openfox 2.0.59 → 2.0.60

package/dist/{chunk-LQFCQ6PY.js → chunk-DEWNWF2P.js}

@@ -21,12 +21,13 @@ import {
   tokenFromPassword,
   verifyPassword,
   workflowExists
-} from "./chunk-5MDIKIMG.js";
+} from "./chunk-DOJKA4XO.js";
 import {
   agentExists,
   createToolRegistry,
   deleteAgent,
   deleteItemFromDir,
+  deleteOwnedSkill,
   deleteProjectAgent,
   deleteProjectSkill,
   deleteSkill,
@@ -43,6 +44,7 @@ import {
   loadAllAgents,
   loadAllAgentsDefault,
   loadAllSkills,
+  loadAllSkillsWithDiagnostics,
   loadDefaultAgents,
   loadDefaultSkills,
   loadItemsFromDir,
@@ -61,8 +63,10 @@ import {
   setMcpManagerForTools,
   setMcpTools,
   setNotifyMcpServersChanged,
-  skillExists
-} from "./chunk-FRU2X3IZ.js";
+  setSkillEnabled,
+  skillExists,
+  updateOwnedSkill
+} from "./chunk-3JRYK5UG.js";
 import {
   getPathSeparator,
   isAbsolutePath
@@ -76,6 +80,11 @@ import {
 import {
   EventEmitter
 } from "./chunk-EU3WWTFH.js";
+import {
+  deleteSetting,
+  getSetting,
+  setSetting
+} from "./chunk-WNSAJCWT.js";
 import {
   getProject
 } from "./chunk-YQ3SOPBI.js";
@@ -150,8 +159,8 @@ import express from "express";
 import cors from "cors";
 import { createServer as createHttpServer } from "http";
 import { fileURLToPath as fileURLToPath5 } from "url";
-import { dirname as dirname5, resolve as resolve3, join as join5 } from "path";
-import { readFile } from "fs/promises";
+import { dirname as dirname6, resolve as resolve4, join as join7 } from "path";
+import { readFile as readFile2 } from "fs/promises";
 import { createServer as createViteServer } from "vite";
 
 // src/server/llm/mock.ts
@@ -1426,12 +1435,12 @@ var McpManager = class {
     this.onServersChanged = options?.onServersChanged;
     this.onToolsDiscovered = options?.onToolsDiscovered;
   }
-  async addServer(name, config4) {
+  async addServer(name, config3) {
     if (this.servers.has(name)) {
       throw new Error(`MCP server '${name}' already exists`);
     }
-    const state = { name, config: config4, status: "disconnected", tools: [], estimatedTokens: 0 };
-    this.servers.set(name, { config: config4, client: void 0, transport: null, state });
+    const state = { name, config: config3, status: "disconnected", tools: [], estimatedTokens: 0 };
+    this.servers.set(name, { config: config3, client: void 0, transport: null, state });
     await this.connectServer(name);
   }
   removeServer(name) {
@@ -1678,10 +1687,10 @@ var LspServer = class {
   // Pending diagnostic waiters
   pendingDiagnostics = /* @__PURE__ */ new Map();
   commandPath;
-  constructor(config4, workdir, commandPath) {
-    this.config = config4;
+  constructor(config3, workdir, commandPath) {
+    this.config = config3;
     this.workdir = workdir;
-    this.commandPath = commandPath ?? config4.serverCommand;
+    this.commandPath = commandPath ?? config3.serverCommand;
   }
   // ============================================================================
   // Lifecycle
@@ -1914,19 +1923,19 @@ var LspServer = class {
    */
   async getDiagnosticsWithWait(path, timeoutMs = DIAGNOSTIC_WAIT_MS) {
     if (this.openDocuments.has(path)) {
-      return new Promise((resolve4) => {
+      return new Promise((resolve5) => {
         const existing = this.diagnostics.get(path);
         if (existing !== void 0) {
           setTimeout(() => {
-            resolve4(this.diagnostics.get(path) ?? []);
+            resolve5(this.diagnostics.get(path) ?? []);
           }, 100);
           return;
         }
         const timeout = setTimeout(() => {
           this.pendingDiagnostics.delete(path);
-          resolve4(this.diagnostics.get(path) ?? []);
+          resolve5(this.diagnostics.get(path) ?? []);
         }, timeoutMs);
-        this.pendingDiagnostics.set(path, { resolve: resolve4, timeout });
+        this.pendingDiagnostics.set(path, { resolve: resolve5, timeout });
       });
     }
     return this.diagnostics.get(path) ?? [];
@@ -2238,8 +2247,8 @@ var LspManager = class {
   // ============================================================================
   // Server Management
   // ============================================================================
-  async getOrCreateServer(config4) {
-    const langId = config4.id;
+  async getOrCreateServer(config3) {
+    const langId = config3.id;
     const existing = this.servers.get(langId);
     if (existing?.isRunning()) {
       return existing;
@@ -2251,7 +2260,7 @@ var LspManager = class {
     if (pending) {
       return pending;
     }
-    const promise = this.startServer(config4);
+    const promise = this.startServer(config3);
     this.serverPromises.set(langId, promise);
     try {
       const server = await promise;
@@ -2260,19 +2269,19 @@ var LspManager = class {
       this.serverPromises.delete(langId);
     }
   }
-  async startServer(config4) {
-    const langId = config4.id;
-    const commandPath = await which(config4.serverCommand, this.workdir);
+  async startServer(config3) {
+    const langId = config3.id;
+    const commandPath = await which(config3.serverCommand, this.workdir);
     if (!commandPath) {
       logger.warn("LSP server not installed, skipping", {
         language: langId,
-        command: config4.serverCommand,
+        command: config3.serverCommand,
         sessionId: this.sessionId
       });
       this.unavailableServers.add(langId);
       return null;
     }
-    const server = new LspServer(config4, this.workdir, commandPath);
+    const server = new LspServer(config3, this.workdir, commandPath);
     try {
       await server.start();
       this.servers.set(langId, server);
@@ -2292,11 +2301,11 @@ var LspManager = class {
     }
   }
   async getServerForFile(path) {
-    const config4 = detectLanguage(path);
-    if (!config4) {
+    const config3 = detectLanguage(path);
+    if (!config3) {
       return null;
     }
-    return this.getOrCreateServer(config4);
+    return this.getOrCreateServer(config3);
   }
   // ============================================================================
   // Public Interface
@@ -2327,11 +2336,11 @@ var LspManager = class {
    * Get current diagnostics for a file without triggering a change.
    */
   getDiagnostics(path) {
-    const config4 = detectLanguage(path);
-    if (!config4) {
+    const config3 = detectLanguage(path);
+    if (!config3) {
       return [];
     }
-    const server = this.servers.get(config4.id);
+    const server = this.servers.get(config3.id);
     if (!server?.isRunning()) {
       return [];
     }
@@ -2342,11 +2351,11 @@ var LspManager = class {
    * Returns true if we have or can start a server for this file type.
    */
   isAvailableFor(path) {
-    const config4 = detectLanguage(path);
-    if (!config4) {
+    const config3 = detectLanguage(path);
+    if (!config3) {
       return false;
     }
-    if (this.unavailableServers.has(config4.id)) {
+    if (this.unavailableServers.has(config3.id)) {
       return false;
     }
     return true;
@@ -2357,13 +2366,13 @@ var LspManager = class {
    * to avoid spamming the user on every edit.
    */
   getInstallHint(path) {
-    const config4 = detectLanguage(path);
-    if (!config4?.installHint) {
+    const config3 = detectLanguage(path);
+    if (!config3?.installHint) {
       return null;
     }
-    if (this.unavailableServers.has(config4.id) && !this.dismissedHints.has(config4.id)) {
-      this.dismissedHints.add(config4.id);
-      return config4.installHint;
+    if (this.unavailableServers.has(config3.id) && !this.dismissedHints.has(config3.id)) {
+      this.dismissedHints.add(config3.id);
+      return config3.installHint;
     }
     return null;
   }
@@ -3243,9 +3252,77 @@ var SessionManager = class {
   }
 };
 
+// src/server/routes/skills.ts
+import { Router as Router2 } from "express";
+import multer from "multer";
+import { access as access2, mkdir as mkdir2, realpath, stat } from "fs/promises";
+import { constants as constants2 } from "fs";
+import { homedir } from "os";
+import { isAbsolute as isAbsolute2, join as join4, resolve as resolve2 } from "path";
+
+// src/server/skills/installer.ts
+import { randomUUID } from "crypto";
+import { mkdir, readFile, rename, rm, writeFile } from "fs/promises";
+import { dirname as dirname3, isAbsolute, join as join2 } from "path";
+import matter from "gray-matter";
+var SkillInstallError = class extends Error {
+  constructor(message, status) {
+    super(message);
+    this.status = status;
+  }
+};
+function validateRelativePath(path) {
+  if (!path || isAbsolute(path) || path.includes("\\") || path.includes("\0") || path.split("/").some((part) => !part || part === "." || part === "..")) {
+    throw new SkillInstallError(`Invalid package path: ${path}`, 400);
+  }
+}
+function validatePackageName(name) {
+  if (!name || name.includes("/") || name.includes("\\") || name === "." || name === ".." || name.includes("\0")) {
+    throw new SkillInstallError("Invalid package name", 400);
+  }
+}
+async function installSkillPackage(libraryDir, packageName, files) {
+  validatePackageName(packageName);
+  if (!files.length || files.length > 1e3) throw new SkillInstallError("Package must contain 1-1000 files", 400);
+  if (!files.some((file) => file.path === "SKILL.md")) throw new SkillInstallError("Package must contain SKILL.md", 400);
+  let totalBytes = 0;
+  const paths = /* @__PURE__ */ new Set();
+  for (const file of files) {
+    validateRelativePath(file.path);
+    if (paths.has(file.path)) throw new SkillInstallError(`Duplicate package path: ${file.path}`, 400);
+    paths.add(file.path);
+    if (file.content.byteLength > 25 * 1024 * 1024) throw new SkillInstallError("Package file exceeds 25 MiB", 413);
+    totalBytes += file.content.byteLength;
+  }
+  if (totalBytes > 50 * 1024 * 1024) throw new SkillInstallError("Package exceeds 50 MiB", 413);
+  const destination = join2(libraryDir, packageName);
+  if (await pathExists(destination)) throw new SkillInstallError("A package with this name already exists", 409);
+  const staging = join2(libraryDir, `.${packageName}.openfox-upload-${randomUUID()}`);
+  try {
+    await mkdir(staging, { recursive: false });
+    for (const file of files) {
+      const target = join2(staging, file.path);
+      await mkdir(dirname3(target), { recursive: true });
+      await writeFile(target, file.content);
+    }
+    const parsed = matter(await readFile(join2(staging, "SKILL.md"), "utf-8"));
+    const name = typeof parsed.data["name"] === "string" ? parsed.data["name"].trim() : "";
+    const description = typeof parsed.data["description"] === "string" ? parsed.data["description"].trim() : "";
+    if (!name || !description || !parsed.content.trim()) {
+      throw new SkillInstallError("SKILL.md requires name, description, and instructions", 400);
+    }
+    if (await pathExists(destination)) throw new SkillInstallError("A package with this name already exists", 409);
+    await rename(staging, destination);
+    return { id: name, path: destination };
+  } catch (error) {
+    await rm(staging, { recursive: true, force: true });
+    throw error;
+  }
+}
+
 // src/server/routes/crud-helpers.ts
 import { Router } from "express";
-import { join as join2 } from "path";
+import { join as join3 } from "path";
 function computeOverrideIds(defaults, userItems) {
   return userItems.filter((u) => defaults.some((d) => d.metadata.id === u.metadata.id)).map((u) => u.metadata.id);
 }
@@ -3257,34 +3334,34 @@ function validateNameIdPrompt(body) {
   return null;
 }
 function getProjectItemPath(projectDir, dirName, id, ext) {
-  return join2(projectDir, ".openfox", dirName, `${id}${ext}`);
+  return join3(projectDir, ".openfox", dirName, `${id}${ext}`);
 }
 async function isProjectItem(projectDir, dirName, id, ext) {
   if (!projectDir) return false;
   return pathExists(getProjectItemPath(projectDir, dirName, id, ext));
 }
-function createCrudRoutes(config4, configDir, projectDir) {
+function createCrudRoutes(config3, configDir, projectDir) {
   const router = Router();
   router.get("/", async (_req, res) => {
     const [defaults, userItems, projectItems] = await Promise.all([
-      config4.loadDefaults(),
-      config4.loadUser(configDir),
-      projectDir ? config4.loadProject(projectDir) : []
+      config3.loadDefaults(),
+      config3.loadUser(configDir),
+      projectDir ? config3.loadProject(projectDir) : []
     ]);
     const userOverrideIds = computeOverrideIds(defaults, userItems);
     const projectOverrideIds = computeOverrideIds(defaults, projectItems);
-    const extra = config4.extraGetData ? await config4.extraGetData() : {};
+    const extra = config3.extraGetData ? await config3.extraGetData() : {};
     res.json({
-      defaults: defaults.map(config4.mapToResponse),
-      userItems: userItems.map(config4.mapToResponse),
-      projectItems: projectItems.map(config4.mapToResponse),
+      defaults: defaults.map(config3.mapToResponse),
+      userItems: userItems.map(config3.mapToResponse),
+      projectItems: projectItems.map(config3.mapToResponse),
       overrideIds: [...userOverrideIds, ...projectOverrideIds],
       ...extra
     });
   });
   router.get("/defaults/:id", async (req, res) => {
     const { id } = req.params;
-    const allDefaults = await config4.loadDefaults();
+    const allDefaults = await config3.loadDefaults();
     const item = allDefaults.find((d) => d.metadata.id === id);
     if (!item) {
       return res.status(404).json({ error: "Default not found" });
@@ -3292,13 +3369,13 @@ function createCrudRoutes(config4, configDir, projectDir) {
     res.json(item);
   });
   router.get("/default-ids", async (_req, res) => {
-    const ids = config4.getDefaultIds ? await config4.getDefaultIds() : [];
+    const ids = config3.getDefaultIds ? await config3.getDefaultIds() : [];
     res.json({ ids });
   });
   router.get("/:id", async (req, res) => {
     const { id } = req.params;
-    const items = await config4.loadAll(configDir, projectDir);
-    const item = config4.findById(id, items);
+    const items = await config3.loadAll(configDir, projectDir);
+    const item = config3.findById(id, items);
     if (!item) {
       return res.status(404).json({ error: "Not found" });
     }
@@ -3307,7 +3384,7 @@ function createCrudRoutes(config4, configDir, projectDir) {
   router.post("/", async (req, res) => {
     const body = req.body;
     const meta = body["metadata"];
-    const customError = config4.validateCreate?.(body);
+    const customError = config3.validateCreate?.(body);
     if (!meta?.["id"] || customError) {
       return res.status(400).json({ error: customError ?? "Missing required fields" });
     }
@@ -3316,21 +3393,21 @@ function createCrudRoutes(config4, configDir, projectDir) {
     if (destination === "project" && !projectDir) {
       return res.status(400).json({ error: "No project directory configured" });
     }
-    const exists = await config4.exists(configDir, id, projectDir);
+    const exists = await config3.exists(configDir, id, projectDir);
     if (exists) {
       return res.status(409).json({ error: "An item with this ID already exists" });
     }
     if (destination === "project") {
-      await config4.saveToProject(projectDir, body);
+      await config3.saveToProject(projectDir, body);
     } else {
-      await config4.save(configDir, body);
+      await config3.save(configDir, body);
     }
     res.status(201).json(body);
   });
   router.put("/:id", async (req, res) => {
     const { id } = req.params;
-    const items = await config4.loadAll(configDir, projectDir);
-    const existing = config4.findById(id, items);
+    const items = await config3.loadAll(configDir, projectDir);
+    const existing = config3.findById(id, items);
     if (!existing) {
       return res.status(404).json({ error: "Not found" });
     }
@@ -3341,29 +3418,29 @@ function createCrudRoutes(config4, configDir, projectDir) {
       ...body,
       metadata: { ...existing.metadata, ...meta, id }
     };
-    const isProject = await isProjectItem(projectDir, config4.dirName, id, config4.ext);
+    const isProject = await isProjectItem(projectDir, config3.dirName, id, config3.ext);
     if (isProject) {
-      await config4.saveToProject(projectDir, updated);
+      await config3.saveToProject(projectDir, updated);
     } else {
-      await config4.save(configDir, updated);
+      await config3.save(configDir, updated);
     }
     res.json(updated);
   });
   router.delete("/:id", async (req, res) => {
     const { id } = req.params;
-    const isProject = await isProjectItem(projectDir, config4.dirName, id, config4.ext);
+    const isProject = await isProjectItem(projectDir, config3.dirName, id, config3.ext);
     if (isProject) {
-      const result2 = await config4.deleteProject(projectDir, id);
+      const result2 = await config3.deleteProject(projectDir, id);
       if (!result2.success) {
         return res.status(500).json({ error: "Failed to delete project item" });
       }
       return res.json({ success: true });
     }
-    const isDefault = await config4.isDefault(id);
+    const isDefault = await config3.isDefault(id);
     if (isDefault) {
       return res.status(403).json({ error: "Cannot delete built-in defaults" });
     }
-    const result = await config4.delete(configDir, id);
+    const result = await config3.delete(configDir, id);
     if (!result.success) {
       return res.status(403).json({ error: result.reason ?? "Cannot delete this item" });
     }
@@ -3371,8 +3448,8 @@ function createCrudRoutes(config4, configDir, projectDir) {
   });
   router.post("/:id/duplicate", async (req, res) => {
     const { id } = req.params;
-    const items = await config4.loadAll(configDir, projectDir);
-    const source = config4.findById(id, items);
+    const items = await config3.loadAll(configDir, projectDir);
+    const source = config3.findById(id, items);
     if (!source) {
       return res.status(404).json({ error: "Not found" });
     }
@@ -3384,56 +3461,195 @@ function createCrudRoutes(config4, configDir, projectDir) {
     const destination = req.body.destination ?? "user";
     if (destination === "project") {
       if (!projectDir) return res.status(400).json({ error: "No project directory configured" });
-      await config4.saveToProject(projectDir, duplicated);
+      await config3.saveToProject(projectDir, duplicated);
     } else {
-      await config4.save(configDir, duplicated);
+      await config3.save(configDir, duplicated);
     }
     res.status(201).json(duplicated);
   });
-  config4.extraRoutes?.(router);
+  config3.extraRoutes?.(router);
   return router;
 }
 
 // src/server/routes/skills.ts
-var config = {
-  dirName: "skills",
-  ext: ".skill.md",
-  loadDefaults: loadDefaultSkills,
-  loadUser: loadUserSkills,
-  loadProject: loadProjectSkills,
-  loadAll: loadAllSkills,
-  findById: findSkillById,
-  save: saveSkill,
-  saveToProject: saveSkillToProject,
-  delete: deleteSkill,
-  deleteProject: deleteProjectSkill,
-  exists: skillExists,
-  isDefault: isDefaultSkill,
-  getDefaultIds: getDefaultSkillIds,
-  validateCreate: validateNameIdPrompt,
-  mapToResponse: (s) => ({
-    ...s.metadata,
-    enabled: isSkillEnabled(s.metadata.id)
-  })
-};
+var SKILL_DIRECTORIES_SETTING = "skills.directories";
+var upload = multer({
+  storage: multer.memoryStorage(),
+  limits: { files: 1e3, fileSize: 25 * 1024 * 1024, fields: 4 }
+});
+function expandHome(path) {
+  if (path === "~") return homedir();
+  return path.startsWith("~/") ? join4(homedir(), path.slice(2)) : path;
+}
+function configuredDirectory() {
+  const raw = getSetting(SKILL_DIRECTORIES_SETTING);
+  if (!raw) return null;
+  try {
+    const parsed = JSON.parse(raw);
+    return Array.isArray(parsed) && typeof parsed[0] === "string" ? parsed[0] : null;
+  } catch {
+    return null;
+  }
+}
+function defaultLibrary(configDir) {
+  const path = resolve2(configDir, "skills");
+  return { configuredPath: path, resolvedPath: path, available: true, custom: false };
+}
+async function resolveLibrary(path) {
+  const expanded = expandHome(path);
+  if (!isAbsolute2(expanded)) throw new Error("Selected path must be absolute");
+  const absolute = resolve2(expanded);
+  const info = await stat(absolute);
+  if (!info.isDirectory()) throw new Error("Selected path is not a directory");
+  await access2(absolute, constants2.R_OK);
+  return { configuredPath: path, resolvedPath: await realpath(absolute) };
+}
+function mapToResponse(skill) {
+  const source = skill.source ?? "global-openfox";
+  return {
+    ...skill.metadata,
+    enabled: isSkillEnabled(skill.metadata.id),
+    source,
+    path: skill.entrypoint ?? null,
+    legacy: skill.legacy ?? true,
+    readOnly: source === "bundled" || (source === "global-shared" || source === "selected" || source === "project-shared") && (skill.legacy ?? true),
+    warnings: skill.warnings ?? []
+  };
+}
+function validateSkillCreate(body) {
+  const baseError = validateNameIdPrompt(body);
+  if (baseError) return baseError;
+  const metadata = body["metadata"];
+  if (typeof metadata["description"] !== "string" || !metadata["description"].trim()) {
+    return "Missing required field: metadata.description";
+  }
+  return null;
+}
+function createConfig(configDir, projectDir) {
+  return {
+    dirName: "skills",
+    ext: ".skill.md",
+    loadDefaults: loadDefaultSkills,
+    loadUser: loadUserSkills,
+    loadProject: loadProjectSkills,
+    loadAll: loadAllSkills,
+    findById: findSkillById,
+    save: saveSkill,
+    saveToProject: saveSkillToProject,
+    delete: deleteSkill,
+    deleteProject: deleteProjectSkill,
+    exists: skillExists,
+    isDefault: isDefaultSkill,
+    getDefaultIds: getDefaultSkillIds,
+    validateCreate: validateSkillCreate,
+    mapToResponse,
+    extraGetData: async () => {
+      const discovery = await loadAllSkillsWithDiagnostics(configDir, projectDir);
+      const items = discovery.skills;
+      const configured = configuredDirectory();
+      let selectedDirectory = configured ? { configuredPath: configured, resolvedPath: null, available: false, custom: true } : defaultLibrary(configDir);
+      const diagnostics = [];
+      if (configured) {
+        try {
+          selectedDirectory = { ...await resolveLibrary(configured), available: true, custom: true };
+        } catch {
+          diagnostics.push(`Selected skills directory is unavailable: ${configured}`);
+        }
+      }
+      return {
+        items: items.map(mapToResponse),
+        selectedDirectory,
+        diagnostics: [...diagnostics, ...discovery.diagnostics, ...items.flatMap((skill) => skill.warnings ?? [])]
+      };
+    }
+  };
+}
 function createSkillRoutes(configDir, projectDir) {
-  return createCrudRoutes(config, configDir, projectDir);
+  const router = Router2();
+  router.put("/library", async (req, res) => {
+    const path = req.body.path;
+    if (typeof path !== "string" || !path.trim()) return res.status(400).json({ error: "path is required" });
+    try {
+      const selected = await resolveLibrary(path);
+      setSetting(SKILL_DIRECTORIES_SETTING, JSON.stringify([path]));
+      res.json(selected);
+    } catch (error) {
+      res.status(400).json({ error: error instanceof Error ? error.message : "Cannot use directory" });
+    }
+  });
+  router.delete("/library", (_req, res) => {
+    deleteSetting(SKILL_DIRECTORIES_SETTING);
+    res.json({ success: true });
+  });
+  router.post("/install", (req, res) => {
+    upload.array("files", 1e3)(req, res, async (uploadError) => {
+      if (uploadError) return res.status(413).json({ error: uploadError.message });
+      try {
+        const configured = configuredDirectory();
+        const library = configured ? await resolveLibrary(configured) : defaultLibrary(configDir);
+        await mkdir2(library.resolvedPath, { recursive: true });
+        const packageName = String(req.body["packageName"] ?? "");
+        const paths = JSON.parse(String(req.body["paths"] ?? "[]"));
+        const files = req.files;
+        if (!Array.isArray(paths) || paths.length !== files.length || paths.some((path) => typeof path !== "string")) {
+          return res.status(400).json({ error: "File path manifest does not match upload" });
+        }
+        const totalBytes = files.reduce((total, file) => total + file.size, 0);
+        if (totalBytes > 50 * 1024 * 1024) return res.status(413).json({ error: "Package exceeds 50 MiB" });
+        const installed = await installSkillPackage(
+          library.resolvedPath,
+          packageName,
+          files.map((file, index) => ({ path: paths[index], content: file.buffer }))
+        );
+        res.status(201).json(installed);
+      } catch (error) {
+        const status = error instanceof SkillInstallError ? error.status : 400;
+        res.status(status).json({ error: error instanceof Error ? error.message : "Install failed" });
+      }
+    });
+  });
+  router.post("/:id/toggle", async (req, res) => {
+    const skills = await loadAllSkills(configDir, projectDir);
+    const existing = findSkillById(req.params["id"], skills);
+    if (!existing) return res.status(404).json({ error: "Not found" });
+    const enabled = !isSkillEnabled(existing.metadata.id);
+    setSkillEnabled(existing.metadata.id, enabled);
+    res.json({ enabled });
+  });
+  router.put("/:id", async (req, res) => {
+    const skills = await loadAllSkills(configDir, projectDir);
+    const existing = findSkillById(req.params["id"], skills);
+    if (!existing) return res.status(404).json({ error: "Not found" });
+    const updated = await updateOwnedSkill(existing, req.body);
+    if (!updated) return res.status(403).json({ error: "This skill is read-only" });
+    res.json(updated);
+  });
+  router.delete("/:id", async (req, res) => {
+    const skills = await loadAllSkills(configDir, projectDir);
+    const existing = findSkillById(req.params["id"], skills);
+    if (!existing) return res.status(404).json({ error: "Not found" });
+    const result = await deleteOwnedSkill(existing);
+    if (!result.success) return res.status(403).json({ error: result.reason ?? "Cannot delete this skill" });
+    res.json({ success: true });
+  });
+  router.use(createCrudRoutes(createConfig(configDir, projectDir), configDir, projectDir));
+  return router;
 }
 
 // src/server/commands/registry.ts
-import { writeFile, mkdir, unlink } from "fs/promises";
-import { join as join3, dirname as dirname3 } from "path";
+import { writeFile as writeFile2, mkdir as mkdir3, unlink } from "fs/promises";
+import { join as join5, dirname as dirname4 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
-import matter from "gray-matter";
-var __bundleDir = dirname3(fileURLToPath4(import.meta.url));
-var DEFAULTS_DIR = join3(__bundleDir, "defaults");
-var DEFAULTS_DIR_ALT = join3(__bundleDir, "command-defaults");
+import matter2 from "gray-matter";
+var __bundleDir = dirname4(fileURLToPath4(import.meta.url));
+var DEFAULTS_DIR = join5(__bundleDir, "defaults");
+var DEFAULTS_DIR_ALT = join5(__bundleDir, "command-defaults");
 var COMMAND_EXTENSION = ".command.md";
 function getCommandsDir(configDir) {
-  return join3(configDir, "commands");
+  return join5(configDir, "commands");
 }
 function getProjectCommandsDir(projectDir) {
-  return join3(projectDir, ".openfox", "commands");
+  return join5(projectDir, ".openfox", "commands");
 }
 async function loadDefaultCommands() {
   let defaults = await loadItemsFromDir(DEFAULTS_DIR, {
@@ -3490,26 +3706,26 @@ function findCommandById(commandId, commands) {
   return commands.find((c) => c.metadata.id === commandId);
 }
 async function commandExists(configDir, commandId, projectDir) {
-  if (await pathExists(join3(getCommandsDir(configDir), `${commandId}${COMMAND_EXTENSION}`))) return true;
-  if (projectDir && await pathExists(join3(getProjectCommandsDir(projectDir), `${commandId}${COMMAND_EXTENSION}`)))
+  if (await pathExists(join5(getCommandsDir(configDir), `${commandId}${COMMAND_EXTENSION}`))) return true;
+  if (projectDir && await pathExists(join5(getProjectCommandsDir(projectDir), `${commandId}${COMMAND_EXTENSION}`)))
     return true;
   return false;
 }
 async function saveCommand(configDir, command) {
   const commandsDir = getCommandsDir(configDir);
   if (!await pathExists(commandsDir)) {
-    await mkdir(commandsDir, { recursive: true });
+    await mkdir3(commandsDir, { recursive: true });
   }
-  const filePath = join3(commandsDir, `${command.metadata.id}${COMMAND_EXTENSION}`);
-  const content = matter.stringify(command.prompt, command.metadata);
-  await writeFile(filePath, content, "utf-8");
+  const filePath = join5(commandsDir, `${command.metadata.id}${COMMAND_EXTENSION}`);
+  const content = matter2.stringify(command.prompt, command.metadata);
+  await writeFile2(filePath, content, "utf-8");
 }
 async function saveCommandToProject(projectDir, command) {
   await saveItemToDir(
     getProjectCommandsDir(projectDir),
     command,
     COMMAND_EXTENSION,
-    (c) => matter.stringify(c.prompt, c.metadata)
+    (c) => matter2.stringify(c.prompt, c.metadata)
   );
 }
 async function deleteProjectCommand(projectDir, commandId) {
@@ -3520,7 +3736,7 @@ async function deleteCommand(configDir, commandId) {
   if (isDefault) {
     return { success: false, reason: "Cannot delete built-in defaults" };
   }
-  const filePath = join3(getCommandsDir(configDir), `${commandId}${COMMAND_EXTENSION}`);
+  const filePath = join5(getCommandsDir(configDir), `${commandId}${COMMAND_EXTENSION}`);
   try {
     await unlink(filePath);
     return { success: true };
@@ -3530,7 +3746,7 @@ async function deleteCommand(configDir, commandId) {
 }
 
 // src/server/routes/commands.ts
-var config2 = {
+var config = {
   dirName: "commands",
   ext: ".command.md",
   loadDefaults: loadDefaultCommands,
@@ -3549,11 +3765,11 @@ var config2 = {
   mapToResponse: (c) => c.metadata
 };
 function createCommandRoutes(configDir, projectDir) {
-  return createCrudRoutes(config2, configDir, projectDir);
+  return createCrudRoutes(config, configDir, projectDir);
 }
 
 // src/server/routes/agents.ts
-var config3 = {
+var config2 = {
   dirName: "agents",
   ext: ".agent.md",
   loadDefaults: loadDefaultAgents,
@@ -3576,12 +3792,12 @@ var config3 = {
   mapToResponse: (a) => a.metadata
 };
 function createAgentRoutes(configDir, projectDir) {
-  return createCrudRoutes(config3, configDir, projectDir);
+  return createCrudRoutes(config2, configDir, projectDir);
 }
 
 // src/server/routes/workflows.ts
 import "express";
-function createWorkflowRoutes(configDir, config4, projectDir) {
+function createWorkflowRoutes(configDir, config3, projectDir) {
   const crudConfig = {
     dirName: "workflows",
     ext: ".workflow.json",
@@ -3610,7 +3826,7 @@ function createWorkflowRoutes(configDir, config4, projectDir) {
         subGroups: subGroups.length > 0 ? subGroups : void 0
       };
     },
-    extraGetData: () => Promise.resolve({ activeWorkflowId: config4.activeWorkflowId ?? "default" }),
+    extraGetData: () => Promise.resolve({ activeWorkflowId: config3.activeWorkflowId ?? "default" }),
     extraRoutes: (router) => {
       router.get("/template-variables", (_req, res) => {
         res.json({ variables: TEMPLATE_VARIABLES });
@@ -3621,19 +3837,19 @@ function createWorkflowRoutes(configDir, config4, projectDir) {
 }
 
 // src/server/routes/dev-server.ts
-import { Router as Router3 } from "express";
+import { Router as Router4 } from "express";
 function createDevServerRoutes() {
-  const router = Router3();
+  const router = Router4();
   router.get("/", async (req, res) => {
     const workdir = req.query["workdir"];
     if (!workdir) return res.status(400).json({ error: "workdir required" });
     const status = devServerManager.getStatus(workdir);
     if (!status.config) {
-      const config4 = await devServerManager.loadConfig(workdir);
-      if (config4) {
-        status.config = config4;
-        status.url = config4.url;
-        status.hotReload = config4.hotReload;
+      const config3 = await devServerManager.loadConfig(workdir);
+      if (config3) {
+        status.config = config3;
+        status.url = config3.url;
+        status.hotReload = config3.hotReload;
       }
     }
     res.json(status);
@@ -3679,8 +3895,8 @@ function createDevServerRoutes() {
   router.get("/config", async (req, res) => {
     const workdir = req.query["workdir"];
     if (!workdir) return res.status(400).json({ error: "workdir required" });
-    const config4 = await devServerManager.loadConfig(workdir);
-    res.json({ config: config4 });
+    const config3 = await devServerManager.loadConfig(workdir);
+    res.json({ config: config3 });
   });
   router.post("/config", async (req, res) => {
     const workdir = req.query["workdir"];
@@ -3690,9 +3906,9 @@ function createDevServerRoutes() {
       return res.status(400).json({ error: "command and url are required" });
     }
     try {
-      const config4 = { command, url, hotReload: hotReload ?? false, disableInspect: disableInspect ?? false };
-      await devServerManager.saveConfig(workdir, config4);
-      res.json({ config: config4 });
+      const config3 = { command, url, hotReload: hotReload ?? false, disableInspect: disableInspect ?? false };
+      await devServerManager.saveConfig(workdir, config3);
+      res.json({ config: config3 });
     } catch (err) {
       res.status(500).json({ error: err instanceof Error ? err.message : "Failed to save config" });
     }
@@ -3701,9 +3917,9 @@ function createDevServerRoutes() {
 }
 
 // src/server/routes/terminals.ts
-import { Router as Router4 } from "express";
+import { Router as Router5 } from "express";
 function createTerminalRoutes() {
-  const router = Router4();
+  const router = Router5();
   router.get("/", (req, res) => {
     const projectId = req.query["projectId"];
     const sessions = projectId ? terminalManager.getByProject(projectId) : [];
@@ -3742,22 +3958,22 @@ function createTerminalRoutes() {
 }
 
 // src/server/routes/directories.ts
-import { Router as Router5 } from "express";
+import { Router as Router6 } from "express";
 import { readdir } from "fs/promises";
-import { resolve as resolve2, join as join4, dirname as dirname4, basename as basename2 } from "path";
+import { resolve as resolve3, join as join6, dirname as dirname5, basename as basename2 } from "path";
 function createDirectoryRoutes() {
-  const router = Router5();
+  const router = Router6();
   const DEFAULT_BASE_PATH = process.cwd();
   router.get("/", async (req, res) => {
     const path = req.query["path"] || DEFAULT_BASE_PATH;
     try {
-      const resolvedPath = resolve2(path);
+      const resolvedPath = resolve3(path);
       const entries = await readdir(resolvedPath, { withFileTypes: true });
       const directories = entries.filter((entry) => entry.isDirectory()).map((entry) => ({
         name: entry.name,
-        path: join4(resolvedPath, entry.name)
+        path: join6(resolvedPath, entry.name)
       })).sort((a, b) => a.name.localeCompare(b.name));
-      const parent = dirname4(resolvedPath);
+      const parent = dirname5(resolvedPath);
       const hasParent = parent !== resolvedPath;
       res.json({
         current: resolvedPath,
@@ -3779,10 +3995,10 @@ function createDirectoryRoutes() {
 }
 
 // src/server/routes/file-search.ts
-import { Router as Router6 } from "express";
+import { Router as Router7 } from "express";
 import fg from "fast-glob";
 function createFileSearchRoutes() {
-  const router = Router6();
+  const router = Router7();
   router.get("/", async (req, res) => {
     const query = req.query["q"] || "";
     const workdir = req.query["workdir"] || process.cwd();
@@ -3858,11 +4074,11 @@ function fuzzyScore(filePath, query) {
 }
 
 // src/server/routes/auto-update.ts
-import { Router as Router7 } from "express";
+import { Router as Router8 } from "express";
 import { spawn as spawn2 } from "child_process";
 
 // src/constants.ts
-var VERSION = "2.0.59";
+var VERSION = "2.0.60";
 
 // src/server/routes/auto-update.ts
 var updateInProgress = false;
@@ -3880,12 +4096,12 @@ async function checkAuth(req, opts) {
   return true;
 }
 function createAutoUpdateRoutes(options = {}) {
-  const router = Router7();
+  const router = Router8();
   router.get("/check", async (_req, res) => {
     const isService = isRunningAsService();
     const current = VERSION;
     try {
-      const latest = await new Promise((resolve4, reject) => {
+      const latest = await new Promise((resolve5, reject) => {
         const child = spawn2("npm", ["view", "openfox", "version"], {
           stdio: ["ignore", "pipe", "pipe"],
           windowsHide: true
@@ -3896,7 +4112,7 @@ function createAutoUpdateRoutes(options = {}) {
         });
         child.on("close", (code) => {
           if (code === 0) {
-            resolve4(stdout.trim());
+            resolve5(stdout.trim());
           } else {
             reject(new Error(`npm view exited with code ${code}`));
           }
@@ -3940,9 +4156,9 @@ function createAutoUpdateRoutes(options = {}) {
       const timeout = setTimeout(() => {
         child.kill();
       }, UPDATE_TIMEOUT);
-      const exitCode = await new Promise((resolve4) => {
-        child.on("close", resolve4);
-        child.on("error", () => resolve4(1));
+      const exitCode = await new Promise((resolve5) => {
+        child.on("close", resolve5);
+        child.on("error", () => resolve5(1));
       });
       clearTimeout(timeout);
       if (exitCode === 0) {
@@ -3980,15 +4196,15 @@ function createAutoUpdateRoutes(options = {}) {
 }
 
 // src/server/index.ts
-var __dirname3 = dirname5(fileURLToPath5(import.meta.url));
-async function createServerHandle(config4) {
-  setRuntimeConfig(config4);
-  setLogLevel(config4.logging?.level ?? void 0, config4.mode);
+var __dirname3 = dirname6(fileURLToPath5(import.meta.url));
+async function createServerHandle(config3) {
+  setRuntimeConfig(config3);
+  setLogLevel(config3.logging?.level ?? void 0, config3.mode);
   await loadServerAuthConfig();
-  const db = initDatabase(config4);
+  const db = initDatabase(config3);
   initEventStore(db);
-  const configDir = getGlobalConfigDir(config4.mode ?? "production");
-  const providerManager = createProviderManager(config4);
+  const configDir = getGlobalConfigDir(config3.mode ?? "production");
+  const providerManager = createProviderManager(config3);
   const sessionManager = new SessionManager(providerManager);
   devServerManager.setSessionManager(sessionManager);
   const useMock = process.env["OPENFOX_MOCK_LLM"] === "true";
@@ -3999,24 +4215,24 @@ async function createServerHandle(config4) {
   }
   async function initLLM() {
     const llmClient = getLLMClient();
-    const backend = config4.llm.backend;
+    const backend = config3.llm.backend;
     llmClient.setBackend(backend);
     if (!useMock) {
       logger.info("Using configured LLM backend", { backend: getBackendDisplayName(backend) });
     }
-    const detected = await detectModel(config4.llm.baseUrl);
-    if (detected && !config4.defaultModelSelection) {
+    const detected = await detectModel(config3.llm.baseUrl);
+    if (detected && !config3.defaultModelSelection) {
       llmClient.setModel(detected);
       if (!useMock) {
         logger.info("Auto-detected LLM model", { model: detected, backend: getBackendDisplayName(backend) });
       }
-    } else if (detected && config4.defaultModelSelection) {
+    } else if (detected && config3.defaultModelSelection) {
       if (!useMock) {
-        logger.debug("Skipping auto-detect, using configured model", { model: config4.llm.model });
+        logger.debug("Skipping auto-detect, using configured model", { model: config3.llm.model });
       }
     } else {
       if (!useMock) {
-        logger.warn("Could not auto-detect model, using config", { model: config4.llm.model });
+        logger.warn("Could not auto-detect model, using config", { model: config3.llm.model });
       }
     }
     const activeProvider = providerManager.getActiveProvider();
@@ -4037,14 +4253,14 @@ async function createServerHandle(config4) {
     onToolsDiscovered: async (name, tools) => {
       try {
         const { loadGlobalConfig, saveGlobalConfig } = await import("./config-GMQUPNBY.js");
-        const mode = config4.mode ?? "production";
-        const globalConfig = await loadGlobalConfig(mode, config4.globalConfigPath);
+        const mode = config3.mode ?? "production";
+        const globalConfig = await loadGlobalConfig(mode, config3.globalConfigPath);
         const mcpServers2 = {
           ...globalConfig.mcpServers ?? {}
         };
         if (mcpServers2[name]) {
           mcpServers2[name] = { ...mcpServers2[name], cachedTools: tools };
-          await saveGlobalConfig(mode, { ...globalConfig, mcpServers: mcpServers2 }, config4.globalConfigPath);
+          await saveGlobalConfig(mode, { ...globalConfig, mcpServers: mcpServers2 }, config3.globalConfigPath);
         }
       } catch (err) {
         logger.warn("Failed to persist MCP tool cache", { name, error: String(err) });
@@ -4052,9 +4268,9 @@ async function createServerHandle(config4) {
     }
   });
   setMcpManagerForTools(mcpManager);
-  setMcpConfigMode(config4.mode ?? "production");
-  setMcpConfigPath(config4.globalConfigPath);
-  const mcpServers = config4.mcpServers ?? {};
+  setMcpConfigMode(config3.mode ?? "production");
+  setMcpConfigPath(config3.globalConfigPath);
+  const mcpServers = config3.mcpServers ?? {};
   Promise.all(
     Object.entries(mcpServers).map(
       ([name, serverConfig]) => mcpManager.addServer(name, serverConfig).catch((err) => {
@@ -4067,7 +4283,7 @@ async function createServerHandle(config4) {
       setMcpTools(mcpTools);
       logger.info("MCP tools registered", { count: mcpTools.length });
     }
-    const { signalMcpReady } = await import("./server-KDGQZNYQ.js");
+    const { signalMcpReady } = await import("./server-LMH7ZH5X.js");
     signalMcpReady();
   });
   const app = express();
@@ -4253,14 +4469,14 @@ async function createServerHandle(config4) {
     if (!project) {
       return res.status(404).json({ error: "Project not found" });
     }
-    const { providerId, model } = parseDefaultModelSelection(config4.defaultModelSelection);
+    const { providerId, model } = parseDefaultModelSelection(config3.defaultModelSelection);
     const session = sessionManager.createSession(projectId, title, providerId ?? null, model ?? null);
     res.status(201).json({ session });
   });
   app.get("/api/sessions/:id", async (req, res) => {
     const { getEventStore: getEventStore2 } = await import("./events-52XADT6Y.js");
     const { buildMessagesFromStoredEvents } = await import("./folding-2BGFLV5J.js");
-    const { getPendingQuestionsForSession } = await import("./tools-FQ54IAYG.js");
+    const { getPendingQuestionsForSession } = await import("./tools-WGAZKL56.js");
     const session = sessionManager.getSession(req.params.id);
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
@@ -4279,8 +4495,8 @@ async function createServerHandle(config4) {
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-AS44EMQE.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-FQ54IAYG.js");
+    const { stopSessionExecution } = await import("./chat-handler-MBR6ZQTX.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-WGAZKL56.js");
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
     abortSession(sessionId);
@@ -4334,11 +4550,11 @@ async function createServerHandle(config4) {
       return res.status(500).json({ error: result.error ?? "Failed to set default model" });
     }
     const { loadGlobalConfig, saveGlobalConfig, setDefaultModelSelection } = await import("./config-GMQUPNBY.js");
-    const globalConfig = await loadGlobalConfig(config4.mode ?? "production", config4.globalConfigPath);
+    const globalConfig = await loadGlobalConfig(config3.mode ?? "production", config3.globalConfigPath);
     const updatedConfig = setDefaultModelSelection(globalConfig, providerId, model);
-    await saveGlobalConfig(config4.mode ?? "production", updatedConfig, config4.globalConfigPath);
-    config4.defaultModelSelection = updatedConfig.defaultModelSelection;
-    res.json({ success: true, defaultModelSelection: config4.defaultModelSelection });
+    await saveGlobalConfig(config3.mode ?? "production", updatedConfig, config3.globalConfigPath);
+    config3.defaultModelSelection = updatedConfig.defaultModelSelection;
+    res.json({ success: true, defaultModelSelection: config3.defaultModelSelection });
   });
   app.put("/api/sessions/:id/criteria", async (req, res) => {
     const sessionId = req.params.id;
@@ -4434,7 +4650,7 @@ async function createServerHandle(config4) {
     if (!callId || approved === void 0) {
       return res.status(400).json({ error: "callId and approved are required" });
     }
-    const { providePathConfirmation } = await import("./tools-FQ54IAYG.js");
+    const { providePathConfirmation } = await import("./tools-WGAZKL56.js");
     const result = providePathConfirmation(callId, approved, alwaysAllow);
     if (!result.found) {
       return res.status(404).json({ error: "No pending path confirmation with that ID" });
@@ -4442,7 +4658,7 @@ async function createServerHandle(config4) {
     const { getEventStore: getEventStore2 } = await import("./events-52XADT6Y.js");
     const { buildMessagesFromStoredEvents, foldPendingConfirmations } = await import("./folding-2BGFLV5J.js");
     const { createSessionStateMessage } = await import("./protocol-CTNE3ANP.js");
-    const { getPendingQuestionsForSession } = await import("./tools-FQ54IAYG.js");
+    const { getPendingQuestionsForSession } = await import("./tools-WGAZKL56.js");
     const eventStore = getEventStore2();
     const events = eventStore.getEvents(sessionId);
     const messages = buildMessagesFromStoredEvents(events);
@@ -4463,7 +4679,7 @@ async function createServerHandle(config4) {
     if (!skip && typeof answer !== "string") {
       return res.status(400).json({ error: "answer is required when not skipping" });
     }
-    const { provideAnswer } = await import("./tools-FQ54IAYG.js");
+    const { provideAnswer } = await import("./tools-WGAZKL56.js");
     const found = provideAnswer(callId, answer ?? "", skip ?? false);
     if (!found) {
       return res.status(404).json({ error: "No pending question with that ID" });
@@ -4491,8 +4707,8 @@ async function createServerHandle(config4) {
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { getSetting, SETTINGS_KEYS } = await import("./settings-X43DCM55.js");
-    if (getSetting(SETTINGS_KEYS.CACHE_WARMING) !== "true") {
+    const { getSetting: getSetting2, SETTINGS_KEYS } = await import("./settings-2TQA7VTP.js");
+    if (getSetting2(SETTINGS_KEYS.CACHE_WARMING) !== "true") {
       return res.json({ success: false, reason: "disabled" });
     }
     if (session.messages.length > 0) {
@@ -4523,7 +4739,7 @@ async function createServerHandle(config4) {
       backend: activeProvider?.backend ?? llmClient.getBackend(),
       model: llmClient.getModel()
     };
-    const { runAgentTurn, TurnMetrics } = await import("./orchestrator-MH7J2YVP.js");
+    const { runAgentTurn, TurnMetrics } = await import("./orchestrator-PIZJ42J2.js");
     runAgentTurn(
       {
         sessionManager,
@@ -4561,8 +4777,8 @@ async function createServerHandle(config4) {
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-AS44EMQE.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-FQ54IAYG.js");
+    const { stopSessionExecution } = await import("./chat-handler-MBR6ZQTX.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-WGAZKL56.js");
     const queuedMessages = sessionManager.getQueueState(sessionId);
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
@@ -4642,7 +4858,7 @@ async function createServerHandle(config4) {
     res.json({ accepted: true });
   });
   app.get("/api/settings", async (req, res) => {
-    const { getSetting, SETTINGS_DEFAULTS } = await import("./settings-X43DCM55.js");
+    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-2TQA7VTP.js");
     const keysParam = req.query["keys"];
     if (!keysParam) {
       return res.status(400).json({ error: "keys query parameter is required" });
@@ -4650,30 +4866,30 @@ async function createServerHandle(config4) {
     const keys = keysParam.split(",").map((k) => k.trim());
     const result = {};
     for (const key of keys) {
-      result[key] = getSetting(key) ?? SETTINGS_DEFAULTS[key] ?? "";
+      result[key] = getSetting2(key) ?? SETTINGS_DEFAULTS[key] ?? "";
     }
     res.json(result);
   });
   app.get("/api/settings/:key", async (req, res) => {
-    const { getSetting, SETTINGS_DEFAULTS } = await import("./settings-X43DCM55.js");
+    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-2TQA7VTP.js");
     const key = req.params.key;
-    const value = getSetting(key) ?? SETTINGS_DEFAULTS[key] ?? null;
+    const value = getSetting2(key) ?? SETTINGS_DEFAULTS[key] ?? null;
     res.json({ key, value });
   });
   app.get("/api/settings/:key", async (req, res) => {
-    const { getSetting, SETTINGS_DEFAULTS } = await import("./settings-X43DCM55.js");
+    const { getSetting: getSetting2, SETTINGS_DEFAULTS } = await import("./settings-2TQA7VTP.js");
     const key = req.params.key;
-    const value = getSetting(key) ?? SETTINGS_DEFAULTS[key] ?? null;
+    const value = getSetting2(key) ?? SETTINGS_DEFAULTS[key] ?? null;
     res.json({ key, value });
   });
   app.put("/api/settings/:key", async (req, res) => {
-    const { setSetting } = await import("./settings-X43DCM55.js");
+    const { setSetting: setSetting2 } = await import("./settings-2TQA7VTP.js");
     const key = req.params.key;
     const { value } = req.body;
     if (value === void 0) {
       return res.status(400).json({ error: "value is required" });
     }
-    setSetting(key, value);
+    setSetting2(key, value);
     res.json({ key, value });
   });
   app.get("/api/config", async (_req, res) => {
@@ -4683,7 +4899,7 @@ async function createServerHandle(config4) {
     let globalWorkdir;
     try {
       const { loadGlobalConfig, getVisionFallback } = await import("./config-GMQUPNBY.js");
-      const globalConfig = await loadGlobalConfig(config4.mode ?? "production", config4.globalConfigPath);
+      const globalConfig = await loadGlobalConfig(config3.mode ?? "production", config3.globalConfigPath);
       const fallback = getVisionFallback(globalConfig);
       if (fallback) {
         visionFallback = {
@@ -4701,13 +4917,13 @@ async function createServerHandle(config4) {
       version: VERSION,
       model: llmClient.getModel(),
       maxContext: providerManager.getCurrentModelContext(),
-      llmUrl: activeProvider?.url ?? config4.llm.baseUrl,
+      llmUrl: activeProvider?.url ?? config3.llm.baseUrl,
       llmStatus: getLlmStatus(),
       backend: llmClient.getBackend(),
-      workdir: globalWorkdir ?? config4.workdir,
+      workdir: globalWorkdir ?? config3.workdir,
       providers: providerManager.getProviders(),
       activeProviderId: providerManager.getActiveProviderId(),
-      defaultModelSelection: config4.defaultModelSelection,
+      defaultModelSelection: config3.defaultModelSelection,
       visionFallback
     });
   });
@@ -4716,7 +4932,7 @@ async function createServerHandle(config4) {
     const currentModel = providerManager.getCurrentModel();
     if (currentModel === "auto") {
       const activeProvider = providerManager.getActiveProvider();
-      const baseUrl = activeProvider?.url ?? config4.llm.baseUrl;
+      const baseUrl = activeProvider?.url ?? config3.llm.baseUrl;
       const detected = await detectModel(baseUrl);
       if (detected) {
         llmClient.setModel(detected);
@@ -4906,7 +5122,7 @@ async function createServerHandle(config4) {
     }
     try {
       const { loadGlobalConfig, saveGlobalConfig, addProvider, setDefaultModelSelection } = await import("./config-GMQUPNBY.js");
-      const globalConfig = await loadGlobalConfig(config4.mode ?? "production", config4.globalConfigPath);
+      const globalConfig = await loadGlobalConfig(config3.mode ?? "production", config3.globalConfigPath);
       const providerBackend = backend;
       const providerModels = modelConfigs?.length ? buildModelConfigs(modelConfigs) : model ? [{ id: model, contextWindow: 2e5, source: "user" }] : [];
       const configWithProvider = addProvider(globalConfig, {
@@ -4925,9 +5141,9 @@ async function createServerHandle(config4) {
         configWithProvider.providers[configWithProvider.providers.length - 1].id,
         firstModelId
       );
-      await saveGlobalConfig(config4.mode ?? "production", finalConfig, config4.globalConfigPath);
+      await saveGlobalConfig(config3.mode ?? "production", finalConfig, config3.globalConfigPath);
       providerManager.setProviders(finalConfig.providers, finalConfig.defaultModelSelection ?? void 0);
-      config4.defaultModelSelection = finalConfig.defaultModelSelection;
+      config3.defaultModelSelection = finalConfig.defaultModelSelection;
       const newProvider = finalConfig.providers[finalConfig.providers.length - 1];
       res.status(201).json({
         success: true,
@@ -4944,13 +5160,13 @@ async function createServerHandle(config4) {
     const { workdir, visionFallback } = req.body;
     try {
       const { loadGlobalConfig, saveGlobalConfig } = await import("./config-GMQUPNBY.js");
-      const globalConfig = await loadGlobalConfig(config4.mode ?? "production", config4.globalConfigPath);
+      const globalConfig = await loadGlobalConfig(config3.mode ?? "production", config3.globalConfigPath);
       const updatedConfig = {
         ...globalConfig,
         workspace: workdir ? { workdir } : globalConfig.workspace,
         visionFallback: visionFallback ?? globalConfig.visionFallback
       };
-      await saveGlobalConfig(config4.mode ?? "production", updatedConfig, config4.globalConfigPath);
+      await saveGlobalConfig(config3.mode ?? "production", updatedConfig, config3.globalConfigPath);
       res.json({ success: true });
     } catch (error) {
       res.status(500).json({
@@ -4972,11 +5188,11 @@ async function createServerHandle(config4) {
   app.delete("/api/providers/:id", async (req, res) => {
     const { id } = req.params;
     const { loadGlobalConfig, saveGlobalConfig, removeProvider } = await import("./config-GMQUPNBY.js");
-    const globalConfig = await loadGlobalConfig(config4.mode ?? "production", config4.globalConfigPath);
+    const globalConfig = await loadGlobalConfig(config3.mode ?? "production", config3.globalConfigPath);
     const updatedConfig = removeProvider(globalConfig, id);
-    await saveGlobalConfig(config4.mode ?? "production", updatedConfig, config4.globalConfigPath);
+    await saveGlobalConfig(config3.mode ?? "production", updatedConfig, config3.globalConfigPath);
     providerManager.setProviders(updatedConfig.providers, updatedConfig.defaultModelSelection ?? void 0);
-    config4.defaultModelSelection = updatedConfig.defaultModelSelection;
+    config3.defaultModelSelection = updatedConfig.defaultModelSelection;
     res.json({ success: true });
   });
   app.patch("/api/providers/:id", async (req, res) => {
@@ -4984,7 +5200,7 @@ async function createServerHandle(config4) {
     const { isLocal } = req.body;
     try {
       const { loadGlobalConfig, saveGlobalConfig, updateProvider } = await import("./config-GMQUPNBY.js");
-      const globalConfig = await loadGlobalConfig(config4.mode ?? "production", config4.globalConfigPath);
+      const globalConfig = await loadGlobalConfig(config3.mode ?? "production", config3.globalConfigPath);
       const provider = globalConfig.providers.find((p) => p.id === id);
       if (!provider) {
         return res.status(404).json({ error: "Provider not found" });
@@ -4992,9 +5208,9 @@ async function createServerHandle(config4) {
       const updates = {};
       if (isLocal !== void 0) updates["isLocal"] = isLocal;
       const updatedConfig = updateProvider(globalConfig, id, updates);
-      await saveGlobalConfig(config4.mode ?? "production", updatedConfig, config4.globalConfigPath);
+      await saveGlobalConfig(config3.mode ?? "production", updatedConfig, config3.globalConfigPath);
       providerManager.setProviders(updatedConfig.providers, updatedConfig.defaultModelSelection ?? void 0);
-      config4.defaultModelSelection = updatedConfig.defaultModelSelection;
+      config3.defaultModelSelection = updatedConfig.defaultModelSelection;
       res.json({ success: true, provider: updatedConfig.providers.find((p) => p.id === id) });
     } catch (error) {
       res.status(500).json({ error: error instanceof Error ? error.message : "Failed to update provider" });
@@ -5013,7 +5229,7 @@ async function createServerHandle(config4) {
     } = req.body;
     try {
       const { loadGlobalConfig, saveGlobalConfig, updateProvider } = await import("./config-GMQUPNBY.js");
-      const globalConfig = await loadGlobalConfig(config4.mode ?? "production", config4.globalConfigPath);
+      const globalConfig = await loadGlobalConfig(config3.mode ?? "production", config3.globalConfigPath);
       const provider = globalConfig.providers.find((p) => p.id === id);
       if (!provider) {
         return res.status(404).json({ error: "Provider not found" });
@@ -5029,9 +5245,9 @@ async function createServerHandle(config4) {
         updates["models"] = buildModelConfigs(modelConfigs);
       }
       const updatedConfig = updateProvider(globalConfig, id, updates);
-      await saveGlobalConfig(config4.mode ?? "production", updatedConfig, config4.globalConfigPath);
+      await saveGlobalConfig(config3.mode ?? "production", updatedConfig, config3.globalConfigPath);
       providerManager.setProviders(updatedConfig.providers, updatedConfig.defaultModelSelection ?? void 0);
-      config4.defaultModelSelection = updatedConfig.defaultModelSelection;
+      config3.defaultModelSelection = updatedConfig.defaultModelSelection;
       res.json({ success: true, provider: updatedConfig.providers.find((p) => p.id === id) });
     } catch (error) {
       res.status(500).json({ error: error instanceof Error ? error.message : "Failed to update provider" });
@@ -5051,9 +5267,9 @@ async function createServerHandle(config4) {
     }
     const llmClient = getLLMClient();
     const { loadGlobalConfig, saveGlobalConfig, setDefaultModelSelection } = await import("./config-GMQUPNBY.js");
-    const globalConfig = await loadGlobalConfig(config4.mode ?? "production", config4.globalConfigPath);
+    const globalConfig = await loadGlobalConfig(config3.mode ?? "production", config3.globalConfigPath);
     const updatedConfig = setDefaultModelSelection(globalConfig, id, llmClient.getModel());
-    await saveGlobalConfig(config4.mode ?? "production", updatedConfig, config4.globalConfigPath);
+    await saveGlobalConfig(config3.mode ?? "production", updatedConfig, config3.globalConfigPath);
     res.json({
       success: true,
       activeProviderId: id,
@@ -5077,7 +5293,7 @@ async function createServerHandle(config4) {
   });
   async function rebuildMcpTools() {
     const { createMcpTools: createMcpTools2 } = await import("./tool-adapter-MOGEI6TP.js");
-    const { setMcpTools: setMcpTools2 } = await import("./tools-FQ54IAYG.js");
+    const { setMcpTools: setMcpTools2 } = await import("./tools-WGAZKL56.js");
     const mcpTools = createMcpTools2(mcpManager);
     setMcpTools2(mcpTools);
   }
@@ -5140,15 +5356,15 @@ async function createServerHandle(config4) {
       await mcpManager.addServer(name, serverCfg);
       const server = mcpManager.getServer(name);
       const { loadGlobalConfig, saveGlobalConfig } = await import("./config-GMQUPNBY.js");
-      const globalConfig = await loadGlobalConfig(config4.mode ?? "production", config4.globalConfigPath);
+      const globalConfig = await loadGlobalConfig(config3.mode ?? "production", config3.globalConfigPath);
       const updatedMcpServers = { ...globalConfig.mcpServers ?? {}, [name]: serverCfg };
       await saveGlobalConfig(
-        config4.mode ?? "production",
+        config3.mode ?? "production",
         {
           ...globalConfig,
           mcpServers: updatedMcpServers
         },
-        config4.globalConfigPath
+        config3.globalConfigPath
       );
       await rebuildMcpTools();
       if (server) {
@@ -5170,16 +5386,16 @@ async function createServerHandle(config4) {
     }
     mcpManager.removeServer(name);
     const { loadGlobalConfig, saveGlobalConfig } = await import("./config-GMQUPNBY.js");
-    const globalConfig = await loadGlobalConfig(config4.mode ?? "production", config4.globalConfigPath);
+    const globalConfig = await loadGlobalConfig(config3.mode ?? "production", config3.globalConfigPath);
     const updatedMcpServers = { ...globalConfig.mcpServers ?? {} };
     delete updatedMcpServers[name];
     await saveGlobalConfig(
-      config4.mode ?? "production",
+      config3.mode ?? "production",
       {
         ...globalConfig,
         mcpServers: updatedMcpServers
       },
-      config4.globalConfigPath
+      config3.globalConfigPath
     );
     await rebuildMcpTools();
     const sessions = sessionManager.listSessions();
@@ -5199,7 +5415,7 @@ async function createServerHandle(config4) {
       const server = mcpManager.getServer(name);
       if (server) {
         const { loadGlobalConfig, saveGlobalConfig } = await import("./config-GMQUPNBY.js");
-        const globalConfig = await loadGlobalConfig(config4.mode ?? "production", config4.globalConfigPath);
+        const globalConfig = await loadGlobalConfig(config3.mode ?? "production", config3.globalConfigPath);
         const mcpServers2 = { ...globalConfig.mcpServers ?? {} };
         const serverCfg = mcpServers2[name];
         if (serverCfg) {
@@ -5207,12 +5423,12 @@ async function createServerHandle(config4) {
           const cfg = { ...serverCfg, ...disabledTools.length > 0 ? { disabledTools } : { disabledTools: void 0 } };
           mcpServers2[name] = cfg;
           await saveGlobalConfig(
-            config4.mode ?? "production",
+            config3.mode ?? "production",
             {
               ...globalConfig,
               mcpServers: mcpServers2
             },
-            config4.globalConfigPath
+            config3.globalConfigPath
           );
         }
       }
@@ -5226,11 +5442,11 @@ async function createServerHandle(config4) {
       res.status(400).json({ error: error instanceof Error ? error.message : String(error) });
     }
   });
-  const projectDir = config4.workdir;
+  const projectDir = config3.workdir;
   app.use("/api/skills", createSkillRoutes(configDir, projectDir));
   app.use("/api/commands", createCommandRoutes(configDir, projectDir));
   app.use("/api/agents", createAgentRoutes(configDir, projectDir));
-  app.use("/api/workflows", createWorkflowRoutes(configDir, config4, projectDir));
+  app.use("/api/workflows", createWorkflowRoutes(configDir, config3, projectDir));
   app.use("/api/dev-server", createDevServerRoutes());
   app.use("/api/terminals", createTerminalRoutes());
   app.use(
@@ -5274,14 +5490,14 @@ async function createServerHandle(config4) {
   });
   app.use("/api/directories", createDirectoryRoutes());
   app.use("/api/files", createFileSearchRoutes());
-  const webDir = resolve3(__dirname3, "../../web");
-  const isDev = config4.mode === "development";
+  const webDir = resolve4(__dirname3, "../../web");
+  const isDev = config3.mode === "development";
   let viteServer;
   if (isDev) {
     logger.info("Dev mode: using Vite middleware");
     viteServer = await createViteServer({
       root: webDir,
-      configFile: resolve3(__dirname3, "../../web/vite.config.ts"),
+      configFile: resolve4(__dirname3, "../../web/vite.config.ts"),
       server: { middlewareMode: true },
       appType: "spa",
       logLevel: "warn"
@@ -5301,7 +5517,7 @@ async function createServerHandle(config4) {
       }
     });
     app.get("/fox.svg", (_req, res) => {
-      readFile(join5(webDir, "fox.svg")).then((content) => {
+      readFile2(join7(webDir, "fox.svg")).then((content) => {
         res.set("Content-Type", "image/svg+xml");
         res.send(content);
       }).catch(() => {
@@ -5310,7 +5526,7 @@ async function createServerHandle(config4) {
     });
     app.use(
       "/sounds",
-      express.static(join5(webDir, "public", "sounds"), {
+      express.static(join7(webDir, "public", "sounds"), {
         setHeaders: (res) => {
           res.set("Content-Type", "audio/mpeg");
         }
@@ -5319,24 +5535,24 @@ async function createServerHandle(config4) {
     app.use("/__inspect__.js", (_req, res) => {
       res.set("Access-Control-Allow-Origin", "*");
       res.set("Content-Type", "application/javascript");
-      readFile(join5(webDir, "public", "__inspect__.js")).then((content) => res.send(content)).catch(() => res.status(404).send("Not found"));
+      readFile2(join7(webDir, "public", "__inspect__.js")).then((content) => res.send(content)).catch(() => res.status(404).send("Not found"));
     });
     app.get("/*path", (req, res) => {
       if (req.path.startsWith("/api/")) {
         return;
       }
-      readFile(join5(webDir, "index.html"), "utf-8").then((indexHtml) => viteServer.transformIndexHtml(req.originalUrl, indexHtml)).then((transformed) => res.send(transformed)).catch((err) => {
+      readFile2(join7(webDir, "index.html"), "utf-8").then((indexHtml) => viteServer.transformIndexHtml(req.originalUrl, indexHtml)).then((transformed) => res.send(transformed)).catch((err) => {
         logger.error("Error serving index.html", { error: err });
         res.status(500).send("Server error");
       });
     });
-    logger.info("Vite middleware ready", { port: config4.server.port });
+    logger.info("Vite middleware ready", { port: config3.server.port });
   }
   if (!isDev) {
-    const distWebDir = resolve3(__dirname3, "web");
+    const distWebDir = resolve4(__dirname3, "web");
     app.use(
       "/assets",
-      express.static(join5(distWebDir, "assets"), {
+      express.static(join7(distWebDir, "assets"), {
         setHeaders: (res, filepath) => {
           if (filepath.endsWith(".css")) {
             res.set("Content-Type", "text/css");
@@ -5344,11 +5560,11 @@ async function createServerHandle(config4) {
         }
       })
     );
-    app.use("/manifest.webmanifest", express.static(join5(distWebDir, "manifest.webmanifest")));
-    app.use("/registerSW.js", express.static(join5(distWebDir, "registerSW.js")));
-    app.use("/sw.js", express.static(join5(distWebDir, "sw.js")));
+    app.use("/manifest.webmanifest", express.static(join7(distWebDir, "manifest.webmanifest")));
+    app.use("/registerSW.js", express.static(join7(distWebDir, "registerSW.js")));
+    app.use("/sw.js", express.static(join7(distWebDir, "sw.js")));
     app.get("/fox.svg", (_req, res) => {
-      readFile(join5(distWebDir, "fox.svg")).then((content) => {
+      readFile2(join7(distWebDir, "fox.svg")).then((content) => {
         res.set("Content-Type", "image/svg+xml");
         res.send(content);
       }).catch(() => {
@@ -5357,7 +5573,7 @@ async function createServerHandle(config4) {
     });
     app.use(
       "/sounds",
-      express.static(join5(distWebDir, "sounds"), {
+      express.static(join7(distWebDir, "sounds"), {
         setHeaders: (res) => {
           res.set("Content-Type", "audio/mpeg");
         }
@@ -5366,10 +5582,10 @@ async function createServerHandle(config4) {
     app.use("/__inspect__.js", (_req, res) => {
       res.set("Access-Control-Allow-Origin", "*");
       res.set("Content-Type", "application/javascript");
-      readFile(join5(distWebDir, "__inspect__.js")).then((content) => res.send(content)).catch(() => res.status(404).send("Not found"));
+      readFile2(join7(distWebDir, "__inspect__.js")).then((content) => res.send(content)).catch(() => res.status(404).send("Not found"));
     });
     app.get("/", (_req, res) => {
-      readFile(join5(distWebDir, "index.html"), "utf-8").then((content) => res.send(content)).catch(() => {
+      readFile2(join7(distWebDir, "index.html"), "utf-8").then((content) => res.send(content)).catch(() => {
         res.status(404).send("Web UI not built. Run `npm run build:web`");
       });
     });
@@ -5377,7 +5593,7 @@ async function createServerHandle(config4) {
       if (req.path.startsWith("/api/") || req.path.startsWith("/assets/") || req.path.startsWith("/sounds/") || req.path.startsWith("/manifest.webmanifest") || req.path.startsWith("/registerSW.js") || req.path.startsWith("/sw.js") || req.path === "/fox.svg") {
         return;
       }
-      readFile(join5(distWebDir, "index.html"), "utf-8").then((content) => res.send(content)).catch(() => {
+      readFile2(join7(distWebDir, "index.html"), "utf-8").then((content) => res.send(content)).catch(() => {
         res.status(404).send("Web UI not built");
       });
     });
@@ -5385,7 +5601,7 @@ async function createServerHandle(config4) {
   const httpServer = createHttpServer(app);
   const wssExports = createWebSocketServer(
     httpServer,
-    config4,
+    config3,
     getLLMClient,
     () => providerManager.getActiveProvider(),
     sessionManager,
@@ -5397,7 +5613,7 @@ async function createServerHandle(config4) {
     const state = sessionManager.getContextState(sessionId);
     wssExports.broadcastForSession(sessionId, createContextStateMessage(state));
   });
-  const { QueueProcessor } = await import("./processor-34MVJZTD.js");
+  const { QueueProcessor } = await import("./processor-PKKTNKWY.js");
   const queueProcessor = new QueueProcessor({
     sessionManager,
     providerManager,
@@ -5418,22 +5634,22 @@ async function createServerHandle(config4) {
   };
   return {
     httpServer,
-    ctx: { config: config4, sessionManager, llmClient: getLLMClient(), toolRegistry, providerManager },
-    start: (port) => new Promise((resolve4, reject) => {
-      const listenPort = port ?? config4.server.port;
-      const host = config4.server.host;
+    ctx: { config: config3, sessionManager, llmClient: getLLMClient(), toolRegistry, providerManager },
+    start: (port) => new Promise((resolve5, reject) => {
+      const listenPort = port ?? config3.server.port;
+      const host = config3.server.host;
       httpServer.listen(listenPort, host, () => {
         const addr = httpServer.address();
         const actualPort = typeof addr === "object" && addr ? addr.port : listenPort;
         const client = getLLMClient();
         logger.info(`OpenFox server running at http://${host}:${actualPort}`);
         logger.info(`WebSocket available at ws://${host}:${actualPort}/ws`);
-        logger.info(`LLM backend: ${client.getBackend()}, model: ${client.getModel()}, url: ${config4.llm.baseUrl}`);
-        resolve4({ port: actualPort });
+        logger.info(`LLM backend: ${client.getBackend()}, model: ${client.getModel()}, url: ${config3.llm.baseUrl}`);
+        resolve5({ port: actualPort });
       });
       httpServer.on("error", reject);
     }),
-    close: () => new Promise((resolve4) => {
+    close: () => new Promise((resolve5) => {
       logger.info("Shutting down...");
       void (async () => {
         await devServerManager.stopAll();
@@ -5443,22 +5659,22 @@ async function createServerHandle(config4) {
         const { cleanupAllProcesses } = await import("./store-FXTCHBI4.js");
         cleanupAllProcesses();
         viteServer?.close();
-        if (config4.globalConfigPath) {
+        if (config3.globalConfigPath) {
           const { unlink: unlink2 } = await import("fs/promises");
-          unlink2(config4.globalConfigPath).catch(() => {
+          unlink2(config3.globalConfigPath).catch(() => {
           });
         }
         for (const client of wss.clients) {
           client.terminate();
         }
         wss.close();
-        httpServer.close(() => resolve4());
+        httpServer.close(() => resolve5());
       })();
     })
   };
 }
-async function createServer(config4) {
-  const handle = await createServerHandle(config4);
+async function createServer(config3) {
+  const handle = await createServerHandle(config3);
   await handle.start();
   const shutdown = () => {
     const forceExitTimer = setTimeout(() => {
@@ -5477,4 +5693,4 @@ export {
   createServerHandle,
   createServer
 };
-//# sourceMappingURL=chunk-LQFCQ6PY.js.map
+//# sourceMappingURL=chunk-DEWNWF2P.js.map