@dotobokuri/fleet-console 1.57.2 → 1.58.0

package/dist/fleet.mjs

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import * as os3 from 'node:os';
 import os3__default, { tmpdir } from 'node:os';
-import * as path23 from 'node:path';
-import path23__default, { join, dirname, resolve, relative, sep } from 'node:path';
+import * as path24 from 'node:path';
+import path24__default, { join, dirname, resolve, relative, sep } from 'node:path';
 import * as fs9 from 'node:fs';
 import fs9__default, { constants, mkdirSync, mkdtempSync, writeFileSync, rmSync, chmodSync, renameSync, readdirSync, appendFileSync, lstatSync, existsSync, realpathSync, statSync, accessSync, openSync, closeSync, readFileSync } from 'node:fs';
 import crypto9, { randomUUID, createHash } from 'node:crypto';
@@ -10,7 +10,7 @@ import http from 'node:http';
 import { execFile, spawn, execFileSync } from 'node:child_process';
 import { builtinModules, createRequire } from 'node:module';
 import { fileURLToPath, pathToFileURL } from 'node:url';
-import fs7, { appendFile, chmod, mkdtemp, rm, mkdir, readdir, readFile, stat, writeFile, realpath, lstat, rename, unlink } from 'node:fs/promises';
+import fs32, { appendFile, chmod, mkdtemp, rm, mkdir, readdir, readFile, stat, writeFile, realpath, lstat, rename, unlink } from 'node:fs/promises';
 import { promisify, styleText } from 'node:util';
 import http2 from 'node:http2';
 import V2, { stdin, stdout } from 'node:process';
@@ -57,8 +57,8 @@ var __toESM = (mod, isNodeMode, target2) => (target2 = mod != null ? __create(__
 ));
 function getFleetDataDir(env = process.env) {
   const override = env[FLEET_DATA_DIR_ENV];
-  if (override === void 0 || override.trim().length === 0) return path23.join(os3.homedir(), FLEET_DATA_DIR_NAME);
-  if (!path23.isAbsolute(override)) throw new Error(`${FLEET_DATA_DIR_ENV} must be an absolute path, received: ${override}`);
+  if (override === void 0 || override.trim().length === 0) return path24.join(os3.homedir(), FLEET_DATA_DIR_NAME);
+  if (!path24.isAbsolute(override)) throw new Error(`${FLEET_DATA_DIR_ENV} must be an absolute path, received: ${override}`);
   return override;
 }
 var FLEET_DATA_DIR_NAME, FLEET_DATA_DIR_ENV;
@@ -109,7 +109,7 @@ function createChildEnv(env, overlay) {
   return child;
 }
 function wrapWindowsShim(resolved, env, platform) {
-  if (platform !== "win32" || !WINDOWS_SHIM_EXTENSIONS.has(path23__default.extname(resolved).toLowerCase())) {
+  if (platform !== "win32" || !WINDOWS_SHIM_EXTENSIONS.has(path24__default.extname(resolved).toLowerCase())) {
     return { bin: resolved, prefixArgs: [] };
   }
   rejectCmdExpansionSensitiveShim(resolved);
@@ -127,13 +127,13 @@ function forceWindowsArgQuoting(value) {
   return `${value} `;
 }
 function findOnPath(bin, pathValue, pathExts, platform) {
-  const pathSeparator = platform === "win32" ? WINDOWS_PATH_SEPARATOR : path23__default.delimiter;
-  if (hasPathSeparator(bin, platform) || path23__default.isAbsolute(bin)) {
+  const pathSeparator = platform === "win32" ? WINDOWS_PATH_SEPARATOR : path24__default.delimiter;
+  if (hasPathSeparator(bin, platform) || path24__default.isAbsolute(bin)) {
     return resolveWithExtensions(bin, pathExts, platform);
   }
   for (const entry of pathValue.split(pathSeparator)) {
     const searchDir = entry.length === 0 ? "." : entry;
-    const candidate = resolveWithExtensions(path23__default.join(searchDir, bin), pathExts, platform);
+    const candidate = resolveWithExtensions(path24__default.join(searchDir, bin), pathExts, platform);
     if (candidate) {
       return candidate;
     }
@@ -141,7 +141,7 @@ function findOnPath(bin, pathValue, pathExts, platform) {
   return void 0;
 }
 function resolveWithExtensions(candidate, pathExts, platform) {
-  if (platform !== "win32" || path23__default.extname(candidate).length > 0) {
+  if (platform !== "win32" || path24__default.extname(candidate).length > 0) {
     return isAccessibleExecutable(candidate, platform) ? candidate : void 0;
   }
   for (const ext of pathExts) {
@@ -1306,7 +1306,7 @@ function formatInstallCommand(packageNames, command2, versionOrChannel) {
   return `${command2} i -g ${packageNames.map((name) => `${name}@${versionOrChannel}`).join(" ")}`;
 }
 function isPathInside(deps, child, parent) {
-  const separator = deps.platform === "win32" ? "\\" : path23__default.sep;
+  const separator = deps.platform === "win32" ? "\\" : path24__default.sep;
   return child === parent || child.startsWith(`${parent}${separator}`);
 }
 function normalizeExistingPath(deps, value) {
@@ -1321,10 +1321,10 @@ function normalizePath(deps, value) {
   return deps.platform === "win32" ? resolved.toLowerCase() : resolved;
 }
 function resolvePathForPlatform(platform, value) {
-  return platform === "win32" ? path23__default.win32.resolve(value) : path23__default.resolve(value);
+  return platform === "win32" ? path24__default.win32.resolve(value) : path24__default.resolve(value);
 }
 function joinPathForPlatform(platform, ...parts) {
-  return platform === "win32" ? path23__default.win32.join(...parts) : path23__default.join(...parts);
+  return platform === "win32" ? path24__default.win32.join(...parts) : path24__default.join(...parts);
 }
 function defaultExecFile(file2, args) {
   return execFileSync(file2, args, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
@@ -1474,7 +1474,7 @@ function writeCachedLatestVersion(channel, latest) {
   }
 }
 function getUpdateCachePath() {
-  return path23__default.join(getFleetDataDir(), UPDATE_CACHE_FILENAME);
+  return path24__default.join(getFleetDataDir(), UPDATE_CACHE_FILENAME);
 }
 var UPDATE_CACHE_TTL_MS, UPDATE_CACHE_FILENAME;
 var init_cache = __esm({
@@ -1549,23 +1549,23 @@ async function stopRunningConsoleBeforeUpdate(io, deps = {}) {
 }
 function resolveSiblingConsoleCliPath(moduleUrl = import.meta.url) {
   try {
-    const start = path23__default.dirname(fileURLToPath(moduleUrl));
+    const start = path24__default.dirname(fileURLToPath(moduleUrl));
     let dir = start;
     for (let i = 0; i < 8; i += 1) {
-      const packageJsonPath = path23__default.join(dir, "package.json");
+      const packageJsonPath = path24__default.join(dir, "package.json");
       if (fs9__default.existsSync(packageJsonPath)) {
         const pkg = JSON.parse(fs9__default.readFileSync(packageJsonPath, "utf8"));
         if (pkg.name === CONSOLE_PACKAGE_NAME) {
-          const candidate = path23__default.join(dir, "dist", "cli.mjs");
+          const candidate = path24__default.join(dir, "dist", "cli.mjs");
           return fs9__default.existsSync(candidate) ? candidate : void 0;
         }
       }
-      const parent = path23__default.dirname(dir);
+      const parent = path24__default.dirname(dir);
       if (parent === dir) break;
       dir = parent;
     }
-    const sameDir = path23__default.join(start, "cli.mjs");
-    if (path23__default.basename(start) === "dist" && fs9__default.existsSync(sameDir)) return sameDir;
+    const sameDir = path24__default.join(start, "cli.mjs");
+    if (path24__default.basename(start) === "dist" && fs9__default.existsSync(sameDir)) return sameDir;
   } catch {
   }
   return void 0;
@@ -1694,7 +1694,7 @@ function getCurrentPackageRoot() {
       const packageJsonPath = requireFromHere.resolve(candidate);
       const pkg = requireFromHere(packageJsonPath);
       if (pkg.name === FLEET_CONSOLE_PACKAGE_NAME3) {
-        return realpathSync(path23__default.dirname(packageJsonPath));
+        return realpathSync(path24__default.dirname(packageJsonPath));
       }
     } catch {
     }
@@ -1819,9 +1819,9 @@ function ensureSafeDirectory(dirPath) {
   fs9.chmodSync(dirPath, SECURE_DIR_MODE);
 }
 function assertWithinRoot(root, candidatePath) {
-  const resolvedRoot = path23.resolve(root);
-  const resolvedCandidate = path23.resolve(candidatePath);
-  if (!resolvedCandidate.startsWith(`${resolvedRoot}${path23.sep}`) && resolvedCandidate !== resolvedRoot) {
+  const resolvedRoot = path24.resolve(root);
+  const resolvedCandidate = path24.resolve(candidatePath);
+  if (!resolvedCandidate.startsWith(`${resolvedRoot}${path24.sep}`) && resolvedCandidate !== resolvedRoot) {
     throw new Error(`Path escapes root: ${candidatePath}`);
   }
 }
@@ -1882,7 +1882,7 @@ function cleanupTempFiles(dir, prefix, minAgeMs, now) {
     if (!entry.startsWith(prefix)) {
       continue;
     }
-    const tempPath = path23.join(dir, entry);
+    const tempPath = path24.join(dir, entry);
     try {
       const stat5 = fs9.lstatSync(tempPath);
       if (stat5?.isFile() && !stat5.isSymbolicLink() && now - stat5.mtimeMs >= minAgeMs) {
@@ -1988,7 +1988,7 @@ function writeLockOwner(lockDir, ownerFileName, startedAt) {
     hostname: os3.hostname(),
     startedAt
   };
-  const ownerPath = path23.join(lockDir, ownerFileName);
+  const ownerPath = path24.join(lockDir, ownerFileName);
   try {
     fs9.writeFileSync(ownerPath, JSON.stringify(owner), { encoding: "utf-8", mode: 384 });
   } catch (error51) {
@@ -1997,7 +1997,7 @@ function writeLockOwner(lockDir, ownerFileName, startedAt) {
   }
 }
 function readLockOwner(lockDir, ownerFileName) {
-  const ownerPath = path23.join(lockDir, ownerFileName);
+  const ownerPath = path24.join(lockDir, ownerFileName);
   try {
     return sanitizeLockOwner(JSON.parse(fs9.readFileSync(ownerPath, "utf-8")));
   } catch (error51) {
@@ -2037,10 +2037,10 @@ function isProcessAlive(pid) {
 }
 function sanitizeLockOwner(value) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
-  const record5 = value;
-  const pid = record5.pid;
-  const hostname5 = record5.hostname;
-  const startedAt = record5.startedAt;
+  const record6 = value;
+  const pid = record6.pid;
+  const hostname5 = record6.hostname;
+  const startedAt = record6.startedAt;
   if (!Number.isInteger(pid) || pid <= 0) return null;
   if (typeof hostname5 !== "string" || !hostname5) return null;
   if (!Number.isFinite(startedAt) || startedAt <= 0) return null;
@@ -2055,7 +2055,7 @@ function sleepSync(ms) {
 }
 
 // ../../packages/core-infra/src/auth/auth-storage.ts
-var DEFAULT_AUTH_PATH = path23.join(getFleetDataDir(), "auth.json");
+var DEFAULT_AUTH_PATH = path24.join(getFleetDataDir(), "auth.json");
 var AUTH_LOCK_OWNER_FILE_NAME = "owner.json";
 var AUTH_LOCK_TIMEOUT_MS = 5e3;
 function readAuthStoreFile(filePath) {
@@ -2130,7 +2130,7 @@ function createAuthService(deps = {}) {
       }
     },
     async setApiKey(providerId, key) {
-      const dir = path23.dirname(authPath);
+      const dir = path24.dirname(authPath);
       ensureSafeDirectory(dir);
       withAuthLock(authPath, lockDir, () => {
         const data = fs9.existsSync(authPath) ? readAuthStoreFile(authPath) : {};
@@ -2169,7 +2169,7 @@ function createDurableJsonStore(deps) {
   const sensitivity = deps.sensitivity;
   const mode = sensitivity === "sensitive" ? SECURE_FILE_MODE : 420;
   const minAgeMs = deps.tempCleanupMinAgeMs ?? DEFAULT_TEMP_FILE_MIN_AGE_MS;
-  const dir = path23.dirname(deps.filePath);
+  const dir = path24.dirname(deps.filePath);
   return {
     path: deps.filePath,
     load() {
@@ -2269,8 +2269,8 @@ function updateGlobalOptions(store, mutate) {
 }
 function createGlobalOptionsStore(deps = {}) {
   const dataDir = deps.dataDir ?? getFleetDataDir();
-  const optionsPath = path23.join(dataDir, GLOBAL_OPTIONS_FILE_NAME);
-  const lockDir = path23.join(dataDir, LOCK_DIR_NAME);
+  const optionsPath = path24.join(dataDir, GLOBAL_OPTIONS_FILE_NAME);
+  const lockDir = path24.join(dataDir, LOCK_DIR_NAME);
   const store = createDurableJsonStore({
     filePath: optionsPath,
     lockDir,
@@ -2416,7 +2416,7 @@ function getWorkspaceDirectoryRoot(dataDir) {
   if (!dataDir.trim()) {
     throw new Error("Fleet data directory is required");
   }
-  return path23.join(path23.resolve(dataDir), WORKSPACES_DIRECTORY_NAME);
+  return path24.join(path24.resolve(dataDir), WORKSPACES_DIRECTORY_NAME);
 }
 function resolveWorkspaceDirectory(dataDir, cwd) {
   const canonicalCwd = canonicalizeWorkspaceCwd(cwd);
@@ -2424,7 +2424,7 @@ function resolveWorkspaceDirectory(dataDir, cwd) {
 }
 function ensureWorkspaceDirectory(dataDir, cwd) {
   const workspace = resolveWorkspaceDirectory(dataDir, cwd);
-  const resolvedDataDir = path23.resolve(dataDir);
+  const resolvedDataDir = path24.resolve(dataDir);
   ensureSafeDirectory(resolvedDataDir);
   ensureSafeDirectory(workspace.root);
   assertWithinRoot(workspace.root, workspace.path);
@@ -2449,11 +2449,11 @@ function ensureWorkspaceDirectory(dataDir, cwd) {
 function buildWorkspaceDirectory(dataDir, name, cwd) {
   assertWorkspaceDirectoryName(name);
   const root = getWorkspaceDirectoryRoot(dataDir);
-  const workspacePath = path23.join(root, name);
+  const workspacePath = path24.join(root, name);
   assertWithinRoot(root, workspacePath);
   return {
     cwd,
-    identityPath: path23.join(workspacePath, WORKSPACE_IDENTITY_FILE_NAME),
+    identityPath: path24.join(workspacePath, WORKSPACE_IDENTITY_FILE_NAME),
     name,
     path: workspacePath,
     root
@@ -2463,7 +2463,7 @@ function canonicalizeWorkspaceCwd(cwd) {
   if (!cwd.trim()) {
     throw new Error("Workspace cwd is required");
   }
-  return fs9.realpathSync.native(path23.resolve(cwd));
+  return fs9.realpathSync.native(path24.resolve(cwd));
 }
 function assertWorkspaceDirectoryName(name) {
   if (!name || !WORKSPACE_NAME_PATTERN.test(name)) {
@@ -2489,8 +2489,8 @@ function readWorkspaceIdentity(identityPath) {
 }
 function isWorkspaceDirectoryIdentity(value) {
   if (typeof value !== "object" || value === null) return false;
-  const record5 = value;
-  return typeof record5.cwd === "string" && record5.cwd.length > 0;
+  const record6 = value;
+  return typeof record6.cwd === "string" && record6.cwd.length > 0;
 }
 
 // ../../packages/core-infra/src/index.ts
@@ -3265,10 +3265,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path57) {
-  if (!path57)
+function getElementAtPath(obj, path58) {
+  if (!path58)
     return obj;
-  return path57.reduce((acc, key) => acc?.[key], obj);
+  return path58.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -3677,11 +3677,11 @@ function explicitlyAborted(x3, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path57, issues) {
+function prefixIssues(path58, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path57);
+    iss.path.unshift(path58);
     return iss;
   });
 }
@@ -3828,16 +3828,16 @@ function flattenError(error51, mapper = (issue3) => issue3.message) {
 }
 function formatError(error51, mapper = (issue3) => issue3.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path57 = []) => {
+  const processError = (error52, path58 = []) => {
     for (const issue3 of error52.issues) {
       if (issue3.code === "invalid_union" && issue3.errors.length) {
-        issue3.errors.map((issues) => processError({ issues }, [...path57, ...issue3.path]));
+        issue3.errors.map((issues) => processError({ issues }, [...path58, ...issue3.path]));
       } else if (issue3.code === "invalid_key") {
-        processError({ issues: issue3.issues }, [...path57, ...issue3.path]);
+        processError({ issues: issue3.issues }, [...path58, ...issue3.path]);
       } else if (issue3.code === "invalid_element") {
-        processError({ issues: issue3.issues }, [...path57, ...issue3.path]);
+        processError({ issues: issue3.issues }, [...path58, ...issue3.path]);
       } else {
-        const fullpath = [...path57, ...issue3.path];
+        const fullpath = [...path58, ...issue3.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue3));
         } else {
@@ -3864,17 +3864,17 @@ function formatError(error51, mapper = (issue3) => issue3.message) {
 }
 function treeifyError(error51, mapper = (issue3) => issue3.message) {
   const result = { errors: [] };
-  const processError = (error52, path57 = []) => {
+  const processError = (error52, path58 = []) => {
     var _a3, _b;
     for (const issue3 of error52.issues) {
       if (issue3.code === "invalid_union" && issue3.errors.length) {
-        issue3.errors.map((issues) => processError({ issues }, [...path57, ...issue3.path]));
+        issue3.errors.map((issues) => processError({ issues }, [...path58, ...issue3.path]));
       } else if (issue3.code === "invalid_key") {
-        processError({ issues: issue3.issues }, [...path57, ...issue3.path]);
+        processError({ issues: issue3.issues }, [...path58, ...issue3.path]);
       } else if (issue3.code === "invalid_element") {
-        processError({ issues: issue3.issues }, [...path57, ...issue3.path]);
+        processError({ issues: issue3.issues }, [...path58, ...issue3.path]);
       } else {
-        const fullpath = [...path57, ...issue3.path];
+        const fullpath = [...path58, ...issue3.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue3));
           continue;
@@ -3906,8 +3906,8 @@ function treeifyError(error51, mapper = (issue3) => issue3.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path57 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path57) {
+  const path58 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path58) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -16571,13 +16571,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path57 = ref.slice(1).split("/").filter(Boolean);
-  if (path57.length === 0) {
+  const path58 = ref.slice(1).split("/").filter(Boolean);
+  if (path58.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path57[0] === defsKey) {
-    const key = path57[1];
+  if (path58[0] === defsKey) {
+    const key = path58[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -19979,8 +19979,8 @@ function bootEnumDescriptorProto(init) {
 }
 
 // ../../node_modules/.pnpm/@bufbuild+protobuf@2.13.0/node_modules/@bufbuild/protobuf/dist/esm/codegenv2/message.js
-function messageDesc(file2, path57, ...paths) {
-  return paths.reduce((acc, cur) => acc.nestedMessages[cur], file2.messages[path57]);
+function messageDesc(file2, path58, ...paths) {
+  return paths.reduce((acc, cur) => acc.nestedMessages[cur], file2.messages[path58]);
 }
 
 // ../../node_modules/.pnpm/@bufbuild+protobuf@2.13.0/node_modules/@bufbuild/protobuf/dist/esm/wkt/gen/google/protobuf/descriptor_pb.js
@@ -21378,11 +21378,11 @@ function fieldMaskFromJson(fieldMask, json3) {
   if (json3 === "") {
     return;
   }
-  fieldMask.paths = json3.split(",").map((path57) => {
-    if (path57.includes("_")) {
+  fieldMask.paths = json3.split(",").map((path58) => {
+    if (path58.includes("_")) {
       throw new Error(`cannot decode message ${fieldMask.$typeName} from JSON: path names must be lowerCamelCase`);
     }
-    return protoSnakeCase(path57);
+    return protoSnakeCase(path58);
   });
 }
 function structFromJson(struct, json3, ctx) {
@@ -21744,17 +21744,17 @@ function projectAnthropicUsageEnvelope(value, contextWindow, responseModel) {
   return { changed, value: projectedValue };
 }
 function projectUsageProperty(container, property, contextWindow) {
-  const usage3 = container[property];
-  if (!isRecord2(usage3)) return { changed: false, value: container };
+  const usage4 = container[property];
+  if (!isRecord2(usage4)) return { changed: false, value: container };
   const coordinates = ANTHROPIC_INPUT_USAGE_FIELDS.map((field) => {
-    const tokens = usage3[field];
+    const tokens = usage4[field];
     return typeof tokens === "number" && Number.isFinite(tokens) && tokens >= 0 ? { field, tokens } : void 0;
   }).filter((entry) => entry !== void 0);
   if (coordinates.length === 0) return { changed: false, value: container };
   const total = coordinates.reduce((sum, entry) => sum + entry.tokens, 0);
   const projectedTotal = projectClaudeContextInputTokens(total, contextWindow);
   if (projectedTotal === total) return { changed: false, value: container };
-  const projectedUsage = { ...usage3 };
+  const projectedUsage = { ...usage4 };
   const remainderField = coordinates.some((entry) => entry.field === "input_tokens") ? "input_tokens" : coordinates[0].field;
   let assigned = 0;
   for (const entry of coordinates) {
@@ -21901,6 +21901,39 @@ function removeClaudeSkillListingEntries(text, withheld, delisted) {
 function withheldClaudeSkillStub(name, tokens, budget) {
   return `[Fleet AI gateway withheld the "${name}" skill: its body is about ${tokens} tokens, over the ${budget}-token ceiling one skill may take from this model's context window. Read the skill's own files if you need it, or run this work on a model with a larger window.]`;
 }
+var CLAUDE_WEB_SEARCH_TOOL_NAME = "WebSearch";
+var ANTHROPIC_WEB_SEARCH_TOOL_NAME = "web_search";
+var ANTHROPIC_WEB_SEARCH_TOOL_TYPE = "web_search_20250305";
+function isClaudeWebSearchTool(tool) {
+  return tool.type === ANTHROPIC_WEB_SEARCH_TOOL_TYPE || tool.name === CLAUDE_WEB_SEARCH_TOOL_NAME || tool.name === ANTHROPIC_WEB_SEARCH_TOOL_NAME;
+}
+function isClaudeWebSearchToolChoice(choice) {
+  return choice?.type === "tool" && (choice.name === CLAUDE_WEB_SEARCH_TOOL_NAME || choice.name === ANTHROPIC_WEB_SEARCH_TOOL_NAME);
+}
+function omitClaudeWebSearchTools(request) {
+  const tools = request.tools;
+  const kept = tools?.filter((tool) => !isClaudeWebSearchTool(tool));
+  const toolsChanged = tools !== void 0 && kept !== void 0 && kept.length !== tools.length;
+  const choice = request.tool_choice;
+  const choiceChanged = isClaudeWebSearchToolChoice(choice);
+  if (!toolsChanged && !choiceChanged) {
+    return { request, changed: false };
+  }
+  const { tools: _tools, tool_choice: _toolChoice, ...rest } = request;
+  return {
+    request: {
+      ...rest,
+      ...toolsChanged ? kept.length === 0 ? {} : { tools: kept } : tools === void 0 ? {} : { tools },
+      ...choiceChanged ? {
+        tool_choice: {
+          type: "auto",
+          ...choice?.disable_parallel_tool_use === void 0 ? {} : { disable_parallel_tool_use: choice.disable_parallel_tool_use }
+        }
+      } : choice === void 0 ? {} : { tool_choice: choice }
+    },
+    changed: true
+  };
+}
 var benchmarks_default = {
   version: 2,
   sources: {
@@ -22098,7 +22131,7 @@ var benchmarks_default = {
 };
 var models_default = {
   version: 1,
-  updatedAt: "2026-08-13T00:00:00Z",
+  updatedAt: "2026-08-14T00:00:00Z",
   providers: {
     codex: {
       name: "Codex",
@@ -22483,13 +22516,37 @@ var models_default = {
           contextWindow: 256e3
         }
       ]
+    },
+    xai: {
+      name: "xAI",
+      defaultModel: "grok-4.6",
+      source: "official Grok CLI 1.0.3 ~/.grok/models_cache.json from GET https://cli-chat-proxy.grok.com/v1/models (observed 2026-08-13)",
+      models: [
+        {
+          modelId: "grok-4.6",
+          name: "Grok-4.6",
+          capabilityClass: "flagship",
+          wire: "responses",
+          contextWindow: 5e5,
+          effort: {
+            supported: true,
+            levels: [
+              "low",
+              "medium",
+              "high",
+              "xhigh"
+            ]
+          },
+          benchmarkKey: "grok-4.6"
+        }
+      ]
     }
   }
 };
 var KIMI_AUTH_PROVIDER_ID = "Claude Code with Moonshot Kimi";
 var KIMI_CODE_API_BASE_URL = "https://api.kimi.com/coding";
 var KIMI_CODE_MODEL = "k3";
-var GATEWAY_PROVIDERS = ["codex", "cursor", "kimi", "opencode"];
+var GATEWAY_PROVIDERS = ["codex", "xai", "cursor", "opencode", "kimi"];
 var GATEWAY_MODEL_WIRES = ["anthropic", "responses", "chat-completions"];
 var GATEWAY_REASONING_EFFORTS = [
   "low",
@@ -22577,7 +22634,8 @@ var GatewayModelsRegistrySchema = external_exports.object({
     codex: GatewayProviderSchema,
     cursor: GatewayProviderSchema,
     kimi: GatewayProviderSchema,
-    opencode: GatewayProviderSchema
+    opencode: GatewayProviderSchema,
+    xai: GatewayProviderSchema
   }).strict()
 }).strict();
 var UNSUPPORTED_GATEWAY_MODEL_EFFORT = Object.freeze({ supported: false });
@@ -22842,8 +22900,8 @@ function validateRegistry(value) {
       if (model.quotaScope && provider !== "cursor") {
         throw new Error(`Gateway quota scope is only supported by Cursor: ${provider}/${model.modelId}`);
       }
-      if (model.wire && provider !== "opencode") {
-        throw new Error(`Gateway model wire is only supported by OpenCode: ${provider}/${model.modelId}`);
+      if (model.wire && provider !== "opencode" && provider !== "xai") {
+        throw new Error(`Gateway model wire is not supported by provider: ${provider}/${model.modelId}`);
       }
       if (model.effort?.supported) {
         if (new Set(model.effort.levels).size !== model.effort.levels.length) {
@@ -23298,14 +23356,14 @@ function nonNegativeCacheValue(value) {
   }
   return value;
 }
-function anthropicUsageFromCanonical(usage3, advertisedContextWindow, options = {}) {
+function anthropicUsageFromCanonical(usage4, advertisedContextWindow, options = {}) {
   return toAnthropicCacheAwareUsage(
-    usage3?.input_tokens ?? 0,
-    usage3?.cached_input_tokens,
-    usage3?.cache_write_input_tokens,
-    options.forceOutputZero ? 0 : usage3?.output_tokens ?? 0,
+    usage4?.input_tokens ?? 0,
+    usage4?.cached_input_tokens,
+    usage4?.cache_write_input_tokens,
+    options.forceOutputZero ? 0 : usage4?.output_tokens ?? 0,
     advertisedContextWindow,
-    usage3?.context_window
+    usage4?.context_window
   );
 }
 async function collectAnthropicMessage(events, fallbackModel, options = {}) {
@@ -25302,7 +25360,7 @@ var execFileAsync = promisify(execFile);
 var MAX_CREDENTIAL_BYTES = 65536;
 var CREDENTIAL_OPEN_FLAGS = process.platform === "win32" ? constants.O_RDONLY : constants.O_RDONLY | constants.O_NONBLOCK;
 async function readBoundedFile(filePath, maxBytes) {
-  const handle = await fs7.open(filePath, CREDENTIAL_OPEN_FLAGS);
+  const handle = await fs32.open(filePath, CREDENTIAL_OPEN_FLAGS);
   try {
     const stat22 = await handle.stat();
     if (!stat22.isFile() || stat22.size > maxBytes) return null;
@@ -25378,9 +25436,9 @@ async function resolveClaudeCredentials(deps) {
     } catch {
     }
   }
-  const configDir = deps.env.CLAUDE_CONFIG_DIR || path23__default.join(deps.homedir(), ".claude");
+  const configDir = deps.env.CLAUDE_CONFIG_DIR || path24__default.join(deps.homedir(), ".claude");
   try {
-    const raw = await deps.readBounded(path23__default.join(configDir, ".credentials.json"), MAX_CREDENTIAL_BYTES);
+    const raw = await deps.readBounded(path24__default.join(configDir, ".credentials.json"), MAX_CREDENTIAL_BYTES);
     return raw === null || raw.length > MAX_CREDENTIAL_BYTES ? null : parseClaudeCredentialJson(raw, "file");
   } catch {
     return null;
@@ -25484,7 +25542,7 @@ function optionalNonEmptyString(value) {
   return typeof value === "string" && value.length > 0 ? value : void 0;
 }
 function codexAuthFilePath(deps) {
-  return path23__default.join(deps.env.CODEX_HOME || path23__default.join(deps.homedir(), ".codex"), "auth.json");
+  return path24__default.join(deps.env.CODEX_HOME || path24__default.join(deps.homedir(), ".codex"), "auth.json");
 }
 async function resolveCodexCredentials(deps) {
   try {
@@ -25534,9 +25592,9 @@ function parseResetCredits(payload) {
   for (let index = 0; index < credits.length && index < MAX_CREDIT_ENTRIES; index += 1) {
     const credit = object2(credits[index]);
     if (credit?.status !== "available") continue;
-    const expiry = safeTimestamp(credit.expires_at);
-    if (expiry !== void 0 && (nextExpiresAt === void 0 || expiry < nextExpiresAt)) {
-      nextExpiresAt = expiry;
+    const expiry2 = safeTimestamp(credit.expires_at);
+    if (expiry2 !== void 0 && (nextExpiresAt === void 0 || expiry2 < nextExpiresAt)) {
+      nextExpiresAt = expiry2;
     }
   }
   return {
@@ -25556,7 +25614,7 @@ async function fetchCodexUsage(deps = {}) {
   if (credentials.accountId) headers["ChatGPT-Account-Id"] = credentials.accountId;
   try {
     const fetchImpl = deps.fetch ?? fetch;
-    const usage3 = parseCodexUsage(await getJson(fetchImpl, "https://chatgpt.com/backend-api/wham/usage", headers));
+    const usage4 = parseCodexUsage(await getJson(fetchImpl, "https://chatgpt.com/backend-api/wham/usage", headers));
     let credits;
     try {
       credits = parseResetCredits(await getJson(
@@ -25569,8 +25627,8 @@ async function fetchCodexUsage(deps = {}) {
     }
     return {
       status: "ok",
-      plan: usage3.plan,
-      windows: usage3.windows,
+      plan: usage4.plan,
+      windows: usage4.windows,
       ...credits ? { credits } : {},
       fetchedAt: (deps.now ?? Date.now)()
     };
@@ -25603,12 +25661,12 @@ function parseCursorCredentialJson(raw, method) {
 function cursorAuthFilePath(deps) {
   const home = deps.homedir();
   if (deps.platform === "win32") {
-    return path23__default.join(deps.env.APPDATA || path23__default.join(home, "AppData", "Roaming"), "Cursor", "auth.json");
+    return path24__default.join(deps.env.APPDATA || path24__default.join(home, "AppData", "Roaming"), "Cursor", "auth.json");
   }
   if (deps.platform === "darwin") {
-    return path23__default.join(home, ".cursor", "auth.json");
+    return path24__default.join(home, ".cursor", "auth.json");
   }
-  return path23__default.join(deps.env.XDG_CONFIG_HOME || path23__default.join(home, ".config"), "cursor", "auth.json");
+  return path24__default.join(deps.env.XDG_CONFIG_HOME || path24__default.join(home, ".config"), "cursor", "auth.json");
 }
 async function resolveCursorCredentials(deps) {
   if (deps.platform === "darwin") {
@@ -25684,12 +25742,12 @@ async function fetchCursorUsage(deps = {}) {
   };
   try {
     const fetchImpl = deps.fetch ?? fetch;
-    const usage3 = parseCursorUsage(await postJson(
+    const usage4 = parseCursorUsage(await postJson(
       fetchImpl,
       "https://api2.cursor.sh/aiserver.v1.DashboardService/GetCurrentPeriodUsage",
       headers
     ));
-    if (usage3.status === "no_subscription") return { status: "no_subscription", method: credentials.method };
+    if (usage4.status === "no_subscription") return { status: "no_subscription", method: credentials.method };
     let plan;
     try {
       const planRoot = object2(await postJson(
@@ -25705,8 +25763,8 @@ async function fetchCursorUsage(deps = {}) {
       status: "ok",
       method: credentials.method,
       ...plan ? { plan } : {},
-      ...usage3.cycleDays !== void 0 ? { cycleDays: usage3.cycleDays } : {},
-      windows: usage3.windows,
+      ...usage4.cycleDays !== void 0 ? { cycleDays: usage4.cycleDays } : {},
+      windows: usage4.windows,
       fetchedAt: (deps.now ?? Date.now)()
     };
   } catch (error51) {
@@ -25791,16 +25849,16 @@ async function fetchKimiUsage(deps = {}) {
   const apiKey = await deps.authService.getApiKey(KIMI_AUTH_PROVIDER_ID);
   if (!apiKey) return { status: "signed_out" };
   try {
-    const usage3 = parseKimiUsage(await getJson(
+    const usage4 = parseKimiUsage(await getJson(
       deps.fetch ?? fetch,
       `${KIMI_CODE_API_BASE_URL}/v1/usages`,
       { Authorization: `Bearer ${apiKey}`, Accept: "application/json" }
     ));
-    if (usage3.status === "no_subscription") return { status: "no_subscription" };
+    if (usage4.status === "no_subscription") return { status: "no_subscription" };
     return {
       status: "ok",
-      ...usage3.plan ? { plan: usage3.plan } : {},
-      windows: usage3.windows,
+      ...usage4.plan ? { plan: usage4.plan } : {},
+      windows: usage4.windows,
       fetchedAt: (deps.now ?? Date.now)()
     };
   } catch (error51) {
@@ -25820,7 +25878,7 @@ function resolveOpencodeDataDir(env = process.env, homeDir = os3__default.homedi
   if (override) return expandHome(override, homeDir).replace(/\/+$/, "");
   const xdg = env.XDG_DATA_HOME?.trim();
   if (xdg) return `${expandHome(xdg, homeDir).replace(/\/+$/, "")}/opencode`;
-  return path23__default.join(homeDir, ".local", "share", "opencode");
+  return path24__default.join(homeDir, ".local", "share", "opencode");
 }
 function listOpencodeDatabases(dataDir) {
   let names;
@@ -25830,7 +25888,7 @@ function listOpencodeDatabases(dataDir) {
     if (!fs9__default.existsSync(dataDir)) return [];
     throw error51;
   }
-  return names.filter((name) => name.startsWith("opencode") && name.endsWith(".db")).sort().map((name) => path23__default.join(dataDir, name));
+  return names.filter((name) => name.startsWith("opencode") && name.endsWith(".db")).sort().map((name) => path24__default.join(dataDir, name));
 }
 async function scanOpencodeGoWindows(deps = {}) {
   const nowMs = (deps.now ?? Date.now)();
@@ -25979,7 +26037,7 @@ function anchoredMonthStart(year, month, anchor) {
 }
 function expandHome(value, homeDir) {
   if (value === "~") return homeDir;
-  if (value.startsWith("~/")) return path23__default.join(homeDir, value.slice(2));
+  if (value.startsWith("~/")) return path24__default.join(homeDir, value.slice(2));
   return value;
 }
 var OPENCODE_GO_CHAT_COMPLETIONS_URL = "https://opencode.ai/zen/go/v1/chat/completions";
@@ -26282,7 +26340,7 @@ async function* translateChatCompletionsStream(body2, options, toolSchemas) {
   let createdEmitted = false;
   let textSeen = false;
   let accumulatedText = "";
-  let usage3 = null;
+  let usage4 = null;
   let failed = false;
   const toolCalls = /* @__PURE__ */ new Map();
   const MESSAGE_ITEM_ID = "chat_message_0";
@@ -26313,7 +26371,7 @@ async function* translateChatCompletionsStream(body2, options, toolSchemas) {
       };
     }
     if (isRecord5(value.usage)) {
-      usage3 = chatUsage(value.usage);
+      usage4 = chatUsage(value.usage);
     }
     const choices = Array.isArray(value.choices) ? value.choices : [];
     for (const choice of choices) {
@@ -26406,7 +26464,7 @@ async function* translateChatCompletionsStream(body2, options, toolSchemas) {
         model: responseModel ?? "",
         // 하류 message_delta는 usage가 필수다. include_usage에도 usage 청크를 주지
         // 않는 백엔드에서는 0-usage로 완결하고, 실제 회계는 provider 콘솔이 맡는다.
-        usage: usage3 ?? { input_tokens: 0, output_tokens: 0 }
+        usage: usage4 ?? { input_tokens: 0, output_tokens: 0 }
       }
     };
   }
@@ -27094,6 +27152,273 @@ async function fetchOpencodeUsage(deps = {}) {
     fetchedAt: now()
   };
 }
+var XAI_OIDC_ISSUER = "https://auth.x.ai";
+var XAI_CLI_REFRESH_URL = "https://auth.x.ai/oauth2/token";
+var XAI_CLI_DEFAULT_CLIENT_ID = "b1a00492-073a-47ea-816f-4c329264a828";
+var XAI_CLI_REFRESH_BUFFER_MS = 5 * 60 * 1e3;
+var REFRESH_TIMEOUT_MS = 15e3;
+var FALLBACK_ACCESS_TOKEN_TTL_MS = 36e5;
+function xaiCliAuthFilePath(deps) {
+  return path24__default.join(deps.env.GROK_HOME || path24__default.join(deps.homedir(), ".grok"), "auth.json");
+}
+function expiry(value) {
+  if (typeof value !== "string" && typeof value !== "number") return void 0;
+  const parsed = typeof value === "number" ? value : Date.parse(value);
+  if (!Number.isFinite(parsed)) return void 0;
+  return parsed < 1e12 ? Math.round(parsed * 1e3) : Math.round(parsed);
+}
+function jwtExpiry(token) {
+  const parts = token.split(".");
+  if (parts.length < 2) return void 0;
+  try {
+    const payload = JSON.parse(Buffer.from(parts[1] ?? "", "base64url").toString("utf8"));
+    const record42 = credentialRecord(payload);
+    const exp = record42?.exp;
+    if (typeof exp !== "number" || !Number.isFinite(exp)) return void 0;
+    return Math.round(exp * 1e3);
+  } catch {
+    return void 0;
+  }
+}
+function effectiveExpiry(entry, accessToken) {
+  const fromEntry = expiry(entry.expires_at) ?? expiry(entry.expires);
+  const fromJwt = jwtExpiry(accessToken);
+  if (fromEntry !== void 0 && fromJwt !== void 0) return Math.min(fromEntry, fromJwt);
+  return fromEntry ?? fromJwt;
+}
+function clientId(entryKey, entry) {
+  const fromEntry = optionalTrimmedString(entry.oidc_client_id);
+  if (fromEntry) return fromEntry;
+  const suffix = optionalTrimmedString(entryKey.split("::").at(-1));
+  return suffix ?? XAI_CLI_DEFAULT_CLIENT_ID;
+}
+function refreshToken(entry) {
+  return optionalTrimmedString(entry.refresh_token) ?? optionalTrimmedString(entry.refresh);
+}
+async function defaultWriteAuthFile(filePath, contents) {
+  const tmpPath = `${filePath}.${process.pid}.${Date.now()}.tmp`;
+  try {
+    await fs32.writeFile(tmpPath, contents, { encoding: "utf8", mode: 384 });
+    await fs32.rename(tmpPath, filePath);
+  } catch (error51) {
+    await fs32.unlink(tmpPath).catch(() => void 0);
+    throw error51;
+  }
+}
+async function persistRefreshedEntry(deps, filePath, entryKey, expected, patch, writeAuthFile) {
+  const raw = await deps.readBounded(filePath, MAX_CREDENTIAL_BYTES);
+  if (raw === null) return;
+  const auth = credentialRecord(JSON.parse(raw));
+  if (!auth) return;
+  const current = credentialRecord(auth[entryKey]);
+  if (!current) return;
+  if (optionalTrimmedString(current.key) !== expected.accessToken) return;
+  if (expected.refreshToken !== void 0 && refreshToken(current) !== expected.refreshToken) return;
+  auth[entryKey] = { ...current, ...patch };
+  await writeAuthFile(filePath, `${JSON.stringify(auth, null, 2)}
+`);
+}
+async function refreshAccessToken(entryKey, entry, fetchImpl, now) {
+  const token = refreshToken(entry);
+  if (!token) return null;
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), REFRESH_TIMEOUT_MS);
+  try {
+    const body2 = new URLSearchParams({
+      grant_type: "refresh_token",
+      client_id: clientId(entryKey, entry),
+      refresh_token: token
+    });
+    const response = await fetchImpl(XAI_CLI_REFRESH_URL, {
+      method: "POST",
+      headers: { "Content-Type": "application/x-www-form-urlencoded", Accept: "application/json" },
+      body: body2,
+      signal: controller.signal
+    });
+    if (!response.ok) return null;
+    const payload = credentialRecord(await response.json());
+    const accessToken = optionalTrimmedString(payload?.access_token);
+    if (!accessToken) return null;
+    const expiresIn = payload?.expires_in;
+    const expiresAt = typeof expiresIn === "number" && Number.isFinite(expiresIn) && expiresIn > 0 ? now() + Math.round(expiresIn * 1e3) : jwtExpiry(accessToken) ?? now() + FALLBACK_ACCESS_TOKEN_TTL_MS;
+    const rotated = optionalTrimmedString(payload?.refresh_token);
+    return {
+      accessToken,
+      expiresAt,
+      ...rotated === void 0 ? {} : { refreshToken: rotated }
+    };
+  } catch {
+    return null;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function resolveXaiCliAuth(deps, options = {}) {
+  const now = options.now ?? Date.now;
+  const fetchImpl = options.fetch ?? fetch;
+  const writeAuthFile = options.writeAuthFile ?? defaultWriteAuthFile;
+  const filePath = xaiCliAuthFilePath(deps);
+  try {
+    const raw = await deps.readBounded(filePath, MAX_CREDENTIAL_BYTES);
+    if (raw === null || raw.length > MAX_CREDENTIAL_BYTES) return { status: "signed_out" };
+    const auth = credentialRecord(JSON.parse(raw));
+    if (!auth) return { status: "signed_out" };
+    let sawExpired = false;
+    for (const [entryKey, value] of Object.entries(auth)) {
+      if (!entryKey.startsWith(`${XAI_OIDC_ISSUER}::`)) continue;
+      const entry = credentialRecord(value);
+      const issuer = optionalTrimmedString(entry?.oidc_issuer);
+      const accessToken = optionalTrimmedString(entry?.key);
+      if (!entry || issuer !== XAI_OIDC_ISSUER || !accessToken) continue;
+      const expiresAt = effectiveExpiry(entry, accessToken);
+      const expired2 = expiresAt !== void 0 && expiresAt <= now();
+      const needsRefresh = options.forceRefresh === true || expiresAt !== void 0 && expiresAt - now() <= XAI_CLI_REFRESH_BUFFER_MS;
+      if (needsRefresh) {
+        const refreshed = await refreshAccessToken(entryKey, entry, fetchImpl, now);
+        if (refreshed) {
+          const userId2 = optionalTrimmedString(entry.user_id) ?? optionalTrimmedString(entry.principal_id);
+          const patch = {
+            key: refreshed.accessToken,
+            expires_at: new Date(refreshed.expiresAt).toISOString()
+          };
+          if (refreshed.refreshToken !== void 0) patch.refresh_token = refreshed.refreshToken;
+          try {
+            await persistRefreshedEntry(
+              deps,
+              filePath,
+              entryKey,
+              { accessToken, refreshToken: refreshToken(entry) },
+              patch,
+              writeAuthFile
+            );
+          } catch {
+          }
+          return {
+            status: "ok",
+            credentials: {
+              accessToken: refreshed.accessToken,
+              expiresAt: refreshed.expiresAt,
+              ...userId2 === void 0 ? {} : { userId: userId2 }
+            }
+          };
+        }
+        if (options.forceRefresh === true || expired2) {
+          sawExpired = true;
+          continue;
+        }
+      } else if (expired2) {
+        sawExpired = true;
+        continue;
+      }
+      const userId = optionalTrimmedString(entry.user_id) ?? optionalTrimmedString(entry.principal_id);
+      return {
+        status: "ok",
+        credentials: {
+          accessToken,
+          ...expiresAt === void 0 ? {} : { expiresAt },
+          ...userId === void 0 ? {} : { userId }
+        }
+      };
+    }
+    return { status: sawExpired ? "expired" : "signed_out" };
+  } catch {
+    return { status: "signed_out" };
+  }
+}
+async function resolveXaiCliCredentials(deps, nowOrOptions = Date.now) {
+  const options = typeof nowOrOptions === "function" ? { now: nowOrOptions } : nowOrOptions;
+  const result = await resolveXaiCliAuth(deps, options);
+  return result.status === "ok" ? result.credentials : null;
+}
+var XAI_CLI_CREDITS_URL = "https://cli-chat-proxy.grok.com/v1/billing?format=credits";
+var WEEKLY_PERIOD = "USAGE_PERIOD_TYPE_WEEKLY";
+function parseXaiCredits(payload) {
+  const root = object2(payload);
+  const config2 = object2(root?.config);
+  const period = object2(config2?.currentPeriod);
+  const periodType = typeof period?.type === "string" ? period.type.trim() : "";
+  if (!config2 || !period || periodType.length === 0) return null;
+  const startsAt = safeTimestamp(period.start);
+  const resetsAt = safeTimestamp(period.end);
+  if (startsAt === void 0 || resetsAt === void 0 || resetsAt <= startsAt) return null;
+  if (periodType !== WEEKLY_PERIOD) return { status: "other" };
+  let usedPercent = 0;
+  if (config2.creditUsagePercent !== void 0) {
+    if (typeof config2.creditUsagePercent !== "number" || !Number.isFinite(config2.creditUsagePercent)) {
+      return null;
+    }
+    usedPercent = percent(config2.creditUsagePercent);
+  }
+  return {
+    status: "weekly",
+    window: {
+      id: "weekly",
+      usedPercent,
+      resetsAt,
+      period: {
+        durationMs: resetsAt - startsAt,
+        durationBasis: "upstream",
+        startsAt,
+        startsAtBasis: "upstream"
+      }
+    }
+  };
+}
+function creditsHeaders(credentials) {
+  const headers = {
+    Accept: "application/json",
+    Authorization: `Bearer ${credentials.accessToken}`,
+    "X-XAI-Token-Auth": "xai-grok-cli"
+  };
+  if (credentials.userId) headers["x-userid"] = credentials.userId;
+  return headers;
+}
+async function fetchXaiUsage(deps = {}) {
+  const credentialDeps = deps.credentials ?? defaultCredentialDeps;
+  const now = deps.now ?? Date.now;
+  const fetchImpl = deps.fetch ?? fetch;
+  const auth = await resolveXaiCliAuth(credentialDeps, { now, fetch: fetchImpl });
+  if (auth.status !== "ok") return { status: auth.status };
+  const load = (credentials) => getJson(
+    fetchImpl,
+    XAI_CLI_CREDITS_URL,
+    creditsHeaders(credentials)
+  );
+  try {
+    let credentials = auth.credentials;
+    let payload;
+    try {
+      payload = await load(credentials);
+    } catch (error51) {
+      if (!expired(error51)) throw error51;
+      const retried = await resolveXaiCliAuth(credentialDeps, {
+        now,
+        fetch: fetchImpl,
+        forceRefresh: true
+      });
+      if (retried.status !== "ok") return { status: "expired" };
+      credentials = retried.credentials;
+      try {
+        payload = await load(credentials);
+      } catch (retryError) {
+        const result = expired(retryError);
+        if (result) return result;
+        throw retryError;
+      }
+    }
+    const parsed = parseXaiCredits(payload);
+    if (!parsed) throw new Error("Grok returned an unsupported quota response");
+    return {
+      status: "ok",
+      windows: parsed.status === "weekly" ? [parsed.window] : [],
+      fetchedAt: now()
+    };
+  } catch (error51) {
+    const result = expired(error51);
+    if (result) return result;
+    throw error51;
+  }
+}
 var CACHE_TTL_MS = 12e4;
 var STALE_TTL_MS = 18e5;
 function createAiGatewayQuotaCollectors(deps) {
@@ -27109,7 +27434,8 @@ function createAiGatewayQuotaCollectors(deps) {
     fetchCodex: () => fetchCodexUsage(providerDeps),
     fetchCursor: () => fetchCursorUsage(providerDeps),
     fetchKimi: () => fetchKimiUsage(providerDeps),
-    fetchOpencode: () => fetchOpencodeUsage(providerDeps)
+    fetchOpencode: () => fetchOpencodeUsage(providerDeps),
+    fetchXai: () => fetchXaiUsage(providerDeps)
   };
 }
 function isProviderSuccess(value) {
@@ -27122,7 +27448,8 @@ function createQuotaService(deps) {
     codex: deps.fetchCodex,
     cursor: deps.fetchCursor,
     kimi: deps.fetchKimi,
-    opencode: deps.fetchOpencode
+    opencode: deps.fetchOpencode,
+    xai: deps.fetchXai ?? (async () => ({ status: "signed_out" }))
   };
   const cache = /* @__PURE__ */ new Map();
   const lastGood = /* @__PURE__ */ new Map();
@@ -27165,12 +27492,13 @@ function createQuotaService(deps) {
   }
   return {
     async getSummary(options = {}) {
-      const [claude, codex, cursor, kimi, opencode] = await Promise.all([
+      const [claude, codex, cursor, kimi, opencode, xai] = await Promise.all([
         load("claude", options.force === true || options.forceProvider === "claude"),
         load("codex", options.force === true || options.forceProvider === "codex"),
         load("cursor", options.force === true || options.forceProvider === "cursor"),
         load("kimi", options.force === true || options.forceProvider === "kimi"),
-        load("opencode", options.force === true || options.forceProvider === "opencode")
+        load("opencode", options.force === true || options.forceProvider === "opencode"),
+        load("xai", options.force === true || options.forceProvider === "xai")
       ]);
       return {
         providers: {
@@ -27178,12 +27506,439 @@ function createQuotaService(deps) {
           codex: withRisk(codex),
           cursor: withRisk(cursor),
           kimi: withRisk(kimi),
-          opencode: withRisk(opencode)
+          opencode: withRisk(opencode),
+          xai: withRisk(xai)
+        }
+      };
+    }
+  };
+}
+var XAI_CLI_RESPONSES_URL = "https://cli-chat-proxy.grok.com/v1/responses";
+var XAI_CLI_CLIENT_VERSION = "1.0.3";
+var DEFAULT_XAI_RESPONSES_MAX_UPSTREAM_BODY_BYTES = 64 * 1024 * 1024;
+var DEFAULT_XAI_RESPONSES_UPSTREAM_IDLE_TIMEOUT_MS = 3e4;
+var DEFAULT_XAI_RESPONSES_FUNCTION_CALL_TIMEOUT_MS = 3e4;
+var XaiResponsesAdapter = class {
+  capabilities = {};
+  fetchImpl;
+  maxBodyBytes;
+  idleTimeoutMs;
+  functionCallTimeoutMs;
+  url;
+  extraHeaders;
+  constructor(options = {}) {
+    this.url = XAI_CLI_RESPONSES_URL;
+    this.extraHeaders = options.headers ?? {};
+    this.fetchImpl = options.fetch ?? globalThis.fetch.bind(globalThis);
+    this.maxBodyBytes = positiveInteger(
+      options.maxBodyBytes ?? DEFAULT_XAI_RESPONSES_MAX_UPSTREAM_BODY_BYTES,
+      "maxBodyBytes"
+    );
+    this.idleTimeoutMs = positiveInteger(
+      options.idleTimeoutMs ?? DEFAULT_XAI_RESPONSES_UPSTREAM_IDLE_TIMEOUT_MS,
+      "idleTimeoutMs"
+    );
+    this.functionCallTimeoutMs = positiveInteger(
+      options.functionCallTimeoutMs ?? DEFAULT_XAI_RESPONSES_FUNCTION_CALL_TIMEOUT_MS,
+      "functionCallTimeoutMs"
+    );
+  }
+  async stream(request, options) {
+    if (options.apiKey.length === 0) {
+      throw new TypeError("apiKey must not be empty");
+    }
+    const controller = new AbortController();
+    const unlinkAbort = linkAbortSignal(options.signal, controller);
+    const payload = forXaiResponsesBackend(request);
+    wireLog("xai-responses.wire.request", { url: this.url, payload });
+    let response;
+    try {
+      response = await this.fetchImpl(this.url, {
+        method: "POST",
+        headers: {
+          accept: "text/event-stream",
+          authorization: `Bearer ${options.apiKey}`,
+          "content-type": "application/json",
+          "x-xai-token-auth": "xai-grok-cli",
+          "x-grok-client-version": XAI_CLI_CLIENT_VERSION,
+          "x-grok-model-override": request.model,
+          ...this.extraHeaders
+        },
+        body: JSON.stringify(payload),
+        signal: controller.signal
+      });
+    } catch (error51) {
+      unlinkAbort();
+      throw error51;
+    }
+    if (!response.ok) {
+      if (process.env.FLEET_AI_GATEWAY_DEBUG === "1") {
+        const roles = payload.input.map((item) => "role" in item ? item.role : item.type);
+        console.error(`[ai-gateway] upstream ${response.status} input roles=${JSON.stringify(roles)} keys=${JSON.stringify(Object.keys(payload))}`);
+      }
+      try {
+        const body2 = await readBoundedBody(response.body, {
+          controller,
+          idleTimeoutMs: this.idleTimeoutMs,
+          maxBodyBytes: this.maxBodyBytes
+        });
+        return {
+          ok: false,
+          status: response.status,
+          headers: response.headers,
+          body: body2
+        };
+      } finally {
+        unlinkAbort();
+      }
+    }
+    return {
+      ok: true,
+      status: response.status,
+      headers: response.headers,
+      events: parseXaiEventStream(response.body, {
+        controller,
+        idleTimeoutMs: this.idleTimeoutMs,
+        maxBodyBytes: this.maxBodyBytes,
+        onClose: unlinkAbort
+      }, this.functionCallTimeoutMs)
+    };
+  }
+};
+function forXaiResponsesBackend(request) {
+  const { metadata: _metadata, native_tools: _nativeTools, ...rest } = request;
+  return {
+    ...rest,
+    input: request.input.map((item) => {
+      if (item.type === "function_call_output") {
+        const { is_error: _isError, tool_references: _toolReferences, ...wireItem2 } = item;
+        return wireItem2;
+      }
+      const { reasoning_content: _reasoningContent, ...wireItem } = item;
+      return wireItem;
+    }),
+    ...request.tools === void 0 ? {} : { tools: request.tools.map(({ defer_loading: _deferLoading, ...tool }) => tool) }
+  };
+}
+function parseXaiEventStream(body2, options, functionCallTimeoutMs) {
+  return assembleXaiFunctionCalls(
+    parseUpstreamSseStream(
+      body2,
+      { ...options, missingBodyMessage: "Grok CLI streaming response had no body" },
+      parseEventFrame3
+    ),
+    options.controller,
+    functionCallTimeoutMs
+  );
+}
+async function* assembleXaiFunctionCalls(source, controller, timeoutMs) {
+  const iterator = source[Symbol.asyncIterator]();
+  const pending = /* @__PURE__ */ new Map();
+  let completedNormally = false;
+  try {
+    while (true) {
+      const deadlineAt = earliestXaiFunctionCallDeadline(pending);
+      const result = deadlineAt === void 0 ? await iterator.next() : await nextXaiEventBeforeDeadline(iterator, deadlineAt, controller, timeoutMs);
+      if (result.done) {
+        if (pending.size > 0) {
+          throw incompleteXaiFunctionCall("stream ended before function call output_item.done");
+        }
+        completedNormally = true;
+        return;
+      }
+      const event = result.value;
+      if (event.type === "response.completed" && pending.size > 0) {
+        throw incompleteXaiFunctionCall("response.completed arrived before function call output_item.done");
+      }
+      if (event.type === "response.output_item.added" && event.item.type === "function_call") {
+        const key = xaiFunctionCallKey(event.output_index, event.item.id);
+        pending.set(key, {
+          added: event,
+          // Each call gets a full timeout from its own added event. Waiting uses the
+          // earliest active deadline, so a later parallel call is never shortened by
+          // an earlier call's age.
+          deadlineAt: Date.now() + timeoutMs
+        });
+        continue;
+      }
+      if (event.type === "response.function_call_arguments.done") {
+        const call = pending.get(xaiFunctionCallKey(event.output_index, event.item_id));
+        if (call !== void 0) {
+          call.argumentsDone = event;
+          continue;
+        }
+      }
+      if (event.type === "response.output_item.done" && event.item.type === "function_call") {
+        const key = xaiFunctionCallKey(event.output_index, event.item.id);
+        const call = pending.get(key);
+        if (call !== void 0) {
+          pending.delete(key);
+          yield call.added;
+          if (call.argumentsDone !== void 0) {
+            yield call.argumentsDone;
+          } else if (event.item.arguments.length > 0) {
+            yield {
+              type: "response.function_call_arguments.done",
+              item_id: event.item.id,
+              output_index: event.output_index,
+              arguments: event.item.arguments
+            };
+          }
+          yield event;
+          continue;
+        }
+      }
+      yield event;
+    }
+  } finally {
+    if (!completedNormally && !controller.signal.aborted) {
+      controller.abort();
+    }
+    const returned = iterator.return?.();
+    if (returned !== void 0) {
+      await returned.catch(() => void 0);
+    }
+  }
+}
+function earliestXaiFunctionCallDeadline(pending) {
+  let earliest;
+  for (const call of pending.values()) {
+    if (earliest === void 0 || call.deadlineAt < earliest) {
+      earliest = call.deadlineAt;
+    }
+  }
+  return earliest;
+}
+async function nextXaiEventBeforeDeadline(iterator, deadlineAt, controller, timeoutMs) {
+  const remainingMs = deadlineAt - Date.now();
+  if (remainingMs <= 0) {
+    const error51 = incompleteXaiFunctionCall(`function call assembly exceeded ${timeoutMs}ms`);
+    controller.abort(error51);
+    throw error51;
+  }
+  let timeout;
+  const next = iterator.next();
+  void next.catch(() => void 0);
+  try {
+    return await Promise.race([
+      next,
+      new Promise((_, reject) => {
+        timeout = setTimeout(() => {
+          const error51 = incompleteXaiFunctionCall(`function call assembly exceeded ${timeoutMs}ms`);
+          controller.abort(error51);
+          reject(error51);
+        }, remainingMs);
+      })
+    ]);
+  } finally {
+    if (timeout !== void 0) {
+      clearTimeout(timeout);
+    }
+  }
+}
+function incompleteXaiFunctionCall(reason) {
+  return new UpstreamProtocolError(`Grok CLI ${reason}`);
+}
+function xaiFunctionCallKey(outputIndex, itemId) {
+  return `${outputIndex}:${itemId}`;
+}
+function parseEventFrame3(frame) {
+  const { event: eventName, data } = parseSseFrameFields(frame);
+  if (data.length === 0 || data === "[DONE]") {
+    return void 0;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(data);
+  } catch (error51) {
+    throw new UpstreamProtocolError(
+      `Grok CLI SSE contained invalid JSON: ${error51 instanceof Error ? error51.message : String(error51)}`
+    );
+  }
+  if (isRecord7(parsed) && typeof parsed.type !== "string" && eventName !== void 0) {
+    parsed = { ...parsed, type: eventName };
+  }
+  return canonicalEvent3(parsed);
+}
+function canonicalEvent3(value) {
+  if (!isRecord7(value) || typeof value.type !== "string") {
+    throw new UpstreamProtocolError("Grok CLI SSE event was not an object with a type");
+  }
+  switch (value.type) {
+    case "response.created":
+      return { type: value.type, response: responseSnapshot3(value.response) };
+    case "response.content_part.added": {
+      const part = record3(value.part, "response.content_part.added.part");
+      if (part.type !== "output_text") {
+        return void 0;
+      }
+      return {
+        type: value.type,
+        item_id: string32(value.item_id, "item_id"),
+        output_index: number32(value.output_index, "output_index"),
+        content_index: number32(value.content_index, "content_index"),
+        part: {
+          type: "output_text",
+          text: typeof part.text === "string" ? part.text : ""
         }
       };
     }
+    case "response.output_text.delta":
+      return {
+        type: value.type,
+        item_id: string32(value.item_id, "item_id"),
+        output_index: number32(value.output_index, "output_index"),
+        content_index: number32(value.content_index, "content_index"),
+        delta: string32(value.delta, "delta")
+      };
+    case "response.output_text.done":
+      return {
+        type: value.type,
+        item_id: string32(value.item_id, "item_id"),
+        output_index: number32(value.output_index, "output_index"),
+        content_index: number32(value.content_index, "content_index"),
+        text: string32(value.text, "text")
+      };
+    case "response.reasoning_summary_text.delta":
+    case "response.reasoning_text.delta":
+      return {
+        type: "response.reasoning_summary_text.delta",
+        item_id: string32(value.item_id, "item_id"),
+        output_index: number32(value.output_index, "output_index"),
+        delta: string32(value.delta, "delta")
+      };
+    case "response.output_item.added":
+    case "response.output_item.done": {
+      const item = outputItem3(value.item);
+      if (item === void 0) {
+        return void 0;
+      }
+      return {
+        type: value.type,
+        output_index: number32(value.output_index, "output_index"),
+        item
+      };
+    }
+    // Hold argument fragments until the Grok CLI proxy's partial-JSON behavior is observed.
+    // The `.done` event carries the complete argument object, which downstream treats as the
+    // remainder when nothing was streamed ahead of it.
+    case "response.function_call_arguments.delta":
+      return void 0;
+    case "response.function_call_arguments.done":
+      return {
+        type: value.type,
+        item_id: string32(value.item_id, "item_id"),
+        output_index: number32(value.output_index, "output_index"),
+        arguments: string32(value.arguments, "arguments")
+      };
+    case "response.completed":
+      return { type: value.type, response: responseSnapshot3(value.response) };
+    case "response.failed": {
+      const response = record3(value.response, "response.failed.response");
+      return {
+        type: value.type,
+        response: {
+          ...responseSnapshot3(response),
+          error: canonicalError3(response.error)
+        }
+      };
+    }
+    case "error":
+      return { type: "error", error: canonicalError3(value.error ?? value) };
+    default:
+      return void 0;
+  }
+}
+function responseSnapshot3(value) {
+  const response = record3(value, "response");
+  return {
+    id: string32(response.id, "response.id"),
+    model: string32(response.model, "response.model"),
+    usage: response.usage === null || response.usage === void 0 ? null : usage3(response.usage)
+  };
+}
+function usage3(value) {
+  const parsed = record3(value, "usage");
+  const inputTokens = number32(parsed.input_tokens, "usage.input_tokens");
+  const outputTokens = number32(parsed.output_tokens, "usage.output_tokens");
+  const inputDetails = optionalRecord3(parsed.input_tokens_details, "usage.input_tokens_details");
+  const cachedInputTokens = inputDetails === void 0 ? void 0 : optionalNonNegativeNumber3(inputDetails.cached_tokens, "usage.input_tokens_details.cached_tokens");
+  const cacheWriteInputTokens = inputDetails === void 0 ? void 0 : optionalNonNegativeNumber3(inputDetails.cache_write_tokens, "usage.input_tokens_details.cache_write_tokens");
+  const outputDetails = optionalRecord3(parsed.output_tokens_details, "usage.output_tokens_details");
+  const reasoningOutputTokens = outputDetails === void 0 ? void 0 : optionalNonNegativeNumber3(outputDetails.reasoning_tokens, "usage.output_tokens_details.reasoning_tokens");
+  const totalTokens = optionalNonNegativeNumber3(parsed.total_tokens, "usage.total_tokens");
+  return {
+    input_tokens: inputTokens,
+    output_tokens: outputTokens,
+    ...cachedInputTokens === void 0 ? {} : { cached_input_tokens: cachedInputTokens },
+    ...cacheWriteInputTokens === void 0 ? {} : { cache_write_input_tokens: cacheWriteInputTokens },
+    ...reasoningOutputTokens === void 0 ? {} : { reasoning_output_tokens: reasoningOutputTokens },
+    ...totalTokens === void 0 ? {} : { total_tokens: totalTokens }
   };
 }
+function outputItem3(value) {
+  const item = record3(value, "item");
+  if (item.type === "message") {
+    return {
+      id: string32(item.id, "item.id"),
+      type: "message",
+      role: "assistant"
+    };
+  }
+  if (item.type === "function_call") {
+    const id = string32(item.id, "item.id");
+    return {
+      id,
+      type: "function_call",
+      call_id: typeof item.call_id === "string" ? item.call_id : id,
+      name: string32(item.name, "item.name"),
+      arguments: typeof item.arguments === "string" ? item.arguments : ""
+    };
+  }
+  return void 0;
+}
+function canonicalError3(value) {
+  const error51 = record3(value, "error");
+  const message = string32(error51.message, "error.message");
+  const type = typeof error51.type === "string" && error51.type !== "error" ? error51.type : typeof error51.code === "string" ? error51.code : "api_error";
+  return { type, message };
+}
+function isRecord7(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function record3(value, name) {
+  if (!isRecord7(value)) {
+    throw new UpstreamProtocolError(`${name} must be an object`);
+  }
+  return value;
+}
+function optionalRecord3(value, name) {
+  if (value === void 0 || value === null) {
+    return void 0;
+  }
+  return record3(value, name);
+}
+function string32(value, name) {
+  if (typeof value !== "string") {
+    throw new UpstreamProtocolError(`${name} must be a string`);
+  }
+  return value;
+}
+function number32(value, name) {
+  if (typeof value !== "number" || !Number.isFinite(value)) {
+    throw new UpstreamProtocolError(`${name} must be a number`);
+  }
+  return value;
+}
+function optionalNonNegativeNumber3(value, name) {
+  if (value === void 0 || value === null) {
+    return void 0;
+  }
+  if (typeof value !== "number" || !Number.isFinite(value) || value < 0) {
+    throw new UpstreamProtocolError(`${name} must be a finite nonnegative number`);
+  }
+  return value;
+}
 var NO_USER_FACING_BLOCK = "Do not tell the user access is blocked, disabled, or denied.";
 var CLIENT_TOOL_RETRY = `${NO_USER_FACING_BLOCK} Silently retry with the matching client bridge tool from the current catalog.`;
 function cursorNativeExecPolicyReplies(exec2, clientTools) {
@@ -27224,38 +27979,38 @@ function cursorNativeExecPolicyReplies(exec2, clientTools) {
     "shell_command",
     "exec_command"
   ]);
-  if (isRecord7(exec2.readArgs)) {
+  if (isRecord8(exec2.readArgs)) {
     return [execReply(exec2, "readResult", {
       error: { path: stringValue(exec2.readArgs.path), error: readMessage3 }
     })];
   }
-  if (isRecord7(exec2.writeArgs)) {
+  if (isRecord8(exec2.writeArgs)) {
     return [execReply(exec2, "writeResult", {
       rejected: { path: stringValue(exec2.writeArgs.path), reason: mutationMessage }
     })];
   }
-  if (isRecord7(exec2.deleteArgs)) {
+  if (isRecord8(exec2.deleteArgs)) {
     return [execReply(exec2, "deleteResult", {
       rejected: { path: stringValue(exec2.deleteArgs.path), reason: mutationMessage }
     })];
   }
-  if (isRecord7(exec2.lsArgs)) {
+  if (isRecord8(exec2.lsArgs)) {
     return [execReply(exec2, "lsResult", {
       error: { path: stringValue(exec2.lsArgs.path), error: listMessage }
     })];
   }
-  if (isRecord7(exec2.grepArgs)) {
+  if (isRecord8(exec2.grepArgs)) {
     return [execReply(exec2, "grepResult", { error: { error: grepMessage } })];
   }
-  if (isRecord7(exec2.shellArgs)) {
+  if (isRecord8(exec2.shellArgs)) {
     return [execReply(exec2, "shellResult", shellFailure(exec2.shellArgs, shellMessage))];
   }
-  if (isRecord7(exec2.shellStreamArgs)) {
+  if (isRecord8(exec2.shellStreamArgs)) {
     const args = exec2.shellStreamArgs;
     const cwd = stringValue(args.workingDirectory);
     return [
       execReply(exec2, "shellStream", {
-        start: isRecord7(args.requestedSandboxPolicy) ? { sandboxPolicy: args.requestedSandboxPolicy } : {}
+        start: isRecord8(args.requestedSandboxPolicy) ? { sandboxPolicy: args.requestedSandboxPolicy } : {}
       }),
       execReply(exec2, "shellStream", { stderr: { data: shellMessage } }),
       execReply(exec2, "shellStream", { exit: { code: 1, cwd, aborted: true } }),
@@ -27263,7 +28018,7 @@ function cursorNativeExecPolicyReplies(exec2, clientTools) {
       { execClientControlMessage: { streamClose: { id: numberValue(exec2.id) } } }
     ];
   }
-  if (isRecord7(exec2.backgroundShellSpawnArgs)) {
+  if (isRecord8(exec2.backgroundShellSpawnArgs)) {
     const args = exec2.backgroundShellSpawnArgs;
     return [execReply(exec2, "backgroundShellSpawnResult", {
       error: {
@@ -27273,15 +28028,15 @@ function cursorNativeExecPolicyReplies(exec2, clientTools) {
       }
     })];
   }
-  if (isRecord7(exec2.writeShellStdinArgs)) {
+  if (isRecord8(exec2.writeShellStdinArgs)) {
     return [execReply(exec2, "writeShellStdinResult", { error: { error: shellMessage } })];
   }
-  if (isRecord7(exec2.fetchArgs)) {
+  if (isRecord8(exec2.fetchArgs)) {
     return [execReply(exec2, "fetchResult", {
       error: { url: stringValue(exec2.fetchArgs.url), error: networkMessage }
     })];
   }
-  if (isRecord7(exec2.diagnosticsArgs)) {
+  if (isRecord8(exec2.diagnosticsArgs)) {
     return [execReply(exec2, "diagnosticsResult", {
       error: {
         path: stringValue(exec2.diagnosticsArgs.path),
@@ -27289,12 +28044,12 @@ function cursorNativeExecPolicyReplies(exec2, clientTools) {
       }
     })];
   }
-  if (isRecord7(exec2.listMcpResourcesExecArgs)) {
+  if (isRecord8(exec2.listMcpResourcesExecArgs)) {
     return [execReply(exec2, "listMcpResourcesExecResult", {
       error: { error: retryMessage(clientTools, ["ListMcpResources", "list_mcp_resources"]) }
     })];
   }
-  if (isRecord7(exec2.readMcpResourceExecArgs)) {
+  if (isRecord8(exec2.readMcpResourceExecArgs)) {
     return [execReply(exec2, "readMcpResourceExecResult", {
       error: {
         uri: stringValue(exec2.readMcpResourceExecArgs.uri),
@@ -27302,12 +28057,12 @@ function cursorNativeExecPolicyReplies(exec2, clientTools) {
       }
     })];
   }
-  if (isRecord7(exec2.recordScreenArgs)) {
+  if (isRecord8(exec2.recordScreenArgs)) {
     return [execReply(exec2, "recordScreenResult", {
       failure: { error: retryMessage(clientTools, ["record_screen", "computer_use"]) }
     })];
   }
-  if (isRecord7(exec2.computerUseArgs)) {
+  if (isRecord8(exec2.computerUseArgs)) {
     return [execReply(exec2, "computerUseResult", {
       error: {
         error: retryMessage(clientTools, ["computer_use"]),
@@ -27317,7 +28072,7 @@ function cursorNativeExecPolicyReplies(exec2, clientTools) {
       }
     })];
   }
-  if (isRecord7(exec2.mcpArgs)) {
+  if (isRecord8(exec2.mcpArgs)) {
     return [execReply(exec2, "mcpResult", {
       error: { error: retryMessage(clientTools, []) }
     })];
@@ -27389,7 +28144,7 @@ function numberValue(value) {
 function stringValue(value) {
   return typeof value === "string" ? value : "";
 }
-function isRecord7(value) {
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var EXECUTE_HOOK_FIELD_NUMBER = 27;
@@ -27541,14 +28296,14 @@ function isCursorNativeRedirectToolName(name) {
 function cursorNativeExecRedirect(exec2, tools, providerIdentifier) {
   const messageId = numberValue2(exec2.id ?? 0);
   const execId = stringValue2(exec2.execId) || `redirect-${messageId}`;
-  if (isRecord8(exec2.readArgs)) {
-    const path72 = stringValue2(exec2.readArgs.path);
-    if (!path72) return null;
+  if (isRecord9(exec2.readArgs)) {
+    const path82 = stringValue2(exec2.readArgs.path);
+    if (!path82) return null;
     if ([exec2.readArgs.offset, exec2.readArgs.limit].some((value) => typeof value === "number" && value < 0)) return null;
     const offset = positiveNumber(exec2.readArgs.offset);
     const limit = positiveNumber(exec2.readArgs.limit);
     if (offset !== void 0 || limit !== void 0) return null;
-    const mapped = tools.filter((tool) => matchesLeaf(tool, READ_CANDIDATES)).map((tool) => ({ tool, args: readArguments(tool.inputSchemaValue, path72) })).find((candidate) => candidate.args !== null);
+    const mapped = tools.filter((tool) => matchesLeaf(tool, READ_CANDIDATES)).map((tool) => ({ tool, args: readArguments(tool.inputSchemaValue, path82) })).find((candidate) => candidate.args !== null);
     if (!mapped?.args) return null;
     return redirect(
       exec2,
@@ -27560,14 +28315,14 @@ function cursorNativeExecRedirect(exec2, tools, providerIdentifier) {
       "readResult",
       "read-direct",
       mapped.args,
-      { path: path72 }
+      { path: path82 }
     );
   }
-  if (isRecord8(exec2.grepArgs)) {
+  if (isRecord9(exec2.grepArgs)) {
     const grepArgs = exec2.grepArgs;
     const pattern = stringValue2(grepArgs.pattern);
     if (!pattern.trim()) return null;
-    const path72 = stringValue2(grepArgs.path) || ".";
+    const path82 = stringValue2(grepArgs.path) || ".";
     const glob = stringValue2(grepArgs.glob);
     const outputMode = normalizedGrepOutputMode(stringValue2(grepArgs.outputMode));
     if (!outputMode) return null;
@@ -27583,7 +28338,7 @@ function cursorNativeExecRedirect(exec2, tools, providerIdentifier) {
     if (numericOptions.some((value) => typeof value === "number" && value < 0)) return null;
     const mappingInput = {
       pattern,
-      path: path72,
+      path: path82,
       glob,
       outputMode,
       caseInsensitive: grepArgs.caseInsensitive === true,
@@ -27600,7 +28355,7 @@ function cursorNativeExecRedirect(exec2, tools, providerIdentifier) {
     const mapped = tools.filter((tool) => matchesLeaf(tool, GREP_CANDIDATES)).map((tool) => ({ tool, args: grepArguments(tool, mappingInput) })).find((candidate) => candidate.args !== null);
     const nativeArgs = {
       pattern,
-      path: path72,
+      path: path82,
       outputMode,
       ...glob ? { glob } : {},
       ...positiveNumber(grepArgs.offset) === void 0 ? {} : { offset: String(positiveNumber(grepArgs.offset)) }
@@ -27637,15 +28392,15 @@ function cursorNativeExecRedirect(exec2, tools, providerIdentifier) {
       nativeArgs
     );
   }
-  if (isRecord8(exec2.shellArgs) || isRecord8(exec2.shellStreamArgs)) {
-    const argsRecord = isRecord8(exec2.shellArgs) ? exec2.shellArgs : exec2.shellStreamArgs;
+  if (isRecord9(exec2.shellArgs) || isRecord9(exec2.shellStreamArgs)) {
+    const argsRecord = isRecord9(exec2.shellArgs) ? exec2.shellArgs : exec2.shellStreamArgs;
     const command2 = stringValue2(argsRecord.command);
     if (!command2) return null;
     const cwd = stringValue2(argsRecord.workingDirectory);
     const timeout = positiveNumber(argsRecord.timeout) ?? positiveNumber(argsRecord.hardTimeout);
     const mapped = tools.filter((tool) => matchesLeaf(tool, SHELL_CANDIDATES)).map((tool) => ({ tool, args: shellArguments(tool.inputSchemaValue, command2, cwd || void 0, timeout) })).find((candidate) => candidate.args !== null);
     if (!mapped?.args) return null;
-    const stream = isRecord8(exec2.shellStreamArgs);
+    const stream = isRecord9(exec2.shellStreamArgs);
     return redirect(
       exec2,
       mapped.tool,
@@ -27735,9 +28490,9 @@ function cursorNativeRedirectErrorReplies(correlation, error51) {
     }
   }
 }
-function readArguments(schema, path72) {
+function readArguments(schema, path82) {
   const pathKey = firstSchemaProperty(schema, ["file_path", "path"]);
-  return pathKey ? { [pathKey]: path72 } : null;
+  return pathKey ? { [pathKey]: path82 } : null;
 }
 function grepArguments(tool, input) {
   const leaf = normalizedLeaf(tool.clientName);
@@ -27898,7 +28653,7 @@ function parseGrepShellReceipt(output, expectedOutputMode) {
       output.slice(CURSOR_GREP_RECEIPT_PREFIX.length).trim(),
       "base64url"
     ).toString("utf8"));
-    if (!isRecord8(decoded)) throw new Error("receipt is not an object");
+    if (!isRecord9(decoded)) throw new Error("receipt is not an object");
     if (decoded.ok === false && typeof decoded.error === "string") {
       return { ok: false, error: decoded.error };
     }
@@ -27911,7 +28666,7 @@ function parseGrepShellReceipt(output, expectedOutputMode) {
     if (!Array.isArray(decoded.counts) || !decoded.counts.every((entry) => Array.isArray(entry) && entry.length === 2 && typeof entry[0] === "string" && typeof entry[1] === "number" && Number.isSafeInteger(entry[1]) && entry[1] >= 0)) {
       throw new Error("receipt counts are invalid");
     }
-    if (!Array.isArray(decoded.matches) || !decoded.matches.every((entry) => isRecord8(entry) && typeof entry.file === "string" && typeof entry.lineNumber === "number" && Number.isSafeInteger(entry.lineNumber) && entry.lineNumber > 0 && typeof entry.content === "string" && typeof entry.contentTruncated === "boolean" && typeof entry.isContextLine === "boolean")) {
+    if (!Array.isArray(decoded.matches) || !decoded.matches.every((entry) => isRecord9(entry) && typeof entry.file === "string" && typeof entry.lineNumber === "number" && Number.isSafeInteger(entry.lineNumber) && entry.lineNumber > 0 && typeof entry.content === "string" && typeof entry.contentTruncated === "boolean" && typeof entry.isContextLine === "boolean")) {
       throw new Error("receipt matches are invalid");
     }
     for (const key of ["totalFiles", "totalLines", "totalMatchedLines"]) {
@@ -27929,7 +28684,7 @@ function parseGrepShellReceipt(output, expectedOutputMode) {
   }
 }
 function buildGrepReceiptSuccess(args, receipt) {
-  const path72 = args.path || ".";
+  const path82 = args.path || ".";
   let result;
   if (receipt.outputMode === "files_with_matches") {
     result = {
@@ -27975,15 +28730,15 @@ function buildGrepReceiptSuccess(args, receipt) {
   }
   return {
     pattern: args.pattern ?? "",
-    path: path72,
+    path: path82,
     outputMode: receipt.outputMode,
-    workspaceResults: { [path72]: result }
+    workspaceResults: { [path82]: result }
   };
 }
 function buildGrepSuccess(args, output) {
   const outputMode = normalizedGrepOutputMode(args.outputMode) ?? "content";
   const lines = output.split(/\r?\n/).map((line) => line.trimEnd()).filter((line) => line.length > 0 && !line.startsWith("[") && !/^no matches/i.test(line));
-  const path72 = args.path || ".";
+  const path82 = args.path || ".";
   let result;
   if (outputMode === "files_with_matches") {
     result = {
@@ -28046,9 +28801,9 @@ function buildGrepSuccess(args, output) {
   }
   return {
     pattern: args.pattern ?? "",
-    path: path72,
+    path: path82,
     outputMode,
-    workspaceResults: { [path72]: result }
+    workspaceResults: { [path82]: result }
   };
 }
 function parseCallerShellOutput(output, isError) {
@@ -28110,7 +28865,7 @@ function redirect(exec2, tool, providerIdentifier, messageId, execId, execCase,
 }
 function execArgsToolCallId(exec2) {
   for (const value of Object.values(exec2)) {
-    if (!isRecord8(value)) continue;
+    if (!isRecord9(value)) continue;
     const toolCallId = stringValue2(value.toolCallId);
     if (toolCallId) return toolCallId;
   }
@@ -28131,7 +28886,7 @@ function firstSchemaProperty(schema, candidates) {
   return candidates.find((candidate) => schemaHasProperty(schema, candidate));
 }
 function schemaHasProperty(schema, name) {
-  return isRecord8(schema.properties) && Object.prototype.hasOwnProperty.call(schema.properties, name);
+  return isRecord9(schema.properties) && Object.prototype.hasOwnProperty.call(schema.properties, name);
 }
 function execReply2(exec2, resultName, result) {
   return {
@@ -28152,13 +28907,13 @@ function numberOrUndefined(value) {
   return typeof value === "number" && Number.isFinite(value) ? value : void 0;
 }
 function positiveNumber(value) {
-  const number32 = numberOrUndefined(value);
-  return number32 !== void 0 && number32 > 0 ? number32 : void 0;
+  const number42 = numberOrUndefined(value);
+  return number42 !== void 0 && number42 > 0 ? number42 : void 0;
 }
 function stringValue2(value) {
   return typeof value === "string" ? value : "";
 }
-function isRecord8(value) {
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var cursorAgentDescriptor = [
@@ -28989,18 +29744,18 @@ function decodeCursorServerMessage(payload) {
   const message = fromBinary(AgentServerMessageSchema, payload);
   const unknownExecFields = extractCursorUnknownExecFields(message);
   const json3 = toJson(AgentServerMessageSchema, message);
-  if (!isRecord9(json3)) throw new TypeError("Cursor server frame was not a message object");
+  if (!isRecord10(json3)) throw new TypeError("Cursor server frame was not a message object");
   if (unknownExecFields.length > 0) {
     Object.defineProperty(json3, CURSOR_UNKNOWN_EXEC_FIELDS, { value: unknownExecFields });
   }
   return json3;
 }
 function extractCursorUnknownExecFields(message) {
-  if (!isRecord9(message) || !isRecord9(message.message)) return [];
-  if (message.message.case !== "execServerMessage" || !isRecord9(message.message.value)) return [];
+  if (!isRecord10(message) || !isRecord10(message.message)) return [];
+  if (message.message.case !== "execServerMessage" || !isRecord10(message.message.value)) return [];
   const fields = message.message.value.$unknown;
   if (!Array.isArray(fields)) return [];
-  return fields.filter((field) => isRecord9(field) && typeof field.no === "number" && typeof field.wireType === "number" && field.data instanceof Uint8Array);
+  return fields.filter((field) => isRecord10(field) && typeof field.no === "number" && typeof field.wireType === "number" && field.data instanceof Uint8Array);
 }
 function parseConnectEndStreamError(payload) {
   try {
@@ -29295,7 +30050,7 @@ function cursorToolArgumentBytes(argumentsText) {
   } catch {
     return {};
   }
-  if (!isRecord9(parsed)) return {};
+  if (!isRecord10(parsed)) return {};
   return Object.fromEntries(Object.entries(parsed).map(([name, value]) => [
     name,
     Buffer.from(toBinary(ValueSchema, fromJson(ValueSchema, value))).toString("base64")
@@ -30272,7 +31027,7 @@ function createCursorLiveRun(options) {
   let blobFetchBytes = 0;
   let blobFetchMisses = 0;
   let redirectOperationSequence = 0;
-  const usage3 = (segment) => {
+  const usage4 = (segment) => {
     const outputTokens = Math.max(
       segment.contextOutputTokens,
       estimateTokens(segment.outputText, model)
@@ -30318,7 +31073,7 @@ function createCursorLiveRun(options) {
     else if (segment.started) {
       segment.queue.push({
         type: "response.completed",
-        response: { id: segment.responseId, model, usage: usage3(segment) }
+        response: { id: segment.responseId, model, usage: usage4(segment) }
       });
     }
     report("turn.finish", {
@@ -30385,7 +31140,7 @@ function createCursorLiveRun(options) {
         response: {
           id: activeSegment.responseId,
           model,
-          usage: usage3(activeSegment)
+          usage: usage4(activeSegment)
         }
       });
     }
@@ -30575,7 +31330,7 @@ ${argumentsText}`;
   const handleFrame = (frame, replayed = false) => {
     const unknownExecFields = frame[CURSOR_UNKNOWN_EXEC_FIELDS] ?? [];
     lastFrame = describeCursorServerFrame(frame, unknownExecFields);
-    const tokenDetails = isRecord9(frame.conversationCheckpointUpdate) && isRecord9(frame.conversationCheckpointUpdate.tokenDetails) ? frame.conversationCheckpointUpdate.tokenDetails : void 0;
+    const tokenDetails = isRecord10(frame.conversationCheckpointUpdate) && isRecord10(frame.conversationCheckpointUpdate.tokenDetails) ? frame.conversationCheckpointUpdate.tokenDetails : void 0;
     const checkpointContextTokens = positiveTokenCount(tokenDetails?.usedTokens);
     const checkpointContextWindow = positiveTokenCount(tokenDetails?.maxTokens);
     if (!replayed) {
@@ -30588,7 +31343,7 @@ ${argumentsText}`;
         ...checkpointContextWindow === void 0 ? {} : { contextWindow: checkpointContextWindow }
       });
     }
-    if (isRecord9(frame.conversationCheckpointUpdate)) {
+    if (isRecord10(frame.conversationCheckpointUpdate)) {
       if (checkpointContextTokens !== void 0) {
         wireLog("cursor.wire.checkpoint", {
           model: diagnosticModel,
@@ -30611,7 +31366,7 @@ ${argumentsText}`;
       }
       return;
     }
-    if (isRecord9(frame.kvServerMessage)) {
+    if (isRecord10(frame.kvServerMessage)) {
       const kv = kvReply(frame.kvServerMessage, blobs);
       stream.write(encodeCursorClientMessage(kv.message));
       if (kv.fetch) {
@@ -30632,7 +31387,7 @@ ${argumentsText}`;
       });
       return;
     }
-    if (isRecord9(frame.interactionQuery)) {
+    if (isRecord10(frame.interactionQuery)) {
       const reply = cursorInteractionQueryReply(frame.interactionQuery);
       stream.write(encodeCursorClientMessage(reply.message));
       report("client.reply", { model: diagnosticModel, reply: reply.replyKind });
@@ -30648,7 +31403,7 @@ ${argumentsText}`;
       }
       return;
     }
-    if (isRecord9(frame.error)) {
+    if (isRecord10(frame.error)) {
       if (state === "attached") {
         emit({ type: "error", error: cursorError(frame.error) });
         completeRun("server_error");
@@ -30677,8 +31432,8 @@ ${argumentsText}`;
       return;
     }
     if (state !== "attached") return;
-    if (isRecord9(frame.execServerMessage)) {
-      if (isRecord9(frame.execServerMessage.requestContextArgs)) {
+    if (isRecord10(frame.execServerMessage)) {
+      if (isRecord10(frame.execServerMessage.requestContextArgs)) {
         stream.write(encodeCursorClientMessage(cursorRequestContextReply(frame.execServerMessage, tools)));
         report("client.reply", { model: diagnosticModel, reply: "exec.requestContext" });
         return;
@@ -30767,10 +31522,10 @@ ${argumentsText}`;
       }
       return;
     }
-    const update = isRecord9(frame.interactionUpdate) ? frame.interactionUpdate : void 0;
+    const update = isRecord10(frame.interactionUpdate) ? frame.interactionUpdate : void 0;
     if (update === void 0) return;
     if (isSettledToolUpdate(update)) return;
-    if (isRecord9(update.textDelta) && typeof update.textDelta.text === "string") {
+    if (isRecord10(update.textDelta) && typeof update.textDelta.text === "string") {
       activeSegment.outputText += update.textDelta.text;
       emit({
         type: "response.output_text.delta",
@@ -30781,7 +31536,7 @@ ${argumentsText}`;
       });
       return;
     }
-    if (isRecord9(update.thinkingDelta) && typeof update.thinkingDelta.text === "string") {
+    if (isRecord10(update.thinkingDelta) && typeof update.thinkingDelta.text === "string") {
       activeSegment.outputText += update.thinkingDelta.text;
       emit({
         type: "response.reasoning_summary_text.delta",
@@ -30791,12 +31546,12 @@ ${argumentsText}`;
       });
       return;
     }
-    if (isRecord9(update.tokenDelta)) {
+    if (isRecord10(update.tokenDelta)) {
       const tokens = positiveTokenCount(update.tokenDelta.tokens);
       if (tokens !== void 0) activeSegment.contextOutputTokens += tokens;
       return;
     }
-    if (isRecord9(update.toolCallStarted)) {
+    if (isRecord10(update.toolCallStarted)) {
       const wireCall = mcpCallFromToolUpdate(update.toolCallStarted);
       const call = wireCall ? cursorClientMcpCall(wireCall, tools) : null;
       if (call) {
@@ -30806,7 +31561,7 @@ ${argumentsText}`;
       }
       return;
     }
-    if (isRecord9(update.partialToolCall)) {
+    if (isRecord10(update.partialToolCall)) {
       const wireCall = mcpCallFromToolUpdate(update.partialToolCall);
       const call = wireCall ? cursorClientMcpCall(wireCall, tools) : null;
       if (!call) return;
@@ -30817,7 +31572,7 @@ ${argumentsText}`;
       rescheduleToolTurnFinish();
       return;
     }
-    if (isRecord9(update.toolCallCompleted)) {
+    if (isRecord10(update.toolCallCompleted)) {
       const wireCall = mcpCallFromToolUpdate(update.toolCallCompleted);
       const call = wireCall ? cursorClientMcpCall(wireCall, tools) : null;
       if (!call) return;
@@ -30830,7 +31585,7 @@ ${argumentsText}`;
       rescheduleToolTurnFinish();
       return;
     }
-    if (isRecord9(update.turnEnded)) completeRun("turn_ended");
+    if (isRecord10(update.turnEnded)) completeRun("turn_ended");
   };
   const eventsFor = (segment) => (async function* () {
     try {
@@ -31040,34 +31795,34 @@ var CURSOR_INTERACTION_QUERY_CASES = [
 ];
 var CURSOR_KV_CASES = ["getBlobArgs", "setBlobArgs"];
 function describeCursorServerFrame(frame, unknownExecFields = []) {
-  if (isRecord9(frame.interactionUpdate)) {
+  if (isRecord10(frame.interactionUpdate)) {
     return `interactionUpdate.${cursorNestedRecordCase(
       frame.interactionUpdate,
       CURSOR_INTERACTION_UPDATE_CASES
     )}`;
   }
-  if (isRecord9(frame.execServerMessage)) {
+  if (isRecord10(frame.execServerMessage)) {
     const knownCase = cursorNestedRecordCase(frame.execServerMessage, CURSOR_EXEC_CASES);
     return `execServerMessage.${knownCase === "unknown" ? cursorUnknownExecCaseName(unknownExecFields) : knownCase}`;
   }
-  if (isRecord9(frame.interactionQuery)) {
+  if (isRecord10(frame.interactionQuery)) {
     return `interactionQuery.${cursorNestedRecordCase(
       frame.interactionQuery,
       CURSOR_INTERACTION_QUERY_CASES
     )}`;
   }
-  if (isRecord9(frame.kvServerMessage)) {
+  if (isRecord10(frame.kvServerMessage)) {
     return `kvServerMessage.${cursorNestedRecordCase(frame.kvServerMessage, CURSOR_KV_CASES)}`;
   }
-  if (isRecord9(frame.conversationCheckpointUpdate)) return "conversationCheckpointUpdate";
-  if (isRecord9(frame.error)) return "error";
+  if (isRecord10(frame.conversationCheckpointUpdate)) return "conversationCheckpointUpdate";
+  if (isRecord10(frame.error)) return "error";
   return "unknown";
 }
 function isCursorHeartbeatFrame(frame) {
-  return isRecord9(frame.interactionUpdate) && isRecord9(frame.interactionUpdate.heartbeat);
+  return isRecord10(frame.interactionUpdate) && isRecord10(frame.interactionUpdate.heartbeat);
 }
 function cursorNestedRecordCase(value, cases) {
-  return cases.find((candidate) => isRecord9(value[candidate])) ?? "unknown";
+  return cases.find((candidate) => isRecord10(value[candidate])) ?? "unknown";
 }
 function positiveTokenCount(value) {
   if (typeof value !== "number" || !Number.isSafeInteger(value) || value <= 0) return void 0;
@@ -31079,8 +31834,8 @@ function cursorInteractionQueryReply(query) {
   const response = (result = {}) => ({
     interactionResponse: { id, ...result }
   });
-  if (isRecord9(query.createPlanRequestQuery)) {
-    const args = isRecord9(query.createPlanRequestQuery.args) ? query.createPlanRequestQuery.args : void 0;
+  if (isRecord10(query.createPlanRequestQuery)) {
+    const args = isRecord10(query.createPlanRequestQuery.args) ? query.createPlanRequestQuery.args : void 0;
     const name = stringValue3(args?.name)?.trim();
     const overview = stringValue3(args?.overview)?.trim();
     const plan = stringValue3(args?.plan)?.trim();
@@ -31096,7 +31851,7 @@ function cursorInteractionQueryReply(query) {
 ` } : {}
     };
   }
-  if (isRecord9(query.askQuestionInteractionQuery)) {
+  if (isRecord10(query.askQuestionInteractionQuery)) {
     return {
       message: response({
         askQuestionInteractionResponse: {
@@ -31106,7 +31861,7 @@ function cursorInteractionQueryReply(query) {
       replyKind: "interaction.askQuestion.rejected"
     };
   }
-  if (isRecord9(query.switchModeRequestQuery)) {
+  if (isRecord10(query.switchModeRequestQuery)) {
     return {
       message: response({
         switchModeRequestResponse: {
@@ -31116,19 +31871,19 @@ function cursorInteractionQueryReply(query) {
       replyKind: "interaction.switchMode.rejected"
     };
   }
-  if (isRecord9(query.webSearchRequestQuery)) {
+  if (isRecord10(query.webSearchRequestQuery)) {
     return {
       message: response({ webSearchRequestResponse: { approved: {} } }),
       replyKind: "interaction.webSearch.approved"
     };
   }
-  if (isRecord9(query.exaSearchRequestQuery)) {
+  if (isRecord10(query.exaSearchRequestQuery)) {
     return {
       message: response({ exaSearchRequestResponse: { approved: {} } }),
       replyKind: "interaction.exaSearch.approved"
     };
   }
-  if (isRecord9(query.exaFetchRequestQuery)) {
+  if (isRecord10(query.exaFetchRequestQuery)) {
     return {
       message: response({ exaFetchRequestResponse: { approved: {} } }),
       replyKind: "interaction.exaFetch.approved"
@@ -31138,7 +31893,7 @@ function cursorInteractionQueryReply(query) {
 }
 function kvReply(kv, blobs) {
   const id = kv.id ?? 0;
-  if (isRecord9(kv.getBlobArgs)) {
+  if (isRecord10(kv.getBlobArgs)) {
     const blobId = typeof kv.getBlobArgs.blobId === "string" ? kv.getBlobArgs.blobId : "";
     const blobData = blobs.get(blobId);
     return {
@@ -31150,7 +31905,7 @@ function kvReply(kv, blobs) {
       }
     };
   }
-  if (isRecord9(kv.setBlobArgs)) {
+  if (isRecord10(kv.setBlobArgs)) {
     const blobId = typeof kv.setBlobArgs.blobId === "string" ? kv.setBlobArgs.blobId : "";
     const blobData = typeof kv.setBlobArgs.blobData === "string" ? kv.setBlobArgs.blobData : "";
     if (blobId) blobs.set(blobId, blobData);
@@ -31201,7 +31956,7 @@ function repairCursorArgumentValue(value, schema) {
     return { value: String(value), count: 1 };
   }
   if (Array.isArray(value)) {
-    const itemSchema = isRecord9(schema) ? schema.items : void 0;
+    const itemSchema = isRecord10(schema) ? schema.items : void 0;
     if (itemSchema === void 0) return { value, count: 0 };
     let repairedValues;
     let count2 = 0;
@@ -31214,7 +31969,7 @@ function repairCursorArgumentValue(value, schema) {
     });
     return { value: repairedValues ?? value, count: count2 };
   }
-  if (!isRecord9(value) || !isRecord9(schema) || !isRecord9(schema.properties)) {
+  if (!isRecord10(value) || !isRecord10(schema) || !isRecord10(schema.properties)) {
     return { value, count: 0 };
   }
   let repairedValue;
@@ -31230,12 +31985,12 @@ function repairCursorArgumentValue(value, schema) {
   return { value: repairedValue ?? value, count };
 }
 function cursorSchemaRequiresString(schema) {
-  if (!isRecord9(schema)) return false;
+  if (!isRecord10(schema)) return false;
   if (schema.type === "string") return true;
   return Array.isArray(schema.type) && schema.type.includes("string") && schema.type.every((type) => type === "string" || type === "null");
 }
 function mcpCallFromToolUpdate(value) {
-  const toolCall = isRecord9(value.toolCall) ? value.toolCall : void 0;
+  const toolCall = isRecord10(value.toolCall) ? value.toolCall : void 0;
   const args = toolCall ? mcpArgsFromToolCall(toolCall) : void 0;
   if (!args) return null;
   const publicCallId = stringValue3(value.callId);
@@ -31260,7 +32015,7 @@ var CURSOR_TOOL_UPDATE_CASES = [
 function cursorToolUpdateIdentifiers(update) {
   for (const key of CURSOR_TOOL_UPDATE_CASES) {
     const value = update[key];
-    if (!isRecord9(value)) continue;
+    if (!isRecord10(value)) continue;
     const call = mcpCallFromToolUpdate(value);
     if (!call) return [];
     return [...new Set(
@@ -31270,9 +32025,9 @@ function cursorToolUpdateIdentifiers(update) {
   return void 0;
 }
 function isCursorClientToolFrame(frame, tools, redirectTools) {
-  const update = isRecord9(frame.interactionUpdate) ? frame.interactionUpdate : void 0;
+  const update = isRecord10(frame.interactionUpdate) ? frame.interactionUpdate : void 0;
   if (update !== void 0) return cursorToolUpdateIdentifiers(update) !== void 0;
-  const exec2 = isRecord9(frame.execServerMessage) ? frame.execServerMessage : void 0;
+  const exec2 = isRecord10(frame.execServerMessage) ? frame.execServerMessage : void 0;
   if (exec2 === void 0) return false;
   const wireCall = mcpCallFromExecMessage(exec2);
   const call = wireCall ? cursorClientMcpCall(wireCall, tools) : null;
@@ -31288,16 +32043,16 @@ function isCursorClientToolFrame(frame, tools, redirectTools) {
   ) !== null;
 }
 function isCursorParkedResidueFrame(frame, parked) {
-  const update = isRecord9(frame.interactionUpdate) ? frame.interactionUpdate : void 0;
+  const update = isRecord10(frame.interactionUpdate) ? frame.interactionUpdate : void 0;
   if (update === void 0) return false;
-  if (isRecord9(update.tokenDelta)) return true;
+  if (isRecord10(update.tokenDelta)) return true;
   const identifiers = cursorToolUpdateIdentifiers(update);
   if (identifiers === void 0 || identifiers.length === 0 || parked === void 0) return false;
   const sealed = new Set(parked.flatMap((call) => [call.callId, call.toolCallId]));
   return identifiers.some((identifier) => sealed.has(identifier));
 }
 function mcpCallFromExecMessage(value) {
-  const args = isRecord9(value.mcpArgs) ? value.mcpArgs : void 0;
+  const args = isRecord10(value.mcpArgs) ? value.mcpArgs : void 0;
   if (!args) return null;
   const toolCallId = stringValue3(args.toolCallId);
   if (!toolCallId) return null;
@@ -31315,14 +32070,14 @@ function mcpCallFromExecMessage(value) {
   };
 }
 function mcpArgsFromToolCall(toolCall) {
-  const direct = isRecord9(toolCall.mcpToolCall) ? toolCall.mcpToolCall : void 0;
-  if (direct && isRecord9(direct.args)) return direct.args;
-  const tool = isRecord9(toolCall.tool) ? toolCall.tool : void 0;
-  const nested = tool && isRecord9(tool.mcpToolCall) ? tool.mcpToolCall : void 0;
-  return nested && isRecord9(nested.args) ? nested.args : void 0;
+  const direct = isRecord10(toolCall.mcpToolCall) ? toolCall.mcpToolCall : void 0;
+  if (direct && isRecord10(direct.args)) return direct.args;
+  const tool = isRecord10(toolCall.tool) ? toolCall.tool : void 0;
+  const nested = tool && isRecord10(tool.mcpToolCall) ? tool.mcpToolCall : void 0;
+  return nested && isRecord10(nested.args) ? nested.args : void 0;
 }
 function cursorMcpArguments(args) {
-  if (!isRecord9(args.args) || Object.keys(args.args).length === 0) return {};
+  if (!isRecord10(args.args) || Object.keys(args.args).length === 0) return {};
   const decoded = {};
   for (const [name, value] of Object.entries(args.args)) {
     if (typeof value !== "string") {
@@ -31397,7 +32152,7 @@ function cursorError(value) {
     message: typeof value.message === "string" ? value.message : "Cursor request failed"
   };
 }
-function isRecord9(value) {
+function isRecord10(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var DEFAULT_CURSOR_DIAGNOSTIC_MAX_BYTES = 4 * 1024 * 1024;
@@ -31431,7 +32186,7 @@ var CURSOR_DIAGNOSTIC_EVENTS = /* @__PURE__ */ new Set([
   "turn.finish"
 ]);
 function createCursorDiagnosticLog(dir, options = {}) {
-  const logPath = path23__default.join(dir, CURSOR_DIAGNOSTIC_FILE);
+  const logPath = path24__default.join(dir, CURSOR_DIAGNOSTIC_FILE);
   const backupPath = `${logPath}.1`;
   const maxBytes = positiveInteger2(options.maxBytes) ?? DEFAULT_CURSOR_DIAGNOSTIC_MAX_BYTES;
   let initialized = false;
@@ -31489,43 +32244,43 @@ function createCursorDiagnosticLog(dir, options = {}) {
 }
 function serializeCursorDiagnosticEvent(event) {
   if (!CURSOR_DIAGNOSTIC_EVENTS.has(event.event)) return null;
-  const record32 = {
+  const record42 = {
     timestamp: safeString(event.timestamp, 40),
     runId: safeString(event.runId, 64),
     event: event.event,
     elapsedMs: safeNumber(event.elapsedMs)
   };
-  addString(record32, "model", event.model, 128);
-  addString(record32, "wireModel", event.wireModel, 128);
-  addString(record32, "previousWireModel", event.previousWireModel, 128);
+  addString(record42, "model", event.model, 128);
+  addString(record42, "wireModel", event.wireModel, 128);
+  addString(record42, "previousWireModel", event.previousWireModel, 128);
   if (event.requestedEffort && CURSOR_DIAGNOSTIC_EFFORTS.has(event.requestedEffort)) {
-    record32.requestedEffort = event.requestedEffort;
-  }
-  if (event.turn === "prompt" || event.turn === "tool-continuation") record32.turn = event.turn;
-  addNumber(record32, "status", event.status);
-  addString(record32, "frame", event.frame, 128);
-  addString(record32, "reply", event.reply, 128);
-  addNumber(record32, "sequence", event.sequence);
-  addNumber(record32, "count", event.count);
-  addNumber(record32, "frameCount", event.frameCount);
-  addString(record32, "lastFrame", event.lastFrame, 128);
-  addNumber(record32, "toolCount", event.toolCount);
-  addNumber(record32, "argumentRepairCount", event.argumentRepairCount);
-  addNumber(record32, "estimatedInputTokens", event.estimatedInputTokens);
-  addNumber(record32, "contextTokens", event.contextTokens);
-  addNumber(record32, "contextWindow", event.contextWindow);
-  addString(record32, "outcome", event.outcome, 128);
-  addNumber(record32, "operationSequence", event.operationSequence);
-  addString(record32, "adapter", event.adapter, 32);
-  addString(record32, "error", event.error, 128);
-  return `${JSON.stringify(record32)}
+    record42.requestedEffort = event.requestedEffort;
+  }
+  if (event.turn === "prompt" || event.turn === "tool-continuation") record42.turn = event.turn;
+  addNumber(record42, "status", event.status);
+  addString(record42, "frame", event.frame, 128);
+  addString(record42, "reply", event.reply, 128);
+  addNumber(record42, "sequence", event.sequence);
+  addNumber(record42, "count", event.count);
+  addNumber(record42, "frameCount", event.frameCount);
+  addString(record42, "lastFrame", event.lastFrame, 128);
+  addNumber(record42, "toolCount", event.toolCount);
+  addNumber(record42, "argumentRepairCount", event.argumentRepairCount);
+  addNumber(record42, "estimatedInputTokens", event.estimatedInputTokens);
+  addNumber(record42, "contextTokens", event.contextTokens);
+  addNumber(record42, "contextWindow", event.contextWindow);
+  addString(record42, "outcome", event.outcome, 128);
+  addNumber(record42, "operationSequence", event.operationSequence);
+  addString(record42, "adapter", event.adapter, 32);
+  addString(record42, "error", event.error, 128);
+  return `${JSON.stringify(record42)}
 `;
 }
-function addString(record32, key, value, maxLength) {
-  if (value !== void 0) record32[key] = safeString(value, maxLength);
+function addString(record42, key, value, maxLength) {
+  if (value !== void 0) record42[key] = safeString(value, maxLength);
 }
-function addNumber(record32, key, value) {
-  if (value !== void 0) record32[key] = safeNumber(value);
+function addNumber(record42, key, value) {
+  if (value !== void 0) record42[key] = safeNumber(value);
 }
 function safeString(value, maxLength) {
   return value.replace(/[\r\n\t]/g, " ").slice(0, maxLength);
@@ -31575,8 +32330,8 @@ function kimiAnthropicHeaders(requestHeaders, apiKey) {
   return headers;
 }
 function normalizeAiGatewaySettings(value) {
-  if (!isRecord10(value) || value.version !== 1) return { version: 1 };
-  const models = Array.isArray(value.models) ? value.models.filter((entry) => isRecord10(entry) && typeof entry.id === "string" && entry.id.length > 0).flatMap((entry) => {
+  if (!isRecord11(value) || value.version !== 1) return { version: 1 };
+  const models = Array.isArray(value.models) ? value.models.filter((entry) => isRecord11(entry) && typeof entry.id === "string" && entry.id.length > 0).flatMap((entry) => {
     const model = findGatewayModel(entry.id);
     if (!model) return [];
     const efforts = Array.isArray(entry.efforts) ? entry.efforts.filter((level) => typeof level === "string" && level.length > 0) : [];
@@ -31610,7 +32365,7 @@ function sanitizeProviderPriority(value) {
   }
   return cleaned.length > 0 ? cleaned : void 0;
 }
-function isRecord10(value) {
+function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function resolveAiGatewaySelection(settings2) {
@@ -31756,6 +32511,10 @@ async function readCursorSubscriptionToken() {
   const credentials = await resolveCursorCredentials(defaultCredentialDeps);
   return credentials?.accessToken ?? null;
 }
+async function readXaiSubscriptionToken() {
+  const credentials = await resolveXaiCliCredentials(defaultCredentialDeps);
+  return credentials?.accessToken ?? null;
+}
 async function readCodexSubscriptionAuth() {
   const credentials = await resolveCodexCredentials(defaultCredentialDeps);
   if (!credentials?.accountId) return null;
@@ -31853,6 +32612,10 @@ function createAiGatewayRouter(deps) {
       for (const skill of pruned.withheld) withheldSkills.add(skill.name);
       if (pruned.changed) body2 = { ...body2, messages: [...pruned.messages] };
     }
+    if (target2 && target2.provider !== "kimi") {
+      const omitted = omitClaudeWebSearchTools(body2);
+      if (omitted.changed) body2 = omitted.request;
+    }
     let credential = "";
     let chatgptAccountId = "";
     if (target2?.provider === "cursor") {
@@ -31884,6 +32647,13 @@ function createAiGatewayRouter(deps) {
         return true;
       }
       credential = opencodeApiKey;
+    } else if (target2?.provider === "xai") {
+      const xaiToken = await deps.readXaiToken?.();
+      if (!xaiToken) {
+        writeAnthropicError(res, 401, "authentication_error", "No active Grok CLI sign-in was found. Run `grok login` first.");
+        return true;
+      }
+      credential = xaiToken;
     }
     const controller = new AbortController();
     const abort = () => controller.abort(new Error("client disconnected"));
@@ -31920,7 +32690,7 @@ function createAiGatewayRouter(deps) {
         );
         return true;
       }
-      const gateway = deps.gateway ?? (target2.provider === "cursor" ? ownedCursorGateway : target2.provider === "opencode" ? createOpencodeGateway(opencodeGoWire(target2)) : createGatewayFor(target2, chatgptAccountId, deps.originator));
+      const gateway = deps.gateway ?? (target2.provider === "cursor" ? ownedCursorGateway : target2.provider === "opencode" ? createOpencodeGateway(opencodeGoWire(target2)) : target2.provider === "xai" ? new AnthropicMessagesGateway(new XaiResponsesAdapter({ fetch: fetchImpl })) : createGatewayFor(target2, chatgptAccountId, deps.originator));
       const diagnosticsEnabled = target2.provider === "cursor" ? cursorDiagnosticsEnabled() : void 0;
       const modelContextWindow = typeof target2.contextWindow === "number" && Number.isFinite(target2.contextWindow) && target2.contextWindow > 0 ? target2.contextWindow : void 0;
       const upstream = await gateway.stream(body2, {
@@ -32026,11 +32796,11 @@ var LOCK_OWNER_FILE_NAME2 = "owner";
 var TEMP_FILE_PREFIX2 = `${AI_GATEWAY_SETTINGS_FILE_NAME}.`;
 function createAiGatewaySettingsStore(deps = {}) {
   const dataDir = deps.dataDir ?? getFleetDataDir();
-  const settingsPath = path23.join(dataDir, AI_GATEWAY_SETTINGS_FILE_NAME);
-  const legacyPath = deps.legacyDir === void 0 ? void 0 : path23.join(deps.legacyDir, AI_GATEWAY_SETTINGS_FILE_NAME);
+  const settingsPath = path24.join(dataDir, AI_GATEWAY_SETTINGS_FILE_NAME);
+  const legacyPath = deps.legacyDir === void 0 ? void 0 : path24.join(deps.legacyDir, AI_GATEWAY_SETTINGS_FILE_NAME);
   const store = createDurableJsonStore({
     filePath: settingsPath,
-    lockDir: path23.join(dataDir, LOCK_DIR_NAME2),
+    lockDir: path24.join(dataDir, LOCK_DIR_NAME2),
     lockOwnerFileName: LOCK_OWNER_FILE_NAME2,
     sanitize: (value) => normalizeAiGatewaySettings(value),
     sensitivity: "sensitive",
@@ -32360,9 +33130,14 @@ var FLEET_MCP_SERVER_NAME = "fleet";
 function isHostSessionToolAllowed(_toolId, _doctrine) {
   return true;
 }
-
-// ../../packages/fleet-admiral/src/agent-cli/prompt.ts
 var CMD_UNSAFE_PROMPT_PATTERN = /["&<>()@^|%]/;
+var LAUNCH_PROMPT_FILE_MODE = 384;
+var LAUNCH_PROMPT_TEMP_DIR_PREFIX = "fleet-quick-launch-";
+var LAUNCH_PROMPT_FILE_NAME = "prompt.md";
+var LAUNCH_PROMPT_FILE_INSTRUCTION_PREFIX = "Read and follow the launch prompt file: ";
+function launchPromptHasCmdUnsafeChars(prompt) {
+  return CMD_UNSAFE_PROMPT_PATTERN.test(prompt);
+}
 var WINDOWS_CMD_SHIM_COMMAND_LINE_MAX_CHARS = 8191;
 var WINDOWS_CREATE_PROCESS_COMMAND_LINE_MAX_CHARS = 32767;
 var LaunchPromptError = class extends Error {
@@ -32426,6 +33201,12 @@ function assertLaunchCommandLineBudget(options) {
       `The launch command line is ${withoutPrompt} characters before any launch prompt, over the ${limit.maxChars}-character Windows ${boundary} limit. Shortening the prompt cannot help; reduce the launch configuration instead.`
     );
   }
+  if (options.promptIsFixedLength === true) {
+    throw new LaunchPromptError(
+      "launch_command_line_too_long",
+      `The launch command line is ${total} characters, over the ${limit.maxChars}-character Windows ${boundary} limit even after moving the launch prompt into a file. Shortening the prompt cannot help; reduce the launch configuration instead.`
+    );
+  }
   const shortenByChars = total - limit.maxChars;
   throw new LaunchPromptError(
     "prompt_command_line_too_long",
@@ -32439,6 +33220,57 @@ function sanitizeLaunchPrompt(value) {
   const trimmed = normalized.trim();
   return trimmed.length === 0 ? void 0 : trimmed;
 }
+function formatLaunchPromptFileInstruction(filePath) {
+  return `${LAUNCH_PROMPT_FILE_INSTRUCTION_PREFIX}${filePath}`;
+}
+function writeLaunchPromptPointer(body2, onCleanup, cmdWrapped) {
+  const written = writeLaunchPromptFile(body2, onCleanup);
+  try {
+    assertLaunchPromptShimSafe(written.instruction, cmdWrapped ? ["cmd-shim"] : []);
+  } catch (error51) {
+    written.cleanup();
+    if (error51 instanceof LaunchPromptError && error51.code === "prompt_unsafe_for_shim") {
+      throw new LaunchPromptError(
+        "prompt_unsafe_for_shim",
+        'The launch prompt file path contains a character cmd.exe would reinterpret (" & < > ( ) @ ^ | %) while running the Windows shim. Fleet cannot start this launch from the current Windows temp directory.'
+      );
+    }
+    throw error51;
+  }
+  return written.instruction;
+}
+function writeLaunchPromptFile(body2, onCleanup) {
+  const tempRoot = path24__default.resolve(os3__default.tmpdir());
+  mkdirSync(tempRoot, { recursive: true });
+  const tempDir = mkdtempSync(path24__default.join(tempRoot, LAUNCH_PROMPT_TEMP_DIR_PREFIX));
+  const cleanup = () => rmBestEffort(tempDir);
+  try {
+    const filePath = path24__default.join(tempDir, LAUNCH_PROMPT_FILE_NAME);
+    writeFileSync(filePath, body2, { encoding: "utf8", flag: "wx", mode: LAUNCH_PROMPT_FILE_MODE });
+    chmodBestEffort(filePath, LAUNCH_PROMPT_FILE_MODE);
+    onCleanup(cleanup);
+    return {
+      cleanup,
+      filePath,
+      instruction: formatLaunchPromptFileInstruction(filePath)
+    };
+  } catch (error51) {
+    cleanup();
+    throw error51;
+  }
+}
+function chmodBestEffort(targetPath, mode) {
+  try {
+    chmodSync(targetPath, mode);
+  } catch {
+  }
+}
+function rmBestEffort(targetPath) {
+  try {
+    rmSync(targetPath, { force: true, recursive: true });
+  } catch {
+  }
+}
 
 // ../../packages/fleet-admiral/src/ai-gateway/auth.ts
 async function validateKimiAuthKey(apiKey) {
@@ -32495,9 +33327,9 @@ function prepareAiGatewayLaunchProfile(profile, options) {
   return { ...profile, env };
 }
 function writeClaudeGatewayModelCache(baseUrl, env, homeDir, exposedModels = GATEWAY_MODELS) {
-  const configDir = env.CLAUDE_CONFIG_DIR && env.CLAUDE_CONFIG_DIR.length > 0 ? env.CLAUDE_CONFIG_DIR : path23__default.join(homeDir, ".claude");
-  const cacheDir = path23__default.join(configDir, "cache");
-  const cachePath = path23__default.join(cacheDir, "gateway-models.json");
+  const configDir = env.CLAUDE_CONFIG_DIR && env.CLAUDE_CONFIG_DIR.length > 0 ? env.CLAUDE_CONFIG_DIR : path24__default.join(homeDir, ".claude");
+  const cacheDir = path24__default.join(configDir, "cache");
+  const cachePath = path24__default.join(cacheDir, "gateway-models.json");
   const models = buildAnthropicModelList(exposedModels).data.filter((model) => /^(claude|anthropic)/i.test(model.id)).map((model) => ({ id: model.id, display_name: model.display_name }));
   fs9__default.mkdirSync(cacheDir, { recursive: true, mode: 448 });
   writeAtomicSync(cachePath, JSON.stringify({ baseUrl, fetchedAt: Date.now(), models }), { mode: 384 });
@@ -32786,7 +33618,7 @@ async function resolveLoadout(deps) {
 }
 
 // ../../packages/fleet-admiral/src/ai-gateway/quota-snapshot.ts
-function record3(value) {
+function record4(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
 var AMOUNT_PATTERN = /^\d{1,15}$/;
@@ -32794,7 +33626,7 @@ var MAX_WINDOW_DURATION_MS2 = 400 * 24 * 36e5;
 var DURATION_BASES = /* @__PURE__ */ new Set(["upstream", "catalog"]);
 var START_BASES = /* @__PURE__ */ new Set(["upstream", "derived"]);
 function toWindowPeriod(value) {
-  const period = record3(value);
+  const period = record4(value);
   if (!period) return void 0;
   const durationMs = period.durationMs;
   const durationBasis = period.durationBasis;
@@ -32811,7 +33643,7 @@ function toWindowPeriod(value) {
   };
 }
 function toWindowAmounts(value) {
-  const amounts = record3(value);
+  const amounts = record4(value);
   if (!amounts) return void 0;
   const used = amounts.used;
   const limit = amounts.limit;
@@ -32820,14 +33652,14 @@ function toWindowAmounts(value) {
   return { used, limit };
 }
 function parseGatewayQuotaSnapshot(value) {
-  const providers = record3(record3(value)?.providers);
+  const providers = record4(record4(value)?.providers);
   if (!providers) return void 0;
   const snapshot = {};
   for (const [id, value2] of Object.entries(providers)) {
-    const provider = record3(value2);
+    const provider = record4(value2);
     if (!provider || typeof provider.status !== "string") continue;
     const windows = Array.isArray(provider.windows) ? provider.windows.flatMap((entry) => {
-      const window = record3(entry);
+      const window = record4(entry);
       if (!window || typeof window.id !== "string" || typeof window.usedPercent !== "number") return [];
       const period = toWindowPeriod(window.period);
       const amounts = toWindowAmounts(window.amounts);
@@ -32860,7 +33692,6 @@ function createClaudeFamilyCliDefinition(options) {
     async createProfile(profileOptions) {
       const { bin, prefixArgs } = resolveBinary("claude", "CLAUDE_BIN", profileOptions.env);
       const launchPrompt = sanitizeLaunchPrompt(profileOptions.prompt);
-      assertLaunchPromptShimSafe(launchPrompt, prefixArgs);
       const commandLineLimit = resolveLaunchCommandLineLimit(prefixArgs);
       const childEnv = createChildEnv(profileOptions.env, {});
       return {
@@ -33026,9 +33857,9 @@ function writePrivateJson(filePath, value, rootBase) {
 function writePrivateFile(filePath, content, rootBase) {
   const resolvedBase = ensureRootBase(rootBase);
   ensurePathWithinRoot(resolvedBase, filePath);
-  ensureDirectorySegments(resolvedBase, path23__default.dirname(filePath));
+  ensureDirectorySegments(resolvedBase, path24__default.dirname(filePath));
   writeFileNoFollow(filePath, content);
-  chmodBestEffort(filePath, FILE_MODE);
+  chmodBestEffort2(filePath, FILE_MODE);
 }
 function removePrivatePath(targetPath, rootBase) {
   const resolvedBase = assertRootBaseSafe(rootBase);
@@ -33056,7 +33887,7 @@ function cleanupPrivateRoot(rootPath, rootBase) {
     throw error51;
   }
 }
-function chmodBestEffort(targetPath, mode) {
+function chmodBestEffort2(targetPath, mode) {
   try {
     chmodSync(targetPath, mode);
   } catch (_error) {
@@ -33073,20 +33904,20 @@ function writeFileNoFollow(filePath, content) {
   }
 }
 function ensureRootBase(rootBase) {
-  const resolvedBase = path23__default.resolve(rootBase);
-  const anchor = findExistingDirectoryAnchor(path23__default.dirname(resolvedBase));
+  const resolvedBase = path24__default.resolve(rootBase);
+  const anchor = findExistingDirectoryAnchor(path24__default.dirname(resolvedBase));
   ensureDirectorySegments(anchor, resolvedBase);
   assertDirectorySafe(resolvedBase, "Plugin root base");
   return resolvedBase;
 }
 function assertRootBaseSafe(rootBase) {
-  const resolvedBase = path23__default.resolve(rootBase);
-  assertExistingSegmentsSafe(findExistingDirectoryAnchor(path23__default.dirname(resolvedBase)), resolvedBase);
+  const resolvedBase = path24__default.resolve(rootBase);
+  assertExistingSegmentsSafe(findExistingDirectoryAnchor(path24__default.dirname(resolvedBase)), resolvedBase);
   assertDirectorySafe(resolvedBase, "Plugin root base");
   return resolvedBase;
 }
 function findExistingDirectoryAnchor(targetPath) {
-  const resolvedTarget = path23__default.resolve(targetPath);
+  const resolvedTarget = path24__default.resolve(targetPath);
   let current = resolvedTarget;
   while (true) {
     try {
@@ -33094,7 +33925,7 @@ function findExistingDirectoryAnchor(targetPath) {
       return current;
     } catch (error51) {
       if (error51 instanceof Error && "code" in error51 && error51.code === "ENOENT") {
-        const parent = path23__default.dirname(current);
+        const parent = path24__default.dirname(current);
         if (parent === current) throw error51;
         current = parent;
         continue;
@@ -33113,17 +33944,17 @@ function assertDirectorySafe(dirPath, label) {
   }
 }
 function ensurePathWithinRoot(resolvedBase, candidatePath) {
-  const resolvedCandidate = path23__default.resolve(candidatePath);
-  const relative = path23__default.relative(resolvedBase, resolvedCandidate);
-  if (relative === "" || !relative.startsWith("..") && !path23__default.isAbsolute(relative)) return;
+  const resolvedCandidate = path24__default.resolve(candidatePath);
+  const relative = path24__default.relative(resolvedBase, resolvedCandidate);
+  if (relative === "" || !relative.startsWith("..") && !path24__default.isAbsolute(relative)) return;
   throw new Error(`Plugin path escapes root base: ${candidatePath}`);
 }
 function ensureDirectorySegments(resolvedBase, dirPath) {
-  const target2 = path23__default.resolve(dirPath);
-  const relative = path23__default.relative(resolvedBase, target2);
+  const target2 = path24__default.resolve(dirPath);
+  const relative = path24__default.relative(resolvedBase, target2);
   let current = resolvedBase;
-  for (const segment of relative.split(path23__default.sep).filter(Boolean)) {
-    current = path23__default.join(current, segment);
+  for (const segment of relative.split(path24__default.sep).filter(Boolean)) {
+    current = path24__default.join(current, segment);
     try {
       const stat5 = lstatSync(current);
       if (stat5.isSymbolicLink()) {
@@ -33135,7 +33966,7 @@ function ensureDirectorySegments(resolvedBase, dirPath) {
     } catch (error51) {
       if (error51 instanceof Error && "code" in error51 && error51.code === "ENOENT") {
         mkdirSync(current, { mode: DIR_MODE });
-        chmodBestEffort(current, DIR_MODE);
+        chmodBestEffort2(current, DIR_MODE);
       } else {
         throw error51;
       }
@@ -33144,11 +33975,11 @@ function ensureDirectorySegments(resolvedBase, dirPath) {
   }
 }
 function assertExistingSegmentsSafe(resolvedBase, targetPath) {
-  const target2 = path23__default.resolve(targetPath);
-  const relative = path23__default.relative(resolvedBase, target2);
+  const target2 = path24__default.resolve(targetPath);
+  const relative = path24__default.relative(resolvedBase, target2);
   let current = resolvedBase;
-  for (const segment of relative.split(path23__default.sep).filter(Boolean)) {
-    current = path23__default.join(current, segment);
+  for (const segment of relative.split(path24__default.sep).filter(Boolean)) {
+    current = path24__default.join(current, segment);
     const stat5 = lstatSync(current);
     if (stat5.isSymbolicLink()) {
       throw new Error(`Plugin path segment is a symlink: ${current}`);
@@ -33160,13 +33991,13 @@ function assertExistingSegmentsSafe(resolvedBase, targetPath) {
   }
 }
 function assertExistingParentSegmentsSafe(resolvedBase, targetPath) {
-  assertExistingSegmentsSafe(resolvedBase, path23__default.dirname(targetPath));
+  assertExistingSegmentsSafe(resolvedBase, path24__default.dirname(targetPath));
 }
 function assertSegmentRealpathWithinRoot(resolvedBase, segmentPath) {
   const baseRealpath = realpathSync(resolvedBase);
   const segmentRealpath = realpathSync(segmentPath);
-  const relative = path23__default.relative(baseRealpath, segmentRealpath);
-  if (relative === "" || !relative.startsWith("..") && !path23__default.isAbsolute(relative)) return;
+  const relative = path24__default.relative(baseRealpath, segmentRealpath);
+  if (relative === "" || !relative.startsWith("..") && !path24__default.isAbsolute(relative)) return;
   throw new Error(`Plugin path segment escapes root base: ${segmentPath}`);
 }
 
@@ -33186,18 +34017,18 @@ function renderAssetPluginRoot(pluginRoot, bundle, options) {
   options.doctrine ?? resolveDoctrineFromCliId(options.cliId);
   renderEmbeddedSkillAssets(pluginRoot);
   const workflowGuardScriptPath = writeWorkflowGuardScript(pluginRoot);
-  writePrivateJson(path23__default.join(pluginRoot, "hooks", "hooks.json"), claudeHooks(options, workflowGuardScriptPath), pluginRoot);
+  writePrivateJson(path24__default.join(pluginRoot, "hooks", "hooks.json"), claudeHooks(options, workflowGuardScriptPath), pluginRoot);
   renderGatewayAgentAssets(pluginRoot, options);
 }
 function renderGatewayAgentAssets(pluginRoot, options) {
   for (const file2 of buildGatewayAgentFiles(options.gatewayDelegationModels ?? [], options.gatewayEffortExposure)) {
-    writePrivateFile(path23__default.join(pluginRoot, "agents", file2.fileName), file2.content, pluginRoot);
+    writePrivateFile(path24__default.join(pluginRoot, "agents", file2.fileName), file2.content, pluginRoot);
   }
 }
 function writeWorkflowGuardScript(pluginRoot) {
   const asset = EMBEDDED_AGENT_CLI_HOOK_ASSETS.find((entry) => entry.relativePath === "workflow-guard.mjs");
   if (!asset) throw new Error("Missing embedded workflow-guard hook asset");
-  const scriptPath = path23__default.join(pluginRoot, "hooks", "workflow-guard.mjs");
+  const scriptPath = path24__default.join(pluginRoot, "hooks", "workflow-guard.mjs");
   writePrivateFile(scriptPath, asset.content, pluginRoot);
   return scriptPath;
 }
@@ -33256,7 +34087,7 @@ function claudeCommandHook(hookExec) {
 }
 function renderEmbeddedSkillAssets(pluginRoot, doctrine) {
   for (const asset of selectSkillAssetsForDoctrine()) {
-    writePrivateFile(path23__default.join(pluginRoot, "skills", asset.relativePath), asset.content, pluginRoot);
+    writePrivateFile(path24__default.join(pluginRoot, "skills", asset.relativePath), asset.content, pluginRoot);
   }
 }
 function selectSkillAssetsForDoctrine(_doctrine) {
@@ -33333,7 +34164,7 @@ function resolveRenderablePluginBundles(fleetRoot, options) {
 function homeMarketplaceTarget(fleetRoot) {
   return {
     name: FLEET_MARKETPLACE_NAME,
-    root: path23__default.join(fleetRoot, MARKETPLACE_DIR_NAME)
+    root: path24__default.join(fleetRoot, MARKETPLACE_DIR_NAME)
   };
 }
 function groupRenderableBundlesByMarketplace(bundles) {
@@ -33349,17 +34180,17 @@ function groupRenderableBundlesByMarketplace(bundles) {
   return groups;
 }
 function renderPluginRoot(pluginRoot, bundle, options) {
-  const parentRoot = path23__default.dirname(pluginRoot);
+  const parentRoot = path24__default.dirname(pluginRoot);
   ensurePrivateDir(parentRoot, parentRoot);
   const stageParent = createStagingDir(parentRoot);
-  const stagedPluginRoot = path23__default.join(stageParent, path23__default.basename(pluginRoot));
+  const stagedPluginRoot = path24__default.join(stageParent, path24__default.basename(pluginRoot));
   try {
     ensurePrivateDir(stagedPluginRoot, stagedPluginRoot);
-    writePrivateJson(path23__default.join(stagedPluginRoot, ".claude-plugin", "plugin.json"), claudeManifest(bundle), stagedPluginRoot);
+    writePrivateJson(path24__default.join(stagedPluginRoot, ".claude-plugin", "plugin.json"), claudeManifest(bundle), stagedPluginRoot);
     switch (bundle.source) {
       case "asset":
-        ensurePrivateDir(path23__default.join(stagedPluginRoot, "agents"), stagedPluginRoot);
-        ensurePrivateDir(path23__default.join(stagedPluginRoot, "skills"), stagedPluginRoot);
+        ensurePrivateDir(path24__default.join(stagedPluginRoot, "agents"), stagedPluginRoot);
+        ensurePrivateDir(path24__default.join(stagedPluginRoot, "skills"), stagedPluginRoot);
         renderAssetPluginRoot(stagedPluginRoot, bundle, options);
         break;
     }
@@ -33374,11 +34205,11 @@ function renderMarketplaceRoot(target2, bundles) {
   ensurePrivateDir(marketplaceRoot, marketplaceRoot);
   const stagedRoot = createStagingDir(marketplaceRoot);
   try {
-    writePrivateJson(path23__default.join(stagedRoot, ".claude-plugin", "marketplace.json"), claudeMarketplace(target2, bundles), stagedRoot);
+    writePrivateJson(path24__default.join(stagedRoot, ".claude-plugin", "marketplace.json"), claudeMarketplace(target2, bundles), stagedRoot);
     pruneMarketplaceRoot(target2);
     pruneStalePluginDirs(target2, bundles);
     for (const entry of readdirSync(stagedRoot)) {
-      renameSync(path23__default.join(stagedRoot, entry), path23__default.join(marketplaceRoot, entry));
+      renameSync(path24__default.join(stagedRoot, entry), path24__default.join(marketplaceRoot, entry));
     }
   } finally {
     cleanupPrivateRoot(stagedRoot, marketplaceRoot);
@@ -33386,11 +34217,11 @@ function renderMarketplaceRoot(target2, bundles) {
 }
 function pruneMarketplaceRoot(target2) {
   for (const entry of MARKETPLACE_PRUNE_ENTRIES) {
-    removePrivatePath(path23__default.join(target2.root, entry), target2.root);
+    removePrivatePath(path24__default.join(target2.root, entry), target2.root);
   }
 }
 function pruneStalePluginDirs(target2, bundles) {
-  const pluginsDir = path23__default.join(target2.root, PLUGIN_BUNDLES_DIR_NAME);
+  const pluginsDir = path24__default.join(target2.root, PLUGIN_BUNDLES_DIR_NAME);
   if (!existsSync(pluginsDir)) return;
   const activeDirectoryNames = /* @__PURE__ */ new Set();
   for (const bundle of bundles) {
@@ -33404,11 +34235,11 @@ function pruneStalePluginDirs(target2, bundles) {
   }
   for (const entry of readdirSync(pluginsDir)) {
     if (activeDirectoryNames.has(entry)) continue;
-    removePrivatePath(path23__default.join(pluginsDir, entry), target2.root);
+    removePrivatePath(path24__default.join(pluginsDir, entry), target2.root);
   }
 }
 function createStagingDir(rootPath) {
-  const stageRoot = mkdtempSync(path23__default.join(rootPath, `.fleet-stage-${process.pid}-${Date.now()}-`));
+  const stageRoot = mkdtempSync(path24__default.join(rootPath, `.fleet-stage-${process.pid}-${Date.now()}-`));
   return stageRoot;
 }
 function claudeMarketplace(target2, bundles) {
@@ -33430,7 +34261,7 @@ function claudeMarketplace(target2, bundles) {
   };
 }
 function pluginRootForTarget(target2, bundle) {
-  return path23__default.join(target2.root, PLUGIN_BUNDLES_DIR_NAME, bundle.directoryName);
+  return path24__default.join(target2.root, PLUGIN_BUNDLES_DIR_NAME, bundle.directoryName);
 }
 function marketplacePluginPath(target2, bundle) {
   return `./${PLUGIN_BUNDLES_DIR_NAME}/${bundle.directoryName}`;
@@ -33461,6 +34292,22 @@ async function injectAgentCliProfile(profile, options) {
   const tempCleanups = [];
   try {
     const systemPromptFile = systemPromptMode === "off" ? void 0 : writeSystemPromptFile(profile.id, options.buildSystemPrompt(), (cleanup2) => tempCleanups.push(cleanup2));
+    let promptArgs = [...profile.promptArgs ?? []];
+    let deliveredViaFile = false;
+    const cmdWrapped = profile.commandLineLimit?.via === "cmd-shim";
+    const windowsLaunch = profile.commandLineLimit !== void 0;
+    const convertPromptToFile = (body2) => {
+      promptArgs = [writeLaunchPromptPointer(
+        body2,
+        (cleanupFn) => tempCleanups.push(cleanupFn),
+        cmdWrapped
+      )];
+      deliveredViaFile = true;
+    };
+    if (promptArgs.length > 0 && windowsLaunch) {
+      const body2 = takeLaunchPromptBody(promptArgs);
+      if (launchPromptHasCmdUnsafeChars(body2)) convertPromptToFile(body2);
+    }
     const plugin = await createAgentCliPlugin({
       cliId: profile.id,
       doctrine,
@@ -33497,26 +34344,39 @@ async function injectAgentCliProfile(profile, options) {
       systemPromptFile
     };
     const injectedArgs = buildAgentCliArgs(capability2.builderId, context);
-    const mergedArgs = mergeAgentCliArgs(profile, capability2.builderId, context, injectedArgs);
+    const mergeArgs = (nextPromptArgs) => mergeAgentCliArgs(
+      { ...profile, promptArgs: nextPromptArgs },
+      capability2.builderId,
+      context,
+      injectedArgs
+    );
+    const argsWithoutPrompt = mergeArgs([]);
+    const checkBudget = () => assertLaunchCommandLineBudget({
+      args: mergeArgs(promptArgs),
+      argsWithoutPrompt,
+      bin: profile.bin,
+      limit: profile.commandLineLimit,
+      promptIsFixedLength: deliveredViaFile
+    });
     try {
-      assertLaunchCommandLineBudget({
-        args: mergedArgs,
-        argsWithoutPrompt: mergeAgentCliArgs(
-          { ...profile, promptArgs: [] },
-          capability2.builderId,
-          context,
-          injectedArgs
-        ),
-        bin: profile.bin,
-        limit: profile.commandLineLimit
-      });
+      checkBudget();
     } catch (error51) {
-      cleanup();
-      throw error51;
+      const canMoveToFile = !deliveredViaFile && windowsLaunch && promptArgs.length === 1 && error51 instanceof LaunchPromptError && error51.code === "prompt_command_line_too_long";
+      if (!canMoveToFile) {
+        cleanup();
+        throw error51;
+      }
+      convertPromptToFile(takeLaunchPromptBody(promptArgs));
+      try {
+        checkBudget();
+      } catch (retryError) {
+        cleanup();
+        throw retryError;
+      }
     }
     return {
       ...profile,
-      args: mergedArgs,
+      args: mergeArgs(promptArgs),
       // 위치 인자는 이미 args 끝에 합쳐졌으므로 비운다. 남겨 두면 하류가 한 번 더 붙일 수 있다.
       promptArgs: [],
       cleanup
@@ -33542,21 +34402,27 @@ function buildAgentCliMcpServerConfigs(endpoints, tokens) {
     };
   });
 }
+function takeLaunchPromptBody(promptArgs) {
+  if (promptArgs.length !== 1) {
+    throw new Error(`Launch prompt file conversion expects a single positional prompt, got ${promptArgs.length}`);
+  }
+  return promptArgs[0];
+}
 function writeSystemPromptFile(cliId, systemPrompt, onCleanup) {
-  const tempDir = mkdtempSync(path23__default.join(os3__default.tmpdir(), `fleet-${cliId}-`));
-  onCleanup(() => rmBestEffort(tempDir));
-  const filePath = path23__default.join(tempDir, "system-prompt.md");
+  const tempDir = mkdtempSync(path24__default.join(os3__default.tmpdir(), `fleet-${cliId}-`));
+  onCleanup(() => rmBestEffort2(tempDir));
+  const filePath = path24__default.join(tempDir, "system-prompt.md");
   writeFileSync(filePath, systemPrompt, { encoding: "utf8", flag: "wx", mode: SYSTEM_PROMPT_FILE_MODE });
-  chmodBestEffort2(filePath, SYSTEM_PROMPT_FILE_MODE);
+  chmodBestEffort3(filePath, SYSTEM_PROMPT_FILE_MODE);
   return filePath;
 }
-function chmodBestEffort2(targetPath, mode) {
+function chmodBestEffort3(targetPath, mode) {
   try {
     chmodSync(targetPath, mode);
   } catch {
   }
 }
-function rmBestEffort(targetPath) {
+function rmBestEffort2(targetPath) {
   try {
     rmSync(targetPath, { force: true, recursive: true });
   } catch {
@@ -33637,7 +34503,7 @@ async function createFleetGatewayAgentRuntimeLifecycle(deps) {
 var MARKETPLACE_LOCK_DIR_SUFFIX = ".lock";
 function withFleetMarketplaceLock(target2, fn) {
   const lockDir = `${target2}${MARKETPLACE_LOCK_DIR_SUFFIX}`;
-  mkdirSync(path23__default.dirname(lockDir), { recursive: true });
+  mkdirSync(path24__default.dirname(lockDir), { recursive: true });
   return withDirectoryLock({ lockDir }, fn);
 }
 
@@ -33744,7 +34610,7 @@ async function cleanupResources(profileCleanups, gatewayServer, runtime) {
   if (cleanupError !== void 0) throw cleanupError;
 }
 async function startGatewayHttpServer(deps) {
-  const diagnostics = createCursorDiagnosticLog(path23__default.join(getFleetDataDir(), "fleet-cli", "ai-gateway"));
+  const diagnostics = createCursorDiagnosticLog(path24__default.join(getFleetDataDir(), "fleet-cli", "ai-gateway"));
   const router = createAiGatewayRouter({
     readAiGatewaySettings: () => deps.store.read(),
     readKimiApiKey: () => deps.authService.getApiKey(KIMI_AUTH_PROVIDER_ID),
@@ -33753,6 +34619,7 @@ async function startGatewayHttpServer(deps) {
     // 자격증명 조달은 호스트 결정이다 — thin 런처도 export된 기본 reader를 명시 주입한다.
     readAuth: () => readCodexSubscriptionAuth(),
     readCursorToken: () => readCursorSubscriptionToken(),
+    readXaiToken: () => readXaiSubscriptionToken(),
     readModelOverride: () => process.env[AI_GATEWAY_MODEL_ENV],
     cursorDiagnostics: diagnostics.write
   });
@@ -34064,18 +34931,18 @@ Always read \`schema/wiki-schema.md\` directly before composing or revising entr
 `;
 async function ensureWorkspaceSchema(paths) {
   await mkdir(paths.schemaDir, { recursive: true });
-  await writeDefaultFileIfMissing(path23__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME), DEFAULT_WORKSPACE_SCHEMA_AGENTS);
-  await writeDefaultFileIfMissing(path23__default.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME), DEFAULT_WORKSPACE_WIKI_SCHEMA);
+  await writeDefaultFileIfMissing(path24__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME), DEFAULT_WORKSPACE_SCHEMA_AGENTS);
+  await writeDefaultFileIfMissing(path24__default.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME), DEFAULT_WORKSPACE_WIKI_SCHEMA);
   await writeDefaultFileIfMissing(buildTemplatePath(paths, "prd"), DEFAULT_TEMPLATE_PRD);
   return readWorkspaceSchemaSummary(paths);
 }
 async function ensureWorkspaceDoctrine(paths) {
   await mkdir(paths.root, { recursive: true });
-  await writeDefaultFileIfMissing(path23__default.join(paths.root, WORKSPACE_KNOWLEDGE_AGENTS_FILENAME), DEFAULT_WORKSPACE_KNOWLEDGE_AGENTS);
+  await writeDefaultFileIfMissing(path24__default.join(paths.root, WORKSPACE_KNOWLEDGE_AGENTS_FILENAME), DEFAULT_WORKSPACE_KNOWLEDGE_AGENTS);
 }
 async function readWorkspaceSchemaSummary(paths) {
-  const agentsPath = path23__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME);
-  const wikiSchemaPath = path23__default.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME);
+  const agentsPath = path24__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME);
+  const wikiSchemaPath = path24__default.join(paths.schemaDir, WORKSPACE_SCHEMA_FILENAME);
   const wikiSchemaContent = await tryReadSchemaFile(paths, wikiSchemaPath);
   const templates = await scanTemplates(paths);
   if (wikiSchemaContent === null) {
@@ -34114,7 +34981,7 @@ async function scanTemplates(paths) {
     if (!entry.name.startsWith(WORKSPACE_TEMPLATE_PREFIX) || !entry.name.endsWith(WORKSPACE_TEMPLATE_SUFFIX)) continue;
     const id = entry.name.slice(WORKSPACE_TEMPLATE_PREFIX.length, -WORKSPACE_TEMPLATE_SUFFIX.length);
     if (!TEMPLATE_ID_PATTERN.test(id)) continue;
-    const filePath = path23__default.join(paths.schemaDir, entry.name);
+    const filePath = path24__default.join(paths.schemaDir, entry.name);
     try {
       const parsed = parseTemplateMarkdown(await readFile(filePath, "utf8"));
       templates.push({
@@ -34146,7 +35013,7 @@ async function readSchemaCatalog(paths) {
 }
 async function readSchemaDocument(paths, resource, templateId) {
   const ref = resource === "schema" ? "schema/wiki-schema.md" : schemaTemplateRef(templateId ?? "");
-  const absolute = path23__default.resolve(paths.root, ref);
+  const absolute = path24__default.resolve(paths.root, ref);
   await assertContainedSchemaFile(paths, absolute, false);
   return { ref, content: await readFile(absolute, "utf8") };
 }
@@ -34171,10 +35038,10 @@ async function validateSchemaTemplateCreate(paths, templateId, markdown) {
     if (folded.has(key)) throw new Error(`schema template contains duplicate ## section: ${section2}`);
     folded.add(key);
   }
-  const absolute = path23__default.resolve(paths.root, ref);
+  const absolute = path24__default.resolve(paths.root, ref);
   await assertContainedSchemaFile(paths, absolute, true);
   const entries = await readdir(paths.schemaDir).catch(() => []);
-  const basename = path23__default.basename(absolute).toLocaleLowerCase("en-US");
+  const basename = path24__default.basename(absolute).toLocaleLowerCase("en-US");
   if (entries.some((entry) => entry.toLocaleLowerCase("en-US") === basename)) throw new Error("schema template target already exists");
   return absolute;
 }
@@ -34182,13 +35049,13 @@ function assertTemplateId(id) {
   if (!TEMPLATE_ID_PATTERN.test(id)) throw new Error("template_id must match /^[a-z][a-z0-9-]{0,63}$/");
 }
 async function assertContainedSchemaFile(paths, absolute, allowMissing) {
-  const schemaReal = await realpath(paths.schemaDir).catch(() => path23__default.resolve(paths.schemaDir));
-  const parentReal = await realpath(path23__default.dirname(absolute)).catch(() => path23__default.resolve(path23__default.dirname(absolute)));
+  const schemaReal = await realpath(paths.schemaDir).catch(() => path24__default.resolve(paths.schemaDir));
+  const parentReal = await realpath(path24__default.dirname(absolute)).catch(() => path24__default.resolve(path24__default.dirname(absolute)));
   if (parentReal !== schemaReal) throw new Error("schema resource escapes schema directory");
-  const relative = path23__default.relative(paths.root, absolute);
+  const relative = path24__default.relative(paths.root, absolute);
   let cursor = paths.root;
-  for (const part of relative.split(path23__default.sep)) {
-    cursor = path23__default.join(cursor, part);
+  for (const part of relative.split(path24__default.sep)) {
+    cursor = path24__default.join(cursor, part);
     try {
       if ((await lstat(cursor)).isSymbolicLink()) throw new Error("schema resource path contains symlink");
     } catch (error51) {
@@ -34216,7 +35083,7 @@ async function validateTemplateCompliance(paths, templateId, body2) {
   }
 }
 function inferTemplateIdFromTarget(target2, knownTemplateIds) {
-  const basename = path23__default.basename(target2, ".md");
+  const basename = path24__default.basename(target2, ".md");
   const ids = knownTemplateIds ?? DEFAULT_TEMPLATE_IDS;
   const sorted = [...ids].sort((a, b) => b.length - a.length);
   for (const id of sorted) {
@@ -34248,7 +35115,7 @@ function extractSchemaSummary(content) {
   return lines.find((line) => line.length > 0 && !line.startsWith("#")) ?? "Workspace schema is present.";
 }
 function buildTemplatePath(paths, id) {
-  return path23__default.join(paths.schemaDir, `${WORKSPACE_TEMPLATE_PREFIX}${id}${WORKSPACE_TEMPLATE_SUFFIX}`);
+  return path24__default.join(paths.schemaDir, `${WORKSPACE_TEMPLATE_PREFIX}${id}${WORKSPACE_TEMPLATE_SUFFIX}`);
 }
 function parseTemplateMarkdown(content) {
   const normalized = content.replace(/\r\n/g, "\n");
@@ -34353,18 +35220,18 @@ function isAlreadyExistsError(error51) {
 
 // ../../packages/fleet-wiki/src/paths.ts
 function resolveMemoryPaths(cwd) {
-  return createMemoryPaths(path23__default.join(cwd, KNOWLEDGE_ROOT_DIRNAME));
+  return createMemoryPaths(path24__default.join(cwd, KNOWLEDGE_ROOT_DIRNAME));
 }
 function createMemoryPaths(root) {
   return {
     root,
-    rawDir: path23__default.join(root, RAW_DIRNAME),
-    wikiDir: path23__default.join(root, WIKI_DIRNAME),
-    schemaDir: path23__default.join(root, SCHEMA_DIRNAME),
-    queueDir: path23__default.join(root, QUEUE_DIRNAME),
-    archiveDir: path23__default.join(root, ARCHIVE_DIRNAME),
-    conflictsDir: path23__default.join(root, CONFLICTS_DIRNAME),
-    indexFile: path23__default.join(root, INDEX_FILENAME)
+    rawDir: path24__default.join(root, RAW_DIRNAME),
+    wikiDir: path24__default.join(root, WIKI_DIRNAME),
+    schemaDir: path24__default.join(root, SCHEMA_DIRNAME),
+    queueDir: path24__default.join(root, QUEUE_DIRNAME),
+    archiveDir: path24__default.join(root, ARCHIVE_DIRNAME),
+    conflictsDir: path24__default.join(root, CONFLICTS_DIRNAME),
+    indexFile: path24__default.join(root, INDEX_FILENAME)
   };
 }
 function resolveToolMemoryPaths(ctx) {
@@ -34382,10 +35249,10 @@ async function ensureMemoryRoot(paths) {
   await ensureWorkspaceDoctrine(paths);
 }
 function getIndexMarkdownFile(paths) {
-  return path23__default.join(paths.wikiDir, INDEX_MD_FILENAME);
+  return path24__default.join(paths.wikiDir, INDEX_MD_FILENAME);
 }
 function getLogFile(paths) {
-  return path23__default.join(paths.root, LOG_MD_FILENAME);
+  return path24__default.join(paths.root, LOG_MD_FILENAME);
 }
 
 // ../../packages/fleet-wiki/src/conflicts.ts
@@ -34397,7 +35264,7 @@ async function createConflict(input, paths) {
   await ensureMemoryRoot(paths);
   const now = input.now ?? /* @__PURE__ */ new Date();
   const conflictId = buildConflictId(now, input.wikiId, input.reason, input.proposed);
-  const conflictDir = path23__default.join(paths.conflictsDir, conflictId);
+  const conflictDir = path24__default.join(paths.conflictsDir, conflictId);
   await mkdir(conflictDir, { recursive: true });
   const meta3 = {
     id: conflictId,
@@ -34417,13 +35284,13 @@ async function createConflict(input, paths) {
     currentHash: input.currentHash,
     warnings: input.warnings
   };
-  await writeJsonFile(path23__default.join(conflictDir, CONFLICT_META_FILENAME), meta3, paths);
-  await writePatchFile(path23__default.join(conflictDir, CONFLICT_PROPOSED_FILENAME), input.proposed, paths);
+  await writeJsonFile(path24__default.join(conflictDir, CONFLICT_META_FILENAME), meta3, paths);
+  await writePatchFile(path24__default.join(conflictDir, CONFLICT_PROPOSED_FILENAME), input.proposed, paths);
   if (input.current !== void 0) {
-    await writePatchFile(path23__default.join(conflictDir, CONFLICT_CURRENT_FILENAME), input.current, paths);
+    await writePatchFile(path24__default.join(conflictDir, CONFLICT_CURRENT_FILENAME), input.current, paths);
   }
   if (input.rawSource !== void 0) {
-    await writePatchFile(path23__default.join(conflictDir, CONFLICT_RAW_SOURCE_FILENAME), input.rawSource, paths);
+    await writePatchFile(path24__default.join(conflictDir, CONFLICT_RAW_SOURCE_FILENAME), input.rawSource, paths);
   }
   return {
     meta: meta3,
@@ -34437,7 +35304,7 @@ async function listConflicts(paths) {
   const metas = [];
   for (const id of ids) {
     try {
-      metas.push(await readJsonFile2(path23__default.join(paths.conflictsDir, id, CONFLICT_META_FILENAME)));
+      metas.push(await readJsonFile2(path24__default.join(paths.conflictsDir, id, CONFLICT_META_FILENAME)));
     } catch {
       continue;
     }
@@ -34446,13 +35313,13 @@ async function listConflicts(paths) {
 }
 async function readConflict(conflictId, paths) {
   const conflictDir = resolveConflictDir(conflictId, paths);
-  const meta3 = await readJsonFile2(path23__default.join(conflictDir, CONFLICT_META_FILENAME));
-  const currentPath = path23__default.join(conflictDir, CONFLICT_CURRENT_FILENAME);
-  const rawSourcePath = path23__default.join(conflictDir, CONFLICT_RAW_SOURCE_FILENAME);
+  const meta3 = await readJsonFile2(path24__default.join(conflictDir, CONFLICT_META_FILENAME));
+  const currentPath = path24__default.join(conflictDir, CONFLICT_CURRENT_FILENAME);
+  const rawSourcePath = path24__default.join(conflictDir, CONFLICT_RAW_SOURCE_FILENAME);
   return {
     meta: meta3,
     current: await pathExists(currentPath) ? await readPatchFile(currentPath) : void 0,
-    proposed: await readPatchFile(path23__default.join(conflictDir, CONFLICT_PROPOSED_FILENAME)),
+    proposed: await readPatchFile(path24__default.join(conflictDir, CONFLICT_PROPOSED_FILENAME)),
     rawSource: await pathExists(rawSourcePath) ? await readPatchFile(rawSourcePath) : void 0
   };
 }
@@ -34471,9 +35338,9 @@ function sanitizeConflictToken(value) {
   return value.toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 64) || "unknown";
 }
 function resolveConflictDir(conflictId, paths) {
-  const conflictDir = path23__default.resolve(paths.conflictsDir, conflictId);
-  const relative = path23__default.relative(paths.conflictsDir, conflictDir);
-  if (!relative || relative.startsWith("..") || path23__default.isAbsolute(relative)) {
+  const conflictDir = path24__default.resolve(paths.conflictsDir, conflictId);
+  const relative = path24__default.relative(paths.conflictsDir, conflictDir);
+  if (!relative || relative.startsWith("..") || path24__default.isAbsolute(relative)) {
     throw new Error(`[fleet-wiki] conflict id escapes conflicts/: ${conflictId}`);
   }
   return conflictDir;
@@ -34637,11 +35504,11 @@ async function validatePatch(patch, paths) {
   if (!target2 || !summary || !proposer || !created) throw new Error("patch frontmatter is incomplete");
   if (summary.length > 120) throw new Error("patch summary exceeds 120 chars");
   assertCanonicalPatchTarget(target2);
-  const absoluteTarget = path23__default.resolve(paths.root, target2);
-  if (!absoluteTarget.startsWith(`${paths.root}${path23__default.sep}`) && absoluteTarget !== paths.root) {
+  const absoluteTarget = path24__default.resolve(paths.root, target2);
+  if (!absoluteTarget.startsWith(`${paths.root}${path24__default.sep}`) && absoluteTarget !== paths.root) {
     throw new Error("patch target escapes wiki root");
   }
-  if (!absoluteTarget.startsWith(`${paths.wikiDir}${path23__default.sep}`)) throw new Error("wiki patch must target wiki/");
+  if (!absoluteTarget.startsWith(`${paths.wikiDir}${path24__default.sep}`)) throw new Error("wiki patch must target wiki/");
   assertNoSymlinkPathComponents(target2, paths);
   if (op === "create_wiki" && await pathExists(absoluteTarget)) {
     throw new Error(
@@ -34662,19 +35529,19 @@ async function applyPatch(patch, paths) {
 async function enqueuePatch(patch, paths, metaOverrides) {
   await ensureMemoryRoot(paths);
   const patchId = buildPatchId(patch.frontmatter.created, patch.frontmatter.summary, patch.frontmatter.target, patch.body);
-  const queueDir = path23__default.join(paths.queueDir, patchId);
+  const queueDir = path24__default.join(paths.queueDir, patchId);
   if (await pathExists(queueDir)) {
     throw new Error(`[fleet-wiki] patch id collision: ${patchId} - this should never happen with target+body hashing`);
   }
   await mkdir(queueDir, { recursive: true });
-  await writePatchFile(path23__default.join(queueDir, PATCH_FILENAME), serializePatch(patch), paths);
+  await writePatchFile(path24__default.join(queueDir, PATCH_FILENAME), serializePatch(patch), paths);
   const meta3 = {
     id: patchId,
     status: "pending",
     createdAt: patch.frontmatter.created,
     ...metaOverrides
   };
-  await writeJsonFile(path23__default.join(queueDir, PATCH_META_FILENAME), meta3, paths);
+  await writeJsonFile(path24__default.join(queueDir, PATCH_META_FILENAME), meta3, paths);
   await appendLog(paths, "patch enqueued", {
     patch_id: patchId,
     patch_set_id: meta3.patch_set_id ?? null,
@@ -34692,7 +35559,7 @@ async function listQueue(paths) {
   for (const id of ids) {
     if (id === "_sets") continue;
     try {
-      const meta3 = await readJsonFile2(path23__default.join(paths.queueDir, id, PATCH_META_FILENAME));
+      const meta3 = await readJsonFile2(path24__default.join(paths.queueDir, id, PATCH_META_FILENAME));
       results.push({ id, meta: meta3 });
     } catch {
       continue;
@@ -34717,17 +35584,17 @@ async function resolveQueueSelection(id, paths) {
 }
 async function showQueue(id, paths) {
   const selection = await resolveQueueSelection(id, paths);
-  const queueDir = path23__default.join(paths.queueDir, selection.id);
-  const patch = await parsePatch(await readPatchFile(path23__default.join(queueDir, PATCH_FILENAME)));
-  const meta3 = await readJsonFile2(path23__default.join(queueDir, PATCH_META_FILENAME));
+  const queueDir = path24__default.join(paths.queueDir, selection.id);
+  const patch = await parsePatch(await readPatchFile(path24__default.join(queueDir, PATCH_FILENAME)));
+  const meta3 = await readJsonFile2(path24__default.join(queueDir, PATCH_META_FILENAME));
   return { patch, meta: meta3 };
 }
 async function rewriteQueuedPatch(id, paths, patch, meta3, expectedPatchHash) {
   assertSafeQueueId(id);
   return withPatchEditLock(paths, id, async () => {
-    const queueDir = path23__default.join(paths.queueDir, id);
+    const queueDir = path24__default.join(paths.queueDir, id);
     if (expectedPatchHash !== void 0) {
-      const currentMarkdown = await readPatchFile(path23__default.join(queueDir, PATCH_FILENAME));
+      const currentMarkdown = await readPatchFile(path24__default.join(queueDir, PATCH_FILENAME));
       const currentHash = computeContentHash(currentMarkdown);
       if (currentHash !== expectedPatchHash) {
         throw new Error(`[fleet-wiki] wiki_patch_edit stale base_patch_hash: expected ${currentHash}, got ${expectedPatchHash}`);
@@ -34736,8 +35603,8 @@ async function rewriteQueuedPatch(id, paths, patch, meta3, expectedPatchHash) {
     const patchMarkdown = serializePatch(patch);
     const patchHash = computeContentHash(patchMarkdown);
     const nextMeta = { ...meta3, lastEditHash: patchHash };
-    await writePatchFile(path23__default.join(queueDir, PATCH_FILENAME), patchMarkdown, paths);
-    await writeJsonFile(path23__default.join(queueDir, PATCH_META_FILENAME), nextMeta, paths);
+    await writePatchFile(path24__default.join(queueDir, PATCH_FILENAME), patchMarkdown, paths);
+    await writeJsonFile(path24__default.join(queueDir, PATCH_META_FILENAME), nextMeta, paths);
     return patchHash;
   });
 }
@@ -34761,8 +35628,8 @@ async function approvePatch(id, paths) {
           rawSourceRef: meta3.rawSourceRef,
           warnings: meta3.warnings
         });
-        const queueDir = path23__default.join(paths.queueDir, id);
-        await writeJsonFile(path23__default.join(queueDir, PATCH_META_FILENAME), {
+        const queueDir = path24__default.join(paths.queueDir, id);
+        await writeJsonFile(path24__default.join(queueDir, PATCH_META_FILENAME), {
           ...meta3,
           conflictId
         }, paths);
@@ -34798,7 +35665,7 @@ async function approvePatchSet(patchSetId, paths) {
   const failed = [];
   const missing = [];
   for (const patchId of patchSet.patchIds) {
-    const queueDir = path23__default.join(paths.queueDir, patchId);
+    const queueDir = path24__default.join(paths.queueDir, patchId);
     if (!await pathExists(queueDir)) {
       missing.push(patchId);
       continue;
@@ -34864,7 +35731,7 @@ ${patch.body}`;
 }
 async function normalizeWikiEntryPatch(entry, target2, paths) {
   assertSafeEntryId(entry.id);
-  if (entry.id !== path23__default.basename(target2, ".md")) {
+  if (entry.id !== path24__default.basename(target2, ".md")) {
     throw new Error("wiki patch body id must match target filename");
   }
   const inlineRawSourceRef = extractInlineRawSourceRef(entry.body);
@@ -34907,9 +35774,9 @@ function buildPatchId(createdAt, summary, target2, body2) {
 }
 async function validatePatchBase(patch, meta3, paths) {
   if (patch.frontmatter.op !== "update_wiki" || !meta3?.baseVersion && !meta3?.baseHash) return;
-  const wikiId = path23__default.basename(patch.frontmatter.target, ".md");
+  const wikiId = path24__default.basename(patch.frontmatter.target, ".md");
   const currentEntry = await readWikiEntry(wikiId, paths);
-  const currentPath = path23__default.join(paths.root, patch.frontmatter.target);
+  const currentPath = path24__default.join(paths.root, patch.frontmatter.target);
   const currentMarkdown = await pathExists(currentPath) ? await readPatchFile(currentPath) : void 0;
   if (meta3.baseVersion !== void 0 && currentEntry?.version !== meta3.baseVersion) {
     throw new Error(
@@ -34968,17 +35835,17 @@ function assertCanonicalPatchTarget(target2) {
   if (target2.endsWith("/")) {
     throw new Error("patch target must not end with a slash");
   }
-  if (target2.startsWith("/") || path23__default.posix.isAbsolute(target2) || path23__default.win32.isAbsolute(target2)) {
+  if (target2.startsWith("/") || path24__default.posix.isAbsolute(target2) || path24__default.win32.isAbsolute(target2)) {
     throw new Error("patch target must be relative");
   }
-  if (path23__default.posix.normalize(target2) !== target2) {
+  if (path24__default.posix.normalize(target2) !== target2) {
     throw new Error("patch target must not contain dot segments or redundant separators");
   }
 }
 function canonicalApprovalLockKey(paths, target2) {
   const wikiRoot = realpathSync(paths.wikiDir);
-  const relativeTarget = path23__default.posix.relative("wiki", target2);
-  const targetPath = path23__default.join(wikiRoot, ...relativeTarget.split("/"));
+  const relativeTarget = path24__default.posix.relative("wiki", target2);
+  const targetPath = path24__default.join(wikiRoot, ...relativeTarget.split("/"));
   return `${wikiRoot}\0${targetPath}`.toLowerCase();
 }
 function canonicalPatchEditLockKey(paths, patchId) {
@@ -34994,7 +35861,7 @@ function assertNoSymlinkPathComponents(target2, paths) {
     throw error51;
   }
   for (const part of parts) {
-    current = path23__default.join(current, part);
+    current = path24__default.join(current, part);
     try {
       if (lstatSync(current).isSymbolicLink()) {
         throw new Error("patch target must not include symlink path components");
@@ -35009,8 +35876,8 @@ function assertSafeRawSourceRef(rawSourceRef, paths) {
   if (!rawSourceRef.startsWith("raw/")) {
     throw new Error("raw source provenance must point into raw/");
   }
-  const absoluteRef = path23__default.resolve(paths.root, rawSourceRef);
-  if (!absoluteRef.startsWith(`${paths.rawDir}${path23__default.sep}`)) {
+  const absoluteRef = path24__default.resolve(paths.root, rawSourceRef);
+  if (!absoluteRef.startsWith(`${paths.rawDir}${path24__default.sep}`)) {
     throw new Error("raw source provenance must point into raw/");
   }
 }
@@ -35026,14 +35893,14 @@ function classifyPatchConflict(error51) {
 }
 async function recordPatchConflict(patch, paths, reason, options) {
   const now = /* @__PURE__ */ new Date();
-  const targetPath = path23__default.join(paths.root, patch.frontmatter.target);
+  const targetPath = path24__default.join(paths.root, patch.frontmatter.target);
   const current = await pathExists(targetPath) ? await readPatchFile(targetPath) : void 0;
   const currentEntry = current ? parseStoredWikiEntry(current) : void 0;
   const proposedEntry = parsePatchBodyEntry(patch.body);
-  const record5 = await createConflict({
+  const record6 = await createConflict({
     reason,
     target: patch.frontmatter.target,
-    wikiId: proposedEntry?.id ?? path23__default.basename(patch.frontmatter.target, ".md"),
+    wikiId: proposedEntry?.id ?? path24__default.basename(patch.frontmatter.target, ".md"),
     title: proposedEntry?.title,
     proposer: patch.frontmatter.proposer,
     rawSourceRef: options?.rawSourceRef,
@@ -35049,14 +35916,14 @@ async function recordPatchConflict(patch, paths, reason, options) {
     now
   }, paths);
   await appendLog(paths, "conflict detected", {
-    conflict_id: record5.meta.id,
+    conflict_id: record6.meta.id,
     patch_id: options?.patchId ?? null,
     raw_source_ref: options?.rawSourceRef ?? null,
     reason,
     target: patch.frontmatter.target,
-    wiki_id: record5.meta.wikiId
+    wiki_id: record6.meta.wikiId
   }, now);
-  return record5.meta.id;
+  return record6.meta.id;
 }
 function parsePatchBodyEntry(content) {
   try {
@@ -35145,11 +36012,11 @@ function parseInlineArray(value) {
   return inner.split(",").map((item) => decodeFrontmatter(item.trim().replace(/^"(.*)"$/, "$1")));
 }
 async function archiveQueueEntry(id, paths, meta3) {
-  const fromDir = path23__default.join(paths.queueDir, id);
-  const toDir = path23__default.join(paths.archiveDir, id);
+  const fromDir = path24__default.join(paths.queueDir, id);
+  const toDir = path24__default.join(paths.archiveDir, id);
   await removePath(toDir);
   await movePath(fromDir, toDir);
-  await writeJsonFile(path23__default.join(toDir, PATCH_META_FILENAME), meta3, paths);
+  await writeJsonFile(path24__default.join(toDir, PATCH_META_FILENAME), meta3, paths);
 }
 function buildQueueIdHelp(prefix, availableIds) {
   if (availableIds.length === 0) {
@@ -35181,15 +36048,15 @@ var PATCH_SET_DIRNAME = "_sets";
 var PATCH_SET_META_FILENAME = PATCH_META_FILENAME;
 function getPatchSetDir(paths, patchSetId) {
   assertSafePatchSetId(patchSetId);
-  const patchSetDir = path23__default.join(paths.queueDir, PATCH_SET_DIRNAME, patchSetId);
-  const relative = path23__default.relative(path23__default.join(paths.queueDir, PATCH_SET_DIRNAME), patchSetDir);
-  if (!relative || relative.startsWith("..") || path23__default.isAbsolute(relative)) {
+  const patchSetDir = path24__default.join(paths.queueDir, PATCH_SET_DIRNAME, patchSetId);
+  const relative = path24__default.relative(path24__default.join(paths.queueDir, PATCH_SET_DIRNAME), patchSetDir);
+  if (!relative || relative.startsWith("..") || path24__default.isAbsolute(relative)) {
     throw new Error(`[fleet-wiki] patch set id escapes queue/_sets: ${patchSetId}`);
   }
   return patchSetDir;
 }
 function getPatchSetMetaFile(paths, patchSetId) {
-  return path23__default.join(getPatchSetDir(paths, patchSetId), PATCH_SET_META_FILENAME);
+  return path24__default.join(getPatchSetDir(paths, patchSetId), PATCH_SET_META_FILENAME);
 }
 function buildPatchSetId(createdAt, sourceRef) {
   const compact = createdAt.replace(/[:.]/g, "-");
@@ -35248,17 +36115,17 @@ async function readWikiEntry(id, paths) {
   const index = await loadIndex(paths);
   const indexed = index[id];
   if (indexed) {
-    const resolved = path23__default.resolve(paths.root, indexed.path);
-    const rel = path23__default.relative(paths.wikiDir, resolved);
-    if (!rel || rel.startsWith("..") || path23__default.isAbsolute(rel)) return null;
+    const resolved = path24__default.resolve(paths.root, indexed.path);
+    const rel = path24__default.relative(paths.wikiDir, resolved);
+    if (!rel || rel.startsWith("..") || path24__default.isAbsolute(rel)) return null;
     return readMarkdownFile(resolved);
   }
-  const fallbackPath = path23__default.join(paths.wikiDir, `${id}.md`);
+  const fallbackPath = path24__default.join(paths.wikiDir, `${id}.md`);
   if (await pathExists(fallbackPath)) {
     return readMarkdownFile(fallbackPath);
   }
   const records = await listWikiRecords(paths);
-  const match = records.find((record5) => record5.entry.id === id);
+  const match = records.find((record6) => record6.entry.id === id);
   return match ? match.entry : null;
 }
 async function resolveWikiEntryPath(id, paths) {
@@ -35270,37 +36137,37 @@ async function resolveWikiEntryPath(id, paths) {
   const index = await loadIndex(paths);
   const indexed = index[id];
   if (indexed) {
-    const resolved = path23__default.resolve(paths.root, indexed.path);
-    const rel = path23__default.relative(paths.wikiDir, resolved);
-    if (rel && !rel.startsWith("..") && !path23__default.isAbsolute(rel) && await pathExists(resolved)) {
-      return path23__default.relative(paths.root, resolved).replaceAll(path23__default.sep, "/");
+    const resolved = path24__default.resolve(paths.root, indexed.path);
+    const rel = path24__default.relative(paths.wikiDir, resolved);
+    if (rel && !rel.startsWith("..") && !path24__default.isAbsolute(rel) && await pathExists(resolved)) {
+      return path24__default.relative(paths.root, resolved).replaceAll(path24__default.sep, "/");
     }
   }
-  const fallbackPath = path23__default.join(paths.wikiDir, `${id}.md`);
+  const fallbackPath = path24__default.join(paths.wikiDir, `${id}.md`);
   if (await pathExists(fallbackPath)) {
-    return path23__default.relative(paths.root, fallbackPath).replaceAll(path23__default.sep, "/");
+    return path24__default.relative(paths.root, fallbackPath).replaceAll(path24__default.sep, "/");
   }
   const records = await listWikiRecords(paths);
-  const match = records.find((record5) => record5.entry.id === id);
+  const match = records.find((record6) => record6.entry.id === id);
   return match ? match.path : null;
 }
 async function writeWikiEntryAtTarget(entry, target2, paths) {
   await ensureMemoryRoot(paths);
   assertSafeEntryId(entry.id);
-  const absoluteTarget = path23__default.resolve(paths.root, target2);
-  const relativeTarget = path23__default.relative(paths.wikiDir, absoluteTarget);
-  if (!relativeTarget || relativeTarget.startsWith("..") || path23__default.isAbsolute(relativeTarget)) {
+  const absoluteTarget = path24__default.resolve(paths.root, target2);
+  const relativeTarget = path24__default.relative(paths.wikiDir, absoluteTarget);
+  if (!relativeTarget || relativeTarget.startsWith("..") || path24__default.isAbsolute(relativeTarget)) {
     throw new Error(`[fleet-wiki] wiki target escapes wiki/: ${target2}`);
   }
   if (!absoluteTarget.endsWith(".md")) {
     throw new Error(`[fleet-wiki] wiki target must end with .md: ${target2}`);
   }
-  if (path23__default.basename(absoluteTarget, ".md") !== entry.id) {
+  if (path24__default.basename(absoluteTarget, ".md") !== entry.id) {
     throw new Error("wiki patch body id must match target filename");
   }
-  await mkdir(path23__default.dirname(absoluteTarget), { recursive: true });
+  await mkdir(path24__default.dirname(absoluteTarget), { recursive: true });
   await writeAtomic(absoluteTarget, serializeWikiEntry(entry), paths);
-  return path23__default.join("wiki", relativeTarget).replaceAll(path23__default.sep, "/");
+  return path24__default.join("wiki", relativeTarget).replaceAll(path24__default.sep, "/");
 }
 async function writeRawSourceEntry(entry, paths) {
   await ensureMemoryRoot(paths);
@@ -35319,11 +36186,11 @@ async function writeRawSourceEntry(entry, paths) {
     },
     entry.content
   );
-  await writeAtomic(path23__default.join(paths.root, relativePath2), content, paths);
+  await writeAtomic(path24__default.join(paths.root, relativePath2), content, paths);
   return relativePath2;
 }
 async function readRawSourceEntry(rawSourceRef, paths) {
-  const absolutePath = path23__default.resolve(paths.root, rawSourceRef);
+  const absolutePath = path24__default.resolve(paths.root, rawSourceRef);
   assertWithinRawDir(absolutePath, paths);
   const parsed = parseMarkdown(await readFile(absolutePath, "utf8"));
   return {
@@ -35514,8 +36381,8 @@ function computeContentHash(content) {
   return crypto9.createHash("sha256").update(content, "utf8").digest("hex").slice(0, 8);
 }
 function assertWithinRawDir(absolutePath, paths) {
-  const relative = path23__default.relative(paths.rawDir, absolutePath);
-  if (!relative || relative.startsWith("..") || path23__default.isAbsolute(relative)) {
+  const relative = path24__default.relative(paths.rawDir, absolutePath);
+  if (!relative || relative.startsWith("..") || path24__default.isAbsolute(relative)) {
     throw new Error(`[fleet-wiki] raw source ref escapes raw/: ${absolutePath}`);
   }
 }
@@ -35571,7 +36438,7 @@ function parseWikiEntry(content) {
 async function listWikiRecords(paths) {
   return listMarkdownEntriesRecursive(paths.wikiDir, paths, (content, filePath) => ({
     entry: parseWikiEntry(content),
-    path: path23__default.relative(paths.root, filePath).replaceAll(path23__default.sep, "/")
+    path: path24__default.relative(paths.root, filePath).replaceAll(path24__default.sep, "/")
   }));
 }
 async function listMarkdownEntriesRecursive(dirPath, paths, parser) {
@@ -35584,7 +36451,7 @@ async function listMarkdownEntriesRecursive(dirPath, paths, parser) {
   }
   const sortedEntries = entries.sort((left, right) => left.name.localeCompare(right.name));
   for (const entry of sortedEntries) {
-    const filePath = path23__default.join(dirPath, entry.name);
+    const filePath = path24__default.join(dirPath, entry.name);
     if (entry.isDirectory()) {
       items.push(...await listMarkdownEntriesRecursive(filePath, paths, parser));
       continue;
@@ -35719,8 +36586,8 @@ async function writeJsonAtomic(filePath, value, paths) {
 }
 async function writeAtomic(filePath, content, paths) {
   await ensureMemoryRoot(paths);
-  const tempPath = path23__default.join(
-    path23__default.dirname(filePath),
+  const tempPath = path24__default.join(
+    path24__default.dirname(filePath),
     `.tmp-${process.pid}-${Date.now()}-${crypto9.randomUUID()}-${os3__default.hostname()}`
   );
   await writeFile(tempPath, content, "utf8");
@@ -35801,7 +36668,7 @@ function extractLegacyMarkdownWikiLinks(body2, wikiDir, basePath) {
 }
 function resolveLegacyWikiTarget(target2, wikiDir, basePath) {
   if (!target2 || target2.startsWith("#")) return null;
-  if (path23__default.isAbsolute(target2)) return null;
+  if (path24__default.isAbsolute(target2)) return null;
   if (/^[a-z][a-z0-9+.-]*:/i.test(target2)) return null;
   const withoutFragment = target2.split("#", 1)[0]?.split("?", 1)[0] ?? "";
   if (!withoutFragment.endsWith(".md")) return null;
@@ -35811,12 +36678,12 @@ function resolveLegacyWikiTarget(target2, wikiDir, basePath) {
   } catch {
     return null;
   }
-  const resolved = path23__default.resolve(path23__default.dirname(basePath), decodedTarget);
-  const relative = path23__default.relative(wikiDir, resolved);
-  if (!relative || relative.startsWith("..") || path23__default.isAbsolute(relative)) return null;
+  const resolved = path24__default.resolve(path24__default.dirname(basePath), decodedTarget);
+  const relative = path24__default.relative(wikiDir, resolved);
+  if (!relative || relative.startsWith("..") || path24__default.isAbsolute(relative)) return null;
   return {
     target: target2,
-    entryId: path23__default.basename(relative, ".md")
+    entryId: path24__default.basename(relative, ".md")
   };
 }
 var FLEET_WIKI_ENTRY_BEGIN = "<<<FLEET_WIKI_ENTRY_BEGIN";
@@ -35883,7 +36750,7 @@ async function enhancedSearch(paths, options) {
   for (const entry of entries) {
     if (!index[entry.id]) {
       index[entry.id] = {
-        path: path23__default.join("wiki", `${entry.id}.md`),
+        path: path24__default.join("wiki", `${entry.id}.md`),
         title: entry.title,
         tags: entry.tags,
         updated: entry.updated
@@ -36019,7 +36886,7 @@ function toEnhancedHit(entry, signals) {
     score: enhancedScore,
     reason: signals.legacyReason ?? "body",
     excerpt,
-    path: path23__default.join("wiki", `${entry.id}.md`),
+    path: path24__default.join("wiki", `${entry.id}.md`),
     tags: entry.tags,
     updated: entry.updated,
     version: entry.version,
@@ -36215,7 +37082,7 @@ function toRankedHit(entry, reason, detail, graphBoost, backlinksById) {
     score: basePriority * 100 + statusPriority * 10 + graphScore + (detail.tagBoost ?? 0),
     reason,
     excerpt,
-    path: path23__default.join("wiki", `${entry.id}.md`),
+    path: path24__default.join("wiki", `${entry.id}.md`),
     tags: entry.tags,
     updated: entry.updated,
     version: entry.version,
@@ -37757,8 +38624,8 @@ function CreateObject(types, value) {
 }
 function FromUnionKey(types, value) {
   const flattened = Flatten(types);
-  const record5 = TryBuildRecord(flattened, value);
-  return IsSchema(record5) ? record5 : CreateObject(flattened, value);
+  const record6 = TryBuildRecord(flattened, value);
+  return IsSchema(record6) ? record6 : CreateObject(flattened, value);
 }
 
 // ../../node_modules/.pnpm/typebox@1.1.34/node_modules/typebox/build/type/engine/record/from_key.mjs
@@ -40981,13 +41848,13 @@ async function readClaims(entryId, paths) {
   }
 }
 function getClaimsDir(paths) {
-  return path23__default.join(paths.wikiDir, CLAIMS_DIRNAME);
+  return path24__default.join(paths.wikiDir, CLAIMS_DIRNAME);
 }
 function getClaimsFile(paths, entryId) {
   assertSafeEntryId(entryId);
-  const claimsFile = path23__default.join(getClaimsDir(paths), `${entryId}.json`);
-  const relative = path23__default.relative(getClaimsDir(paths), claimsFile);
-  if (!relative || relative.startsWith("..") || path23__default.isAbsolute(relative)) {
+  const claimsFile = path24__default.join(getClaimsDir(paths), `${entryId}.json`);
+  const relative = path24__default.relative(getClaimsDir(paths), claimsFile);
+  if (!relative || relative.startsWith("..") || path24__default.isAbsolute(relative)) {
     throw new Error(`[fleet-wiki] claims sidecar escapes wiki/.claims: ${entryId}`);
   }
   return claimsFile;
@@ -41078,7 +41945,7 @@ function assertSafeClaimRawRef(ref) {
   if (!ref.startsWith("raw/")) {
     throw new Error(`claim sourceRef must point into raw/: ${ref}`);
   }
-  if (ref.includes("..") || path23__default.isAbsolute(ref)) {
+  if (ref.includes("..") || path24__default.isAbsolute(ref)) {
     throw new Error(`claim sourceRef escapes raw/: ${ref}`);
   }
 }
@@ -41156,22 +42023,22 @@ async function runDryDock(paths, options = {}) {
   }
   for (const fileName of await listFileNames(paths.rawDir)) {
     if (!fileName.endsWith(".md")) continue;
-    const filePath = path23__default.join(paths.rawDir, fileName);
+    const filePath = path24__default.join(paths.rawDir, fileName);
     issues.push(...safetyIssues(await readPatchFile(filePath), filePath));
   }
   for (const queueId of await listDirectoryNames(paths.queueDir)) {
     if (queueId === PATCH_SET_DIRNAME) continue;
-    const queueDir = path23__default.join(paths.queueDir, queueId);
+    const queueDir = path24__default.join(paths.queueDir, queueId);
     try {
-      const patchContent = await readPatchFile(path23__default.join(queueDir, PATCH_FILENAME));
-      issues.push(...safetyIssues(patchContent, path23__default.join(queueDir, PATCH_FILENAME)));
-      await readJsonFile2(path23__default.join(queueDir, PATCH_META_FILENAME));
+      const patchContent = await readPatchFile(path24__default.join(queueDir, PATCH_FILENAME));
+      issues.push(...safetyIssues(patchContent, path24__default.join(queueDir, PATCH_FILENAME)));
+      await readJsonFile2(path24__default.join(queueDir, PATCH_META_FILENAME));
     } catch {
       issues.push(issue2("malformed_queue", "error", "\uC190\uC0C1\uB41C queue \uC5D4\uD2B8\uB9AC", queueDir));
     }
   }
-  for (const patchSetId of await listDirectoryNames(path23__default.join(paths.queueDir, PATCH_SET_DIRNAME))) {
-    const patchSetMetaFile = path23__default.join(paths.queueDir, PATCH_SET_DIRNAME, patchSetId, PATCH_META_FILENAME);
+  for (const patchSetId of await listDirectoryNames(path24__default.join(paths.queueDir, PATCH_SET_DIRNAME))) {
+    const patchSetMetaFile = path24__default.join(paths.queueDir, PATCH_SET_DIRNAME, patchSetId, PATCH_META_FILENAME);
     let patchSet;
     try {
       patchSet = await readPatchSet(paths, patchSetId);
@@ -41180,8 +42047,8 @@ async function runDryDock(paths, options = {}) {
       continue;
     }
     for (const patchId of patchSet.patchIds) {
-      const queueMetaFile = path23__default.join(paths.queueDir, patchId, PATCH_META_FILENAME);
-      const archiveMetaFile = path23__default.join(paths.archiveDir, patchId, PATCH_META_FILENAME);
+      const queueMetaFile = path24__default.join(paths.queueDir, patchId, PATCH_META_FILENAME);
+      const archiveMetaFile = path24__default.join(paths.archiveDir, patchId, PATCH_META_FILENAME);
       if (!await pathExists(queueMetaFile) && !await pathExists(archiveMetaFile)) {
         issues.push(
           issue2(
@@ -41218,7 +42085,7 @@ async function runDryDock(paths, options = {}) {
         "conflict_unresolved",
         "warning",
         `\uBBF8\uD574\uACB0 conflict: ${conflict.reason} (${conflict.target})`,
-        path23__default.join(paths.conflictsDir, conflict.id, "meta.json")
+        path24__default.join(paths.conflictsDir, conflict.id, "meta.json")
       )
     );
   }
@@ -41231,7 +42098,7 @@ async function runDryDock(paths, options = {}) {
           "unresolved_conflict",
           "warning",
           "\uC190\uC0C1\uB41C conflict \uC5D4\uD2B8\uB9AC",
-          path23__default.join(paths.conflictsDir, conflictId, "meta.json")
+          path24__default.join(paths.conflictsDir, conflictId, "meta.json")
         )
       );
     }
@@ -41288,8 +42155,8 @@ async function claimIssues(paths, wikiIds) {
   const claimsDir = getClaimsDir(paths);
   for (const fileName of await listFileNames(claimsDir)) {
     if (!fileName.endsWith(".json")) continue;
-    const filePath = path23__default.join(claimsDir, fileName);
-    const entryIdFromFile = path23__default.basename(fileName, ".json");
+    const filePath = path24__default.join(claimsDir, fileName);
+    const entryIdFromFile = path24__default.basename(fileName, ".json");
     let raw;
     try {
       raw = await readJsonFile2(filePath);
@@ -41368,7 +42235,7 @@ function toSemanticEntry(filePath, frontmatter, body2) {
 async function schemaIssues(paths) {
   const issues = [];
   const schema = await readWorkspaceSchemaSummary(paths);
-  const agentsPath = path23__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME);
+  const agentsPath = path24__default.join(paths.schemaDir, WORKSPACE_SCHEMA_AGENTS_FILENAME);
   if (!await pathExists(schema.wikiSchemaPath)) {
     issues.push(issue2("schema_missing", "warning", `Workspace schema file is missing: schema/${WORKSPACE_SCHEMA_FILENAME}`, schema.wikiSchemaPath));
   } else {
@@ -41755,7 +42622,7 @@ async function listWikiMarkdownFiles(dirPath) {
   const files = [];
   const sortedEntries = entries.sort((left, right) => left.name.localeCompare(right.name));
   for (const entry of sortedEntries) {
-    const filePath = path23__default.join(dirPath, entry.name);
+    const filePath = path24__default.join(dirPath, entry.name);
     if (entry.isDirectory()) {
       files.push(...await listWikiMarkdownFiles(filePath));
       continue;
@@ -41979,7 +42846,7 @@ async function resolveCompileSource(input, paths, now) {
 }
 async function buildCompileProposals(input, paths, now, resolvedSource) {
   const sourceTarget = `wiki/sources/${resolvedSource.sourcePageId}.md`;
-  const sourceExists = await pathExists(path23__default.join(paths.root, sourceTarget));
+  const sourceExists = await pathExists(path24__default.join(paths.root, sourceTarget));
   const existingEntries = await listWiki(paths);
   const sourcePageTitle = resolvedSource.sourceTitle?.trim() || `Source ${resolvedSource.sourcePageId}`;
   const existingSourceEntry = existingEntries.find((entry) => entry.id === resolvedSource.sourcePageId);
@@ -42001,7 +42868,7 @@ async function buildCompileProposals(input, paths, now, resolvedSource) {
     target: sourceTarget,
     summary: truncateSummary(`Compile source page ${sourcePageTitle}`),
     entry: sourceEntry,
-    baseHash: sourceExists ? computeContentHash(await readPatchFile(path23__default.join(paths.root, sourceTarget))) : void 0,
+    baseHash: sourceExists ? computeContentHash(await readPatchFile(path24__default.join(paths.root, sourceTarget))) : void 0,
     baseVersion: existingSourceEntry?.version
   }];
   const relatedCandidates = await discoverRelatedEntryCandidates(paths, resolvedSource.sourceContent, resolvedSource.sourceTitle);
@@ -42021,7 +42888,7 @@ async function buildCompileProposals(input, paths, now, resolvedSource) {
         rawSourceRefs: mergeRawSourceRefs(existing.rawSourceRefs, existing.rawSourceRef, { ref: resolvedSource.rawSourceRef }),
         body: appendSourceCompileNote(existing.body, resolvedSource.sourcePageId, resolvedSource.rawSourceRef)
       },
-      baseHash: computeContentHash(await readPatchFile(path23__default.join(paths.wikiDir, `${existing.id}.md`))),
+      baseHash: computeContentHash(await readPatchFile(path24__default.join(paths.wikiDir, `${existing.id}.md`))),
       baseVersion: existing.version
     });
   }
@@ -42195,7 +43062,7 @@ async function planIngest(input, paths, now) {
   const target2 = `wiki/${input.id}.md`;
   const proposer = input.proposer ?? "tool:wiki_ingest";
   const currentEntry = await readWikiEntry(input.id, paths);
-  const currentMarkdown = currentEntry ? await readPatchFile(path23__default.join(paths.wikiDir, `${input.id}.md`)) : void 0;
+  const currentMarkdown = currentEntry ? await readPatchFile(path24__default.join(paths.wikiDir, `${input.id}.md`)) : void 0;
   const currentHash = currentMarkdown ? computeContentHash(currentMarkdown) : void 0;
   const rawSource = buildRawSourceEntry(input, now);
   await ensureWorkspaceSchema(paths);
@@ -42390,7 +43257,7 @@ async function stageIngestPlan(plan, paths) {
     })
   };
   if (plan.kind === "conflict") {
-    const record5 = await createConflict({
+    const record6 = await createConflict({
       reason: plan.conflict.reason,
       target: `wiki/${entry.id}.md`,
       wikiId: entry.id,
@@ -42408,17 +43275,17 @@ async function stageIngestPlan(plan, paths) {
       warnings: plan.warnings
     }, paths);
     await appendLog(paths, "conflict detected", {
-      conflict_id: record5.meta.id,
+      conflict_id: record6.meta.id,
       patch_id: null,
       raw_source_ref: rawSourceRef,
       reason: plan.conflict.reason,
-      target: record5.meta.target,
-      wiki_id: record5.meta.wikiId
+      target: record6.meta.target,
+      wiki_id: record6.meta.wikiId
     });
     return {
       ok: false,
       mode: plan.mode,
-      conflict_id: record5.meta.id,
+      conflict_id: record6.meta.id,
       raw_source_ref: rawSourceRef,
       warnings: plan.warnings
     };
@@ -42874,11 +43741,11 @@ async function editQueuedPatch(input, paths) {
   };
 }
 async function readQueuedPatchSnapshot(paths, patchId) {
-  const queueDir = path23__default.join(paths.queueDir, patchId);
-  const markdown = await readPatchFile(path23__default.join(queueDir, PATCH_FILENAME));
+  const queueDir = path24__default.join(paths.queueDir, patchId);
+  const markdown = await readPatchFile(path24__default.join(queueDir, PATCH_FILENAME));
   return {
     patch: await parsePatch(markdown),
-    meta: await readJsonFile2(path23__default.join(queueDir, PATCH_META_FILENAME)),
+    meta: await readJsonFile2(path24__default.join(queueDir, PATCH_META_FILENAME)),
     patchHash: computeContentHash(markdown)
   };
 }
@@ -42964,11 +43831,11 @@ function applyBodyReplacement(entry, replaceInput) {
 }
 function parseBodyReplace(value) {
   if (value === void 0 || value === null) return void 0;
-  const record5 = value;
+  const record6 = value;
   return {
-    find: String(record5.find ?? ""),
-    replace: String(record5.replace ?? ""),
-    expected_occurrences: typeof record5.expected_occurrences === "number" ? record5.expected_occurrences : void 0
+    find: String(record6.find ?? ""),
+    replace: String(record6.replace ?? ""),
+    expected_occurrences: typeof record6.expected_occurrences === "number" ? record6.expected_occurrences : void 0
   };
 }
 function stringParam(value) {
@@ -43640,7 +44507,7 @@ ${input.answer ?? ""}`)}`;
   assertSafeEntryId(targetId);
   const subdir = input.targetType === "synthesis" ? "synthesis" : "queries";
   const target2 = `wiki/${subdir}/${targetId}.md`;
-  const absoluteTarget = path23__default.join(paths.root, target2);
+  const absoluteTarget = path24__default.join(paths.root, target2);
   const exists = await pathExists(absoluteTarget);
   const existingEntry = exists ? await readWikiEntry(targetId, paths) : null;
   if (exists && !existingEntry) {
@@ -43722,7 +44589,7 @@ function assertSafeRawRef(rawRef) {
   if (!rawRef.startsWith("raw/")) {
     throw new Error(`[fleet-wiki] wiki_query raw source ref must point into raw/: ${rawRef}`);
   }
-  if (rawRef.includes("..") || path23__default.isAbsolute(rawRef)) {
+  if (rawRef.includes("..") || path24__default.isAbsolute(rawRef)) {
     throw new Error(`[fleet-wiki] wiki_query raw source ref escapes raw/: ${rawRef}`);
   }
 }
@@ -44291,15 +45158,15 @@ function buildWikiResolveSpec(resolver) {
     ]
   }, resolver);
 }
-function buildWikiToolSpec(config2, usage3, resolver) {
+function buildWikiToolSpec(config2, usage4, resolver) {
   return {
     id: config2.name,
     tag: config2.name,
     title: config2.label,
     description: config2.description,
     promptSnippet: config2.promptSnippet,
-    whenToUse: usage3.whenToUse,
-    whenNotToUse: usage3.whenNotToUse,
+    whenToUse: usage4.whenToUse,
+    whenNotToUse: usage4.whenNotToUse,
     usageGuidelines: config2.promptGuidelines,
     parameters: config2.parameters,
     execute: async (args, ctx) => {
@@ -44328,16 +45195,16 @@ function createResolver(deps, hooks) {
   } };
 }
 function resolveLocked(workspace, hooks) {
-  const destination = path23__default.join(workspace.path, "knowledge");
-  const source = path23__default.join(workspace.cwd, ".fleet", "knowledge");
-  const markerPath = path23__default.join(workspace.path, MARKER_NAME);
+  const destination = path24__default.join(workspace.path, "knowledge");
+  const source = path24__default.join(workspace.cwd, ".fleet", "knowledge");
+  const markerPath = path24__default.join(workspace.path, MARKER_NAME);
   const destinationState = inspectTree(destination, true);
   if (destinationState === "content") return createMemoryPaths(destination);
   if (destinationState === "unsafe") throw new Error("Unsafe Fleet Wiki destination state");
   const marker = readMarker(markerPath);
   const stagingEntries = inspectReservedControlState(workspace.path);
   if (marker) {
-    const staging2 = path23__default.join(workspace.path, `${STAGING_PREFIX}${marker.transactionId}`);
+    const staging2 = path24__default.join(workspace.path, `${STAGING_PREFIX}${marker.transactionId}`);
     const stagingState = inspectTree(staging2);
     if (stagingState === "content") {
       removeEmptyDirectories(destination);
@@ -44352,7 +45219,7 @@ function resolveLocked(workspace, hooks) {
   if (sourceState !== "content") return createMemoryPaths(destination);
   removeEmptyDirectories(destination);
   const transactionId = randomUUID();
-  const staging = path23__default.join(workspace.path, `${STAGING_PREFIX}${transactionId}`);
+  const staging = path24__default.join(workspace.path, `${STAGING_PREFIX}${transactionId}`);
   copyTree(source, staging, hooks);
   if (inspectTree(staging) !== "content") throw new Error("Invalid Fleet Wiki migration staging result");
   syncDirectory(staging);
@@ -44380,7 +45247,7 @@ function inspectTree(target2, regularRootIsContent = false, treeRoot = target2)
   if (nodeKind === "file") return regularRootIsContent ? "content" : "unsafe";
   let content = false;
   for (const entry of fs9.readdirSync(target2, { withFileTypes: true })) {
-    const entryPath = path23__default.join(target2, entry.name);
+    const entryPath = path24__default.join(target2, entry.name);
     if (entry.isSymbolicLink()) {
       if (readSafeFileSymlink(treeRoot, entryPath) === null) return "unsafe";
       content = true;
@@ -44412,15 +45279,15 @@ function readMarker(markerPath) {
     throw new Error("Invalid Fleet Wiki migration marker");
   }
   if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("Invalid Fleet Wiki migration marker");
-  const record5 = value;
-  if (record5.version !== 1 || record5.outcome !== "copied" || typeof record5.transactionId !== "string" || !/^[0-9a-f-]{36}$/i.test(record5.transactionId) || typeof record5.completedAt !== "string") throw new Error("Invalid Fleet Wiki migration marker");
-  return record5;
+  const record6 = value;
+  if (record6.version !== 1 || record6.outcome !== "copied" || typeof record6.transactionId !== "string" || !/^[0-9a-f-]{36}$/i.test(record6.transactionId) || typeof record6.completedAt !== "string") throw new Error("Invalid Fleet Wiki migration marker");
+  return record6;
 }
 function copyTree(source, destination, hooks, sourceRoot = source) {
   fs9.mkdirSync(destination, { recursive: true });
   for (const entry of fs9.readdirSync(source, { withFileTypes: true })) {
-    const from = path23__default.join(source, entry.name);
-    const to = path23__default.join(destination, entry.name);
+    const from = path24__default.join(source, entry.name);
+    const to = path24__default.join(destination, entry.name);
     const stat5 = fs9.lstatSync(from);
     if (stat5.isSymbolicLink()) {
       const target2 = readSafeFileSymlink(sourceRoot, from);
@@ -44440,9 +45307,9 @@ function copyTree(source, destination, hooks, sourceRoot = source) {
 }
 function readSafeFileSymlink(treeRoot, linkPath) {
   const target2 = fs9.readlinkSync(linkPath);
-  if (path23__default.posix.isAbsolute(target2) || path23__default.win32.isAbsolute(target2)) return null;
-  const lexicalRoot = path23__default.resolve(treeRoot);
-  const lexicalTarget = path23__default.resolve(path23__default.dirname(linkPath), target2);
+  if (path24__default.posix.isAbsolute(target2) || path24__default.win32.isAbsolute(target2)) return null;
+  const lexicalRoot = path24__default.resolve(treeRoot);
+  const lexicalTarget = path24__default.resolve(path24__default.dirname(linkPath), target2);
   if (!isWithinRoot(lexicalRoot, lexicalTarget)) return null;
   let canonicalRoot;
   let canonicalTarget;
@@ -44459,8 +45326,8 @@ function readSafeFileSymlink(treeRoot, linkPath) {
   return target2;
 }
 function isWithinRoot(root, target2) {
-  const relative = path23__default.relative(root, target2);
-  return relative === "" || relative !== ".." && !relative.startsWith(`..${path23__default.sep}`) && !path23__default.isAbsolute(relative);
+  const relative = path24__default.relative(root, target2);
+  return relative === "" || relative !== ".." && !relative.startsWith(`..${path24__default.sep}`) && !path24__default.isAbsolute(relative);
 }
 function classifyWikiWorkspaceNodeForTest(stat5) {
   if (stat5.isSymbolicLink()) return "unsafe";
@@ -44475,13 +45342,13 @@ function removeEmptyDirectories(target2) {
   if (state === "empty") fs9.rmSync(target2, { recursive: true, force: false });
 }
 function removePriorStaging(workspacePath, stagingEntries) {
-  for (const name of stagingEntries) fs9.rmSync(path23__default.join(workspacePath, name), { recursive: true, force: false });
+  for (const name of stagingEntries) fs9.rmSync(path24__default.join(workspacePath, name), { recursive: true, force: false });
 }
 function inspectReservedControlState(workspacePath) {
   const stagingEntries = [];
   for (const entry of fs9.readdirSync(workspacePath, { withFileTypes: true })) {
     if (entry.name.startsWith(`${MARKER_NAME}.`)) {
-      const residuePath = path23__default.join(workspacePath, entry.name);
+      const residuePath = path24__default.join(workspacePath, entry.name);
       const residue = fs9.lstatSync(residuePath);
       if (MARKER_TEMP_REGEXP.test(entry.name) && residue.isFile() && !residue.isSymbolicLink()) {
         fs9.unlinkSync(residuePath);
@@ -44491,7 +45358,7 @@ function inspectReservedControlState(workspacePath) {
     }
     if (!entry.name.startsWith(STAGING_PREFIX)) continue;
     if (!/^[0-9a-f-]{36}$/i.test(entry.name.slice(STAGING_PREFIX.length)) || entry.isSymbolicLink() || !entry.isDirectory()) throw new Error("Unsafe Fleet Wiki migration staging state");
-    if (inspectTree(path23__default.join(workspacePath, entry.name)) === "unsafe") throw new Error("Unsafe Fleet Wiki migration staging state");
+    if (inspectTree(path24__default.join(workspacePath, entry.name)) === "unsafe") throw new Error("Unsafe Fleet Wiki migration staging state");
     stagingEntries.push(entry.name);
   }
   return stagingEntries;
@@ -44680,7 +45547,7 @@ async function createFleetCliRuntime(options = {}) {
   const wikiWorkspaceResolver = createWikiWorkspaceResolver({
     ensureWorkspace: (cwd) => ensureWorkspaceDirectory(dataDir, cwd),
     withMigrationLock: (workspace, operation) => withDirectoryLock(
-      { lockDir: path23__default.join(workspace.path, "knowledge.migration.lock") },
+      { lockDir: path24__default.join(workspace.path, "knowledge.migration.lock") },
       operation
     )
   });
@@ -44735,7 +45602,7 @@ function applyStoredWireLog(store, dataDir) {
 }
 function applyWireLog(stored, dataDir) {
   setWireLogTarget(stored === void 0 ? void 0 : stored ? {
-    path: path23__default.join(dataDir, "logs", "fleet-cli-gateway-wire.jsonl"),
+    path: path24__default.join(dataDir, "logs", "fleet-cli-gateway-wire.jsonl"),
     maxBytes: DEFAULT_WIRE_LOG_MAX_BYTES
   } : null);
 }
@@ -45791,7 +46658,7 @@ function createConsoleLock(deps = {}) {
   }
   function assertLockModes(lockFile) {
     if (typeof process.getuid !== "function") return;
-    const dir = path23__default.dirname(lockFile);
+    const dir = path24__default.dirname(lockFile);
     const dirMode = fsImpl.statSync(dir).mode & 511;
     const fileMode = fsImpl.statSync(lockFile).mode & 511;
     if (dirMode !== LOCK_DIR_MODE) {
@@ -45848,26 +46715,26 @@ function isDesktopDevelopmentEnvironment(env) {
   return env[DESKTOP_DEVELOPMENT_ENV] === "1";
 }
 function resolveCanonicalStableConsolePaths(input) {
-  const dir = input.consoleDirOverride ?? path23__default.join(input.tmpDir, `${LOCK_DIR_NAME3}-${input.uid}-stable`);
-  const dataDir = input.consoleDirOverride ?? path23__default.join(input.fleetDataDir, CONSOLE_DATA_DIR_NAME);
+  const dir = input.consoleDirOverride ?? path24__default.join(input.tmpDir, `${LOCK_DIR_NAME3}-${input.uid}-stable`);
+  const dataDir = input.consoleDirOverride ?? path24__default.join(input.fleetDataDir, CONSOLE_DATA_DIR_NAME);
   return {
     dir,
-    lockFile: path23__default.join(dir, LOCK_FILE_NAME),
+    lockFile: path24__default.join(dir, LOCK_FILE_NAME),
     dataDir,
-    stateFile: path23__default.join(dataDir, CONSOLE_STATE_FILE_NAME),
-    settingsFile: path23__default.join(dataDir, CONSOLE_SETTINGS_FILE_NAME),
-    capturesDir: path23__default.join(dataDir, CONSOLE_CAPTURES_DIR_NAME)
+    stateFile: path24__default.join(dataDir, CONSOLE_STATE_FILE_NAME),
+    settingsFile: path24__default.join(dataDir, CONSOLE_SETTINGS_FILE_NAME),
+    capturesDir: path24__default.join(dataDir, CONSOLE_CAPTURES_DIR_NAME)
   };
 }
 function resolveCanonicalLocalConsolePaths(input) {
-  const dir = path23__default.join(path23__default.resolve(input.packageRoot, "..", ".."), ".fleet", CONSOLE_DATA_DIR_NAME);
+  const dir = path24__default.join(path24__default.resolve(input.packageRoot, "..", ".."), ".fleet", CONSOLE_DATA_DIR_NAME);
   return {
     dir,
-    lockFile: path23__default.join(dir, LOCK_FILE_NAME),
+    lockFile: path24__default.join(dir, LOCK_FILE_NAME),
     dataDir: dir,
-    stateFile: path23__default.join(dir, CONSOLE_STATE_FILE_NAME),
-    settingsFile: path23__default.join(dir, CONSOLE_SETTINGS_FILE_NAME),
-    capturesDir: path23__default.join(dir, CONSOLE_CAPTURES_DIR_NAME)
+    stateFile: path24__default.join(dir, CONSOLE_STATE_FILE_NAME),
+    settingsFile: path24__default.join(dir, CONSOLE_SETTINGS_FILE_NAME),
+    capturesDir: path24__default.join(dir, CONSOLE_CAPTURES_DIR_NAME)
   };
 }
 function isDesktopResourceRootMarkerValid(content) {
@@ -45893,17 +46760,17 @@ function isDesktopDevelopmentEnvironment2(env = process.env) {
   return isDesktopDevelopmentEnvironment(env);
 }
 function validateDesktopResourceRoot(root, expectedPackageRoot = resolveDesktopProtocolPackageRoot()) {
-  if (!path23__default.isAbsolute(root)) throw new Error("desktop_resource_root_not_absolute");
+  if (!path24__default.isAbsolute(root)) throw new Error("desktop_resource_root_not_absolute");
   const resolvedRoot = fs9__default.realpathSync(root);
   const expectedRoot = fs9__default.realpathSync(expectedPackageRoot);
   if (resolvedRoot !== expectedRoot) throw new Error("desktop_resource_root_invalid");
-  const markerPath = path23__default.join(resolvedRoot, DESKTOP_RESOURCE_ROOT_MARKER);
+  const markerPath = path24__default.join(resolvedRoot, DESKTOP_RESOURCE_ROOT_MARKER);
   const marker = fs9__default.readFileSync(markerPath, "utf8");
   if (!isDesktopResourceRootMarkerValid(marker)) throw new Error("desktop_resource_root_marker_invalid");
   return resolvedRoot;
 }
 function validateDesktopDevelopmentResourceRoot(root) {
-  if (!path23__default.isAbsolute(root)) throw new Error("desktop_resource_root_not_absolute");
+  if (!path24__default.isAbsolute(root)) throw new Error("desktop_resource_root_not_absolute");
   let resolvedRoot;
   try {
     resolvedRoot = fs9__default.realpathSync(root);
@@ -45918,7 +46785,7 @@ function resolveDesktopProtocolPackageRoot() {
   const requireFromHere = createRequire(import.meta.url);
   for (const candidate of ["../package.json", "../../package.json"]) {
     try {
-      return path23__default.dirname(requireFromHere.resolve(candidate));
+      return path24__default.dirname(requireFromHere.resolve(candidate));
     } catch (error51) {
       if (error51.code !== "MODULE_NOT_FOUND") throw error51;
     }
@@ -45933,15 +46800,15 @@ function readFleetConsoleRelease(env = process.env) {
   if (desktop) return readReleaseAt(desktop.resourceRoot, readPackageChannel(desktop.resourceRoot));
   const requireFromHere = createRequire(import.meta.url);
   const packageJsonPath = resolvePackageJsonPath(requireFromHere);
-  const packageRoot = path23__default.dirname(packageJsonPath);
+  const packageRoot = path24__default.dirname(packageJsonPath);
   return readReleaseAt(packageRoot, readPackageChannel(packageRoot, requireFromHere), requireFromHere);
 }
 function readPackageChannel(packageRoot, requireFromHere = createRequire(import.meta.url)) {
-  const pkg = requireFromHere(path23__default.join(packageRoot, "package.json"));
+  const pkg = requireFromHere(path24__default.join(packageRoot, "package.json"));
   return pkg.private === true ? "local" : "stable";
 }
 function readReleaseAt(packageRoot, channel, requireFromHere = createRequire(import.meta.url)) {
-  const packageJsonPath = path23__default.join(packageRoot, "package.json");
+  const packageJsonPath = path24__default.join(packageRoot, "package.json");
   const pkg = requireFromHere(packageJsonPath);
   return { channel, version: pkg.version ?? "", packageRoot };
 }
@@ -45969,14 +46836,14 @@ function readConsoleDirOverride(env) {
 function createConsolePaths(deps = {}) {
   const env = deps.env ?? process.env;
   const base = readConsoleDirOverride(env) ?? defaultConsoleBaseDir(deps);
-  return { dir: base, lockFile: path23__default.join(base, "console.lock") };
+  return { dir: base, lockFile: path24__default.join(base, "console.lock") };
 }
 function createConsoleDataPaths(deps = {}) {
   const dir = defaultConsoleDataBaseDir(deps);
   return {
     dir,
-    stateFile: path23__default.join(dir, CONSOLE_STATE_FILE_NAME2),
-    settingsFile: path23__default.join(dir, CONSOLE_SETTINGS_FILE_NAME2)
+    stateFile: path24__default.join(dir, CONSOLE_STATE_FILE_NAME2),
+    settingsFile: path24__default.join(dir, CONSOLE_SETTINGS_FILE_NAME2)
   };
 }
 function defaultConsoleBaseDir(deps) {
@@ -45995,7 +46862,7 @@ function defaultConsoleBaseDir(deps) {
 }
 function defaultConsoleDataBaseDir(deps) {
   if (deps.fleetDataDir !== void 0) {
-    return path23__default.join(deps.fleetDataDir, CONSOLE_DATA_DIR_NAME2);
+    return path24__default.join(deps.fleetDataDir, CONSOLE_DATA_DIR_NAME2);
   }
   const env = deps.env ?? process.env;
   const override = readConsoleDirOverride(env);
@@ -46015,7 +46882,7 @@ function defaultConsoleDataBaseDir(deps) {
   }).dataDir;
 }
 function localConsoleDir(packageRoot) {
-  return path23__default.join(path23__default.resolve(packageRoot, "..", ".."), ".fleet", CONSOLE_RUNTIME_DIR_NAME);
+  return path24__default.join(path24__default.resolve(packageRoot, "..", ".."), ".fleet", CONSOLE_RUNTIME_DIR_NAME);
 }
 
 // sdk/operations/launch-variants.ts
@@ -46024,12 +46891,12 @@ function readLaunchVariantGroups(value) {
   return value.map(readLaunchVariantGroup).filter((group) => group !== null);
 }
 function readLaunchVariantGroup(value) {
-  if (!isRecord11(value) || typeof value.id !== "string" || typeof value.label !== "string" || !Array.isArray(value.rows)) return null;
+  if (!isRecord12(value) || typeof value.id !== "string" || typeof value.label !== "string" || !Array.isArray(value.rows)) return null;
   const rows = value.rows.map(readLaunchVariantRow).filter((row) => row !== null);
   return rows.length > 0 ? { id: value.id, label: value.label, rows } : null;
 }
 function readLaunchVariantRow(value) {
-  if (!isRecord11(value) || typeof value.id !== "string" || typeof value.label !== "string") return null;
+  if (!isRecord12(value) || typeof value.id !== "string" || typeof value.label !== "string") return null;
   const launch = readLaunchPayload(value.launch);
   if (!launch) return null;
   const chips = Array.isArray(value.chips) ? value.chips.map(readLaunchVariantChip).filter((chip) => chip !== null) : [];
@@ -46048,7 +46915,7 @@ function readLaunchVariantRow(value) {
   };
 }
 function readLaunchVariantChip(value) {
-  if (!isRecord11(value) || typeof value.id !== "string" || typeof value.label !== "string") return null;
+  if (!isRecord12(value) || typeof value.id !== "string" || typeof value.label !== "string") return null;
   const launch = readLaunchPayload(value.launch);
   return launch ? { id: value.id, label: value.label, launch } : null;
 }
@@ -46058,11 +46925,11 @@ function readLaunchPayload(value) {
   return Object.keys(launch).length > 0 ? launch : null;
 }
 function isPlainRecord(value) {
-  if (!isRecord11(value)) return false;
+  if (!isRecord12(value)) return false;
   const prototype = Object.getPrototypeOf(value);
   return prototype === Object.prototype || prototype === null;
 }
-function isRecord11(value) {
+function isRecord12(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -46221,7 +47088,7 @@ function effectiveRemoteAccessAdvertisedTuple(settings2) {
 }
 var REMOTE_BIND_HOST = /^(?:\d{1,3}(?:\.\d{1,3}){3}|[A-Za-z0-9](?:[A-Za-z0-9._-]{0,252}[A-Za-z0-9])?)$/u;
 function sanitizeRemoteAccessSettings(value) {
-  if (!isRecord12(value) || "bindHost" in value) return void 0;
+  if (!isRecord13(value) || "bindHost" in value) return void 0;
   if (typeof value.enabled !== "boolean") return void 0;
   const listenAddress = value.listenAddress === "" ? "" : isValidRemoteBindHost(value.listenAddress) ? canonicalizeRemoteBindHost(value.listenAddress) : null;
   const advertisedHost = value.advertisedHost === "" ? "" : isValidRemoteAdvertisedHost(value.advertisedHost) ? canonicalizeRemoteBindHost(value.advertisedHost) : null;
@@ -46269,7 +47136,7 @@ function createConsoleSettingsStore(deps = {}) {
   const readFile7 = deps.readFile ?? ((file2) => fs9__default.readFileSync(file2, "utf8"));
   const base = createStore({
     filePath: paths.settingsFile,
-    lockDir: path23__default.join(paths.dir, SETTINGS_LOCK_DIR_NAME),
+    lockDir: path24__default.join(paths.dir, SETTINGS_LOCK_DIR_NAME),
     lockOwnerFileName: SETTINGS_LOCK_OWNER_FILE_NAME,
     now: deps.now,
     sanitize: sanitizeConsoleSettingsData,
@@ -46303,7 +47170,7 @@ function createConsoleSettingsStore(deps = {}) {
   };
 }
 function sanitizeConsoleSettingsData(value) {
-  if (!isRecord12(value)) return emptyConsoleSettingsData();
+  if (!isRecord13(value)) return emptyConsoleSettingsData();
   if (value.version !== SETTINGS_VERSION) return emptyConsoleSettingsData();
   const general = readConsoleGeneralSettings(value.general);
   const plugins = readConsolePluginSettings(value.plugins);
@@ -46318,7 +47185,7 @@ function emptyConsoleSettingsData() {
 }
 function sanitizeUiFontSettings(value) {
   if (isConsoleUiFontId(value)) return { source: "builtin", id: value, size: DEFAULT_UI_FONT_SETTINGS.size };
-  if (!isRecord12(value) || !isValidUiFontSize(value.size)) return void 0;
+  if (!isRecord13(value) || !isValidUiFontSize(value.size)) return void 0;
   if (value.source === "builtin" && isConsoleUiFontId(value.id)) {
     return { source: "builtin", id: value.id, size: value.size };
   }
@@ -46339,12 +47206,12 @@ function sanitizeSeenFeatureTours(value) {
   return [...seen];
 }
 function isUiFontSettings(value) {
-  if (!isRecord12(value) || !isValidUiFontSize(value.size)) return false;
+  if (!isRecord13(value) || !isValidUiFontSize(value.size)) return false;
   if (value.source === "builtin") return isConsoleUiFontId(value.id);
   return value.source === "system" && typeof value.familyName === "string" && value.familyName.length > 0 && value.familyName === sanitizeSystemFontFamily(value.familyName);
 }
 function readConsoleGeneralSettings(value) {
-  if (!isRecord12(value)) return null;
+  if (!isRecord13(value)) return null;
   const consolePortMode = value.consolePortMode === "dynamic" || value.consolePortMode === "static" ? value.consolePortMode : void 0;
   const consoleStaticPort = isValidConsoleStaticPort(value.consoleStaticPort) ? value.consoleStaticPort : void 0;
   const language = value.language === "auto" || value.language === "en" || value.language === "ko" ? value.language : void 0;
@@ -46363,11 +47230,11 @@ function readConsoleGeneralSettings(value) {
   };
 }
 function readConsolePluginSettings(value) {
-  if (!isRecord12(value)) return null;
+  if (!isRecord13(value)) return null;
   const result = {};
   for (const [key, entry] of Object.entries(value)) {
     if (!PLUGIN_ID_PATTERN.test(key)) continue;
-    if (!isRecord12(entry)) continue;
+    if (!isRecord13(entry)) continue;
     result[key] = entry;
   }
   return result;
@@ -46376,13 +47243,13 @@ function isValidRemoteAdvertisedHost(value) {
   return isValidRemoteBindHost(value);
 }
 function sanitizeRemotePortSetting(value) {
-  if (!isRecord12(value) || value.mode !== "auto" && value.mode !== "custom" || !isBindablePort(value.value)) return null;
+  if (!isRecord13(value) || value.mode !== "auto" && value.mode !== "custom" || !isBindablePort(value.value)) return null;
   if (value.mode === "auto" && (value.value < REMOTE_AUTO_PORT_MIN || value.value > REMOTE_AUTO_PORT_MAX)) return null;
   return { mode: value.mode, value: value.value };
 }
 function sanitizeAcknowledgment(value) {
   if (value === null) return null;
-  if (!isRecord12(value) || value.version !== 1 || !isValidRemoteBindHost(value.listenAddress) || !isValidRemoteAdvertisedHost(value.advertisedHost) || !isBindablePort(value.listenPort) || !isBindablePort(value.advertisedPort)) return null;
+  if (!isRecord13(value) || value.version !== 1 || !isValidRemoteBindHost(value.listenAddress) || !isValidRemoteAdvertisedHost(value.advertisedHost) || !isBindablePort(value.listenPort) || !isBindablePort(value.advertisedPort)) return null;
   return { version: 1, listenAddress: canonicalizeRemoteBindHost(value.listenAddress), listenPort: value.listenPort, advertisedHost: canonicalizeRemoteBindHost(value.advertisedHost), advertisedPort: value.advertisedPort };
 }
 function acknowledgmentMatches(settings2, acknowledgment) {
@@ -46405,24 +47272,24 @@ function readRawSettings(file2, readFile7) {
   }
 }
 function currentRemoteAccessNeedsMigration(raw) {
-  return isRecord12(raw) && raw.version === 1 && isRecord12(raw.general) && isRecord12(raw.general.remoteAccess) && !("bindHost" in raw.general.remoteAccess) && typeof raw.general.remoteAccess.publicEndpointEnabled !== "boolean";
+  return isRecord13(raw) && raw.version === 1 && isRecord13(raw.general) && isRecord13(raw.general.remoteAccess) && !("bindHost" in raw.general.remoteAccess) && typeof raw.general.remoteAccess.publicEndpointEnabled !== "boolean";
 }
 function readLegacyRemoteAccess(raw, consoleDir, readFile7, randomInt) {
-  if (!isRecord12(raw) || raw.version !== 1 || !isRecord12(raw.general) || !isRecord12(raw.general.remoteAccess)) return null;
+  if (!isRecord13(raw) || raw.version !== 1 || !isRecord13(raw.general) || !isRecord13(raw.general.remoteAccess)) return null;
   const legacy = raw.general.remoteAccess;
   if (!isValidRemoteBindHost(legacy.bindHost)) return null;
   const host = canonicalizeRemoteBindHost(legacy.bindHost);
   let port = null;
   try {
-    const endpoint = JSON.parse(readFile7(path23__default.join(consoleDir, "remote", "listener.json")));
-    if (isRecord12(endpoint) && endpoint.version === 1 && isBindablePort(endpoint.port)) port = endpoint.port;
+    const endpoint = JSON.parse(readFile7(path24__default.join(consoleDir, "remote", "listener.json")));
+    if (isRecord13(endpoint) && endpoint.version === 1 && isBindablePort(endpoint.port)) port = endpoint.port;
   } catch {
   }
   const listenPort = port === null ? { mode: "auto", value: randomAutoPort(randomInt) } : { mode: "custom", value: port };
   const advertisedPort = port === null ? { mode: "auto", value: randomAutoPort(randomInt) } : { mode: "custom", value: port };
   return { enabled: legacy.enabled === true, publicEndpointEnabled: false, listenAddress: host, advertisedHost: host, listenPort, advertisedPort, acknowledgment: null };
 }
-function isRecord12(value) {
+function isRecord13(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isValidConsoleStaticPort(value) {
@@ -46549,7 +47416,7 @@ async function mutateGlobalSettings(req, res, deps) {
   deps.writeJson(res, 200, response);
 }
 function isValidRemoteAccessInput(value) {
-  if (!isRecord12(value) || "bindHost" in value || typeof value.enabled !== "boolean" || typeof value.publicEndpointEnabled !== "boolean") return false;
+  if (!isRecord13(value) || "bindHost" in value || typeof value.enabled !== "boolean" || typeof value.publicEndpointEnabled !== "boolean") return false;
   const validListenAddress = value.listenAddress === "" || isValidRemoteBindHost(value.listenAddress);
   const validAdvertisedHost = value.advertisedHost === "" || isValidRemoteAdvertisedHost(value.advertisedHost);
   if (!validListenAddress || !validAdvertisedHost) return false;
@@ -46563,16 +47430,16 @@ function isValidRemoteAccessInput(value) {
   return value.listenAddress !== "" && value.advertisedHost !== "" && acknowledgmentMatches({ listenAddress: value.listenAddress, advertisedHost: value.advertisedHost, listenPort, advertisedPort }, acknowledgment);
 }
 function normalizeRemoteAccessInput(value) {
-  const record5 = value;
-  const publicEndpointEnabled = record5.publicEndpointEnabled === true;
+  const record6 = value;
+  const publicEndpointEnabled = record6.publicEndpointEnabled === true;
   return {
-    enabled: record5.enabled === true,
+    enabled: record6.enabled === true,
     publicEndpointEnabled,
-    listenAddress: record5.listenAddress === "" ? "" : canonicalizeRemoteBindHost(record5.listenAddress),
-    advertisedHost: record5.advertisedHost === "" ? "" : canonicalizeRemoteBindHost(record5.advertisedHost),
-    listenPort: sanitizeRemotePortSetting(record5.listenPort),
-    advertisedPort: sanitizeRemotePortSetting(record5.advertisedPort),
-    acknowledgment: publicEndpointEnabled ? sanitizeAcknowledgment(record5.acknowledgment) : null
+    listenAddress: record6.listenAddress === "" ? "" : canonicalizeRemoteBindHost(record6.listenAddress),
+    advertisedHost: record6.advertisedHost === "" ? "" : canonicalizeRemoteBindHost(record6.advertisedHost),
+    listenPort: sanitizeRemotePortSetting(record6.listenPort),
+    advertisedPort: sanitizeRemotePortSetting(record6.advertisedPort),
+    acknowledgment: publicEndpointEnabled ? sanitizeAcknowledgment(record6.acknowledgment) : null
   };
 }
 function withRemoteAccessVisibility(state, req, deps) {
@@ -46658,7 +47525,7 @@ function createPluginSettingsRouter(deps) {
         return true;
       }
       const body2 = await deps.readJsonBody(req);
-      if (!isRecord12(body2)) {
+      if (!isRecord13(body2)) {
         deps.writeJson(res, 400, { error: "invalid_json" });
         return true;
       }
@@ -46706,7 +47573,7 @@ function createSanitizedOpDto(node, options = {}) {
   };
 }
 function isResumableProviderSession(value) {
-  if (!isRecord13(value)) return false;
+  if (!isRecord14(value)) return false;
   return value.provider === "claude" && typeof value.sessionId === "string" && value.sessionId.length > 0;
 }
 function sanitizeRecord(value, sensitiveFields) {
@@ -46719,10 +47586,10 @@ function sanitizeRecord(value, sensitiveFields) {
 }
 function sanitizeValue(value, sensitiveFields) {
   if (Array.isArray(value)) return value.map((item) => sanitizeValue(item, sensitiveFields));
-  if (!isRecord13(value)) return value;
+  if (!isRecord14(value)) return value;
   return sanitizeRecord(value, sensitiveFields);
 }
-function isRecord13(value) {
+function isRecord14(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function createOperationStore(deps = {}) {
@@ -46973,8 +47840,8 @@ async function handleCollection(req, res, deps) {
       pluginId: body2.pluginId,
       title: body2.title,
       ...typeof body2.accent === "string" ? { accent: body2.accent } : {},
-      payload: isRecord13(body2.payload) ? body2.payload : {},
-      geometry: isRecord13(body2.geometry) ? readGeometry(body2.geometry) : null
+      payload: isRecord14(body2.payload) ? body2.payload : {},
+      geometry: isRecord14(body2.geometry) ? readGeometry(body2.geometry) : null
     });
     deps.persist();
     deps.writeJson(res, 201, { operation: sanitizeOperationNode(node, deps) });
@@ -47020,8 +47887,8 @@ async function handleItem(req, res, id, deps) {
       ...typeof body2.title === "string" ? { title: body2.title } : {},
       ...typeof body2.accent === "string" || body2.accent === null ? { accent: body2.accent } : {},
       ...typeof body2.groupId === "string" || body2.groupId === null ? { groupId: body2.groupId } : {},
-      ...isRecord13(body2.payload) ? { payload: body2.payload } : {},
-      ...isRecord13(body2.geometry) || body2.geometry === null ? { geometry: body2.geometry === null ? null : readGeometry(body2.geometry) } : {}
+      ...isRecord14(body2.payload) ? { payload: body2.payload } : {},
+      ...isRecord14(body2.geometry) || body2.geometry === null ? { geometry: body2.geometry === null ? null : readGeometry(body2.geometry) } : {}
     });
     if (!node) {
       deps.writeJson(res, 404, { error: "operation_not_found" });
@@ -47474,15 +48341,15 @@ var FILE_MODE2 = 384;
 function createRemoteStorage(consoleDir, deps = {}) {
   const fileSystem = deps.fileSystem ?? fs9__default;
   const ensureDirectory = deps.ensureDirectory ?? ensureSafeDirectory;
-  const directory = path23__default.join(consoleDir, REMOTE_DIR);
+  const directory = path24__default.join(consoleDir, REMOTE_DIR);
   return {
-    path: (file2) => path23__default.join(directory, file2),
+    path: (file2) => path24__default.join(directory, file2),
     /**
      * temp+rename으로 갈아 끼운다. 쓰는 도중에 끊겨도 반쯤 쓰인 파일이 자리를 차지하지 않는다.
      * 파일은 만들어질 때부터 0600이어야 한다 — 나중에 고치면 그사이에 열린 파일이 있다.
      */
     write(file2, content) {
-      const target2 = path23__default.join(directory, file2);
+      const target2 = path24__default.join(directory, file2);
       const temporary = `${target2}.tmp`;
       ensureDirectory(directory);
       fileSystem.writeFileSync(temporary, content, { encoding: "utf8", mode: FILE_MODE2 });
@@ -48598,10 +49465,10 @@ var CoworkStore = class {
     }
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const id = crypto9.randomUUID();
-    const record5 = { id, workspaceId, entryId, state: "idle", revision: 0, draft: body2, baseDraft: body2, baseHash, baseVersion, selection: null, annotations: [], ...identity2, targetPath, createdAt: now, updatedAt: now };
-    this.sessions.set(this.key(workspaceId, id), record5);
+    const record6 = { id, workspaceId, entryId, state: "idle", revision: 0, draft: body2, baseDraft: body2, baseHash, baseVersion, selection: null, annotations: [], ...identity2, targetPath, createdAt: now, updatedAt: now };
+    this.sessions.set(this.key(workspaceId, id), record6);
     this.writers.set(`${workspaceId}:${entryId}`, id);
-    return record5;
+    return record6;
   }
   async get(workspaceId, sessionId) {
     return this.sessions.get(this.key(workspaceId, sessionId)) ?? null;
@@ -48667,9 +49534,9 @@ var CoworkStore = class {
     }
     return dir;
   }
-  release(record5) {
-    this.writers.delete(`${record5.workspaceId}:${record5.entryId}`);
-    const key = this.key(record5.workspaceId, record5.id);
+  release(record6) {
+    this.writers.delete(`${record6.workspaceId}:${record6.entryId}`);
+    const key = this.key(record6.workspaceId, record6.id);
     const dir = this.scratchDirs.get(key);
     this.scratchDirs.delete(key);
     if (dir) void rm(dir, { recursive: true, force: true }).catch(() => void 0);
@@ -49002,9 +49869,9 @@ function claudeGatewayModelCache(options) {
 
 // ../../packages/core-agent/src/claude/config-dir.ts
 async function createIsolatedClaudeConfigDir(tempRoot = tmpdir()) {
-  const root = await mkdtemp(path23__default.join(tempRoot, "core-agent-claude-"));
-  const cachePath = path23__default.join(root, CLAUDE_GATEWAY_MODEL_CACHE_RELPATH);
-  await mkdir(path23__default.dirname(cachePath), { recursive: true, mode: 448 });
+  const root = await mkdtemp(path24__default.join(tempRoot, "core-agent-claude-"));
+  const cachePath = path24__default.join(root, CLAUDE_GATEWAY_MODEL_CACHE_RELPATH);
+  await mkdir(path24__default.dirname(cachePath), { recursive: true, mode: 448 });
   let disposed = false;
   return {
     path: root,
@@ -49328,9 +50195,9 @@ var CoworkGatewayClient = class extends EventEmitter {
   publish(event, toolNames, finish) {
     const type = event.type;
     if (type === "stream_event") {
-      const inner = record4(event.event);
+      const inner = record5(event.event);
       if (inner.type !== "content_block_delta") return;
-      const delta = record4(inner.delta);
+      const delta = record5(inner.delta);
       if (delta.type === "text_delta" && typeof delta.text === "string" && delta.text.length > 0) {
         this.emit("messageChunk", delta.text);
       }
@@ -49360,9 +50227,9 @@ var CoworkGatewayClient = class extends EventEmitter {
 };
 function toServedMcpServers(values) {
   return values.flatMap((value) => {
-    const server = record4(value);
+    const server = record5(value);
     if (typeof server.name !== "string" || typeof server.url !== "string") return [];
-    const headers = Array.isArray(server.headers) ? server.headers.map(record4).flatMap((header) => typeof header.name === "string" && typeof header.value === "string" ? [{ name: header.name, value: header.value }] : []) : [];
+    const headers = Array.isArray(server.headers) ? server.headers.map(record5).flatMap((header) => typeof header.name === "string" && typeof header.value === "string" ? [{ name: header.name, value: header.value }] : []) : [];
     return [{
       name: server.name,
       url: server.url,
@@ -49372,10 +50239,10 @@ function toServedMcpServers(values) {
   });
 }
 function blocks(message) {
-  const content = record4(message).content;
-  return Array.isArray(content) ? content.map(record4) : [];
+  const content = record5(message).content;
+  return Array.isArray(content) ? content.map(record5) : [];
 }
-function record4(value) {
+function record5(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : {};
 }
 function workspaceHash(canonicalCwd) {
@@ -49385,7 +50252,7 @@ async function canonicalizeTheaterPath(cwd) {
   return canonicalizeTheaterPathSync(cwd);
 }
 function canonicalizeTheaterPathSync(cwd) {
-  const resolved = path23__default.resolve(cwd);
+  const resolved = path24__default.resolve(cwd);
   try {
     return fs9__default.realpathSync.native(resolved);
   } catch {
@@ -49393,7 +50260,7 @@ function canonicalizeTheaterPathSync(cwd) {
   }
 }
 function theaterLabel(cwd) {
-  return path23__default.basename(cwd) || cwd;
+  return path24__default.basename(cwd) || cwd;
 }
 var TheaterFolderListError = class extends Error {
   code;
@@ -49426,14 +50293,14 @@ async function listTheaterFolders(requestedPath, deps = {}) {
 }
 function normalizeFolderBrowserPath(value, platform = process.platform) {
   if (typeof value !== "string" || value.length === 0 || value.includes("\0")) throw new TheaterFolderListError("invalid_path");
-  if (isWindowsAmbiguousPath(value, platform) || !path23__default.isAbsolute(value)) throw new TheaterFolderListError("invalid_path");
-  return path23__default.resolve(value);
+  if (isWindowsAmbiguousPath(value, platform) || !path24__default.isAbsolute(value)) throw new TheaterFolderListError("invalid_path");
+  return path24__default.resolve(value);
 }
 function normalizeListPath(requestedPath, platform, deps) {
   if (requestedPath === null || requestedPath === void 0) {
     const home = deps.homedir?.() ?? os3__default.homedir();
     const start = home || deps.cwd?.() || process.cwd();
-    return path23__default.resolve(start);
+    return path24__default.resolve(start);
   }
   return normalizeFolderBrowserPath(requestedPath, platform);
 }
@@ -49484,7 +50351,7 @@ async function openDirectory(targetPath, opendir) {
 }
 async function toTheaterFolderEntry(targetPath, dirent, stat5) {
   if (!dirent.isDirectory() && !dirent.isSymbolicLink()) return null;
-  const entryPath = path23__default.join(targetPath, dirent.name);
+  const entryPath = path24__default.join(targetPath, dirent.name);
   if (dirent.isDirectory()) return { name: dirent.name, path: entryPath, kind: "dir", accessible: true };
   const accessible = await statSymlinkDirectory(entryPath, stat5);
   if (accessible === null) return null;
@@ -49504,10 +50371,10 @@ function mapFolderListFsError(error51) {
   return new TheaterFolderListError("invalid_path");
 }
 function parentPath(targetPath, platform) {
-  const parsed = path23__default.parse(targetPath);
-  const resolved = path23__default.resolve(targetPath);
-  if (resolved === path23__default.resolve(parsed.root)) return null;
-  const parent = path23__default.dirname(resolved);
+  const parsed = path24__default.parse(targetPath);
+  const resolved = path24__default.resolve(targetPath);
+  if (resolved === path24__default.resolve(parsed.root)) return null;
+  const parent = path24__default.dirname(resolved);
   if (platform === "win32" && parent === resolved) return null;
   return parent;
 }
@@ -49547,8 +50414,8 @@ function createFolderGrantStore(deps = {}) {
 }
 function validateAbsoluteDirectory(cwd, statSync4 = fs9__default.statSync) {
   if (typeof cwd !== "string" || cwd.length === 0 || cwd.includes("\0")) throw new Error("invalid_folder");
-  if (isWindowsAmbiguousGrantPath(cwd) || !path23__default.isAbsolute(cwd)) throw new Error("invalid_folder");
-  const normalized = path23__default.resolve(cwd);
+  if (isWindowsAmbiguousGrantPath(cwd) || !path24__default.isAbsolute(cwd)) throw new Error("invalid_folder");
+  const normalized = path24__default.resolve(cwd);
   if (!statSync4(normalized).isDirectory()) throw new Error("invalid_folder");
   return normalized;
 }
@@ -49560,7 +50427,7 @@ var TheaterRegistry = class {
   #items = /* @__PURE__ */ new Map();
   #mruId = null;
   async register(cwd) {
-    const resolved = path23__default.resolve(cwd);
+    const resolved = path24__default.resolve(cwd);
     const real = await canonicalizeTheaterPath(resolved);
     const id = workspaceHash(real);
     const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -49635,7 +50502,7 @@ var WorkspaceRegistry = class {
   #items = /* @__PURE__ */ new Map();
   #mruId = null;
   async register(cwdInput, lastOpenedAt) {
-    const cwd = path23__default.resolve(cwdInput);
+    const cwd = path24__default.resolve(cwdInput);
     const real = await canonicalizeTheaterPath(cwd);
     const id = workspaceHash(real);
     const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -49647,7 +50514,7 @@ var WorkspaceRegistry = class {
       id,
       cwd,
       realpath: real,
-      label: path23__default.basename(cwd),
+      label: path24__default.basename(cwd),
       registeredAt: existing?.registeredAt ?? now,
       // 복원 경로는 durable lastOpenedAt을 그대로 보존해 재시작 후에도 워크스페이스 최근성
       // 순서(MRU·listRegistrations 동순위 처리)가 durable 상태와 일치하게 한다. 일반 등록은 now.
@@ -50273,7 +51140,7 @@ function createConsoleDurableStateStore(deps = {}) {
   const createStore = deps.createStore ?? createDurableJsonStore;
   return createStore({
     filePath: paths.stateFile,
-    lockDir: path23__default.join(paths.dir, STATE_LOCK_DIR_NAME),
+    lockDir: path24__default.join(paths.dir, STATE_LOCK_DIR_NAME),
     lockOwnerFileName: STATE_LOCK_OWNER_FILE_NAME,
     now: deps.now,
     sanitize: sanitizeDurableConsoleState,
@@ -50282,7 +51149,7 @@ function createConsoleDurableStateStore(deps = {}) {
   });
 }
 function sanitizeDurableConsoleState(value) {
-  if (!isRecord14(value)) return emptyDurableConsoleState();
+  if (!isRecord15(value)) return emptyDurableConsoleState();
   const upgraded = migrateToCurrentVersion(value);
   if (upgraded.version !== STATE_VERSION) return emptyDurableConsoleState();
   return {
@@ -50321,13 +51188,13 @@ function migrateV2ToV3(v2) {
   };
 }
 function migrateV1Operation(value) {
-  if (!isRecord14(value)) return null;
+  if (!isRecord15(value)) return null;
   const sessionId = readNonEmptyString(value.sessionId);
   const theaterId = readNonEmptyString(value.theaterId);
   const cwd = readNonEmptyString(value.cwd);
   const createdAt = readFiniteNumber2(value.createdAt);
   if (!sessionId || !theaterId || !cwd || createdAt === null) return null;
-  const title = readOptionalString(value.label) ?? (path23__default.basename(cwd) || cwd);
+  const title = readOptionalString(value.label) ?? (path24__default.basename(cwd) || cwd);
   const payload = { cwd };
   const cliId = readOptionalString(value.cliId);
   const cliLabel = readOptionalString(value.cliLabel);
@@ -50335,7 +51202,7 @@ function migrateV1Operation(value) {
   if (cliId) payload.cliId = cliId;
   if (cliLabel) payload.cliLabel = cliLabel;
   if (labelSource) payload.labelSource = labelSource;
-  if (isRecord14(value.providerSession)) payload.providerSession = value.providerSession;
+  if (isRecord15(value.providerSession)) payload.providerSession = value.providerSession;
   return {
     id: sessionId,
     theaterId,
@@ -50366,7 +51233,7 @@ function readOperations(value) {
   return nodes;
 }
 function sanitizeTheaterRegistration(value) {
-  if (!isRecord14(value)) return null;
+  if (!isRecord15(value)) return null;
   const id = readNonEmptyString(value.id);
   const theaterPath = readNonEmptyString(value.path);
   const realpath3 = readNonEmptyString(value.realpath);
@@ -50386,7 +51253,7 @@ function sanitizeTheaterRegistration(value) {
   };
 }
 function sanitizeOperationNode2(value) {
-  if (!isRecord14(value)) return null;
+  if (!isRecord15(value)) return null;
   const id = readNonEmptyString(value.id);
   const theaterId = readNonEmptyString(value.theaterId);
   const type = readNonEmptyString(value.type);
@@ -50410,7 +51277,7 @@ function sanitizeOperationNode2(value) {
   };
 }
 function sanitizeOperationTimestamps(value) {
-  if (!isRecord14(value)) return null;
+  if (!isRecord15(value)) return null;
   const createdAt = readFiniteNumber2(value.createdAt);
   const updatedAt = readFiniteNumber2(value.updatedAt);
   if (createdAt === null || updatedAt === null) return null;
@@ -50418,7 +51285,7 @@ function sanitizeOperationTimestamps(value) {
 }
 function sanitizeOperationGeometry(value) {
   if (value === null || value === void 0) return null;
-  if (!isRecord14(value)) return null;
+  if (!isRecord15(value)) return null;
   const x3 = readFiniteNumber2(value.x);
   const y = readFiniteNumber2(value.y);
   const width = readFiniteNumber2(value.width);
@@ -50427,7 +51294,7 @@ function sanitizeOperationGeometry(value) {
   if (x3 === null || y === null || width === null || height === null || zIndex === null) return null;
   return { x: x3, y, width, height, zIndex };
 }
-function isRecord14(value) {
+function isRecord15(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readNonEmptyString(value) {
@@ -50437,7 +51304,7 @@ function readOptionalString(value) {
   return typeof value === "string" && value.length > 0 ? value : void 0;
 }
 function readRecord(value) {
-  return isRecord14(value) ? value : {};
+  return isRecord15(value) ? value : {};
 }
 function remapTerminalPluginId(pluginId) {
   return pluginId === "agent" || pluginId === "shell" ? "terminal" : pluginId;
@@ -50471,7 +51338,7 @@ function readOperationGroups(value) {
   return groups;
 }
 function sanitizeOperationGroup(value) {
-  if (!isRecord14(value)) return null;
+  if (!isRecord15(value)) return null;
   const id = readNonEmptyString(value.id);
   const theaterId = readNonEmptyString(value.theaterId);
   const rawName = readNonEmptyString(value.name);
@@ -50493,7 +51360,7 @@ function readDeletionTombstones(value) {
   return tombstones;
 }
 function sanitizeDeletionTombstone(value) {
-  if (!isRecord14(value)) return null;
+  if (!isRecord15(value)) return null;
   const deletionId = readNonEmptyString(value.deletionId);
   const targetId = readNonEmptyString(value.targetId);
   const deletedAt = readFiniteNumber2(value.deletedAt);
@@ -50598,8 +51465,8 @@ function migrateLegacyCaptures(deps) {
   }
 }
 function migrateLegacyCapturesStrict(deps) {
-  if (!path23__default.isAbsolute(deps.consoleDataDir)) return;
-  const capturesDir = path23__default.join(deps.consoleDataDir, LEGACY_CAPTURES_DIR_NAME);
+  if (!path24__default.isAbsolute(deps.consoleDataDir)) return;
+  const capturesDir = path24__default.join(deps.consoleDataDir, LEGACY_CAPTURES_DIR_NAME);
   if (!fs9__default.existsSync(capturesDir)) return;
   let migrated = false;
   let retained = false;
@@ -50643,7 +51510,7 @@ function processCaptureFile(deps, capturesDir, operationId, entry) {
   const operation = deps.operations.get(operationId);
   if (operation) {
     if (hasProviderSession(operation.payload)) return { migrated: false, retained: false };
-    const filePath = path23__default.join(capturesDir, entry);
+    const filePath = path24__default.join(capturesDir, entry);
     const parsed = JSON.parse(fs9__default.readFileSync(filePath, "utf8"));
     const providerSession = sanitizeProviderSession(parsed);
     if (!providerSession) return { migrated: false, retained: false };
@@ -50676,7 +51543,7 @@ function sanitizeProviderSession(value) {
   };
 }
 function isSafeCaptureId(value) {
-  return value.length > 0 && path23__default.basename(value) === value && !value.includes(path23__default.sep) && !value.includes(path23__default.posix.sep);
+  return value.length > 0 && path24__default.basename(value) === value && !value.includes(path24__default.sep) && !value.includes(path24__default.posix.sep);
 }
 var ENDPOINT_FILE = "listener.json";
 var STORE_VERSION2 = 2;
@@ -50970,7 +51837,7 @@ function createRemoteHostStore(consoleDir, deps = {}) {
     try {
       const parsed = JSON.parse(readFile7(storage.path(HOSTS_FILE)));
       if (parsed?.version !== STORE_VERSION3 || !Array.isArray(parsed.hosts)) return [];
-      return parsed.hosts.filter(isRecord15).slice(0, MAX_HOSTS);
+      return parsed.hosts.filter(isRecord16).slice(0, MAX_HOSTS);
     } catch {
       return [];
     }
@@ -50986,7 +51853,7 @@ function createRemoteHostStore(consoleDir, deps = {}) {
     findByOrigin: (origin) => hosts.find((entry) => entry.origin === origin) ?? null,
     remember(link) {
       const existing = hosts.find((entry) => entry.origin === link.origin);
-      const record5 = {
+      const record6 = {
         id: existing?.id ?? randomId(),
         // 이름은 사용자가 고쳐 부를 수 있으므로, 이미 고쳐 부른 이름을 링크가 덮어쓰지 않는다.
         label: existing?.label ?? link.label,
@@ -50998,10 +51865,10 @@ function createRemoteHostStore(consoleDir, deps = {}) {
         addedAt: existing?.addedAt ?? now(),
         lastOpenedAt: existing?.lastOpenedAt ?? null
       };
-      hosts = [record5, ...hosts.filter((entry) => entry.origin !== link.origin)].slice(0, MAX_HOSTS);
-      pending.set(record5.origin, { token: link.token, expiresAt: now() + HANDOFF_TTL_MS });
+      hosts = [record6, ...hosts.filter((entry) => entry.origin !== link.origin)].slice(0, MAX_HOSTS);
+      pending.set(record6.origin, { token: link.token, expiresAt: now() + HANDOFF_TTL_MS });
       write();
-      return record5;
+      return record6;
     },
     rename(id, label) {
       const cleaned = sanitizeAccessLabel(label);
@@ -51033,7 +51900,7 @@ function createRemoteHostStore(consoleDir, deps = {}) {
     }
   };
 }
-function isRecord15(value) {
+function isRecord16(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return false;
   const entry = value;
   return typeof entry.id === "string" && entry.id.length > 0 && typeof entry.label === "string" && typeof entry.origin === "string" && entry.origin.startsWith("https://") && typeof entry.hostname === "string" && entry.hostname.length > 0 && typeof entry.port === "number" && Number.isSafeInteger(entry.port) && typeof entry.fingerprint === "string" && /^[0-9A-F]{64}$/u.test(entry.fingerprint) && typeof entry.addedAt === "number" && (entry.lastOpenedAt === null || typeof entry.lastOpenedAt === "number");
@@ -51289,10 +52156,10 @@ var SHIM_NAMED_EXPORTS = {
 
 // core/host/plugin-host/plugin-host.ts
 function discoverFleetPlugins(options = {}) {
-  const builtInSourceRoot = options.builtInSourceRoot ?? (options.cwd ? path23__default.resolve(options.cwd, "runtime/fleet-plugins") : null);
+  const builtInSourceRoot = options.builtInSourceRoot ?? (options.cwd ? path24__default.resolve(options.cwd, "runtime/fleet-plugins") : null);
   const roots = [
     ...builtInSourceRoot ? [{ root: builtInSourceRoot, builtInDistRoot: options.builtInDistRoot ?? null, external: false }] : [],
-    { root: path23__default.join(options.homeDir ?? os3__default.homedir(), ".fleet", "plugins"), builtInDistRoot: null, external: true }
+    { root: path24__default.join(options.homeDir ?? os3__default.homedir(), ".fleet", "plugins"), builtInDistRoot: null, external: true }
   ];
   const sourcePlugins = roots.flatMap((root) => discoverPluginRoot(root.root, root.builtInDistRoot, root.external));
   const sourcePluginIds = new Set(sourcePlugins.map((plugin) => plugin.manifest.id));
@@ -51300,7 +52167,7 @@ function discoverFleetPlugins(options = {}) {
   return [...sourcePlugins, ...distPlugins];
 }
 function parseFleetPluginManifest(value) {
-  if (!isRecord16(value)) return null;
+  if (!isRecord17(value)) return null;
   const id = readPluginId(value.id);
   if (!id) return null;
   return {
@@ -51318,8 +52185,8 @@ function discoverPluginRoot(root, builtInDistRoot, external) {
   const plugins = [];
   for (const entry of entries) {
     if (!entry.isDirectory() || entry.name === "shared") continue;
-    const pluginRoot = path23__default.join(root, entry.name);
-    const manifestPath = path23__default.join(pluginRoot, "plugin.json");
+    const pluginRoot = path24__default.join(root, entry.name);
+    const manifestPath = path24__default.join(pluginRoot, "plugin.json");
     if (!fs9__default.existsSync(manifestPath)) continue;
     const manifest = readManifest(manifestPath);
     if (!manifest) continue;
@@ -51337,8 +52204,8 @@ function discoverDistPluginRoot(root) {
   const plugins = [];
   for (const entry of entries) {
     if (!entry.isDirectory() || entry.name === "shared") continue;
-    const pluginRoot = path23__default.join(root, entry.name);
-    const manifestPath = path23__default.join(pluginRoot, "plugin.json");
+    const pluginRoot = path24__default.join(root, entry.name);
+    const manifestPath = path24__default.join(pluginRoot, "plugin.json");
     const manifest = fs9__default.existsSync(manifestPath) ? readManifest(manifestPath) : readDistPluginManifest(entry.name);
     if (!manifest) continue;
     const clientEntry = resolveOptionalManifestEntry(pluginRoot, manifest.client, "client");
@@ -51365,10 +52232,10 @@ function resolveRoutesEntry(pluginRoot, manifest, builtInDistRoot) {
     if (manifestRoute2 === false) return false;
     if (manifestRoute2) return manifestRoute2;
   }
-  const manifestRoute = path23__default.join(pluginRoot, "routes.ts");
+  const manifestRoute = path24__default.join(pluginRoot, "routes.ts");
   if (fs9__default.existsSync(manifestRoute)) return manifestRoute;
   if (!builtInDistRoot) return null;
-  const builtRoute = path23__default.join(builtInDistRoot, manifest.id, "routes.mjs");
+  const builtRoute = path24__default.join(builtInDistRoot, manifest.id, "routes.mjs");
   return fs9__default.existsSync(builtRoute) ? builtRoute : null;
 }
 function resolveDistRoutesEntry(pluginRoot, manifest) {
@@ -51382,7 +52249,7 @@ function resolveOptionalManifestEntry(pluginRoot, entryPath, label) {
     console.warn(`[fleet-console] Plugin ${label} entry skipped: unsafe relative path ${entryPath}`);
     return false;
   }
-  const candidate = path23__default.resolve(pluginRoot, entryPath);
+  const candidate = path24__default.resolve(pluginRoot, entryPath);
   if (!fs9__default.existsSync(candidate)) return null;
   const rootRealpath = fs9__default.realpathSync.native(pluginRoot);
   const entryRealpath = fs9__default.realpathSync.native(candidate);
@@ -51400,14 +52267,14 @@ function readDistPluginManifest(id) {
   return pluginId ? { id: pluginId, routes: "routes.mjs" } : null;
 }
 function isSafeRelativeEntry(entryPath) {
-  if (path23__default.isAbsolute(entryPath)) return false;
+  if (path24__default.isAbsolute(entryPath)) return false;
   return entryPath.split(/[\\/]+/u).every((segment) => segment !== "..");
 }
 function isSubpath(root, candidate) {
-  const relative = path23__default.relative(root, candidate);
-  return relative === "" || !relative.startsWith("..") && !path23__default.isAbsolute(relative);
+  const relative = path24__default.relative(root, candidate);
+  return relative === "" || !relative.startsWith("..") && !path24__default.isAbsolute(relative);
 }
-function isRecord16(value) {
+function isRecord17(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var SHIM_DEFINITIONS = [
@@ -51532,7 +52399,7 @@ var PLUGIN_HOST_PACKAGE_EXTERNALS = [
   "@anthropic-ai/claude-agent-sdk"
 ];
 function createHostPackageExternalsPlugin(consoleNodeModules) {
-  const requireFromConsole = consoleNodeModules ? createRequire(path23__default.join(path23__default.dirname(consoleNodeModules), "package.json")) : null;
+  const requireFromConsole = consoleNodeModules ? createRequire(path24__default.join(path24__default.dirname(consoleNodeModules), "package.json")) : null;
   return {
     name: "fleet-console-plugin-host-package-externals",
     setup(build) {
@@ -51552,7 +52419,7 @@ var PLUGIN_BUNDLE_DIR_PREFIX = "fleet-console-plugin-";
 var PLUGIN_BUNDLE_OWNER_FILE = ".fleet-console-plugin-owner.json";
 var PLUGIN_BUNDLE_PID_PATTERN = /^fleet-console-plugin-(\d+)-/u;
 var MAX_PLUGIN_BUNDLE_OWNER_PID = 2147483647;
-var __dirname$1 = path23__default.dirname(fileURLToPath(import.meta.url));
+var __dirname$1 = path24__default.dirname(fileURLToPath(import.meta.url));
 function createFleetPluginHost(deps) {
   const plugins = filterDiscoveredPlugins(discoverFleetPlugins(deps));
   const sensitiveFieldsByPluginId = new Map(plugins.map((plugin) => [plugin.manifest.id, plugin.manifest.sensitiveFields ?? []]));
@@ -51744,15 +52611,15 @@ async function importPluginModule(entry, bundleCacheDir, generatedBundleDirs) {
   return await import(pathToFileURL(entry).href);
 }
 async function writeTemporaryPluginBundle(entry, source, digest, bundleCacheDir, generatedBundleDirs) {
-  const cacheRoot = bundleCacheDir ?? path23__default.join(resolvePluginBundleNodeModules(entry), ".cache");
+  const cacheRoot = bundleCacheDir ?? path24__default.join(resolvePluginBundleNodeModules(entry), ".cache");
   await mkdir(cacheRoot, { recursive: true });
-  const dir = path23__default.join(cacheRoot, `${PLUGIN_BUNDLE_DIR_PREFIX}${process.pid}-${digest}`);
+  const dir = path24__default.join(cacheRoot, `${PLUGIN_BUNDLE_DIR_PREFIX}${process.pid}-${digest}`);
   await mkdir(dir, { recursive: true });
   if (bundleCacheDir) {
     generatedBundleDirs.add(dir);
     await writePluginBundleOwner(dir, process.pid);
   }
-  const file2 = path23__default.join(dir, "routes.mjs");
+  const file2 = path24__default.join(dir, "routes.mjs");
   await writeFile(file2, source, "utf8");
   return file2;
 }
@@ -51763,7 +52630,7 @@ async function removeStalePluginBundleDirs(bundleCacheDir, isProcessAlive2, remo
     const entries = await readdir(bundleCacheDir, { withFileTypes: true });
     for (const entry of entries) {
       if (!entry.name.startsWith(PLUGIN_BUNDLE_DIR_PREFIX)) continue;
-      const entryPath = path23__default.join(bundleCacheDir, entry.name);
+      const entryPath = path24__default.join(bundleCacheDir, entry.name);
       const ownerPid = await readPluginBundleOwnerPid(entryPath, entry.name);
       if (ownerPid !== null && isProcessAlive2(ownerPid)) continue;
       try {
@@ -51780,11 +52647,11 @@ async function removePluginBundleDir(dir) {
   await rm(dir, { recursive: true, force: true });
 }
 async function writePluginBundleOwner(dir, pid) {
-  await writeFile(path23__default.join(dir, PLUGIN_BUNDLE_OWNER_FILE), JSON.stringify({ pid }), "utf8");
+  await writeFile(path24__default.join(dir, PLUGIN_BUNDLE_OWNER_FILE), JSON.stringify({ pid }), "utf8");
 }
 async function readPluginBundleOwnerPid(dir, name) {
   try {
-    const parsed = JSON.parse(await readFile(path23__default.join(dir, PLUGIN_BUNDLE_OWNER_FILE), "utf8"));
+    const parsed = JSON.parse(await readFile(path24__default.join(dir, PLUGIN_BUNDLE_OWNER_FILE), "utf8"));
     if (isPluginBundleOwnerPid(parsed.pid)) return parsed.pid;
   } catch {
   }
@@ -51805,30 +52672,30 @@ function isPluginBundleOwnerPid(value) {
 }
 function resolvePluginBundleNodeModules(entry) {
   const packageNodeModules = resolveConsolePackageNodeModules();
-  let dir = path23__default.dirname(entry);
+  let dir = path24__default.dirname(entry);
   let fallback = packageNodeModules;
   while (true) {
-    const workspaceConsoleNodeModules = path23__default.join(dir, "runtime", "fleet-console", "node_modules");
+    const workspaceConsoleNodeModules = path24__default.join(dir, "runtime", "fleet-console", "node_modules");
     if (hasFleetConsoleSdk(workspaceConsoleNodeModules)) return workspaceConsoleNodeModules;
-    const candidate = path23__default.join(dir, "node_modules");
+    const candidate = path24__default.join(dir, "node_modules");
     if (hasFleetConsoleSdk(candidate)) return candidate;
     if (fallback === null && existsSync(candidate)) fallback = candidate;
-    const parent = path23__default.dirname(dir);
-    if (parent === dir) return fallback ?? path23__default.join(path23__default.dirname(entry), "node_modules");
+    const parent = path24__default.dirname(dir);
+    if (parent === dir) return fallback ?? path24__default.join(path24__default.dirname(entry), "node_modules");
     dir = parent;
   }
 }
 function resolveConsolePackageNodeModules() {
   for (const candidate of [
-    path23__default.resolve(__dirname$1, "..", "node_modules"),
-    path23__default.resolve(__dirname$1, "..", "..", "..", "node_modules")
+    path24__default.resolve(__dirname$1, "..", "node_modules"),
+    path24__default.resolve(__dirname$1, "..", "..", "..", "node_modules")
   ]) {
     if (hasFleetConsoleSdk(candidate)) return candidate;
   }
   return null;
 }
 function hasFleetConsoleSdk(nodeModules) {
-  return existsSync(path23__default.join(nodeModules, "@fleet-console", "sdk"));
+  return existsSync(path24__default.join(nodeModules, "@fleet-console", "sdk"));
 }
 function resolveRegister(mod) {
   if (mod.register) return mod.register;
@@ -52277,7 +53144,7 @@ var MIME_TYPES = {
   ".woff2": "font/woff2"
 };
 function createStaticConsoleHandler(packageRoot, deps) {
-  const consoleRoot = path23__default.join(packageRoot, "dist", "client");
+  const consoleRoot = path24__default.join(packageRoot, "dist", "client");
   return (req, res, pathname) => tryServeStaticConsole(req, res, pathname, consoleRoot, deps?.getActiveTheme);
 }
 function tryServeStaticConsole(req, res, pathname, consoleRoot, getActiveTheme) {
@@ -52293,7 +53160,7 @@ function tryServeStaticConsole(req, res, pathname, consoleRoot, getActiveTheme)
     res.end(JSON.stringify({ error: "Not found" }));
     return true;
   }
-  const absolutePath = path23__default.resolve(consoleRoot, relativePath2);
+  const absolutePath = path24__default.resolve(consoleRoot, relativePath2);
   if (!absolutePath.startsWith(consoleRoot)) {
     res.writeHead(404, withSecurityHeaders2({ "Content-Type": "application/json" }));
     res.end(JSON.stringify({ error: "Not found" }));
@@ -52301,7 +53168,7 @@ function tryServeStaticConsole(req, res, pathname, consoleRoot, getActiveTheme)
   }
   try {
     const data = fs9__default.readFileSync(absolutePath);
-    const contentType = MIME_TYPES[path23__default.extname(absolutePath)] ?? "application/octet-stream";
+    const contentType = MIME_TYPES[path24__default.extname(absolutePath)] ?? "application/octet-stream";
     res.writeHead(200, withSecurityHeaders2({ "Content-Type": contentType }));
     if (req.method === "HEAD") {
       res.end();
@@ -52321,7 +53188,7 @@ function tryServeStaticConsole(req, res, pathname, consoleRoot, getActiveTheme)
 }
 function serveFallbackIndex(req, res, consoleRoot, getActiveTheme) {
   try {
-    const data = fs9__default.readFileSync(path23__default.join(consoleRoot, "index.html"));
+    const data = fs9__default.readFileSync(path24__default.join(consoleRoot, "index.html"));
     res.writeHead(200, withSecurityHeaders2({ "Content-Type": MIME_TYPES[".html"] }));
     if (req.method === "HEAD") {
       res.end();
@@ -52355,7 +53222,7 @@ function resolveConsolePath(pathname) {
   }
   if (withoutPrefix === "") return "index.html";
   if (withoutPrefix.includes("\0")) return null;
-  if (!path23__default.extname(withoutPrefix)) return "index.html";
+  if (!path24__default.extname(withoutPrefix)) return "index.html";
   return withoutPrefix;
 }
 
@@ -52388,10 +53255,10 @@ function createConsoleUpdateApplyService(deps = {}) {
     if (isManagedRuntimePackageRoot(request.currentPackageRoot)) throw new Error("managed_runtime_update_requires_relaunch");
     const packageManager = await preflightInstall(request.currentPackageRoot);
     const stamp = `${now()}-${processPid}`;
-    const workerPath = path23__default.join(tmpDir, `${WORKER_FILE_PREFIX}${stamp}${WORKER_FILE_SUFFIX}`);
+    const workerPath = path24__default.join(tmpDir, `${WORKER_FILE_PREFIX}${stamp}${WORKER_FILE_SUFFIX}`);
     makeDir(request.dataDir, { recursive: true, mode: 448 });
-    const statusFile = path23__default.join(request.dataDir, `${WORKER_FILE_PREFIX}${stamp}${STATUS_FILE_SUFFIX}`);
-    const logFile = path23__default.join(request.dataDir, `${WORKER_FILE_PREFIX}${stamp}${LOG_FILE_SUFFIX}`);
+    const statusFile = path24__default.join(request.dataDir, `${WORKER_FILE_PREFIX}${stamp}${STATUS_FILE_SUFFIX}`);
+    const logFile = path24__default.join(request.dataDir, `${WORKER_FILE_PREFIX}${stamp}${LOG_FILE_SUFFIX}`);
     const script = emitConsoleUpdateWorkerScript({
       currentEndpoint: request.currentEndpoint,
       currentPackageRoot: request.currentPackageRoot,
@@ -52689,9 +53556,9 @@ function sanitizeError(error) {
 `;
 }
 function isManagedRuntimePackageRoot(packageRoot) {
-  if (path23__default.basename(packageRoot) !== "latest" || path23__default.basename(path23__default.dirname(packageRoot)) !== "console") return false;
+  if (path24__default.basename(packageRoot) !== "latest" || path24__default.basename(path24__default.dirname(packageRoot)) !== "console") return false;
   try {
-    return isDesktopResourceRootMarkerValid(fs9__default.readFileSync(path23__default.join(packageRoot, DESKTOP_RESOURCE_ROOT_MARKER), "utf8"));
+    return isDesktopResourceRootMarkerValid(fs9__default.readFileSync(path24__default.join(packageRoot, DESKTOP_RESOURCE_ROOT_MARKER), "utf8"));
   } catch {
     return false;
   }
@@ -52747,7 +53614,7 @@ function resolveDefaultServerModulePath() {
   if (sourcePath.endsWith(".ts")) {
     return sourcePath.replace(/update-apply\.ts$/, "cli.ts");
   }
-  return path23__default.join(path23__default.dirname(sourcePath), "cli.mjs");
+  return path24__default.join(path24__default.dirname(sourcePath), "cli.mjs");
 }
 
 // core/host/update-check.ts
@@ -53121,7 +53988,7 @@ function createConsoleServer(deps = {}) {
       return { cwd: workspace.cwd, path: workspace.path };
     },
     withMigrationLock: (workspace, operation) => withDirectoryLock({
-      lockDir: path23__default.join(workspace.path, "knowledge.migration.lock")
+      lockDir: path24__default.join(workspace.path, "knowledge.migration.lock")
     }, operation)
   });
   const codex = createCodexGateway({
@@ -53268,7 +54135,7 @@ function createConsoleServer(deps = {}) {
     },
     paths: {
       fleetDataDir,
-      pluginDataDir: (pluginId) => path23__default.join(durablePaths.dir, "plugins", pluginId),
+      pluginDataDir: (pluginId) => path24__default.join(durablePaths.dir, "plugins", pluginId),
       resolveTheaterPath: (theaterId) => theaters.get(theaterId)?.realpath ?? null,
       canonicalizeTheaterPath: canonicalizeTheaterPathSync,
       workspaceHash
@@ -53298,7 +54165,7 @@ function createConsoleServer(deps = {}) {
   const pluginHost = createFleetPluginHost({
     ...resolveBuiltInPluginDiscoveryRoots(release.packageRoot),
     homeDir: deps.pluginHomeDir,
-    bundleCacheDir: path23__default.join(durablePaths.dir, "plugin-cache"),
+    bundleCacheDir: path24__default.join(durablePaths.dir, "plugin-cache"),
     routes: routeRegistry,
     upgrades: upgradeRegistry,
     host: pluginHostCapabilities
@@ -54887,11 +55754,11 @@ function errorCodeOf(error51) {
 }
 var REMOTE_PORT_UNAVAILABLE = "FLEET_REMOTE_PORT_UNAVAILABLE";
 function resolveBuiltInPluginDiscoveryRoots(packageRoot) {
-  const packageRootRepo = path23__default.resolve(packageRoot, "..", "..");
-  const sourceRoot = path23__default.join(packageRootRepo, "runtime", "fleet-plugins");
+  const packageRootRepo = path24__default.resolve(packageRoot, "..", "..");
+  const sourceRoot = path24__default.join(packageRootRepo, "runtime", "fleet-plugins");
   return {
     ...fs9__default.existsSync(sourceRoot) ? { builtInSourceRoot: sourceRoot } : {},
-    builtInDistRoot: path23__default.join(packageRoot, "dist", "fleet-plugins")
+    builtInDistRoot: path24__default.join(packageRoot, "dist", "fleet-plugins")
   };
 }
 function createUpgradeListener(deps) {
@@ -55079,14 +55946,14 @@ async function readPluginStorageJson(dataDir, pluginId, key) {
 }
 async function writePluginStorageJson(dataDir, pluginId, key, value) {
   const file2 = resolvePluginStorageFile(dataDir, pluginId, key);
-  await fs9__default.promises.mkdir(path23__default.dirname(file2), { recursive: true });
+  await fs9__default.promises.mkdir(path24__default.dirname(file2), { recursive: true });
   await fs9__default.promises.writeFile(file2, JSON.stringify(value), "utf8");
 }
 function resolvePluginStorageFile(dataDir, pluginId, key) {
   if (!/^[a-z0-9][a-z0-9._-]*$/i.test(pluginId) || !/^[a-z0-9][a-z0-9._-]*$/i.test(key)) {
     throw new Error("invalid_plugin_storage_key");
   }
-  return path23__default.join(dataDir, "plugins", pluginId, `${key}.json`);
+  return path24__default.join(dataDir, "plugins", pluginId, `${key}.json`);
 }
 function isNodeError(error51) {
   return error51 instanceof Error && "code" in error51;