@dotobokuri/fleet-console 1.9.0 → 1.10.1

package/dist/cli.mjs

@@ -1144,10 +1144,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path36) {
-  if (!path36)
+function getElementAtPath(obj, path37) {
+  if (!path37)
     return obj;
-  return path36.reduce((acc, key) => acc?.[key], obj);
+  return path37.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -1556,11 +1556,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path36, issues) {
+function prefixIssues(path37, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path36);
+    iss.path.unshift(path37);
     return iss;
   });
 }
@@ -1707,16 +1707,16 @@ function flattenError(error51, mapper = (issue3) => issue3.message) {
 }
 function formatError(error51, mapper = (issue3) => issue3.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path36 = []) => {
+  const processError = (error52, path37 = []) => {
     for (const issue3 of error52.issues) {
       if (issue3.code === "invalid_union" && issue3.errors.length) {
-        issue3.errors.map((issues) => processError({ issues }, [...path36, ...issue3.path]));
+        issue3.errors.map((issues) => processError({ issues }, [...path37, ...issue3.path]));
       } else if (issue3.code === "invalid_key") {
-        processError({ issues: issue3.issues }, [...path36, ...issue3.path]);
+        processError({ issues: issue3.issues }, [...path37, ...issue3.path]);
       } else if (issue3.code === "invalid_element") {
-        processError({ issues: issue3.issues }, [...path36, ...issue3.path]);
+        processError({ issues: issue3.issues }, [...path37, ...issue3.path]);
       } else {
-        const fullpath = [...path36, ...issue3.path];
+        const fullpath = [...path37, ...issue3.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue3));
         } else {
@@ -1743,17 +1743,17 @@ function formatError(error51, mapper = (issue3) => issue3.message) {
 }
 function treeifyError(error51, mapper = (issue3) => issue3.message) {
   const result = { errors: [] };
-  const processError = (error52, path36 = []) => {
+  const processError = (error52, path37 = []) => {
     var _a3, _b;
     for (const issue3 of error52.issues) {
       if (issue3.code === "invalid_union" && issue3.errors.length) {
-        issue3.errors.map((issues) => processError({ issues }, [...path36, ...issue3.path]));
+        issue3.errors.map((issues) => processError({ issues }, [...path37, ...issue3.path]));
       } else if (issue3.code === "invalid_key") {
-        processError({ issues: issue3.issues }, [...path36, ...issue3.path]);
+        processError({ issues: issue3.issues }, [...path37, ...issue3.path]);
       } else if (issue3.code === "invalid_element") {
-        processError({ issues: issue3.issues }, [...path36, ...issue3.path]);
+        processError({ issues: issue3.issues }, [...path37, ...issue3.path]);
       } else {
-        const fullpath = [...path36, ...issue3.path];
+        const fullpath = [...path37, ...issue3.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue3));
           continue;
@@ -1785,8 +1785,8 @@ function treeifyError(error51, mapper = (issue3) => issue3.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path36 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path36) {
+  const path37 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path37) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -14450,13 +14450,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path36 = ref.slice(1).split("/").filter(Boolean);
-  if (path36.length === 0) {
+  const path37 = ref.slice(1).split("/").filter(Boolean);
+  if (path37.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path36[0] === defsKey) {
-    const key = path36[1];
+  if (path37[0] === defsKey) {
+    const key = path37[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -28290,8 +28290,6 @@ __export(typebox_exports, {
   Uppercase: () => Uppercase,
   Void: () => Void
 });
-
-// ../../packages/fleet-carriers/dist/index.js
 var __defProp2 = Object.defineProperty;
 var __export2 = (target, all) => {
   for (var name in all)
@@ -28484,11 +28482,11 @@ function sanitizeCarriersMap(value) {
   return result;
 }
 var TASK_FORCE_POOL_KEY_PATTERN = /(?:^|:)taskforce:[^:]+:([^:]+)$/;
-function buildCarrierExecutorPoolKey(carrierId, originSessionId) {
-  return namespacePoolKey(carrierId, originSessionId);
+function buildCarrierExecutorPoolKey(carrierId, originSessionId, cwd) {
+  return namespacePoolKey(carrierId, joinSessionCwdNamespace(originSessionId, cwd));
 }
-function buildTaskForceExecutorPoolKey(carrierId, cliType, originSessionId) {
-  return namespacePoolKey(buildTaskForceRunId(carrierId, cliType), originSessionId);
+function buildTaskForceExecutorPoolKey(carrierId, cliType, originSessionId, cwd) {
+  return namespacePoolKey(buildTaskForceRunId(carrierId, cliType), joinSessionCwdNamespace(originSessionId, cwd));
 }
 function buildTaskForceRunId(carrierId, cliType) {
   const encodedCarrierId = Buffer.from(carrierId, "utf-8").toString("base64url");
@@ -28503,6 +28501,11 @@ function matchesCarrierPoolKey(poolKey, carrierId) {
 function namespacePoolKey(baseKey, originSessionId) {
   return originSessionId ? `${originSessionId}:${baseKey}` : baseKey;
 }
+function joinSessionCwdNamespace(originSessionId, cwd) {
+  const cwdNamespace = cwd ? `cwd-${Buffer.from(cwd, "utf-8").toString("base64url")}` : void 0;
+  if (originSessionId && cwdNamespace) return `${originSessionId}:${cwdNamespace}`;
+  return originSessionId ?? cwdNamespace;
+}
 async function disconnectCarrierExecutorPools(carrierId) {
   const poolKeys = new Set(listActivePoolKeys().filter((poolKey) => matchesCarrierPoolKey(poolKey, carrierId)));
   poolKeys.add(carrierId);
@@ -31306,7 +31309,7 @@ function escapeRegExp(str) {
 }
 var taskForceStateStore = /* @__PURE__ */ new Map();
 function launchTaskForceJob(options) {
-  const { registry: registry3, carrierId, request, label, startedAt, toolName, ctx, deps } = options;
+  const { registry: registry3, carrierId, request, label, startedAt, toolName, ctx, cwd, deps } = options;
   const requestKey = buildTaskForceRequestKey(carrierId, request);
   getConfiguredTaskForceBackends(carrierId);
   assertRegisteredCarrier(registry3, carrierId);
@@ -31359,7 +31362,7 @@ function launchTaskForceJob(options) {
     request,
     state,
     signal: launch.signal,
-    cwd: ctx.cwd,
+    cwd,
     permit: launch.permit,
     startedAt,
     toolName,
@@ -31451,7 +31454,7 @@ function getRequiredTaskForceModelConfig(carrierId, cliType) {
 async function runTaskForceBackend(registry3, cliType, carrierId, originSessionId, requestKey, request, state, signal, cwd, jobId, trackModelInfoByCli, deps) {
   const execStartedAt = Date.now();
   const progress = state.backends.get(cliType);
-  const poolKey = buildTaskForceExecutorPoolKey(carrierId, cliType, originSessionId);
+  const poolKey = buildTaskForceExecutorPoolKey(carrierId, cliType, originSessionId, cwd);
   buildTaskForceScopedRunId(requestKey, cliType);
   const modelInfo = trackModelInfoByCli.get(cliType);
   if (!modelInfo) throw new Error(`Task Force config missing for ${cliType} on carrier "${carrierId}".`);
@@ -31656,7 +31659,8 @@ function buildCarrierDispatchToolSpec(registry3, deps) {
       CARRIER_REQUEST_BREVITY_GUIDELINE
     ],
     guardrails: [
-      `Multiple agents may be working on this codebase at the same time on a single filesystem and branch. Only touch changes you made \u2014 never revert or overwrite modifications made by others. Prefer precise edits (edit) over full-file writes (write). Always re-read a file before modifying it, as it may have changed since your last read.`
+      `Multiple agents may be working on this codebase at the same time on a single filesystem and branch. Only touch changes you made \u2014 never revert or overwrite modifications made by others. Prefer precise edits (edit) over full-file writes (write). Always re-read a file before modifying it, as it may have changed since your last read.`,
+      `When the carrier must work in a directory other than the host session cwd (e.g. a git worktree checkout), pass cwd as an absolute path so the carrier's CLI spawns there; never pass a relative path. Omit cwd to use the host session cwd.`
     ],
     get parameters() {
       const carrierIds = getRegisteredOrder(registry3);
@@ -31670,12 +31674,14 @@ function buildCarrierDispatchToolSpec(registry3, deps) {
         }),
         request: typebox_exports.String({
           description: `The task/prompt to send to the carrier. Required blocks per carrier -- see <fleet section="roster">. Missing blocks cause hard-error rejection.`
-        })
+        }),
+        cwd: typebox_exports.Optional(typebox_exports.String({
+          description: `Optional absolute working directory for the carrier's CLI spawn. MUST be an absolute path. Provide it when delegating work to a directory other than the host session cwd (e.g. a git worktree checkout) so the carrier spawns deterministically at that path. Omit to default to the host session cwd.`
+        }))
       });
     },
     async execute(args, ctx) {
       const t0 = Date.now();
-      const cwd = ctx.cwd;
       const toolCallId = ctx.toolCallId ?? "";
       const jobId = buildCarrierJobId("carrier", toolCallId);
       const toolName = "carrier_dispatch";
@@ -31686,6 +31692,11 @@ function buildCarrierDispatchToolSpec(registry3, deps) {
           error: "Invalid arguments: carrier_id, label, and request must be non-empty strings."
         });
       }
+      const cwdResolution = resolveDispatchCwd(args.cwd, ctx.cwd);
+      if (!cwdResolution.ok) {
+        return launchResponseResult({ job_id: jobId, accepted: false, error: cwdResolution.error });
+      }
+      const cwd = cwdResolution.cwd;
       const carrierId = args.carrier_id.trim();
       const label = args.label.trim();
       const request = args.request;
@@ -31718,6 +31729,7 @@ function buildCarrierDispatchToolSpec(registry3, deps) {
           startedAt: t0,
           toolName,
           ctx,
+          cwd,
           deps
         });
       }
@@ -31830,7 +31842,7 @@ async function runSingleCarrier(opts) {
   });
   try {
     const execResult = await executeWithPool({
-      poolKey: buildCarrierExecutorPoolKey(opts.carrierId, opts.originSessionId),
+      poolKey: buildCarrierExecutorPoolKey(opts.carrierId, opts.originSessionId, opts.cwd),
       scopeId: opts.carrierId,
       authEnvResolver: opts.deps.authEnvResolver,
       reservedExternalMcpServerIds: opts.deps.reservedExternalMcpServerIds,
@@ -31960,7 +31972,19 @@ function buildCarrierDispatchRunId(jobId, carrierId) {
 function isDispatchArgs(v) {
   if (typeof v !== "object" || v === null) return false;
   const obj = v;
-  return typeof obj.carrier_id === "string" && obj.carrier_id.trim().length > 0 && typeof obj.label === "string" && obj.label.trim().length > 0 && typeof obj.request === "string" && obj.request.trim().length > 0;
+  return typeof obj.carrier_id === "string" && obj.carrier_id.trim().length > 0 && typeof obj.label === "string" && obj.label.trim().length > 0 && typeof obj.request === "string" && obj.request.trim().length > 0 && (obj.cwd === void 0 || typeof obj.cwd === "string");
+}
+function resolveDispatchCwd(rawCwd, fallbackCwd) {
+  if (rawCwd === void 0) return { ok: true, cwd: fallbackCwd };
+  const trimmed = rawCwd.trim();
+  if (trimmed.length === 0) return { ok: true, cwd: fallbackCwd };
+  if (!path92__default.isAbsolute(trimmed)) {
+    return {
+      ok: false,
+      error: `Invalid cwd "${rawCwd}": must be an absolute path. Provide an absolute directory or omit cwd to use the host session cwd.`
+    };
+  }
+  return { ok: true, cwd: trimmed };
 }
 function buildCarrierRoster(registry3, carrierIds, options) {
   const { excludeCarrierIds, heading, preambleLines, extraLines } = options ?? {};
@@ -32077,68 +32101,6 @@ function getClaudeModel(config2) {
 function clampClaudeEffort(effort) {
   return effort === "max" ? CLAUDE_MAX_EFFORT : effort;
 }
-var ROLE_DESCRIPTION_SEPARATOR = " - ";
-function readCarrierStatusEntries(registry3) {
-  const carrierDefaults = buildCarrierDefaultsByCarrier(registry3);
-  return buildCarrierStatusEntriesFromSnapshot(registry3, readFileBackedCarriersSnapshot(carrierDefaults));
-}
-function buildCarrierStatusEntriesFromSnapshot(registry3, snapshot) {
-  const entries = [];
-  for (const carrierId of getRegisteredOrder(registry3)) {
-    const config2 = getRegisteredCarrierConfig(registry3, carrierId);
-    if (!config2) continue;
-    const state = snapshot.carriers[carrierId];
-    const cliType = snapshot.carriers[carrierId]?.agentCliType ?? config2.defaultCliType;
-    const selection = snapshot.carriers[carrierId]?.agentCli[cliType];
-    const provider = getProviderModels(cliType);
-    const role = sanitizeCarrierMetadataText(config2.carrierMetadata?.title);
-    const roleSummary = sanitizeCarrierMetadataText(config2.carrierMetadata?.summary);
-    entries.push({
-      carrierId,
-      category: config2.carrierMetadata?.category,
-      cliType,
-      defaultCliType: config2.defaultCliType,
-      displayName: state?.displayName ?? getCarrierSourceDisplayName(registry3, carrierId),
-      effort: selection?.effort ?? null,
-      isDefault: !selection?.model,
-      model: selection?.model || provider.defaultModel,
-      role,
-      roleDescription: buildRoleDescription(role, roleSummary),
-      slot: config2.slot,
-      subagentMode: state?.agentMode === "subagent",
-      taskForceBackendCount: getConfiguredTaskForceBackendsFromSnapshot(snapshot, carrierId).length
-    });
-  }
-  return entries;
-}
-function buildCarrierDefaultsByCarrier(registry3) {
-  return Object.fromEntries(
-    getRegisteredOrder(registry3).map((carrierId) => {
-      const config2 = getRegisteredCarrierConfig(registry3, carrierId);
-      if (!config2) return null;
-      return [carrierId, buildCarrierDefaults(config2)];
-    }).filter((entry) => entry !== null)
-  );
-}
-function buildCarrierDefaults(config2) {
-  const cliType = resolveAgentCliType2(config2.id, config2.defaultCliType);
-  const cliDefaults = buildCarrierModelDefaults(config2, cliType);
-  return {
-    cliType,
-    ...config2.defaultAgentMode ? { defaultAgentMode: config2.defaultAgentMode } : {},
-    ...cliDefaults.defaultEffort ? { defaultEffort: cliDefaults.defaultEffort } : {},
-    ...cliDefaults.defaultModel ? { defaultModel: cliDefaults.defaultModel } : {}
-  };
-}
-function buildRoleDescription(role, summary) {
-  if (role && summary) return `${role}${ROLE_DESCRIPTION_SEPARATOR}${summary}`;
-  return role ?? summary;
-}
-function sanitizeCarrierMetadataText(value) {
-  if (typeof value !== "string") return null;
-  const sanitized = sanitizeToolBlockLabel(value).trim();
-  return sanitized.length > 0 ? sanitized : null;
-}
 var dispatch = {
   ...framework_exports,
   framework: framework_exports,
@@ -40269,9 +40231,101 @@ function buildWikiToolSpec(config2, usage) {
   };
 }
 
+// src/agent-cli-routes.ts
+var AGENT_CLI_API_CATALOG = [
+  {
+    method: "GET",
+    path: "/agent-cli/state",
+    summary: "Get the installed Agent CLI status.",
+    category: "Agent CLI",
+    gate: "loopback"
+  }
+];
+function createAgentCliRouter(deps) {
+  return async function handleAgentCliRoute(context) {
+    const { req, res, pathname } = context;
+    if (pathname === "/agent-cli/state") {
+      if (req.method !== "GET") {
+        deps.writeJson(res, 405, { error: "Method not allowed" });
+        return true;
+      }
+      const clis = await deps.detect();
+      const body = { clis };
+      deps.writeJson(res, 200, body);
+      return true;
+    }
+    return false;
+  };
+}
+
 // src/carrier-settings-routes.ts
 var SUBAGENT_CLI_TYPES = /* @__PURE__ */ new Set(["claude", "claude-zai", "claude-kimi", "claude-glm"]);
 var TASKFORCE_MIN_BACKENDS = 2;
+var CARRIER_SETTINGS_API_CATALOG = [
+  {
+    method: "GET",
+    path: "/carrier-settings/state",
+    summary: "Get the carrier settings status.",
+    category: "Carrier Settings",
+    gate: "loopback"
+  },
+  {
+    method: "GET",
+    path: "/carrier-settings/options",
+    summary: "Get the carrier settings options.",
+    category: "Carrier Settings",
+    gate: "loopback"
+  },
+  {
+    method: "PUT",
+    path: "/carrier-settings/carriers/:id/cli",
+    summary: "Change the carrier Agent CLI.",
+    category: "Carrier Settings",
+    gate: "terminal-origin"
+  },
+  {
+    method: "PUT",
+    path: "/carrier-settings/carriers/:id/model",
+    summary: "Change the carrier model selection.",
+    category: "Carrier Settings",
+    gate: "terminal-origin"
+  },
+  {
+    method: "PATCH",
+    path: "/carrier-settings/carriers/:id/display-name",
+    summary: "Change the carrier display name.",
+    category: "Carrier Settings",
+    gate: "terminal-origin"
+  },
+  {
+    method: "PUT",
+    path: "/carrier-settings/carriers/:id/agent-mode",
+    summary: "Change the carrier execution mode.",
+    category: "Carrier Settings",
+    gate: "terminal-origin"
+  },
+  {
+    method: "PUT",
+    path: "/carrier-settings/carriers/:id/taskforce/:cliType",
+    summary: "Set the Task Force backend model.",
+    category: "Carrier Settings",
+    gate: "terminal-origin"
+  },
+  {
+    method: "DELETE",
+    path: "/carrier-settings/carriers/:id/taskforce/:cliType",
+    summary: "Unset the Task Force backend model.",
+    category: "Carrier Settings",
+    gate: "terminal-origin"
+  },
+  {
+    method: "DELETE",
+    path: "/carrier-settings/carriers/:id/taskforce",
+    summary: "Reset the carrier Task Force settings.",
+    category: "Carrier Settings",
+    gate: "terminal-origin"
+  }
+];
 function createCarrierSettingsRouter(deps) {
   const controller = createStatusOverlayController(deps.registry);
   return async function handleCarrierSettingsRoute(context) {
@@ -40683,6 +40737,261 @@ function requireCarrierConfig(registry3, carrierId) {
   return config2;
 }
 
+// src/global-settings-routes.ts
+var GLOBAL_SETTINGS_API_CATALOG = [
+  {
+    method: "GET",
+    path: "/global-settings/state",
+    summary: "Get the global console settings status.",
+    category: "Global Settings",
+    gate: "loopback"
+  },
+  {
+    method: "PUT",
+    path: "/global-settings",
+    summary: "Save the global console settings.",
+    category: "Global Settings",
+    gate: "terminal-origin"
+  }
+];
+function createGlobalSettingsRouter(deps) {
+  return async function handleGlobalSettingsRoute(context) {
+    const { req, res, pathname } = context;
+    if (pathname === "/global-settings/state") {
+      if (req.method !== "GET") {
+        deps.writeJson(res, 405, { error: "Method not allowed" });
+        return true;
+      }
+      deps.writeJson(res, 200, buildGlobalSettingsState(deps.globalOptionsService));
+      return true;
+    }
+    if (pathname === "/global-settings") {
+      if (req.method !== "PUT") {
+        deps.writeJson(res, 405, { error: "Method not allowed" });
+        return true;
+      }
+      await mutateGlobalSettings(req, res, deps);
+      return true;
+    }
+    return false;
+  };
+}
+function buildGlobalSettingsState(service) {
+  return toGlobalSettingsState(service.load());
+}
+async function mutateGlobalSettings(req, res, deps) {
+  if (!deps.isAuthorized(req)) {
+    deps.writeJson(res, 401, { error: "unauthorized" });
+    return;
+  }
+  if (!isJsonRequest2(req)) {
+    deps.writeJson(res, 415, { error: "unsupported_media_type" });
+    return;
+  }
+  const body = await deps.readJsonBody(req);
+  if (!body || typeof body !== "object" || Array.isArray(body)) {
+    deps.writeJson(res, 400, { error: "invalid_json" });
+    return;
+  }
+  if (body.replaceSystemPrompt !== void 0 && typeof body.replaceSystemPrompt !== "boolean") {
+    deps.writeJson(res, 400, { error: "invalid_replace_system_prompt" });
+    return;
+  }
+  if (body.enableMetaphor !== void 0 && typeof body.enableMetaphor !== "boolean") {
+    deps.writeJson(res, 400, { error: "invalid_enable_metaphor" });
+    return;
+  }
+  const updated = deps.globalOptionsService.update((current) => ({
+    ...current,
+    ...typeof body.replaceSystemPrompt === "boolean" ? { replaceSystemPrompt: body.replaceSystemPrompt } : {},
+    ...typeof body.enableMetaphor === "boolean" ? { enableMetaphor: body.enableMetaphor } : {}
+  }));
+  const response = { state: toGlobalSettingsState(updated) };
+  deps.writeJson(res, 200, response);
+}
+function toGlobalSettingsState(data) {
+  return {
+    replaceSystemPrompt: data.replaceSystemPrompt ?? false,
+    enableMetaphor: data.enableMetaphor ?? false
+  };
+}
+function isJsonRequest2(req) {
+  const contentType = req.headers["content-type"];
+  return typeof contentType === "string" && contentType.toLowerCase().split(";")[0]?.trim() === "application/json";
+}
+
+// src/model-auth-routes.ts
+var MODEL_AUTH_PROVIDERS = [
+  { cli: "claude-kimi", displayName: "Moonshot Kimi" },
+  { cli: "claude-glm", displayName: "ZhipuAI GLM" }
+];
+var UPSTREAM_FAILURE_STATUSES = /* @__PURE__ */ new Set(["timeout", "network", "server"]);
+var MODEL_AUTH_API_CATALOG = [
+  {
+    method: "GET",
+    path: "/model-auth/state",
+    summary: "Get the model login status.",
+    category: "Model Auth",
+    gate: "loopback"
+  },
+  {
+    method: "PUT",
+    path: "/model-auth/providers/:cli",
+    summary: "Register a model provider API key.",
+    category: "Model Auth",
+    gate: "terminal-origin"
+  },
+  {
+    method: "DELETE",
+    path: "/model-auth/providers/:cli",
+    summary: "Remove a model provider API key.",
+    category: "Model Auth",
+    gate: "terminal-origin"
+  }
+];
+function createModelAuthRouter(deps) {
+  return async function handleModelAuthRoute(context) {
+    const { req, res, pathname } = context;
+    if (pathname === "/model-auth/state") {
+      if (req.method !== "GET") {
+        deps.writeJson(res, 405, { error: "Method not allowed" });
+        return true;
+      }
+      deps.writeJson(res, 200, await buildModelAuthState(deps.authService));
+      return true;
+    }
+    const cli = parseProviderPath(pathname);
+    if (!cli) return false;
+    const provider = MODEL_AUTH_PROVIDERS.find((entry) => entry.cli === cli);
+    if (!provider) {
+      deps.writeJson(res, 404, { error: "provider_not_found" });
+      return true;
+    }
+    if (req.method === "PUT") {
+      await signInProvider(req, res, deps, provider);
+      return true;
+    }
+    if (req.method === "DELETE") {
+      await signOutProvider(req, res, deps, provider);
+      return true;
+    }
+    deps.writeJson(res, 405, { error: "Method not allowed" });
+    return true;
+  };
+}
+async function buildModelAuthState(authService) {
+  const signedInIds = new Set(await authService.listProviderIds());
+  return {
+    providers: MODEL_AUTH_PROVIDERS.map((provider) => toProviderState(provider, signedInIds))
+  };
+}
+async function signInProvider(req, res, deps, provider) {
+  if (!deps.isAuthorized(req)) {
+    deps.writeJson(res, 401, { error: "unauthorized" });
+    return;
+  }
+  if (!isJsonRequest3(req)) {
+    deps.writeJson(res, 415, { error: "unsupported_media_type" });
+    return;
+  }
+  const body = await deps.readJsonBody(req);
+  if (!body || typeof body !== "object" || Array.isArray(body)) {
+    deps.writeJson(res, 400, { error: "invalid_json" });
+    return;
+  }
+  const apiKey = typeof body.apiKey === "string" ? body.apiKey.trim() : "";
+  if (apiKey.length === 0) {
+    deps.writeJson(res, 400, { error: "invalid_api_key" });
+    return;
+  }
+  const providerId = CLI_TO_AUTH_PROVIDER_ID[provider.cli];
+  if (!providerId) {
+    deps.writeJson(res, 500, { error: "provider_unavailable" });
+    return;
+  }
+  const validation = await deps.validateApiKey(provider.cli, apiKey);
+  if (validation.status !== "success") {
+    const status = UPSTREAM_FAILURE_STATUSES.has(validation.status) ? 502 : 400;
+    deps.writeJson(res, status, {
+      error: formatSignInFailureMessage(provider.displayName, validation.status),
+      status: validation.status
+    });
+    return;
+  }
+  await deps.authService.setApiKey(providerId, apiKey);
+  await writeMutationState2(res, deps);
+}
+async function signOutProvider(req, res, deps, provider) {
+  if (!deps.isAuthorized(req)) {
+    deps.writeJson(res, 401, { error: "unauthorized" });
+    return;
+  }
+  const providerId = CLI_TO_AUTH_PROVIDER_ID[provider.cli];
+  if (!providerId) {
+    deps.writeJson(res, 500, { error: "provider_unavailable" });
+    return;
+  }
+  await deps.authService.deleteApiKey(providerId);
+  await writeMutationState2(res, deps);
+}
+async function writeMutationState2(res, deps) {
+  const response = { state: await buildModelAuthState(deps.authService) };
+  deps.writeJson(res, 200, response);
+}
+function toProviderState(provider, signedInIds) {
+  const providerId = CLI_TO_AUTH_PROVIDER_ID[provider.cli] ?? provider.cli;
+  return {
+    cli: provider.cli,
+    displayName: provider.displayName,
+    signedIn: signedInIds.has(providerId)
+  };
+}
+function parseProviderPath(pathname) {
+  const parts = pathname.split("/").filter(Boolean);
+  if (parts.length !== 3 || parts[0] !== "model-auth" || parts[1] !== "providers") return null;
+  const cli = safeDecodeURIComponent2(parts[2] ?? "");
+  return cli ? cli : null;
+}
+function safeDecodeURIComponent2(value) {
+  try {
+    return decodeURIComponent(value);
+  } catch {
+    return null;
+  }
+}
+function isJsonRequest3(req) {
+  const contentType = req.headers["content-type"];
+  return typeof contentType === "string" && contentType.toLowerCase().split(";")[0]?.trim() === "application/json";
+}
+function formatSignInFailureMessage(displayName, status) {
+  switch (status) {
+    case "unauthorized":
+      return `${displayName} rejected the API key. Check the key and try again.`;
+    case "forbidden":
+      return `The API key is not allowed for ${displayName}. Check its permissions.`;
+    case "timeout":
+      return `Validating the ${displayName} API key timed out. Check your connection and try again.`;
+    case "network":
+      return `Could not reach ${displayName} to validate the API key. Check your connection and try again.`;
+    case "server":
+      return `${displayName} returned an error while validating the API key. Try again later.`;
+    default:
+      return `Could not validate the ${displayName} API key. Check the key and try again.`;
+  }
+}
+
+// src/api-catalog.ts
+var compareApiCatalogEntries = (left, right) => left.category.localeCompare(right.category) || left.path.localeCompare(right.path) || left.method.localeCompare(right.method);
+function buildApiCatalog() {
+  return [
+    ...SERVER_API_CATALOG,
+    ...CARRIER_SETTINGS_API_CATALOG,
+    ...GLOBAL_SETTINGS_API_CATALOG,
+    ...AGENT_CLI_API_CATALOG,
+    ...MODEL_AUTH_API_CATALOG
+  ].slice().sort(compareApiCatalogEntries);
+}
+
 // src/codex/security-headers.ts
 var CONTENT_SECURITY_POLICY = "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; object-src 'none'; base-uri 'none'";
 var SECURITY_HEADERS = {
@@ -41598,7 +41907,7 @@ function createCodexGateway(deps) {
       return true;
     }
     if (selected.kind === "no-workspace") {
-      if (isJsonRequest2(request)) {
+      if (isJsonRequest4(request)) {
         sendJson2(response, 404, { error: "no_workspace_registered" });
         return true;
       }
@@ -41719,7 +42028,7 @@ function legacyWorkspacePath(url2) {
   }
   return null;
 }
-function isJsonRequest2(request) {
+function isJsonRequest4(request) {
   const accept = Array.isArray(request.headers.accept) ? request.headers.accept.join(",") : request.headers.accept ?? "";
   const requestedWith = Array.isArray(request.headers["x-requested-with"]) ? request.headers["x-requested-with"].join(",") : request.headers["x-requested-with"] ?? "";
   return accept.includes("application/json") || requestedWith.toLowerCase() === "xmlhttprequest";
@@ -42014,73 +42323,6 @@ function looksSecretToken(rawToken) {
   if (SECRET_PREFIX_PATTERN.test(token)) return true;
   return token.length >= SECRET_MIN_TOKEN_LENGTH && SECRET_CHARSET_PATTERN.test(token) && /[0-9]/.test(token) && /[A-Za-z]/.test(token);
 }
-
-// src/global-settings-routes.ts
-function createGlobalSettingsRouter(deps) {
-  return async function handleGlobalSettingsRoute(context) {
-    const { req, res, pathname } = context;
-    if (pathname === "/global-settings/state") {
-      if (req.method !== "GET") {
-        deps.writeJson(res, 405, { error: "Method not allowed" });
-        return true;
-      }
-      deps.writeJson(res, 200, buildGlobalSettingsState(deps.globalOptionsService));
-      return true;
-    }
-    if (pathname === "/global-settings") {
-      if (req.method !== "PUT") {
-        deps.writeJson(res, 405, { error: "Method not allowed" });
-        return true;
-      }
-      await mutateGlobalSettings(req, res, deps);
-      return true;
-    }
-    return false;
-  };
-}
-function buildGlobalSettingsState(service) {
-  return toGlobalSettingsState(service.load());
-}
-async function mutateGlobalSettings(req, res, deps) {
-  if (!deps.isAuthorized(req)) {
-    deps.writeJson(res, 401, { error: "unauthorized" });
-    return;
-  }
-  if (!isJsonRequest3(req)) {
-    deps.writeJson(res, 415, { error: "unsupported_media_type" });
-    return;
-  }
-  const body = await deps.readJsonBody(req);
-  if (!body || typeof body !== "object" || Array.isArray(body)) {
-    deps.writeJson(res, 400, { error: "invalid_json" });
-    return;
-  }
-  if (body.replaceSystemPrompt !== void 0 && typeof body.replaceSystemPrompt !== "boolean") {
-    deps.writeJson(res, 400, { error: "invalid_replace_system_prompt" });
-    return;
-  }
-  if (body.enableMetaphor !== void 0 && typeof body.enableMetaphor !== "boolean") {
-    deps.writeJson(res, 400, { error: "invalid_enable_metaphor" });
-    return;
-  }
-  const updated = deps.globalOptionsService.update((current) => ({
-    ...current,
-    ...typeof body.replaceSystemPrompt === "boolean" ? { replaceSystemPrompt: body.replaceSystemPrompt } : {},
-    ...typeof body.enableMetaphor === "boolean" ? { enableMetaphor: body.enableMetaphor } : {}
-  }));
-  const response = { state: toGlobalSettingsState(updated) };
-  deps.writeJson(res, 200, response);
-}
-function toGlobalSettingsState(data) {
-  return {
-    replaceSystemPrompt: data.replaceSystemPrompt ?? false,
-    enableMetaphor: data.enableMetaphor ?? false
-  };
-}
-function isJsonRequest3(req) {
-  const contentType = req.headers["content-type"];
-  return typeof contentType === "string" && contentType.toLowerCase().split(";")[0]?.trim() === "application/json";
-}
 var BINARY_DISPLAY_NAMES = {
   claude: "Claude Code",
   codex: "Codex CLI",
@@ -42180,161 +42422,6 @@ function combineAgentCliLaunchMetadata(metadata, installStatuses, authStatuses)
   }));
 }
 
-// src/agent-cli-routes.ts
-function createAgentCliRouter(deps) {
-  return async function handleAgentCliRoute(context) {
-    const { req, res, pathname } = context;
-    if (pathname === "/agent-cli/state") {
-      if (req.method !== "GET") {
-        deps.writeJson(res, 405, { error: "Method not allowed" });
-        return true;
-      }
-      const clis = await deps.detect();
-      const body = { clis };
-      deps.writeJson(res, 200, body);
-      return true;
-    }
-    return false;
-  };
-}
-
-// src/model-auth-routes.ts
-var MODEL_AUTH_PROVIDERS = [
-  { cli: "claude-kimi", displayName: "Moonshot Kimi" },
-  { cli: "claude-glm", displayName: "ZhipuAI GLM" }
-];
-var UPSTREAM_FAILURE_STATUSES = /* @__PURE__ */ new Set(["timeout", "network", "server"]);
-function createModelAuthRouter(deps) {
-  return async function handleModelAuthRoute(context) {
-    const { req, res, pathname } = context;
-    if (pathname === "/model-auth/state") {
-      if (req.method !== "GET") {
-        deps.writeJson(res, 405, { error: "Method not allowed" });
-        return true;
-      }
-      deps.writeJson(res, 200, await buildModelAuthState(deps.authService));
-      return true;
-    }
-    const cli = parseProviderPath(pathname);
-    if (!cli) return false;
-    const provider = MODEL_AUTH_PROVIDERS.find((entry) => entry.cli === cli);
-    if (!provider) {
-      deps.writeJson(res, 404, { error: "provider_not_found" });
-      return true;
-    }
-    if (req.method === "PUT") {
-      await signInProvider(req, res, deps, provider);
-      return true;
-    }
-    if (req.method === "DELETE") {
-      await signOutProvider(req, res, deps, provider);
-      return true;
-    }
-    deps.writeJson(res, 405, { error: "Method not allowed" });
-    return true;
-  };
-}
-async function buildModelAuthState(authService) {
-  const signedInIds = new Set(await authService.listProviderIds());
-  return {
-    providers: MODEL_AUTH_PROVIDERS.map((provider) => toProviderState(provider, signedInIds))
-  };
-}
-async function signInProvider(req, res, deps, provider) {
-  if (!deps.isAuthorized(req)) {
-    deps.writeJson(res, 401, { error: "unauthorized" });
-    return;
-  }
-  if (!isJsonRequest4(req)) {
-    deps.writeJson(res, 415, { error: "unsupported_media_type" });
-    return;
-  }
-  const body = await deps.readJsonBody(req);
-  if (!body || typeof body !== "object" || Array.isArray(body)) {
-    deps.writeJson(res, 400, { error: "invalid_json" });
-    return;
-  }
-  const apiKey = typeof body.apiKey === "string" ? body.apiKey.trim() : "";
-  if (apiKey.length === 0) {
-    deps.writeJson(res, 400, { error: "invalid_api_key" });
-    return;
-  }
-  const providerId = CLI_TO_AUTH_PROVIDER_ID[provider.cli];
-  if (!providerId) {
-    deps.writeJson(res, 500, { error: "provider_unavailable" });
-    return;
-  }
-  const validation = await deps.validateApiKey(provider.cli, apiKey);
-  if (validation.status !== "success") {
-    const status = UPSTREAM_FAILURE_STATUSES.has(validation.status) ? 502 : 400;
-    deps.writeJson(res, status, {
-      error: formatSignInFailureMessage(provider.displayName, validation.status),
-      status: validation.status
-    });
-    return;
-  }
-  await deps.authService.setApiKey(providerId, apiKey);
-  await writeMutationState2(res, deps);
-}
-async function signOutProvider(req, res, deps, provider) {
-  if (!deps.isAuthorized(req)) {
-    deps.writeJson(res, 401, { error: "unauthorized" });
-    return;
-  }
-  const providerId = CLI_TO_AUTH_PROVIDER_ID[provider.cli];
-  if (!providerId) {
-    deps.writeJson(res, 500, { error: "provider_unavailable" });
-    return;
-  }
-  await deps.authService.deleteApiKey(providerId);
-  await writeMutationState2(res, deps);
-}
-async function writeMutationState2(res, deps) {
-  const response = { state: await buildModelAuthState(deps.authService) };
-  deps.writeJson(res, 200, response);
-}
-function toProviderState(provider, signedInIds) {
-  const providerId = CLI_TO_AUTH_PROVIDER_ID[provider.cli] ?? provider.cli;
-  return {
-    cli: provider.cli,
-    displayName: provider.displayName,
-    signedIn: signedInIds.has(providerId)
-  };
-}
-function parseProviderPath(pathname) {
-  const parts = pathname.split("/").filter(Boolean);
-  if (parts.length !== 3 || parts[0] !== "model-auth" || parts[1] !== "providers") return null;
-  const cli = safeDecodeURIComponent2(parts[2] ?? "");
-  return cli ? cli : null;
-}
-function safeDecodeURIComponent2(value) {
-  try {
-    return decodeURIComponent(value);
-  } catch {
-    return null;
-  }
-}
-function isJsonRequest4(req) {
-  const contentType = req.headers["content-type"];
-  return typeof contentType === "string" && contentType.toLowerCase().split(";")[0]?.trim() === "application/json";
-}
-function formatSignInFailureMessage(displayName, status) {
-  switch (status) {
-    case "unauthorized":
-      return `${displayName} rejected the API key. Check the key and try again.`;
-    case "forbidden":
-      return `The API key is not allowed for ${displayName}. Check its permissions.`;
-    case "timeout":
-      return `Validating the ${displayName} API key timed out. Check your connection and try again.`;
-    case "network":
-      return `Could not reach ${displayName} to validate the API key. Check your connection and try again.`;
-    case "server":
-      return `${displayName} returned an error while validating the API key. Try again later.`;
-    default:
-      return `Could not validate the ${displayName} API key. Check the key and try again.`;
-  }
-}
-
 // src/observability-routes.ts
 function writeObserverEvents(req, res, workspace, store2) {
   res.writeHead(200, withSecurityHeaders2({
@@ -44336,6 +44423,162 @@ var THEATER_SHELL_SESSION_PREFIX2 = "shell:";
 var SERVER_TIMEOUT_MS = 30 * 60 * 1e3;
 var MAX_BODY_BYTES = 1024 * 1024;
 var UPDATE_APPLY_FORBIDDEN_BODY_KEYS = /* @__PURE__ */ new Set(["channel", "package", "packageName", "packageVersion", "packages", "targetVersion", "version"]);
+var SERVER_API_CATALOG = [
+  {
+    method: "GET",
+    path: "/observer/status",
+    summary: "Get the console observation status.",
+    category: "Observer",
+    gate: "loopback"
+  },
+  {
+    method: "GET",
+    path: "/observer/api-catalog",
+    summary: "Get the backend API catalog.",
+    category: "Observer",
+    gate: "loopback"
+  },
+  {
+    method: "GET",
+    path: "/observer/tenants",
+    summary: "List observed terminal workspaces.",
+    category: "Observer",
+    gate: "loopback"
+  },
+  {
+    method: "GET",
+    path: "/observer/jobs",
+    summary: "List observed carrier jobs.",
+    category: "Observer",
+    gate: "loopback"
+  },
+  {
+    method: "GET",
+    path: "/observer/events",
+    summary: "Open the observation event stream.",
+    category: "Observer",
+    gate: "loopback"
+  },
+  {
+    method: "GET",
+    path: "/observer/theaters",
+    summary: "List Theaters.",
+    category: "Observer",
+    gate: "loopback"
+  },
+  {
+    method: "POST",
+    path: "/observer/theaters",
+    summary: "Register a new Theater.",
+    category: "Observer",
+    gate: "terminal-origin"
+  },
+  {
+    method: "DELETE",
+    path: "/observer/theaters/:theaterId",
+    summary: "Remove a Theater and its Operations.",
+    category: "Observer",
+    gate: "terminal-origin"
+  },
+  {
+    method: "POST",
+    path: "/observer/theaters/:theaterId/sessions",
+    summary: "Create a new Operation in a Theater.",
+    category: "Observer",
+    gate: "terminal-origin"
+  },
+  {
+    method: "POST",
+    path: "/terminal/ticket",
+    summary: "Issue a terminal WebSocket connection ticket.",
+    category: "Terminal",
+    gate: "terminal-origin"
+  },
+  {
+    method: "POST",
+    path: "/terminal/folders/list",
+    summary: "List terminal folder selection entries.",
+    category: "Terminal",
+    gate: "terminal-origin"
+  },
+  {
+    method: "POST",
+    path: "/terminal/folders/grants",
+    summary: "Issue a terminal folder access grant.",
+    category: "Terminal",
+    gate: "terminal-origin"
+  },
+  {
+    method: "GET",
+    path: "/terminal/sessions",
+    summary: "List terminal Operations.",
+    category: "Terminal",
+    gate: "terminal-origin"
+  },
+  {
+    method: "POST",
+    path: "/terminal/sessions",
+    summary: "Create a new terminal Operation.",
+    category: "Terminal",
+    gate: "terminal-origin"
+  },
+  {
+    method: "POST",
+    path: "/terminal/sessions/:sessionId/resume",
+    summary: "Resume a dormant Operation.",
+    category: "Terminal",
+    gate: "terminal-origin"
+  },
+  {
+    method: "POST",
+    path: "/terminal/sessions/:sessionId/turn",
+    summary: "Receive an Agent CLI turn state hook.",
+    category: "Terminal",
+    gate: "lock-token"
+  },
+  {
+    method: "POST",
+    path: "/terminal/sessions/:sessionId/attention",
+    summary: "Receive an input-waiting attention hook.",
+    category: "Terminal",
+    gate: "lock-token"
+  },
+  {
+    method: "POST",
+    path: "/terminal/sessions/:sessionId/auto-name",
+    summary: "Receive an Operation auto-name hook.",
+    category: "Terminal",
+    gate: "lock-token"
+  },
+  {
+    method: "DELETE",
+    path: "/terminal/sessions/:sessionId",
+    summary: "Remove a terminal Operation.",
+    category: "Terminal",
+    gate: "terminal-origin"
+  },
+  {
+    method: "PATCH",
+    path: "/terminal/sessions/:sessionId",
+    summary: "Rename a terminal Operation.",
+    category: "Terminal",
+    gate: "terminal-origin"
+  },
+  {
+    method: "POST",
+    path: "/update/apply",
+    summary: "Request console update application.",
+    category: "Update",
+    gate: "console-origin"
+  },
+  {
+    method: "GET",
+    path: "/health",
+    summary: "Check console status with the lock token.",
+    category: "Health",
+    gate: "lock-token"
+  }
+];
 function createConsoleServer(deps = {}) {
   const host = deps.host ?? DEFAULT_HOST2;
   const port = deps.port ?? DEFAULT_PORT2;
@@ -44536,12 +44779,12 @@ function createConsoleServer(deps = {}) {
       handleObserverStatus(req, res);
       return;
     }
-    if (pathname === "/update/apply") {
-      runAsyncHandler(handleUpdateApply(req, res), res);
+    if (pathname === "/observer/api-catalog") {
+      handleObserverApiCatalog(req, res);
       return;
     }
-    if (pathname === "/observer/carriers") {
-      handleObserverCarriers(req, res);
+    if (pathname === "/update/apply") {
+      runAsyncHandler(handleUpdateApply(req, res), res);
       return;
     }
     if (pathname === "/carrier-settings" || pathname.startsWith("/carrier-settings/")) {
@@ -44987,6 +45230,9 @@ function createConsoleServer(deps = {}) {
     };
     writeJson(res, 200, payload);
   }
+  function handleObserverApiCatalog(_req, res) {
+    writeJson(res, 200, { version: version2, routes: buildApiCatalog() });
+  }
   async function handleUpdateApply(req, res) {
     if (req.method !== "POST") {
       writeJson(res, 405, { error: "Method not allowed" });
@@ -45050,11 +45296,6 @@ function createConsoleServer(deps = {}) {
     const payload = { status: "accepted" };
     writeJson(res, 202, payload);
   }
-  function handleObserverCarriers(_req, res) {
-    writeJson(res, 200, {
-      carriers: readCarrierStatusEntries(carrierRegistry).map(toCarrierReadinessEntry)
-    });
-  }
   function handleObserverWorkspaces(_req, res) {
     writeJson(res, 200, { tenants: observability.listWorkspaces() });
   }
@@ -45124,20 +45365,6 @@ function createConsoleServer(deps = {}) {
       activeAdmiralCount: observability.listWorkspaces().filter((workspace) => workspace.theaterId === theater.id).length
     };
   }
-  function toCarrierReadinessEntry(entry) {
-    return {
-      carrierId: entry.carrierId,
-      displayName: entry.displayName,
-      role: entry.role,
-      model: entry.model,
-      effort: entry.effort,
-      taskForceBackendCount: entry.taskForceBackendCount,
-      subagentMode: entry.subagentMode,
-      ...entry.category ? { category: entry.category } : {},
-      slot: entry.slot,
-      cliType: entry.cliType
-    };
-  }
   function resolveWikiServerStatus(theaterId) {
     if (!theaterId) return "unknown";
     if (!theaters.get(theaterId)) return "unknown";