openfox 2.0.135 → 2.0.137

package/dist/{chunk-BIZFY3QP.js → chunk-RS7I4W5A.js}

@@ -1,3 +1,15 @@
+import {
+  createWebSocketServer,
+  currentSessionToken,
+  getAuthConfig,
+  hasPassword,
+  isValidToken,
+  loadServerAuthConfig,
+  requiresAuth,
+  terminalManager,
+  tokenFromPassword,
+  verifyPassword
+} from "./chunk-ZJ2IHOVN.js";
 import {
   projectSessionStatus
 } from "./chunk-T3S5MTMD.js";
@@ -13,21 +25,9 @@ import {
   setMcpOAuthStoreMode,
   setMcpOAuthStorePath
 } from "./chunk-IJ53Y77N.js";
-import {
-  createWebSocketServer,
-  currentSessionToken,
-  getAuthConfig,
-  hasPassword,
-  isValidToken,
-  loadServerAuthConfig,
-  requiresAuth,
-  terminalManager,
-  tokenFromPassword,
-  verifyPassword
-} from "./chunk-GP3CLMPQ.js";
 import {
   TEMPLATE_VARIABLES
-} from "./chunk-5H5NRWHA.js";
+} from "./chunk-LQPAM55V.js";
 import {
   createToolRegistry,
   devServerManager,
@@ -42,7 +42,26 @@ import {
   setMcpManagerForTools,
   setMcpTools,
   setNotifyMcpServersChanged
-} from "./chunk-ESZQTFQP.js";
+} from "./chunk-ZQENKB7X.js";
+import {
+  deleteOwnedSkill,
+  deleteProjectSkill,
+  deleteSkill,
+  findSkillById,
+  getDefaultSkillIds,
+  isDefaultSkill,
+  isSkillEnabled,
+  loadAllSkills,
+  loadAllSkillsWithDiagnostics,
+  loadDefaultSkills,
+  loadProjectSkills,
+  loadUserSkills,
+  saveSkill,
+  saveSkillToProject,
+  setSkillEnabled,
+  skillExists,
+  updateOwnedSkill
+} from "./chunk-Q33DL67W.js";
 import {
   checkoutBranchFromSharedSource,
   deleteWorkspace,
@@ -86,49 +105,35 @@ import {
   saveCommandToProject,
   saveWorkflow,
   saveWorkflowToProject,
-  serverT,
   workflowExists
-} from "./chunk-OZWHRBDY.js";
+} from "./chunk-QBWJCO5K.js";
 import {
+  clearSessionOverrides,
+  computeDisabledServersForProject,
   getSessionDisabledServers,
+  initSessionMcpOverrides,
   setSessionDisabledServers
-} from "./chunk-S67WIWUG.js";
+} from "./chunk-DG2YSWMC.js";
 import {
-  createMcpTools
-} from "./chunk-JE7LW7Y6.js";
-import {
-  deleteOwnedSkill,
-  deleteProjectSkill,
-  deleteSkill,
-  findSkillById,
-  getDefaultSkillIds,
-  isDefaultSkill,
-  isSkillEnabled,
-  loadAllSkills,
-  loadAllSkillsWithDiagnostics,
-  loadDefaultSkills,
-  loadProjectSkills,
-  loadUserSkills,
-  saveSkill,
-  saveSkillToProject,
-  setSkillEnabled,
-  skillExists,
-  updateOwnedSkill
-} from "./chunk-DWA4IE65.js";
+  serverT
+} from "./chunk-4SBVW4UH.js";
 import {
   ALWAYS_ALLOWED,
   ALWAYS_ALLOWED_FOR_SUBAGENTS,
   TOP_LEVEL_ONLY_TOOLS
-} from "./chunk-7QMWYNVF.js";
+} from "./chunk-4LLGI372.js";
+import {
+  createMcpTools
+} from "./chunk-VIJVLLPT.js";
 import {
   EventEmitter,
   getPendingQuestionsForSession,
   provideAnswer
-} from "./chunk-JURM3RPZ.js";
+} from "./chunk-V5AC2TV7.js";
 import {
   getPendingConfirmationsBySession,
   providePathConfirmation
-} from "./chunk-I5ODJKYM.js";
+} from "./chunk-XWWRZSK7.js";
 import {
   combineEventsWithSnapshot,
   emitAssistantMessageStart,
@@ -146,10 +151,10 @@ import {
   getEventStore,
   getSessionState,
   initEventStore
-} from "./chunk-QZOV4OVN.js";
+} from "./chunk-2OO46UAW.js";
 import {
   buildMessagesFromStoredEvents
-} from "./chunk-MEEUXRFL.js";
+} from "./chunk-MMGHIPBU.js";
 import {
   clearWorkflowExecution,
   createSession,
@@ -176,7 +181,7 @@ import {
   updateSessionRunning,
   updateSessionWorkdir,
   updateWorkflowExecutionStatus
-} from "./chunk-F2MOHHXB.js";
+} from "./chunk-X4PVR6AW.js";
 import {
   agentExists,
   deleteAgent,
@@ -193,7 +198,7 @@ import {
   saveAgent,
   saveAgentToProject,
   setRuntimeConfig
-} from "./chunk-ORCQ3EXQ.js";
+} from "./chunk-BHVR2YS5.js";
 import {
   findFileByInternalId,
   pathExists
@@ -205,19 +210,19 @@ import {
 import {
   getPathSeparator,
   isAbsolutePath
-} from "./chunk-O3RCSKUH.js";
+} from "./chunk-MOYWDP73.js";
 import {
   createProviderManager,
   detectModel,
   getLlmStatus,
   parseDefaultModelSelection
-} from "./chunk-5UQ4CKOA.js";
+} from "./chunk-G5GUQKLS.js";
 import {
   buildOpenFoxMcpBootstrap
 } from "./chunk-YNMP647F.js";
 import {
   VERSION
-} from "./chunk-WY3PWHWY.js";
+} from "./chunk-FG4G4EWB.js";
 import {
   deleteProject,
   getProject,
@@ -230,25 +235,29 @@ import {
 import {
   detectBackendFromUrl,
   getBackendDisplayName
-} from "./chunk-UV6IH6HK.js";
+} from "./chunk-AKWJMMEJ.js";
 import {
   buildModelsUrl
 } from "./chunk-HNCM3D7Y.js";
+import {
+  sanitizeToolSchema
+} from "./chunk-XG3AUMPI.js";
 import {
   SessionNotFoundError,
   WorkspaceInUseError
-} from "./chunk-J3NMNYGM.js";
+} from "./chunk-N5JKVNLH.js";
 import {
   deleteSetting,
   getSetting,
   setSetting
-} from "./chunk-CTWZPN7G.js";
+} from "./chunk-QUAEH3MP.js";
 import {
   initDatabase
 } from "./chunk-JU757HVI.js";
 import {
+  isReasoningEffortValidForModel,
   isReasoningEffortValue
-} from "./chunk-2AI7VYPN.js";
+} from "./chunk-VKMPR25F.js";
 import {
   logger,
   setLogLevel
@@ -1735,7 +1744,7 @@ var McpManager = class {
           function: {
             name: `${entry.state.name}_${tool.name}`,
             description: tool.description ?? "",
-            parameters: tool.inputSchema
+            parameters: sanitizeToolSchema(tool.inputSchema)
           }
         });
       }
@@ -2826,6 +2835,9 @@ var SessionManager = class {
   announcedPromptHashStore = /* @__PURE__ */ new Map();
   announcedToolFingerprintStore = /* @__PURE__ */ new Map();
   warmedUpSessions = /* @__PURE__ */ new Set();
+  // Sessions already warned about an unresolvable provider — getContextState runs on every
+  // turn, and the warning is only worth one line per session.
+  unknownProviderWarned = /* @__PURE__ */ new Set();
   switchLocks = /* @__PURE__ */ new Map();
   workspaceCreationLocks = /* @__PURE__ */ new Map();
   constructor(providerManager) {
@@ -3010,6 +3022,10 @@ var SessionManager = class {
     const contextWindowId = crypto.randomUUID();
     emitSessionInitialized(dbSession.id, projectId, effectiveWorkdir, contextWindowId, sessionTitle);
     const session = this.buildSessionFromDb(dbSession);
+    try {
+      initSessionMcpOverrides(session.id, projectId, project.mcpOverrides);
+    } catch {
+    }
     getGitBranch(effectiveWorkdir).then((branch) => {
       if (branch) {
         updateSessionBranch(session.id, branch);
@@ -3094,6 +3110,10 @@ var SessionManager = class {
       updateSessionCachedPrompt(newSession.id, cached2.systemPrompt, cached2.tools, cached2.hash, cached2.promptHash);
       this.markWarmedUp(newSession.id);
     }
+    const parentDisabledServers = getSessionDisabledServers(originalSessionId);
+    if (parentDisabledServers.length > 0) {
+      setSessionDisabledServers(newSession.id, parentDisabledServers);
+    }
     this.emit({ type: "session_updated", session: this.requireSession(newSession.id) });
     return this.requireSession(newSession.id);
   }
@@ -3112,9 +3132,9 @@ var SessionManager = class {
    * @throws Error for invalid payloads or unknown project
    */
   async importSession(projectId, rawPayload) {
-    const { parseSessionExport, IMPORTED_SESSION_REMINDER, SESSION_EXPORT_VERSION } = await import("./export-import-3WMRLO4A.js");
-    const { injectContextDriftReminders, getToolSetFingerprint } = await import("./dynamic-context-LKC6JYLQ.js");
-    const { loadAllAgentsDefault: loadAllAgentsDefault2, resolveDefaultAgentId } = await import("./registry-BEIR7Y5G.js");
+    const { parseSessionExport, IMPORTED_SESSION_REMINDER, SESSION_EXPORT_VERSION } = await import("./export-import-6OUEANYH.js");
+    const { injectContextDriftReminders, getToolSetFingerprint } = await import("./dynamic-context-HL4RGNHK.js");
+    const { loadAllAgentsDefault: loadAllAgentsDefault2, resolveDefaultAgentId } = await import("./registry-FMDMGIUB.js");
     const payload = parseSessionExport(rawPayload);
     if (payload.version !== SESSION_EXPORT_VERSION) {
       throw new Error(`Unsupported session export version: ${payload.version}`);
@@ -3251,6 +3271,8 @@ var SessionManager = class {
     this.warmedUpSessions.delete(id);
     this.announcedPromptHashStore.delete(id);
     this.announcedToolFingerprintStore.delete(id);
+    this.unknownProviderWarned.delete(id);
+    clearSessionOverrides(id);
     deleteSession(id);
     if (this.activeSessionId === id) {
       this.activeSessionId = null;
@@ -3363,6 +3385,7 @@ var SessionManager = class {
     if (providerId === null || providerManual === true) {
       this.clearSessionPinnedEffort(sessionId);
     }
+    this.unknownProviderWarned.delete(sessionId);
     const updatedSession = this.requireSession(sessionId);
     this.emit({ type: "session_updated", session: updatedSession });
     return updatedSession;
@@ -4029,7 +4052,21 @@ var SessionManager = class {
   getContextState(sessionId) {
     const providerManager = this.providerManager;
     const { providerId, model } = this.resolveEffectiveProviderModel(sessionId);
-    const maxTokens = providerId && model ? this.resolveModelContext(providerId, model) ?? providerManager.getCurrentModelContext() : providerManager.getCurrentModelContext();
+    let maxTokens = providerManager.getCurrentModelContext();
+    if (providerId && model) {
+      const resolved = this.resolveModelContext(providerId, model);
+      if (resolved !== void 0) {
+        maxTokens = resolved;
+      } else {
+        if (!this.unknownProviderWarned.has(sessionId)) {
+          this.unknownProviderWarned.add(sessionId);
+          logger.warn("Session references an unknown provider, falling back to the global context window", {
+            sessionId,
+            providerId
+          });
+        }
+      }
+    }
     const state = getSessionState(sessionId, maxTokens);
     const dynamicContextChanged = this.getDynamicContextChanged(sessionId);
     const debugDump = this.debugDumpStore.get(sessionId);
@@ -4391,6 +4428,25 @@ All file and git operations should use this directory.${commitHint}
   }
 };
 
+// src/server/session/provider-reconcile.ts
+function clearSessionProviderWhere(isDangling) {
+  let cleared = 0;
+  for (const session of listSessions()) {
+    if (session.providerId && isDangling(session.providerId)) {
+      updateSessionProvider(session.id, null, null);
+      cleared++;
+    }
+  }
+  return cleared;
+}
+function clearSessionsForDeletedProvider(providerId) {
+  return clearSessionProviderWhere((pinned) => pinned === providerId);
+}
+function reconcileSessionProviders(configuredProviderIds) {
+  const configured = new Set(configuredProviderIds);
+  return clearSessionProviderWhere((pinned) => !configured.has(pinned));
+}
+
 // src/server/routes/skills.ts
 import { Router as Router2 } from "express";
 import multer from "multer";
@@ -6043,10 +6099,11 @@ function createWorkspaceConfigRoutes(sessionManager) {
       if (mcpOverrides !== void 0) {
         const project = getProjectByWorkdir(workdir);
         if (project) {
+          const overridesObj = Object.keys(mcpOverrides).length > 0 ? mcpOverrides : null;
           updateProject(project.id, {
-            mcpOverrides: Object.keys(mcpOverrides).length > 0 ? mcpOverrides : null
+            mcpOverrides: overridesObj
           });
-          const disabledServers = Object.entries(mcpOverrides).filter(([, override]) => override.disabled).map(([name]) => name);
+          const disabledServers = computeDisabledServersForProject(overridesObj);
           const allSessions = sessionManager.listSessions();
           for (const s of allSessions) {
             if (s.projectId === project.id) {
@@ -7046,7 +7103,7 @@ function detectWsl() {
 // src/server/index.ts
 var __dirname3 = dirname7(fileURLToPath6(import.meta.url));
 async function announceContextDrift(sessionManager, sessionIds) {
-  const { injectContextDriftRemindersForSessions } = await import("./dynamic-context-LKC6JYLQ.js");
+  const { injectContextDriftRemindersForSessions } = await import("./dynamic-context-HL4RGNHK.js");
   await injectContextDriftRemindersForSessions(sessionManager, sessionIds);
 }
 async function createServerHandle(config3) {
@@ -7070,6 +7127,10 @@ async function createServerHandle(config3) {
   }
   config3.providers = providerAdapters.resolveProviders(config3.providers ?? []);
   const providerManager = createProviderManager(config3, { adapters: providerAdapters });
+  const repairedSessions = reconcileSessionProviders(providerManager.getProviders().map((p) => p.id));
+  if (repairedSessions > 0) {
+    logger.warn("Cleared unknown provider from sessions", { sessions: repairedSessions });
+  }
   const sessionManager = new SessionManager(providerManager);
   devServerManager.setSessionManager(sessionManager);
   const useMock = process.env["OPENFOX_MOCK_LLM"] === "true";
@@ -7135,6 +7196,10 @@ async function createServerHandle(config3) {
     }
   });
   setMcpManagerForTools(mcpManager);
+  const { setGlobalMcpServersProvider } = await import("./session-overrides-ANQBKV74.js");
+  setGlobalMcpServersProvider(
+    () => mcpManager.getAllServers().map((s) => ({ name: s.name, disabled: s.config.disabled }))
+  );
   setMcpConfigMode(config3.mode ?? "production");
   setMcpConfigPath(config3.globalConfigPath);
   setMcpOAuthStoreMode(config3.mode ?? "production");
@@ -7153,7 +7218,7 @@ async function createServerHandle(config3) {
       toolRegistry = createToolRegistry();
       logger.info("MCP tools registered", { count: mcpTools.length });
     }
-    const { signalMcpReady } = await import("./server-ZHEB7XS2.js");
+    const { signalMcpReady } = await import("./server-MI2LZK3W.js");
     signalMcpReady();
   });
   const app = express();
@@ -7368,9 +7433,9 @@ async function createServerHandle(config3) {
   const sessionFavoriteRouter = express.Router();
   registerSessionFavoriteRoute(sessionFavoriteRouter, sessionManager);
   app.use("/api", sessionFavoriteRouter);
-  const { createTasksService } = await import("./service-XIUNS5XV.js");
-  const { registerTaskRoutes } = await import("./tasks-3JJWJJ3X.js");
-  const { setTasksService } = await import("./tools-E63MOJBO.js");
+  const { createTasksService } = await import("./service-NKLQH647.js");
+  const { registerTaskRoutes } = await import("./tasks-GPM3JAE6.js");
+  const { setTasksService } = await import("./tools-WLJJ3ILO.js");
   const tasksService = createTasksService({
     sessionManager,
     config: config3,
@@ -7402,7 +7467,7 @@ async function createServerHandle(config3) {
     }
     try {
       await checkoutBranch(project.workdir, branch);
-      const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-AOK3AGHY.js");
+      const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-GLYACE5R.js");
       const allSessions = sessionManager.listSessions();
       for (const s of allSessions) {
         if (sessionManager.getEffectiveWorkdir(s.id) === project.workdir) {
@@ -7438,7 +7503,7 @@ async function createServerHandle(config3) {
         );
       }
       await createBranch(project.workdir, name, sb);
-      const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-AOK3AGHY.js");
+      const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-GLYACE5R.js");
       const allSessions = sessionManager.listSessions();
       for (const s of allSessions) {
         if (sessionManager.getEffectiveWorkdir(s.id) === project.workdir) {
@@ -7470,7 +7535,7 @@ async function createServerHandle(config3) {
     if (!branch || typeof branch !== "string") return res.status(400).json({ error: "branch is required" });
     const effectiveWorkdir = sessionManager.getEffectiveWorkdir(req.params.id);
     const { checkoutBranch, validateRef: validateRef2 } = await import("./workspace-LM646OHC.js");
-    const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-AOK3AGHY.js");
+    const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-GLYACE5R.js");
     try {
       await validateRef2(effectiveWorkdir, branch);
       await checkoutBranch(effectiveWorkdir, branch);
@@ -7513,7 +7578,7 @@ All file and git operations should use this branch.
     if (!name || typeof name !== "string") return res.status(400).json({ error: "name is required" });
     const effectiveWorkdir = sessionManager.getEffectiveWorkdir(req.params.id);
     const { validateRef: validateRef2 } = await import("./workspace-LM646OHC.js");
-    const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-AOK3AGHY.js");
+    const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-GLYACE5R.js");
     try {
       await validateRef2(effectiveWorkdir, name);
       if (sourceBranch) {
@@ -7568,8 +7633,8 @@ All file and git operations should use this branch.
     res.json({ workspaces: workspacesList });
   });
   app.get("/api/sessions", async (req, res) => {
-    const { getRecentUserPromptsForSession } = await import("./events-335XAKFK.js");
-    const { getPendingConfirmationsBySession: getPendingConfirmationsBySession2 } = await import("./path-security-4LROI7F4.js");
+    const { getRecentUserPromptsForSession } = await import("./events-ADE2KEHI.js");
+    const { getPendingConfirmationsBySession: getPendingConfirmationsBySession2 } = await import("./path-security-DND2R3RP.js");
     const projectId = req.query["projectId"];
     const rawLimit = req.query["limit"];
     const offset = parseInt(req.query["offset"]) || 0;
@@ -7641,19 +7706,6 @@ All file and git operations should use this branch.
     }
     const { providerId, model } = parseDefaultModelSelection(config3.defaultModelSelection);
     const session = sessionManager.createSession(projectId, title, providerId ?? null, model ?? null);
-    try {
-      let disabledServers = [];
-      if (project.mcpOverrides) {
-        disabledServers = Object.entries(project.mcpOverrides).filter(([, override]) => override.disabled).map(([name]) => name);
-      } else {
-        disabledServers = mcpManager.getAllServers().filter((s) => s.config.disabled).map((s) => s.name);
-      }
-      if (disabledServers.length > 0) {
-        const { setSessionDisabledServers: setSessionDisabledServers2 } = await import("./session-overrides-LYW5PJ3R.js");
-        setSessionDisabledServers2(session.id, disabledServers);
-      }
-    } catch {
-    }
     wssExports.broadcastForProject(projectId, session.id, buildSessionCreatedMessage(session));
     res.status(201).json({ session: toClientSession(session) });
   });
@@ -7700,10 +7752,10 @@ All file and git operations should use this branch.
     }
   });
   app.get("/api/sessions/:id", async (req, res) => {
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEventsWithSnapshot2 } = await import("./events-335XAKFK.js");
-    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2, foldPendingConfirmations } = await import("./folding-H7JTX6KI.js");
-    const { getPendingQuestionsForSession: getPendingQuestionsForSession2 } = await import("./tools-E63MOJBO.js");
-    const { getMaxVisibleItems } = await import("./settings-ZJPM6PQV.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEventsWithSnapshot2 } = await import("./events-ADE2KEHI.js");
+    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2, foldPendingConfirmations } = await import("./folding-CM63AVSB.js");
+    const { getPendingQuestionsForSession: getPendingQuestionsForSession2 } = await import("./tools-WLJJ3ILO.js");
+    const { getMaxVisibleItems } = await import("./settings-WH6BVQCP.js");
     const session = sessionManager.getSession(req.params.id);
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
@@ -7731,9 +7783,9 @@ All file and git operations should use this branch.
   });
   app.get("/api/sessions/:id/status", async (req, res) => {
     const { projectSessionStatus: projectSessionStatus2 } = await import("./session-status-UFO5IFI7.js");
-    const { getPendingQuestionsForSession: getPendingQuestionsForSession2 } = await import("./tools-E63MOJBO.js");
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEventsWithSnapshot2 } = await import("./events-335XAKFK.js");
-    const { foldPendingConfirmations } = await import("./folding-H7JTX6KI.js");
+    const { getPendingQuestionsForSession: getPendingQuestionsForSession2 } = await import("./tools-WLJJ3ILO.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEventsWithSnapshot2 } = await import("./events-ADE2KEHI.js");
+    const { foldPendingConfirmations } = await import("./folding-CM63AVSB.js");
     const sessionId = req.params["id"];
     if (!sessionId) {
       return res.status(400).json({ error: "Session id is required" });
@@ -7763,8 +7815,8 @@ All file and git operations should use this branch.
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-WGDFMOOD.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-E63MOJBO.js");
+    const { stopSessionExecution } = await import("./chat-handler-ZCPFNHTE.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-WLJJ3ILO.js");
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
     abortSession(sessionId);
@@ -7793,9 +7845,9 @@ All file and git operations should use this branch.
     res.json({ success: true });
   });
   app.post("/api/sessions/:id/provider", async (req, res) => {
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-335XAKFK.js");
-    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-H7JTX6KI.js");
-    const { getMaxVisibleItems } = await import("./settings-ZJPM6PQV.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-ADE2KEHI.js");
+    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-CM63AVSB.js");
+    const { getMaxVisibleItems } = await import("./settings-WH6BVQCP.js");
     const sessionId = req.params.id;
     const session = sessionManager.getSession(sessionId);
     if (!session) {
@@ -7805,10 +7857,11 @@ All file and git operations should use this branch.
     if (!providerId) {
       return res.status(400).json({ error: "providerId is required" });
     }
-    if (reasoningEffort !== void 0 && reasoningEffort !== null && !isReasoningEffortValue(reasoningEffort)) {
+    const provider = providerManager.getProviders().find((p) => p.id === providerId);
+    const targetModel = provider?.models.find((m) => m.id === model);
+    if (reasoningEffort !== void 0 && reasoningEffort !== null && !isReasoningEffortValidForModel(reasoningEffort, targetModel)) {
       return res.status(400).json({ error: `Unsupported reasoningEffort: ${reasoningEffort}` });
     }
-    const provider = providerManager.getProviders().find((p) => p.id === providerId);
     const resolvedModel = model ?? provider?.models?.[0]?.id ?? "auto";
     sessionManager.setSessionProvider(sessionId, providerId, resolvedModel, true, reasoningEffort);
     sessionManager.setSessionProviderActive(sessionId, true);
@@ -7823,9 +7876,9 @@ All file and git operations should use this branch.
     res.json({ session: toClientSession(updatedSession), messages, hiddenCount, contextState });
   });
   app.delete("/api/sessions/:id/provider", async (req, res) => {
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-335XAKFK.js");
-    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-H7JTX6KI.js");
-    const { getMaxVisibleItems } = await import("./settings-ZJPM6PQV.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-ADE2KEHI.js");
+    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-CM63AVSB.js");
+    const { getMaxVisibleItems } = await import("./settings-WH6BVQCP.js");
     const sessionId = req.params.id;
     const session = sessionManager.getSession(sessionId);
     if (!session) {
@@ -7849,7 +7902,9 @@ All file and git operations should use this branch.
       return res.status(404).json({ error: "Session not found" });
     }
     const { effort } = req.body;
-    if (!effort || !isReasoningEffortValue(effort)) {
+    const sessionModel = session.providerModel;
+    const targetModel = providerManager.getProviders().flatMap((p) => p.models).find((m) => m.id === sessionModel);
+    if (!effort || !isReasoningEffortValidForModel(effort, targetModel)) {
       return res.status(400).json({ error: `Unsupported reasoningEffort: ${effort}` });
     }
     const updated = sessionManager.setSessionPinnedEffort(sessionId, effort);
@@ -7955,9 +8010,9 @@ All file and git operations should use this branch.
     res.json({ success: true });
   });
   app.put("/api/sessions/:id/mode", async (req, res) => {
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-335XAKFK.js");
-    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-H7JTX6KI.js");
-    const { getMaxVisibleItems } = await import("./settings-ZJPM6PQV.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-ADE2KEHI.js");
+    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-CM63AVSB.js");
+    const { getMaxVisibleItems } = await import("./settings-WH6BVQCP.js");
     const sessionId = req.params.id;
     const session = sessionManager.getSession(sessionId);
     if (!session) {
@@ -8017,7 +8072,7 @@ All file and git operations should use this branch.
     setSessionDisabledServers(sessionId, disabledServers);
     const messages = session.messages ?? [];
     if (messages.length === 0) {
-      const { applyDynamicContext } = await import("./dynamic-context-LKC6JYLQ.js");
+      const { applyDynamicContext } = await import("./dynamic-context-HL4RGNHK.js");
       const modelName = session.providerModel ?? providerManager.getCurrentModel();
       await applyDynamicContext(sessionManager, sessionId, modelName);
     } else {
@@ -8051,7 +8106,7 @@ All file and git operations should use this branch.
     if (alwaysAllow !== void 0 && typeof alwaysAllow !== "boolean") {
       return res.status(400).json({ error: "alwaysAllow must be a boolean if provided" });
     }
-    const { providePathConfirmation: providePathConfirmation2, getConfirmationSessionId } = await import("./tools-E63MOJBO.js");
+    const { providePathConfirmation: providePathConfirmation2, getConfirmationSessionId } = await import("./tools-WLJJ3ILO.js");
     const pendingSessionId = getConfirmationSessionId(callId);
     if (!pendingSessionId) {
       return res.status(404).json({ error: "No pending path confirmation with that ID" });
@@ -8063,11 +8118,11 @@ All file and git operations should use this branch.
     if (!result.found) {
       return res.status(404).json({ error: "No pending path confirmation with that ID" });
     }
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEvents } = await import("./events-335XAKFK.js");
-    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2, foldPendingConfirmations } = await import("./folding-H7JTX6KI.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEvents } = await import("./events-ADE2KEHI.js");
+    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2, foldPendingConfirmations } = await import("./folding-CM63AVSB.js");
     const { createSessionStateMessage } = await import("./protocol-XO4ZROAU.js");
-    const { getPendingQuestionsForSession: getPendingQuestionsForSession2 } = await import("./tools-E63MOJBO.js");
-    const { getMaxVisibleItems } = await import("./settings-ZJPM6PQV.js");
+    const { getPendingQuestionsForSession: getPendingQuestionsForSession2 } = await import("./tools-WLJJ3ILO.js");
+    const { getMaxVisibleItems } = await import("./settings-WH6BVQCP.js");
     const eventStore = getEventStore2();
     const { snapshot, events: eventsSinceSnapshot } = eventStore.getEventsSinceSnapshot(sessionId);
     const events = combineEvents(sessionId, snapshot, eventsSinceSnapshot);
@@ -8104,7 +8159,7 @@ All file and git operations should use this branch.
     if (!skip && typeof answer !== "string") {
       return res.status(400).json({ error: "answer is required when not skipping" });
     }
-    const { provideAnswer: provideAnswer2 } = await import("./tools-E63MOJBO.js");
+    const { provideAnswer: provideAnswer2 } = await import("./tools-WLJJ3ILO.js");
     const found = provideAnswer2(callId, answer ?? "", skip ?? false);
     if (!found) {
       return res.status(404).json({ error: "No pending question with that ID" });
@@ -8137,7 +8192,7 @@ All file and git operations should use this branch.
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { getSetting: getSetting2, SETTINGS_KEYS } = await import("./settings-ZJPM6PQV.js");
+    const { getSetting: getSetting2, SETTINGS_KEYS } = await import("./settings-WH6BVQCP.js");
     if (getSetting2(SETTINGS_KEYS.CACHE_WARMING) !== "true") {
       return res.json({ success: false, reason: "disabled" });
     }
@@ -8170,7 +8225,7 @@ All file and git operations should use this branch.
       backend: activeProvider?.backend ?? llmClient.getBackend(),
       model: llmClient.getModel()
     };
-    const { runAgentTurn, TurnMetrics } = await import("./orchestrator-JGJWTRO5.js");
+    const { runAgentTurn, TurnMetrics } = await import("./orchestrator-FMWKMD54.js");
     runAgentTurn(
       {
         sessionManager,
@@ -8208,15 +8263,15 @@ All file and git operations should use this branch.
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-WGDFMOOD.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-E63MOJBO.js");
+    const { stopSessionExecution } = await import("./chat-handler-ZCPFNHTE.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-WLJJ3ILO.js");
     const queuedMessages = sessionManager.getQueueState(sessionId);
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
     abortSession(sessionId);
     cancelQuestionsForSession(sessionId, "Session stopped by user");
     cancelPathConfirmationsForSession(sessionId, "Session stopped by user");
-    const eventStore = (await import("./events-335XAKFK.js")).getEventStore();
+    const eventStore = (await import("./events-ADE2KEHI.js")).getEventStore();
     eventStore.append(sessionId, { type: "running.changed", data: { isRunning: false } });
     res.json({ success: true, queuedMessages });
   });
@@ -8230,7 +8285,7 @@ All file and git operations should use this branch.
     if (typeof messageIndex !== "number" || messageIndex < 0) {
       return res.status(400).json({ error: "messageIndex must be a non-negative number" });
     }
-    const { truncateSessionMessages } = await import("./events-335XAKFK.js");
+    const { truncateSessionMessages } = await import("./events-ADE2KEHI.js");
     truncateSessionMessages(sessionId, messageIndex);
     res.json({ success: true });
   });
@@ -8250,8 +8305,8 @@ All file and git operations should use this branch.
     if (attachments !== void 0 && !Array.isArray(attachments)) {
       return res.status(400).json({ error: "attachments must be an array if provided" });
     }
-    const { getEventStore: getEventStore2 } = await import("./events-335XAKFK.js");
-    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-H7JTX6KI.js");
+    const { getEventStore: getEventStore2 } = await import("./events-ADE2KEHI.js");
+    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-CM63AVSB.js");
     const eventStore = getEventStore2();
     const events = eventStore.getEvents(sessionId);
     const { messages } = buildMessagesFromStoredEvents2(events);
@@ -8263,7 +8318,7 @@ All file and git operations should use this branch.
     if (msg.role !== "user" || msg.isSystemGenerated) {
       return res.status(400).json({ error: "Can only replay user messages" });
     }
-    const { truncateSessionMessages } = await import("./events-335XAKFK.js");
+    const { truncateSessionMessages } = await import("./events-ADE2KEHI.js");
     truncateSessionMessages(sessionId, msgIndex - 1);
     sessionManager.queueMessage(
       sessionId,
@@ -8305,7 +8360,7 @@ All file and git operations should use this branch.
       return res.status(404).json({ error: "Session not found" });
     }
     try {
-      const { buildSessionExport } = await import("./export-import-3WMRLO4A.js");
+      const { buildSessionExport } = await import("./export-import-6OUEANYH.js");
       const payload = buildSessionExport(sessionManager, sessionId);
       const filename = `${(payload.session.title ?? "session").replace(/[^a-zA-Z0-9-_]/g, "_")}.openfox-session.json`;
       res.setHeader("Content-Disposition", `attachment; filename="${filename}"`);
@@ -8362,7 +8417,7 @@ All file and git operations should use this branch.
     res.json({ accepted: true });
   });
   app.get("/api/settings", async (req, res) => {
-    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-ZJPM6PQV.js");
+    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-WH6BVQCP.js");
     const keysParam = req.query["keys"];
     if (!keysParam) {
       return res.status(400).json({ error: "keys query parameter is required" });
@@ -8375,19 +8430,19 @@ All file and git operations should use this branch.
     res.json(result);
   });
   app.get("/api/settings/:key", async (req, res) => {
-    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-ZJPM6PQV.js");
+    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-WH6BVQCP.js");
     const key = req.params.key;
     const value = getSetting2(key) ?? SETTINGS_DEFAULTS[key] ?? null;
     res.json({ key, value });
   });
   app.get("/api/settings/:key", async (req, res) => {
-    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-ZJPM6PQV.js");
+    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-WH6BVQCP.js");
     const key = req.params.key;
     const value = getSetting2(key) ?? SETTINGS_DEFAULTS[key] ?? null;
     res.json({ key, value });
   });
   app.put("/api/settings/:key", async (req, res) => {
-    const { setSetting: setSetting2 } = await import("./settings-ZJPM6PQV.js");
+    const { setSetting: setSetting2 } = await import("./settings-WH6BVQCP.js");
     const key = req.params.key;
     const { value } = req.body;
     if (value === void 0) {
@@ -8414,7 +8469,7 @@ All file and git operations should use this branch.
     }
   });
   app.get("/api/tools/shells", async (_req, res) => {
-    const { listAvailableShells } = await import("./platform-XPMZKAUB.js");
+    const { listAvailableShells } = await import("./platform-KPKYBU54.js");
     res.json({ shells: listAvailableShells() });
   });
   app.get("/api/config", async (_req, res) => {
@@ -8452,7 +8507,7 @@ All file and git operations should use this branch.
       defaultModelSelection: config3.defaultModelSelection,
       visionFallback,
       platform: platformInfo,
-      locale: (await import("./settings-ZJPM6PQV.js")).getSetting("display.locale") ?? "automatic"
+      locale: (await import("./settings-WH6BVQCP.js")).getSetting("display.locale") ?? "automatic"
     });
   });
   app.post("/api/model/refresh", async (_req, res) => {
@@ -8508,7 +8563,7 @@ All file and git operations should use this branch.
     }));
   }
   app.post("/api/proxy/test", async (_req, res) => {
-    const { getSetting: getSetting2, SETTINGS_KEYS } = await import("./settings-ZJPM6PQV.js");
+    const { getSetting: getSetting2, SETTINGS_KEYS } = await import("./settings-WH6BVQCP.js");
     const proxyUrl = getSetting2(SETTINGS_KEYS.PROXY_URL);
     if (!proxyUrl) {
       return res.status(400).json({ success: false, error: "No proxy URL configured" });
@@ -8600,7 +8655,7 @@ All file and git operations should use this branch.
     }
   });
   app.post("/api/proxy/test", async (_req, res) => {
-    const { getSetting: getSetting2, SETTINGS_KEYS } = await import("./settings-ZJPM6PQV.js");
+    const { getSetting: getSetting2, SETTINGS_KEYS } = await import("./settings-WH6BVQCP.js");
     const proxyUrl = getSetting2(SETTINGS_KEYS.PROXY_URL);
     if (!proxyUrl) {
       return res.status(400).json({ success: false, error: "No proxy URL configured" });
@@ -8627,9 +8682,9 @@ All file and git operations should use this branch.
     const backend = req.query["backend"];
     if (!url) return res.status(400).json({ error: "url is required" });
     try {
-      const { fetchModelsWithContext } = await import("./provider-manager-2KKZ37XJ.js");
+      const { fetchModelsWithContext } = await import("./provider-manager-Y53SVVQ3.js");
       const { getModelProfile: getModelProfile2 } = await import("./profiles-EBCVFYG7.js");
-      const { getCatalogEntry } = await import("./model-catalog-2PCKTYGW.js");
+      const { getCatalogEntry } = await import("./model-catalog-Y5MA5OZP.js");
       const models = await fetchModelsWithContext(
         url,
         apiKey,
@@ -8667,7 +8722,7 @@ All file and git operations should use this branch.
     if (!url) return res.status(400).json({ error: "url is required" });
     if (!models?.length) return res.status(400).json({ error: "models is required" });
     try {
-      const { autoConfig } = await import("./auto-config-5VSNLVNI.js");
+      const { autoConfig } = await import("./auto-config-2A7Y2WOK.js");
       const result = await autoConfig({
         url,
         ...apiKey ? { apiKey } : {},
@@ -8700,9 +8755,9 @@ All file and git operations should use this branch.
         return res.json({ success: true, message: { content: response2.content }, raw: response2 });
       }
       const { getModelProfile: getModelProfile2 } = await import("./profiles-EBCVFYG7.js");
-      const { getBackendCapabilities } = await import("./backend-NDBY3DAQ.js");
-      const { buildNonStreamingCreateParams } = await import("./client-pure-FLKP6PTI.js");
-      const { OpenAIHttpClient } = await import("./http-client-A445WYZU.js");
+      const { getBackendCapabilities } = await import("./backend-24FTDSHF.js");
+      const { buildNonStreamingCreateParams } = await import("./client-pure-YZ4IGCU4.js");
+      const { OpenAIHttpClient } = await import("./http-client-C6UYWVWZ.js");
       const { ensureVersionPrefix } = await import("./url-utils-C5BM7NF7.js");
       const profile = getModelProfile2(model);
       const capabilities = getBackendCapabilities(backend || "unknown");
@@ -8975,6 +9030,12 @@ All file and git operations should use this branch.
     await saveGlobalConfig(config3.mode ?? "production", updatedConfig, config3.globalConfigPath);
     providerManager.setProviders(updatedConfig.providers, updatedConfig.defaultModelSelection ?? void 0);
     config3.defaultModelSelection = updatedConfig.defaultModelSelection;
+    const clearedSessions = clearSessionsForDeletedProvider(id);
+    if (clearedSessions > 0) {
+      logger.info("Cleared provider from sessions of deleted provider", { providerId: id, sessions: clearedSessions });
+    }
+    const { pruneFavoriteModels } = await import("./settings-WH6BVQCP.js");
+    pruneFavoriteModels(updatedConfig.providers);
     res.json({ success: true });
   });
   app.patch("/api/providers/:id", async (req, res) => {
@@ -9036,6 +9097,8 @@ All file and git operations should use this branch.
       await saveGlobalConfig(config3.mode ?? "production", updatedConfig, config3.globalConfigPath);
       providerManager.setProviders(updatedConfig.providers, updatedConfig.defaultModelSelection ?? void 0);
       config3.defaultModelSelection = updatedConfig.defaultModelSelection;
+      const { pruneFavoriteModels } = await import("./settings-WH6BVQCP.js");
+      pruneFavoriteModels(updatedConfig.providers);
       res.json({ success: true, provider: updatedConfig.providers.find((p) => p.id === id) });
     } catch (error) {
       res.status(500).json({ error: error instanceof Error ? error.message : "Failed to update provider" });
@@ -9049,9 +9112,6 @@ All file and git operations should use this branch.
   app.put("/api/providers/:id/models/:modelId/settings", async (req, res) => {
     const { id, modelId } = req.params;
     const { thinkingLevel, thinkingEnabled } = req.body;
-    if (thinkingLevel !== void 0 && !isReasoningEffortValue(thinkingLevel)) {
-      return res.status(400).json({ error: `Invalid reasoning effort '${thinkingLevel}'` });
-    }
     if (thinkingEnabled !== void 0 && typeof thinkingEnabled !== "boolean") {
       return res.status(400).json({ error: "thinkingEnabled must be a boolean" });
     }
@@ -9063,9 +9123,13 @@ All file and git operations should use this branch.
         return res.status(404).json({ error: "Provider not found" });
       }
       const models = provider.models ?? [];
-      if (!models.some((m) => m.id === modelId)) {
+      const targetModel = models.find((m) => m.id === modelId);
+      if (!targetModel) {
         return res.status(404).json({ error: "Model not found" });
       }
+      if (thinkingLevel !== void 0 && !isReasoningEffortValidForModel(thinkingLevel, targetModel)) {
+        return res.status(400).json({ error: `Invalid reasoning effort '${thinkingLevel}'` });
+      }
       const updatedModels = models.map(
         (m) => m.id === modelId ? {
           ...m,
@@ -9118,8 +9182,8 @@ All file and git operations should use this branch.
     });
   });
   async function rebuildMcpTools() {
-    const { createMcpTools: createMcpTools2 } = await import("./tool-adapter-FJAFLDZA.js");
-    const { setMcpTools: setMcpTools2 } = await import("./tools-E63MOJBO.js");
+    const { createMcpTools: createMcpTools2 } = await import("./tool-adapter-ZY4FC4C4.js");
+    const { setMcpTools: setMcpTools2 } = await import("./tools-WLJJ3ILO.js");
     const mcpTools = createMcpTools2(mcpManager);
     setMcpTools2(mcpTools);
     toolRegistry = createToolRegistry();
@@ -9549,13 +9613,13 @@ All file and git operations should use this branch.
     })
   );
   app.get("/api/sessions/:id/background-processes", async (req, res) => {
-    const { getSessionProcesses } = await import("./manager-ZACEUL5P.js");
+    const { getSessionProcesses } = await import("./manager-FSPRJCYT.js");
     const sessionId = req.params.id;
     const processes = getSessionProcesses(sessionId);
     res.json({ processes });
   });
   app.post("/api/sessions/:id/background-process/:processId/stop", async (req, res) => {
-    const { stopProcess } = await import("./manager-ZACEUL5P.js");
+    const { stopProcess } = await import("./manager-FSPRJCYT.js");
     const sessionId = req.params.id;
     const processId = req.params.processId;
     const session = sessionManager.getSession(sessionId);
@@ -9695,7 +9759,7 @@ All file and git operations should use this branch.
   );
   const wss = wssExports.wss;
   deferTasksBroadcast = (projectId, payload) => wssExports.broadcastForProject(projectId, "", { type: "tasks.update", payload });
-  const { launchWorkflowRun, abortRunnerRun } = await import("./launch-GJ7EHQRI.js");
+  const { launchWorkflowRun, abortRunnerRun } = await import("./launch-L5NSPAAX.js");
   deferTasksLaunchWorkflow = (sessionId, launch) => {
     const effective = sessionManager.resolveEffectiveProviderModel(sessionId);
     let llmClient = getLLMClient();
@@ -9740,7 +9804,7 @@ All file and git operations should use this branch.
     const state = sessionManager.getContextState(sessionId);
     wssExports.broadcastForSession(sessionId, createContextStateMessage(state));
   });
-  const { QueueProcessor } = await import("./processor-MSQP63ML.js");
+  const { QueueProcessor } = await import("./processor-SB5X44PX.js");
   const queueProcessor = new QueueProcessor({
     sessionManager,
     providerManager,
@@ -9782,8 +9846,8 @@ All file and git operations should use this branch.
     launchWorkflow: (sessionId, launch) => deferTasksLaunchWorkflow(sessionId, launch),
     stopSession: (sessionId) => {
       void (async () => {
-        const { stopSessionExecution } = await import("./chat-handler-WGDFMOOD.js");
-        const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-E63MOJBO.js");
+        const { stopSessionExecution } = await import("./chat-handler-ZCPFNHTE.js");
+        const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-WLJJ3ILO.js");
         sessionManager.clearMessageQueue(sessionId);
         stopSessionExecution(sessionId, sessionManager);
         abortSession(sessionId);
@@ -9904,4 +9968,4 @@ export {
   createServerHandle,
   createServer
 };
-//# sourceMappingURL=chunk-BIZFY3QP.js.map
+//# sourceMappingURL=chunk-RS7I4W5A.js.map