@dotobokuri/fleet-console 1.63.0 → 1.64.0

package/dist/cli.mjs

@@ -13272,8 +13272,6 @@ function isNormalFace(face) {
   const style = face.style.toLocaleLowerCase();
   return NORMAL_FACE_MARKERS.some((marker) => style.includes(marker));
 }
-
-// core/host/system-fonts-routes.ts
 var SYSTEM_FONTS_PATH = "/api/v1/settings/fonts/system";
 var SYSTEM_FONTS_API_CATALOG = [
   {
@@ -13710,7 +13708,16 @@ function withSecurityHeaders(headers) {
   };
 }
 
-// core/host/sse.ts
+// core/host/http-infra.ts
+var CONSOLE_SECURITY_HEADERS = {
+  "Content-Security-Policy": "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://img.shields.io; font-src 'self' data:; connect-src 'self' ws: wss: https://api.github.com; object-src 'none'; base-uri 'none'",
+  "X-Content-Type-Options": "nosniff",
+  "Referrer-Policy": "no-referrer",
+  "Cache-Control": "no-store"
+};
+function withSecurityHeaders2(headers = {}) {
+  return { ...CONSOLE_SECURITY_HEADERS, ...headers };
+}
 var SSE_KEEPALIVE_INTERVAL_MS = 3e4;
 function encodeSseData(event, data) {
   return `event: ${event}
@@ -33776,7 +33783,7 @@ var models_default = {
     codex: {
       name: "Codex",
       defaultModel: "gpt-5.6-sol",
-      source: "codex app-server model/list (codex-cli 0.147.0, observed 2026-08-11) for model/effort/service-tier; Fleet catalog effort ladders are capped at max because harness launch capabilities are not model rungs; contextWindow=272000 is codex debug models context_window/max_context_window (codex-cli 0.146.0, observed 2026-08-02)",
+      source: "codex app-server model/list (codex-cli 0.147.0, observed 2026-08-11) for model/effort/service-tier and the unsuffixed 272000 defaults; Fleet catalog effort ladders are capped at max because harness launch capabilities are not model rungs; 2026-08-17 production Codex live observations added explicit 512K (524288) and explicit 1M (1000000) variants on the same upstream bases",
       models: [
         {
           modelId: "gpt-5.6-sol",
@@ -33903,6 +33910,264 @@ var models_default = {
             "gpt-5.6-luna-fast"
           ],
           benchmarkKey: "gpt-5.6-luna"
+        },
+        {
+          modelId: "gpt-5.6-sol-512k",
+          name: "GPT-5.6-Sol-512K",
+          capabilityClass: "flagship",
+          providerModelId: "gpt-5.6-sol",
+          contextWindow: 524288,
+          effort: {
+            supported: true,
+            levels: [
+              "low",
+              "medium",
+              "high",
+              "xhigh",
+              "max"
+            ]
+          },
+          aliases: [
+            "gpt-5.6-sol-512k"
+          ],
+          benchmarkKey: "gpt-5.6-sol"
+        },
+        {
+          modelId: "gpt-5.6-sol-512k-fast",
+          name: "GPT-5.6-Sol-512K-Fast",
+          capabilityClass: "flagship",
+          providerModelId: "gpt-5.6-sol",
+          serviceTier: "priority",
+          contextWindow: 524288,
+          effort: {
+            supported: true,
+            levels: [
+              "low",
+              "medium",
+              "high",
+              "xhigh",
+              "max"
+            ]
+          },
+          aliases: [
+            "gpt-5.6-sol-512k-fast"
+          ],
+          benchmarkKey: "gpt-5.6-sol"
+        },
+        {
+          modelId: "gpt-5.6-luna-512k",
+          name: "GPT-5.6-Luna-512K",
+          capabilityClass: "light",
+          providerModelId: "gpt-5.6-luna",
+          contextWindow: 524288,
+          effort: {
+            supported: true,
+            levels: [
+              "low",
+              "medium",
+              "high",
+              "xhigh",
+              "max"
+            ]
+          },
+          aliases: [
+            "gpt-5.6-luna-512k"
+          ],
+          benchmarkKey: "gpt-5.6-luna"
+        },
+        {
+          modelId: "gpt-5.6-luna-512k-fast",
+          name: "GPT-5.6-Luna-512K-Fast",
+          capabilityClass: "light",
+          providerModelId: "gpt-5.6-luna",
+          serviceTier: "priority",
+          contextWindow: 524288,
+          effort: {
+            supported: true,
+            levels: [
+              "low",
+              "medium",
+              "high",
+              "xhigh",
+              "max"
+            ]
+          },
+          aliases: [
+            "gpt-5.6-luna-512k-fast"
+          ],
+          benchmarkKey: "gpt-5.6-luna"
+        },
+        {
+          modelId: "gpt-5.6-terra-512k",
+          name: "GPT-5.6-Terra-512K",
+          capabilityClass: "standard",
+          providerModelId: "gpt-5.6-terra",
+          contextWindow: 524288,
+          effort: {
+            supported: true,
+            levels: [
+              "low",
+              "medium",
+              "high",
+              "xhigh",
+              "max"
+            ]
+          },
+          aliases: [
+            "gpt-5.6-terra-512k"
+          ],
+          benchmarkKey: "gpt-5.6-terra"
+        },
+        {
+          modelId: "gpt-5.6-terra-512k-fast",
+          name: "GPT-5.6-Terra-512K-Fast",
+          capabilityClass: "standard",
+          providerModelId: "gpt-5.6-terra",
+          serviceTier: "priority",
+          contextWindow: 524288,
+          effort: {
+            supported: true,
+            levels: [
+              "low",
+              "medium",
+              "high",
+              "xhigh",
+              "max"
+            ]
+          },
+          aliases: [
+            "gpt-5.6-terra-512k-fast"
+          ],
+          benchmarkKey: "gpt-5.6-terra"
+        },
+        {
+          modelId: "gpt-5.6-sol-1m",
+          name: "GPT-5.6-Sol-1M",
+          capabilityClass: "flagship",
+          providerModelId: "gpt-5.6-sol",
+          contextWindow: 1e6,
+          effort: {
+            supported: true,
+            levels: [
+              "low",
+              "medium",
+              "high",
+              "xhigh",
+              "max"
+            ]
+          },
+          aliases: [
+            "gpt-5.6-sol-1m"
+          ],
+          benchmarkKey: "gpt-5.6-sol"
+        },
+        {
+          modelId: "gpt-5.6-sol-1m-fast",
+          name: "GPT-5.6-Sol-1M-Fast",
+          capabilityClass: "flagship",
+          providerModelId: "gpt-5.6-sol",
+          serviceTier: "priority",
+          contextWindow: 1e6,
+          effort: {
+            supported: true,
+            levels: [
+              "low",
+              "medium",
+              "high",
+              "xhigh",
+              "max"
+            ]
+          },
+          aliases: [
+            "gpt-5.6-sol-1m-fast"
+          ],
+          benchmarkKey: "gpt-5.6-sol"
+        },
+        {
+          modelId: "gpt-5.6-luna-1m",
+          name: "GPT-5.6-Luna-1M",
+          capabilityClass: "light",
+          providerModelId: "gpt-5.6-luna",
+          contextWindow: 1e6,
+          effort: {
+            supported: true,
+            levels: [
+              "low",
+              "medium",
+              "high",
+              "xhigh",
+              "max"
+            ]
+          },
+          aliases: [
+            "gpt-5.6-luna-1m"
+          ],
+          benchmarkKey: "gpt-5.6-luna"
+        },
+        {
+          modelId: "gpt-5.6-luna-1m-fast",
+          name: "GPT-5.6-Luna-1M-Fast",
+          capabilityClass: "light",
+          providerModelId: "gpt-5.6-luna",
+          serviceTier: "priority",
+          contextWindow: 1e6,
+          effort: {
+            supported: true,
+            levels: [
+              "low",
+              "medium",
+              "high",
+              "xhigh",
+              "max"
+            ]
+          },
+          aliases: [
+            "gpt-5.6-luna-1m-fast"
+          ],
+          benchmarkKey: "gpt-5.6-luna"
+        },
+        {
+          modelId: "gpt-5.6-terra-1m",
+          name: "GPT-5.6-Terra-1M",
+          capabilityClass: "standard",
+          providerModelId: "gpt-5.6-terra",
+          contextWindow: 1e6,
+          effort: {
+            supported: true,
+            levels: [
+              "low",
+              "medium",
+              "high",
+              "xhigh",
+              "max"
+            ]
+          },
+          aliases: [
+            "gpt-5.6-terra-1m"
+          ],
+          benchmarkKey: "gpt-5.6-terra"
+        },
+        {
+          modelId: "gpt-5.6-terra-1m-fast",
+          name: "GPT-5.6-Terra-1M-Fast",
+          capabilityClass: "standard",
+          providerModelId: "gpt-5.6-terra",
+          serviceTier: "priority",
+          contextWindow: 1e6,
+          effort: {
+            supported: true,
+            levels: [
+              "low",
+              "medium",
+              "high",
+              "xhigh",
+              "max"
+            ]
+          },
+          aliases: [
+            "gpt-5.6-terra-1m-fast"
+          ],
+          benchmarkKey: "gpt-5.6-terra"
         }
       ]
     },
@@ -35716,6 +35981,9 @@ var CLAUDE_GATEWAY_TURN_KEYS = Object.freeze([
   "abortController",
   "stderr"
 ]);
+var CLAUDE_GATEWAY_SESSION_KEYS = Object.freeze(
+  CLAUDE_GATEWAY_TURN_KEYS.filter((key) => key !== "prompt")
+);
 
 // ../../packages/core-agent/src/claude/launch-env.ts
 var CLAUDE_GATEWAY_MODEL_CACHE_RELPATH = "cache/gateway-models.json";
@@ -35837,6 +36105,111 @@ function runVendorQuery(input) {
     }
   };
 }
+var VendorInputQueue = class {
+  pending = [];
+  waiting = null;
+  closed = false;
+  push(message) {
+    if (this.closed) return;
+    const waiting = this.waiting;
+    if (waiting) {
+      this.waiting = null;
+      waiting({ done: false, value: message });
+      return;
+    }
+    this.pending.push(message);
+  }
+  close() {
+    if (this.closed) return;
+    this.closed = true;
+    const waiting = this.waiting;
+    if (waiting) {
+      this.waiting = null;
+      waiting({ done: true, value: void 0 });
+    }
+  }
+  [Symbol.asyncIterator]() {
+    return {
+      next: async () => {
+        if (this.pending.length > 0) return { done: false, value: this.pending.shift() };
+        if (this.closed) return { done: true, value: void 0 };
+        return await new Promise((resolve3) => {
+          this.waiting = resolve3;
+        });
+      }
+    };
+  }
+};
+function vendorUserMessage(text) {
+  return {
+    type: "user",
+    session_id: "",
+    message: { role: "user", content: [{ type: "text", text }] },
+    parent_tool_use_id: null
+  };
+}
+function runVendorSession(input) {
+  const queue = new VendorInputQueue();
+  const run = query({
+    prompt: queue,
+    options: input.options
+  });
+  let closed = false;
+  return {
+    send(text) {
+      if (closed) return;
+      queue.push(vendorUserMessage(text));
+    },
+    async interrupt() {
+      if (closed || typeof run.interrupt !== "function") return;
+      await run.interrupt();
+    },
+    async stopTask(taskId) {
+      if (closed) return;
+      if (typeof run.stopTask !== "function") {
+        throw new TypeError("This Claude Agent SDK build has no stopTask control request.");
+      }
+      await run.stopTask(taskId);
+    },
+    async backgroundTasks(toolUseId) {
+      if (closed) return false;
+      if (typeof run.backgroundTasks !== "function") {
+        throw new TypeError("This Claude Agent SDK build has no background_tasks control request.");
+      }
+      return await run.backgroundTasks(toolUseId);
+    },
+    async getContextUsage() {
+      if (closed || typeof run.getContextUsage !== "function") return null;
+      try {
+        return readVendorContextUsage(await run.getContextUsage());
+      } catch {
+        return null;
+      }
+    },
+    [Symbol.asyncIterator]() {
+      const iterator = run[Symbol.asyncIterator]();
+      return {
+        async next() {
+          const result = await iterator.next();
+          return result.done === true ? { done: true, value: void 0 } : { done: false, value: result.value };
+        }
+      };
+    },
+    close() {
+      if (closed) return;
+      closed = true;
+      queue.close();
+      try {
+        if (typeof run.close === "function") run.close();
+        else {
+          const closing = run.return?.(void 0);
+          if (closing !== void 0) void closing.catch(() => void 0);
+        }
+      } catch {
+      }
+    }
+  };
+}
 
 // ../../packages/core-agent/src/claude/sdk.ts
 var NATIVE_MODEL_ALIASES = /* @__PURE__ */ new Set(["sonnet", "opus", "opus[1m]", "haiku", "fable", "fable[1m]"]);
@@ -35848,80 +36221,135 @@ async function createClaudeGatewaySdk(options) {
   const configDir = options.home?.kind === "shared" ? createSharedClaudeConfigHome(options.home.configDir) : await createIsolatedClaudeConfigDir(options.tempRoot);
   let disposed = false;
   let active = null;
+  const reserveSlot = (kind) => {
+    if (disposed) throw new Error("This Claude gateway SDK instance has been disposed.");
+    if (active) {
+      throw new Error(kind === "turn" ? "A turn is already running on this instance. Await it, or create another instance." : "A turn or session is already running on this instance. Close it, or create another instance.");
+    }
+    const reservation = { close: () => void 0 };
+    active = reservation;
+    return reservation;
+  };
+  const prepareLaunch = async () => {
+    await configDir.writeModelCache({ baseUrl, models: catalogModels, fetchedAt: Date.now() });
+    return claudeGatewayLaunchEnv(inherited, {
+      baseUrl,
+      configDir: configDir.path,
+      homeKind: options.home?.kind === "shared" ? "shared" : "isolated"
+    });
+  };
+  const vendorRunOptions = (request, model, env) => ({
+    env,
+    model,
+    ...request.systemPrompt === void 0 ? {} : { systemPrompt: vendorSystemPrompt(request.systemPrompt) },
+    // 패키지가 스스로 지어내는 지시는 없다 — 여기 실리는 것은 전부 호출자가 고른 것이고,
+    // 고르지 않으면 아무것도 붙지 않는다. 두 기본값이 그 규율을 구조로 만든다:
+    // `settingSources: []`가 사용자·프로젝트 설정과 CLAUDE.md를 끄고, `strictMcpConfig`가
+    // 그와 별개인 ambient .mcp.json·플러그인 MCP를 막는다.
+    settingSources: options.settingSources ? [...options.settingSources] : [],
+    strictMcpConfig: options.allowAmbientMcpServers !== true,
+    // 플러그인의 MCP 선언은 읽지 않는다 — 좌표는 호출자가 이미 소유한다.
+    ...options.plugins && options.plugins.length > 0 ? { plugins: options.plugins.map((plugin) => ({ type: "local", path: plugin.path, skipMcpDiscovery: true })) } : {},
+    // `--settings`와 같은 자리다. flag 소스로 병합되므로 사용자·프로젝트 설정을 대체하지 않는다.
+    // skillOverrides와 ultracode만 연다 — settings 전체를 열면 호출자가 쓰지 않은 지시가 들어온다.
+    ...vendorFlagSettings(options),
+    ...request.effort === void 0 ? {} : { effort: request.effort },
+    ...request.cwd === void 0 ? {} : { cwd: request.cwd },
+    ...request.resume === void 0 ? {} : { resume: request.resume },
+    ...request.maxTurns === void 0 ? {} : { maxTurns: request.maxTurns },
+    ...request.maxBudgetUsd === void 0 ? {} : { maxBudgetUsd: request.maxBudgetUsd },
+    ...request.tools === void 0 ? {} : { tools: [...request.tools] },
+    ...request.allowedTools === void 0 ? {} : { allowedTools: [...request.allowedTools] },
+    ...request.disallowedTools === void 0 ? {} : { disallowedTools: [...request.disallowedTools] },
+    ...request.permissionMode === void 0 ? {} : { permissionMode: request.permissionMode },
+    ...request.canUseTool === void 0 ? {} : { canUseTool: vendorCanUseTool(request.canUseTool) },
+    ...request.mcpServers === void 0 && request.servedMcpServers === void 0 ? {} : { mcpServers: { ...request.mcpServers, ...vendorServedMcpServers(request.servedMcpServers) } },
+    ...request.includePartialMessages === void 0 ? {} : { includePartialMessages: request.includePartialMessages },
+    ...request.abortController === void 0 ? {} : { abortController: request.abortController },
+    ...request.stderr === void 0 ? {} : { stderr: request.stderr }
+  });
   const sdk = {
     configDir: configDir.path,
     models: Object.freeze(accepted.map((entry) => entry.id)),
     async startTurn(turn) {
-      if (disposed) throw new Error("This Claude gateway SDK instance has been disposed.");
-      if (active) throw new Error("A turn is already running on this instance. Await it, or create another instance.");
-      assertKnownTurnKeys(turn);
-      if (typeof turn.prompt !== "string" || turn.prompt.length === 0) {
-        throw new TypeError("turn.prompt must be a non-empty string.");
-      }
-      const model = resolveTurnModel(turn.model, accepted);
-      await configDir.writeModelCache({ baseUrl, models: catalogModels, fetchedAt: Date.now() });
-      const env = claudeGatewayLaunchEnv(inherited, {
-        baseUrl,
-        configDir: configDir.path,
-        homeKind: options.home?.kind === "shared" ? "shared" : "isolated"
-      });
-      const run = runVendorQuery({
-        prompt: turn.prompt,
-        options: {
-          env,
-          model,
-          ...turn.systemPrompt === void 0 ? {} : { systemPrompt: vendorSystemPrompt(turn.systemPrompt) },
-          // 패키지가 스스로 지어내는 지시는 없다 — 여기 실리는 것은 전부 호출자가 고른 것이고,
-          // 고르지 않으면 아무것도 붙지 않는다. 두 기본값이 그 규율을 구조로 만든다:
-          // `settingSources: []`가 사용자·프로젝트 설정과 CLAUDE.md를 끄고, `strictMcpConfig`가
-          // 그와 별개인 ambient .mcp.json·플러그인 MCP를 막는다.
-          settingSources: options.settingSources ? [...options.settingSources] : [],
-          strictMcpConfig: options.allowAmbientMcpServers !== true,
-          // 플러그인의 MCP 선언은 읽지 않는다 — 좌표는 호출자가 이미 소유한다.
-          ...options.plugins && options.plugins.length > 0 ? { plugins: options.plugins.map((plugin) => ({ type: "local", path: plugin.path, skipMcpDiscovery: true })) } : {},
-          // `--settings`와 같은 자리다. flag 소스로 병합되므로 사용자·프로젝트 설정을 대체하지 않는다.
-          ...options.skillOverrides && Object.keys(options.skillOverrides).length > 0 ? { settings: { skillOverrides: { ...options.skillOverrides } } } : {},
-          ...turn.effort === void 0 ? {} : { effort: turn.effort },
-          ...turn.cwd === void 0 ? {} : { cwd: turn.cwd },
-          ...turn.resume === void 0 ? {} : { resume: turn.resume },
-          ...turn.maxTurns === void 0 ? {} : { maxTurns: turn.maxTurns },
-          ...turn.maxBudgetUsd === void 0 ? {} : { maxBudgetUsd: turn.maxBudgetUsd },
-          ...turn.tools === void 0 ? {} : { tools: [...turn.tools] },
-          ...turn.allowedTools === void 0 ? {} : { allowedTools: [...turn.allowedTools] },
-          ...turn.disallowedTools === void 0 ? {} : { disallowedTools: [...turn.disallowedTools] },
-          ...turn.permissionMode === void 0 ? {} : { permissionMode: turn.permissionMode },
-          ...turn.canUseTool === void 0 ? {} : { canUseTool: vendorCanUseTool(turn.canUseTool) },
-          ...turn.mcpServers === void 0 && turn.servedMcpServers === void 0 ? {} : { mcpServers: { ...turn.mcpServers, ...vendorServedMcpServers(turn.servedMcpServers) } },
-          ...turn.includePartialMessages === void 0 ? {} : { includePartialMessages: turn.includePartialMessages },
-          ...turn.abortController === void 0 ? {} : { abortController: turn.abortController },
-          ...turn.stderr === void 0 ? {} : { stderr: turn.stderr }
+      const reservation = reserveSlot("turn");
+      try {
+        assertKnownTurnKeys(turn);
+        if (typeof turn.prompt !== "string" || turn.prompt.length === 0) {
+          throw new TypeError("turn.prompt must be a non-empty string.");
+        }
+        const model = resolveTurnModel(turn.model, accepted);
+        const env = await prepareLaunch();
+        const run = runVendorQuery({
+          prompt: turn.prompt,
+          options: vendorRunOptions(turn, model, env)
+        });
+        const release = () => {
+          if (active === tracked) active = null;
+        };
+        const tracked = {
+          [Symbol.asyncIterator]() {
+            const iterator = run[Symbol.asyncIterator]();
+            return {
+              async next() {
+                const result = await iterator.next();
+                if (result.done === true) release();
+                return result;
+              }
+            };
+          },
+          close() {
+            try {
+              run.close();
+            } finally {
+              release();
+            }
+          },
+          getContextUsage: () => run.getContextUsage()
+        };
+        if (active !== reservation) {
+          run.close();
+          throw new Error("This Claude gateway SDK instance has been disposed.");
         }
-      });
-      const release = () => {
-        if (active === tracked) active = null;
-      };
-      const tracked = {
-        [Symbol.asyncIterator]() {
-          const iterator = run[Symbol.asyncIterator]();
-          return {
-            async next() {
-              const result = await iterator.next();
-              if (result.done === true) release();
-              return result;
+        active = tracked;
+        return tracked;
+      } catch (error51) {
+        if (active === reservation) active = null;
+        throw error51;
+      }
+    },
+    async openSession(request) {
+      const reservation = reserveSlot("session");
+      try {
+        assertKnownSessionKeys(request);
+        const model = resolveTurnModel(request.model, accepted);
+        const env = await prepareLaunch();
+        const session = runVendorSession({ options: vendorRunOptions(request, model, env) });
+        const tracked = {
+          send: (text) => session.send(text),
+          interrupt: () => session.interrupt(),
+          stopTask: (taskId) => session.stopTask(taskId),
+          backgroundTasks: (toolUseId) => session.backgroundTasks(toolUseId),
+          getContextUsage: () => session.getContextUsage(),
+          [Symbol.asyncIterator]: () => session[Symbol.asyncIterator](),
+          close() {
+            try {
+              session.close();
+            } finally {
+              if (active === tracked) active = null;
             }
-          };
-        },
-        close() {
-          try {
-            run.close();
-          } finally {
-            release();
           }
-        },
-        getContextUsage: () => run.getContextUsage()
-      };
-      active = tracked;
-      return tracked;
+        };
+        if (active !== reservation) {
+          session.close();
+          throw new Error("This Claude gateway SDK instance has been disposed.");
+        }
+        active = tracked;
+        return tracked;
+      } catch (error51) {
+        if (active === reservation) active = null;
+        throw error51;
+      }
     },
     async dispose() {
       if (disposed) return;
@@ -36003,6 +36431,14 @@ function vendorCanUseTool(canUseTool) {
     }
   };
 }
+function vendorFlagSettings(options) {
+  const settings2 = {};
+  if (options.skillOverrides && Object.keys(options.skillOverrides).length > 0) {
+    settings2.skillOverrides = { ...options.skillOverrides };
+  }
+  if (options.ultracode === true) settings2.ultracode = true;
+  return Object.keys(settings2).length > 0 ? { settings: settings2 } : {};
+}
 function vendorSystemPrompt(systemPrompt) {
   const text = systemPrompt?.text;
   if (typeof text !== "string" || text.length === 0) {
@@ -36020,6 +36456,14 @@ function assertKnownTurnKeys(turn) {
     );
   }
 }
+function assertKnownSessionKeys(request) {
+  const unknown2 = Object.keys(request).filter((key) => !CLAUDE_GATEWAY_SESSION_KEYS.includes(key));
+  if (unknown2.length > 0) {
+    throw new TypeError(
+      `Unsupported session option(s): ${unknown2.join(", ")}. Only an instruction the caller authored may reach the child, through systemPrompt; every other instruction channel is closed, so those options do not exist. A session receives its prompts through send(), never as an option.`
+    );
+  }
+}
 function vendorServedMcpServers(servers) {
   if (!servers?.length) return {};
   return Object.fromEntries(servers.map((server) => [server.name, {
@@ -36838,17 +37282,6 @@ function toMetadata(item) {
   };
 }
 
-// core/host/security-headers.ts
-var CONSOLE_SECURITY_HEADERS = {
-  "Content-Security-Policy": "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://img.shields.io; font-src 'self' data:; connect-src 'self' ws: wss: https://api.github.com; object-src 'none'; base-uri 'none'",
-  "X-Content-Type-Options": "nosniff",
-  "Referrer-Policy": "no-referrer",
-  "Cache-Control": "no-store"
-};
-function withSecurityHeaders2(headers = {}) {
-  return { ...CONSOLE_SECURITY_HEADERS, ...headers };
-}
-
 // core/host/codex/gateway.ts
 var CODEX_BASE = "/console/codex";
 var ALLOWED_METHODS = /* @__PURE__ */ new Set(["GET", "HEAD", "POST"]);