openfox 2.0.58 → 2.0.59

package/dist/agent-defaults/explorer.agent.md

@@ -18,6 +18,10 @@ Your role is to investigate and map out code structure, find relevant files, and
 Guidelines:
 
 - Use run_command with grep/glob to discover code
+- When using grep, ALWAYS exclude common non-source directories:
+  `--exclude-dir=node_modules --exclude-dir=.git --exclude-dir=dist --exclude-dir=.next --exclude-dir=build --exclude-dir=coverage`
+- Respect `.gitignore` exclusion patterns when searching
+- Prefer `rg` (ripgrep) if available — it respects `.gitignore` natively and is faster
 - Trace dependencies and imports to understand relationships
 - Identify patterns and conventions in the codebase
 - Report findings clearly with file paths and key observations

package/dist/{branch.api-5DMEAIBI.js → branch.api-LAN42BA5.js}

@@ -25,7 +25,8 @@ function getGitBranch(cwd) {
   return new Promise((resolve2) => {
     const proc = spawn("git", ["rev-parse", "--abbrev-ref", "HEAD"], {
       cwd,
-      stdio: ["ignore", "pipe", "ignore"]
+      stdio: ["ignore", "pipe", "ignore"],
+      windowsHide: true
     });
     let stdout = "";
     proc.stdout.on("data", (data) => {
@@ -46,4 +47,4 @@ function getGitBranch(cwd) {
 export {
   getCurrentBranch
 };
-//# sourceMappingURL=branch.api-5DMEAIBI.js.map
+//# sourceMappingURL=branch.api-LAN42BA5.js.map

package/dist/{chat-handler-W5D5LKKU.js → chat-handler-AS44EMQE.js}

@@ -5,11 +5,11 @@ import {
 } from "./chunk-NVPVDDQZ.js";
 import {
   runChatTurn
-} from "./chunk-XR2XC7WM.js";
-import "./chunk-LAWUUAN7.js";
+} from "./chunk-EKI5SZC7.js";
+import "./chunk-FRU2X3IZ.js";
 import "./chunk-LBGHZLLH.js";
-import "./chunk-BIWVYBIE.js";
-import "./chunk-ADOXTORQ.js";
+import "./chunk-BGTEIA2S.js";
+import "./chunk-PK2RMVMB.js";
 import "./chunk-NWO6GRYE.js";
 import {
   createChatMessageMessage,
@@ -30,7 +30,7 @@ import "./chunk-YHEQTVFV.js";
 import "./chunk-Z6W4YHJB.js";
 import "./chunk-K44MW7JJ.js";
 import "./chunk-YD6NDTKF.js";
-import "./chunk-YMEZFRY2.js";
+import "./chunk-43UFGATL.js";
 import "./chunk-CQGTEGKL.js";
 import "./chunk-V4IE7HJY.js";
 import "./chunk-5WRI5ZAA.js";
@@ -154,4 +154,4 @@ export {
   startChatSession,
   stopSessionExecution
 };
-//# sourceMappingURL=chat-handler-W5D5LKKU.js.map
+//# sourceMappingURL=chat-handler-AS44EMQE.js.map

package/dist/{chunk-YMEZFRY2.js → chunk-43UFGATL.js}

@@ -125,8 +125,8 @@ var configSchema = z.object({
 function getVisionFallback(config) {
   return config.visionFallback ?? getDefaultVisionFallback();
 }
-async function loadGlobalConfig(mode) {
-  const configPath = getGlobalConfigPath(mode);
+async function loadGlobalConfig(mode, configPathOverride) {
+  const configPath = configPathOverride ?? getGlobalConfigPath(mode);
   try {
     const content = await readFile(configPath, "utf-8");
     const parsed = JSON.parse(content);
@@ -138,8 +138,8 @@ async function loadGlobalConfig(mode) {
 function getDefaultVisionFallback() {
   return { enabled: false, url: "http://localhost:11434", model: "qwen3.5:0.8b", timeout: 120 };
 }
-async function saveGlobalConfig(mode, config) {
-  const configPath = getGlobalConfigPath(mode);
+async function saveGlobalConfig(mode, config, configPathOverride) {
+  const configPath = configPathOverride ?? getGlobalConfigPath(mode);
   const fullConfig = {
     providers: config.providers ?? [],
     mcpServers: config.mcpServers,
@@ -291,4 +291,4 @@ export {
   removeProvider,
   activateProvider
 };
-//# sourceMappingURL=chunk-YMEZFRY2.js.map
+//# sourceMappingURL=chunk-43UFGATL.js.map

package/dist/{chunk-CFLGVCYT.js → chunk-5MDIKIMG.js}

@@ -2,7 +2,7 @@ import {
   injectWorkflowKickoffIfNeeded,
   runAgentTurn,
   runChatTurn
-} from "./chunk-XR2XC7WM.js";
+} from "./chunk-EKI5SZC7.js";
 import {
   applyDynamicContext,
   checkAborted,
@@ -16,11 +16,11 @@ import {
   loadAllAgentsDefault,
   saveItemToDir,
   spawnShellProcess
-} from "./chunk-LAWUUAN7.js";
+} from "./chunk-FRU2X3IZ.js";
 import {
   getPlatformShell,
   onProcessEvent
-} from "./chunk-BIWVYBIE.js";
+} from "./chunk-BGTEIA2S.js";
 import {
   createChatErrorMessage,
   createChatMessageMessage,
@@ -452,8 +452,16 @@ var TERMINAL_BLOCKED = "$blocked";
 import { spawn as spawn2 } from "child_process";
 function getGitDiffFiles(cwd) {
   return new Promise((resolve) => {
-    const diffProc = spawn2("git", ["diff", "--name-status", "HEAD"], { cwd, stdio: ["ignore", "pipe", "pipe"] });
-    const statusProc = spawn2("git", ["status", "--porcelain"], { cwd, stdio: ["ignore", "pipe", "pipe"] });
+    const diffProc = spawn2("git", ["diff", "--name-status", "HEAD"], {
+      cwd,
+      stdio: ["ignore", "pipe", "pipe"],
+      windowsHide: true
+    });
+    const statusProc = spawn2("git", ["status", "--porcelain"], {
+      cwd,
+      stdio: ["ignore", "pipe", "pipe"],
+      windowsHide: true
+    });
     let diffStdout = "";
     let statusStdout = "";
     let diffExited = false;
@@ -1187,7 +1195,8 @@ function moduleGitBranch(cwd) {
   return new Promise((resolve) => {
     const proc = spawn3("git", ["rev-parse", "--abbrev-ref", "HEAD"], {
       cwd,
-      stdio: ["ignore", "pipe", "ignore"]
+      stdio: ["ignore", "pipe", "ignore"],
+      windowsHide: true
     });
     let stdout = "";
     proc.stdout.on("data", (data) => {
@@ -1210,11 +1219,13 @@ function moduleGitDiff(cwd) {
   return new Promise((resolve) => {
     const diffProc = spawn3("git", ["diff", "--name-status", "HEAD"], {
       cwd,
-      stdio: ["ignore", "pipe", "pipe"]
+      stdio: ["ignore", "pipe", "pipe"],
+      windowsHide: true
     });
     const statusProc = spawn3("git", ["status", "--porcelain"], {
       cwd,
-      stdio: ["ignore", "pipe", "pipe"]
+      stdio: ["ignore", "pipe", "pipe"],
+      windowsHide: true
     });
     let diffStdout = "";
     let statusStdout = "";
@@ -2091,4 +2102,4 @@ export {
   signalMcpReady,
   createWebSocketServer
 };
-//# sourceMappingURL=chunk-CFLGVCYT.js.map
+//# sourceMappingURL=chunk-5MDIKIMG.js.map

package/dist/{chunk-BIWVYBIE.js → chunk-BGTEIA2S.js}

@@ -8,7 +8,7 @@ import {
   removeProcess,
   startProcess,
   updateStatus
-} from "./chunk-ADOXTORQ.js";
+} from "./chunk-PK2RMVMB.js";
 
 // src/server/tools/background-process/manager.ts
 import { spawn } from "child_process";
@@ -69,7 +69,8 @@ function startProcessCommand(processId, sessionId, command, cwd) {
     cwd,
     env: { ...process.env, FORCE_COLOR: "1" },
     stdio: ["ignore", "pipe", "pipe"],
-    detached: true
+    detached: true,
+    windowsHide: true
   });
   proc.pid = child.pid ?? null;
   updateStatus(processId, sessionId, "running");
@@ -153,4 +154,4 @@ export {
   getSessionProcesses2 as getSessionProcesses,
   getProcessLogs
 };
-//# sourceMappingURL=chunk-BIWVYBIE.js.map
+//# sourceMappingURL=chunk-BGTEIA2S.js.map

package/dist/{chunk-XR2XC7WM.js → chunk-EKI5SZC7.js}

@@ -12,7 +12,7 @@ import {
   loadAllAgentsDefault,
   processEventsForConversation,
   runTopLevelAgentLoop
-} from "./chunk-LAWUUAN7.js";
+} from "./chunk-FRU2X3IZ.js";
 import {
   TurnMetrics,
   WORKFLOW_KICKOFF_PROMPT,
@@ -324,4 +324,4 @@ export {
   runAgentTurn,
   injectWorkflowKickoffIfNeeded
 };
-//# sourceMappingURL=chunk-XR2XC7WM.js.map
+//# sourceMappingURL=chunk-EKI5SZC7.js.map

package/dist/{chunk-LAWUUAN7.js → chunk-FRU2X3IZ.js}

@@ -9,12 +9,12 @@ import {
   getSessionProcesses,
   startProcessCommand,
   stopProcess
-} from "./chunk-BIWVYBIE.js";
+} from "./chunk-BGTEIA2S.js";
 import {
   getMaxPerSession,
   getSessionProcessCount,
   terminateProcessTree
-} from "./chunk-ADOXTORQ.js";
+} from "./chunk-PK2RMVMB.js";
 import {
   createMcpTools
 } from "./chunk-NWO6GRYE.js";
@@ -73,7 +73,7 @@ import {
 import {
   loadGlobalConfig,
   saveGlobalConfig
-} from "./chunk-YMEZFRY2.js";
+} from "./chunk-43UFGATL.js";
 import {
   getGlobalConfigDir
 } from "./chunk-CQGTEGKL.js";
@@ -222,6 +222,9 @@ async function isPathWithinSandbox(path, workdir, sessionId) {
 function looksLikeRegex(str) {
   return /[*?+[\]\\]/.test(str);
 }
+function isPlaceholderToken(str) {
+  return str.includes("__URL__") || str.includes("__FILEURL__") || str.includes("__SED__");
+}
 function extractAbsolutePathsFromCommand(command) {
   if (!command.trim()) {
     return [];
@@ -273,16 +276,13 @@ function extractAbsolutePathsFromCommand(command) {
       }
     }
   }
-  const absolutePattern = /(?:^|[\s=(])(\/?\/[a-zA-Z0-9_\-./]+)/g;
+  const absolutePattern = /(?:^|[\s=(])(\/[^\s"'|&;<>`()]+)/g;
   while ((match = absolutePattern.exec(sanitized)) !== null) {
-    const pathCandidate = match[1];
-    if (pathCandidate.includes("__URL__") || pathCandidate.includes("__FILEURL__")) {
-      continue;
-    }
-    if (looksLikeRegex(pathCandidate)) {
-      continue;
-    }
-    const resolved = normalize(pathCandidate);
+    const candidate = match[1];
+    if (isPlaceholderToken(candidate)) continue;
+    if (looksLikeRegex(candidate)) continue;
+    const resolved = normalize(candidate);
+    if (resolved === "/" || resolved === "") continue;
     if (!isSafePath(resolved)) {
       paths.push(resolved);
     }
@@ -1330,6 +1330,7 @@ function spawnShellProcess(command, cwd, _signal, detached = false) {
     cwd,
     env: { ...process.env, FORCE_COLOR: "0" },
     stdio: ["ignore", "pipe", "pipe"],
+    windowsHide: true,
     ...detached ? { detached: true } : {}
   });
 }
@@ -1667,6 +1668,10 @@ ${Object.entries(schema.fields).map(([f, t]) => `  ${f}: ${t}`).join("\n")}`
   }
 );
 
+// src/server/sub-agents/manager.ts
+import { readFile as readFile7, access as access4 } from "fs/promises";
+import { join as join7, dirname as dirname5, isAbsolute as isAbsolute3 } from "path";
+
 // src/server/agents/registry.ts
 import { readdir as readdir3, readFile as readFile5, writeFile as writeFile4, mkdir as mkdir3, access as access2, unlink as unlink2 } from "fs/promises";
 import { join as join4, dirname as dirname2 } from "path";
@@ -2910,7 +2915,7 @@ async function describeImageFromDataUrl(dataUrl, visionModel, options) {
 import { createHash as createHash2 } from "crypto";
 async function loadVisionModelFromGlobalConfig() {
   try {
-    const { loadGlobalConfig: loadGlobalConfig2, getVisionFallback } = await import("./config-C2YDEF3N.js");
+    const { loadGlobalConfig: loadGlobalConfig2, getVisionFallback } = await import("./config-GMQUPNBY.js");
     const runtimeConfig = getRuntimeConfig();
     const mode = runtimeConfig.mode ?? "production";
     const globalConfig = await loadGlobalConfig2(mode);
@@ -3246,6 +3251,33 @@ function getWindowOptions(sessionId) {
   const id = getCurrentContextWindowId(sessionId);
   return id ? { contextWindowId: id } : void 0;
 }
+async function loadGitIgnoreRules(workdir) {
+  if (!isAbsolute3(workdir)) return "";
+  let currentDir = workdir;
+  while (true) {
+    const gitignorePath = join7(currentDir, ".gitignore");
+    try {
+      await access4(gitignorePath);
+      const content = await readFile7(gitignorePath, "utf-8");
+      const trimmed = content.trim();
+      if (!trimmed) return "";
+      const lines = trimmed.split("\n");
+      const capped = lines.slice(0, 100);
+      if (capped.length < lines.length) capped.push("# ... truncated (too many patterns)");
+      const final = capped.join("\n").slice(0, 4096);
+      return `## Repository Exclusion Rules (.gitignore)
+
+The following patterns from \`.gitignore\` should be excluded from file searches:
+
+${final}`;
+    } catch {
+    }
+    const parentDir = dirname5(currentDir);
+    if (parentDir === currentDir) break;
+    currentDir = parentDir;
+  }
+  return "";
+}
 async function executeSubAgent(options) {
   const {
     subAgentType,
@@ -3317,7 +3349,9 @@ async function executeSubAgent(options) {
   const config = getRuntimeConfig();
   const configDir = getGlobalConfigDir(config.mode ?? "production");
   const skills = await getEnabledSkillMetadata(configDir, config.workdir);
-  const systemPrompt = buildBasePrompt(session.workdir, void 0, skills.length > 0 ? skills : void 0, llmClient.getModel()) + "\n\n" + agentDef.prompt + RETURN_VALUE_INSTRUCTION;
+  const hasRunCommand = agentDef.metadata.allowedTools?.includes("run_command") ?? false;
+  const gitignoreSection = hasRunCommand ? await loadGitIgnoreRules(session.workdir) : "";
+  const systemPrompt = buildBasePrompt(session.workdir, void 0, skills.length > 0 ? skills : void 0, llmClient.getModel()) + "\n\n" + agentDef.prompt + (gitignoreSection ? "\n\n" + gitignoreSection : "") + RETURN_VALUE_INSTRUCTION;
   const subAgentScope = { type: "subagent", sessionId, subAgentId, subAgentType };
   const loopResult = await runTopLevelAgentLoop(
     {
@@ -3425,7 +3459,7 @@ var callSubAgentTool = {
       };
     }
     try {
-      const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-YJLXW3QS.js");
+      const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-FQ54IAYG.js");
       const toolRegistry = getToolRegistryForAgent2(agentDef);
       const turnMetrics = new TurnMetrics();
       const result = await executeSubAgent({
@@ -3676,13 +3710,13 @@ var webFetchTool = createTool(
 
 // src/server/dev-server/manager.ts
 import { spawn as spawn2 } from "child_process";
-import { readFile as readFile7, writeFile as writeFile6, mkdir as mkdir5 } from "fs/promises";
-import { resolve as resolve5, join as join7 } from "path";
+import { readFile as readFile8, writeFile as writeFile6, mkdir as mkdir5 } from "fs/promises";
+import { resolve as resolve5, join as join8 } from "path";
 var MAX_LOG_LINES = 2e3;
 var MAX_LOG_BYTES = 1e5;
 var getDevServerConfigPath = (workdir) => {
   const mode = getRuntimeConfig().mode ?? "production";
-  return join7(resolve5(workdir), ".openfox", `${mode === "development" ? "dev-dev" : "dev"}.json`);
+  return join8(resolve5(workdir), ".openfox", `${mode === "development" ? "dev-dev" : "dev"}.json`);
 };
 var ERROR_PATTERNS = [
   /EADDRINUSE/,
@@ -3743,7 +3777,7 @@ var DevServerManager = class {
   async loadConfig(workdir) {
     try {
       const configPath = getDevServerConfigPath(workdir);
-      const raw = await readFile7(configPath, "utf-8");
+      const raw = await readFile8(configPath, "utf-8");
       const parsed = JSON.parse(raw);
       if (!parsed.command || !parsed.url) return null;
       return {
@@ -3758,7 +3792,7 @@ var DevServerManager = class {
   }
   async saveConfig(workdir, config) {
     const resolved = this.resolveWorkdir(workdir);
-    const dirPath = join7(resolved, ".openfox");
+    const dirPath = join8(resolved, ".openfox");
     await mkdir5(dirPath, { recursive: true });
     const configPath = getDevServerConfigPath(workdir);
     await writeFile6(configPath, JSON.stringify(config, null, 2) + "\n", "utf-8");
@@ -3793,7 +3827,8 @@ var DevServerManager = class {
       cwd: resolved,
       env: { ...process.env, FORCE_COLOR: "1" },
       stdio: ["ignore", "pipe", "pipe"],
-      detached: true
+      detached: true,
+      windowsHide: true
     });
     instance.process = proc;
     const appendLog = (stream, content) => {
@@ -4241,7 +4276,7 @@ function resolveAgentDef2(sessionManager, sessionId) {
 }
 async function buildCachedPrompt(sessionManager, sessionId, agentDef) {
   const { instructionContent, skills } = await loadSessionContext(sessionManager, sessionId);
-  const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-YJLXW3QS.js");
+  const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-FQ54IAYG.js");
   const tools = getToolRegistryForAgent2(agentDef).definitions;
   const toolFingerprint = getToolFingerprint(tools);
   const allAgents = await loadAllAgentsDefault();
@@ -4254,7 +4289,7 @@ async function buildCachedPrompt(sessionManager, sessionId, agentDef) {
 async function computeSessionHash(sessionManager, sessionId) {
   const { instructionContent, skills } = await loadSessionContext(sessionManager, sessionId);
   const agentDef = await resolveAgentDef2(sessionManager, sessionId);
-  const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-YJLXW3QS.js");
+  const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-FQ54IAYG.js");
   const tools = getToolRegistryForAgent2(agentDef).definitions;
   const toolFingerprint = getToolFingerprint(tools);
   return computeDynamicContextHash(instructionContent, skills, toolFingerprint);
@@ -4273,6 +4308,7 @@ async function applyDynamicContext(sessionManager, sessionId) {
 // src/server/tools/mcp-config.ts
 var mcpManagerForTools = null;
 var mcpConfigMode = "production";
+var mcpConfigPath;
 var mcpNotifyChanged = null;
 function setMcpManagerForTools(manager) {
   mcpManagerForTools = manager;
@@ -4280,6 +4316,9 @@ function setMcpManagerForTools(manager) {
 function setMcpConfigMode(mode) {
   mcpConfigMode = mode;
 }
+function setMcpConfigPath(path) {
+  mcpConfigPath = path;
+}
 function setNotifyMcpServersChanged(fn) {
   mcpNotifyChanged = fn;
 }
@@ -4355,13 +4394,13 @@ var mcpConfigTool = createTool(
       return helpers.error("MCP manager not available");
     }
     async function persistAndRebuild(updater) {
-      const globalConfig = await loadGlobalConfig(mcpConfigMode);
+      const globalConfig = await loadGlobalConfig(mcpConfigMode, mcpConfigPath);
       const mcpServers = { ...globalConfig.mcpServers ?? {} };
       const updated = updater(mcpServers);
-      await saveGlobalConfig(mcpConfigMode, { ...globalConfig, mcpServers: updated });
+      await saveGlobalConfig(mcpConfigMode, { ...globalConfig, mcpServers: updated }, mcpConfigPath);
     }
     async function rebuildTools() {
-      const { setMcpTools: setMcpTools2 } = await import("./tools-YJLXW3QS.js");
+      const { setMcpTools: setMcpTools2 } = await import("./tools-FQ54IAYG.js");
       const mcpTools = createMcpTools(mcpManagerForTools);
       setMcpTools2(mcpTools);
     }
@@ -4463,7 +4502,7 @@ var mcpConfigTool = createTool(
 );
 
 // src/server/tools/trace-code.ts
-import { stat as stat2, readFile as readFile8 } from "fs/promises";
+import { stat as stat2, readFile as readFile9 } from "fs/promises";
 function graphNode(location, depth, relation, symbolName, symbolKind) {
   const node = { location, depth, relation, symbolName };
   if (symbolKind) node.symbolKind = symbolKind;
@@ -4495,7 +4534,7 @@ async function getCachedLines(path, approvedPaths) {
   }
   try {
     const stats = await stat2(path);
-    const content = await readFile8(path, "utf-8");
+    const content = await readFile9(path, "utf-8");
     const lines = content.split("\n");
     fileCache.set(path, { mtimeMs: stats.mtimeMs, lines });
     if (fileCache.size > CACHE_MAX_SIZE) {
@@ -5021,6 +5060,7 @@ export {
   applyDynamicContext,
   setMcpManagerForTools,
   setMcpConfigMode,
+  setMcpConfigPath,
   setNotifyMcpServersChanged,
   parseToolPermissions,
   getToolPermissions,
@@ -5031,4 +5071,4 @@ export {
   getToolRegistryForAgent,
   createToolRegistry
 };
-//# sourceMappingURL=chunk-LAWUUAN7.js.map
+//# sourceMappingURL=chunk-FRU2X3IZ.js.map