openfox 2.0.106 → 2.0.108

package/dist/{chunk-G2VLGZ3Y.js → chunk-I4M6SCMY.js}

@@ -21,7 +21,7 @@ import {
   tokenFromPassword,
   verifyPassword,
   workflowExists
-} from "./chunk-P4APMCTX.js";
+} from "./chunk-PSAWMCD6.js";
 import {
   openFolder
 } from "./chunk-WLJJRX22.js";
@@ -34,7 +34,7 @@ import {
   setMcpManagerForTools,
   setMcpTools,
   setNotifyMcpServersChanged
-} from "./chunk-6M44ZHQA.js";
+} from "./chunk-JBZW5BZX.js";
 import {
   deleteOwnedSkill,
   deleteProjectSkill,
@@ -53,16 +53,17 @@ import {
   setSkillEnabled,
   skillExists,
   updateOwnedSkill
-} from "./chunk-LOHVZGCM.js";
+} from "./chunk-GWMNR3LC.js";
 import {
   ALWAYS_ALLOWED,
   ALWAYS_ALLOWED_FOR_SUBAGENTS,
   TOP_LEVEL_ONLY_TOOLS
-} from "./chunk-SGJ3LSVA.js";
+} from "./chunk-YBIJI53N.js";
 import {
   createMcpTools
 } from "./chunk-JE7LW7Y6.js";
 import {
+  checkoutBranchFromSharedSource,
   deleteWorkspace,
   ensureWorkspace,
   getCommitsBehind,
@@ -76,11 +77,11 @@ import {
   validateRef,
   validateWorkspaceName,
   workspaceExists
-} from "./chunk-RRTKVJMF.js";
+} from "./chunk-FR5LUTLQ.js";
 import {
   getSessionDisabledServers,
   setSessionDisabledServers
-} from "./chunk-OEPRHAIO.js";
+} from "./chunk-P7WCFUPJ.js";
 import {
   emitAssistantMessageStart,
   emitContextState,
@@ -97,23 +98,24 @@ import {
   getEventStore,
   getSessionState,
   initEventStore
-} from "./chunk-GXW4CRR5.js";
+} from "./chunk-QDKLJZO4.js";
 import {
-  createContextStateMessage
-} from "./chunk-27SDWNKL.js";
+  createContextStateMessage,
+  toClientSession
+} from "./chunk-B5MH4HQ6.js";
 import {
   EventEmitter
 } from "./chunk-JAX5OEMM.js";
 import {
   getPathSeparator,
   isAbsolutePath
-} from "./chunk-UXQN7FGB.js";
+} from "./chunk-ID4N6PM6.js";
 import {
   getAgentModelOverride,
   getAgentModelOverrides,
   resolveLLMClientForAgent,
   setAgentModelOverride
-} from "./chunk-V6Y6OLB4.js";
+} from "./chunk-IRWZJPPA.js";
 import {
   getProject,
   getProjectByWorkdir,
@@ -121,7 +123,7 @@ import {
 } from "./chunk-6FPGJR7O.js";
 import {
   VERSION
-} from "./chunk-C5YV3EA4.js";
+} from "./chunk-UWF4L4CK.js";
 import {
   clearWorkflowExecution,
   createSession,
@@ -141,7 +143,7 @@ import {
   updateSessionRunning,
   updateSessionWorkdir,
   updateWorkflowExecutionStatus
-} from "./chunk-IA4Y3CKA.js";
+} from "./chunk-TMVXOLBS.js";
 import {
   agentExists,
   deleteAgent,
@@ -164,13 +166,13 @@ import {
   saveAgentToProject,
   saveItemToDir,
   setRuntimeConfig
-} from "./chunk-2GM6SUIQ.js";
+} from "./chunk-WFWFRUBU.js";
 import {
   createProviderManager,
   detectModel,
   getLlmStatus,
   parseDefaultModelSelection
-} from "./chunk-UCIZV76E.js";
+} from "./chunk-Q4P4CWWV.js";
 import {
   getModelProfile
 } from "./chunk-V4IE7HJY.js";
@@ -183,12 +185,12 @@ import {
 import {
   SessionNotFoundError,
   WorkspaceInUseError
-} from "./chunk-TB7TTPYQ.js";
+} from "./chunk-EYMGV4YA.js";
 import {
   deleteSetting,
   getSetting,
   setSetting
-} from "./chunk-KIAKWUZ3.js";
+} from "./chunk-MPWLBKSK.js";
 import {
   initDatabase
 } from "./chunk-LCQ5AN6Y.js";
@@ -2778,58 +2780,6 @@ var SessionManager = class {
     const session = this.requireSession(sessionId);
     return session.workspace ?? session.workdir;
   }
-  /**
-   * Return (effectiveWorkdir, actualBranch) for a session.
-   */
-  async getActualBranchPair(sessionId) {
-    const effectiveWorkdir = this.getEffectiveWorkdir(sessionId);
-    const branch = await getGitBranch(effectiveWorkdir);
-    return { workdir: effectiveWorkdir, branch };
-  }
-  /**
-   * Verify the session's effective workdir is on the branch the session was
-   * bound to. Used as an early gate before any agent step of a workflow
-   * execution, so we never run against the wrong tree when the session branch
-   * and the actual git branch have diverged (#183).
-   *
-   * Decision matrix (fail-closed):
-   *   - expectedBranch null                 → ok, regardless of actualBranch.
-   *   - expectedBranch set, actualBranch set, equal    → ok.
-   *   - expectedBranch set, actualBranch set, differ   → BLOCKED.
-   *   - expectedBranch set, actualBranch null          → BLOCKED (we cannot
-   *     verify the workdir is on the right branch — detached HEAD, broken
-   *     repository, missing .git, etc.).
-   *
-   * Returning `{ ok: true }` for a session that has a branch expectation but
-   * no resolvable actual branch would be fail-open and is forbidden.
-   */
-  async assertExecutionGitContext(sessionId) {
-    const session = this.requireSession(sessionId);
-    const expectedBranch = session.branch ?? null;
-    const { workdir, branch: actualBranch } = await this.getActualBranchPair(sessionId);
-    if (!expectedBranch) {
-      return { ok: true, workdir, actualBranch, expectedBranch };
-    }
-    if (actualBranch && expectedBranch === actualBranch) {
-      return { ok: true, workdir, actualBranch, expectedBranch };
-    }
-    if (!actualBranch) {
-      return {
-        ok: false,
-        reason: `Cannot verify Git context for workdir '${workdir}': expected branch '${expectedBranch}' but the actual branch is unavailable (detached HEAD, missing .git, or unreadable repository). Refusing to write \u2014 no agent was run, no checkout was performed. Use the workspace tool to switch to branch '${expectedBranch}' (or repair the workdir) and retry.`,
-        workdir,
-        expectedBranch,
-        actualBranch: null
-      };
-    }
-    return {
-      ok: false,
-      reason: `Git context mismatch before Dev & Verify: session branch is '${expectedBranch}' but workdir '${workdir}' is actually on '${actualBranch}'. Refusing to write \u2014 no agent was run, no checkout was performed. Use the workspace tool to switch to branch '${expectedBranch}' (or update the session branch) and retry.`,
-      workdir,
-      expectedBranch,
-      actualBranch
-    };
-  }
   // ============================================================================
   // Session Lifecycle
   // ============================================================================
@@ -3726,7 +3676,7 @@ var SessionManager = class {
               const validated = await resolveAndValidateSourceBranch(wsPath, sourceBranch, projectDir);
               await runGit(wsPath, ["checkout", "-b", branch, validated]);
             } else {
-              await runGit(wsPath, ["checkout", "-b", branch]);
+              await checkoutBranchFromSharedSource(wsPath, branch);
             }
           } catch (innerErr) {
             throw new Error(
@@ -3796,7 +3746,8 @@ var SessionManager = class {
         const createLockPromise = (async () => {
           const exists = await workspaceExists(project.name, target, project.workdir);
           if (!exists) {
-            await ensureWorkspace(project.workdir, target, project.name, branch, sourceBranch);
+            const inheritedBranch = branch ?? await getGitBranch(this.getEffectiveWorkdir(sessionId)) ?? session.branch ?? void 0;
+            await ensureWorkspace(project.workdir, target, project.name, inheritedBranch, sourceBranch);
           } else if (branch) {
             await this.applyBranchIfNeeded(project.workdir, project.name, target, branch, sourceBranch);
           }
@@ -5944,7 +5895,7 @@ async function createServerHandle(config3) {
       toolRegistry = createToolRegistry();
       logger.info("MCP tools registered", { count: mcpTools.length });
     }
-    const { signalMcpReady } = await import("./server-CYE6XY7J.js");
+    const { signalMcpReady } = await import("./server-7Q5RPZKY.js");
     signalMcpReady();
   });
   const app = express();
@@ -6138,7 +6089,7 @@ async function createServerHandle(config3) {
     const { getProject: getProject2 } = await import("./projects-PQXME5S4.js");
     const project = getProject2(req.params.id);
     if (!project) return res.status(404).json({ error: "Project not found" });
-    const { listBranches } = await import("./workspace-2OG5VQG6.js");
+    const { listBranches } = await import("./workspace-YDUQZ3HC.js");
     const branches = await listBranches(project.workdir);
     res.json({ branches });
   });
@@ -6148,13 +6099,13 @@ async function createServerHandle(config3) {
     if (!project) return res.status(404).json({ error: "Project not found" });
     const { branch } = req.body;
     if (!branch || typeof branch !== "string") return res.status(400).json({ error: "branch is required" });
-    const { checkoutBranch, isGitRepository } = await import("./workspace-2OG5VQG6.js");
+    const { checkoutBranch, isGitRepository } = await import("./workspace-YDUQZ3HC.js");
     if (!await isGitRepository(project.workdir)) {
       return res.status(400).json({ error: "Project is not a git repository" });
     }
     try {
       await checkoutBranch(project.workdir, branch);
-      const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-TZNUQJ2I.js");
+      const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-7XOOISCY.js");
       const allSessions = sessionManager.listSessions();
       for (const s of allSessions) {
         if (sessionManager.getEffectiveWorkdir(s.id) === project.workdir) {
@@ -6173,7 +6124,7 @@ async function createServerHandle(config3) {
     if (!project) return res.status(404).json({ error: "Project not found" });
     const { name, sourceBranch } = req.body;
     if (!name || typeof name !== "string") return res.status(400).json({ error: "name is required" });
-    const { createBranch, resolveAndValidateSourceBranch: resolveAndValidateSourceBranch2, validateRef: validateRef2, getDefaultBranch, isGitRepository } = await import("./workspace-2OG5VQG6.js");
+    const { createBranch, resolveAndValidateSourceBranch: resolveAndValidateSourceBranch2, validateRef: validateRef2, getDefaultBranch, isGitRepository } = await import("./workspace-YDUQZ3HC.js");
     if (!await isGitRepository(project.workdir)) {
       return res.status(400).json({ error: "Project is not a git repository" });
     }
@@ -6190,7 +6141,7 @@ async function createServerHandle(config3) {
         );
       }
       await createBranch(project.workdir, name, sb);
-      const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-TZNUQJ2I.js");
+      const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-7XOOISCY.js");
       const allSessions = sessionManager.listSessions();
       for (const s of allSessions) {
         if (sessionManager.getEffectiveWorkdir(s.id) === project.workdir) {
@@ -6207,7 +6158,7 @@ async function createServerHandle(config3) {
     const session = sessionManager.getSession(req.params.id);
     if (!session) return res.status(404).json({ error: "Session not found" });
     const effectiveWorkdir = sessionManager.getEffectiveWorkdir(req.params.id);
-    const { listBranches, getDefaultBranch } = await import("./workspace-2OG5VQG6.js");
+    const { listBranches, getDefaultBranch } = await import("./workspace-YDUQZ3HC.js");
     const [branches, defaultBranch] = await Promise.all([
       listBranches(effectiveWorkdir),
       getDefaultBranch(session.workdir)
@@ -6221,8 +6172,8 @@ async function createServerHandle(config3) {
     const { branch } = req.body;
     if (!branch || typeof branch !== "string") return res.status(400).json({ error: "branch is required" });
     const effectiveWorkdir = sessionManager.getEffectiveWorkdir(req.params.id);
-    const { checkoutBranch, validateRef: validateRef2 } = await import("./workspace-2OG5VQG6.js");
-    const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-TZNUQJ2I.js");
+    const { checkoutBranch, validateRef: validateRef2 } = await import("./workspace-YDUQZ3HC.js");
+    const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-7XOOISCY.js");
     try {
       await validateRef2(effectiveWorkdir, branch);
       await checkoutBranch(effectiveWorkdir, branch);
@@ -6264,16 +6215,16 @@ All file and git operations should use this branch.
     const { name, sourceBranch } = req.body;
     if (!name || typeof name !== "string") return res.status(400).json({ error: "name is required" });
     const effectiveWorkdir = sessionManager.getEffectiveWorkdir(req.params.id);
-    const { validateRef: validateRef2 } = await import("./workspace-2OG5VQG6.js");
-    const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-TZNUQJ2I.js");
+    const { validateRef: validateRef2 } = await import("./workspace-YDUQZ3HC.js");
+    const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-7XOOISCY.js");
     try {
       await validateRef2(effectiveWorkdir, name);
       if (sourceBranch) {
-        const { resolveAndValidateSourceBranch: resolveAndValidateSourceBranch2, createBranch } = await import("./workspace-2OG5VQG6.js");
+        const { resolveAndValidateSourceBranch: resolveAndValidateSourceBranch2, createBranch } = await import("./workspace-YDUQZ3HC.js");
         const sb = await resolveAndValidateSourceBranch2(effectiveWorkdir, sourceBranch, session.workdir);
         await createBranch(effectiveWorkdir, name, sb);
       } else {
-        const { createBranch, getDefaultBranch, resolveAndValidateSourceBranch: resolveAndValidateSourceBranch2 } = await import("./workspace-2OG5VQG6.js");
+        const { createBranch, getDefaultBranch, resolveAndValidateSourceBranch: resolveAndValidateSourceBranch2 } = await import("./workspace-YDUQZ3HC.js");
         const defaultBranch = await getDefaultBranch(session.workdir);
         const sb = await resolveAndValidateSourceBranch2(effectiveWorkdir, defaultBranch, session.workdir);
         await createBranch(effectiveWorkdir, name, sb);
@@ -6314,14 +6265,14 @@ All file and git operations should use this branch.
     const { getProject: getProject2 } = await import("./projects-PQXME5S4.js");
     const project = getProject2(req.params.id);
     if (!project) return res.status(404).json({ error: "Project not found" });
-    const { listWorkspaces } = await import("./workspace-2OG5VQG6.js");
+    const { listWorkspaces } = await import("./workspace-YDUQZ3HC.js");
     const all = await listWorkspaces(project.name, project.workdir);
     const workspacesList = all.filter((ws) => ws.path !== project.workdir);
     res.json({ workspaces: workspacesList });
   });
   app.get("/api/sessions", async (req, res) => {
-    const { getRecentUserPromptsForSession } = await import("./events-OJ2R6OEM.js");
-    const { getPendingConfirmationsBySession } = await import("./path-security-QCIA6YFV.js");
+    const { getRecentUserPromptsForSession } = await import("./events-7WAOX35W.js");
+    const { getPendingConfirmationsBySession } = await import("./path-security-26J53LD4.js");
     const projectId = req.query["projectId"];
     const limit = Math.min(parseInt(req.query["limit"]) || 20, 100);
     const offset = parseInt(req.query["offset"]) || 0;
@@ -6367,7 +6318,7 @@ All file and git operations should use this branch.
         disabledServers = mcpManager.getAllServers().filter((s) => s.config.disabled).map((s) => s.name);
       }
       if (disabledServers.length > 0) {
-        const { setSessionDisabledServers: setSessionDisabledServers2 } = await import("./session-overrides-SFWPS5CT.js");
+        const { setSessionDisabledServers: setSessionDisabledServers2 } = await import("./session-overrides-FVX6374M.js");
         setSessionDisabledServers2(session.id, disabledServers);
       }
     } catch {
@@ -6395,7 +6346,7 @@ All file and git operations should use this branch.
         }
       }
     });
-    res.status(201).json({ session });
+    res.status(201).json({ session: toClientSession(session) });
   });
   app.post("/api/sessions/:id/switch-workspace", async (req, res) => {
     const session = sessionManager.getSession(req.params.id);
@@ -6404,13 +6355,13 @@ All file and git operations should use this branch.
     if (!target || typeof target !== "string") return res.status(400).json({ error: "target is required" });
     const project = sessionManager.getProject(session.projectId);
     if (!project) return res.status(404).json({ error: "Project not found" });
-    const { isGitRepository } = await import("./workspace-2OG5VQG6.js");
+    const { isGitRepository } = await import("./workspace-YDUQZ3HC.js");
     if (!await isGitRepository(project.workdir)) {
       return res.status(400).json({ error: "Project is not a git repository" });
     }
     try {
       const updated = await sessionManager.switchWorkspace(req.params.id, target, branch, sourceBranch);
-      res.json({ session: updated });
+      res.json({ session: toClientSession(updated) });
     } catch (err) {
       res.status(400).json({ error: err instanceof Error ? err.message : "Failed to switch workspace" });
     }
@@ -6422,13 +6373,13 @@ All file and git operations should use this branch.
     if (!target || typeof target !== "string") return res.status(400).json({ error: "target is required" });
     const project = sessionManager.getProject(session.projectId);
     if (!project) return res.status(404).json({ error: "Project not found" });
-    const { isGitRepository } = await import("./workspace-2OG5VQG6.js");
+    const { isGitRepository } = await import("./workspace-YDUQZ3HC.js");
     if (!await isGitRepository(project.workdir)) {
       return res.status(400).json({ error: "Project is not a git repository" });
     }
     try {
       const updated = await sessionManager.deleteWorkspace(req.params.id, target, force === true);
-      res.json({ session: updated });
+      res.json({ session: toClientSession(updated) });
     } catch (err) {
       if (err instanceof WorkspaceInUseError) {
         return res.status(409).json({
@@ -6440,12 +6391,12 @@ All file and git operations should use this branch.
     }
   });
   app.get("/api/sessions/:id", async (req, res) => {
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot } = await import("./events-OJ2R6OEM.js");
-    const { buildMessagesFromStoredEvents, foldPendingConfirmations } = await import("./folding-DUZSKCZF.js");
-    const { getPendingQuestionsForSession } = await import("./tools-Y4F4HJPO.js");
-    const { getMaxVisibleItems } = await import("./settings-5LG7IB3K.js");
-    const { getAgentModelOverride: getAgentModelOverride2 } = await import("./model-overrides-36SQR3JR.js");
-    const { updateSessionProvider: updateSessionProvider2 } = await import("./sessions-TZNUQJ2I.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot } = await import("./events-7WAOX35W.js");
+    const { buildMessagesFromStoredEvents, foldPendingConfirmations } = await import("./folding-MJDFKOHT.js");
+    const { getPendingQuestionsForSession } = await import("./tools-5C2VIQ7B.js");
+    const { getMaxVisibleItems } = await import("./settings-H2W3SNFE.js");
+    const { getAgentModelOverride: getAgentModelOverride2 } = await import("./model-overrides-47LYCLFO.js");
+    const { updateSessionProvider: updateSessionProvider2 } = await import("./sessions-7XOOISCY.js");
     let session = sessionManager.getSession(req.params.id);
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
@@ -6468,7 +6419,7 @@ All file and git operations should use this branch.
     const pendingConfirmations = foldPendingConfirmations(events);
     const activeWorkflowExecution = sessionManager.getActiveWorkflowExecution(req.params.id);
     res.json({
-      session,
+      session: toClientSession(session),
       messages,
       hiddenCount,
       contextState,
@@ -6484,8 +6435,8 @@ All file and git operations should use this branch.
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-A22X22VZ.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-Y4F4HJPO.js");
+    const { stopSessionExecution } = await import("./chat-handler-UZ2A75DG.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-5C2VIQ7B.js");
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
     abortSession(sessionId);
@@ -6514,9 +6465,9 @@ All file and git operations should use this branch.
     res.json({ success: true });
   });
   app.post("/api/sessions/:id/provider", async (req, res) => {
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-OJ2R6OEM.js");
-    const { buildMessagesFromStoredEvents } = await import("./folding-DUZSKCZF.js");
-    const { getMaxVisibleItems } = await import("./settings-5LG7IB3K.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-7WAOX35W.js");
+    const { buildMessagesFromStoredEvents } = await import("./folding-MJDFKOHT.js");
+    const { getMaxVisibleItems } = await import("./settings-H2W3SNFE.js");
     const sessionId = req.params.id;
     const session = sessionManager.getSession(sessionId);
     if (!session) {
@@ -6536,7 +6487,7 @@ All file and git operations should use this branch.
     const maxVisibleItems = getMaxVisibleItems();
     const { messages, hiddenCount } = buildMessagesFromStoredEvents(events, maxVisibleItems || void 0);
     const updatedSession = sessionManager.getSession(sessionId);
-    res.json({ session: updatedSession, messages, hiddenCount, contextState });
+    res.json({ session: toClientSession(updatedSession), messages, hiddenCount, contextState });
   });
   app.post("/api/default-model", async (req, res) => {
     const { providerId, model } = req.body;
@@ -6629,11 +6580,11 @@ All file and git operations should use this branch.
     res.json({ success: true });
   });
   app.put("/api/sessions/:id/mode", async (req, res) => {
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-OJ2R6OEM.js");
-    const { buildMessagesFromStoredEvents } = await import("./folding-DUZSKCZF.js");
-    const { getMaxVisibleItems } = await import("./settings-5LG7IB3K.js");
-    const { getAgentModelOverride: getAgentModelOverride2 } = await import("./model-overrides-36SQR3JR.js");
-    const { updateSessionProvider: updateSessionProvider2 } = await import("./sessions-TZNUQJ2I.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-7WAOX35W.js");
+    const { buildMessagesFromStoredEvents } = await import("./folding-MJDFKOHT.js");
+    const { getMaxVisibleItems } = await import("./settings-H2W3SNFE.js");
+    const { getAgentModelOverride: getAgentModelOverride2 } = await import("./model-overrides-47LYCLFO.js");
+    const { updateSessionProvider: updateSessionProvider2 } = await import("./sessions-7XOOISCY.js");
     const sessionId = req.params.id;
     const session = sessionManager.getSession(sessionId);
     if (!session) {
@@ -6671,7 +6622,7 @@ All file and git operations should use this branch.
     const maxVisibleItems = getMaxVisibleItems();
     const { messages, hiddenCount } = buildMessagesFromStoredEvents(events, maxVisibleItems || void 0);
     const updatedSession = sessionManager.getSession(sessionId);
-    res.json({ session: updatedSession, messages, hiddenCount });
+    res.json({ session: toClientSession(updatedSession), messages, hiddenCount });
   });
   app.put("/api/sessions/:id/danger-level", async (req, res) => {
     const sessionId = req.params.id;
@@ -6685,7 +6636,7 @@ All file and git operations should use this branch.
     }
     sessionManager.setDangerLevel(sessionId, dangerLevel);
     const updatedSession = sessionManager.getSession(sessionId);
-    res.json({ session: updatedSession });
+    res.json({ session: toClientSession(updatedSession) });
   });
   app.get("/api/sessions/:id/mcp/overrides", async (req, res) => {
     const sessionId = req.params.id;
@@ -6724,7 +6675,7 @@ All file and git operations should use this branch.
     }
     sessionManager.renameSession(sessionId, title.slice(0, 100));
     const updatedSession = sessionManager.getSession(sessionId);
-    res.json({ session: updatedSession });
+    res.json({ session: toClientSession(updatedSession) });
   });
   app.post("/api/sessions/:id/confirm-path", async (req, res) => {
     const sessionId = req.params.id;
@@ -6735,7 +6686,7 @@ All file and git operations should use this branch.
     if (alwaysAllow !== void 0 && typeof alwaysAllow !== "boolean") {
       return res.status(400).json({ error: "alwaysAllow must be a boolean if provided" });
     }
-    const { providePathConfirmation, getConfirmationSessionId } = await import("./tools-Y4F4HJPO.js");
+    const { providePathConfirmation, getConfirmationSessionId } = await import("./tools-5C2VIQ7B.js");
     const pendingSessionId = getConfirmationSessionId(callId);
     if (!pendingSessionId) {
       return res.status(404).json({ error: "No pending path confirmation with that ID" });
@@ -6747,11 +6698,11 @@ All file and git operations should use this branch.
     if (!result.found) {
       return res.status(404).json({ error: "No pending path confirmation with that ID" });
     }
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEvents } = await import("./events-OJ2R6OEM.js");
-    const { buildMessagesFromStoredEvents, foldPendingConfirmations } = await import("./folding-DUZSKCZF.js");
-    const { createSessionStateMessage } = await import("./protocol-YDNGGADL.js");
-    const { getPendingQuestionsForSession } = await import("./tools-Y4F4HJPO.js");
-    const { getMaxVisibleItems } = await import("./settings-5LG7IB3K.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEvents } = await import("./events-7WAOX35W.js");
+    const { buildMessagesFromStoredEvents, foldPendingConfirmations } = await import("./folding-MJDFKOHT.js");
+    const { createSessionStateMessage } = await import("./protocol-SPIJPOEN.js");
+    const { getPendingQuestionsForSession } = await import("./tools-5C2VIQ7B.js");
+    const { getMaxVisibleItems } = await import("./settings-H2W3SNFE.js");
     const eventStore = getEventStore2();
     const { snapshot, events: eventsSinceSnapshot } = eventStore.getEventsSinceSnapshot(sessionId);
     const events = combineEvents(sessionId, snapshot, eventsSinceSnapshot);
@@ -6787,7 +6738,7 @@ All file and git operations should use this branch.
     if (!skip && typeof answer !== "string") {
       return res.status(400).json({ error: "answer is required when not skipping" });
     }
-    const { provideAnswer } = await import("./tools-Y4F4HJPO.js");
+    const { provideAnswer } = await import("./tools-5C2VIQ7B.js");
     const found = provideAnswer(callId, answer ?? "", skip ?? false);
     if (!found) {
       return res.status(404).json({ error: "No pending question with that ID" });
@@ -6820,7 +6771,7 @@ All file and git operations should use this branch.
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { getSetting: getSetting2, SETTINGS_KEYS } = await import("./settings-5LG7IB3K.js");
+    const { getSetting: getSetting2, SETTINGS_KEYS } = await import("./settings-H2W3SNFE.js");
     if (getSetting2(SETTINGS_KEYS.CACHE_WARMING) !== "true") {
       return res.json({ success: false, reason: "disabled" });
     }
@@ -6852,7 +6803,7 @@ All file and git operations should use this branch.
       backend: activeProvider?.backend ?? llmClient.getBackend(),
       model: llmClient.getModel()
     };
-    const { runAgentTurn, TurnMetrics } = await import("./orchestrator-VZORJ7KF.js");
+    const { runAgentTurn, TurnMetrics } = await import("./orchestrator-X7H5JRM5.js");
     runAgentTurn(
       {
         sessionManager,
@@ -6890,15 +6841,15 @@ All file and git operations should use this branch.
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-A22X22VZ.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-Y4F4HJPO.js");
+    const { stopSessionExecution } = await import("./chat-handler-UZ2A75DG.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-5C2VIQ7B.js");
     const queuedMessages = sessionManager.getQueueState(sessionId);
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
     abortSession(sessionId);
     cancelQuestionsForSession(sessionId, "Session stopped by user");
     cancelPathConfirmationsForSession(sessionId, "Session stopped by user");
-    const eventStore = (await import("./events-OJ2R6OEM.js")).getEventStore();
+    const eventStore = (await import("./events-7WAOX35W.js")).getEventStore();
     eventStore.append(sessionId, { type: "running.changed", data: { isRunning: false } });
     res.json({ success: true, queuedMessages });
   });
@@ -6912,7 +6863,7 @@ All file and git operations should use this branch.
     if (typeof messageIndex !== "number" || messageIndex < 0) {
       return res.status(400).json({ error: "messageIndex must be a non-negative number" });
     }
-    const { truncateSessionMessages } = await import("./events-OJ2R6OEM.js");
+    const { truncateSessionMessages } = await import("./events-7WAOX35W.js");
     truncateSessionMessages(sessionId, messageIndex);
     res.json({ success: true });
   });
@@ -6929,8 +6880,8 @@ All file and git operations should use this branch.
     if (content !== void 0 && (typeof content !== "string" || !content.trim())) {
       return res.status(400).json({ error: "content must be a non-empty string if provided" });
     }
-    const { getEventStore: getEventStore2 } = await import("./events-OJ2R6OEM.js");
-    const { buildMessagesFromStoredEvents } = await import("./folding-DUZSKCZF.js");
+    const { getEventStore: getEventStore2 } = await import("./events-7WAOX35W.js");
+    const { buildMessagesFromStoredEvents } = await import("./folding-MJDFKOHT.js");
     const eventStore = getEventStore2();
     const events = eventStore.getEvents(sessionId);
     const { messages } = buildMessagesFromStoredEvents(events);
@@ -6942,7 +6893,7 @@ All file and git operations should use this branch.
     if (msg.role !== "user" || msg.isSystemGenerated) {
       return res.status(400).json({ error: "Can only replay user messages" });
     }
-    const { truncateSessionMessages } = await import("./events-OJ2R6OEM.js");
+    const { truncateSessionMessages } = await import("./events-7WAOX35W.js");
     truncateSessionMessages(sessionId, msgIndex - 1);
     sessionManager.queueMessage(sessionId, "asap", content ?? msg.content, msg.attachments, msg.messageKind);
     res.json({ success: true });
@@ -6962,7 +6913,7 @@ All file and git operations should use this branch.
     }
     try {
       const newSession = sessionManager.forkSession(sessionId, messageId, title);
-      return res.status(201).json({ session: newSession });
+      return res.status(201).json({ session: toClientSession(newSession) });
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
       if (message.includes("not found")) {
@@ -6998,7 +6949,7 @@ All file and git operations should use this branch.
     res.json({ accepted: true });
   });
   app.get("/api/settings", async (req, res) => {
-    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-5LG7IB3K.js");
+    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-H2W3SNFE.js");
     const keysParam = req.query["keys"];
     if (!keysParam) {
       return res.status(400).json({ error: "keys query parameter is required" });
@@ -7011,19 +6962,19 @@ All file and git operations should use this branch.
     res.json(result);
   });
   app.get("/api/settings/:key", async (req, res) => {
-    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-5LG7IB3K.js");
+    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-H2W3SNFE.js");
     const key = req.params.key;
     const value = getSetting2(key) ?? SETTINGS_DEFAULTS[key] ?? null;
     res.json({ key, value });
   });
   app.get("/api/settings/:key", async (req, res) => {
-    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-5LG7IB3K.js");
+    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-H2W3SNFE.js");
     const key = req.params.key;
     const value = getSetting2(key) ?? SETTINGS_DEFAULTS[key] ?? null;
     res.json({ key, value });
   });
   app.put("/api/settings/:key", async (req, res) => {
-    const { setSetting: setSetting2 } = await import("./settings-5LG7IB3K.js");
+    const { setSetting: setSetting2 } = await import("./settings-H2W3SNFE.js");
     const key = req.params.key;
     const { value } = req.body;
     if (value === void 0) {
@@ -7050,7 +7001,7 @@ All file and git operations should use this branch.
     }
   });
   app.get("/api/tools/shells", async (_req, res) => {
-    const { listAvailableShells } = await import("./platform-Q6T3AUHA.js");
+    const { listAvailableShells } = await import("./platform-JOAXLXYQ.js");
     res.json({ shells: listAvailableShells() });
   });
   app.get("/api/config", async (_req, res) => {
@@ -7140,7 +7091,7 @@ All file and git operations should use this branch.
     }));
   }
   app.post("/api/proxy/test", async (_req, res) => {
-    const { getSetting: getSetting2, SETTINGS_KEYS } = await import("./settings-5LG7IB3K.js");
+    const { getSetting: getSetting2, SETTINGS_KEYS } = await import("./settings-H2W3SNFE.js");
     const proxyUrl = getSetting2(SETTINGS_KEYS.PROXY_URL);
     if (!proxyUrl) {
       return res.status(400).json({ success: false, error: "No proxy URL configured" });
@@ -7232,7 +7183,7 @@ All file and git operations should use this branch.
     }
   });
   app.post("/api/proxy/test", async (_req, res) => {
-    const { getSetting: getSetting2, SETTINGS_KEYS } = await import("./settings-5LG7IB3K.js");
+    const { getSetting: getSetting2, SETTINGS_KEYS } = await import("./settings-H2W3SNFE.js");
     const proxyUrl = getSetting2(SETTINGS_KEYS.PROXY_URL);
     if (!proxyUrl) {
       return res.status(400).json({ success: false, error: "No proxy URL configured" });
@@ -7259,7 +7210,7 @@ All file and git operations should use this branch.
     const backend = req.query["backend"];
     if (!url) return res.status(400).json({ error: "url is required" });
     try {
-      const { fetchModelsWithContext } = await import("./provider-manager-RUC5QQ75.js");
+      const { fetchModelsWithContext } = await import("./provider-manager-ON3V54DS.js");
       const { getModelProfile: getModelProfile2 } = await import("./profiles-5J7F4BML.js");
       const models = await fetchModelsWithContext(
         url,
@@ -7329,8 +7280,8 @@ All file and git operations should use this branch.
       }
       const { getModelProfile: getModelProfile2 } = await import("./profiles-5J7F4BML.js");
       const { getBackendCapabilities } = await import("./backend-P3GHHLHJ.js");
-      const { buildNonStreamingCreateParams } = await import("./client-pure-USVHN4WG.js");
-      const { OpenAIHttpClient } = await import("./http-client-KJXFSK7A.js");
+      const { buildNonStreamingCreateParams } = await import("./client-pure-VFZIIK4S.js");
+      const { OpenAIHttpClient } = await import("./http-client-NHVT6E5C.js");
       const { ensureVersionPrefix } = await import("./url-utils-SAJP7AEX.js");
       const profile = getModelProfile2(model);
       const capabilities = getBackendCapabilities(backend || "unknown");
@@ -7682,7 +7633,7 @@ All file and git operations should use this branch.
   });
   async function rebuildMcpTools() {
     const { createMcpTools: createMcpTools2 } = await import("./tool-adapter-FEAHWU5C.js");
-    const { setMcpTools: setMcpTools2 } = await import("./tools-Y4F4HJPO.js");
+    const { setMcpTools: setMcpTools2 } = await import("./tools-5C2VIQ7B.js");
     const mcpTools = createMcpTools2(mcpManager);
     setMcpTools2(mcpTools);
     toolRegistry = createToolRegistry();
@@ -7943,13 +7894,13 @@ All file and git operations should use this branch.
     })
   );
   app.get("/api/sessions/:id/background-processes", async (req, res) => {
-    const { getSessionProcesses } = await import("./manager-N27WNW5B.js");
+    const { getSessionProcesses } = await import("./manager-ZVHBUECR.js");
     const sessionId = req.params.id;
     const processes = getSessionProcesses(sessionId);
     res.json({ processes });
   });
   app.post("/api/sessions/:id/background-process/:processId/stop", async (req, res) => {
-    const { stopProcess } = await import("./manager-N27WNW5B.js");
+    const { stopProcess } = await import("./manager-ZVHBUECR.js");
     const sessionId = req.params.id;
     const processId = req.params.processId;
     const session = sessionManager.getSession(sessionId);
@@ -8094,7 +8045,7 @@ All file and git operations should use this branch.
     const state = sessionManager.getContextState(sessionId);
     wssExports.broadcastForSession(sessionId, createContextStateMessage(state));
   });
-  const { QueueProcessor } = await import("./processor-QYVHKRIV.js");
+  const { QueueProcessor } = await import("./processor-33OESYXP.js");
   const queueProcessor = new QueueProcessor({
     sessionManager,
     providerManager,
@@ -8178,4 +8129,4 @@ export {
   createServerHandle,
   createServer
 };
-//# sourceMappingURL=chunk-G2VLGZ3Y.js.map
+//# sourceMappingURL=chunk-I4M6SCMY.js.map