openfox 2.0.17 → 2.0.20

package/dist/{chunk-BC7R4HLY.js → chunk-3QQ4QKAU.js}

@@ -21,7 +21,7 @@ import {
   tokenFromPassword,
   verifyPassword,
   workflowExists
-} from "./chunk-5ANV7YUX.js";
+} from "./chunk-T67KB6ZS.js";
 import {
   agentExists,
   createToolRegistry,
@@ -61,10 +61,15 @@ import {
   setMcpTools,
   setNotifyMcpServersChanged,
   skillExists
-} from "./chunk-KYR4NVNX.js";
+} from "./chunk-TVQTTZYW.js";
 import {
   getProject
 } from "./chunk-O4TED6AJ.js";
+import {
+  ALWAYS_ALLOWED,
+  ALWAYS_ALLOWED_FOR_SUBAGENTS,
+  TOP_LEVEL_ONLY_TOOLS
+} from "./chunk-DX37WNM7.js";
 import {
   getPathSeparator,
   isAbsolutePath
@@ -96,7 +101,7 @@ import {
   updateSessionMetadata,
   updateSessionProvider,
   updateSessionRunning
-} from "./chunk-SYG2ENUQ.js";
+} from "./chunk-YBWY4DKY.js";
 import {
   createContextStateMessage
 } from "./chunk-F4PMNP7S.js";
@@ -136,18 +141,19 @@ import {
 import express from "express";
 import cors from "cors";
 import { createServer as createHttpServer } from "http";
-import { fileURLToPath as fileURLToPath3 } from "url";
-import { dirname as dirname4, resolve as resolve2, join as join5 } from "path";
+import { fileURLToPath as fileURLToPath4 } from "url";
+import { dirname as dirname5, resolve as resolve3, join as join5 } from "path";
 import { readFile } from "fs/promises";
 import { createServer as createViteServer } from "vite";
 
 // src/server/llm/mock.ts
 import { setTimeout as sleep } from "timers/promises";
+
+// src/server/llm/mock-rules.ts
 var RULES = [
-  // -------------------------------------------------------------------------
+  // ---------------------------------------------------------------------------
   // Session Metadata Tools (criteria, todos, review_findings)
-  // -------------------------------------------------------------------------
-  // Multi-criteria: ID "crit-a": "First" and ID "crit-b": "Second"
+  // ---------------------------------------------------------------------------
   {
     match: /ID\s*["']([a-z0-9-]+)["']:\s*["']([^"']+)["'][\s\S]*ID\s*["']([a-z0-9-]+)["']:\s*["']([^"']+)["']/i,
     tools: [
@@ -156,13 +162,11 @@ var RULES = [
     ],
     response: "Added both criteria."
   },
-  // Single criterion: "Add criterion ID "test-1" with description "The tests pass""
   {
     match: /Add criterion ID\s*["']([a-z0-9-]+)["']\s*with description\s*["']([^"']+)["'][\s\S]*/i,
     tools: [{ name: "session_metadata", arguments: { action: "add", key: "criteria", id: "$1", description: "$2" } }],
     response: "Added the criterion."
   },
-  // Single criterion: ID "test-1" with/: description "The tests pass"
   {
     match: /ID\s*["']([a-z0-9-]+)["'].*description\s*["']([^"']+)["']/i,
     tools: [{ name: "session_metadata", arguments: { action: "add", key: "criteria", id: "$1", description: "$2" } }],
@@ -199,7 +203,6 @@ var RULES = [
     ],
     response: "Added the criterion."
   },
-  // Propose acceptance criteria (for planning prompts)
   {
     match: /propose acceptance criteria/i,
     tools: [
@@ -224,13 +227,11 @@ var RULES = [
     ],
     response: "Added criteria for the multiply function."
   },
-  // Single criterion: ID "test-1": "The tests pass" (colon format)
   {
     match: /ID\s*["']([a-z0-9-]+)["']\s*:\s*["']([^"']+)["']/i,
     tools: [{ name: "session_metadata", arguments: { action: "add", key: "criteria", id: "$1", description: "$2" } }],
     response: "Added the criterion."
   },
-  // session_metadata to mark criteria as completed (natural language)
   {
     match: /session_metadata.*(?:mark|status.*completed).*["']([a-z0-9-]+)["']/i,
     tools: [
@@ -238,7 +239,6 @@ var RULES = [
     ],
     response: "Marked criterion as complete."
   },
-  // session_metadata to mark criteria as completed (explicit args)
   {
     match: /session_metadata.*action\s*["']update["'].*key\s*["']criteria["'].*id\s*["']([a-z0-9-]+)["'].*status\s*["']completed["']/i,
     tools: [
@@ -246,13 +246,11 @@ var RULES = [
     ],
     response: "Marked criterion as complete."
   },
-  // session_metadata to mark criteria as passed
   {
     match: /session_metadata.*action\s*["']update["'].*key\s*["']criteria["'].*id\s*["']([a-z0-9-]+)["'].*status\s*["']passed["']/i,
     tools: [{ name: "session_metadata", arguments: { action: "update", key: "criteria", id: "$1", status: "passed" } }],
     response: "Criterion passed."
   },
-  // session_metadata to mark criteria as failed
   {
     match: /session_metadata.*action\s*["']update["'].*key\s*["']criteria["'].*id\s*["']([a-z0-9-]+)["'].*status\s*["']failed["']/i,
     tools: [
@@ -263,13 +261,11 @@ var RULES = [
     ],
     response: "Criterion failed."
   },
-  // get criteria via session_metadata
   {
     match: /get_criteria|show.*criteria|list.*criteria/i,
     tools: [{ name: "session_metadata", arguments: { action: "get", key: "criteria" } }],
     response: "Here are the current criteria."
   },
-  // Update criterion via session_metadata
   {
     match: /session_metadata.*action\s*["']update["'].*description/i,
     tools: [
@@ -280,21 +276,16 @@ var RULES = [
     ],
     response: "Updated the criterion."
   },
-  // Remove criterion via session_metadata
   {
     match: /session_metadata.*action\s*["']remove["']/i,
     tools: [{ name: "session_metadata", arguments: { action: "remove", key: "criteria", id: "0" } }],
     response: "Removed the criterion."
   },
-  // Generic add criterion via session_metadata
   {
     match: /add.*criterion/i,
     tools: [{ name: "session_metadata", arguments: { action: "add", key: "criteria", description: "Test criterion" } }],
     response: "Added the criterion."
   },
-  // -------------------------------------------------------------------------
-  // Session Metadata Tools
-  // -------------------------------------------------------------------------
   {
     match: /session_metadata.*action\s*["']add["'].*key\s*["']criteria["'].*description\s*["']([^"']+)["']/i,
     tools: [{ name: "session_metadata", arguments: { action: "add", key: "criteria", description: "$1" } }],
@@ -322,9 +313,6 @@ var RULES = [
     ],
     response: "Criterion failed."
   },
-  // -------------------------------------------------------------------------
-  // File Read Tools
-  // -------------------------------------------------------------------------
   {
     match: /read.*src\/math\.ts.*offset|offset.*src\/math\.ts/i,
     tools: [{ name: "read_file", arguments: { path: "src/math.ts", offset: 5 } }],
@@ -370,9 +358,6 @@ var RULES = [
     tools: [{ name: "read_file", arguments: { path: "src/index.ts" } }],
     response: "Read the file."
   },
-  // -------------------------------------------------------------------------
-  // Glob Tool
-  // -------------------------------------------------------------------------
   {
     match: /glob.*\*\*\/\*\.ts|recursive.*typescript/i,
     tools: [{ name: "glob", arguments: { pattern: "**/*.ts" } }],
@@ -393,9 +378,6 @@ var RULES = [
     tools: [{ name: "glob", arguments: { pattern: "**/*" } }],
     response: "Found files."
   },
-  // -------------------------------------------------------------------------
-  // Grep Tool
-  // -------------------------------------------------------------------------
   {
     match: /grep.*XYZNONEXISTENT|search.*XYZNONEXISTENT/i,
     tools: [{ name: "grep", arguments: { pattern: "XYZNONEXISTENT123", path: "." } }],
@@ -421,10 +403,6 @@ var RULES = [
     tools: [{ name: "grep", arguments: { pattern: "export", path: "." } }],
     response: "Searched for pattern."
   },
-  // -------------------------------------------------------------------------
-  // Write Tool
-  // -------------------------------------------------------------------------
-  // Path security test rules - writing outside /tmp (requires confirmation)
   {
     match: /write.*\/home\/test\/approved/i,
     tools: [{ name: "write_file", arguments: { path: "/home/test/approved.txt", content: "approved" } }],
@@ -490,9 +468,6 @@ var RULES = [
     tools: [{ name: "write_file", arguments: { path: "src/newfile.ts", content: "export const x = 1" } }],
     response: "Created file."
   },
-  // -------------------------------------------------------------------------
-  // Edit Tool
-  // -------------------------------------------------------------------------
   {
     match: /without reading.*edit_file|edit_file.*without reading/i,
     tools: [{ name: "edit_file", arguments: { path: "src/math.ts", old_string: "function", new_string: "const" } }],
@@ -536,9 +511,6 @@ var RULES = [
     ],
     response: "Edited the file."
   },
-  // -------------------------------------------------------------------------
-  // Shell/Command Tool
-  // -------------------------------------------------------------------------
   {
     match: /run.*echo.*first.*sleep.*second/i,
     tools: [{ name: "run_command", arguments: { command: 'echo "first" && sleep 0.2 && echo "second"' } }],
@@ -617,27 +589,16 @@ var RULES = [
     tools: [{ name: "run_command", arguments: { command: 'echo "test"' } }],
     response: "Executed the command."
   },
-  // -------------------------------------------------------------------------
-  // Todo Tool
-  // -------------------------------------------------------------------------
   {
     match: /todo_write.*Read files.*Make changes/i,
     tools: [
       {
         name: "session_metadata",
-        arguments: {
-          action: "add",
-          key: "todos",
-          description: "Read files"
-        }
+        arguments: { action: "add", key: "todos", description: "Read files" }
       },
       {
         name: "session_metadata",
-        arguments: {
-          action: "add",
-          key: "todos",
-          description: "Make changes"
-        }
+        arguments: { action: "add", key: "todos", description: "Make changes" }
       }
     ],
     response: "Created todo list."
@@ -647,18 +608,11 @@ var RULES = [
     tools: [
       {
         name: "session_metadata",
-        arguments: {
-          action: "add",
-          key: "todos",
-          description: "Test task"
-        }
+        arguments: { action: "add", key: "todos", description: "Test task" }
       }
     ],
     response: "Created todo list."
   },
-  // -------------------------------------------------------------------------
-  // Mode/Context
-  // -------------------------------------------------------------------------
   {
     match: /think.*step.*step/i,
     tools: [],
@@ -669,10 +623,6 @@ var RULES = [
     tools: [],
     response: "Here is a detailed explanation of the topic. TypeScript is a statically typed superset of JavaScript that adds optional type annotations. It provides better tooling, catches errors at compile time, and makes code more maintainable."
   },
-  // -------------------------------------------------------------------------
-  // Ask User Tool
-  // -------------------------------------------------------------------------
-  // Specific type rules must come before generic ask rules
   {
     match: /confirm.*question/i,
     tools: [{ name: "ask_user", arguments: { question: "Do you approve?", type: "confirm" } }],
@@ -702,9 +652,6 @@ var RULES = [
     tools: [{ name: "ask_user", arguments: { question: "Should I proceed with this action?" } }],
     response: "I asked for confirmation."
   },
-  // -------------------------------------------------------------------------
-  // Default Responses (no tools)
-  // -------------------------------------------------------------------------
   {
     match: /hello|hi there|introduce yourself/i,
     tools: [],
@@ -730,15 +677,14 @@ var RULES = [
     tools: [],
     response: "TypeScript is a strongly typed programming language that builds on JavaScript."
   },
-  // -------------------------------------------------------------------------
-  // Fallback
-  // -------------------------------------------------------------------------
   {
     match: /.*/,
     tools: [],
     response: "I understand. Let me help you with that."
   }
 ];
+
+// src/server/llm/mock.ts
 function matchRule(prompt) {
   for (const rule of RULES) {
     const match = prompt.match(rule.match);
@@ -1898,19 +1844,19 @@ var LspServer = class {
    */
   async getDiagnosticsWithWait(path, timeoutMs = DIAGNOSTIC_WAIT_MS) {
     if (this.openDocuments.has(path)) {
-      return new Promise((resolve3) => {
+      return new Promise((resolve4) => {
         const existing = this.diagnostics.get(path);
         if (existing !== void 0) {
           setTimeout(() => {
-            resolve3(this.diagnostics.get(path) ?? []);
+            resolve4(this.diagnostics.get(path) ?? []);
           }, 100);
           return;
         }
         const timeout = setTimeout(() => {
           this.pendingDiagnostics.delete(path);
-          resolve3(this.diagnostics.get(path) ?? []);
+          resolve4(this.diagnostics.get(path) ?? []);
         }, timeoutMs);
-        this.pendingDiagnostics.set(path, { resolve: resolve3, timeout });
+        this.pendingDiagnostics.set(path, { resolve: resolve4, timeout });
       });
     }
     return this.diagnostics.get(path) ?? [];
@@ -1995,459 +1941,12 @@ async function which(command, workdir) {
 
 // src/server/lsp/languages.ts
 import { extname as extname2, basename } from "path";
-var LANGUAGES = [
-  // JavaScript/TypeScript ecosystem
-  {
-    id: "typescript",
-    name: "TypeScript",
-    extensions: [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"],
-    serverCommand: "typescript-language-server",
-    serverArgs: ["--stdio"],
-    rootPatterns: ["tsconfig.json", "jsconfig.json", "package.json"],
-    languageIds: {
-      ".ts": "typescript",
-      ".tsx": "typescriptreact",
-      ".js": "javascript",
-      ".jsx": "javascriptreact",
-      ".mjs": "javascript",
-      ".cjs": "javascript"
-    }
-  },
-  // Python
-  {
-    id: "python",
-    name: "Python",
-    extensions: [".py", ".pyi", ".pyw"],
-    serverCommand: "pyright-langserver",
-    serverArgs: ["--stdio"],
-    rootPatterns: ["pyproject.toml", "setup.py", "requirements.txt", "Pipfile"]
-  },
-  // Rust
-  {
-    id: "rust",
-    name: "Rust",
-    extensions: [".rs"],
-    serverCommand: "rust-analyzer",
-    serverArgs: [],
-    rootPatterns: ["Cargo.toml"]
-  },
-  // Go
-  {
-    id: "go",
-    name: "Go",
-    extensions: [".go"],
-    serverCommand: "gopls",
-    serverArgs: ["serve"],
-    rootPatterns: ["go.mod", "go.sum"]
-  },
-  // C/C++
-  {
-    id: "cpp",
-    name: "C/C++",
-    extensions: [".c", ".cpp", ".cc", ".cxx", ".h", ".hpp", ".hxx", ".hh"],
-    serverCommand: "clangd",
-    serverArgs: ["--background-index"],
-    rootPatterns: ["compile_commands.json", "CMakeLists.txt", ".clangd", "Makefile"]
-  },
-  // Zig
-  {
-    id: "zig",
-    name: "Zig",
-    extensions: [".zig"],
-    serverCommand: "zls",
-    serverArgs: [],
-    rootPatterns: ["build.zig", "build.zig.zon"]
-  },
-  // Lua
-  {
-    id: "lua",
-    name: "Lua",
-    extensions: [".lua"],
-    serverCommand: "lua-language-server",
-    serverArgs: [],
-    rootPatterns: [".luarc.json", ".luarc.jsonc", ".luacheckrc"]
-  },
-  // Ruby
-  {
-    id: "ruby",
-    name: "Ruby",
-    extensions: [".rb", ".rake", ".gemspec"],
-    serverCommand: "solargraph",
-    serverArgs: ["stdio"],
-    rootPatterns: ["Gemfile", ".ruby-version"]
-  },
-  // Elixir
-  {
-    id: "elixir",
-    name: "Elixir",
-    extensions: [".ex", ".exs"],
-    serverCommand: "elixir-ls",
-    serverArgs: [],
-    rootPatterns: ["mix.exs"]
-  },
-  // Haskell
-  {
-    id: "haskell",
-    name: "Haskell",
-    extensions: [".hs", ".lhs"],
-    serverCommand: "haskell-language-server-wrapper",
-    serverArgs: ["--lsp"],
-    rootPatterns: ["stack.yaml", "cabal.project", "*.cabal"]
-  },
-  // OCaml
-  {
-    id: "ocaml",
-    name: "OCaml",
-    extensions: [".ml", ".mli"],
-    serverCommand: "ocamllsp",
-    serverArgs: [],
-    rootPatterns: ["dune-project", "dune", "*.opam"]
-  },
-  // Scala
-  {
-    id: "scala",
-    name: "Scala",
-    extensions: [".scala", ".sc"],
-    serverCommand: "metals",
-    serverArgs: [],
-    rootPatterns: ["build.sbt", "build.sc", ".metals"]
-  },
-  // Kotlin
-  {
-    id: "kotlin",
-    name: "Kotlin",
-    extensions: [".kt", ".kts"],
-    serverCommand: "kotlin-language-server",
-    serverArgs: [],
-    rootPatterns: ["build.gradle.kts", "build.gradle", "settings.gradle.kts"]
-  },
-  // Java
-  {
-    id: "java",
-    name: "Java",
-    extensions: [".java"],
-    serverCommand: "jdtls",
-    serverArgs: [],
-    rootPatterns: ["pom.xml", "build.gradle", ".project"]
-  },
-  // C#
-  {
-    id: "csharp",
-    name: "C#",
-    extensions: [".cs", ".csx"],
-    serverCommand: "OmniSharp",
-    serverArgs: ["-lsp"],
-    rootPatterns: ["*.csproj", "*.sln"]
-  },
-  // Swift
-  {
-    id: "swift",
-    name: "Swift",
-    extensions: [".swift"],
-    serverCommand: "sourcekit-lsp",
-    serverArgs: [],
-    rootPatterns: ["Package.swift", "*.xcodeproj", "*.xcworkspace"]
-  },
-  // PHP
-  {
-    id: "php",
-    name: "PHP",
-    extensions: [".php", ".phtml"],
-    serverCommand: "phpactor",
-    serverArgs: ["language-server"],
-    rootPatterns: ["composer.json", "phpunit.xml"]
-  },
-  // YAML
-  {
-    id: "yaml",
-    name: "YAML",
-    extensions: [".yaml", ".yml"],
-    serverCommand: "yaml-language-server",
-    serverArgs: ["--stdio"],
-    rootPatterns: []
-  },
-  // JSON
-  {
-    id: "json",
-    name: "JSON",
-    extensions: [".json", ".jsonc"],
-    serverCommand: "vscode-json-language-server",
-    serverArgs: ["--stdio"],
-    rootPatterns: []
-  },
-  // HTML
-  {
-    id: "html",
-    name: "HTML",
-    extensions: [".html", ".htm", ".xhtml"],
-    serverCommand: "vscode-html-language-server",
-    serverArgs: ["--stdio"],
-    rootPatterns: []
-  },
-  // CSS
-  {
-    id: "css",
-    name: "CSS",
-    extensions: [".css", ".scss", ".sass", ".less"],
-    serverCommand: "vscode-css-language-server",
-    serverArgs: ["--stdio"],
-    rootPatterns: []
-  },
-  // Vue
-  {
-    id: "vue",
-    name: "Vue",
-    extensions: [".vue"],
-    serverCommand: "vue-language-server",
-    serverArgs: ["--stdio"],
-    rootPatterns: ["vite.config.ts", "vite.config.js", "vue.config.js"]
-  },
-  // Svelte
-  {
-    id: "svelte",
-    name: "Svelte",
-    extensions: [".svelte"],
-    serverCommand: "svelteserver",
-    serverArgs: ["--stdio"],
-    rootPatterns: ["svelte.config.js", "svelte.config.ts"]
-  },
-  // Terraform
-  {
-    id: "terraform",
-    name: "Terraform",
-    extensions: [".tf", ".tfvars"],
-    serverCommand: "terraform-ls",
-    serverArgs: ["serve"],
-    rootPatterns: [".terraform", "main.tf"]
-  },
-  // Dockerfile
-  {
-    id: "dockerfile",
-    name: "Docker",
-    extensions: [],
-    // Uses filename matching
-    serverCommand: "docker-langserver",
-    serverArgs: ["--stdio"],
-    rootPatterns: ["Dockerfile", "docker-compose.yml"]
-  },
-  // Bash/Shell
-  {
-    id: "bash",
-    name: "Bash",
-    extensions: [".sh", ".bash", ".zsh"],
-    serverCommand: "bash-language-server",
-    serverArgs: ["start"],
-    rootPatterns: []
-  },
-  // SQL
-  {
-    id: "sql",
-    name: "SQL",
-    extensions: [".sql"],
-    serverCommand: "sql-language-server",
-    serverArgs: ["up", "--method", "stdio"],
-    rootPatterns: [],
-    installHint: "npm install -g sql-language-server"
-  },
-  // GraphQL
-  {
-    id: "graphql",
-    name: "GraphQL",
-    extensions: [".graphql", ".gql"],
-    serverCommand: "graphql-lsp",
-    serverArgs: ["server", "-m", "stream"],
-    rootPatterns: [".graphqlrc", ".graphqlrc.yml", ".graphqlrc.json", "graphql.config.js"]
-  },
-  // Nix
-  {
-    id: "nix",
-    name: "Nix",
-    extensions: [".nix"],
-    serverCommand: "nil",
-    serverArgs: [],
-    rootPatterns: ["flake.nix", "default.nix", "shell.nix"]
-  },
-  // Gleam
-  {
-    id: "gleam",
-    name: "Gleam",
-    extensions: [".gleam"],
-    serverCommand: "gleam",
-    serverArgs: ["lsp"],
-    rootPatterns: ["gleam.toml"]
-  },
-  // Elm
-  {
-    id: "elm",
-    name: "Elm",
-    extensions: [".elm"],
-    serverCommand: "elm-language-server",
-    serverArgs: [],
-    rootPatterns: ["elm.json"]
-  },
-  // Dart
-  {
-    id: "dart",
-    name: "Dart",
-    extensions: [".dart"],
-    serverCommand: "dart",
-    serverArgs: ["language-server", "--protocol=lsp"],
-    rootPatterns: ["pubspec.yaml"]
-  },
-  // Julia
-  {
-    id: "julia",
-    name: "Julia",
-    extensions: [".jl"],
-    serverCommand: "julia",
-    serverArgs: ["--startup-file=no", "--history-file=no", "-e", "using LanguageServer; runserver()"],
-    rootPatterns: ["Project.toml"]
-  },
-  // R
-  {
-    id: "r",
-    name: "R",
-    extensions: [".r", ".R", ".rmd", ".Rmd"],
-    serverCommand: "R",
-    serverArgs: ["--slave", "-e", "languageserver::run()"],
-    rootPatterns: ["DESCRIPTION", ".Rproj"]
-  },
-  // Clojure
-  {
-    id: "clojure",
-    name: "Clojure",
-    extensions: [".clj", ".cljs", ".cljc", ".edn"],
-    serverCommand: "clojure-lsp",
-    serverArgs: [],
-    rootPatterns: ["deps.edn", "project.clj", "shadow-cljs.edn"]
-  },
-  // Nim
-  {
-    id: "nim",
-    name: "Nim",
-    extensions: [".nim", ".nims"],
-    serverCommand: "nimlsp",
-    serverArgs: [],
-    rootPatterns: ["*.nimble"]
-  },
-  // V
-  {
-    id: "vlang",
-    name: "V",
-    extensions: [".v", ".vv"],
-    serverCommand: "vls",
-    serverArgs: [],
-    rootPatterns: ["v.mod"]
-  },
-  // Crystal
-  {
-    id: "crystal",
-    name: "Crystal",
-    extensions: [".cr"],
-    serverCommand: "crystalline",
-    serverArgs: [],
-    rootPatterns: ["shard.yml"]
-  },
-  // D
-  {
-    id: "d",
-    name: "D",
-    extensions: [".d"],
-    serverCommand: "serve-d",
-    serverArgs: [],
-    rootPatterns: ["dub.json", "dub.sdl"]
-  },
-  // Erlang
-  {
-    id: "erlang",
-    name: "Erlang",
-    extensions: [".erl", ".hrl"],
-    serverCommand: "erlang_ls",
-    serverArgs: [],
-    rootPatterns: ["rebar.config", "erlang.mk"]
-  },
-  // F#
-  {
-    id: "fsharp",
-    name: "F#",
-    extensions: [".fs", ".fsx", ".fsi"],
-    serverCommand: "fsautocomplete",
-    serverArgs: ["--adaptive-lsp-server-enabled"],
-    rootPatterns: ["*.fsproj"]
-  },
-  // Fortran
-  {
-    id: "fortran",
-    name: "Fortran",
-    extensions: [".f", ".f90", ".f95", ".f03", ".f08"],
-    serverCommand: "fortls",
-    serverArgs: [],
-    rootPatterns: []
-  },
-  // LaTeX
-  {
-    id: "latex",
-    name: "LaTeX",
-    extensions: [".tex", ".bib"],
-    serverCommand: "texlab",
-    serverArgs: [],
-    rootPatterns: ["*.tex"]
-  },
-  // Markdown
-  {
-    id: "markdown",
-    name: "Markdown",
-    extensions: [".md", ".markdown"],
-    serverCommand: "marksman",
-    serverArgs: [],
-    rootPatterns: []
-  },
-  // TOML
-  {
-    id: "toml",
-    name: "TOML",
-    extensions: [".toml"],
-    serverCommand: "taplo",
-    serverArgs: ["lsp", "stdio"],
-    rootPatterns: []
-  },
-  // Protobuf
-  {
-    id: "protobuf",
-    name: "Protocol Buffers",
-    extensions: [".proto"],
-    serverCommand: "bufls",
-    serverArgs: ["serve"],
-    rootPatterns: ["buf.yaml", "buf.gen.yaml"]
-  },
-  // Assembly (various)
-  {
-    id: "asm",
-    name: "Assembly",
-    extensions: [".asm", ".s", ".S"],
-    serverCommand: "asm-lsp",
-    serverArgs: [],
-    rootPatterns: []
-  },
-  // CMake
-  {
-    id: "cmake",
-    name: "CMake",
-    extensions: [".cmake"],
-    serverCommand: "cmake-language-server",
-    serverArgs: [],
-    rootPatterns: ["CMakeLists.txt"]
-  },
-  // Perl
-  {
-    id: "perl",
-    name: "Perl",
-    extensions: [".pl", ".pm"],
-    serverCommand: "pls",
-    serverArgs: [],
-    rootPatterns: ["cpanfile", "Makefile.PL"]
-  }
-];
+import { readFileSync } from "fs";
+import { fileURLToPath as fileURLToPath2 } from "url";
+import { dirname as dirname2, resolve } from "path";
+var __dirname2 = dirname2(fileURLToPath2(import.meta.url));
+var languagesJson = JSON.parse(readFileSync(resolve(__dirname2, "languages.json"), "utf-8"));
+var LANGUAGES = languagesJson;
 var extensionToLanguage = /* @__PURE__ */ new Map();
 for (const lang of LANGUAGES) {
   for (const ext of lang.extensions) {
@@ -3583,10 +3082,10 @@ function createSkillRoutes(configDir, projectDir) {
 
 // src/server/commands/registry.ts
 import { writeFile, mkdir, unlink } from "fs/promises";
-import { join as join3, dirname as dirname2 } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
+import { join as join3, dirname as dirname3 } from "path";
+import { fileURLToPath as fileURLToPath3 } from "url";
 import matter from "gray-matter";
-var __bundleDir = dirname2(fileURLToPath2(import.meta.url));
+var __bundleDir = dirname3(fileURLToPath3(import.meta.url));
 var DEFAULTS_DIR = join3(__bundleDir, "defaults");
 var DEFAULTS_DIR_ALT = join3(__bundleDir, "command-defaults");
 var COMMAND_EXTENSION = ".command.md";
@@ -3905,20 +3404,20 @@ function createTerminalRoutes() {
 // src/server/routes/directories.ts
 import { Router as Router5 } from "express";
 import { readdir } from "fs/promises";
-import { resolve, join as join4, dirname as dirname3, basename as basename2 } from "path";
+import { resolve as resolve2, join as join4, dirname as dirname4, basename as basename2 } from "path";
 function createDirectoryRoutes() {
   const router = Router5();
   const DEFAULT_BASE_PATH = process.cwd();
   router.get("/", async (req, res) => {
     const path = req.query["path"] || DEFAULT_BASE_PATH;
     try {
-      const resolvedPath = resolve(path);
+      const resolvedPath = resolve2(path);
       const entries = await readdir(resolvedPath, { withFileTypes: true });
       const directories = entries.filter((entry) => entry.isDirectory()).map((entry) => ({
         name: entry.name,
         path: join4(resolvedPath, entry.name)
       })).sort((a, b) => a.name.localeCompare(b.name));
-      const parent = dirname3(resolvedPath);
+      const parent = dirname4(resolvedPath);
       const hasParent = parent !== resolvedPath;
       res.json({
         current: resolvedPath,
@@ -3944,7 +3443,7 @@ import { Router as Router6 } from "express";
 import { spawn as spawn2 } from "child_process";
 
 // src/constants.ts
-var VERSION = "2.0.17";
+var VERSION = "2.0.20";
 
 // src/server/routes/auto-update.ts
 var updateInProgress = false;
@@ -3967,7 +3466,7 @@ function createAutoUpdateRoutes(options = {}) {
     const isService = isRunningAsService();
     const current = VERSION;
     try {
-      const latest = await new Promise((resolve3, reject) => {
+      const latest = await new Promise((resolve4, reject) => {
         const child = spawn2("npm", ["view", "openfox", "version"], {
           stdio: ["ignore", "pipe", "pipe"]
         });
@@ -3977,7 +3476,7 @@ function createAutoUpdateRoutes(options = {}) {
         });
         child.on("close", (code) => {
           if (code === 0) {
-            resolve3(stdout.trim());
+            resolve4(stdout.trim());
           } else {
             reject(new Error(`npm view exited with code ${code}`));
           }
@@ -4020,9 +3519,9 @@ function createAutoUpdateRoutes(options = {}) {
       const timeout = setTimeout(() => {
         child.kill();
       }, UPDATE_TIMEOUT);
-      const exitCode = await new Promise((resolve3) => {
-        child.on("close", resolve3);
-        child.on("error", () => resolve3(1));
+      const exitCode = await new Promise((resolve4) => {
+        child.on("close", resolve4);
+        child.on("error", () => resolve4(1));
       });
       clearTimeout(timeout);
       if (exitCode === 0) {
@@ -4059,7 +3558,7 @@ function createAutoUpdateRoutes(options = {}) {
 }
 
 // src/server/index.ts
-var __dirname2 = dirname4(fileURLToPath3(import.meta.url));
+var __dirname3 = dirname5(fileURLToPath4(import.meta.url));
 async function createServerHandle(config4) {
   setRuntimeConfig(config4);
   setLogLevel(config4.logging?.level ?? void 0, config4.mode);
@@ -4124,7 +3623,7 @@ async function createServerHandle(config4) {
       setMcpTools(mcpTools);
       logger.info("MCP tools registered", { count: mcpTools.length });
     }
-    const { signalMcpReady } = await import("./server-JKNV2NCJ.js");
+    const { signalMcpReady } = await import("./server-CN7ML6XN.js");
     signalMcpReady();
   });
   const app = express();
@@ -4179,7 +3678,9 @@ async function createServerHandle(config4) {
   app.get("/api/tools", (_req, res) => {
     const tools = toolRegistry.tools.map((t) => ({
       name: t.name,
-      actions: t.permittedActions || []
+      actions: t.permittedActions || [],
+      alwaysAllowed: ALWAYS_ALLOWED.has(t.name) || ALWAYS_ALLOWED_FOR_SUBAGENTS.has(t.name),
+      topLevelOnly: TOP_LEVEL_ONLY_TOOLS.has(t.name)
     }));
     res.json({ tools });
   });
@@ -4280,7 +3781,7 @@ async function createServerHandle(config4) {
     res.json({ project });
   });
   app.get("/api/sessions", async (req, res) => {
-    const { getRecentUserPromptsForSession } = await import("./events-4K52FKPR.js");
+    const { getRecentUserPromptsForSession } = await import("./events-JKPHAR5W.js");
     const projectId = req.query["projectId"];
     const limit = Math.min(parseInt(req.query["limit"]) || 20, 100);
     const offset = parseInt(req.query["offset"]) || 0;
@@ -4313,9 +3814,9 @@ async function createServerHandle(config4) {
     res.status(201).json({ session });
   });
   app.get("/api/sessions/:id", async (req, res) => {
-    const { getEventStore: getEventStore2 } = await import("./events-4K52FKPR.js");
-    const { buildMessagesFromStoredEvents } = await import("./folding-QIBNKYA6.js");
-    const { getPendingQuestionsForSession } = await import("./tools-YWC3AJ66.js");
+    const { getEventStore: getEventStore2 } = await import("./events-JKPHAR5W.js");
+    const { buildMessagesFromStoredEvents } = await import("./folding-PI67HWBR.js");
+    const { getPendingQuestionsForSession } = await import("./tools-ZUOBYTVD.js");
     const session = sessionManager.getSession(req.params.id);
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
@@ -4346,8 +3847,8 @@ async function createServerHandle(config4) {
     res.json({ success: true });
   });
   app.post("/api/sessions/:id/provider", async (req, res) => {
-    const { getEventStore: getEventStore2 } = await import("./events-4K52FKPR.js");
-    const { buildMessagesFromStoredEvents } = await import("./folding-QIBNKYA6.js");
+    const { getEventStore: getEventStore2 } = await import("./events-JKPHAR5W.js");
+    const { buildMessagesFromStoredEvents } = await import("./folding-PI67HWBR.js");
     const sessionId = req.params.id;
     const session = sessionManager.getSession(sessionId);
     if (!session) {
@@ -4389,8 +3890,8 @@ async function createServerHandle(config4) {
     res.json({ success: true });
   });
   app.put("/api/sessions/:id/mode", async (req, res) => {
-    const { getEventStore: getEventStore2 } = await import("./events-4K52FKPR.js");
-    const { buildMessagesFromStoredEvents } = await import("./folding-QIBNKYA6.js");
+    const { getEventStore: getEventStore2 } = await import("./events-JKPHAR5W.js");
+    const { buildMessagesFromStoredEvents } = await import("./folding-PI67HWBR.js");
     const sessionId = req.params.id;
     const session = sessionManager.getSession(sessionId);
     if (!session) {
@@ -4446,15 +3947,15 @@ async function createServerHandle(config4) {
     if (!callId || approved === void 0) {
       return res.status(400).json({ error: "callId and approved are required" });
     }
-    const { providePathConfirmation } = await import("./tools-YWC3AJ66.js");
+    const { providePathConfirmation } = await import("./tools-ZUOBYTVD.js");
     const result = providePathConfirmation(callId, approved, alwaysAllow);
     if (!result.found) {
       return res.status(404).json({ error: "No pending path confirmation with that ID" });
     }
-    const { getEventStore: getEventStore2 } = await import("./events-4K52FKPR.js");
-    const { buildMessagesFromStoredEvents, foldPendingConfirmations } = await import("./folding-QIBNKYA6.js");
+    const { getEventStore: getEventStore2 } = await import("./events-JKPHAR5W.js");
+    const { buildMessagesFromStoredEvents, foldPendingConfirmations } = await import("./folding-PI67HWBR.js");
     const { createSessionStateMessage } = await import("./protocol-BKNLAEPJ.js");
-    const { getPendingQuestionsForSession } = await import("./tools-YWC3AJ66.js");
+    const { getPendingQuestionsForSession } = await import("./tools-ZUOBYTVD.js");
     const eventStore = getEventStore2();
     const events = eventStore.getEvents(sessionId);
     const messages = buildMessagesFromStoredEvents(events);
@@ -4475,7 +3976,7 @@ async function createServerHandle(config4) {
     if (!skip && typeof answer !== "string") {
       return res.status(400).json({ error: "answer is required when not skipping" });
     }
-    const { provideAnswer } = await import("./tools-YWC3AJ66.js");
+    const { provideAnswer } = await import("./tools-ZUOBYTVD.js");
     const found = provideAnswer(callId, answer ?? "", skip ?? false);
     if (!found) {
       return res.status(404).json({ error: "No pending question with that ID" });
@@ -4511,15 +4012,15 @@ async function createServerHandle(config4) {
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-DTMB43CD.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-YWC3AJ66.js");
+    const { stopSessionExecution } = await import("./chat-handler-KNDSH5WR.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-ZUOBYTVD.js");
     const queuedMessages = sessionManager.getQueueState(sessionId);
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
     abortSession(sessionId);
     cancelQuestionsForSession(sessionId, "Session stopped by user");
     cancelPathConfirmationsForSession(sessionId, "Session stopped by user");
-    const eventStore = (await import("./events-4K52FKPR.js")).getEventStore();
+    const eventStore = (await import("./events-JKPHAR5W.js")).getEventStore();
     eventStore.append(sessionId, { type: "running.changed", data: { isRunning: false } });
     res.json({ success: true, queuedMessages });
   });
@@ -4533,7 +4034,7 @@ async function createServerHandle(config4) {
     if (typeof messageIndex !== "number" || messageIndex < 0) {
       return res.status(400).json({ error: "messageIndex must be a non-negative number" });
     }
-    const { truncateSessionMessages } = await import("./events-4K52FKPR.js");
+    const { truncateSessionMessages } = await import("./events-JKPHAR5W.js");
     truncateSessionMessages(sessionId, messageIndex);
     res.json({ success: true });
   });
@@ -4551,7 +4052,7 @@ async function createServerHandle(config4) {
     if (!msg) {
       return res.status(400).json({ error: "Message not found at this index" });
     }
-    const { truncateSessionMessages } = await import("./events-4K52FKPR.js");
+    const { truncateSessionMessages } = await import("./events-JKPHAR5W.js");
     truncateSessionMessages(sessionId, messageIndex - 1);
     sessionManager.queueMessage(sessionId, "asap", msg.content, msg.attachments, msg.messageKind);
     res.json({ success: true });
@@ -4955,7 +4456,7 @@ async function createServerHandle(config4) {
   });
   async function rebuildMcpTools() {
     const { createMcpTools: createMcpTools2 } = await import("./tool-adapter-B7QP6NLA.js");
-    const { setMcpTools: setMcpTools2 } = await import("./tools-YWC3AJ66.js");
+    const { setMcpTools: setMcpTools2 } = await import("./tools-ZUOBYTVD.js");
     const mcpTools = createMcpTools2(mcpManager);
     setMcpTools2(mcpTools);
   }
@@ -5139,14 +4640,14 @@ async function createServerHandle(config4) {
     await getCurrentBranch(req, res);
   });
   app.use("/api/directories", createDirectoryRoutes());
-  const webDir = resolve2(__dirname2, "../../web");
+  const webDir = resolve3(__dirname3, "../../web");
   const isDev = config4.mode === "development";
   let viteServer;
   if (isDev) {
     logger.info("Dev mode: using Vite middleware");
     viteServer = await createViteServer({
       root: webDir,
-      configFile: resolve2(__dirname2, "../../web/vite.config.ts"),
+      configFile: resolve3(__dirname3, "../../web/vite.config.ts"),
       server: { middlewareMode: true },
       appType: "spa",
       logLevel: "warn"
@@ -5198,7 +4699,7 @@ async function createServerHandle(config4) {
     logger.info("Vite middleware ready", { port: config4.server.port });
   }
   if (!isDev) {
-    const distWebDir = resolve2(__dirname2, "web");
+    const distWebDir = resolve3(__dirname3, "web");
     app.use(
       "/assets",
       express.static(join5(distWebDir, "assets"), {
@@ -5267,7 +4768,7 @@ async function createServerHandle(config4) {
     const state = sessionManager.getContextState(sessionId);
     wssExports.broadcastForSession(sessionId, createContextStateMessage(state));
   });
-  const { QueueProcessor } = await import("./processor-3YZVK4JT.js");
+  const { QueueProcessor } = await import("./processor-DKAYI3PV.js");
   const queueProcessor = new QueueProcessor({
     sessionManager,
     providerManager,
@@ -5289,7 +4790,7 @@ async function createServerHandle(config4) {
   return {
     httpServer,
     ctx: { config: config4, sessionManager, llmClient: getLLMClient(), toolRegistry, providerManager },
-    start: (port) => new Promise((resolve3, reject) => {
+    start: (port) => new Promise((resolve4, reject) => {
       const listenPort = port ?? config4.server.port;
       const host = config4.server.host;
       httpServer.listen(listenPort, host, () => {
@@ -5299,11 +4800,11 @@ async function createServerHandle(config4) {
         logger.info(`OpenFox server running at http://${host}:${actualPort}`);
         logger.info(`WebSocket available at ws://${host}:${actualPort}/ws`);
         logger.info(`LLM backend: ${client.getBackend()}, model: ${client.getModel()}, url: ${config4.llm.baseUrl}`);
-        resolve3({ port: actualPort });
+        resolve4({ port: actualPort });
       });
       httpServer.on("error", reject);
     }),
-    close: () => new Promise((resolve3) => {
+    close: () => new Promise((resolve4) => {
       logger.info("Shutting down...");
       void (async () => {
         await devServerManager.stopAll();
@@ -5317,7 +4818,7 @@ async function createServerHandle(config4) {
           client.terminate();
         }
         wss.close();
-        httpServer.close(() => resolve3());
+        httpServer.close(() => resolve4());
       })();
     })
   };
@@ -5342,4 +4843,4 @@ export {
   createServerHandle,
   createServer
 };
-//# sourceMappingURL=chunk-BC7R4HLY.js.map
+//# sourceMappingURL=chunk-3QQ4QKAU.js.map