openfox 2.0.115 → 2.0.117

package/dist/{chunk-OCSTEGK7.js → chunk-EQ5CGNOT.js}

@@ -1,6 +1,6 @@
 import {
   updateSessionMcpDisabledServers
-} from "./chunk-VWEATA7R.js";
+} from "./chunk-KLQEL2DZ.js";
 import {
   getDatabase
 } from "./chunk-5PT4UMRR.js";
@@ -62,4 +62,4 @@ export {
   clearSessionOverrides,
   getAllSessionOverrides
 };
-//# sourceMappingURL=chunk-OCSTEGK7.js.map
+//# sourceMappingURL=chunk-EQ5CGNOT.js.map

package/dist/{chunk-YX3OQBNX.js → chunk-EQ7DK2TG.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-J2GP3J3X.js";
 import {
   getModelProfile
-} from "./chunk-V4IE7HJY.js";
+} from "./chunk-W7VIYHPQ.js";
 import {
   getBackendCapabilities
 } from "./chunk-AZHWLLPP.js";
@@ -84,7 +84,7 @@ function computeAggregatedStats(input) {
 }
 
 // src/server/chat/stream-pure.ts
-function createEmptyStreamResult(aborted, modelParams, patternMatch) {
+function createEmptyStreamResult(aborted, modelParams, patternMatch, error) {
   return {
     content: "",
     toolCalls: [],
@@ -94,7 +94,8 @@ function createEmptyStreamResult(aborted, modelParams, patternMatch) {
     aborted,
     modelParams,
     finishReason: "stop",
-    ...patternMatch ? { patternMatch } : {}
+    ...patternMatch ? { patternMatch } : {},
+    ...error ? { error } : {}
   };
 }
 async function* streamLLMPure(options) {
@@ -142,6 +143,7 @@ async function* streamLLMPure(options) {
   const toolArgs = /* @__PURE__ */ new Map();
   let result = null;
   let aborted = false;
+  let streamError;
   let accumulatedContent = "";
   let accumulatedThinking = "";
   let patternMatch;
@@ -241,6 +243,8 @@ async function* streamLLMPure(options) {
         }
         case "error":
           if (signal?.aborted) break;
+          streamError = value.error;
+          if (options.suppressChatError) break;
           yield {
             type: "chat.error",
             data: { error: value.error, recoverable: true }
@@ -267,7 +271,7 @@ async function* streamLLMPure(options) {
     return createEmptyStreamResult(false, modelParams, patternMatch);
   }
   if (!result) {
-    return createEmptyStreamResult(aborted, modelParams);
+    return createEmptyStreamResult(aborted, modelParams, void 0, streamError);
   }
   const baseResult = {
     content: result.content,
@@ -438,4 +442,4 @@ export {
   createChatDoneEvent,
   consumeStreamGenerator
 };
-//# sourceMappingURL=chunk-YX3OQBNX.js.map
+//# sourceMappingURL=chunk-EQ7DK2TG.js.map

package/dist/{chunk-OKVHMKE2.js → chunk-EZD7WFBZ.js}

@@ -2,24 +2,24 @@ import {
   generateSessionNameForSession,
   getSessionMessageCount,
   needsNameGeneration
-} from "./chunk-TGLVWAFC.js";
+} from "./chunk-6XHDNSA3.js";
 import {
   launchWorkflowRun
-} from "./chunk-3QQAIUZI.js";
+} from "./chunk-7SDJXHJH.js";
 import {
   runChatTurn
-} from "./chunk-3NPLERPQ.js";
+} from "./chunk-I6MY65LO.js";
 import {
   devServerManager
-} from "./chunk-JFK4GKQD.js";
+} from "./chunk-2PQA3DHY.js";
 import {
   applyDynamicContext,
   computeSessionHash,
   computeUnifiedDiff
-} from "./chunk-TFF5T3K3.js";
+} from "./chunk-3PEYTWCS.js";
 import {
   appendCompactionPrompt
-} from "./chunk-BWVO5WFK.js";
+} from "./chunk-X3XKYGUN.js";
 import {
   onProcessEvent
 } from "./chunk-ZTOG6LJD.js";
@@ -32,7 +32,7 @@ import {
 import {
   combineEventsWithSnapshot,
   getEventStore
-} from "./chunk-ERNWAKUB.js";
+} from "./chunk-TGVDUK4N.js";
 import {
   createChatErrorMessage,
   createChatMessageMessage,
@@ -47,7 +47,7 @@ import {
   parseClientMessage,
   serializeServerMessage,
   storedEventToServerMessage
-} from "./chunk-I7FY2LTR.js";
+} from "./chunk-4GHLULHB.js";
 import {
   getPlatformShell
 } from "./chunk-AESOGRFK.js";
@@ -70,7 +70,7 @@ import {
 } from "./chunk-K44MW7JJ.js";
 import {
   createServerMessage
-} from "./chunk-X25Q6RAV.js";
+} from "./chunk-ZKLE2Q3I.js";
 
 // src/server/ws/server.ts
 import { WebSocketServer, WebSocket as WebSocket2 } from "ws";
@@ -885,7 +885,7 @@ function createWebSocketServer(httpServer, _config, getLLMClient, getActiveProvi
       const { messages, hiddenCount } = buildMessagesFromStoredEvents(events, maxVisible || void 0);
       const pendingConfirmations = foldPendingConfirmations(events);
       const pendingQuestions = getPendingQuestionsForSession(updatedSession.id);
-      const activeWorkflowExecution = sessionManager.getActiveWorkflowExecution(updatedSession.id);
+      const activeWorkflowExecution = sessionManager.getDisplayWorkflowExecution(updatedSession.id);
       const effectiveWorkdir = updatedSession.workspace ?? updatedSession.workdir;
       for (const [, client] of clients) {
         if (client.activeSessionId === updatedSession.id && client.activeWorkdir !== effectiveWorkdir) {
@@ -1168,12 +1168,13 @@ async function handleClientMessage(ws, client, message, _getLLMClient, _getActiv
     // Context Management
     // =========================================================================
     case "context.compact": {
-      if (!client.activeSessionId) {
+      const payload = message.payload;
+      const sessionId = payload?.sessionId ?? client.activeSessionId;
+      if (!sessionId) {
         send(createErrorMessage("NO_SESSION", "No active session", message.id));
         return;
       }
-      const session = sessionManager.requireSession(client.activeSessionId);
-      const sessionId = client.activeSessionId;
+      const session = sessionManager.requireSession(sessionId);
       if (session.isRunning) {
         send(createErrorMessage("SESSION_RUNNING", "Cannot compact while session is running", message.id));
         return;
@@ -1266,15 +1267,16 @@ async function handleClientMessage(ws, client, message, _getLLMClient, _getActiv
       break;
     }
     case "context.applyDynamic.preview": {
-      if (!client.activeSessionId) {
+      const payload = message.payload;
+      const sessionId = payload?.sessionId ?? client.activeSessionId;
+      if (!sessionId) {
         send(createErrorMessage("NO_SESSION", "No active session", message.id));
         return;
       }
-      const sessionId = client.activeSessionId;
       const session = sessionManager.requireSession(sessionId);
       try {
-        const { buildCachedPrompt } = await import("./dynamic-context-QNB4ELLP.js");
-        const allAgents = await import("./registry-5XI5NDBF.js");
+        const { buildCachedPrompt } = await import("./dynamic-context-NNBVVFBT.js");
+        const allAgents = await import("./registry-5QL3BOWN.js");
         const agentDef = allAgents.findAgentById(session.mode, await allAgents.loadAllAgentsDefault()) ?? allAgents.findAgentById("planner", await allAgents.loadAllAgentsDefault());
         const modelName = session.providerModel ?? _providerManager?.getCurrentModel();
         const { systemPrompt: newPrompt, hash: newHash } = await buildCachedPrompt(
@@ -1313,11 +1315,12 @@ async function handleClientMessage(ws, client, message, _getLLMClient, _getActiv
       break;
     }
     case "context.applyDynamic": {
-      if (!client.activeSessionId) {
+      const payload = message.payload;
+      const sessionId = payload?.sessionId ?? client.activeSessionId;
+      if (!sessionId) {
         send(createErrorMessage("NO_SESSION", "No active session", message.id));
         return;
       }
-      const sessionId = client.activeSessionId;
       const session = sessionManager.requireSession(sessionId);
       if (session.isRunning) {
         send(createErrorMessage("SESSION_RUNNING", "Cannot apply dynamic context while session is running", message.id));
@@ -1349,11 +1352,13 @@ async function handleClientMessage(ws, client, message, _getLLMClient, _getActiv
     // Runner (Auto-Loop)
     // =========================================================================
     case "runner.launch": {
-      if (!client.activeSessionId) {
+      const launchPayloadEarly = message.payload;
+      const sessionId = launchPayloadEarly?.sessionId ?? client.activeSessionId;
+      if (!sessionId) {
         send(createErrorMessage("NO_SESSION", "No active session", message.id));
         return;
       }
-      const session = sessionManager.requireSession(client.activeSessionId);
+      const session = sessionManager.requireSession(sessionId);
       if (session.isRunning) {
         const launchPayload2 = message.payload;
         const content = launchPayload2?.content ?? "";
@@ -1366,16 +1371,15 @@ async function handleClientMessage(ws, client, message, _getLLMClient, _getActiv
 
 ${content}` : workflowInfo;
         }
-        sessionManager.queueMessage(client.activeSessionId, "asap", fullContent, attachments, "workflow-launch");
-        const queueState = sessionManager.getQueueState(client.activeSessionId);
-        send({
+        sessionManager.queueMessage(sessionId, "asap", fullContent, attachments, "workflow-launch");
+        const queueState = sessionManager.getQueueState(sessionId);
+        sendForSession(sessionId, {
           type: "queue.state",
           payload: { success: true, queueState },
           id: message.id
         });
         return;
       }
-      const launchPayloadEarly = message.payload;
       if (!launchPayloadEarly?.resumeFrom) {
         const pendingCriteria = session.criteria.filter((c) => c.status.type !== "passed");
         if (!launchPayloadEarly?.workflowId && pendingCriteria.length === 0) {
@@ -1383,7 +1387,6 @@ ${content}` : workflowInfo;
           return;
         }
       }
-      const sessionId = client.activeSessionId;
       if (session.phase === "blocked") {
         logger.info("User launched runner - resetting blocked state", { sessionId });
         sessionManager.setPhase(sessionId, "build");
@@ -1491,11 +1494,12 @@ ${content}` : workflowInfo;
     // Workflow
     // =========================================================================
     case "workflow.exit": {
-      if (!client.activeSessionId) {
+      const payload = message.payload;
+      const exitSessionId = payload?.sessionId ?? client.activeSessionId;
+      if (!exitSessionId) {
         send(createErrorMessage("NO_SESSION", "No active session", message.id));
         return;
       }
-      const exitSessionId = client.activeSessionId;
       const exitSession = sessionManager.getSession(exitSessionId);
       if (!exitSession) {
         send(createErrorMessage("NOT_FOUND", "Session not found", message.id));
@@ -1542,4 +1546,4 @@ export {
   signalMcpReady,
   createWebSocketServer
 };
-//# sourceMappingURL=chunk-OKVHMKE2.js.map
+//# sourceMappingURL=chunk-EZD7WFBZ.js.map

package/dist/{chunk-BVVCRIVM.js → chunk-GZTMCTUS.js}

@@ -1,9 +1,9 @@
 import {
   createLLMClient
-} from "./chunk-JGWHRYWG.js";
+} from "./chunk-MKWS7TQH.js";
 import {
   getModelProfile
-} from "./chunk-V4IE7HJY.js";
+} from "./chunk-W7VIYHPQ.js";
 import {
   getBackendCapabilities
 } from "./chunk-AZHWLLPP.js";
@@ -803,4 +803,4 @@ export {
   parseDefaultModelSelection,
   createProviderManager
 };
-//# sourceMappingURL=chunk-BVVCRIVM.js.map
+//# sourceMappingURL=chunk-GZTMCTUS.js.map

package/dist/{chunk-6RGACY4E.js → chunk-HZSKKJHQ.js}

@@ -11,7 +11,7 @@ import {
 } from "./chunk-3PG65AXG.js";
 import {
   parseDefaultModelSelection
-} from "./chunk-BVVCRIVM.js";
+} from "./chunk-GZTMCTUS.js";
 import {
   getDatabase
 } from "./chunk-5PT4UMRR.js";
@@ -342,10 +342,11 @@ async function resolveSlashLaunch(configDir, projectDir, prompt) {
 }
 
 // src/server/db/tasks.ts
+import { randomBytes } from "crypto";
 function createTask(projectId, input) {
   const db = getDatabase();
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  const id = crypto.randomUUID();
+  const id = randomBytes(8).toString("hex");
   const position = db.prepare(`SELECT COALESCE(MAX(position), -1) + 1 AS pos FROM tasks WHERE project_id = ? AND status = 'todo'`).get(projectId);
   db.prepare(
     `INSERT INTO tasks (id, project_id, prompt, attachments, status, run_state, position, version, agent_id, provider_id, model, created_at, updated_at)
@@ -1078,4 +1079,4 @@ export {
   isTaskGateError,
   createTasksService
 };
-//# sourceMappingURL=chunk-6RGACY4E.js.map
+//# sourceMappingURL=chunk-HZSKKJHQ.js.map

package/dist/{chunk-3NPLERPQ.js → chunk-I6MY65LO.js}

@@ -4,12 +4,12 @@ import {
   getToolRegistryForAgent,
   processEventsForConversation,
   runTopLevelAgentLoop
-} from "./chunk-JFK4GKQD.js";
+} from "./chunk-2PQA3DHY.js";
 import {
   buildCachedPrompt,
   computeDynamicContextHash,
   getToolFingerprint
-} from "./chunk-TFF5T3K3.js";
+} from "./chunk-3PEYTWCS.js";
 import {
   getAllInstructions,
   getEnabledSkillMetadata
@@ -18,19 +18,19 @@ import {
   TurnMetrics,
   createChatDoneEvent,
   createMessageStartEvent
-} from "./chunk-YX3OQBNX.js";
+} from "./chunk-EQ7DK2TG.js";
 import {
   buildAgentReminder,
   buildAgentSmallReminder
 } from "./chunk-27NABDXB.js";
 import {
   PathAccessDeniedError
-} from "./chunk-6KPJLELC.js";
+} from "./chunk-QQVPUZQB.js";
 import {
   getCurrentContextWindowId,
   getCurrentWindowMessageOptions,
   getEventStore
-} from "./chunk-ERNWAKUB.js";
+} from "./chunk-TGVDUK4N.js";
 import {
   buildSnapshotFromSessionState
 } from "./chunk-3KBRMBTP.js";
@@ -49,7 +49,7 @@ import {
 
 // src/server/chat/orchestrator.ts
 async function buildRetryPatterns() {
-  const { getSetting, SETTINGS_KEYS } = await import("./settings-2AHDKCD7.js");
+  const { getSetting, SETTINGS_KEYS } = await import("./settings-FGXQHKUH.js");
   const raw = getSetting(SETTINGS_KEYS.RETRY_PATTERNS);
   if (!raw) {
     const oldXmlProtection = getSetting("llm.disableXmlProtection");
@@ -228,7 +228,7 @@ async function runAgentTurn(options, turnMetrics, agentId, append, callbacks) {
   const agentDef = findAgentById(agentId, allAgents) ?? findAgentById(resolveDefaultAgentId(), allAgents);
   const agentLlmClient = options.sessionManager.createClientForAgent(agentId, options.llmClient);
   const statsIdentity = resolveStatsIdentity({ ...options, llmClient: agentLlmClient });
-  if (!options.warmup) {
+  if (!options.warmup && !options.skipAgentReminder) {
     injectAgentReminder(options.sessionId, agentDef);
   }
   const session = options.sessionManager.requireSession(options.sessionId);
@@ -296,6 +296,7 @@ async function runAgentTurn(options, turnMetrics, agentId, append, callbacks) {
       ...options.initialCompacting ? { initialCompacting: true } : {},
       ...callbacks?.injectKickoff ? { injectKickoff: callbacks.injectKickoff } : {},
       ...callbacks?.onToolExecuted ? { onToolExecuted: callbacks.onToolExecuted } : {},
+      ...options.suppressRecoverableErrors ? { suppressChatError: true } : {},
       ...options.warmup ? { warmup: true } : {}
     },
     turnMetrics
@@ -319,4 +320,4 @@ export {
   runChatTurn,
   runAgentTurn
 };
-//# sourceMappingURL=chunk-3NPLERPQ.js.map
+//# sourceMappingURL=chunk-I6MY65LO.js.map

package/dist/{chunk-VWEATA7R.js → chunk-KLQEL2DZ.js}

@@ -396,6 +396,11 @@ function getActiveWorkflowExecution(sessionId) {
   ).get(sessionId);
   return row;
 }
+function getLatestWorkflowExecution(sessionId) {
+  const db = getDatabase();
+  const row = db.prepare(`SELECT * FROM workflow_executions WHERE session_id = ? ORDER BY updated_at DESC LIMIT 1`).get(sessionId);
+  return row;
+}
 function clearWorkflowExecution(executionId) {
   const db = getDatabase();
   const now = Date.now();
@@ -427,6 +432,7 @@ export {
   createWorkflowExecution,
   updateWorkflowExecutionStatus,
   getActiveWorkflowExecution,
+  getLatestWorkflowExecution,
   clearWorkflowExecution
 };
-//# sourceMappingURL=chunk-VWEATA7R.js.map
+//# sourceMappingURL=chunk-KLQEL2DZ.js.map

package/dist/{chunk-JGWHRYWG.js → chunk-MKWS7TQH.js}

@@ -1,6 +1,6 @@
 import {
   getModelProfile
-} from "./chunk-V4IE7HJY.js";
+} from "./chunk-W7VIYHPQ.js";
 import {
   getBackendCapabilities
 } from "./chunk-AZHWLLPP.js";
@@ -310,4 +310,4 @@ function createLLMClient(config, initialBackend = "unknown") {
 export {
   createLLMClient
 };
-//# sourceMappingURL=chunk-JGWHRYWG.js.map
+//# sourceMappingURL=chunk-MKWS7TQH.js.map

package/dist/chunk-NPTI5RCQ.js

@@ -0,0 +1,7 @@
+// src/constants.ts
+var VERSION = "2.0.117";
+
+export {
+  VERSION
+};
+//# sourceMappingURL=chunk-NPTI5RCQ.js.map

package/dist/{chunk-6KPJLELC.js → chunk-QQVPUZQB.js}

@@ -1,9 +1,9 @@
 import {
   getEventStore
-} from "./chunk-ERNWAKUB.js";
+} from "./chunk-TGVDUK4N.js";
 import {
   createChatPathConfirmationMessage
-} from "./chunk-I7FY2LTR.js";
+} from "./chunk-4GHLULHB.js";
 import {
   getPlatformShell
 } from "./chunk-AESOGRFK.js";
@@ -140,6 +140,151 @@ function normalizeExtracted(path) {
 function isPlaceholderToken(str) {
   return str.includes("__URL__") || str.includes("__FILEURL__") || str.includes("__SED__") || str.includes("__COMMIT_MSG__");
 }
+var REGEX_TOOL_RE = /\b(?:sed|awk|gawk|mawk|perl|ruby|raku)\b/;
+var SHELL_TOKEN_END_RE = /[\s'"`|&;,<>()]/;
+function isRegexAddress(command, start, end, hasRegexTool, quote) {
+  const content = command.slice(start + 1, end);
+  if (looksLikeRegex(content)) return true;
+  if (command[end + 1] === ",") return true;
+  if (quote === null && command[start - 1] === "~" && (command[start - 2] === "=" || command[start - 2] === "!")) {
+    return true;
+  }
+  const action = command[end + 1];
+  if (action !== void 0 && /[a-zA-Z]/.test(action)) {
+    const after = command[end + 2];
+    const terminated = quote === null ? SHELL_TOKEN_END_RE.test(after ?? "") : after === quote;
+    if (terminated) return true;
+  }
+  return hasRegexTool && quote !== null && !/\s/.test(content);
+}
+function maskRegexAddresses(command) {
+  const work = command.replace(/(?:=|!)~\s+/g, " __SED__ ");
+  if (!work.includes("/")) return work;
+  const hasRegexTool = REGEX_TOOL_RE.test(work);
+  const out = [];
+  let quote = null;
+  let i = 0;
+  const n = work.length;
+  const maskSpan = (end) => {
+    if (out[out.length - 1] === "~" && (out[out.length - 2] === "=" || out[out.length - 2] === "!")) {
+      out.pop();
+      out.pop();
+    }
+    out.push(" __SED__ ");
+    i = end + 1;
+  };
+  while (i < n) {
+    const ch = work[i];
+    if (quote !== null) {
+      if (ch === "\\" && quote !== "'") {
+        out.push(ch, work[i + 1] ?? "");
+        i += 2;
+        continue;
+      }
+      if (ch === quote) {
+        out.push(ch);
+        quote = null;
+        i += 1;
+        continue;
+      }
+      if (ch === "/") {
+        let j = i + 1;
+        while (j < n) {
+          if (work[j] === "\\" && quote !== "'") {
+            j += 2;
+            continue;
+          }
+          if (work[j] === quote || work[j] === "/") break;
+          j += 1;
+        }
+        if (j < n && work[j] === "/" && isRegexAddress(work, i, j, hasRegexTool, quote)) {
+          maskSpan(j);
+          continue;
+        }
+      }
+      out.push(ch);
+      i += 1;
+      continue;
+    }
+    if (ch === "'" || ch === '"' || ch === "`") {
+      quote = ch;
+      out.push(ch);
+      i += 1;
+      continue;
+    }
+    if (ch === "/") {
+      let j = i + 1;
+      while (j < n && work[j] !== "/" && !/[\s|&;<>()'"`]/.test(work[j])) j += 1;
+      if (j < n && work[j] === "/" && isRegexAddress(work, i, j, hasRegexTool, null)) {
+        maskSpan(j);
+        continue;
+      }
+    }
+    out.push(ch);
+    i += 1;
+  }
+  return out.join("");
+}
+function extractUnquotedTildePaths(command, home) {
+  const paths = [];
+  let quote = null;
+  let i = 0;
+  const n = command.length;
+  while (i < n) {
+    const ch = command[i];
+    if (quote !== null) {
+      if (ch === "\\" && quote !== "'") {
+        i += 2;
+        continue;
+      }
+      if (ch === quote) {
+        quote = null;
+        i += 1;
+        continue;
+      }
+      i += 1;
+      continue;
+    }
+    if (ch === "'" || ch === '"' || ch === "`") {
+      quote = ch;
+      i += 1;
+      continue;
+    }
+    if (ch === "~" && (i === 0 || /[\s=(]/.test(command[i - 1]))) {
+      let j = i + 1;
+      while (j < n && !/[\s'"()]/.test(command[j])) j += 1;
+      const tail = command.slice(i + 1, j);
+      if (tail === "" || tail.startsWith("/")) {
+        const resolved = normalize(resolve(home + tail));
+        if (!isSafePath(resolved)) {
+          paths.push(resolved);
+        }
+      }
+      i = j;
+      continue;
+    }
+    i += 1;
+  }
+  return paths;
+}
+var TRAVERSAL_SEGMENT_RE = /(?:^|\/)\.\.(?:\/|$)/;
+function extractRelativeTraversals(command) {
+  const out = [];
+  const isTraversal = (token) => TRAVERSAL_SEGMENT_RE.test(token);
+  const quotedPattern = /["']([^"']+)["']/g;
+  let m;
+  while ((m = quotedPattern.exec(command)) !== null) {
+    const content = m[1];
+    if (!content || content.startsWith("/") || content.startsWith("~") || isWindowsAbsolutePath(content)) continue;
+    if (isTraversal(content)) out.push(content);
+  }
+  const bare = command.replace(/["'][^"']*["']/g, " ").split(/[\s|&;<>()]+/);
+  for (const token of bare) {
+    if (!token || token.startsWith("/") || token.startsWith("~")) continue;
+    if (isTraversal(token)) out.push(token);
+  }
+  return [...new Set(out)];
+}
 function extractAbsolutePathsFromCommand(command) {
   if (!command.trim()) {
     return [];
@@ -151,6 +296,7 @@ function extractAbsolutePathsFromCommand(command) {
   sanitized = sanitized.replace(/(?<!\w)s\/[^/]*\/[^/]*\/[gip]*/g, " __SED__ ");
   sanitized = sanitized.replace(/(?<!\w)s\|[^|]*\|[^|]*\|[gip]*/g, " __SED__ ");
   sanitized = sanitized.replace(/(?<!\w)s:[^:]*:[^:]*:[gip]*/g, " __SED__ ");
+  sanitized = maskRegexAddresses(sanitized);
   sanitized = sanitized.replace(
     /git\s+commit\b.*?(?:-(?:[a-zA-Z]*m)(?=\s)|--message)\s+(["'])(?:(?!\1).)*\1/g,
     (match2) => match2.replace(/\/[^\s"'|&;<>`()]+/g, " __COMMIT_MSG__ ")
@@ -163,17 +309,9 @@ function extractAbsolutePathsFromCommand(command) {
     }
   }
   sanitized = sanitized.replace(/file:\/\/[^\s'"]+/g, " __FILEURL__ ");
-  const tildePattern = /(?:^|[\s='"(])~(\/[^\s'"()]*)?(?=[\s'"()]|$)/g;
-  let match;
-  while ((match = tildePattern.exec(sanitized)) !== null) {
-    const pathPart = match[1] ?? "";
-    const fullPath = home + pathPart;
-    const resolved = normalize(resolve(fullPath));
-    if (!isSafePath(resolved)) {
-      paths.push(resolved);
-    }
-  }
+  paths.push(...extractUnquotedTildePaths(sanitized, home));
   const quotedPattern = /["']([^"']+)["']/g;
+  let match;
   while ((match = quotedPattern.exec(sanitized)) !== null) {
     const content = match[1];
     if (content.startsWith("/") && content.endsWith("/")) {
@@ -192,13 +330,6 @@ function extractAbsolutePathsFromCommand(command) {
       if (!isSafePath(resolved)) {
         paths.push(resolved);
       }
-    } else if (content.startsWith("~")) {
-      const pathPart = content.slice(1);
-      const fullPath = join(home, pathPart);
-      const resolved = normalize(resolve(fullPath));
-      if (!isSafePath(resolved)) {
-        paths.push(resolved);
-      }
     }
   }
   if (isWindows()) {
@@ -214,6 +345,10 @@ function extractAbsolutePathsFromCommand(command) {
   }
   if (posixShell) {
     const absolutePattern = /(?:^|[\s=(])(\/[^\s"'|&;<>`()]+)/g;
+    const rootPattern = /(?:^|[\s=(])\/(?=$|[\s'"`|&;,<()])/g;
+    if (rootPattern.test(sanitized)) {
+      paths.push("/");
+    }
     while ((match = absolutePattern.exec(sanitized)) !== null) {
       const candidate = match[1];
       if (isPlaceholderToken(candidate)) continue;
@@ -225,6 +360,7 @@ function extractAbsolutePathsFromCommand(command) {
       }
     }
   }
+  paths.push(...extractRelativeTraversals(sanitized));
   return [...new Set(paths)];
 }
 function extractSensitivePathsFromCommand(command) {
@@ -535,4 +671,4 @@ export {
   getConfirmationSessionId,
   getPendingConfirmationsBySession
 };
-//# sourceMappingURL=chunk-6KPJLELC.js.map
+//# sourceMappingURL=chunk-QQVPUZQB.js.map

package/dist/{chunk-ERNWAKUB.js → chunk-TGVDUK4N.js}

@@ -1,6 +1,6 @@
 import {
   updateSessionMessageCount
-} from "./chunk-VWEATA7R.js";
+} from "./chunk-KLQEL2DZ.js";
 import {
   buildContextMessagesFromEventHistory,
   buildMessagesFromStoredEvents,
@@ -1465,4 +1465,4 @@ export {
   truncateSessionMessages,
   getRecentUserPromptsForSession
 };
-//# sourceMappingURL=chunk-ERNWAKUB.js.map
+//# sourceMappingURL=chunk-TGVDUK4N.js.map

package/dist/{chunk-V4IE7HJY.js → chunk-W7VIYHPQ.js}

@@ -3,7 +3,7 @@ var DEFAULT_PROFILE = {
   name: "default",
   temperature: 0.7,
   topP: 0.9,
-  defaultMaxTokens: 4096,
+  defaultMaxTokens: 16384,
   supportsVision: true
 };
 var MOCK_PROFILE = {
@@ -172,4 +172,4 @@ export {
   getModelProfile,
   modelSupportsVision
 };
-//# sourceMappingURL=chunk-V4IE7HJY.js.map
+//# sourceMappingURL=chunk-W7VIYHPQ.js.map