@flowriki/agent 0.1.0-beta.63 → 0.1.0-beta.65

package/dist/{chunk-QIZZ4HZ7.js → chunk-FJVNOLHT.js}

@@ -66,9 +66,10 @@ import {
   stepRefusedOn,
   targetFor,
   textIndependent,
+  usageKindOf,
   validateActors,
   webCloudOf
-} from "./chunk-IFUODU4W.js";
+} from "./chunk-PDUMGI6V.js";
 
 // src/engine/machine.ts
 import fs from "fs";
@@ -76,7 +77,7 @@ import os from "os";
 import path from "path";
 import { createRequire } from "module";
 import { spawnSync } from "child_process";
-var AGENT_VERSION = "0.1.0-beta.63";
+var AGENT_VERSION = "0.1.0-beta.65";
 async function prepareBrowsers() {
   if (browsersReady()) {
     return { ok: true, already: true, message: "chromium is already installed" };
@@ -136,7 +137,7 @@ async function checkMachine() {
     }
   } catch {
   }
-  const { mobileDoctor: mobileDoctor2 } = await import("./dist-Z67YCHL5.js");
+  const { mobileDoctor: mobileDoctor2 } = await import("./dist-3PMNCKSW.js");
   return {
     agentVersion: AGENT_VERSION,
     node: process.versions.node,
@@ -551,7 +552,9 @@ async function connect(options = {}) {
     const res = await fetch(`${service}/api/pairing-requests`, {
       method: "POST",
       headers: { "content-type": "application/json" },
-      body: JSON.stringify({ machineName, agentVersion: AGENT_VERSION }),
+      // Ask for a code to show here: the page then insists on it, so a link
+      // sent by somebody else's agent cannot be approved by mistake.
+      body: JSON.stringify({ machineName, agentVersion: AGENT_VERSION, wantsCode: true }),
       signal: options.signal ?? null
     });
     if (!res.ok) {
@@ -565,7 +568,7 @@ async function connect(options = {}) {
   options.onProgress?.({
     kind: "approve",
     message: "waiting for approval in your browser",
-    detail: { url: approve, machineName, canOpen: options.open !== false && canOpenBrowser() }
+    detail: { url: approve, machineName, canOpen: options.open !== false && canOpenBrowser(), ...asked.code ? { code: `${asked.code.slice(0, 3)}-${asked.code.slice(3)}` } : {} }
   });
   if (options.open !== false) openBrowser(approve);
   const pollMs = options.pollMs ?? 1500;
@@ -2130,6 +2133,12 @@ async function performHelperStep(page, step, options) {
   }
   return got;
 }
+var LOAD_CAP_MS = 3e3;
+var QUIET_CAP_MS = 1e3;
+async function settleAfterNavigation(page) {
+  await page.waitForLoadState("load", { timeout: LOAD_CAP_MS }).catch(() => void 0);
+  await page.waitForLoadState("networkidle", { timeout: QUIET_CAP_MS }).catch(() => void 0);
+}
 var secretsBehind = (auth) => [.../* @__PURE__ */ new Set([
   ...Object.values(auth.secretRefs ?? {}),
   ...auth.steps.flatMap((step) => step.secretRef ? [step.secretRef] : [])
@@ -2333,7 +2342,10 @@ var RunActors = class {
     if (switching && this.opts.headless === false) await session.page.bringToFront().catch(() => {
     });
     if (this.initialized.has(id)) return;
-    if (startUrl) await session.page.goto(startUrl, { waitUntil: "domcontentloaded" });
+    if (startUrl) {
+      await session.page.goto(startUrl, { waitUntil: "domcontentloaded" });
+      await settleAfterNavigation(session.page);
+    }
     if (actor?.startSignedIn) {
       if (kept?.state) {
         const confirmed = await confirmSignedIn(session.page, kept.auth, this.opts.reuseCheckMs ?? 3e3);
@@ -2345,7 +2357,10 @@ var RunActors = class {
         this.opts.reuse?.cache.evict(kept.key);
         this.preparations.set(id, "stale");
         session = await this.replaceWithGuest(id, session);
-        await session.page.goto(startUrl, { waitUntil: "domcontentloaded" });
+        {
+          await session.page.goto(startUrl, { waitUntil: "domcontentloaded" });
+          await settleAfterNavigation(session.page);
+        }
       }
       await executeStep(
         session.page,
@@ -2377,7 +2392,10 @@ var RunActors = class {
         } catch {
         }
       }
-      if (startUrl) await session.page.goto(startUrl, { waitUntil: "domcontentloaded" });
+      if (startUrl) {
+        await session.page.goto(startUrl, { waitUntil: "domcontentloaded" });
+        await settleAfterNavigation(session.page);
+      }
     }
     this.initialized.add(id);
   }
@@ -2474,7 +2492,10 @@ var RunActors = class {
       this.retired.add(previous);
     }
     await this.opts.onCreate?.(session);
-    await session.page.goto(this.opts.startUrl, { waitUntil: "domcontentloaded" });
+    {
+      await session.page.goto(this.opts.startUrl, { waitUntil: "domcontentloaded" });
+      await settleAfterNavigation(session.page);
+    }
     this.initialized.add(id);
   }
   /** Back to one participant, between debug replays.
@@ -2805,7 +2826,7 @@ var ExecutionPages = class {
       await Promise.all(this.dialogTasks);
       if (this.unexpected) throw new Error(this.unexpected);
       if (this.expectedDialogs.length) throw new Error("The expected browser dialog did not appear");
-      if (step.downloads && JSON.stringify(downloads) !== JSON.stringify(step.downloads)) throw new Error(`Expected downloads ${step.downloads.join(", ")}; received ${downloads.join(", ") || "none"}`);
+      if (step.downloads && !downloadsMatch(step.downloads, downloads)) throw new Error(`Expected downloads ${step.downloads.join(", ")}; received ${downloads.join(", ") || "none"}`);
     } finally {
       page.off("download", onDownload);
       this.expectedDialogs = [];
@@ -2820,6 +2841,17 @@ var ExecutionPages = class {
     this.unexpected = null;
   }
 };
+var shapeOf = (name) => name.toLowerCase().replace(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/g, "#").replace(/(?<![a-z0-9])[0-9a-f]{12,}(?![a-z0-9])/g, "#").replace(/\d+/g, "#").replace(/#([^a-z]*#)+/g, "#");
+function downloadsMatch(expected, received) {
+  if (expected.length !== received.length) return false;
+  const left = received.map(shapeOf);
+  for (const name of expected) {
+    const at = left.indexOf(shapeOf(name));
+    if (at === -1) return false;
+    left.splice(at, 1);
+  }
+  return true;
+}
 function rootFor(page, step) {
   let root = page;
   for (const frame of step.frame ?? []) root = root.frameLocator(frameSelector(frame));
@@ -2899,17 +2931,22 @@ async function scrollUntilFound(page, loc, budgetMs = 3e3) {
   for (let pass = 0; pass < PASSES && Date.now() < giveUpAt; pass++) {
     if (await loc.count() > 0) return true;
     const moved = await page.evaluate(() => {
-      const scrollable = [
-        document.scrollingElement,
-        ...Array.from(document.querySelectorAll("*"))
-      ].filter((el) => !!el && el.scrollHeight > el.clientHeight + 4);
-      let any = false;
-      for (const el of scrollable) {
+      const nudge = (el) => {
         const before = el.scrollTop;
         el.scrollTop = before + Math.max(80, el.clientHeight * 0.8);
-        if (el.scrollTop !== before) any = true;
-      }
-      return any;
+        return el.scrollTop !== before;
+      };
+      const page2 = document.scrollingElement;
+      if (page2 && page2.scrollHeight > page2.clientHeight + 4 && nudge(page2)) return true;
+      const areas = Array.from(document.querySelectorAll("*")).filter((el) => el.scrollHeight > el.clientHeight + 4 && el.clientHeight > 40).map((el) => {
+        const box = el.getBoundingClientRect();
+        const style = getComputedStyle(el);
+        const scrolls = /(auto|scroll|overlay)/.test(style.overflowY);
+        const shown = box.width > 0 && box.height > 0 && box.bottom > 0 && box.top < innerHeight && style.visibility !== "hidden";
+        return { el, area: scrolls && shown ? box.width * box.height : 0 };
+      }).filter((each) => each.area > 0).sort((a, b2) => b2.area - a.area);
+      for (const { el } of areas) if (nudge(el)) return true;
+      return false;
     }).catch(() => false);
     if (!moved) break;
     await page.waitForTimeout(120);
@@ -3422,6 +3459,7 @@ async function runStepsIn(session, steps, opts) {
   try {
     if (opts.startUrl && !opensItsOwnEntry(steps, opts)) {
       await page.goto(opts.startUrl, { waitUntil: "domcontentloaded" });
+      await settleAfterNavigation(page);
     }
     for (const recorded of steps) {
       let step = recorded;
@@ -3625,8 +3663,9 @@ async function runStepsIn(session, steps, opts) {
           // SAID OUT LOUD, on a step that passed. The element was found, but
           // not the way this step says it should be — something has moved,
           // and the run is the only place anybody would learn it.
-          onFallback: (_step, foundBy) => {
+          onFallback: (_step, foundBy, renamedTo) => {
             result.foundBy = foundBy;
+            if (renamedTo) result.renamedTo = renamedTo;
           }
         });
         try {
@@ -3815,6 +3854,7 @@ async function executeStep(main, input, options = {}) {
   const remaining = () => Math.max(1, deadline - Date.now());
   const navigationBudget = () => step.navigationTimeoutMs ?? options.navigationTimeoutMs ?? 45e3;
   page.setDefaultTimeout(remaining());
+  page.setDefaultNavigationTimeout(navigationBudget());
   const act = async () => {
     if (step.type === "unsupported") throw new Error(step.warning || step.value || "This interaction requires a supported action before replay");
     if (step.type === "assert") {
@@ -3823,6 +3863,7 @@ async function executeStep(main, input, options = {}) {
     }
     if (step.type === "navigate") {
       await page.goto(new URL(step.value, step.navigationBase === "application" ? options.baseUrl ?? page.url() : page.url()).href, { waitUntil: "domcontentloaded", timeout: navigationBudget() });
+      await settleAfterNavigation(page);
       return;
     }
     if (step.type === "closePage") {
@@ -3852,7 +3893,7 @@ async function executeStep(main, input, options = {}) {
     }
     const target = await ensureTarget(page, step, remaining());
     const loc = target.loc;
-    if (target.foundBy) options.onFallback?.(step, target.foundBy);
+    if (target.foundBy) options.onFallback?.(step, target.foundBy, target.renamedTo);
     page.setDefaultTimeout(remaining());
     await applyAction(loc, step, value, { resolveFile: options.resolveFile, dropTarget: await locateDrop(page, step) });
   };
@@ -3904,6 +3945,26 @@ async function applyScroll(page, step, timeout) {
   } catch {
   }
 }
+async function renamedFrom(page, step, found) {
+  if (!step.role || step.locator) return void 0;
+  try {
+    const first = (await found.ariaSnapshot({ timeout: 1e3 })).split("\n")[0] ?? "";
+    const parsed = /^- ([a-z]+) "((?:[^"\\]|\\.)*)"/.exec(first);
+    if (!parsed || parsed[1] !== step.role) return void 0;
+    const name = JSON.parse(`"${parsed[2]}"`).trim();
+    if (!name || name === step.name || name.length > 200) return void 0;
+    const { nameFrom: _from, candidates: _backups, ...rest } = step;
+    const [again] = await locateCandidates(page, { ...rest, name });
+    if (!again || await again.count() !== 1) return void 0;
+    const handle = await found.elementHandle({ timeout: 1e3 });
+    const same = handle ? await again.evaluate((el, other) => el === other, handle) : false;
+    await handle?.dispose().catch(() => {
+    });
+    return same ? name : void 0;
+  } catch {
+    return void 0;
+  }
+}
 async function ensureTarget(page, step, timeout) {
   const candidates = await locateCandidates(page, step);
   const described = describeLocators(step);
@@ -3920,7 +3981,10 @@ async function ensureTarget(page, step, timeout) {
   let crowded = null;
   for (let at = 1; at < candidates.length; at += 1) {
     const found = await candidates[at].count().catch(() => 0);
-    if (found === 1) return { loc: candidates[at], foundBy: described[at] ?? "another locator" };
+    if (found === 1) {
+      const renamedTo = await renamedFrom(page, step, candidates[at]);
+      return { loc: candidates[at], foundBy: described[at] ?? "another locator", ...renamedTo ? { renamedTo } : {} };
+    }
     if (found > 1 && !crowded) crowded = { where: described[at] ?? "another locator", count: found };
   }
   if (several) throw Object.assign(several, { kind: "ambiguous" });
@@ -5261,6 +5325,45 @@ async function fieldNames(page) {
     return found;
   }).catch(() => []);
 }
+async function backupsFor(page, step) {
+  if (!step.role || !step.name || step.locator) return [];
+  try {
+    const [primary] = await locateCandidates(page, step);
+    if (!primary || await primary.count() !== 1) return [];
+    return await primary.evaluate((el) => {
+      const clean = (s2) => (s2 ?? "").replace(/\s+/g, " ").trim();
+      const root = el.getRootNode();
+      const unique = (selector) => {
+        try {
+          return root.querySelectorAll(selector).length === 1;
+        } catch {
+          return false;
+        }
+      };
+      const found = [];
+      const testId = el.getAttribute("data-testid");
+      if (testId && unique(`[data-testid=${JSON.stringify(testId)}]`)) found.push({ strategy: "testId", value: testId });
+      const placeholder = el.getAttribute("placeholder");
+      if (clean(placeholder) && unique(`[placeholder=${JSON.stringify(placeholder)}]`)) found.push({ strategy: "placeholder", value: clean(placeholder) });
+      const alt = el.getAttribute("alt");
+      if (clean(alt) && unique(`[alt=${JSON.stringify(alt)}]`)) found.push({ strategy: "altText", value: clean(alt) });
+      const title = el.getAttribute("title");
+      if (clean(title) && unique(`[title=${JSON.stringify(title)}]`)) found.push({ strategy: "title", value: clean(title) });
+      if (el.id && !/:r|[a-f0-9]{12}|\d{6}/i.test(el.id) && unique(`#${CSS.escape(el.id)}`)) {
+        found.push({ strategy: "css", value: `#${CSS.escape(el.id)}` });
+      }
+      return found.slice(0, 4);
+    }, void 0, { timeout: 1e3 });
+  } catch {
+    return [];
+  }
+}
+function withBackups(target, backups) {
+  if (!backups.length) return target;
+  const seen = new Set((target.candidates ?? []).map((c) => `${c.strategy}\0${c.value}`));
+  const merged = [...target.candidates ?? [], ...backups.filter((b2) => !seen.has(`${b2.strategy}\0${b2.value}`))].slice(0, 4);
+  return { ...target, candidates: merged };
+}
 var playwrightVersion2 = () => {
   try {
     return createRequire22(import.meta.url)("playwright/package.json").version;
@@ -6106,8 +6209,18 @@ var SqliteStorage = class {
              ) AS rn FROM run
            ) WHERE rn > ?`
       ).all(keep).map((r) => String(r.id));
+      const dirOf = this.handle.prepare("SELECT artifacts_dir FROM run WHERE id=?");
       const stmt = this.handle.prepare("DELETE FROM run WHERE id=?");
-      for (const id of doomed) stmt.run(id);
+      for (const id of doomed) {
+        const dir = dirOf.get(id)?.artifacts_dir;
+        stmt.run(id);
+        if (typeof dir === "string" && dir) {
+          try {
+            fs5.rmSync(dir, { recursive: true, force: true });
+          } catch {
+          }
+        }
+      }
       return doomed;
     });
   }
@@ -6978,11 +7091,12 @@ function totp(secretBase32, at, options = {}) {
   const remaining = period - Math.floor(at / 1e3 % period);
   return { code, remaining };
 }
-async function imapMailbox(config, password) {
+async function imapMailbox(config, password, target = { host: config.host }) {
   const { ImapFlow } = await import("imapflow");
   const { simpleParser } = await import("mailparser");
   const client = new ImapFlow({
-    host: config.host,
+    host: target.host,
+    ...target.servername ? { servername: target.servername } : {},
     port: config.port,
     secure: config.secure,
     auth: { user: config.username, pass: password },
@@ -7041,7 +7155,8 @@ async function runMailbox(config, ctx) {
     subject: fill(config.match.subject, ctx.inputs),
     since: ctx.since ?? null
   };
-  const mailbox = await (ctx.openMailbox ?? imapMailbox)(config, secret(ctx, config.passwordRef, "mailbox password"));
+  const password = secret(ctx, config.passwordRef, "mailbox password");
+  const mailbox = ctx.openMailbox ? await ctx.openMailbox(config, password) : await imapMailbox(config, password, ctx.connectTo ? await ctx.connectTo(config.host) : void 0);
   const deadline = now() + config.waitSeconds * 1e3;
   try {
     for (; ; ) {
@@ -7195,6 +7310,7 @@ async function cloudBrowserFor(config, secrets, name) {
   return connectCloudBrowser(account, key, choice, name);
 }
 var LOCAL_CHROMIUM = { id: "chromium", provider: "local", engine: "chromium" };
+var KEEP_RUNS_LOCALLY = 50;
 async function executeFlow(opts) {
   const { store, storage = null, flowId, trigger, watch = false, onEvent } = opts;
   const headless = watch ? false : opts.headless ?? store.readConfig().headless;
@@ -7431,6 +7547,7 @@ async function executeFlow(opts) {
       artifactsDir: runDir && fs7.existsSync(runDir) ? runDir : null
     });
   }
+  if (storage) void storage.pruneRuns(KEEP_RUNS_LOCALLY).catch(() => void 0);
   await emit({ type: "run.finished", runId: run?.id ?? "", flowId: flow.id, outcome: last });
   return {
     outcome: last,
@@ -7733,6 +7850,7 @@ async function executeCase(opts) {
         masked: false
       });
     }
+    void storage.pruneRuns(50).catch(() => void 0);
     await storage.finishRun(run.id, {
       status: outcome.status === "passed" ? "passed" : outcome.error === "the run was cancelled" ? "cancelled" : outcome.status === "failed" ? "failed" : "errored",
       errorMessage: outcome.error,
@@ -7750,6 +7868,10 @@ function redactPanel(state) {
   return { ...panel, steps: panel.steps.map((s2) => redact(s2)) };
 }
 var START_GRACE_MS = 3e3;
+var IDLE_MS = (() => {
+  const minutes = Number(process.env["FLOWRIKI_RECORDING_IDLE_MINUTES"] ?? 30);
+  return Number.isFinite(minutes) && minutes >= 0 ? minutes * 6e4 : 30 * 6e4;
+})();
 var RecordingCoordinator = class {
   constructor(deps) {
     this.deps = deps;
@@ -7773,6 +7895,33 @@ var RecordingCoordinator = class {
    * than rebuilding it from the event, which would either lose the values or
    * publish them. */
   lastResult = null;
+  /** When somebody last did anything in the recording. */
+  touchedAt = 0;
+  panelSeen = "";
+  idleTimer = null;
+  stoppingForIdle = false;
+  touch() {
+    this.touchedAt = Date.now();
+  }
+  watchIdle() {
+    const limit = this.deps.idleMs ?? IDLE_MS;
+    this.stopWatchingIdle();
+    if (limit <= 0) return;
+    this.touch();
+    this.idleTimer = setInterval(() => {
+      if (!this.session || this.stopInFlight || Date.now() - this.touchedAt < limit) return;
+      this.stopWatchingIdle();
+      this.stoppingForIdle = true;
+      void (this.draft?.steps.length ? this.stop() : this.discard()).finally(() => {
+        this.stoppingForIdle = false;
+      });
+    }, Math.min(this.deps.idleCheckMs ?? 6e4, limit));
+    this.idleTimer.unref?.();
+  }
+  stopWatchingIdle() {
+    if (this.idleTimer) clearInterval(this.idleTimer);
+    this.idleTimer = null;
+  }
   /** What the last completed stop answered, for a caller that missed it —
    *  a dropped socket, or a Stop pressed inside the recorded page. */
   lastStop() {
@@ -7796,6 +7945,7 @@ var RecordingCoordinator = class {
   }
   async answerDialog(accept, promptText) {
     if (!this.session) throw new Error("No recording is active");
+    this.touch();
     await this.session.answerDialog(accept, promptText);
   }
   /** Open a headed browser and start capturing.
@@ -7871,18 +8021,29 @@ var RecordingCoordinator = class {
         // a file nothing ever read.
         environment: ExecutionEnvironmentSchema.parse(opts.environment ?? config.environment),
         headless: opts.headless ?? false,
-        onStep: (step) => this.upsert(step),
+        onStep: (step) => {
+          this.touch();
+          this.upsert(step);
+        },
         // The panel carries its OWN copy of every step, and it used to be
         // emitted exactly as the session built it — so while `recording.step`
         // was carefully redacted, the very next frame published the same step
         // with the password still in it. Found by a test that typed a real
         // password into a real browser; nothing about the redacted step event
         // hinted at it.
-        onState: (state) => this.deps.emit({ type: "recording.panel", state: redactPanel(state) }),
+        onState: (state) => {
+          const seen = JSON.stringify(state);
+          if (seen !== this.panelSeen) {
+            this.panelSeen = seen;
+            this.touch();
+          }
+          this.deps.emit({ type: "recording.panel", state: redactPanel(state) });
+        },
         // Stop pressed on the floating control inside the recorded page.
         onStopRequested: (commit) => void (commit ? this.stop() : this.discard()),
         onDisconnect: () => {
           this.session = null;
+          this.stopWatchingIdle();
           this.deps.lease?.release("recording");
           this.deps.emit({ type: "recording.interrupted" });
         }
@@ -7898,6 +8059,7 @@ var RecordingCoordinator = class {
     const projectOrigin = configuredBase ? new URL(normalizeStartUrl(configuredBase)).origin : "";
     this.draft.baseUrl = opened.origin === projectOrigin ? "" : opened.origin;
     this.draft.startPath = opened.pathname + opened.search;
+    this.watchIdle();
     this.deps.emit({ type: "recording.started", name: this.draft.name, url: this.session.startUrl });
     return null;
   }
@@ -7921,6 +8083,7 @@ var RecordingCoordinator = class {
    * followed by an await, so two stops arriving together could otherwise both
    * pass it and save the flow twice. */
   stop() {
+    this.stopWatchingIdle();
     if (!this.stopInFlight) {
       this.deps.lease?.beginRelease("recording");
       this.stopInFlight = this.doStop().finally(() => {
@@ -7969,7 +8132,7 @@ var RecordingCoordinator = class {
     const file2 = this.deps.store.saveFlow(doc);
     this.draft = null;
     const saved = { ...this.deps.store.getFlow(doc.id) ?? doc, path: file2 };
-    this.deps.emit({ type: "recording.stopped", flow: saved, file: file2 });
+    this.deps.emit({ type: "recording.stopped", flow: saved, file: file2, ...this.stoppingForIdle ? { reason: "idle" } : {} });
     return this.lastResult = { ok: true, flow: saved, secrets: captured };
   }
   /** Throw the recording away: close the browser, drop the draft, write
@@ -7980,6 +8143,7 @@ var RecordingCoordinator = class {
    * time — a password briefly reaches disk for a recording nobody wanted. */
   async discard() {
     if (!this.draft && !this.session) return { ok: false, error: "no recording in progress" };
+    this.stopWatchingIdle();
     this.deps.lease?.beginRelease("recording");
     const ending = this.session;
     this.session = null;
@@ -8122,15 +8286,41 @@ var COMMANDS = /* @__PURE__ */ new Set([
 ]);
 var UnknownDebugCommand = class extends Error {
 };
+var DEBUG_IDLE_MS = (() => {
+  const minutes = Number(process.env["FLOWRIKI_RECORDING_IDLE_MINUTES"] ?? 30);
+  return Number.isFinite(minutes) && minutes >= 0 ? minutes * 6e4 : 30 * 6e4;
+})();
 var DebugCoordinator = class {
   constructor(deps) {
     this.deps = deps;
   }
   deps;
+  touchedAt = 0;
+  stateSeen = "";
+  /** The steps as the session opened them: unchanged means nothing to lose. */
+  openedWith = "";
+  idleTimer = null;
   retainCompleted = false;
   lastState = null;
   lastEnd = null;
   current = null;
+  watchIdle() {
+    this.stopWatchingIdle();
+    const limit = this.deps.idleMs ?? DEBUG_IDLE_MS;
+    if (limit <= 0) return;
+    this.touchedAt = Date.now();
+    this.idleTimer = setInterval(() => {
+      if (!this.current || Date.now() - this.touchedAt < limit) return;
+      if (JSON.stringify(this.current.session.state().steps) !== this.openedWith) return;
+      this.stopWatchingIdle();
+      void this.end(false).catch(() => void 0);
+    }, Math.min(this.deps.idleCheckMs ?? 6e4, limit));
+    this.idleTimer.unref?.();
+  }
+  stopWatchingIdle() {
+    if (this.idleTimer) clearInterval(this.idleTimer);
+    this.idleTimer = null;
+  }
   status() {
     return this.current ? { flowId: this.current.flowId, state: this.current.session.state() } : this.lastEnd?.ok && this.lastEnd.flow && this.lastState ? { flowId: this.lastEnd.flow.id, state: this.lastState } : { flowId: null, state: null };
   }
@@ -8169,11 +8359,19 @@ var DebugCoordinator = class {
         // Secrets are read on THIS machine and handed to the browser here. A
         // hosted dashboard drives the session and never learns a value.
         resolveSecret: (ref) => secrets[ref],
-        onState: (state2) => this.deps.emit({ type: "debug.state", flowId: flow.id, state: state2 }),
+        onState: (state2) => {
+          const seen = JSON.stringify(state2);
+          if (seen !== this.stateSeen) {
+            this.stateSeen = seen;
+            this.touchedAt = Date.now();
+          }
+          this.deps.emit({ type: "debug.state", flowId: flow.id, state: state2 });
+        },
         // Save & close / Discard, pressed on the panel inside the page.
         onEndRequested: (commit) => void this.end(commit),
         onDisconnect: () => {
           this.current = null;
+          this.stopWatchingIdle();
           this.deps.lease?.release("debug");
           this.deps.emit({ type: "debug.ended", flowId: flow.id, committed: false });
         }
@@ -8181,6 +8379,8 @@ var DebugCoordinator = class {
       this.deps.lease?.activate("debug");
       this.current = { flowId: flow.id, session };
       const state = session.state();
+      this.openedWith = JSON.stringify(state.steps);
+      this.watchIdle();
       this.deps.emit({ type: "debug.state", flowId: flow.id, state });
       return { flowId: flow.id, state };
     } catch (err) {
@@ -8191,6 +8391,7 @@ var DebugCoordinator = class {
   async command(command, args = {}) {
     if (!this.current) throw new Error("no debug session is running");
     if (!COMMANDS.has(command)) throw new UnknownDebugCommand(`unknown command: ${command}`);
+    this.touchedAt = Date.now();
     const s2 = this.current.session;
     switch (command) {
       case "play":
@@ -8233,6 +8434,7 @@ var DebugCoordinator = class {
     }
     const { flowId, session } = this.current;
     this.current = null;
+    this.stopWatchingIdle();
     this.deps.lease?.beginRelease("debug");
     try {
       if (!commit) {
@@ -8388,7 +8590,7 @@ function resolveCheckouts(dirs) {
 // src/engine/session.ts
 import fs12 from "fs";
 
-// ../agent-core/dist/chunk-YAPHJ4AT.js
+// ../agent-core/dist/chunk-CRKFBFSC.js
 import { WebSocket, WebSocketServer } from "ws";
 var HEARTBEAT_MS = 3e4;
 function adapt(socket) {
@@ -8565,6 +8767,27 @@ var EventJournal = class {
   }
 };
 var { DatabaseSync } = createRequire4(import.meta.url)("node:sqlite");
+var LOCAL_LIMIT = 64 * 1024;
+function fitted(value, limit = LOCAL_LIMIT) {
+  const text = JSON.stringify(value);
+  if (Buffer.byteLength(text) <= limit) return text;
+  for (const [maxText, maxItems] of [[2e3, 400], [500, 120], [200, 40], [80, 12]]) {
+    const smaller = JSON.stringify(shrink(value, maxText, maxItems));
+    if (Buffer.byteLength(smaller) <= limit) return smaller;
+  }
+  throw new Error("event exceeds local size limit even when shortened");
+}
+function shrink(value, maxText, maxItems) {
+  if (typeof value === "string") return value.length > maxText ? `${value.slice(0, maxText)}\u2026 (cut)` : value;
+  if (Array.isArray(value)) {
+    const items = value.length > maxItems ? [...value.slice(0, Math.ceil(maxItems / 2)), `\u2026 ${value.length - maxItems} left out`, ...value.slice(-Math.floor(maxItems / 2))] : value;
+    return items.map((v) => shrink(v, maxText, maxItems));
+  }
+  if (value && typeof value === "object") {
+    return Object.fromEntries(Object.entries(value).map(([k, v]) => [k, shrink(v, maxText, maxItems)]));
+  }
+  return value;
+}
 var AgentState = class {
   constructor(file2, deviceId, commandLimit = 1e5) {
     this.commandLimit = commandLimit;
@@ -8635,6 +8858,10 @@ var AgentState = class {
   begin(command, fingerprint2) {
     return this.transaction(() => {
       if (this.get(command.id)) return false;
+      if (Number(this.db.prepare("SELECT count(*) AS n FROM commands").get()?.n) >= this.commandLimit) {
+        const cutoff = (command.issuedAt ?? command.expiresAt) - 30 * 24 * 60 * 6e4;
+        if (cutoff > 0) this.db.prepare("DELETE FROM commands WHERE state IN ('completed','retired') AND finished_at < ?").run(cutoff);
+      }
       if (Number(this.db.prepare("SELECT count(*) AS n FROM commands").get()?.n) >= this.commandLimit) {
         throw new Error("command ledger capacity reached; retain state and reconcile before further work");
       }
@@ -8643,8 +8870,7 @@ var AgentState = class {
     });
   }
   finish(id, ack, now) {
-    const text = JSON.stringify(AckSchema.parse(ack));
-    if (Buffer.byteLength(text) > 64 * 1024) throw new Error("command result exceeds local size limit");
+    const text = fitted(AckSchema.parse(ack));
     const result = this.db.prepare("UPDATE commands SET state='completed', ack=?, finished_at=? WHERE id=? AND state='started'").run(text, now, id);
     if (Number(result.changes) !== 1) throw new Error("command intent is unavailable");
   }
@@ -8657,8 +8883,7 @@ var AgentState = class {
     this.db.prepare("UPDATE commands SET state='retired', ack=NULL WHERE state='completed' AND finished_at < ? AND expires_at <= ?").run(cutoff, now);
   }
   append(event, limit) {
-    const text = JSON.stringify(event);
-    if (Buffer.byteLength(text) > 64 * 1024) throw new Error("event exceeds local size limit");
+    const text = fitted(event);
     return this.transaction(() => {
       const row = this.db.prepare("INSERT INTO events(payload) VALUES (?)").run(text);
       const seq = Number(row.lastInsertRowid) - 1;
@@ -8687,6 +8912,13 @@ var AgentState = class {
     this.db.close();
   }
 };
+function withoutSecrets(value) {
+  if (Array.isArray(value)) return value.map(withoutSecrets);
+  if (value && typeof value === "object") {
+    return Object.fromEntries(Object.entries(value).map(([k, v]) => [k, k === "secrets" ? {} : withoutSecrets(v)]));
+  }
+  return value;
+}
 var Agent = class {
   constructor(opts) {
     this.opts = opts;
@@ -8824,7 +9056,7 @@ var Agent = class {
       ack = this.refuse(command.id, "failed", String(err instanceof Error ? err.message : err).split("\n")[0]);
     }
     if (EFFECTFUL.has(command.name)) {
-      this.state.finish(command.id, ack, this.now());
+      this.state.finish(command.id, withoutSecrets(ack), this.now());
     }
     return ack;
   }
@@ -9859,6 +10091,12 @@ var runFile = (file2, args, timeoutMs) => new Promise((resolve2, reject) => {
 });
 var live = /* @__PURE__ */ new Map();
 var liveById = (sessionId) => [...live.values()].find((l) => l.id === sessionId);
+var IDLE_MS2 = (() => {
+  const minutes = Number(process.env["FLOWRIKI_RECORDING_IDLE_MINUTES"] ?? 30);
+  return Number.isFinite(minutes) && minutes >= 0 ? minutes * 6e4 : 30 * 6e4;
+})();
+var parked = /* @__PURE__ */ new Map();
+var PARKED_FOR_MS = 24 * 60 * 6e4;
 var ownerOf = (l) => l.draft ? "recording" : "debug";
 var SECRET_WORDS = /password|passwd|pass[-_\s]?code|pwd|secret|otp|\bpin\b|cvv|cvc/i;
 async function screenOf(l, withImage = false) {
@@ -9886,12 +10124,31 @@ async function screenOf(l, withImage = false) {
     device: l.session.deviceName
   };
 }
+async function closeIdlePhoneSessions(release, limit = IDLE_MS2, now = Date.now()) {
+  for (const [id, kept] of parked) if (now - kept.at > PARKED_FOR_MS) parked.delete(id);
+  if (limit <= 0) return;
+  for (const l of [...live.values()]) {
+    if (now - l.touchedAt < limit) continue;
+    live.delete(l.platform);
+    release(ownerOf(l), l.platform);
+    await l.session.close().catch(() => void 0);
+    if (l.draft?.steps.length) parked.set(l.id, { l, at: now });
+  }
+}
 function mobileHandlers(ctx) {
   const require2 = (command) => {
     const l = liveById(command.args["sessionId"]);
-    if (!l) throw new Error("that phone session has ended \u2014 open it again");
-    return l;
+    if (l) {
+      l.touchedAt = Date.now();
+      return l;
+    }
+    if (parked.has(String(command.args["sessionId"]))) {
+      throw new Error("this phone was let go after a long time with nothing done \u2014 press Stop to save what was recorded");
+    }
+    throw new Error("that phone session has ended \u2014 open it again");
   };
+  const sweeper = setInterval(() => void closeIdlePhoneSessions((owner, platform) => ctx.lease?.release(owner, platform)), 6e4);
+  sweeper.unref?.();
   return {
     // Everything this computer has for testing — web and phones — for the Guide.
     ...ctx.deps.machineCheck ? {
@@ -9965,6 +10222,7 @@ function mobileHandlers(ctx) {
             platform,
             values: /* @__PURE__ */ new Map(),
             typed,
+            touchedAt: Date.now(),
             resolveSecret: (ref) => typed.get(ref) ?? secrets[ref],
             resolveAuth: authenticationResolver(command.args["authentications"]),
             runHelper: helperRunner(command.args["helpers"], secrets)
@@ -9994,6 +10252,12 @@ function mobileHandlers(ctx) {
           }
           return { ok: true, result: { sessionId: l2.id, screen: await screenOf(l2) } };
         }
+        const resting = parked.get(String(command.args["sessionId"]));
+        if (resting && (op === "stop" || op === "discard")) {
+          parked.delete(String(command.args["sessionId"]));
+          if (op === "discard") return { ok: true, result: { ended: true } };
+          return { ok: true, result: finished(resting.l) };
+        }
         const l = require2(command);
         if (op === "act" || op === "run") {
           const raw = command.args["step"] ?? {};
@@ -10069,24 +10333,7 @@ function mobileHandlers(ctx) {
           ctx.lease?.release(ownerOf(l), l.platform);
           await l.session.close().catch(() => void 0);
           if (op === "discard" || !l.draft) return { ok: true, result: { ended: true } };
-          const now = (/* @__PURE__ */ new Date()).toISOString();
-          const d = l.draft;
-          const flow = {
-            schemaVersion: CURRENT_SCHEMA_VERSION,
-            id: `flw_${randomUUID2().replace(/-/g, "").slice(0, 12)}`,
-            featureId: d.featureId,
-            name: d.name,
-            slug: slugify(d.name) || "flow",
-            startPath: d.startPath,
-            platform: l.platform,
-            recordedAt: now,
-            recordedBy: d.recordedBy,
-            updatedAt: now,
-            revision: 0,
-            steps: d.steps,
-            ...d.signIn ? { signIn: d.signIn } : {}
-          };
-          return { ok: true, result: { flow, secrets: Object.fromEntries(l.typed) } };
+          return { ok: true, result: finished(l) };
         }
         return { ok: false, reason: "failed", detail: `unknown phone session operation "${op}"` };
       } catch (error) {
@@ -10096,6 +10343,26 @@ function mobileHandlers(ctx) {
     }
   };
 }
+function finished(l) {
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const d = l.draft;
+  const flow = {
+    schemaVersion: CURRENT_SCHEMA_VERSION,
+    id: `flw_${randomUUID2().replace(/-/g, "").slice(0, 12)}`,
+    featureId: d.featureId,
+    name: d.name,
+    slug: slugify(d.name) || "flow",
+    startPath: d.startPath,
+    platform: l.platform,
+    recordedAt: now,
+    recordedBy: d.recordedBy,
+    updatedAt: now,
+    revision: 0,
+    steps: d.steps,
+    ...d.signIn ? { signIn: d.signIn } : {}
+  };
+  return { flow, secrets: Object.fromEntries(l.typed) };
+}
 function buildHandlers(deps) {
   const context = {
     deps,
@@ -10154,6 +10421,20 @@ function toolArgs(tool, input) {
     if (typeof value === "number" && Number.isFinite(value)) out[key] = value;
   }
   if (record["newBranch"] === true) out["newBranch"] = true;
+  if (typeof record["case"] === "string" && record["case"]) out["case"] = clip(record["case"], 40);
+  if (Array.isArray(record["features"])) {
+    const cases = [];
+    for (const feature of record["features"]) {
+      if (!feature || typeof feature !== "object") continue;
+      const f = feature;
+      const folder = typeof f["feature"] === "string" ? f["feature"] : typeof f["name"] === "string" ? f["name"] : "";
+      for (const c of Array.isArray(f["cases"]) ? f["cases"] : []) {
+        const name = c && typeof c === "object" ? c["name"] : void 0;
+        if (typeof name === "string" && name && cases.length < 40) cases.push({ folder: clip(folder), name: clip(name) });
+      }
+    }
+    if (cases.length) out["cases"] = cases;
+  }
   if (tool === "add_check" && typeof record["value"] === "string") out["value"] = clip(record["value"], 120);
   if (Array.isArray(record["after"])) {
     out["after"] = record["after"].filter((v) => typeof v === "string").slice(0, 5).map((v) => clip(v));
@@ -10185,13 +10466,65 @@ var ASK_MODE_TOOLS = [
   "list_my_branches",
   "run_insights"
 ];
+var NOT_RECORDING = [
+  "create_project",
+  "list_projects",
+  "read_import_file",
+  "save_import_cases",
+  "read_update_request",
+  "propose_case_updates",
+  "write_test_cases",
+  "gather_branches",
+  "discard_branch"
+];
+var NOT_SAVING_TESTS = [
+  "save_flow",
+  "save_case",
+  "preview_case",
+  "start_case",
+  "continue_flow",
+  "remove_step",
+  "replay_flow",
+  "add_check",
+  "use_helper",
+  "create_sign_in",
+  "create_account",
+  "create_helper",
+  "report_blocker"
+];
+var JOB_TOOLS_EXCEPT = {
+  heal: [...NOT_RECORDING, "create_sign_in", "create_account"],
+  automate: NOT_RECORDING,
+  reautomate: NOT_RECORDING,
+  update: NOT_RECORDING.filter((t) => t !== "read_update_request" && t !== "propose_case_updates"),
+  explore: [...NOT_RECORDING, ...NOT_SAVING_TESTS],
+  // Writing cases may still set up a sign-in it finds missing.
+  write: [
+    "create_project",
+    "list_projects",
+    "gather_branches",
+    "discard_branch",
+    "read_update_request",
+    "propose_case_updates",
+    ...NOT_SAVING_TESTS.filter((t) => !t.startsWith("create_"))
+  ]
+};
+function toolsExceptFor(prompt, briefGiven) {
+  const except = [...JOB_TOOLS_EXCEPT[usageKindOf(prompt)] ?? []];
+  if (briefGiven) except.push("project_brief");
+  return except;
+}
 function buildAskArgs(opts) {
   const ask = opts.mode === "ask";
   const folders = opts.folders ?? [];
   const brief = opts.brief?.trim();
   const guidance = [
-    `You are the Flowriki assistant for the project "${opts.projectName}" (id ${opts.projectId}). Use the Flowriki tools, and pass projectId "${opts.projectId}" wherever a tool takes one. ` + (brief ? "The project brief below is this project's memory for this job: read it first." : "Start with project_brief: it is this project's memory."),
-    ask ? "ASK MODE: answer the question; change nothing. Cite what you rely on as [[testCase:<its id, tc_\u2026>]], [[knowledge:features/checkout.md]] or [[file:path/in/repo.ts]]." : "DO MODE: do what is asked, on Claude's working branch, for a person to review. Ask in the chat and wait before publishing, deleting, or sending anything to another system. Work quietly: the person sees what you build and your final answer, so keep words between tool calls to a minimum and end with a short result \u2014 what was saved, and anything that needs them. When you learned something about the app the next job should know (a screen, a rule, a quirk, what failed and why), write it with write_knowledge (memory/sessions/<date>-<topic>.md, append) \u2014 Flowriki keeps it and gives it to the next job.",
+    `You are the Flowriki assistant for the project "${opts.projectName}" (id ${opts.projectId}). Use the Flowriki tools, and pass projectId "${opts.projectId}" wherever a tool takes one. ` + (brief ? "The project brief below IS project_brief for this job \u2014 do not call project_brief." : "Start with project_brief: it is this project's memory."),
+    ask ? "ASK MODE: answer the question; change nothing. Cite what you rely on as [[testCase:<its id, tc_\u2026>]], [[knowledge:features/checkout.md]] or [[file:path/in/repo.ts]]." : "DO MODE: do what is asked, on Claude's working branch, for a person to review. Ask in the chat and wait before publishing, deleting, or sending anything to another system. Work quietly: the person sees what you build and your final answer, so keep words between tool calls to a minimum and end with a short result \u2014 what was saved, and anything that needs them. Only when you learned something about the app that the brief does not already say and the next job needs (a screen, a rule, a quirk, what failed and why), write it with write_knowledge (memory/sessions/<date>-<topic>.md, append) \u2014 briefly.",
+    // SPENDING. Every turn re-reads the whole conversation, so turns are the
+    // cost: do several steps per act call, don't re-read a page a step already
+    // returned, and stop instead of retrying the same failing step.
+    ask ? "" : "Spend turns carefully: act takes several steps at once; a step's answer already shows the page \u2014 read_page only when it did not; after 3 failed tries at the same step, report_blocker and move on.",
     "Use only the tools you have: a tool is used by calling it, not by writing the call out as text. If Flowriki's tools are missing, say so in one sentence and stop.",
     folders.length ? `The project's code is in ${folders.join(" and ")}. Read it with Read, Grep and Glob when it helps; you cannot change it.` : "",
     brief ? `
@@ -10221,9 +10554,25 @@ ${brief}` : ""
     "dontAsk",
     "--append-system-prompt",
     guidance,
+    // THE MODEL, SAID — not whatever the person's default is. Recording and
+    // automating tests is what Sonnet does well; a default of Opus costs
+    // several times as much for the same tests. FLOWRIKI_ASSISTANT_MODEL
+    // overrides it.
+    "--model",
+    opts.model ?? (process.env["FLOWRIKI_ASSISTANT_MODEL"]?.trim() || "sonnet"),
+    // A ceiling, not a target: a job that has taken this many turns is going
+    // round in circles. What it saved stays; "continue" carries on.
+    "--max-turns",
+    String(opts.maxTurns ?? (ask ? 40 : 160)),
     ...opts.sessionId ? ["--resume", opts.sessionId] : []
   ];
 }
+var tokensOf = (u) => ({
+  input: u.input_tokens ?? 0,
+  output: u.output_tokens ?? 0,
+  cacheRead: u.cache_read_input_tokens ?? 0,
+  cacheWrite: u.cache_creation_input_tokens ?? 0
+});
 function clearOld(dir) {
   try {
     for (const name of fs43.readdirSync(dir)) {
@@ -10248,11 +10597,13 @@ function eventsFromLine(askId, line) {
     if (parsed.session_id) out.push({ name: "assistant.session", data: { askId, sessionId: parsed.session_id } });
   }
   if (parsed.type === "assistant") {
+    const tools = [];
     for (const block of parsed.message?.content ?? []) {
       if (block.type === "text" && block.text?.trim()) {
         out.push({ name: "assistant.text", data: { askId, text: block.text } });
       } else if (block.type === "tool_use" && block.name) {
         const tool = block.name.replace(TOOL_PREFIX, "");
+        tools.push(tool);
         out.push({
           name: "assistant.tool",
           data: {
@@ -10265,6 +10616,12 @@ function eventsFromLine(askId, line) {
         });
       }
     }
+    if (parsed.message?.usage && parsed.message.id) {
+      out.push({
+        name: "assistant.usage",
+        data: { askId, messageId: parsed.message.id, tools, ...tokensOf(parsed.message.usage), ...parsed.message.model ? { model: parsed.message.model } : {} }
+      });
+    }
   }
   if (parsed.type === "user") {
     for (const block of parsed.message?.content ?? []) {
@@ -10278,6 +10635,20 @@ function eventsFromLine(askId, line) {
       });
     }
   }
+  if (parsed.type === "rate_limit_event" && parsed.rate_limit_info) {
+    const info = parsed.rate_limit_info;
+    out.push({
+      name: "assistant.limits",
+      data: {
+        askId,
+        ...typeof info.status === "string" ? { status: info.status } : {},
+        ...typeof info.rateLimitType === "string" ? { window: info.rateLimitType } : {},
+        ...typeof info.utilization === "number" ? { utilization: info.utilization } : {},
+        ...typeof info.resetsAt === "number" ? { resetsAt: info.resetsAt } : {},
+        ...info.isUsingOverage === true ? { overage: true } : {}
+      }
+    });
+  }
   if (parsed.type === "result") {
     out.push({
       name: "assistant.done",
@@ -10285,12 +10656,24 @@ function eventsFromLine(askId, line) {
         askId,
         ok: parsed.is_error !== true,
         result: typeof parsed.result === "string" ? parsed.result : "",
-        ...parsed.session_id ? { sessionId: parsed.session_id } : {}
+        ...parsed.session_id ? { sessionId: parsed.session_id } : {},
+        // The whole job, as the model counted it.
+        ...parsed.usage ? { usage: tokensOf(parsed.usage) } : {},
+        ...typeof parsed.total_cost_usd === "number" ? { costUsd: parsed.total_cost_usd } : {},
+        ...typeof parsed.num_turns === "number" ? { turns: parsed.num_turns } : {},
+        ...typeof parsed.duration_ms === "number" ? { durationMs: parsed.duration_ms } : {}
       }
     });
   }
   return out;
 }
+function stop(child) {
+  child.kill("SIGTERM");
+  const force = setTimeout(() => {
+    if (child.exitCode === null && child.signalCode === null) child.kill("SIGKILL");
+  }, 5e3);
+  force.unref?.();
+}
 function createClaudeCli(options) {
   const spawn2 = options.spawn ?? nodeSpawn;
   const binary = options.binary ?? process.env["FLOWRIKI_CLAUDE_BIN"] ?? "claude";
@@ -10298,7 +10681,18 @@ function createClaudeCli(options) {
   const scratchRoot2 = options.scratchRoot ?? path42.join(os22.tmpdir(), "flowriki-claude");
   const running = /* @__PURE__ */ new Map();
   const MAX_AT_ONCE = 3;
-  let cancelled = null;
+  process.once("exit", () => {
+    for (const child of running.values()) {
+      try {
+        child.kill("SIGTERM");
+      } catch {
+      }
+    }
+  });
+  const cancelled = /* @__PURE__ */ new Set();
+  const retrying = /* @__PURE__ */ new Set();
+  const sessionsInUse = /* @__PURE__ */ new Set();
+  const occupied = () => running.size + retrying.size;
   function capture(args, timeoutMs = 15e3) {
     return new Promise((resolve2) => {
       let out = "", err = "", settled = false;
@@ -10328,8 +10722,8 @@ function createClaudeCli(options) {
       child.on("close", (code) => finish(code, false));
     });
   }
-  const LANE_FRESH_MS = 60 * 6e4;
-  const LANE_MAX_TOKENS = 15e4;
+  const LANE_FRESH_MS = 5 * 6e4;
+  const LANE_MAX_TOKENS = 4e4;
   const laneFile = (dir) => path42.join(dir, "lane-sessions.json");
   const readLanes = (dir) => {
     try {
@@ -10355,6 +10749,8 @@ function createClaudeCli(options) {
     }
     const kept = readLanes(dir)[ask.platform];
     if (!kept || Date.now() - kept.updatedAt > LANE_FRESH_MS || kept.tokens > LANE_MAX_TOKENS) return void 0;
+    if (sessionsInUse.has(kept.sessionId)) return void 0;
+    if ((kept.kind ?? "chat") !== usageKindOf(ask.prompt)) return void 0;
     return kept.sessionId;
   }
   return {
@@ -10375,10 +10771,10 @@ function createClaudeCli(options) {
       } catch {
         return { started: false, detail: "The assistant\u2019s command-line tool could not be started." };
       }
-      let finished = false;
+      let finished2 = false;
       const done = async (detail) => {
-        if (finished) return;
-        finished = true;
+        if (finished2) return;
+        finished2 = true;
         const status2 = await this.status();
         emit("assistant.connect.finished", { signedIn: status2.signedIn, ...detail ? { detail } : {} });
       };
@@ -10398,31 +10794,49 @@ function createClaudeCli(options) {
       return { started: true };
     },
     ask(ask) {
-      if (running.size >= MAX_AT_ONCE) return { started: false, detail: `The assistant is already answering ${MAX_AT_ONCE} questions on this machine \u2014 wait for one to finish.` };
+      if (occupied() >= MAX_AT_ONCE) return { started: false, detail: `The assistant is already answering ${MAX_AT_ONCE} questions on this machine \u2014 wait for one to finish.` };
       fs43.mkdirSync(scratchRoot2, { recursive: true, mode: 448 });
       const dir = path42.join(scratchRoot2, `project-${ask.projectId.replace(/[^A-Za-z0-9_-]/g, "_")}`);
       fs43.mkdirSync(dir, { recursive: true, mode: 448 });
       clearOld(dir);
       const mcpConfigPath = path42.join(dir, `mcp-${ask.askId.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 80)}.json`);
+      const session = laneSession(ask, dir);
+      const except = ask.mode === "ask" ? [] : toolsExceptFor(ask.prompt, Boolean(ask.brief && !session));
       fs43.writeFileSync(
         mcpConfigPath,
-        JSON.stringify({ mcpServers: { [MCP_SERVER_NAME]: { command: options.mcp.command, args: options.mcp.args, env: { FLOWRIKI_ASK_ID: ask.askId } } } }),
+        JSON.stringify({ mcpServers: { [MCP_SERVER_NAME]: { command: options.mcp.command, args: options.mcp.args, env: {
+          FLOWRIKI_ASK_ID: ask.askId,
+          // The project, known from the start: no "which project?" turn.
+          FLOWRIKI_PROJECT_ID: ask.projectId,
+          // The agent that launched it decides its version: the tool server
+          // does not update itself in the middle of somebody's job.
+          FLOWRIKI_NO_UPDATE: "1",
+          FLOWRIKI_MCP_CHILD: "1",
+          // A question: only the reading tools are served at all.
+          ...ask.mode === "ask" ? { FLOWRIKI_TOOLS: ASK_MODE_TOOLS.join(",") } : {},
+          // A job of a known kind: the tools it never uses are not served.
+          ...except.length ? { FLOWRIKI_TOOLS_EXCEPT: except.join(",") } : {}
+        } } } }),
         { mode: 384 }
       );
-      return launch(ask, dir, mcpConfigPath, laneSession(ask, dir));
+      return launch(ask, dir, mcpConfigPath, session);
     },
     cancel(askId) {
+      if (retrying.has(askId)) {
+        cancelled.add(askId);
+        return true;
+      }
       const child = running.get(askId);
       if (!child) return false;
-      cancelled = askId;
-      child.kill("SIGTERM");
+      cancelled.add(askId);
+      stop(child);
       setTimeout(() => child.kill("SIGKILL"), 3e3).unref?.();
       return true;
     },
     /** Full — no room for another question — rather than "something runs":
      *  a second conversation is welcome while the first works. */
     busy() {
-      return running.size >= MAX_AT_ONCE;
+      return occupied() >= MAX_AT_ONCE;
     }
   };
   function launch(ask, dir, mcpConfigPath, sessionId, attempt = 1) {
@@ -10438,20 +10852,26 @@ function createClaudeCli(options) {
           ...sessionId ? { sessionId } : {},
           ...ask.folders?.length ? { folders: ask.folders } : {},
           ...ask.mode ? { mode: ask.mode } : {},
-          ...ask.brief ? { brief: ask.brief } : {}
+          // Resumed, the conversation already holds its brief: a changed
+          // one in the system prompt would throw away the whole cache.
+          ...ask.brief && !sessionId ? { brief: ask.brief } : {}
         }),
         // THE SCRATCH FOLDER, not the project: nothing here to read or write.
-        { cwd: dir, stdio: ["ignore", "pipe", "pipe"] }
+        // Thinking is output, priced at five times input: capped per turn,
+        // unless the person set their own.
+        { cwd: dir, stdio: ["ignore", "pipe", "pipe"], env: { ...process.env, MAX_THINKING_TOKENS: process.env["MAX_THINKING_TOKENS"] ?? "6000" } }
       );
     } catch {
       return { started: false, detail: "The assistant\u2019s command-line tool could not be started." };
     }
     running.set(ask.askId, child);
+    if (sessionId) sessionsInUse.add(sessionId);
     let buffer = "", stderr = "", sawDone = false, ended = false;
     let silentFailure = false;
     let toolsMissing = false;
     let session;
     let spent = 0;
+    let lastContext = 0;
     const handleLine = (line) => {
       if (toolsMissing) return;
       for (const event of eventsFromLine(ask.askId, line)) {
@@ -10464,6 +10884,7 @@ function createClaudeCli(options) {
           continue;
         }
         if (event.name === "assistant.session") session = String(event.data["sessionId"] ?? "") || session;
+        if (event.name === "assistant.usage") lastContext = Number(event.data["input"] ?? 0) + Number(event.data["cacheRead"] ?? 0) + Number(event.data["cacheWrite"] ?? 0) + Number(event.data["output"] ?? 0);
         if (event.name === "assistant.done" && event.data["ok"] === false && !String(event.data["result"] ?? "").trim()) {
           silentFailure = true;
           continue;
@@ -10486,9 +10907,17 @@ function createClaudeCli(options) {
       clearTimeout(timer);
       if (buffer.trim()) handleLine(buffer);
       running.delete(ask.askId);
-      if (toolsMissing && cancelled !== ask.askId) {
+      if (sessionId) sessionsInUse.delete(sessionId);
+      const stopped = cancelled.has(ask.askId);
+      if (toolsMissing && !stopped) {
         if (attempt < 3) {
+          retrying.add(ask.askId);
           setTimeout(() => {
+            retrying.delete(ask.askId);
+            if (cancelled.delete(ask.askId)) {
+              ask.emit("assistant.done", { askId: ask.askId, ok: false, result: "Stopped." });
+              return;
+            }
             const again = launch(ask, dir, mcpConfigPath, sessionId, attempt + 1);
             if (!again.started) ask.emit("assistant.done", { askId: ask.askId, ok: false, result: again.detail ?? "The assistant could not be started." });
           }, 1500 * attempt + Math.floor(Math.random() * 1e3)).unref?.();
@@ -10497,22 +10926,22 @@ function createClaudeCli(options) {
         ask.emit("assistant.done", { askId: ask.askId, ok: false, result: "Flowriki's tools did not connect to the assistant on this computer after three tries, so nothing was done. Send it again in a moment; if it keeps happening, restart the agent." });
         return;
       }
-      if (silentFailure && sessionId && /no conversation found/i.test(stderr) && cancelled !== ask.askId) {
+      if (silentFailure && sessionId && /no conversation found/i.test(stderr) && !stopped) {
         if (ask.platform) writeLane(dir, ask.platform, null);
         const again = launch(ask, dir, mcpConfigPath, void 0);
         if (again.started) return;
       }
       if (ask.platform && session && ok && !silentFailure) {
-        const before = sessionId && readLanes(dir)[ask.platform]?.sessionId === sessionId ? readLanes(dir)[ask.platform].tokens : 0;
-        writeLane(dir, ask.platform, { sessionId: session, updatedAt: Date.now(), tokens: Math.max(before, spent) });
+        writeLane(dir, ask.platform, { sessionId: session, updatedAt: Date.now(), tokens: lastContext || spent, kind: usageKindOf(ask.prompt) });
       }
       if (!sawDone) {
         const why = detail || stderr.trim().split("\n").filter((l) => l && !/^Warning:/.test(l)).slice(-3).join(" ") || "The assistant stopped without saying why.";
         ask.emit("assistant.done", { askId: ask.askId, ok: ok && !silentFailure, result: ok && !silentFailure ? "" : why });
       }
+      cancelled.delete(ask.askId);
     };
     const timer = setTimeout(() => {
-      child.kill("SIGTERM");
+      stop(child);
       end(false, `Stopped after ${Math.max(1, Math.round(maxAskMs / 6e4))} minutes. Whatever it saved so far is on the Branches page \u2014 send \u201Ccontinue\u201D to carry on.`);
     }, maxAskMs);
     timer.unref?.();
@@ -10520,7 +10949,12 @@ function createClaudeCli(options) {
       buffer += chunk.toString();
       let at;
       while ((at = buffer.indexOf("\n")) >= 0) {
-        handleLine(buffer.slice(0, at));
+        try {
+          handleLine(buffer.slice(0, at));
+        } catch (error) {
+          stderr = `${stderr}
+${error.message}`.slice(-2e3);
+        }
         buffer = buffer.slice(at + 1);
       }
     });
@@ -10532,7 +10966,7 @@ function createClaudeCli(options) {
       "close",
       (code) => end(
         code === 0,
-        cancelled === ask.askId ? "Stopped." : code === 0 ? "" : stderr.trim().split("\n").filter((l) => l && !/^Warning:/.test(l)).slice(-3).join(" ") || `The assistant stopped (exit ${code ?? "?"}).`
+        cancelled.has(ask.askId) ? "Stopped." : code === 0 ? "" : stderr.trim().split("\n").filter((l) => l && !/^Warning:/.test(l)).slice(-3).join(" ") || `The assistant stopped (exit ${code ?? "?"}).`
       )
     );
     return { started: true };
@@ -10868,8 +11302,12 @@ async function start(options = {}) {
       if (stopped) return;
       stopped = true;
       link.stop();
-      agent.close();
-      lock.lock.release();
+      try {
+        agent.close();
+      } catch {
+      } finally {
+        lock.lock.release();
+      }
     }
   };
 }
@@ -10968,6 +11406,8 @@ export {
   executeStep,
   replayCase,
   fieldNames,
+  backupsFor,
+  withBackups,
   flowrikiHome,
   helperRunner,
   resolveCheckouts,