@dotobokuri/fleet-console 1.58.0 → 1.59.0

package/dist/cli.mjs

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import * as fs9 from 'node:fs';
-import fs9__default, { constants, realpathSync, accessSync, existsSync, lstatSync } from 'node:fs';
+import fs9__default, { realpathSync, accessSync, constants as constants$1, existsSync, lstatSync } from 'node:fs';
 import * as path18 from 'node:path';
 import path18__default, { join, resolve, relative, sep } from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
-import { execFile, spawn, execFileSync } from 'node:child_process';
+import { spawn, execFileSync } from 'node:child_process';
 import process4 from 'node:process';
 import * as os4 from 'node:os';
 import os4__default, { tmpdir } from 'node:os';
@@ -15,7 +15,12 @@ import https from 'node:https';
 import { mkdtemp, rm, mkdir, readdir, readFile, stat, appendFile, writeFile, rename, realpath, lstat } from 'node:fs/promises';
 import fontList from 'font-list';
 import net2 from 'node:net';
-import { promisify } from 'node:util';
+import { execFile } from 'child_process';
+import { constants } from 'fs';
+import 'fs/promises';
+import os8 from 'os';
+import { promisify } from 'util';
+import { deflateRawSync } from 'zlib';
 import { EventEmitter } from 'node:events';
 import { query } from '@anthropic-ai/claude-agent-sdk';
 import selfsigned from 'selfsigned';
@@ -92,7 +97,7 @@ function isAccessibleExecutable(candidate, platform) {
   if (!existsSync(candidate)) return false;
   if (platform === "win32") return true;
   try {
-    accessSync(candidate, constants.X_OK);
+    accessSync(candidate, constants$1.X_OK);
     return true;
   } catch {
     return false;
@@ -576,10 +581,10 @@ function isProcessAlive(pid) {
 }
 function sanitizeLockOwner(value) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
-  const record3 = value;
-  const pid = record3.pid;
-  const hostname5 = record3.hostname;
-  const startedAt = record3.startedAt;
+  const record4 = value;
+  const pid = record4.pid;
+  const hostname5 = record4.hostname;
+  const startedAt = record4.startedAt;
   if (!Number.isInteger(pid) || pid <= 0) return null;
   if (typeof hostname5 !== "string" || !hostname5) return null;
   if (!Number.isFinite(startedAt) || startedAt <= 0) return null;
@@ -947,8 +952,8 @@ function readWorkspaceIdentity(identityPath) {
 }
 function isWorkspaceDirectoryIdentity(value) {
   if (typeof value !== "object" || value === null) return false;
-  const record3 = value;
-  return typeof record3.cwd === "string" && record3.cwd.length > 0;
+  const record4 = value;
+  return typeof record4.cwd === "string" && record4.cwd.length > 0;
 }
 
 // ../../packages/core-infra/src/index.ts
@@ -2350,7 +2355,7 @@ async function recordPatchConflict(patch, paths, reason, options) {
   const current = await pathExists(targetPath) ? await readPatchFile(targetPath) : void 0;
   const currentEntry = current ? parseStoredWikiEntry(current) : void 0;
   const proposedEntry = parsePatchBodyEntry(patch.body);
-  const record3 = await createConflict({
+  const record4 = await createConflict({
     reason,
     target: patch.frontmatter.target,
     wikiId: proposedEntry?.id ?? path18__default.basename(patch.frontmatter.target, ".md"),
@@ -2369,14 +2374,14 @@ async function recordPatchConflict(patch, paths, reason, options) {
     now
   }, paths);
   await appendLog(paths, "conflict detected", {
-    conflict_id: record3.meta.id,
+    conflict_id: record4.meta.id,
     patch_id: options?.patchId ?? null,
     raw_source_ref: options?.rawSourceRef ?? null,
     reason,
     target: patch.frontmatter.target,
-    wiki_id: record3.meta.wikiId
+    wiki_id: record4.meta.wikiId
   }, now);
-  return record3.meta.id;
+  return record4.meta.id;
 }
 function parsePatchBodyEntry(content) {
   try {
@@ -2578,7 +2583,7 @@ async function readWikiEntry(id, paths) {
     return readMarkdownFile(fallbackPath);
   }
   const records = await listWikiRecords(paths);
-  const match = records.find((record3) => record3.entry.id === id);
+  const match = records.find((record4) => record4.entry.id === id);
   return match ? match.entry : null;
 }
 async function resolveWikiEntryPath(id, paths) {
@@ -2601,7 +2606,7 @@ async function resolveWikiEntryPath(id, paths) {
     return path18__default.relative(paths.root, fallbackPath).replaceAll(path18__default.sep, "/");
   }
   const records = await listWikiRecords(paths);
-  const match = records.find((record3) => record3.entry.id === id);
+  const match = records.find((record4) => record4.entry.id === id);
   return match ? match.path : null;
 }
 async function writeWikiEntryAtTarget(entry, target, paths) {
@@ -5077,8 +5082,8 @@ function CreateObject(types, value) {
 }
 function FromUnionKey(types, value) {
   const flattened = Flatten(types);
-  const record3 = TryBuildRecord(flattened, value);
-  return IsSchema(record3) ? record3 : CreateObject(flattened, value);
+  const record4 = TryBuildRecord(flattened, value);
+  return IsSchema(record4) ? record4 : CreateObject(flattened, value);
 }
 
 // ../../node_modules/.pnpm/typebox@1.1.34/node_modules/typebox/build/type/engine/record/from_key.mjs
@@ -9710,7 +9715,7 @@ async function stageIngestPlan(plan, paths) {
     })
   };
   if (plan.kind === "conflict") {
-    const record3 = await createConflict({
+    const record4 = await createConflict({
       reason: plan.conflict.reason,
       target: `wiki/${entry.id}.md`,
       wikiId: entry.id,
@@ -9728,17 +9733,17 @@ async function stageIngestPlan(plan, paths) {
       warnings: plan.warnings
     }, paths);
     await appendLog(paths, "conflict detected", {
-      conflict_id: record3.meta.id,
+      conflict_id: record4.meta.id,
       patch_id: null,
       raw_source_ref: rawSourceRef,
       reason: plan.conflict.reason,
-      target: record3.meta.target,
-      wiki_id: record3.meta.wikiId
+      target: record4.meta.target,
+      wiki_id: record4.meta.wikiId
     });
     return {
       ok: false,
       mode: plan.mode,
-      conflict_id: record3.meta.id,
+      conflict_id: record4.meta.id,
       raw_source_ref: rawSourceRef,
       warnings: plan.warnings
     };
@@ -10284,11 +10289,11 @@ function applyBodyReplacement(entry, replaceInput) {
 }
 function parseBodyReplace(value) {
   if (value === void 0 || value === null) return void 0;
-  const record3 = value;
+  const record4 = value;
   return {
-    find: String(record3.find ?? ""),
-    replace: String(record3.replace ?? ""),
-    expected_occurrences: typeof record3.expected_occurrences === "number" ? record3.expected_occurrences : void 0
+    find: String(record4.find ?? ""),
+    replace: String(record4.replace ?? ""),
+    expected_occurrences: typeof record4.expected_occurrences === "number" ? record4.expected_occurrences : void 0
   };
 }
 function stringParam(value) {
@@ -11732,9 +11737,9 @@ function readMarker(markerPath) {
     throw new Error("Invalid Fleet Wiki migration marker");
   }
   if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("Invalid Fleet Wiki migration marker");
-  const record3 = value;
-  if (record3.version !== 1 || record3.outcome !== "copied" || typeof record3.transactionId !== "string" || !/^[0-9a-f-]{36}$/i.test(record3.transactionId) || typeof record3.completedAt !== "string") throw new Error("Invalid Fleet Wiki migration marker");
-  return record3;
+  const record4 = value;
+  if (record4.version !== 1 || record4.outcome !== "copied" || typeof record4.transactionId !== "string" || !/^[0-9a-f-]{36}$/i.test(record4.transactionId) || typeof record4.completedAt !== "string") throw new Error("Invalid Fleet Wiki migration marker");
+  return record4;
 }
 function copyTree(source, destination, hooks, sourceRoot = source) {
   fs9.mkdirSync(destination, { recursive: true });
@@ -12530,16 +12535,16 @@ function isValidRemoteAccessInput(value) {
   return value.listenAddress !== "" && value.advertisedHost !== "" && acknowledgmentMatches({ listenAddress: value.listenAddress, advertisedHost: value.advertisedHost, listenPort, advertisedPort }, acknowledgment);
 }
 function normalizeRemoteAccessInput(value) {
-  const record3 = value;
-  const publicEndpointEnabled = record3.publicEndpointEnabled === true;
+  const record4 = value;
+  const publicEndpointEnabled = record4.publicEndpointEnabled === true;
   return {
-    enabled: record3.enabled === true,
+    enabled: record4.enabled === true,
     publicEndpointEnabled,
-    listenAddress: record3.listenAddress === "" ? "" : canonicalizeRemoteBindHost(record3.listenAddress),
-    advertisedHost: record3.advertisedHost === "" ? "" : canonicalizeRemoteBindHost(record3.advertisedHost),
-    listenPort: sanitizeRemotePortSetting(record3.listenPort),
-    advertisedPort: sanitizeRemotePortSetting(record3.advertisedPort),
-    acknowledgment: publicEndpointEnabled ? sanitizeAcknowledgment(record3.acknowledgment) : null
+    listenAddress: record4.listenAddress === "" ? "" : canonicalizeRemoteBindHost(record4.listenAddress),
+    advertisedHost: record4.advertisedHost === "" ? "" : canonicalizeRemoteBindHost(record4.advertisedHost),
+    listenPort: sanitizeRemotePortSetting(record4.listenPort),
+    advertisedPort: sanitizeRemotePortSetting(record4.advertisedPort),
+    acknowledgment: publicEndpointEnabled ? sanitizeAcknowledgment(record4.acknowledgment) : null
   };
 }
 function withRemoteAccessVisibility(state, req, deps) {
@@ -14565,10 +14570,10 @@ var CoworkStore = class {
     }
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const id = crypto5.randomUUID();
-    const record3 = { id, workspaceId, entryId, state: "idle", revision: 0, draft: body2, baseDraft: body2, baseHash, baseVersion, selection: null, annotations: [], ...identity2, targetPath, createdAt: now, updatedAt: now };
-    this.sessions.set(this.key(workspaceId, id), record3);
+    const record4 = { id, workspaceId, entryId, state: "idle", revision: 0, draft: body2, baseDraft: body2, baseHash, baseVersion, selection: null, annotations: [], ...identity2, targetPath, createdAt: now, updatedAt: now };
+    this.sessions.set(this.key(workspaceId, id), record4);
     this.writers.set(`${workspaceId}:${entryId}`, id);
-    return record3;
+    return record4;
   }
   async get(workspaceId, sessionId) {
     return this.sessions.get(this.key(workspaceId, sessionId)) ?? null;
@@ -14634,9 +14639,9 @@ var CoworkStore = class {
     }
     return dir;
   }
-  release(record3) {
-    this.writers.delete(`${record3.workspaceId}:${record3.entryId}`);
-    const key = this.key(record3.workspaceId, record3.id);
+  release(record4) {
+    this.writers.delete(`${record4.workspaceId}:${record4.entryId}`);
+    const key = this.key(record4.workspaceId, record4.id);
     const dir = this.scratchDirs.get(key);
     this.scratchDirs.delete(key);
     if (dir) void rm(dir, { recursive: true, force: true }).catch(() => void 0);
@@ -15763,7 +15768,7 @@ function defaultSpawnInstall(file2, args) {
 }
 function defaultCanWrite(targetPath) {
   try {
-    accessSync(targetPath, constants.W_OK);
+    accessSync(targetPath, constants$1.W_OK);
     return true;
   } catch {
     return false;
@@ -15796,7 +15801,7 @@ function createCoworkMcpRuntime(store, workspaceId, sessionId, resolver) {
   const allowedToolIds = ["wiki_draft_read", "wiki_draft_edit", "wiki_draft_write", "wiki_briefing", "wiki_orient", "wiki_read", "wiki_resolve"];
   const specs = [...draftTools, ...getWikiToolSpecs(resolver).filter((spec) => allowedToolIds.includes(spec.id))];
   for (const spec of specs) registry3.registerAgentTool(spec);
-  return { registry: registry3, snapshots, server, manager, specs, allowedToolIds, connection: { strictMcp: true, yoloMode: true, autoApprove: true } };
+  return { registry: registry3, snapshots, server, manager, specs, allowedToolIds };
 }
 function clipText(value, max) {
   return value.length > max ? `${value.slice(0, max - 1)}\u2026` : value;
@@ -15854,7 +15859,7 @@ var CoworkService = class {
       const runtime = createCoworkMcpRuntime(this.store, workspaceId, id, this.resolver);
       const mcp = await runtime.manager.createExecutorMcpSession({ serverName: "cowork", specs: runtime.specs, cwd: this.cwd });
       const providerCwd = await this.store.sessionDir(workspaceId, id);
-      const client = await this.connector.connect({ cwd: providerCwd, cli: session.cli, model: session.model, effort: session.effort, systemPrompt: COWORK_SYSTEM_PROMPT, mcpServers: [mcp.mcpServer], allowedToolIds: [...runtime.allowedToolIds], ...runtime.connection });
+      const client = await this.connector.connect({ cwd: providerCwd, model: session.model, effort: session.effort, systemPrompt: COWORK_SYSTEM_PROMPT, mcpServers: [mcp.mcpServer], allowedToolIds: [...runtime.allowedToolIds] });
       this.releaseLive(id);
       this.live.set(id, { workspaceId, client, annotations, cleanup: () => {
         try {
@@ -33453,8 +33458,6 @@ function fileDesc(b64, imports) {
   const reg = createFileRegistry(root, (protoFileName) => void 0 );
   return reg.getFile(root.name);
 }
-
-// ../../packages/core-ai-gateway/dist/index.js
 var REASONING_EFFORTS = [
   "minimal",
   "low",
@@ -33626,6 +33629,26 @@ var benchmarks_default = {
         }
       }
     },
+    "claude-opus-5": {
+      source: "cursorbench",
+      rungs: {
+        low: { score: 62.8, tokensPerTask: 18529, stepsPerTask: 37 },
+        medium: { score: 64.3, tokensPerTask: 23612, stepsPerTask: 44 },
+        high: { score: 66.7, tokensPerTask: 27932, stepsPerTask: 48 },
+        xhigh: { score: 69.3, tokensPerTask: 54239, stepsPerTask: 72 },
+        max: { score: 70, tokensPerTask: 61838, stepsPerTask: 78 }
+      }
+    },
+    "claude-fable-5": {
+      source: "cursorbench",
+      rungs: {
+        low: { score: 62.1, tokensPerTask: 18182, stepsPerTask: 31 },
+        medium: { score: 65.2, tokensPerTask: 30366, stepsPerTask: 41 },
+        high: { score: 66.5, tokensPerTask: 43747, stepsPerTask: 48 },
+        xhigh: { score: 68.4, tokensPerTask: 64971, stepsPerTask: 56 },
+        max: { score: 70.5, tokensPerTask: 103525, stepsPerTask: 72 }
+      }
+    },
     "kimi-k3": {
       source: "cursorbench",
       rungs: {
@@ -33674,7 +33697,7 @@ var benchmarks_default = {
 };
 var models_default = {
   version: 1,
-  updatedAt: "2026-08-14T00:00:00Z",
+  updatedAt: "2026-08-15T00:00:00Z",
   providers: {
     codex: {
       name: "Codex",
@@ -33816,7 +33839,7 @@ var models_default = {
     cursor: {
       name: "Cursor",
       defaultModel: "auto",
-      source: "Cursor GetUsableModels + Run conversationCheckpointUpdate.token_details.max_tokens (cli-2026.07.08-0c04a8a; auto, composer-2.5, and grok-4.5 families observed 2026-08-01); cursor-agent 2026.08.11-e8db854 observed 2026-08-13 for grok-4.6; quotaScope from DashboardService/GetCurrentPeriodUsage autoBucketModels (2026-08-05)",
+      source: "Cursor GetUsableModels + Run conversationCheckpointUpdate.token_details.max_tokens (cli-2026.07.08-0c04a8a; auto, composer-2.5, and grok-4.5 families observed 2026-08-01); cursor-agent 2026.08.11-e8db854 observed 2026-08-13 for grok-4.6; claude-opus-5 and claude-fable-5 standard/Max Mode windows observed 2026-08-10; quotaScope from DashboardService/GetCurrentPeriodUsage autoBucketModels (2026-08-05)",
       models: [
         {
           modelId: "auto",
@@ -33910,6 +33933,94 @@ var models_default = {
             ],
             upstreamModelIdTemplate: "cursor-grok-4.6-{effort}-fast"
           }
+        },
+        {
+          modelId: "claude-opus-5",
+          name: "Opus-5",
+          capabilityClass: "flagship",
+          quotaScope: "api",
+          contextWindow: 3e5,
+          effort: {
+            supported: true,
+            levels: [
+              "low",
+              "medium",
+              "high",
+              "xhigh",
+              "max"
+            ],
+            upstreamModelIdTemplate: "claude-opus-5-{effort}",
+            upstreamModelIds: {
+              xhigh: "claude-opus-5-thinking-xhigh",
+              max: "claude-opus-5-thinking-max"
+            }
+          },
+          benchmarkKey: "claude-opus-5"
+        },
+        {
+          modelId: "claude-opus-5-1m",
+          name: "Opus-5-1M",
+          capabilityClass: "flagship",
+          quotaScope: "api",
+          contextWindow: 1e6,
+          cursorMaxMode: true,
+          effort: {
+            supported: true,
+            levels: [
+              "low",
+              "medium",
+              "high",
+              "xhigh",
+              "max"
+            ],
+            upstreamModelIdTemplate: "claude-opus-5-{effort}",
+            upstreamModelIds: {
+              xhigh: "claude-opus-5-thinking-xhigh",
+              max: "claude-opus-5-thinking-max"
+            }
+          },
+          benchmarkKey: "claude-opus-5"
+        },
+        {
+          modelId: "claude-fable-5",
+          name: "Fable-5",
+          capabilityClass: "flagship",
+          quotaScope: "api",
+          description: "NO ZDR",
+          contextWindow: 3e5,
+          effort: {
+            supported: true,
+            levels: [
+              "low",
+              "medium",
+              "high",
+              "xhigh",
+              "max"
+            ],
+            upstreamModelIdTemplate: "claude-fable-5-{effort}"
+          },
+          benchmarkKey: "claude-fable-5"
+        },
+        {
+          modelId: "claude-fable-5-1m",
+          name: "Fable-5-1M",
+          capabilityClass: "flagship",
+          quotaScope: "api",
+          description: "NO ZDR",
+          contextWindow: 1e6,
+          cursorMaxMode: true,
+          effort: {
+            supported: true,
+            levels: [
+              "low",
+              "medium",
+              "high",
+              "xhigh",
+              "max"
+            ],
+            upstreamModelIdTemplate: "claude-fable-5-{effort}"
+          },
+          benchmarkKey: "claude-fable-5"
         }
       ]
     },
@@ -34523,13 +34634,14 @@ promisify(execFile);
 process.platform === "win32" ? constants.O_RDONLY : constants.O_RDONLY | constants.O_NONBLOCK;
 ({
   platform: process.platform,
-  homedir: os4__default.homedir,
+  homedir: os8.homedir,
   env: process.env});
-var CURSOR_GREP_RECEIPT_PREFIX = "FLEET_CURSOR_GREP_V1:";
-String.raw`
+var CURSOR_GREP_RECEIPT_PREFIX = "FLEET_CURSOR_GREP_V2:";
+var CURSOR_GREP_RECEIPT_SCRIPT = String.raw`
 const {spawn}=require("node:child_process");
 const {TextDecoder}=require("node:util");
-const emit=(value)=>process.stdout.write("${CURSOR_GREP_RECEIPT_PREFIX}"+Buffer.from(JSON.stringify(value)).toString("base64url"));
+const {deflateRawSync}=require("node:zlib");
+const emit=(value)=>process.stdout.write("${CURSOR_GREP_RECEIPT_PREFIX}"+deflateRawSync(Buffer.from(JSON.stringify(value))).toString("base64url"));
 (async()=>{try {
   const input=JSON.parse(Buffer.from(process.argv[1],"base64url").toString("utf8"));
   const matchSeparator=30;
@@ -34615,6 +34727,7 @@ const emit=(value)=>process.stdout.write("${CURSOR_GREP_RECEIPT_PREFIX}"+Buffer.
   emit({ok:true,outputMode:input.outputMode,files,counts,matches,totalFiles,totalLines,totalMatchedLines,clientTruncated});
 }catch(error){emit({ok:false,error:error instanceof Error?error.message:String(error)});}})();
 `.trim();
+deflateRawSync(CURSOR_GREP_RECEIPT_SCRIPT).toString("base64url");
 var cursorAgentDescriptor = [
   "CgthZ2VudC5wcm90bxIIYWdlbnQudjEicgoOR2xvYlRvb2xSZXN1bHQSLAoHc3VjY2VzcxgBIAEoCzIZLmFnZW50LnYxLkdsb2JUb29sU3VjY2Vzc0gAEigK",
   "BWVycm9yGAIgASgLMhcuYWdlbnQudjEuR2xvYlRvb2xFcnJvckgAQggKBnJlc3VsdCIeCg1HbG9iVG9vbEVycm9yEg0KBWVycm9yGAEgASgJIokBCg9HbG9i",
@@ -35468,7 +35581,11 @@ function runVendorQuery(input) {
     close() {
       if (closed) return;
       closed = true;
-      void run.return?.(void 0);
+      try {
+        const closing = run.return?.(void 0);
+        if (closing !== void 0) void closing.catch(() => void 0);
+      } catch {
+      }
     }
   };
 }
@@ -35538,8 +35655,11 @@ async function createClaudeGatewaySdk(options) {
           };
         },
         close() {
-          run.close();
-          release();
+          try {
+            run.close();
+          } finally {
+            release();
+          }
         }
       };
       active = tracked;
@@ -35636,6 +35756,364 @@ function vendorServedMcpServers(servers) {
   }]));
 }
 
+// ../../packages/core-agent/src/claude/execution-events.ts
+function createClaudeExecutionEventDecoder() {
+  const toolNames = /* @__PURE__ */ new Map();
+  return {
+    decode(message) {
+      if (!isRecord5(message)) return [];
+      if (message.type === "stream_event") return decodeStreamEvent(message);
+      if (message.type === "assistant") return decodeAssistant(message, toolNames);
+      if (message.type === "user") return decodeUser(message, toolNames);
+      if (message.type === "result") return decodeResult(message);
+      return [];
+    }
+  };
+}
+function decodeStreamEvent(message) {
+  const inner = record2(message.event);
+  if (inner.type !== "content_block_delta") return [];
+  const delta = record2(inner.delta);
+  if (delta.type === "text_delta" && typeof delta.text === "string" && delta.text.length > 0) {
+    return [{ kind: "text", text: delta.text }];
+  }
+  if (delta.type === "thinking_delta" && typeof delta.thinking === "string" && delta.thinking.length > 0) {
+    return [{ kind: "thinking", text: delta.thinking }];
+  }
+  return [];
+}
+function decodeAssistant(message, toolNames) {
+  const events = [];
+  for (const block of blocks(message.message)) {
+    if (block.type !== "tool_use") continue;
+    const name = typeof block.name === "string" ? block.name : "tool";
+    const id = typeof block.id === "string" ? block.id : void 0;
+    if (id !== void 0) toolNames.set(id, name);
+    events.push({
+      kind: "tool-start",
+      ...id === void 0 ? {} : { id },
+      name,
+      input: block.input
+    });
+  }
+  return events;
+}
+function decodeUser(message, toolNames) {
+  const events = [];
+  for (const block of blocks(message.message)) {
+    if (block.type !== "tool_result") continue;
+    const id = typeof block.tool_use_id === "string" ? block.tool_use_id : void 0;
+    const name = id === void 0 ? void 0 : toolNames.get(id);
+    events.push({
+      kind: "tool-end",
+      ...id === void 0 ? {} : { id },
+      ...name === void 0 ? {} : { name },
+      isError: block.is_error === true
+    });
+  }
+  return events;
+}
+function decodeResult(message) {
+  return [{
+    kind: "result",
+    isError: message.is_error === true,
+    ...typeof message.result === "string" ? { detail: message.result } : {},
+    source: "message"
+  }];
+}
+function blocks(message) {
+  const content = record2(message).content;
+  return Array.isArray(content) ? content.map(record2) : [];
+}
+function record2(value) {
+  return isRecord5(value) ? value : {};
+}
+function isRecord5(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+
+// ../../packages/core-agent/src/claude/execution-loop.ts
+function createClaudeExecutionLoop(options) {
+  let sdk = null;
+  let started = false;
+  let disposed = false;
+  let active = null;
+  let cancelTurn = null;
+  let resumeId = null;
+  let queueTail = Promise.resolve();
+  let startFlight = null;
+  let disposeFlight = null;
+  async function start() {
+    if (disposed) throw new Error("Session disposed");
+    if (started) return;
+    if (startFlight === null) startFlight = startSdk();
+    try {
+      await startFlight;
+    } catch (error51) {
+      if (!disposed) startFlight = null;
+      throw error51;
+    }
+  }
+  async function startSdk() {
+    const created = await options.createSdk();
+    if (disposed) {
+      await created.dispose().catch(() => void 0);
+      throw new Error("Session disposed");
+    }
+    sdk = created;
+    started = true;
+    if (disposed) {
+      sdk = null;
+      started = false;
+      await created.dispose().catch(() => void 0);
+      throw new Error("Session disposed");
+    }
+  }
+  function run(prompt) {
+    if (disposed) return Promise.reject(new Error("Session disposed"));
+    if (!started || sdk === null) return Promise.reject(new Error("Session not started"));
+    if (typeof prompt !== "string" || prompt.trim().length === 0) {
+      return Promise.reject(new Error("Message required"));
+    }
+    const control = createTurnControl();
+    if (cancelTurn === null) cancelTurn = control.cancel;
+    const work = queueTail.then(async () => {
+      if (cancelTurn === null) cancelTurn = control.cancel;
+      try {
+        await runTurn(prompt, control);
+      } finally {
+        if (cancelTurn === control.cancel) cancelTurn = null;
+      }
+    });
+    queueTail = work.catch(() => void 0);
+    return work;
+  }
+  function closeRun(expected) {
+    const current = active;
+    if (current === null || current.run !== expected) return;
+    current.close();
+  }
+  function cancel() {
+    cancelTurn?.();
+  }
+  function dispose() {
+    if (disposeFlight) return disposeFlight;
+    disposed = true;
+    active?.stop();
+    disposeFlight = disposeResources();
+    return disposeFlight;
+  }
+  async function disposeResources() {
+    let observed = queueTail;
+    for (; ; ) {
+      await observed.catch(() => void 0);
+      if (observed === queueTail) break;
+      observed = queueTail;
+    }
+    await startFlight?.catch(() => void 0);
+    const owned = sdk;
+    sdk = null;
+    started = false;
+    await owned?.dispose().catch(() => void 0);
+  }
+  async function runTurn(prompt, control) {
+    if (disposed) return;
+    const owned = sdk;
+    if (!owned) throw new Error("Session not started");
+    let settled = false;
+    let failed = false;
+    let failure;
+    let pendingResult;
+    let timer;
+    let handle = null;
+    const decoder = createClaudeExecutionEventDecoder();
+    const gate = createGate();
+    const clearTimer = () => {
+      if (timer === void 0) return;
+      clearTimeout(timer);
+      timer = void 0;
+    };
+    const complete = () => {
+      if (settled) return;
+      settled = true;
+      try {
+        clearTimer();
+        if (handle !== null) closeRun(handle.run);
+      } finally {
+        gate.open();
+      }
+    };
+    const fail = (error51) => {
+      if (!failed) {
+        failed = true;
+        failure = error51;
+      }
+      complete();
+    };
+    const queueResult = (event) => {
+      if (settled) return;
+      pendingResult = event;
+      complete();
+    };
+    control.onCancel = () => {
+      if (handle !== null) complete();
+    };
+    try {
+      if (control.canceled) return;
+      const built = await options.buildTurn(prompt);
+      if (disposed || control.canceled) return;
+      assertLoopOwnedKeysAbsent(built);
+      const resume = options.continuation.kind === "resume-child" && resumeId !== null ? { resume: resumeId } : {};
+      let run2;
+      try {
+        run2 = await owned.startTurn({ ...built, prompt, ...resume });
+      } catch (error51) {
+        if (disposed || control.canceled) return;
+        throw error51;
+      }
+      const startedRun = run2;
+      let closed = false;
+      handle = {
+        run: startedRun,
+        stop() {
+          complete();
+        },
+        close() {
+          if (closed) return;
+          closed = true;
+          if (active === handle) active = null;
+          try {
+            startedRun.close();
+          } catch {
+          }
+        }
+      };
+      active = handle;
+      if (disposed || control.canceled) {
+        complete();
+        return;
+      }
+      timer = armWatchdog(options.settlement, () => {
+        try {
+          if (settled || disposed) return;
+          queueResult({ kind: "result", isError: true, source: "watchdog" });
+        } catch {
+        }
+      });
+      const consume = async () => {
+        let iterator;
+        try {
+          iterator = startedRun[Symbol.asyncIterator]();
+          while (!settled) {
+            const step = await iterator.next();
+            if (step.done) {
+              if (!settled && !disposed && options.settlement.kind === "result-required") {
+                queueResult({ kind: "result", isError: true, source: "incomplete" });
+              }
+              break;
+            }
+            if (settled || disposed) break;
+            const message = step.value;
+            if (options.continuation.kind === "resume-child" && resumeId === null && typeof message.session_id === "string") {
+              resumeId = message.session_id;
+            }
+            for (const event of decoder.decode(message)) {
+              if (event.kind === "result") {
+                queueResult(event);
+                break;
+              }
+              try {
+                options.onEvent?.(event);
+              } catch (error51) {
+                fail(error51);
+                break;
+              }
+            }
+          }
+        } catch (error51) {
+          if (disposed || settled) return;
+          fail(error51);
+        } finally {
+          complete();
+          const closing = iterator?.return?.();
+          if (closing !== void 0) void closing.catch(() => void 0);
+        }
+      };
+      const consumption = consume();
+      consumption.catch(() => void 0);
+      await gate.promise;
+      if (disposed) return;
+      if (pendingResult !== void 0 && !failed) {
+        try {
+          options.onEvent?.(pendingResult);
+        } catch (error51) {
+          failed = true;
+          failure = error51;
+        }
+      }
+    } catch (error51) {
+      if (!disposed && !control.canceled && !failed) {
+        failed = true;
+        failure = error51;
+      }
+    } finally {
+      control.onCancel = null;
+      complete();
+    }
+    if (disposed) return;
+    if (failed) return Promise.reject(failure);
+  }
+  return { start, run, cancel, dispose };
+}
+function createTurnControl() {
+  const control = {
+    canceled: false,
+    onCancel: null,
+    cancel() {
+      control.canceled = true;
+      control.onCancel?.();
+    }
+  };
+  return control;
+}
+function assertLoopOwnedKeysAbsent(built) {
+  if (!built || typeof built !== "object") return;
+  const record4 = built;
+  if (Object.hasOwn(record4, "prompt") || Object.hasOwn(record4, "resume")) {
+    throw new TypeError("buildTurn must not set prompt or resume; those keys are loop-owned.");
+  }
+}
+function watchdogMsOf(settlement) {
+  if (settlement.kind !== "result-required") return void 0;
+  const watchdogMs = settlement.watchdogMs;
+  if (typeof watchdogMs !== "number" || !Number.isFinite(watchdogMs) || watchdogMs <= 0) {
+    return void 0;
+  }
+  return watchdogMs;
+}
+function createGate() {
+  let opened = false;
+  let resolvePromise = () => void 0;
+  const promise2 = new Promise((resolve3) => {
+    resolvePromise = resolve3;
+  });
+  return {
+    promise: promise2,
+    open() {
+      if (opened) return;
+      opened = true;
+      resolvePromise();
+    }
+  };
+}
+function armWatchdog(settlement, onTimeout) {
+  const watchdogMs = watchdogMsOf(settlement);
+  if (watchdogMs === void 0) return void 0;
+  const timer = setTimeout(onTimeout, watchdogMs);
+  timer.unref?.();
+  return timer;
+}
+
 // core/host/codex/cowork/gateway-adapter.ts
 var GATEWAY_EFFORTS = /* @__PURE__ */ new Set(["low", "medium", "high", "xhigh", "max"]);
 var TURN_WATCHDOG_MS = 10 * 60 * 1e3;
@@ -35668,128 +36146,105 @@ function createCoworkGatewayConnector(deps) {
       const baseUrl = deps.baseUrl();
       if (!baseUrl) throw new Error("cowork_gateway_unavailable");
       const model = options.model && options.model.length > 0 ? options.model : "sonnet";
-      const sdk = await createClaudeGatewaySdk({ baseUrl, models: [model] });
-      return new CoworkGatewayClient(sdk, options, model);
+      const client = new CoworkGatewayClient();
+      const loop = createClaudeExecutionLoop({
+        createSdk: () => {
+          const create2 = { baseUrl, models: [model] };
+          return deps.createSdk?.(create2) ?? createClaudeGatewaySdk(create2);
+        },
+        buildTurn: () => {
+          const effort = options.effort;
+          const served = toServedMcpServers(options.mcpServers);
+          return {
+            model,
+            systemPrompt: { mode: "replace", text: options.systemPrompt },
+            cwd: options.cwd,
+            disallowedTools: COWORK_DISALLOWED_TOOLS,
+            // 위키 도구는 호스트가 이미 띄운 HTTP MCP 엔드포인트로 온다. 이것을 싣지 않으면 자식은
+            // 시스템 프롬프트가 말하는 도구 이름을 부르지만 그런 도구가 없어 그대로 턴이 끝난다.
+            servedMcpServers: served,
+            // dontAsk는 사전승인되지 않은 도구를 묻지 않고 거부한다 — 노출한 도구는 전부 승인해 둔다.
+            allowedTools: served.flatMap((server) => options.allowedToolIds.map((id) => `mcp__${server.name}__${id}`)),
+            permissionMode: "dontAsk",
+            includePartialMessages: true,
+            ...effort && GATEWAY_EFFORTS.has(effort) ? { effort } : {}
+          };
+        },
+        continuation: { kind: "oneshot" },
+        settlement: { kind: "result-required", watchdogMs: TURN_WATCHDOG_MS },
+        onEvent: (event) => client.publish(event)
+      });
+      client.bind(loop);
+      await loop.start();
+      return client;
     }
   };
 }
 var CoworkGatewayClient = class extends EventEmitter {
-  constructor(sdk, options, model) {
-    super();
-    this.sdk = sdk;
-    this.options = options;
-    this.model = model;
-  }
-  sdk;
-  options;
-  model;
-  run = null;
-  resumeId = null;
-  disposed = false;
-  async sendMessage(content) {
-    if (this.disposed) throw new Error("cowork_session_disposed");
-    const effort = this.options.effort;
-    const served = toServedMcpServers(this.options.mcpServers);
-    const run = await this.sdk.startTurn({
-      prompt: content,
-      model: this.model,
-      systemPrompt: { mode: "replace", text: this.options.systemPrompt },
-      cwd: this.options.cwd,
-      disallowedTools: COWORK_DISALLOWED_TOOLS,
-      // 위키 도구는 호스트가 이미 띄운 HTTP MCP 엔드포인트로 온다. 이것을 싣지 않으면 자식은
-      // 시스템 프롬프트가 말하는 도구 이름을 부르지만 그런 도구가 없어 그대로 턴이 끝난다.
-      servedMcpServers: served,
-      // dontAsk는 사전승인되지 않은 도구를 묻지 않고 거부한다 — 노출한 도구는 전부 승인해 둔다.
-      allowedTools: served.flatMap((server) => this.options.allowedToolIds.map((id) => `mcp__${server.name}__${id}`)),
-      permissionMode: "dontAsk",
-      includePartialMessages: true,
-      ...effort && GATEWAY_EFFORTS.has(effort) ? { effort } : {},
-      ...this.resumeId === null ? {} : { resume: this.resumeId }
-    });
-    this.run = run;
-    await this.consume(run);
-  }
-  async cancelPrompt() {
-    this.run?.close();
-    this.run = null;
-  }
-  async disconnect() {
-    this.disposed = true;
-    this.run?.close();
-    this.run = null;
-    await this.sdk.dispose().catch(() => void 0);
-  }
-  /**
-   * 한 턴을 소비하고 정확히 한 번 결말을 낸다.
-   *
-   * 이터레이터가 끝났다는 사실만으로 성공을 알리지 않는다. 인식 가능한 종료 결과를 보지 못한 채
-   * 끝나면 그것은 조용한 실패이고, 조용한 실패는 사용자에게 멈춘 화면으로만 보인다.
-   */
-  async consume(run) {
-    const toolNames = /* @__PURE__ */ new Map();
-    let settled = false;
-    const finish = (error51) => {
-      if (settled) return;
-      settled = true;
-      if (error51) this.emit("error", { message: error51 });
-      else this.emit("promptComplete");
-    };
-    const watchdog = setTimeout(() => {
-      run.close();
-      finish("cowork_turn_timeout");
-    }, TURN_WATCHDOG_MS);
-    watchdog.unref?.();
-    try {
-      for await (const event of run) {
-        if (typeof event.session_id === "string" && this.resumeId === null) this.resumeId = event.session_id;
-        this.publish(event, toolNames, finish);
-      }
-      finish(settled ? void 0 : "cowork_turn_incomplete");
-    } catch (error51) {
-      if (!this.disposed) finish(error51 instanceof Error ? error51.message : String(error51));
-    } finally {
-      clearTimeout(watchdog);
-      if (this.run === run) this.run = null;
+  loop = null;
+  /** 이번 턴을 취소한 뒤에 루프가 내는 종점 정산·이터레이터 거절은 조용히 삼킨다. */
+  canceledTurn = false;
+  bind(loop) {
+    this.loop = loop;
+  }
+  publish(event) {
+    if (this.canceledTurn && event.kind === "result") return;
+    if (event.kind === "text") {
+      this.emit("messageChunk", event.text);
+      return;
     }
-  }
-  publish(event, toolNames, finish) {
-    const type = event.type;
-    if (type === "stream_event") {
-      const inner = record2(event.event);
-      if (inner.type !== "content_block_delta") return;
-      const delta = record2(inner.delta);
-      if (delta.type === "text_delta" && typeof delta.text === "string" && delta.text.length > 0) {
-        this.emit("messageChunk", delta.text);
-      }
+    if (event.kind === "thinking") return;
+    if (event.kind === "tool-start") {
+      this.emit("toolCall", event.name, "running");
       return;
     }
-    if (type === "assistant") {
-      for (const block of blocks(event.message)) {
-        if (block.type !== "tool_use") continue;
-        const name = typeof block.name === "string" ? block.name : "tool";
-        if (typeof block.id === "string") toolNames.set(block.id, name);
-        this.emit("toolCall", name, "running");
-      }
+    if (event.kind === "tool-end") {
+      this.emit("toolCallUpdate", event.name ?? "tool", event.isError ? "error" : "done");
       return;
     }
-    if (type === "user") {
-      for (const block of blocks(event.message)) {
-        if (block.type !== "tool_result") continue;
-        const name = typeof block.tool_use_id === "string" ? toolNames.get(block.tool_use_id) ?? "tool" : "tool";
-        this.emit("toolCallUpdate", name, block.is_error === true ? "error" : "done");
-      }
+    if (event.source === "incomplete") {
+      this.emit("error", { message: "cowork_turn_incomplete" });
       return;
     }
-    if (type === "result") {
-      finish(event.is_error === true ? typeof event.result === "string" ? event.result : "cowork_turn_failed" : void 0);
+    if (event.source === "watchdog") {
+      this.emit("error", { message: "cowork_turn_timeout" });
+      return;
+    }
+    if (event.isError) {
+      this.emit("error", { message: event.detail ?? "cowork_turn_failed" });
+      return;
+    }
+    this.emit("promptComplete");
+  }
+  async sendMessage(content) {
+    this.canceledTurn = false;
+    try {
+      await this.requireLoop().run(content);
+    } catch (error51) {
+      if (this.canceledTurn) return;
+      throw disposedError(error51);
     }
   }
+  async cancelPrompt() {
+    this.canceledTurn = true;
+    this.loop?.cancel();
+  }
+  async disconnect() {
+    await this.loop?.dispose();
+  }
+  requireLoop() {
+    if (this.loop === null) throw new Error("cowork_session_disposed");
+    return this.loop;
+  }
 };
+function disposedError(error51) {
+  return error51 instanceof Error && error51.message === "Session disposed" ? new Error("cowork_session_disposed") : error51;
+}
 function toServedMcpServers(values) {
   return values.flatMap((value) => {
-    const server = record2(value);
+    const server = record3(value);
     if (typeof server.name !== "string" || typeof server.url !== "string") return [];
-    const headers = Array.isArray(server.headers) ? server.headers.map(record2).flatMap((header) => typeof header.name === "string" && typeof header.value === "string" ? [{ name: header.name, value: header.value }] : []) : [];
+    const headers = Array.isArray(server.headers) ? server.headers.map(record3).flatMap((header) => typeof header.name === "string" && typeof header.value === "string" ? [{ name: header.name, value: header.value }] : []) : [];
     return [{
       name: server.name,
       url: server.url,
@@ -35798,11 +36253,7 @@ function toServedMcpServers(values) {
     }];
   });
 }
-function blocks(message) {
-  const content = record2(message).content;
-  return Array.isArray(content) ? content.map(record2) : [];
-}
-function record2(value) {
+function record3(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : {};
 }
 function workspaceHash(canonicalCwd) {
@@ -36115,7 +36566,7 @@ function toMetadata(item) {
 
 // core/host/security-headers.ts
 var CONSOLE_SECURITY_HEADERS = {
-  "Content-Security-Policy": "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://img.shields.io; font-src 'self' data:; connect-src 'self' ws: wss: https://api.github.com; object-src 'none'; base-uri 'none'",
+  "Content-Security-Policy": "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://img.shields.io; font-src 'self' data:; connect-src 'self' ws: wss: https://api.github.com; object-src 'none'; base-uri 'none'",
   "X-Content-Type-Options": "nosniff",
   "Referrer-Policy": "no-referrer",
   "Cache-Control": "no-store"
@@ -36709,7 +37160,7 @@ function createConsoleDurableStateStore(deps = {}) {
   });
 }
 function sanitizeDurableConsoleState(value) {
-  if (!isRecord5(value)) return emptyDurableConsoleState();
+  if (!isRecord6(value)) return emptyDurableConsoleState();
   const upgraded = migrateToCurrentVersion(value);
   if (upgraded.version !== STATE_VERSION) return emptyDurableConsoleState();
   return {
@@ -36748,7 +37199,7 @@ function migrateV2ToV3(v2) {
   };
 }
 function migrateV1Operation(value) {
-  if (!isRecord5(value)) return null;
+  if (!isRecord6(value)) return null;
   const sessionId = readNonEmptyString(value.sessionId);
   const theaterId = readNonEmptyString(value.theaterId);
   const cwd = readNonEmptyString(value.cwd);
@@ -36762,7 +37213,7 @@ function migrateV1Operation(value) {
   if (cliId) payload.cliId = cliId;
   if (cliLabel) payload.cliLabel = cliLabel;
   if (labelSource) payload.labelSource = labelSource;
-  if (isRecord5(value.providerSession)) payload.providerSession = value.providerSession;
+  if (isRecord6(value.providerSession)) payload.providerSession = value.providerSession;
   return {
     id: sessionId,
     theaterId,
@@ -36793,7 +37244,7 @@ function readOperations(value) {
   return nodes;
 }
 function sanitizeTheaterRegistration(value) {
-  if (!isRecord5(value)) return null;
+  if (!isRecord6(value)) return null;
   const id = readNonEmptyString(value.id);
   const theaterPath = readNonEmptyString(value.path);
   const realpath3 = readNonEmptyString(value.realpath);
@@ -36813,7 +37264,7 @@ function sanitizeTheaterRegistration(value) {
   };
 }
 function sanitizeOperationNode2(value) {
-  if (!isRecord5(value)) return null;
+  if (!isRecord6(value)) return null;
   const id = readNonEmptyString(value.id);
   const theaterId = readNonEmptyString(value.theaterId);
   const type = readNonEmptyString(value.type);
@@ -36837,7 +37288,7 @@ function sanitizeOperationNode2(value) {
   };
 }
 function sanitizeOperationTimestamps(value) {
-  if (!isRecord5(value)) return null;
+  if (!isRecord6(value)) return null;
   const createdAt = readFiniteNumber2(value.createdAt);
   const updatedAt = readFiniteNumber2(value.updatedAt);
   if (createdAt === null || updatedAt === null) return null;
@@ -36845,7 +37296,7 @@ function sanitizeOperationTimestamps(value) {
 }
 function sanitizeOperationGeometry(value) {
   if (value === null || value === void 0) return null;
-  if (!isRecord5(value)) return null;
+  if (!isRecord6(value)) return null;
   const x = readFiniteNumber2(value.x);
   const y = readFiniteNumber2(value.y);
   const width = readFiniteNumber2(value.width);
@@ -36854,7 +37305,7 @@ function sanitizeOperationGeometry(value) {
   if (x === null || y === null || width === null || height === null || zIndex === null) return null;
   return { x, y, width, height, zIndex };
 }
-function isRecord5(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readNonEmptyString(value) {
@@ -36864,7 +37315,7 @@ function readOptionalString(value) {
   return typeof value === "string" && value.length > 0 ? value : void 0;
 }
 function readRecord(value) {
-  return isRecord5(value) ? value : {};
+  return isRecord6(value) ? value : {};
 }
 function remapTerminalPluginId(pluginId) {
   return pluginId === "agent" || pluginId === "shell" ? "terminal" : pluginId;
@@ -36898,7 +37349,7 @@ function readOperationGroups(value) {
   return groups;
 }
 function sanitizeOperationGroup(value) {
-  if (!isRecord5(value)) return null;
+  if (!isRecord6(value)) return null;
   const id = readNonEmptyString(value.id);
   const theaterId = readNonEmptyString(value.theaterId);
   const rawName = readNonEmptyString(value.name);
@@ -36920,7 +37371,7 @@ function readDeletionTombstones(value) {
   return tombstones;
 }
 function sanitizeDeletionTombstone(value) {
-  if (!isRecord5(value)) return null;
+  if (!isRecord6(value)) return null;
   const deletionId = readNonEmptyString(value.deletionId);
   const targetId = readNonEmptyString(value.targetId);
   const deletedAt = readFiniteNumber2(value.deletedAt);
@@ -37397,7 +37848,7 @@ function createRemoteHostStore(consoleDir, deps = {}) {
     try {
       const parsed = JSON.parse(readFile7(storage.path(HOSTS_FILE)));
       if (parsed?.version !== STORE_VERSION3 || !Array.isArray(parsed.hosts)) return [];
-      return parsed.hosts.filter(isRecord6).slice(0, MAX_HOSTS);
+      return parsed.hosts.filter(isRecord7).slice(0, MAX_HOSTS);
     } catch {
       return [];
     }
@@ -37413,7 +37864,7 @@ function createRemoteHostStore(consoleDir, deps = {}) {
     findByOrigin: (origin) => hosts.find((entry) => entry.origin === origin) ?? null,
     remember(link) {
       const existing = hosts.find((entry) => entry.origin === link.origin);
-      const record3 = {
+      const record4 = {
         id: existing?.id ?? randomId(),
         // 이름은 사용자가 고쳐 부를 수 있으므로, 이미 고쳐 부른 이름을 링크가 덮어쓰지 않는다.
         label: existing?.label ?? link.label,
@@ -37425,10 +37876,10 @@ function createRemoteHostStore(consoleDir, deps = {}) {
         addedAt: existing?.addedAt ?? now(),
         lastOpenedAt: existing?.lastOpenedAt ?? null
       };
-      hosts = [record3, ...hosts.filter((entry) => entry.origin !== link.origin)].slice(0, MAX_HOSTS);
-      pending.set(record3.origin, { token: link.token, expiresAt: now() + HANDOFF_TTL_MS });
+      hosts = [record4, ...hosts.filter((entry) => entry.origin !== link.origin)].slice(0, MAX_HOSTS);
+      pending.set(record4.origin, { token: link.token, expiresAt: now() + HANDOFF_TTL_MS });
       write();
-      return record3;
+      return record4;
     },
     rename(id, label) {
       const cleaned = sanitizeAccessLabel(label);
@@ -37460,7 +37911,7 @@ function createRemoteHostStore(consoleDir, deps = {}) {
     }
   };
 }
-function isRecord6(value) {
+function isRecord7(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return false;
   const entry = value;
   return typeof entry.id === "string" && entry.id.length > 0 && typeof entry.label === "string" && typeof entry.origin === "string" && entry.origin.startsWith("https://") && typeof entry.hostname === "string" && entry.hostname.length > 0 && typeof entry.port === "number" && Number.isSafeInteger(entry.port) && typeof entry.fingerprint === "string" && /^[0-9A-F]{64}$/u.test(entry.fingerprint) && typeof entry.addedAt === "number" && (entry.lastOpenedAt === null || typeof entry.lastOpenedAt === "number");
@@ -37727,7 +38178,7 @@ function discoverFleetPlugins(options = {}) {
   return [...sourcePlugins, ...distPlugins];
 }
 function parseFleetPluginManifest(value) {
-  if (!isRecord7(value)) return null;
+  if (!isRecord8(value)) return null;
   const id = readPluginId(value.id);
   if (!id) return null;
   return {
@@ -37834,7 +38285,7 @@ function isSubpath(root, candidate) {
   const relative = path18__default.relative(root, candidate);
   return relative === "" || !relative.startsWith("..") && !path18__default.isAbsolute(relative);
 }
-function isRecord7(value) {
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var SHIM_DEFINITIONS = [
@@ -39630,13 +40081,15 @@ function createConsoleServer(deps = {}) {
         return operation;
       },
       patch: (id, input) => {
-        const previousTitle = "title" in input ? operations.get(id)?.title : void 0;
+        const before = operations.get(id);
         const operation = operations.patch(id, input);
-        if (operation) {
+        if (operation && before) {
           persistDurableState();
-          if (previousTitle !== void 0 && previousTitle !== operation.title) {
+          if (sanitizedOperationJson(before) !== sanitizedOperationJson(operation)) {
             broadcastOperationChanged(operation);
           }
+        } else if (operation) {
+          persistDurableState();
         }
         return operation;
       },
@@ -40874,6 +41327,14 @@ function createConsoleServer(deps = {}) {
       await codex.registerWorkspace(theater.realpath, theater.lastOpenedAt, theater.id);
     }
   }
+  function sanitizedOperationJson(node) {
+    const sensitiveFields = [
+      ...pluginHost.sensitiveFieldsByPluginId.get(node.pluginId) ?? [],
+      ...pluginPayloadSanitizers.get(node.pluginId) ?? []
+    ];
+    const { ts: _ts, ...rest } = createSanitizedOpDto(node, { sensitiveFields });
+    return JSON.stringify(rest);
+  }
   function broadcastOperationChanged(node) {
     if (operationSseSubscribers.size === 0) return;
     const sensitiveFields = [