openfox 2.0.136 → 2.0.138

package/dist/{chunk-QQQBNL7A.js → chunk-HI25RCRW.js}

@@ -9,7 +9,7 @@ import {
   terminalManager,
   tokenFromPassword,
   verifyPassword
-} from "./chunk-GP5BYQMF.js";
+} from "./chunk-2KCREKHC.js";
 import {
   projectSessionStatus
 } from "./chunk-T3S5MTMD.js";
@@ -27,7 +27,7 @@ import {
 } from "./chunk-IJ53Y77N.js";
 import {
   TEMPLATE_VARIABLES
-} from "./chunk-CPVEONNS.js";
+} from "./chunk-5CZPHAHN.js";
 import {
   createToolRegistry,
   devServerManager,
@@ -42,7 +42,7 @@ import {
   setMcpManagerForTools,
   setMcpTools,
   setNotifyMcpServersChanged
-} from "./chunk-EXLCFEML.js";
+} from "./chunk-N3PANDLT.js";
 import {
   deleteOwnedSkill,
   deleteProjectSkill,
@@ -133,7 +133,7 @@ import {
 import {
   getPendingConfirmationsBySession,
   providePathConfirmation
-} from "./chunk-PQKLOLGC.js";
+} from "./chunk-DBCWILV3.js";
 import {
   combineEventsWithSnapshot,
   emitAssistantMessageStart,
@@ -151,10 +151,10 @@ import {
   getEventStore,
   getSessionState,
   initEventStore
-} from "./chunk-342BKOTE.js";
+} from "./chunk-2OO46UAW.js";
 import {
   buildMessagesFromStoredEvents
-} from "./chunk-XGG4XCKP.js";
+} from "./chunk-MMGHIPBU.js";
 import {
   clearWorkflowExecution,
   createSession,
@@ -206,7 +206,7 @@ import {
 import {
   createContextStateMessage,
   toClientSession
-} from "./chunk-AATMPL7S.js";
+} from "./chunk-OVAHNEFG.js";
 import {
   getPathSeparator,
   isAbsolutePath
@@ -222,7 +222,7 @@ import {
 } from "./chunk-YNMP647F.js";
 import {
   VERSION
-} from "./chunk-VWBPQZLO.js";
+} from "./chunk-OU7WD35E.js";
 import {
   deleteProject,
   getProject,
@@ -264,7 +264,7 @@ import {
 } from "./chunk-K44MW7JJ.js";
 import {
   createServerMessage
-} from "./chunk-HF3NDXB4.js";
+} from "./chunk-PW5L4WBG.js";
 import {
   getGlobalConfigDir
 } from "./chunk-CQGTEGKL.js";
@@ -540,6 +540,15 @@ var RULES = [
     tools: [{ name: "write_file", arguments: { path: "/home/test/approved.txt", content: "approved" } }],
     response: "Wrote to the approved path."
   },
+  {
+    match: /write.*(?:three|3).*outside|three.*files.*outside/i,
+    tools: [
+      { name: "write_file", arguments: { path: "/home/test/alpha.txt", content: "alpha" } },
+      { name: "write_file", arguments: { path: "/home/test/beta.txt", content: "beta" } },
+      { name: "write_file", arguments: { path: "/home/test/gamma.txt", content: "gamma" } }
+    ],
+    response: "Wrote three files outside the project."
+  },
   {
     match: /write.*\/home\/test\/denied/i,
     tools: [{ name: "write_file", arguments: { path: "/home/test/denied.txt", content: "denied" } }],
@@ -2840,6 +2849,10 @@ var SessionManager = class {
   unknownProviderWarned = /* @__PURE__ */ new Set();
   switchLocks = /* @__PURE__ */ new Map();
   workspaceCreationLocks = /* @__PURE__ */ new Map();
+  // Cooperative pause: in-memory only (a pause is only meaningful for a live,
+  // running turn — it never survives a process restart).
+  pauseStates = /* @__PURE__ */ new Map();
+  pauseWaiters = /* @__PURE__ */ new Map();
   constructor(providerManager) {
     this.providerManager = providerManager;
   }
@@ -3132,8 +3145,8 @@ var SessionManager = class {
    * @throws Error for invalid payloads or unknown project
    */
   async importSession(projectId, rawPayload) {
-    const { parseSessionExport, IMPORTED_SESSION_REMINDER, SESSION_EXPORT_VERSION } = await import("./export-import-GHRCOQHF.js");
-    const { injectContextDriftReminders, getToolSetFingerprint } = await import("./dynamic-context-RDBNQPPA.js");
+    const { parseSessionExport, IMPORTED_SESSION_REMINDER, SESSION_EXPORT_VERSION } = await import("./export-import-SC3UW22Z.js");
+    const { injectContextDriftReminders, getToolSetFingerprint } = await import("./dynamic-context-SKHOUP4T.js");
     const { loadAllAgentsDefault: loadAllAgentsDefault2, resolveDefaultAgentId } = await import("./registry-FMDMGIUB.js");
     const payload = parseSessionExport(rawPayload);
     if (payload.version !== SESSION_EXPORT_VERSION) {
@@ -3268,6 +3281,7 @@ var SessionManager = class {
     const eventStore = getEventStore();
     eventStore.deleteSession(id);
     this.messageQueues.delete(id);
+    this.clearPauseState(id);
     this.warmedUpSessions.delete(id);
     this.announcedPromptHashStore.delete(id);
     this.announcedToolFingerprintStore.delete(id);
@@ -3371,11 +3385,137 @@ var SessionManager = class {
     logger.debug("Setting session running state", { sessionId, isRunning });
     updateSessionRunning(sessionId, isRunning);
     emitRunningChanged(sessionId, isRunning);
+    if (!isRunning) {
+      this.clearPauseState(sessionId);
+    }
     const updatedSession = this.requireSession(sessionId);
     this.emit({ type: "session_updated", session: updatedSession });
     this.emit({ type: "running_changed", sessionId, isRunning });
     return updatedSession;
   }
+  // ============================================================================
+  // Cooperative pause
+  //
+  // A pause never aborts the in-flight LLM request: it only gates the NEXT one.
+  // The agent loop calls enterPauseGate() before every top-level LLM request;
+  // the gate blocks until the user resumes (or the session aborts).
+  //
+  //   none --requestPause--> pending --gate reached--> paused
+  //   pending --requestResume--> none (cancel, no interruption)
+  //   paused --requestResume--> resuming --gate released--> none
+  // ============================================================================
+  /** Current pause state ('none' when the session has no pause in flight). */
+  getPauseState(sessionId) {
+    return this.pauseStates.get(sessionId) ?? "none";
+  }
+  /** Request a pause. Succeeds only from 'none'. Returns false otherwise. */
+  requestPause(sessionId) {
+    if (this.getPauseState(sessionId) !== "none") {
+      return false;
+    }
+    this.transitionPauseState(sessionId, "pending");
+    return true;
+  }
+  /**
+   * Request resume. From 'pending' this cancels the pause (the running turn is
+   * left alone); from 'paused' it releases the blocked gate. Returns false
+   * when there is nothing to resume.
+   */
+  requestResume(sessionId) {
+    const state = this.getPauseState(sessionId);
+    if (state === "pending") {
+      this.transitionPauseState(sessionId, "none");
+      return true;
+    }
+    if (state === "paused") {
+      this.transitionPauseState(sessionId, "resuming");
+      this.wakePauseWaiters(sessionId, "released");
+      return true;
+    }
+    return false;
+  }
+  /**
+   * Pause gate — call before each top-level LLM request. Resolves 'released'
+   * when the request may proceed (no pause, or the user resumed) and 'aborted'
+   * when the session was aborted while paused. Concurrent gates (parent +
+   * sub-agent loops) all block on a single pause and all release on resume.
+   */
+  async enterPauseGate(sessionId, signal) {
+    const state = this.getPauseState(sessionId);
+    if (state === "none") {
+      return "released";
+    }
+    if (state === "resuming") {
+      this.transitionPauseState(sessionId, "none");
+      return "released";
+    }
+    if (state === "pending") {
+      this.transitionPauseState(sessionId, "paused");
+    }
+    const outcome = await new Promise((resolve9) => {
+      let waiters = this.pauseWaiters.get(sessionId);
+      if (!waiters) {
+        waiters = /* @__PURE__ */ new Set();
+        this.pauseWaiters.set(sessionId, waiters);
+      }
+      const onWake = (o) => {
+        cleanup();
+        resolve9(o);
+      };
+      const onAbort = () => {
+        cleanup();
+        resolve9("aborted");
+      };
+      const cleanup = () => {
+        waiters.delete(onWake);
+        signal?.removeEventListener("abort", onAbort);
+        if (waiters.size === 0) {
+          this.pauseWaiters.delete(sessionId);
+        }
+      };
+      waiters.add(onWake);
+      if (signal?.aborted) {
+        cleanup();
+        resolve9("aborted");
+        return;
+      }
+      signal?.addEventListener("abort", onAbort, { once: true });
+    });
+    this.transitionPauseState(sessionId, "none");
+    return outcome;
+  }
+  /**
+   * Clear any pause state and wake blocked gates with 'aborted'. Used by the
+   * stop/abort paths and session deletion so a paused gate never hangs.
+   */
+  clearPauseState(sessionId) {
+    if (this.getPauseState(sessionId) !== "none") {
+      this.transitionPauseState(sessionId, "none");
+    }
+    this.wakePauseWaiters(sessionId, "aborted");
+  }
+  transitionPauseState(sessionId, next) {
+    if (this.getPauseState(sessionId) === next) {
+      return;
+    }
+    logger.debug("Changing session pause state", { sessionId, from: this.getPauseState(sessionId), to: next });
+    this.pauseStates.set(sessionId, next);
+    this.emit({ type: "pause_changed", sessionId, pauseState: next });
+  }
+  wakePauseWaiters(sessionId, outcome) {
+    const waiters = this.pauseWaiters.get(sessionId);
+    if (!waiters) {
+      return;
+    }
+    this.pauseWaiters.delete(sessionId);
+    for (const wake of waiters) {
+      try {
+        wake(outcome);
+      } catch (error) {
+        logger.error("Pause waiter wake error", { sessionId, error });
+      }
+    }
+  }
   /**
    * Set session provider/model. Updates DB directly.
    */
@@ -4371,6 +4511,7 @@ All file and git operations should use this directory.${commitHint}
         mode: dbSession.mode,
         phase: "plan",
         isRunning: dbSession.isRunning,
+        pauseState: this.getPauseState(dbSession.id),
         messages: [],
         criteria: [],
         contextWindows: [],
@@ -4405,6 +4546,7 @@ All file and git operations should use this directory.${commitHint}
       mode: eventState.mode,
       phase: eventState.phase,
       isRunning,
+      pauseState: this.getPauseState(dbSession.id),
       messages,
       criteria: eventState.criteria,
       metadataEntries: eventState.metadataEntries,
@@ -5139,6 +5281,7 @@ function buildSessionStatusPayload(sessionId, deps) {
   return {
     ...status,
     isRunning: session.isRunning,
+    pauseState: session.pauseState ?? "none",
     pending: { questions: pendingQuestions, confirmations: pendingConfirmations },
     workflow: workflowPayload(activeExecution)
   };
@@ -7103,7 +7246,7 @@ function detectWsl() {
 // src/server/index.ts
 var __dirname3 = dirname7(fileURLToPath6(import.meta.url));
 async function announceContextDrift(sessionManager, sessionIds) {
-  const { injectContextDriftRemindersForSessions } = await import("./dynamic-context-RDBNQPPA.js");
+  const { injectContextDriftRemindersForSessions } = await import("./dynamic-context-SKHOUP4T.js");
   await injectContextDriftRemindersForSessions(sessionManager, sessionIds);
 }
 async function createServerHandle(config3) {
@@ -7218,7 +7361,7 @@ async function createServerHandle(config3) {
       toolRegistry = createToolRegistry();
       logger.info("MCP tools registered", { count: mcpTools.length });
     }
-    const { signalMcpReady } = await import("./server-ZAPAB3FS.js");
+    const { signalMcpReady } = await import("./server-AIRQGHHR.js");
     signalMcpReady();
   });
   const app = express();
@@ -7435,7 +7578,7 @@ async function createServerHandle(config3) {
   app.use("/api", sessionFavoriteRouter);
   const { createTasksService } = await import("./service-NKLQH647.js");
   const { registerTaskRoutes } = await import("./tasks-GPM3JAE6.js");
-  const { setTasksService } = await import("./tools-EJOABHVO.js");
+  const { setTasksService } = await import("./tools-NIPKV4YY.js");
   const tasksService = createTasksService({
     sessionManager,
     config: config3,
@@ -7633,8 +7776,8 @@ All file and git operations should use this branch.
     res.json({ workspaces: workspacesList });
   });
   app.get("/api/sessions", async (req, res) => {
-    const { getRecentUserPromptsForSession } = await import("./events-YTYYT3PR.js");
-    const { getPendingConfirmationsBySession: getPendingConfirmationsBySession2 } = await import("./path-security-EC4Z2ZZG.js");
+    const { getRecentUserPromptsForSession } = await import("./events-ADE2KEHI.js");
+    const { getPendingConfirmationsBySession: getPendingConfirmationsBySession2 } = await import("./path-security-YP2MRJNS.js");
     const projectId = req.query["projectId"];
     const rawLimit = req.query["limit"];
     const offset = parseInt(req.query["offset"]) || 0;
@@ -7752,9 +7895,9 @@ All file and git operations should use this branch.
     }
   });
   app.get("/api/sessions/:id", async (req, res) => {
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEventsWithSnapshot2 } = await import("./events-YTYYT3PR.js");
-    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2, foldPendingConfirmations } = await import("./folding-3MMOPS4W.js");
-    const { getPendingQuestionsForSession: getPendingQuestionsForSession2 } = await import("./tools-EJOABHVO.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEventsWithSnapshot2 } = await import("./events-ADE2KEHI.js");
+    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2, foldPendingConfirmations } = await import("./folding-CM63AVSB.js");
+    const { getPendingQuestionsForSession: getPendingQuestionsForSession2 } = await import("./tools-NIPKV4YY.js");
     const { getMaxVisibleItems } = await import("./settings-WH6BVQCP.js");
     const session = sessionManager.getSession(req.params.id);
     if (!session) {
@@ -7783,9 +7926,9 @@ All file and git operations should use this branch.
   });
   app.get("/api/sessions/:id/status", async (req, res) => {
     const { projectSessionStatus: projectSessionStatus2 } = await import("./session-status-UFO5IFI7.js");
-    const { getPendingQuestionsForSession: getPendingQuestionsForSession2 } = await import("./tools-EJOABHVO.js");
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEventsWithSnapshot2 } = await import("./events-YTYYT3PR.js");
-    const { foldPendingConfirmations } = await import("./folding-3MMOPS4W.js");
+    const { getPendingQuestionsForSession: getPendingQuestionsForSession2 } = await import("./tools-NIPKV4YY.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEventsWithSnapshot2 } = await import("./events-ADE2KEHI.js");
+    const { foldPendingConfirmations } = await import("./folding-CM63AVSB.js");
     const sessionId = req.params["id"];
     if (!sessionId) {
       return res.status(400).json({ error: "Session id is required" });
@@ -7815,8 +7958,8 @@ All file and git operations should use this branch.
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-SYU4HJMI.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-EJOABHVO.js");
+    const { stopSessionExecution } = await import("./chat-handler-AUB5HDQD.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-NIPKV4YY.js");
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
     abortSession(sessionId);
@@ -7845,8 +7988,8 @@ All file and git operations should use this branch.
     res.json({ success: true });
   });
   app.post("/api/sessions/:id/provider", async (req, res) => {
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-YTYYT3PR.js");
-    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-3MMOPS4W.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-ADE2KEHI.js");
+    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-CM63AVSB.js");
     const { getMaxVisibleItems } = await import("./settings-WH6BVQCP.js");
     const sessionId = req.params.id;
     const session = sessionManager.getSession(sessionId);
@@ -7876,8 +8019,8 @@ All file and git operations should use this branch.
     res.json({ session: toClientSession(updatedSession), messages, hiddenCount, contextState });
   });
   app.delete("/api/sessions/:id/provider", async (req, res) => {
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-YTYYT3PR.js");
-    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-3MMOPS4W.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-ADE2KEHI.js");
+    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-CM63AVSB.js");
     const { getMaxVisibleItems } = await import("./settings-WH6BVQCP.js");
     const sessionId = req.params.id;
     const session = sessionManager.getSession(sessionId);
@@ -8010,8 +8153,8 @@ All file and git operations should use this branch.
     res.json({ success: true });
   });
   app.put("/api/sessions/:id/mode", async (req, res) => {
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-YTYYT3PR.js");
-    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-3MMOPS4W.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-ADE2KEHI.js");
+    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-CM63AVSB.js");
     const { getMaxVisibleItems } = await import("./settings-WH6BVQCP.js");
     const sessionId = req.params.id;
     const session = sessionManager.getSession(sessionId);
@@ -8047,6 +8190,17 @@ All file and git operations should use this branch.
       return res.status(400).json({ error: 'dangerLevel is required and must be "normal" or "dangerous"' });
     }
     sessionManager.setDangerLevel(sessionId, dangerLevel);
+    if (dangerLevel === "dangerous") {
+      const { autoApprovePendingConfirmationsForSession } = await import("./tools-NIPKV4YY.js");
+      const approvedCallIds = autoApprovePendingConfirmationsForSession(sessionId);
+      for (const callId of approvedCallIds) {
+        wssExports.broadcastForSession(sessionId, {
+          type: "session.confirmation_resolved",
+          sessionId,
+          payload: { sessionId, callId }
+        });
+      }
+    }
     const updatedSession = sessionManager.getSession(sessionId);
     res.json({ session: toClientSession(updatedSession) });
   });
@@ -8072,7 +8226,7 @@ All file and git operations should use this branch.
     setSessionDisabledServers(sessionId, disabledServers);
     const messages = session.messages ?? [];
     if (messages.length === 0) {
-      const { applyDynamicContext } = await import("./dynamic-context-RDBNQPPA.js");
+      const { applyDynamicContext } = await import("./dynamic-context-SKHOUP4T.js");
       const modelName = session.providerModel ?? providerManager.getCurrentModel();
       await applyDynamicContext(sessionManager, sessionId, modelName);
     } else {
@@ -8106,7 +8260,7 @@ All file and git operations should use this branch.
     if (alwaysAllow !== void 0 && typeof alwaysAllow !== "boolean") {
       return res.status(400).json({ error: "alwaysAllow must be a boolean if provided" });
     }
-    const { providePathConfirmation: providePathConfirmation2, getConfirmationSessionId } = await import("./tools-EJOABHVO.js");
+    const { providePathConfirmation: providePathConfirmation2, getConfirmationSessionId } = await import("./tools-NIPKV4YY.js");
     const pendingSessionId = getConfirmationSessionId(callId);
     if (!pendingSessionId) {
       return res.status(404).json({ error: "No pending path confirmation with that ID" });
@@ -8118,10 +8272,10 @@ All file and git operations should use this branch.
     if (!result.found) {
       return res.status(404).json({ error: "No pending path confirmation with that ID" });
     }
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEvents } = await import("./events-YTYYT3PR.js");
-    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2, foldPendingConfirmations } = await import("./folding-3MMOPS4W.js");
-    const { createSessionStateMessage } = await import("./protocol-XO4ZROAU.js");
-    const { getPendingQuestionsForSession: getPendingQuestionsForSession2 } = await import("./tools-EJOABHVO.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEvents } = await import("./events-ADE2KEHI.js");
+    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2, foldPendingConfirmations } = await import("./folding-CM63AVSB.js");
+    const { createSessionStateMessage } = await import("./protocol-MRMOB3P4.js");
+    const { getPendingQuestionsForSession: getPendingQuestionsForSession2 } = await import("./tools-NIPKV4YY.js");
     const { getMaxVisibleItems } = await import("./settings-WH6BVQCP.js");
     const eventStore = getEventStore2();
     const { snapshot, events: eventsSinceSnapshot } = eventStore.getEventsSinceSnapshot(sessionId);
@@ -8159,7 +8313,7 @@ All file and git operations should use this branch.
     if (!skip && typeof answer !== "string") {
       return res.status(400).json({ error: "answer is required when not skipping" });
     }
-    const { provideAnswer: provideAnswer2 } = await import("./tools-EJOABHVO.js");
+    const { provideAnswer: provideAnswer2 } = await import("./tools-NIPKV4YY.js");
     const found = provideAnswer2(callId, answer ?? "", skip ?? false);
     if (!found) {
       return res.status(404).json({ error: "No pending question with that ID" });
@@ -8225,7 +8379,7 @@ All file and git operations should use this branch.
       backend: activeProvider?.backend ?? llmClient.getBackend(),
       model: llmClient.getModel()
     };
-    const { runAgentTurn, TurnMetrics } = await import("./orchestrator-6QGQ55NT.js");
+    const { runAgentTurn, TurnMetrics } = await import("./orchestrator-KRHMAVBN.js");
     runAgentTurn(
       {
         sessionManager,
@@ -8263,18 +8417,45 @@ All file and git operations should use this branch.
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-SYU4HJMI.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-EJOABHVO.js");
+    const { stopSessionExecution } = await import("./chat-handler-AUB5HDQD.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-NIPKV4YY.js");
     const queuedMessages = sessionManager.getQueueState(sessionId);
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
     abortSession(sessionId);
     cancelQuestionsForSession(sessionId, "Session stopped by user");
     cancelPathConfirmationsForSession(sessionId, "Session stopped by user");
-    const eventStore = (await import("./events-YTYYT3PR.js")).getEventStore();
+    const eventStore = (await import("./events-ADE2KEHI.js")).getEventStore();
     eventStore.append(sessionId, { type: "running.changed", data: { isRunning: false } });
     res.json({ success: true, queuedMessages });
   });
+  app.post("/api/sessions/:id/pause", async (req, res) => {
+    const sessionId = req.params.id;
+    const session = sessionManager.getSession(sessionId);
+    if (!session) {
+      return res.status(404).json({ error: "Session not found" });
+    }
+    if (!session.isRunning) {
+      return res.status(409).json({ error: "Session is not running" });
+    }
+    const ok2 = sessionManager.requestPause(sessionId);
+    if (!ok2) {
+      return res.status(409).json({ error: "A pause is already in progress" });
+    }
+    res.json({ success: true, pauseState: sessionManager.getPauseState(sessionId) });
+  });
+  app.post("/api/sessions/:id/resume", async (req, res) => {
+    const sessionId = req.params.id;
+    const session = sessionManager.getSession(sessionId);
+    if (!session) {
+      return res.status(404).json({ error: "Session not found" });
+    }
+    const ok2 = sessionManager.requestResume(sessionId);
+    if (!ok2) {
+      return res.status(409).json({ error: "Nothing to resume" });
+    }
+    res.json({ success: true, pauseState: sessionManager.getPauseState(sessionId) });
+  });
   app.post("/api/sessions/:id/truncate", async (req, res) => {
     const sessionId = req.params.id;
     const session = sessionManager.getSession(sessionId);
@@ -8285,7 +8466,7 @@ All file and git operations should use this branch.
     if (typeof messageIndex !== "number" || messageIndex < 0) {
       return res.status(400).json({ error: "messageIndex must be a non-negative number" });
     }
-    const { truncateSessionMessages } = await import("./events-YTYYT3PR.js");
+    const { truncateSessionMessages } = await import("./events-ADE2KEHI.js");
     truncateSessionMessages(sessionId, messageIndex);
     res.json({ success: true });
   });
@@ -8305,8 +8486,8 @@ All file and git operations should use this branch.
     if (attachments !== void 0 && !Array.isArray(attachments)) {
       return res.status(400).json({ error: "attachments must be an array if provided" });
     }
-    const { getEventStore: getEventStore2 } = await import("./events-YTYYT3PR.js");
-    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-3MMOPS4W.js");
+    const { getEventStore: getEventStore2 } = await import("./events-ADE2KEHI.js");
+    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-CM63AVSB.js");
     const eventStore = getEventStore2();
     const events = eventStore.getEvents(sessionId);
     const { messages } = buildMessagesFromStoredEvents2(events);
@@ -8318,7 +8499,7 @@ All file and git operations should use this branch.
     if (msg.role !== "user" || msg.isSystemGenerated) {
       return res.status(400).json({ error: "Can only replay user messages" });
     }
-    const { truncateSessionMessages } = await import("./events-YTYYT3PR.js");
+    const { truncateSessionMessages } = await import("./events-ADE2KEHI.js");
     truncateSessionMessages(sessionId, msgIndex - 1);
     sessionManager.queueMessage(
       sessionId,
@@ -8360,7 +8541,7 @@ All file and git operations should use this branch.
       return res.status(404).json({ error: "Session not found" });
     }
     try {
-      const { buildSessionExport } = await import("./export-import-GHRCOQHF.js");
+      const { buildSessionExport } = await import("./export-import-SC3UW22Z.js");
       const payload = buildSessionExport(sessionManager, sessionId);
       const filename = `${(payload.session.title ?? "session").replace(/[^a-zA-Z0-9-_]/g, "_")}.openfox-session.json`;
       res.setHeader("Content-Disposition", `attachment; filename="${filename}"`);
@@ -9183,7 +9364,7 @@ All file and git operations should use this branch.
   });
   async function rebuildMcpTools() {
     const { createMcpTools: createMcpTools2 } = await import("./tool-adapter-ZY4FC4C4.js");
-    const { setMcpTools: setMcpTools2 } = await import("./tools-EJOABHVO.js");
+    const { setMcpTools: setMcpTools2 } = await import("./tools-NIPKV4YY.js");
     const mcpTools = createMcpTools2(mcpManager);
     setMcpTools2(mcpTools);
     toolRegistry = createToolRegistry();
@@ -9759,7 +9940,7 @@ All file and git operations should use this branch.
   );
   const wss = wssExports.wss;
   deferTasksBroadcast = (projectId, payload) => wssExports.broadcastForProject(projectId, "", { type: "tasks.update", payload });
-  const { launchWorkflowRun, abortRunnerRun } = await import("./launch-YZ46OEFP.js");
+  const { launchWorkflowRun, abortRunnerRun } = await import("./launch-PTMPNZEN.js");
   deferTasksLaunchWorkflow = (sessionId, launch) => {
     const effective = sessionManager.resolveEffectiveProviderModel(sessionId);
     let llmClient = getLLMClient();
@@ -9804,7 +9985,7 @@ All file and git operations should use this branch.
     const state = sessionManager.getContextState(sessionId);
     wssExports.broadcastForSession(sessionId, createContextStateMessage(state));
   });
-  const { QueueProcessor } = await import("./processor-B2RV7MVC.js");
+  const { QueueProcessor } = await import("./processor-QZOGF5ES.js");
   const queueProcessor = new QueueProcessor({
     sessionManager,
     providerManager,
@@ -9846,8 +10027,8 @@ All file and git operations should use this branch.
     launchWorkflow: (sessionId, launch) => deferTasksLaunchWorkflow(sessionId, launch),
     stopSession: (sessionId) => {
       void (async () => {
-        const { stopSessionExecution } = await import("./chat-handler-SYU4HJMI.js");
-        const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-EJOABHVO.js");
+        const { stopSessionExecution } = await import("./chat-handler-AUB5HDQD.js");
+        const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-NIPKV4YY.js");
         sessionManager.clearMessageQueue(sessionId);
         stopSessionExecution(sessionId, sessionManager);
         abortSession(sessionId);
@@ -9968,4 +10149,4 @@ export {
   createServerHandle,
   createServer
 };
-//# sourceMappingURL=chunk-QQQBNL7A.js.map
+//# sourceMappingURL=chunk-HI25RCRW.js.map