openfox 2.0.67 → 2.0.69

package/dist/{chunk-2GRUQN2B.js → chunk-WHVCGVQX.js}

@@ -21,7 +21,7 @@ import {
   tokenFromPassword,
   verifyPassword,
   workflowExists
-} from "./chunk-B6JUWVTK.js";
+} from "./chunk-46OR4W3L.js";
 import {
   agentExists,
   createToolRegistry,
@@ -66,12 +66,12 @@ import {
   setSkillEnabled,
   skillExists,
   updateOwnedSkill
-} from "./chunk-YU6DZAVA.js";
+} from "./chunk-PVWAE43V.js";
 import {
   ALWAYS_ALLOWED,
   ALWAYS_ALLOWED_FOR_SUBAGENTS,
   TOP_LEVEL_ONLY_TOOLS
-} from "./chunk-TJO4QFDQ.js";
+} from "./chunk-QFSDJIUS.js";
 import {
   getProject
 } from "./chunk-KXVFHMSM.js";
@@ -133,7 +133,7 @@ import {
   detectModel,
   getLlmStatus,
   parseDefaultModelSelection
-} from "./chunk-5EO6SEGV.js";
+} from "./chunk-7OW6X764.js";
 import {
   getModelProfile
 } from "./chunk-V4IE7HJY.js";
@@ -161,9 +161,9 @@ import {
 import express from "express";
 import cors from "cors";
 import { createServer as createHttpServer } from "http";
-import { fileURLToPath as fileURLToPath6 } from "url";
-import { dirname as dirname7, resolve as resolve6, join as join9 } from "path";
-import { readFile as readFile4 } from "fs/promises";
+import { fileURLToPath as fileURLToPath7 } from "url";
+import { dirname as dirname8, resolve as resolve7, join as join10 } from "path";
+import { readFile as readFile5 } from "fs/promises";
 import { createServer as createViteServer } from "vite";
 
 // src/server/llm/mock.ts
@@ -1733,7 +1733,9 @@ var LspServer = class {
     }
     this.state = "starting";
     try {
-      this.process = spawn(this.commandPath, this.config.serverArgs, {
+      const needsShell = process.platform === "win32" && /\.(cmd|bat)$/i.test(this.commandPath);
+      const command = needsShell ? [`"${this.commandPath}"`, ...this.config.serverArgs].join(" ") : this.commandPath;
+      this.process = spawn(command, needsShell ? [] : this.config.serverArgs, {
         cwd: this.workdir,
         stdio: ["pipe", "pipe", "pipe"],
         env: {
@@ -1741,11 +1743,21 @@ var LspServer = class {
           HOME: process.env["HOME"],
           PATH: process.env["PATH"]
         },
-        windowsHide: true
+        windowsHide: true,
+        shell: needsShell
+      });
+      await new Promise((resolve8, reject) => {
+        this.process.once("spawn", resolve8);
+        this.process.once("error", reject);
       });
       if (!this.process.stdin || !this.process.stdout) {
         throw new Error("Failed to get stdio streams from language server process");
       }
+      const onStreamError = (err) => {
+        logger.debug("LSP stream error", { language: this.config.id, error: err.message });
+      };
+      this.process.stdin.on("error", onStreamError);
+      this.process.stdout.on("error", onStreamError);
       this.connection = createMessageConnection(
         new StreamMessageReader(this.process.stdout),
         new StreamMessageWriter(this.process.stdin)
@@ -1955,19 +1967,19 @@ var LspServer = class {
    */
   async getDiagnosticsWithWait(path, timeoutMs = DIAGNOSTIC_WAIT_MS) {
     if (this.openDocuments.has(path)) {
-      return new Promise((resolve7) => {
+      return new Promise((resolve8) => {
         const existing = this.diagnostics.get(path);
         if (existing !== void 0) {
           setTimeout(() => {
-            resolve7(this.diagnostics.get(path) ?? []);
+            resolve8(this.diagnostics.get(path) ?? []);
           }, 100);
           return;
         }
         const timeout = setTimeout(() => {
           this.pendingDiagnostics.delete(path);
-          resolve7(this.diagnostics.get(path) ?? []);
+          resolve8(this.diagnostics.get(path) ?? []);
         }, timeoutMs);
-        this.pendingDiagnostics.set(path, { resolve: resolve7, timeout });
+        this.pendingDiagnostics.set(path, { resolve: resolve8, timeout });
       });
     }
     return this.diagnostics.get(path) ?? [];
@@ -2196,6 +2208,21 @@ async function existsExecutable(path) {
     return false;
   }
 }
+function candidateNames(command) {
+  if (process.platform !== "win32") {
+    return [command];
+  }
+  return [".cmd", ".exe", ".bat", ""].map((ext) => command + ext);
+}
+async function findInDir(dir, command) {
+  for (const name of candidateNames(command)) {
+    const fullPath = join2(dir, name);
+    if (await existsExecutable(fullPath)) {
+      return fullPath;
+    }
+  }
+  return null;
+}
 async function which(command, workdir) {
   if (isAbsolutePath(command)) {
     if (await existsExecutable(command)) {
@@ -2204,24 +2231,24 @@ async function which(command, workdir) {
     return null;
   }
   for (const binDir of getBundledBinPaths()) {
-    const fullPath = join2(binDir, command);
-    if (await existsExecutable(fullPath)) {
-      return fullPath;
+    const found = await findInDir(binDir, command);
+    if (found) {
+      return found;
     }
   }
   if (workdir) {
-    const projectBin = join2(workdir, "node_modules", ".bin", command);
-    if (await existsExecutable(projectBin)) {
-      return projectBin;
+    const found = await findInDir(join2(workdir, "node_modules", ".bin"), command);
+    if (found) {
+      return found;
     }
   }
   const pathEnv = process.env["PATH"] ?? "";
   const paths = pathEnv.split(getPathSeparator());
   for (const dir of paths) {
     if (!dir) continue;
-    const fullPath = join2(dir, command);
-    if (await existsExecutable(fullPath)) {
-      return fullPath;
+    const found = await findInDir(dir, command);
+    if (found) {
+      return found;
     }
   }
   return null;
@@ -4257,7 +4284,7 @@ import { Router as Router9 } from "express";
 import { spawn as spawn2 } from "child_process";
 
 // src/constants.ts
-var VERSION = "2.0.67";
+var VERSION = "2.0.69";
 
 // src/server/routes/auto-update.ts
 var updateInProgress = false;
@@ -4280,7 +4307,7 @@ function createAutoUpdateRoutes(options = {}) {
     const isService = isRunningAsService();
     const current = VERSION;
     try {
-      const latest = await new Promise((resolve7, reject) => {
+      const latest = await new Promise((resolve8, reject) => {
         const child = spawn2("npm", ["view", "openfox", "version"], {
           stdio: ["ignore", "pipe", "pipe"],
           windowsHide: true
@@ -4291,7 +4318,7 @@ function createAutoUpdateRoutes(options = {}) {
         });
         child.on("close", (code) => {
           if (code === 0) {
-            resolve7(stdout.trim());
+            resolve8(stdout.trim());
           } else {
             reject(new Error(`npm view exited with code ${code}`));
           }
@@ -4335,9 +4362,9 @@ function createAutoUpdateRoutes(options = {}) {
       const timeout = setTimeout(() => {
         child.kill();
       }, UPDATE_TIMEOUT);
-      const exitCode = await new Promise((resolve7) => {
-        child.on("close", resolve7);
-        child.on("error", () => resolve7(1));
+      const exitCode = await new Promise((resolve8) => {
+        child.on("close", resolve8);
+        child.on("error", () => resolve8(1));
       });
       clearTimeout(timeout);
       if (exitCode === 0) {
@@ -4500,7 +4527,9 @@ var ProviderRegistry = class {
   }
   register(map, id, value, kind) {
     if (!id.trim()) throw new Error(`Provider ${kind} id cannot be empty`);
-    if (map.has(id)) throw new Error(`Provider ${kind} already registered: ${id}`);
+    if (map.has(id)) {
+      map.delete(id);
+    }
     map.set(id, value);
   }
 };
@@ -4599,8 +4628,199 @@ async function loadProviderPlugins(options) {
   return diagnostics;
 }
 
+// src/server/routes/plugins.ts
+import { Router as Router11 } from "express";
+import { fileURLToPath as fileURLToPath6, pathToFileURL as pathToFileURL2 } from "url";
+import { dirname as dirname7, resolve as resolve6, join as join9 } from "path";
+import { readFile as readFile4, readdir as readdir3, rm as rm2, rename as rename2 } from "fs/promises";
+import { platform } from "os";
+import { execFile } from "child_process";
+import { promisify } from "util";
+var execFileP = promisify(execFile);
+async function openFolder(dir, res) {
+  try {
+    await execFileP("mkdir", ["-p", dir], { timeout: 5e3 });
+    const cmd = platform() === "darwin" ? "open" : platform() === "win32" ? "explorer" : "xdg-open";
+    await execFileP(cmd, [dir], { timeout: 5e3 });
+    res.json({ success: true });
+  } catch (err) {
+    res.status(500).json({ error: err instanceof Error ? err.message : "Failed to open folder" });
+  }
+}
+function createPluginRoutes(options) {
+  const router = Router11();
+  const { config: config3, providerAdapters, pluginDiagnostics, logger: logger2 } = options;
+  let registryCache = null;
+  router.get("/registry", async (_req, res) => {
+    try {
+      const now = Date.now();
+      if (registryCache && now - registryCache.ts < 3e5) {
+        return res.json({ plugins: registryCache.data });
+      }
+      const moduleDir = dirname7(fileURLToPath6(import.meta.url));
+      const registryPath = resolve6(moduleDir, "../../../plugins-registry.json");
+      const data = JSON.parse(await readFile4(registryPath, "utf8"));
+      registryCache = { data, ts: now };
+      res.json({ plugins: data });
+    } catch (err) {
+      logger2.error("Failed to load plugin registry", { error: String(err) });
+      res.json({ plugins: [] });
+    }
+  });
+  router.post("/install", async (req, res) => {
+    const { githubUrl } = req.body;
+    if (!githubUrl || typeof githubUrl !== "string") {
+      return res.status(400).json({ error: "githubUrl is required" });
+    }
+    const parsed = githubUrl.match(/github\.com\/([^/]+)\/([^/]+?)(?:\/|$)/);
+    if (!parsed) {
+      return res.status(400).json({ error: "Invalid GitHub URL" });
+    }
+    const repoName = parsed[2].replace(/\.git$/, "");
+    if (!/^[a-zA-Z0-9_-]+$/.test(repoName)) {
+      return res.status(400).json({ error: "Invalid repository name" });
+    }
+    const pluginsDir = join9(getGlobalConfigDir(config3.mode ?? "production"), "plugins");
+    const targetDir = join9(pluginsDir, repoName);
+    const tmpDir = join9(pluginsDir, `.${repoName}-tmp-${Date.now()}`);
+    try {
+      await execFileP("mkdir", ["-p", pluginsDir], { timeout: 5e3 });
+    } catch {
+      return res.status(500).json({ error: "Failed to create plugins directory" });
+    }
+    let gitOk = false;
+    try {
+      const { stdout } = await execFileP("git", ["--version"], { timeout: 5e3 });
+      gitOk = stdout.includes("git version");
+    } catch {
+    }
+    if (!gitOk) {
+      return res.status(500).json({ error: "git is not installed or not found in PATH" });
+    }
+    try {
+      const cloneUrl = githubUrl.replace(/\/$/, "") + ".git";
+      await execFileP("git", ["clone", "--depth", "1", cloneUrl, tmpDir], { timeout: 6e4 });
+      await rm2(targetDir, { recursive: true, force: true });
+      await rename2(tmpDir, targetDir);
+      let loaded = false;
+      let loadError;
+      try {
+        await execFileP("npm", ["install", "--no-audit", "--no-fund"], { cwd: targetDir, timeout: 12e4 });
+        await execFileP("npm", ["run", "build"], { cwd: targetDir, timeout: 12e4 });
+      } catch (err) {
+        loadError = "Failed to install/build plugin dependencies";
+        logger2.error("Plugin build failed", { repoName, error: String(err) });
+      }
+      if (!loadError) {
+        try {
+          const manifest = JSON.parse(await readFile4(join9(targetDir, "package.json"), "utf8"));
+          const pluginEntry = manifest.openfox?.plugin;
+          const apiVersion = manifest.openfox?.apiVersion;
+          if (!pluginEntry || !manifest.name) {
+            loadError = "Plugin package.json is missing openfox.plugin or name field";
+          } else if (apiVersion !== 1) {
+            loadError = `Unsupported plugin API version: ${String(apiVersion)}`;
+          } else {
+            const mod = await import(pathToFileURL2(join9(targetDir, pluginEntry)).href);
+            if (typeof mod.register !== "function") {
+              loadError = "Plugin does not export register(registry)";
+            } else {
+              const diagnostic = {
+                packageName: manifest.name,
+                version: manifest.version,
+                source: targetDir,
+                loaded: false,
+                authAdapters: [],
+                transportAdapters: [],
+                presets: []
+              };
+              const trackingRegistry = {
+                runtime: providerAdapters.runtime,
+                registerAuth(adapter) {
+                  providerAdapters.registerAuth(adapter);
+                  diagnostic.authAdapters.push(adapter.id);
+                },
+                registerTransport(adapter) {
+                  providerAdapters.registerTransport(adapter);
+                  diagnostic.transportAdapters.push(adapter.id);
+                },
+                registerPreset(preset) {
+                  providerAdapters.registerPreset(preset);
+                  diagnostic.presets.push(preset.id);
+                }
+              };
+              await mod.register(trackingRegistry);
+              diagnostic.loaded = true;
+              pluginDiagnostics.push(diagnostic);
+              loaded = true;
+              config3.providers = providerAdapters.resolveProviders(config3.providers ?? []);
+            }
+          }
+        } catch (err) {
+          loadError = err instanceof Error ? err.message : "Failed to load plugin";
+          logger2.error("Plugin runtime load failed", { repoName, error: loadError });
+        }
+      }
+      res.json({ success: true, loaded, loadError, path: targetDir });
+    } catch (err) {
+      await rm2(tmpDir, { recursive: true, force: true });
+      const msg = err instanceof Error ? err.message : "Clone failed";
+      logger2.error("Plugin install failed", { githubUrl, error: msg });
+      res.status(500).json({ error: msg });
+    }
+  });
+  router.get("/installed", async (_req, res) => {
+    const pluginsDir = join9(getGlobalConfigDir(config3.mode ?? "production"), "plugins");
+    try {
+      const entries = await readdir3(pluginsDir, { withFileTypes: true });
+      const installed = [];
+      for (const entry of entries) {
+        if (!entry.isDirectory()) continue;
+        const pkgPath = join9(pluginsDir, entry.name, "package.json");
+        let version = null;
+        try {
+          const pkg = JSON.parse(await readFile4(pkgPath, "utf8"));
+          version = pkg.version ?? null;
+        } catch {
+        }
+        installed.push({ name: entry.name, version });
+      }
+      res.json({ installed });
+    } catch {
+      res.json({ installed: [] });
+    }
+  });
+  router.get("/open-folder", async (_req, res) => {
+    const pluginsDir = join9(getGlobalConfigDir(config3.mode ?? "production"), "plugins");
+    await openFolder(pluginsDir, res);
+  });
+  router.get("/:name/open-folder", async (req, res) => {
+    const name = req.params.name;
+    if (!/^[a-zA-Z0-9_-]+$/.test(name)) return res.status(400).json({ error: "Invalid plugin name" });
+    const targetDir = join9(getGlobalConfigDir(config3.mode ?? "production"), "plugins", name);
+    await openFolder(targetDir, res);
+  });
+  router.delete("/:name", async (req, res) => {
+    const name = req.params.name;
+    if (!/^[a-zA-Z0-9_-]+$/.test(name)) {
+      return res.status(400).json({ error: "Invalid plugin name" });
+    }
+    const targetDir = join9(getGlobalConfigDir(config3.mode ?? "production"), "plugins", name);
+    try {
+      await rm2(targetDir, { recursive: true, force: true });
+      for (let i = pluginDiagnostics.length - 1; i >= 0; i--) {
+        if (pluginDiagnostics[i].source === targetDir) pluginDiagnostics.splice(i, 1);
+      }
+      res.json({ success: true });
+    } catch (err) {
+      res.status(500).json({ error: err instanceof Error ? err.message : "Failed to remove plugin" });
+    }
+  });
+  return router;
+}
+
 // src/server/index.ts
-var __dirname3 = dirname7(fileURLToPath6(import.meta.url));
+var __dirname3 = dirname8(fileURLToPath7(import.meta.url));
 async function createServerHandle(config3) {
   setRuntimeConfig(config3);
   setLogLevel(config3.logging?.level ?? void 0, config3.mode);
@@ -4697,7 +4917,7 @@ async function createServerHandle(config3) {
       setMcpTools(mcpTools);
       logger.info("MCP tools registered", { count: mcpTools.length });
     }
-    const { signalMcpReady } = await import("./server-OYE7GERR.js");
+    const { signalMcpReady } = await import("./server-RLNPHLY2.js");
     signalMcpReady();
   });
   const app = express();
@@ -4969,7 +5189,7 @@ async function createServerHandle(config3) {
   app.get("/api/sessions/:id", async (req, res) => {
     const { getEventStore: getEventStore2 } = await import("./events-CDQ4HASP.js");
     const { buildMessagesFromStoredEvents } = await import("./folding-V2K34EGN.js");
-    const { getPendingQuestionsForSession } = await import("./tools-INWP6FGV.js");
+    const { getPendingQuestionsForSession } = await import("./tools-CALGWIV2.js");
     const session = sessionManager.getSession(req.params.id);
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
@@ -4988,8 +5208,8 @@ async function createServerHandle(config3) {
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-72DFHK5K.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-INWP6FGV.js");
+    const { stopSessionExecution } = await import("./chat-handler-K3DWIGHG.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-CALGWIV2.js");
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
     abortSession(sessionId);
@@ -5085,6 +5305,38 @@ async function createServerHandle(config3) {
     sessionManager.setMetadataEntries(sessionId, "review_findings", entries);
     res.json({ success: true });
   });
+  app.put("/api/sessions/:id/metadata/:key", async (req, res) => {
+    const sessionId = req.params.id;
+    const key = req.params.key;
+    const session = sessionManager.getSession(sessionId);
+    if (!session) {
+      return res.status(404).json({ error: "Session not found" });
+    }
+    const { entries } = req.body;
+    if (!Array.isArray(entries)) {
+      return res.status(400).json({ error: "entries is required and must be an array" });
+    }
+    for (let i = 0; i < entries.length; i++) {
+      const c = entries[i];
+      if (c === null || typeof c !== "object" || Array.isArray(c)) {
+        return res.status(400).json({ error: `entries[${i}] must be an object` });
+      }
+      if (c.description !== void 0 && typeof c.description !== "string") {
+        return res.status(400).json({ error: `entries[${i}].description must be a string` });
+      }
+      if (c.status !== void 0 && typeof c.status !== "string") {
+        return res.status(400).json({ error: `entries[${i}].status must be a string` });
+      }
+    }
+    const mapped = entries.map((c, i) => ({
+      ...c,
+      id: c.id != null ? String(c.id) : String(i),
+      description: c.description ?? "",
+      status: c.status ?? "open"
+    }));
+    sessionManager.setMetadataEntries(sessionId, key, mapped);
+    res.json({ success: true });
+  });
   app.put("/api/sessions/:id/mode", async (req, res) => {
     const { getEventStore: getEventStore2 } = await import("./events-CDQ4HASP.js");
     const { buildMessagesFromStoredEvents } = await import("./folding-V2K34EGN.js");
@@ -5143,7 +5395,7 @@ async function createServerHandle(config3) {
     if (!callId || approved === void 0) {
       return res.status(400).json({ error: "callId and approved are required" });
     }
-    const { providePathConfirmation } = await import("./tools-INWP6FGV.js");
+    const { providePathConfirmation } = await import("./tools-CALGWIV2.js");
     const result = providePathConfirmation(callId, approved, alwaysAllow);
     if (!result.found) {
       return res.status(404).json({ error: "No pending path confirmation with that ID" });
@@ -5151,7 +5403,7 @@ async function createServerHandle(config3) {
     const { getEventStore: getEventStore2 } = await import("./events-CDQ4HASP.js");
     const { buildMessagesFromStoredEvents, foldPendingConfirmations } = await import("./folding-V2K34EGN.js");
     const { createSessionStateMessage } = await import("./protocol-CTNE3ANP.js");
-    const { getPendingQuestionsForSession } = await import("./tools-INWP6FGV.js");
+    const { getPendingQuestionsForSession } = await import("./tools-CALGWIV2.js");
     const eventStore = getEventStore2();
     const events = eventStore.getEvents(sessionId);
     const messages = buildMessagesFromStoredEvents(events);
@@ -5172,7 +5424,7 @@ async function createServerHandle(config3) {
     if (!skip && typeof answer !== "string") {
       return res.status(400).json({ error: "answer is required when not skipping" });
     }
-    const { provideAnswer } = await import("./tools-INWP6FGV.js");
+    const { provideAnswer } = await import("./tools-CALGWIV2.js");
     const found = provideAnswer(callId, answer ?? "", skip ?? false);
     if (!found) {
       return res.status(404).json({ error: "No pending question with that ID" });
@@ -5232,7 +5484,7 @@ async function createServerHandle(config3) {
       backend: activeProvider?.backend ?? llmClient.getBackend(),
       model: llmClient.getModel()
     };
-    const { runAgentTurn, TurnMetrics } = await import("./orchestrator-FEMPJOZD.js");
+    const { runAgentTurn, TurnMetrics } = await import("./orchestrator-PUV4WG77.js");
     runAgentTurn(
       {
         sessionManager,
@@ -5270,8 +5522,8 @@ async function createServerHandle(config3) {
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-72DFHK5K.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-INWP6FGV.js");
+    const { stopSessionExecution } = await import("./chat-handler-K3DWIGHG.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-CALGWIV2.js");
     const queuedMessages = sessionManager.getQueueState(sessionId);
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
@@ -5388,14 +5640,14 @@ async function createServerHandle(config3) {
   app.get("/api/tools/rtk-check", async (_req, res) => {
     const { spawn: spawn3 } = await import("child_process");
     try {
-      const available = await new Promise((resolve7) => {
+      const available = await new Promise((resolve8) => {
         const proc = spawn3("rtk", ["--version"], { stdio: ["ignore", "pipe", "pipe"] });
         let out = "";
         proc.stdout?.on("data", (d) => {
           out += d.toString();
         });
-        proc.on("error", () => resolve7(false));
-        proc.on("close", (code) => resolve7(code === 0 && out.startsWith("rtk ")));
+        proc.on("error", () => resolve8(false));
+        proc.on("close", (code) => resolve8(code === 0 && out.startsWith("rtk ")));
       });
       res.json({ available });
     } catch {
@@ -5565,7 +5817,7 @@ async function createServerHandle(config3) {
     const backend = req.query["backend"];
     if (!url) return res.status(400).json({ error: "url is required" });
     try {
-      const { fetchModelsWithContext } = await import("./provider-manager-D3KIOD5E.js");
+      const { fetchModelsWithContext } = await import("./provider-manager-7C3JVOLW.js");
       const { getModelProfile: getModelProfile2 } = await import("./profiles-5J7F4BML.js");
       const models = await fetchModelsWithContext(
         url,
@@ -5635,7 +5887,7 @@ async function createServerHandle(config3) {
       }
       const { getModelProfile: getModelProfile2 } = await import("./profiles-5J7F4BML.js");
       const { getBackendCapabilities } = await import("./backend-P3GHHLHJ.js");
-      const { buildNonStreamingCreateParams } = await import("./client-pure-U6ZYUPJQ.js");
+      const { buildNonStreamingCreateParams } = await import("./client-pure-XHH4RRLB.js");
       const { OpenAIHttpClient } = await import("./http-client-PIWB7BXK.js");
       const { ensureVersionPrefix } = await import("./url-utils-SAJP7AEX.js");
       const profile = getModelProfile2(model);
@@ -5761,6 +6013,7 @@ async function createServerHandle(config3) {
       });
     }
   });
+  app.use("/api/plugins", createPluginRoutes({ config: config3, providerAdapters, pluginDiagnostics, logger }));
   app.get("/api/plugins", (_req, res) => res.json({ plugins: pluginDiagnostics }));
   app.get("/api/provider-presets", (_req, res) => res.json({ presets: providerAdapters.getPresets() }));
   app.get(
@@ -5893,7 +6146,7 @@ async function createServerHandle(config3) {
   });
   async function rebuildMcpTools() {
     const { createMcpTools: createMcpTools2 } = await import("./tool-adapter-MOGEI6TP.js");
-    const { setMcpTools: setMcpTools2 } = await import("./tools-INWP6FGV.js");
+    const { setMcpTools: setMcpTools2 } = await import("./tools-CALGWIV2.js");
     const mcpTools = createMcpTools2(mcpManager);
     setMcpTools2(mcpTools);
   }
@@ -5978,6 +6231,69 @@ async function createServerHandle(config3) {
       res.status(400).json({ error: error instanceof Error ? error.message : String(error) });
     }
   });
+  app.put("/api/mcp/servers/:name", async (req, res) => {
+    const { name } = req.params;
+    const existing = mcpManager.getServer(name);
+    if (!existing) {
+      return res.status(404).json({ error: `MCP server '${name}' not found` });
+    }
+    const body = req.body;
+    const { transport: rawTransport, command, args, env, url, headers } = body;
+    if (rawTransport !== void 0 && rawTransport !== "stdio" && rawTransport !== "http") {
+      return res.status(400).json({ error: `Invalid transport '${String(rawTransport)}'. Must be 'stdio' or 'http'.` });
+    }
+    if (command !== void 0 && typeof command !== "string") {
+      return res.status(400).json({ error: "command must be a string" });
+    }
+    if (args !== void 0 && (!Array.isArray(args) || args.some((a) => typeof a !== "string"))) {
+      return res.status(400).json({ error: "args must be an array of strings" });
+    }
+    if (env !== void 0 && (typeof env !== "object" || env === null || Array.isArray(env) || Object.values(env).some((v) => typeof v !== "string"))) {
+      return res.status(400).json({ error: "env must be a string/string object" });
+    }
+    if (url !== void 0 && typeof url !== "string") {
+      return res.status(400).json({ error: "url must be a string" });
+    }
+    if (headers !== void 0 && (typeof headers !== "object" || headers === null || Array.isArray(headers) || Object.values(headers).some((v) => typeof v !== "string"))) {
+      return res.status(400).json({ error: "headers must be a string/string object" });
+    }
+    try {
+      const { loadGlobalConfig, saveGlobalConfig } = await import("./config-EUMVEFHU.js");
+      const { applyMcpServerUpdate } = await import("./update-server-MYYQUNZX.js");
+      const globalConfig = await loadGlobalConfig(config3.mode ?? "production", config3.globalConfigPath);
+      const mcpServers2 = { ...globalConfig.mcpServers ?? {} };
+      const patch = {
+        ...rawTransport !== void 0 ? { transport: rawTransport } : {},
+        ...command !== void 0 ? { command } : {},
+        ...args !== void 0 ? { args } : {},
+        ...env !== void 0 ? { env } : {},
+        ...url !== void 0 ? { url } : {},
+        ...headers !== void 0 ? { headers } : {}
+      };
+      const { error: updateError } = await applyMcpServerUpdate({
+        name,
+        patch,
+        existing,
+        persistedCfg: mcpServers2[name],
+        mcpManager,
+        save: async (cfg) => {
+          mcpServers2[name] = cfg;
+          await saveGlobalConfig(config3.mode ?? "production", { ...globalConfig, mcpServers: mcpServers2 }, config3.globalConfigPath);
+        }
+      });
+      if (updateError) {
+        return res.status(400).json({ error: updateError });
+      }
+      await rebuildMcpTools();
+      const sessions = sessionManager.listSessions();
+      for (const s of sessions) {
+        sessionManager.setDynamicContextChanged(s.id, true);
+      }
+      res.json({ server: mcpManager.getServer(name) });
+    } catch (error) {
+      res.status(400).json({ error: error instanceof Error ? error.message : String(error) });
+    }
+  });
   app.delete("/api/mcp/servers/:name", async (req, res) => {
     const { name } = req.params;
     const server = mcpManager.getServer(name);
@@ -6091,14 +6407,14 @@ async function createServerHandle(config3) {
   });
   app.use("/api/directories", createDirectoryRoutes());
   app.use("/api/files", createFileSearchRoutes());
-  const webDir = resolve6(__dirname3, "../../web");
+  const webDir = resolve7(__dirname3, "../../web");
   const isDev = config3.mode === "development";
   let viteServer;
   if (isDev) {
     logger.info("Dev mode: using Vite middleware");
     viteServer = await createViteServer({
       root: webDir,
-      configFile: resolve6(__dirname3, "../../web/vite.config.ts"),
+      configFile: resolve7(__dirname3, "../../web/vite.config.ts"),
       server: { middlewareMode: true },
       appType: "spa",
       logLevel: "warn"
@@ -6118,7 +6434,7 @@ async function createServerHandle(config3) {
       }
     });
     app.get("/fox.svg", (_req, res) => {
-      readFile4(join9(webDir, "fox.svg")).then((content) => {
+      readFile5(join10(webDir, "fox.svg")).then((content) => {
         res.set("Content-Type", "image/svg+xml");
         res.send(content);
       }).catch(() => {
@@ -6127,7 +6443,7 @@ async function createServerHandle(config3) {
     });
     app.use(
       "/sounds",
-      express.static(join9(webDir, "public", "sounds"), {
+      express.static(join10(webDir, "public", "sounds"), {
         setHeaders: (res) => {
           res.set("Content-Type", "audio/mpeg");
         }
@@ -6136,13 +6452,13 @@ async function createServerHandle(config3) {
     app.use("/__inspect__.js", (_req, res) => {
       res.set("Access-Control-Allow-Origin", "*");
       res.set("Content-Type", "application/javascript");
-      readFile4(join9(webDir, "public", "__inspect__.js")).then((content) => res.send(content)).catch(() => res.status(404).send("Not found"));
+      readFile5(join10(webDir, "public", "__inspect__.js")).then((content) => res.send(content)).catch(() => res.status(404).send("Not found"));
     });
     app.get("/*path", (req, res) => {
       if (req.path.startsWith("/api/")) {
         return;
       }
-      readFile4(join9(webDir, "index.html"), "utf-8").then((indexHtml) => viteServer.transformIndexHtml(req.originalUrl, indexHtml)).then((transformed) => res.send(transformed)).catch((err) => {
+      readFile5(join10(webDir, "index.html"), "utf-8").then((indexHtml) => viteServer.transformIndexHtml(req.originalUrl, indexHtml)).then((transformed) => res.send(transformed)).catch((err) => {
         logger.error("Error serving index.html", { error: err });
         res.status(500).send("Server error");
       });
@@ -6150,10 +6466,10 @@ async function createServerHandle(config3) {
     logger.info("Vite middleware ready", { port: config3.server.port });
   }
   if (!isDev) {
-    const distWebDir = resolve6(__dirname3, "web");
+    const distWebDir = resolve7(__dirname3, "web");
     app.use(
       "/assets",
-      express.static(join9(distWebDir, "assets"), {
+      express.static(join10(distWebDir, "assets"), {
         setHeaders: (res, filepath) => {
           if (filepath.endsWith(".css")) {
             res.set("Content-Type", "text/css");
@@ -6161,11 +6477,11 @@ async function createServerHandle(config3) {
         }
       })
     );
-    app.use("/manifest.webmanifest", express.static(join9(distWebDir, "manifest.webmanifest")));
-    app.use("/registerSW.js", express.static(join9(distWebDir, "registerSW.js")));
-    app.use("/sw.js", express.static(join9(distWebDir, "sw.js")));
+    app.use("/manifest.webmanifest", express.static(join10(distWebDir, "manifest.webmanifest")));
+    app.use("/registerSW.js", express.static(join10(distWebDir, "registerSW.js")));
+    app.use("/sw.js", express.static(join10(distWebDir, "sw.js")));
     app.get("/fox.svg", (_req, res) => {
-      readFile4(join9(distWebDir, "fox.svg")).then((content) => {
+      readFile5(join10(distWebDir, "fox.svg")).then((content) => {
         res.set("Content-Type", "image/svg+xml");
         res.send(content);
       }).catch(() => {
@@ -6174,7 +6490,7 @@ async function createServerHandle(config3) {
     });
     app.use(
       "/sounds",
-      express.static(join9(distWebDir, "sounds"), {
+      express.static(join10(distWebDir, "sounds"), {
         setHeaders: (res) => {
           res.set("Content-Type", "audio/mpeg");
         }
@@ -6183,10 +6499,10 @@ async function createServerHandle(config3) {
     app.use("/__inspect__.js", (_req, res) => {
       res.set("Access-Control-Allow-Origin", "*");
       res.set("Content-Type", "application/javascript");
-      readFile4(join9(distWebDir, "__inspect__.js")).then((content) => res.send(content)).catch(() => res.status(404).send("Not found"));
+      readFile5(join10(distWebDir, "__inspect__.js")).then((content) => res.send(content)).catch(() => res.status(404).send("Not found"));
     });
     app.get("/", (_req, res) => {
-      readFile4(join9(distWebDir, "index.html"), "utf-8").then((content) => res.send(content)).catch(() => {
+      readFile5(join10(distWebDir, "index.html"), "utf-8").then((content) => res.send(content)).catch(() => {
         res.status(404).send("Web UI not built. Run `npm run build:web`");
       });
     });
@@ -6194,7 +6510,7 @@ async function createServerHandle(config3) {
       if (req.path.startsWith("/api/") || req.path.startsWith("/assets/") || req.path.startsWith("/sounds/") || req.path.startsWith("/manifest.webmanifest") || req.path.startsWith("/registerSW.js") || req.path.startsWith("/sw.js") || req.path === "/fox.svg") {
         return;
       }
-      readFile4(join9(distWebDir, "index.html"), "utf-8").then((content) => res.send(content)).catch(() => {
+      readFile5(join10(distWebDir, "index.html"), "utf-8").then((content) => res.send(content)).catch(() => {
         res.status(404).send("Web UI not built");
       });
     });
@@ -6214,7 +6530,7 @@ async function createServerHandle(config3) {
     const state = sessionManager.getContextState(sessionId);
     wssExports.broadcastForSession(sessionId, createContextStateMessage(state));
   });
-  const { QueueProcessor } = await import("./processor-QB3NMRMO.js");
+  const { QueueProcessor } = await import("./processor-O2QW27BD.js");
   const queueProcessor = new QueueProcessor({
     sessionManager,
     providerManager,
@@ -6237,7 +6553,7 @@ async function createServerHandle(config3) {
   return {
     httpServer,
     ctx: { config: config3, sessionManager, llmClient: getLLMClient(), toolRegistry, providerManager },
-    start: (port) => new Promise((resolve7, reject) => {
+    start: (port) => new Promise((resolve8, reject) => {
       const listenPort = port ?? config3.server.port;
       const host = config3.server.host;
       httpServer.listen(listenPort, host, () => {
@@ -6247,11 +6563,11 @@ async function createServerHandle(config3) {
         logger.info(`OpenFox server running at http://${host}:${actualPort}`);
         logger.info(`WebSocket available at ws://${host}:${actualPort}/ws`);
         logger.info(`LLM backend: ${client.getBackend()}, model: ${client.getModel()}, url: ${config3.llm.baseUrl}`);
-        resolve7({ port: actualPort });
+        resolve8({ port: actualPort });
       });
       httpServer.on("error", reject);
     }),
-    close: () => new Promise((resolve7) => {
+    close: () => new Promise((resolve8) => {
       logger.info("Shutting down...");
       void (async () => {
         await devServerManager.stopAll();
@@ -6270,7 +6586,7 @@ async function createServerHandle(config3) {
           client.terminate();
         }
         wss.close();
-        httpServer.close(() => resolve7());
+        httpServer.close(() => resolve8());
       })();
     })
   };
@@ -6295,4 +6611,4 @@ export {
   createServerHandle,
   createServer
 };
-//# sourceMappingURL=chunk-2GRUQN2B.js.map
+//# sourceMappingURL=chunk-WHVCGVQX.js.map