openfox 1.2.0 → 1.2.2

package/dist/{auto-compaction-7RNWXTRQ.js → auto-compaction-Q36IMXD4.js}

@@ -2,7 +2,7 @@ import {
   maybeAutoCompactContext,
   performManualContextCompaction,
   resolveCompactionStatsIdentity
-} from "./chunk-CUXZUI2X.js";
+} from "./chunk-36AJGM6G.js";
 import "./chunk-NW7PIZH3.js";
 import "./chunk-WQ4W5H6A.js";
 import "./chunk-S4QKTRGJ.js";
@@ -13,11 +13,11 @@ import "./chunk-3EHGGBWE.js";
 import "./chunk-TPT6HP4H.js";
 import "./chunk-TVQOONDR.js";
 import "./chunk-XFXOSPYH.js";
-import "./chunk-5YQAXUKO.js";
+import "./chunk-R4HADRYO.js";
 import "./chunk-PNBH3RAX.js";
 export {
   maybeAutoCompactContext,
   performManualContextCompaction,
   resolveCompactionStatsIdentity
 };
-//# sourceMappingURL=auto-compaction-7RNWXTRQ.js.map
+//# sourceMappingURL=auto-compaction-Q36IMXD4.js.map

package/dist/{chat-handler-ZBY3GCFF.js → chat-handler-BTU2FLJY.js}

@@ -1,7 +1,7 @@
 import {
   runChatTurn
-} from "./chunk-AOHPSZIW.js";
-import "./chunk-CUXZUI2X.js";
+} from "./chunk-NIQ4X7Y7.js";
+import "./chunk-36AJGM6G.js";
 import {
   generateSessionName,
   needsNameGeneration
@@ -28,7 +28,7 @@ import "./chunk-3EHGGBWE.js";
 import "./chunk-TPT6HP4H.js";
 import "./chunk-TVQOONDR.js";
 import "./chunk-XFXOSPYH.js";
-import "./chunk-5YQAXUKO.js";
+import "./chunk-R4HADRYO.js";
 import {
   logger
 } from "./chunk-PNBH3RAX.js";
@@ -59,7 +59,7 @@ async function startChatSession(sessionId, content, deps, options) {
   sessionManager.setRunning(sessionId, true);
   broadcastForSession(sessionId, createSessionRunningMessage(true));
   try {
-    const { maybeAutoCompactContext } = await import("./auto-compaction-7RNWXTRQ.js");
+    const { maybeAutoCompactContext } = await import("./auto-compaction-Q36IMXD4.js");
     await maybeAutoCompactContext({
       sessionManager,
       sessionId,
@@ -198,4 +198,4 @@ export {
   startChatSession,
   stopSessionExecution
 };
-//# sourceMappingURL=chat-handler-ZBY3GCFF.js.map
+//# sourceMappingURL=chat-handler-BTU2FLJY.js.map

package/dist/{chunk-CUXZUI2X.js → chunk-36AJGM6G.js}

@@ -30,7 +30,7 @@ import {
 } from "./chunk-XFXOSPYH.js";
 import {
   getGlobalConfigDir
-} from "./chunk-5YQAXUKO.js";
+} from "./chunk-R4HADRYO.js";
 import {
   logger
 } from "./chunk-PNBH3RAX.js";
@@ -3472,7 +3472,7 @@ var callSubAgentTool = {
       };
     }
     try {
-      const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-EGSJDCYX.js");
+      const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-4D6R2BA3.js");
       const toolRegistry = getToolRegistryForAgent2(agentDef);
       const turnMetrics = new TurnMetrics();
       const result = await executeSubAgent({
@@ -4480,4 +4480,4 @@ export {
   getToolRegistryForAgent,
   createToolRegistry
 };
-//# sourceMappingURL=chunk-CUXZUI2X.js.map
+//# sourceMappingURL=chunk-36AJGM6G.js.map

package/dist/{chunk-2CK3CWOE.js → chunk-47TNOR2U.js}

@@ -2,7 +2,7 @@ import {
   createVerifierNudgeConfig,
   runBuilderTurn,
   runChatTurn
-} from "./chunk-AOHPSZIW.js";
+} from "./chunk-NIQ4X7Y7.js";
 import {
   TurnMetrics,
   agentExists,
@@ -40,7 +40,7 @@ import {
   saveSkill,
   setSkillEnabled,
   skillExists
-} from "./chunk-CUXZUI2X.js";
+} from "./chunk-36AJGM6G.js";
 import {
   generateSessionName,
   needsNameGeneration
@@ -48,7 +48,7 @@ import {
 import {
   createProviderManager,
   parseDefaultModelSelection
-} from "./chunk-A6NVV74R.js";
+} from "./chunk-YSPC6TQJ.js";
 import {
   createSession,
   deleteSession,
@@ -124,10 +124,10 @@ import {
   getBackendDisplayName,
   getLlmStatus,
   getModelProfile
-} from "./chunk-3AMXYXIA.js";
+} from "./chunk-NGSSEMII.js";
 import {
   getGlobalConfigDir
-} from "./chunk-5YQAXUKO.js";
+} from "./chunk-R4HADRYO.js";
 import {
   logger,
   setLogLevel
@@ -138,8 +138,8 @@ import express from "express";
 import cors from "cors";
 import { createServer as createHttpServer } from "http";
 import { fileURLToPath as fileURLToPath4 } from "url";
-import { dirname as dirname4, resolve, join as join4 } from "path";
-import { readFile as readFile3 } from "fs/promises";
+import { dirname as dirname5, resolve, join as join5 } from "path";
+import { readFile as readFile4 } from "fs/promises";
 import { createServer as createViteServer } from "vite";
 
 // src/server/llm/mock.ts
@@ -2122,6 +2122,130 @@ function needsSummaryGeneration(sessionSummary) {
   return sessionSummary === null || sessionSummary.trim() === "";
 }
 
+// src/server/auth.ts
+import { readFile as readFile2, writeFile as writeFile2, mkdir as mkdir2 } from "fs/promises";
+import { join as join2, dirname as dirname2 } from "path";
+import { createHash, privateDecrypt, createPublicKey } from "crypto";
+function getAuthConfigPath() {
+  const configDir = getRuntimeConfig();
+  const mode = configDir.mode === "development" ? "development" : configDir.mode === "test" ? "test" : "production";
+  if (mode === "test") {
+    const cwd = process.cwd();
+    const base = cwd.endsWith("/e2e") ? cwd : join2(cwd, "e2e");
+    const testAuthPath = join2(base, ".openfox-test", "auth.json");
+    return testAuthPath;
+  }
+  const home = process.env["HOME"] || process.env["USERPROFILE"] || "";
+  const basePath = process.env["XDG_CONFIG_HOME"] || `${home}/.config`;
+  const suffix = mode === "development" ? "-dev" : "";
+  return `${basePath}/openfox${suffix}/auth.json`;
+}
+function getKeyPath() {
+  const authPath = getAuthConfigPath();
+  const dir = dirname2(authPath);
+  return join2(dir, "auth.key");
+}
+var cachedAuth = null;
+var cachedPrivateKey = null;
+async function loadPrivateKey() {
+  if (cachedPrivateKey) {
+    return cachedPrivateKey;
+  }
+  const keyPath = getKeyPath();
+  const keyDir = dirname2(keyPath);
+  try {
+    cachedPrivateKey = await readFile2(keyPath, "utf-8");
+    return cachedPrivateKey;
+  } catch {
+    const { privateKey } = await import("crypto").then((c) => c.generateKeyPairSync("rsa", {
+      modulusLength: 2048,
+      privateKeyEncoding: { type: "pkcs8", format: "pem" },
+      publicKeyEncoding: { type: "spki", format: "pem" }
+    }));
+    await mkdir2(keyDir, { recursive: true });
+    await writeFile2(keyPath, privateKey, { mode: 384 });
+    cachedPrivateKey = privateKey;
+    return privateKey;
+  }
+}
+async function loadServerAuthConfig() {
+  const configDir = getRuntimeConfig();
+  const isTestMode = configDir.mode === "test";
+  if (!isTestMode) {
+    if (cachedAuth) {
+      return cachedAuth;
+    }
+  }
+  try {
+    const authPath = getAuthConfigPath();
+    const data = await readFile2(authPath, "utf-8");
+    const authConfig = JSON.parse(data);
+    cachedAuth = authConfig;
+    return authConfig;
+  } catch {
+    return null;
+  }
+}
+function getAuthConfig() {
+  return cachedAuth;
+}
+function hashPassword(password) {
+  return createHash("sha256").update(password).digest("hex");
+}
+function requiresAuth() {
+  return cachedAuth?.strategy === "network";
+}
+function hasPassword() {
+  return cachedAuth?.encryptedPassword != null && cachedAuth.encryptedPassword.length > 0;
+}
+async function verifyPassword(password) {
+  const encryptedPassword = cachedAuth?.encryptedPassword;
+  if (!encryptedPassword) return false;
+  const privateKey = await loadPrivateKey();
+  try {
+    const decrypted = privateDecrypt(
+      { key: privateKey, padding: 1 },
+      Buffer.from(encryptedPassword, "base64")
+    );
+    return decrypted.toString() === password;
+  } catch {
+    return false;
+  }
+}
+async function tokenFromPassword(password) {
+  const privateKey = await loadPrivateKey();
+  const passwordHash = hashPassword(password);
+  const sign = await import("crypto").then((c) => {
+    const s = c.createSign("SHA256");
+    s.update(passwordHash);
+    s.end();
+    return s.sign(privateKey, "base64");
+  });
+  return sign;
+}
+async function isValidToken(token) {
+  if (!cachedAuth?.encryptedPassword) return false;
+  const privateKey = await loadPrivateKey();
+  try {
+    const decrypted = privateDecrypt(
+      { key: privateKey, padding: 1 },
+      Buffer.from(cachedAuth.encryptedPassword, "base64")
+    );
+    const storedPassword = decrypted.toString();
+    const storedHash = hashPassword(storedPassword);
+    const verify = await import("crypto").then((c) => {
+      const v = c.createVerify("SHA256");
+      v.update(storedHash);
+      v.end();
+      return v;
+    });
+    const publicKey = createPublicKey(privateKey).export({ type: "spki", format: "pem" });
+    return verify.verify(publicKey, token, "base64");
+  } catch {
+    return false;
+  }
+}
+
 // src/server/ws/server.ts
 function getCurrentWindowMessageOptions2(sessionId) {
   const contextWindowId = getCurrentContextWindowId(sessionId);
@@ -2154,7 +2278,7 @@ function resolveStatsIdentity(llmClient, getActiveProvider) {
 }
 var activeAgents = /* @__PURE__ */ new Map();
 function createWebSocketServer(httpServer, config, getLLMClient, getActiveProvider, sessionManager, providerManager) {
-  const wss = new WebSocketServer({ server: httpServer, path: "/ws" });
+  const wss = new WebSocketServer({ server: httpServer });
   const clients = /* @__PURE__ */ new Map();
   const sessionLLMClients = /* @__PURE__ */ new Map();
   function getSessionLLMClient(sessionId) {
@@ -2364,7 +2488,18 @@ function createWebSocketServer(httpServer, config, getLLMClient, getActiveProvid
       errorMessage
     }));
   });
-  wss.on("connection", (ws) => {
+  wss.on("connection", async (ws, req) => {
+    const url = new URL(req.url || "/", `http://${req.headers.host}`);
+    const token = url.searchParams.get("token");
+    const authConfig = getAuthConfig();
+    if (authConfig?.strategy === "network" && authConfig.encryptedPassword) {
+      if (!token || !await isValidToken(token)) {
+        setTimeout(() => {
+          ws.close(4e3, "Unauthorized");
+        }, 100);
+        return;
+      }
+    }
     logger.debug("WebSocket client connected");
     clients.set(ws, { ws, activeSessionId: null, subscribedSessions: /* @__PURE__ */ new Map(), eventStoreSubscriptions: /* @__PURE__ */ new Map() });
     ws.on("message", async (data) => {
@@ -3381,14 +3516,14 @@ var LspServer = class {
 
 // src/server/utils/which.ts
 import { access as access2, constants as constants2 } from "fs/promises";
-import { join as join2, dirname as dirname2 } from "path";
+import { join as join3, dirname as dirname3 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
-var __dirname = dirname2(fileURLToPath2(import.meta.url));
+var __dirname = dirname3(fileURLToPath2(import.meta.url));
 function getBundledBinPaths() {
   const paths = [];
-  paths.push(join2(process.cwd(), "node_modules", ".bin"));
-  paths.push(join2(__dirname, "..", "..", "..", "node_modules", ".bin"));
-  paths.push(join2(__dirname, "..", "..", "..", "..", "node_modules", ".bin"));
+  paths.push(join3(process.cwd(), "node_modules", ".bin"));
+  paths.push(join3(__dirname, "..", "..", "..", "node_modules", ".bin"));
+  paths.push(join3(__dirname, "..", "..", "..", "..", "node_modules", ".bin"));
   return paths;
 }
 async function existsExecutable(path) {
@@ -3407,13 +3542,13 @@ async function which(command, workdir) {
     return null;
   }
   for (const binDir of getBundledBinPaths()) {
-    const fullPath = join2(binDir, command);
+    const fullPath = join3(binDir, command);
     if (await existsExecutable(fullPath)) {
       return fullPath;
     }
   }
   if (workdir) {
-    const projectBin = join2(workdir, "node_modules", ".bin", command);
+    const projectBin = join3(workdir, "node_modules", ".bin", command);
     if (await existsExecutable(projectBin)) {
       return projectBin;
     }
@@ -3422,7 +3557,7 @@ async function which(command, workdir) {
   const paths = pathEnv.split(":");
   for (const dir of paths) {
     if (!dir) continue;
-    const fullPath = join2(dir, command);
+    const fullPath = join3(dir, command);
     if (await existsExecutable(fullPath)) {
       return fullPath;
     }
@@ -4795,17 +4930,17 @@ ${summary}`,
 };
 
 // src/server/commands/registry.ts
-import { readdir as readdir2, readFile as readFile2, writeFile as writeFile2, copyFile as copyFile2, mkdir as mkdir2, access as access3, unlink as unlink2 } from "fs/promises";
-import { join as join3, dirname as dirname3 } from "path";
+import { readdir as readdir2, readFile as readFile3, writeFile as writeFile3, copyFile as copyFile2, mkdir as mkdir3, access as access3, unlink as unlink2 } from "fs/promises";
+import { join as join4, dirname as dirname4 } from "path";
 import { constants as constants3 } from "fs";
 import { fileURLToPath as fileURLToPath3 } from "url";
 import matter from "gray-matter";
-var __bundleDir2 = dirname3(fileURLToPath3(import.meta.url));
-var DEFAULTS_DIR2 = join3(__bundleDir2, "defaults");
-var DEFAULTS_DIR_ALT2 = join3(__bundleDir2, "command-defaults");
+var __bundleDir2 = dirname4(fileURLToPath3(import.meta.url));
+var DEFAULTS_DIR2 = join4(__bundleDir2, "defaults");
+var DEFAULTS_DIR_ALT2 = join4(__bundleDir2, "command-defaults");
 var COMMAND_EXTENSION = ".command.md";
 function getCommandsDir(configDir) {
-  return join3(configDir, "commands");
+  return join4(configDir, "commands");
 }
 async function dirExists(path) {
   try {
@@ -4818,7 +4953,7 @@ async function dirExists(path) {
 async function ensureDefaultCommands(configDir) {
   const commandsDir = getCommandsDir(configDir);
   if (!await dirExists(commandsDir)) {
-    await mkdir2(commandsDir, { recursive: true });
+    await mkdir3(commandsDir, { recursive: true });
   }
   let defaultFiles;
   let sourceDir;
@@ -4835,10 +4970,10 @@ async function ensureDefaultCommands(configDir) {
     }
   }
   for (const file of defaultFiles) {
-    const targetPath = join3(commandsDir, file);
+    const targetPath = join4(commandsDir, file);
     if (!await dirExists(targetPath)) {
       try {
-        await copyFile2(join3(sourceDir, file), targetPath);
+        await copyFile2(join4(sourceDir, file), targetPath);
         logger.info("Installed default command", { file });
       } catch (err) {
         logger.error("Failed to copy default command", { file, error: err instanceof Error ? err.message : String(err) });
@@ -4860,7 +4995,7 @@ async function loadAllCommands(configDir) {
   const commands = [];
   for (const file of files) {
     try {
-      const raw = await readFile2(join3(commandsDir, file), "utf-8");
+      const raw = await readFile3(join4(commandsDir, file), "utf-8");
       const { data, content } = matter(raw);
       const metadata = data;
       if (metadata.id && content.trim()) {
@@ -4887,9 +5022,9 @@ async function getDefaultCommandIds() {
 async function restoreDefaultCommand(configDir, commandId) {
   const filename = `${commandId}${COMMAND_EXTENSION}`;
   for (const dir of [DEFAULTS_DIR2, DEFAULTS_DIR_ALT2]) {
-    const sourcePath = join3(dir, filename);
+    const sourcePath = join4(dir, filename);
     if (await dirExists(sourcePath)) {
-      const targetPath = join3(getCommandsDir(configDir), filename);
+      const targetPath = join4(getCommandsDir(configDir), filename);
       await copyFile2(sourcePath, targetPath);
       return true;
     }
@@ -4901,18 +5036,18 @@ async function getModifiedDefaultCommandIds(configDir) {
   const modified = [];
   for (const id of defaultIds) {
     const filename = `${id}${COMMAND_EXTENSION}`;
-    const userPath = join3(getCommandsDir(configDir), filename);
+    const userPath = join4(getCommandsDir(configDir), filename);
     let bundledContent = null;
     for (const dir of [DEFAULTS_DIR2, DEFAULTS_DIR_ALT2]) {
       try {
-        bundledContent = await readFile2(join3(dir, filename), "utf-8");
+        bundledContent = await readFile3(join4(dir, filename), "utf-8");
         break;
       } catch {
       }
     }
     if (!bundledContent) continue;
     try {
-      const userContent = await readFile2(userPath, "utf-8");
+      const userContent = await readFile3(userPath, "utf-8");
       if (userContent !== bundledContent) {
         modified.push(id);
       }
@@ -4933,20 +5068,20 @@ function findCommandById(commandId, commands) {
   return commands.find((c) => c.metadata.id === commandId);
 }
 async function commandExists(configDir, commandId) {
-  const filePath = join3(getCommandsDir(configDir), `${commandId}${COMMAND_EXTENSION}`);
+  const filePath = join4(getCommandsDir(configDir), `${commandId}${COMMAND_EXTENSION}`);
   return dirExists(filePath);
 }
 async function saveCommand(configDir, command) {
   const commandsDir = getCommandsDir(configDir);
   if (!await dirExists(commandsDir)) {
-    await mkdir2(commandsDir, { recursive: true });
+    await mkdir3(commandsDir, { recursive: true });
   }
-  const filePath = join3(commandsDir, `${command.metadata.id}${COMMAND_EXTENSION}`);
+  const filePath = join4(commandsDir, `${command.metadata.id}${COMMAND_EXTENSION}`);
   const content = matter.stringify(command.prompt, command.metadata);
-  await writeFile2(filePath, content, "utf-8");
+  await writeFile3(filePath, content, "utf-8");
 }
 async function deleteCommand(configDir, commandId) {
-  const filePath = join3(getCommandsDir(configDir), `${commandId}${COMMAND_EXTENSION}`);
+  const filePath = join4(getCommandsDir(configDir), `${commandId}${COMMAND_EXTENSION}`);
   try {
     await unlink2(filePath);
     return true;
@@ -5415,10 +5550,11 @@ function createTerminalRoutes() {
 }
 
 // src/server/index.ts
-var __dirname2 = dirname4(fileURLToPath4(import.meta.url));
+var __dirname2 = dirname5(fileURLToPath4(import.meta.url));
 async function createServerHandle(config) {
   setRuntimeConfig(config);
   setLogLevel(config.logging?.level ?? void 0, config.mode);
+  await loadServerAuthConfig();
   const db = initDatabase(config);
   initEventStore(db);
   const configDir = getGlobalConfigDir(config.mode ?? "production");
@@ -5479,9 +5615,52 @@ async function createServerHandle(config) {
   const app = express();
   app.use(cors());
   app.use(express.json());
+  const authMiddleware = async (req, res, next) => {
+    const path = req.path;
+    const publicPaths = ["/health", "/auth", "/auth/login"];
+    if (publicPaths.includes(path)) {
+      return next();
+    }
+    const authConfig = getAuthConfig();
+    if (authConfig?.strategy === "network" && authConfig.encryptedPassword) {
+      const token = req.headers["x-session-token"];
+      if (!token || !await isValidToken(token)) {
+        res.status(401).json({ error: "Unauthorized" });
+        return;
+      }
+    }
+    next();
+  };
+  app.use("/api", authMiddleware);
   app.get("/api/health", (_req, res) => {
     res.json({ status: "ok", timestamp: (/* @__PURE__ */ new Date()).toISOString() });
   });
+  app.get("/api/auth", (_req, res) => {
+    const authRequired = requiresAuth();
+    const hasPwd = hasPassword();
+    res.json({
+      requiresAuth: authRequired && hasPwd,
+      hasPassword: hasPwd
+    });
+  });
+  app.post("/api/auth/login", async (req, res) => {
+    const authConfig = getAuthConfig();
+    if (authConfig?.strategy !== "network" || !authConfig.encryptedPassword) {
+      res.status(400).json({ error: "Auth not configured" });
+      return;
+    }
+    const password = req.body.password;
+    if (!password || typeof password !== "string") {
+      res.status(401).json({ error: "Password required" });
+      return;
+    }
+    if (!await verifyPassword(password)) {
+      res.status(401).json({ error: "Invalid password" });
+      return;
+    }
+    const token = await tokenFromPassword(password);
+    res.json({ token });
+  });
   app.get("/api/tools", (_req, res) => {
     const tools = toolRegistry.tools.map((t) => ({
       name: t.name,
@@ -5609,7 +5788,7 @@ async function createServerHandle(config) {
       return res.status(400).json({ error: "providerId is required" });
     }
     sessionManager.setSessionProvider(sessionId, providerId, model ?? "auto");
-    const { loadGlobalConfig, saveGlobalConfig, setDefaultModelSelection } = await import("./config-VP3V5VGN.js");
+    const { loadGlobalConfig, saveGlobalConfig, setDefaultModelSelection } = await import("./config-ONC2MTDE.js");
     const globalConfig = await loadGlobalConfig(config.mode ?? "production");
     const updatedConfig = setDefaultModelSelection(globalConfig, providerId, model ?? "auto");
     await saveGlobalConfig(config.mode ?? "production", updatedConfig);
@@ -5674,7 +5853,7 @@ async function createServerHandle(config) {
     if (!callId || approved === void 0) {
       return res.status(400).json({ error: "callId and approved are required" });
     }
-    const { providePathConfirmation: providePathConfirmation2 } = await import("./tools-EGSJDCYX.js");
+    const { providePathConfirmation: providePathConfirmation2 } = await import("./tools-4D6R2BA3.js");
     const result = providePathConfirmation2(callId, approved, alwaysAllow);
     if (!result.found) {
       return res.status(404).json({ error: "No pending path confirmation with that ID" });
@@ -5699,7 +5878,7 @@ async function createServerHandle(config) {
     if (!callId || !answer) {
       return res.status(400).json({ error: "callId and answer are required" });
     }
-    const { provideAnswer: provideAnswer2 } = await import("./tools-EGSJDCYX.js");
+    const { provideAnswer: provideAnswer2 } = await import("./tools-4D6R2BA3.js");
     const found = provideAnswer2(callId, answer);
     if (!found) {
       return res.status(404).json({ error: "No pending question with that ID" });
@@ -5735,8 +5914,8 @@ async function createServerHandle(config) {
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-ZBY3GCFF.js");
-    const { cancelQuestionsForSession: cancelQuestionsForSession2, cancelPathConfirmationsForSession: cancelPathConfirmationsForSession2 } = await import("./tools-EGSJDCYX.js");
+    const { stopSessionExecution } = await import("./chat-handler-BTU2FLJY.js");
+    const { cancelQuestionsForSession: cancelQuestionsForSession2, cancelPathConfirmationsForSession: cancelPathConfirmationsForSession2 } = await import("./tools-4D6R2BA3.js");
     stopSessionExecution(sessionId, sessionManager);
     abortSession(sessionId);
     cancelQuestionsForSession2(sessionId, "Session stopped by user");
@@ -5851,7 +6030,7 @@ async function createServerHandle(config) {
       return res.status(400).json({ error: result.error });
     }
     const llmClient = getLLMClient();
-    const { loadGlobalConfig, saveGlobalConfig, setDefaultModelSelection } = await import("./config-VP3V5VGN.js");
+    const { loadGlobalConfig, saveGlobalConfig, setDefaultModelSelection } = await import("./config-ONC2MTDE.js");
     const globalConfig = await loadGlobalConfig(config.mode ?? "production");
     const updatedConfig = setDefaultModelSelection(globalConfig, id, llmClient.getModel());
     await saveGlobalConfig(config.mode ?? "production", updatedConfig);
@@ -5872,7 +6051,7 @@ async function createServerHandle(config) {
     if (!result.success) {
       return res.status(400).json({ error: result.error });
     }
-    const { loadGlobalConfig, saveGlobalConfig } = await import("./config-VP3V5VGN.js");
+    const { loadGlobalConfig, saveGlobalConfig } = await import("./config-ONC2MTDE.js");
     const globalConfig = await loadGlobalConfig(config.mode ?? "production");
     const updatedProviders = providerManager.getProviders();
     const updatedConfig = {
@@ -5932,9 +6111,9 @@ async function createServerHandle(config) {
       const entries = await import("fs/promises").then((m) => m.readdir(resolvedPath, { withFileTypes: true }));
       const directories = entries.filter((entry) => entry.isDirectory() && !entry.name.startsWith(".")).map((entry) => ({
         name: entry.name,
-        path: join4(resolvedPath, entry.name)
+        path: join5(resolvedPath, entry.name)
       })).sort((a, b) => a.name.localeCompare(b.name));
-      const parent = dirname4(resolvedPath);
+      const parent = dirname5(resolvedPath);
       const hasParent = parent !== resolvedPath;
       res.json({
         current: resolvedPath,
@@ -5979,7 +6158,7 @@ async function createServerHandle(config) {
       }
     });
     app.get("/fox.svg", (_req, res) => {
-      readFile3(join4(webDir, "fox.svg")).then((content) => {
+      readFile4(join5(webDir, "fox.svg")).then((content) => {
         res.set("Content-Type", "image/svg+xml");
         res.send(content);
       }).catch(() => {
@@ -5988,7 +6167,7 @@ async function createServerHandle(config) {
     });
     app.use(
       "/sounds",
-      express.static(join4(webDir, "public", "sounds"), {
+      express.static(join5(webDir, "public", "sounds"), {
         setHeaders: (res) => {
           res.set("Content-Type", "audio/mpeg");
         }
@@ -5998,7 +6177,7 @@ async function createServerHandle(config) {
       if (req.path.startsWith("/api/")) {
         return;
       }
-      readFile3(join4(webDir, "index.html"), "utf-8").then((indexHtml) => viteServer.transformIndexHtml(req.originalUrl, indexHtml)).then((transformed) => res.send(transformed)).catch((err) => {
+      readFile4(join5(webDir, "index.html"), "utf-8").then((indexHtml) => viteServer.transformIndexHtml(req.originalUrl, indexHtml)).then((transformed) => res.send(transformed)).catch((err) => {
         logger.error("Error serving index.html", { error: err });
         res.status(500).send("Server error");
       });
@@ -6009,7 +6188,7 @@ async function createServerHandle(config) {
     const distWebDir = resolve(__dirname2, "web");
     app.use(
       "/assets",
-      express.static(join4(distWebDir, "assets"), {
+      express.static(join5(distWebDir, "assets"), {
         setHeaders: (res, filepath) => {
           if (filepath.endsWith(".css")) {
             res.set("Content-Type", "text/css");
@@ -6017,11 +6196,11 @@ async function createServerHandle(config) {
         }
       })
     );
-    app.use("/manifest.webmanifest", express.static(join4(distWebDir, "manifest.webmanifest")));
-    app.use("/registerSW.js", express.static(join4(distWebDir, "registerSW.js")));
-    app.use("/sw.js", express.static(join4(distWebDir, "sw.js")));
+    app.use("/manifest.webmanifest", express.static(join5(distWebDir, "manifest.webmanifest")));
+    app.use("/registerSW.js", express.static(join5(distWebDir, "registerSW.js")));
+    app.use("/sw.js", express.static(join5(distWebDir, "sw.js")));
     app.get("/fox.svg", (_req, res) => {
-      readFile3(join4(distWebDir, "fox.svg")).then((content) => {
+      readFile4(join5(distWebDir, "fox.svg")).then((content) => {
         res.set("Content-Type", "image/svg+xml");
         res.send(content);
       }).catch(() => {
@@ -6030,14 +6209,14 @@ async function createServerHandle(config) {
     });
     app.use(
       "/sounds",
-      express.static(join4(distWebDir, "sounds"), {
+      express.static(join5(distWebDir, "sounds"), {
         setHeaders: (res) => {
           res.set("Content-Type", "audio/mpeg");
         }
       })
     );
     app.get("/", (_req, res) => {
-      readFile3(join4(distWebDir, "index.html"), "utf-8").then((content) => res.send(content)).catch(() => {
+      readFile4(join5(distWebDir, "index.html"), "utf-8").then((content) => res.send(content)).catch(() => {
         res.status(404).send("Web UI not built. Run `npm run build:web`");
       });
     });
@@ -6045,7 +6224,7 @@ async function createServerHandle(config) {
       if (req.path.startsWith("/api/") || req.path.startsWith("/assets/") || req.path.startsWith("/sounds/") || req.path.startsWith("/manifest.webmanifest") || req.path.startsWith("/registerSW.js") || req.path.startsWith("/sw.js") || req.path === "/fox.svg") {
         return;
       }
-      readFile3(join4(distWebDir, "index.html"), "utf-8").then((content) => res.send(content)).catch(() => {
+      readFile4(join5(distWebDir, "index.html"), "utf-8").then((content) => res.send(content)).catch(() => {
         res.status(404).send("Web UI not built");
       });
     });
@@ -6060,7 +6239,7 @@ async function createServerHandle(config) {
     providerManager
   );
   const wss = wssExports.wss;
-  const { QueueProcessor } = await import("./processor-W55O5T6T.js");
+  const { QueueProcessor } = await import("./processor-KJBVOF4W.js");
   const queueProcessor = new QueueProcessor({
     sessionManager,
     providerManager,
@@ -6130,4 +6309,4 @@ export {
   createServerHandle,
   createServer
 };
-//# sourceMappingURL=chunk-2CK3CWOE.js.map
+//# sourceMappingURL=chunk-47TNOR2U.js.map