return;
+  }
+  if (!deps.isAuthorized(req)) {
+    deps.writeJson(res, 401, { error: "unauthorized" });
+    return;
+  }
+  const body = await deps.readJsonBody(req);
+  if (!isPlainObject2(body) || typeof body.theaterId !== "string" || !isValidRelPath(body.relPath)) {
+    deps.writeJson(res, 400, { error: "invalid_request" });
+    return;
+  }
+  const theaterPath = deps.resolveTheaterPath(body.theaterId);
+  if (!theaterPath) {
+    deps.writeJson(res, 404, { error: "theater_not_found" });
+    return;
+  }
+  try {
+    const context = await resolveTheaterPathContext(theaterPath, body.relPath);
+    deps.writeJson(res, 200, { plans: await listPlansForTheater(context.realPath) });
+  } catch (error51) {
+    writePlanStoreError(res, deps, error51);
+  }
+}
+async function handlePlansRead(req, res, deps) {
+  if (req.method !== "POST") {
+    deps.writeJson(res, 405, { error: "Method not allowed" });
+    return;
+  }
+  if (!deps.isAuthorized(req)) {
+    deps.writeJson(res, 401, { error: "unauthorized" });
+    return;
+  }
+  const body = await deps.readJsonBody(req);
+  if (!isPlainObject2(body) || typeof body.theaterId !== "string" || !isValidRelPath(body.relPath)) {
+    deps.writeJson(res, 400, { error: "invalid_request" });
+    return;
+  }
+  if (typeof body.name !== "string" || !isValidPlanName(body.name)) {
+    deps.writeJson(res, 400, { error: "invalid_name" });
+    return;
+  }
+  const theaterPath = deps.resolveTheaterPath(body.theaterId);
+  if (!theaterPath) {
+    deps.writeJson(res, 404, { error: "theater_not_found" });
+    return;
+  }
+  try {
+    const context = await resolveTheaterPathContext(theaterPath, body.relPath);
+    deps.writeJson(res, 200, await readPlanForTheater(context.realPath, body.name));
+  } catch (error51) {
+    writePlanStoreError(res, deps, error51);
+  }
+}
+function isPlainObject2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isValidRelPath(value) {
+  return value === null || typeof value === "string" && isSafeRelativePath(value);
+}
+function writePlanStoreError(res, deps, error51) {
+  if (error51 instanceof TheaterPathContextError) {
+    const httpStatus2 = error51.code === "forbidden" ? 403 : error51.code === "not_found" ? 404 : 400;
+    deps.writeJson(res, httpStatus2, { error: error51.code });
+    return;
+  }
+  if (!(error51 instanceof PlanStoreError)) throw error51;
+  const httpStatus = error51.code === "path_outside_theater" ? 403 : error51.code === "too_large" ? 413 : 404;
+  deps.writeJson(res, httpStatus, { error: error51.code });
+}
+
 // sdk/version.ts
 var SDK_API_VERSION = 1;
 
@@ -36238,14 +37027,14 @@ function renderShim(definition) {
   ].join("\n");
 }
 function isSubpath(root, target) {
-  const relative = path25__default.relative(root, target);
-  return relative === "" || !relative.startsWith("..") && !path25__default.isAbsolute(relative);
+  const relative = path27__default.relative(root, target);
+  return relative === "" || !relative.startsWith("..") && !path27__default.isAbsolute(relative);
 }
 function discoverFleetPlugins(options = {}) {
-  const builtInSourceRoot = options.builtInSourceRoot ?? (options.cwd ? path25__default.resolve(options.cwd, "runtime/fleet-plugins") : null);
+  const builtInSourceRoot = options.builtInSourceRoot ?? (options.cwd ? path27__default.resolve(options.cwd, "runtime/fleet-plugins") : null);
   const roots = [
     ...builtInSourceRoot ? [{ root: builtInSourceRoot, builtInDistRoot: options.builtInDistRoot ?? null, external: false }] : [],
-    { root: path25__default.join(options.homeDir ?? os4__default.homedir(), ".fleet", "plugins"), builtInDistRoot: null, external: true }
+    { root: path27__default.join(options.homeDir ?? os4__default.homedir(), ".fleet", "plugins"), builtInDistRoot: null, external: true }
   ];
   const sourcePlugins = roots.flatMap((root) => discoverPluginRoot(root.root, root.builtInDistRoot, root.external));
   const sourcePluginIds = new Set(sourcePlugins.map((plugin) => plugin.manifest.id));
@@ -36266,14 +37055,14 @@ function parseFleetPluginManifest(value) {
   };
 }
 function discoverPluginRoot(root, builtInDistRoot, external) {
-  if (!fs11__default.existsSync(root)) return [];
-  const entries = fs11__default.readdirSync(root, { withFileTypes: true });
+  if (!fs14__default.existsSync(root)) return [];
+  const entries = fs14__default.readdirSync(root, { withFileTypes: true });
   const plugins = [];
   for (const entry of entries) {
     if (!entry.isDirectory() || entry.name === "shared") continue;
-    const pluginRoot = path25__default.join(root, entry.name);
-    const manifestPath = path25__default.join(pluginRoot, "plugin.json");
-    if (!fs11__default.existsSync(manifestPath)) continue;
+    const pluginRoot = path27__default.join(root, entry.name);
+    const manifestPath = path27__default.join(pluginRoot, "plugin.json");
+    if (!fs14__default.existsSync(manifestPath)) continue;
     const manifest = readManifest(manifestPath);
     if (!manifest) continue;
     const clientEntry = resolveOptionalManifestEntry(pluginRoot, manifest.client, "client");
@@ -36285,14 +37074,14 @@ function discoverPluginRoot(root, builtInDistRoot, external) {
   return plugins;
 }
 function discoverDistPluginRoot(root) {
-  if (!fs11__default.existsSync(root)) return [];
-  const entries = fs11__default.readdirSync(root, { withFileTypes: true });
+  if (!fs14__default.existsSync(root)) return [];
+  const entries = fs14__default.readdirSync(root, { withFileTypes: true });
   const plugins = [];
   for (const entry of entries) {
     if (!entry.isDirectory() || entry.name === "shared") continue;
-    const pluginRoot = path25__default.join(root, entry.name);
-    const manifestPath = path25__default.join(pluginRoot, "plugin.json");
-    const manifest = fs11__default.existsSync(manifestPath) ? readManifest(manifestPath) : readDistPluginManifest(entry.name);
+    const pluginRoot = path27__default.join(root, entry.name);
+    const manifestPath = path27__default.join(pluginRoot, "plugin.json");
+    const manifest = fs14__default.existsSync(manifestPath) ? readManifest(manifestPath) : readDistPluginManifest(entry.name);
     if (!manifest) continue;
     const clientEntry = resolveOptionalManifestEntry(pluginRoot, manifest.client, "client");
     if (clientEntry === false) continue;
@@ -36304,7 +37093,7 @@ function discoverDistPluginRoot(root) {
 }
 function readManifest(manifestPath) {
   try {
-    const manifest = parseFleetPluginManifest(JSON.parse(fs11__default.readFileSync(manifestPath, "utf8")));
+    const manifest = parseFleetPluginManifest(JSON.parse(fs14__default.readFileSync(manifestPath, "utf8")));
     if (!manifest) console.warn(`[fleet-console] Plugin manifest skipped: invalid manifest at ${manifestPath}`);
     return manifest;
   } catch (error51) {
@@ -36318,11 +37107,11 @@ function resolveRoutesEntry(pluginRoot, manifest, builtInDistRoot) {
     if (manifestRoute2 === false) return false;
     if (manifestRoute2) return manifestRoute2;
   }
-  const manifestRoute = path25__default.join(pluginRoot, "routes.ts");
-  if (fs11__default.existsSync(manifestRoute)) return manifestRoute;
+  const manifestRoute = path27__default.join(pluginRoot, "routes.ts");
+  if (fs14__default.existsSync(manifestRoute)) return manifestRoute;
   if (!builtInDistRoot) return null;
-  const builtRoute = path25__default.join(builtInDistRoot, manifest.id, "routes.mjs");
-  return fs11__default.existsSync(builtRoute) ? builtRoute : null;
+  const builtRoute = path27__default.join(builtInDistRoot, manifest.id, "routes.mjs");
+  return fs14__default.existsSync(builtRoute) ? builtRoute : null;
 }
 function resolveDistRoutesEntry(pluginRoot, manifest) {
   const routesEntry = resolveOptionalManifestEntry(pluginRoot, manifest.routes ?? "routes.mjs", "routes");
@@ -36335,10 +37124,10 @@ function resolveOptionalManifestEntry(pluginRoot, entryPath, label) {
     console.warn(`[fleet-console] Plugin ${label} entry skipped: unsafe relative path ${entryPath}`);
     return false;
   }
-  const candidate = path25__default.resolve(pluginRoot, entryPath);
-  if (!fs11__default.existsSync(candidate)) return null;
-  const rootRealpath = fs11__default.realpathSync.native(pluginRoot);
-  const entryRealpath = fs11__default.realpathSync.native(candidate);
+  const candidate = path27__default.resolve(pluginRoot, entryPath);
+  if (!fs14__default.existsSync(candidate)) return null;
+  const rootRealpath = fs14__default.realpathSync.native(pluginRoot);
+  const entryRealpath = fs14__default.realpathSync.native(candidate);
   if (!isSubpath2(rootRealpath, entryRealpath)) {
     console.warn(`[fleet-console] Plugin ${label} entry skipped: path escapes plugin root ${entryPath}`);
     return false;
@@ -36353,12 +37142,12 @@ function readDistPluginManifest(id) {
   return pluginId ? { id: pluginId, routes: "routes.mjs" } : null;
 }
 function isSafeRelativeEntry(entryPath) {
-  if (path25__default.isAbsolute(entryPath)) return false;
+  if (path27__default.isAbsolute(entryPath)) return false;
   return entryPath.split(/[\\/]+/u).every((segment) => segment !== "..");
 }
 function isSubpath2(root, candidate) {
-  const relative = path25__default.relative(root, candidate);
-  return relative === "" || !relative.startsWith("..") && !path25__default.isAbsolute(relative);
+  const relative = path27__default.relative(root, candidate);
+  return relative === "" || !relative.startsWith("..") && !path27__default.isAbsolute(relative);
 }
 function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -36376,17 +37165,22 @@ var PLUGIN_DEV_EXTERNALS = [
   "child_process",
   "node-pty",
   "ws",
-  "@fleet-console/sdk",
-  "@fleet-console/sdk/*",
-  "@dotobokuri/*",
   "@fleet-plugins/*"
 ];
-var __dirname$1 = path25__default.dirname(fileURLToPath(import.meta.url));
+var PLUGIN_BUNDLE_DIR_PREFIX = "fleet-console-plugin-";
+var PLUGIN_BUNDLE_OWNER_FILE = ".fleet-console-plugin-owner.json";
+var PLUGIN_BUNDLE_PID_PATTERN = /^fleet-console-plugin-(\d+)-/u;
+var MAX_PLUGIN_BUNDLE_OWNER_PID = 2147483647;
+var __dirname$1 = path27__default.dirname(fileURLToPath(import.meta.url));
 function createFleetPluginHost(deps) {
   const plugins = filterDiscoveredPlugins(discoverFleetPlugins(deps));
   const sensitiveFieldsByPluginId = new Map(plugins.map((plugin) => [plugin.manifest.id, plugin.manifest.sensitiveFields ?? []]));
-  const importModule = deps.importModule ?? importPluginModule;
+  const generatedBundleDirs = /* @__PURE__ */ new Set();
+  const isProcessAlive2 = deps.isProcessAlive ?? isPluginBundleOwnerAlive;
+  const removeBundleDir = deps.removeBundleDir ?? removePluginBundleDir;
+  const importModule = deps.importModule ?? ((entry) => importPluginModule(entry, deps.bundleCacheDir, generatedBundleDirs));
   async function boot() {
+    await removeStalePluginBundleDirs(deps.bundleCacheDir, isProcessAlive2, removeBundleDir);
     for (const plugin of plugins) {
       if (!plugin.routesEntry) continue;
       if (!plugin.external) {
@@ -36400,7 +37194,21 @@ function createFleetPluginHost(deps) {
       }
     }
   }
-  return { plugins, sensitiveFieldsByPluginId, boot };
+  async function cleanup() {
+    const dirs = [...generatedBundleDirs];
+    const cleanupResults = await Promise.allSettled(dirs.map((dir) => removeBundleDir(dir)));
+    for (const [index, result] of cleanupResults.entries()) {
+      const dir = dirs[index];
+      if (result.status === "fulfilled") {
+        generatedBundleDirs.delete(dir);
+        continue;
+      }
+      if (result.status === "rejected") {
+        console.warn(`[fleet-console] Plugin bundle cache cleanup failed: ${result.reason instanceof Error ? result.reason.message : String(result.reason)}`);
+      }
+    }
+  }
+  return { plugins, sensitiveFieldsByPluginId, boot, cleanup };
   async function bootPluginRoutes(plugin) {
     const mod = await importModule(plugin.routesEntry);
     const register = resolveRegister(mod);
@@ -36434,7 +37242,7 @@ function filterDiscoveredPlugins(plugins) {
   }
   return accepted;
 }
-async function importPluginModule(entry) {
+async function importPluginModule(entry, bundleCacheDir, generatedBundleDirs) {
   if (entry.endsWith(".ts")) {
     const { build } = await import('esbuild');
     const output = await build({
@@ -36445,49 +37253,101 @@ async function importPluginModule(entry) {
       target: "node20",
       write: false,
       sourcemap: false,
-      external: PLUGIN_DEV_EXTERNALS
+      external: PLUGIN_DEV_EXTERNALS,
+      nodePaths: [resolveConsolePackageNodeModules()].filter((value) => value !== null)
     });
     const bundled = output.outputFiles[0]?.text;
     if (!bundled) throw new Error("plugin_bundle_failed");
-    const bundledPath = await writeTemporaryPluginBundle(entry, bundled);
+    const bundledPath = await writeTemporaryPluginBundle(entry, bundled, bundleCacheDir, generatedBundleDirs);
     return await import(pathToFileURL(bundledPath).href);
   }
   return await import(pathToFileURL(entry).href);
 }
-async function writeTemporaryPluginBundle(entry, source) {
-  const cacheRoot = path25__default.join(resolvePluginBundleNodeModules(entry), ".cache");
+async function writeTemporaryPluginBundle(entry, source, bundleCacheDir, generatedBundleDirs) {
+  const cacheRoot = bundleCacheDir ?? path27__default.join(resolvePluginBundleNodeModules(entry), ".cache");
   await mkdir(cacheRoot, { recursive: true });
-  const dir = await mkdtemp(path25__default.join(cacheRoot, "fleet-console-plugin-"));
-  const file2 = path25__default.join(dir, "routes.mjs");
+  const dir = await mkdtemp(path27__default.join(cacheRoot, `${PLUGIN_BUNDLE_DIR_PREFIX}${process.pid}-`));
+  if (bundleCacheDir) {
+    generatedBundleDirs.add(dir);
+    await writePluginBundleOwner(dir, process.pid);
+  }
+  const file2 = path27__default.join(dir, "routes.mjs");
   await writeFile(file2, source, "utf8");
   return file2;
 }
+async function removeStalePluginBundleDirs(bundleCacheDir, isProcessAlive2, removeBundleDir) {
+  if (!bundleCacheDir) return;
+  try {
+    await mkdir(bundleCacheDir, { recursive: true });
+    const entries = await readdir(bundleCacheDir, { withFileTypes: true });
+    for (const entry of entries) {
+      if (!entry.name.startsWith(PLUGIN_BUNDLE_DIR_PREFIX)) continue;
+      const entryPath = path27__default.join(bundleCacheDir, entry.name);
+      const ownerPid = await readPluginBundleOwnerPid(entryPath, entry.name);
+      if (ownerPid !== null && isProcessAlive2(ownerPid)) continue;
+      try {
+        await removeBundleDir(entryPath);
+      } catch (error51) {
+        console.warn(`[fleet-console] Plugin bundle cache startup cleanup failed: ${error51 instanceof Error ? error51.message : String(error51)}`);
+      }
+    }
+  } catch (error51) {
+    console.warn(`[fleet-console] Plugin bundle cache startup cleanup failed: ${error51 instanceof Error ? error51.message : String(error51)}`);
+  }
+}
+async function removePluginBundleDir(dir) {
+  await rm(dir, { recursive: true, force: true });
+}
+async function writePluginBundleOwner(dir, pid) {
+  await writeFile(path27__default.join(dir, PLUGIN_BUNDLE_OWNER_FILE), JSON.stringify({ pid }), "utf8");
+}
+async function readPluginBundleOwnerPid(dir, name) {
+  try {
+    const parsed = JSON.parse(await readFile(path27__default.join(dir, PLUGIN_BUNDLE_OWNER_FILE), "utf8"));
+    if (isPluginBundleOwnerPid(parsed.pid)) return parsed.pid;
+  } catch {
+  }
+  const pid = Number(PLUGIN_BUNDLE_PID_PATTERN.exec(name)?.[1]);
+  return isPluginBundleOwnerPid(pid) ? pid : null;
+}
+function isPluginBundleOwnerAlive(pid) {
+  if (!isPluginBundleOwnerPid(pid)) return false;
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (error51) {
+    return Boolean(error51 && typeof error51 === "object" && "code" in error51 && error51.code === "EPERM");
+  }
+}
+function isPluginBundleOwnerPid(value) {
+  return typeof value === "number" && Number.isInteger(value) && value > 0 && value <= MAX_PLUGIN_BUNDLE_OWNER_PID;
+}
 function resolvePluginBundleNodeModules(entry) {
   const packageNodeModules = resolveConsolePackageNodeModules();
-  let dir = path25__default.dirname(entry);
+  let dir = path27__default.dirname(entry);
   let fallback = packageNodeModules;
   while (true) {
-    const workspaceConsoleNodeModules = path25__default.join(dir, "runtime", "fleet-console", "node_modules");
+    const workspaceConsoleNodeModules = path27__default.join(dir, "runtime", "fleet-console", "node_modules");
     if (hasFleetConsoleSdk(workspaceConsoleNodeModules)) return workspaceConsoleNodeModules;
-    const candidate = path25__default.join(dir, "node_modules");
+    const candidate = path27__default.join(dir, "node_modules");
     if (hasFleetConsoleSdk(candidate)) return candidate;
     if (fallback === null && existsSync(candidate)) fallback = candidate;
-    const parent = path25__default.dirname(dir);
-    if (parent === dir) return fallback ?? path25__default.join(path25__default.dirname(entry), "node_modules");
+    const parent = path27__default.dirname(dir);
+    if (parent === dir) return fallback ?? path27__default.join(path27__default.dirname(entry), "node_modules");
     dir = parent;
   }
 }
 function resolveConsolePackageNodeModules() {
   for (const candidate of [
-    path25__default.resolve(__dirname$1, "..", "node_modules"),
-    path25__default.resolve(__dirname$1, "..", "..", "..", "node_modules")
+    path27__default.resolve(__dirname$1, "..", "node_modules"),
+    path27__default.resolve(__dirname$1, "..", "..", "..", "node_modules")
   ]) {
     if (hasFleetConsoleSdk(candidate)) return candidate;
   }
   return null;
 }
 function hasFleetConsoleSdk(nodeModules) {
-  return existsSync(path25__default.join(nodeModules, "@fleet-console", "sdk"));
+  return existsSync(path27__default.join(nodeModules, "@fleet-console", "sdk"));
 }
 function resolveRegister(mod) {
   if (mod.register) return mod.register;
@@ -36533,6 +37393,8 @@ function normalizePrefix(prefix) {
 var RELEASE_NOTE_HEADINGS = ["Added", "Changed", "Fixed", "Removed", "Breaking Changes"];
 var VERSION_HEADER_PATTERN = /^## \[([^\]]+)\](?: - ([0-9]{4}-[0-9]{2}-[0-9]{2}))?$/;
 var SECTION_HEADER_PATTERN = /^### (Added|Changed|Fixed|Removed|Breaking Changes)$/;
+var PRODUCT_HEADER_PATTERN = /^### fleet-(cli|console|desktop|plugin|core)$/;
+var PRODUCT_SECTION_HEADER_PATTERN = /^#### (Added|Changed|Fixed|Removed|Breaking Changes)$/;
 var BULLET_PATTERN = /^- (.+)$/;
 var PACKAGE_TAG_PATTERN = /^\[([^\]]+)\]/;
 function parseConsoleReleaseNotes(changelog) {
@@ -36553,24 +37415,55 @@ function parseConsoleReleaseNotes(changelog) {
   return notes;
 }
 function collectSections(lines) {
-  const sections = [];
+  const legacySections = /* @__PURE__ */ new Map();
+  const productSections = /* @__PURE__ */ new Map();
+  const legacyHeadings = /* @__PURE__ */ new Set();
   let current = null;
+  let isProductContext = false;
   for (const line of lines) {
     const sectionMatch = SECTION_HEADER_PATTERN.exec(line);
     if (sectionMatch !== null) {
-      current = { heading: sectionMatch[1], items: [] };
-      sections.push(current);
+      const heading = sectionMatch[1];
+      isProductContext = false;
+      current = legacyHeadings.has(heading) ? null : getSection(legacySections, heading);
+      legacyHeadings.add(heading);
+      continue;
+    }
+    if (PRODUCT_HEADER_PATTERN.test(line)) {
+      isProductContext = true;
+      current = null;
       continue;
     }
-    if (current === null) continue;
     if (line.startsWith("### ")) {
+      isProductContext = false;
+      current = null;
+      continue;
+    }
+    const productSectionMatch = PRODUCT_SECTION_HEADER_PATTERN.exec(line);
+    if (productSectionMatch !== null) {
+      current = isProductContext ? getSection(productSections, productSectionMatch[1]) : null;
+      continue;
+    }
+    if (current === null) continue;
+    if (line.startsWith("### ") || line.startsWith("#### ")) {
       current = null;
       continue;
     }
     const bulletMatch = BULLET_PATTERN.exec(line);
     if (bulletMatch !== null) current.items.push(parseReleaseNoteItem(bulletMatch[1] ?? ""));
   }
-  return RELEASE_NOTE_HEADINGS.map((heading) => sections.find((section2) => section2.heading === heading)).filter((section2) => Boolean(section2 && section2.items.length > 0));
+  return RELEASE_NOTE_HEADINGS.map((heading) => combineSections(heading, legacySections.get(heading), productSections.get(heading))).filter((section2) => Boolean(section2 && section2.items.length > 0));
+}
+function combineSections(heading, legacySection, productSection) {
+  if (legacySection === void 0 && productSection === void 0) return void 0;
+  return { heading, items: [...legacySection?.items ?? [], ...productSection?.items ?? []] };
+}
+function getSection(sections, heading) {
+  const existing = sections.get(heading);
+  if (existing !== void 0) return existing;
+  const section2 = { heading, items: [] };
+  sections.set(heading, section2);
+  return section2;
 }
 function parseReleaseNoteItem(rawText) {
   const packageTags = [];
@@ -36596,10 +37489,11 @@ var ConsoleReleaseNotesUnavailableError = class extends Error {
 
 // core/host/release-notes/service.ts
 var RAW_CHANGELOG_URL = "https://raw.githubusercontent.com/sbluemin/fleet-harness/main/CHANGELOG.md";
+var RAW_KOREAN_CHANGELOG_URL = "https://raw.githubusercontent.com/sbluemin/fleet-harness/main/CHANGELOG.ko.md";
 var SOURCE_REF = "main";
 var FETCH_TIMEOUT_MS = 3e3;
 var MAX_CHANGELOG_BYTES = 1024 * 1024;
-var SUCCESS_TTL_MS = 60 * 60 * 1e3;
+var SUCCESS_TTL_MS2 = 60 * 60 * 1e3;
 var NEGATIVE_TTL_MS = 30 * 1e3;
 function createConsoleReleaseNotesService(deps = {}) {
   const fetchImpl = deps.fetchImpl ?? fetch;
@@ -36610,30 +37504,46 @@ function createConsoleReleaseNotesService(deps = {}) {
   let lastFailureAt = 0;
   let inFlight = null;
   let forceInFlight = null;
+  let koreanLastSuccess = null;
+  let koreanLastFailureAt = 0;
+  let koreanInFlight = null;
+  let koreanForceInFlight = null;
+  let koreanRequestGeneration = 0;
   async function refresh(options = {}) {
+    if (options.locale === "ko") return await refreshKoreanOverlay(options);
+    return await refreshEnglish(options);
+  }
+  async function refreshEnglish(options) {
     const currentTime = now();
     if (options.force) {
-      if (forceInFlight) return forceInFlight;
+      if (forceInFlight) return await forceInFlight;
       const pending2 = runFetch().finally(() => {
         if (forceInFlight === pending2) forceInFlight = null;
       });
       forceInFlight = pending2;
-      return pending2;
+      return await pending2;
     }
-    if (lastSuccess && currentTime - lastSuccess.fetchedAt < SUCCESS_TTL_MS) return lastSuccess;
+    if (lastSuccess && currentTime - lastSuccess.fetchedAt < SUCCESS_TTL_MS2) return lastSuccess;
     if (lastFailureAt > 0 && currentTime - lastFailureAt < NEGATIVE_TTL_MS) {
       if (lastSuccess) return { ...lastSuccess, stale: true };
       throw new ConsoleReleaseNotesUnavailableError("negative_cache");
     }
-    if (inFlight) return inFlight;
+    if (inFlight) return await inFlight;
     const pending = runFetch().finally(() => {
       if (inFlight === pending) inFlight = null;
     });
     inFlight = pending;
-    return pending;
+    return await pending;
+  }
+  async function refreshKoreanOverlay(options) {
+    const english = refreshEnglish(options);
+    const korean = refreshKorean(options).catch(() => null);
+    const canonical = await english;
+    const localized = await korean;
+    return mergeKoreanOverlay(canonical, localized?.notes ?? null);
   }
   function runFetch() {
-    return fetchReleaseNotes().then((result) => {
+    return fetchEnglishReleaseNotes().then((result) => {
       lastSuccess = result;
       lastFailureAt = 0;
       return result;
@@ -36644,29 +37554,93 @@ function createConsoleReleaseNotesService(deps = {}) {
       throw new ConsoleReleaseNotesUnavailableError("cold_unavailable");
     });
   }
-  async function fetchReleaseNotes() {
+  async function fetchEnglishReleaseNotes() {
+    return {
+      notes: await fetchAndParse(RAW_CHANGELOG_URL),
+      sourceRef: SOURCE_REF,
+      fetchedAt: now(),
+      stale: false
+    };
+  }
+  async function refreshKorean(options) {
+    const currentTime = now();
+    if (options.force) {
+      if (koreanForceInFlight) return await koreanForceInFlight;
+      const pending2 = runKoreanFetch(++koreanRequestGeneration).finally(() => {
+        if (koreanForceInFlight === pending2) koreanForceInFlight = null;
+      });
+      koreanForceInFlight = pending2;
+      return await pending2;
+    }
+    if (koreanLastSuccess && currentTime - koreanLastSuccess.fetchedAt < SUCCESS_TTL_MS2) return koreanLastSuccess;
+    if (koreanLastFailureAt > 0 && currentTime - koreanLastFailureAt < NEGATIVE_TTL_MS) return null;
+    if (koreanInFlight) return await koreanInFlight;
+    const pending = runKoreanFetch(++koreanRequestGeneration).finally(() => {
+      if (koreanInFlight === pending) koreanInFlight = null;
+    });
+    koreanInFlight = pending;
+    return await pending;
+  }
+  function runKoreanFetch(requestGeneration) {
+    return fetchAndParse(RAW_KOREAN_CHANGELOG_URL).then((notes) => {
+      const result = { notes, fetchedAt: now() };
+      if (requestGeneration === koreanRequestGeneration) {
+        koreanLastSuccess = result;
+        koreanLastFailureAt = 0;
+      }
+      return result;
+    }).catch(() => {
+      if (requestGeneration === koreanRequestGeneration) koreanLastFailureAt = now();
+      return null;
+    });
+  }
+  async function fetchAndParse(url2) {
     const controller = new AbortController();
     const timer = setTimer(() => controller.abort(), FETCH_TIMEOUT_MS);
     timer.unref?.();
     try {
-      const response = await fetchImpl(RAW_CHANGELOG_URL, {
+      const response = await fetchImpl(url2, {
         headers: { Accept: "text/plain; charset=utf-8" },
         signal: controller.signal
       });
       if (!response.ok) throw new ConsoleReleaseNotesUnavailableError("cold_unavailable");
       const text = await readTextWithByteLimit(response, controller);
-      return {
-        notes: parseConsoleReleaseNotes(text),
-        sourceRef: SOURCE_REF,
-        fetchedAt: now(),
-        stale: false
-      };
+      return parseConsoleReleaseNotes(text).map((note) => ({ ...note, localizationFallback: false }));
     } finally {
       clearTimer(timer);
     }
   }
   return { refresh };
 }
+function mergeKoreanOverlay(canonical, koreanNotes) {
+  if (koreanNotes === null) return { ...canonical, notes: canonical.notes.map(withFallback) };
+  const occurrences = /* @__PURE__ */ new Map();
+  for (const note of koreanNotes) {
+    const queue = occurrences.get(note.version) ?? [];
+    queue.push(note);
+    occurrences.set(note.version, queue);
+  }
+  return {
+    ...canonical,
+    notes: canonical.notes.map((english) => {
+      const korean = occurrences.get(english.version)?.shift();
+      return korean && hasMatchingStructure(english, korean) ? { ...english, sections: korean.sections, localizationFallback: false } : withFallback(english);
+    })
+  };
+}
+function withFallback(note) {
+  return { ...note, localizationFallback: true };
+}
+function hasMatchingStructure(english, korean) {
+  return english.date === korean.date && english.sections.length === korean.sections.length && english.sections.every((section2, sectionIndex) => {
+    const localizedSection = korean.sections[sectionIndex];
+    return localizedSection?.heading === section2.heading && localizedSection.items.length === section2.items.length && section2.items.every((item, itemIndex) => sameTags(item.packageTags, localizedSection.items[itemIndex]?.packageTags));
+  });
+}
+function sameTags(left, right) {
+  if (right === void 0) return false;
+  return left.length === right.length && left.every((tag, index) => tag === right[index]);
+}
 async function readTextWithByteLimit(response, controller) {
   const body = response.body;
   if (body === null) return await response.text();
@@ -36763,7 +37737,7 @@ var MIME_TYPES = {
   ".woff2": "font/woff2"
 };
 function createStaticConsoleHandler(packageRoot) {
-  const consoleRoot = path25__default.join(packageRoot, "dist", "client");
+  const consoleRoot = path27__default.join(packageRoot, "dist", "client");
   return (req, res, pathname) => tryServeStaticConsole(req, res, pathname, consoleRoot);
 }
 function tryServeStaticConsole(req, res, pathname, consoleRoot) {
@@ -36779,15 +37753,15 @@ function tryServeStaticConsole(req, res, pathname, consoleRoot) {
     res.end(JSON.stringify({ error: "Not found" }));
     return true;
   }
-  const absolutePath = path25__default.resolve(consoleRoot, relativePath2);
+  const absolutePath = path27__default.resolve(consoleRoot, relativePath2);
   if (!absolutePath.startsWith(consoleRoot)) {
     res.writeHead(404, withSecurityHeaders2({ "Content-Type": "application/json" }));
     res.end(JSON.stringify({ error: "Not found" }));
     return true;
   }
   try {
-    const data = fs11__default.readFileSync(absolutePath);
-    const contentType = MIME_TYPES[path25__default.extname(absolutePath)] ?? "application/octet-stream";
+    const data = fs14__default.readFileSync(absolutePath);
+    const contentType = MIME_TYPES[path27__default.extname(absolutePath)] ?? "application/octet-stream";
     res.writeHead(200, withSecurityHeaders2({ "Content-Type": contentType }));
     if (req.method === "HEAD") {
       res.end();
@@ -36807,7 +37781,7 @@ function tryServeStaticConsole(req, res, pathname, consoleRoot) {
 }
 function serveFallbackIndex(req, res, consoleRoot) {
   try {
-    const data = fs11__default.readFileSync(path25__default.join(consoleRoot, "index.html"));
+    const data = fs14__default.readFileSync(path27__default.join(consoleRoot, "index.html"));
     res.writeHead(200, withSecurityHeaders2({ "Content-Type": MIME_TYPES[".html"] }));
     if (req.method === "HEAD") {
       res.end();
@@ -36833,7 +37807,7 @@ function resolveConsolePath(pathname) {
   }
   if (withoutPrefix === "") return "index.html";
   if (withoutPrefix.includes("\0")) return null;
-  if (!path25__default.extname(withoutPrefix)) return "index.html";
+  if (!path27__default.extname(withoutPrefix)) return "index.html";
   return withoutPrefix;
 }
 var TheaterFolderListError = class extends Error {
@@ -36844,12 +37818,12 @@ var TheaterFolderListError = class extends Error {
     this.code = code;
   }
 };
-var DIRECTORY_ENTRY_CAP = 500;
+var DIRECTORY_ENTRY_CAP2 = 500;
 var WINDOWS_DRIVE_LETTERS = "ABCDEFGHIJKLMNOPQRSTUVWXYZ".split("");
 async function listTheaterFolders(requestedPath, deps = {}) {
   const platform = deps.platform ?? process.platform;
-  const stat5 = deps.stat ?? fs11__default.promises.stat;
-  const opendir = deps.opendir ?? fs11__default.promises.opendir;
+  const stat5 = deps.stat ?? fs14__default.promises.stat;
+  const opendir = deps.opendir ?? fs14__default.promises.opendir;
   const targetPath = normalizeListPath(requestedPath, platform, deps);
   const roots = await listRoots(platform, stat5);
   const targetStat = await statDirectory(targetPath, stat5);
@@ -36867,14 +37841,14 @@ async function listTheaterFolders(requestedPath, deps = {}) {
 }
 function normalizeFolderBrowserPath(value, platform = process.platform) {
   if (typeof value !== "string" || value.length === 0 || value.includes("\0")) throw new TheaterFolderListError("invalid_path");
-  if (isWindowsAmbiguousPath(value, platform) || !path25__default.isAbsolute(value)) throw new TheaterFolderListError("invalid_path");
-  return path25__default.resolve(value);
+  if (isWindowsAmbiguousPath(value, platform) || !path27__default.isAbsolute(value)) throw new TheaterFolderListError("invalid_path");
+  return path27__default.resolve(value);
 }
 function normalizeListPath(requestedPath, platform, deps) {
   if (requestedPath === null || requestedPath === void 0) {
     const home = deps.homedir?.() ?? os4__default.homedir();
     const start = home || deps.cwd?.() || process.cwd();
-    return path25__default.resolve(start);
+    return path27__default.resolve(start);
   }
   return normalizeFolderBrowserPath(requestedPath, platform);
 }
@@ -36894,7 +37868,7 @@ async function statDirectory(targetPath, stat5) {
   try {
     return await stat5(targetPath);
   } catch (error51) {
-    throw mapFsError(error51);
+    throw mapFsError2(error51);
   }
 }
 async function collectDirectoryEntries(targetPath, opendir, stat5, entries) {
@@ -36904,14 +37878,14 @@ async function collectDirectoryEntries(targetPath, opendir, stat5, entries) {
     while (dirent !== null) {
       const entry = await toTheaterFolderEntry(targetPath, dirent, stat5);
       if (entry !== null) {
-        if (entries.length >= DIRECTORY_ENTRY_CAP) return true;
+        if (entries.length >= DIRECTORY_ENTRY_CAP2) return true;
         entries.push(entry);
       }
       dirent = await directory.read();
     }
     return false;
   } catch (error51) {
-    throw mapFsError(error51);
+    throw mapFsError2(error51);
   } finally {
     await directory.close();
   }
@@ -36920,12 +37894,12 @@ async function openDirectory(targetPath, opendir) {
   try {
     return await opendir(targetPath);
   } catch (error51) {
-    throw mapFsError(error51);
+    throw mapFsError2(error51);
   }
 }
 async function toTheaterFolderEntry(targetPath, dirent, stat5) {
   if (!dirent.isDirectory() && !dirent.isSymbolicLink()) return null;
-  const entryPath = path25__default.join(targetPath, dirent.name);
+  const entryPath = path27__default.join(targetPath, dirent.name);
   if (dirent.isDirectory()) return { name: dirent.name, path: entryPath, kind: "dir", accessible: true };
   const accessible = await statSymlinkDirectory(entryPath, stat5);
   if (accessible === null) return null;
@@ -36938,17 +37912,17 @@ async function statSymlinkDirectory(entryPath, stat5) {
     return false;
   }
 }
-function mapFsError(error51) {
+function mapFsError2(error51) {
   const code = error51.code;
   if (code === "EACCES" || code === "EPERM") return new TheaterFolderListError("forbidden");
   if (code === "ENOENT" || code === "ENOTDIR") return new TheaterFolderListError("not_found");
   return new TheaterFolderListError("invalid_path");
 }
 function parentPath(targetPath, platform) {
-  const parsed = path25__default.parse(targetPath);
-  const resolved = path25__default.resolve(targetPath);
-  if (resolved === path25__default.resolve(parsed.root)) return null;
-  const parent = path25__default.dirname(resolved);
+  const parsed = path27__default.parse(targetPath);
+  const resolved = path27__default.resolve(targetPath);
+  if (resolved === path27__default.resolve(parsed.root)) return null;
+  const parent = path27__default.dirname(resolved);
   if (platform === "win32" && parent === resolved) return null;
   return parent;
 }
@@ -36960,7 +37934,7 @@ var GRANT_ID_BYTES = 24;
 var DEFAULT_GRANT_TTL_MS = 6e4;
 function createFolderGrantStore(deps = {}) {
   const randomId = deps.randomId ?? (() => crypto5.randomBytes(GRANT_ID_BYTES).toString("base64url"));
-  const statSync2 = deps.statSync ?? fs11__default.statSync;
+  const statSync2 = deps.statSync ?? fs14__default.statSync;
   const ttlMs = deps.ttlMs ?? DEFAULT_GRANT_TTL_MS;
   const now = deps.now ?? Date.now;
   const grants = /* @__PURE__ */ new Map();
@@ -36986,10 +37960,10 @@ function createFolderGrantStore(deps = {}) {
   }
   return { issue: issue2, consume };
 }
-function validateAbsoluteDirectory(cwd, statSync2 = fs11__default.statSync) {
+function validateAbsoluteDirectory(cwd, statSync2 = fs14__default.statSync) {
   if (typeof cwd !== "string" || cwd.length === 0 || cwd.includes("\0")) throw new Error("invalid_folder");
-  if (isWindowsAmbiguousPath2(cwd) || !path25__default.isAbsolute(cwd)) throw new Error("invalid_folder");
-  const normalized = path25__default.resolve(cwd);
+  if (isWindowsAmbiguousPath2(cwd) || !path27__default.isAbsolute(cwd)) throw new Error("invalid_folder");
+  const normalized = path27__default.resolve(cwd);
   if (!statSync2(normalized).isDirectory()) throw new Error("invalid_folder");
   return normalized;
 }
@@ -36997,11 +37971,178 @@ function isWindowsAmbiguousPath2(value) {
   if (process.platform !== "win32") return false;
   return /^[a-zA-Z]:(?![\\/])/.test(value) || /^[\\/](?![\\/])/.test(value);
 }
+var execFileAsync = promisify(execFile);
+var GIT_TIMEOUT_MS = 3e3;
+var GIT_MAX_BUFFER = 1e6;
+async function listTheaterWorktrees(theaterRoot, deps = {}) {
+  const exec = deps.execFile ?? ((file2, args, options) => execFileAsync(file2, args, options));
+  const realpath2 = deps.realpath ?? fs14__default.promises.realpath;
+  let stdout;
+  try {
+    ({ stdout } = await exec("git", ["worktree", "list", "--porcelain"], { cwd: theaterRoot, env: { ...process.env, LC_ALL: "C" }, shell: false, timeout: GIT_TIMEOUT_MS, maxBuffer: GIT_MAX_BUFFER }));
+  } catch (error51) {
+    if (isNotGitError(error51)) return { isGitRepo: false, worktrees: [] };
+    throw error51;
+  }
+  const realRoot = await realpath2(theaterRoot);
+  const records = parseGitWorktreePorcelain(stdout);
+  const worktrees = [];
+  for (const record2 of records) {
+    try {
+      const real = await realpath2(record2.worktree);
+      if (!isWithinRoot3(real, realRoot) || real === realRoot) continue;
+      worktrees.push({ relPath: path27__default.relative(realRoot, real).split(path27__default.sep).join("/"), branch: record2.branch, isCurrent: real === realRoot });
+    } catch {
+    }
+  }
+  return { isGitRepo: true, worktrees };
+}
+function parseGitWorktreePorcelain(value) {
+  const records = [];
+  for (const block of value.split("\n\n")) {
+    const fields = block.split("\n");
+    const worktree = fields.find((field) => field.startsWith("worktree "))?.slice("worktree ".length);
+    if (!worktree) continue;
+    const branchRef = fields.find((field) => field.startsWith("branch "))?.slice("branch ".length) ?? null;
+    records.push({ worktree, branch: branchRef?.replace(/^refs\/heads\//, "") ?? null, detached: fields.includes("detached") });
+  }
+  return records;
+}
+function isWithinRoot3(candidate, root) {
+  const normalizedRoot = root.endsWith(path27__default.sep) ? root : `${root}${path27__default.sep}`;
+  return candidate === root || candidate.startsWith(normalizedRoot);
+}
+function isNotGitError(error51) {
+  const value = error51;
+  const text = `${typeof value.stderr === "string" ? value.stderr : ""}
+${typeof value.message === "string" ? value.message : ""}`;
+  return /not a git repository/i.test(text);
+}
+
+// core/host/theater-path-context-routes.ts
+function createTheaterPathContextRouter(deps) {
+  return async function handleTheaterPathContextRoute({ req, res, pathname }) {
+    const match = pathname.match(/^\/api\/v1\/theaters\/([^/]+)\/path-context(?:\/(worktrees|directories))?$/u);
+    if (!match) return false;
+    const theater = deps.getTheater(decodeURIComponent(match[1] ?? ""));
+    if (!theater) {
+      deps.writeJson(res, 400, { error: "invalid_theater" });
+      return true;
+    }
+    const action = match[2] ?? "context";
+    if (action === "context") await handleContext(req, res, theater, deps);
+    else if (action === "worktrees") await handleWorktrees(req, res, theater, deps);
+    else await handleDirectories(req, res, theater, deps);
+    return true;
+  };
+}
+async function handleContext(req, res, theater, deps) {
+  if (req.method === "GET") {
+    await writeContext(res, theater, deps);
+    return;
+  }
+  if (req.method !== "PUT") {
+    deps.writeJson(res, 405, { error: "method_not_allowed" });
+    return;
+  }
+  if (!deps.isAuthorized(req)) {
+    deps.writeJson(res, 401, { error: "unauthorized" });
+    return;
+  }
+  const body = await deps.readJsonBody(req);
+  if (!isPlainObject3(body) || !(body.relPath === null || typeof body.relPath === "string") || Object.keys(body).length !== 1) {
+    deps.writeJson(res, 400, { error: "invalid_request" });
+    return;
+  }
+  try {
+    const resolved = await resolveTheaterPathContext(theater.realpath, body.relPath);
+    const updated = deps.setPathContext(theater.id, resolved.relPath);
+    if (!updated) {
+      deps.writeJson(res, 404, { error: "theater_not_found" });
+      return;
+    }
+    deps.persist();
+    deps.writeJson(res, 200, await toContextDto(updated, deps));
+  } catch (error51) {
+    writePathError2(res, deps, error51);
+  }
+}
+async function handleWorktrees(req, res, theater, deps) {
+  if (req.method !== "GET") {
+    deps.writeJson(res, 405, { error: "method_not_allowed" });
+    return;
+  }
+  try {
+    deps.writeJson(res, 200, await listTheaterWorktrees(theater.realpath));
+  } catch {
+    deps.writeJson(res, 500, { error: "worktree_discovery_failed" });
+  }
+}
+async function handleDirectories(req, res, theater, deps) {
+  if (req.method !== "POST") {
+    deps.writeJson(res, 405, { error: "method_not_allowed" });
+    return;
+  }
+  if (!deps.isAuthorized(req)) {
+    deps.writeJson(res, 401, { error: "unauthorized" });
+    return;
+  }
+  const body = await deps.readJsonBody(req);
+  if (!isPlainObject3(body) || !(body.relativePath === null || typeof body.relativePath === "string") || Object.keys(body).length !== 1) {
+    deps.writeJson(res, 400, { error: "invalid_request" });
+    return;
+  }
+  try {
+    deps.writeJson(res, 200, { directories: await listTheaterDirectories(theater.realpath, body.relativePath) });
+  } catch (error51) {
+    writePathError2(res, deps, error51);
+  }
+}
+async function writeContext(res, theater, deps) {
+  try {
+    deps.writeJson(res, 200, await toContextDto(theater, deps));
+  } catch (error51) {
+    if (error51 instanceof TheaterPathContextError && theater.pathContext !== null) {
+      const healed = deps.setPathContext(theater.id, null);
+      if (healed) {
+        deps.persist();
+        try {
+          deps.writeJson(res, 200, await toContextDto(healed, deps));
+          return;
+        } catch (rootError) {
+          writePathError2(res, deps, rootError);
+          return;
+        }
+      }
+    }
+    writePathError2(res, deps, error51);
+  }
+}
+async function toContextDto(theater, _deps) {
+  const resolved = await resolveTheaterPathContext(theater.realpath, theater.pathContext);
+  let kind = resolved.relPath === null ? "root" : "directory";
+  if (resolved.relPath !== null) {
+    try {
+      const worktrees = await listTheaterWorktrees(theater.realpath);
+      if (worktrees.worktrees.some((worktree) => worktree.relPath === resolved.relPath)) kind = "worktree";
+    } catch {
+    }
+  }
+  return { kind, relPath: resolved.relPath, label: resolved.relPath === null ? theater.label : resolved.label };
+}
+function writePathError2(res, deps, error51) {
+  if (!(error51 instanceof TheaterPathContextError)) throw error51;
+  const status = error51.code === "not_found" ? 404 : error51.code === "forbidden" ? 403 : 400;
+  deps.writeJson(res, status, { error: error51.code });
+}
+function isPlainObject3(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
 var TheaterRegistry = class {
   #items = /* @__PURE__ */ new Map();
   #mruId = null;
   async register(cwd) {
-    const resolved = path25__default.resolve(cwd);
+    const resolved = path27__default.resolve(cwd);
     const real = await canonicalizeTheaterPath(resolved);
     const id = workspaceHash(real);
     const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -37015,7 +38156,8 @@ var TheaterRegistry = class {
       realpath: real,
       label: theaterLabel(resolved),
       registeredAt: existing?.registeredAt ?? now,
-      lastOpenedAt: now
+      lastOpenedAt: now,
+      pathContext: existing?.pathContext ?? null
     };
     this.#items.set(id, item);
     this.#mruId = id;
@@ -37055,6 +38197,13 @@ var TheaterRegistry = class {
     if (this.#mruId === id) this.#mruId = this.list()[0]?.id ?? null;
     return removed;
   }
+  setPathContext(id, pathContext) {
+    const current = this.#items.get(id);
+    if (!current) return null;
+    const next = { ...current, pathContext };
+    this.#items.set(id, next);
+    return next;
+  }
 };
 var PACKAGE_NAMES = ["@dotobokuri/fleet-cli", "@dotobokuri/fleet-console"];
 var WORKER_FILE_PREFIX = "fleet-console-update-";
@@ -37066,7 +38215,7 @@ function createConsoleUpdateApplyService(deps = {}) {
   const env = deps.env ?? process4.env;
   const execPath = deps.execPath ?? process4.execPath;
   const makeDir = deps.makeDir ?? ((dirPath, options) => {
-    fs11__default.mkdirSync(dirPath, options);
+    fs14__default.mkdirSync(dirPath, options);
   });
   const now = deps.now ?? Date.now;
   const processPid = deps.processPid ?? process4.pid;
@@ -37075,15 +38224,15 @@ function createConsoleUpdateApplyService(deps = {}) {
   const spawnWorker = deps.spawnWorker ?? defaultSpawnWorker;
   const tmpDir = deps.tmpDir ?? os4__default.tmpdir();
   const writeFile5 = deps.writeFile ?? ((filePath, content, options) => {
-    fs11__default.writeFileSync(filePath, content, { mode: options.mode });
+    fs14__default.writeFileSync(filePath, content, { mode: options.mode });
   });
   async function start(request) {
     const packageManager = await preflightInstall(request.currentPackageRoot);
     const stamp = `${now()}-${processPid}`;
-    const workerPath = path25__default.join(tmpDir, `${WORKER_FILE_PREFIX}${stamp}${WORKER_FILE_SUFFIX}`);
+    const workerPath = path27__default.join(tmpDir, `${WORKER_FILE_PREFIX}${stamp}${WORKER_FILE_SUFFIX}`);
     makeDir(request.dataDir, { recursive: true, mode: 448 });
-    const statusFile = path25__default.join(request.dataDir, `${WORKER_FILE_PREFIX}${stamp}${STATUS_FILE_SUFFIX}`);
-    const logFile = path25__default.join(request.dataDir, `${WORKER_FILE_PREFIX}${stamp}${LOG_FILE_SUFFIX}`);
+    const statusFile = path27__default.join(request.dataDir, `${WORKER_FILE_PREFIX}${stamp}${STATUS_FILE_SUFFIX}`);
+    const logFile = path27__default.join(request.dataDir, `${WORKER_FILE_PREFIX}${stamp}${LOG_FILE_SUFFIX}`);
     const script = emitConsoleUpdateWorkerScript({
       currentEndpoint: request.currentEndpoint,
       currentPackageRoot: request.currentPackageRoot,
@@ -37426,12 +38575,12 @@ function defaultSpawnWorker(execPath, args, options) {
 }
 function resolveDefaultServerModulePath() {
   const builtPath = fileURLToPath(new URL("../dist/cli.mjs", import.meta.url));
-  if (fs11__default.existsSync(builtPath)) return builtPath;
+  if (fs14__default.existsSync(builtPath)) return builtPath;
   const sourcePath = fileURLToPath(import.meta.url);
   if (sourcePath.endsWith(".ts")) {
     return sourcePath.replace(/update-apply\.ts$/, "cli.ts");
   }
-  return path25__default.join(path25__default.dirname(sourcePath), "cli.mjs");
+  return path27__default.join(path27__default.dirname(sourcePath), "cli.mjs");
 }
 
 // core/host/update-check.ts
@@ -37485,7 +38634,7 @@ function createConsoleUpdateCheckService(deps = {}) {
   };
   const resolveUpdateStatus = async () => {
     const release = readRelease();
-    if (release.channel === "local") {
+    if (release.channel === "local" || release.channel === "desktop") {
       return NO_UPDATE_STATUS;
     }
     const latestVersion = await fetchLatest(FLEET_CONSOLE_PACKAGE_NAME);
@@ -37580,6 +38729,41 @@ var SERVER_API_CATALOG = [
     category: "Observer",
     gate: "origin-write"
   },
+  {
+    method: "GET",
+    path: "/api/v1/theaters/:theaterId/path-context",
+    summary: "Get the selected Theater path context.",
+    category: "Observer",
+    gate: "loopback"
+  },
+  {
+    method: "PUT",
+    path: "/api/v1/theaters/:theaterId/path-context",
+    summary: "Save the selected Theater path context.",
+    category: "Observer",
+    gate: "origin-write"
+  },
+  {
+    method: "GET",
+    path: "/api/v1/theaters/:theaterId/path-context/worktrees",
+    summary: "List contained Git worktrees for a Theater.",
+    category: "Observer",
+    gate: "loopback"
+  },
+  {
+    method: "POST",
+    path: "/api/v1/theaters/:theaterId/path-context/directories",
+    summary: "List contained directories for a Theater path context.",
+    category: "Observer",
+    gate: "origin-write"
+  },
+  {
+    method: "POST",
+    path: "/api/v1/theaters/:theaterId/codex-workspace",
+    summary: "Resolve the Codex workspace for a Theater path context.",
+    category: "Observer",
+    gate: "origin-write"
+  },
   {
     method: "POST",
     path: "/plugins/terminal/shell/ticket",
@@ -37615,6 +38799,20 @@ var SERVER_API_CATALOG = [
     category: "Observer",
     gate: "origin-write"
   },
+  {
+    method: "POST",
+    path: "/api/v1/plans/list",
+    summary: "Theater\uC758 \uC2E4\uD589 \uACC4\uD68D \uBAA9\uB85D\uC744 \uC870\uD68C\uD569\uB2C8\uB2E4.",
+    category: "Observer",
+    gate: "origin-write"
+  },
+  {
+    method: "POST",
+    path: "/api/v1/plans/read",
+    summary: "\uC2E4\uD589 \uACC4\uD68D \uBB38\uC11C\uB97C \uC870\uD68C\uD569\uB2C8\uB2E4.",
+    category: "Observer",
+    gate: "origin-write"
+  },
   {
     method: "POST",
     path: "/api/v1/updates/apply",
@@ -37634,6 +38832,7 @@ function createConsoleServer(deps = {}) {
   const host = deps.host ?? DEFAULT_HOST;
   const port = deps.port ?? DEFAULT_PORT;
   const release = deps.release ?? readFleetConsoleRelease();
+  const desktop = readDesktopProtocolEnvironment();
   const tryServeStaticConsole2 = createStaticConsoleHandler(release.packageRoot);
   const version2 = deps.version ?? release.version;
   const channel = release.channel;
@@ -37641,7 +38840,7 @@ function createConsoleServer(deps = {}) {
   registerDefaultCarriers(carrierRegistry);
   const lock = createConsoleLock({ hostname: () => host });
   const releaseNotes = deps.releaseNotes ?? createConsoleReleaseNotesService();
-  const updateCheck = deps.updateCheck ?? createConsoleUpdateCheckService();
+  const updateCheck = deps.updateCheck ?? createConsoleUpdateCheckService({ readRelease: () => release });
   const updateApply = deps.updateApply ?? createConsoleUpdateApplyService();
   const theaters = new TheaterRegistry();
   const operations = createOperationStore();
@@ -37737,8 +38936,8 @@ function createConsoleServer(deps = {}) {
     },
     paths: {
       capturesDir: durablePaths.capturesDir,
-      pluginDataDir: (pluginId) => path25__default.join(durablePaths.dir, "plugins", pluginId),
-      resolveTheaterPath: (theaterId) => theaters.get(theaterId)?.path ?? null,
+      pluginDataDir: (pluginId) => path27__default.join(durablePaths.dir, "plugins", pluginId),
+      resolveTheaterPath: (theaterId) => theaters.get(theaterId)?.realpath ?? null,
       canonicalizeTheaterPath: canonicalizeTheaterPathSync,
       workspaceHash
     },
@@ -37762,8 +38961,10 @@ function createConsoleServer(deps = {}) {
       }
     }
   };
+  process.env.FLEET_CONSOLE_PACKAGE_ROOT = release.packageRoot;
   const pluginHost = createFleetPluginHost({
     ...resolveBuiltInPluginDiscoveryRoots(release.packageRoot),
+    bundleCacheDir: path27__default.join(durablePaths.dir, "plugin-cache"),
     routes: routeRegistry,
     upgrades: upgradeRegistry,
     host: pluginHostCapabilities
@@ -37829,6 +39030,31 @@ function createConsoleServer(deps = {}) {
     readJsonBody,
     writeJson
   });
+  const systemFontsRouter = createSystemFontsRouter({
+    systemFonts: deps.systemFonts ?? createSystemFontsService(),
+    writeJson
+  });
+  const plansRouter = createPlansRouter({
+    isAuthorized: isTerminalAuthorized,
+    readJsonBody,
+    resolveTheaterPath: (theaterId) => theaters.get(theaterId)?.realpath ?? null,
+    writeJson
+  });
+  const theaterPathContextRouter = createTheaterPathContextRouter({
+    getTheater: (theaterId) => theaters.get(theaterId),
+    isAuthorized: isTerminalAuthorized,
+    persist: persistDurableState,
+    readJsonBody,
+    setPathContext: (theaterId, relPath) => theaters.setPathContext(theaterId, relPath),
+    writeJson
+  });
+  const codexWorkspaceContextRouter = createCodexWorkspaceContextRouter({
+    getTheater: (theaterId) => theaters.get(theaterId),
+    isAuthorized: isTerminalAuthorized,
+    readJsonBody,
+    resolveWorkspace: (theaterId, theaterRoot, relPath) => codex.resolveWorkspaceForPath(theaterId, theaterRoot, relPath),
+    writeJson
+  });
   const operationsRouter = createOperationsRouter({
     store: operations,
     isAuthorized: isTerminalAuthorized,
@@ -37857,6 +39083,10 @@ function createConsoleServer(deps = {}) {
     }
   });
   routeRegistry.register("/api/v1/operations", operationsRouter);
+  routeRegistry.register("/api/v1/theaters", async (context) => {
+    if (await theaterPathContextRouter(context)) return true;
+    return codexWorkspaceContextRouter(context);
+  });
   routeRegistry.register("/api/v1/settings", async (ctx) => {
     const { req, res, pathname } = ctx;
     if (pathname === "/api/v1/settings/api-catalog") {
@@ -37865,6 +39095,7 @@ function createConsoleServer(deps = {}) {
     }
     if (await carrierSettingsRouter(ctx)) return true;
     if (await pluginSettingsRouter(ctx)) return true;
+    if (await systemFontsRouter(ctx)) return true;
     return globalSettingsRouter(ctx);
   });
   routeRegistry.register("/plugin-runtime", handlePluginRuntimeRoute);
@@ -37905,6 +39136,10 @@ function createConsoleServer(deps = {}) {
       runAsyncHandler(handleTheaterFolderGrants(req, res), res);
       return;
     }
+    if (pathname === "/api/v1/plans/list" || pathname === "/api/v1/plans/read") {
+      runAsyncBooleanHandler(plansRouter({ req, res, pathname }), res, () => false);
+      return;
+    }
     const theaterItemMatch = pathname.match(/^\/api\/v1\/theaters\/([^/]+)$/);
     if (theaterItemMatch) {
       runAsyncHandler(handleObserverTheaterItem(req, res, decodeURIComponent(theaterItemMatch[1] ?? "")), res);
@@ -37969,6 +39204,8 @@ function createConsoleServer(deps = {}) {
         endpoint: payload.endpoint,
         startedAt: payload.startedAt,
         version: payload.version,
+        ...channel === "desktop" ? { channel } : {},
+        ...payload.owner ? { owner: payload.owner } : {},
         workspaceCount: operations.list().length
       };
       writeJson(res, 200, body);
@@ -37986,7 +39223,7 @@ function createConsoleServer(deps = {}) {
       return;
     }
     const body = await readJsonBody(req);
-    if (!isPlainObject2(body) || body.path !== void 0 && body.path !== null && typeof body.path !== "string") {
+    if (!isPlainObject4(body) || body.path !== void 0 && body.path !== null && typeof body.path !== "string") {
       writeJson(res, 400, { error: "invalid_path" });
       return;
     }
@@ -38011,7 +39248,7 @@ function createConsoleServer(deps = {}) {
       return;
     }
     const body = await readJsonBody(req);
-    if (!isPlainObject2(body) || typeof body.path !== "string") {
+    if (!isPlainObject4(body) || typeof body.path !== "string") {
       writeJson(res, 400, { error: "invalid_folder" });
       return;
     }
@@ -38035,7 +39272,7 @@ function createConsoleServer(deps = {}) {
       return;
     }
     const body = await readJsonBody(req);
-    if (!isPlainObject2(body) || typeof body.folderGrantId !== "string") {
+    if (!isPlainObject4(body) || typeof body.folderGrantId !== "string") {
       writeJson(res, 400, { error: "invalid_folder_grant" });
       return;
     }
@@ -38047,7 +39284,7 @@ function createConsoleServer(deps = {}) {
     const theater = await theaters.register(cwd);
     let hasWiki = false;
     try {
-      await codex.registerWorkspace(cwd);
+      await codex.registerWorkspace(theater.realpath, void 0, theater.id);
       hasWiki = true;
     } catch (error51) {
       if (!(error51 instanceof Error && error51.message === "knowledge_root_missing")) {
@@ -38067,7 +39304,7 @@ function createConsoleServer(deps = {}) {
       return;
     }
     theaters.remove(theaterId);
-    codex.unregisterWorkspace(theaterId);
+    codex.unregisterTheaterWorkspaces(theaterId);
     for (const operation of operations.listByTheater(theaterId)) {
       pluginHostCapabilities.events.publish(OPERATION_DELETED_EVENT_CHANNEL, {
         operationId: operation.id,
@@ -38108,8 +39345,10 @@ function createConsoleServer(deps = {}) {
       return;
     }
     try {
-      const force = readUrl(req).searchParams.get("force") === "true";
-      writeJson(res, 200, await releaseNotes.refresh({ force }));
+      const searchParams = readUrl(req).searchParams;
+      const force = searchParams.get("force") === "true";
+      const locale = searchParams.get("locale") === "ko" ? "ko" : "en";
+      writeJson(res, 200, await releaseNotes.refresh({ force, locale }));
     } catch (error51) {
       if (error51 instanceof ConsoleReleaseNotesUnavailableError) {
         writeJson(res, 503, { error: "release_notes_unavailable" });
@@ -38132,10 +39371,14 @@ function createConsoleServer(deps = {}) {
       writeJson(res, 400, { error: "invalid_update_apply_body" });
       return;
     }
-    if (body !== null && (!isPlainObject2(body) || hasForbiddenUpdateApplyBodyKeys(body))) {
+    if (body !== null && (!isPlainObject4(body) || hasForbiddenUpdateApplyBodyKeys(body))) {
       writeJson(res, 400, { error: "invalid_update_apply_body" });
       return;
     }
+    if (channel === "desktop") {
+      writeJson(res, 403, { error: "desktop_update_managed" });
+      return;
+    }
     if (channel === "local") {
       writeJson(res, 403, { error: "local_channel" });
       return;
@@ -38244,6 +39487,7 @@ function createConsoleServer(deps = {}) {
         console.warn(`[fleet-console] Plugin cleanup failed: ${result.reason instanceof Error ? result.reason.message : String(result.reason)}`);
       }
     }
+    await pluginHost.cleanup();
     pluginCleanupCallbacks.clear();
     pluginEventListeners.clear();
     currentLock?.release();
@@ -38255,6 +39499,8 @@ function createConsoleServer(deps = {}) {
       theaters.restore(state.theaters);
       operations.replace(state.operations);
       operations.replaceGroups(state.groups ?? []);
+      const healed = await healRestoredPathContexts();
+      if (healed) persistDurableState();
     } catch (error51) {
       console.warn(`[fleet-console] Durable state restore skipped: ${error51 instanceof Error ? error51.message : String(error51)}`);
       state = emptyDurableConsoleState();
@@ -38264,11 +39510,28 @@ function createConsoleServer(deps = {}) {
     }
     await restoreCodexWorkspaces();
   }
+  async function healRestoredPathContexts() {
+    let healed = false;
+    for (const theater of theaters.list()) {
+      if (theater.pathContext === null) continue;
+      try {
+        const resolved = await resolveTheaterPathContext(theater.realpath, theater.pathContext);
+        if (resolved.relPath !== theater.pathContext) {
+          theaters.setPathContext(theater.id, resolved.relPath);
+          healed = true;
+        }
+      } catch {
+        theaters.setPathContext(theater.id, null);
+        healed = true;
+      }
+    }
+    return healed;
+  }
   async function restoreCodexWorkspaces() {
     const ordered = [...theaters.list()].sort((left, right) => left.lastOpenedAt.localeCompare(right.lastOpenedAt));
     for (const theater of ordered) {
       try {
-        await codex.registerWorkspace(theater.realpath, theater.lastOpenedAt);
+        await codex.registerWorkspace(theater.realpath, theater.lastOpenedAt, theater.id);
       } catch (error51) {
         if (!(error51 instanceof Error && error51.message === "knowledge_root_missing")) {
           console.warn(`[fleet-console] Codex workspace restore skipped for Theater ${theater.id}: ${error51 instanceof Error ? error51.message : String(error51)}`);
@@ -38339,7 +39602,7 @@ function createConsoleServer(deps = {}) {
         server = result.srv;
         loopbackServer = result.localLoopbackServer;
         portState = result.portState;
-        lockHandle = lock.writeLock({ dir: lockPaths.dir, lockFile: lockPaths.lockFile, pid: process.pid, port: result.actualPort, endpoint: result.endpoint, version: version2 });
+        lockHandle = lock.writeLock({ dir: lockPaths.dir, lockFile: lockPaths.lockFile, pid: process.pid, port: result.actualPort, endpoint: result.endpoint, version: version2, ...desktop ? { owner: desktop.owner } : {} });
         activeLockFile = lockPaths.lockFile;
         activeEndpoint = result.endpoint;
       } catch (error51) {
@@ -38373,6 +39636,14 @@ function createConsoleServer(deps = {}) {
         allowFallback: false
       };
     }
+    if (channel === "local") {
+      return {
+        port: DEFAULT_PORT,
+        requestedPort: null,
+        portMode: "dynamic",
+        allowFallback: false
+      };
+    }
     const options = consoleSettingsStore.load().general ?? {};
     if (options.consolePortMode === "static" && isValidConsoleStaticPort3(options.consoleStaticPort)) {
       return {
@@ -38439,11 +39710,11 @@ function createConsoleServer(deps = {}) {
   return returnedServer;
 }
 function resolveBuiltInPluginDiscoveryRoots(packageRoot) {
-  const packageRootRepo = path25__default.resolve(packageRoot, "..", "..");
-  const sourceRoot = path25__default.join(packageRootRepo, "runtime", "fleet-plugins");
+  const packageRootRepo = path27__default.resolve(packageRoot, "..", "..");
+  const sourceRoot = path27__default.join(packageRootRepo, "runtime", "fleet-plugins");
   return {
-    ...fs11__default.existsSync(sourceRoot) ? { builtInSourceRoot: sourceRoot } : {},
-    builtInDistRoot: path25__default.join(packageRoot, "dist", "fleet-plugins")
+    ...fs14__default.existsSync(sourceRoot) ? { builtInSourceRoot: sourceRoot } : {},
+    builtInDistRoot: path27__default.join(packageRoot, "dist", "fleet-plugins")
   };
 }
 function createHttpServer(handler, upgradeRegistry) {
@@ -38499,7 +39770,7 @@ function theaterFolderListStatus(error51) {
   if (error51.code === "not_found") return 404;
   return 400;
 }
-function isPlainObject2(value) {
+function isPlainObject4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function hasForbiddenUpdateApplyBodyKeys(body) {
@@ -38509,7 +39780,7 @@ function isValidConsoleStaticPort3(value) {
   return typeof value === "number" && Number.isInteger(value) && value >= MIN_CONSOLE_STATIC_PORT3 && value <= MAX_CONSOLE_STATIC_PORT3;
 }
 function sanitizeLaunchKind(value) {
-  if (!isPlainObject2(value) || typeof value.id !== "string" || typeof value.type !== "string" || typeof value.title !== "string") return null;
+  if (!isPlainObject4(value) || typeof value.id !== "string" || typeof value.type !== "string" || typeof value.title !== "string") return null;
   return {
     id: value.id,
     type: value.type,
@@ -38588,7 +39859,7 @@ function isAllowedTerminalOrigin(req, expectedPort) {
 async function readPluginStorageJson(dataDir, pluginId, key) {
   const file2 = resolvePluginStorageFile(dataDir, pluginId, key);
   try {
-    return JSON.parse(await fs11__default.promises.readFile(file2, "utf8"));
+    return JSON.parse(await fs14__default.promises.readFile(file2, "utf8"));
   } catch (error51) {
     if (isNodeError(error51) && error51.code === "ENOENT") return null;
     throw error51;
@@ -38596,20 +39867,20 @@ async function readPluginStorageJson(dataDir, pluginId, key) {
 }
 async function writePluginStorageJson(dataDir, pluginId, key, value) {
   const file2 = resolvePluginStorageFile(dataDir, pluginId, key);
-  await fs11__default.promises.mkdir(path25__default.dirname(file2), { recursive: true });
-  await fs11__default.promises.writeFile(file2, JSON.stringify(value), "utf8");
+  await fs14__default.promises.mkdir(path27__default.dirname(file2), { recursive: true });
+  await fs14__default.promises.writeFile(file2, JSON.stringify(value), "utf8");
 }
 function resolvePluginStorageFile(dataDir, pluginId, key) {
   if (!/^[a-z0-9][a-z0-9._-]*$/i.test(pluginId) || !/^[a-z0-9][a-z0-9._-]*$/i.test(key)) {
     throw new Error("invalid_plugin_storage_key");
   }
-  return path25__default.join(dataDir, "plugins", pluginId, `${key}.json`);
+  return path27__default.join(dataDir, "plugins", pluginId, `${key}.json`);
 }
 function isNodeError(error51) {
   return error51 instanceof Error && "code" in error51;
 }
 function createConsoleStalePolicy(deps = {}) {
-  const fsImpl = deps.fs ?? fs11__default;
+  const fsImpl = deps.fs ?? fs14__default;
   function isBuildStale(lock, buildFile) {
     try {
       return lock.startedAt < fsImpl.statSync(buildFile).mtimeMs;
@@ -38731,6 +40002,7 @@ function createConsoleDaemonLifecycle(deps = {}) {
   async function stop() {
     const payload = readTrustedLock();
     if (!payload) return;
+    if (isLockProcessAlive(payload.pid)) assertCliCanControlDaemon(payload);
     try {
       process4.kill(payload.pid, "SIGTERM");
     } catch (err) {
@@ -38750,6 +40022,7 @@ function createConsoleDaemonLifecycle(deps = {}) {
     const probeResult = await health.probe(current);
     const isBuildStale = current ? stale.isBuildStale(current, serverModulePath) : false;
     if (probeResult.healthy && current) {
+      if (current.owner?.kind === "desktop") return current.endpoint;
       if (!isBuildStale) return current.endpoint;
       if (typeof probeResult.health?.workspaceCount === "number" && probeResult.health.workspaceCount > 0) return current.endpoint;
     }
@@ -38802,11 +40075,12 @@ async function runConsoleStatus(deps = {}) {
   const consoleUrl = `${status.lock.endpoint}console/`;
   const workspaceCount = typeof status.health?.workspaceCount === "number" ? status.health.workspaceCount : 0;
   const staleNote = status.buildStale ? " \xB7 build stale (restart recommended)" : "";
+  const ownerNote = status.lock.owner?.kind === "desktop" ? " \xB7 owned by desktop" : "";
   return [
     `Fleet Console server: running (pid ${status.lock.pid})`,
     `  endpoint   ${status.lock.endpoint}`,
     `  console    ${consoleUrl}`,
-    `  workspaces ${workspaceCount}${staleNote}`
+    `  workspaces ${workspaceCount}${staleNote}${ownerNote}`
   ].join("\n");
 }
 async function runConsoleStop(deps = {}) {
@@ -38814,6 +40088,17 @@ async function runConsoleStop(deps = {}) {
   await lifecycle.stop();
   return "Fleet Console server stopped.";
 }
+function assertCliCanControlDaemon(payload) {
+  if (payload.owner?.kind === "desktop") throw new Error("Fleet Console is owned by the desktop app; quit it from the native menu.");
+}
+function isLockProcessAlive(pid) {
+  try {
+    process4.kill(pid, 0);
+    return true;
+  } catch (err) {
+    return err.code !== "ESRCH";
+  }
+}
 async function runConsoleRestart(deps = {}) {
   const lifecycle = deps.lifecycle ?? createConsoleDaemonLifecycle();
   await lifecycle.stop();
@@ -38867,7 +40152,7 @@ async function main() {
 }
 function resolveDefaultServerModulePath2() {
   const builtPath = new URL("../dist/cli.mjs", import.meta.url).pathname;
-  if (fs11__default.existsSync(builtPath)) return builtPath;
+  if (fs14__default.existsSync(builtPath)) return builtPath;
   return fileURLToPath(import.meta.url);
 }
 function readHookSessionId(env) {
@@ -38921,7 +40206,7 @@ function readStdinBestEffort() {
     });
   });
 }
-var isDirectRun = process4.argv[1] && path25__default.resolve(process4.argv[1]) === fileURLToPath(import.meta.url);
+var isDirectRun = process4.argv[1] && path27__default.resolve(process4.argv[1]) === fileURLToPath(import.meta.url);
 if (isDirectRun) {
   await main().catch((error51) => {
     process4.stderr.write(`${error51 instanceof Error ? error51.message : String(error51)}
@@ -38930,4 +40215,4 @@ if (isDirectRun) {
   });
 }
 
-export { buildConsoleHelpText, createConsoleDaemonLifecycle, main, openFleetConsole, parseConsoleCliMode, parseConsoleHookCommand, runConsoleRestart, runConsoleStatus, runConsoleStop };
+export { assertCliCanControlDaemon, buildConsoleHelpText, createConsoleDaemonLifecycle, isLockProcessAlive, main, openFleetConsole, parseConsoleCliMode, parseConsoleHookCommand, runConsoleRestart, runConsoleStatus, runConsoleStop };