openfox 2.0.61 → 2.0.62

package/dist/{chat-handler-6DRGMDXZ.js → chat-handler-TRAITVLO.js}

@@ -5,8 +5,8 @@ import {
 } from "./chunk-NVPVDDQZ.js";
 import {
   runChatTurn
-} from "./chunk-ZHSCXD75.js";
-import "./chunk-KX4C5Q5J.js";
+} from "./chunk-L4WACPUX.js";
+import "./chunk-WEB4WBUF.js";
 import "./chunk-LBGHZLLH.js";
 import "./chunk-BGTEIA2S.js";
 import "./chunk-PK2RMVMB.js";
@@ -154,4 +154,4 @@ export {
   startChatSession,
   stopSessionExecution
 };
-//# sourceMappingURL=chat-handler-6DRGMDXZ.js.map
+//# sourceMappingURL=chat-handler-TRAITVLO.js.map

package/dist/{chunk-S5DWUGKZ.js → chunk-3WL5YCP6.js}

@@ -208,7 +208,7 @@ async function runCli(options) {
       if (!configExists) {
         await runNetworkSetup(mode);
       }
-      const { runServe } = await import("./serve-V44O2QE6.js");
+      const { runServe } = await import("./serve-CNA5NKOR.js");
       const serveOptions = { mode };
       if (values.port) serveOptions.port = parseInt(values.port);
       if (values["no-browser"] === true) serveOptions.openBrowser = false;
@@ -220,4 +220,4 @@ async function runCli(options) {
 export {
   runCli
 };
-//# sourceMappingURL=chunk-S5DWUGKZ.js.map
+//# sourceMappingURL=chunk-3WL5YCP6.js.map

package/dist/{chunk-AA4G4DGK.js → chunk-BKTBHEPY.js}

@@ -1,12 +1,12 @@
 import {
+  applyDynamicContext,
+  computeSessionHash,
   injectWorkflowKickoffIfNeeded,
   runAgentTurn,
   runChatTurn
-} from "./chunk-ZHSCXD75.js";
+} from "./chunk-L4WACPUX.js";
 import {
-  applyDynamicContext,
   checkAborted,
-  computeSessionHash,
   deleteItemFromDir,
   devServerManager,
   executeSubAgent,
@@ -16,7 +16,7 @@ import {
   loadAllAgentsDefault,
   saveItemToDir,
   spawnShellProcess
-} from "./chunk-KX4C5Q5J.js";
+} from "./chunk-WEB4WBUF.js";
 import {
   getPlatformShell,
   onProcessEvent
@@ -2102,4 +2102,4 @@ export {
   signalMcpReady,
   createWebSocketServer
 };
-//# sourceMappingURL=chunk-AA4G4DGK.js.map
+//# sourceMappingURL=chunk-BKTBHEPY.js.map

package/dist/{chunk-ZHSCXD75.js → chunk-L4WACPUX.js}

@@ -1,23 +1,22 @@
 import {
   PathAccessDeniedError,
-  buildCachedPrompt,
-  computeDynamicContextHash,
   createAssemblyResult,
   findAgentById,
   getAllInstructions,
   getConversationMessages,
   getEnabledSkillMetadata,
-  getToolFingerprint,
+  getSubAgents,
   getToolRegistryForAgent,
   loadAllAgentsDefault,
   processEventsForConversation,
   runTopLevelAgentLoop
-} from "./chunk-KX4C5Q5J.js";
+} from "./chunk-WEB4WBUF.js";
 import {
   TurnMetrics,
   WORKFLOW_KICKOFF_PROMPT,
   buildAgentReminder,
   buildAgentSmallReminder,
+  buildTopLevelSystemPrompt,
   createChatDoneEvent,
   createMessageStartEvent
 } from "./chunk-6VDCH5ML.js";
@@ -37,6 +36,64 @@ import {
   getGlobalConfigDir
 } from "./chunk-CQGTEGKL.js";
 
+// src/server/chat/dynamic-context.ts
+import { createHash } from "crypto";
+function computeDynamicContextHash(instructionContent, skills, toolFingerprint) {
+  const dynamicInputs = JSON.stringify({
+    instructions: instructionContent,
+    skills: skills.map((s) => s.id).sort(),
+    ...toolFingerprint ? { tools: toolFingerprint } : {}
+  });
+  return createHash("sha256").update(dynamicInputs).digest("hex");
+}
+function getToolFingerprint(tools) {
+  return tools.map((t) => `${t.function.name}:${JSON.stringify(t.function.parameters)}`).sort().join("|");
+}
+async function loadSessionContext(sessionManager, sessionId) {
+  const session = sessionManager.requireSession(sessionId);
+  const { content: instructionContent } = await getAllInstructions(session.workdir, session.projectId);
+  const runtimeConfig = getRuntimeConfig();
+  const configDir = getGlobalConfigDir(runtimeConfig.mode ?? "production");
+  const skills = await getEnabledSkillMetadata(configDir, runtimeConfig.workdir);
+  return { instructionContent: instructionContent ?? "", skills };
+}
+function resolveAgentDef(sessionManager, sessionId) {
+  return loadAllAgentsDefault().then((allAgents) => {
+    const session = sessionManager.requireSession(sessionId);
+    return findAgentById(session.mode, allAgents) ?? findAgentById("planner", allAgents);
+  });
+}
+async function buildCachedPrompt(sessionManager, sessionId, agentDef) {
+  const { instructionContent, skills } = await loadSessionContext(sessionManager, sessionId);
+  const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-33FQNFKC.js");
+  const tools = getToolRegistryForAgent2(agentDef).definitions;
+  const toolFingerprint = getToolFingerprint(tools);
+  const allAgents = await loadAllAgentsDefault();
+  const subAgentDefs = getSubAgents(allAgents);
+  const session = sessionManager.requireSession(sessionId);
+  const systemPrompt = buildTopLevelSystemPrompt(session.workdir, instructionContent || void 0, skills, subAgentDefs);
+  const hash = computeDynamicContextHash(instructionContent, skills, toolFingerprint);
+  return { systemPrompt, tools, hash };
+}
+async function computeSessionHash(sessionManager, sessionId) {
+  const { instructionContent, skills } = await loadSessionContext(sessionManager, sessionId);
+  const agentDef = await resolveAgentDef(sessionManager, sessionId);
+  const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-33FQNFKC.js");
+  const tools = getToolRegistryForAgent2(agentDef).definitions;
+  const toolFingerprint = getToolFingerprint(tools);
+  return computeDynamicContextHash(instructionContent, skills, toolFingerprint);
+}
+async function applyDynamicContext(sessionManager, sessionId) {
+  const session = sessionManager.requireSession(sessionId);
+  const allAgents = await loadAllAgentsDefault();
+  const agentDef = findAgentById(session.mode, allAgents) ?? findAgentById("planner", allAgents);
+  const { systemPrompt, tools, hash } = await buildCachedPrompt(sessionManager, sessionId, agentDef);
+  sessionManager.setCachedPrompt(sessionId, systemPrompt, tools, hash);
+  sessionManager.setDynamicContextChanged(sessionId, false);
+  sessionManager.clearDebugDump(sessionId);
+  logger.debug("applyDynamicContext done", { sessionId, hash, toolCount: tools.length });
+}
+
 // src/server/chat/orchestrator.ts
 async function buildRetryPatterns() {
   const { getSetting, SETTINGS_KEYS } = await import("./settings-ASLTSUE2.js");
@@ -320,8 +377,10 @@ function buildSnapshot(sessionManager, sessionId, _lastStats) {
 }
 
 export {
+  computeSessionHash,
+  applyDynamicContext,
   runChatTurn,
   runAgentTurn,
   injectWorkflowKickoffIfNeeded
 };
-//# sourceMappingURL=chunk-ZHSCXD75.js.map
+//# sourceMappingURL=chunk-L4WACPUX.js.map

package/dist/{chunk-LHTVTDQQ.js → chunk-QZRS2RF5.js}

@@ -21,7 +21,7 @@ import {
   tokenFromPassword,
   verifyPassword,
   workflowExists
-} from "./chunk-AA4G4DGK.js";
+} from "./chunk-BKTBHEPY.js";
 import {
   agentExists,
   createToolRegistry,
@@ -66,7 +66,7 @@ import {
   setSkillEnabled,
   skillExists,
   updateOwnedSkill
-} from "./chunk-KX4C5Q5J.js";
+} from "./chunk-WEB4WBUF.js";
 import {
   getPathSeparator,
   isAbsolutePath
@@ -4078,7 +4078,7 @@ import { Router as Router8 } from "express";
 import { spawn as spawn2 } from "child_process";
 
 // src/constants.ts
-var VERSION = "2.0.61";
+var VERSION = "2.0.62";
 
 // src/server/routes/auto-update.ts
 var updateInProgress = false;
@@ -4283,7 +4283,7 @@ async function createServerHandle(config3) {
       setMcpTools(mcpTools);
       logger.info("MCP tools registered", { count: mcpTools.length });
     }
-    const { signalMcpReady } = await import("./server-JDB2QVKP.js");
+    const { signalMcpReady } = await import("./server-CI5IEBOC.js");
     signalMcpReady();
   });
   const app = express();
@@ -4476,7 +4476,7 @@ async function createServerHandle(config3) {
   app.get("/api/sessions/:id", async (req, res) => {
     const { getEventStore: getEventStore2 } = await import("./events-52XADT6Y.js");
     const { buildMessagesFromStoredEvents } = await import("./folding-2BGFLV5J.js");
-    const { getPendingQuestionsForSession } = await import("./tools-7QUMO5DJ.js");
+    const { getPendingQuestionsForSession } = await import("./tools-33FQNFKC.js");
     const session = sessionManager.getSession(req.params.id);
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
@@ -4495,8 +4495,8 @@ async function createServerHandle(config3) {
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-6DRGMDXZ.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-7QUMO5DJ.js");
+    const { stopSessionExecution } = await import("./chat-handler-TRAITVLO.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-33FQNFKC.js");
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
     abortSession(sessionId);
@@ -4650,7 +4650,7 @@ async function createServerHandle(config3) {
     if (!callId || approved === void 0) {
       return res.status(400).json({ error: "callId and approved are required" });
     }
-    const { providePathConfirmation } = await import("./tools-7QUMO5DJ.js");
+    const { providePathConfirmation } = await import("./tools-33FQNFKC.js");
     const result = providePathConfirmation(callId, approved, alwaysAllow);
     if (!result.found) {
       return res.status(404).json({ error: "No pending path confirmation with that ID" });
@@ -4658,7 +4658,7 @@ async function createServerHandle(config3) {
     const { getEventStore: getEventStore2 } = await import("./events-52XADT6Y.js");
     const { buildMessagesFromStoredEvents, foldPendingConfirmations } = await import("./folding-2BGFLV5J.js");
     const { createSessionStateMessage } = await import("./protocol-CTNE3ANP.js");
-    const { getPendingQuestionsForSession } = await import("./tools-7QUMO5DJ.js");
+    const { getPendingQuestionsForSession } = await import("./tools-33FQNFKC.js");
     const eventStore = getEventStore2();
     const events = eventStore.getEvents(sessionId);
     const messages = buildMessagesFromStoredEvents(events);
@@ -4679,7 +4679,7 @@ async function createServerHandle(config3) {
     if (!skip && typeof answer !== "string") {
       return res.status(400).json({ error: "answer is required when not skipping" });
     }
-    const { provideAnswer } = await import("./tools-7QUMO5DJ.js");
+    const { provideAnswer } = await import("./tools-33FQNFKC.js");
     const found = provideAnswer(callId, answer ?? "", skip ?? false);
     if (!found) {
       return res.status(404).json({ error: "No pending question with that ID" });
@@ -4739,7 +4739,7 @@ async function createServerHandle(config3) {
       backend: activeProvider?.backend ?? llmClient.getBackend(),
       model: llmClient.getModel()
     };
-    const { runAgentTurn, TurnMetrics } = await import("./orchestrator-AHCSLBB3.js");
+    const { runAgentTurn, TurnMetrics } = await import("./orchestrator-TQ23BAFQ.js");
     runAgentTurn(
       {
         sessionManager,
@@ -4777,8 +4777,8 @@ async function createServerHandle(config3) {
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-6DRGMDXZ.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-7QUMO5DJ.js");
+    const { stopSessionExecution } = await import("./chat-handler-TRAITVLO.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-33FQNFKC.js");
     const queuedMessages = sessionManager.getQueueState(sessionId);
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
@@ -5343,7 +5343,7 @@ async function createServerHandle(config3) {
   });
   async function rebuildMcpTools() {
     const { createMcpTools: createMcpTools2 } = await import("./tool-adapter-MOGEI6TP.js");
-    const { setMcpTools: setMcpTools2 } = await import("./tools-7QUMO5DJ.js");
+    const { setMcpTools: setMcpTools2 } = await import("./tools-33FQNFKC.js");
     const mcpTools = createMcpTools2(mcpManager);
     setMcpTools2(mcpTools);
   }
@@ -5663,7 +5663,7 @@ async function createServerHandle(config3) {
     const state = sessionManager.getContextState(sessionId);
     wssExports.broadcastForSession(sessionId, createContextStateMessage(state));
   });
-  const { QueueProcessor } = await import("./processor-45VWLZIV.js");
+  const { QueueProcessor } = await import("./processor-3ZOFGZP5.js");
   const queueProcessor = new QueueProcessor({
     sessionManager,
     providerManager,
@@ -5743,4 +5743,4 @@ export {
   createServerHandle,
   createServer
 };
-//# sourceMappingURL=chunk-LHTVTDQQ.js.map
+//# sourceMappingURL=chunk-QZRS2RF5.js.map

package/dist/{chunk-KX4C5Q5J.js → chunk-WEB4WBUF.js}

@@ -42,7 +42,6 @@ import {
   COMPACTION_PROMPT,
   TurnMetrics,
   buildBasePrompt,
-  buildTopLevelSystemPrompt,
   computeEffectiveTools,
   consumeStreamGenerator,
   createChatDoneEvent,
@@ -91,8 +90,11 @@ var OUTPUT_LIMITS = {
   read_file: {
     maxLines: 2e3,
     maxBytes: 1e5,
-    maxImageBytes: 2097152
+    maxImageBytes: 2097152,
     // 2MB for images
+    maxPdfPages: 50,
+    maxFileBytes: 20971520
+    // 20MB general file safety limit
   },
   run_command: {
     maxLines: 2e3,
@@ -224,7 +226,7 @@ function looksLikeRegex(str) {
   return /[*?+[\]\\]/.test(str);
 }
 function isPlaceholderToken(str) {
-  return str.includes("__URL__") || str.includes("__FILEURL__") || str.includes("__SED__");
+  return str.includes("__URL__") || str.includes("__FILEURL__") || str.includes("__SED__") || str.includes("__COMMIT_MSG__");
 }
 function extractAbsolutePathsFromCommand(command) {
   if (!command.trim()) {
@@ -236,6 +238,10 @@ function extractAbsolutePathsFromCommand(command) {
   sanitized = sanitized.replace(/s\/[^/]*\/[^/]*\/[gip]*/g, " __SED__ ");
   sanitized = sanitized.replace(/s\|[^|]*\|[^|]*\|[gip]*/g, " __SED__ ");
   sanitized = sanitized.replace(/s:[^:]*:[^:]*:[gip]*/g, " __SED__ ");
+  sanitized = sanitized.replace(
+    /git\s+commit\s+(?:-[^-]\s*|--message\s+)(["'])(?:\\?.)*?\1/gi,
+    (match2) => match2.replace(/\/[^\s"'|&;<>`()]+/g, " __COMMIT_MSG__ ")
+  );
   const fileUrlMatches = command.matchAll(/file:\/\/([^\s'"]+)/g);
   for (const match2 of fileUrlMatches) {
     const filePath = match2[1];
@@ -816,6 +822,67 @@ function stringToUtf32(str, littleEndian) {
 
 // src/server/tools/read.ts
 import { fileTypeFromBuffer } from "file-type";
+
+// src/server/tools/pdf-utils.ts
+import { getDocument } from "pdfjs-dist/legacy/build/pdf.mjs";
+var PDF_HEADER = Buffer.from("%PDF");
+function isPdfBuffer(buffer) {
+  return buffer.length > 4 && buffer.subarray(0, 4).equals(PDF_HEADER);
+}
+function isPasswordError(err) {
+  const message = err instanceof Error ? err.message : String(err);
+  return message.toLowerCase().includes("password") || message.toLowerCase().includes("encrypt");
+}
+function formatPdfErrorMessage(err) {
+  if (isPasswordError(err)) {
+    return "This PDF is password-protected. Unlock it with an external tool first.";
+  }
+  return `Failed to read PDF: ${err instanceof Error ? err.message : String(err)}`;
+}
+function processPdfContent(text, maxBytes) {
+  let output = text;
+  let truncated = false;
+  if (output.length > maxBytes) {
+    output = output.slice(0, maxBytes) + "\n\n[Output truncated due to size limit]";
+    truncated = true;
+  }
+  const isScanned = output.replace(/\[Page \d+\/\d+\]\n/g, "").trim().length === 0;
+  return { output, truncated, isScanned };
+}
+async function extractPdfText(buffer) {
+  const doc = await getDocument({ data: Uint8Array.from(buffer) }).promise;
+  const pageCount = doc.numPages;
+  const rawMeta = await doc.getMetadata();
+  const info = rawMeta.info;
+  const title = info?.["Title"] || null;
+  const author = info?.["Author"] || null;
+  const pages = [];
+  const limitedPageCount = Math.min(pageCount, OUTPUT_LIMITS.read_file.maxPdfPages);
+  try {
+    for (let i = 1; i <= limitedPageCount; i++) {
+      const page = await doc.getPage(i);
+      try {
+        const content = await page.getTextContent();
+        const pageText = content.items.map((item) => "str" in item ? item.str : "").join(" ");
+        pages.push(`[Page ${i}/${pageCount}]
+${pageText}`);
+      } finally {
+        page.cleanup();
+      }
+    }
+  } finally {
+    doc.cleanup();
+  }
+  let text = pages.join("\n\n");
+  if (pageCount > limitedPageCount) {
+    text += `
+
+[PDF has ${pageCount} pages, showing first ${limitedPageCount}. Use a shell command to process more.]`;
+  }
+  return { text, pageCount, title, author };
+}
+
+// src/server/tools/read.ts
 async function detectImageType(buffer, filePath) {
   const fileType = await fileTypeFromBuffer(buffer);
   const imageMimeTypes = ["image/png", "image/jpeg", "image/gif", "image/webp", "image/bmp", "image/svg+xml"];
@@ -869,7 +936,7 @@ var readFileTool = createTool(
     type: "function",
     function: {
       name: "read_file",
-      description: "Read the contents of a file or list directory contents. For text files: returns file content. For images (PNG, JPEG, GIF, WebP, BMP, SVG): returns base64-encoded data with MIME type metadata. For directories: returns a tree-formatted listing of entries with file sizes.",
+      description: "Read the contents of a file or list directory contents. For text files: returns file content. For images (PNG, JPEG, GIF, WebP, BMP, SVG): returns base64-encoded data with MIME type metadata. For PDF files: extracts text content page by page. For directories: returns a tree-formatted listing of entries with file sizes.",
       parameters: {
         type: "object",
         properties: {
@@ -901,6 +968,11 @@ var readFileTool = createTool(
         const listing = await listDirectory(fullPath, args.path);
         return helpers.success(listing);
       }
+      if (stats.size > OUTPUT_LIMITS.read_file.maxFileBytes) {
+        return helpers.error(
+          `File size (${stats.size} bytes) exceeds maximum file size (20MB). Use shell command to process large files.`
+        );
+      }
       if (stats.size > OUTPUT_LIMITS.read_file.maxImageBytes) {
         return helpers.error(
           `File size (${stats.size} bytes) exceeds image size limit (2MB). Use shell command to process large files.`
@@ -928,6 +1000,42 @@ var readFileTool = createTool(
         }
       });
     }
+    if (isPdfBuffer(rawBuffer)) {
+      try {
+        const { text, pageCount, title, author } = await extractPdfText(rawBuffer);
+        const { output: output2, truncated: truncated2, isScanned } = processPdfContent(text, OUTPUT_LIMITS.read_file.maxBytes);
+        const contentHash3 = await computeFileHash(fullPath);
+        if (contentHash3) {
+          context.sessionManager.recordFileRead(context.sessionId, fullPath, contentHash3);
+        }
+        if (isScanned) {
+          return helpers.success(
+            `[PDF: ${args.path} \u2014 This PDF has no text layer (scanned or image-only). Use a shell command with OCR to extract text.]`,
+            false,
+            {
+              metadata: {
+                format: "pdf",
+                pageCount,
+                title,
+                author,
+                path: fullPath
+              }
+            }
+          );
+        }
+        return helpers.success(output2, truncated2, {
+          metadata: {
+            format: "pdf",
+            pageCount,
+            title,
+            author,
+            path: fullPath
+          }
+        });
+      } catch (err) {
+        return helpers.error(formatPdfErrorMessage(err));
+      }
+    }
     const { encoding, confidence } = detectEncoding(rawBuffer);
     const content = decodeContent(rawBuffer, encoding);
     const lines = content.split("\n");
@@ -3658,7 +3766,7 @@ var callSubAgentTool = {
       };
     }
     try {
-      const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-7QUMO5DJ.js");
+      const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-33FQNFKC.js");
       const toolRegistry = getToolRegistryForAgent2(agentDef);
       const turnMetrics = new TurnMetrics();
       const result = await executeSubAgent({
@@ -3818,7 +3926,7 @@ var webFetchTool = createTool(
     type: "function",
     function: {
       name: "web_fetch",
-      description: "Fetch content from a URL and return it as text, markdown, or HTML. Use this to retrieve and analyze web content such as documentation, API references, or web pages.",
+      description: "Fetch content from a URL and return it as text, markdown, or HTML. For PDF URLs, extracts text content page by page. Use this to retrieve and analyze web content such as documentation, API references, or web pages.",
       parameters: {
         type: "object",
         properties: {
@@ -3880,6 +3988,40 @@ var webFetchTool = createTool(
         }
       });
     }
+    const rawBuffer = Buffer.from(arrayBuffer);
+    const isPdfResponse = mime === "application/pdf" || isPdfBuffer(rawBuffer);
+    if (isPdfResponse) {
+      try {
+        const { text, pageCount, title, author } = await extractPdfText(rawBuffer);
+        const { output: output2, truncated: truncated2, isScanned } = processPdfContent(text, OUTPUT_LIMITS.web_fetch.maxBytes);
+        if (isScanned) {
+          return helpers.success(
+            "[PDF: This PDF has no text layer (scanned or image-only). Use an external tool with OCR to extract text.]",
+            false,
+            {
+              metadata: {
+                format: "pdf",
+                pageCount,
+                title,
+                author,
+                url
+              }
+            }
+          );
+        }
+        return helpers.success(output2, truncated2, {
+          metadata: {
+            format: "pdf",
+            pageCount,
+            title,
+            author,
+            url
+          }
+        });
+      } catch (err) {
+        return helpers.error(formatPdfErrorMessage(err));
+      }
+    }
     const rawContent = new TextDecoder().decode(arrayBuffer);
     let output;
     switch (format) {
@@ -4446,64 +4588,6 @@ These processes run independently of agent turns and persist across session comp
   }
 );
 
-// src/server/chat/dynamic-context.ts
-import { createHash as createHash3 } from "crypto";
-function computeDynamicContextHash(instructionContent, skills, toolFingerprint) {
-  const dynamicInputs = JSON.stringify({
-    instructions: instructionContent,
-    skills: skills.map((s) => s.id).sort(),
-    ...toolFingerprint ? { tools: toolFingerprint } : {}
-  });
-  return createHash3("sha256").update(dynamicInputs).digest("hex");
-}
-function getToolFingerprint(tools) {
-  return tools.map((t) => `${t.function.name}:${JSON.stringify(t.function.parameters)}`).sort().join("|");
-}
-async function loadSessionContext(sessionManager, sessionId) {
-  const session = sessionManager.requireSession(sessionId);
-  const { content: instructionContent } = await getAllInstructions(session.workdir, session.projectId);
-  const runtimeConfig = getRuntimeConfig();
-  const configDir = getGlobalConfigDir(runtimeConfig.mode ?? "production");
-  const skills = await getEnabledSkillMetadata(configDir, runtimeConfig.workdir);
-  return { instructionContent: instructionContent ?? "", skills };
-}
-function resolveAgentDef2(sessionManager, sessionId) {
-  return loadAllAgentsDefault().then((allAgents) => {
-    const session = sessionManager.requireSession(sessionId);
-    return findAgentById(session.mode, allAgents) ?? findAgentById("planner", allAgents);
-  });
-}
-async function buildCachedPrompt(sessionManager, sessionId, agentDef) {
-  const { instructionContent, skills } = await loadSessionContext(sessionManager, sessionId);
-  const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-7QUMO5DJ.js");
-  const tools = getToolRegistryForAgent2(agentDef).definitions;
-  const toolFingerprint = getToolFingerprint(tools);
-  const allAgents = await loadAllAgentsDefault();
-  const subAgentDefs = getSubAgents(allAgents);
-  const session = sessionManager.requireSession(sessionId);
-  const systemPrompt = buildTopLevelSystemPrompt(session.workdir, instructionContent || void 0, skills, subAgentDefs);
-  const hash = computeDynamicContextHash(instructionContent, skills, toolFingerprint);
-  return { systemPrompt, tools, hash };
-}
-async function computeSessionHash(sessionManager, sessionId) {
-  const { instructionContent, skills } = await loadSessionContext(sessionManager, sessionId);
-  const agentDef = await resolveAgentDef2(sessionManager, sessionId);
-  const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-7QUMO5DJ.js");
-  const tools = getToolRegistryForAgent2(agentDef).definitions;
-  const toolFingerprint = getToolFingerprint(tools);
-  return computeDynamicContextHash(instructionContent, skills, toolFingerprint);
-}
-async function applyDynamicContext(sessionManager, sessionId) {
-  const session = sessionManager.requireSession(sessionId);
-  const allAgents = await loadAllAgentsDefault();
-  const agentDef = findAgentById(session.mode, allAgents) ?? findAgentById("planner", allAgents);
-  const { systemPrompt, tools, hash } = await buildCachedPrompt(sessionManager, sessionId, agentDef);
-  sessionManager.setCachedPrompt(sessionId, systemPrompt, tools, hash);
-  sessionManager.setDynamicContextChanged(sessionId, false);
-  sessionManager.clearDebugDump(sessionId);
-  logger.debug("applyDynamicContext done", { sessionId, hash, toolCount: tools.length });
-}
-
 // src/server/tools/mcp-config.ts
 var mcpManagerForTools = null;
 var mcpConfigMode = "production";
@@ -4598,8 +4682,13 @@ var mcpConfigTool = createTool(
       const updated = updater(mcpServers);
       await saveGlobalConfig(mcpConfigMode, { ...globalConfig, mcpServers: updated }, mcpConfigPath);
     }
+    const APPLY_PROMPT_MESSAGE = 'The user must click "Update system prompt" to apply changes.';
+    function notifyContextChanged(sessionId) {
+      context.sessionManager.setDynamicContextChanged(sessionId, true);
+      mcpNotifyChanged?.(sessionId);
+    }
     async function rebuildTools() {
-      const { setMcpTools: setMcpTools2 } = await import("./tools-7QUMO5DJ.js");
+      const { setMcpTools: setMcpTools2 } = await import("./tools-33FQNFKC.js");
       const mcpTools = createMcpTools(mcpManagerForTools);
       setMcpTools2(mcpTools);
     }
@@ -4650,11 +4739,10 @@ var mcpConfigTool = createTool(
       });
       await mcpManagerForTools.addServer(args.name, serverCfg);
       await rebuildTools();
-      await applyDynamicContext(context.sessionManager, context.sessionId);
-      mcpNotifyChanged?.(context.sessionId);
+      notifyContextChanged(context.sessionId);
       const server = mcpManagerForTools.getServer(args.name);
       const toolCount = server?.tools.length ?? 0;
-      return helpers.success(`Added MCP server "${args.name}" (${toolCount} tools discovered).`);
+      return helpers.success(`Added MCP server "${args.name}" (${toolCount} tools discovered). ${APPLY_PROMPT_MESSAGE}`);
     }
     if (args.action === "remove") {
       if (!args.name) return helpers.error("Missing required field: name");
@@ -4664,9 +4752,8 @@ var mcpConfigTool = createTool(
       });
       mcpManagerForTools.removeServer(args.name);
       await rebuildTools();
-      await applyDynamicContext(context.sessionManager, context.sessionId);
-      mcpNotifyChanged?.(context.sessionId);
-      return helpers.success(`Removed MCP server "${args.name}".`);
+      notifyContextChanged(context.sessionId);
+      return helpers.success(`Removed MCP server "${args.name}". ${APPLY_PROMPT_MESSAGE}`);
     }
     if (args.action === "toggle-tool") {
       if (!args.name) return helpers.error("Missing required field: name");
@@ -4690,10 +4777,9 @@ var mcpConfigTool = createTool(
       });
       await mcpManagerForTools.setToolEnabled(args.name, args.toolName, args.enabled);
       await rebuildTools();
-      await applyDynamicContext(context.sessionManager, context.sessionId);
-      mcpNotifyChanged?.(context.sessionId);
+      notifyContextChanged(context.sessionId);
       return helpers.success(
-        `Tool "${args.toolName}" ${args.enabled ? "enabled" : "disabled"} on server "${args.name}".`
+        `Tool "${args.toolName}" ${args.enabled ? "enabled" : "disabled"} on server "${args.name}". ${APPLY_PROMPT_MESSAGE}`
       );
     }
     return helpers.error("Unexpected error");
@@ -5362,6 +5448,7 @@ export {
   getDefaultAgentIds,
   isDefaultAgent,
   findAgentById,
+  getSubAgents,
   getTopLevelAgents,
   agentExists,
   saveAgent,
@@ -5392,11 +5479,6 @@ export {
   executeSubAgent,
   devServerManager,
   stepDoneTool,
-  computeDynamicContextHash,
-  getToolFingerprint,
-  buildCachedPrompt,
-  computeSessionHash,
-  applyDynamicContext,
   setMcpManagerForTools,
   setMcpConfigMode,
   setMcpConfigPath,
@@ -5410,4 +5492,4 @@ export {
   getToolRegistryForAgent,
   createToolRegistry
 };
-//# sourceMappingURL=chunk-KX4C5Q5J.js.map
+//# sourceMappingURL=chunk-WEB4WBUF.js.map

package/dist/cli/dev.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runCli
-} from "../chunk-S5DWUGKZ.js";
+} from "../chunk-3WL5YCP6.js";
 import "../chunk-XY3LESVZ.js";
 import {
   logger

package/dist/cli/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runCli
-} from "../chunk-S5DWUGKZ.js";
+} from "../chunk-3WL5YCP6.js";
 import "../chunk-XY3LESVZ.js";
 import {
   logger

package/dist/{orchestrator-AHCSLBB3.js → orchestrator-TQ23BAFQ.js}

@@ -2,8 +2,8 @@ import {
   injectWorkflowKickoffIfNeeded,
   runAgentTurn,
   runChatTurn
-} from "./chunk-ZHSCXD75.js";
-import "./chunk-KX4C5Q5J.js";
+} from "./chunk-L4WACPUX.js";
+import "./chunk-WEB4WBUF.js";
 import "./chunk-LBGHZLLH.js";
 import "./chunk-BGTEIA2S.js";
 import "./chunk-PK2RMVMB.js";
@@ -43,4 +43,4 @@ export {
   runAgentTurn,
   runChatTurn
 };
-//# sourceMappingURL=orchestrator-AHCSLBB3.js.map
+//# sourceMappingURL=orchestrator-TQ23BAFQ.js.map

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openfox",
-  "version": "2.0.61",
+  "version": "2.0.62",
   "description": "Local-LLM-first agentic coding assistant",
   "type": "module",
   "bin": {
@@ -79,6 +79,7 @@
     "multer": "^2.2.0",
     "node-pty": "^1.2.0-beta.12",
     "open": "^11.0.0",
+    "pdfjs-dist": "^6.1.200",
     "pyright": "^1.1.408",
     "react-markdown": "^10.1.0",
     "react-syntax-highlighter": "^16.1.1",

package/dist/{processor-45VWLZIV.js → processor-3ZOFGZP5.js}

@@ -3,7 +3,7 @@ import {
   finalizeTurnCompletion,
   generateSessionNameForSession
 } from "./chunk-NVPVDDQZ.js";
-import "./chunk-KX4C5Q5J.js";
+import "./chunk-WEB4WBUF.js";
 import "./chunk-LBGHZLLH.js";
 import "./chunk-BGTEIA2S.js";
 import "./chunk-PK2RMVMB.js";
@@ -174,7 +174,7 @@ var QueueProcessor = class {
       backend: provider?.backend ?? llmClient.getBackend(),
       model: llmClient.getModel()
     };
-    const { runChatTurn } = await import("./orchestrator-AHCSLBB3.js");
+    const { runChatTurn } = await import("./orchestrator-TQ23BAFQ.js");
     const runChatTurnParams = buildRunChatTurnParams({
       sessionManager,
       sessionId,
@@ -222,4 +222,4 @@ var QueueProcessor = class {
 export {
   QueueProcessor
 };
-//# sourceMappingURL=processor-45VWLZIV.js.map
+//# sourceMappingURL=processor-3ZOFGZP5.js.map

package/dist/{serve-V44O2QE6.js → serve-CNA5NKOR.js}

@@ -1,10 +1,10 @@
 import {
   VERSION,
   createServer
-} from "./chunk-LHTVTDQQ.js";
-import "./chunk-AA4G4DGK.js";
-import "./chunk-ZHSCXD75.js";
-import "./chunk-KX4C5Q5J.js";
+} from "./chunk-QZRS2RF5.js";
+import "./chunk-BKTBHEPY.js";
+import "./chunk-L4WACPUX.js";
+import "./chunk-WEB4WBUF.js";
 import "./chunk-LBGHZLLH.js";
 import "./chunk-BGTEIA2S.js";
 import "./chunk-PK2RMVMB.js";
@@ -205,4 +205,4 @@ async function runServe(options) {
 export {
   runServe
 };
-//# sourceMappingURL=serve-V44O2QE6.js.map
+//# sourceMappingURL=serve-CNA5NKOR.js.map

package/dist/server/index.js

@@ -1,10 +1,10 @@
 import {
   createServer,
   createServerHandle
-} from "../chunk-LHTVTDQQ.js";
-import "../chunk-AA4G4DGK.js";
-import "../chunk-ZHSCXD75.js";
-import "../chunk-KX4C5Q5J.js";
+} from "../chunk-QZRS2RF5.js";
+import "../chunk-BKTBHEPY.js";
+import "../chunk-L4WACPUX.js";
+import "../chunk-WEB4WBUF.js";
 import "../chunk-LBGHZLLH.js";
 import "../chunk-BGTEIA2S.js";
 import "../chunk-PK2RMVMB.js";

package/dist/{server-JDB2QVKP.js → server-CI5IEBOC.js}

@@ -1,9 +1,9 @@
 import {
   createWebSocketServer,
   signalMcpReady
-} from "./chunk-AA4G4DGK.js";
-import "./chunk-ZHSCXD75.js";
-import "./chunk-KX4C5Q5J.js";
+} from "./chunk-BKTBHEPY.js";
+import "./chunk-L4WACPUX.js";
+import "./chunk-WEB4WBUF.js";
 import "./chunk-LBGHZLLH.js";
 import "./chunk-BGTEIA2S.js";
 import "./chunk-PK2RMVMB.js";
@@ -35,4 +35,4 @@ export {
   createWebSocketServer,
   signalMcpReady
 };
-//# sourceMappingURL=server-JDB2QVKP.js.map
+//# sourceMappingURL=server-CI5IEBOC.js.map

package/dist/{tools-7QUMO5DJ.js → tools-33FQNFKC.js}

@@ -12,7 +12,7 @@ import {
   setMcpTools,
   stepDoneTool,
   validateToolAction
-} from "./chunk-KX4C5Q5J.js";
+} from "./chunk-WEB4WBUF.js";
 import "./chunk-LBGHZLLH.js";
 import "./chunk-BGTEIA2S.js";
 import "./chunk-PK2RMVMB.js";
@@ -58,4 +58,4 @@ export {
   stepDoneTool,
   validateToolAction
 };
-//# sourceMappingURL=tools-7QUMO5DJ.js.map
+//# sourceMappingURL=tools-33FQNFKC.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openfox",
-  "version": "2.0.61",
+  "version": "2.0.62",
   "description": "Local-LLM-first agentic coding assistant",
   "type": "module",
   "bin": {
@@ -79,6 +79,7 @@
     "multer": "^2.2.0",
     "node-pty": "^1.2.0-beta.12",
     "open": "^11.0.0",
+    "pdfjs-dist": "^6.1.200",
     "pyright": "^1.1.408",
     "react-markdown": "^10.1.0",
     "react-syntax-highlighter": "^16.1.1",