openfox 2.0.73 → 2.0.74

package/dist/{chat-handler-LK5RUAGO.js → chat-handler-ETKFIHUO.js}

@@ -5,9 +5,9 @@ import {
 } from "./chunk-2DCJERYX.js";
 import {
   runChatTurn
-} from "./chunk-O2BE7KVQ.js";
-import "./chunk-GMF36EZ3.js";
-import "./chunk-X2Y3AJPP.js";
+} from "./chunk-ZRQDCQ7R.js";
+import "./chunk-2VBETAU2.js";
+import "./chunk-MF3UW36X.js";
 import "./chunk-WGMJCFCE.js";
 import "./chunk-EU3WWTFH.js";
 import "./chunk-XWBNYU2L.js";
@@ -158,4 +158,4 @@ export {
   startChatSession,
   stopSessionExecution
 };
-//# sourceMappingURL=chat-handler-LK5RUAGO.js.map
+//# sourceMappingURL=chat-handler-ETKFIHUO.js.map

package/dist/{chunk-GMF36EZ3.js → chunk-2VBETAU2.js}

@@ -1,7 +1,7 @@
 import {
   getGitBranch,
   listWorkspaces
-} from "./chunk-X2Y3AJPP.js";
+} from "./chunk-MF3UW36X.js";
 import {
   AskUserInterrupt,
   askUserTool
@@ -3814,7 +3814,7 @@ var callSubAgentTool = {
       };
     }
     try {
-      const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-X52DFUS6.js");
+      const { getToolRegistryForAgent: getToolRegistryForAgent2 } = await import("./tools-APW7MY4E.js");
       const toolRegistry = getToolRegistryForAgent2(agentDef);
       const turnMetrics = new TurnMetrics();
       const result = await executeSubAgent({
@@ -4813,7 +4813,7 @@ var mcpConfigTool = createTool(
       mcpNotifyChanged?.(sessionId);
     }
     async function rebuildTools() {
-      const { setMcpTools: setMcpTools2 } = await import("./tools-X52DFUS6.js");
+      const { setMcpTools: setMcpTools2 } = await import("./tools-APW7MY4E.js");
       const mcpTools = createMcpTools(mcpManagerForTools);
       setMcpTools2(mcpTools);
     }
@@ -5493,4 +5493,4 @@ export {
   getToolRegistryForAgent,
   createToolRegistry
 };
-//# sourceMappingURL=chunk-GMF36EZ3.js.map
+//# sourceMappingURL=chunk-2VBETAU2.js.map

package/dist/chunk-3OZBPWHP.js

@@ -0,0 +1,7 @@
+// src/constants.ts
+var VERSION = "2.0.74";
+
+export {
+  VERSION
+};
+//# sourceMappingURL=chunk-3OZBPWHP.js.map

package/dist/{chunk-X2Y3AJPP.js → chunk-MF3UW36X.js}

@@ -8,7 +8,7 @@ import {
 // src/server/git/workspace.ts
 import { spawn, execSync } from "child_process";
 import { mkdir as mkdir2 } from "fs/promises";
-import { resolve as resolve2, join as join2 } from "path";
+import { resolve as resolve2, join as join2, isAbsolute } from "path";
 import { homedir, platform } from "os";
 
 // src/server/git/workspace-config.ts
@@ -106,6 +106,13 @@ async function getCommitsBehind(cwd, branch) {
 function validateRef(cwd, name) {
   return runGit(cwd, ["check-ref-format", `refs/heads/${name}`]);
 }
+function validateWorkspaceName(name) {
+  if (!name || typeof name !== "string") throw new Error("Workspace name is required");
+  if (name.includes("/") || name.includes("\\")) throw new Error("Workspace name cannot contain path separators");
+  if (name === "." || name === "..") throw new Error('Workspace name cannot be "." or ".."');
+  if (isAbsolute(name)) throw new Error("Workspace name cannot be an absolute path");
+  if (name.length > 255) throw new Error("Workspace name is too long");
+}
 function checkoutBranch(cwd, name) {
   return runGit(cwd, ["checkout", name]);
 }
@@ -206,6 +213,7 @@ export {
   listBranches,
   getCommitsBehind,
   validateRef,
+  validateWorkspaceName,
   checkoutBranch,
   createBranch,
   workspaceExists,
@@ -213,4 +221,4 @@ export {
   ensureWorkspace,
   deleteWorkspace
 };
-//# sourceMappingURL=chunk-X2Y3AJPP.js.map
+//# sourceMappingURL=chunk-MF3UW36X.js.map

package/dist/{chunk-EYXDM2FY.js → chunk-QFR6JF32.js}

@@ -21,7 +21,7 @@ import {
   tokenFromPassword,
   verifyPassword,
   workflowExists
-} from "./chunk-TK4BZIXA.js";
+} from "./chunk-TMRFTWXP.js";
 import {
   agentExists,
   createToolRegistry,
@@ -66,7 +66,7 @@ import {
   setSkillEnabled,
   skillExists,
   updateOwnedSkill
-} from "./chunk-GMF36EZ3.js";
+} from "./chunk-2VBETAU2.js";
 import {
   deleteWorkspace,
   ensureWorkspace,
@@ -76,8 +76,9 @@ import {
   loadWorkspaceConfig,
   runGit,
   saveWorkspaceConfig,
+  validateWorkspaceName,
   workspaceExists
-} from "./chunk-X2Y3AJPP.js";
+} from "./chunk-MF3UW36X.js";
 import {
   EventEmitter
 } from "./chunk-EU3WWTFH.js";
@@ -94,7 +95,7 @@ import {
 } from "./chunk-NWO6GRYE.js";
 import {
   VERSION
-} from "./chunk-NE7OWIIO.js";
+} from "./chunk-3OZBPWHP.js";
 import {
   createSession,
   deleteSession,
@@ -2557,6 +2558,8 @@ var SessionManager = class {
   dynamicContextChangedStore = /* @__PURE__ */ new Map();
   debugDumpStore = /* @__PURE__ */ new Map();
   warmedUpSessions = /* @__PURE__ */ new Set();
+  switchLocks = /* @__PURE__ */ new Map();
+  workspaceCreationLocks = /* @__PURE__ */ new Map();
   constructor(providerManager) {
     this.providerManager = providerManager;
   }
@@ -3213,89 +3216,135 @@ var SessionManager = class {
    * Switch to a workspace. Target can be "original" (project root) or a workspace name.
    * If the workspace doesn't exist yet, it's created first.
    * Emits a single type of event — switching is always "opening" a workspace.
+   * Switches are serialized per-session to prevent race conditions.
    */
   async switchWorkspace(sessionId, target, branch) {
-    const session = this.requireSession(sessionId);
-    const project = getProject(session.projectId);
-    if (!project) throw new Error(`Project not found: ${session.projectId}`);
-    if (target === "original" && !session.workspace) return session;
-    if (target !== "original" && session.workspace?.endsWith(`/${target}`)) return session;
-    const previousPath = session.workspace;
-    if (previousPath) {
+    if (target !== "original") {
+      validateWorkspaceName(target);
+    }
+    const existingLock = this.switchLocks.get(sessionId);
+    if (existingLock) {
+      await existingLock;
+    }
+    const lockPromise = (async () => {
+      const session = this.requireSession(sessionId);
+      const project = getProject(session.projectId);
+      if (!project) throw new Error(`Project not found: ${session.projectId}`);
+      if (target === "original" && !session.workspace) return session;
+      if (target !== "original" && session.workspace?.split("/").pop() === target) return session;
+      const previousPath = session.workspace;
+      if (previousPath) {
+        try {
+          await devServerManager.stop(previousPath);
+        } catch (err) {
+          logger.error("Error stopping dev server for workspace switch", {
+            sessionId,
+            workspace: previousPath,
+            error: err
+          });
+        }
+      }
+      if (target === "original") {
+        updateSessionWorkdir(sessionId, project.workdir, null);
+      } else {
+        const createLockKey = `${project.name}:${target}`;
+        const existingCreateLock = this.workspaceCreationLocks.get(createLockKey);
+        if (existingCreateLock) {
+          await existingCreateLock;
+        }
+        const createLockPromise = (async () => {
+          const exists = await workspaceExists(project.name, target);
+          if (!exists) {
+            await ensureWorkspace(project.workdir, target, project.name, branch);
+          }
+        })();
+        this.workspaceCreationLocks.set(createLockKey, createLockPromise);
+        try {
+          await createLockPromise;
+        } finally {
+          this.workspaceCreationLocks.delete(createLockKey);
+        }
+        const wsPath = resolve2(getWorkspacesDir(project.name), target);
+        updateSessionWorkdir(sessionId, project.workdir, wsPath);
+      }
       try {
-        await devServerManager.stop(previousPath);
+        await shutdownLspManager(sessionId);
       } catch (err) {
-        logger.error("Error stopping dev server for workspace switch", {
-          sessionId,
-          workspace: previousPath,
-          error: err
-        });
-      }
-    }
-    if (target === "original") {
-      updateSessionWorkdir(sessionId, project.workdir, null);
-    } else {
-      const exists = await workspaceExists(project.name, target);
-      if (!exists) {
-        await ensureWorkspace(project.workdir, target, project.name, branch);
+        logger.error("Error shutting down LSP for workspace switch", { sessionId, error: err });
       }
-      const wsPath = resolve2(getWorkspacesDir(project.name), target);
-      updateSessionWorkdir(sessionId, project.workdir, wsPath);
-    }
-    try {
-      await shutdownLspManager(sessionId);
-    } catch (err) {
-      logger.error("Error shutting down LSP for workspace switch", { sessionId, error: err });
-    }
-    const effectiveWorkdir = target === "original" ? project.workdir : resolve2(getWorkspacesDir(project.name), target);
-    const actualBranch = await getGitBranch(effectiveWorkdir);
-    let stalenessHint = "";
-    if (target !== "original" && actualBranch) {
-      await runGit(effectiveWorkdir, ["fetch", "origin", "--no-tags", "--quiet"]).catch(() => {
-      });
-      const behind = await getCommitsBehind(effectiveWorkdir, actualBranch);
-      if (behind !== null && behind > 0) {
-        const plural = behind === 1 ? "" : "s";
-        stalenessHint = `
+      const effectiveWorkdir = target === "original" ? project.workdir : resolve2(getWorkspacesDir(project.name), target);
+      const actualBranch = await getGitBranch(effectiveWorkdir);
+      let stalenessHint = "";
+      if (target !== "original" && actualBranch) {
+        await runGit(effectiveWorkdir, ["fetch", "origin", "--no-tags", "--quiet"]).catch(() => {
+        });
+        const behind = await getCommitsBehind(effectiveWorkdir, actualBranch);
+        if (behind !== null && behind > 0) {
+          const plural = behind === 1 ? "" : "s";
+          stalenessHint = `
 (${behind} commit${plural} behind ${actualBranch} on main workspace \u2014 run \`git pull\` to sync)`;
+        }
       }
-    }
-    const wsLabel = target === "original" ? "original" : target;
-    const reminderContent = `<system-reminder>
+      const wsLabel = target === "original" ? "original" : target;
+      const reminderContent = `<system-reminder>
 This session is now operating in workspace "${wsLabel}" on branch "${actualBranch ?? "unknown"}" at ${effectiveWorkdir}.${stalenessHint}
 All file and git operations should use this directory.
 </system-reminder>`;
-    this.addMessage(sessionId, {
-      role: "user",
-      content: reminderContent,
-      isSystemGenerated: true,
-      messageKind: "auto-prompt",
-      metadata: {
-        type: "workspace",
-        name: "Workspace",
-        color: "#22c55e",
-        kind: "definition",
-        workspaceName: wsLabel,
-        ...actualBranch ? { branchName: actualBranch } : {}
+      this.addMessage(sessionId, {
+        role: "user",
+        content: reminderContent,
+        isSystemGenerated: true,
+        messageKind: "auto-prompt",
+        metadata: {
+          type: "workspace",
+          name: "Workspace",
+          color: "#22c55e",
+          kind: "definition",
+          workspaceName: wsLabel,
+          ...actualBranch ? { branchName: actualBranch } : {}
+        }
+      });
+      const updated = this.requireSession(sessionId);
+      this.emit({ type: "session_updated", session: updated });
+      return updated;
+    })();
+    this.switchLocks.set(sessionId, lockPromise);
+    lockPromise.finally(() => {
+      if (this.switchLocks.get(sessionId) === lockPromise) {
+        this.switchLocks.delete(sessionId);
       }
     });
-    const updated = this.requireSession(sessionId);
-    this.emit({ type: "session_updated", session: updated });
-    return updated;
+    return lockPromise;
   }
   /**
    * Delete a workspace by name. If the session is currently in that workspace,
    * switches to original first. Throws if target is "original".
+   * Refuses deletion if other sessions reference this workspace.
    */
   async deleteWorkspace(sessionId, target) {
     if (target === "original") throw new Error("Cannot delete the original workspace");
+    validateWorkspaceName(target);
     const session = this.requireSession(sessionId);
     const project = getProject(session.projectId);
     if (!project) throw new Error(`Project not found: ${session.projectId}`);
+    const otherSessionsUsingIt = this.listSessions().filter(
+      (s) => s.id !== sessionId && s.workspace?.split("/").pop() === target
+    );
+    if (otherSessionsUsingIt.length > 0) {
+      const otherIds = otherSessionsUsingIt.map((s) => s.id).join(", ");
+      throw new Error(
+        `Workspace "${target}" is in use by other session(s): ${otherIds}. Switch them to original first.`
+      );
+    }
     const currentWsName = session.workspace?.split("/").pop();
     if (currentWsName === target) {
       await this.switchWorkspace(sessionId, "original");
     }
+    const effectivePath = resolve2(getWorkspacesDir(project.name), target);
+    try {
+      await devServerManager.stop(effectivePath);
+    } catch {
+    }
     await deleteWorkspace(project.name, target);
     const updated = this.requireSession(sessionId);
     this.emit({ type: "session_updated", session: updated });
@@ -4252,6 +4301,11 @@ function fuzzyScore(filePath, query) {
 import { Router as Router9 } from "express";
 import { spawn as spawn2 } from "child_process";
 var updateInProgress = false;
+var CACHE_TTL_MS = 60 * 60 * 1e3;
+var versionCache = {
+  data: null,
+  timestamp: 0
+};
 function isRunningAsService() {
   return process.env["OPENFOX_SERVICE"] === "true";
 }
@@ -4265,13 +4319,94 @@ async function checkAuth(req, opts) {
   }
   return true;
 }
+function isDevMode() {
+  return process.env["NODE_ENV"] === "development";
+}
+async function getRemote() {
+  return new Promise((resolve8) => {
+    const child = spawn2("git", ["remote"], {
+      stdio: ["ignore", "pipe", "pipe"],
+      windowsHide: true
+    });
+    let output = "";
+    child.stdout?.on("data", (data) => {
+      output += data.toString();
+    });
+    child.on("close", () => {
+      const remotes = output.trim().split("\n").map((r) => r.trim()).filter(Boolean);
+      if (remotes.includes("upstream")) resolve8("upstream");
+      else if (remotes.includes("origin")) resolve8("origin");
+      else resolve8("origin");
+    });
+    child.on("error", () => resolve8("origin"));
+  });
+}
+async function getLatestDevelopVersion() {
+  const remote = await getRemote();
+  return new Promise((resolve8) => {
+    const fetchChild = spawn2("git", ["fetch", remote, "develop", "--no-tags"], {
+      stdio: ["ignore", "pipe", "pipe"],
+      windowsHide: true
+    });
+    fetchChild.on("error", (err) => {
+      logger.error("[auto-update] Git fetch error", { error: err.message });
+      resolve8("unknown");
+    });
+    fetchChild.on("close", (code) => {
+      if (code !== 0) {
+        logger.warn("[auto-update] Git fetch failed, trying local tags...");
+      }
+      const tagChild = spawn2("git", ["describe", "--tags", "--abbrev=0", `${remote}/develop`], {
+        stdio: ["ignore", "pipe", "pipe"],
+        windowsHide: true
+      });
+      let tagOutput = "";
+      tagChild.stdout?.on("data", (data) => {
+        tagOutput += data.toString();
+      });
+      tagChild.on("close", (tagCode) => {
+        if (tagCode === 0 && tagOutput.trim()) {
+          resolve8(tagOutput.trim());
+        } else {
+          const fallbackChild = spawn2("git", ["describe", "--tags", "--abbrev=0", "develop"], {
+            stdio: ["ignore", "pipe", "pipe"],
+            windowsHide: true
+          });
+          let fallbackOutput = "";
+          fallbackChild.stdout?.on("data", (data) => {
+            fallbackOutput += data.toString();
+          });
+          fallbackChild.on("close", (fallbackCode) => {
+            if (fallbackCode === 0 && fallbackOutput.trim()) {
+              resolve8(fallbackOutput.trim());
+            } else {
+              logger.warn("[auto-update] No tags found on develop branch");
+              resolve8("unknown");
+            }
+          });
+          fallbackChild.on("error", () => resolve8("unknown"));
+        }
+      });
+      tagChild.on("error", (err) => {
+        logger.error("[auto-update] Git tag error", { error: err.message });
+        resolve8("unknown");
+      });
+    });
+  });
+}
 function createAutoUpdateRoutes(options = {}) {
   const router = Router9();
-  router.get("/check", async (_req, res) => {
+  router.get("/check", async (req, res) => {
     const isService = isRunningAsService();
+    const isDev = isDevMode();
     const current = VERSION;
+    const forceRefresh = req.query["force"] === "true";
+    if (!forceRefresh && versionCache.data && Date.now() - versionCache.timestamp < CACHE_TTL_MS) {
+      res.json({ ...versionCache.data, isService });
+      return;
+    }
     try {
-      const latest = await new Promise((resolve8, reject) => {
+      const latest = isDev ? await getLatestDevelopVersion() : await new Promise((resolve8, reject) => {
         const win = process.platform === "win32";
         const child = spawn2(win ? "npm view openfox version" : "npm", win ? [] : ["view", "openfox", "version"], {
           stdio: ["ignore", "pipe", "pipe"],
@@ -4295,9 +4430,15 @@ function createAutoUpdateRoutes(options = {}) {
           reject(new Error("npm view timed out"));
         }, 1e4);
       });
-      const isUpdateAvailable = current !== latest;
+      const currentVersion = isDev ? current.replace(/-dev$/, "") : current;
+      const latestVersion = latest.replace(/^v/, "");
+      const isUpdateAvailable = currentVersion !== latestVersion;
+      const now = Date.now();
+      versionCache.data = { current, latest, isUpdateAvailable, isService };
+      versionCache.timestamp = now;
       res.json({ current, latest, isUpdateAvailable, isService });
-    } catch {
+    } catch (err) {
+      logger.error("[auto-update] Error in version check", { error: err instanceof Error ? err.message : String(err) });
       res.json({ current, latest: current, isUpdateAvailable: false, isService });
     }
   });
@@ -4889,7 +5030,7 @@ async function createServerHandle(config3) {
       setMcpTools(mcpTools);
       logger.info("MCP tools registered", { count: mcpTools.length });
     }
-    const { signalMcpReady } = await import("./server-G2J4RAXL.js");
+    const { signalMcpReady } = await import("./server-T2YP3VT2.js");
     signalMcpReady();
   });
   const app = express();
@@ -5050,7 +5191,7 @@ async function createServerHandle(config3) {
     const { getProject: getProject2 } = await import("./projects-LHRNCUGW.js");
     const project = getProject2(req.params.id);
     if (!project) return res.status(404).json({ error: "Project not found" });
-    const { listBranches } = await import("./workspace-ET3FHZYN.js");
+    const { listBranches } = await import("./workspace-6QTTUMMW.js");
     const branches = await listBranches(project.workdir);
     res.json({ branches });
   });
@@ -5060,7 +5201,7 @@ async function createServerHandle(config3) {
     if (!project) return res.status(404).json({ error: "Project not found" });
     const { branch } = req.body;
     if (!branch || typeof branch !== "string") return res.status(400).json({ error: "branch is required" });
-    const { checkoutBranch } = await import("./workspace-ET3FHZYN.js");
+    const { checkoutBranch } = await import("./workspace-6QTTUMMW.js");
     try {
       await checkoutBranch(project.workdir, branch);
       res.json({ branch });
@@ -5074,7 +5215,7 @@ async function createServerHandle(config3) {
     if (!project) return res.status(404).json({ error: "Project not found" });
     const { name } = req.body;
     if (!name || typeof name !== "string") return res.status(400).json({ error: "name is required" });
-    const { createBranch } = await import("./workspace-ET3FHZYN.js");
+    const { createBranch } = await import("./workspace-6QTTUMMW.js");
     try {
       await createBranch(project.workdir, name);
       res.json({ branch: name });
@@ -5082,11 +5223,49 @@ async function createServerHandle(config3) {
       res.status(400).json({ error: err instanceof Error ? err.message : "Failed to create branch" });
     }
   });
+  app.get("/api/sessions/:id/branches", async (req, res) => {
+    const session = sessionManager.getSession(req.params.id);
+    if (!session) return res.status(404).json({ error: "Session not found" });
+    const effectiveWorkdir = session.workspace ?? session.workdir;
+    const { listBranches } = await import("./workspace-6QTTUMMW.js");
+    const branches = await listBranches(effectiveWorkdir);
+    res.json({ branches });
+  });
+  app.post("/api/sessions/:id/checkout", async (req, res) => {
+    const session = sessionManager.getSession(req.params.id);
+    if (!session) return res.status(404).json({ error: "Session not found" });
+    const { branch } = req.body;
+    if (!branch || typeof branch !== "string") return res.status(400).json({ error: "branch is required" });
+    const effectiveWorkdir = session.workspace ?? session.workdir;
+    const { checkoutBranch, validateRef } = await import("./workspace-6QTTUMMW.js");
+    try {
+      await validateRef(effectiveWorkdir, branch);
+      await checkoutBranch(effectiveWorkdir, branch);
+      res.json({ branch });
+    } catch (err) {
+      res.status(400).json({ error: err instanceof Error ? err.message : "Failed to checkout branch" });
+    }
+  });
+  app.post("/api/sessions/:id/checkout-new", async (req, res) => {
+    const session = sessionManager.getSession(req.params.id);
+    if (!session) return res.status(404).json({ error: "Session not found" });
+    const { name } = req.body;
+    if (!name || typeof name !== "string") return res.status(400).json({ error: "name is required" });
+    const effectiveWorkdir = session.workspace ?? session.workdir;
+    const { createBranch, validateRef } = await import("./workspace-6QTTUMMW.js");
+    try {
+      await validateRef(effectiveWorkdir, name);
+      await createBranch(effectiveWorkdir, name);
+      res.json({ branch: name });
+    } catch (err) {
+      res.status(400).json({ error: err instanceof Error ? err.message : "Failed to create branch" });
+    }
+  });
   app.get("/api/projects/:id/workspaces", async (req, res) => {
     const { getProject: getProject2 } = await import("./projects-LHRNCUGW.js");
     const project = getProject2(req.params.id);
     if (!project) return res.status(404).json({ error: "Project not found" });
-    const { listWorkspaces } = await import("./workspace-ET3FHZYN.js");
+    const { listWorkspaces } = await import("./workspace-6QTTUMMW.js");
     const all = await listWorkspaces(project.name);
     const workspacesList = all.filter((ws) => ws.path !== project.workdir);
     res.json({ workspaces: workspacesList });
@@ -5151,7 +5330,7 @@ async function createServerHandle(config3) {
   app.get("/api/sessions/:id", async (req, res) => {
     const { getEventStore: getEventStore2 } = await import("./events-AEQ6GQXI.js");
     const { buildMessagesFromStoredEvents } = await import("./folding-ONH3D4OK.js");
-    const { getPendingQuestionsForSession } = await import("./tools-X52DFUS6.js");
+    const { getPendingQuestionsForSession } = await import("./tools-APW7MY4E.js");
     const session = sessionManager.getSession(req.params.id);
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
@@ -5170,8 +5349,8 @@ async function createServerHandle(config3) {
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-LK5RUAGO.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-X52DFUS6.js");
+    const { stopSessionExecution } = await import("./chat-handler-ETKFIHUO.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-APW7MY4E.js");
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
     abortSession(sessionId);
@@ -5359,7 +5538,7 @@ async function createServerHandle(config3) {
     if (!callId || approved === void 0) {
       return res.status(400).json({ error: "callId and approved are required" });
     }
-    const { providePathConfirmation } = await import("./tools-X52DFUS6.js");
+    const { providePathConfirmation } = await import("./tools-APW7MY4E.js");
     const result = providePathConfirmation(callId, approved, alwaysAllow);
     if (!result.found) {
       return res.status(404).json({ error: "No pending path confirmation with that ID" });
@@ -5367,7 +5546,7 @@ async function createServerHandle(config3) {
     const { getEventStore: getEventStore2 } = await import("./events-AEQ6GQXI.js");
     const { buildMessagesFromStoredEvents, foldPendingConfirmations } = await import("./folding-ONH3D4OK.js");
     const { createSessionStateMessage } = await import("./protocol-4QFU7WAI.js");
-    const { getPendingQuestionsForSession } = await import("./tools-X52DFUS6.js");
+    const { getPendingQuestionsForSession } = await import("./tools-APW7MY4E.js");
     const eventStore = getEventStore2();
     const events = eventStore.getEvents(sessionId);
     const messages = buildMessagesFromStoredEvents(events);
@@ -5388,7 +5567,7 @@ async function createServerHandle(config3) {
     if (!skip && typeof answer !== "string") {
       return res.status(400).json({ error: "answer is required when not skipping" });
     }
-    const { provideAnswer } = await import("./tools-X52DFUS6.js");
+    const { provideAnswer } = await import("./tools-APW7MY4E.js");
     const found = provideAnswer(callId, answer ?? "", skip ?? false);
     if (!found) {
       return res.status(404).json({ error: "No pending question with that ID" });
@@ -5448,7 +5627,7 @@ async function createServerHandle(config3) {
       backend: activeProvider?.backend ?? llmClient.getBackend(),
       model: llmClient.getModel()
     };
-    const { runAgentTurn, TurnMetrics } = await import("./orchestrator-RTZVMWQV.js");
+    const { runAgentTurn, TurnMetrics } = await import("./orchestrator-O2YAAZ3U.js");
     runAgentTurn(
       {
         sessionManager,
@@ -5486,8 +5665,8 @@ async function createServerHandle(config3) {
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-LK5RUAGO.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-X52DFUS6.js");
+    const { stopSessionExecution } = await import("./chat-handler-ETKFIHUO.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-APW7MY4E.js");
     const queuedMessages = sessionManager.getQueueState(sessionId);
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
@@ -5518,10 +5697,13 @@ async function createServerHandle(config3) {
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { messageId } = req.body;
+    const { messageId, content } = req.body;
     if (typeof messageId !== "string" || !messageId) {
       return res.status(400).json({ error: "messageId is required" });
     }
+    if (content !== void 0 && (typeof content !== "string" || !content.trim())) {
+      return res.status(400).json({ error: "content must be a non-empty string if provided" });
+    }
     const { getEventStore: getEventStore2 } = await import("./events-AEQ6GQXI.js");
     const { buildMessagesFromStoredEvents } = await import("./folding-ONH3D4OK.js");
     const eventStore = getEventStore2();
@@ -5537,7 +5719,7 @@ async function createServerHandle(config3) {
     }
     const { truncateSessionMessages } = await import("./events-AEQ6GQXI.js");
     truncateSessionMessages(sessionId, msgIndex - 1);
-    sessionManager.queueMessage(sessionId, "asap", msg.content, msg.attachments, msg.messageKind);
+    sessionManager.queueMessage(sessionId, "asap", content ?? msg.content, msg.attachments, msg.messageKind);
     res.json({ success: true });
   });
   app.post("/api/sessions/:id/chat", async (req, res) => {
@@ -6110,7 +6292,7 @@ async function createServerHandle(config3) {
   });
   async function rebuildMcpTools() {
     const { createMcpTools: createMcpTools2 } = await import("./tool-adapter-MOGEI6TP.js");
-    const { setMcpTools: setMcpTools2 } = await import("./tools-X52DFUS6.js");
+    const { setMcpTools: setMcpTools2 } = await import("./tools-APW7MY4E.js");
     const mcpTools = createMcpTools2(mcpManager);
     setMcpTools2(mcpTools);
   }
@@ -6494,7 +6676,7 @@ async function createServerHandle(config3) {
     const state = sessionManager.getContextState(sessionId);
     wssExports.broadcastForSession(sessionId, createContextStateMessage(state));
   });
-  const { QueueProcessor } = await import("./processor-3O26I7DO.js");
+  const { QueueProcessor } = await import("./processor-FKAS3K4L.js");
   const queueProcessor = new QueueProcessor({
     sessionManager,
     providerManager,
@@ -6574,4 +6756,4 @@ export {
   createServerHandle,
   createServer
 };
-//# sourceMappingURL=chunk-EYXDM2FY.js.map
+//# sourceMappingURL=chunk-QFR6JF32.js.map