@dotobokuri/fleet-console 1.63.0 → 1.65.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (66) hide show
  1. package/dist/cli.mjs +386 -82
  2. package/dist/client/assets/{_baseUniq-CVUU389k.js → _baseUniq-DyzqDsbR.js} +1 -1
  3. package/dist/client/assets/{arc-Fg3WjPoW.js → arc-D9PB38OE.js} +1 -1
  4. package/dist/client/assets/{architectureDiagram-Q4EWVU46-gAB_QWIv.js → architectureDiagram-Q4EWVU46-0L3Tlker.js} +1 -1
  5. package/dist/client/assets/{blockDiagram-DXYQGD6D-DCY_3CSv.js → blockDiagram-DXYQGD6D-BCAdqHmo.js} +1 -1
  6. package/dist/client/assets/{c4Diagram-AHTNJAMY-2ai4d9rg.js → c4Diagram-AHTNJAMY-oK3f-N6i.js} +1 -1
  7. package/dist/client/assets/channel-CzEHIBah.js +1 -0
  8. package/dist/client/assets/{chunk-4BX2VUAB-C-sjgNCE.js → chunk-4BX2VUAB-CIYxtKO7.js} +1 -1
  9. package/dist/client/assets/{chunk-4TB4RGXK-Co7w9KaD.js → chunk-4TB4RGXK-CKA_-tPR.js} +1 -1
  10. package/dist/client/assets/{chunk-55IACEB6-Dspr2174.js → chunk-55IACEB6-ArIbE5m1.js} +1 -1
  11. package/dist/client/assets/{chunk-EDXVE4YY-UzzG0ax3.js → chunk-EDXVE4YY-bGzMBuDL.js} +1 -1
  12. package/dist/client/assets/{chunk-FMBD7UC4-DKXcUQqJ.js → chunk-FMBD7UC4-CZUkX3ry.js} +1 -1
  13. package/dist/client/assets/{chunk-OYMX7WX6-vW--qrkP.js → chunk-OYMX7WX6-CNXmIVXX.js} +1 -1
  14. package/dist/client/assets/{chunk-QZHKN3VN-DyE-yBhf.js → chunk-QZHKN3VN-B3t4h1MD.js} +1 -1
  15. package/dist/client/assets/{chunk-YZCP3GAM-C7LLTO2-.js → chunk-YZCP3GAM-CdGF0f8H.js} +1 -1
  16. package/dist/client/assets/classDiagram-6PBFFD2Q-jNK4g1rr.js +1 -0
  17. package/dist/client/assets/classDiagram-v2-HSJHXN6E-jNK4g1rr.js +1 -0
  18. package/dist/client/assets/clone-DggrGKv8.js +1 -0
  19. package/dist/client/assets/{cose-bilkent-S5V4N54A-BkDNeJiw.js → cose-bilkent-S5V4N54A-BESjfcni.js} +1 -1
  20. package/dist/client/assets/{dagre-KV5264BT-DqeN9oF3.js → dagre-KV5264BT-WpQhPw2a.js} +1 -1
  21. package/dist/client/assets/{diagram-5BDNPKRD-BXzt4-3Y.js → diagram-5BDNPKRD-BfAkutIX.js} +1 -1
  22. package/dist/client/assets/{diagram-G4DWMVQ6-DbzDYVOf.js → diagram-G4DWMVQ6-C9I16SLL.js} +1 -1
  23. package/dist/client/assets/{diagram-MMDJMWI5-wPQu3o7B.js → diagram-MMDJMWI5-CVJMM2zJ.js} +1 -1
  24. package/dist/client/assets/{diagram-TYMM5635-C-vwFwzf.js → diagram-TYMM5635-DTqr7jJ3.js} +1 -1
  25. package/dist/client/assets/{erDiagram-SMLLAGMA-CcukuTgN.js → erDiagram-SMLLAGMA-B09ElCdB.js} +1 -1
  26. package/dist/client/assets/{flowDiagram-DWJPFMVM-BT8ZNr2Y.js → flowDiagram-DWJPFMVM-C93jg-t6.js} +1 -1
  27. package/dist/client/assets/{ganttDiagram-T4ZO3ILL-B_wNcZrL.js → ganttDiagram-T4ZO3ILL-5Js2lpdY.js} +1 -1
  28. package/dist/client/assets/{gitGraphDiagram-UUTBAWPF-dUwwvDSd.js → gitGraphDiagram-UUTBAWPF-BxGzg1Rc.js} +1 -1
  29. package/dist/client/assets/{graph-C4i_jr7e.js → graph-BkRyh4eN.js} +1 -1
  30. package/dist/client/assets/index-BSVaW3Ov.js +465 -0
  31. package/dist/client/assets/index-DxjgOu3C.css +1 -0
  32. package/dist/client/assets/{infoDiagram-42DDH7IO-Bf2KPu0t.js → infoDiagram-42DDH7IO-DZPp1lR6.js} +1 -1
  33. package/dist/client/assets/{ishikawaDiagram-UXIWVN3A-DjHChg2o.js → ishikawaDiagram-UXIWVN3A-CXTuQ2Bb.js} +1 -1
  34. package/dist/client/assets/{journeyDiagram-VCZTEJTY-B08epGYF.js → journeyDiagram-VCZTEJTY--u6tYqhF.js} +1 -1
  35. package/dist/client/assets/{kanban-definition-6JOO6SKY-BFasXRgc.js → kanban-definition-6JOO6SKY-CGMEohiQ.js} +1 -1
  36. package/dist/client/assets/{layout-Q_W10VzL.js → layout-Bzu8ET7F.js} +1 -1
  37. package/dist/client/assets/{linear-Dy4fc5kq.js → linear-B6htRUTP.js} +1 -1
  38. package/dist/client/assets/{mermaid.core-OtTy8N5f.js → mermaid.core-CtpLAI-c.js} +4 -4
  39. package/dist/client/assets/{min-DODD7JTz.js → min-CEURoL5k.js} +1 -1
  40. package/dist/client/assets/{mindmap-definition-QFDTVHPH-DMhpsiYD.js → mindmap-definition-QFDTVHPH-B-HiXlEN.js} +1 -1
  41. package/dist/client/assets/{pieDiagram-DEJITSTG-C5usaVgs.js → pieDiagram-DEJITSTG-DQgiLkTU.js} +1 -1
  42. package/dist/client/assets/{quadrantDiagram-34T5L4WZ-B-b2NvBz.js → quadrantDiagram-34T5L4WZ-xLh7CKRW.js} +1 -1
  43. package/dist/client/assets/{requirementDiagram-MS252O5E-D6_4jY3n.js → requirementDiagram-MS252O5E-O1SOxLMB.js} +1 -1
  44. package/dist/client/assets/{sankeyDiagram-XADWPNL6-B6imEhCV.js → sankeyDiagram-XADWPNL6-D-mh4ZYc.js} +1 -1
  45. package/dist/client/assets/{sequenceDiagram-FGHM5R23-BRHNnuqK.js → sequenceDiagram-FGHM5R23-Dp2XhLFP.js} +1 -1
  46. package/dist/client/assets/{stateDiagram-FHFEXIEX-RiIddIHL.js → stateDiagram-FHFEXIEX-UQkaQPQt.js} +1 -1
  47. package/dist/client/assets/stateDiagram-v2-QKLJ7IA2-CRw5Ot78.js +1 -0
  48. package/dist/client/assets/{timeline-definition-GMOUNBTQ-BhP14Blt.js → timeline-definition-GMOUNBTQ-DDMfKpma.js} +1 -1
  49. package/dist/client/assets/{vennDiagram-DHZGUBPP-CtzwrBNs.js → vennDiagram-DHZGUBPP-DaGxBzx2.js} +1 -1
  50. package/dist/client/assets/{wardley-RL74JXVD-TXsee18-.js → wardley-RL74JXVD-DBNvUuF6.js} +1 -1
  51. package/dist/client/assets/{wardleyDiagram-NUSXRM2D-CrJP7pf7.js → wardleyDiagram-NUSXRM2D-IbDED74Y.js} +1 -1
  52. package/dist/client/assets/{xychartDiagram-5P7HB3ND-rB-PigjI.js → xychartDiagram-5P7HB3ND-0RafK-TZ.js} +1 -1
  53. package/dist/client/index.html +2 -2
  54. package/dist/fleet-plugins/ledger/routes.mjs +130 -1
  55. package/dist/fleet-plugins/quota/routes.mjs +130 -1
  56. package/dist/fleet-plugins/scuttlebutt/routes.mjs +376 -68
  57. package/dist/fleet-plugins/terminal/routes.mjs +727 -155
  58. package/dist/fleet.mjs +386 -82
  59. package/package.json +1 -1
  60. package/dist/client/assets/channel-DlA1BRCV.js +0 -1
  61. package/dist/client/assets/classDiagram-6PBFFD2Q-rBpGSdtk.js +0 -1
  62. package/dist/client/assets/classDiagram-v2-HSJHXN6E-rBpGSdtk.js +0 -1
  63. package/dist/client/assets/clone-_1aYWCbr.js +0 -1
  64. package/dist/client/assets/index-BXtDpU36.js +0 -465
  65. package/dist/client/assets/index-CLb_APbh.css +0 -1
  66. package/dist/client/assets/stateDiagram-v2-QKLJ7IA2-CsHfIgMa.js +0 -1
package/dist/fleet.mjs CHANGED
@@ -22227,7 +22227,7 @@ var models_default = {
22227
22227
  codex: {
22228
22228
  name: "Codex",
22229
22229
  defaultModel: "gpt-5.6-sol",
22230
- source: "codex app-server model/list (codex-cli 0.147.0, observed 2026-08-11) for model/effort/service-tier; Fleet catalog effort ladders are capped at max because harness launch capabilities are not model rungs; contextWindow=272000 is codex debug models context_window/max_context_window (codex-cli 0.146.0, observed 2026-08-02)",
22230
+ source: "codex app-server model/list (codex-cli 0.147.0, observed 2026-08-11) for model/effort/service-tier and the unsuffixed 272000 defaults; Fleet catalog effort ladders are capped at max because harness launch capabilities are not model rungs; 2026-08-17 production Codex live observations added explicit 1M (1000000) variants on the same upstream bases",
22231
22231
  models: [
22232
22232
  {
22233
22233
  modelId: "gpt-5.6-sol",
@@ -22354,6 +22354,135 @@ var models_default = {
22354
22354
  "gpt-5.6-luna-fast"
22355
22355
  ],
22356
22356
  benchmarkKey: "gpt-5.6-luna"
22357
+ },
22358
+ {
22359
+ modelId: "gpt-5.6-sol-1m",
22360
+ name: "GPT-5.6-Sol-1M",
22361
+ capabilityClass: "flagship",
22362
+ providerModelId: "gpt-5.6-sol",
22363
+ contextWindow: 1e6,
22364
+ effort: {
22365
+ supported: true,
22366
+ levels: [
22367
+ "low",
22368
+ "medium",
22369
+ "high",
22370
+ "xhigh",
22371
+ "max"
22372
+ ]
22373
+ },
22374
+ aliases: [
22375
+ "gpt-5.6-sol-1m"
22376
+ ],
22377
+ benchmarkKey: "gpt-5.6-sol"
22378
+ },
22379
+ {
22380
+ modelId: "gpt-5.6-sol-1m-fast",
22381
+ name: "GPT-5.6-Sol-1M-Fast",
22382
+ capabilityClass: "flagship",
22383
+ providerModelId: "gpt-5.6-sol",
22384
+ serviceTier: "priority",
22385
+ contextWindow: 1e6,
22386
+ effort: {
22387
+ supported: true,
22388
+ levels: [
22389
+ "low",
22390
+ "medium",
22391
+ "high",
22392
+ "xhigh",
22393
+ "max"
22394
+ ]
22395
+ },
22396
+ aliases: [
22397
+ "gpt-5.6-sol-1m-fast"
22398
+ ],
22399
+ benchmarkKey: "gpt-5.6-sol"
22400
+ },
22401
+ {
22402
+ modelId: "gpt-5.6-luna-1m",
22403
+ name: "GPT-5.6-Luna-1M",
22404
+ capabilityClass: "light",
22405
+ providerModelId: "gpt-5.6-luna",
22406
+ contextWindow: 1e6,
22407
+ effort: {
22408
+ supported: true,
22409
+ levels: [
22410
+ "low",
22411
+ "medium",
22412
+ "high",
22413
+ "xhigh",
22414
+ "max"
22415
+ ]
22416
+ },
22417
+ aliases: [
22418
+ "gpt-5.6-luna-1m"
22419
+ ],
22420
+ benchmarkKey: "gpt-5.6-luna"
22421
+ },
22422
+ {
22423
+ modelId: "gpt-5.6-luna-1m-fast",
22424
+ name: "GPT-5.6-Luna-1M-Fast",
22425
+ capabilityClass: "light",
22426
+ providerModelId: "gpt-5.6-luna",
22427
+ serviceTier: "priority",
22428
+ contextWindow: 1e6,
22429
+ effort: {
22430
+ supported: true,
22431
+ levels: [
22432
+ "low",
22433
+ "medium",
22434
+ "high",
22435
+ "xhigh",
22436
+ "max"
22437
+ ]
22438
+ },
22439
+ aliases: [
22440
+ "gpt-5.6-luna-1m-fast"
22441
+ ],
22442
+ benchmarkKey: "gpt-5.6-luna"
22443
+ },
22444
+ {
22445
+ modelId: "gpt-5.6-terra-1m",
22446
+ name: "GPT-5.6-Terra-1M",
22447
+ capabilityClass: "standard",
22448
+ providerModelId: "gpt-5.6-terra",
22449
+ contextWindow: 1e6,
22450
+ effort: {
22451
+ supported: true,
22452
+ levels: [
22453
+ "low",
22454
+ "medium",
22455
+ "high",
22456
+ "xhigh",
22457
+ "max"
22458
+ ]
22459
+ },
22460
+ aliases: [
22461
+ "gpt-5.6-terra-1m"
22462
+ ],
22463
+ benchmarkKey: "gpt-5.6-terra"
22464
+ },
22465
+ {
22466
+ modelId: "gpt-5.6-terra-1m-fast",
22467
+ name: "GPT-5.6-Terra-1M-Fast",
22468
+ capabilityClass: "standard",
22469
+ providerModelId: "gpt-5.6-terra",
22470
+ serviceTier: "priority",
22471
+ contextWindow: 1e6,
22472
+ effort: {
22473
+ supported: true,
22474
+ levels: [
22475
+ "low",
22476
+ "medium",
22477
+ "high",
22478
+ "xhigh",
22479
+ "max"
22480
+ ]
22481
+ },
22482
+ aliases: [
22483
+ "gpt-5.6-terra-1m-fast"
22484
+ ],
22485
+ benchmarkKey: "gpt-5.6-terra"
22357
22486
  }
22358
22487
  ]
22359
22488
  },
@@ -48827,8 +48956,6 @@ function isNormalFace(face) {
48827
48956
  const style = face.style.toLocaleLowerCase();
48828
48957
  return NORMAL_FACE_MARKERS.some((marker) => style.includes(marker));
48829
48958
  }
48830
-
48831
- // core/host/system-fonts-routes.ts
48832
48959
  var SYSTEM_FONTS_PATH = "/api/v1/settings/fonts/system";
48833
48960
  var SYSTEM_FONTS_API_CATALOG = [
48834
48961
  {
@@ -49265,7 +49392,16 @@ function withSecurityHeaders(headers) {
49265
49392
  };
49266
49393
  }
49267
49394
 
49268
- // core/host/sse.ts
49395
+ // core/host/http-infra.ts
49396
+ var CONSOLE_SECURITY_HEADERS = {
49397
+ "Content-Security-Policy": "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://img.shields.io; font-src 'self' data:; connect-src 'self' ws: wss: https://api.github.com; object-src 'none'; base-uri 'none'",
49398
+ "X-Content-Type-Options": "nosniff",
49399
+ "Referrer-Policy": "no-referrer",
49400
+ "Cache-Control": "no-store"
49401
+ };
49402
+ function withSecurityHeaders2(headers = {}) {
49403
+ return { ...CONSOLE_SECURITY_HEADERS, ...headers };
49404
+ }
49269
49405
  var SSE_KEEPALIVE_INTERVAL_MS = 3e4;
49270
49406
  function encodeSseData(event, data) {
49271
49407
  return `event: ${event}
@@ -50578,6 +50714,9 @@ var CLAUDE_GATEWAY_TURN_KEYS = Object.freeze([
50578
50714
  "abortController",
50579
50715
  "stderr"
50580
50716
  ]);
50717
+ var CLAUDE_GATEWAY_SESSION_KEYS = Object.freeze(
50718
+ CLAUDE_GATEWAY_TURN_KEYS.filter((key) => key !== "prompt")
50719
+ );
50581
50720
 
50582
50721
  // ../../packages/core-agent/src/claude/launch-env.ts
50583
50722
  var CLAUDE_GATEWAY_MODEL_CACHE_RELPATH = "cache/gateway-models.json";
@@ -50699,6 +50838,111 @@ function runVendorQuery(input) {
50699
50838
  }
50700
50839
  };
50701
50840
  }
50841
+ var VendorInputQueue = class {
50842
+ pending = [];
50843
+ waiting = null;
50844
+ closed = false;
50845
+ push(message) {
50846
+ if (this.closed) return;
50847
+ const waiting = this.waiting;
50848
+ if (waiting) {
50849
+ this.waiting = null;
50850
+ waiting({ done: false, value: message });
50851
+ return;
50852
+ }
50853
+ this.pending.push(message);
50854
+ }
50855
+ close() {
50856
+ if (this.closed) return;
50857
+ this.closed = true;
50858
+ const waiting = this.waiting;
50859
+ if (waiting) {
50860
+ this.waiting = null;
50861
+ waiting({ done: true, value: void 0 });
50862
+ }
50863
+ }
50864
+ [Symbol.asyncIterator]() {
50865
+ return {
50866
+ next: async () => {
50867
+ if (this.pending.length > 0) return { done: false, value: this.pending.shift() };
50868
+ if (this.closed) return { done: true, value: void 0 };
50869
+ return await new Promise((resolve3) => {
50870
+ this.waiting = resolve3;
50871
+ });
50872
+ }
50873
+ };
50874
+ }
50875
+ };
50876
+ function vendorUserMessage(text) {
50877
+ return {
50878
+ type: "user",
50879
+ session_id: "",
50880
+ message: { role: "user", content: [{ type: "text", text }] },
50881
+ parent_tool_use_id: null
50882
+ };
50883
+ }
50884
+ function runVendorSession(input) {
50885
+ const queue = new VendorInputQueue();
50886
+ const run = query({
50887
+ prompt: queue,
50888
+ options: input.options
50889
+ });
50890
+ let closed = false;
50891
+ return {
50892
+ send(text) {
50893
+ if (closed) return;
50894
+ queue.push(vendorUserMessage(text));
50895
+ },
50896
+ async interrupt() {
50897
+ if (closed || typeof run.interrupt !== "function") return;
50898
+ await run.interrupt();
50899
+ },
50900
+ async stopTask(taskId) {
50901
+ if (closed) return;
50902
+ if (typeof run.stopTask !== "function") {
50903
+ throw new TypeError("This Claude Agent SDK build has no stopTask control request.");
50904
+ }
50905
+ await run.stopTask(taskId);
50906
+ },
50907
+ async backgroundTasks(toolUseId) {
50908
+ if (closed) return false;
50909
+ if (typeof run.backgroundTasks !== "function") {
50910
+ throw new TypeError("This Claude Agent SDK build has no background_tasks control request.");
50911
+ }
50912
+ return await run.backgroundTasks(toolUseId);
50913
+ },
50914
+ async getContextUsage() {
50915
+ if (closed || typeof run.getContextUsage !== "function") return null;
50916
+ try {
50917
+ return readVendorContextUsage(await run.getContextUsage());
50918
+ } catch {
50919
+ return null;
50920
+ }
50921
+ },
50922
+ [Symbol.asyncIterator]() {
50923
+ const iterator = run[Symbol.asyncIterator]();
50924
+ return {
50925
+ async next() {
50926
+ const result = await iterator.next();
50927
+ return result.done === true ? { done: true, value: void 0 } : { done: false, value: result.value };
50928
+ }
50929
+ };
50930
+ },
50931
+ close() {
50932
+ if (closed) return;
50933
+ closed = true;
50934
+ queue.close();
50935
+ try {
50936
+ if (typeof run.close === "function") run.close();
50937
+ else {
50938
+ const closing = run.return?.(void 0);
50939
+ if (closing !== void 0) void closing.catch(() => void 0);
50940
+ }
50941
+ } catch {
50942
+ }
50943
+ }
50944
+ };
50945
+ }
50702
50946
 
50703
50947
  // ../../packages/core-agent/src/claude/sdk.ts
50704
50948
  var NATIVE_MODEL_ALIASES = /* @__PURE__ */ new Set(["sonnet", "opus", "opus[1m]", "haiku", "fable", "fable[1m]"]);
@@ -50710,80 +50954,135 @@ async function createClaudeGatewaySdk(options) {
50710
50954
  const configDir = options.home?.kind === "shared" ? createSharedClaudeConfigHome(options.home.configDir) : await createIsolatedClaudeConfigDir(options.tempRoot);
50711
50955
  let disposed = false;
50712
50956
  let active = null;
50957
+ const reserveSlot = (kind) => {
50958
+ if (disposed) throw new Error("This Claude gateway SDK instance has been disposed.");
50959
+ if (active) {
50960
+ throw new Error(kind === "turn" ? "A turn is already running on this instance. Await it, or create another instance." : "A turn or session is already running on this instance. Close it, or create another instance.");
50961
+ }
50962
+ const reservation = { close: () => void 0 };
50963
+ active = reservation;
50964
+ return reservation;
50965
+ };
50966
+ const prepareLaunch = async () => {
50967
+ await configDir.writeModelCache({ baseUrl, models: catalogModels, fetchedAt: Date.now() });
50968
+ return claudeGatewayLaunchEnv(inherited, {
50969
+ baseUrl,
50970
+ configDir: configDir.path,
50971
+ homeKind: options.home?.kind === "shared" ? "shared" : "isolated"
50972
+ });
50973
+ };
50974
+ const vendorRunOptions = (request, model, env) => ({
50975
+ env,
50976
+ model,
50977
+ ...request.systemPrompt === void 0 ? {} : { systemPrompt: vendorSystemPrompt(request.systemPrompt) },
50978
+ // 패키지가 스스로 지어내는 지시는 없다 — 여기 실리는 것은 전부 호출자가 고른 것이고,
50979
+ // 고르지 않으면 아무것도 붙지 않는다. 두 기본값이 그 규율을 구조로 만든다:
50980
+ // `settingSources: []`가 사용자·프로젝트 설정과 CLAUDE.md를 끄고, `strictMcpConfig`가
50981
+ // 그와 별개인 ambient .mcp.json·플러그인 MCP를 막는다.
50982
+ settingSources: options.settingSources ? [...options.settingSources] : [],
50983
+ strictMcpConfig: options.allowAmbientMcpServers !== true,
50984
+ // 플러그인의 MCP 선언은 읽지 않는다 — 좌표는 호출자가 이미 소유한다.
50985
+ ...options.plugins && options.plugins.length > 0 ? { plugins: options.plugins.map((plugin) => ({ type: "local", path: plugin.path, skipMcpDiscovery: true })) } : {},
50986
+ // `--settings`와 같은 자리다. flag 소스로 병합되므로 사용자·프로젝트 설정을 대체하지 않는다.
50987
+ // skillOverrides와 ultracode만 연다 — settings 전체를 열면 호출자가 쓰지 않은 지시가 들어온다.
50988
+ ...vendorFlagSettings(options),
50989
+ ...request.effort === void 0 ? {} : { effort: request.effort },
50990
+ ...request.cwd === void 0 ? {} : { cwd: request.cwd },
50991
+ ...request.resume === void 0 ? {} : { resume: request.resume },
50992
+ ...request.maxTurns === void 0 ? {} : { maxTurns: request.maxTurns },
50993
+ ...request.maxBudgetUsd === void 0 ? {} : { maxBudgetUsd: request.maxBudgetUsd },
50994
+ ...request.tools === void 0 ? {} : { tools: [...request.tools] },
50995
+ ...request.allowedTools === void 0 ? {} : { allowedTools: [...request.allowedTools] },
50996
+ ...request.disallowedTools === void 0 ? {} : { disallowedTools: [...request.disallowedTools] },
50997
+ ...request.permissionMode === void 0 ? {} : { permissionMode: request.permissionMode },
50998
+ ...request.canUseTool === void 0 ? {} : { canUseTool: vendorCanUseTool(request.canUseTool) },
50999
+ ...request.mcpServers === void 0 && request.servedMcpServers === void 0 ? {} : { mcpServers: { ...request.mcpServers, ...vendorServedMcpServers(request.servedMcpServers) } },
51000
+ ...request.includePartialMessages === void 0 ? {} : { includePartialMessages: request.includePartialMessages },
51001
+ ...request.abortController === void 0 ? {} : { abortController: request.abortController },
51002
+ ...request.stderr === void 0 ? {} : { stderr: request.stderr }
51003
+ });
50713
51004
  const sdk = {
50714
51005
  configDir: configDir.path,
50715
51006
  models: Object.freeze(accepted.map((entry) => entry.id)),
50716
51007
  async startTurn(turn) {
50717
- if (disposed) throw new Error("This Claude gateway SDK instance has been disposed.");
50718
- if (active) throw new Error("A turn is already running on this instance. Await it, or create another instance.");
50719
- assertKnownTurnKeys(turn);
50720
- if (typeof turn.prompt !== "string" || turn.prompt.length === 0) {
50721
- throw new TypeError("turn.prompt must be a non-empty string.");
50722
- }
50723
- const model = resolveTurnModel(turn.model, accepted);
50724
- await configDir.writeModelCache({ baseUrl, models: catalogModels, fetchedAt: Date.now() });
50725
- const env = claudeGatewayLaunchEnv(inherited, {
50726
- baseUrl,
50727
- configDir: configDir.path,
50728
- homeKind: options.home?.kind === "shared" ? "shared" : "isolated"
50729
- });
50730
- const run = runVendorQuery({
50731
- prompt: turn.prompt,
50732
- options: {
50733
- env,
50734
- model,
50735
- ...turn.systemPrompt === void 0 ? {} : { systemPrompt: vendorSystemPrompt(turn.systemPrompt) },
50736
- // 패키지가 스스로 지어내는 지시는 없다 — 여기 실리는 것은 전부 호출자가 고른 것이고,
50737
- // 고르지 않으면 아무것도 붙지 않는다. 두 기본값이 그 규율을 구조로 만든다:
50738
- // `settingSources: []`가 사용자·프로젝트 설정과 CLAUDE.md를 끄고, `strictMcpConfig`가
50739
- // 그와 별개인 ambient .mcp.json·플러그인 MCP를 막는다.
50740
- settingSources: options.settingSources ? [...options.settingSources] : [],
50741
- strictMcpConfig: options.allowAmbientMcpServers !== true,
50742
- // 플러그인의 MCP 선언은 읽지 않는다 — 좌표는 호출자가 이미 소유한다.
50743
- ...options.plugins && options.plugins.length > 0 ? { plugins: options.plugins.map((plugin) => ({ type: "local", path: plugin.path, skipMcpDiscovery: true })) } : {},
50744
- // `--settings`와 같은 자리다. flag 소스로 병합되므로 사용자·프로젝트 설정을 대체하지 않는다.
50745
- ...options.skillOverrides && Object.keys(options.skillOverrides).length > 0 ? { settings: { skillOverrides: { ...options.skillOverrides } } } : {},
50746
- ...turn.effort === void 0 ? {} : { effort: turn.effort },
50747
- ...turn.cwd === void 0 ? {} : { cwd: turn.cwd },
50748
- ...turn.resume === void 0 ? {} : { resume: turn.resume },
50749
- ...turn.maxTurns === void 0 ? {} : { maxTurns: turn.maxTurns },
50750
- ...turn.maxBudgetUsd === void 0 ? {} : { maxBudgetUsd: turn.maxBudgetUsd },
50751
- ...turn.tools === void 0 ? {} : { tools: [...turn.tools] },
50752
- ...turn.allowedTools === void 0 ? {} : { allowedTools: [...turn.allowedTools] },
50753
- ...turn.disallowedTools === void 0 ? {} : { disallowedTools: [...turn.disallowedTools] },
50754
- ...turn.permissionMode === void 0 ? {} : { permissionMode: turn.permissionMode },
50755
- ...turn.canUseTool === void 0 ? {} : { canUseTool: vendorCanUseTool(turn.canUseTool) },
50756
- ...turn.mcpServers === void 0 && turn.servedMcpServers === void 0 ? {} : { mcpServers: { ...turn.mcpServers, ...vendorServedMcpServers(turn.servedMcpServers) } },
50757
- ...turn.includePartialMessages === void 0 ? {} : { includePartialMessages: turn.includePartialMessages },
50758
- ...turn.abortController === void 0 ? {} : { abortController: turn.abortController },
50759
- ...turn.stderr === void 0 ? {} : { stderr: turn.stderr }
51008
+ const reservation = reserveSlot("turn");
51009
+ try {
51010
+ assertKnownTurnKeys(turn);
51011
+ if (typeof turn.prompt !== "string" || turn.prompt.length === 0) {
51012
+ throw new TypeError("turn.prompt must be a non-empty string.");
51013
+ }
51014
+ const model = resolveTurnModel(turn.model, accepted);
51015
+ const env = await prepareLaunch();
51016
+ const run = runVendorQuery({
51017
+ prompt: turn.prompt,
51018
+ options: vendorRunOptions(turn, model, env)
51019
+ });
51020
+ const release = () => {
51021
+ if (active === tracked) active = null;
51022
+ };
51023
+ const tracked = {
51024
+ [Symbol.asyncIterator]() {
51025
+ const iterator = run[Symbol.asyncIterator]();
51026
+ return {
51027
+ async next() {
51028
+ const result = await iterator.next();
51029
+ if (result.done === true) release();
51030
+ return result;
51031
+ }
51032
+ };
51033
+ },
51034
+ close() {
51035
+ try {
51036
+ run.close();
51037
+ } finally {
51038
+ release();
51039
+ }
51040
+ },
51041
+ getContextUsage: () => run.getContextUsage()
51042
+ };
51043
+ if (active !== reservation) {
51044
+ run.close();
51045
+ throw new Error("This Claude gateway SDK instance has been disposed.");
50760
51046
  }
50761
- });
50762
- const release = () => {
50763
- if (active === tracked) active = null;
50764
- };
50765
- const tracked = {
50766
- [Symbol.asyncIterator]() {
50767
- const iterator = run[Symbol.asyncIterator]();
50768
- return {
50769
- async next() {
50770
- const result = await iterator.next();
50771
- if (result.done === true) release();
50772
- return result;
51047
+ active = tracked;
51048
+ return tracked;
51049
+ } catch (error51) {
51050
+ if (active === reservation) active = null;
51051
+ throw error51;
51052
+ }
51053
+ },
51054
+ async openSession(request) {
51055
+ const reservation = reserveSlot("session");
51056
+ try {
51057
+ assertKnownSessionKeys(request);
51058
+ const model = resolveTurnModel(request.model, accepted);
51059
+ const env = await prepareLaunch();
51060
+ const session = runVendorSession({ options: vendorRunOptions(request, model, env) });
51061
+ const tracked = {
51062
+ send: (text) => session.send(text),
51063
+ interrupt: () => session.interrupt(),
51064
+ stopTask: (taskId) => session.stopTask(taskId),
51065
+ backgroundTasks: (toolUseId) => session.backgroundTasks(toolUseId),
51066
+ getContextUsage: () => session.getContextUsage(),
51067
+ [Symbol.asyncIterator]: () => session[Symbol.asyncIterator](),
51068
+ close() {
51069
+ try {
51070
+ session.close();
51071
+ } finally {
51072
+ if (active === tracked) active = null;
50773
51073
  }
50774
- };
50775
- },
50776
- close() {
50777
- try {
50778
- run.close();
50779
- } finally {
50780
- release();
50781
51074
  }
50782
- },
50783
- getContextUsage: () => run.getContextUsage()
50784
- };
50785
- active = tracked;
50786
- return tracked;
51075
+ };
51076
+ if (active !== reservation) {
51077
+ session.close();
51078
+ throw new Error("This Claude gateway SDK instance has been disposed.");
51079
+ }
51080
+ active = tracked;
51081
+ return tracked;
51082
+ } catch (error51) {
51083
+ if (active === reservation) active = null;
51084
+ throw error51;
51085
+ }
50787
51086
  },
50788
51087
  async dispose() {
50789
51088
  if (disposed) return;
@@ -50865,6 +51164,14 @@ function vendorCanUseTool(canUseTool) {
50865
51164
  }
50866
51165
  };
50867
51166
  }
51167
+ function vendorFlagSettings(options) {
51168
+ const settings2 = {};
51169
+ if (options.skillOverrides && Object.keys(options.skillOverrides).length > 0) {
51170
+ settings2.skillOverrides = { ...options.skillOverrides };
51171
+ }
51172
+ if (options.ultracode === true) settings2.ultracode = true;
51173
+ return Object.keys(settings2).length > 0 ? { settings: settings2 } : {};
51174
+ }
50868
51175
  function vendorSystemPrompt(systemPrompt) {
50869
51176
  const text = systemPrompt?.text;
50870
51177
  if (typeof text !== "string" || text.length === 0) {
@@ -50882,6 +51189,14 @@ function assertKnownTurnKeys(turn) {
50882
51189
  );
50883
51190
  }
50884
51191
  }
51192
+ function assertKnownSessionKeys(request) {
51193
+ const unknown2 = Object.keys(request).filter((key) => !CLAUDE_GATEWAY_SESSION_KEYS.includes(key));
51194
+ if (unknown2.length > 0) {
51195
+ throw new TypeError(
51196
+ `Unsupported session option(s): ${unknown2.join(", ")}. Only an instruction the caller authored may reach the child, through systemPrompt; every other instruction channel is closed, so those options do not exist. A session receives its prompts through send(), never as an option.`
51197
+ );
51198
+ }
51199
+ }
50885
51200
  function vendorServedMcpServers(servers) {
50886
51201
  if (!servers?.length) return {};
50887
51202
  return Object.fromEntries(servers.map((server) => [server.name, {
@@ -51700,17 +52015,6 @@ function toMetadata(item) {
51700
52015
  };
51701
52016
  }
51702
52017
 
51703
- // core/host/security-headers.ts
51704
- var CONSOLE_SECURITY_HEADERS = {
51705
- "Content-Security-Policy": "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://img.shields.io; font-src 'self' data:; connect-src 'self' ws: wss: https://api.github.com; object-src 'none'; base-uri 'none'",
51706
- "X-Content-Type-Options": "nosniff",
51707
- "Referrer-Policy": "no-referrer",
51708
- "Cache-Control": "no-store"
51709
- };
51710
- function withSecurityHeaders2(headers = {}) {
51711
- return { ...CONSOLE_SECURITY_HEADERS, ...headers };
51712
- }
51713
-
51714
52018
  // core/host/codex/gateway.ts
51715
52019
  var CODEX_BASE = "/console/codex";
51716
52020
  var ALLOWED_METHODS = /* @__PURE__ */ new Set(["GET", "HEAD", "POST"]);
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@dotobokuri/fleet-console",
3
- "version": "1.63.0",
3
+ "version": "1.65.0",
4
4
  "description": "Fleet Console — sole owner of the fleet and fleet-console bins, Console web surface, and thin Claude Code launcher.",
5
5
  "repository": {
6
6
  "type": "git",
@@ -1 +0,0 @@
1
- import{ap as o,aq as n}from"./mermaid.core-OtTy8N5f.js";const t=(a,r)=>o.lang.round(n.parse(a)[r]);export{t as c};
@@ -1 +0,0 @@
1
- import{s as a,c as s,a as e,C as t}from"./chunk-4TB4RGXK-Co7w9KaD.js";import{_ as i}from"./mermaid.core-OtTy8N5f.js";import"./chunk-FMBD7UC4-DKXcUQqJ.js";import"./chunk-YZCP3GAM-C7LLTO2-.js";import"./chunk-55IACEB6-Dspr2174.js";import"./chunk-EDXVE4YY-UzzG0ax3.js";import"./index-BXtDpU36.js";var n={parser:e,get db(){return new t},renderer:s,styles:a,init:i(r=>{r.class||(r.class={}),r.class.arrowMarkerAbsolute=r.arrowMarkerAbsolute},"init")};export{n as diagram};
@@ -1 +0,0 @@
1
- import{s as a,c as s,a as e,C as t}from"./chunk-4TB4RGXK-Co7w9KaD.js";import{_ as i}from"./mermaid.core-OtTy8N5f.js";import"./chunk-FMBD7UC4-DKXcUQqJ.js";import"./chunk-YZCP3GAM-C7LLTO2-.js";import"./chunk-55IACEB6-Dspr2174.js";import"./chunk-EDXVE4YY-UzzG0ax3.js";import"./index-BXtDpU36.js";var n={parser:e,get db(){return new t},renderer:s,styles:a,init:i(r=>{r.class||(r.class={}),r.class.arrowMarkerAbsolute=r.arrowMarkerAbsolute},"init")};export{n as diagram};
@@ -1 +0,0 @@
1
- import{b as r}from"./graph-C4i_jr7e.js";var e=4;function a(o){return r(o,e)}export{a as c};