openfox 2.0.73 → 2.0.75

package/dist/{chunk-EYXDM2FY.js → chunk-MIJX54CG.js}

@@ -21,7 +21,7 @@ import {
   tokenFromPassword,
   verifyPassword,
   workflowExists
-} from "./chunk-TK4BZIXA.js";
+} from "./chunk-LKUAKQZY.js";
 import {
   agentExists,
   createToolRegistry,
@@ -66,7 +66,10 @@ import {
   setSkillEnabled,
   skillExists,
   updateOwnedSkill
-} from "./chunk-GMF36EZ3.js";
+} from "./chunk-6ZMGWDOD.js";
+import {
+  createMcpTools
+} from "./chunk-NWO6GRYE.js";
 import {
   deleteWorkspace,
   ensureWorkspace,
@@ -76,8 +79,9 @@ import {
   loadWorkspaceConfig,
   runGit,
   saveWorkspaceConfig,
+  validateWorkspaceName,
   workspaceExists
-} from "./chunk-X2Y3AJPP.js";
+} from "./chunk-MF3UW36X.js";
 import {
   EventEmitter
 } from "./chunk-EU3WWTFH.js";
@@ -90,11 +94,17 @@ import {
   getProject
 } from "./chunk-UV3EMWL4.js";
 import {
-  createMcpTools
-} from "./chunk-NWO6GRYE.js";
+  getPathSeparator,
+  isAbsolutePath
+} from "./chunk-S7O77CVO.js";
+import {
+  deleteSetting,
+  getSetting,
+  setSetting
+} from "./chunk-QNKXZH3Z.js";
 import {
   VERSION
-} from "./chunk-NE7OWIIO.js";
+} from "./chunk-6COWK53A.js";
 import {
   createSession,
   deleteSession,
@@ -122,22 +132,13 @@ import {
   updateSessionProvider,
   updateSessionRunning,
   updateSessionWorkdir
-} from "./chunk-6XKM25OT.js";
-import {
-  createContextStateMessage
-} from "./chunk-NOU2QIL5.js";
-import {
-  getPathSeparator,
-  isAbsolutePath
-} from "./chunk-S7O77CVO.js";
-import {
-  deleteSetting,
-  getSetting,
-  setSetting
-} from "./chunk-QNKXZH3Z.js";
+} from "./chunk-YFFP4DR4.js";
 import {
   initDatabase
 } from "./chunk-I4RWK2L2.js";
+import {
+  createContextStateMessage
+} from "./chunk-O3NUNU4H.js";
 import {
   createProviderManager,
   detectModel,
@@ -162,7 +163,7 @@ import {
 } from "./chunk-K44MW7JJ.js";
 import {
   createServerMessage
-} from "./chunk-YD6NDTKF.js";
+} from "./chunk-5GOOSZX7.js";
 import {
   getGlobalConfigDir
 } from "./chunk-CQGTEGKL.js";
@@ -2557,6 +2558,8 @@ var SessionManager = class {
   dynamicContextChangedStore = /* @__PURE__ */ new Map();
   debugDumpStore = /* @__PURE__ */ new Map();
   warmedUpSessions = /* @__PURE__ */ new Set();
+  switchLocks = /* @__PURE__ */ new Map();
+  workspaceCreationLocks = /* @__PURE__ */ new Map();
   constructor(providerManager) {
     this.providerManager = providerManager;
   }
@@ -3213,89 +3216,135 @@ var SessionManager = class {
    * Switch to a workspace. Target can be "original" (project root) or a workspace name.
    * If the workspace doesn't exist yet, it's created first.
    * Emits a single type of event — switching is always "opening" a workspace.
+   * Switches are serialized per-session to prevent race conditions.
    */
   async switchWorkspace(sessionId, target, branch) {
-    const session = this.requireSession(sessionId);
-    const project = getProject(session.projectId);
-    if (!project) throw new Error(`Project not found: ${session.projectId}`);
-    if (target === "original" && !session.workspace) return session;
-    if (target !== "original" && session.workspace?.endsWith(`/${target}`)) return session;
-    const previousPath = session.workspace;
-    if (previousPath) {
+    if (target !== "original") {
+      validateWorkspaceName(target);
+    }
+    const existingLock = this.switchLocks.get(sessionId);
+    if (existingLock) {
+      await existingLock;
+    }
+    const lockPromise = (async () => {
+      const session = this.requireSession(sessionId);
+      const project = getProject(session.projectId);
+      if (!project) throw new Error(`Project not found: ${session.projectId}`);
+      if (target === "original" && !session.workspace) return session;
+      if (target !== "original" && session.workspace?.split("/").pop() === target) return session;
+      const previousPath = session.workspace;
+      if (previousPath) {
+        try {
+          await devServerManager.stop(previousPath);
+        } catch (err) {
+          logger.error("Error stopping dev server for workspace switch", {
+            sessionId,
+            workspace: previousPath,
+            error: err
+          });
+        }
+      }
+      if (target === "original") {
+        updateSessionWorkdir(sessionId, project.workdir, null);
+      } else {
+        const createLockKey = `${project.name}:${target}`;
+        const existingCreateLock = this.workspaceCreationLocks.get(createLockKey);
+        if (existingCreateLock) {
+          await existingCreateLock;
+        }
+        const createLockPromise = (async () => {
+          const exists = await workspaceExists(project.name, target);
+          if (!exists) {
+            await ensureWorkspace(project.workdir, target, project.name, branch);
+          }
+        })();
+        this.workspaceCreationLocks.set(createLockKey, createLockPromise);
+        try {
+          await createLockPromise;
+        } finally {
+          this.workspaceCreationLocks.delete(createLockKey);
+        }
+        const wsPath = resolve2(getWorkspacesDir(project.name), target);
+        updateSessionWorkdir(sessionId, project.workdir, wsPath);
+      }
       try {
-        await devServerManager.stop(previousPath);
+        await shutdownLspManager(sessionId);
       } catch (err) {
-        logger.error("Error stopping dev server for workspace switch", {
-          sessionId,
-          workspace: previousPath,
-          error: err
-        });
-      }
-    }
-    if (target === "original") {
-      updateSessionWorkdir(sessionId, project.workdir, null);
-    } else {
-      const exists = await workspaceExists(project.name, target);
-      if (!exists) {
-        await ensureWorkspace(project.workdir, target, project.name, branch);
+        logger.error("Error shutting down LSP for workspace switch", { sessionId, error: err });
       }
-      const wsPath = resolve2(getWorkspacesDir(project.name), target);
-      updateSessionWorkdir(sessionId, project.workdir, wsPath);
-    }
-    try {
-      await shutdownLspManager(sessionId);
-    } catch (err) {
-      logger.error("Error shutting down LSP for workspace switch", { sessionId, error: err });
-    }
-    const effectiveWorkdir = target === "original" ? project.workdir : resolve2(getWorkspacesDir(project.name), target);
-    const actualBranch = await getGitBranch(effectiveWorkdir);
-    let stalenessHint = "";
-    if (target !== "original" && actualBranch) {
-      await runGit(effectiveWorkdir, ["fetch", "origin", "--no-tags", "--quiet"]).catch(() => {
-      });
-      const behind = await getCommitsBehind(effectiveWorkdir, actualBranch);
-      if (behind !== null && behind > 0) {
-        const plural = behind === 1 ? "" : "s";
-        stalenessHint = `
+      const effectiveWorkdir = target === "original" ? project.workdir : resolve2(getWorkspacesDir(project.name), target);
+      const actualBranch = await getGitBranch(effectiveWorkdir);
+      let stalenessHint = "";
+      if (target !== "original" && actualBranch) {
+        await runGit(effectiveWorkdir, ["fetch", "origin", "--no-tags", "--quiet"]).catch(() => {
+        });
+        const behind = await getCommitsBehind(effectiveWorkdir, actualBranch);
+        if (behind !== null && behind > 0) {
+          const plural = behind === 1 ? "" : "s";
+          stalenessHint = `
 (${behind} commit${plural} behind ${actualBranch} on main workspace \u2014 run \`git pull\` to sync)`;
+        }
       }
-    }
-    const wsLabel = target === "original" ? "original" : target;
-    const reminderContent = `<system-reminder>
+      const wsLabel = target === "original" ? "original" : target;
+      const reminderContent = `<system-reminder>
 This session is now operating in workspace "${wsLabel}" on branch "${actualBranch ?? "unknown"}" at ${effectiveWorkdir}.${stalenessHint}
 All file and git operations should use this directory.
 </system-reminder>`;
-    this.addMessage(sessionId, {
-      role: "user",
-      content: reminderContent,
-      isSystemGenerated: true,
-      messageKind: "auto-prompt",
-      metadata: {
-        type: "workspace",
-        name: "Workspace",
-        color: "#22c55e",
-        kind: "definition",
-        workspaceName: wsLabel,
-        ...actualBranch ? { branchName: actualBranch } : {}
+      this.addMessage(sessionId, {
+        role: "user",
+        content: reminderContent,
+        isSystemGenerated: true,
+        messageKind: "auto-prompt",
+        metadata: {
+          type: "workspace",
+          name: "Workspace",
+          color: "#22c55e",
+          kind: "definition",
+          workspaceName: wsLabel,
+          ...actualBranch ? { branchName: actualBranch } : {}
+        }
+      });
+      const updated = this.requireSession(sessionId);
+      this.emit({ type: "session_updated", session: updated });
+      return updated;
+    })();
+    this.switchLocks.set(sessionId, lockPromise);
+    lockPromise.finally(() => {
+      if (this.switchLocks.get(sessionId) === lockPromise) {
+        this.switchLocks.delete(sessionId);
       }
     });
-    const updated = this.requireSession(sessionId);
-    this.emit({ type: "session_updated", session: updated });
-    return updated;
+    return lockPromise;
   }
   /**
    * Delete a workspace by name. If the session is currently in that workspace,
    * switches to original first. Throws if target is "original".
+   * Refuses deletion if other sessions reference this workspace.
    */
   async deleteWorkspace(sessionId, target) {
     if (target === "original") throw new Error("Cannot delete the original workspace");
+    validateWorkspaceName(target);
     const session = this.requireSession(sessionId);
     const project = getProject(session.projectId);
     if (!project) throw new Error(`Project not found: ${session.projectId}`);
+    const otherSessionsUsingIt = this.listSessions().filter(
+      (s) => s.id !== sessionId && s.workspace?.split("/").pop() === target
+    );
+    if (otherSessionsUsingIt.length > 0) {
+      const otherIds = otherSessionsUsingIt.map((s) => s.id).join(", ");
+      throw new Error(
+        `Workspace "${target}" is in use by other session(s): ${otherIds}. Switch them to original first.`
+      );
+    }
     const currentWsName = session.workspace?.split("/").pop();
     if (currentWsName === target) {
       await this.switchWorkspace(sessionId, "original");
     }
+    const effectivePath = resolve2(getWorkspacesDir(project.name), target);
+    try {
+      await devServerManager.stop(effectivePath);
+    } catch {
+    }
     await deleteWorkspace(project.name, target);
     const updated = this.requireSession(sessionId);
     this.emit({ type: "session_updated", session: updated });
@@ -4252,6 +4301,11 @@ function fuzzyScore(filePath, query) {
 import { Router as Router9 } from "express";
 import { spawn as spawn2 } from "child_process";
 var updateInProgress = false;
+var CACHE_TTL_MS = 60 * 60 * 1e3;
+var versionCache = {
+  data: null,
+  timestamp: 0
+};
 function isRunningAsService() {
   return process.env["OPENFOX_SERVICE"] === "true";
 }
@@ -4265,13 +4319,94 @@ async function checkAuth(req, opts) {
   }
   return true;
 }
+function isDevMode() {
+  return process.env["NODE_ENV"] === "development";
+}
+async function getRemote() {
+  return new Promise((resolve8) => {
+    const child = spawn2("git", ["remote"], {
+      stdio: ["ignore", "pipe", "pipe"],
+      windowsHide: true
+    });
+    let output = "";
+    child.stdout?.on("data", (data) => {
+      output += data.toString();
+    });
+    child.on("close", () => {
+      const remotes = output.trim().split("\n").map((r) => r.trim()).filter(Boolean);
+      if (remotes.includes("upstream")) resolve8("upstream");
+      else if (remotes.includes("origin")) resolve8("origin");
+      else resolve8("origin");
+    });
+    child.on("error", () => resolve8("origin"));
+  });
+}
+async function getLatestDevelopVersion() {
+  const remote = await getRemote();
+  return new Promise((resolve8) => {
+    const fetchChild = spawn2("git", ["fetch", remote, "develop", "--no-tags"], {
+      stdio: ["ignore", "pipe", "pipe"],
+      windowsHide: true
+    });
+    fetchChild.on("error", (err) => {
+      logger.error("[auto-update] Git fetch error", { error: err.message });
+      resolve8("unknown");
+    });
+    fetchChild.on("close", (code) => {
+      if (code !== 0) {
+        logger.warn("[auto-update] Git fetch failed, trying local tags...");
+      }
+      const tagChild = spawn2("git", ["describe", "--tags", "--abbrev=0", `${remote}/develop`], {
+        stdio: ["ignore", "pipe", "pipe"],
+        windowsHide: true
+      });
+      let tagOutput = "";
+      tagChild.stdout?.on("data", (data) => {
+        tagOutput += data.toString();
+      });
+      tagChild.on("close", (tagCode) => {
+        if (tagCode === 0 && tagOutput.trim()) {
+          resolve8(tagOutput.trim());
+        } else {
+          const fallbackChild = spawn2("git", ["describe", "--tags", "--abbrev=0", "develop"], {
+            stdio: ["ignore", "pipe", "pipe"],
+            windowsHide: true
+          });
+          let fallbackOutput = "";
+          fallbackChild.stdout?.on("data", (data) => {
+            fallbackOutput += data.toString();
+          });
+          fallbackChild.on("close", (fallbackCode) => {
+            if (fallbackCode === 0 && fallbackOutput.trim()) {
+              resolve8(fallbackOutput.trim());
+            } else {
+              logger.warn("[auto-update] No tags found on develop branch");
+              resolve8("unknown");
+            }
+          });
+          fallbackChild.on("error", () => resolve8("unknown"));
+        }
+      });
+      tagChild.on("error", (err) => {
+        logger.error("[auto-update] Git tag error", { error: err.message });
+        resolve8("unknown");
+      });
+    });
+  });
+}
 function createAutoUpdateRoutes(options = {}) {
   const router = Router9();
-  router.get("/check", async (_req, res) => {
+  router.get("/check", async (req, res) => {
     const isService = isRunningAsService();
+    const isDev = isDevMode();
     const current = VERSION;
+    const forceRefresh = req.query["force"] === "true";
+    if (!forceRefresh && versionCache.data && Date.now() - versionCache.timestamp < CACHE_TTL_MS) {
+      res.json({ ...versionCache.data, isService });
+      return;
+    }
     try {
-      const latest = await new Promise((resolve8, reject) => {
+      const latest = isDev ? await getLatestDevelopVersion() : await new Promise((resolve8, reject) => {
         const win = process.platform === "win32";
         const child = spawn2(win ? "npm view openfox version" : "npm", win ? [] : ["view", "openfox", "version"], {
           stdio: ["ignore", "pipe", "pipe"],
@@ -4295,9 +4430,15 @@ function createAutoUpdateRoutes(options = {}) {
           reject(new Error("npm view timed out"));
         }, 1e4);
       });
-      const isUpdateAvailable = current !== latest;
+      const currentVersion = isDev ? current.replace(/-dev$/, "") : current;
+      const latestVersion = latest.replace(/^v/, "");
+      const isUpdateAvailable = currentVersion !== latestVersion;
+      const now = Date.now();
+      versionCache.data = { current, latest, isUpdateAvailable, isService };
+      versionCache.timestamp = now;
       res.json({ current, latest, isUpdateAvailable, isService });
-    } catch {
+    } catch (err) {
+      logger.error("[auto-update] Error in version check", { error: err instanceof Error ? err.message : String(err) });
       res.json({ current, latest: current, isUpdateAvailable: false, isService });
     }
   });
@@ -4791,6 +4932,53 @@ function createPluginRoutes(options) {
   return router;
 }
 
+// src/server/utils/wsl.ts
+import { readFileSync as readFileSync3 } from "fs";
+var cached = null;
+function readEtcOsRelease() {
+  try {
+    const content = readFileSync3("/etc/os-release", "utf-8");
+    const result = {};
+    for (const line of content.split("\n")) {
+      const m = line.match(/^([A-Za-z_][A-Za-z_0-9]*)=(.*)$/);
+      if (m) {
+        let val = m[2] ?? "";
+        if (val.startsWith('"') && val.endsWith('"') || val.startsWith("'") && val.endsWith("'")) {
+          val = val.slice(1, -1);
+        }
+        result[m[1]] = val;
+      }
+    }
+    return result;
+  } catch {
+    return null;
+  }
+}
+function detectWsl() {
+  if (cached) return cached;
+  if (process.platform === "win32") {
+    cached = { isWSL: false, wslDistro: "" };
+    return cached;
+  }
+  const distro = process.env["WSL_DISTRO_NAME"];
+  if (distro) {
+    cached = { isWSL: true, wslDistro: distro };
+    return cached;
+  }
+  try {
+    const osrelease = readFileSync3("/proc/sys/kernel/osrelease", "utf-8");
+    if (osrelease.toLowerCase().includes("wsl") || osrelease.toLowerCase().includes("microsoft")) {
+      const osInfo = readEtcOsRelease();
+      const name = osInfo?.["NAME"] ?? "Ubuntu";
+      cached = { isWSL: true, wslDistro: name };
+      return cached;
+    }
+  } catch {
+  }
+  cached = { isWSL: false, wslDistro: "" };
+  return cached;
+}
+
 // src/server/index.ts
 var __dirname3 = dirname8(fileURLToPath7(import.meta.url));
 async function createServerHandle(config3) {
@@ -4819,6 +5007,7 @@ async function createServerHandle(config3) {
   if (useMock) {
     logger.info("Using MOCK LLM client - deterministic responses for testing");
   }
+  const platformInfo = detectWsl();
   async function initLLM() {
     const llmClient = getLLMClient();
     const backend = config3.llm.backend;
@@ -4889,7 +5078,7 @@ async function createServerHandle(config3) {
       setMcpTools(mcpTools);
       logger.info("MCP tools registered", { count: mcpTools.length });
     }
-    const { signalMcpReady } = await import("./server-G2J4RAXL.js");
+    const { signalMcpReady } = await import("./server-TJ3PP5EW.js");
     signalMcpReady();
   });
   const app = express();
@@ -5050,7 +5239,7 @@ async function createServerHandle(config3) {
     const { getProject: getProject2 } = await import("./projects-LHRNCUGW.js");
     const project = getProject2(req.params.id);
     if (!project) return res.status(404).json({ error: "Project not found" });
-    const { listBranches } = await import("./workspace-ET3FHZYN.js");
+    const { listBranches } = await import("./workspace-6QTTUMMW.js");
     const branches = await listBranches(project.workdir);
     res.json({ branches });
   });
@@ -5060,7 +5249,7 @@ async function createServerHandle(config3) {
     if (!project) return res.status(404).json({ error: "Project not found" });
     const { branch } = req.body;
     if (!branch || typeof branch !== "string") return res.status(400).json({ error: "branch is required" });
-    const { checkoutBranch } = await import("./workspace-ET3FHZYN.js");
+    const { checkoutBranch } = await import("./workspace-6QTTUMMW.js");
     try {
       await checkoutBranch(project.workdir, branch);
       res.json({ branch });
@@ -5074,7 +5263,7 @@ async function createServerHandle(config3) {
     if (!project) return res.status(404).json({ error: "Project not found" });
     const { name } = req.body;
     if (!name || typeof name !== "string") return res.status(400).json({ error: "name is required" });
-    const { createBranch } = await import("./workspace-ET3FHZYN.js");
+    const { createBranch } = await import("./workspace-6QTTUMMW.js");
     try {
       await createBranch(project.workdir, name);
       res.json({ branch: name });
@@ -5082,17 +5271,56 @@ async function createServerHandle(config3) {
       res.status(400).json({ error: err instanceof Error ? err.message : "Failed to create branch" });
     }
   });
+  app.get("/api/sessions/:id/branches", async (req, res) => {
+    const session = sessionManager.getSession(req.params.id);
+    if (!session) return res.status(404).json({ error: "Session not found" });
+    const effectiveWorkdir = session.workspace ?? session.workdir;
+    const { listBranches } = await import("./workspace-6QTTUMMW.js");
+    const branches = await listBranches(effectiveWorkdir);
+    res.json({ branches });
+  });
+  app.post("/api/sessions/:id/checkout", async (req, res) => {
+    const session = sessionManager.getSession(req.params.id);
+    if (!session) return res.status(404).json({ error: "Session not found" });
+    const { branch } = req.body;
+    if (!branch || typeof branch !== "string") return res.status(400).json({ error: "branch is required" });
+    const effectiveWorkdir = session.workspace ?? session.workdir;
+    const { checkoutBranch, validateRef } = await import("./workspace-6QTTUMMW.js");
+    try {
+      await validateRef(effectiveWorkdir, branch);
+      await checkoutBranch(effectiveWorkdir, branch);
+      res.json({ branch });
+    } catch (err) {
+      res.status(400).json({ error: err instanceof Error ? err.message : "Failed to checkout branch" });
+    }
+  });
+  app.post("/api/sessions/:id/checkout-new", async (req, res) => {
+    const session = sessionManager.getSession(req.params.id);
+    if (!session) return res.status(404).json({ error: "Session not found" });
+    const { name } = req.body;
+    if (!name || typeof name !== "string") return res.status(400).json({ error: "name is required" });
+    const effectiveWorkdir = session.workspace ?? session.workdir;
+    const { createBranch, validateRef } = await import("./workspace-6QTTUMMW.js");
+    try {
+      await validateRef(effectiveWorkdir, name);
+      await createBranch(effectiveWorkdir, name);
+      res.json({ branch: name });
+    } catch (err) {
+      res.status(400).json({ error: err instanceof Error ? err.message : "Failed to create branch" });
+    }
+  });
   app.get("/api/projects/:id/workspaces", async (req, res) => {
     const { getProject: getProject2 } = await import("./projects-LHRNCUGW.js");
     const project = getProject2(req.params.id);
     if (!project) return res.status(404).json({ error: "Project not found" });
-    const { listWorkspaces } = await import("./workspace-ET3FHZYN.js");
+    const { listWorkspaces } = await import("./workspace-6QTTUMMW.js");
     const all = await listWorkspaces(project.name);
     const workspacesList = all.filter((ws) => ws.path !== project.workdir);
     res.json({ workspaces: workspacesList });
   });
   app.get("/api/sessions", async (req, res) => {
-    const { getRecentUserPromptsForSession } = await import("./events-AEQ6GQXI.js");
+    const { getRecentUserPromptsForSession } = await import("./events-X353XCPN.js");
+    const { getPendingConfirmationsBySession } = await import("./path-security-3FAIPJSV.js");
     const projectId = req.query["projectId"];
     const limit = Math.min(parseInt(req.query["limit"]) || 20, 100);
     const offset = parseInt(req.query["offset"]) || 0;
@@ -5109,7 +5337,15 @@ async function createServerHandle(config3) {
       ...session,
       recentUserPrompts: getRecentUserPromptsForSession(session.id, 10)
     }));
-    res.json({ sessions: sessionsWithPrompts, hasMore });
+    const allPending = getPendingConfirmationsBySession();
+    const pendingConfirmationsBySession = {};
+    for (const s of sessions) {
+      const confs = allPending[s.id];
+      if (confs) {
+        pendingConfirmationsBySession[s.id] = confs;
+      }
+    }
+    res.json({ sessions: sessionsWithPrompts, hasMore, pendingConfirmationsBySession });
   });
   app.post("/api/sessions", async (req, res) => {
     const { projectId, title } = req.body;
@@ -5122,6 +5358,29 @@ async function createServerHandle(config3) {
     }
     const { providerId, model } = parseDefaultModelSelection(config3.defaultModelSelection);
     const session = sessionManager.createSession(projectId, title, providerId ?? null, model ?? null);
+    wssExports.broadcastAll({
+      type: "session.created",
+      sessionId: session.id,
+      payload: {
+        session: {
+          id: session.id,
+          projectId: session.projectId,
+          title: session.metadata.title,
+          workdir: session.workdir,
+          workspace: session.workspace,
+          mode: session.mode,
+          phase: session.phase,
+          isRunning: session.isRunning,
+          providerId: session.providerId,
+          providerModel: session.providerModel,
+          createdAt: session.createdAt,
+          updatedAt: session.updatedAt,
+          criteriaCount: session.criteria.length,
+          criteriaCompleted: session.criteria.filter((c) => c.status.type === "passed").length,
+          messageCount: session.messageCount ?? session.messages.length
+        }
+      }
+    });
     res.status(201).json({ session });
   });
   app.post("/api/sessions/:id/switch-workspace", async (req, res) => {
@@ -5149,9 +5408,9 @@ async function createServerHandle(config3) {
     }
   });
   app.get("/api/sessions/:id", async (req, res) => {
-    const { getEventStore: getEventStore2 } = await import("./events-AEQ6GQXI.js");
-    const { buildMessagesFromStoredEvents } = await import("./folding-ONH3D4OK.js");
-    const { getPendingQuestionsForSession } = await import("./tools-X52DFUS6.js");
+    const { getEventStore: getEventStore2 } = await import("./events-X353XCPN.js");
+    const { buildMessagesFromStoredEvents, foldPendingConfirmations } = await import("./folding-ONH3D4OK.js");
+    const { getPendingQuestionsForSession } = await import("./tools-RZ464GUJ.js");
     const session = sessionManager.getSession(req.params.id);
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
@@ -5162,7 +5421,8 @@ async function createServerHandle(config3) {
     const contextState = sessionManager.getContextState(req.params.id);
     const queueState = sessionManager.getQueueState(req.params.id);
     const pendingQuestions = getPendingQuestionsForSession(req.params.id);
-    res.json({ session, messages, contextState, queueState, pendingQuestions });
+    const pendingConfirmations = foldPendingConfirmations(events);
+    res.json({ session, messages, contextState, queueState, pendingQuestions, pendingConfirmations });
   });
   app.delete("/api/sessions/:id", async (req, res) => {
     const sessionId = req.params["id"];
@@ -5170,14 +5430,19 @@ async function createServerHandle(config3) {
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-LK5RUAGO.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-X52DFUS6.js");
+    const { stopSessionExecution } = await import("./chat-handler-QLMBYRDY.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-RZ464GUJ.js");
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
     abortSession(sessionId);
     cancelQuestionsForSession(sessionId, "Session deleted");
     cancelPathConfirmationsForSession(sessionId, "Session deleted");
     sessionManager.deleteSession(sessionId);
+    wssExports.broadcastAll({
+      type: "session.deleted",
+      sessionId,
+      payload: { sessionId }
+    });
     res.json({ success: true });
   });
   app.delete("/api/projects/:projectId/sessions", (req, res) => {
@@ -5187,10 +5452,15 @@ async function createServerHandle(config3) {
       return res.status(404).json({ error: "Project not found" });
     }
     sessionManager.deleteAllSessions(projectId, project.workdir);
+    wssExports.broadcastAll({
+      type: "session.deletedAll",
+      sessionId: projectId,
+      payload: {}
+    });
     res.json({ success: true });
   });
   app.post("/api/sessions/:id/provider", async (req, res) => {
-    const { getEventStore: getEventStore2 } = await import("./events-AEQ6GQXI.js");
+    const { getEventStore: getEventStore2 } = await import("./events-X353XCPN.js");
     const { buildMessagesFromStoredEvents } = await import("./folding-ONH3D4OK.js");
     const sessionId = req.params.id;
     const session = sessionManager.getSession(sessionId);
@@ -5302,7 +5572,7 @@ async function createServerHandle(config3) {
     res.json({ success: true });
   });
   app.put("/api/sessions/:id/mode", async (req, res) => {
-    const { getEventStore: getEventStore2 } = await import("./events-AEQ6GQXI.js");
+    const { getEventStore: getEventStore2 } = await import("./events-X353XCPN.js");
     const { buildMessagesFromStoredEvents } = await import("./folding-ONH3D4OK.js");
     const sessionId = req.params.id;
     const session = sessionManager.getSession(sessionId);
@@ -5359,15 +5629,15 @@ async function createServerHandle(config3) {
     if (!callId || approved === void 0) {
       return res.status(400).json({ error: "callId and approved are required" });
     }
-    const { providePathConfirmation } = await import("./tools-X52DFUS6.js");
+    const { providePathConfirmation } = await import("./tools-RZ464GUJ.js");
     const result = providePathConfirmation(callId, approved, alwaysAllow);
     if (!result.found) {
       return res.status(404).json({ error: "No pending path confirmation with that ID" });
     }
-    const { getEventStore: getEventStore2 } = await import("./events-AEQ6GQXI.js");
+    const { getEventStore: getEventStore2 } = await import("./events-X353XCPN.js");
     const { buildMessagesFromStoredEvents, foldPendingConfirmations } = await import("./folding-ONH3D4OK.js");
-    const { createSessionStateMessage } = await import("./protocol-4QFU7WAI.js");
-    const { getPendingQuestionsForSession } = await import("./tools-X52DFUS6.js");
+    const { createSessionStateMessage } = await import("./protocol-EWEVW65B.js");
+    const { getPendingQuestionsForSession } = await import("./tools-RZ464GUJ.js");
     const eventStore = getEventStore2();
     const events = eventStore.getEvents(sessionId);
     const messages = buildMessagesFromStoredEvents(events);
@@ -5378,6 +5648,11 @@ async function createServerHandle(config3) {
       const stateMsg = createSessionStateMessage(session, messages, pendingConfirmations, pendingQuestions);
       wssExports.broadcastForSession(sessionId, { ...stateMsg, sessionId });
     }
+    wssExports.broadcastAll({
+      type: "session.confirmation_resolved",
+      sessionId,
+      payload: { sessionId, callId }
+    });
     res.json({ success: true });
   });
   app.post("/api/sessions/:id/answer", async (req, res) => {
@@ -5388,7 +5663,7 @@ async function createServerHandle(config3) {
     if (!skip && typeof answer !== "string") {
       return res.status(400).json({ error: "answer is required when not skipping" });
     }
-    const { provideAnswer } = await import("./tools-X52DFUS6.js");
+    const { provideAnswer } = await import("./tools-RZ464GUJ.js");
     const found = provideAnswer(callId, answer ?? "", skip ?? false);
     if (!found) {
       return res.status(404).json({ error: "No pending question with that ID" });
@@ -5448,7 +5723,7 @@ async function createServerHandle(config3) {
       backend: activeProvider?.backend ?? llmClient.getBackend(),
       model: llmClient.getModel()
     };
-    const { runAgentTurn, TurnMetrics } = await import("./orchestrator-RTZVMWQV.js");
+    const { runAgentTurn, TurnMetrics } = await import("./orchestrator-BIFTALBG.js");
     runAgentTurn(
       {
         sessionManager,
@@ -5486,15 +5761,15 @@ async function createServerHandle(config3) {
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { stopSessionExecution } = await import("./chat-handler-LK5RUAGO.js");
-    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-X52DFUS6.js");
+    const { stopSessionExecution } = await import("./chat-handler-QLMBYRDY.js");
+    const { cancelQuestionsForSession, cancelPathConfirmationsForSession } = await import("./tools-RZ464GUJ.js");
     const queuedMessages = sessionManager.getQueueState(sessionId);
     sessionManager.clearMessageQueue(sessionId);
     stopSessionExecution(sessionId, sessionManager);
     abortSession(sessionId);
     cancelQuestionsForSession(sessionId, "Session stopped by user");
     cancelPathConfirmationsForSession(sessionId, "Session stopped by user");
-    const eventStore = (await import("./events-AEQ6GQXI.js")).getEventStore();
+    const eventStore = (await import("./events-X353XCPN.js")).getEventStore();
     eventStore.append(sessionId, { type: "running.changed", data: { isRunning: false } });
     res.json({ success: true, queuedMessages });
   });
@@ -5508,7 +5783,7 @@ async function createServerHandle(config3) {
     if (typeof messageIndex !== "number" || messageIndex < 0) {
       return res.status(400).json({ error: "messageIndex must be a non-negative number" });
     }
-    const { truncateSessionMessages } = await import("./events-AEQ6GQXI.js");
+    const { truncateSessionMessages } = await import("./events-X353XCPN.js");
     truncateSessionMessages(sessionId, messageIndex);
     res.json({ success: true });
   });
@@ -5518,11 +5793,14 @@ async function createServerHandle(config3) {
     if (!session) {
       return res.status(404).json({ error: "Session not found" });
     }
-    const { messageId } = req.body;
+    const { messageId, content } = req.body;
     if (typeof messageId !== "string" || !messageId) {
       return res.status(400).json({ error: "messageId is required" });
     }
-    const { getEventStore: getEventStore2 } = await import("./events-AEQ6GQXI.js");
+    if (content !== void 0 && (typeof content !== "string" || !content.trim())) {
+      return res.status(400).json({ error: "content must be a non-empty string if provided" });
+    }
+    const { getEventStore: getEventStore2 } = await import("./events-X353XCPN.js");
     const { buildMessagesFromStoredEvents } = await import("./folding-ONH3D4OK.js");
     const eventStore = getEventStore2();
     const events = eventStore.getEvents(sessionId);
@@ -5535,9 +5813,9 @@ async function createServerHandle(config3) {
     if (msg.role !== "user" || msg.isSystemGenerated) {
       return res.status(400).json({ error: "Can only replay user messages" });
     }
-    const { truncateSessionMessages } = await import("./events-AEQ6GQXI.js");
+    const { truncateSessionMessages } = await import("./events-X353XCPN.js");
     truncateSessionMessages(sessionId, msgIndex - 1);
-    sessionManager.queueMessage(sessionId, "asap", msg.content, msg.attachments, msg.messageKind);
+    sessionManager.queueMessage(sessionId, "asap", content ?? msg.content, msg.attachments, msg.messageKind);
     res.json({ success: true });
   });
   app.post("/api/sessions/:id/chat", async (req, res) => {
@@ -5654,7 +5932,8 @@ async function createServerHandle(config3) {
       providers: providerManager.getProviders(),
       activeProviderId: providerManager.getActiveProviderId(),
       defaultModelSelection: config3.defaultModelSelection,
-      visionFallback
+      visionFallback,
+      platform: platformInfo
     });
   });
   app.post("/api/model/refresh", async (_req, res) => {
@@ -6110,7 +6389,7 @@ async function createServerHandle(config3) {
   });
   async function rebuildMcpTools() {
     const { createMcpTools: createMcpTools2 } = await import("./tool-adapter-MOGEI6TP.js");
-    const { setMcpTools: setMcpTools2 } = await import("./tools-X52DFUS6.js");
+    const { setMcpTools: setMcpTools2 } = await import("./tools-RZ464GUJ.js");
     const mcpTools = createMcpTools2(mcpManager);
     setMcpTools2(mcpTools);
   }
@@ -6345,13 +6624,13 @@ async function createServerHandle(config3) {
     })
   );
   app.get("/api/sessions/:id/background-processes", async (req, res) => {
-    const { getSessionProcesses } = await import("./manager-24C2AXVF.js");
+    const { getSessionProcesses } = await import("./manager-5GILDCVD.js");
     const sessionId = req.params.id;
     const processes = getSessionProcesses(sessionId);
     res.json({ processes });
   });
   app.post("/api/sessions/:id/background-process/:processId/stop", async (req, res) => {
-    const { stopProcess } = await import("./manager-24C2AXVF.js");
+    const { stopProcess } = await import("./manager-5GILDCVD.js");
     const sessionId = req.params.id;
     const processId = req.params.processId;
     const session = sessionManager.getSession(sessionId);
@@ -6494,7 +6773,7 @@ async function createServerHandle(config3) {
     const state = sessionManager.getContextState(sessionId);
     wssExports.broadcastForSession(sessionId, createContextStateMessage(state));
   });
-  const { QueueProcessor } = await import("./processor-3O26I7DO.js");
+  const { QueueProcessor } = await import("./processor-MQ47QSDR.js");
   const queueProcessor = new QueueProcessor({
     sessionManager,
     providerManager,
@@ -6574,4 +6853,4 @@ export {
   createServerHandle,
   createServer
 };
-//# sourceMappingURL=chunk-EYXDM2FY.js.map
+//# sourceMappingURL=chunk-MIJX54CG.js.map