@dotobokuri/fleet-console 1.54.1 → 1.55.0

package/dist/cli.mjs

@@ -8,7 +8,7 @@ import { execFile, spawn, execFileSync } from 'node:child_process';
 import process4 from 'node:process';
 import * as os4 from 'node:os';
 import os4__default, { tmpdir } from 'node:os';
-import crypto6, { createHash, randomUUID } from 'node:crypto';
+import crypto5, { createHash, randomUUID } from 'node:crypto';
 import { builtinModules, createRequire } from 'node:module';
 import http from 'node:http';
 import https from 'node:https';
@@ -224,7 +224,7 @@ var LOCK_FILE_MODE = 384;
 function createConsoleLock(deps = {}) {
   const fsImpl = deps.fs ?? fs9__default;
   const now = deps.now ?? Date.now;
-  const randomToken = deps.randomToken ?? (() => crypto6.randomBytes(32).toString("base64url"));
+  const randomToken = deps.randomToken ?? (() => crypto5.randomBytes(32).toString("base64url"));
   const hostname5 = deps.hostname ?? (() => "127.0.0.1");
   function ensureLockDir(dir) {
     fsImpl.mkdirSync(dir, { recursive: true, mode: LOCK_DIR_MODE });
@@ -2619,7 +2619,7 @@ async function writeWikiEntryAtTarget(entry, target, paths) {
     throw new Error("wiki patch body id must match target filename");
   }
   await mkdir(path18__default.dirname(absoluteTarget), { recursive: true });
-  await writeMarkdownAtomic(absoluteTarget, serializeWikiEntry(entry), paths);
+  await writeAtomic(absoluteTarget, serializeWikiEntry(entry), paths);
   return path18__default.join("wiki", relativeTarget).replaceAll(path18__default.sep, "/");
 }
 async function writeRawSourceEntry(entry, paths) {
@@ -2639,7 +2639,7 @@ async function writeRawSourceEntry(entry, paths) {
     },
     entry.content
   );
-  await writeMarkdownAtomic(path18__default.join(paths.root, relativePath2), content, paths);
+  await writeAtomic(path18__default.join(paths.root, relativePath2), content, paths);
   return relativePath2;
 }
 async function readRawSourceEntry(rawSourceRef, paths) {
@@ -2687,7 +2687,7 @@ async function rebuildIndex(paths) {
     entryPathMap[item.entry.id] = item.path;
   }
   await writeJsonAtomic(paths.indexFile, nextIndex, paths);
-  await writeMarkdownAtomic(getIndexMarkdownFile(paths), renderIndexMarkdown(entries.map((item) => item.entry), entryPathMap), paths);
+  await writeAtomic(getIndexMarkdownFile(paths), renderIndexMarkdown(entries.map((item) => item.entry), entryPathMap), paths);
   await appendLog(paths, "index rebuilt", { entry_count: entries.length });
   return nextIndex;
 }
@@ -2767,7 +2767,7 @@ async function readPatchFile(filePath) {
   return readFile(filePath, "utf8");
 }
 async function writePatchFile(filePath, content, paths) {
-  await writeMarkdownAtomic(filePath, content, paths);
+  await writeAtomic(filePath, content, paths);
 }
 async function readJsonFile2(filePath) {
   const raw = await readFile(filePath, "utf8");
@@ -2831,7 +2831,7 @@ function stripLeadingFrontmatter(body2) {
   return stripped ? next : body2;
 }
 function computeContentHash(content) {
-  return crypto6.createHash("sha256").update(content, "utf8").digest("hex").slice(0, 8);
+  return crypto5.createHash("sha256").update(content, "utf8").digest("hex").slice(0, 8);
 }
 function assertWithinRawDir(absolutePath, paths) {
   const relative = path18__default.relative(paths.rawDir, absolutePath);
@@ -3034,9 +3034,6 @@ function isFrontmatterBlock(rawFrontmatter) {
   }
   return keys.has("id") && keys.has("title");
 }
-async function writeMarkdownAtomic(filePath, content, paths) {
-  await writeAtomic(filePath, content, paths);
-}
 async function writeJsonAtomic(filePath, value, paths) {
   await writeAtomic(filePath, JSON.stringify(value, null, 2), paths);
 }
@@ -3044,7 +3041,7 @@ async function writeAtomic(filePath, content, paths) {
   await ensureMemoryRoot(paths);
   const tempPath = path18__default.join(
     path18__default.dirname(filePath),
-    `.tmp-${process.pid}-${Date.now()}-${crypto6.randomUUID()}-${os4__default.hostname()}`
+    `.tmp-${process.pid}-${Date.now()}-${crypto5.randomUUID()}-${os4__default.hostname()}`
   );
   await writeFile(tempPath, content, "utf8");
   await rename(tempPath, filePath);
@@ -9011,7 +9008,7 @@ function parseOptionalIsoDate(value) {
   return Number.isFinite(timestamp) ? timestamp : null;
 }
 function hashBodyForComparison(body2) {
-  return crypto6.createHash("sha256").update(body2.replace(/\s+/g, " ").trim(), "utf8").digest("hex").slice(0, 8);
+  return crypto5.createHash("sha256").update(body2.replace(/\s+/g, " ").trim(), "utf8").digest("hex").slice(0, 8);
 }
 function hasConflictingStatuses(entries) {
   const statuses = new Set(entries.map((entry) => entry.status).filter((status) => status !== "unknown"));
@@ -12050,7 +12047,8 @@ var DESKTOP_FULLSCREEN_API_CATALOG = [{
   path: DESKTOP_FULLSCREEN_PATH,
   summary: "Update the ephemeral Desktop native fullscreen snapshot.",
   category: "Desktop",
-  gate: "origin-strict"
+  gate: "origin-strict",
+  transport: "http"
 }];
 function createDesktopFullscreenRouter(deps) {
   return async ({ req, res, pathname }) => {
@@ -12095,14 +12093,16 @@ var DESKTOP_SHELL_API_CATALOG = [
     path: DESKTOP_SHELL_PATH,
     summary: "Read where the Desktop that published it can send this window home; every other viewer reads nothing.",
     category: "Desktop",
-    gate: "loopback"
+    gate: "loopback",
+    transport: "http"
   },
   {
     method: "PUT",
     path: DESKTOP_SHELL_PATH,
     summary: "Publish the console the attached Desktop launched, so this window can go back to it.",
     category: "Desktop",
-    gate: "origin-strict"
+    gate: "origin-strict",
+    transport: "http"
   }
 ];
 function createDesktopShellRouter(deps) {
@@ -12148,14 +12148,16 @@ var DESKTOP_THEME_API_CATALOG = [
     path: DESKTOP_THEME_PATH,
     summary: "Get the Console-owned Desktop title bar theme.",
     category: "Desktop",
-    gate: "origin-strict"
+    gate: "origin-strict",
+    transport: "http"
   },
   {
     method: "GET",
     path: DESKTOP_THEME_EVENTS_PATH,
     summary: "Stream server-confirmed Desktop title bar theme changes.",
     category: "Desktop",
-    gate: "origin-strict"
+    gate: "origin-strict",
+    transport: "sse"
   }
 ];
 function createDesktopThemeRouter(deps) {
@@ -12178,13 +12180,36 @@ function createDesktopThemeRouter(deps) {
     return true;
   };
 }
+var REMOTE_AUTO_PORT_MIN = 49152;
+var REMOTE_AUTO_PORT_MAX = 65535;
+var REMOTE_AUTO_PORT_ATTEMPTS = 12;
+function effectiveRemoteAccessAdvertisedTuple(settings2) {
+  return settings2.publicEndpointEnabled ? { host: settings2.advertisedHost, port: settings2.advertisedPort.value } : { host: settings2.listenAddress, port: settings2.listenPort.value };
+}
 var REMOTE_BIND_HOST = /^(?:\d{1,3}(?:\.\d{1,3}){3}|[A-Za-z0-9](?:[A-Za-z0-9._-]{0,252}[A-Za-z0-9])?)$/u;
 function sanitizeRemoteAccessSettings(value) {
-  if (!isRecord3(value)) return void 0;
-  const enabled = typeof value.enabled === "boolean" ? value.enabled : void 0;
-  const bindHost = isValidRemoteBindHost(value.bindHost) ? canonicalizeRemoteBindHost(value.bindHost) : void 0;
-  if (enabled === void 0 && bindHost === void 0) return void 0;
-  return { ...enabled !== void 0 ? { enabled } : {}, ...bindHost !== void 0 ? { bindHost } : {} };
+  if (!isRecord3(value) || "bindHost" in value) return void 0;
+  if (typeof value.enabled !== "boolean") return void 0;
+  const listenAddress = value.listenAddress === "" ? "" : isValidRemoteBindHost(value.listenAddress) ? canonicalizeRemoteBindHost(value.listenAddress) : null;
+  const advertisedHost = value.advertisedHost === "" ? "" : isValidRemoteAdvertisedHost(value.advertisedHost) ? canonicalizeRemoteBindHost(value.advertisedHost) : null;
+  if (listenAddress === null || advertisedHost === null) return void 0;
+  const listenPort = sanitizeRemotePortSetting(value.listenPort);
+  const advertisedPort = sanitizeRemotePortSetting(value.advertisedPort);
+  if (!listenPort || !advertisedPort) return void 0;
+  const acknowledgment = sanitizeAcknowledgment(value.acknowledgment);
+  const explicitPublicEndpointEnabled = typeof value.publicEndpointEnabled === "boolean" ? value.publicEndpointEnabled : null;
+  if (explicitPublicEndpointEnabled === true && value.acknowledgment !== null && !acknowledgment) return void 0;
+  const publicEndpointEnabled = explicitPublicEndpointEnabled ?? acknowledgmentMatches({ listenAddress, advertisedHost, listenPort, advertisedPort }, acknowledgment);
+  if (value.enabled && (listenAddress === "" || publicEndpointEnabled && (advertisedHost === "" || !acknowledgmentMatches({ listenAddress, advertisedHost, listenPort, advertisedPort }, acknowledgment)))) return void 0;
+  return {
+    enabled: value.enabled,
+    publicEndpointEnabled,
+    listenAddress,
+    advertisedHost,
+    listenPort,
+    advertisedPort,
+    acknowledgment: publicEndpointEnabled ? acknowledgment : null
+  };
 }
 var UNUSABLE_REMOTE_BIND_HOSTS = /* @__PURE__ */ new Set(["127.0.0.1", "localhost", "::1", "0.0.0.0"]);
 function canonicalizeRemoteBindHost(value) {
@@ -12207,7 +12232,9 @@ var MAX_FEATURE_TOUR_KEY_LENGTH = 64;
 function createConsoleSettingsStore(deps = {}) {
   const paths = deps.paths ?? createConsoleDataPaths();
   const createStore = deps.createStore ?? createDurableJsonStore;
-  return createStore({
+  const randomInt = deps.randomInt ?? crypto5.randomInt;
+  const readFile7 = deps.readFile ?? ((file2) => fs9__default.readFileSync(file2, "utf8"));
+  const base = createStore({
     filePath: paths.settingsFile,
     lockDir: path18__default.join(paths.dir, SETTINGS_LOCK_DIR_NAME),
     lockOwnerFileName: SETTINGS_LOCK_OWNER_FILE_NAME,
@@ -12216,6 +12243,31 @@ function createConsoleSettingsStore(deps = {}) {
     sensitivity: "sensitive",
     tempCleanupPrefix: SETTINGS_TEMP_PREFIX
   });
+  let initialized = false;
+  function initialize() {
+    if (initialized) return base.load();
+    initialized = true;
+    const current = base.load();
+    const raw = readRawSettings(paths.settingsFile, readFile7);
+    const legacy = readLegacyRemoteAccess(raw, paths.dir, readFile7, randomInt);
+    const remoteAccess = current.general?.remoteAccess ?? legacy ?? createDefaultRemoteAccess(randomInt);
+    const next = { ...current, general: { ...current.general, remoteAccess } };
+    if (!current.general?.remoteAccess || legacy || currentRemoteAccessNeedsMigration(raw)) base.save(next);
+    return next;
+  }
+  return {
+    path: base.path,
+    load: initialize,
+    save(data) {
+      initialized = true;
+      base.save(data);
+    },
+    update(mutate) {
+      const next = mutate(initialize());
+      base.save(next);
+      return base.load();
+    }
+  };
 }
 function sanitizeConsoleSettingsData(value) {
   if (!isRecord3(value)) return emptyConsoleSettingsData();
@@ -12287,6 +12339,56 @@ function readConsolePluginSettings(value) {
   }
   return result;
 }
+function isValidRemoteAdvertisedHost(value) {
+  return isValidRemoteBindHost(value);
+}
+function sanitizeRemotePortSetting(value) {
+  if (!isRecord3(value) || value.mode !== "auto" && value.mode !== "custom" || !isBindablePort(value.value)) return null;
+  if (value.mode === "auto" && (value.value < REMOTE_AUTO_PORT_MIN || value.value > REMOTE_AUTO_PORT_MAX)) return null;
+  return { mode: value.mode, value: value.value };
+}
+function sanitizeAcknowledgment(value) {
+  if (value === null) return null;
+  if (!isRecord3(value) || value.version !== 1 || !isValidRemoteBindHost(value.listenAddress) || !isValidRemoteAdvertisedHost(value.advertisedHost) || !isBindablePort(value.listenPort) || !isBindablePort(value.advertisedPort)) return null;
+  return { version: 1, listenAddress: canonicalizeRemoteBindHost(value.listenAddress), listenPort: value.listenPort, advertisedHost: canonicalizeRemoteBindHost(value.advertisedHost), advertisedPort: value.advertisedPort };
+}
+function acknowledgmentMatches(settings2, acknowledgment) {
+  return acknowledgment !== null && acknowledgment.version === 1 && acknowledgment.listenAddress === settings2.listenAddress && acknowledgment.listenPort === settings2.listenPort.value && acknowledgment.advertisedHost === settings2.advertisedHost && acknowledgment.advertisedPort === settings2.advertisedPort.value;
+}
+function createDefaultRemoteAccess(randomInt) {
+  return { enabled: false, publicEndpointEnabled: false, listenAddress: "", advertisedHost: "", listenPort: { mode: "auto", value: randomAutoPort(randomInt) }, advertisedPort: { mode: "auto", value: randomAutoPort(randomInt) }, acknowledgment: null };
+}
+function randomAutoPort(randomInt) {
+  return randomInt(REMOTE_AUTO_PORT_MIN, REMOTE_AUTO_PORT_MAX + 1);
+}
+function isBindablePort(value) {
+  return typeof value === "number" && Number.isSafeInteger(value) && value > 0 && value <= 65535;
+}
+function readRawSettings(file2, readFile7) {
+  try {
+    return JSON.parse(readFile7(file2));
+  } catch {
+    return null;
+  }
+}
+function currentRemoteAccessNeedsMigration(raw) {
+  return isRecord3(raw) && raw.version === 1 && isRecord3(raw.general) && isRecord3(raw.general.remoteAccess) && !("bindHost" in raw.general.remoteAccess) && typeof raw.general.remoteAccess.publicEndpointEnabled !== "boolean";
+}
+function readLegacyRemoteAccess(raw, consoleDir, readFile7, randomInt) {
+  if (!isRecord3(raw) || raw.version !== 1 || !isRecord3(raw.general) || !isRecord3(raw.general.remoteAccess)) return null;
+  const legacy = raw.general.remoteAccess;
+  if (!isValidRemoteBindHost(legacy.bindHost)) return null;
+  const host = canonicalizeRemoteBindHost(legacy.bindHost);
+  let port = null;
+  try {
+    const endpoint = JSON.parse(readFile7(path18__default.join(consoleDir, "remote", "listener.json")));
+    if (isRecord3(endpoint) && endpoint.version === 1 && isBindablePort(endpoint.port)) port = endpoint.port;
+  } catch {
+  }
+  const listenPort = port === null ? { mode: "auto", value: randomAutoPort(randomInt) } : { mode: "custom", value: port };
+  const advertisedPort = port === null ? { mode: "auto", value: randomAutoPort(randomInt) } : { mode: "custom", value: port };
+  return { enabled: legacy.enabled === true, publicEndpointEnabled: false, listenAddress: host, advertisedHost: host, listenPort, advertisedPort, acknowledgment: null };
+}
 function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -12310,14 +12412,16 @@ var GLOBAL_SETTINGS_API_CATALOG = [
     path: "/api/v1/settings/global",
     summary: "Get the global console settings status.",
     category: "Settings",
-    gate: "loopback"
+    gate: "loopback",
+    transport: "http"
   },
   {
     method: "PUT",
     path: "/api/v1/settings/global",
     summary: "Save the global console settings.",
     category: "Settings",
-    gate: "origin-write"
+    gate: "origin-write",
+    transport: "http"
   }
 ];
 function createGlobalSettingsRouter(deps) {
@@ -12325,7 +12429,7 @@ function createGlobalSettingsRouter(deps) {
     const { req, res, pathname } = context;
     if (pathname === "/api/v1/settings/global") {
       if (req.method === "GET") {
-        deps.writeJson(res, 200, buildGlobalSettingsState(deps.consoleSettingsStore));
+        deps.writeJson(res, 200, withRemoteAccessVisibility(buildGlobalSettingsState(deps.consoleSettingsStore), req, deps));
         return true;
       }
       if (req.method === "PUT") {
@@ -12367,6 +12471,10 @@ async function mutateGlobalSettings(req, res, deps) {
     deps.writeJson(res, 400, { error: "invalid_language" });
     return;
   }
+  if (body2.remoteAccess !== void 0 && deps.isRemoteAccessOwner !== void 0 && !deps.isRemoteAccessOwner(req)) {
+    deps.writeJson(res, 401, { error: "unauthorized" });
+    return;
+  }
   if (body2.remoteAccess !== void 0 && !isValidRemoteAccessInput(body2.remoteAccess)) {
     deps.writeJson(res, 400, { error: "invalid_remote_access" });
     return;
@@ -12384,7 +12492,10 @@ async function mutateGlobalSettings(req, res, deps) {
     return;
   }
   const theme = body2.theme === "instrument" || body2.theme === "maritime" || body2.theme === "carbon" || body2.theme === "whites" ? body2.theme : void 0;
-  const updated = deps.consoleSettingsStore.update((current) => ({
+  const beforeUpdate = deps.consoleSettingsStore.load();
+  const previousRemoteAccess = beforeUpdate.general?.remoteAccess ?? createDefaultRemoteAccess(crypto5.randomInt);
+  const nextRemoteAccess = body2.remoteAccess !== void 0 ? normalizeRemoteAccessInput(body2.remoteAccess) : previousRemoteAccess;
+  deps.consoleSettingsStore.update((current) => ({
     ...current,
     version: 1,
     general: {
@@ -12392,7 +12503,7 @@ async function mutateGlobalSettings(req, res, deps) {
       ...body2.consolePortMode === "dynamic" || body2.consolePortMode === "static" ? { consolePortMode: body2.consolePortMode } : {},
       ...isValidGlobalStaticPortInput(body2.consoleStaticPort) ? { consoleStaticPort: body2.consoleStaticPort } : {},
       ...body2.language === "auto" || body2.language === "en" || body2.language === "ko" ? { language: body2.language } : {},
-      ...body2.remoteAccess !== void 0 ? { remoteAccess: normalizeRemoteAccessInput(body2.remoteAccess) } : {},
+      ...body2.remoteAccess !== void 0 ? { remoteAccess: nextRemoteAccess } : {},
       ...body2.seenFeatureTours !== void 0 ? { seenFeatureTours: sanitizeSeenFeatureTours(body2.seenFeatureTours) ?? [] } : {},
       ...theme !== void 0 ? { theme } : {},
       ...isUiFontSettings(body2.uiFont) ? { uiFont: body2.uiFont } : {}
@@ -12400,20 +12511,41 @@ async function mutateGlobalSettings(req, res, deps) {
     plugins: current.plugins
   }));
   if (theme !== void 0) deps.onThemeChanged?.(theme);
-  if (body2.remoteAccess !== void 0) await deps.onRemoteAccessChanged?.();
-  const response = { state: toGlobalSettingsState(updated) };
+  if (body2.remoteAccess !== void 0) await deps.onRemoteAccessChanged?.({ previous: previousRemoteAccess, next: nextRemoteAccess });
+  const response = { state: withRemoteAccessVisibility(buildGlobalSettingsState(deps.consoleSettingsStore), req, deps) };
   deps.writeJson(res, 200, response);
 }
 function isValidRemoteAccessInput(value) {
-  if (!isRecord3(value)) return false;
-  if (value.enabled !== void 0 && typeof value.enabled !== "boolean") return false;
-  if (value.bindHost !== void 0 && value.bindHost !== null && !isValidRemoteBindHost(value.bindHost)) return false;
-  return value.enabled !== true || isValidRemoteBindHost(value.bindHost);
+  if (!isRecord3(value) || "bindHost" in value || typeof value.enabled !== "boolean" || typeof value.publicEndpointEnabled !== "boolean") return false;
+  const validListenAddress = value.listenAddress === "" || isValidRemoteBindHost(value.listenAddress);
+  const validAdvertisedHost = value.advertisedHost === "" || isValidRemoteAdvertisedHost(value.advertisedHost);
+  if (!validListenAddress || !validAdvertisedHost) return false;
+  const listenPort = sanitizeRemotePortSetting(value.listenPort);
+  const advertisedPort = sanitizeRemotePortSetting(value.advertisedPort);
+  if (!listenPort || !advertisedPort) return false;
+  const acknowledgment = sanitizeAcknowledgment(value.acknowledgment);
+  if (value.acknowledgment !== null && !acknowledgment) return false;
+  if (value.publicEndpointEnabled !== true) return value.acknowledgment === null && (value.enabled !== true || value.listenAddress !== "");
+  if (value.enabled !== true) return true;
+  return value.listenAddress !== "" && value.advertisedHost !== "" && acknowledgmentMatches({ listenAddress: value.listenAddress, advertisedHost: value.advertisedHost, listenPort, advertisedPort }, acknowledgment);
 }
 function normalizeRemoteAccessInput(value) {
-  const record3 = isRecord3(value) ? value : {};
-  const enabled = typeof record3.enabled === "boolean" ? record3.enabled : false;
-  return { enabled, ...isValidRemoteBindHost(record3.bindHost) ? { bindHost: record3.bindHost } : {} };
+  const record3 = value;
+  const publicEndpointEnabled = record3.publicEndpointEnabled === true;
+  return {
+    enabled: record3.enabled === true,
+    publicEndpointEnabled,
+    listenAddress: record3.listenAddress === "" ? "" : canonicalizeRemoteBindHost(record3.listenAddress),
+    advertisedHost: record3.advertisedHost === "" ? "" : canonicalizeRemoteBindHost(record3.advertisedHost),
+    listenPort: sanitizeRemotePortSetting(record3.listenPort),
+    advertisedPort: sanitizeRemotePortSetting(record3.advertisedPort),
+    acknowledgment: publicEndpointEnabled ? sanitizeAcknowledgment(record3.acknowledgment) : null
+  };
+}
+function withRemoteAccessVisibility(state, req, deps) {
+  if (deps.isRemoteAccessOwner === void 0 || deps.isRemoteAccessOwner(req)) return state;
+  const { remoteAccess: _hidden, ...rest } = state;
+  return rest;
 }
 function toGlobalSettingsState(data) {
   const general = data.general ?? {};
@@ -12421,7 +12553,7 @@ function toGlobalSettingsState(data) {
     consolePortMode: general.consolePortMode ?? "dynamic",
     consoleStaticPort: general.consoleStaticPort ?? null,
     language: general.language ?? "auto",
-    remoteAccess: { enabled: general.remoteAccess?.enabled ?? false, bindHost: general.remoteAccess?.bindHost ?? null },
+    remoteAccess: general.remoteAccess ?? createDefaultRemoteAccess(crypto5.randomInt),
     seenFeatureTours: general.seenFeatureTours ?? [],
     theme: general.theme ?? "instrument",
     uiFont: general.uiFont ?? DEFAULT_UI_FONT_SETTINGS
@@ -12448,14 +12580,16 @@ var PLUGIN_SETTINGS_API_CATALOG = [
     path: "/api/v1/settings/plugins/:pluginId",
     summary: "Get the settings for a specific plugin.",
     category: "Settings",
-    gate: "loopback"
+    gate: "loopback",
+    transport: "http"
   },
   {
     method: "PUT",
     path: "/api/v1/settings/plugins/:pluginId",
     summary: "Save the settings for a specific plugin.",
     category: "Settings",
-    gate: "origin-write"
+    gate: "origin-write",
+    transport: "http"
   }
 ];
 function createPluginSettingsRouter(deps) {
@@ -12515,6 +12649,450 @@ function isPluginSettingsJsonRequest(req) {
   const contentType = req.headers["content-type"];
   return typeof contentType === "string" && contentType.toLowerCase().split(";")[0]?.trim() === "application/json";
 }
+var MAX_GROUP_NAME_LENGTH = 64;
+var DELETION_GRACE_MS = 8e3;
+var FIXED_SENSITIVE_OPERATION_FIELDS = /* @__PURE__ */ new Set([
+  "canonicalCwd",
+  "cwd",
+  "persona",
+  "prompt",
+  "providerSession",
+  "ticket",
+  "token",
+  "toolAllowlist",
+  "transcriptPath"
+]);
+function createSanitizedOpDto(node, options = {}) {
+  const sensitiveFields = /* @__PURE__ */ new Set([...FIXED_SENSITIVE_OPERATION_FIELDS, ...options.sensitiveFields ?? []]);
+  const payload = sanitizeRecord(node.payload, sensitiveFields);
+  delete payload.resumeAvailable;
+  if (isResumableProviderSession(node.payload?.providerSession)) payload.resumeAvailable = true;
+  return {
+    ...node,
+    payload
+  };
+}
+function isResumableProviderSession(value) {
+  if (!isRecord4(value)) return false;
+  return value.provider === "claude" && typeof value.sessionId === "string" && value.sessionId.length > 0;
+}
+function sanitizeRecord(value, sensitiveFields) {
+  const output = {};
+  for (const [key, item] of Object.entries(value)) {
+    if (sensitiveFields.has(key)) continue;
+    output[key] = sanitizeValue(item, sensitiveFields);
+  }
+  return output;
+}
+function sanitizeValue(value, sensitiveFields) {
+  if (Array.isArray(value)) return value.map((item) => sanitizeValue(item, sensitiveFields));
+  if (!isRecord4(value)) return value;
+  return sanitizeRecord(value, sensitiveFields);
+}
+function isRecord4(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function createOperationStore(deps = {}) {
+  const now = deps.now ?? Date.now;
+  const nodes = /* @__PURE__ */ new Map();
+  const groups = /* @__PURE__ */ new Map();
+  function list() {
+    return Array.from(nodes.values()).sort(compareOperationNodes);
+  }
+  function listByTheater(theaterId) {
+    return list().filter((node) => node.theaterId === theaterId);
+  }
+  function get(id) {
+    return nodes.get(id) ?? null;
+  }
+  function create2(input) {
+    const id = input.id ?? crypto5.randomUUID();
+    if (nodes.has(id)) throw new Error("operation_exists");
+    const node = normalizeCreateInput(input, id, now());
+    nodes.set(node.id, node);
+    return node;
+  }
+  function upsert(input) {
+    const existing = input.id ? nodes.get(input.id) : null;
+    if (!existing) return create2(input);
+    const updated = normalizePatch(existing, {
+      title: input.title,
+      accent: input.accent ?? existing.accent,
+      geometry: input.geometry ?? existing.geometry,
+      payload: input.payload ?? existing.payload
+    }, now());
+    nodes.set(existing.id, updated);
+    return updated;
+  }
+  function patch(id, input) {
+    const existing = nodes.get(id);
+    if (!existing) return null;
+    const updated = normalizePatch(existing, input, now());
+    nodes.set(id, updated);
+    return updated;
+  }
+  function deleteNode(id) {
+    if (!nodes.has(id)) return false;
+    nodes.delete(id);
+    return true;
+  }
+  function deleteByTheater(theaterId) {
+    let deleted = 0;
+    for (const node of Array.from(nodes.values())) {
+      if (node.theaterId !== theaterId) continue;
+      nodes.delete(node.id);
+      deleted += 1;
+    }
+    deleteGroupsByTheater(theaterId);
+    return deleted;
+  }
+  function replace(nextNodes) {
+    nodes.clear();
+    const validNodes = sanitizeReplacementNodes(nextNodes);
+    for (const node of validNodes) nodes.set(node.id, node);
+  }
+  function createGroup(input) {
+    const id = input.id ?? crypto5.randomUUID();
+    if (groups.has(id)) throw new Error("group_exists");
+    const order = input.order ?? groups.size;
+    const group = {
+      id,
+      theaterId: input.theaterId,
+      name: input.name.trim().slice(0, MAX_GROUP_NAME_LENGTH) || "Group",
+      color: input.color,
+      order,
+      createdAt: now()
+    };
+    groups.set(id, group);
+    return group;
+  }
+  function updateGroup(id, input) {
+    const existing = groups.get(id);
+    if (!existing) return null;
+    const updated = {
+      ...existing,
+      ...input.name !== void 0 ? { name: input.name.trim().slice(0, MAX_GROUP_NAME_LENGTH) || existing.name } : {},
+      ...input.color !== void 0 ? { color: input.color } : {},
+      ...input.order !== void 0 ? { order: input.order } : {}
+    };
+    groups.set(id, updated);
+    return updated;
+  }
+  function deleteGroup(id) {
+    if (!groups.has(id)) return false;
+    groups.delete(id);
+    for (const [nodeId, node] of nodes.entries()) {
+      if (node.groupId === id) nodes.set(nodeId, { ...node, groupId: null });
+    }
+    return true;
+  }
+  function listGroups(theaterId) {
+    return Array.from(groups.values()).filter((g) => g.theaterId === theaterId).sort((a, b) => a.order - b.order || a.createdAt - b.createdAt);
+  }
+  function listAllGroups() {
+    return Array.from(groups.values()).sort((a, b) => a.order - b.order || a.createdAt - b.createdAt);
+  }
+  function deleteGroupsByTheater(theaterId) {
+    let deleted = 0;
+    for (const [id, group] of Array.from(groups.entries())) {
+      if (group.theaterId !== theaterId) continue;
+      groups.delete(id);
+      deleted += 1;
+    }
+    return deleted;
+  }
+  function replaceGroups(nextGroups) {
+    groups.clear();
+    for (const group of nextGroups) {
+      if (!groups.has(group.id)) groups.set(group.id, group);
+    }
+  }
+  return { list, listByTheater, get, create: create2, upsert, patch, delete: deleteNode, deleteByTheater, replace, createGroup, updateGroup, deleteGroup, listGroups, listAllGroups, deleteGroupsByTheater, replaceGroups };
+}
+function normalizeCreateInput(input, id, timestamp) {
+  return {
+    id,
+    theaterId: input.theaterId,
+    type: input.type,
+    pluginId: input.pluginId,
+    title: input.title.trim() || "Untitled Operation",
+    ...input.accent ? { accent: input.accent.trim() } : {},
+    ...input.groupId !== void 0 ? { groupId: input.groupId } : {},
+    payload: input.payload ?? {},
+    geometry: input.geometry ?? null,
+    ts: {
+      createdAt: input.createdAt ?? timestamp,
+      updatedAt: timestamp
+    }
+  };
+}
+function normalizePatch(existing, input, timestamp) {
+  const title = input.title?.trim();
+  return {
+    ...existing,
+    ...title !== void 0 ? { title: title.length > 0 ? title : existing.title } : {},
+    ...input.accent !== void 0 ? { accent: input.accent && input.accent.trim() ? input.accent.trim() : void 0 } : {},
+    ...input.groupId !== void 0 ? { groupId: input.groupId } : {},
+    ...input.payload !== void 0 ? { payload: input.payload } : {},
+    ...input.geometry !== void 0 ? { geometry: input.geometry } : {},
+    ts: { ...existing.ts, updatedAt: timestamp }
+  };
+}
+function compareOperationNodes(a, b) {
+  return a.ts.createdAt - b.ts.createdAt || a.id.localeCompare(b.id);
+}
+function sanitizeReplacementNodes(nextNodes) {
+  const seen = /* @__PURE__ */ new Set();
+  const result = [];
+  for (const node of nextNodes) {
+    if (!seen.has(node.id)) {
+      seen.add(node.id);
+      result.push(node);
+    }
+  }
+  return result;
+}
+var OPERATIONS_API_CATALOG = [
+  { method: "GET", path: "/api/v1/operations", summary: "List Operations.", category: "Operations", gate: "loopback", transport: "http" },
+  { method: "POST", path: "/api/v1/operations", summary: "Create an Operation.", category: "Operations", gate: "origin-write", transport: "http" },
+  { method: "GET", path: "/api/v1/operations/:operationId", summary: "Get an Operation.", category: "Operations", gate: "loopback", transport: "http" },
+  { method: "PATCH", path: "/api/v1/operations/:operationId", summary: "Update an Operation.", category: "Operations", gate: "origin-write", transport: "http" },
+  { method: "DELETE", path: "/api/v1/operations/:operationId", summary: "Delete an Operation.", category: "Operations", gate: "origin-write", transport: "http" },
+  { method: "GET", path: "/api/v1/operations/catalog", summary: "List available Operation launch kinds.", category: "Operations", gate: "loopback", transport: "http" },
+  { method: "GET", path: "/api/v1/operations/events", summary: "Stream Operation changes.", category: "Operations", gate: "loopback", transport: "sse" },
+  { method: "GET", path: "/api/v1/operations/groups", summary: "List Operation groups.", category: "Operations", gate: "loopback", transport: "http" },
+  { method: "POST", path: "/api/v1/operations/groups", summary: "Create an Operation group.", category: "Operations", gate: "origin-write", transport: "http" },
+  { method: "PATCH", path: "/api/v1/operations/groups/:groupId", summary: "Update an Operation group.", category: "Operations", gate: "origin-write", transport: "http" },
+  { method: "DELETE", path: "/api/v1/operations/groups/:groupId", summary: "Delete an Operation group.", category: "Operations", gate: "origin-write", transport: "http" }
+];
+function createOperationsRouter(deps) {
+  return async ({ req, res, pathname }) => {
+    if (pathname === "/api/v1/operations") {
+      await handleCollection(req, res, deps);
+      return true;
+    }
+    if (pathname === "/api/v1/operations/catalog") {
+      if (req.method !== "GET") {
+        deps.writeJson(res, 405, { error: "Method not allowed" });
+        return true;
+      }
+      deps.writeJson(res, 200, deps.resolveLaunchCatalog ? await deps.resolveLaunchCatalog() : { plugins: [] });
+      return true;
+    }
+    if (pathname === "/api/v1/operations/events") {
+      if (req.method !== "GET") {
+        deps.writeJson(res, 405, { error: "Method not allowed" });
+        return true;
+      }
+      deps.subscribeOperationSse?.(req, res);
+      return true;
+    }
+    if (pathname === "/api/v1/operations/groups") {
+      await handleGroupCollection(req, res, deps);
+      return true;
+    }
+    const groupItemMatch = pathname.match(/^\/api\/v1\/operations\/groups\/([^/]+)$/);
+    if (groupItemMatch) {
+      await handleGroupItem(req, res, decodeURIComponent(groupItemMatch[1] ?? ""), deps);
+      return true;
+    }
+    const itemMatch = pathname.match(/^\/api\/v1\/operations\/([^/]+)$/);
+    if (itemMatch) {
+      await handleItem(req, res, decodeURIComponent(itemMatch[1] ?? ""), deps);
+      return true;
+    }
+    return false;
+  };
+}
+async function handleCollection(req, res, deps) {
+  if (req.method === "GET") {
+    const theaterId = readRequestUrl(req).searchParams.get("theaterId");
+    const nodes = theaterId ? deps.store.listByTheater(theaterId) : deps.store.list();
+    deps.writeJson(res, 200, { operations: nodes.map((node) => sanitizeOperationNode(node, deps)) });
+    return;
+  }
+  if (req.method !== "POST") {
+    deps.writeJson(res, 405, { error: "Method not allowed" });
+    return;
+  }
+  if (!deps.isAuthorized(req)) {
+    deps.writeJson(res, 401, { error: "unauthorized" });
+    return;
+  }
+  const body2 = await deps.readJsonBody(req);
+  if (!body2 || typeof body2.theaterId !== "string" || typeof body2.type !== "string" || typeof body2.pluginId !== "string" || typeof body2.title !== "string") {
+    deps.writeJson(res, 400, { error: "invalid_operation" });
+    return;
+  }
+  if (body2.accent !== void 0 && typeof body2.accent !== "string") {
+    deps.writeJson(res, 400, { error: "invalid_operation_accent" });
+    return;
+  }
+  if (typeof body2.id === "string" && deps.isPendingDeletion?.(body2.id)) {
+    deps.writeJson(res, 409, { error: "pending_deletion" });
+    return;
+  }
+  try {
+    const node = deps.store.create({
+      id: typeof body2.id === "string" ? body2.id : void 0,
+      theaterId: body2.theaterId,
+      type: body2.type,
+      pluginId: body2.pluginId,
+      title: body2.title,
+      ...typeof body2.accent === "string" ? { accent: body2.accent } : {},
+      payload: isRecord4(body2.payload) ? body2.payload : {},
+      geometry: isRecord4(body2.geometry) ? readGeometry(body2.geometry) : null
+    });
+    deps.persist();
+    deps.writeJson(res, 201, { operation: sanitizeOperationNode(node, deps) });
+  } catch (error51) {
+    deps.writeJson(res, 400, { error: error51 instanceof Error ? error51.message : "invalid_operation" });
+  }
+}
+async function handleItem(req, res, id, deps) {
+  if (req.method === "GET") {
+    const node = deps.store.get(id);
+    deps.writeJson(res, node ? 200 : 404, node ? { operation: sanitizeOperationNode(node, deps) } : { error: "operation_not_found" });
+    return;
+  }
+  if (req.method !== "PATCH" && req.method !== "DELETE") {
+    deps.writeJson(res, 405, { error: "Method not allowed" });
+    return;
+  }
+  if (!deps.isAuthorized(req)) {
+    deps.writeJson(res, 401, { error: "unauthorized" });
+    return;
+  }
+  if (req.method === "DELETE") {
+    const deletion = deps.deleteOperation(id);
+    deps.writeJson(res, 200, { ok: true, deletion });
+    return;
+  }
+  const body2 = await deps.readJsonBody(req);
+  if (!body2) {
+    deps.writeJson(res, 400, { error: "invalid_operation_patch" });
+    return;
+  }
+  if (body2.accent !== void 0 && body2.accent !== null && typeof body2.accent !== "string") {
+    deps.writeJson(res, 400, { error: "invalid_operation_accent" });
+    return;
+  }
+  if (body2.groupId !== void 0 && body2.groupId !== null && typeof body2.groupId !== "string") {
+    deps.writeJson(res, 400, { error: "invalid_operation_groupId" });
+    return;
+  }
+  try {
+    const previousNode = typeof body2.title === "string" ? deps.store.get(id) : null;
+    const node = deps.store.patch(id, {
+      ...typeof body2.title === "string" ? { title: body2.title } : {},
+      ...typeof body2.accent === "string" || body2.accent === null ? { accent: body2.accent } : {},
+      ...typeof body2.groupId === "string" || body2.groupId === null ? { groupId: body2.groupId } : {},
+      ...isRecord4(body2.payload) ? { payload: body2.payload } : {},
+      ...isRecord4(body2.geometry) || body2.geometry === null ? { geometry: body2.geometry === null ? null : readGeometry(body2.geometry) } : {}
+    });
+    if (!node) {
+      deps.writeJson(res, 404, { error: "operation_not_found" });
+      return;
+    }
+    deps.persist();
+    if (previousNode && typeof body2.title === "string") {
+      deps.publishRenameEvent?.({
+        operationId: node.id,
+        pluginId: node.pluginId,
+        type: node.type,
+        title: body2.title.trim() === "" ? "" : node.title,
+        previousTitle: previousNode.title
+      });
+    }
+    deps.broadcastOperationChanged?.(deps.store.get(id) ?? node);
+    deps.writeJson(res, 200, { operation: sanitizeOperationNode(node, deps) });
+  } catch (error51) {
+    deps.writeJson(res, 400, { error: error51 instanceof Error ? error51.message : "invalid_operation_patch" });
+  }
+}
+function sanitizeOperationNode(node, deps) {
+  return createSanitizedOpDto(node, { sensitiveFields: deps.getPluginSensitiveFields?.(node.pluginId) ?? [] });
+}
+async function handleGroupCollection(req, res, deps) {
+  if (req.method === "GET") {
+    const theaterId = readRequestUrl(req).searchParams.get("theaterId");
+    const groups = theaterId ? deps.store.listGroups(theaterId) : deps.store.listAllGroups();
+    deps.writeJson(res, 200, { groups });
+    return;
+  }
+  if (req.method !== "POST") {
+    deps.writeJson(res, 405, { error: "Method not allowed" });
+    return;
+  }
+  if (!deps.isAuthorized(req)) {
+    deps.writeJson(res, 401, { error: "unauthorized" });
+    return;
+  }
+  const body2 = await deps.readJsonBody(req);
+  if (!body2 || typeof body2.theaterId !== "string" || typeof body2.name !== "string" || typeof body2.color !== "string") {
+    deps.writeJson(res, 400, { error: "invalid_group" });
+    return;
+  }
+  try {
+    const group = deps.store.createGroup({
+      theaterId: body2.theaterId,
+      name: body2.name,
+      color: body2.color,
+      ...typeof body2.order === "number" ? { order: body2.order } : {}
+    });
+    deps.persist();
+    deps.writeJson(res, 201, { group });
+  } catch (error51) {
+    deps.writeJson(res, 400, { error: error51 instanceof Error ? error51.message : "invalid_group" });
+  }
+}
+async function handleGroupItem(req, res, id, deps) {
+  if (req.method !== "PATCH" && req.method !== "DELETE") {
+    deps.writeJson(res, 405, { error: "Method not allowed" });
+    return;
+  }
+  if (!deps.isAuthorized(req)) {
+    deps.writeJson(res, 401, { error: "unauthorized" });
+    return;
+  }
+  if (req.method === "DELETE") {
+    const deleted = deps.store.deleteGroup(id);
+    if (deleted) deps.persist();
+    deps.writeJson(res, deleted ? 200 : 404, deleted ? { ok: true } : { error: "group_not_found" });
+    return;
+  }
+  const body2 = await deps.readJsonBody(req);
+  if (!body2) {
+    deps.writeJson(res, 400, { error: "invalid_group_patch" });
+    return;
+  }
+  const group = deps.store.updateGroup(id, {
+    ...typeof body2.name === "string" ? { name: body2.name } : {},
+    ...typeof body2.color === "string" ? { color: body2.color } : {},
+    ...typeof body2.order === "number" ? { order: body2.order } : {}
+  });
+  if (!group) {
+    deps.writeJson(res, 404, { error: "group_not_found" });
+    return;
+  }
+  deps.persist();
+  deps.writeJson(res, 200, { group });
+}
+function readGeometry(value) {
+  const x = readFiniteNumber(value.x);
+  const y = readFiniteNumber(value.y);
+  const width = readFiniteNumber(value.width);
+  const height = readFiniteNumber(value.height);
+  const zIndex = readFiniteNumber(value.zIndex);
+  if (x === null || y === null || width === null || height === null || zIndex === null) return null;
+  return { x, y, width, height, zIndex };
+}
+function readFiniteNumber(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+function readRequestUrl(req) {
+  return new URL(req.url ?? "/", "http://127.0.0.1");
+}
 var MAX_FAMILY_LENGTH = 128;
 var SUCCESS_TTL_MS = 5 * 60 * 1e3;
 var FAILURE_TTL_MS = 30 * 1e3;
@@ -12624,7 +13202,8 @@ var SYSTEM_FONTS_API_CATALOG = [
     path: SYSTEM_FONTS_PATH,
     summary: "List sanitized system font families for built-in settings.",
     category: "Settings",
-    gate: "loopback"
+    gate: "loopback",
+    transport: "http"
   }
 ];
 function createSystemFontsRouter(deps) {
@@ -12644,17 +13223,26 @@ function createSystemFontsRouter(deps) {
 }
 
 // core/host/api-catalog.ts
-var compareApiCatalogEntries = (left, right) => left.category.localeCompare(right.category) || left.path.localeCompare(right.path) || left.method.localeCompare(right.method);
-function buildApiCatalog() {
-  return [
+var compareApiCatalogEntries = (left, right) => left.category.localeCompare(right.category) || left.path.localeCompare(right.path) || left.method.localeCompare(right.method) || left.transport.localeCompare(right.transport);
+function buildApiCatalog(extraEntries = []) {
+  const entries = [
     ...SERVER_API_CATALOG,
     ...DESKTOP_FULLSCREEN_API_CATALOG,
     ...DESKTOP_SHELL_API_CATALOG,
     ...DESKTOP_THEME_API_CATALOG,
     ...GLOBAL_SETTINGS_API_CATALOG,
     ...PLUGIN_SETTINGS_API_CATALOG,
-    ...SYSTEM_FONTS_API_CATALOG
-  ].slice().sort(compareApiCatalogEntries);
+    ...SYSTEM_FONTS_API_CATALOG,
+    ...OPERATIONS_API_CATALOG,
+    ...extraEntries
+  ];
+  const identities = /* @__PURE__ */ new Set();
+  for (const entry of entries) {
+    const identity2 = `${entry.method}|${entry.path}|${entry.transport}`;
+    if (identities.has(identity2)) throw new Error(`duplicate_api_catalog_entry:${entry.method}:${entry.path}:${entry.transport}`);
+    identities.add(identity2);
+  }
+  return entries.slice().sort(compareApiCatalogEntries);
 }
 
 // core/host/access-control-contract.ts
@@ -12673,8 +13261,8 @@ function createAccessRegistry(deps = {}) {
   const sessionTtlMs = deps.sessionTtlMs ?? DEFAULT_SESSION_TTL_MS;
   const sessionIdleTtlMs = deps.sessionIdleTtlMs ?? DEFAULT_SESSION_IDLE_TTL_MS;
   const now = deps.now ?? Date.now;
-  const randomToken = deps.randomToken ?? (() => crypto6.randomBytes(32).toString("base64url"));
-  const randomHandle = deps.randomHandle ?? (() => crypto6.randomBytes(8).toString("hex"));
+  const randomToken = deps.randomToken ?? (() => crypto5.randomBytes(32).toString("base64url"));
+  const randomHandle = deps.randomHandle ?? (() => crypto5.randomBytes(8).toString("hex"));
   const grants = /* @__PURE__ */ new Map();
   const sessions = /* @__PURE__ */ new Map();
   function issueGrant(audience, access = "full") {
@@ -12789,8 +13377,15 @@ function createAccessRegistry(deps = {}) {
   }
   return { grantTtlMs, issueGrant, redeemGrant, consumeGrant, openSession, peekGrant, resolveSession, listGrants, revokeGrant, revokeGrants, listSessions, hasSession, revokeSession, revokeSessionByHandle, revokeSessionsByPairing, revokeSessions, revokeAllSessions, prune };
 }
+function listenerAuthority(host, port, secure) {
+  const formatted = host.includes(":") && !host.startsWith("[") ? `[${host}]` : host;
+  return port === (secure ? 443 : 80) ? formatted : `${formatted}:${port}`;
+}
+function listenerOrigin(host, port, secure) {
+  return `${secure ? "https" : "http"}://${listenerAuthority(host, port, secure)}`;
+}
 function createLoopbackListenerIdentity(port) {
-  return { audience: "local", host: "127.0.0.1", port, origin: `http://127.0.0.1:${port}`, secure: false, bindAddress: "127.0.0.1" };
+  return { audience: "local", host: "127.0.0.1", port, origin: listenerOrigin("127.0.0.1", port, false), secure: false, bindAddress: "127.0.0.1", bindPort: port };
 }
 function normalizeBindAddress(address) {
   if (!address) return "";
@@ -12799,7 +13394,7 @@ function normalizeBindAddress(address) {
 }
 function resolveListenerIdentity(listeners, socket) {
   const address = normalizeBindAddress(socket.localAddress);
-  return listeners.find((listener) => listener.bindAddress === address && (socket.localPort === void 0 || listener.port === socket.localPort)) ?? null;
+  return listeners.find((listener) => listener.bindAddress === address && (socket.localPort === void 0 || (listener.bindPort ?? listener.port) === socket.localPort)) ?? null;
 }
 function sessionCookieName(port) {
   return `${SESSION_COOKIE_NAME}_${port}`;
@@ -12870,14 +13465,14 @@ var PAIRED_DEVICE_LIMIT = 64;
 var MAX_DEVICES = PAIRED_DEVICE_LIMIT;
 var LAST_SEEN_FLUSH_MS = 6e4;
 function hashPairingSecret(secret) {
-  return crypto6.createHash("sha256").update(secret, "utf8").digest("hex");
+  return crypto5.createHash("sha256").update(secret, "utf8").digest("hex");
 }
 function createPairedDeviceStore(consoleDir, deps = {}) {
   const storage = createRemoteStorage(consoleDir, deps);
   const readFile7 = deps.readFile ?? ((file2) => fs9__default.readFileSync(file2, "utf8"));
   const now = deps.now ?? Date.now;
-  const randomId = deps.randomId ?? (() => crypto6.randomBytes(8).toString("hex"));
-  const randomSecret = deps.randomSecret ?? (() => crypto6.randomBytes(32).toString("base64url"));
+  const randomId = deps.randomId ?? (() => crypto5.randomBytes(8).toString("hex"));
+  const randomSecret = deps.randomSecret ?? (() => crypto5.randomBytes(32).toString("base64url"));
   let devices = read();
   let flushedAt = now();
   function read() {
@@ -12970,7 +13565,7 @@ function listRemoteInterfaces(interfaces = os4__default.networkInterfaces()) {
       if (entry.family !== "IPv4" || entry.internal || seen.has(entry.address)) continue;
       seen.add(entry.address);
       const kind = isCarrierGradeNat(entry.address) ? "tailscale" : "local";
-      candidates.push({ kind, label: kind === "tailscale" ? "Tailscale" : labelFor(name), address: entry.address });
+      candidates.push({ kind, label: kind === "tailscale" ? `Tailscale (${sanitizeName(name)})` : labelFor(name), address: entry.address });
     }
   }
   return candidates.sort((left, right) => left.kind === right.kind ? left.address.localeCompare(right.address) : left.kind === "tailscale" ? -1 : 1);
@@ -12980,7 +13575,7 @@ function isCarrierGradeNat(address) {
   return octets.length === 4 && octets[0] === 100 && octets[1] !== void 0 && octets[1] >= 64 && octets[1] <= 127;
 }
 function labelFor(interfaceName) {
-  return /^(?:en|eth|wl|wlan)/u.test(interfaceName) ? "Local network" : `Local network (${sanitizeName(interfaceName)})`;
+  return `Local network (${sanitizeName(interfaceName)})`;
 }
 function sanitizeName(value) {
   return value.replace(/[^A-Za-z0-9._-]/gu, "").slice(0, 24) || "interface";
@@ -32312,7 +32907,7 @@ function specToMcpTool(spec) {
 }
 function installExecutorToolCallRouter(runtime, sessionToken, ctx) {
   runtime.server.setOnToolCallArrived(sessionToken, (toolName, args) => {
-    const toolCallId = crypto6.randomUUID();
+    const toolCallId = crypto5.randomUUID();
     void runtime.registry.invoke(toolName, args, {
       cwd: ctx.cwd,
       sessionLabel: ctx.sessionLabel,
@@ -32708,7 +33303,7 @@ function createServedMcpEndpoint(deps = {}) {
       if (activeStopPromise) await activeStopPromise;
       if (activeServer && activeServerUrl) return activeServerUrl;
       if (activeStartPromise) return activeStartPromise;
-      activeOpaquePath = `/${crypto6.randomUUID()}`;
+      activeOpaquePath = `/${crypto5.randomUUID()}`;
       activeStartPromise = new Promise((resolve3, reject) => {
         const srv = http.createServer(handleRequest);
         srv.timeout = MCP_SERVER_TIMEOUT_MS;
@@ -32965,7 +33560,7 @@ function createExecutorMcpSession(deps, toolTimeoutSeconds, request) {
     throw new Error("Executor session cwd is required");
   }
   assertNonEmptyExecutorTools(request.serverName, request.specs);
-  const token = crypto6.randomUUID();
+  const token = crypto5.randomUUID();
   registerExecutorSessionTools(runtime.runtime, token, [...request.specs]);
   installExecutorToolCallRouter(runtime.runtime, token, {
     cwd,
@@ -33004,7 +33599,7 @@ function issueSessionToken(deps, sessionTokensByLabel, request) {
       const allTools = runtime.registry.getAllAgentTools();
       const tools = request.includeTool ? allTools.filter((tool) => request.includeTool?.(tool.id) ?? true) : allTools;
       assertNonEmptyExecutorTools(name, tools);
-      const token = crypto6.randomUUID();
+      const token = crypto5.randomUUID();
       registerExecutorSessionTools(runtime, token, tools);
       installExecutorToolCallRouter(runtime, token, {
         cwd,
@@ -34349,7 +34944,7 @@ var CoworkStore = class {
       if (found && found.state !== "closed" && found.state !== "applied") return found;
     }
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    const id = crypto6.randomUUID();
+    const id = crypto5.randomUUID();
     const record3 = { id, workspaceId, entryId, state: "idle", revision: 0, draft: body2, baseDraft: body2, baseHash, baseVersion, selection: null, annotations: [], ...identity2, targetPath, createdAt: now, updatedAt: now };
     this.sessions.set(this.key(workspaceId, id), record3);
     this.writers.set(`${workspaceId}:${entryId}`, id);
@@ -34428,7 +35023,7 @@ var CoworkStore = class {
   }
 };
 function hash2(value) {
-  return crypto6.createHash("sha256").update(value).digest("hex");
+  return crypto5.createHash("sha256").update(value).digest("hex");
 }
 var COWORK_SYSTEM_PROMPT = `# Identity
 
@@ -35128,7 +35723,7 @@ function record2(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : {};
 }
 function workspaceHash(canonicalCwd) {
-  return crypto6.createHash("sha256").update(canonicalCwd).digest("hex").slice(0, 12);
+  return crypto5.createHash("sha256").update(canonicalCwd).digest("hex").slice(0, 12);
 }
 async function canonicalizeTheaterPath(cwd) {
   return canonicalizeTheaterPathSync(cwd);
@@ -35267,7 +35862,7 @@ function isWindowsAmbiguousPath(value, platform) {
 var GRANT_ID_BYTES = 24;
 var DEFAULT_GRANT_TTL_MS2 = 6e4;
 function createFolderGrantStore(deps = {}) {
-  const randomId = deps.randomId ?? (() => crypto6.randomBytes(GRANT_ID_BYTES).toString("base64url"));
+  const randomId = deps.randomId ?? (() => crypto5.randomBytes(GRANT_ID_BYTES).toString("base64url"));
   const statSync2 = deps.statSync ?? fs9__default.statSync;
   const ttlMs = deps.ttlMs ?? DEFAULT_GRANT_TTL_MS2;
   const now = deps.now ?? Date.now;
@@ -35758,439 +36353,6 @@ function readRawHeaderValues(rawHeaders, name) {
 function stripIpv6Brackets2(host) {
   return host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
 }
-var MAX_GROUP_NAME_LENGTH = 64;
-var DELETION_GRACE_MS = 8e3;
-var FIXED_SENSITIVE_OPERATION_FIELDS = /* @__PURE__ */ new Set([
-  "canonicalCwd",
-  "cwd",
-  "persona",
-  "prompt",
-  "providerSession",
-  "ticket",
-  "token",
-  "toolAllowlist",
-  "transcriptPath"
-]);
-function createSanitizedOpDto(node, options = {}) {
-  const sensitiveFields = /* @__PURE__ */ new Set([...FIXED_SENSITIVE_OPERATION_FIELDS, ...options.sensitiveFields ?? []]);
-  const payload = sanitizeRecord(node.payload, sensitiveFields);
-  delete payload.resumeAvailable;
-  if (isResumableProviderSession(node.payload?.providerSession)) payload.resumeAvailable = true;
-  return {
-    ...node,
-    payload
-  };
-}
-function isResumableProviderSession(value) {
-  if (!isRecord4(value)) return false;
-  return value.provider === "claude" && typeof value.sessionId === "string" && value.sessionId.length > 0;
-}
-function sanitizeRecord(value, sensitiveFields) {
-  const output = {};
-  for (const [key, item] of Object.entries(value)) {
-    if (sensitiveFields.has(key)) continue;
-    output[key] = sanitizeValue(item, sensitiveFields);
-  }
-  return output;
-}
-function sanitizeValue(value, sensitiveFields) {
-  if (Array.isArray(value)) return value.map((item) => sanitizeValue(item, sensitiveFields));
-  if (!isRecord4(value)) return value;
-  return sanitizeRecord(value, sensitiveFields);
-}
-function isRecord4(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function createOperationStore(deps = {}) {
-  const now = deps.now ?? Date.now;
-  const nodes = /* @__PURE__ */ new Map();
-  const groups = /* @__PURE__ */ new Map();
-  function list() {
-    return Array.from(nodes.values()).sort(compareOperationNodes);
-  }
-  function listByTheater(theaterId) {
-    return list().filter((node) => node.theaterId === theaterId);
-  }
-  function get(id) {
-    return nodes.get(id) ?? null;
-  }
-  function create2(input) {
-    const id = input.id ?? crypto6.randomUUID();
-    if (nodes.has(id)) throw new Error("operation_exists");
-    const node = normalizeCreateInput(input, id, now());
-    nodes.set(node.id, node);
-    return node;
-  }
-  function upsert(input) {
-    const existing = input.id ? nodes.get(input.id) : null;
-    if (!existing) return create2(input);
-    const updated = normalizePatch(existing, {
-      title: input.title,
-      accent: input.accent ?? existing.accent,
-      geometry: input.geometry ?? existing.geometry,
-      payload: input.payload ?? existing.payload
-    }, now());
-    nodes.set(existing.id, updated);
-    return updated;
-  }
-  function patch(id, input) {
-    const existing = nodes.get(id);
-    if (!existing) return null;
-    const updated = normalizePatch(existing, input, now());
-    nodes.set(id, updated);
-    return updated;
-  }
-  function deleteNode(id) {
-    if (!nodes.has(id)) return false;
-    nodes.delete(id);
-    return true;
-  }
-  function deleteByTheater(theaterId) {
-    let deleted = 0;
-    for (const node of Array.from(nodes.values())) {
-      if (node.theaterId !== theaterId) continue;
-      nodes.delete(node.id);
-      deleted += 1;
-    }
-    deleteGroupsByTheater(theaterId);
-    return deleted;
-  }
-  function replace(nextNodes) {
-    nodes.clear();
-    const validNodes = sanitizeReplacementNodes(nextNodes);
-    for (const node of validNodes) nodes.set(node.id, node);
-  }
-  function createGroup(input) {
-    const id = input.id ?? crypto6.randomUUID();
-    if (groups.has(id)) throw new Error("group_exists");
-    const order = input.order ?? groups.size;
-    const group = {
-      id,
-      theaterId: input.theaterId,
-      name: input.name.trim().slice(0, MAX_GROUP_NAME_LENGTH) || "Group",
-      color: input.color,
-      order,
-      createdAt: now()
-    };
-    groups.set(id, group);
-    return group;
-  }
-  function updateGroup(id, input) {
-    const existing = groups.get(id);
-    if (!existing) return null;
-    const updated = {
-      ...existing,
-      ...input.name !== void 0 ? { name: input.name.trim().slice(0, MAX_GROUP_NAME_LENGTH) || existing.name } : {},
-      ...input.color !== void 0 ? { color: input.color } : {},
-      ...input.order !== void 0 ? { order: input.order } : {}
-    };
-    groups.set(id, updated);
-    return updated;
-  }
-  function deleteGroup(id) {
-    if (!groups.has(id)) return false;
-    groups.delete(id);
-    for (const [nodeId, node] of nodes.entries()) {
-      if (node.groupId === id) nodes.set(nodeId, { ...node, groupId: null });
-    }
-    return true;
-  }
-  function listGroups(theaterId) {
-    return Array.from(groups.values()).filter((g) => g.theaterId === theaterId).sort((a, b) => a.order - b.order || a.createdAt - b.createdAt);
-  }
-  function listAllGroups() {
-    return Array.from(groups.values()).sort((a, b) => a.order - b.order || a.createdAt - b.createdAt);
-  }
-  function deleteGroupsByTheater(theaterId) {
-    let deleted = 0;
-    for (const [id, group] of Array.from(groups.entries())) {
-      if (group.theaterId !== theaterId) continue;
-      groups.delete(id);
-      deleted += 1;
-    }
-    return deleted;
-  }
-  function replaceGroups(nextGroups) {
-    groups.clear();
-    for (const group of nextGroups) {
-      if (!groups.has(group.id)) groups.set(group.id, group);
-    }
-  }
-  return { list, listByTheater, get, create: create2, upsert, patch, delete: deleteNode, deleteByTheater, replace, createGroup, updateGroup, deleteGroup, listGroups, listAllGroups, deleteGroupsByTheater, replaceGroups };
-}
-function normalizeCreateInput(input, id, timestamp) {
-  return {
-    id,
-    theaterId: input.theaterId,
-    type: input.type,
-    pluginId: input.pluginId,
-    title: input.title.trim() || "Untitled Operation",
-    ...input.accent ? { accent: input.accent.trim() } : {},
-    ...input.groupId !== void 0 ? { groupId: input.groupId } : {},
-    payload: input.payload ?? {},
-    geometry: input.geometry ?? null,
-    ts: {
-      createdAt: input.createdAt ?? timestamp,
-      updatedAt: timestamp
-    }
-  };
-}
-function normalizePatch(existing, input, timestamp) {
-  const title = input.title?.trim();
-  return {
-    ...existing,
-    ...title !== void 0 ? { title: title.length > 0 ? title : existing.title } : {},
-    ...input.accent !== void 0 ? { accent: input.accent && input.accent.trim() ? input.accent.trim() : void 0 } : {},
-    ...input.groupId !== void 0 ? { groupId: input.groupId } : {},
-    ...input.payload !== void 0 ? { payload: input.payload } : {},
-    ...input.geometry !== void 0 ? { geometry: input.geometry } : {},
-    ts: { ...existing.ts, updatedAt: timestamp }
-  };
-}
-function compareOperationNodes(a, b) {
-  return a.ts.createdAt - b.ts.createdAt || a.id.localeCompare(b.id);
-}
-function sanitizeReplacementNodes(nextNodes) {
-  const seen = /* @__PURE__ */ new Set();
-  const result = [];
-  for (const node of nextNodes) {
-    if (!seen.has(node.id)) {
-      seen.add(node.id);
-      result.push(node);
-    }
-  }
-  return result;
-}
-function createOperationsRouter(deps) {
-  return async ({ req, res, pathname }) => {
-    if (pathname === "/api/v1/operations") {
-      await handleCollection(req, res, deps);
-      return true;
-    }
-    if (pathname === "/api/v1/operations/catalog") {
-      if (req.method !== "GET") {
-        deps.writeJson(res, 405, { error: "Method not allowed" });
-        return true;
-      }
-      deps.writeJson(res, 200, deps.resolveLaunchCatalog ? await deps.resolveLaunchCatalog() : { plugins: [] });
-      return true;
-    }
-    if (pathname === "/api/v1/operations/events") {
-      if (req.method !== "GET") {
-        deps.writeJson(res, 405, { error: "Method not allowed" });
-        return true;
-      }
-      deps.subscribeOperationSse?.(req, res);
-      return true;
-    }
-    if (pathname === "/api/v1/operations/groups") {
-      await handleGroupCollection(req, res, deps);
-      return true;
-    }
-    const groupItemMatch = pathname.match(/^\/api\/v1\/operations\/groups\/([^/]+)$/);
-    if (groupItemMatch) {
-      await handleGroupItem(req, res, decodeURIComponent(groupItemMatch[1] ?? ""), deps);
-      return true;
-    }
-    const itemMatch = pathname.match(/^\/api\/v1\/operations\/([^/]+)$/);
-    if (itemMatch) {
-      await handleItem(req, res, decodeURIComponent(itemMatch[1] ?? ""), deps);
-      return true;
-    }
-    return false;
-  };
-}
-async function handleCollection(req, res, deps) {
-  if (req.method === "GET") {
-    const theaterId = readRequestUrl(req).searchParams.get("theaterId");
-    const nodes = theaterId ? deps.store.listByTheater(theaterId) : deps.store.list();
-    deps.writeJson(res, 200, { operations: nodes.map((node) => sanitizeOperationNode(node, deps)) });
-    return;
-  }
-  if (req.method !== "POST") {
-    deps.writeJson(res, 405, { error: "Method not allowed" });
-    return;
-  }
-  if (!deps.isAuthorized(req)) {
-    deps.writeJson(res, 401, { error: "unauthorized" });
-    return;
-  }
-  const body2 = await deps.readJsonBody(req);
-  if (!body2 || typeof body2.theaterId !== "string" || typeof body2.type !== "string" || typeof body2.pluginId !== "string" || typeof body2.title !== "string") {
-    deps.writeJson(res, 400, { error: "invalid_operation" });
-    return;
-  }
-  if (body2.accent !== void 0 && typeof body2.accent !== "string") {
-    deps.writeJson(res, 400, { error: "invalid_operation_accent" });
-    return;
-  }
-  if (typeof body2.id === "string" && deps.isPendingDeletion?.(body2.id)) {
-    deps.writeJson(res, 409, { error: "pending_deletion" });
-    return;
-  }
-  try {
-    const node = deps.store.create({
-      id: typeof body2.id === "string" ? body2.id : void 0,
-      theaterId: body2.theaterId,
-      type: body2.type,
-      pluginId: body2.pluginId,
-      title: body2.title,
-      ...typeof body2.accent === "string" ? { accent: body2.accent } : {},
-      payload: isRecord4(body2.payload) ? body2.payload : {},
-      geometry: isRecord4(body2.geometry) ? readGeometry(body2.geometry) : null
-    });
-    deps.persist();
-    deps.writeJson(res, 201, { operation: sanitizeOperationNode(node, deps) });
-  } catch (error51) {
-    deps.writeJson(res, 400, { error: error51 instanceof Error ? error51.message : "invalid_operation" });
-  }
-}
-async function handleItem(req, res, id, deps) {
-  if (req.method === "GET") {
-    const node = deps.store.get(id);
-    deps.writeJson(res, node ? 200 : 404, node ? { operation: sanitizeOperationNode(node, deps) } : { error: "operation_not_found" });
-    return;
-  }
-  if (req.method !== "PATCH" && req.method !== "DELETE") {
-    deps.writeJson(res, 405, { error: "Method not allowed" });
-    return;
-  }
-  if (!deps.isAuthorized(req)) {
-    deps.writeJson(res, 401, { error: "unauthorized" });
-    return;
-  }
-  if (req.method === "DELETE") {
-    const deletion = deps.deleteOperation(id);
-    deps.writeJson(res, 200, { ok: true, deletion });
-    return;
-  }
-  const body2 = await deps.readJsonBody(req);
-  if (!body2) {
-    deps.writeJson(res, 400, { error: "invalid_operation_patch" });
-    return;
-  }
-  if (body2.accent !== void 0 && body2.accent !== null && typeof body2.accent !== "string") {
-    deps.writeJson(res, 400, { error: "invalid_operation_accent" });
-    return;
-  }
-  if (body2.groupId !== void 0 && body2.groupId !== null && typeof body2.groupId !== "string") {
-    deps.writeJson(res, 400, { error: "invalid_operation_groupId" });
-    return;
-  }
-  try {
-    const previousNode = typeof body2.title === "string" ? deps.store.get(id) : null;
-    const node = deps.store.patch(id, {
-      ...typeof body2.title === "string" ? { title: body2.title } : {},
-      ...typeof body2.accent === "string" || body2.accent === null ? { accent: body2.accent } : {},
-      ...typeof body2.groupId === "string" || body2.groupId === null ? { groupId: body2.groupId } : {},
-      ...isRecord4(body2.payload) ? { payload: body2.payload } : {},
-      ...isRecord4(body2.geometry) || body2.geometry === null ? { geometry: body2.geometry === null ? null : readGeometry(body2.geometry) } : {}
-    });
-    if (!node) {
-      deps.writeJson(res, 404, { error: "operation_not_found" });
-      return;
-    }
-    deps.persist();
-    if (previousNode && typeof body2.title === "string") {
-      deps.publishRenameEvent?.({
-        operationId: node.id,
-        pluginId: node.pluginId,
-        type: node.type,
-        title: body2.title.trim() === "" ? "" : node.title,
-        previousTitle: previousNode.title
-      });
-    }
-    deps.broadcastOperationChanged?.(deps.store.get(id) ?? node);
-    deps.writeJson(res, 200, { operation: sanitizeOperationNode(node, deps) });
-  } catch (error51) {
-    deps.writeJson(res, 400, { error: error51 instanceof Error ? error51.message : "invalid_operation_patch" });
-  }
-}
-function sanitizeOperationNode(node, deps) {
-  return createSanitizedOpDto(node, { sensitiveFields: deps.getPluginSensitiveFields?.(node.pluginId) ?? [] });
-}
-async function handleGroupCollection(req, res, deps) {
-  if (req.method === "GET") {
-    const theaterId = readRequestUrl(req).searchParams.get("theaterId");
-    const groups = theaterId ? deps.store.listGroups(theaterId) : deps.store.listAllGroups();
-    deps.writeJson(res, 200, { groups });
-    return;
-  }
-  if (req.method !== "POST") {
-    deps.writeJson(res, 405, { error: "Method not allowed" });
-    return;
-  }
-  if (!deps.isAuthorized(req)) {
-    deps.writeJson(res, 401, { error: "unauthorized" });
-    return;
-  }
-  const body2 = await deps.readJsonBody(req);
-  if (!body2 || typeof body2.theaterId !== "string" || typeof body2.name !== "string" || typeof body2.color !== "string") {
-    deps.writeJson(res, 400, { error: "invalid_group" });
-    return;
-  }
-  try {
-    const group = deps.store.createGroup({
-      theaterId: body2.theaterId,
-      name: body2.name,
-      color: body2.color,
-      ...typeof body2.order === "number" ? { order: body2.order } : {}
-    });
-    deps.persist();
-    deps.writeJson(res, 201, { group });
-  } catch (error51) {
-    deps.writeJson(res, 400, { error: error51 instanceof Error ? error51.message : "invalid_group" });
-  }
-}
-async function handleGroupItem(req, res, id, deps) {
-  if (req.method !== "PATCH" && req.method !== "DELETE") {
-    deps.writeJson(res, 405, { error: "Method not allowed" });
-    return;
-  }
-  if (!deps.isAuthorized(req)) {
-    deps.writeJson(res, 401, { error: "unauthorized" });
-    return;
-  }
-  if (req.method === "DELETE") {
-    const deleted = deps.store.deleteGroup(id);
-    if (deleted) deps.persist();
-    deps.writeJson(res, deleted ? 200 : 404, deleted ? { ok: true } : { error: "group_not_found" });
-    return;
-  }
-  const body2 = await deps.readJsonBody(req);
-  if (!body2) {
-    deps.writeJson(res, 400, { error: "invalid_group_patch" });
-    return;
-  }
-  const group = deps.store.updateGroup(id, {
-    ...typeof body2.name === "string" ? { name: body2.name } : {},
-    ...typeof body2.color === "string" ? { color: body2.color } : {},
-    ...typeof body2.order === "number" ? { order: body2.order } : {}
-  });
-  if (!group) {
-    deps.writeJson(res, 404, { error: "group_not_found" });
-    return;
-  }
-  deps.persist();
-  deps.writeJson(res, 200, { group });
-}
-function readGeometry(value) {
-  const x = readFiniteNumber(value.x);
-  const y = readFiniteNumber(value.y);
-  const width = readFiniteNumber(value.width);
-  const height = readFiniteNumber(value.height);
-  const zIndex = readFiniteNumber(value.zIndex);
-  if (x === null || y === null || width === null || height === null || zIndex === null) return null;
-  return { x, y, width, height, zIndex };
-}
-function readFiniteNumber(value) {
-  return typeof value === "number" && Number.isFinite(value) ? value : null;
-}
-function readRequestUrl(req) {
-  return new URL(req.url ?? "/", "http://127.0.0.1");
-}
-
-// core/host/deferred-deletion.ts
 var DeferredDeletionError = class extends Error {
   status;
   constructor(status, message) {
@@ -36205,7 +36367,7 @@ var OPERATION_PURGED_EVENT_CHANNEL = "operation:purged";
 var PURGE_RETRY_MS = 1e3;
 function createDeferredDeletionCoordinator(deps) {
   const now = deps.now ?? Date.now;
-  const randomId = deps.randomId ?? crypto6.randomUUID;
+  const randomId = deps.randomId ?? crypto5.randomUUID;
   const setTimer = deps.setTimer ?? setTimeout;
   const clearTimer = deps.clearTimer ?? clearTimeout;
   let tombstones = [];
@@ -36861,40 +37023,51 @@ function isSafeCaptureId(value) {
   return value.length > 0 && path18__default.basename(value) === value && !value.includes(path18__default.sep) && !value.includes(path18__default.posix.sep);
 }
 var ENDPOINT_FILE = "listener.json";
-var STORE_VERSION2 = 1;
+var STORE_VERSION2 = 2;
 function createRemoteEndpointStore(consoleDir, deps = {}) {
   const storage = createRemoteStorage(consoleDir, deps);
   const readFile7 = deps.readFile ?? ((file2) => fs9__default.readFileSync(file2, "utf8"));
-  let port = read();
+  let endpoint = read();
   function read() {
     try {
       const parsed = JSON.parse(readFile7(storage.path(ENDPOINT_FILE)));
-      if (parsed?.version !== STORE_VERSION2) return null;
-      return isBindablePort(parsed.port) ? parsed.port : null;
+      if (parsed?.version === 1 && isBindablePort2(parsed.port)) {
+        return { listenPort: parsed.port, advertisedPort: parsed.port };
+      }
+      if (parsed?.version !== STORE_VERSION2 || !isBindablePort2(parsed.listenPort) || !isBindablePort2(parsed.advertisedPort)) return null;
+      return { listenPort: parsed.listenPort, advertisedPort: parsed.advertisedPort };
     } catch {
       return null;
     }
   }
   function write(next) {
-    if (next === port) return;
-    const body2 = { version: STORE_VERSION2, port: next };
+    if (sameEndpoint(next, endpoint)) return;
+    const body2 = {
+      version: STORE_VERSION2,
+      listenPort: next?.listenPort ?? null,
+      advertisedPort: next?.advertisedPort ?? null
+    };
     storage.write(ENDPOINT_FILE, `${JSON.stringify(body2, null, 2)}
 `);
-    port = next;
+    endpoint = next;
   }
   return {
-    read: () => port,
+    read: () => endpoint,
     remember: (next) => {
-      if (isBindablePort(next)) write(next);
+      const normalized = typeof next === "number" ? { listenPort: next, advertisedPort: next } : next;
+      if (isBindablePort2(normalized.listenPort) && isBindablePort2(normalized.advertisedPort)) write(normalized);
     },
     forget: () => write(null)
   };
 }
-function isBindablePort(value) {
+function sameEndpoint(left, right) {
+  return left?.listenPort === right?.listenPort && left?.advertisedPort === right?.advertisedPort;
+}
+function isBindablePort2(value) {
   return typeof value === "number" && Number.isSafeInteger(value) && value > 0 && value <= 65535;
 }
 
-// core/host/access-link.ts
+// access-protocol/index.ts
 var ACCESS_LINK_SCHEME = "fleet:";
 var ACCESS_LINK_HOST = "join";
 var ACCESS_LINK_PREFIX = "fleet://join?code=";
@@ -36905,6 +37078,8 @@ var MAX_ACCESS_LINK_LENGTH = 4096;
 var ACCESS_TOKEN = /^[A-Za-z0-9_-]{16,512}$/u;
 var CERTIFICATE_FINGERPRINT = /^[0-9A-F]{64}$/u;
 var PAYLOAD_KEYS = ["v", "endpoint", "token", "fingerprint", "label"];
+var BASE64_URL_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
+var BASE64_URL_DECODE = createBase64UrlDecodeTable();
 function encodeAccessLink(payload) {
   const envelope = {
     v: ACCESS_LINK_VERSION,
@@ -36913,13 +37088,13 @@ function encodeAccessLink(payload) {
     fingerprint: normalizeFingerprint(payload.fingerprint),
     label: sanitizeAccessLabel(payload.label)
   };
-  return `${ACCESS_LINK_PREFIX}${toBase64Url(JSON.stringify(envelope))}`;
+  return `${ACCESS_LINK_PREFIX}${toBase64Url(new TextEncoder().encode(JSON.stringify(envelope)))}`;
 }
 function parseAccessLink(input) {
   if (typeof input !== "string") throw invalidLink();
   const candidate = input.trim();
   if (candidate.length === 0 || candidate.length > MAX_ACCESS_LINK_LENGTH) throw invalidLink();
-  if (/[\u0000-\u001f\u007f\s]/u.test(candidate)) throw invalidLink();
+  if (containsDisallowedLinkWhitespace(candidate)) throw invalidLink();
   let url2;
   try {
     url2 = new URL(candidate);
@@ -36927,7 +37102,7 @@ function parseAccessLink(input) {
     throw invalidLink();
   }
   if (url2.protocol !== ACCESS_LINK_SCHEME || url2.username || url2.password || url2.hash) throw invalidLink();
-  if (url2.hostname !== ACCESS_LINK_HOST || url2.port !== "") throw invalidLink();
+  if (url2.hostname !== ACCESS_LINK_HOST || url2.port !== "" || url2.pathname !== "") throw invalidLink();
   const keys = [...url2.searchParams.keys()];
   if (keys.length !== 1 || keys[0] !== "code") throw invalidLink();
   return readPayload(decodePayload(url2.searchParams.get("code") ?? ""));
@@ -36936,7 +37111,7 @@ function decodePayload(code) {
   if (!/^[A-Za-z0-9_-]+$/u.test(code)) throw invalidLink();
   let text;
   try {
-    text = Buffer.from(code, "base64url").toString("utf8");
+    text = new TextDecoder("utf-8", { fatal: true }).decode(fromBase64Url(code));
   } catch {
     throw invalidLink();
   }
@@ -36992,10 +37167,61 @@ function normalizeFingerprint(value) {
   return value.replace(/[^0-9a-fA-F]/gu, "").toUpperCase();
 }
 function sanitizeAccessLabel(value) {
-  return value.replace(/[\u0000-\u001f\u007f-\u009f\u200b-\u200f\u2028\u2029\u202a-\u202e\u2066-\u2069]/gu, "").replace(/\s+/gu, " ").trim().slice(0, MAX_ACCESS_LABEL_LENGTH);
+  return Array.from(value).filter((character) => !isDisallowedAccessLabelCharacter(character.codePointAt(0))).join("").replace(/\s+/gu, " ").trim().slice(0, MAX_ACCESS_LABEL_LENGTH);
+}
+function containsDisallowedLinkWhitespace(value) {
+  for (const character of value) {
+    const codePoint = character.codePointAt(0);
+    if (codePoint <= 31 || codePoint === 127 || isWhitespaceCharacter(character)) return true;
+  }
+  return false;
+}
+function isWhitespaceCharacter(character) {
+  return character.trim().length === 0;
+}
+function isDisallowedAccessLabelCharacter(codePoint) {
+  return codePoint <= 31 || codePoint >= 127 && codePoint <= 159 || codePoint >= 8203 && codePoint <= 8207 || codePoint === 8232 || codePoint === 8233 || codePoint >= 8234 && codePoint <= 8238 || codePoint >= 8294 && codePoint <= 8297;
+}
+function toBase64Url(bytes) {
+  let encoded = "";
+  for (let index = 0; index < bytes.length; index += 3) {
+    const first = bytes[index];
+    const second = bytes[index + 1];
+    const third = bytes[index + 2];
+    encoded += BASE64_URL_ALPHABET[first >> 2];
+    encoded += BASE64_URL_ALPHABET[(first & 3) << 4 | (second ?? 0) >> 4];
+    if (second !== void 0) encoded += BASE64_URL_ALPHABET[(second & 15) << 2 | (third ?? 0) >> 6];
+    if (third !== void 0) encoded += BASE64_URL_ALPHABET[third & 63];
+  }
+  return encoded;
+}
+function fromBase64Url(value) {
+  if (value.length % 4 === 1) throw invalidLink();
+  const bytes = new Uint8Array(Math.floor(value.length * 6 / 8));
+  let buffer = 0;
+  let bits = 0;
+  let offset = 0;
+  for (const character of value) {
+    const decoded = BASE64_URL_DECODE[character.charCodeAt(0)] ?? -1;
+    if (decoded < 0) throw invalidLink();
+    buffer = buffer << 6 | decoded;
+    bits += 6;
+    if (bits >= 8) {
+      bits -= 8;
+      bytes[offset] = buffer >> bits & 255;
+      offset += 1;
+    }
+  }
+  if (bits > 0 && (buffer & (1 << bits) - 1) !== 0) throw invalidLink();
+  return bytes;
 }
-function toBase64Url(value) {
-  return Buffer.from(value, "utf8").toString("base64url");
+function createBase64UrlDecodeTable() {
+  const table = new Int16Array(128);
+  table.fill(-1);
+  for (let index = 0; index < BASE64_URL_ALPHABET.length; index += 1) {
+    table[BASE64_URL_ALPHABET.charCodeAt(index)] = index;
+  }
+  return table;
 }
 function invalidLink() {
   return new Error("pairing_target_invalid");
@@ -37032,7 +37258,7 @@ function createRemoteIdentityStore(consoleDir, deps = {}) {
   async function rotate(host) {
     const { certificatePem, privateKeyPem } = await generate(host);
     const createdAt = now();
-    const expiresAt = Date.parse(new crypto6.X509Certificate(certificatePem).validTo);
+    const expiresAt = Date.parse(new crypto5.X509Certificate(certificatePem).validTo);
     storage.write(KEY_FILE, privateKeyPem);
     storage.write(CERTIFICATE_FILE, certificatePem);
     storage.write(META_FILE, `${JSON.stringify({ host, createdAt, expiresAt })}
@@ -37049,12 +37275,12 @@ function createRemoteIdentityStore(consoleDir, deps = {}) {
   return { ensure, read, rotate };
 }
 function fingerprintOf(certificatePem) {
-  return new crypto6.X509Certificate(certificatePem).fingerprint256;
+  return new crypto5.X509Certificate(certificatePem).fingerprint256;
 }
 function fingerprintsMatch(left, right) {
   const a = Buffer.from(normalizeFingerprint(left), "hex");
   const b = Buffer.from(normalizeFingerprint(right), "hex");
-  return a.length > 0 && a.length === b.length && crypto6.timingSafeEqual(a, b);
+  return a.length > 0 && a.length === b.length && crypto5.timingSafeEqual(a, b);
 }
 async function generateSelfSignedCertificate(host) {
   const isIpAddress = /^\d{1,3}(?:\.\d{1,3}){3}$/u.test(host);
@@ -37081,7 +37307,7 @@ function createRemoteHostStore(consoleDir, deps = {}) {
   const storage = createRemoteStorage(consoleDir, deps);
   const readFile7 = deps.readFile ?? ((file2) => fs9__default.readFileSync(file2, "utf8"));
   const now = deps.now ?? Date.now;
-  const randomId = deps.randomId ?? (() => crypto6.randomUUID());
+  const randomId = deps.randomId ?? (() => crypto5.randomUUID());
   const pending = /* @__PURE__ */ new Map();
   let hosts = read();
   function read() {
@@ -37156,6 +37382,80 @@ function isRecord6(value) {
   const entry = value;
   return typeof entry.id === "string" && entry.id.length > 0 && typeof entry.label === "string" && typeof entry.origin === "string" && entry.origin.startsWith("https://") && typeof entry.hostname === "string" && entry.hostname.length > 0 && typeof entry.port === "number" && Number.isSafeInteger(entry.port) && typeof entry.fingerprint === "string" && /^[0-9A-F]{64}$/u.test(entry.fingerprint) && typeof entry.addedAt === "number" && (entry.lastOpenedAt === null || typeof entry.lastOpenedAt === "number");
 }
+
+// core/host/remote-join-guard.ts
+var DEFAULT_FAILURE_LIMIT = 10;
+var DEFAULT_WINDOW_MS = 6e4;
+var DEFAULT_SOURCE_SLOTS = 1024;
+var DEFAULT_CONCURRENCY = 8;
+function createRemoteJoinGuard(deps = {}) {
+  const now = deps.now ?? (() => Date.now());
+  const failureLimit = deps.failureLimit ?? DEFAULT_FAILURE_LIMIT;
+  const windowMs = deps.windowMs ?? DEFAULT_WINDOW_MS;
+  const sourceSlots = deps.sourceSlots ?? DEFAULT_SOURCE_SLOTS;
+  const concurrency = deps.concurrency ?? DEFAULT_CONCURRENCY;
+  const buckets = /* @__PURE__ */ new Map();
+  let inFlight = 0;
+  let rejected = 0;
+  let lastRejectedAt = null;
+  function liveBucket(source) {
+    const bucket = buckets.get(source);
+    if (bucket === void 0) return null;
+    if (bucket.resetAt > now()) return bucket;
+    buckets.delete(source);
+    return null;
+  }
+  function openBucket(source) {
+    const live = liveBucket(source);
+    if (live !== null) return live;
+    while (buckets.size >= sourceSlots) {
+      const oldest = buckets.keys().next();
+      if (oldest.done === true) break;
+      buckets.delete(oldest.value);
+    }
+    const fresh = { failures: 0, resetAt: now() + windowMs };
+    buckets.set(source, fresh);
+    return fresh;
+  }
+  function countRejection() {
+    rejected += 1;
+    lastRejectedAt = now();
+  }
+  return {
+    begin(source) {
+      const bucket = liveBucket(source);
+      if (bucket !== null && bucket.failures >= failureLimit) {
+        countRejection();
+        return "throttled";
+      }
+      if (inFlight >= concurrency) {
+        countRejection();
+        return "busy";
+      }
+      inFlight += 1;
+      return "ok";
+    },
+    settle(source, outcome) {
+      inFlight = Math.max(0, inFlight - 1);
+      if (outcome === "paired") {
+        buckets.delete(source);
+        return;
+      }
+      openBucket(source).failures += 1;
+    },
+    retryAfterSeconds(source) {
+      const bucket = liveBucket(source);
+      if (bucket === null) return Math.ceil(windowMs / 1e3);
+      return Math.max(1, Math.ceil((bucket.resetAt - now()) / 1e3));
+    },
+    stats: () => ({ count: rejected, lastAt: lastRejectedAt })
+  };
+}
+function normalizeRemoteJoinSource(address) {
+  if (address === void 0 || address === "") return "unknown";
+  const mapped = /^::ffff:(\d{1,3}(?:\.\d{1,3}){3})$/iu.exec(address);
+  return mapped === null ? address : mapped[1];
+}
 var REMOTE_PROBE_TIMEOUT_MS = 6e3;
 function probeRemoteIdentity(hostname5, port, expected, timeoutMs = REMOTE_PROBE_TIMEOUT_MS) {
   return new Promise((resolve3) => {
@@ -37325,7 +37625,7 @@ var SHIM_NAMED_EXPORTS = {
   "react": ["Activity", "Children", "Component", "Fragment", "Profiler", "PureComponent", "StrictMode", "Suspense", "__CLIENT_INTERNALS_DO_NOT_USE_OR_WARN_USERS_THEY_CANNOT_UPGRADE", "__COMPILER_RUNTIME", "act", "cache", "cacheSignal", "captureOwnerStack", "cloneElement", "createContext", "createElement", "createRef", "forwardRef", "isValidElement", "lazy", "memo", "startTransition", "unstable_useCacheRefresh", "use", "useActionState", "useCallback", "useContext", "useDebugValue", "useDeferredValue", "useEffect", "useEffectEvent", "useId", "useImperativeHandle", "useInsertionEffect", "useLayoutEffect", "useMemo", "useOptimistic", "useReducer", "useRef", "useState", "useSyncExternalStore", "useTransition", "version"],
   "react/jsx-runtime": ["Fragment", "jsx", "jsxs"],
   "@fleet-console/sdk/plugin/browser": ["React", "createClientCapabilities", "defineOperationKind", "definePlugin", "useOperationStatus", "useOperations", "usePluginApi", "usePluginSettings", "usePluginStorage", "useStoreSnapshot"],
-  "@fleet-console/sdk/settings/browser": ["SettingsCard", "SettingsField", "SettingsRow", "SettingsSelect", "SettingsToggle", "defineSettingsSection"],
+  "@fleet-console/sdk/settings/browser": ["ExperimentalBadge", "SettingsCard", "SettingsField", "SettingsRow", "SettingsSelect", "SettingsToggle", "defineSettingsSection"],
   "@fleet-console/sdk/operations/browser": ["ApiError", "OperationBody", "assertOperationNode", "fetchOperationCatalog", "hasForbiddenBrowserPayloadKey"],
   "@fleet-console/sdk/notifications/browser": ["defineNotificationKind"],
   "@fleet-console/sdk/react/browser": ["PluginErrorBoundary", "React", "Select", "useSelect"]
@@ -37601,6 +37901,7 @@ function createFleetPluginHost(deps) {
   const plugins = filterDiscoveredPlugins(discoverFleetPlugins(deps));
   const sensitiveFieldsByPluginId = new Map(plugins.map((plugin) => [plugin.manifest.id, plugin.manifest.sensitiveFields ?? []]));
   const generatedBundleDirs = /* @__PURE__ */ new Set();
+  const apiCatalog = [];
   const isProcessAlive2 = deps.isProcessAlive ?? isPluginBundleOwnerAlive;
   const removeBundleDir = deps.removeBundleDir ?? removePluginBundleDir;
   const importModule = deps.importModule ?? ((entry) => importPluginModule(entry, deps.bundleCacheDir, generatedBundleDirs));
@@ -37633,21 +37934,109 @@ function createFleetPluginHost(deps) {
       }
     }
   }
-  return { plugins, sensitiveFieldsByPluginId, boot: boot2, cleanup };
+  return { plugins, sensitiveFieldsByPluginId, apiCatalog, boot: boot2, cleanup };
   async function bootPluginRoutes(plugin) {
+    const pendingRoutes = [];
+    const pendingUpgrades = [];
+    const pendingCatalog = [];
     const mod = await importModule(plugin.routesEntry);
     const register = resolveRegister(mod);
     if (!register) return;
-    await register({
-      pluginId: plugin.manifest.id,
-      manifest: plugin.manifest,
-      basePath: `/plugins/${plugin.manifest.id}`,
-      wsBasePath: `/plugins/${plugin.manifest.id}/ws`,
-      host: deps.host,
-      registerRouter: createScopedRouteRegistrar(deps.routes, `/plugins/${plugin.manifest.id}`, `/api/v1/plugins/${plugin.manifest.id}`),
-      registerWsHandler: createScopedUpgradeRegistrar(deps.upgrades, `/plugins/${plugin.manifest.id}/ws`)
+    const registrationTransaction = createPluginRegistrationTransaction(deps.host);
+    try {
+      await register({
+        pluginId: plugin.manifest.id,
+        manifest: plugin.manifest,
+        basePath: `/plugins/${plugin.manifest.id}`,
+        wsBasePath: `/plugins/${plugin.manifest.id}/ws`,
+        host: registrationTransaction.host,
+        registerRouter: createScopedRouteRegistrar(
+          deps.routes,
+          apiCatalog,
+          pendingRoutes,
+          pendingCatalog,
+          `/plugins/${plugin.manifest.id}`,
+          `/api/v1/plugins/${plugin.manifest.id}`
+        ),
+        registerWsHandler: createScopedUpgradeRegistrar(
+          deps.upgrades,
+          apiCatalog,
+          pendingUpgrades,
+          pendingCatalog,
+          `/plugins/${plugin.manifest.id}/ws`
+        )
+      });
+    } catch (error51) {
+      await registrationTransaction.rollback();
+      throw error51;
+    }
+    for (const route of pendingRoutes) deps.routes.register(route.prefix, route.handler);
+    for (const upgrade of pendingUpgrades) deps.upgrades.register(upgrade.prefix, upgrade.handler);
+    apiCatalog.push(...pendingCatalog);
+  }
+}
+function createPluginRegistrationTransaction(host) {
+  const rollbackActions = [];
+  function track(disposer) {
+    let active = true;
+    const trackedDisposer = () => {
+      if (!active) return;
+      active = false;
+      disposer();
+    };
+    rollbackActions.push(trackedDisposer);
+    return trackedDisposer;
+  }
+  function trackCleanup(cleanup) {
+    const unregister = host.lifecycle.registerCleanup(cleanup);
+    let active = true;
+    const trackedUnregister = () => {
+      if (!active) return;
+      active = false;
+      unregister();
+    };
+    rollbackActions.push(async () => {
+      if (!active) return;
+      active = false;
+      try {
+        await cleanup();
+      } catch {
+      }
+      try {
+        unregister();
+      } catch {
+      }
     });
+    return trackedUnregister;
   }
+  return {
+    host: {
+      ...host,
+      operations: {
+        ...host.operations,
+        registerOperationType: (type) => track(host.operations.registerOperationType(type)),
+        registerPayloadSanitizer: (pluginId, fields) => track(host.operations.registerPayloadSanitizer(pluginId, fields)),
+        registerLaunchCatalog: (pluginId, provider) => track(host.operations.registerLaunchCatalog(pluginId, provider))
+      },
+      events: {
+        ...host.events,
+        subscribe: (channel, listener) => track(host.events.subscribe(channel, listener)),
+        registerSseChannel: (channel) => track(host.events.registerSseChannel(channel))
+      },
+      lifecycle: {
+        ...host.lifecycle,
+        registerCleanup: trackCleanup
+      }
+    },
+    rollback: async () => {
+      for (let index = rollbackActions.length - 1; index >= 0; index -= 1) {
+        try {
+          await rollbackActions[index]();
+        } catch {
+        }
+      }
+    }
+  };
 }
 function filterDiscoveredPlugins(plugins) {
   const accepted = [];
@@ -37790,19 +38179,73 @@ function resolveRegister(mod) {
   if (typeof mod.default === "function") return mod.default;
   return mod.default?.register ?? null;
 }
-function createScopedRouteRegistrar(routes, basePath, apiBasePath) {
-  return (requestedPath, handler) => {
+function createScopedRouteRegistrar(routes, apiCatalog, pendingRoutes, pendingCatalog, basePath, apiBasePath) {
+  function registerRouter(requestedPath, handler, catalog) {
     const prefix = resolveScopedPrefix(basePath, requestedPath, apiBasePath);
-    assertNoRouteOverlap(prefix, routes.list().map((route) => route.prefix));
-    routes.register(prefix, handler);
-  };
+    const entries = catalog ? resolveCatalogEntries(prefix, catalog) : [];
+    assertNoCatalogDuplicates([...apiCatalog, ...pendingCatalog], entries);
+    assertNoRouteOverlap(prefix, [
+      ...routes.list().map((route) => route.prefix),
+      ...pendingRoutes.map((route) => route.prefix)
+    ]);
+    pendingRoutes.push({ prefix, handler });
+    pendingCatalog.push(...entries);
+  }
+  return registerRouter;
 }
-function createScopedUpgradeRegistrar(upgrades, basePath) {
-  return (requestedPath, handler) => {
+function createScopedUpgradeRegistrar(upgrades, apiCatalog, pendingUpgrades, pendingCatalog, basePath) {
+  function registerWsHandler(requestedPath, handler, catalog) {
     const prefix = resolveScopedPrefix(basePath, requestedPath);
-    assertNoRouteOverlap(prefix, upgrades.list().map((upgrade) => upgrade.prefix));
-    upgrades.register(prefix, handler);
-  };
+    const entries = catalog ? resolveCatalogEntries(prefix, catalog) : [];
+    assertNoCatalogDuplicates([...apiCatalog, ...pendingCatalog], entries);
+    assertNoRouteOverlap(prefix, [
+      ...upgrades.list().map((upgrade) => upgrade.prefix),
+      ...pendingUpgrades.map((upgrade) => upgrade.prefix)
+    ]);
+    pendingUpgrades.push({ prefix, handler });
+    pendingCatalog.push(...entries);
+  }
+  return registerWsHandler;
+}
+var API_CATALOG_METHODS = /* @__PURE__ */ new Set(["GET", "POST", "PUT", "PATCH", "DELETE", "*"]);
+var API_CATALOG_GATES = /* @__PURE__ */ new Set(["loopback", "origin-write", "origin-strict", "lock-token", "anthropic-credential", "one-use-ticket"]);
+var API_CATALOG_TRANSPORTS = /* @__PURE__ */ new Set(["http", "sse", "websocket", "proxy"]);
+function resolveCatalogEntries(prefix, catalog) {
+  return (Array.isArray(catalog) ? catalog : [catalog]).map((entry) => {
+    assertValidCatalogEntry(entry);
+    return {
+      ...entry,
+      path: resolveCatalogPath(prefix, entry.path)
+    };
+  });
+}
+function assertValidCatalogEntry(entry) {
+  if (!entry || typeof entry !== "object" || Array.isArray(entry)) throw new Error("plugin_catalog_entry_invalid");
+  const candidate = entry;
+  if (!API_CATALOG_METHODS.has(candidate.method) || typeof candidate.summary !== "string" || candidate.summary.trim().length === 0 || typeof candidate.category !== "string" || candidate.category.trim().length === 0 || !API_CATALOG_GATES.has(candidate.gate) || !API_CATALOG_TRANSPORTS.has(candidate.transport) || !isValidCatalogPath(candidate.path)) {
+    throw new Error("plugin_catalog_entry_invalid");
+  }
+}
+function isValidCatalogPath(value) {
+  if (typeof value !== "string") return false;
+  if (value === "") return true;
+  if (!value.startsWith("/") || value.startsWith("//") || value.includes("//") || /[?#\\]/u.test(value)) return false;
+  return !value.split("/").some((segment) => segment === "." || segment === "..");
+}
+function resolveCatalogPath(prefix, suffix) {
+  if (suffix === "") return prefix;
+  return normalizePrefix(`${prefix}${suffix}`);
+}
+function assertNoCatalogDuplicates(existing, additions) {
+  const identities = new Set(existing.map(catalogIdentity));
+  for (const entry of additions) {
+    const identity2 = catalogIdentity(entry);
+    if (identities.has(identity2)) throw new Error(`duplicate_api_catalog_entry:${entry.method}:${entry.path}:${entry.transport}`);
+    identities.add(identity2);
+  }
+}
+function catalogIdentity(entry) {
+  return `${entry.method}|${entry.path}|${entry.transport}`;
 }
 function resolveScopedPrefix(basePath, requestedPath, apiBasePath) {
   if (requestedPath.split("/").some((segment) => segment === "." || segment === "..")) throw new Error("plugin_route_outside_scope");
@@ -38757,231 +39200,232 @@ var SERVER_API_CATALOG = [
     path: PAIRING_IDENTITY_PATH,
     summary: "Read the loopback runtime pairing identity.",
     category: "Observer",
-    gate: "loopback"
+    gate: "loopback",
+    transport: "http"
   },
   {
     method: "GET",
     path: "/api/v1/status",
     summary: "\uCF58\uC194 \uAD00\uCE21 \uC0C1\uD0DC\uB97C \uC870\uD68C\uD569\uB2C8\uB2E4.",
     category: "Observer",
-    gate: "loopback"
+    gate: "loopback",
+    transport: "http"
   },
   {
     method: "GET",
     path: "/api/v1/settings/api-catalog",
     summary: "\uBC31\uC5D4\uB4DC API \uCE74\uD0C8\uB85C\uADF8\uB97C \uC870\uD68C\uD569\uB2C8\uB2E4.",
     category: "Observer",
-    gate: "loopback"
+    gate: "loopback",
+    transport: "http"
   },
   {
     method: "GET",
     path: "/api/v1/updates/release-notes",
     summary: "Get the console release notes.",
     category: "Update",
-    gate: "loopback"
+    gate: "loopback",
+    transport: "http"
   },
   {
     method: "GET",
     path: "/api/v1/theaters",
     summary: "Theater \uBAA9\uB85D\uC744 \uC870\uD68C\uD569\uB2C8\uB2E4.",
     category: "Observer",
-    gate: "loopback"
+    gate: "loopback",
+    transport: "http"
   },
   {
     method: "POST",
     path: "/api/v1/theaters",
     summary: "\uC0C8 Theater\uB97C \uB4F1\uB85D\uD569\uB2C8\uB2E4.",
     category: "Observer",
-    gate: "origin-write"
+    gate: "origin-write",
+    transport: "http"
   },
   {
     method: "PATCH",
     path: "/api/v1/theaters/:theaterId",
     summary: "Theater \uD45C\uC2DC \uC21C\uC11C\uB97C \uBCC0\uACBD\uD569\uB2C8\uB2E4.",
     category: "Observer",
-    gate: "origin-write"
+    gate: "origin-write",
+    transport: "http"
   },
   {
     method: "DELETE",
     path: "/api/v1/theaters/:theaterId",
     summary: "Theater\uC640 \uC18C\uC18D Operation\uC744 \uC81C\uAC70\uD569\uB2C8\uB2E4.",
     category: "Observer",
-    gate: "origin-write"
+    gate: "origin-write",
+    transport: "http"
   },
   {
     method: "POST",
     path: "/api/v1/deletions/:deletionId/restore",
     summary: "\uC720\uC608 \uC911\uC778 Operation \uB610\uB294 Theater \uC0AD\uC81C\uB97C \uBCF5\uAD6C\uD569\uB2C8\uB2E4.",
     category: "Observer",
-    gate: "origin-write"
+    gate: "origin-write",
+    transport: "http"
   },
   {
     method: "POST",
     path: "/api/v1/theaters/:theaterId/codex-workspace",
     summary: "Resolve the Codex workspace for a Theater.",
     category: "Observer",
-    gate: "origin-write"
-  },
-  {
-    method: "POST",
-    path: "/plugins/terminal/shell/ticket",
-    summary: "Shell WebSocket \uC811\uC18D \uD2F0\uCF13\uC744 \uBC1C\uAE09\uD569\uB2C8\uB2E4.",
-    category: "Terminal Plugin",
-    gate: "origin-write"
-  },
-  {
-    method: "GET",
-    path: "/plugins/terminal/settings",
-    summary: "Get Terminal plugin prompt settings.",
-    category: "Terminal Plugin",
-    gate: "loopback"
-  },
-  {
-    method: "PUT",
-    path: "/plugins/terminal/settings",
-    summary: "Save Terminal plugin prompt settings.",
-    category: "Terminal Plugin",
-    gate: "origin-write"
+    gate: "origin-write",
+    transport: "http"
   },
   {
     method: "POST",
     path: "/api/v1/theaters/folder-listings",
     summary: "Theater \uD3F4\uB354 \uC120\uD0DD \uBAA9\uB85D\uC744 \uC870\uD68C\uD569\uB2C8\uB2E4.",
     category: "Observer",
-    gate: "origin-write"
+    gate: "origin-write",
+    transport: "http"
   },
   {
     method: "POST",
     path: "/api/v1/theaters/folder-grants",
     summary: "Theater \uD3F4\uB354 \uC811\uADFC grant\uB97C \uBC1C\uAE09\uD569\uB2C8\uB2E4.",
     category: "Observer",
-    gate: "origin-write"
+    gate: "origin-write",
+    transport: "http"
   },
   {
     method: "POST",
     path: "/api/v1/updates/apply",
     summary: "Request console update application.",
     category: "Update",
-    gate: "origin-strict"
+    gate: "origin-strict",
+    transport: "http"
   },
   {
     method: "POST",
     path: "/api/v1/access-grants",
     summary: "Issue a single-use grant that opens a console session.",
     category: "Access",
-    gate: "lock-token"
+    gate: "lock-token",
+    transport: "http"
   },
   {
     method: "GET",
     path: "/api/v1/access-links",
     summary: "Report the remote listener, its identity, its unused links, and the devices it has paired.",
     category: "Access",
-    gate: "loopback"
+    gate: "loopback",
+    transport: "http"
   },
   {
     method: "DELETE",
     path: "/api/v1/access-links/:linkId",
     summary: "Revoke one unused remote access link.",
     category: "Access",
-    gate: "origin-write"
+    gate: "origin-write",
+    transport: "http"
   },
   {
     method: "DELETE",
     path: "/api/v1/access-sessions/:sessionHandle",
     summary: "End one open remote session, leaving its pairing intact.",
     category: "Access",
-    gate: "origin-write"
+    gate: "origin-write",
+    transport: "http"
   },
   {
     method: "DELETE",
     path: "/api/v1/paired-devices/:deviceId",
     summary: "Unpair one device so it cannot rejoin without a new access link.",
     category: "Access",
-    gate: "origin-write"
+    gate: "origin-write",
+    transport: "http"
   },
   {
     method: "POST",
     path: "/api/v1/remote-identity/rotations",
     summary: "Issue a new remote certificate, invalidating every link, pin, and session for the old one.",
     category: "Access",
-    gate: "origin-write"
-  },
-  {
-    method: "GET",
-    path: "/join",
-    summary: "Explain that an access link opens in Fleet Console Desktop.",
-    category: "Access",
-    gate: "loopback"
+    gate: "origin-write",
+    transport: "http"
   },
   {
     method: "POST",
     path: "/api/v1/access-links",
     summary: "Create a remote access link for this console.",
     category: "Access",
-    gate: "lock-token"
+    gate: "lock-token",
+    transport: "http"
   },
   {
     method: "POST",
     path: "/api/v1/join",
     summary: "Exchange a single-use grant for a pairing, or resume an existing pairing.",
     category: "Access",
-    gate: "loopback"
+    gate: "loopback",
+    transport: "http"
   },
   {
     method: "GET",
     path: "/api/v1/remote-hosts",
     summary: "List the other consoles this one can jump to.",
     category: "Access",
-    gate: "loopback"
+    gate: "loopback",
+    transport: "http"
   },
   {
     method: "POST",
     path: "/api/v1/remote-hosts",
     summary: "Remember another console from its access link, after confirming its certificate.",
     category: "Access",
-    gate: "origin-write"
+    gate: "origin-write",
+    transport: "http"
   },
   {
     method: "PATCH",
     path: "/api/v1/remote-hosts/:hostId",
     summary: "Rename a remembered console.",
     category: "Access",
-    gate: "origin-write"
+    gate: "origin-write",
+    transport: "http"
   },
   {
     method: "DELETE",
     path: "/api/v1/remote-hosts/:hostId",
     summary: "Forget a remembered console and its certificate pin.",
     category: "Access",
-    gate: "origin-write"
+    gate: "origin-write",
+    transport: "http"
   },
   {
     method: "POST",
     path: "/api/v1/remote-hosts/:hostId/probes",
     summary: "Check whether a remembered console answers and still presents its pinned certificate.",
     category: "Access",
-    gate: "origin-write"
+    gate: "origin-write",
+    transport: "http"
   },
   {
     method: "GET",
     path: "/api/v1/local-consoles",
     summary: "List the consoles running on this machine that this one can point a window at.",
     category: "Access",
-    gate: "loopback"
+    gate: "loopback",
+    transport: "http"
   },
   {
     method: "POST",
     path: "/api/v1/desktop/handoff",
     summary: "Hand the attached Desktop what it needs to open one remembered console, consuming any pending grant.",
     category: "Desktop",
-    gate: "origin-write"
+    gate: "origin-write",
+    transport: "http"
   },
   {
     method: "GET",
     path: "/api/v1/health",
     summary: "Check console status with the lock token.",
     category: "Health",
-    gate: "lock-token"
+    gate: "lock-token",
+    transport: "http"
   }
 ];
 var REMOTE_HOSTS_PATH = "/api/v1/remote-hosts";
@@ -39035,6 +39479,7 @@ function createConsoleServer(deps = {}) {
   let remoteFingerprint = null;
   let remoteReconcile = Promise.resolve();
   let remoteLastError = null;
+  const remoteJoinGuard = createRemoteJoinGuard();
   let boundPort = null;
   let controlPruneNotifyQueued = false;
   let lastPublishedControlHolder = null;
@@ -39191,6 +39636,7 @@ function createConsoleServer(deps = {}) {
   process.env.FLEET_CONSOLE_PACKAGE_ROOT = release.packageRoot;
   const pluginHost = createFleetPluginHost({
     ...resolveBuiltInPluginDiscoveryRoots(release.packageRoot),
+    homeDir: deps.pluginHomeDir,
     bundleCacheDir: path18__default.join(durablePaths.dir, "plugin-cache"),
     routes: routeRegistry,
     upgrades: upgradeRegistry,
@@ -39242,10 +39688,11 @@ function createConsoleServer(deps = {}) {
   const globalSettingsRouter = createGlobalSettingsRouter({
     consoleSettingsStore,
     isAuthorized: isTerminalAuthorized,
+    isRemoteAccessOwner: isLoopbackListener,
     readJsonBody,
     writeJson,
     onThemeChanged: broadcastDesktopThemeChanged,
-    onRemoteAccessChanged: () => reconcileRemoteAccess()
+    onRemoteAccessChanged: (change) => reconcileRemoteAccess(change)
   });
   const desktopThemeRouter = createDesktopThemeRouter({
     getTheme: () => consoleSettingsStore.load().general?.theme ?? "instrument",
@@ -39370,14 +39817,13 @@ function createConsoleServer(deps = {}) {
   routeRegistry.register("/plugin-runtime", handlePluginRuntimeRoute);
   function isRequestHostAllowed(req) {
     const listener = listenerForRequest(req);
-    return listener !== null && validateHost(req, `${listener.host}:${listener.port}`);
+    return listener !== null && validateHost(req, listenerAuthority(listener.host, listener.port, listener.secure), listener.secure);
   }
   function listenerForRequest(req) {
     return resolveListenerIdentity(listeners, req.socket);
   }
   function isRemoteRequestAdmitted(listener, req, pathname) {
     if (pathname === "/api/v1/join") return true;
-    if (pathname === JOIN_NOTICE_PATH && req.method === "GET") return true;
     const session = access.resolveSession(readSessionCookie(req.headers, listener.port), listener.audience);
     if (session === null) return false;
     return session.access !== "monitoring" || isReadOnlyRequest(req);
@@ -39405,10 +39851,6 @@ function createConsoleServer(deps = {}) {
       handlePairingIdentity(req, res);
       return;
     }
-    if (pathname === JOIN_NOTICE_PATH) {
-      handleJoinNotice(req, res);
-      return;
-    }
     if (tryServeStaticConsole2(req, res, pathname)) return;
     if (pathname === "/api/v1/health") {
       handleHealth2(req, res);
@@ -39586,10 +40028,15 @@ function createConsoleServer(deps = {}) {
     const remote = listeners.find((entry) => entry.audience === "remote");
     const sessions = access.listSessions("remote");
     writeJson(res, 200, {
-      listening: remote !== void 0 && remoteFingerprint !== null,
-      origin: remote?.origin ?? null,
+      listener: {
+        listening: remote !== void 0 && remoteFingerprint !== null,
+        origin: remote?.origin ?? null,
+        lastError: remoteLastError
+      },
+      publicReachability: "unverified",
+      // 거절이 일어나고 있다는 사실 자체가 "지금 열어둘 만한가"의 판단 재료다.
+      rejectedJoins: remoteJoinGuard.stats(),
       fingerprint: remoteFingerprint,
-      lastError: remoteLastError,
       // 발급 사실만 나간다 — 목록을 보는 것으로는 어떤 링크도 다시 쓸 수 없다.
       links: access.listGrants("remote"),
       /**
@@ -39681,12 +40128,12 @@ function createConsoleServer(deps = {}) {
       return true;
     }
     const configured = consoleSettingsStore.load().general?.remoteAccess;
-    const bindHost = listeners.find((entry) => entry.audience === "remote")?.host ?? (configured?.enabled === true ? configured.bindHost : null);
-    if (!bindHost) {
+    const advertisedHost = listeners.find((entry) => entry.audience === "remote")?.host ?? (configured?.enabled === true ? effectiveRemoteAccessAdvertisedTuple(configured).host : null);
+    if (!advertisedHost) {
       writeJson(res, 409, { error: "remote_access_disabled" });
       return true;
     }
-    await remoteIdentityStore.rotate(bindHost);
+    await remoteIdentityStore.rotate(advertisedHost);
     access.revokeGrants("remote");
     pairedDeviceStore.revokeAll("remote");
     remoteEndpointStore.forget();
@@ -39698,21 +40145,6 @@ function createConsoleServer(deps = {}) {
     writeJson(res, 200, { fingerprint: remoteFingerprint });
     return true;
   }
-  function handleJoinNotice(req, res) {
-    if (req.method !== "GET") {
-      writeJson(res, 405, { error: "Method not allowed" });
-      return;
-    }
-    const body2 = Buffer.from(JOIN_NOTICE_DOCUMENT, "utf8");
-    res.writeHead(200, withSecurityHeaders2({
-      "Content-Type": "text/html; charset=utf-8",
-      "Content-Length": String(body2.byteLength),
-      "Cache-Control": "no-store",
-      "Content-Security-Policy": "default-src 'none'; style-src 'unsafe-inline'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'",
-      "Referrer-Policy": "no-referrer"
-    }));
-    res.end(body2);
-  }
   function handleAccessLinkIssue(req, res) {
     if (req.method !== "POST") {
       writeJson(res, 405, { error: "Method not allowed" });
@@ -39746,6 +40178,26 @@ function createConsoleServer(deps = {}) {
       writeJson(res, 401, { error: "unauthorized" });
       return true;
     }
+    if (listener.audience !== "remote") return performAccessJoin(req, res, listener);
+    const source = normalizeRemoteJoinSource(req.socket.remoteAddress);
+    const verdict = remoteJoinGuard.begin(source);
+    if (verdict !== "ok") {
+      res.writeHead(verdict === "throttled" ? 429 : 503, withSecurityHeaders2({
+        "Content-Type": "application/json",
+        "Retry-After": String(remoteJoinGuard.retryAfterSeconds(source))
+      }));
+      res.end(JSON.stringify({ error: verdict === "throttled" ? "too_many_attempts" : "busy" }));
+      return true;
+    }
+    let paired = false;
+    try {
+      paired = await performAccessJoin(req, res, listener);
+    } finally {
+      remoteJoinGuard.settle(source, paired ? "paired" : "rejected");
+    }
+    return true;
+  }
+  async function performAccessJoin(req, res, listener) {
     const body2 = await readJsonBody(req);
     const token = isPlainObject2(body2) && typeof body2.token === "string" ? body2.token : null;
     const device = isPlainObject2(body2) ? sanitizeDeviceName(body2.device) : null;
@@ -39757,10 +40209,10 @@ function createConsoleServer(deps = {}) {
           "Set-Cookie": expirePairingCookie({ secure: listener.secure, port: listener.port })
         }));
         res.end(JSON.stringify({ error: joined.error }));
-        return true;
+        return false;
       }
       writeJson(res, joined.status, { error: joined.error });
-      return true;
+      return false;
     }
     if (listener.audience === "remote" && joined.session.access === "full") broadcastControlChanged();
     const cookies = [formatSessionCookie(joined.session, { secure: listener.secure, port: listener.port })];
@@ -40101,7 +40553,7 @@ function createConsoleServer(deps = {}) {
       writeJson(res, 405, { error: "Method not allowed" });
       return;
     }
-    writeJson(res, 200, { version: version2, routes: buildApiCatalog() });
+    writeJson(res, 200, { version: version2, routes: buildApiCatalog(pluginHost.apiCatalog) });
   }
   function handleEnvironmentDiagnostics(req, res) {
     if (channel !== "local") {
@@ -40518,12 +40970,19 @@ function createConsoleServer(deps = {}) {
       });
     }
   }
-  function reconcileRemoteAccess() {
+  function reconcileRemoteAccess(change) {
     return queueRemoteReconcile(() => {
-      const configured = consoleSettingsStore.load().general?.remoteAccess;
-      const desiredHost = configured?.enabled === true ? configured.bindHost : void 0;
-      const active = listeners.find((entry) => entry.audience === "remote");
-      return (active?.host ?? void 0) === desiredHost ? null : restartRemoteAccess;
+      const { previous, next } = change;
+      const previousAdvertised = effectiveRemoteAccessAdvertisedTuple(previous);
+      const nextAdvertised = effectiveRemoteAccessAdvertisedTuple(next);
+      const publicChanged = previousAdvertised.host !== nextAdvertised.host || previousAdvertised.port !== nextAdvertised.port;
+      const localChanged = previous.listenAddress !== next.listenAddress || previous.listenPort.value !== next.listenPort.value;
+      const explicitDisable = previous.enabled && !next.enabled && !publicChanged && !localChanged;
+      if (publicChanged) return () => reconcilePublicEndpointChange(next);
+      if (explicitDisable) return stopRemoteAccessForDisable;
+      if (localChanged) return () => reconcileLocalEndpointChange(next);
+      if (!previous.enabled && next.enabled) return restartRemoteAccess;
+      return null;
     });
   }
   function reconcileRemoteIdentity() {
@@ -40542,6 +41001,25 @@ function createConsoleServer(deps = {}) {
     remoteLastError = null;
     await startRemoteAccessGuarded(boundPort);
   }
+  async function stopRemoteAccessForDisable() {
+    await stopRemoteAccess();
+    access.revokeGrants("remote");
+  }
+  async function reconcileLocalEndpointChange(next) {
+    await stopRemoteAccess();
+    remoteLastError = null;
+    if (next.enabled) await startRemoteAccessGuarded(boundPort);
+  }
+  async function reconcilePublicEndpointChange(next) {
+    await stopRemoteAccess();
+    access.revokeGrants("remote");
+    pairedDeviceStore.revokeAll("remote");
+    remoteEndpointStore.forget();
+    if (next.enabled) {
+      remoteLastError = null;
+      await startRemoteAccessGuarded(boundPort);
+    }
+  }
   async function startRemoteAccessGuarded(actualPort) {
     try {
       await startRemoteAccessIfEnabled(actualPort);
@@ -40569,57 +41047,104 @@ function createConsoleServer(deps = {}) {
     remoteFingerprint = null;
     listeners = listeners.filter((entry) => entry.audience !== "remote");
     access.revokeSessions("remote");
-    access.revokeGrants("remote");
     for (const owner of desktopShellsByOwner.keys()) {
       if (owner !== "local") desktopShellsByOwner.delete(owner);
     }
     broadcastControlChanged();
     if (closing) await new Promise((resolve3) => closing.close(() => resolve3()));
   }
-  async function startRemoteAccessIfEnabled(actualPort) {
+  async function startRemoteAccessIfEnabled(_actualPort) {
     const configured = consoleSettingsStore.load().general?.remoteAccess;
-    const bindHost = configured?.enabled === true ? configured.bindHost : void 0;
-    if (!bindHost) return;
-    const previousFingerprint = remoteIdentityStore.read()?.fingerprint ?? null;
-    const identity2 = await remoteIdentityStore.ensure(bindHost);
-    if (previousFingerprint === null || !fingerprintsMatch(previousFingerprint, identity2.fingerprint)) {
+    if (configured?.enabled !== true || configured.listenAddress === "") return;
+    if (configured.publicEndpointEnabled && !acknowledgmentMatches(configured, configured.acknowledgment)) return;
+    const advertised = effectiveRemoteAccessAdvertisedTuple(configured);
+    const previousIdentity = remoteIdentityStore.read();
+    const identity2 = await remoteIdentityStore.ensure(advertised.host);
+    const storedEndpoint = remoteEndpointStore.read();
+    const publicIdentityChanged = previousIdentity === null || !fingerprintsMatch(previousIdentity.fingerprint, identity2.fingerprint) || storedEndpoint !== null && storedEndpoint.advertisedPort !== advertised.port;
+    if (publicIdentityChanged) {
+      access.revokeGrants("remote");
+      access.revokeSessions("remote");
       pairedDeviceStore.revokeAll("remote");
       remoteEndpointStore.forget();
     }
-    const published = remoteEndpointStore.read();
-    const publishedPort = published ?? actualPort;
-    const started = await startRemoteListener({
-      identity: identity2,
-      bindHost,
-      port: publishedPort,
-      handler: handleRequest,
-      upgradeRegistry,
-      isHostAllowed: isRequestHostAllowed,
-      isAdmitted: (req) => {
-        const resolved = listenerForRequest(req);
-        return resolved === null || resolved.audience === "local" || isRemoteRequestAdmitted(resolved, req, getPathname(req));
-      }
-    }).catch((error51) => {
-      if (published !== null && isAddressInUse(error51)) throw remotePortUnavailable(error51);
-      throw error51;
-    });
+    const started = await startConfiguredRemoteListener(configured, identity2, storedEndpoint !== null && !publicIdentityChanged);
+    const effectiveConfigured = started.port === configured.listenPort.value ? configured : { ...configured, listenPort: { ...configured.listenPort, value: started.port } };
+    const effectiveAdvertised = effectiveRemoteAccessAdvertisedTuple(effectiveConfigured);
+    remoteServer = started.server;
     const listener = {
       audience: "remote",
-      host: bindHost,
-      port: publishedPort,
-      origin: `https://${bindHost}:${publishedPort}`,
+      host: effectiveAdvertised.host,
+      port: effectiveAdvertised.port,
+      origin: remoteOrigin(effectiveAdvertised.host, effectiveAdvertised.port),
       secure: true,
-      // 게이트는 소켓의 실제 주소로 리스너를 찾는다. 설정이 이름을 받으므로, 여기에 그 이름을
-      // 그대로 두면 어떤 요청도 자기 리스너를 찾지 못해 조인부터 전부 막힌다 — 리스너와 링크는
-      // 멀쩡해 보이는 채로.
-      bindAddress: started.address
+      bindAddress: started.address,
+      bindPort: started.port
     };
     listeners = [...listeners, listener];
     remoteFingerprint = identity2.fingerprint;
-    remoteServer = started.server;
-    remoteEndpointStore.remember(publishedPort);
+    remoteEndpointStore.remember({ listenPort: started.port, advertisedPort: effectiveAdvertised.port });
     startControlExpirySweep();
   }
+  async function startConfiguredRemoteListener(configured, identity2, published) {
+    if (configured.listenPort.mode === "custom") {
+      try {
+        return await startRemoteListener({ identity: identity2, bindHost: configured.listenAddress, port: configured.listenPort.value, handler: handleRequest, upgradeRegistry, isHostAllowed: isRequestHostAllowed, isAdmitted: remoteAdmission });
+      } catch (error51) {
+        if (errorCodeOf(error51) === "EADDRINUSE") throw codedRemoteError("FLEET_CUSTOM_PORT_UNAVAILABLE", error51);
+        throw error51;
+      }
+    }
+    const attempted = /* @__PURE__ */ new Set();
+    while (attempted.size < REMOTE_AUTO_PORT_ATTEMPTS) {
+      const candidate = attempted.size === 0 ? configured.listenPort.value : nextRemoteAutoPort(attempted);
+      attempted.add(candidate);
+      try {
+        const started = await startRemoteListener({ identity: identity2, bindHost: configured.listenAddress, port: candidate, handler: handleRequest, upgradeRegistry, isHostAllowed: isRequestHostAllowed, isAdmitted: remoteAdmission });
+        if (candidate === configured.listenPort.value) return started;
+        if (published) {
+          await closeHttpServer(started.server);
+          throw codedRemoteError("FLEET_REMOTE_PORT_UNAVAILABLE");
+        }
+        const updated = { ...configured, listenPort: { mode: "auto", value: candidate }, acknowledgment: null };
+        if (configured.publicEndpointEnabled) {
+          await closeHttpServer(started.server);
+          consoleSettingsStore.update((current) => ({ ...current, general: { ...current.general, remoteAccess: { ...updated, enabled: false } } }));
+          throw codedRemoteError("FLEET_ACKNOWLEDGMENT_REQUIRED");
+        }
+        try {
+          consoleSettingsStore.update((current) => ({ ...current, general: { ...current.general, remoteAccess: updated } }));
+        } catch (error51) {
+          await closeHttpServer(started.server);
+          throw error51;
+        }
+        return started;
+      } catch (error51) {
+        const code = errorCodeOf(error51);
+        if (code === "FLEET_ACKNOWLEDGMENT_REQUIRED" || code === REMOTE_PORT_UNAVAILABLE) throw error51;
+        if (code !== "EADDRINUSE" && code !== "EADDRNOTAVAIL") throw error51;
+      }
+    }
+    throw codedRemoteError("FLEET_AUTO_PORT_EXHAUSTED");
+  }
+  function remoteOrigin(hostname5, port2) {
+    return listenerOrigin(hostname5, port2, true);
+  }
+  function remoteAdmission(req) {
+    const resolved = listenerForRequest(req);
+    return resolved === null || resolved.audience === "local" || isRemoteRequestAdmitted(resolved, req, getPathname(req));
+  }
+  function nextRemoteAutoPort(attempted) {
+    const randomInt = deps.remoteRandomInt ?? crypto5.randomInt;
+    for (let draw = 0; draw < REMOTE_AUTO_PORT_ATTEMPTS; draw += 1) {
+      const candidate = randomInt(REMOTE_AUTO_PORT_MIN, REMOTE_AUTO_PORT_MAX + 1);
+      if (!attempted.has(candidate)) return candidate;
+    }
+    for (let candidate = REMOTE_AUTO_PORT_MIN; candidate <= REMOTE_AUTO_PORT_MAX; candidate += 1) {
+      if (!attempted.has(candidate)) return candidate;
+    }
+    throw codedRemoteError("FLEET_AUTO_PORT_EXHAUSTED");
+  }
   function listenOnce(portToBind, statePatch) {
     return new Promise((resolve3, reject) => {
       const srv = createHttpServer(handleRequest, upgradeRegistry, isRequestHostAllowed);
@@ -40669,35 +41194,6 @@ function sanitizeDeviceName(value) {
 function consoleLabel() {
   return sanitizeAccessLabel(os4__default.hostname().replace(/\.local$/iu, "")) || "Fleet Console";
 }
-var JOIN_NOTICE_PATH = "/join";
-var JOIN_NOTICE_DOCUMENT = `<!doctype html>
-<html lang="en">
-<head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
-<title>Fleet Console access link</title>
-<style>
-:root { color-scheme: dark; }
-body { margin: 0; min-height: 100vh; display: grid; place-items: center; padding: 24px;
-  background: #0b1116; color: #e6edf3;
-  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; }
-main { max-width: 30rem; }
-h1 { margin: 0 0 12px; font-size: 20px; font-weight: 650; }
-p { margin: 0 0 12px; color: #aebbc5; font-size: 14px; line-height: 1.55; }
-strong { color: #e6edf3; font-weight: 600; }
-</style>
-</head>
-<body>
-<main>
-<h1>This console is reached with an access link</h1>
-<p>You have found the remote listener of a Fleet Console. It does not open in a browser: a browser cannot check this console&#39;s certificate fingerprint, so <strong>remote access is not available to browsers</strong>.</p>
-<p>Ask for an access link instead. It looks like <strong>fleet://join?code=&hellip;</strong> and carries the address, a one-time credential, and the fingerprint together.</p>
-<p>In the Fleet Console you are already using, open <strong>Settings &rarr; Remote access &rarr; Hosts</strong> and paste the link there.</p>
-<p><strong>Remote access is experimental.</strong> How links and pairings behave can still change between releases.</p>
-</main>
-</body>
-</html>
-`;
 function decodeHandle(raw) {
   if (raw.includes("/")) return "";
   try {
@@ -40708,22 +41204,22 @@ function decodeHandle(raw) {
 }
 function remoteAccessErrorCode(error51) {
   const code = errorCodeOf(error51);
+  if (code === "FLEET_AUTO_PORT_EXHAUSTED") return "auto_port_exhausted";
+  if (code === "FLEET_ACKNOWLEDGMENT_REQUIRED") return "acknowledgment_required";
+  if (code === "FLEET_CUSTOM_PORT_UNAVAILABLE") return "custom_port_unavailable";
   if (code === REMOTE_PORT_UNAVAILABLE) return "remote_port_unavailable";
   if (code === "EADDRNOTAVAIL") return "bind_address_unavailable";
-  if (code === "EADDRINUSE") return "bind_address_in_use";
+  if (code === "EADDRINUSE") return "custom_port_unavailable";
   if (code === "EACCES") return "bind_permission_denied";
   return "remote_listener_failed";
 }
+function codedRemoteError(code, cause) {
+  return Object.assign(new Error(code), { code, cause });
+}
 function errorCodeOf(error51) {
   return typeof error51 === "object" && error51 !== null && "code" in error51 && typeof error51.code === "string" ? error51.code : "";
 }
-function isAddressInUse(error51) {
-  return errorCodeOf(error51) === "EADDRINUSE";
-}
 var REMOTE_PORT_UNAVAILABLE = "FLEET_REMOTE_PORT_UNAVAILABLE";
-function remotePortUnavailable(cause) {
-  return Object.assign(new Error("remote_port_unavailable"), { code: REMOTE_PORT_UNAVAILABLE, cause });
-}
 function resolveBuiltInPluginDiscoveryRoots(packageRoot) {
   const packageRootRepo = path18__default.resolve(packageRoot, "..", "..");
   const sourceRoot = path18__default.join(packageRootRepo, "runtime", "fleet-plugins");
@@ -40758,7 +41254,7 @@ async function startRemoteListener(input) {
     });
   });
   const address = srv.address();
-  return { server: srv, address: typeof address === "object" && address ? address.address : input.bindHost };
+  return { server: srv, address: typeof address === "object" && address ? address.address : input.bindHost, port: typeof address === "object" && address ? address.port : input.port };
 }
 function createHttpServer(handler, upgradeRegistry, isHostAllowed2) {
   const srv = http.createServer(handler);
@@ -40888,13 +41384,18 @@ function runAsyncBooleanHandler(handler, res, fallback) {
     writeJson(res, 500, { error: "Internal server error" });
   });
 }
-function validateHost(req, expectedHostPort) {
+function validateHost(req, expectedHostPort, secure) {
   if (req.url?.startsWith("http://") || req.url?.startsWith("https://")) return false;
   const hostHeaderCount = req.rawHeaders.filter((header, index) => index % 2 === 0 && header.toLowerCase() === "host").length;
   if (hostHeaderCount !== 1) return false;
   const hostHeader = req.headers.host;
   if (!hostHeader) return false;
-  return hostHeader === expectedHostPort;
+  return stripDefaultPort(hostHeader, secure) === stripDefaultPort(expectedHostPort, secure);
+}
+function stripDefaultPort(authority, secure) {
+  if (secure === void 0) return authority;
+  const suffix = secure ? ":443" : ":80";
+  return authority.endsWith(suffix) ? authority.slice(0, -suffix.length) : authority;
 }
 function isAllowedTerminalOrigin(req, expectedOrigin) {
   const origin = req.headers.origin;