openfox 2.0.137 → 2.0.139

package/dist/{chunk-RS7I4W5A.js → chunk-C543DUKL.js}

@@ -9,7 +9,7 @@ import {
   terminalManager,
   tokenFromPassword,
   verifyPassword
-} from "./chunk-ZJ2IHOVN.js";
+} from "./chunk-TVSIWRKE.js";
 import {
   projectSessionStatus
 } from "./chunk-T3S5MTMD.js";
@@ -27,7 +27,7 @@ import {
 } from "./chunk-IJ53Y77N.js";
 import {
   TEMPLATE_VARIABLES
-} from "./chunk-LQPAM55V.js";
+} from "./chunk-EGF3PREY.js";
 import {
   createToolRegistry,
   devServerManager,
@@ -42,7 +42,7 @@ import {
   setMcpManagerForTools,
   setMcpTools,
   setNotifyMcpServersChanged
-} from "./chunk-ZQENKB7X.js";
+} from "./chunk-N4RAVCLZ.js";
 import {
   deleteOwnedSkill,
   deleteProjectSkill,
@@ -61,7 +61,7 @@ import {
   setSkillEnabled,
   skillExists,
   updateOwnedSkill
-} from "./chunk-Q33DL67W.js";
+} from "./chunk-CRJ5J7U5.js";
 import {
   checkoutBranchFromSharedSource,
   deleteWorkspace,
@@ -106,22 +106,22 @@ import {
   saveWorkflow,
   saveWorkflowToProject,
   workflowExists
-} from "./chunk-QBWJCO5K.js";
+} from "./chunk-22DV5XO7.js";
 import {
   clearSessionOverrides,
   computeDisabledServersForProject,
   getSessionDisabledServers,
   initSessionMcpOverrides,
   setSessionDisabledServers
-} from "./chunk-DG2YSWMC.js";
+} from "./chunk-FIEFBRTQ.js";
 import {
   serverT
-} from "./chunk-4SBVW4UH.js";
+} from "./chunk-JLHYB445.js";
 import {
   ALWAYS_ALLOWED,
   ALWAYS_ALLOWED_FOR_SUBAGENTS,
   TOP_LEVEL_ONLY_TOOLS
-} from "./chunk-4LLGI372.js";
+} from "./chunk-GKRYQ56N.js";
 import {
   createMcpTools
 } from "./chunk-VIJVLLPT.js";
@@ -133,7 +133,7 @@ import {
 import {
   getPendingConfirmationsBySession,
   providePathConfirmation
-} from "./chunk-XWWRZSK7.js";
+} from "./chunk-RG326HS4.js";
 import {
   combineEventsWithSnapshot,
   emitAssistantMessageStart,
@@ -151,10 +151,10 @@ import {
   getEventStore,
   getSessionState,
   initEventStore
-} from "./chunk-2OO46UAW.js";
+} from "./chunk-JTR3PC5I.js";
 import {
   buildMessagesFromStoredEvents
-} from "./chunk-MMGHIPBU.js";
+} from "./chunk-AE2IBEUH.js";
 import {
   clearWorkflowExecution,
   createSession,
@@ -181,7 +181,7 @@ import {
   updateSessionRunning,
   updateSessionWorkdir,
   updateWorkflowExecutionStatus
-} from "./chunk-X4PVR6AW.js";
+} from "./chunk-7OHSAZLF.js";
 import {
   agentExists,
   deleteAgent,
@@ -198,7 +198,7 @@ import {
   saveAgent,
   saveAgentToProject,
   setRuntimeConfig
-} from "./chunk-BHVR2YS5.js";
+} from "./chunk-4F4ARGAM.js";
 import {
   findFileByInternalId,
   pathExists
@@ -206,23 +206,23 @@ import {
 import {
   createContextStateMessage,
   toClientSession
-} from "./chunk-AATMPL7S.js";
+} from "./chunk-OVAHNEFG.js";
 import {
   getPathSeparator,
   isAbsolutePath
-} from "./chunk-MOYWDP73.js";
+} from "./chunk-46Q2SHGJ.js";
 import {
   createProviderManager,
   detectModel,
   getLlmStatus,
   parseDefaultModelSelection
-} from "./chunk-G5GUQKLS.js";
+} from "./chunk-EJ5GFSD4.js";
 import {
   buildOpenFoxMcpBootstrap
 } from "./chunk-YNMP647F.js";
 import {
   VERSION
-} from "./chunk-FG4G4EWB.js";
+} from "./chunk-Z7MGLDLK.js";
 import {
   deleteProject,
   getProject,
@@ -245,12 +245,12 @@ import {
 import {
   SessionNotFoundError,
   WorkspaceInUseError
-} from "./chunk-N5JKVNLH.js";
+} from "./chunk-LSO3IGJ4.js";
 import {
   deleteSetting,
   getSetting,
   setSetting
-} from "./chunk-QUAEH3MP.js";
+} from "./chunk-EMXMTCSY.js";
 import {
   initDatabase
 } from "./chunk-JU757HVI.js";
@@ -264,7 +264,7 @@ import {
 } from "./chunk-K44MW7JJ.js";
 import {
   createServerMessage
-} from "./chunk-HF3NDXB4.js";
+} from "./chunk-PW5L4WBG.js";
 import {
   getGlobalConfigDir
 } from "./chunk-CQGTEGKL.js";
@@ -540,6 +540,15 @@ var RULES = [
     tools: [{ name: "write_file", arguments: { path: "/home/test/approved.txt", content: "approved" } }],
     response: "Wrote to the approved path."
   },
+  {
+    match: /write.*(?:three|3).*outside|three.*files.*outside/i,
+    tools: [
+      { name: "write_file", arguments: { path: "/home/test/alpha.txt", content: "alpha" } },
+      { name: "write_file", arguments: { path: "/home/test/beta.txt", content: "beta" } },
+      { name: "write_file", arguments: { path: "/home/test/gamma.txt", content: "gamma" } }
+    ],
+    response: "Wrote three files outside the project."
+  },
   {
     match: /write.*\/home\/test\/denied/i,
     tools: [{ name: "write_file", arguments: { path: "/home/test/denied.txt", content: "denied" } }],
@@ -2840,6 +2849,10 @@ var SessionManager = class {
   unknownProviderWarned = /* @__PURE__ */ new Set();
   switchLocks = /* @__PURE__ */ new Map();
   workspaceCreationLocks = /* @__PURE__ */ new Map();
+  // Cooperative pause: in-memory only (a pause is only meaningful for a live,
+  // running turn — it never survives a process restart).
+  pauseStates = /* @__PURE__ */ new Map();
+  pauseWaiters = /* @__PURE__ */ new Map();
   constructor(providerManager) {
     this.providerManager = providerManager;
   }
@@ -3132,9 +3145,9 @@ var SessionManager = class {
    * @throws Error for invalid payloads or unknown project
    */
   async importSession(projectId, rawPayload) {
-    const { parseSessionExport, IMPORTED_SESSION_REMINDER, SESSION_EXPORT_VERSION } = await import("./export-import-6OUEANYH.js");
-    const { injectContextDriftReminders, getToolSetFingerprint } = await import("./dynamic-context-HL4RGNHK.js");
-    const { loadAllAgentsDefault: loadAllAgentsDefault2, resolveDefaultAgentId } = await import("./registry-FMDMGIUB.js");
+    const { parseSessionExport, IMPORTED_SESSION_REMINDER, SESSION_EXPORT_VERSION } = await import("./export-import-ZJFYZJOP.js");
+    const { injectContextDriftReminders, getToolSetFingerprint } = await import("./dynamic-context-3MAA4AQR.js");
+    const { loadAllAgentsDefault: loadAllAgentsDefault2, resolveDefaultAgentId } = await import("./registry-PVJAAL2Y.js");
     const payload = parseSessionExport(rawPayload);
     if (payload.version !== SESSION_EXPORT_VERSION) {
       throw new Error(`Unsupported session export version: ${payload.version}`);
@@ -3268,6 +3281,7 @@ var SessionManager = class {
     const eventStore = getEventStore();
     eventStore.deleteSession(id);
     this.messageQueues.delete(id);
+    this.clearPauseState(id);
     this.warmedUpSessions.delete(id);
     this.announcedPromptHashStore.delete(id);
     this.announcedToolFingerprintStore.delete(id);
@@ -3371,11 +3385,137 @@ var SessionManager = class {
     logger.debug("Setting session running state", { sessionId, isRunning });
     updateSessionRunning(sessionId, isRunning);
     emitRunningChanged(sessionId, isRunning);
+    if (!isRunning) {
+      this.clearPauseState(sessionId);
+    }
     const updatedSession = this.requireSession(sessionId);
     this.emit({ type: "session_updated", session: updatedSession });
     this.emit({ type: "running_changed", sessionId, isRunning });
     return updatedSession;
   }
+  // ============================================================================
+  // Cooperative pause
+  //
+  // A pause never aborts the in-flight LLM request: it only gates the NEXT one.
+  // The agent loop calls enterPauseGate() before every top-level LLM request;
+  // the gate blocks until the user resumes (or the session aborts).
+  //
+  //   none --requestPause--> pending --gate reached--> paused
+  //   pending --requestResume--> none (cancel, no interruption)
+  //   paused --requestResume--> resuming --gate released--> none
+  // ============================================================================
+  /** Current pause state ('none' when the session has no pause in flight). */
+  getPauseState(sessionId) {
+    return this.pauseStates.get(sessionId) ?? "none";
+  }
+  /** Request a pause. Succeeds only from 'none'. Returns false otherwise. */
+  requestPause(sessionId) {
+    if (this.getPauseState(sessionId) !== "none") {
+      return false;
+    }
+    this.transitionPauseState(sessionId, "pending");
+    return true;
+  }
+  /**
+   * Request resume. From 'pending' this cancels the pause (the running turn is
+   * left alone); from 'paused' it releases the blocked gate. Returns false
+   * when there is nothing to resume.
+   */
+  requestResume(sessionId) {
+    const state = this.getPauseState(sessionId);
+    if (state === "pending") {
+      this.transitionPauseState(sessionId, "none");
+      return true;
+    }
+    if (state === "paused") {
+      this.transitionPauseState(sessionId, "resuming");
+      this.wakePauseWaiters(sessionId, "released");
+      return true;
+    }
+    return false;
+  }
+  /**
+   * Pause gate — call before each top-level LLM request. Resolves 'released'
+   * when the request may proceed (no pause, or the user resumed) and 'aborted'
+   * when the session was aborted while paused. Concurrent gates (parent +
+   * sub-agent loops) all block on a single pause and all release on resume.
+   */
+  async enterPauseGate(sessionId, signal) {
+    const state = this.getPauseState(sessionId);
+    if (state === "none") {
+      return "released";
+    }
+    if (state === "resuming") {
+      this.transitionPauseState(sessionId, "none");
+      return "released";
+    }
+    if (state === "pending") {
+      this.transitionPauseState(sessionId, "paused");
+    }
+    const outcome = await new Promise((resolve9) => {
+      let waiters = this.pauseWaiters.get(sessionId);
+      if (!waiters) {
+        waiters = /* @__PURE__ */ new Set();
+        this.pauseWaiters.set(sessionId, waiters);
+      }
+      const onWake = (o) => {
+        cleanup();
+        resolve9(o);
+      };
+      const onAbort = () => {
+        cleanup();
+        resolve9("aborted");
+      };
+      const cleanup = () => {
+        waiters.delete(onWake);
+        signal?.removeEventListener("abort", onAbort);
+        if (waiters.size === 0) {
+          this.pauseWaiters.delete(sessionId);
+        }
+      };
+      waiters.add(onWake);
+      if (signal?.aborted) {
+        cleanup();
+        resolve9("aborted");
+        return;
+      }
+      signal?.addEventListener("abort", onAbort, { once: true });
+    });
+    this.transitionPauseState(sessionId, "none");
+    return outcome;
+  }
+  /**
+   * Clear any pause state and wake blocked gates with 'aborted'. Used by the
+   * stop/abort paths and session deletion so a paused gate never hangs.
+   */
+  clearPauseState(sessionId) {
+    if (this.getPauseState(sessionId) !== "none") {
+      this.transitionPauseState(sessionId, "none");
+    }
+    this.wakePauseWaiters(sessionId, "aborted");
+  }
+  transitionPauseState(sessionId, next) {
+    if (this.getPauseState(sessionId) === next) {
+      return;
+    }
+    logger.debug("Changing session pause state", { sessionId, from: this.getPauseState(sessionId), to: next });
+    this.pauseStates.set(sessionId, next);
+    this.emit({ type: "pause_changed", sessionId, pauseState: next });
+  }
+  wakePauseWaiters(sessionId, outcome) {
+    const waiters = this.pauseWaiters.get(sessionId);
+    if (!waiters) {
+      return;
+    }
+    this.pauseWaiters.delete(sessionId);
+    for (const wake of waiters) {
+      try {
+        wake(outcome);
+      } catch (error) {
+        logger.error("Pause waiter wake error", { sessionId, error });
+      }
+    }
+  }
   /**
    * Set session provider/model. Updates DB directly.
    */
@@ -4371,6 +4511,7 @@ All file and git operations should use this directory.${commitHint}
         mode: dbSession.mode,
         phase: "plan",
         isRunning: dbSession.isRunning,
+        pauseState: this.getPauseState(dbSession.id),
         messages: [],
         criteria: [],
         contextWindows: [],
@@ -4405,6 +4546,7 @@ All file and git operations should use this directory.${commitHint}
       mode: eventState.mode,
       phase: eventState.phase,
       isRunning,
+      pauseState: this.getPauseState(dbSession.id),
       messages,
       criteria: eventState.criteria,
       metadataEntries: eventState.metadataEntries,
@@ -5139,6 +5281,7 @@ function buildSessionStatusPayload(sessionId, deps) {
   return {
     ...status,
     isRunning: session.isRunning,
+    pauseState: session.pauseState ?? "none",
     pending: { questions: pendingQuestions, confirmations: pendingConfirmations },
     workflow: workflowPayload(activeExecution)
   };
@@ -7103,7 +7246,7 @@ function detectWsl() {
 // src/server/index.ts
 var __dirname3 = dirname7(fileURLToPath6(import.meta.url));
 async function announceContextDrift(sessionManager, sessionIds) {
-  const { injectContextDriftRemindersForSessions } = await import("./dynamic-context-HL4RGNHK.js");
+  const { injectContextDriftRemindersForSessions } = await import("./dynamic-context-3MAA4AQR.js");
   await injectContextDriftRemindersForSessions(sessionManager, sessionIds);
 }
 async function createServerHandle(config3) {
@@ -7196,7 +7339,7 @@ async function createServerHandle(config3) {
     }
   });
   setMcpManagerForTools(mcpManager);
-  const { setGlobalMcpServersProvider } = await import("./session-overrides-ANQBKV74.js");
+  const { setGlobalMcpServersProvider } = await import("./session-overrides-7OPGV7CQ.js");
   setGlobalMcpServersProvider(
     () => mcpManager.getAllServers().map((s) => ({ name: s.name, disabled: s.config.disabled }))
   );
@@ -7218,7 +7361,7 @@ async function createServerHandle(config3) {
       toolRegistry = createToolRegistry();
       logger.info("MCP tools registered", { count: mcpTools.length });
     }
-    const { signalMcpReady } = await import("./server-MI2LZK3W.js");
+    const { signalMcpReady } = await import("./server-B4AJ7ETE.js");
     signalMcpReady();
   });
   const app = express();
@@ -7433,9 +7576,9 @@ async function createServerHandle(config3) {
   const sessionFavoriteRouter = express.Router();
   registerSessionFavoriteRoute(sessionFavoriteRouter, sessionManager);
   app.use("/api", sessionFavoriteRouter);
-  const { createTasksService } = await import("./service-NKLQH647.js");
-  const { registerTaskRoutes } = await import("./tasks-GPM3JAE6.js");
-  const { setTasksService } = await import("./tools-WLJJ3ILO.js");
+  const { createTasksService } = await import("./service-JL55SFPL.js");
+  const { registerTaskRoutes } = await import("./tasks-ZMJCHW7E.js");
+  const { setTasksService } = await import("./tools-LZHSSSK4.js");
   const tasksService = createTasksService({
     sessionManager,
     config: config3,
@@ -7467,7 +7610,7 @@ async function createServerHandle(config3) {
     }
     try {
       await checkoutBranch(project.workdir, branch);
-      const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-GLYACE5R.js");
+      const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-VHS47DHO.js");
       const allSessions = sessionManager.listSessions();
       for (const s of allSessions) {
         if (sessionManager.getEffectiveWorkdir(s.id) === project.workdir) {
@@ -7503,7 +7646,7 @@ async function createServerHandle(config3) {
         );
       }
       await createBranch(project.workdir, name, sb);
-      const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-GLYACE5R.js");
+      const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-VHS47DHO.js");
       const allSessions = sessionManager.listSessions();
       for (const s of allSessions) {
         if (sessionManager.getEffectiveWorkdir(s.id) === project.workdir) {
@@ -7535,7 +7678,7 @@ async function createServerHandle(config3) {
     if (!branch || typeof branch !== "string") return res.status(400).json({ error: "branch is required" });
     const effectiveWorkdir = sessionManager.getEffectiveWorkdir(req.params.id);
     const { checkoutBranch, validateRef: validateRef2 } = await import("./workspace-LM646OHC.js");
-    const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-GLYACE5R.js");
+    const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-VHS47DHO.js");
     try {
       await validateRef2(effectiveWorkdir, branch);
       await checkoutBranch(effectiveWorkdir, branch);
@@ -7578,7 +7721,7 @@ All file and git operations should use this branch.
     if (!name || typeof name !== "string") return res.status(400).json({ error: "name is required" });
     const effectiveWorkdir = sessionManager.getEffectiveWorkdir(req.params.id);
     const { validateRef: validateRef2 } = await import("./workspace-LM646OHC.js");
-    const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-GLYACE5R.js");
+    const { updateSessionBranch: updateSessionBranch2 } = await import("./sessions-VHS47DHO.js");
     try {
       await validateRef2(effectiveWorkdir, name);
       if (sourceBranch) {
@@ -7633,8 +7776,8 @@ All file and git operations should use this branch.
     res.json({ workspaces: workspacesList });
   });
   app.get("/api/sessions", async (req, res) => {
-    const { getRecentUserPromptsForSession } = await import("./events-ADE2KEHI.js");
-    const { getPendingConfirmationsBySession: getPendingConfirmationsBySession2 } = await import("./path-security-DND2R3RP.js");
+    const { getRecentUserPromptsForSession } = await import("./events-ZLP5V2YU.js");
+    const { getPendingConfirmationsBySession: getPendingConfirmationsBySession2 } = await import("./path-security-V3XALT5E.js");
     const projectId = req.query["projectId"];
     const rawLimit = req.query["limit"];
     const offset = parseInt(req.query["offset"]) || 0;
@@ -7752,10 +7895,10 @@ All file and git operations should use this branch.
     }
   });
   app.get("/api/sessions/:id", async (req, res) => {
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEventsWithSnapshot2 } = await import("./events-ADE2KEHI.js");
-    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2, foldPendingConfirmations } = await import("./folding-CM63AVSB.js");
-    const { getPendingQuestionsForSession: getPendingQuestionsForSession2 } = await import("./tools-WLJJ3ILO.js");
-    const { getMaxVisibleItems } = await import("./settings-WH6BVQCP.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEventsWithSnapshot2 } = await import("./events-ZLP5V2YU.js");
+    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2, foldPendingConfirmations } = await import("./folding-BXMVJIFF.js");
+    const { getPendingQuestionsForSession: getPendingQuestionsForSession2 } = await import("./tools-LZHSSSK4.js");
+    const { getMaxVisibleItems } = await import("./settings-HCSHADP5.js");
     const session = sessionManager.getSession(req.params.id);
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
@@ -7783,9 +7926,9 @@ All file and git operations should use this branch.
   });
   app.get("/api/sessions/:id/status", async (req, res) => {
     const { projectSessionStatus: projectSessionStatus2 } = await import("./session-status-UFO5IFI7.js");
-    const { getPendingQuestionsForSession: getPendingQuestionsForSession2 } = await import("./tools-WLJJ3ILO.js");
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEventsWithSnapshot2 } = await import("./events-ADE2KEHI.js");
-    const { foldPendingConfirmations } = await import("./folding-CM63AVSB.js");
+    const { getPendingQuestionsForSession: getPendingQuestionsForSession2 } = await import("./tools-LZHSSSK4.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEventsWithSnapshot2 } = await import("./events-ZLP5V2YU.js");
+    const { foldPendingConfirmations } = await import("./folding-BXMVJIFF.js");
     const sessionId = req.params["id"];
     if (!sessionId) {
       return res.status(400).json({ error: "Session id is required" });
@@ -7815,8 +7958,8 @@ All file and git operations should use this branch.
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-ZCPFNHTE.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-WLJJ3ILO.js");
+    const { stopSessionExecution } = await import("./chat-handler-KGITQAXC.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-LZHSSSK4.js");
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
     abortSession(sessionId);
@@ -7845,9 +7988,9 @@ All file and git operations should use this branch.
     res.json({ success: true });
   });
   app.post("/api/sessions/:id/provider", async (req, res) => {
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-ADE2KEHI.js");
-    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-CM63AVSB.js");
-    const { getMaxVisibleItems } = await import("./settings-WH6BVQCP.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-ZLP5V2YU.js");
+    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-BXMVJIFF.js");
+    const { getMaxVisibleItems } = await import("./settings-HCSHADP5.js");
     const sessionId = req.params.id;
     const session = sessionManager.getSession(sessionId);
     if (!session) {
@@ -7876,9 +8019,9 @@ All file and git operations should use this branch.
     res.json({ session: toClientSession(updatedSession), messages, hiddenCount, contextState });
   });
   app.delete("/api/sessions/:id/provider", async (req, res) => {
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-ADE2KEHI.js");
-    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-CM63AVSB.js");
-    const { getMaxVisibleItems } = await import("./settings-WH6BVQCP.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-ZLP5V2YU.js");
+    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-BXMVJIFF.js");
+    const { getMaxVisibleItems } = await import("./settings-HCSHADP5.js");
     const sessionId = req.params.id;
     const session = sessionManager.getSession(sessionId);
     if (!session) {
@@ -8010,9 +8153,9 @@ All file and git operations should use this branch.
     res.json({ success: true });
   });
   app.put("/api/sessions/:id/mode", async (req, res) => {
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-ADE2KEHI.js");
-    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-CM63AVSB.js");
-    const { getMaxVisibleItems } = await import("./settings-WH6BVQCP.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEv } = await import("./events-ZLP5V2YU.js");
+    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-BXMVJIFF.js");
+    const { getMaxVisibleItems } = await import("./settings-HCSHADP5.js");
     const sessionId = req.params.id;
     const session = sessionManager.getSession(sessionId);
     if (!session) {
@@ -8047,6 +8190,17 @@ All file and git operations should use this branch.
       return res.status(400).json({ error: 'dangerLevel is required and must be "normal" or "dangerous"' });
     }
     sessionManager.setDangerLevel(sessionId, dangerLevel);
+    if (dangerLevel === "dangerous") {
+      const { autoApprovePendingConfirmationsForSession } = await import("./tools-LZHSSSK4.js");
+      const approvedCallIds = autoApprovePendingConfirmationsForSession(sessionId);
+      for (const callId of approvedCallIds) {
+        wssExports.broadcastForSession(sessionId, {
+          type: "session.confirmation_resolved",
+          sessionId,
+          payload: { sessionId, callId }
+        });
+      }
+    }
     const updatedSession = sessionManager.getSession(sessionId);
     res.json({ session: toClientSession(updatedSession) });
   });
@@ -8072,7 +8226,7 @@ All file and git operations should use this branch.
     setSessionDisabledServers(sessionId, disabledServers);
     const messages = session.messages ?? [];
     if (messages.length === 0) {
-      const { applyDynamicContext } = await import("./dynamic-context-HL4RGNHK.js");
+      const { applyDynamicContext } = await import("./dynamic-context-3MAA4AQR.js");
       const modelName = session.providerModel ?? providerManager.getCurrentModel();
       await applyDynamicContext(sessionManager, sessionId, modelName);
     } else {
@@ -8106,7 +8260,7 @@ All file and git operations should use this branch.
     if (alwaysAllow !== void 0 && typeof alwaysAllow !== "boolean") {
       return res.status(400).json({ error: "alwaysAllow must be a boolean if provided" });
     }
-    const { providePathConfirmation: providePathConfirmation2, getConfirmationSessionId } = await import("./tools-WLJJ3ILO.js");
+    const { providePathConfirmation: providePathConfirmation2, getConfirmationSessionId } = await import("./tools-LZHSSSK4.js");
     const pendingSessionId = getConfirmationSessionId(callId);
     if (!pendingSessionId) {
       return res.status(404).json({ error: "No pending path confirmation with that ID" });
@@ -8118,11 +8272,11 @@ All file and git operations should use this branch.
     if (!result.found) {
       return res.status(404).json({ error: "No pending path confirmation with that ID" });
     }
-    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEvents } = await import("./events-ADE2KEHI.js");
-    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2, foldPendingConfirmations } = await import("./folding-CM63AVSB.js");
-    const { createSessionStateMessage } = await import("./protocol-XO4ZROAU.js");
-    const { getPendingQuestionsForSession: getPendingQuestionsForSession2 } = await import("./tools-WLJJ3ILO.js");
-    const { getMaxVisibleItems } = await import("./settings-WH6BVQCP.js");
+    const { getEventStore: getEventStore2, combineEventsWithSnapshot: combineEvents } = await import("./events-ZLP5V2YU.js");
+    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2, foldPendingConfirmations } = await import("./folding-BXMVJIFF.js");
+    const { createSessionStateMessage } = await import("./protocol-MRMOB3P4.js");
+    const { getPendingQuestionsForSession: getPendingQuestionsForSession2 } = await import("./tools-LZHSSSK4.js");
+    const { getMaxVisibleItems } = await import("./settings-HCSHADP5.js");
     const eventStore = getEventStore2();
     const { snapshot, events: eventsSinceSnapshot } = eventStore.getEventsSinceSnapshot(sessionId);
     const events = combineEvents(sessionId, snapshot, eventsSinceSnapshot);
@@ -8159,7 +8313,7 @@ All file and git operations should use this branch.
     if (!skip && typeof answer !== "string") {
       return res.status(400).json({ error: "answer is required when not skipping" });
     }
-    const { provideAnswer: provideAnswer2 } = await import("./tools-WLJJ3ILO.js");
+    const { provideAnswer: provideAnswer2 } = await import("./tools-LZHSSSK4.js");
     const found = provideAnswer2(callId, answer ?? "", skip ?? false);
     if (!found) {
       return res.status(404).json({ error: "No pending question with that ID" });
@@ -8192,7 +8346,7 @@ All file and git operations should use this branch.
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { getSetting: getSetting2, SETTINGS_KEYS } = await import("./settings-WH6BVQCP.js");
+    const { getSetting: getSetting2, SETTINGS_KEYS } = await import("./settings-HCSHADP5.js");
     if (getSetting2(SETTINGS_KEYS.CACHE_WARMING) !== "true") {
       return res.json({ success: false, reason: "disabled" });
     }
@@ -8225,7 +8379,7 @@ All file and git operations should use this branch.
       backend: activeProvider?.backend ?? llmClient.getBackend(),
       model: llmClient.getModel()
     };
-    const { runAgentTurn, TurnMetrics } = await import("./orchestrator-FMWKMD54.js");
+    const { runAgentTurn, TurnMetrics } = await import("./orchestrator-MMHV6SZY.js");
     runAgentTurn(
       {
         sessionManager,
@@ -8263,18 +8417,45 @@ All file and git operations should use this branch.
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-ZCPFNHTE.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-WLJJ3ILO.js");
+    const { stopSessionExecution } = await import("./chat-handler-KGITQAXC.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-LZHSSSK4.js");
     const queuedMessages = sessionManager.getQueueState(sessionId);
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
     abortSession(sessionId);
     cancelQuestionsForSession(sessionId, "Session stopped by user");
     cancelPathConfirmationsForSession(sessionId, "Session stopped by user");
-    const eventStore = (await import("./events-ADE2KEHI.js")).getEventStore();
+    const eventStore = (await import("./events-ZLP5V2YU.js")).getEventStore();
     eventStore.append(sessionId, { type: "running.changed", data: { isRunning: false } });
     res.json({ success: true, queuedMessages });
   });
+  app.post("/api/sessions/:id/pause", async (req, res) => {
+    const sessionId = req.params.id;
+    const session = sessionManager.getSession(sessionId);
+    if (!session) {
+      return res.status(404).json({ error: "Session not found" });
+    }
+    if (!session.isRunning) {
+      return res.status(409).json({ error: "Session is not running" });
+    }
+    const ok2 = sessionManager.requestPause(sessionId);
+    if (!ok2) {
+      return res.status(409).json({ error: "A pause is already in progress" });
+    }
+    res.json({ success: true, pauseState: sessionManager.getPauseState(sessionId) });
+  });
+  app.post("/api/sessions/:id/resume", async (req, res) => {
+    const sessionId = req.params.id;
+    const session = sessionManager.getSession(sessionId);
+    if (!session) {
+      return res.status(404).json({ error: "Session not found" });
+    }
+    const ok2 = sessionManager.requestResume(sessionId);
+    if (!ok2) {
+      return res.status(409).json({ error: "Nothing to resume" });
+    }
+    res.json({ success: true, pauseState: sessionManager.getPauseState(sessionId) });
+  });
   app.post("/api/sessions/:id/truncate", async (req, res) => {
     const sessionId = req.params.id;
     const session = sessionManager.getSession(sessionId);
@@ -8285,7 +8466,7 @@ All file and git operations should use this branch.
     if (typeof messageIndex !== "number" || messageIndex < 0) {
       return res.status(400).json({ error: "messageIndex must be a non-negative number" });
     }
-    const { truncateSessionMessages } = await import("./events-ADE2KEHI.js");
+    const { truncateSessionMessages } = await import("./events-ZLP5V2YU.js");
     truncateSessionMessages(sessionId, messageIndex);
     res.json({ success: true });
   });
@@ -8305,8 +8486,8 @@ All file and git operations should use this branch.
     if (attachments !== void 0 && !Array.isArray(attachments)) {
       return res.status(400).json({ error: "attachments must be an array if provided" });
     }
-    const { getEventStore: getEventStore2 } = await import("./events-ADE2KEHI.js");
-    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-CM63AVSB.js");
+    const { getEventStore: getEventStore2 } = await import("./events-ZLP5V2YU.js");
+    const { buildMessagesFromStoredEvents: buildMessagesFromStoredEvents2 } = await import("./folding-BXMVJIFF.js");
     const eventStore = getEventStore2();
     const events = eventStore.getEvents(sessionId);
     const { messages } = buildMessagesFromStoredEvents2(events);
@@ -8318,7 +8499,7 @@ All file and git operations should use this branch.
     if (msg.role !== "user" || msg.isSystemGenerated) {
       return res.status(400).json({ error: "Can only replay user messages" });
     }
-    const { truncateSessionMessages } = await import("./events-ADE2KEHI.js");
+    const { truncateSessionMessages } = await import("./events-ZLP5V2YU.js");
     truncateSessionMessages(sessionId, msgIndex - 1);
     sessionManager.queueMessage(
       sessionId,
@@ -8360,7 +8541,7 @@ All file and git operations should use this branch.
       return res.status(404).json({ error: "Session not found" });
     }
     try {
-      const { buildSessionExport } = await import("./export-import-6OUEANYH.js");
+      const { buildSessionExport } = await import("./export-import-ZJFYZJOP.js");
       const payload = buildSessionExport(sessionManager, sessionId);
       const filename = `${(payload.session.title ?? "session").replace(/[^a-zA-Z0-9-_]/g, "_")}.openfox-session.json`;
       res.setHeader("Content-Disposition", `attachment; filename="${filename}"`);
@@ -8417,7 +8598,7 @@ All file and git operations should use this branch.
     res.json({ accepted: true });
   });
   app.get("/api/settings", async (req, res) => {
-    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-WH6BVQCP.js");
+    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-HCSHADP5.js");
     const keysParam = req.query["keys"];
     if (!keysParam) {
       return res.status(400).json({ error: "keys query parameter is required" });
@@ -8430,19 +8611,19 @@ All file and git operations should use this branch.
     res.json(result);
   });
   app.get("/api/settings/:key", async (req, res) => {
-    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-WH6BVQCP.js");
+    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-HCSHADP5.js");
     const key = req.params.key;
     const value = getSetting2(key) ?? SETTINGS_DEFAULTS[key] ?? null;
     res.json({ key, value });
   });
   app.get("/api/settings/:key", async (req, res) => {
-    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-WH6BVQCP.js");
+    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-HCSHADP5.js");
     const key = req.params.key;
     const value = getSetting2(key) ?? SETTINGS_DEFAULTS[key] ?? null;
     res.json({ key, value });
   });
   app.put("/api/settings/:key", async (req, res) => {
-    const { setSetting: setSetting2 } = await import("./settings-WH6BVQCP.js");
+    const { setSetting: setSetting2 } = await import("./settings-HCSHADP5.js");
     const key = req.params.key;
     const { value } = req.body;
     if (value === void 0) {
@@ -8469,7 +8650,7 @@ All file and git operations should use this branch.
     }
   });
   app.get("/api/tools/shells", async (_req, res) => {
-    const { listAvailableShells } = await import("./platform-KPKYBU54.js");
+    const { listAvailableShells } = await import("./platform-DBPLSLE4.js");
     res.json({ shells: listAvailableShells() });
   });
   app.get("/api/config", async (_req, res) => {
@@ -8507,7 +8688,7 @@ All file and git operations should use this branch.
       defaultModelSelection: config3.defaultModelSelection,
       visionFallback,
       platform: platformInfo,
-      locale: (await import("./settings-WH6BVQCP.js")).getSetting("display.locale") ?? "automatic"
+      locale: (await import("./settings-HCSHADP5.js")).getSetting("display.locale") ?? "automatic"
     });
   });
   app.post("/api/model/refresh", async (_req, res) => {
@@ -8563,7 +8744,7 @@ All file and git operations should use this branch.
     }));
   }
   app.post("/api/proxy/test", async (_req, res) => {
-    const { getSetting: getSetting2, SETTINGS_KEYS } = await import("./settings-WH6BVQCP.js");
+    const { getSetting: getSetting2, SETTINGS_KEYS } = await import("./settings-HCSHADP5.js");
     const proxyUrl = getSetting2(SETTINGS_KEYS.PROXY_URL);
     if (!proxyUrl) {
       return res.status(400).json({ success: false, error: "No proxy URL configured" });
@@ -8655,7 +8836,7 @@ All file and git operations should use this branch.
     }
   });
   app.post("/api/proxy/test", async (_req, res) => {
-    const { getSetting: getSetting2, SETTINGS_KEYS } = await import("./settings-WH6BVQCP.js");
+    const { getSetting: getSetting2, SETTINGS_KEYS } = await import("./settings-HCSHADP5.js");
     const proxyUrl = getSetting2(SETTINGS_KEYS.PROXY_URL);
     if (!proxyUrl) {
       return res.status(400).json({ success: false, error: "No proxy URL configured" });
@@ -8682,7 +8863,7 @@ All file and git operations should use this branch.
     const backend = req.query["backend"];
     if (!url) return res.status(400).json({ error: "url is required" });
     try {
-      const { fetchModelsWithContext } = await import("./provider-manager-Y53SVVQ3.js");
+      const { fetchModelsWithContext } = await import("./provider-manager-3MV7KDAD.js");
       const { getModelProfile: getModelProfile2 } = await import("./profiles-EBCVFYG7.js");
       const { getCatalogEntry } = await import("./model-catalog-Y5MA5OZP.js");
       const models = await fetchModelsWithContext(
@@ -8757,7 +8938,7 @@ All file and git operations should use this branch.
       const { getModelProfile: getModelProfile2 } = await import("./profiles-EBCVFYG7.js");
       const { getBackendCapabilities } = await import("./backend-24FTDSHF.js");
       const { buildNonStreamingCreateParams } = await import("./client-pure-YZ4IGCU4.js");
-      const { OpenAIHttpClient } = await import("./http-client-C6UYWVWZ.js");
+      const { OpenAIHttpClient } = await import("./http-client-VMRQHMF7.js");
       const { ensureVersionPrefix } = await import("./url-utils-C5BM7NF7.js");
       const profile = getModelProfile2(model);
       const capabilities = getBackendCapabilities(backend || "unknown");
@@ -9034,7 +9215,7 @@ All file and git operations should use this branch.
     if (clearedSessions > 0) {
       logger.info("Cleared provider from sessions of deleted provider", { providerId: id, sessions: clearedSessions });
     }
-    const { pruneFavoriteModels } = await import("./settings-WH6BVQCP.js");
+    const { pruneFavoriteModels } = await import("./settings-HCSHADP5.js");
     pruneFavoriteModels(updatedConfig.providers);
     res.json({ success: true });
   });
@@ -9097,7 +9278,7 @@ All file and git operations should use this branch.
       await saveGlobalConfig(config3.mode ?? "production", updatedConfig, config3.globalConfigPath);
       providerManager.setProviders(updatedConfig.providers, updatedConfig.defaultModelSelection ?? void 0);
       config3.defaultModelSelection = updatedConfig.defaultModelSelection;
-      const { pruneFavoriteModels } = await import("./settings-WH6BVQCP.js");
+      const { pruneFavoriteModels } = await import("./settings-HCSHADP5.js");
       pruneFavoriteModels(updatedConfig.providers);
       res.json({ success: true, provider: updatedConfig.providers.find((p) => p.id === id) });
     } catch (error) {
@@ -9183,7 +9364,7 @@ All file and git operations should use this branch.
   });
   async function rebuildMcpTools() {
     const { createMcpTools: createMcpTools2 } = await import("./tool-adapter-ZY4FC4C4.js");
-    const { setMcpTools: setMcpTools2 } = await import("./tools-WLJJ3ILO.js");
+    const { setMcpTools: setMcpTools2 } = await import("./tools-LZHSSSK4.js");
     const mcpTools = createMcpTools2(mcpManager);
     setMcpTools2(mcpTools);
     toolRegistry = createToolRegistry();
@@ -9613,13 +9794,13 @@ All file and git operations should use this branch.
     })
   );
   app.get("/api/sessions/:id/background-processes", async (req, res) => {
-    const { getSessionProcesses } = await import("./manager-FSPRJCYT.js");
+    const { getSessionProcesses } = await import("./manager-JZNNVDYR.js");
     const sessionId = req.params.id;
     const processes = getSessionProcesses(sessionId);
     res.json({ processes });
   });
   app.post("/api/sessions/:id/background-process/:processId/stop", async (req, res) => {
-    const { stopProcess } = await import("./manager-FSPRJCYT.js");
+    const { stopProcess } = await import("./manager-JZNNVDYR.js");
     const sessionId = req.params.id;
     const processId = req.params.processId;
     const session = sessionManager.getSession(sessionId);
@@ -9759,7 +9940,7 @@ All file and git operations should use this branch.
   );
   const wss = wssExports.wss;
   deferTasksBroadcast = (projectId, payload) => wssExports.broadcastForProject(projectId, "", { type: "tasks.update", payload });
-  const { launchWorkflowRun, abortRunnerRun } = await import("./launch-L5NSPAAX.js");
+  const { launchWorkflowRun, abortRunnerRun } = await import("./launch-73LDMGCT.js");
   deferTasksLaunchWorkflow = (sessionId, launch) => {
     const effective = sessionManager.resolveEffectiveProviderModel(sessionId);
     let llmClient = getLLMClient();
@@ -9804,7 +9985,7 @@ All file and git operations should use this branch.
     const state = sessionManager.getContextState(sessionId);
     wssExports.broadcastForSession(sessionId, createContextStateMessage(state));
   });
-  const { QueueProcessor } = await import("./processor-SB5X44PX.js");
+  const { QueueProcessor } = await import("./processor-2M7N26QG.js");
   const queueProcessor = new QueueProcessor({
     sessionManager,
     providerManager,
@@ -9846,8 +10027,8 @@ All file and git operations should use this branch.
     launchWorkflow: (sessionId, launch) => deferTasksLaunchWorkflow(sessionId, launch),
     stopSession: (sessionId) => {
       void (async () => {
-        const { stopSessionExecution } = await import("./chat-handler-ZCPFNHTE.js");
-        const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-WLJJ3ILO.js");
+        const { stopSessionExecution } = await import("./chat-handler-KGITQAXC.js");
+        const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-LZHSSSK4.js");
         sessionManager.clearMessageQueue(sessionId);
         stopSessionExecution(sessionId, sessionManager);
         abortSession(sessionId);
@@ -9968,4 +10149,4 @@ export {
   createServerHandle,
   createServer
 };
-//# sourceMappingURL=chunk-RS7I4W5A.js.map
+//# sourceMappingURL=chunk-C543DUKL.js.map