openfox 2.0.16 → 2.0.18

package/dist/agent-defaults/builder.agent.md

@@ -11,12 +11,11 @@ allowedTools:
   - edit_file
   - run_command
   - ask_user
-  - session_metadata:get,add,update,remove
+  - session_metadata
   - call_sub_agent
   - load_skill
   - dev_server
   - background_process
-  - step_done
 ---
 
 # Build Mode

package/dist/agent-defaults/code-reviewer.agent.md

@@ -8,7 +8,7 @@ allowedTools:
   - read_file
   - run_command
   - web_fetch
-  - session_metadata:get,add,update,remove
+  - session_metadata
 ---
 
 You are a code reviewer. Review the **git diff** of the modified files rather than reading the full files.

package/dist/agent-defaults/planner.agent.md

@@ -8,10 +8,13 @@ allowedTools:
   - read_file
   - web_fetch
   - run_command
-  - session_metadata:get,add,update,remove
+  - ask_user
+  - session_metadata
   - call_sub_agent
   - load_skill
   - background_process
+  - mcp_config
+  - dev_server
 ---
 
 # Plan Mode

package/dist/agent-defaults/verifier.agent.md

@@ -7,7 +7,7 @@ color: '#22c55e'
 allowedTools:
   - read_file
   - run_command
-  - session_metadata:get,add,update,remove
+  - session_metadata
   - web_fetch
 ---
 

package/dist/{chat-handler-PC6OVDUR.js → chat-handler-Z2C4372A.js}

@@ -8,10 +8,10 @@ import {
 } from "./chunk-J7KOV4ST.js";
 import {
   runChatTurn
-} from "./chunk-63UEI4AF.js";
-import "./chunk-JO6RF2U2.js";
-import "./chunk-XAMAYRDA.js";
-import "./chunk-L7TDUIQY.js";
+} from "./chunk-4MTSWBWH.js";
+import "./chunk-FCSFHRKI.js";
+import "./chunk-O4TED6AJ.js";
+import "./chunk-DX37WNM7.js";
 import "./chunk-DL6ZILAF.js";
 import "./chunk-PBGOZMVY.js";
 import "./chunk-VRGRAQDG.js";
@@ -164,4 +164,4 @@ export {
   startChatSession,
   stopSessionExecution
 };
-//# sourceMappingURL=chat-handler-PC6OVDUR.js.map
+//# sourceMappingURL=chat-handler-Z2C4372A.js.map

package/dist/{chunk-63UEI4AF.js → chunk-4MTSWBWH.js}

@@ -14,7 +14,7 @@ import {
   loadAllAgentsDefault,
   processEventsForConversation,
   runTopLevelAgentLoop
-} from "./chunk-JO6RF2U2.js";
+} from "./chunk-FCSFHRKI.js";
 import {
   TurnMetrics,
   WORKFLOW_KICKOFF_PROMPT,
@@ -22,7 +22,7 @@ import {
   buildAgentSmallReminder,
   createChatDoneEvent,
   createMessageStartEvent
-} from "./chunk-L7TDUIQY.js";
+} from "./chunk-DX37WNM7.js";
 import {
   getCurrentContextWindowId,
   getCurrentWindowMessageOptions,
@@ -320,4 +320,4 @@ export {
   runAgentTurn,
   injectWorkflowKickoffIfNeeded
 };
-//# sourceMappingURL=chunk-63UEI4AF.js.map
+//# sourceMappingURL=chunk-4MTSWBWH.js.map

package/dist/{chunk-L7TDUIQY.js → chunk-DX37WNM7.js}

@@ -8,6 +8,24 @@ import {
   logger
 } from "./chunk-K44MW7JJ.js";
 
+// src/server/tools/tool-policy.ts
+var ALWAYS_ALLOWED = /* @__PURE__ */ new Set(["step_done"]);
+var ALWAYS_ALLOWED_FOR_SUBAGENTS = /* @__PURE__ */ new Set(["return_value"]);
+var TOP_LEVEL_ONLY_TOOLS = /* @__PURE__ */ new Set(["call_sub_agent"]);
+function computeEffectiveTools(allowedTools, type) {
+  const tools = /* @__PURE__ */ new Set();
+  for (const entry of allowedTools) {
+    const baseName = entry.includes(":") ? entry.split(":")[0] : entry;
+    if (baseName === "return_value" && type === "agent") continue;
+    tools.add(baseName);
+  }
+  const alwaysAllowed = type === "sub-agent" ? ALWAYS_ALLOWED_FOR_SUBAGENTS : ALWAYS_ALLOWED;
+  for (const tool of alwaysAllowed) {
+    tools.add(tool);
+  }
+  return tools;
+}
+
 // src/server/chat/prompts.ts
 function buildBasePrompt(workdir, customInstructions, skills, modelName) {
   const instructionsSection = customInstructions ? `
@@ -199,8 +217,11 @@ function buildToolPermissionsSection(allowedTools, isSubAgent) {
       toolPermissions.set(toolName, [...existing, ...actions]);
     }
   }
-  if (isSubAgent && !baseTools.includes("return_value") && !toolPermissions.has("return_value")) {
-    baseTools.push("return_value");
+  const effectiveTools = computeEffectiveTools(allowedTools, isSubAgent ? "sub-agent" : "agent");
+  for (const tool of effectiveTools) {
+    if (!baseTools.includes(tool) && !toolPermissions.has(tool)) {
+      baseTools.push(tool);
+    }
   }
   const parts = [];
   for (const [toolName, actions] of toolPermissions) {
@@ -658,6 +679,10 @@ async function consumeStreamGenerator(gen, onEvent) {
 }
 
 export {
+  ALWAYS_ALLOWED,
+  ALWAYS_ALLOWED_FOR_SUBAGENTS,
+  TOP_LEVEL_ONLY_TOOLS,
+  computeEffectiveTools,
   buildBasePrompt,
   buildTopLevelSystemPrompt,
   buildSubAgentSystemPrompt,
@@ -674,4 +699,4 @@ export {
   createChatDoneEvent,
   consumeStreamGenerator
 };
-//# sourceMappingURL=chunk-L7TDUIQY.js.map
+//# sourceMappingURL=chunk-DX37WNM7.js.map

package/dist/{chunk-JO6RF2U2.js → chunk-FCSFHRKI.js}

@@ -1,12 +1,13 @@
 import {
   getProject
-} from "./chunk-XAMAYRDA.js";
+} from "./chunk-O4TED6AJ.js";
 import {
   COMPACTION_PROMPT,
   TurnMetrics,
   buildBasePrompt,
   buildSubAgentSystemPrompt,
   buildTopLevelSystemPrompt,
+  computeEffectiveTools,
   consumeStreamGenerator,
   createChatDoneEvent,
   createMessageDoneEvent,
@@ -14,7 +15,7 @@ import {
   createToolCallEvent,
   createToolResultEvent,
   streamLLMPure
-} from "./chunk-L7TDUIQY.js";
+} from "./chunk-DX37WNM7.js";
 import {
   startInspectProxy
 } from "./chunk-DL6ZILAF.js";
@@ -479,7 +480,7 @@ function validateAction(action, allowed, startTime) {
   return void 0;
 }
 function checkActionPermission(action, permittedActions, startTime) {
-  if (action && permittedActions && !permittedActions.includes(action)) {
+  if (action && permittedActions && permittedActions.length > 0 && !permittedActions.includes(action)) {
     return {
       success: false,
       error: `Action '${action}' not allowed. Available: ${permittedActions.join(", ")}`,
@@ -962,7 +963,8 @@ var readFileTool = createTool(
       metadata: {
         encoding,
         confidence: Math.round(confidence * 100) / 100,
-        lineCount: totalLines
+        lineCount: totalLines,
+        path: fullPath
       }
     });
   }
@@ -1059,7 +1061,10 @@ var writeFileTool = createTool(
     if (newHash) {
       context.sessionManager.updateFileHash(context.sessionId, fullPath, newHash);
     }
-    return helpers.success(output, false, diagnostics.length > 0 ? { diagnostics } : void 0);
+    return helpers.success(output, false, {
+      ...diagnostics.length > 0 && { diagnostics },
+      metadata: { path: fullPath }
+    });
   }
 );
 
@@ -1318,7 +1323,8 @@ Make sure whitespace and indentation match exactly.`
       }
       return helpers.success(output, false, {
         ...diagnostics.length > 0 && { diagnostics },
-        ...editContextRegions.length > 0 && { editContext: { regions: editContextRegions } }
+        ...editContextRegions.length > 0 && { editContext: { regions: editContextRegions } },
+        metadata: { path: fullPath }
       });
     });
   }
@@ -2536,7 +2542,7 @@ ${CONTINUE_PROMPT}` : CONTINUE_PROMPT;
     sessionManager.setCurrentContextSize(sessionId, result.usage.promptTokens);
     if (!compacting) {
       const contextState = sessionManager.getContextState(sessionId);
-      const { shouldCompact, appendCompactionPrompt } = await import("./compactor-R7GRFBOU.js");
+      const { shouldCompact, appendCompactionPrompt } = await import("./compactor-FAN7KRQN.js");
       if (shouldCompact(contextState.currentTokens, contextState.maxTokens, runtimeConfig.context.compactionThreshold)) {
         appendCompactionPrompt(sessionId, append);
         compacting = true;
@@ -3341,7 +3347,7 @@ var callSubAgentTool = {
       };
     }
     try {
-      const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-Y7ZGLK7A.js");
+      const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-QTEXQQ7Z.js");
       const toolRegistry = getToolRegistryForAgent2(agentDef);
       const turnMetrics = new TurnMetrics();
       const result = await executeSubAgent({
@@ -4147,7 +4153,7 @@ async function computeContextHash(sessionManager, sessionId) {
   const runtimeConfig = getRuntimeConfig();
   const configDir = getGlobalConfigDir(runtimeConfig.mode ?? "production");
   const skills = await getEnabledSkillMetadata(configDir, runtimeConfig.workdir);
-  const { createToolRegistry: createToolRegistry2 } = await import("./tools-Y7ZGLK7A.js");
+  const { createToolRegistry: createToolRegistry2 } = await import("./tools-QTEXQQ7Z.js");
   const allTools = createToolRegistry2().definitions;
   const toolFingerprint = getToolFingerprint(allTools);
   const hash = computeDynamicContextHash(instructionContent, skills, toolFingerprint);
@@ -4260,7 +4266,7 @@ var mcpConfigTool = createTool(
       await saveGlobalConfig(mcpConfigMode, { ...globalConfig, mcpServers: updated });
     }
     async function rebuildTools() {
-      const { setMcpTools: setMcpTools2 } = await import("./tools-Y7ZGLK7A.js");
+      const { setMcpTools: setMcpTools2 } = await import("./tools-QTEXQQ7Z.js");
       const mcpTools = createMcpTools(mcpManagerForTools);
       setMcpTools2(mcpTools);
     }
@@ -4361,6 +4367,37 @@ var mcpConfigTool = createTool(
 );
 
 // src/server/tools/index.ts
+var _builtInTools;
+function getBuiltInTools() {
+  if (!_builtInTools) {
+    _builtInTools = [
+      readFileTool,
+      writeFileTool,
+      editFileTool,
+      runCommandTool,
+      askUserTool,
+      sessionMetadataTool,
+      callSubAgentTool,
+      loadSkillTool,
+      returnValueTool,
+      webFetchTool,
+      devServerTool,
+      stepDoneTool,
+      backgroundProcessTool,
+      mcpConfigTool
+    ];
+  }
+  return _builtInTools;
+}
+function getBuiltInToolNames() {
+  if (BUILT_IN_TOOL_NAMES_CACHE.size === 0) {
+    for (const t of getBuiltInTools()) {
+      BUILT_IN_TOOL_NAMES_CACHE.add(t.name);
+    }
+  }
+  return BUILT_IN_TOOL_NAMES_CACHE;
+}
+var BUILT_IN_TOOL_NAMES_CACHE = /* @__PURE__ */ new Set();
 function parseToolPermissions(allowedTools) {
   const result = {};
   for (const entry of allowedTools) {
@@ -4396,9 +4433,8 @@ function validateToolAction(toolName, action, permissions) {
 function extractSubAgentPrompt(args) {
   return args["prompt"] || args["query"] || args["task"] || "";
 }
-function createRegistryFromTools(tools, allowedTools, toolPermissions) {
+function createRegistryFromTools(tools, allowedTools, toolPermissions, agentId, isSubAgent) {
   const toolMap = /* @__PURE__ */ new Map();
-  const allowedToolsSet = new Set(allowedTools || []);
   for (const tool of tools) {
     toolMap.set(tool.name, tool);
   }
@@ -4431,18 +4467,22 @@ function createRegistryFromTools(tools, allowedTools, toolPermissions) {
           truncated: false
         };
       }
-      const hasBaseToolPermission = allowedToolsSet.has(name) || [...allowedToolsSet].some((entry) => entry.startsWith(`${name}:`));
-      if (allowedTools && allowedTools.length > 0 && !hasBaseToolPermission) {
-        logger.debug("Permission denied: tool not in allowed list", {
-          tool: name,
-          allowedTools
-        });
-        return {
-          success: false,
-          error: createPermissionErrorMessage(name, allowedTools),
-          durationMs: 0,
-          truncated: false
-        };
+      const isMcpTool = !getBuiltInToolNames().has(name);
+      const hasRestrictions = allowedTools !== void 0;
+      if (!isMcpTool && hasRestrictions) {
+        const effectiveTools = computeEffectiveTools(allowedTools, isSubAgent ? "sub-agent" : "agent");
+        if (!effectiveTools.has(name)) {
+          logger.debug("Permission denied: tool not in allowed list", {
+            tool: name,
+            allowedTools
+          });
+          return {
+            success: false,
+            error: createPermissionErrorMessage(name, allowedTools, agentId, isSubAgent),
+            durationMs: 0,
+            truncated: false
+          };
+        }
       }
       if (toolPermissions) {
         const action = args["action"];
@@ -4503,30 +4543,20 @@ function setMcpTools(tools) {
   mcpToolsOverride = tools;
 }
 function getAllToolsMap() {
-  const builtInTools = [
-    readFileTool,
-    writeFileTool,
-    editFileTool,
-    runCommandTool,
-    askUserTool,
-    sessionMetadataTool,
-    callSubAgentTool,
-    loadSkillTool,
-    returnValueTool,
-    webFetchTool,
-    devServerTool,
-    stepDoneTool,
-    backgroundProcessTool,
-    mcpConfigTool
-  ].map((t) => [t.name, t]);
+  const builtInEntries = getBuiltInTools().map((t) => [t.name, t]);
   const mcpEntries = mcpToolsOverride.map((t) => [t.name, t]);
-  return new Map([...builtInTools, ...mcpEntries]);
+  return new Map([...builtInEntries, ...mcpEntries]);
 }
-function createPermissionErrorMessage(toolName, allowedTools) {
-  if (allowedTools.length === 0) {
+function createPermissionErrorMessage(toolName, allowedTools, agentId, isSubAgent) {
+  const effectiveTools = computeEffectiveTools(allowedTools, isSubAgent ? "sub-agent" : "agent");
+  const available = [...effectiveTools].sort();
+  if (agentId) {
+    return `Tool '${toolName}' is not available in '${agentId}' mode. Available: ${available.join(", ")}`;
+  }
+  if (available.length === 0) {
     return `Tool '${toolName}' is not in your allowed tools list. No tools are allowed.`;
   }
-  return `Tool '${toolName}' is not in your allowed tools list. Available: ${allowedTools.join(", ")}`;
+  return `Tool '${toolName}' is not in your allowed tools list. Available: ${available.join(", ")}`;
 }
 function addReturnValueToAllowedTools(allowedTools) {
   if (!allowedTools.includes("return_value")) {
@@ -4552,7 +4582,7 @@ function getToolRegistryForSubAgent(toolNames) {
     if (rv) tools.push(rv);
   }
   const allowedToolsWithReturnValue = addReturnValueToAllowedTools(toolNames);
-  return createRegistryFromTools(tools, allowedToolsWithReturnValue, toolPermissions);
+  return createRegistryFromTools(tools, allowedToolsWithReturnValue, toolPermissions, void 0, true);
 }
 function getToolRegistryForAgent(agentDef) {
   if (agentDef.metadata.subagent) {
@@ -4560,15 +4590,15 @@ function getToolRegistryForAgent(agentDef) {
   }
   const allTools = getAllToolsMap();
   const tools = [];
-  const allowedTools = [];
   for (const [name, tool] of allTools.entries()) {
     if (name === "return_value") {
       continue;
     }
     tools.push(tool);
-    allowedTools.push(name);
   }
-  return createRegistryFromTools(tools, allowedTools);
+  const allowedTools = agentDef.metadata.allowedTools;
+  const toolPermissions = parseToolPermissions(allowedTools);
+  return createRegistryFromTools(tools, allowedTools, toolPermissions, agentDef.metadata.id, false);
 }
 function createToolRegistry() {
   return createRegistryFromTools(Array.from(getAllToolsMap().values()));
@@ -4640,4 +4670,4 @@ export {
   getToolRegistryForAgent,
   createToolRegistry
 };
-//# sourceMappingURL=chunk-JO6RF2U2.js.map
+//# sourceMappingURL=chunk-FCSFHRKI.js.map

package/dist/{chunk-DQ6SV26Y.js → chunk-FERQPF5N.js}

@@ -21,7 +21,7 @@ import {
   tokenFromPassword,
   verifyPassword,
   workflowExists
-} from "./chunk-WOTBK3QQ.js";
+} from "./chunk-MPSOO6KF.js";
 import {
   agentExists,
   createToolRegistry,
@@ -61,10 +61,15 @@ import {
   setMcpTools,
   setNotifyMcpServersChanged,
   skillExists
-} from "./chunk-JO6RF2U2.js";
+} from "./chunk-FCSFHRKI.js";
 import {
   getProject
-} from "./chunk-XAMAYRDA.js";
+} from "./chunk-O4TED6AJ.js";
+import {
+  ALWAYS_ALLOWED,
+  ALWAYS_ALLOWED_FOR_SUBAGENTS,
+  TOP_LEVEL_ONLY_TOOLS
+} from "./chunk-DX37WNM7.js";
 import {
   getPathSeparator,
   isAbsolutePath
@@ -3944,7 +3949,7 @@ import { Router as Router6 } from "express";
 import { spawn as spawn2 } from "child_process";
 
 // src/constants.ts
-var VERSION = "2.0.16";
+var VERSION = "2.0.18";
 
 // src/server/routes/auto-update.ts
 var updateInProgress = false;
@@ -4124,7 +4129,7 @@ async function createServerHandle(config4) {
       setMcpTools(mcpTools);
       logger.info("MCP tools registered", { count: mcpTools.length });
     }
-    const { signalMcpReady } = await import("./server-RYKKAOFF.js");
+    const { signalMcpReady } = await import("./server-IZL6UZEZ.js");
     signalMcpReady();
   });
   const app = express();
@@ -4179,12 +4184,14 @@ async function createServerHandle(config4) {
   app.get("/api/tools", (_req, res) => {
     const tools = toolRegistry.tools.map((t) => ({
       name: t.name,
-      actions: t.permittedActions || []
+      actions: t.permittedActions || [],
+      alwaysAllowed: ALWAYS_ALLOWED.has(t.name) || ALWAYS_ALLOWED_FOR_SUBAGENTS.has(t.name),
+      topLevelOnly: TOP_LEVEL_ONLY_TOOLS.has(t.name)
     }));
     res.json({ tools });
   });
   app.get("/api/projects", async (_req, res) => {
-    const { listProjects } = await import("./projects-2HYIZC4Y.js");
+    const { listProjects } = await import("./projects-VO4PMVZY.js");
     const projects = listProjects();
     res.json({ projects });
   });
@@ -4193,7 +4200,7 @@ async function createServerHandle(config4) {
     if (!name || !workdir) {
       return res.status(400).json({ error: "name and workdir are required" });
     }
-    const { createDirectoryWithGit } = await import("./project-creator-6DU7E75S.js");
+    const { createDirectoryWithGit } = await import("./project-creator-BDDFQM6G.js");
     try {
       const project = await createDirectoryWithGit(name, workdir);
       res.status(201).json({ project });
@@ -4238,7 +4245,7 @@ async function createServerHandle(config4) {
     }
   });
   app.get("/api/projects/:id", async (req, res) => {
-    const { getProject: getProject2 } = await import("./projects-2HYIZC4Y.js");
+    const { getProject: getProject2 } = await import("./projects-VO4PMVZY.js");
     const project = getProject2(req.params.id);
     if (!project) {
       return res.status(404).json({ error: "Project not found" });
@@ -4246,7 +4253,7 @@ async function createServerHandle(config4) {
     res.json({ project });
   });
   app.put("/api/projects/:id", async (req, res) => {
-    const { updateProject } = await import("./projects-2HYIZC4Y.js");
+    const { updateProject } = await import("./projects-VO4PMVZY.js");
     const { name, customInstructions, dangerLevel } = req.body;
     const updates = {};
     if (name !== void 0) updates.name = name;
@@ -4259,7 +4266,7 @@ async function createServerHandle(config4) {
     res.json({ project: updated });
   });
   app.delete("/api/projects/:id", async (req, res) => {
-    const { getProject: getProject2, deleteProject } = await import("./projects-2HYIZC4Y.js");
+    const { getProject: getProject2, deleteProject } = await import("./projects-VO4PMVZY.js");
     const project = getProject2(req.params.id);
     if (!project) {
       return res.status(404).json({ error: "Project not found" });
@@ -4268,7 +4275,7 @@ async function createServerHandle(config4) {
     res.json({ success: true });
   });
   app.put("/api/projects/:id/star", async (req, res) => {
-    const { toggleStar } = await import("./projects-2HYIZC4Y.js");
+    const { toggleStar } = await import("./projects-VO4PMVZY.js");
     const { isStarred } = req.body;
     if (typeof isStarred !== "boolean") {
       return res.status(400).json({ error: "isStarred is required and must be a boolean" });
@@ -4315,7 +4322,7 @@ async function createServerHandle(config4) {
   app.get("/api/sessions/:id", async (req, res) => {
     const { getEventStore: getEventStore2 } = await import("./events-4K52FKPR.js");
     const { buildMessagesFromStoredEvents } = await import("./folding-QIBNKYA6.js");
-    const { getPendingQuestionsForSession } = await import("./tools-Y7ZGLK7A.js");
+    const { getPendingQuestionsForSession } = await import("./tools-QTEXQQ7Z.js");
     const session = sessionManager.getSession(req.params.id);
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
@@ -4446,7 +4453,7 @@ async function createServerHandle(config4) {
     if (!callId || approved === void 0) {
       return res.status(400).json({ error: "callId and approved are required" });
     }
-    const { providePathConfirmation } = await import("./tools-Y7ZGLK7A.js");
+    const { providePathConfirmation } = await import("./tools-QTEXQQ7Z.js");
     const result = providePathConfirmation(callId, approved, alwaysAllow);
     if (!result.found) {
       return res.status(404).json({ error: "No pending path confirmation with that ID" });
@@ -4454,7 +4461,7 @@ async function createServerHandle(config4) {
     const { getEventStore: getEventStore2 } = await import("./events-4K52FKPR.js");
     const { buildMessagesFromStoredEvents, foldPendingConfirmations } = await import("./folding-QIBNKYA6.js");
     const { createSessionStateMessage } = await import("./protocol-BKNLAEPJ.js");
-    const { getPendingQuestionsForSession } = await import("./tools-Y7ZGLK7A.js");
+    const { getPendingQuestionsForSession } = await import("./tools-QTEXQQ7Z.js");
     const eventStore = getEventStore2();
     const events = eventStore.getEvents(sessionId);
     const messages = buildMessagesFromStoredEvents(events);
@@ -4475,7 +4482,7 @@ async function createServerHandle(config4) {
     if (!skip && typeof answer !== "string") {
       return res.status(400).json({ error: "answer is required when not skipping" });
     }
-    const { provideAnswer } = await import("./tools-Y7ZGLK7A.js");
+    const { provideAnswer } = await import("./tools-QTEXQQ7Z.js");
     const found = provideAnswer(callId, answer ?? "", skip ?? false);
     if (!found) {
       return res.status(404).json({ error: "No pending question with that ID" });
@@ -4511,8 +4518,8 @@ async function createServerHandle(config4) {
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-PC6OVDUR.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-Y7ZGLK7A.js");
+    const { stopSessionExecution } = await import("./chat-handler-Z2C4372A.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-QTEXQQ7Z.js");
     const queuedMessages = sessionManager.getQueueState(sessionId);
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
@@ -4955,7 +4962,7 @@ async function createServerHandle(config4) {
   });
   async function rebuildMcpTools() {
     const { createMcpTools: createMcpTools2 } = await import("./tool-adapter-B7QP6NLA.js");
-    const { setMcpTools: setMcpTools2 } = await import("./tools-Y7ZGLK7A.js");
+    const { setMcpTools: setMcpTools2 } = await import("./tools-QTEXQQ7Z.js");
     const mcpTools = createMcpTools2(mcpManager);
     setMcpTools2(mcpTools);
   }
@@ -5267,7 +5274,7 @@ async function createServerHandle(config4) {
     const state = sessionManager.getContextState(sessionId);
     wssExports.broadcastForSession(sessionId, createContextStateMessage(state));
   });
-  const { QueueProcessor } = await import("./processor-KWPYXPL7.js");
+  const { QueueProcessor } = await import("./processor-GUUAJ24C.js");
   const queueProcessor = new QueueProcessor({
     sessionManager,
     providerManager,
@@ -5342,4 +5349,4 @@ export {
   createServerHandle,
   createServer
 };
-//# sourceMappingURL=chunk-DQ6SV26Y.js.map
+//# sourceMappingURL=chunk-FERQPF5N.js.map

package/dist/{chunk-OUK5IW26.js → chunk-M6ELTMPZ.js}

@@ -196,7 +196,7 @@ async function runCli(options) {
       if (!configExists) {
         await runNetworkSetup(mode);
       }
-      const { runServe } = await import("./serve-HZXJXK6T.js");
+      const { runServe } = await import("./serve-Z5GO323T.js");
       const serveOptions = { mode };
       if (values.port) serveOptions.port = parseInt(values.port);
       if (values["no-browser"] === true) serveOptions.openBrowser = false;
@@ -208,4 +208,4 @@ async function runCli(options) {
 export {
   runCli
 };
-//# sourceMappingURL=chunk-OUK5IW26.js.map
+//# sourceMappingURL=chunk-M6ELTMPZ.js.map

package/dist/{chunk-WOTBK3QQ.js → chunk-MPSOO6KF.js}

@@ -1,11 +1,11 @@
 import {
   appendCompactionPrompt
-} from "./chunk-FWJ6YXGA.js";
+} from "./chunk-VHWUZ7TO.js";
 import {
   injectWorkflowKickoffIfNeeded,
   runAgentTurn,
   runChatTurn
-} from "./chunk-63UEI4AF.js";
+} from "./chunk-4MTSWBWH.js";
 import {
   applyDynamicContext,
   checkAborted,
@@ -22,11 +22,11 @@ import {
   loadAllAgentsDefault,
   saveItemToDir,
   spawnShellProcess
-} from "./chunk-JO6RF2U2.js";
+} from "./chunk-FCSFHRKI.js";
 import {
   TurnMetrics,
   createMessageStartEvent
-} from "./chunk-L7TDUIQY.js";
+} from "./chunk-DX37WNM7.js";
 import {
   getPlatformShell,
   onProcessEvent
@@ -1775,7 +1775,7 @@ async function handleClientMessage(ws, client, message, _getLLMClient, _getActiv
             const runtimeConfig = getRuntimeConfig();
             const configDir = getGlobalConfigDir(runtimeConfig.mode ?? "production");
             const skills = await getEnabledSkillMetadata(configDir, runtimeConfig.workdir);
-            const { createToolRegistry } = await import("./tools-Y7ZGLK7A.js");
+            const { createToolRegistry } = await import("./tools-QTEXQQ7Z.js");
             const allTools = createToolRegistry().definitions;
             const toolFingerprint = getToolFingerprint(allTools);
             const currentHash = computeDynamicContextHash(instructionContent, skills, toolFingerprint);
@@ -1848,7 +1848,7 @@ async function handleClientMessage(ws, client, message, _getLLMClient, _getActiv
           const runtimeConfig = getRuntimeConfig();
           const configDir = getGlobalConfigDir(runtimeConfig.mode ?? "production");
           const skills = await getEnabledSkillMetadata(configDir, runtimeConfig.workdir);
-          const { createToolRegistry } = await import("./tools-Y7ZGLK7A.js");
+          const { createToolRegistry } = await import("./tools-QTEXQQ7Z.js");
           const allTools = createToolRegistry().definitions;
           const toolFingerprint = getToolFingerprint(allTools);
           const currentHash = computeDynamicContextHash(instructionContent, skills, toolFingerprint);
@@ -2069,4 +2069,4 @@ export {
   signalMcpReady,
   createWebSocketServer
 };
-//# sourceMappingURL=chunk-WOTBK3QQ.js.map
+//# sourceMappingURL=chunk-MPSOO6KF.js.map

package/dist/{chunk-XAMAYRDA.js → chunk-O4TED6AJ.js}

@@ -5,6 +5,10 @@ import {
 // src/server/db/projects.ts
 function createProject(name, workdir) {
   const db = getDatabase();
+  const existing = getProjectByWorkdir(workdir);
+  if (existing) {
+    return existing;
+  }
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const id = crypto.randomUUID();
   db.prepare(
@@ -113,4 +117,4 @@ export {
   deleteProject,
   toggleStar
 };
-//# sourceMappingURL=chunk-XAMAYRDA.js.map
+//# sourceMappingURL=chunk-O4TED6AJ.js.map