openfox 2.0.129 → 2.0.130

package/dist/{chunk-H6YIVK67.js → chunk-JSONBGSY.js}

@@ -1,6 +1,3 @@
-import {
-  parseDefaultModelSelection
-} from "./chunk-JQMQ4DGC.js";
 import {
   deleteItemFromDir,
   getDefaultIds,
@@ -9,6 +6,9 @@ import {
   pathExists,
   saveItemToDir
 } from "./chunk-OSXPQSLW.js";
+import {
+  parseDefaultModelSelection
+} from "./chunk-CYQUM42E.js";
 import {
   getProject
 } from "./chunk-3B232XG4.js";
@@ -212,6 +212,25 @@ async function loadAllWorkflows(configDir, projectDir) {
   }
   return Array.from(workflowMap.values());
 }
+async function listAvailableWorkflows(configDir, projectDir) {
+  const [defaultWorkflows, userWorkflows, projectWorkflows] = await Promise.all([
+    loadDefaultWorkflows(),
+    loadUserWorkflows(configDir),
+    projectDir ? loadProjectWorkflows(projectDir) : Promise.resolve([])
+  ]);
+  const projectIds = new Set(projectWorkflows.map((w) => w.metadata.id));
+  const userIds = new Set(userWorkflows.map((w) => w.metadata.id));
+  const effective = [...defaultWorkflows, ...userWorkflows, ...projectWorkflows];
+  const byId = new Map(effective.map((w) => [w.metadata.id, w]));
+  return Array.from(byId.values()).map((workflow) => ({
+    id: workflow.metadata.id,
+    name: workflow.metadata.name,
+    description: workflow.metadata.description,
+    ...workflow.metadata.color ? { color: workflow.metadata.color } : {},
+    scope: projectIds.has(workflow.metadata.id) ? "project" : userIds.has(workflow.metadata.id) ? "user" : "builtin",
+    ...workflow.metadata.parameters ? { parameters: workflow.metadata.parameters } : {}
+  }));
+}
 async function saveWorkflowToProject(projectDir, workflow) {
   await saveItemToDir(getProjectWorkflowsDir(projectDir), workflow, WORKFLOW_EXTENSION, jsonSerializer);
 }
@@ -1085,6 +1104,7 @@ export {
   loadUserWorkflows,
   loadProjectWorkflows,
   loadAllWorkflows,
+  listAvailableWorkflows,
   saveWorkflowToProject,
   deleteProjectWorkflow,
   getDefaultWorkflowIds,
@@ -1099,4 +1119,4 @@ export {
   isTaskGateError,
   createTasksService
 };
-//# sourceMappingURL=chunk-H6YIVK67.js.map
+//# sourceMappingURL=chunk-JSONBGSY.js.map

package/dist/{chunk-HO7A7TMF.js → chunk-KHKRHGA6.js}

@@ -25,6 +25,7 @@ Commands:
   provider remove  Remove a provider
   service          Manage the systemd service (install, start, stop, status, logs, uninstall)
   pwa              Manage the PWA installation (install, uninstall, launch, update, status)
+  mcp              Print a paste-ready MCP client config for this server (asks for the password if set)
   install          Install a persistent OpenFox launcher (use --check to inspect)
   update           Update OpenFox to the latest version
 
@@ -36,7 +37,7 @@ Options:
 `);
 }
 async function runNetworkSetup(mode) {
-  const { loadAuthConfig, saveAuthConfig, encryptPassword } = await import("./auth-GTGIGX5X.js");
+  const { loadAuthConfig, saveAuthConfig, encryptPassword } = await import("./auth-D3WLIBTG.js");
   const { saveGlobalConfig } = await import("./config-LOK3LXFH.js");
   const { getAuthKeyPath } = await import("./paths-BHR7CZ7I.js");
   const existingAuth = await loadAuthConfig(mode);
@@ -131,6 +132,7 @@ async function runCli(options) {
   const { values, positionals } = parseArgs({
     options: {
       port: { type: "string", short: "p" },
+      password: { type: "string" },
       "no-browser": { type: "boolean" },
       help: { type: "boolean", short: "h" },
       version: { type: "boolean", short: "v" },
@@ -163,7 +165,7 @@ async function runCli(options) {
       break;
     }
     case "provider": {
-      const { runProviderCommand } = await import("./provider-DXEICEIE.js");
+      const { runProviderCommand } = await import("./provider-CVM33XHW.js");
       const [, subcommand] = positionals;
       await runProviderCommand(mode, subcommand);
       break;
@@ -191,6 +193,14 @@ async function runCli(options) {
       }
       break;
     }
+    case "mcp": {
+      const { runMcpCommand } = await import("./mcp-YU7AM3UV.js");
+      const mcpOptions = {};
+      if (values.password) mcpOptions.password = values.password;
+      if (values.port) mcpOptions.port = parseInt(values.port);
+      await runMcpCommand(mode, mcpOptions);
+      break;
+    }
     case "install": {
       const { runInstall } = await import("./install-VA2F6X6Z.js");
       const code = await runInstall({ check: values.check === true });
@@ -200,7 +210,7 @@ async function runCli(options) {
       break;
     }
     case "update": {
-      const { runUpdate } = await import("./update-EJUI6PSV.js");
+      const { runUpdate } = await import("./update-QRGK67DB.js");
       const code = await runUpdate();
       if (code !== 0) {
         process.exit(code);
@@ -213,7 +223,7 @@ async function runCli(options) {
       if (!configExists) {
         await runNetworkSetup(mode);
       }
-      const { runServe } = await import("./serve-Z5ITDPCQ.js");
+      const { runServe } = await import("./serve-KQAPXO5X.js");
       const serveOptions = { mode };
       if (values.port) serveOptions.port = parseInt(values.port);
       if (values["no-browser"] === true) serveOptions.openBrowser = false;
@@ -225,4 +235,4 @@ async function runCli(options) {
 export {
   runCli
 };
-//# sourceMappingURL=chunk-HO7A7TMF.js.map
+//# sourceMappingURL=chunk-KHKRHGA6.js.map

package/dist/{chunk-K2QKX4ZJ.js → chunk-OA2FURC3.js}

@@ -24,8 +24,14 @@ function findLmStudioModel(raw, modelId) {
   return parseLmStudioModels(raw).find((model) => model.id === modelId);
 }
 
+// src/server/providers/vision.ts
+function hasVisionEvidence(modelInfo) {
+  return !!modelInfo["vision_start_token_id"] || Object.keys(modelInfo).some((k) => k.includes(".vision") || k.includes("vision_"));
+}
+
 export {
   parseLmStudioModels,
-  findLmStudioModel
+  findLmStudioModel,
+  hasVisionEvidence
 };
-//# sourceMappingURL=chunk-K2QKX4ZJ.js.map
+//# sourceMappingURL=chunk-OA2FURC3.js.map

package/dist/{chunk-ZFNBATE3.js → chunk-OXMOKQPW.js}

@@ -1,7 +1,7 @@
 import {
   SETTINGS_KEYS,
   getSetting
-} from "./chunk-N2Q3KYWM.js";
+} from "./chunk-3DZSHRXE.js";
 import {
   logger
 } from "./chunk-K44MW7JJ.js";
@@ -190,7 +190,8 @@ export {
   SessionNotFoundError,
   LLMError,
   WorkspaceInUseError,
+  DONE,
   ChatHttpClient,
   OpenAIHttpClient
 };
-//# sourceMappingURL=chunk-ZFNBATE3.js.map
+//# sourceMappingURL=chunk-OXMOKQPW.js.map

package/dist/{chunk-567L5OJ6.js → chunk-P57IBMK4.js}

@@ -4,7 +4,7 @@ import {
 import {
   createServerMessage,
   isClientMessage
-} from "./chunk-ATWOXI52.js";
+} from "./chunk-HCYSGLY2.js";
 
 // src/server/session/client-session.ts
 function toClientSession(session) {
@@ -378,4 +378,4 @@ export {
   createQueueStateMessage,
   storedEventToServerMessage
 };
-//# sourceMappingURL=chunk-567L5OJ6.js.map
+//# sourceMappingURL=chunk-P57IBMK4.js.map

package/dist/{session-status-6Q5B5PEN.js → chunk-T3S5MTMD.js}

@@ -1,5 +1,3 @@
-import "./chunk-YLJ4XMA6.js";
-
 // src/server/routes/session-status.ts
 var SESSION_STATUS_SCHEMA_VERSION = 1;
 function projectSessionStatus(inputs) {
@@ -28,8 +26,9 @@ function projectSessionStatus(inputs) {
     }
   };
 }
+
 export {
   SESSION_STATUS_SCHEMA_VERSION,
   projectSessionStatus
 };
-//# sourceMappingURL=session-status-6Q5B5PEN.js.map
+//# sourceMappingURL=chunk-T3S5MTMD.js.map

package/dist/{chunk-7ZMOP5LS.js → chunk-TS5WKTFB.js}

@@ -157,6 +157,23 @@ var MODEL_PROFILES = [
       supportsVision: false
     }
   },
+  {
+    pattern: "gpt-5",
+    profile: {
+      name: "GPT-5",
+      // OpenAI's gpt-5 family only accepts temperature = 1 (and top_p = 1);
+      // any other value is rejected with a 400.
+      temperature: 1,
+      topP: 1,
+      defaultMaxTokens: 16384,
+      supportsVision: true,
+      // gpt-5 is a Responses-API family: /v1/chat/completions rejects tools
+      // with any reasoning_effort other than "none", while /v1/responses
+      // supports tools + effort together. Route it there on the openai
+      // backend; on chat completions the request builder clamps the effort.
+      apiProtocol: "responses"
+    }
+  },
   {
     pattern: "gemma-4",
     profile: {
@@ -188,4 +205,4 @@ export {
   getModelProfile,
   modelSupportsVision
 };
-//# sourceMappingURL=chunk-7ZMOP5LS.js.map
+//# sourceMappingURL=chunk-TS5WKTFB.js.map

package/dist/{chunk-PBFGJFGC.js → chunk-UV6IH6HK.js}

@@ -4,60 +4,81 @@ var BACKEND_CAPABILITIES = {
     supportsChatTemplateKwargs: true,
     supportsTopK: true,
     supportsNumCtx: false,
-    routesEffortViaChatTemplateKwargs: false
+    routesEffortViaChatTemplateKwargs: false,
+    usesMaxCompletionTokens: false
   },
   sglang: {
     supportsChatTemplateKwargs: true,
     supportsTopK: true,
     supportsNumCtx: false,
-    routesEffortViaChatTemplateKwargs: false
+    routesEffortViaChatTemplateKwargs: false,
+    usesMaxCompletionTokens: false
   },
   openai: {
     supportsChatTemplateKwargs: false,
     supportsTopK: false,
     supportsNumCtx: false,
-    routesEffortViaChatTemplateKwargs: false
+    routesEffortViaChatTemplateKwargs: false,
+    usesMaxCompletionTokens: true
   },
   anthropic: {
     supportsChatTemplateKwargs: false,
     supportsTopK: false,
     supportsNumCtx: false,
-    routesEffortViaChatTemplateKwargs: false
+    routesEffortViaChatTemplateKwargs: false,
+    usesMaxCompletionTokens: false
   },
   ollama: {
     supportsChatTemplateKwargs: false,
     supportsTopK: false,
     supportsNumCtx: true,
-    routesEffortViaChatTemplateKwargs: false
+    routesEffortViaChatTemplateKwargs: false,
+    usesMaxCompletionTokens: false
   },
   llamacpp: {
     supportsChatTemplateKwargs: false,
     supportsTopK: true,
     supportsNumCtx: false,
-    routesEffortViaChatTemplateKwargs: true
+    routesEffortViaChatTemplateKwargs: true,
+    usesMaxCompletionTokens: false
   },
   lmstudio: {
     supportsChatTemplateKwargs: false,
     supportsTopK: true,
     supportsNumCtx: false,
-    routesEffortViaChatTemplateKwargs: false
+    routesEffortViaChatTemplateKwargs: false,
+    usesMaxCompletionTokens: false
   },
   "opencode-go": {
     supportsChatTemplateKwargs: false,
     supportsTopK: true,
     supportsNumCtx: false,
-    routesEffortViaChatTemplateKwargs: false
+    routesEffortViaChatTemplateKwargs: false,
+    usesMaxCompletionTokens: false
   },
   unknown: {
     supportsChatTemplateKwargs: true,
     supportsTopK: true,
     supportsNumCtx: false,
-    routesEffortViaChatTemplateKwargs: false
+    routesEffortViaChatTemplateKwargs: false,
+    usesMaxCompletionTokens: false
   }
 };
 function getBackendCapabilities(backend) {
   return BACKEND_CAPABILITIES[backend];
 }
+var HOST_BACKEND_MAP = {
+  "api.openai.com": "openai",
+  "api.anthropic.com": "anthropic"
+};
+function detectBackendFromUrl(url) {
+  try {
+    const host = new URL(url).hostname.toLowerCase();
+    return HOST_BACKEND_MAP[host];
+  } catch {
+    return void 0;
+  }
+}
 function getBackendDisplayName(backend) {
   switch (backend) {
     case "vllm":
@@ -83,6 +104,7 @@ function getBackendDisplayName(backend) {
 
 export {
   getBackendCapabilities,
+  detectBackendFromUrl,
   getBackendDisplayName
 };
-//# sourceMappingURL=chunk-PBFGJFGC.js.map
+//# sourceMappingURL=chunk-UV6IH6HK.js.map

package/dist/{chunk-26WS7AH6.js → chunk-VJNA5AOB.js}

@@ -1,12 +1,12 @@
 import {
   getEventStore
-} from "./chunk-YJD5A375.js";
+} from "./chunk-AYCB32NI.js";
 import {
   createChatPathConfirmationMessage
-} from "./chunk-567L5OJ6.js";
+} from "./chunk-P57IBMK4.js";
 import {
   getPlatformShell
-} from "./chunk-66MG44TF.js";
+} from "./chunk-6QZVAOSA.js";
 
 // src/server/tools/path-security.ts
 import { realpath } from "fs/promises";
@@ -351,8 +351,39 @@ function resolveRelativeTraversals(command, workdir) {
   flush();
   return [...new Set(out)];
 }
+function maskHeredocs(command) {
+  if (!command.includes("<<")) return command;
+  const lines = command.split("\n");
+  const starts = [];
+  for (let i = 0; i < lines.length; i++) {
+    const m = lines[i].match(/<<\s*(-?)(['"]?)([A-Za-z_][A-Za-z0-9_]*)\2/);
+    if (m) {
+      starts.push({ line: i, delimiter: m[3], stripTabs: m[1] === "-" });
+    }
+  }
+  const maskSpans = [];
+  let searchFrom = 0;
+  for (const start of starts) {
+    if (start.line < searchFrom) continue;
+    let end = -1;
+    for (let j = start.line + 1; j < lines.length; j++) {
+      const candidate = start.stripTabs ? lines[j].replace(/^\t+/, "") : lines[j];
+      if (candidate === start.delimiter) {
+        end = j;
+        break;
+      }
+    }
+    if (end !== -1) {
+      maskSpans.push([start.line + 1, end]);
+      searchFrom = end + 1;
+    }
+  }
+  if (maskSpans.length === 0) return command;
+  return lines.map((line, idx) => maskSpans.some(([s, e]) => idx >= s && idx < e) ? " ".repeat(line.length) : line).join("\n");
+}
 function maskCommandForPathScan(command) {
-  let sanitized = command.replace(/https?:\/\/[^\s'"]+/g, " __URL__ ").replace(/ftp:\/\/[^\s'"]+/g, " __URL__ ");
+  let sanitized = maskHeredocs(command);
+  sanitized = sanitized.replace(/https?:\/\/[^\s'"]+/g, " __URL__ ").replace(/ftp:\/\/[^\s'"]+/g, " __URL__ ");
   sanitized = sanitized.replace(/(?<!\w)s\/[^/]*\/[^/]*\/[gip]*/g, " __SED__ ");
   sanitized = sanitized.replace(/(?<!\w)s\|[^|]*\|[^|]*\|[gip]*/g, " __SED__ ");
   sanitized = sanitized.replace(/(?<!\w)s:[^:]*:[^:]*:[gip]*/g, " __SED__ ");
@@ -446,15 +477,16 @@ function extractSensitivePathsFromCommand(command) {
     return [];
   }
   const paths = [];
+  const scanCommand = maskHeredocs(command);
   const quotedPattern = /["']([^"']+)["']/g;
   let match;
-  while ((match = quotedPattern.exec(command)) !== null) {
+  while ((match = quotedPattern.exec(scanCommand)) !== null) {
     const content = match[1];
     if (isSensitivePath(content)) {
       paths.push(content);
     }
   }
-  const unquoted = command.replace(/["'][^"']*["']/g, " ").replace(/[|&;><]/g, " ");
+  const unquoted = scanCommand.replace(/["'][^"']*["']/g, " ").replace(/[|&;><]/g, " ");
   const tokens = unquoted.split(/\s+/).filter(Boolean);
   for (const token of tokens) {
     if (token.startsWith("-")) continue;
@@ -750,4 +782,4 @@ export {
   getConfirmationSessionId,
   getPendingConfirmationsBySession
 };
-//# sourceMappingURL=chunk-26WS7AH6.js.map
+//# sourceMappingURL=chunk-VJNA5AOB.js.map

package/dist/{chunk-IJFKJ5D6.js → chunk-VUIXQ6X4.js}

@@ -1,12 +1,12 @@
 import {
   createMessageStartEvent
-} from "./chunk-6LX43YRA.js";
+} from "./chunk-7ET46SNE.js";
 import {
   COMPACTION_PROMPT
-} from "./chunk-GIJUWPRQ.js";
+} from "./chunk-CGCEAKG5.js";
 import {
   getCurrentWindowMessageOptions
-} from "./chunk-YJD5A375.js";
+} from "./chunk-AYCB32NI.js";
 
 // src/server/context/compactor.ts
 function appendCompactionPrompt(sessionId, append) {
@@ -36,4 +36,4 @@ export {
   COMPACTION_MAX_RATIO,
   shouldCompact
 };
-//# sourceMappingURL=chunk-IJFKJ5D6.js.map
+//# sourceMappingURL=chunk-VUIXQ6X4.js.map