openfox 2.0.110 → 2.0.112

package/dist/{chunk-UCYPPLVR.js → chunk-RAKPI4OE.js}

@@ -4,7 +4,7 @@ import {
   getEnabledSkillMetadata,
   isSkillEnabled,
   loadAllSkills
-} from "./chunk-GNFDD6LN.js";
+} from "./chunk-BOSKQI62.js";
 import {
   TurnMetrics,
   consumeStreamGenerator,
@@ -19,21 +19,24 @@ import {
   COMPACTION_PROMPT,
   buildBasePrompt,
   computeEffectiveTools
-} from "./chunk-5HMKLHTT.js";
+} from "./chunk-XWNCKIPO.js";
 import {
   startInspectProxy
 } from "./chunk-33Q7LCVD.js";
 import {
   checkAborted,
   createProcess,
+  createUtf8StreamDecoder,
+  decodeUtf8,
   getProcessLogs,
   getProcessStatus,
   getSessionProcesses,
+  sanitizeUtf8,
   spawnShell,
   spawnShellProcess,
   startProcessCommand,
   stopProcess
-} from "./chunk-C5JJM72V.js";
+} from "./chunk-SVJFMZ2Q.js";
 import {
   getMaxPerSession,
   getSessionProcessCount,
@@ -44,7 +47,7 @@ import {
 } from "./chunk-JE7LW7Y6.js";
 import {
   applyMcpServerUpdate
-} from "./chunk-VKWVPQJ5.js";
+} from "./chunk-OAN4BXEW.js";
 import {
   getGitBranch,
   isGitRepository,
@@ -52,33 +55,33 @@ import {
 } from "./chunk-FR5LUTLQ.js";
 import {
   getSessionDisabledServers
-} from "./chunk-WCQOHRUX.js";
+} from "./chunk-JDT63SSP.js";
 import {
   PathAccessDeniedError,
   extractAbsolutePathsFromCommand,
   extractSensitivePathsFromCommand,
   registerPathConfirmation,
   requestPathAccess
-} from "./chunk-PU3IPUSW.js";
+} from "./chunk-FFPCVN5M.js";
 import {
   getCurrentContextWindowId,
   getCurrentWindowMessageOptions,
   getEventStore
-} from "./chunk-LXYNP7LL.js";
+} from "./chunk-NB2D6I64.js";
 import {
   createChatDoneMessage,
   createChatMessageMessage,
   createChatMessageUpdatedMessage,
   createChatPathConfirmationMessage,
   createQueueStateMessage
-} from "./chunk-B5MH4HQ6.js";
+} from "./chunk-SYJMUIRC.js";
 import {
   AskUserInterrupt,
   askUserTool
-} from "./chunk-JAX5OEMM.js";
+} from "./chunk-JURM3RPZ.js";
 import {
   resolveLLMClientForAgent
-} from "./chunk-MM46DJJL.js";
+} from "./chunk-RISQXU32.js";
 import {
   buildContextMessagesFromEventHistory,
   foldContextState,
@@ -88,13 +91,13 @@ import {
   handleToolResult,
   reorderToolMessages,
   stripOrphanedToolCalls
-} from "./chunk-ACJNRPTO.js";
+} from "./chunk-QGXLZZBS.js";
 import {
   findAgentById,
   getRuntimeConfig,
   getSubAgents,
   loadAllAgentsDefault
-} from "./chunk-VT2X3DMC.js";
+} from "./chunk-JNHKKUGJ.js";
 import {
   modelSupportsVision
 } from "./chunk-V4IE7HJY.js";
@@ -112,14 +115,14 @@ import {
 import {
   SETTINGS_KEYS,
   getSetting
-} from "./chunk-VXKPZUCT.js";
+} from "./chunk-RT2A2RRL.js";
 import {
   logger
 } from "./chunk-K44MW7JJ.js";
 import {
   loadGlobalConfig,
   saveGlobalConfig
-} from "./chunk-D6ODGTSZ.js";
+} from "./chunk-C372UH7N.js";
 import {
   getGlobalConfigDir
 } from "./chunk-CQGTEGKL.js";
@@ -136,7 +139,7 @@ async function requestUserConfirmation(context, toolLabel, desc) {
   if (context.dangerLevel === "dangerous") return Promise.resolve(true);
   if (toolLabel === "workspace" || toolLabel === "command") {
     try {
-      const { getSetting: getSetting2, SETTINGS_KEYS: SETTINGS_KEYS2 } = await import("./settings-2RZBMX5Y.js");
+      const { getSetting: getSetting2, SETTINGS_KEYS: SETTINGS_KEYS2 } = await import("./settings-KO6DSJLD.js");
       if (getSetting2(SETTINGS_KEYS2.CONFIRM_ON_WORKSPACE_ACTIONS) !== "true") {
         return Promise.resolve(true);
       }
@@ -1053,9 +1056,30 @@ import stripAnsi from "strip-ansi";
 
 // src/server/tools/shell-tail.ts
 var TAIL_END_RE = /^(.*?)\s*\|\s*tail\s+(?:-n\s+)?-?(\d+)\s*$/;
+function hasTopLevelStatementSeparator(command) {
+  let quote = null;
+  for (let i = 0; i < command.length; i++) {
+    const ch = command[i];
+    if (ch === "\\") {
+      i++;
+      continue;
+    }
+    if (quote) {
+      if (ch === quote) quote = null;
+      continue;
+    }
+    if (ch === '"' || ch === "'" || ch === "`") {
+      quote = ch;
+      continue;
+    }
+    if (ch === ";" || ch === "\n") return true;
+  }
+  return false;
+}
 function stripTailPipe(command) {
   const trimmed = command.trim();
   if (!trimmed) return null;
+  if (hasTopLevelStatementSeparator(trimmed)) return null;
   const match = trimmed.match(TAIL_END_RE);
   if (!match) return null;
   const beforeTail = match[1];
@@ -1219,13 +1243,13 @@ async function tryRtkRewrite(command) {
         stdio: ["ignore", "pipe", "pipe"],
         timeout: 2e3
       });
-      let stdout = "";
+      const chunks = [];
       proc.stdout?.on("data", (data) => {
-        stdout += data.toString();
+        chunks.push(data);
       });
       proc.on("error", reject);
       proc.on("close", (code) => {
-        if (code === 0 || code === 3) resolve5(stdout.trim());
+        if (code === 0 || code === 3) resolve5(decodeUtf8(chunks).trim());
         else reject(new Error(`exit ${code}`));
       });
     });
@@ -1241,6 +1265,8 @@ function executeCommand(command, cwd, timeout, signal, onProgress) {
       return;
     }
     const proc = spawnShellProcess(command, cwd, signal, true);
+    const stdoutDecoder = createUtf8StreamDecoder();
+    const stderrDecoder = createUtf8StreamDecoder();
     let stdout = "";
     let stderr = "";
     let timedOut = false;
@@ -1258,39 +1284,35 @@ function executeCommand(command, cwd, timeout, signal, onProgress) {
     };
     signal?.addEventListener("abort", onAbort);
     proc.stdout?.on("data", (data) => {
-      const chunk = data.toString();
-      stdout += chunk;
-      onProgress?.(`[stdout] ${chunk}`);
+      const text = stdoutDecoder.write(data);
+      stdout += text;
+      onProgress?.(`[stdout] ${text}`);
     });
     proc.stderr?.on("data", (data) => {
-      const chunk = data.toString();
-      stderr += chunk;
-      onProgress?.(`[stderr] ${chunk}`);
+      const text = stderrDecoder.write(data);
+      stderr += text;
+      onProgress?.(`[stderr] ${text}`);
     });
+    const settle = (exitCode, appendix) => {
+      const out = (stdout + stdoutDecoder.end()).trim();
+      resolve5({
+        stdout: appendix ? out ? `${out}
+
+${appendix}` : appendix : out,
+        stderr: (stderr + stderrDecoder.end()).trim(),
+        exitCode
+      });
+    };
     proc.on("exit", () => {
       if (aborted) {
         clearTimeout(timer);
         signal?.removeEventListener("abort", onAbort);
-        let output = stdout.trim();
-        if (output) output += "\n\n";
-        output += "[interrupted by user]";
-        resolve5({
-          stdout: output,
-          stderr: stderr.trim(),
-          exitCode: 130
-        });
+        settle(130, "[interrupted by user]");
       } else if (timedOut) {
         clearTimeout(timer);
         signal?.removeEventListener("abort", onAbort);
-        let output = stdout.trim();
-        if (output) output += "\n\n";
-        output += `[Exit code: 124]
-[Process timed out after ${timeout}ms]`;
-        resolve5({
-          stdout: output,
-          stderr: stderr.trim(),
-          exitCode: 124
-        });
+        settle(124, `[Exit code: 124]
+[Process timed out after ${timeout}ms]`);
       }
     });
     proc.on("close", (code) => {
@@ -1298,33 +1320,15 @@ function executeCommand(command, cwd, timeout, signal, onProgress) {
       clearTimeout(timer);
       signal?.removeEventListener("abort", onAbort);
       if (timedOut) {
-        let output = stdout.trim();
-        if (output) output += "\n\n";
-        output += `[Exit code: 124]
-[Process timed out after ${timeout}ms]`;
-        resolve5({
-          stdout: output,
-          stderr: stderr.trim(),
-          exitCode: 124
-        });
+        settle(124, `[Exit code: 124]
+[Process timed out after ${timeout}ms]`);
         return;
       }
       if (aborted) {
-        let output = stdout.trim();
-        if (output) output += "\n\n";
-        output += "[interrupted by user]";
-        resolve5({
-          stdout: output,
-          stderr: stderr.trim(),
-          exitCode: 130
-        });
+        settle(130, "[interrupted by user]");
         return;
       }
-      resolve5({
-        stdout: stdout.trim(),
-        stderr: stderr.trim(),
-        exitCode: code ?? 1
-      });
+      settle(code ?? 1);
     });
     proc.on("error", (error) => {
       clearTimeout(timer);
@@ -1559,7 +1563,7 @@ async function executeTools(assistantMsgId, toolCalls, ctx, append) {
         data: { callId: error.callId, question: error.question, type: error.type, options: error.options }
       });
       append(createChatDoneEvent(assistantMsgId, "waiting_for_user"));
-      const { awaitAnswer } = await import("./ask-CJMU6EW7.js");
+      const { awaitAnswer } = await import("./ask-ZYPCJKZD.js");
       const answerPromise = awaitAnswer(error.callId);
       if (!answerPromise) {
         throw new Error(`No pending question found for callId: ${error.callId}`);
@@ -1645,11 +1649,18 @@ async function executeTools(assistantMsgId, toolCalls, ctx, append) {
     if (toolCall.name === "step_done" && toolResult.success) {
       stepDoneCalled = true;
     }
-    const content = stripAnsi2(
+    const rawContent = stripAnsi2(
       toolResult.success ? toolResult.output ?? "Success" : toolResult.output ? `${toolResult.output}
 
 Error: ${toolResult.error}` : `Error: ${toolResult.error}`
     );
+    const { clean: content, corrupted } = sanitizeUtf8(rawContent);
+    if (corrupted) {
+      logger.warn("Tool result contained invalid UTF-8 (U+FFFD); sanitized before sending to the LLM", {
+        toolCallId: toolCall.id,
+        tool: toolCall.name
+      });
+    }
     append(createToolResultEvent(assistantMsgId, toolCall.id, toolResult));
     return {
       toolCall,
@@ -1919,7 +1930,7 @@ ${CONTINUE_PROMPT}` : CONTINUE_PROMPT;
     sessionManager.setCurrentContextSize(sessionId, result.usage.promptTokens, config.subAgentMetadata?.subAgentId);
     if (!compacting) {
       const contextState2 = sessionManager.getContextState(sessionId);
-      const { shouldCompact, appendCompactionPrompt } = await import("./compactor-OSDLCGRC.js");
+      const { shouldCompact, appendCompactionPrompt } = await import("./compactor-X2KZ3XFU.js");
       if (shouldCompact(
         contextState2.currentTokens,
         contextState2.maxTokens,
@@ -2289,7 +2300,7 @@ async function describeImageFromDataUrl(dataUrl, visionModel, options) {
 // src/server/context/image-processor.ts
 async function loadVisionModelFromGlobalConfig() {
   try {
-    const { loadGlobalConfig: loadGlobalConfig2, resolveVisionFallback } = await import("./config-HX7FDKGJ.js");
+    const { loadGlobalConfig: loadGlobalConfig2, resolveVisionFallback } = await import("./config-TW5FHQEM.js");
     const runtimeConfig = getRuntimeConfig();
     const mode = runtimeConfig.mode ?? "production";
     const globalConfig = await loadGlobalConfig2(mode);
@@ -2907,7 +2918,7 @@ var callSubAgentTool = {
       };
     }
     try {
-      const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-KPIYFL5A.js");
+      const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-HTUTYMKI.js");
       const toolRegistry = getToolRegistryForAgent2(agentDef);
       const turnMetrics = new TurnMetrics();
       const result = await executeSubAgent({
@@ -3929,7 +3940,7 @@ var mcpConfigTool = createTool(
       mcpNotifyChanged?.(sessionId);
     }
     async function rebuildTools() {
-      const { setMcpTools: setMcpTools2 } = await import("./tools-KPIYFL5A.js");
+      const { setMcpTools: setMcpTools2 } = await import("./tools-HTUTYMKI.js");
       const mcpTools = createMcpTools(mcpManagerForTools);
       setMcpTools2(mcpTools);
     }
@@ -4624,4 +4635,4 @@ export {
   getToolRegistryForAgent,
   createToolRegistry
 };
-//# sourceMappingURL=chunk-UCYPPLVR.js.map
+//# sourceMappingURL=chunk-RAKPI4OE.js.map

package/dist/{chunk-MM46DJJL.js → chunk-RISQXU32.js}

@@ -2,7 +2,7 @@ import {
   SETTINGS_KEYS,
   getSetting,
   setSetting
-} from "./chunk-VXKPZUCT.js";
+} from "./chunk-RT2A2RRL.js";
 
 // src/server/agents/model-overrides.ts
 import { z } from "zod";
@@ -69,4 +69,4 @@ export {
   setAgentModelOverride,
   resolveLLMClientForAgent
 };
-//# sourceMappingURL=chunk-MM46DJJL.js.map
+//# sourceMappingURL=chunk-RISQXU32.js.map

package/dist/{chunk-CQKRZ4WV.js → chunk-RKMP74BB.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-JR54MDZI.js";
 import {
   COMPACTION_PROMPT
-} from "./chunk-5HMKLHTT.js";
+} from "./chunk-XWNCKIPO.js";
 import {
   getCurrentWindowMessageOptions
-} from "./chunk-LXYNP7LL.js";
+} from "./chunk-NB2D6I64.js";
 
 // src/server/context/compactor.ts
 function appendCompactionPrompt(sessionId, append) {
@@ -22,7 +22,7 @@ function appendCompactionPrompt(sessionId, append) {
   append({ type: "message.done", data: { messageId: compactPromptMsgId } });
 }
 var COMPACTION_HEADROOM_TOKENS = 5e3;
-var COMPACTION_MAX_RATIO = 0.85;
+var COMPACTION_MAX_RATIO = 0.95;
 function shouldCompact(currentTokens, maxTokens, threshold) {
   if (threshold <= 0) return false;
   const ceilingRatio = Math.min(1, Math.max(0, (maxTokens - COMPACTION_HEADROOM_TOKENS) / maxTokens));
@@ -36,4 +36,4 @@ export {
   COMPACTION_MAX_RATIO,
   shouldCompact
 };
-//# sourceMappingURL=chunk-CQKRZ4WV.js.map
+//# sourceMappingURL=chunk-RKMP74BB.js.map

package/dist/chunk-RSB4AR2A.js

@@ -0,0 +1,108 @@
+import {
+  clearMcpOAuthEntry,
+  clearMcpOAuthTokens,
+  readMcpOAuthEntry,
+  saveMcpOAuthClientInformation,
+  saveMcpOAuthCodeVerifier,
+  saveMcpOAuthState,
+  saveMcpOAuthTokens
+} from "./chunk-IJ53Y77N.js";
+
+// src/server/mcp/oauth-provider.ts
+import { randomBytes } from "crypto";
+var CALLBACK_PATH = "/api/mcp/oauth/callback";
+var serverPort = 10369;
+function setMcpOAuthServerPort(port) {
+  serverPort = port;
+}
+function getMcpOAuthRedirectUri() {
+  const publicUrl = process.env["OPENFOX_PUBLIC_URL"];
+  if (!publicUrl) return `http://127.0.0.1:${serverPort}${CALLBACK_PATH}`;
+  let base;
+  try {
+    base = new URL(publicUrl);
+  } catch {
+    throw new Error("OPENFOX_PUBLIC_URL is not a valid URL");
+  }
+  if (base.protocol !== "http:" && base.protocol !== "https:") {
+    throw new Error("OPENFOX_PUBLIC_URL must be an http or https URL");
+  }
+  base.pathname = `${base.pathname.replace(/\/+$/, "")}${CALLBACK_PATH}`;
+  base.search = "";
+  base.hash = "";
+  return base.toString();
+}
+var McpOAuthProvider = class {
+  constructor(serverName, serverUrl, redirectUri = getMcpOAuthRedirectUri()) {
+    this.serverName = serverName;
+    this.serverUrl = serverUrl;
+    this.redirectUri = redirectUri;
+  }
+  serverName;
+  serverUrl;
+  redirectUri;
+  authorizationUrl = null;
+  get redirectUrl() {
+    return this.redirectUri;
+  }
+  get clientMetadata() {
+    return {
+      client_name: "OpenFox",
+      redirect_uris: [this.redirectUri],
+      grant_types: ["authorization_code", "refresh_token"],
+      response_types: ["code"]
+    };
+  }
+  /** Set once the SDK has built an authorization URL, null while the stored tokens still work. */
+  get pendingAuthorizationUrl() {
+    return this.authorizationUrl;
+  }
+  async state() {
+    const value = randomBytes(32).toString("base64url");
+    await saveMcpOAuthState(this.serverName, this.serverUrl, value);
+    return value;
+  }
+  async clientInformation() {
+    const entry = await readMcpOAuthEntry(this.serverName, this.serverUrl);
+    return entry?.clientInformation;
+  }
+  async saveClientInformation(clientInformation) {
+    await saveMcpOAuthClientInformation(this.serverName, this.serverUrl, clientInformation);
+  }
+  async tokens() {
+    const entry = await readMcpOAuthEntry(this.serverName, this.serverUrl);
+    return entry?.tokens;
+  }
+  async saveTokens(tokens) {
+    await saveMcpOAuthTokens(this.serverName, this.serverUrl, tokens);
+  }
+  redirectToAuthorization(authorizationUrl) {
+    this.authorizationUrl = authorizationUrl;
+  }
+  async saveCodeVerifier(codeVerifier) {
+    await saveMcpOAuthCodeVerifier(this.serverName, this.serverUrl, codeVerifier);
+  }
+  async codeVerifier() {
+    const entry = await readMcpOAuthEntry(this.serverName, this.serverUrl);
+    if (!entry?.codeVerifier) {
+      throw new Error("No stored PKCE verifier for this server, start the authorization again");
+    }
+    return entry.codeVerifier;
+  }
+  /** Lets the SDK recover on its own when the server rejects the stored client or grant. */
+  async invalidateCredentials(scope) {
+    if (scope === "discovery") return;
+    if (scope === "all" || scope === "client") {
+      await clearMcpOAuthEntry(this.serverName);
+      return;
+    }
+    await clearMcpOAuthTokens(this.serverName, this.serverUrl);
+  }
+};
+
+export {
+  setMcpOAuthServerPort,
+  getMcpOAuthRedirectUri,
+  McpOAuthProvider
+};
+//# sourceMappingURL=chunk-RSB4AR2A.js.map

package/dist/{chunk-VXKPZUCT.js → chunk-RT2A2RRL.js}

@@ -37,6 +37,7 @@ var SETTINGS_KEYS = {
   TOOLS_SHELL: "tools.shell",
   CONFIRM_ON_WORKSPACE_ACTIONS: "tools.confirmOnWorkspaceActions",
   FEATURES_PER_SESSION_MCP: "features.perSessionMcp",
+  MAINTENANCE_SNAPSHOT_STREAMS_MIGRATED: "maintenance.snapshotStreamsMigratedV1",
   PROXY_URL: "network.proxyUrl",
   DEFAULT_AGENT: "agent.defaultAgent",
   AGENT_MODEL_OVERRIDES: "agent.modelOverrides"
@@ -76,7 +77,8 @@ var SETTINGS_DEFAULTS = {
   [SETTINGS_KEYS.TOOLS_USE_RTK]: "false",
   [SETTINGS_KEYS.TOOLS_SHELL]: "cmd",
   [SETTINGS_KEYS.CONFIRM_ON_WORKSPACE_ACTIONS]: "false",
-  [SETTINGS_KEYS.FEATURES_PER_SESSION_MCP]: "false"
+  [SETTINGS_KEYS.FEATURES_PER_SESSION_MCP]: "false",
+  [SETTINGS_KEYS.MAINTENANCE_SNAPSHOT_STREAMS_MIGRATED]: "false"
 };
 function getSetting(key) {
   try {
@@ -129,4 +131,4 @@ export {
   getAllSettings,
   getMaxVisibleItems
 };
-//# sourceMappingURL=chunk-VXKPZUCT.js.map
+//# sourceMappingURL=chunk-RT2A2RRL.js.map

package/dist/{chunk-HK75Q3EA.js → chunk-SDGNV45R.js}

@@ -2,18 +2,18 @@ import {
   buildCachedPrompt,
   computeDynamicContextHash,
   getToolFingerprint
-} from "./chunk-NORNB6IJ.js";
+} from "./chunk-Z56SEG4Z.js";
 import {
   createAssemblyResult,
   getConversationMessages,
   getToolRegistryForAgent,
   processEventsForConversation,
   runTopLevelAgentLoop
-} from "./chunk-UCYPPLVR.js";
+} from "./chunk-RAKPI4OE.js";
 import {
   getAllInstructions,
   getEnabledSkillMetadata
-} from "./chunk-GNFDD6LN.js";
+} from "./chunk-BOSKQI62.js";
 import {
   TurnMetrics,
   createChatDoneEvent,
@@ -22,24 +22,24 @@ import {
 import {
   buildAgentReminder,
   buildAgentSmallReminder
-} from "./chunk-5HMKLHTT.js";
+} from "./chunk-XWNCKIPO.js";
 import {
   PathAccessDeniedError
-} from "./chunk-PU3IPUSW.js";
+} from "./chunk-FFPCVN5M.js";
 import {
   getCurrentContextWindowId,
   getCurrentWindowMessageOptions,
   getEventStore
-} from "./chunk-LXYNP7LL.js";
+} from "./chunk-NB2D6I64.js";
 import {
   buildSnapshotFromSessionState
-} from "./chunk-ACJNRPTO.js";
+} from "./chunk-QGXLZZBS.js";
 import {
   findAgentById,
   getRuntimeConfig,
   loadAllAgentsDefault,
   resolveDefaultAgentId
-} from "./chunk-VT2X3DMC.js";
+} from "./chunk-JNHKKUGJ.js";
 import {
   logger
 } from "./chunk-K44MW7JJ.js";
@@ -49,7 +49,7 @@ import {
 
 // src/server/chat/orchestrator.ts
 async function buildRetryPatterns() {
-  const { getSetting, SETTINGS_KEYS } = await import("./settings-2RZBMX5Y.js");
+  const { getSetting, SETTINGS_KEYS } = await import("./settings-KO6DSJLD.js");
   const raw = getSetting(SETTINGS_KEYS.RETRY_PATTERNS);
   if (!raw) {
     const oldXmlProtection = getSetting("llm.disableXmlProtection");
@@ -319,4 +319,4 @@ export {
   runChatTurn,
   runAgentTurn
 };
-//# sourceMappingURL=chunk-HK75Q3EA.js.map
+//# sourceMappingURL=chunk-SDGNV45R.js.map

package/dist/{chunk-C5JJM72V.js → chunk-SVJFMZ2Q.js}

@@ -11,11 +11,11 @@ import {
 } from "./chunk-I72ACQ6R.js";
 import {
   getPlatformShell
-} from "./chunk-6EV7X5MP.js";
+} from "./chunk-N4RTAGFY.js";
 import {
   SETTINGS_KEYS,
   getSetting
-} from "./chunk-VXKPZUCT.js";
+} from "./chunk-RT2A2RRL.js";
 
 // src/server/utils/shell.ts
 import { spawn } from "child_process";
@@ -48,6 +48,23 @@ function spawnShellProcess(command, cwd, _signal, detached = false) {
   return spawnShell(command, { cwd, detached });
 }
 
+// src/server/utils/utf8.ts
+import { StringDecoder } from "string_decoder";
+function decodeUtf8(chunks) {
+  return Buffer.concat([...chunks]).toString("utf8");
+}
+function createUtf8StreamDecoder() {
+  const decoder = new StringDecoder("utf8");
+  return {
+    write: (chunk) => decoder.write(chunk),
+    end: () => decoder.end()
+  };
+}
+function sanitizeUtf8(content) {
+  if (!content.includes("\uFFFD")) return { clean: content, corrupted: false };
+  return { clean: content.replaceAll("\uFFFD", "?"), corrupted: true };
+}
+
 // src/server/tools/background-process/manager.ts
 var listeners = /* @__PURE__ */ new Set();
 function onProcessEvent(callback) {
@@ -88,8 +105,10 @@ function startProcessCommand(processId, sessionId, command, cwd) {
     payload: { processId, name: proc.name, pid: child.pid ?? null, status: "running" },
     sessionId
   });
+  const stdoutDecoder = createUtf8StreamDecoder();
+  const stderrDecoder = createUtf8StreamDecoder();
   child.stdout?.on("data", (chunk) => {
-    const text = chunk.toString();
+    const text = stdoutDecoder.write(chunk);
     appendLog(processId, text, "stdout");
     emitProcessEvent(processId, {
       type: "backgroundProcess.output",
@@ -98,7 +117,7 @@ function startProcessCommand(processId, sessionId, command, cwd) {
     });
   });
   child.stderr?.on("data", (chunk) => {
-    const text = chunk.toString();
+    const text = stderrDecoder.write(chunk);
     appendLog(processId, text, "stderr");
     emitProcessEvent(processId, {
       type: "backgroundProcess.output",
@@ -106,6 +125,28 @@ function startProcessCommand(processId, sessionId, command, cwd) {
       sessionId
     });
   });
+  child.stdout?.on("close", () => {
+    const rest = stdoutDecoder.end();
+    if (rest) {
+      appendLog(processId, rest, "stdout");
+      emitProcessEvent(processId, {
+        type: "backgroundProcess.output",
+        payload: { processId, stream: "stdout", content: rest },
+        sessionId
+      });
+    }
+  });
+  child.stderr?.on("close", () => {
+    const rest = stderrDecoder.end();
+    if (rest) {
+      appendLog(processId, rest, "stderr");
+      emitProcessEvent(processId, {
+        type: "backgroundProcess.output",
+        payload: { processId, stream: "stderr", content: rest },
+        sessionId
+      });
+    }
+  });
   child.on("exit", (code, signal) => {
     updateStatus(processId, sessionId, "exited", code ?? (signal ? 1 : null));
     emitProcessEvent(processId, {
@@ -155,6 +196,9 @@ export {
   checkAborted,
   spawnShell,
   spawnShellProcess,
+  decodeUtf8,
+  createUtf8StreamDecoder,
+  sanitizeUtf8,
   onProcessEvent,
   createProcess2 as createProcess,
   startProcessCommand,
@@ -163,4 +207,4 @@ export {
   getSessionProcesses2 as getSessionProcesses,
   getProcessLogs
 };
-//# sourceMappingURL=chunk-C5JJM72V.js.map
+//# sourceMappingURL=chunk-SVJFMZ2Q.js.map