@moxxy/cli 0.7.2 → 0.8.0

package/dist/bin.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { z as z$1, defineProvider, definePlugin, defineTool, MoxxyError, writeFileAtomic, asTurnId, defineMode, asPluginId, defineChannel, defineTunnelProvider, createMutex, defineWorkflowExecutor, toFriendlyError, estimateTextTokens, classifyHttpStatus, createStuckLoopDetector, runCompactionIfNeeded, runElisionIfNeeded, collectProviderStream, usageEventFields, isContextOverflowError, emitRequestsAndDetectStuck, executeToolUses, buildSystemPromptWithSkills, projectMessages, defineCompactor, defineCacheStrategy, denyByDefaultResolver, createAllowListResolver, zodToJsonSchema, moxxyPath, runSingleShotTurn, bearerTokenMatches, resolveChannelToken, rotateChannelToken, estimateContextTokens as estimateContextTokens$1, readRequestBody, MOXXY_WS_SUBPROTOCOL, defineEmbedder, bearerGuard, tokenFromWsProtocolHeader, skillFrontmatterSchema, asSkillId, getInstallHint, moxxyHome, defineTranscriber, summarizeTokensByModel, migrateModeName, createDeferredPermissionResolver, classifyNetworkError, addModelTotals, ISOLATION_RANK, moxxyPackageSchema, defineCommand, createCallbackResolver, autoAllowResolver, asSessionId, asToolCallId, defineViewRenderer, DEFAULT_VIEW_TAGS, isSafeViewUrl, evaluateToolRule, summarizeSessionTokensFromEvents, computeElisionState, toolResultStubbed, toolResultStub, toolResultBytes, conversationalStubbed, conversationalStub, asEventId } from '@moxxy/sdk';
+import { z as z$1, defineProvider, definePlugin, defineTool, MoxxyError, writeFileAtomic, asTurnId, defineMode, asPluginId, defineChannel, defineTunnelProvider, spawnCliTunnel, isCliTunnelAvailable, createMutex, defineWorkflowExecutor, toFriendlyError, estimateTextTokens, classifyHttpStatus, createStuckLoopDetector, runCompactionIfNeeded, runElisionIfNeeded, collectProviderStream, usageEventFields, isContextOverflowError, emitRequestsAndDetectStuck, executeToolUses, buildSystemPromptWithSkills, projectMessages, defineCompactor, defineCacheStrategy, denyByDefaultResolver, createAllowListResolver, moxxyPath, zodToJsonSchema, runSingleShotTurn, bearerTokenMatches, resolveChannelToken, rotateChannelToken, estimateContextTokens as estimateContextTokens$1, readRequestBody, MOXXY_WS_SUBPROTOCOL, defineEmbedder, bearerGuard, tokenFromWsProtocolHeader, skillFrontmatterSchema, asSkillId, getInstallHint, moxxyHome, defineTranscriber, summarizeTokensByModel, migrateModeName, createDeferredPermissionResolver, classifyNetworkError, addModelTotals, ISOLATION_RANK, moxxyPackageSchema, defineCommand, createCallbackResolver, autoAllowResolver, asSessionId, asToolCallId, defineViewRenderer, DEFAULT_VIEW_TAGS, isSafeViewUrl, evaluateToolRule, summarizeSessionTokensFromEvents, computeElisionState, toolResultStubbed, toolResultStub, toolResultBytes, conversationalStubbed, conversationalStub, asEventId } from '@moxxy/sdk';
 import * as fs27 from 'fs';
 import fs27__default, { existsSync, promises, ReadStream, readFileSync, statSync, readdirSync, mkdirSync, writeFileSync, unlinkSync, renameSync, watch, createReadStream } from 'fs';
 import * as path3 from 'path';
@@ -20,7 +20,7 @@ import * as z4mini from 'zod/v4-mini';
 import * as z24 from 'zod/v4';
 import V3, { stdin, stdout, env, cwd } from 'process';
 import tty, { ReadStream as ReadStream$1 } from 'tty';
-import { once, EventEmitter } from 'events';
+import { EventEmitter } from 'events';
 import { Buffer as Buffer$1 } from 'buffer';
 import { readFile, mkdir, open, rm, stat, rename as rename$1, unlink, writeFile } from 'fs/promises';
 import { spawn, spawnSync } from 'child_process';
@@ -433,18 +433,29 @@ var init_tools = __esm({
   }
 });
 
-// ../core/dist/subagents/spawn.js
-function createSubagentSpawner(rt3) {
-  return {
-    async spawn(spec) {
-      return runOne(rt3, spec);
-    },
-    async spawnAll(specs) {
-      return Promise.all(specs.map((s2) => runOne(rt3, s2)));
-    }
-  };
+// ../core/dist/subagents/registry.js
+function registerRetainedChild(session) {
+  retained.set(String(session.childSessionId), session);
+}
+function getRetainedChild(childSessionId) {
+  return retained.get(String(childSessionId));
 }
-async function runOne(rt3, spec) {
+function releaseRetainedChild(childSessionId) {
+  retained.delete(String(childSessionId));
+}
+function clearRetainedChildren() {
+  retained.clear();
+}
+var retained;
+var init_registry = __esm({
+  "../core/dist/subagents/registry.js"() {
+    retained = /* @__PURE__ */ new Map();
+  }
+});
+
+// ../core/dist/subagents/run-child.js
+async function runChildTurn(args) {
+  const { rt: rt3, spec, retainSession } = args;
   const { parentSession, parentTurnId } = rt3;
   const childSessionId = newSessionId();
   const childTurnId = newTurnId();
@@ -456,6 +467,73 @@ async function runOne(rt3, spec) {
   const { strategy, strategyName } = resolved;
   const toolRegistry = spec.allowedTools && spec.allowedTools.length > 0 ? buildFilteredToolRegistry(parentSession.tools, new Set(spec.allowedTools)) : parentSession.tools;
   const childLog = new EventLog();
+  const spawner = createSubagentSpawner(rt3);
+  const childCtx = buildChildContext(rt3, spec, childSessionId, childTurnId, toolRegistry, childLog, spawner);
+  const capture = await executeChildLoop({
+    rt: rt3,
+    spec,
+    label: label3,
+    childSessionId,
+    childTurnId,
+    childLog,
+    childCtx,
+    strategy,
+    strategyName,
+    emitCompleted: !retainSession
+  });
+  if (retainSession) {
+    registerRetainedChild({
+      label: label3,
+      childSessionId,
+      childTurnId,
+      childLog,
+      childCtx,
+      spec,
+      strategy,
+      strategyName,
+      parentSession,
+      parentTurnId
+    });
+  }
+  return capture.result;
+}
+async function continueChildTurn(args) {
+  const retained2 = getRetainedChild(args.childSessionId);
+  if (!retained2) {
+    throw new Error(`no retained subagent session for "${String(args.childSessionId)}"`);
+  }
+  await retained2.childLog.append({
+    type: "user_prompt",
+    sessionId: retained2.childSessionId,
+    turnId: retained2.childTurnId,
+    source: "user",
+    text: args.prompt
+  });
+  const rt3 = {
+    parentSession: retained2.parentSession,
+    parentTurnId: retained2.parentTurnId,
+    parentSignal: retained2.childCtx.signal,
+    parentModel: retained2.childCtx.model
+  };
+  const capture = await executeChildLoop({
+    rt: rt3,
+    spec: retained2.spec,
+    label: args.label ?? retained2.label,
+    childSessionId: retained2.childSessionId,
+    childTurnId: retained2.childTurnId,
+    childLog: retained2.childLog,
+    childCtx: retained2.childCtx,
+    strategy: retained2.strategy,
+    strategyName: retained2.strategyName,
+    emitCompleted: true,
+    skipStartEvent: true
+  });
+  releaseRetainedChild(args.childSessionId);
+  return capture.result;
+}
+async function executeChildLoop(args) {
+  const { rt: rt3, spec, label: label3, childSessionId, childTurnId, childLog, childCtx, strategy, strategyName, emitCompleted, skipStartEvent } = args;
+  const { parentSession, parentTurnId } = rt3;
   const capture = { text: "", stopReason: "end_turn", error: null };
   const unsubCapture = childLog.subscribe((e3) => {
     if (e3.type === "assistant_message") {
@@ -468,15 +546,16 @@ async function runOne(rt3, spec) {
     }
   });
   const unsubStream = childLog.subscribe((childEvt) => streamChildEventToParent(parentSession, parentTurnId, label3, childSessionId, childEvt));
-  await emitSubagentStart(parentSession, parentTurnId, label3, childSessionId, spec, strategyName);
-  await childLog.append({
-    type: "user_prompt",
-    sessionId: childSessionId,
-    turnId: childTurnId,
-    source: "user",
-    text: spec.prompt
-  });
-  const childCtx = buildChildContext(rt3, spec, childSessionId, childTurnId, toolRegistry, childLog);
+  if (!skipStartEvent) {
+    await emitSubagentStart(parentSession, parentTurnId, label3, childSessionId, spec, strategyName);
+    await childLog.append({
+      type: "user_prompt",
+      sessionId: childSessionId,
+      turnId: childTurnId,
+      source: "user",
+      text: spec.prompt
+    });
+  }
   try {
     for await (const _2 of strategy.run(childCtx)) {
       void _2;
@@ -494,8 +573,10 @@ async function runOne(rt3, spec) {
     stopReason: capture.error ? "error" : capture.stopReason,
     ...capture.error ? { error: { message: capture.error } } : {}
   };
-  await emitSubagentCompleted(parentSession, parentTurnId, label3, childSessionId, capture.text, result.stopReason, capture.error);
-  return result;
+  if (emitCompleted) {
+    await emitSubagentCompleted(parentSession, parentTurnId, label3, childSessionId, capture.text, result.stopReason, capture.error);
+  }
+  return { result };
 }
 async function resolveStrategy(parentSession, parentTurnId, label3, childSessionId, spec, requestedStrategy) {
   const exact = parentSession.modes.list().find((s2) => s2.name === requestedStrategy);
@@ -519,7 +600,7 @@ async function resolveStrategy(parentSession, parentTurnId, label3, childSession
     }
   };
 }
-function buildChildContext(rt3, spec, childSessionId, childTurnId, toolRegistry, childLog) {
+function buildChildContext(rt3, spec, childSessionId, childTurnId, toolRegistry, childLog, spawner) {
   const { parentSession, parentSignal, parentModel } = rt3;
   return {
     sessionId: childSessionId,
@@ -543,20 +624,40 @@ function buildChildContext(rt3, spec, childSessionId, childTurnId, toolRegistry,
     signal: parentSignal,
     // child cancels when parent cancels
     maxIterations: spec.maxIterations ?? 50,
-    subagents: createSubagentSpawner({
-      ...rt3,
-      parentTurnId: childTurnId
-      // grand-children attach to this child's turn
-    }),
+    subagents: spawner,
     emit: (event) => childLog.append(event)
   };
 }
-var init_spawn = __esm({
-  "../core/dist/subagents/spawn.js"() {
+function createSubagentSpawner(rt3) {
+  return {
+    async spawn(spec) {
+      return runChildTurn({ rt: rt3, spec, retainSession: spec.retainSession === true });
+    },
+    async spawnAll(specs) {
+      return Promise.all(specs.map((s2) => runChildTurn({ rt: rt3, spec: s2, retainSession: s2.retainSession === true })));
+    },
+    async continue(args) {
+      return continueChildTurn(args);
+    },
+    release(childSessionId) {
+      releaseRetainedChild(childSessionId);
+    }
+  };
+}
+var init_run_child = __esm({
+  "../core/dist/subagents/run-child.js"() {
     init_log();
     init_factory();
     init_events();
     init_tools();
+    init_registry();
+  }
+});
+
+// ../core/dist/subagents/spawn.js
+var init_spawn = __esm({
+  "../core/dist/subagents/spawn.js"() {
+    init_run_child();
   }
 });
 
@@ -564,6 +665,7 @@ var init_spawn = __esm({
 var init_subagents = __esm({
   "../core/dist/subagents.js"() {
     init_spawn();
+    init_registry();
   }
 });
 
@@ -2153,8 +2255,8 @@ var init_tools2 = __esm({
         const parseResult = tool.inputSchema.safeParse(input);
         if (!parseResult.success) {
           const issues = parseResult.error.issues.map((iss) => {
-            const path60 = iss.path.length ? iss.path.join(".") : "(root)";
-            return `${path60}: ${iss.message}`;
+            const path61 = iss.path.length ? iss.path.join(".") : "(root)";
+            return `${path61}: ${iss.message}`;
           }).join("; ");
           throw new Error(`Invalid input for ${name}: ${issues}`);
         }
@@ -2879,6 +2981,7 @@ var init_session = __esm({
     init_engine();
     init_resolvers();
     init_logger();
+    init_registry();
     Session = class {
       id;
       cwd;
@@ -3053,6 +3156,7 @@ var init_session = __esm({
         try {
           await this.dispatcher.dispatchShutdown(this.appContext());
         } finally {
+          clearRetainedChildren();
           this.abort(reason);
         }
       }
@@ -7986,6 +8090,7 @@ __export(dist_exports, {
   autoAllowResolver: () => autoAllowResolver,
   buildSkillIndexPrompt: () => buildSkillIndexPrompt,
   buildSynthesizeSkillPlugin: () => buildSynthesizeSkillPlugin,
+  clearRetainedChildren: () => clearRetainedChildren,
   clearUsageStats: () => clearUsageStats,
   collectTurn: () => collectTurn,
   countNodes: () => countNodes,
@@ -8142,17 +8247,17 @@ var require_visit = __commonJS({
     visit.BREAK = BREAK;
     visit.SKIP = SKIP;
     visit.REMOVE = REMOVE;
-    function visit_(key, node, visitor, path60) {
-      const ctrl = callVisitor(key, node, visitor, path60);
+    function visit_(key, node, visitor, path61) {
+      const ctrl = callVisitor(key, node, visitor, path61);
       if (identity.isNode(ctrl) || identity.isPair(ctrl)) {
-        replaceNode(key, path60, ctrl);
-        return visit_(key, ctrl, visitor, path60);
+        replaceNode(key, path61, ctrl);
+        return visit_(key, ctrl, visitor, path61);
       }
       if (typeof ctrl !== "symbol") {
         if (identity.isCollection(node)) {
-          path60 = Object.freeze(path60.concat(node));
+          path61 = Object.freeze(path61.concat(node));
           for (let i2 = 0; i2 < node.items.length; ++i2) {
-            const ci = visit_(i2, node.items[i2], visitor, path60);
+            const ci = visit_(i2, node.items[i2], visitor, path61);
             if (typeof ci === "number")
               i2 = ci - 1;
             else if (ci === BREAK)
@@ -8163,13 +8268,13 @@ var require_visit = __commonJS({
             }
           }
         } else if (identity.isPair(node)) {
-          path60 = Object.freeze(path60.concat(node));
-          const ck = visit_("key", node.key, visitor, path60);
+          path61 = Object.freeze(path61.concat(node));
+          const ck = visit_("key", node.key, visitor, path61);
           if (ck === BREAK)
             return BREAK;
           else if (ck === REMOVE)
             node.key = null;
-          const cv = visit_("value", node.value, visitor, path60);
+          const cv = visit_("value", node.value, visitor, path61);
           if (cv === BREAK)
             return BREAK;
           else if (cv === REMOVE)
@@ -8190,17 +8295,17 @@ var require_visit = __commonJS({
     visitAsync.BREAK = BREAK;
     visitAsync.SKIP = SKIP;
     visitAsync.REMOVE = REMOVE;
-    async function visitAsync_(key, node, visitor, path60) {
-      const ctrl = await callVisitor(key, node, visitor, path60);
+    async function visitAsync_(key, node, visitor, path61) {
+      const ctrl = await callVisitor(key, node, visitor, path61);
       if (identity.isNode(ctrl) || identity.isPair(ctrl)) {
-        replaceNode(key, path60, ctrl);
-        return visitAsync_(key, ctrl, visitor, path60);
+        replaceNode(key, path61, ctrl);
+        return visitAsync_(key, ctrl, visitor, path61);
       }
       if (typeof ctrl !== "symbol") {
         if (identity.isCollection(node)) {
-          path60 = Object.freeze(path60.concat(node));
+          path61 = Object.freeze(path61.concat(node));
           for (let i2 = 0; i2 < node.items.length; ++i2) {
-            const ci = await visitAsync_(i2, node.items[i2], visitor, path60);
+            const ci = await visitAsync_(i2, node.items[i2], visitor, path61);
             if (typeof ci === "number")
               i2 = ci - 1;
             else if (ci === BREAK)
@@ -8211,13 +8316,13 @@ var require_visit = __commonJS({
             }
           }
         } else if (identity.isPair(node)) {
-          path60 = Object.freeze(path60.concat(node));
-          const ck = await visitAsync_("key", node.key, visitor, path60);
+          path61 = Object.freeze(path61.concat(node));
+          const ck = await visitAsync_("key", node.key, visitor, path61);
           if (ck === BREAK)
             return BREAK;
           else if (ck === REMOVE)
             node.key = null;
-          const cv = await visitAsync_("value", node.value, visitor, path60);
+          const cv = await visitAsync_("value", node.value, visitor, path61);
           if (cv === BREAK)
             return BREAK;
           else if (cv === REMOVE)
@@ -8244,23 +8349,23 @@ var require_visit = __commonJS({
       }
       return visitor;
     }
-    function callVisitor(key, node, visitor, path60) {
+    function callVisitor(key, node, visitor, path61) {
       if (typeof visitor === "function")
-        return visitor(key, node, path60);
+        return visitor(key, node, path61);
       if (identity.isMap(node))
-        return visitor.Map?.(key, node, path60);
+        return visitor.Map?.(key, node, path61);
       if (identity.isSeq(node))
-        return visitor.Seq?.(key, node, path60);
+        return visitor.Seq?.(key, node, path61);
       if (identity.isPair(node))
-        return visitor.Pair?.(key, node, path60);
+        return visitor.Pair?.(key, node, path61);
       if (identity.isScalar(node))
-        return visitor.Scalar?.(key, node, path60);
+        return visitor.Scalar?.(key, node, path61);
       if (identity.isAlias(node))
-        return visitor.Alias?.(key, node, path60);
+        return visitor.Alias?.(key, node, path61);
       return void 0;
     }
-    function replaceNode(key, path60, node) {
-      const parent = path60[path60.length - 1];
+    function replaceNode(key, path61, node) {
+      const parent = path61[path61.length - 1];
       if (identity.isCollection(parent)) {
         parent.items[key] = node;
       } else if (identity.isPair(parent)) {
@@ -8861,10 +8966,10 @@ var require_Collection = __commonJS({
     var createNode2 = require_createNode();
     var identity = require_identity();
     var Node = require_Node();
-    function collectionFromPath(schema, path60, value) {
+    function collectionFromPath(schema, path61, value) {
       let v3 = value;
-      for (let i2 = path60.length - 1; i2 >= 0; --i2) {
-        const k3 = path60[i2];
+      for (let i2 = path61.length - 1; i2 >= 0; --i2) {
+        const k3 = path61[i2];
         if (typeof k3 === "number" && Number.isInteger(k3) && k3 >= 0) {
           const a2 = [];
           a2[k3] = v3;
@@ -8883,7 +8988,7 @@ var require_Collection = __commonJS({
         sourceObjects: /* @__PURE__ */ new Map()
       });
     }
-    var isEmptyPath = (path60) => path60 == null || typeof path60 === "object" && !!path60[Symbol.iterator]().next().done;
+    var isEmptyPath = (path61) => path61 == null || typeof path61 === "object" && !!path61[Symbol.iterator]().next().done;
     var Collection = class extends Node.NodeBase {
       constructor(type, schema) {
         super(type);
@@ -8913,11 +9018,11 @@ var require_Collection = __commonJS({
        * be a Pair instance or a `{ key, value }` object, which may not have a key
        * that already exists in the map.
        */
-      addIn(path60, value) {
-        if (isEmptyPath(path60))
+      addIn(path61, value) {
+        if (isEmptyPath(path61))
           this.add(value);
         else {
-          const [key, ...rest] = path60;
+          const [key, ...rest] = path61;
           const node = this.get(key, true);
           if (identity.isCollection(node))
             node.addIn(rest, value);
@@ -8931,8 +9036,8 @@ var require_Collection = __commonJS({
        * Removes a value from the collection.
        * @returns `true` if the item was found and removed.
        */
-      deleteIn(path60) {
-        const [key, ...rest] = path60;
+      deleteIn(path61) {
+        const [key, ...rest] = path61;
         if (rest.length === 0)
           return this.delete(key);
         const node = this.get(key, true);
@@ -8946,8 +9051,8 @@ var require_Collection = __commonJS({
        * scalar values from their surrounding node; to disable set `keepScalar` to
        * `true` (collections are always returned intact).
        */
-      getIn(path60, keepScalar) {
-        const [key, ...rest] = path60;
+      getIn(path61, keepScalar) {
+        const [key, ...rest] = path61;
         const node = this.get(key, true);
         if (rest.length === 0)
           return !keepScalar && identity.isScalar(node) ? node.value : node;
@@ -8965,8 +9070,8 @@ var require_Collection = __commonJS({
       /**
        * Checks if the collection includes a value with the key `key`.
        */
-      hasIn(path60) {
-        const [key, ...rest] = path60;
+      hasIn(path61) {
+        const [key, ...rest] = path61;
         if (rest.length === 0)
           return this.has(key);
         const node = this.get(key, true);
@@ -8976,8 +9081,8 @@ var require_Collection = __commonJS({
        * Sets a value in this collection. For `!!set`, `value` needs to be a
        * boolean to add/remove the item from the set.
        */
-      setIn(path60, value) {
-        const [key, ...rest] = path60;
+      setIn(path61, value) {
+        const [key, ...rest] = path61;
         if (rest.length === 0) {
           this.set(key, value);
         } else {
@@ -11457,9 +11562,9 @@ var require_Document = __commonJS({
           this.contents.add(value);
       }
       /** Adds a value to the document. */
-      addIn(path60, value) {
+      addIn(path61, value) {
         if (assertCollection(this.contents))
-          this.contents.addIn(path60, value);
+          this.contents.addIn(path61, value);
       }
       /**
        * Create a new `Alias` node, ensuring that the target `node` has the required anchor.
@@ -11534,14 +11639,14 @@ var require_Document = __commonJS({
        * Removes a value from the document.
        * @returns `true` if the item was found and removed.
        */
-      deleteIn(path60) {
-        if (Collection.isEmptyPath(path60)) {
+      deleteIn(path61) {
+        if (Collection.isEmptyPath(path61)) {
           if (this.contents == null)
             return false;
           this.contents = null;
           return true;
         }
-        return assertCollection(this.contents) ? this.contents.deleteIn(path60) : false;
+        return assertCollection(this.contents) ? this.contents.deleteIn(path61) : false;
       }
       /**
        * Returns item at `key`, or `undefined` if not found. By default unwraps
@@ -11556,10 +11661,10 @@ var require_Document = __commonJS({
        * scalar values from their surrounding node; to disable set `keepScalar` to
        * `true` (collections are always returned intact).
        */
-      getIn(path60, keepScalar) {
-        if (Collection.isEmptyPath(path60))
+      getIn(path61, keepScalar) {
+        if (Collection.isEmptyPath(path61))
           return !keepScalar && identity.isScalar(this.contents) ? this.contents.value : this.contents;
-        return identity.isCollection(this.contents) ? this.contents.getIn(path60, keepScalar) : void 0;
+        return identity.isCollection(this.contents) ? this.contents.getIn(path61, keepScalar) : void 0;
       }
       /**
        * Checks if the document includes a value with the key `key`.
@@ -11570,10 +11675,10 @@ var require_Document = __commonJS({
       /**
        * Checks if the document includes a value at `path`.
        */
-      hasIn(path60) {
-        if (Collection.isEmptyPath(path60))
+      hasIn(path61) {
+        if (Collection.isEmptyPath(path61))
           return this.contents !== void 0;
-        return identity.isCollection(this.contents) ? this.contents.hasIn(path60) : false;
+        return identity.isCollection(this.contents) ? this.contents.hasIn(path61) : false;
       }
       /**
        * Sets a value in this document. For `!!set`, `value` needs to be a
@@ -11590,13 +11695,13 @@ var require_Document = __commonJS({
        * Sets a value in this document. For `!!set`, `value` needs to be a
        * boolean to add/remove the item from the set.
        */
-      setIn(path60, value) {
-        if (Collection.isEmptyPath(path60)) {
+      setIn(path61, value) {
+        if (Collection.isEmptyPath(path61)) {
           this.contents = value;
         } else if (this.contents == null) {
-          this.contents = Collection.collectionFromPath(this.schema, Array.from(path60), value);
+          this.contents = Collection.collectionFromPath(this.schema, Array.from(path61), value);
         } else if (assertCollection(this.contents)) {
-          this.contents.setIn(path60, value);
+          this.contents.setIn(path61, value);
         }
       }
       /**
@@ -13536,9 +13641,9 @@ var require_cst_visit = __commonJS({
     visit.BREAK = BREAK;
     visit.SKIP = SKIP;
     visit.REMOVE = REMOVE;
-    visit.itemAtPath = (cst, path60) => {
+    visit.itemAtPath = (cst, path61) => {
       let item = cst;
-      for (const [field, index] of path60) {
+      for (const [field, index] of path61) {
         const tok = item?.[field];
         if (tok && "items" in tok) {
           item = tok.items[index];
@@ -13547,23 +13652,23 @@ var require_cst_visit = __commonJS({
       }
       return item;
     };
-    visit.parentCollection = (cst, path60) => {
-      const parent = visit.itemAtPath(cst, path60.slice(0, -1));
-      const field = path60[path60.length - 1][0];
+    visit.parentCollection = (cst, path61) => {
+      const parent = visit.itemAtPath(cst, path61.slice(0, -1));
+      const field = path61[path61.length - 1][0];
       const coll = parent?.[field];
       if (coll && "items" in coll)
         return coll;
       throw new Error("Parent collection not found");
     };
-    function _visit(path60, item, visitor) {
-      let ctrl = visitor(item, path60);
+    function _visit(path61, item, visitor) {
+      let ctrl = visitor(item, path61);
       if (typeof ctrl === "symbol")
         return ctrl;
       for (const field of ["key", "value"]) {
         const token = item[field];
         if (token && "items" in token) {
           for (let i2 = 0; i2 < token.items.length; ++i2) {
-            const ci = _visit(Object.freeze(path60.concat([[field, i2]])), token.items[i2], visitor);
+            const ci = _visit(Object.freeze(path61.concat([[field, i2]])), token.items[i2], visitor);
             if (typeof ci === "number")
               i2 = ci - 1;
             else if (ci === BREAK)
@@ -13574,10 +13679,10 @@ var require_cst_visit = __commonJS({
             }
           }
           if (typeof ctrl === "function" && field === "key")
-            ctrl = ctrl(item, path60);
+            ctrl = ctrl(item, path61);
         }
       }
-      return typeof ctrl === "function" ? ctrl(item, path60) : ctrl;
+      return typeof ctrl === "function" ? ctrl(item, path61) : ctrl;
     }
     exports.visit = visit;
   }
@@ -14875,14 +14980,14 @@ var require_parser = __commonJS({
             case "scalar":
             case "single-quoted-scalar":
             case "double-quoted-scalar": {
-              const fs43 = this.flowScalar(this.type);
+              const fs44 = this.flowScalar(this.type);
               if (atNextItem || it4.value) {
-                map2.items.push({ start, key: fs43, sep: [] });
+                map2.items.push({ start, key: fs44, sep: [] });
                 this.onKeyLine = true;
               } else if (it4.sep) {
-                this.stack.push(fs43);
+                this.stack.push(fs44);
               } else {
-                Object.assign(it4, { key: fs43, sep: [] });
+                Object.assign(it4, { key: fs44, sep: [] });
                 this.onKeyLine = true;
               }
               return;
@@ -15010,13 +15115,13 @@ var require_parser = __commonJS({
             case "scalar":
             case "single-quoted-scalar":
             case "double-quoted-scalar": {
-              const fs43 = this.flowScalar(this.type);
+              const fs44 = this.flowScalar(this.type);
               if (!it4 || it4.value)
-                fc.items.push({ start: [], key: fs43, sep: [] });
+                fc.items.push({ start: [], key: fs44, sep: [] });
               else if (it4.sep)
-                this.stack.push(fs43);
+                this.stack.push(fs44);
               else
-                Object.assign(it4, { key: fs43, sep: [] });
+                Object.assign(it4, { key: fs44, sep: [] });
               return;
             }
             case "flow-map-end":
@@ -16299,14 +16404,14 @@ var require_url_state_machine = __commonJS({
       return url2.replace(/\u0009|\u000A|\u000D/g, "");
     }
     function shortenPath(url2) {
-      const path60 = url2.path;
-      if (path60.length === 0) {
+      const path61 = url2.path;
+      if (path61.length === 0) {
         return;
       }
-      if (url2.scheme === "file" && path60.length === 1 && isNormalizedWindowsDriveLetter(path60[0])) {
+      if (url2.scheme === "file" && path61.length === 1 && isNormalizedWindowsDriveLetter(path61[0])) {
         return;
       }
-      path60.pop();
+      path61.pop();
     }
     function includesCredentials(url2) {
       return url2.username !== "" || url2.password !== "";
@@ -25529,14 +25634,14 @@ __export(fileFromPath_exports, {
   fileFromPathSync: () => fileFromPathSync,
   isFile: () => isFile
 });
-function createFileFromPath(path60, { mtimeMs, size }, filenameOrOptions, options = {}) {
+function createFileFromPath(path61, { mtimeMs, size }, filenameOrOptions, options = {}) {
   let filename;
   if (isPlainObject_default2(filenameOrOptions)) {
     [options, filename] = [filenameOrOptions, void 0];
   } else {
     filename = filenameOrOptions;
   }
-  const file = new FileFromPath({ path: path60, size, lastModified: mtimeMs });
+  const file = new FileFromPath({ path: path61, size, lastModified: mtimeMs });
   if (!filename) {
     filename = file.name;
   }
@@ -25545,13 +25650,13 @@ function createFileFromPath(path60, { mtimeMs, size }, filenameOrOptions, option
     lastModified: file.lastModified
   });
 }
-function fileFromPathSync(path60, filenameOrOptions, options = {}) {
-  const stats = statSync(path60);
-  return createFileFromPath(path60, stats, filenameOrOptions, options);
+function fileFromPathSync(path61, filenameOrOptions, options = {}) {
+  const stats = statSync(path61);
+  return createFileFromPath(path61, stats, filenameOrOptions, options);
 }
-async function fileFromPath2(path60, filenameOrOptions, options) {
-  const stats = await promises.stat(path60);
-  return createFileFromPath(path60, stats, filenameOrOptions, options);
+async function fileFromPath2(path61, filenameOrOptions, options) {
+  const stats = await promises.stat(path61);
+  return createFileFromPath(path61, stats, filenameOrOptions, options);
 }
 var import_node_domexception, __classPrivateFieldSet4, __classPrivateFieldGet5, _FileFromPath_path, _FileFromPath_start, MESSAGE, FileFromPath;
 var init_fileFromPath = __esm({
@@ -41683,8 +41788,8 @@ var require_utils2 = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path60) {
-      let input = path60;
+    function removeDotSegments(path61) {
+      let input = path61;
       const output = [];
       let nextSlash = -1;
       let len = 0;
@@ -41935,8 +42040,8 @@ var require_schemes = __commonJS({
         wsComponent.secure = void 0;
       }
       if (wsComponent.resourceName) {
-        const [path60, query] = wsComponent.resourceName.split("?");
-        wsComponent.path = path60 && path60 !== "/" ? path60 : void 0;
+        const [path61, query] = wsComponent.resourceName.split("?");
+        wsComponent.path = path61 && path61 !== "/" ? path61 : void 0;
         wsComponent.query = query;
         wsComponent.resourceName = void 0;
       }
@@ -45283,12 +45388,12 @@ var require_dist2 = __commonJS({
         throw new Error(`Unknown format "${name}"`);
       return f3;
     };
-    function addFormats(ajv, list, fs43, exportName) {
+    function addFormats(ajv, list, fs44, exportName) {
       var _a3;
       var _b;
       (_a3 = (_b = ajv.opts.code).formats) !== null && _a3 !== void 0 ? _a3 : _b.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`;
       for (const f3 of list)
-        ajv.addFormat(f3, fs43[f3]);
+        ajv.addFormat(f3, fs44[f3]);
     }
     module.exports = exports = formatsPlugin;
     Object.defineProperty(exports, "__esModule", { value: true });
@@ -46093,8 +46198,8 @@ var require_windows = __commonJS({
   "../../node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/windows.js"(exports, module) {
     module.exports = isexe;
     isexe.sync = sync;
-    var fs43 = __require("fs");
-    function checkPathExt(path60, options) {
+    var fs44 = __require("fs");
+    function checkPathExt(path61, options) {
       var pathext = options.pathExt !== void 0 ? options.pathExt : process.env.PATHEXT;
       if (!pathext) {
         return true;
@@ -46105,25 +46210,25 @@ var require_windows = __commonJS({
       }
       for (var i2 = 0; i2 < pathext.length; i2++) {
         var p3 = pathext[i2].toLowerCase();
-        if (p3 && path60.substr(-p3.length).toLowerCase() === p3) {
+        if (p3 && path61.substr(-p3.length).toLowerCase() === p3) {
           return true;
         }
       }
       return false;
     }
-    function checkStat(stat2, path60, options) {
+    function checkStat(stat2, path61, options) {
       if (!stat2.isSymbolicLink() && !stat2.isFile()) {
         return false;
       }
-      return checkPathExt(path60, options);
+      return checkPathExt(path61, options);
     }
-    function isexe(path60, options, cb) {
-      fs43.stat(path60, function(er2, stat2) {
-        cb(er2, er2 ? false : checkStat(stat2, path60, options));
+    function isexe(path61, options, cb) {
+      fs44.stat(path61, function(er2, stat2) {
+        cb(er2, er2 ? false : checkStat(stat2, path61, options));
       });
     }
-    function sync(path60, options) {
-      return checkStat(fs43.statSync(path60), path60, options);
+    function sync(path61, options) {
+      return checkStat(fs44.statSync(path61), path61, options);
     }
   }
 });
@@ -46133,14 +46238,14 @@ var require_mode = __commonJS({
   "../../node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/mode.js"(exports, module) {
     module.exports = isexe;
     isexe.sync = sync;
-    var fs43 = __require("fs");
-    function isexe(path60, options, cb) {
-      fs43.stat(path60, function(er2, stat2) {
+    var fs44 = __require("fs");
+    function isexe(path61, options, cb) {
+      fs44.stat(path61, function(er2, stat2) {
         cb(er2, er2 ? false : checkStat(stat2, options));
       });
     }
-    function sync(path60, options) {
-      return checkStat(fs43.statSync(path60), options);
+    function sync(path61, options) {
+      return checkStat(fs44.statSync(path61), options);
     }
     function checkStat(stat2, options) {
       return stat2.isFile() && checkMode(stat2, options);
@@ -46173,7 +46278,7 @@ var require_isexe = __commonJS({
     }
     module.exports = isexe;
     isexe.sync = sync;
-    function isexe(path60, options, cb) {
+    function isexe(path61, options, cb) {
       if (typeof options === "function") {
         cb = options;
         options = {};
@@ -46183,7 +46288,7 @@ var require_isexe = __commonJS({
           throw new TypeError("callback not provided");
         }
         return new Promise(function(resolve12, reject) {
-          isexe(path60, options || {}, function(er2, is) {
+          isexe(path61, options || {}, function(er2, is) {
             if (er2) {
               reject(er2);
             } else {
@@ -46192,7 +46297,7 @@ var require_isexe = __commonJS({
           });
         });
       }
-      core(path60, options || {}, function(er2, is) {
+      core(path61, options || {}, function(er2, is) {
         if (er2) {
           if (er2.code === "EACCES" || options && options.ignoreErrors) {
             er2 = null;
@@ -46202,9 +46307,9 @@ var require_isexe = __commonJS({
         cb(er2, is);
       });
     }
-    function sync(path60, options) {
+    function sync(path61, options) {
       try {
-        return core.sync(path60, options || {});
+        return core.sync(path61, options || {});
       } catch (er2) {
         if (options && options.ignoreErrors || er2.code === "EACCES") {
           return false;
@@ -46220,7 +46325,7 @@ var require_isexe = __commonJS({
 var require_which = __commonJS({
   "../../node_modules/.pnpm/which@2.0.2/node_modules/which/which.js"(exports, module) {
     var isWindows3 = process.platform === "win32" || process.env.OSTYPE === "cygwin" || process.env.OSTYPE === "msys";
-    var path60 = __require("path");
+    var path61 = __require("path");
     var COLON = isWindows3 ? ";" : ":";
     var isexe = require_isexe();
     var getNotFoundError = (cmd) => Object.assign(new Error(`not found: ${cmd}`), { code: "ENOENT" });
@@ -46258,7 +46363,7 @@ var require_which = __commonJS({
           return opt.all && found.length ? resolve12(found) : reject(getNotFoundError(cmd));
         const ppRaw = pathEnv[i2];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-        const pCmd = path60.join(pathPart, cmd);
+        const pCmd = path61.join(pathPart, cmd);
         const p3 = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
         resolve12(subStep(p3, i2, 0));
       });
@@ -46285,7 +46390,7 @@ var require_which = __commonJS({
       for (let i2 = 0; i2 < pathEnv.length; i2++) {
         const ppRaw = pathEnv[i2];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-        const pCmd = path60.join(pathPart, cmd);
+        const pCmd = path61.join(pathPart, cmd);
         const p3 = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
         for (let j3 = 0; j3 < pathExt.length; j3++) {
           const cur = p3 + pathExt[j3];
@@ -46331,7 +46436,7 @@ var require_path_key = __commonJS({
 // ../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/resolveCommand.js
 var require_resolveCommand = __commonJS({
   "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/resolveCommand.js"(exports, module) {
-    var path60 = __require("path");
+    var path61 = __require("path");
     var which = require_which();
     var getPathKey = require_path_key();
     function resolveCommandAttempt(parsed, withoutPathExt) {
@@ -46349,7 +46454,7 @@ var require_resolveCommand = __commonJS({
       try {
         resolved = which.sync(parsed.command, {
           path: env3[getPathKey({ env: env3 })],
-          pathExt: withoutPathExt ? path60.delimiter : void 0
+          pathExt: withoutPathExt ? path61.delimiter : void 0
         });
       } catch (e3) {
       } finally {
@@ -46358,7 +46463,7 @@ var require_resolveCommand = __commonJS({
         }
       }
       if (resolved) {
-        resolved = path60.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
+        resolved = path61.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
       }
       return resolved;
     }
@@ -46409,8 +46514,8 @@ var require_shebang_command = __commonJS({
       if (!match) {
         return null;
       }
-      const [path60, argument] = match[0].replace(/#! ?/, "").split(" ");
-      const binary = path60.split("/").pop();
+      const [path61, argument] = match[0].replace(/#! ?/, "").split(" ");
+      const binary = path61.split("/").pop();
       if (binary === "env") {
         return argument;
       }
@@ -46422,16 +46527,16 @@ var require_shebang_command = __commonJS({
 // ../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/readShebang.js
 var require_readShebang = __commonJS({
   "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/readShebang.js"(exports, module) {
-    var fs43 = __require("fs");
+    var fs44 = __require("fs");
     var shebangCommand = require_shebang_command();
     function readShebang(command) {
       const size = 150;
       const buffer = Buffer.alloc(size);
       let fd;
       try {
-        fd = fs43.openSync(command, "r");
-        fs43.readSync(fd, buffer, 0, size, 0);
-        fs43.closeSync(fd);
+        fd = fs44.openSync(command, "r");
+        fs44.readSync(fd, buffer, 0, size, 0);
+        fs44.closeSync(fd);
       } catch (e3) {
       }
       return shebangCommand(buffer.toString());
@@ -46443,7 +46548,7 @@ var require_readShebang = __commonJS({
 // ../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/parse.js
 var require_parse = __commonJS({
   "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/parse.js"(exports, module) {
-    var path60 = __require("path");
+    var path61 = __require("path");
     var resolveCommand = require_resolveCommand();
     var escape4 = require_escape();
     var readShebang = require_readShebang();
@@ -46468,7 +46573,7 @@ var require_parse = __commonJS({
       const needsShell = !isExecutableRegExp.test(commandFile);
       if (parsed.options.forceShell || needsShell) {
         const needsDoubleEscapeMetaChars = isCmdShimRegExp.test(commandFile);
-        parsed.command = path60.normalize(parsed.command);
+        parsed.command = path61.normalize(parsed.command);
         parsed.command = escape4.command(parsed.command);
         parsed.args = parsed.args.map((arg) => escape4.argument(arg, needsDoubleEscapeMetaChars));
         const shellCommand = [parsed.command].concat(parsed.args).join(" ");
@@ -46556,7 +46661,7 @@ var require_cross_spawn = __commonJS({
     var cp = __require("child_process");
     var parse2 = require_parse();
     var enoent = require_enoent();
-    function spawn17(command, args, options) {
+    function spawn14(command, args, options) {
       const parsed = parse2(command, args, options);
       const spawned = cp.spawn(parsed.command, parsed.args, parsed.options);
       enoent.hookChildProcess(spawned, parsed);
@@ -46568,8 +46673,8 @@ var require_cross_spawn = __commonJS({
       result.error = result.error || enoent.verifyENOENTSync(result.status, parsed);
       return result;
     }
-    module.exports = spawn17;
-    module.exports.spawn = spawn17;
+    module.exports = spawn14;
+    module.exports.spawn = spawn14;
     module.exports.sync = spawnSync5;
     module.exports._parse = parse2;
     module.exports._enoent = enoent;
@@ -74297,10 +74402,10 @@ var require_react_reconciler_development = __commonJS({
         var setErrorHandler = null;
         var setSuspenseHandler = null;
         {
-          var copyWithDeleteImpl = function(obj, path60, index2) {
-            var key = path60[index2];
+          var copyWithDeleteImpl = function(obj, path61, index2) {
+            var key = path61[index2];
             var updated = isArray(obj) ? obj.slice() : assign({}, obj);
-            if (index2 + 1 === path60.length) {
+            if (index2 + 1 === path61.length) {
               if (isArray(updated)) {
                 updated.splice(key, 1);
               } else {
@@ -74308,11 +74413,11 @@ var require_react_reconciler_development = __commonJS({
               }
               return updated;
             }
-            updated[key] = copyWithDeleteImpl(obj[key], path60, index2 + 1);
+            updated[key] = copyWithDeleteImpl(obj[key], path61, index2 + 1);
             return updated;
           };
-          var copyWithDelete = function(obj, path60) {
-            return copyWithDeleteImpl(obj, path60, 0);
+          var copyWithDelete = function(obj, path61) {
+            return copyWithDeleteImpl(obj, path61, 0);
           };
           var copyWithRenameImpl = function(obj, oldPath, newPath, index2) {
             var oldKey = oldPath[index2];
@@ -74350,17 +74455,17 @@ var require_react_reconciler_development = __commonJS({
             }
             return copyWithRenameImpl(obj, oldPath, newPath, 0);
           };
-          var copyWithSetImpl = function(obj, path60, index2, value) {
-            if (index2 >= path60.length) {
+          var copyWithSetImpl = function(obj, path61, index2, value) {
+            if (index2 >= path61.length) {
               return value;
             }
-            var key = path60[index2];
+            var key = path61[index2];
             var updated = isArray(obj) ? obj.slice() : assign({}, obj);
-            updated[key] = copyWithSetImpl(obj[key], path60, index2 + 1, value);
+            updated[key] = copyWithSetImpl(obj[key], path61, index2 + 1, value);
             return updated;
           };
-          var copyWithSet = function(obj, path60, value) {
-            return copyWithSetImpl(obj, path60, 0, value);
+          var copyWithSet = function(obj, path61, value) {
+            return copyWithSetImpl(obj, path61, 0, value);
           };
           var findHook = function(fiber, id) {
             var currentHook2 = fiber.memoizedState;
@@ -74370,10 +74475,10 @@ var require_react_reconciler_development = __commonJS({
             }
             return currentHook2;
           };
-          overrideHookState = function(fiber, id, path60, value) {
+          overrideHookState = function(fiber, id, path61, value) {
             var hook = findHook(fiber, id);
             if (hook !== null) {
-              var newState = copyWithSet(hook.memoizedState, path60, value);
+              var newState = copyWithSet(hook.memoizedState, path61, value);
               hook.memoizedState = newState;
               hook.baseState = newState;
               fiber.memoizedProps = assign({}, fiber.memoizedProps);
@@ -74383,10 +74488,10 @@ var require_react_reconciler_development = __commonJS({
               }
             }
           };
-          overrideHookStateDeletePath = function(fiber, id, path60) {
+          overrideHookStateDeletePath = function(fiber, id, path61) {
             var hook = findHook(fiber, id);
             if (hook !== null) {
-              var newState = copyWithDelete(hook.memoizedState, path60);
+              var newState = copyWithDelete(hook.memoizedState, path61);
               hook.memoizedState = newState;
               hook.baseState = newState;
               fiber.memoizedProps = assign({}, fiber.memoizedProps);
@@ -74409,8 +74514,8 @@ var require_react_reconciler_development = __commonJS({
               }
             }
           };
-          overrideProps = function(fiber, path60, value) {
-            fiber.pendingProps = copyWithSet(fiber.memoizedProps, path60, value);
+          overrideProps = function(fiber, path61, value) {
+            fiber.pendingProps = copyWithSet(fiber.memoizedProps, path61, value);
             if (fiber.alternate) {
               fiber.alternate.pendingProps = fiber.pendingProps;
             }
@@ -74419,8 +74524,8 @@ var require_react_reconciler_development = __commonJS({
               scheduleUpdateOnFiber(root, fiber, SyncLane, NoTimestamp);
             }
           };
-          overridePropsDeletePath = function(fiber, path60) {
-            fiber.pendingProps = copyWithDelete(fiber.memoizedProps, path60);
+          overridePropsDeletePath = function(fiber, path61) {
+            fiber.pendingProps = copyWithDelete(fiber.memoizedProps, path61);
             if (fiber.alternate) {
               fiber.alternate.pendingProps = fiber.pendingProps;
             }
@@ -81862,8 +81967,8 @@ var init_ErrorOverview = __esm({
     init_dist7();
     init_Box();
     init_Text();
-    cleanupPath = (path60) => {
-      return path60?.replace(`file://${cwd()}/`, "");
+    cleanupPath = (path61) => {
+      return path61?.replace(`file://${cwd()}/`, "");
     };
     stackUtils = new import_stack_utils.default({
       cwd: cwd(),
@@ -86352,8 +86457,8 @@ function readClipboardImageLinux() {
     if (result.status === 0 && result.stdout && result.stdout.length > 0) {
       const target = nextCachePath();
       try {
-        const fs43 = __require("fs");
-        fs43.writeFileSync(target, result.stdout);
+        const fs44 = __require("fs");
+        fs44.writeFileSync(target, result.stdout);
       } catch {
         return null;
       }
@@ -88004,6 +88109,8 @@ var init_WorkflowsPanel = __esm({
       const [loading, setLoading] = import_react55.default.useState(true);
       const [busy, setBusy] = import_react55.default.useState(false);
       const [status, setStatus] = import_react55.default.useState(null);
+      const [pending, setPending] = import_react55.default.useState(null);
+      const [reply2, setReply] = import_react55.default.useState("");
       const reload = import_react55.default.useCallback(async () => {
         if (!view) {
           setLoading(false);
@@ -88021,7 +88128,7 @@ var init_WorkflowsPanel = __esm({
       import_react55.default.useEffect(() => {
         void reload();
       }, [reload]);
-      const active = !busy && !!view && rows.length > 0;
+      const active = !busy && !pending && !!view && rows.length > 0;
       const run2 = import_react55.default.useCallback(async (wf) => {
         if (!view || busy)
           return;
@@ -88033,6 +88140,17 @@ var init_WorkflowsPanel = __esm({
         setStatus(`running "${wf.name}"\u2026`);
         try {
           const result = await view.run(wf.name);
+          if (result.status === "paused" && result.runId) {
+            const askStep = result.steps.find((s2) => s2.status === "awaiting_input");
+            setPending({
+              runId: result.runId,
+              label: askStep?.id ?? wf.name,
+              prompt: result.output || "The workflow is waiting for your input."
+            });
+            setReply("");
+            setStatus(`\u23F8 "${wf.name}" is waiting for your reply \u2014 type it and press Enter (Esc cancels).`);
+            return;
+          }
           const marks = result.steps.map((s2) => `${stepMark(s2.status)}${s2.id}`).join(" ");
           setStatus(result.ok ? `\u2713 ${wf.name} completed \u2014 ${marks}` : `\u2717 ${wf.name} failed: ${result.error ?? ""} \u2014 ${marks}`);
         } catch (err) {
@@ -88042,6 +88160,35 @@ var init_WorkflowsPanel = __esm({
           void reload();
         }
       }, [view, busy, reload]);
+      const submitReply = import_react55.default.useCallback(async (pendingRun, text) => {
+        if (!view?.resume) {
+          setStatus("resume not supported by this session");
+          return;
+        }
+        const answer = text.trim();
+        if (!answer)
+          return;
+        setPending(null);
+        setReply("");
+        setBusy(true);
+        setStatus(`resuming "${pendingRun.label}"\u2026`);
+        try {
+          const result = await view.resume(pendingRun.runId, answer);
+          if (result.status === "paused" && result.runId) {
+            const askStep = result.steps.find((s2) => s2.status === "awaiting_input");
+            setPending({ runId: result.runId, label: askStep?.id ?? pendingRun.label, prompt: result.output });
+            setStatus("\u23F8 waiting again \u2014 type your reply and press Enter (Esc cancels).");
+          } else {
+            const marks = result.steps.map((s2) => `${stepMark(s2.status)}${s2.id}`).join(" ");
+            setStatus(result.ok ? `\u2713 resumed & completed \u2014 ${marks}` : `\u2717 resume failed: ${result.error ?? ""} \u2014 ${marks}`);
+          }
+        } catch (err) {
+          setStatus(`\u2717 resume errored: ${err instanceof Error ? err.message : String(err)}`);
+        } finally {
+          setBusy(false);
+          void reload();
+        }
+      }, [view, reload]);
       const scroll = useScrollableList({
         total: rows.length,
         windowSize: WINDOW4,
@@ -88067,6 +88214,26 @@ var init_WorkflowsPanel = __esm({
           void run2(wf);
         }
       }, { isActive: active });
+      use_input_default((input, key) => {
+        if (!pending)
+          return;
+        if (key.escape) {
+          setPending(null);
+          setReply("");
+          setStatus("reply cancelled \u2014 the run stays paused (re-run to resume).");
+          return;
+        }
+        if (key.return) {
+          void submitReply(pending, reply2);
+          return;
+        }
+        if (key.backspace || key.delete) {
+          setReply((r2) => r2.slice(0, -1));
+          return;
+        }
+        if (input && !key.ctrl && !key.meta)
+          setReply((r2) => r2 + input);
+      }, { isActive: !busy && !!pending });
       const termWidth = process.stdout.columns ?? 80;
       const descWidth = Math.max(16, termWidth - NAME_COL3 - SCOPE_COL2 - TRIG_COL - 12);
       const slice = rows.slice(scroll.visible.start, scroll.visible.end);
@@ -88076,7 +88243,7 @@ var init_WorkflowsPanel = __esm({
         const absoluteIndex = scroll.visible.start + i2;
         const focused = absoluteIndex === scroll.cursor;
         return (0, import_jsx_runtime27.jsxs)(Box_default, { children: [(0, import_jsx_runtime27.jsx)(Text, { ...focused ? {} : { dimColor: true }, children: focused ? "\u203A " : "  " }), (0, import_jsx_runtime27.jsx)(Text, { color: wf.enabled ? Colors.active : void 0, dimColor: !wf.enabled, children: wf.enabled ? "\u25CF " : "\u25CB " }), (0, import_jsx_runtime27.jsx)(Box_default, { width: NAME_COL3, children: (0, import_jsx_runtime27.jsx)(Text, { bold: focused, children: truncate8(wf.name, NAME_COL3 - 1) }) }), (0, import_jsx_runtime27.jsx)(Box_default, { width: SCOPE_COL2, children: (0, import_jsx_runtime27.jsx)(Text, { dimColor: true, children: wf.scope }) }), (0, import_jsx_runtime27.jsx)(Box_default, { width: TRIG_COL, children: (0, import_jsx_runtime27.jsx)(Text, { dimColor: true, wrap: "truncate", children: wf.triggers }) }), (0, import_jsx_runtime27.jsx)(Box_default, { width: descWidth, children: (0, import_jsx_runtime27.jsx)(Text, { dimColor: true, wrap: "truncate", children: oneLine5(wf.description) }) })] }, wf.name);
-      }), scroll.canScrollDown ? (0, import_jsx_runtime27.jsx)(Text, { dimColor: true, children: `  \u2193 ${rows.length - scroll.visible.end} more below` }) : null, status ? (0, import_jsx_runtime27.jsx)(Box_default, { marginTop: 1, children: (0, import_jsx_runtime27.jsx)(Text, { wrap: "truncate-end", children: status }) }) : null] });
+      }), scroll.canScrollDown ? (0, import_jsx_runtime27.jsx)(Text, { dimColor: true, children: `  \u2193 ${rows.length - scroll.visible.end} more below` }) : null, pending ? (0, import_jsx_runtime27.jsxs)(Box_default, { flexDirection: "column", marginTop: 1, borderStyle: "round", borderColor: Colors.active, paddingX: 1, children: [(0, import_jsx_runtime27.jsxs)(Text, { color: Colors.active, children: ["\u23F8 Workflow waiting \xB7 ", pending.label] }), pending.prompt ? (0, import_jsx_runtime27.jsx)(Text, { wrap: "wrap", children: oneLine5(pending.prompt).slice(0, 280) }) : null, (0, import_jsx_runtime27.jsxs)(Box_default, { marginTop: 1, children: [(0, import_jsx_runtime27.jsx)(Text, { children: "reply \u203A " }), (0, import_jsx_runtime27.jsx)(Text, { children: reply2 || " " })] }), (0, import_jsx_runtime27.jsx)(Text, { dimColor: true, children: "Enter send \xB7 Esc cancel" })] }) : null, status ? (0, import_jsx_runtime27.jsx)(Box_default, { marginTop: 1, children: (0, import_jsx_runtime27.jsx)(Text, { wrap: "truncate-end", children: status }) }) : null] });
     };
   }
 });
@@ -90717,10 +90884,10 @@ var require_segments = __commonJS({
       const segs = getSegmentsFromString(data, Utils.isKanjiModeEnabled());
       const nodes = buildNodes(segs);
       const graph = buildGraph(nodes, version);
-      const path60 = dijkstra.find_path(graph.map, "start", "end");
+      const path61 = dijkstra.find_path(graph.map, "start", "end");
       const optimizedSegs = [];
-      for (let i2 = 1; i2 < path60.length - 1; i2++) {
-        optimizedSegs.push(graph.table[path60[i2]].node);
+      for (let i2 = 1; i2 < path61.length - 1; i2++) {
+        optimizedSegs.push(graph.table[path61[i2]].node);
       }
       return exports.fromArray(mergeSegments(optimizedSegs));
     };
@@ -93131,7 +93298,7 @@ var require_utils4 = __commonJS({
 // ../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/renderer/png.js
 var require_png2 = __commonJS({
   "../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/renderer/png.js"(exports) {
-    var fs43 = __require("fs");
+    var fs44 = __require("fs");
     var PNG = require_png().PNG;
     var Utils = require_utils4();
     exports.render = function render2(qrData, options) {
@@ -93172,7 +93339,7 @@ var require_png2 = __commonJS({
       });
       png.pack();
     };
-    exports.renderToFile = function renderToFile(path60, qrData, options, cb) {
+    exports.renderToFile = function renderToFile(path61, qrData, options, cb) {
       if (typeof cb === "undefined") {
         cb = options;
         options = void 0;
@@ -93183,7 +93350,7 @@ var require_png2 = __commonJS({
         called = true;
         cb.apply(null, args);
       };
-      const stream = fs43.createWriteStream(path60);
+      const stream = fs44.createWriteStream(path61);
       stream.on("error", done);
       stream.on("close", done);
       exports.renderToFileStream(stream, qrData, options);
@@ -93245,14 +93412,14 @@ var require_utf8 = __commonJS({
       }
       return output;
     };
-    exports.renderToFile = function renderToFile(path60, qrData, options, cb) {
+    exports.renderToFile = function renderToFile(path61, qrData, options, cb) {
       if (typeof cb === "undefined") {
         cb = options;
         options = void 0;
       }
-      const fs43 = __require("fs");
+      const fs44 = __require("fs");
       const utf8 = exports.render(qrData, options);
-      fs43.writeFile(path60, utf8, cb);
+      fs44.writeFile(path61, utf8, cb);
     };
   }
 });
@@ -93373,7 +93540,7 @@ var require_svg_tag = __commonJS({
       return str2;
     }
     function qrToPath(data, size, margin) {
-      let path60 = "";
+      let path61 = "";
       let moveBy = 0;
       let newRow = false;
       let lineLength = 0;
@@ -93384,19 +93551,19 @@ var require_svg_tag = __commonJS({
         if (data[i2]) {
           lineLength++;
           if (!(i2 > 0 && col > 0 && data[i2 - 1])) {
-            path60 += newRow ? svgCmd("M", col + margin, 0.5 + row + margin) : svgCmd("m", moveBy, 0);
+            path61 += newRow ? svgCmd("M", col + margin, 0.5 + row + margin) : svgCmd("m", moveBy, 0);
             moveBy = 0;
             newRow = false;
           }
           if (!(col + 1 < size && data[i2 + 1])) {
-            path60 += svgCmd("h", lineLength);
+            path61 += svgCmd("h", lineLength);
             lineLength = 0;
           }
         } else {
           moveBy++;
         }
       }
-      return path60;
+      return path61;
     }
     exports.render = function render2(qrData, options, cb) {
       const opts = Utils.getOptions(options);
@@ -93404,10 +93571,10 @@ var require_svg_tag = __commonJS({
       const data = qrData.modules.data;
       const qrcodesize = size + opts.margin * 2;
       const bg = !opts.color.light.a ? "" : "<path " + getColorAttrib(opts.color.light, "fill") + ' d="M0 0h' + qrcodesize + "v" + qrcodesize + 'H0z"/>';
-      const path60 = "<path " + getColorAttrib(opts.color.dark, "stroke") + ' d="' + qrToPath(data, size, opts.margin) + '"/>';
+      const path61 = "<path " + getColorAttrib(opts.color.dark, "stroke") + ' d="' + qrToPath(data, size, opts.margin) + '"/>';
       const viewBox = 'viewBox="0 0 ' + qrcodesize + " " + qrcodesize + '"';
       const width = !opts.width ? "" : 'width="' + opts.width + '" height="' + opts.width + '" ';
-      const svgTag = '<svg xmlns="http://www.w3.org/2000/svg" ' + width + viewBox + ' shape-rendering="crispEdges">' + bg + path60 + "</svg>\n";
+      const svgTag = '<svg xmlns="http://www.w3.org/2000/svg" ' + width + viewBox + ' shape-rendering="crispEdges">' + bg + path61 + "</svg>\n";
       if (typeof cb === "function") {
         cb(null, svgTag);
       }
@@ -93421,15 +93588,15 @@ var require_svg = __commonJS({
   "../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/renderer/svg.js"(exports) {
     var svgTagRenderer = require_svg_tag();
     exports.render = svgTagRenderer.render;
-    exports.renderToFile = function renderToFile(path60, qrData, options, cb) {
+    exports.renderToFile = function renderToFile(path61, qrData, options, cb) {
       if (typeof cb === "undefined") {
         cb = options;
         options = void 0;
       }
-      const fs43 = __require("fs");
+      const fs44 = __require("fs");
       const svgTag = exports.render(qrData, options);
       const xmlStr = '<?xml version="1.0" encoding="utf-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">' + svgTag;
-      fs43.writeFile(path60, xmlStr, cb);
+      fs44.writeFile(path61, xmlStr, cb);
     };
   }
 });
@@ -93587,8 +93754,8 @@ var require_server = __commonJS({
         cb
       };
     }
-    function getTypeFromFilename(path60) {
-      return path60.slice((path60.lastIndexOf(".") - 1 >>> 0) + 2).toLowerCase();
+    function getTypeFromFilename(path61) {
+      return path61.slice((path61.lastIndexOf(".") - 1 >>> 0) + 2).toLowerCase();
     }
     function getRendererFromType(type) {
       switch (type) {
@@ -93652,17 +93819,17 @@ var require_server = __commonJS({
       const renderer2 = getRendererFromType(params.opts.type);
       return render2(renderer2.renderToBuffer, text, params);
     };
-    exports.toFile = function toFile3(path60, text, opts, cb) {
-      if (typeof path60 !== "string" || !(typeof text === "string" || typeof text === "object")) {
+    exports.toFile = function toFile3(path61, text, opts, cb) {
+      if (typeof path61 !== "string" || !(typeof text === "string" || typeof text === "object")) {
         throw new Error("Invalid argument");
       }
       if (arguments.length < 3 && !canPromise()) {
         throw new Error("Too few arguments provided");
       }
       const params = checkParams(text, opts, cb);
-      const type = params.opts.type || getTypeFromFilename(path60);
+      const type = params.opts.type || getTypeFromFilename(path61);
       const renderer2 = getRendererFromType(type);
-      const renderToFile = renderer2.renderToFile.bind(null, path60);
+      const renderToFile = renderer2.renderToFile.bind(null, path61);
       return render2(renderToFile, text, params);
     };
     exports.toFileStream = function toFileStream(stream, text, opts) {
@@ -94482,14 +94649,14 @@ var require_util2 = __commonJS({
         }
         const port = url2.port != null ? url2.port : url2.protocol === "https:" ? 443 : 80;
         let origin = url2.origin != null ? url2.origin : `${url2.protocol || ""}//${url2.hostname || ""}:${port}`;
-        let path60 = url2.path != null ? url2.path : `${url2.pathname || ""}${url2.search || ""}`;
+        let path61 = url2.path != null ? url2.path : `${url2.pathname || ""}${url2.search || ""}`;
         if (origin[origin.length - 1] === "/") {
           origin = origin.slice(0, origin.length - 1);
         }
-        if (path60 && path60[0] !== "/") {
-          path60 = `/${path60}`;
+        if (path61 && path61[0] !== "/") {
+          path61 = `/${path61}`;
         }
-        return new URL(`${origin}${path60}`);
+        return new URL(`${origin}${path61}`);
       }
       if (!isHttpOrHttpsPrefixed(url2.origin || url2.protocol)) {
         throw new InvalidArgumentError("Invalid URL protocol: the URL must start with `http:` or `https:`.");
@@ -94939,39 +95106,39 @@ var require_diagnostics = __commonJS({
       });
       diagnosticsChannel.channel("undici:client:sendHeaders").subscribe((evt) => {
         const {
-          request: { method, path: path60, origin }
+          request: { method, path: path61, origin }
         } = evt;
-        debuglog("sending request to %s %s/%s", method, origin, path60);
+        debuglog("sending request to %s %s/%s", method, origin, path61);
       });
       diagnosticsChannel.channel("undici:request:headers").subscribe((evt) => {
         const {
-          request: { method, path: path60, origin },
+          request: { method, path: path61, origin },
           response: { statusCode }
         } = evt;
         debuglog(
           "received response to %s %s/%s - HTTP %d",
           method,
           origin,
-          path60,
+          path61,
           statusCode
         );
       });
       diagnosticsChannel.channel("undici:request:trailers").subscribe((evt) => {
         const {
-          request: { method, path: path60, origin }
+          request: { method, path: path61, origin }
         } = evt;
-        debuglog("trailers received from %s %s/%s", method, origin, path60);
+        debuglog("trailers received from %s %s/%s", method, origin, path61);
       });
       diagnosticsChannel.channel("undici:request:error").subscribe((evt) => {
         const {
-          request: { method, path: path60, origin },
+          request: { method, path: path61, origin },
           error: error2
         } = evt;
         debuglog(
           "request to %s %s/%s errored - %s",
           method,
           origin,
-          path60,
+          path61,
           error2.message
         );
       });
@@ -95020,9 +95187,9 @@ var require_diagnostics = __commonJS({
         });
         diagnosticsChannel.channel("undici:client:sendHeaders").subscribe((evt) => {
           const {
-            request: { method, path: path60, origin }
+            request: { method, path: path61, origin }
           } = evt;
-          debuglog("sending request to %s %s/%s", method, origin, path60);
+          debuglog("sending request to %s %s/%s", method, origin, path61);
         });
       }
       diagnosticsChannel.channel("undici:websocket:open").subscribe((evt) => {
@@ -95084,7 +95251,7 @@ var require_request = __commonJS({
     var kHandler = /* @__PURE__ */ Symbol("handler");
     var Request4 = class {
       constructor(origin, {
-        path: path60,
+        path: path61,
         method,
         body,
         headers,
@@ -95099,11 +95266,11 @@ var require_request = __commonJS({
         expectContinue,
         servername
       }, handler) {
-        if (typeof path60 !== "string") {
+        if (typeof path61 !== "string") {
           throw new InvalidArgumentError("path must be a string");
-        } else if (path60[0] !== "/" && !(path60.startsWith("http://") || path60.startsWith("https://")) && method !== "CONNECT") {
+        } else if (path61[0] !== "/" && !(path61.startsWith("http://") || path61.startsWith("https://")) && method !== "CONNECT") {
           throw new InvalidArgumentError("path must be an absolute URL or start with a slash");
-        } else if (invalidPathRegex.test(path60)) {
+        } else if (invalidPathRegex.test(path61)) {
           throw new InvalidArgumentError("invalid request path");
         }
         if (typeof method !== "string") {
@@ -95169,7 +95336,7 @@ var require_request = __commonJS({
         this.completed = false;
         this.aborted = false;
         this.upgrade = upgrade || null;
-        this.path = query ? buildURL(path60, query) : path60;
+        this.path = query ? buildURL(path61, query) : path61;
         this.origin = origin;
         this.idempotent = idempotent == null ? method === "HEAD" || method === "GET" : idempotent;
         this.blocking = blocking == null ? false : blocking;
@@ -99707,7 +99874,7 @@ var require_client_h1 = __commonJS({
       return method !== "GET" && method !== "HEAD" && method !== "OPTIONS" && method !== "TRACE" && method !== "CONNECT";
     }
     function writeH1(client, request) {
-      const { method, path: path60, host, upgrade, blocking, reset } = request;
+      const { method, path: path61, host, upgrade, blocking, reset } = request;
       let { body, headers, contentLength } = request;
       const expectsPayload = method === "PUT" || method === "POST" || method === "PATCH" || method === "QUERY" || method === "PROPFIND" || method === "PROPPATCH";
       if (util.isFormDataLike(body)) {
@@ -99773,7 +99940,7 @@ var require_client_h1 = __commonJS({
       if (blocking) {
         socket[kBlocking] = true;
       }
-      let header = `${method} ${path60} HTTP/1.1\r
+      let header = `${method} ${path61} HTTP/1.1\r
 `;
       if (typeof host === "string") {
         header += `host: ${host}\r
@@ -100298,7 +100465,7 @@ var require_client_h2 = __commonJS({
     }
     function writeH2(client, request) {
       const session = client[kHTTP2Session];
-      const { method, path: path60, host, upgrade, expectContinue, signal, headers: reqHeaders } = request;
+      const { method, path: path61, host, upgrade, expectContinue, signal, headers: reqHeaders } = request;
       let { body } = request;
       if (upgrade) {
         util.errorRequest(client, request, new Error("Upgrade not supported for H2"));
@@ -100365,7 +100532,7 @@ var require_client_h2 = __commonJS({
         });
         return true;
       }
-      headers[HTTP2_HEADER_PATH] = path60;
+      headers[HTTP2_HEADER_PATH] = path61;
       headers[HTTP2_HEADER_SCHEME] = "https";
       const expectsPayload = method === "PUT" || method === "POST" || method === "PATCH";
       if (body && typeof body.read === "function") {
@@ -100717,9 +100884,9 @@ var require_redirect_handler = __commonJS({
           return this.handler.onHeaders(statusCode, headers, resume, statusText);
         }
         const { origin, pathname, search } = util.parseURL(new URL(this.location, this.opts.origin && new URL(this.opts.path, this.opts.origin)));
-        const path60 = search ? `${pathname}${search}` : pathname;
+        const path61 = search ? `${pathname}${search}` : pathname;
         this.opts.headers = cleanRequestHeaders(this.opts.headers, statusCode === 303, this.opts.origin !== origin);
-        this.opts.path = path60;
+        this.opts.path = path61;
         this.opts.origin = origin;
         this.opts.maxRedirections = 0;
         this.opts.query = null;
@@ -101944,10 +102111,10 @@ var require_proxy_agent = __commonJS({
         };
         const {
           origin,
-          path: path60 = "/",
+          path: path61 = "/",
           headers = {}
         } = opts;
-        opts.path = origin + path60;
+        opts.path = origin + path61;
         if (!("host" in headers) && !("Host" in headers)) {
           const { host } = new URL3(origin);
           headers.host = host;
@@ -103855,20 +104022,20 @@ var require_mock_utils = __commonJS({
       }
       return true;
     }
-    function safeUrl(path60) {
-      if (typeof path60 !== "string") {
-        return path60;
+    function safeUrl(path61) {
+      if (typeof path61 !== "string") {
+        return path61;
       }
-      const pathSegments = path60.split("?");
+      const pathSegments = path61.split("?");
       if (pathSegments.length !== 2) {
-        return path60;
+        return path61;
       }
       const qp = new URLSearchParams(pathSegments.pop());
       qp.sort();
       return [...pathSegments, qp.toString()].join("?");
     }
-    function matchKey(mockDispatch2, { path: path60, method, body, headers }) {
-      const pathMatch = matchValue(mockDispatch2.path, path60);
+    function matchKey(mockDispatch2, { path: path61, method, body, headers }) {
+      const pathMatch = matchValue(mockDispatch2.path, path61);
       const methodMatch = matchValue(mockDispatch2.method, method);
       const bodyMatch = typeof mockDispatch2.body !== "undefined" ? matchValue(mockDispatch2.body, body) : true;
       const headersMatch = matchHeaders(mockDispatch2, headers);
@@ -103890,7 +104057,7 @@ var require_mock_utils = __commonJS({
     function getMockDispatch(mockDispatches, key) {
       const basePath = key.query ? buildURL(key.path, key.query) : key.path;
       const resolvedPath = typeof basePath === "string" ? safeUrl(basePath) : basePath;
-      let matchedMockDispatches = mockDispatches.filter(({ consumed }) => !consumed).filter(({ path: path60 }) => matchValue(safeUrl(path60), resolvedPath));
+      let matchedMockDispatches = mockDispatches.filter(({ consumed }) => !consumed).filter(({ path: path61 }) => matchValue(safeUrl(path61), resolvedPath));
       if (matchedMockDispatches.length === 0) {
         throw new MockNotMatchedError(`Mock dispatch not matched for path '${resolvedPath}'`);
       }
@@ -103928,9 +104095,9 @@ var require_mock_utils = __commonJS({
       }
     }
     function buildKey(opts) {
-      const { path: path60, method, body, headers, query } = opts;
+      const { path: path61, method, body, headers, query } = opts;
       return {
-        path: path60,
+        path: path61,
         method,
         body,
         headers,
@@ -104388,10 +104555,10 @@ var require_pending_interceptors_formatter = __commonJS({
       }
       format(pendingInterceptors) {
         const withPrettyHeaders = pendingInterceptors.map(
-          ({ method, path: path60, data: { statusCode }, persist, times, timesInvoked, origin }) => ({
+          ({ method, path: path61, data: { statusCode }, persist, times, timesInvoked, origin }) => ({
             Method: method,
             Origin: origin,
-            Path: path60,
+            Path: path61,
             "Status code": statusCode,
             Persistent: persist ? PERSISTENT : NOT_PERSISTENT,
             Invocations: timesInvoked,
@@ -109230,9 +109397,9 @@ var require_util7 = __commonJS({
         }
       }
     }
-    function validateCookiePath(path60) {
-      for (let i2 = 0; i2 < path60.length; ++i2) {
-        const code = path60.charCodeAt(i2);
+    function validateCookiePath(path61) {
+      for (let i2 = 0; i2 < path61.length; ++i2) {
+        const code = path61.charCodeAt(i2);
         if (code < 32 || // exclude CTLs (0-31)
         code === 127 || // DEL
         code === 59) {
@@ -111892,11 +112059,11 @@ var require_undici = __commonJS({
           if (typeof opts.path !== "string") {
             throw new InvalidArgumentError("invalid opts.path");
           }
-          let path60 = opts.path;
+          let path61 = opts.path;
           if (!opts.path.startsWith("/")) {
-            path60 = `/${path60}`;
+            path61 = `/${path61}`;
           }
-          url2 = new URL(util.parseOrigin(url2).origin + path60);
+          url2 = new URL(util.parseOrigin(url2).origin + path61);
         } else {
           if (!opts) {
             opts = typeof url2 === "object" ? url2 : {};
@@ -113793,7 +113960,12 @@ var VaultStore = class {
     }
     const parsed = JSON.parse(raw);
     if (parsed.version !== 1 || parsed.kdf !== "scrypt") {
-      throw new Error(`Unsupported vault file: version=${parsed.version} kdf=${parsed.kdf}`);
+      throw new MoxxyError({
+        code: "VAULT_CORRUPT",
+        message: `Unsupported vault file: version=${parsed.version} kdf=${parsed.kdf}`,
+        hint: `This vault was written by an incompatible version. Back up and remove ${this.filePath} to re-initialize.`,
+        context: { filePath: this.filePath }
+      });
     }
     this.file = parsed;
     const salt = Buffer.from(parsed.salt, "base64");
@@ -113977,8 +114149,6 @@ function firstEntry(entries) {
   }
   return void 0;
 }
-
-// ../plugin-vault/dist/placeholder.js
 var PLACEHOLDER_RE = /\$\{vault:([A-Za-z0-9_.-]+)\}/g;
 async function resolveString(input, vault) {
   PLACEHOLDER_RE.lastIndex = 0;
@@ -113992,8 +114162,14 @@ async function resolveString(input, vault) {
   const values = /* @__PURE__ */ new Map();
   for (const name of names) {
     const value = await vault.get(name);
-    if (value === null)
-      throw new Error(`vault: missing required entry '${name}' referenced in config`);
+    if (value === null) {
+      throw new MoxxyError({
+        code: "CONFIG_INVALID",
+        message: `vault: missing required entry '${name}' referenced in config`,
+        hint: `Add it with \`/vault set ${name} <value>\` (or the \`vault_set\` tool), then retry.`,
+        context: { name }
+      });
+    }
     values.set(name, value);
   }
   return input.replace(PLACEHOLDER_RE, (_match, name) => values.get(name) ?? "");
@@ -114118,8 +114294,14 @@ ${vaultCommandUsage()}` };
         permission: { action: "prompt" },
         handler: async ({ name }) => {
           const value = await vault.get(name);
-          if (value === null)
-            throw new Error(`vault: '${name}' not found`);
+          if (value === null) {
+            throw new MoxxyError({
+              code: "TOOL_ERROR",
+              message: `vault: '${name}' not found`,
+              hint: "Use `vault_list` to see stored entry names.",
+              context: { name }
+            });
+          }
           return value;
         }
       }),
@@ -115826,13 +116008,13 @@ var MultipartBody = class {
   }
 };
 var fileFromPathWarned = false;
-async function fileFromPath3(path60, ...args) {
+async function fileFromPath3(path61, ...args) {
   const { fileFromPath: _fileFromPath } = await Promise.resolve().then(() => (init_fileFromPath(), fileFromPath_exports));
   if (!fileFromPathWarned) {
-    console.warn(`fileFromPath is deprecated; use fs.createReadStream(${JSON.stringify(path60)}) instead`);
+    console.warn(`fileFromPath is deprecated; use fs.createReadStream(${JSON.stringify(path61)}) instead`);
     fileFromPathWarned = true;
   }
-  return await _fileFromPath(path60, ...args);
+  return await _fileFromPath(path61, ...args);
 }
 var defaultHttpAgent = new import_agentkeepalive.default({ keepAlive: true, timeout: 5 * 60 * 1e3 });
 var defaultHttpsAgent = new import_agentkeepalive.default.HttpsAgent({ keepAlive: true, timeout: 5 * 60 * 1e3 });
@@ -116555,29 +116737,29 @@ var APIClient = class {
   defaultIdempotencyKey() {
     return `stainless-node-retry-${uuid4()}`;
   }
-  get(path60, opts) {
-    return this.methodRequest("get", path60, opts);
+  get(path61, opts) {
+    return this.methodRequest("get", path61, opts);
   }
-  post(path60, opts) {
-    return this.methodRequest("post", path60, opts);
+  post(path61, opts) {
+    return this.methodRequest("post", path61, opts);
   }
-  patch(path60, opts) {
-    return this.methodRequest("patch", path60, opts);
+  patch(path61, opts) {
+    return this.methodRequest("patch", path61, opts);
   }
-  put(path60, opts) {
-    return this.methodRequest("put", path60, opts);
+  put(path61, opts) {
+    return this.methodRequest("put", path61, opts);
   }
-  delete(path60, opts) {
-    return this.methodRequest("delete", path60, opts);
+  delete(path61, opts) {
+    return this.methodRequest("delete", path61, opts);
   }
-  methodRequest(method, path60, opts) {
+  methodRequest(method, path61, opts) {
     return this.request(Promise.resolve(opts).then(async (opts2) => {
       const body = opts2 && isBlobLike(opts2?.body) ? new DataView(await opts2.body.arrayBuffer()) : opts2?.body instanceof DataView ? opts2.body : opts2?.body instanceof ArrayBuffer ? new DataView(opts2.body) : opts2 && ArrayBuffer.isView(opts2?.body) ? new DataView(opts2.body.buffer) : opts2?.body;
-      return { method, path: path60, ...opts2, body };
+      return { method, path: path61, ...opts2, body };
     }));
   }
-  getAPIList(path60, Page3, opts) {
-    return this.requestAPIList(Page3, { method: "get", path: path60, ...opts });
+  getAPIList(path61, Page3, opts) {
+    return this.requestAPIList(Page3, { method: "get", path: path61, ...opts });
   }
   calculateContentLength(body) {
     if (typeof body === "string") {
@@ -116596,10 +116778,10 @@ var APIClient = class {
   }
   buildRequest(inputOptions, { retryCount = 0 } = {}) {
     const options = { ...inputOptions };
-    const { method, path: path60, query, headers = {} } = options;
+    const { method, path: path61, query, headers = {} } = options;
     const body = ArrayBuffer.isView(options.body) || options.__binaryRequest && typeof options.body === "string" ? options.body : isMultipartBody(options.body) ? options.body.body : options.body ? JSON.stringify(options.body, null, 2) : null;
     const contentLength = this.calculateContentLength(body);
-    const url2 = this.buildURL(path60, query);
+    const url2 = this.buildURL(path61, query);
     if ("timeout" in options)
       validatePositiveInteger("timeout", options.timeout);
     options.timeout = options.timeout ?? this.timeout;
@@ -116723,8 +116905,8 @@ var APIClient = class {
     const request = this.makeRequest(options, null);
     return new PagePromise(this, request, Page3);
   }
-  buildURL(path60, query) {
-    const url2 = isAbsoluteURL(path60) ? new URL(path60) : new URL(this.baseURL + (this.baseURL.endsWith("/") && path60.startsWith("/") ? path60.slice(1) : path60));
+  buildURL(path61, query) {
+    const url2 = isAbsoluteURL(path61) ? new URL(path61) : new URL(this.baseURL + (this.baseURL.endsWith("/") && path61.startsWith("/") ? path61.slice(1) : path61));
     const defaultQuery = this.defaultQuery();
     if (!isEmptyObj(defaultQuery)) {
       query = { ...defaultQuery, ...query };
@@ -119135,9 +119317,9 @@ function toAnthropicTools(tools, opts = {}) {
 
 // ../plugin-provider-anthropic/dist/provider.js
 var anthropicModels = [
-  { id: "claude-opus-4-7", contextWindow: 8e5, maxOutputTokens: 8e3, supportsTools: true, supportsStreaming: true, supportsImages: true, supportsDocuments: true },
-  { id: "claude-sonnet-4-6", contextWindow: 2e5, maxOutputTokens: 8e3, supportsTools: true, supportsStreaming: true, supportsImages: true, supportsDocuments: true },
-  { id: "claude-haiku-4-5-20251001", contextWindow: 2e5, maxOutputTokens: 8e3, supportsTools: true, supportsStreaming: true, supportsImages: true, supportsDocuments: true }
+  { id: "claude-opus-4-7", contextWindow: 1e6, maxOutputTokens: 128e3, supportsTools: true, supportsStreaming: true, supportsImages: true, supportsDocuments: true },
+  { id: "claude-sonnet-4-6", contextWindow: 1e6, maxOutputTokens: 64e3, supportsTools: true, supportsStreaming: true, supportsImages: true, supportsDocuments: true },
+  { id: "claude-haiku-4-5-20251001", contextWindow: 2e5, maxOutputTokens: 64e3, supportsTools: true, supportsStreaming: true, supportsImages: true, supportsDocuments: true }
 ];
 var AnthropicProvider = class {
   name;
@@ -119396,9 +119578,13 @@ var AnthropicProvider = class {
     try {
       const result = await this.client.messages.countTokens({
         model: req.model || this.defaultModel,
-        system: systemForCount,
+        ...systemForCount !== void 0 ? { system: systemForCount } : {},
+        // NARROW cast: our hand-rolled message/tool shapes carry `media_type:
+        // string`, which the SDK narrows to a literal union it can't see we
+        // never violate. The method itself is fully typed (no `as unknown` on
+        // the resource anymore); only these two args need the structural cast.
         messages,
-        tools
+        ...tools !== void 0 ? { tools } : {}
       });
       return result.input_tokens;
     } catch {
@@ -119883,13 +120069,13 @@ var MultipartBody2 = class {
   }
 };
 var fileFromPathWarned2 = false;
-async function fileFromPath5(path60, ...args) {
+async function fileFromPath5(path61, ...args) {
   const { fileFromPath: _fileFromPath } = await Promise.resolve().then(() => (init_fileFromPath(), fileFromPath_exports));
   if (!fileFromPathWarned2) {
-    console.warn(`fileFromPath is deprecated; use fs.createReadStream(${JSON.stringify(path60)}) instead`);
+    console.warn(`fileFromPath is deprecated; use fs.createReadStream(${JSON.stringify(path61)}) instead`);
     fileFromPathWarned2 = true;
   }
-  return await _fileFromPath(path60, ...args);
+  return await _fileFromPath(path61, ...args);
 }
 var defaultHttpAgent2 = new import_agentkeepalive2.default({ keepAlive: true, timeout: 5 * 60 * 1e3 });
 var defaultHttpsAgent2 = new import_agentkeepalive2.default.HttpsAgent({ keepAlive: true, timeout: 5 * 60 * 1e3 });
@@ -120667,29 +120853,29 @@ var APIClient2 = class {
   defaultIdempotencyKey() {
     return `stainless-node-retry-${uuid42()}`;
   }
-  get(path60, opts) {
-    return this.methodRequest("get", path60, opts);
+  get(path61, opts) {
+    return this.methodRequest("get", path61, opts);
   }
-  post(path60, opts) {
-    return this.methodRequest("post", path60, opts);
+  post(path61, opts) {
+    return this.methodRequest("post", path61, opts);
   }
-  patch(path60, opts) {
-    return this.methodRequest("patch", path60, opts);
+  patch(path61, opts) {
+    return this.methodRequest("patch", path61, opts);
   }
-  put(path60, opts) {
-    return this.methodRequest("put", path60, opts);
+  put(path61, opts) {
+    return this.methodRequest("put", path61, opts);
   }
-  delete(path60, opts) {
-    return this.methodRequest("delete", path60, opts);
+  delete(path61, opts) {
+    return this.methodRequest("delete", path61, opts);
   }
-  methodRequest(method, path60, opts) {
+  methodRequest(method, path61, opts) {
     return this.request(Promise.resolve(opts).then(async (opts2) => {
       const body = opts2 && isBlobLike2(opts2?.body) ? new DataView(await opts2.body.arrayBuffer()) : opts2?.body instanceof DataView ? opts2.body : opts2?.body instanceof ArrayBuffer ? new DataView(opts2.body) : opts2 && ArrayBuffer.isView(opts2?.body) ? new DataView(opts2.body.buffer) : opts2?.body;
-      return { method, path: path60, ...opts2, body };
+      return { method, path: path61, ...opts2, body };
     }));
   }
-  getAPIList(path60, Page3, opts) {
-    return this.requestAPIList(Page3, { method: "get", path: path60, ...opts });
+  getAPIList(path61, Page3, opts) {
+    return this.requestAPIList(Page3, { method: "get", path: path61, ...opts });
   }
   calculateContentLength(body) {
     if (typeof body === "string") {
@@ -120708,10 +120894,10 @@ var APIClient2 = class {
   }
   buildRequest(inputOptions, { retryCount = 0 } = {}) {
     const options = { ...inputOptions };
-    const { method, path: path60, query, headers = {} } = options;
+    const { method, path: path61, query, headers = {} } = options;
     const body = ArrayBuffer.isView(options.body) || options.__binaryRequest && typeof options.body === "string" ? options.body : isMultipartBody2(options.body) ? options.body.body : options.body ? JSON.stringify(options.body, null, 2) : null;
     const contentLength = this.calculateContentLength(body);
-    const url2 = this.buildURL(path60, query);
+    const url2 = this.buildURL(path61, query);
     if ("timeout" in options)
       validatePositiveInteger2("timeout", options.timeout);
     options.timeout = options.timeout ?? this.timeout;
@@ -120827,8 +121013,8 @@ var APIClient2 = class {
     const request = this.makeRequest(options, null);
     return new PagePromise2(this, request, Page3);
   }
-  buildURL(path60, query) {
-    const url2 = isAbsoluteURL2(path60) ? new URL(path60) : new URL(this.baseURL + (this.baseURL.endsWith("/") && path60.startsWith("/") ? path60.slice(1) : path60));
+  buildURL(path61, query) {
+    const url2 = isAbsoluteURL2(path61) ? new URL(path61) : new URL(this.baseURL + (this.baseURL.endsWith("/") && path61.startsWith("/") ? path61.slice(1) : path61));
     const defaultQuery = this.defaultQuery();
     if (!isEmptyObj2(defaultQuery)) {
       query = { ...defaultQuery, ...query };
@@ -126216,11 +126402,11 @@ function buildAuthUrl(input) {
 }
 async function runAuthorizationCodeFlow(opts) {
   const port = opts.redirectPort ?? 8765;
-  const path60 = opts.redirectPath ?? "/callback";
+  const path61 = opts.redirectPath ?? "/callback";
   const codeVerifier = generateCodeVerifier();
   const codeChallenge = computeCodeChallenge(codeVerifier);
   const state = generateState();
-  const redirectUri = `http://localhost:${port}${path60}`;
+  const redirectUri = `http://localhost:${port}${path61}`;
   const authUrl = buildAuthUrl({
     authUrl: opts.authUrl,
     clientId: opts.clientId,
@@ -126232,7 +126418,7 @@ async function runAuthorizationCodeFlow(opts) {
   });
   const codePromise = waitForCallback({
     port,
-    path: path60,
+    path: path61,
     expectedState: state,
     timeoutMs: opts.timeoutMs ?? 3e5,
     ...opts.signal ? { signal: opts.signal } : {}
@@ -126546,7 +126732,10 @@ function buildOauthAuthorizeTool(deps) {
       let tokens;
       if (mode === "device") {
         if (!input.deviceUrl) {
-          throw new Error('mode="device" requires `deviceUrl` (the provider\'s device-authorization endpoint)');
+          throw new MoxxyError({
+            code: "TOOL_ERROR",
+            message: 'mode="device" requires `deviceUrl` (the provider\'s device-authorization endpoint)'
+          });
         }
         tokens = await runDeviceCodeFlow({
           deviceUrl: input.deviceUrl,
@@ -126572,7 +126761,10 @@ function buildOauthAuthorizeTool(deps) {
         });
       } else {
         if (!input.authUrl) {
-          throw new Error('mode="loopback" requires `authUrl` (the provider\'s authorization endpoint)');
+          throw new MoxxyError({
+            code: "TOOL_ERROR",
+            message: 'mode="loopback" requires `authUrl` (the provider\'s authorization endpoint)'
+          });
         }
         if (input.noOpen) {
           const verifier = generateCodeVerifier();
@@ -126580,11 +126772,11 @@ function buildOauthAuthorizeTool(deps) {
           const { computeCodeChallenge: computeCodeChallenge2 } = await Promise.resolve().then(() => (init_pkce(), pkce_exports));
           const challenge = computeCodeChallenge2(verifier);
           const port = input.redirectPort ?? 8765;
-          const path60 = input.redirectPath ?? "/callback";
+          const path61 = input.redirectPath ?? "/callback";
           const url2 = buildAuthUrl({
             authUrl: input.authUrl,
             clientId: input.clientId,
-            redirectUri: `http://localhost:${port}${path60}`,
+            redirectUri: `http://localhost:${port}${path61}`,
             scopes: input.scopes,
             codeChallenge: challenge,
             state,
@@ -126726,7 +126918,7 @@ async function runOauthLogin(profile, ctx) {
 }
 async function runBrowserFlow(profile, ctx) {
   const port = profile.redirect?.port ?? 8765;
-  const path60 = profile.redirect?.path ?? "/callback";
+  const path61 = profile.redirect?.path ?? "/callback";
   const serviceName = profile.displayName ?? profile.id;
   return runAuthorizationCodeFlow({
     authUrl: profile.authUrl,
@@ -126735,7 +126927,7 @@ async function runBrowserFlow(profile, ctx) {
     ...profile.clientSecret ? { clientSecret: profile.clientSecret } : {},
     scopes: profile.scopes,
     redirectPort: port,
-    redirectPath: path60,
+    redirectPath: path61,
     ...profile.extraAuthParams ? { extraAuthParams: profile.extraAuthParams } : {},
     timeoutMs: DEFAULT_BROWSER_TIMEOUT_MS,
     ...ctx.signal ? { signal: ctx.signal } : {},
@@ -126747,7 +126939,7 @@ If your browser doesn't open automatically, paste this URL:
 
   ${url2}
 
-Waiting for callback on http://localhost:${port}${path60} (5 min timeout)\u2026
+Waiting for callback on http://localhost:${port}${path61} (5 min timeout)\u2026
 
 `);
     }
@@ -133523,11 +133715,11 @@ function isAddrInUse(err) {
   return !!err && typeof err === "object" && err.code === "EADDRINUSE";
 }
 async function captureStdout(cmd, args) {
-  const { spawn: spawn17 } = await import('child_process');
+  const { spawn: spawn14 } = await import('child_process');
   return await new Promise((resolve12) => {
     let out = "";
     try {
-      const child = spawn17(cmd, [...args], { stdio: ["ignore", "pipe", "ignore"] });
+      const child = spawn14(cmd, [...args], { stdio: ["ignore", "pipe", "ignore"] });
       child.stdout.on("data", (b3) => {
         out += b3.toString();
       });
@@ -133903,161 +134095,30 @@ var WebChannel = class {
     }
   }
 };
-
-// ../plugin-channel-web/dist/child-cleanup.js
-var live = /* @__PURE__ */ new Set();
-var hooked = false;
-function killChild(child) {
-  if (child.exitCode != null || child.signalCode != null)
-    return;
-  try {
-    child.kill("SIGTERM");
-  } catch {
-  }
-  const t2 = setTimeout(() => {
-    try {
-      child.kill("SIGKILL");
-    } catch {
-    }
-  }, 2e3);
-  t2.unref?.();
-  child.once("exit", () => clearTimeout(t2));
-}
-function ensureHook() {
-  if (hooked)
-    return;
-  hooked = true;
-  const killAll = () => {
-    for (const child of live) {
-      try {
-        child.kill("SIGKILL");
-      } catch {
-      }
-    }
-    live.clear();
-  };
-  process.once("exit", killAll);
-  process.once("SIGINT", killAll);
-  process.once("SIGTERM", killAll);
-}
-function trackChild(child) {
-  ensureHook();
-  live.add(child);
-  child.once("exit", () => live.delete(child));
-  return () => new Promise((resolve12) => {
-    live.delete(child);
-    if (child.exitCode != null || child.signalCode != null)
-      return resolve12();
-    child.once("exit", () => resolve12());
-    killChild(child);
-  });
-}
-
-// ../plugin-channel-web/dist/cloudflared.js
 var TRYCLOUDFLARE_RE = /https:\/\/[a-z0-9-]+\.trycloudflare\.com/i;
 var URL_TIMEOUT_MS = 3e4;
-function parseTrycloudflareUrl(chunk) {
-  return TRYCLOUDFLARE_RE.exec(chunk)?.[0] ?? null;
-}
 var cloudflaredTunnel = defineTunnelProvider({
   name: "cloudflared",
-  isAvailable: () => new Promise((resolve12) => {
-    const child = spawn("cloudflared", ["--version"]);
-    child.on("error", () => resolve12(false));
-    child.on("exit", (code) => resolve12(code === 0));
-  }),
-  open: ({ port, host }) => new Promise((resolve12, reject) => {
-    const child = spawn("cloudflared", ["tunnel", "--no-autoupdate", "--url", `http://${host}:${port}`]);
-    const untrack = trackChild(child);
-    let settled = false;
-    const timer = setTimeout(() => {
-      if (settled)
-        return;
-      settled = true;
-      void untrack();
-      reject(new Error("cloudflared: timed out waiting for the tunnel URL"));
-    }, URL_TIMEOUT_MS);
-    timer.unref?.();
-    const onData = (buf) => {
-      if (settled)
-        return;
-      const url2 = parseTrycloudflareUrl(buf.toString("utf8"));
-      if (!url2)
-        return;
-      settled = true;
-      clearTimeout(timer);
-      resolve12({ url: url2, close: untrack });
-    };
-    child.stderr?.on("data", onData);
-    child.stdout?.on("data", onData);
-    child.on("error", (err) => {
-      if (settled)
-        return;
-      settled = true;
-      clearTimeout(timer);
-      void untrack();
-      reject(err);
-    });
-    child.on("exit", (code) => {
-      if (settled)
-        return;
-      settled = true;
-      clearTimeout(timer);
-      reject(new Error(`cloudflared exited (code ${code}) before emitting a URL`));
-    });
+  isAvailable: () => isCliTunnelAvailable("cloudflared"),
+  open: ({ port, host }) => spawnCliTunnel({
+    cmd: "cloudflared",
+    args: ["tunnel", "--no-autoupdate", "--url", `http://${host}:${port}`],
+    urlRegex: TRYCLOUDFLARE_RE,
+    timeoutMs: URL_TIMEOUT_MS,
+    name: "cloudflared"
   })
 });
 var NGROK_URL_RE = /https:\/\/[a-z0-9-]+\.ngrok(?:-free)?\.(?:app|io|dev)/i;
 var URL_TIMEOUT_MS2 = 3e4;
-function parseNgrokUrl(chunk) {
-  return NGROK_URL_RE.exec(chunk)?.[0] ?? null;
-}
 var ngrokTunnel = defineTunnelProvider({
   name: "ngrok",
-  isAvailable: () => new Promise((resolve12) => {
-    const child = spawn("ngrok", ["--version"]);
-    child.on("error", () => resolve12(false));
-    child.on("exit", (code) => resolve12(code === 0));
-  }),
-  open: ({ port }) => new Promise((resolve12, reject) => {
-    const child = spawn("ngrok", ["http", String(port), "--log", "stdout", "--log-format", "json"]);
-    const untrack = trackChild(child);
-    let settled = false;
-    const timer = setTimeout(() => {
-      if (settled)
-        return;
-      settled = true;
-      void untrack();
-      reject(new Error("ngrok: timed out waiting for the tunnel URL"));
-    }, URL_TIMEOUT_MS2);
-    timer.unref?.();
-    const onData = (buf) => {
-      if (settled)
-        return;
-      const url2 = parseNgrokUrl(buf.toString("utf8"));
-      if (!url2)
-        return;
-      settled = true;
-      clearTimeout(timer);
-      resolve12({ url: url2, close: untrack });
-    };
-    child.stdout?.on("data", onData);
-    child.stderr?.on("data", onData);
-    child.on("error", (err) => {
-      if (settled)
-        return;
-      settled = true;
-      clearTimeout(timer);
-      void untrack();
-      reject(err);
-    });
-    child.on("exit", (code) => {
-      if (settled)
-        return;
-      settled = true;
-      clearTimeout(timer);
-      reject(new Error(`ngrok exited (code ${code}) before emitting a URL`));
-    });
+  isAvailable: () => isCliTunnelAvailable("ngrok"),
+  open: ({ port }) => spawnCliTunnel({
+    cmd: "ngrok",
+    args: ["http", String(port), "--log", "stdout", "--log-format", "json"],
+    urlRegex: NGROK_URL_RE,
+    timeoutMs: URL_TIMEOUT_MS2,
+    name: "ngrok"
   })
 });
 var webSettingsSchema = z$1.object({ tunnel: z$1.string().optional() });
@@ -134310,6 +134371,9 @@ async function createWebSocketTransportServer(opts) {
       for (const client of wss.clients)
         client.terminate();
     },
+    clientCount() {
+      return connections;
+    },
     close() {
       return new Promise((resolve12) => {
         for (const client of wss.clients)
@@ -134640,7 +134704,8 @@ function isRunnerUp(socketPath = runnerSocketPath()) {
 
 // ../runner/dist/server.js
 init_dist();
-var RUNNER_PROTOCOL_VERSION = 3;
+var RUNNER_PROTOCOL_VERSION = 5;
+var MIN_COMPATIBLE_PROTOCOL_VERSION = 1;
 var RunnerMethod = {
   /** client->server: handshake; returns the initial info snapshot. */
   Attach: "attach",
@@ -134684,6 +134749,18 @@ var RunnerMethod = {
   WorkflowSetEnabled: "workflow.setEnabled",
   /** client->server: run a workflow now. */
   WorkflowRun: "workflow.run",
+  /** client->server: validate a draft workflow YAML (builder). */
+  WorkflowValidateDraft: "workflow.validateDraft",
+  /** client->server: persist a workflow from full YAML (builder). */
+  WorkflowSave: "workflow.save",
+  /** client->server: fetch one saved workflow as canonical YAML (builder). */
+  WorkflowGetRun: "workflow.getRun",
+  /**
+   * client->server: answer a paused workflow's `awaitInput` question and resume
+   * the run (human-in-the-loop). v5 — the client gates this on the server's
+   * reported version so an older runner returns an actionable error.
+   */
+  WorkflowResume: "workflow.resume",
   /** server->client: ask this client to decide a tool-call permission. */
   PermissionCheck: "permission.check",
   /** server->client: ask this client to confirm an approval checkpoint. */
@@ -134760,6 +134837,18 @@ var workflowSetEnabledParamsSchema = z.object({
   enabled: z.boolean()
 });
 var workflowRunParamsSchema = z.object({ name: z.string() });
+var workflowValidateDraftParamsSchema = z.object({
+  yaml: z.string().min(1).max(1e6)
+});
+var workflowSaveParamsSchema = z.object({
+  yaml: z.string().min(1).max(1e6),
+  previousName: z.string().min(1).max(120).optional()
+});
+var workflowGetRunParamsSchema = z.object({ name: z.string().min(1).max(120) });
+var workflowResumeParamsSchema = z.object({
+  runId: z.string().min(1).max(120),
+  reply: z.string().min(1).max(1e5)
+});
 
 // ../runner/dist/server.js
 var RunnerServer = class {
@@ -134836,6 +134925,10 @@ var RunnerServer = class {
     peer.handle(RunnerMethod.WorkflowList, () => this.handleWorkflowList());
     peer.handle(RunnerMethod.WorkflowSetEnabled, (raw) => this.handleWorkflowSetEnabled(raw));
     peer.handle(RunnerMethod.WorkflowRun, (raw) => this.handleWorkflowRun(raw));
+    peer.handle(RunnerMethod.WorkflowValidateDraft, (raw) => this.handleWorkflowValidateDraft(raw));
+    peer.handle(RunnerMethod.WorkflowSave, (raw) => this.handleWorkflowSave(raw));
+    peer.handle(RunnerMethod.WorkflowGetRun, (raw) => this.handleWorkflowGetRun(raw));
+    peer.handle(RunnerMethod.WorkflowResume, (raw) => this.handleWorkflowResume(raw));
     peer.onClose(() => this.onDisconnect(client));
   }
   onDisconnect(client) {
@@ -134847,7 +134940,7 @@ var RunnerServer = class {
   // --- request handlers ----------------------------------------------------
   handleAttach(client, raw) {
     const params = attachParamsSchema.parse(raw);
-    if (params.protocolVersion !== RUNNER_PROTOCOL_VERSION) {
+    if (params.protocolVersion < MIN_COMPATIBLE_PROTOCOL_VERSION) {
       throw new Error(`runner protocol mismatch: server v${RUNNER_PROTOCOL_VERSION}, client v${params.protocolVersion}`);
     }
     client.role = params.role;
@@ -135066,6 +135159,40 @@ var RunnerServer = class {
       throw new Error("workflows plugin not loaded");
     return view.run(params.name);
   }
+  // --- Workflows builder (validate / save / getRun) ------------------------
+  // Optional on the view (older hosts / pre-builder plugins lack them), so
+  // feature-check and throw a clear error rather than calling undefined.
+  async handleWorkflowValidateDraft(raw) {
+    const params = workflowValidateDraftParamsSchema.parse(raw);
+    const view = this.session.workflows;
+    if (!view?.validateDraft)
+      throw new Error("workflows builder not supported on this runner");
+    return view.validateDraft(params.yaml);
+  }
+  async handleWorkflowSave(raw) {
+    const params = workflowSaveParamsSchema.parse(raw);
+    const view = this.session.workflows;
+    if (!view?.save)
+      throw new Error("workflows builder not supported on this runner");
+    return view.save(params.yaml, params.previousName);
+  }
+  async handleWorkflowGetRun(raw) {
+    const params = workflowGetRunParamsSchema.parse(raw);
+    const view = this.session.workflows;
+    if (!view?.getRun)
+      throw new Error("workflows builder not supported on this runner");
+    return await view.getRun(params.name) ?? null;
+  }
+  // --- Workflows human-in-the-loop (resume a paused awaitInput run) ---------
+  // v5. Optional on the view (older hosts lack it), so feature-check and throw a
+  // clear error rather than calling undefined.
+  async handleWorkflowResume(raw) {
+    const params = workflowResumeParamsSchema.parse(raw);
+    const view = this.session.workflows;
+    if (!view?.resume)
+      throw new Error("workflow resume not supported on this runner");
+    return view.resume(params.runId, params.reply);
+  }
   broadcastInfo() {
     this.broadcast(RunnerNotification.InfoChanged, { info: this.session.getInfo() });
   }
@@ -135208,6 +135335,14 @@ var RemoteSession = class {
   permissionResolver = null;
   approvalResolver = null;
   info = null;
+  /**
+   * The protocol version the SERVER reported at attach. Defaults to our own
+   * version until the handshake resolves. Version-specific client methods (the
+   * v4 workflow *builder* family) gate on this so a newer client attached to an
+   * older runner degrades with a clear, actionable error instead of a raw
+   * JSON-RPC method-not-found. Null until attached.
+   */
+  serverProtocolVersion = null;
   constructor(transport) {
     this.peer = new JsonRpcPeer(transport);
     this.peer.on(RunnerNotification.Event, (params) => {
@@ -135276,6 +135411,28 @@ var RemoteSession = class {
       sinceSeq
     });
     this.info = result.info;
+    this.serverProtocolVersion = typeof result.protocolVersion === "number" ? result.protocolVersion : RUNNER_PROTOCOL_VERSION;
+  }
+  /**
+   * The protocol version the attached runner speaks (its own, from the
+   * handshake). Lets a capability-detecting caller (e.g. the desktop's visual
+   * builder, see #146) decide whether a version-gated feature is available on
+   * THIS runner before invoking it. Null until attached.
+   */
+  get runnerProtocolVersion() {
+    return this.serverProtocolVersion;
+  }
+  /**
+   * Guard a method that only exists on a server at/after `minVersion`. Throws a
+   * clear, actionable error (not a raw JSON-RPC method-not-found) when the
+   * attached runner is older — the desktop case after a JS hot-update outran
+   * its bundled CLI.
+   */
+  requireServerProtocol(minVersion, feature) {
+    const server = this.serverProtocolVersion;
+    if (server !== null && server < minVersion) {
+      throw new Error(`${feature} is not supported by this runner (runner protocol v${server}, needs v${minVersion}) \u2014 update the moxxy CLI to continue.`);
+    }
   }
   get id() {
     return this.requireInfo().sessionId;
@@ -135508,7 +135665,40 @@ var RemoteSession = class {
           enabled
         });
       },
-      run: (name) => this.peer.request(RunnerMethod.WorkflowRun, { name })
+      run: (name) => this.peer.request(RunnerMethod.WorkflowRun, { name }),
+      // Builder methods (protocol v4): forward to the runner so the desktop's
+      // RemoteSession-backed visual builder can validate/save/load drafts.
+      // Gated on the SERVER's reported version so a v4 client on a v3 runner
+      // (a desktop whose JS hot-update outran its bundled CLI) gets a clear
+      // "update the CLI" error instead of a raw method-not-found.
+      validateDraft: async (yaml) => {
+        this.requireServerProtocol(4, "The workflows builder");
+        return this.peer.request(RunnerMethod.WorkflowValidateDraft, {
+          yaml
+        });
+      },
+      save: async (yaml, previousName) => {
+        this.requireServerProtocol(4, "Saving a workflow from the builder");
+        return this.peer.request(RunnerMethod.WorkflowSave, {
+          yaml,
+          ...previousName ? { previousName } : {}
+        });
+      },
+      getRun: async (name) => {
+        this.requireServerProtocol(4, "Loading a workflow into the builder");
+        return this.peer.request(RunnerMethod.WorkflowGetRun, { name });
+      },
+      // Human-in-the-loop resume (protocol v5). Gated on the SERVER's reported
+      // version so a v5 client attached to a v4 runner (a desktop whose JS
+      // hot-update outran its bundled CLI) gets a clear "update the CLI" error
+      // rather than a raw method-not-found.
+      resume: async (runId, reply2) => {
+        this.requireServerProtocol(5, "Resuming a paused workflow");
+        return this.peer.request(RunnerMethod.WorkflowResume, {
+          runId,
+          reply: reply2
+        });
+      }
     };
   }
 };
@@ -135575,11 +135765,14 @@ async function connectRemoteSession(opts = {}) {
     throw err;
   }
 }
+function isProtocolMismatchError(err) {
+  const msg = err instanceof Error ? err.message : String(err);
+  return /protocol mismatch/i.test(msg);
+}
 async function maybeRecoverFromMismatch(err, socketPath, opts) {
   if (opts.transport || opts.skipMismatchRecovery)
     return;
-  const msg = err instanceof Error ? err.message : String(err);
-  if (!/protocol mismatch/i.test(msg))
+  if (!isProtocolMismatchError(err))
     return;
   try {
     await killAndUnlinkRunner(socketPath, [...DEFAULT_RUNNER_PORTS, ...opts.extraPortsToFree ?? []]);
@@ -135614,11 +135807,11 @@ async function isMoxxyProcess(pid) {
   return command.length > 0 && /moxxy/i.test(command);
 }
 async function pidCommand2(pid) {
-  const { spawn: spawn17 } = await import('child_process');
+  const { spawn: spawn14 } = await import('child_process');
   return await new Promise((resolve12) => {
     let out = "";
     try {
-      const child = spawn17("ps", ["-p", String(pid), "-o", "command="], {
+      const child = spawn14("ps", ["-p", String(pid), "-o", "command="], {
         stdio: ["ignore", "pipe", "ignore"]
       });
       child.stdout.on("data", (b3) => {
@@ -135656,11 +135849,11 @@ async function pidsListeningOnPort(port) {
   return await runLsof(["-t", `-iTCP:${port}`, "-sTCP:LISTEN"]);
 }
 async function runLsof(args) {
-  const { spawn: spawn17 } = await import('child_process');
+  const { spawn: spawn14 } = await import('child_process');
   return await new Promise((resolve12) => {
     let out = "";
     try {
-      const child = spawn17("lsof", [...args], {
+      const child = spawn14("lsof", [...args], {
         stdio: ["ignore", "pipe", "ignore"]
       });
       child.stdout.on("data", (b3) => {
@@ -135684,8 +135877,8 @@ function parsePids(out) {
 }
 async function unlinkSocket(socketPath) {
   try {
-    const fs43 = await import('fs');
-    fs43.unlinkSync(socketPath);
+    const fs44 = await import('fs');
+    fs44.unlinkSync(socketPath);
   } catch {
   }
 }
@@ -135704,13 +135897,44 @@ async function connectWithRetry(socketPath, retries) {
 }
 
 // ../desktop-ipc-contract/dist/index.js
-var REMOTE_DISALLOWED_COMMANDS = /* @__PURE__ */ new Set([
-  "desks.pickFolder",
-  "session.pickAttachment",
-  "focus.close",
-  "focus.restoreMain",
-  "focus.resize",
-  "app.relaunch"
+var REMOTE_ALLOWED_COMMANDS = /* @__PURE__ */ new Set([
+  // Answer a permission/approval prompt — RESPOND only. Note that
+  // `session.setAutoApprove` (turn the prompt OFF entirely) is deliberately NOT
+  // here: a remote client may answer the desktop user's prompts, never disable
+  // them and run tools unattended.
+  "ask.respond",
+  // Workspace discovery + reconnect (read-only / non-mutating).
+  "connection.snapshotAll",
+  "connection.activeWorkspace",
+  "connection.retry",
+  // The conversation itself.
+  "session.info",
+  "session.runTurn",
+  "session.abortTurn",
+  "session.setMode",
+  "session.newSession",
+  "session.runCommand",
+  // Voice input (capability-probed; transcribe fails coded without a transcriber).
+  "session.hasTranscriber",
+  "session.transcribe",
+  // Per-workspace transcript log (the mobile ChatStoreBridge persists through
+  // these; they're scoped to a workspace's NDJSON log, not host config).
+  "chat.append",
+  "chat.loadSegment",
+  "chat.clearLog",
+  "chat.migrate",
+  // Workflows: READ + run an existing one only. Authoring (`workflows.save`,
+  // `workflows.validateDraft`, `workflows.setEnabled`) is host-only — a paired
+  // phone must not rewrite or re-enable the host's workflows.
+  "workflows.list",
+  "workflows.run",
+  "workflows.getRun",
+  // Answer a paused workflow's awaitInput question. This is RESPOND-only — like
+  // `ask.respond`, the operator answers a question the WORKFLOW asked (the reply
+  // is fed into the paused step and the run continues); it cannot create or
+  // rewrite a workflow. A mobile user answering "ship it" to their own pipeline
+  // is the canonical human-in-the-loop case, so it belongs on the trust surface.
+  "workflows.resume"
 ]);
 var providerName = z.string().regex(/^[a-z][a-z0-9-]{0,63}$/, "invalid provider name");
 var httpUrl = z.string().refine((s2) => {
@@ -135725,6 +135949,9 @@ var skillName = z.string().min(1).max(200).regex(/^[A-Za-z0-9][A-Za-z0-9 ._/-]*$
 var vaultKeyName = z.string().min(1).max(200).regex(/^[A-Za-z0-9][A-Za-z0-9._/-]*$/, "invalid vault key name").refine((s2) => !s2.includes(".."), 'vault key name may not contain ".."');
 var optionalWorkspace = z.string().min(1).max(256).optional();
 var MAX_AUDIO_BASE64 = 4e7;
+var MAX_INLINE_ATTACHMENT_CONTENT = 12e6;
+var commandName = z.string().min(1).max(64).regex(/^[A-Za-z0-9][A-Za-z0-9._-]*$/, "invalid command name");
+var workflowName = z.string().min(1).max(200).refine((s2) => !s2.includes("..") && !s2.includes("/") && !s2.includes("\\"), "invalid workflow name");
 var ipcInputSchemas = {
   // No-arg, but spawns a child process (npm install) — pin the payload to
   // "nothing" so a hostile renderer can't smuggle args across.
@@ -135769,7 +135996,40 @@ var ipcInputSchemas = {
     attachments: z.array(z.object({
       path: z.string().min(1).max(4096),
       name: z.string().min(1).max(1024)
-    })).max(64).optional()
+    })).max(64).optional(),
+    // Inline attachments cross the wire as payload (remote/mobile clients) —
+    // bound both the entry count and per-entry content size.
+    inlineAttachments: z.array(z.object({
+      kind: z.enum(["stdin", "file", "image", "document", "audio"]),
+      content: z.string().max(MAX_INLINE_ATTACHMENT_CONTENT),
+      name: z.string().max(1024).optional(),
+      mediaType: z.string().max(128).optional()
+    })).max(8).optional()
+  }),
+  // Runs an arbitrary registered slash command — the audit flagged this as the
+  // one mutating session command without a schema, so lock the name to a
+  // registry slug and bound the free-text args.
+  "session.runCommand": z.object({
+    workspaceId: optionalWorkspace,
+    name: commandName,
+    args: z.string().max(1e4)
+  }),
+  "workflows.run": z.object({ name: workflowName }),
+  "workflows.setEnabled": z.object({ name: workflowName, enabled: z.boolean() }),
+  // Builder commands. validateDraft/save take full YAML — bound the size so a
+  // hostile renderer can't OOM the host; save writes to disk so it's
+  // filesystem-touching and gets a boundary check like the other writers.
+  "workflows.validateDraft": z.object({ yaml: z.string().min(1).max(1e6) }),
+  "workflows.save": z.object({
+    yaml: z.string().min(1).max(1e6),
+    previousName: workflowName.optional()
+  }),
+  "workflows.getRun": z.object({ name: workflowName }),
+  // Human-in-the-loop resume: bound the run id + the operator reply (the reply
+  // is forwarded into the paused step's child agent, so cap it to avoid OOM).
+  "workflows.resume": z.object({
+    runId: z.string().min(1).max(120),
+    reply: z.string().min(1).max(1e5)
   }),
   // Security-sensitive: this bypasses the approval sheet, so validate it at
   // the boundary like the other dangerous commands.
@@ -135795,8 +136055,14 @@ var ipcInputSchemas = {
     onboardingComplete: z.boolean().optional(),
     clerkUserId: z.string().max(256).nullable().optional(),
     clerkDisplayName: z.string().max(256).nullable().optional(),
-    signedInAt: z.number().nullable().optional()
+    signedInAt: z.number().nullable().optional(),
+    mobileGatewayEnabled: z.boolean().optional()
   }).strict(),
+  // Mobile-gateway control. Both no-arg variants pin the payload to "nothing"
+  // so a hostile caller can't smuggle args; setEnabled is a strict boolean.
+  "mobileGateway.status": z.undefined(),
+  "mobileGateway.rotateToken": z.undefined(),
+  "mobileGateway.setEnabled": z.object({ enabled: z.boolean() }).strict(),
   "chat.append": z.object({
     workspaceId: z.string().min(1).max(256),
     events: z.array(z.unknown()).max(1e4)
@@ -135877,6 +136143,11 @@ async function dispatch(channel, args, fn) {
 var WebSocketCommandBus = class {
   methods = /* @__PURE__ */ new Map();
   peers = /* @__PURE__ */ new Set();
+  /** Deny-by-default allow-list (null ⇒ no filter; see the constructor). */
+  allowedCommands;
+  constructor(opts = {}) {
+    this.allowedCommands = opts.allowedCommands === void 0 ? REMOTE_ALLOWED_COMMANDS : opts.allowedCommands;
+  }
   handle(channel, fn) {
     this.methods.set(channel, fn);
   }
@@ -135889,7 +136160,7 @@ var WebSocketCommandBus = class {
     const peer = new JsonRpcPeer(transport);
     for (const [channel, fn] of this.methods) {
       peer.handle(channel, async (params) => {
-        if (REMOTE_DISALLOWED_COMMANDS.has(channel)) {
+        if (this.allowedCommands && !this.allowedCommands.has(channel)) {
           const message = `command "${channel}" is not available over a remote transport`;
           throw new RpcError(message, { code: "runner-error", message });
         }
@@ -135983,7 +136254,74 @@ var MobileSessionHost = class {
     this.bus.handle("session.setAutoApprove", async ({ enabled }) => {
       this.autoApprove = enabled;
     });
-    this.bus.handle("session.hasTranscriber", async () => false);
+    this.bus.handle("session.setMode", async ({ mode }) => {
+      this.session.modes.setActive(mode);
+      this.bus.broadcast("connection.changed", { workspaceId: ws, phase: this.snapshot().phase });
+    });
+    this.bus.handle("session.newSession", async () => {
+      for (const controller of this.turns.values())
+        controller.abort();
+      if (this.session.reset)
+        await this.session.reset();
+      else
+        this.session.log.clear();
+    });
+    this.bus.handle("session.runCommand", async ({ name, args }) => {
+      const def = this.session.commands.get(name);
+      if (!def)
+        return { kind: "error", message: `unknown command: /${name}` };
+      return await def.handler({
+        channel: "mobile",
+        sessionId: this.session.getInfo().sessionId,
+        args,
+        session: this.session
+      });
+    });
+    this.bus.handle("session.hasTranscriber", async () => this.activeTranscriber() != null);
+    this.bus.handle("session.transcribe", async ({ audioBase64, mimeType }) => {
+      const transcriber = this.activeTranscriber();
+      if (!transcriber) {
+        throw new IpcError("not-supported", "no transcriber is active on this session");
+      }
+      const audio = Buffer.from(audioBase64, "base64");
+      const result = await transcriber.transcribe(audio, mimeType ? { mimeType } : void 0);
+      return result.text;
+    });
+    this.bus.handle("workflows.list", async () => this.session.workflows?.list() ?? []);
+    this.bus.handle("workflows.setEnabled", async ({ name, enabled }) => {
+      if (this.session.workflows)
+        await this.session.workflows.setEnabled(name, enabled);
+    });
+    this.bus.handle("workflows.run", async ({ name }) => {
+      if (!this.session.workflows) {
+        throw new IpcError("not-supported", "workflows plugin not loaded on this session");
+      }
+      return await this.session.workflows.run(name);
+    });
+    this.bus.handle("workflows.validateDraft", async ({ yaml }) => {
+      if (!this.session.workflows?.validateDraft) {
+        throw new IpcError("not-supported", "workflows builder not supported on this session");
+      }
+      return await this.session.workflows.validateDraft(yaml);
+    });
+    this.bus.handle("workflows.save", async ({ yaml }) => {
+      if (!this.session.workflows?.save) {
+        throw new IpcError("not-supported", "workflows builder not supported on this session");
+      }
+      return await this.session.workflows.save(yaml);
+    });
+    this.bus.handle("workflows.getRun", async ({ name }) => {
+      if (!this.session.workflows?.getRun) {
+        throw new IpcError("not-supported", "workflows builder not supported on this session");
+      }
+      return await this.session.workflows.getRun(name);
+    });
+    this.bus.handle("workflows.resume", async ({ runId, reply: reply2 }) => {
+      if (!this.session.workflows?.resume) {
+        throw new IpcError("not-supported", "workflow resume not supported on this session");
+      }
+      return await this.session.workflows.resume(runId, reply2);
+    });
     this.bus.handle("ask.respond", async ({ requestId, response }) => {
       this.answerAsk(requestId, response);
     });
@@ -136025,6 +136363,15 @@ var MobileSessionHost = class {
     this.session.setApprovalResolver(null);
   }
   // ---- internals ----------------------------------------------------------
+  /** Active transcriber, or null. Guarded access — a thin/remote session may
+   *  leave the registry view undefined (capability-absent ≠ crash). */
+  activeTranscriber() {
+    try {
+      return this.session.transcribers?.tryGetActive() ?? null;
+    } catch {
+      return null;
+    }
+  }
   snapshot() {
     const info = this.session.getInfo();
     const phase = {
@@ -136045,7 +136392,8 @@ var MobileSessionHost = class {
       try {
         for await (const _event of this.session.runTurn(args.prompt, {
           signal: controller.signal,
-          ...args.model ? { model: args.model } : {}
+          ...args.model ? { model: args.model } : {},
+          ...args.inlineAttachments && args.inlineAttachments.length > 0 ? { attachments: args.inlineAttachments } : {}
         })) {
           void _event;
         }
@@ -136084,19 +136432,6 @@ function resolveMobileToken(configured) {
 function rotateMobileToken() {
   return rotateChannelToken({ fileName: TOKEN_FILE });
 }
-function normalizeTunnelChoice(raw) {
-  const v3 = (process.env.MOXXY_MOBILE_TUNNEL ?? raw ?? "localhost").trim().toLowerCase();
-  if (v3 === "cloudflared" || v3 === "ngrok")
-    return v3;
-  return "localhost";
-}
-function tunnelProviderFor(choice) {
-  if (choice === "cloudflared")
-    return cloudflaredTunnel;
-  if (choice === "ngrok")
-    return ngrokTunnel;
-  return null;
-}
 function resolveBindHost(configured) {
   const v3 = (process.env.MOXXY_MOBILE_HOST ?? configured ?? "").trim();
   return v3.length > 0 ? v3 : "127.0.0.1";
@@ -136133,6 +136468,21 @@ function buildConnectUrl(opts) {
   return `ws://${opts.localHost}:${opts.port}/?t=${t2}`;
 }
 
+// ../plugin-channel-mobile/dist/tunnel.js
+function normalizeTunnelChoice(raw) {
+  const v3 = (process.env.MOXXY_MOBILE_TUNNEL ?? raw ?? "localhost").trim().toLowerCase();
+  if (v3 === "cloudflared" || v3 === "ngrok")
+    return v3;
+  return "localhost";
+}
+function tunnelProviderFor(choice) {
+  if (choice === "cloudflared")
+    return cloudflaredTunnel;
+  if (choice === "ngrok")
+    return ngrokTunnel;
+  return null;
+}
+
 // ../plugin-channel-mobile/dist/qr.js
 var import_qrcode = __toESM(require_lib3());
 async function printConnectInfo(url2, token, hint) {
@@ -136196,7 +136546,7 @@ var MobileChannel = class {
     return this.token;
   }
   async start(startOpts) {
-    const bus = new WebSocketCommandBus();
+    const bus = new WebSocketCommandBus({ allowedCommands: null });
     const host = new MobileSessionHost(bus, startOpts.session);
     this.host = host;
     host.register();
@@ -137691,10 +138041,10 @@ function buildUsageStatsPlugin(opts = {}) {
         cursor = ctx.log.length;
       },
       async onShutdown(ctx) {
-        const live2 = ctx.log.slice(cursor);
-        if (live2.length === 0)
+        const live = ctx.log.slice(cursor);
+        if (live.length === 0)
           return;
-        const delta = summarizeTokensByModel(live2);
+        const delta = summarizeTokensByModel(live);
         await mergeUsageStats(delta, opts.statsPath);
       }
     }
@@ -138835,11 +139185,11 @@ var ScheduleStore = class {
    * Used by the workflows integration to mirror a workflow's `on.schedule`
    * into the shared poller without a separate timer.
    */
-  async syncWorkflowSchedule(workflowName, entry) {
+  async syncWorkflowSchedule(workflowName2, entry) {
     await this.mutate((schedules) => {
-      const filtered = schedules.filter((s2) => !(s2.source === "workflow" && s2.workflowName === workflowName));
+      const filtered = schedules.filter((s2) => !(s2.source === "workflow" && s2.workflowName === workflowName2));
       if (entry) {
-        filtered.push(scheduleEntrySchema.parse({ ...entry, source: "workflow", workflowName }));
+        filtered.push(scheduleEntrySchema.parse({ ...entry, source: "workflow", workflowName: workflowName2 }));
       }
       return filtered;
     });
@@ -139282,7 +139632,7 @@ function readHeader(headers, name) {
     return v3[0] ?? null;
   return v3 ?? null;
 }
-function readJsonPath(body, path60) {
+function readJsonPath(body, path61) {
   let parsed;
   try {
     parsed = JSON.parse(body.toString("utf8"));
@@ -139290,7 +139640,7 @@ function readJsonPath(body, path60) {
     return null;
   }
   let cur = parsed;
-  for (const seg of path60.split(".")) {
+  for (const seg of path61.split(".")) {
     if (cur === null || cur === void 0 || typeof cur !== "object")
       return null;
     cur = cur[seg];
@@ -139905,88 +140255,52 @@ function redactVerification(v3) {
 }
 var CLOUDFLARED_URL_RE = /https:\/\/[A-Za-z0-9.-]+\.trycloudflare\.com/;
 var NGROK_URL_RE2 = /https:\/\/[A-Za-z0-9.-]+\.ngrok[a-z.-]*\.app/;
-async function isTunnelCliAvailable(kind3) {
-  return new Promise((resolve12) => {
-    const child = spawn(kind3, ["--version"], { stdio: "ignore" });
-    child.once("error", () => resolve12(false));
-    child.once("exit", (code) => resolve12(code === 0));
+var SPAWN_CONFIG = {
+  cloudflared: {
+    cmd: "cloudflared",
+    urlRegex: CLOUDFLARED_URL_RE,
+    args: (port, host) => ["tunnel", "--no-autoupdate", "--url", `http://${host}:${port}`]
+  },
+  ngrok: {
+    cmd: "ngrok",
+    urlRegex: NGROK_URL_RE2,
+    args: (port) => ["http", String(port), "--log=stdout"]
+  }
+};
+function openCliTunnel(kind3, port, host, timeoutMs) {
+  const cfg = SPAWN_CONFIG[kind3];
+  return spawnCliTunnel({
+    cmd: cfg.cmd,
+    args: cfg.args(port, host),
+    urlRegex: cfg.urlRegex,
+    name: kind3,
+    ...timeoutMs !== void 0 ? { timeoutMs } : {}
   });
 }
+var webhookTunnelProviders = {
+  cloudflared: defineTunnelProvider({
+    name: "cloudflared",
+    isAvailable: () => isCliTunnelAvailable("cloudflared"),
+    open: ({ port, host }) => openCliTunnel("cloudflared", port, host)
+  }),
+  ngrok: defineTunnelProvider({
+    name: "ngrok",
+    isAvailable: () => isCliTunnelAvailable("ngrok"),
+    open: ({ port, host }) => openCliTunnel("ngrok", port, host)
+  })
+};
+function isTunnelCliAvailable(kind3) {
+  const provider = webhookTunnelProviders[kind3];
+  return provider.isAvailable ? provider.isAvailable() : Promise.resolve(false);
+}
 async function startTunnel(opts) {
   const host = opts.host ?? "127.0.0.1";
-  const target = `http://${host}:${opts.port}`;
-  const args = opts.kind === "cloudflared" ? ["tunnel", "--no-autoupdate", "--url", target, ...opts.extraArgs ?? []] : ["http", `${opts.port}`, "--log=stdout", ...opts.extraArgs ?? []];
-  const timeoutMs = opts.urlTimeoutMs ?? 3e4;
-  let child;
-  try {
-    child = spawn(opts.kind, args, { stdio: ["ignore", "pipe", "pipe"] });
-  } catch (err) {
-    throw new Error(`failed to spawn ${opts.kind} \u2014 is it installed? (${err instanceof Error ? err.message : String(err)})`);
-  }
-  const urlRe = opts.kind === "cloudflared" ? CLOUDFLARED_URL_RE : NGROK_URL_RE2;
-  const urlPromise = new Promise((resolve12, reject) => {
-    let settled = false;
-    const onChunk = (buf) => {
-      const match = urlRe.exec(buf.toString("utf8"));
-      if (match && !settled) {
-        settled = true;
-        resolve12(match[0]);
-      }
-    };
-    child.stdout?.on("data", onChunk);
-    child.stderr?.on("data", onChunk);
-    child.once("error", (err) => {
-      if (!settled) {
-        settled = true;
-        reject(err);
-      }
-    });
-    child.once("exit", (code) => {
-      if (!settled) {
-        settled = true;
-        reject(new Error(`${opts.kind} exited before printing a URL (code=${code ?? "null"})`));
-      }
-    });
-    setTimeout(() => {
-      if (!settled) {
-        settled = true;
-        reject(new Error(`timed out waiting ${timeoutMs}ms for ${opts.kind} URL`));
-      }
-    }, timeoutMs).unref?.();
-  });
-  let url2;
-  try {
-    url2 = await urlPromise;
-  } catch (err) {
-    try {
-      child.kill("SIGTERM");
-    } catch {
-    }
-    throw err;
-  }
-  const pid = child.pid ?? -1;
+  const handle2 = await openCliTunnel(opts.kind, opts.port, host, opts.urlTimeoutMs);
   return {
     kind: opts.kind,
-    url: url2,
-    pid,
-    stop: async () => {
-      if (!child.killed && child.exitCode === null) {
-        child.kill("SIGTERM");
-        try {
-          await Promise.race([
-            once(child, "exit"),
-            new Promise((r2) => setTimeout(r2, 2e3).unref?.())
-          ]);
-        } catch {
-        }
-        if (!child.killed && child.exitCode === null) {
-          try {
-            child.kill("SIGKILL");
-          } catch {
-          }
-        }
-      }
-    }
+    url: handle2.url,
+    pid: handle2.pid,
+    stop: () => handle2.close()
   };
 }
 function defaultWebhookSecretsDir() {
@@ -141926,23 +142240,123 @@ function validateCondition(expr) {
 }
 
 // ../plugin-workflows/dist/schema.js
-var ACTION_KEYS = ["skill", "prompt", "tool", "workflow"];
+var ACTION_KEYS = [
+  "skill",
+  "prompt",
+  "tool",
+  "workflow",
+  "bridge",
+  "condition",
+  "switch",
+  "loop"
+];
 var SLUG_RE = /^[a-z0-9][a-z0-9-]*$/i;
 var STEP_ID_RE = /^[a-z0-9][a-z0-9_-]*$/i;
+var loopActionSchema = z.object({
+  body: z.array(z.string().min(1)).min(1),
+  condition: z.string().min(1),
+  maxIterations: z.number().int().min(1).max(50).default(10)
+});
 var stepSchema = z.object({
   id: z.string().min(1).max(80).regex(STEP_ID_RE, "step id must be slug-like"),
   skill: z.string().min(1).optional(),
   prompt: z.string().min(1).optional(),
   tool: z.string().min(1).optional(),
   workflow: z.string().min(1).optional(),
+  bridge: z.string().min(1).optional(),
+  condition: z.string().min(1).optional(),
+  then: z.array(z.string().min(1)).optional(),
+  else: z.array(z.string().min(1)).optional(),
+  switch: z.string().min(1).optional(),
+  cases: z.record(z.array(z.string().min(1))).optional(),
+  default: z.array(z.string().min(1)).optional(),
+  loop: loopActionSchema.optional(),
   input: z.string().optional(),
   args: z.record(z.unknown()).optional(),
   needs: z.array(z.string().min(1)).default([]),
   when: z.string().min(1).optional(),
   onError: z.enum(["fail", "continue", "retry"]).default("fail"),
   retries: z.number().int().min(0).max(3).default(0),
-  label: z.string().max(60).optional()
+  label: z.string().max(60).optional(),
+  format: z.enum(["json", "plain"]).optional(),
+  awaitInput: z.boolean().optional()
 }).superRefine((step, ctx) => {
+  const isLogic = step.bridge != null || step.condition != null || step.switch != null;
+  if (step.awaitInput && (step.tool != null || step.workflow != null || step.loop != null || isLogic)) {
+    ctx.addIssue({
+      code: z.ZodIssueCode.custom,
+      message: `step "${step.id}": awaitInput is only allowed on prompt or skill steps`,
+      path: ["awaitInput"]
+    });
+  }
+  if (step.format === "plain" && step.bridge == null) {
+    ctx.addIssue({
+      code: z.ZodIssueCode.custom,
+      message: `step "${step.id}": format plain is only allowed on bridge steps`,
+      path: ["format"]
+    });
+  }
+  if (step.condition != null) {
+    if (step.then == null) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: `step "${step.id}": condition requires then`,
+        path: ["then"]
+      });
+    }
+    if (step.else == null) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: `step "${step.id}": condition requires else`,
+        path: ["else"]
+      });
+    }
+  }
+  if (step.switch != null) {
+    const caseKeys = Object.keys(step.cases ?? {});
+    if (caseKeys.length === 0) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: `step "${step.id}": switch requires at least one case`,
+        path: ["cases"]
+      });
+    }
+  }
+  if (step.loop != null && (step.then != null || step.else != null || step.cases != null || step.default != null)) {
+    ctx.addIssue({
+      code: z.ZodIssueCode.custom,
+      message: `step "${step.id}": loop cannot be combined with then/else/cases/default`,
+      path: ["loop"]
+    });
+  }
+  if (step.then != null && step.condition == null) {
+    ctx.addIssue({
+      code: z.ZodIssueCode.custom,
+      message: `step "${step.id}": then is only valid with condition`,
+      path: ["then"]
+    });
+  }
+  if (step.else != null && step.condition == null) {
+    ctx.addIssue({
+      code: z.ZodIssueCode.custom,
+      message: `step "${step.id}": else is only valid with condition`,
+      path: ["else"]
+    });
+  }
+  if (step.cases != null && step.switch == null) {
+    ctx.addIssue({
+      code: z.ZodIssueCode.custom,
+      message: `step "${step.id}": cases is only valid with switch`,
+      path: ["cases"]
+    });
+  }
+  if (step.default != null && step.switch == null) {
+    ctx.addIssue({
+      code: z.ZodIssueCode.custom,
+      message: `step "${step.id}": default branch list is only valid with switch`,
+      path: ["default"]
+    });
+  }
   const present2 = ACTION_KEYS.filter((k3) => step[k3] != null);
   if (present2.length === 0) {
     ctx.addIssue({
@@ -141972,6 +142386,17 @@ var inputSpecSchema = z.object({
   default: z.unknown().optional(),
   description: z.string().optional()
 });
+var uiLayoutSchema = z.object({
+  nodes: z.record(z.object({
+    x: z.number(),
+    y: z.number()
+  })).default({}),
+  viewport: z.object({
+    x: z.number(),
+    y: z.number(),
+    zoom: z.number().positive()
+  }).optional()
+});
 var workflowSchema = z.object({
   name: z.string().min(1).max(120).regex(SLUG_RE, "name must be slug-like"),
   description: z.string().min(1),
@@ -141983,6 +142408,9 @@ var workflowSchema = z.object({
     channel: z.string().optional(),
     inbox: z.boolean().default(true)
   }).optional(),
+  ui: z.object({
+    layout: uiLayoutSchema.optional()
+  }).optional(),
   concurrency: z.number().int().min(1).max(8).default(4),
   steps: z.array(stepSchema).min(1).max(40)
 }).superRefine((wf, ctx) => {
@@ -142028,6 +142456,119 @@ var workflowSchema = z.object({
       });
     }
   }
+  for (const step of wf.steps) {
+    const branchIds = [];
+    if (step.then)
+      branchIds.push(...step.then);
+    if (step.else)
+      branchIds.push(...step.else);
+    if (step.cases)
+      for (const list of Object.values(step.cases))
+        branchIds.push(...list);
+    if (step.default)
+      branchIds.push(...step.default);
+    for (const ref of branchIds) {
+      if (!ids.has(ref)) {
+        ctx.addIssue({
+          code: z.ZodIssueCode.custom,
+          message: `step "${step.id}" references unknown branch step "${ref}"`,
+          path: ["steps"]
+        });
+      }
+      if (ref === step.id) {
+        ctx.addIssue({
+          code: z.ZodIssueCode.custom,
+          message: `step "${step.id}" cannot reference itself in then/else/cases/default`,
+          path: ["steps"]
+        });
+      }
+    }
+  }
+  for (const step of wf.steps) {
+    if (step.loop == null)
+      continue;
+    for (const ref of step.loop.body) {
+      if (!ids.has(ref)) {
+        ctx.addIssue({
+          code: z.ZodIssueCode.custom,
+          message: `step "${step.id}" loop references unknown body step "${ref}"`,
+          path: ["steps"]
+        });
+      }
+    }
+  }
+  const stepById = new Map(wf.steps.map((s2) => [s2.id, s2]));
+  const bodyOwner = /* @__PURE__ */ new Map();
+  for (const step of wf.steps) {
+    if (step.loop == null)
+      continue;
+    for (const ref of step.loop.body)
+      bodyOwner.set(ref, step.id);
+  }
+  for (const step of wf.steps) {
+    const owner = bodyOwner.get(step.id);
+    if (owner == null)
+      continue;
+    const body = stepById.get(step.id);
+    if (body.condition != null || body.switch != null) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: `step "${step.id}" is a loop body of "${owner}" and cannot be a condition/switch step \u2014 branch routing is not honored inside a loop body. Use a bridge step to set vars and drive the loop's own exit condition instead.`,
+        path: ["steps"]
+      });
+    }
+    if (body.awaitInput) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: `step "${step.id}" is a loop body of "${owner}" and cannot use awaitInput \u2014 a loop body cannot pause mid-iteration. Ask the operator before/after the loop instead.`,
+        path: ["steps"]
+      });
+    }
+    if (body.when != null) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: `step "${step.id}" is a loop body of "${owner}" and cannot have a \`when\` guard \u2014 loop body steps run unconditionally each iteration. Gate the loop via its \`condition\` (exit) instead.`,
+        path: ["steps"]
+      });
+    }
+    for (const dep of body.needs) {
+      if (dep === owner)
+        continue;
+      if (bodyOwner.get(dep) === owner)
+        continue;
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: `step "${step.id}" is a loop body of "${owner}" and may only \`needs\` its loop step ("${owner}") or a sibling body step of the same loop \u2014 "${dep}" is outside the loop and would never settle for it.`,
+        path: ["steps"]
+      });
+    }
+  }
+  for (const step of wf.steps) {
+    if (bodyOwner.has(step.id))
+      continue;
+    if (step.loop != null) {
+      const ownBody = new Set(step.loop.body);
+      for (const dep of step.needs) {
+        if (bodyOwner.has(dep) && !ownBody.has(dep)) {
+          ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: `step "${step.id}" needs "${dep}", which is a loop body of "${bodyOwner.get(dep)}" \u2014 depend on the loop step "${bodyOwner.get(dep)}" instead.`,
+            path: ["steps"]
+          });
+        }
+      }
+      continue;
+    }
+    for (const dep of step.needs) {
+      if (bodyOwner.has(dep)) {
+        ctx.addIssue({
+          code: z.ZodIssueCode.custom,
+          message: `step "${step.id}" needs "${dep}", which is a loop body of "${bodyOwner.get(dep)}" \u2014 depend on the loop step "${bodyOwner.get(dep)}" instead (loop body steps are owned by their loop and never scheduled in the main DAG).`,
+          path: ["steps"]
+        });
+      }
+    }
+  }
 });
 function findCycle(steps) {
   const byId = new Map(steps.map((s2) => [s2.id, s2]));
@@ -142064,8 +142605,8 @@ function findCycle(steps) {
 }
 function formatIssues(error2) {
   return error2.issues.map((iss) => {
-    const path60 = iss.path.join(".") || "(root)";
-    return `${path60}: ${iss.message}`;
+    const path61 = iss.path.join(".") || "(root)";
+    return `${path61}: ${iss.message}`;
   });
 }
 function validateWorkflow(raw) {
@@ -142195,9 +142736,18 @@ var WorkflowStore = class {
   /**
    * Replace a workflow with a new definition. In-place rewrite for user/project
    * workflows; a user-scope override for builtin/plugin ones.
+   *
+   * `previousName` supports rename from the builder: when the workflow's name
+   * changed, the old user/project file and its registry entry are removed so a
+   * rename doesn't leave an orphaned duplicate file + stale entry behind.
    */
-  async save(workflow) {
+  async save(workflow, previousName) {
     await this.ensureLoaded();
+    const renamed = previousName != null && previousName !== workflow.name ? this.byName.get(previousName) : void 0;
+    if (renamed && (renamed.scope === "user" || renamed.scope === "project")) {
+      await promises.rm(renamed.path, { force: true });
+      this.byName.delete(previousName);
+    }
     const existing = this.byName.get(workflow.name);
     const editable = existing && (existing.scope === "user" || existing.scope === "project");
     if (existing && editable) {
@@ -142206,11 +142756,12 @@ var WorkflowStore = class {
       this.byName.set(workflow.name, entry2);
       return entry2;
     }
-    const dir = this.userDir();
+    const scope = renamed?.scope === "project" ? "project" : "user";
+    const dir = scope === "project" ? this.projectDir() : this.userDir();
     await promises.mkdir(dir, { recursive: true });
     const file = await uniqueFilename2(dir, workflow.name);
     await writeFileAtomic(file, serializeWorkflow(workflow));
-    const entry = { workflow, path: file, scope: "user" };
+    const entry = { workflow, path: file, scope };
     this.byName.set(workflow.name, entry);
     return entry;
   }
@@ -142257,8 +142808,176 @@ async function exists3(p3) {
     return false;
   }
 }
+
+// ../plugin-workflows/dist/run-store.js
+init_index_esm();
+var WorkflowRunStore = class {
+  dir;
+  constructor(dir = moxxyPath("workflow-runs", "active")) {
+    this.dir = dir;
+  }
+  async save(checkpoint) {
+    const runId = ulid();
+    await promises.mkdir(this.dir, { recursive: true });
+    const file = path3.join(this.dir, `${runId}.json`);
+    const payload = { ...checkpoint, runId };
+    const tmp = `${file}.tmp`;
+    await promises.writeFile(tmp, JSON.stringify(payload), "utf8");
+    await promises.rename(tmp, file);
+    return runId;
+  }
+  async load(runId) {
+    const file = path3.join(this.dir, `${runId}.json`);
+    try {
+      const raw = await promises.readFile(file, "utf8");
+      return JSON.parse(raw);
+    } catch {
+      return null;
+    }
+  }
+  async remove(runId) {
+    const file = path3.join(this.dir, `${runId}.json`);
+    try {
+      await promises.unlink(file);
+    } catch {
+    }
+  }
+  /**
+   * Delete checkpoint files older than `maxAgeMs` (by mtime). Paused runs that
+   * are never resumed (the common case while `awaitInput` is gated — see
+   * schema.ts — and in general after a crash) would otherwise accumulate
+   * `<ulid>.json` files under `active/` forever. Returns the count removed.
+   * Best-effort: a missing dir or an unreadable entry is skipped, not thrown.
+   */
+  async sweepStale(maxAgeMs = DEFAULT_CHECKPOINT_TTL_MS, now = Date.now()) {
+    let removed = 0;
+    let entries;
+    try {
+      entries = await promises.readdir(this.dir);
+    } catch {
+      return 0;
+    }
+    for (const name of entries) {
+      if (!name.endsWith(".json"))
+        continue;
+      const file = path3.join(this.dir, name);
+      try {
+        const st3 = await promises.stat(file);
+        if (now - st3.mtimeMs > maxAgeMs) {
+          await promises.unlink(file);
+          removed += 1;
+        }
+      } catch {
+      }
+    }
+    return removed;
+  }
+};
+var DEFAULT_CHECKPOINT_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
+var defaultWorkflowRunStore = new WorkflowRunStore();
+
+// ../plugin-workflows/dist/logic-response.js
+var PLAIN_PROMPT_MARKERS = [
+  "odpowiedz wy\u0142\u0105cznie zwyk\u0142ym tekstem",
+  "odpowiedz tylko zwyk\u0142ym tekstem",
+  "without json",
+  "no json",
+  "plain text only"
+];
+var LOGIC_SYSTEM_PROMPT = 'You are a workflow logic step. Do not use tools. Reply with exactly one JSON object. Use keys as needed: "vars" (object, data for downstream templates), "branch" (string, routing decision), "text" (optional human-readable summary). No markdown fences or commentary outside the JSON.';
+function logicSystemPrompt() {
+  return LOGIC_SYSTEM_PROMPT;
+}
+function wantsPlainResponse(step) {
+  if (step.format === "plain")
+    return true;
+  if (step.format === "json")
+    return false;
+  const text = (step.bridge ?? step.condition ?? step.switch ?? "").toLowerCase();
+  return PLAIN_PROMPT_MARKERS.some((m3) => text.includes(m3));
+}
+function stripJsonFence(raw) {
+  const trimmed = raw.trim();
+  const fence = /^```(?:json)?\s*([\s\S]*?)```$/i.exec(trimmed);
+  return fence ? fence[1].trim() : trimmed;
+}
+function parseJsonObject(raw) {
+  const parsed = JSON.parse(stripJsonFence(raw));
+  if (parsed == null || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error("logic step response must be a JSON object");
+  }
+  return parsed;
+}
+function parseLogicResponse(raw, _step, format) {
+  if (format === "plain") {
+    return { output: raw.trim() };
+  }
+  const obj = parseJsonObject(raw);
+  const vars = obj.vars != null && typeof obj.vars === "object" && !Array.isArray(obj.vars) ? obj.vars : void 0;
+  const branch = typeof obj.branch === "string" ? obj.branch.trim() : void 0;
+  const text = typeof obj.text === "string" ? obj.text : void 0;
+  const output = text ?? JSON.stringify(obj);
+  return { output, ...vars ? { vars } : {}, ...branch ? { branch } : {} };
+}
+function resolveBranchForCondition(_step, branch) {
+  if (!branch)
+    return void 0;
+  const b3 = branch.toLowerCase();
+  if (b3 === "then")
+    return "then";
+  if (b3 === "else")
+    return "else";
+  return void 0;
+}
+function resolveBranchForSwitch(step, branch) {
+  if (!branch)
+    return void 0;
+  const cases = step.cases ?? {};
+  if (branch in cases)
+    return branch;
+  if (step.default && step.default.length > 0)
+    return "__default__";
+  return void 0;
+}
+function stepsToSkipForBranch(step, selected) {
+  if (step.condition != null) {
+    const then = step.then ?? [];
+    const els = step.else ?? [];
+    const active = selected === "then" ? then : els;
+    const all = [...then, ...els];
+    return all.filter((id) => !active.includes(id));
+  }
+  if (step.switch != null) {
+    const cases = step.cases ?? {};
+    const all = /* @__PURE__ */ new Set();
+    for (const ids of Object.values(cases))
+      for (const id of ids)
+        all.add(id);
+    for (const id of step.default ?? [])
+      all.add(id);
+    if (selected === "__default__") {
+      const keep2 = new Set(step.default ?? []);
+      return [...all].filter((id) => !keep2.has(id));
+    }
+    const keep = new Set(cases[selected] ?? []);
+    return [...all].filter((id) => !keep.has(id));
+  }
+  return [];
+}
+
+// ../plugin-workflows/dist/executor/dag.js
 var DAG_EXECUTOR_NAME = "dag";
 var MAX_NESTING_DEPTH = 5;
+var FINALIZE_REPLY_SUFFIX = "\n\nFinalize now: consolidate the operator's answers into a clear structured response. Include every field the step instructions require. Do not ask further questions.";
+function collectLoopBodyIds(workflow) {
+  const ids = /* @__PURE__ */ new Set();
+  for (const step of workflow.steps) {
+    if (step.loop)
+      for (const id of step.loop.body)
+        ids.add(id);
+  }
+  return ids;
+}
 function nowFn(deps) {
   return deps.now ?? (() => Date.now());
 }
@@ -142274,27 +142993,100 @@ function resolveInputs(workflow, deps) {
   }
   return out;
 }
-function buildScope(states, inputs, deps, nowIso) {
+function buildScope(ctx, nowIso) {
   const steps = {};
-  for (const [id, st3] of states)
+  for (const [id, st3] of ctx.states)
     steps[id] = { output: st3.output };
   return {
     steps,
-    inputs,
-    ...deps.trigger != null ? { trigger: deps.trigger } : {},
+    inputs: ctx.inputs,
+    vars: ctx.vars,
+    ...ctx.deps.trigger != null ? { trigger: ctx.deps.trigger } : {},
     now: nowIso
   };
 }
-async function runExecutor(workflow, deps) {
-  const now = nowFn(deps);
-  const inputs = resolveInputs(workflow, deps);
+var UNSAFE_VAR_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
+function mergeVars(ctx, vars) {
+  if (!vars)
+    return;
+  for (const [key, value] of Object.entries(vars)) {
+    if (UNSAFE_VAR_KEYS.has(key)) {
+      ctx.deps.logger?.warn?.("workflow vars: dropping prototype-pollution key", { key });
+      continue;
+    }
+    Object.defineProperty(ctx.vars, key, {
+      value,
+      writable: true,
+      enumerable: true,
+      configurable: true
+    });
+  }
+}
+async function applyBranchSkips(ctx, gate, selected) {
+  for (const id of stepsToSkipForBranch(gate, selected)) {
+    const st3 = ctx.states.get(id);
+    if (!st3 || st3.status !== "pending")
+      continue;
+    st3.status = "skipped";
+    st3.startedAt = st3.endedAt = ctx.now();
+    await ctx.deps.emit?.("workflow_step_skipped", { id, reason: `branch:${gate.id}` });
+  }
+}
+function serializeStates(states) {
+  const out = {};
+  for (const [id, st3] of states) {
+    out[id] = {
+      status: st3.status === "pending" ? "pending" : st3.status,
+      output: st3.output,
+      ...st3.error ? { error: st3.error } : {},
+      startedAt: st3.startedAt,
+      endedAt: st3.endedAt
+    };
+  }
+  return out;
+}
+function restoreStates(raw) {
   const states = /* @__PURE__ */ new Map();
-  for (const step of workflow.steps) {
-    states.set(step.id, { status: "pending", output: "", startedAt: 0, endedAt: 0 });
+  for (const [id, st3] of Object.entries(raw)) {
+    states.set(id, {
+      status: st3.status,
+      output: st3.output,
+      ...st3.error ? { error: st3.error } : {},
+      startedAt: st3.startedAt,
+      endedAt: st3.endedAt
+    });
   }
+  return states;
+}
+function buildStepResults(workflow, states) {
+  return workflow.steps.map((step) => {
+    const st3 = states.get(step.id);
+    const status = st3.status === "pending" ? "skipped" : st3.status;
+    return {
+      id: step.id,
+      status,
+      output: st3.output,
+      ...st3.error ? { error: st3.error } : {},
+      startedAt: st3.startedAt,
+      endedAt: st3.endedAt
+    };
+  });
+}
+function buildRunResult(ctx, status, ok, extra) {
+  const output = status === "completed" ? sinkOutput(ctx.workflow, ctx.states) : "";
+  return {
+    ok,
+    status,
+    steps: buildStepResults(ctx.workflow, ctx.states),
+    output,
+    ...extra
+  };
+}
+async function runExecutorLoop(ctx) {
+  const { workflow, deps } = ctx;
   await deps.emit?.("workflow_started", { name: workflow.name, steps: workflow.steps.length });
   const settled = (id) => {
-    const s2 = states.get(id)?.status;
+    const s2 = ctx.states.get(id)?.status;
     return s2 === "completed" || s2 === "skipped" || s2 === "failed";
   };
   let aborted = false;
@@ -142308,21 +143100,23 @@ async function runExecutor(workflow, deps) {
     while (skippedSomething) {
       skippedSomething = false;
       for (const step of workflow.steps) {
-        const st3 = states.get(step.id);
+        if (ctx.loopBodyIds.has(step.id))
+          continue;
+        const st3 = ctx.states.get(step.id);
         if (st3.status !== "pending")
           continue;
         if (!step.needs.every(settled))
           continue;
         if (step.when == null)
           continue;
-        const scope2 = buildScope(states, inputs, deps, new Date(now()).toISOString());
+        const scope2 = buildScope(ctx, new Date(ctx.now()).toISOString());
         let keep;
         try {
           keep = evalCondition(step.when, scope2);
         } catch (err) {
           st3.status = "failed";
           st3.error = `when: ${err instanceof Error ? err.message : String(err)}`;
-          st3.startedAt = st3.endedAt = now();
+          st3.startedAt = st3.endedAt = ctx.now();
           await deps.emit?.("workflow_step_failed", { id: step.id, error: st3.error });
           if (step.onError !== "continue") {
             aborted = true;
@@ -142333,7 +143127,7 @@ async function runExecutor(workflow, deps) {
         }
         if (!keep) {
           st3.status = "skipped";
-          st3.startedAt = st3.endedAt = now();
+          st3.startedAt = st3.endedAt = ctx.now();
           await deps.emit?.("workflow_step_skipped", { id: step.id });
           skippedSomething = true;
         }
@@ -142344,11 +143138,13 @@ async function runExecutor(workflow, deps) {
     if (aborted)
       break;
     const ready = workflow.steps.filter((step) => {
-      const st3 = states.get(step.id);
+      if (ctx.loopBodyIds.has(step.id))
+        return false;
+      const st3 = ctx.states.get(step.id);
       return st3.status === "pending" && step.needs.every(settled);
     });
     if (ready.length === 0) {
-      const anyPending = [...states.values()].some((s2) => s2.status === "pending");
+      const anyPending = [...ctx.states.values()].some((s2) => s2.status === "pending");
       if (anyPending) {
         abortReason = "workflow stalled \u2014 no runnable steps (check needs/when)";
         aborted = true;
@@ -142356,19 +143152,62 @@ async function runExecutor(workflow, deps) {
       break;
     }
     const wave = ready.slice(0, Math.max(1, workflow.concurrency));
-    const scope = buildScope(states, inputs, deps, new Date(now()).toISOString());
-    await Promise.all(wave.map(async (step) => {
-      const st3 = states.get(step.id);
-      st3.startedAt = now();
+    const scope = buildScope(ctx, new Date(ctx.now()).toISOString());
+    for (const step of wave) {
+      const st3 = ctx.states.get(step.id);
+      st3.startedAt = ctx.now();
       await deps.emit?.("workflow_step_started", {
         id: step.id,
         label: step.label ?? step.id
       });
-      const outcome = await runStep(step, scope, deps);
-      st3.endedAt = now();
+      const outcome = await runStep(step, scope, ctx);
+      st3.endedAt = ctx.now();
+      if (outcome.paused) {
+        st3.status = "awaiting_input";
+        st3.output = outcome.output;
+        await deps.emit?.("workflow_step_awaiting_input", {
+          id: step.id,
+          label: step.label ?? step.id,
+          preview: outcome.output.slice(0, 280),
+          childSessionId: outcome.interactionAgentId
+        });
+        const store = deps.runStore ?? defaultWorkflowRunStore;
+        const runId = await store.save({
+          workflow,
+          trigger: deps.trigger ?? "manual",
+          inputs: ctx.inputs,
+          states: serializeStates(ctx.states),
+          // Persist vars set by logic steps that ran before this pause so a
+          // resume restores them (otherwise downstream `{{ vars.x }}` is lost).
+          vars: ctx.vars,
+          pendingStepId: step.id,
+          interactionAgentId: outcome.interactionAgentId,
+          startedAt: ctx.now()
+        });
+        await deps.emit?.("workflow_paused", {
+          runId,
+          stepId: step.id,
+          childSessionId: outcome.interactionAgentId,
+          // Carry the human-facing question so the operator UI is self-contained
+          // (no separate event correlation needed): the workflow name, the step
+          // label, and the prompt/question the paused step asked.
+          workflow: workflow.name,
+          label: step.label ?? step.id,
+          prompt: outcome.output.slice(0, 2e3)
+        });
+        return buildRunResult(ctx, "paused", true, {
+          runId,
+          pendingStepId: step.id,
+          ...outcome.interactionAgentId ? { interactionAgentId: outcome.interactionAgentId } : {}
+        });
+      }
       if (outcome.ok) {
         st3.status = "completed";
         st3.output = outcome.output;
+        mergeVars(ctx, outcome.vars);
+        if (outcome.branchRoute != null) {
+          await applyBranchSkips(ctx, step, outcome.branchRoute);
+        }
         await deps.emit?.("workflow_step_completed", {
           id: step.id,
           preview: outcome.output.slice(0, 280)
@@ -142382,32 +143221,106 @@ async function runExecutor(workflow, deps) {
           abortReason = `step "${step.id}" failed: ${outcome.error}`;
         }
       }
-    }));
+    }
   }
-  const stepResults = workflow.steps.map((step) => {
-    const st3 = states.get(step.id);
-    return {
-      id: step.id,
-      status: st3.status === "pending" ? "skipped" : st3.status,
-      output: st3.output,
-      ...st3.error ? { error: st3.error } : {},
-      startedAt: st3.startedAt,
-      endedAt: st3.endedAt
-    };
-  });
   const ok = !aborted;
-  const output = sinkOutput(workflow, states);
+  const output = sinkOutput(workflow, ctx.states);
   if (ok) {
     await deps.emit?.("workflow_completed", { name: workflow.name, output: output.slice(0, 280) });
-  } else {
-    await deps.emit?.("workflow_failed", { name: workflow.name, error: abortReason });
+    return buildRunResult(ctx, "completed", true, { output });
   }
-  return {
-    ok,
-    steps: stepResults,
+  await deps.emit?.("workflow_failed", { name: workflow.name, error: abortReason });
+  return buildRunResult(ctx, "failed", false, {
     output,
-    ...ok ? {} : { error: abortReason ?? "workflow failed" }
+    error: abortReason ?? "workflow failed"
+  });
+}
+async function runExecutor(workflow, deps) {
+  const ctx = {
+    workflow,
+    deps,
+    inputs: resolveInputs(workflow, deps),
+    vars: {},
+    states: /* @__PURE__ */ new Map(),
+    now: nowFn(deps),
+    loopBodyIds: collectLoopBodyIds(workflow)
   };
+  for (const step of workflow.steps) {
+    ctx.states.set(step.id, { status: "pending", output: "", startedAt: 0, endedAt: 0 });
+  }
+  return runExecutorLoop(ctx);
+}
+async function resumeWorkflowRun(runId, userMessage, deps, store = defaultWorkflowRunStore) {
+  const checkpoint = await store.load(runId);
+  if (!checkpoint) {
+    return {
+      ok: false,
+      status: "failed",
+      steps: [],
+      output: "",
+      error: `no paused workflow run "${runId}"`
+    };
+  }
+  const depsWithStore = { ...deps, runStore: store };
+  const step = checkpoint.workflow.steps.find((s2) => s2.id === checkpoint.pendingStepId);
+  if (!step) {
+    return {
+      ok: false,
+      status: "failed",
+      steps: buildStepResults(checkpoint.workflow, restoreStates(checkpoint.states)),
+      output: "",
+      error: `paused step "${checkpoint.pendingStepId}" not found`
+    };
+  }
+  const restoredVars = {};
+  const ctx = {
+    workflow: checkpoint.workflow,
+    deps: depsWithStore,
+    inputs: checkpoint.inputs,
+    vars: restoredVars,
+    states: restoreStates(checkpoint.states),
+    now: nowFn(deps),
+    loopBodyIds: collectLoopBodyIds(checkpoint.workflow)
+  };
+  mergeVars(ctx, checkpoint.vars);
+  const st3 = ctx.states.get(step.id);
+  await deps.emit?.("workflow_resumed", { runId, stepId: step.id });
+  if (typeof deps.spawner.continue !== "function") {
+    st3.status = "failed";
+    st3.error = "subagent spawner does not support resume (continue)";
+    st3.endedAt = ctx.now();
+    await deps.emit?.("workflow_step_failed", { id: step.id, error: st3.error });
+    await store.remove(runId);
+    return buildRunResult(ctx, "failed", false, { error: st3.error });
+  }
+  const finalizePrompt = `Operator reply:
+${userMessage.trim()}${FINALIZE_REPLY_SUFFIX}`;
+  try {
+    const child = await deps.spawner.continue({
+      childSessionId: checkpoint.interactionAgentId,
+      prompt: finalizePrompt,
+      label: step.label ?? step.id
+    });
+    if (child.error)
+      throw new Error(child.error.message);
+    st3.status = "completed";
+    st3.output = child.text;
+    st3.endedAt = ctx.now();
+    await deps.emit?.("workflow_step_completed", {
+      id: step.id,
+      preview: child.text.slice(0, 280)
+    });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    st3.status = "failed";
+    st3.error = message;
+    st3.endedAt = ctx.now();
+    await deps.emit?.("workflow_step_failed", { id: step.id, error: message });
+    await store.remove(runId);
+    return buildRunResult(ctx, "failed", false, { error: message });
+  }
+  await store.remove(runId);
+  return runExecutorLoop(ctx);
 }
 function sinkOutput(workflow, states) {
   const needed = /* @__PURE__ */ new Set();
@@ -142421,18 +143334,17 @@ function sinkOutput(workflow, states) {
   const lastCompleted = [...states.values()].filter((s2) => s2.status === "completed").pop();
   return lastCompleted?.output ?? "";
 }
-async function runStep(step, scope, deps) {
+async function runStep(step, scope, ctx) {
   const attempts = 1 + Math.max(0, step.retries);
   let lastError = "";
   for (let attempt = 0; attempt < attempts; attempt++) {
-    if (deps.signal.aborted)
+    if (ctx.deps.signal.aborted)
       return { ok: false, output: "", error: "aborted" };
     try {
-      const output = await runStepOnce(step, scope, deps);
-      return { ok: true, output };
+      return await runStepOnce(step, scope, ctx);
     } catch (err) {
       lastError = err instanceof Error ? err.message : String(err);
-      deps.logger?.warn?.("workflow step attempt failed", {
+      ctx.deps.logger?.warn?.("workflow step attempt failed", {
         step: step.id,
         attempt: attempt + 1,
         error: lastError
@@ -142441,39 +143353,237 @@ async function runStep(step, scope, deps) {
   }
   return { ok: false, output: "", error: lastError };
 }
-async function runStepOnce(step, scope, deps) {
+async function runStepOnce(step, scope, ctx) {
+  const { deps } = ctx;
   const opts = deps.logger ? { logger: deps.logger } : {};
+  if (step.loop != null) {
+    return runLoopStep(step, ctx, opts);
+  }
+  if (step.bridge != null || step.condition != null || step.switch != null) {
+    return runLogicStep(step, scope, ctx, opts);
+  }
   if (step.tool) {
     const args = renderArgs(step.args ?? {}, scope, opts);
     const result = await deps.tools.execute(step.tool, args, deps.signal);
-    return typeof result === "string" ? result : JSON.stringify(result ?? "");
+    const output = typeof result === "string" ? result : JSON.stringify(result ?? "");
+    return { ok: true, output };
   }
   if (step.workflow) {
-    const nested = deps.lookup.workflow(step.workflow);
-    if (!nested)
-      throw new Error(`nested workflow "${step.workflow}" not found`);
-    const depth = (deps.depth ?? 0) + 1;
-    if (depth > MAX_NESTING_DEPTH) {
-      throw new Error(`nested workflow depth exceeded ${MAX_NESTING_DEPTH}`);
-    }
-    const nestedInputs = renderArgs(step.args ?? {}, scope, opts);
-    const result = await runExecutor(nested, {
-      ...deps,
-      inputs: nestedInputs,
-      depth,
-      trigger: `workflow:${step.workflow}`
-    });
-    if (!result.ok)
-      throw new Error(result.error ?? `nested workflow "${step.workflow}" failed`);
-    return result.output;
-  }
-  const spec = buildSubagentSpec(step, scope, deps, opts);
+    return runNestedWorkflow(step, scope, ctx, opts);
+  }
+  const spec = buildSubagentSpecWithDeps(step, scope, deps, opts);
+  if (step.awaitInput) {
+    const child2 = await deps.spawner.spawn({ ...spec, retainSession: true });
+    if (child2.error)
+      throw new Error(child2.error.message);
+    return {
+      ok: false,
+      output: child2.text,
+      paused: true,
+      interactionAgentId: String(child2.childSessionId)
+    };
+  }
   const child = await deps.spawner.spawn(spec);
   if (child.error)
     throw new Error(child.error.message);
-  return child.text;
+  return { ok: true, output: child.text };
+}
+async function runNestedWorkflow(step, scope, ctx, opts) {
+  const { deps } = ctx;
+  const nested = deps.lookup.workflow(step.workflow);
+  if (!nested)
+    throw new Error(`nested workflow "${step.workflow}" not found`);
+  const depth = (deps.depth ?? 0) + 1;
+  if (depth > MAX_NESTING_DEPTH) {
+    throw new Error(`nested workflow depth exceeded ${MAX_NESTING_DEPTH}`);
+  }
+  const nestedInputs = renderArgs(step.args ?? {}, scope, opts);
+  const result = await runExecutor(nested, {
+    ...deps,
+    inputs: nestedInputs,
+    depth,
+    trigger: `workflow:${step.workflow}`
+  });
+  if (result.status === "paused") {
+    return {
+      ok: false,
+      output: result.output,
+      paused: true,
+      ...result.interactionAgentId ? { interactionAgentId: result.interactionAgentId } : {}
+    };
+  }
+  if (!result.ok)
+    throw new Error(result.error ?? `nested workflow "${step.workflow}" failed`);
+  return { ok: true, output: result.output };
+}
+function buildUpstreamBlock(step, scope) {
+  if (step.needs.length === 0)
+    return "";
+  const parts = step.needs.map((id) => `### ${id}
+${scope.steps?.[id]?.output ?? ""}`);
+  return `
+
+## Upstream
+${parts.join("\n\n")}`;
+}
+async function runLogicStep(step, scope, ctx, opts) {
+  const instruction = step.bridge ?? step.condition ?? step.switch ?? "";
+  const format = wantsPlainResponse(step) ? "plain" : "json";
+  if ((step.condition != null || step.switch != null) && format === "plain") {
+    return { ok: false, output: "", error: "condition/switch steps require JSON responses" };
+  }
+  const userPrompt = renderTemplate(instruction, scope, opts) + buildUpstreamBlock(step, scope);
+  const spec = {
+    prompt: userPrompt,
+    ...format === "json" ? { systemPrompt: logicSystemPrompt() } : {},
+    label: step.label ?? step.id,
+    allowedTools: []
+  };
+  const child = await ctx.deps.spawner.spawn(spec);
+  if (child.error)
+    return { ok: false, output: "", error: child.error.message };
+  try {
+    const parsed = parseLogicResponse(child.text, step, format);
+    let branchRoute;
+    if (step.condition != null) {
+      const route = resolveBranchForCondition(step, parsed.branch);
+      if (!route) {
+        return {
+          ok: false,
+          output: child.text,
+          error: `condition step "${step.id}": expected branch "then" or "else", got ${JSON.stringify(parsed.branch)}`
+        };
+      }
+      branchRoute = route;
+    }
+    if (step.switch != null) {
+      const route = resolveBranchForSwitch(step, parsed.branch);
+      if (!route) {
+        return {
+          ok: false,
+          output: child.text,
+          error: `switch step "${step.id}": unknown branch ${JSON.stringify(parsed.branch)}`
+        };
+      }
+      branchRoute = route;
+    }
+    return {
+      ok: true,
+      output: parsed.output,
+      ...parsed.vars ? { vars: parsed.vars } : {},
+      ...branchRoute != null ? { branchRoute } : {}
+    };
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    return { ok: false, output: child.text, error: message };
+  }
+}
+async function runLoopStep(step, ctx, opts) {
+  const loop = step.loop;
+  const max = loop.maxIterations;
+  const bodySteps = loop.body.map((id) => ctx.workflow.steps.find((s2) => s2.id === id)).filter((s2) => s2 != null);
+  let iteration = 0;
+  let lastBodyOutput = "";
+  for (; iteration < max; iteration++) {
+    await ctx.deps.emit?.("workflow_step_started", {
+      id: step.id,
+      label: `${step.label ?? step.id} (iteration ${iteration + 1})`
+    });
+    for (const body of bodySteps) {
+      const bst = ctx.states.get(body.id);
+      bst.status = "pending";
+      bst.output = "";
+      delete bst.error;
+    }
+    for (const body of bodySteps) {
+      if (ctx.deps.signal.aborted)
+        return { ok: false, output: lastBodyOutput, error: "aborted" };
+      const bodyScope = buildScope(ctx, new Date(ctx.now()).toISOString());
+      const bst = ctx.states.get(body.id);
+      bst.startedAt = ctx.now();
+      const outcome = await runStep(body, bodyScope, ctx);
+      bst.endedAt = ctx.now();
+      if (outcome.paused) {
+        return {
+          ok: false,
+          output: lastBodyOutput,
+          error: `loop "${step.id}": body step "${body.id}" cannot pause for input`
+        };
+      }
+      if (outcome.ok) {
+        bst.status = "completed";
+        bst.output = outcome.output;
+        lastBodyOutput = outcome.output;
+        mergeVars(ctx, outcome.vars);
+      } else {
+        bst.status = "failed";
+        bst.error = outcome.error;
+        if (body.onError !== "continue") {
+          ctx.deps.logger?.warn?.("workflow loop broke on body error", {
+            step: step.id,
+            body: body.id,
+            error: outcome.error
+          });
+          return {
+            ok: true,
+            output: `loop "${step.id}" broke on error in body step "${body.id}" after ${iteration + 1} iteration(s): ${outcome.error}` + (lastBodyOutput ? `
+
+${lastBodyOutput}` : "")
+          };
+        }
+      }
+    }
+    const decision = await evaluateLoopCondition(step, loop.condition, ctx, opts);
+    if (!decision.ok) {
+      return { ok: false, output: lastBodyOutput, error: decision.error };
+    }
+    if (decision.route === "then") {
+      return {
+        ok: true,
+        output: `loop "${step.id}" stopped after ${iteration + 1} iteration(s).
+
+${lastBodyOutput}`.trim()
+      };
+    }
+  }
+  ctx.deps.logger?.warn?.("workflow loop hit max iterations", { step: step.id, maxIterations: max });
+  return {
+    ok: true,
+    output: `loop "${step.id}" reached max iterations (${max}); stopping.` + (lastBodyOutput ? `
+
+${lastBodyOutput}` : "")
+  };
 }
-function buildSubagentSpec(step, scope, deps, opts) {
+async function evaluateLoopCondition(step, condition, ctx, opts) {
+  const scope = buildScope(ctx, new Date(ctx.now()).toISOString());
+  const userPrompt = renderTemplate(condition, scope, opts) + `
+
+This is the loop's EXIT condition. Evaluate whether it is now met. Reply with {"branch":"then"} if the condition IS met (stop the loop and continue to the next step), or {"branch":"else"} if it is NOT yet met (run another iteration).`;
+  const spec = {
+    prompt: userPrompt,
+    systemPrompt: logicSystemPrompt(),
+    label: `${step.label ?? step.id} (condition)`,
+    allowedTools: []
+  };
+  const child = await ctx.deps.spawner.spawn(spec);
+  if (child.error)
+    return { ok: false, error: child.error.message };
+  try {
+    const parsed = parseLogicResponse(child.text, step, "json");
+    const route = resolveBranchForCondition(step, parsed.branch);
+    if (!route) {
+      return {
+        ok: false,
+        error: `loop "${step.id}" condition: expected branch "then" or "else", got ${JSON.stringify(parsed.branch)}`
+      };
+    }
+    mergeVars(ctx, parsed.vars);
+    return { ok: true, route };
+  } catch (err) {
+    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+  }
+}
+function buildSubagentSpecWithDeps(step, scope, deps, opts) {
   const label3 = step.label ?? step.id;
   const renderedInput = step.input ? renderTemplate(step.input, scope, opts) : "";
   if (step.skill) {
@@ -142536,33 +143646,192 @@ async function writeRunRecord(workflow, result, startedAt, executorName, deps, d
 }
 
 // ../plugin-workflows/dist/draft.js
+var DEFAULT_MAX_TOKENS = 4096;
 function buildSystemPrompt(opts) {
-  const skills = opts.availableSkills?.length ? opts.availableSkills.join(", ") : "(none registered \u2014 prefer `prompt` steps)";
-  const tools = opts.availableTools?.length ? opts.availableTools.join(", ") : "(none)";
-  return `You are a workflow author for the "moxxy" agent. Output ONLY a YAML document (optionally inside a \`\`\`yaml fence) \u2014 no prose.
+  const skills = formatCatalog(opts.availableSkills, "(none registered \u2014 use `prompt` steps with clear instructions)");
+  const tools = formatCatalog(opts.availableTools, "(none \u2014 use `delivery: { channel: inbox }` for notifications)");
+  return `You are a workflow author for the "moxxy" agent. Output ONLY a YAML document (optionally inside a \`\`\`yaml fence) \u2014 no prose before or after.
 
 A workflow is a DAG of steps. Schema:
 - name: kebab-case slug (lowercase letters/numbers/hyphens, starts with a letter)
-- description: one sentence
+- description: one clear sentence matching the user's goal (never "A simple Moxxy workflow.")
+- enabled: true
 - on (optional triggers): { schedule: { cron: "m h dom mon dow", timeZone? }, afterWorkflow?, fileChanged?, webhook? }
-- inputs (optional): { <name>: { default: <value>, description? } }
+- inputs (optional): { <name>: { default: <value>, description: "..." } } \u2014 use for values the operator supplies at run time (e.g. recipient email, image brief)
 - delivery (optional): { channel?: "inbox", inbox?: true }
 - steps: array of steps, each with:
     - id: slug, unique
-    - EXACTLY ONE action: skill: <name> | prompt: <text> | tool: <name> | workflow: <name>
-    - input: templated prompt for skill/prompt steps
+    - label: short human title (match the user's language when possible)
+    - EXACTLY ONE action: skill | prompt | tool | workflow | bridge | condition | switch | loop
+    - bridge: instruction \u2014 logic step; agent returns JSON with vars (extract/transform data); optional format: plain
+    - condition: instruction + then: [step ids] + else: [step ids] \u2014 agent returns JSON branch then|else
+    - switch: instruction + cases: { <caseId>: [step ids], ... } + optional default: [step ids] \u2014 agent returns JSON branch matching a case id
+    - loop: { body: [step ids], condition: "<prompt>", maxIterations: 1..50 } \u2014 repeats body in order each iteration. \`condition\` is the loop's EXIT/GOAL condition: after each iteration the agent returns JSON branch then (condition met \u2192 STOP, continue to the next step) | else (not yet met \u2192 run body again). A body step error BREAKS the loop to the next step (use onError: continue on a body step to swallow its error and keep iterating). Always stops at maxIterations (default 10). Body step ids must be real steps; do NOT combine loop with then/else/cases/default.
+    - input: templated instruction for skill steps
+    - prompt: templated instruction for prompt steps (multiline allowed with |)
     - args: templated args object for tool/workflow steps
-    - needs: [ <upstream step ids> ]  (defines the DAG; omit for sources)
-    - when (optional): a condition like '{{ steps.x.output }} is not empty' or '{{ inputs.r }} == "US"' or '... contains "text"', joined by and/or
+    - needs: [ <upstream step ids> ]  (defines the DAG; omit only for true sources)
+    - when (optional, legacy): simple guards only \u2014 '{{ steps.x.output }} is not empty'. Do NOT use when for semantic decisions (use condition/switch).
     - onError (optional): fail | continue | retry ; retries (optional, 0-3)
 
-Templating: reference earlier results with {{ steps.<id>.output }}, inputs with {{ inputs.<name> }}, plus {{ trigger }} and {{ now }}.
+Operator data \u2014 two ways: declare a value the operator can supply UP FRONT as an \`inputs\` field (filled in before Run). To PAUSE mid-run and ask a question whose answer depends on earlier steps, set \`awaitInput: true\` on a prompt or skill step: the workflow pauses, surfaces the step's prompt to the operator, and resumes with their reply once they answer. Prefer \`inputs\` for known-up-front values; use \`awaitInput\` only for genuinely mid-run questions.
+
+Templating: {{ steps.<id>.output }}, {{ inputs.<name> }}, {{ vars.<name> }}, {{ trigger }}, {{ now }}.
+
+Logic steps: default response is one JSON object (vars, branch, optional text). Describe semantics in the instruction; do not repeat JSON syntax unless needed.
+
+Ordering: steps whose \`needs\` are all satisfied run in parallel \u2014 chain with \`needs\` for sequential pipelines. A loop's body steps run only inside the loop (each iteration), so give them \`needs: [<loop step id>]\` and never schedule them elsewhere. A loop body step runs unconditionally each iteration: do NOT put \`when\` on it, do NOT make it a condition/switch step, and only \`needs\` its loop step or a sibling body step of the same loop. No NON-loop step may \`needs\` a loop body step \u2014 depend on the loop step instead.
 
-Steps with all their \`needs\` satisfied run in parallel, so use \`needs\` to express ordering and fan-out/fan-in.
+Authoring rules:
+1. Decompose the intent into concrete steps. Multi-phase requests (collect \u2192 act \u2192 summarize \u2192 deliver) need at least 4 steps with a linear or fan-in \`needs\` chain.
+2. Values the operator must supply (search topic, recipient email, brief): declare each as an \`inputs\` field with a clear \`description\` (and a \`default\` when sensible). The operator fills them in before Run; reference them downstream via \`{{ inputs.<name> }}\`.
+3. To ask the operator a mid-run question whose answer depends on earlier steps, set \`awaitInput: true\` on a prompt or skill step \u2014 the run pauses, shows that step's prompt to the operator, and continues with their reply (referenced downstream via \`{{ steps.<id>.output }}\`). awaitInput is ONLY valid on prompt/skill steps (never tool/logic/loop or a loop body). Prefer \`inputs\` for values known before Run.
+4. Research + report + email intents: typical chain \u2014 \`web-research\` skill (over \`{{ inputs.topic }}\`) \u2192 \`write_report\` \u2192 \`send_email\` tool (to \`{{ inputs.recipient }}\`). Put \`topic\` and \`recipient\` in \`inputs\`.
+5. Use ONLY skill/tool names from the catalogs below \u2014 never placeholders like "<< skill-name >>", "TBD", or empty skill/tool fields.
+6. Prefer a listed skill when its description fits; otherwise use a detailed \`prompt\` step.
+7. For email/notify: use a listed mail/MCP tool if available; else \`delivery: { channel: inbox }\`.
+8. For image generation: use a listed image/generation tool if available; else a \`prompt\` step that describes producing the image artifact in text.
+9. Later steps must read prior results via \`{{ steps.<id>.output }}\`, extracted fields via \`{{ vars.<name> }}\`, and operator data via \`{{ inputs.<name> }}\` \u2014 never invent example emails or briefs in prompts.
+10. Between incompatible steps insert \`bridge\` to extract fields into vars (e.g. an email address from text). Use \`condition\` for if/else routing, \`switch\` for multi-way (e.g. value > 100 \u2192 pies, < 0 \u2192 kot, else nieokreslony).
+11. Use \`loop\` for "keep refining until good enough" / "retry up to N times" / "iterate while X holds" intents \u2014 set a sane maxIterations so it always terminates. Prefer bridge + vars over passing raw output to tools.
 
-Available skills: ${skills}
-Available tools: ${tools}
-Prefer a named skill when one fits; otherwise use a \`prompt\` step. For "send/email/notify me" use a connected tool if available, else rely on delivery: { channel: inbox }.`;
+Available skills (name \u2014 description):
+${skills}
+
+Available tools (name \u2014 description):
+${tools}
+
+Example shape for internet research \u2192 report \u2192 email (operator data via inputs):
+\`\`\`yaml
+name: internet-research-report-email
+description: Research a topic, write a report, and email it to the recipient.
+enabled: true
+inputs:
+  topic:
+    description: Temat/zakres wyszukiwania w internecie.
+  recipient:
+    description: Adres e-mail odbiorcy raportu.
+steps:
+  - id: search_web
+    label: Wyszukaj w internecie
+    skill: web-research
+    input: |
+      Przeprowad\u017A research na temat:
+      {{ inputs.topic }}
+  - id: write_report
+    needs: [search_web]
+    label: Przygotuj raport
+    prompt: |
+      Napisz raport po polsku z wynik\xF3w researchu.
+      Temat: {{ inputs.topic }}
+      Research: {{ steps.search_web.output }}
+  - id: send_email
+    needs: [write_report]
+    label: Wy\u015Blij e-mail
+    tool: gmail_send
+    args:
+      to: ["{{ inputs.recipient }}"]
+      subject: "Raport z researchu"
+      body: "{{ steps.write_report.output }}"
+\`\`\`
+
+Example shape for image brief \u2192 generate \u2192 report \u2192 email (operator data via inputs):
+\`\`\`yaml
+name: image-report-email
+description: Generate an image from a brief, write a report, and email it.
+enabled: true
+inputs:
+  brief:
+    description: What image to generate (subject, style, format, mood, colors).
+  recipient:
+    description: Recipient email for the report.
+steps:
+  - id: generate_image
+    label: Generate image
+    prompt: |
+      Generate the image from this brief:
+      {{ inputs.brief }}
+      Return the artifact path or id and short generation notes.
+  - id: write_report
+    needs: [generate_image]
+    label: Write report
+    prompt: |
+      Write a concise report in the operator's language.
+      Brief: {{ inputs.brief }}
+      Generation: {{ steps.generate_image.output }}
+  - id: send_report
+    needs: [write_report]
+    label: Send report
+    tool: gmail_send
+    args:
+      to: ["{{ inputs.recipient }}"]
+      subject: "Image workflow report"
+      body: "{{ steps.write_report.output }}"
+\`\`\`
+
+Example shape for an iterative refine-until-good loop:
+\`\`\`yaml
+name: refine-draft
+description: Draft a paragraph, then refine it until it is good enough or 5 tries are used.
+enabled: true
+inputs:
+  topic:
+    default: "release notes"
+steps:
+  - id: first_draft
+    label: First draft
+    prompt: |
+      Write a first draft about {{ inputs.topic }}.
+  - id: refine
+    needs: [first_draft]
+    label: Refine loop
+    loop:
+      # condition is the EXIT/GOAL condition \u2014 describe the goal that ENDS the
+      # loop. Met (then) \u2192 stop and continue to the next step; not met (else) \u2192
+      # run the body again. A body step error breaks the loop to the next step.
+      body: [improve]
+      condition: |
+        Is the latest draft in {{ vars.draft }} good enough \u2014 clear, accurate, and well-structured?
+        If yes, the goal is reached and the loop stops; if not, keep refining.
+      maxIterations: 5
+  - id: improve
+    needs: [refine]
+    label: Improve draft
+    bridge: |
+      Improve the current draft (start from {{ steps.first_draft.output }} or {{ vars.draft }}).
+      Return JSON with vars.draft set to the improved text.
+\`\`\`
+
+Example shape for a mid-run question (awaitInput pause \u2192 operator reply \u2192 continue):
+\`\`\`yaml
+name: draft-with-approval
+description: Draft an announcement, ask the operator to approve or tweak it, then publish.
+enabled: true
+steps:
+  - id: draft
+    label: Draft announcement
+    prompt: |
+      Write a short product announcement.
+  - id: approve
+    needs: [draft]
+    label: Approve or tweak
+    awaitInput: true
+    prompt: |
+      Here is the draft announcement:
+      {{ steps.draft.output }}
+      Reply with "ship it" to approve, or describe any changes you want.
+  - id: publish
+    needs: [approve]
+    label: Publish
+    prompt: |
+      Apply the operator's decision ({{ steps.approve.output }}) and produce the final announcement.
+\`\`\`
+(Replace skill/tool names with ones from the catalog when drafting.)`;
+}
+function formatCatalog(entries, emptyLabel) {
+  if (!entries?.length)
+    return emptyLabel;
+  return entries.map((entry) => `- ${entry.name}${entry.description ? ` \u2014 ${entry.description}` : ""}`).join("\n");
 }
 async function draftWorkflow(provider, model, intent, signal, opts = {}) {
   let accumulated = "";
@@ -142570,7 +143839,7 @@ async function draftWorkflow(provider, model, intent, signal, opts = {}) {
     model,
     system: buildSystemPrompt(opts),
     messages: [{ role: "user", content: [{ type: "text", text: `Build a workflow for: ${intent}` }] }],
-    maxTokens: opts.maxTokens ?? 1500,
+    maxTokens: opts.maxTokens ?? DEFAULT_MAX_TOKENS,
     signal
   })) {
     if (event.type === "text_delta")
@@ -142652,7 +143921,8 @@ function createTool(deps) {
       const model = deps.draftModel ?? provider.models[0]?.id ?? "claude-sonnet-4-6";
       const drafted = await draftWorkflow(provider, model, intent, ctx.signal, {
         ...deps.listSkills ? { availableSkills: deps.listSkills() } : {},
-        ...deps.listTools ? { availableTools: deps.listTools() } : {}
+        ...deps.listTools ? { availableTools: deps.listTools() } : {},
+        maxTokens: 4096
       });
       if (!drafted.parse.ok || !drafted.parse.workflow) {
         throw new MoxxyError({
@@ -143148,9 +144418,17 @@ function buildWorkflowsIntegration(args) {
   const warnedCycles = /* @__PURE__ */ new Set();
   async function runNow(input) {
     const entry = await store.get(input.name);
-    if (!entry) return { ok: false, steps: [], output: "", error: `no workflow named "${input.name}"` };
+    if (!entry) {
+      return { ok: false, status: "failed", steps: [], output: "", error: `no workflow named "${input.name}"` };
+    }
     if (inFlight.has(input.name)) {
-      return { ok: false, steps: [], output: "", error: `workflow "${input.name}" is already running` };
+      return {
+        ok: false,
+        status: "failed",
+        steps: [],
+        output: "",
+        error: `workflow "${input.name}" is already running`
+      };
     }
     inFlight.add(input.name);
     try {
@@ -143189,12 +144467,62 @@ function buildWorkflowsIntegration(args) {
         },
         { executor: session.workflowExecutors.getActive() }
       );
+      if (result.status === "paused") {
+        logger?.warn?.("workflows: run paused awaiting operator input; not delivering to inbox", {
+          workflow: input.name,
+          runId: result.runId
+        });
+        return result;
+      }
       await deliverToInbox(entry.workflow, result, logger);
       return result;
     } finally {
       inFlight.delete(input.name);
     }
   }
+  async function resumeNow(runId, reply2) {
+    const checkpoint = await defaultWorkflowRunStore.load(runId);
+    const turnId = session.startTurn().turnId;
+    const spawner = createSubagentSpawner({
+      parentSession: session,
+      parentTurnId: turnId,
+      parentSignal: session.signal,
+      parentModel: activeModel(session)
+    });
+    const result = await resumeWorkflowRun(
+      runId,
+      reply2,
+      {
+        spawner,
+        tools: session.tools,
+        lookup: {
+          skill: (n2) => session.skills.byName(n2),
+          workflow: (n2) => store.lookup(n2)
+        },
+        signal: session.signal,
+        now: () => Date.now(),
+        emit: (subtype, payload) => void session.log.append({
+          type: "plugin_event",
+          sessionId: session.id,
+          turnId,
+          source: "plugin",
+          pluginId: PLUGIN_ID3,
+          subtype,
+          payload
+        }),
+        ...logger ? { logger } : {}
+      },
+      defaultWorkflowRunStore
+    );
+    if (result.status === "paused") {
+      logger?.warn?.("workflows: run paused again awaiting operator input; not delivering to inbox", {
+        runId: result.runId
+      });
+      return result;
+    }
+    if (checkpoint?.workflow) await deliverToInbox(checkpoint.workflow, result, logger);
+    return result;
+  }
   const view = {
     list: async () => (await store.list()).map((w4) => ({
       name: w4.workflow.name,
@@ -143214,7 +144542,47 @@ function buildWorkflowsIntegration(args) {
         ok: r2.ok,
         output: r2.output,
         ...r2.error ? { error: r2.error } : {},
-        steps: r2.steps.map((s2) => ({ id: s2.id, status: s2.status, ...s2.error ? { error: s2.error } : {} }))
+        steps: r2.steps.map((s2) => ({ id: s2.id, status: s2.status, ...s2.error ? { error: s2.error } : {} })),
+        status: r2.status,
+        ...r2.runId ? { runId: r2.runId } : {}
+      };
+    },
+    // Builder-facing additions (phase 2 GUI): validate a draft YAML, persist a
+    // workflow, and fetch one as canonical YAML. Keep them on the same store so
+    // the modal and the builder share one source of truth.
+    validateDraft: async (yaml) => {
+      const r2 = parseWorkflowYaml(yaml);
+      return { ok: r2.ok, errors: r2.errors };
+    },
+    save: async (yaml, previousName) => {
+      const parsed = parseWorkflowYaml(yaml);
+      if (!parsed.ok || !parsed.workflow) {
+        throw new Error(`invalid workflow YAML \u2014 ${parsed.errors.join("; ")}`);
+      }
+      const saved = await store.save(parsed.workflow, previousName);
+      await syncSchedules();
+      return { name: saved.workflow.name, scope: saved.scope, path: saved.path };
+    },
+    getRun: async (name) => {
+      const entry = await store.get(name);
+      if (!entry) return null;
+      return {
+        name: entry.workflow.name,
+        scope: entry.scope,
+        path: entry.path,
+        yaml: serializeWorkflow(entry.workflow)
+      };
+    },
+    // Human-in-the-loop: answer a paused run's awaitInput question and resume.
+    resume: async (runId, reply2) => {
+      const r2 = await resumeNow(runId, reply2);
+      return {
+        ok: r2.ok,
+        output: r2.output,
+        ...r2.error ? { error: r2.error } : {},
+        steps: r2.steps.map((s2) => ({ id: s2.id, status: s2.status, ...s2.error ? { error: s2.error } : {} })),
+        status: r2.status,
+        ...r2.runId ? { runId: r2.runId } : {}
       };
     }
   };
@@ -143312,8 +144680,11 @@ function buildWorkflowsIntegration(args) {
     appendEvent: (e3) => session.log.append(e3),
     ...logger ? { logger } : {},
     provider: () => safeActiveProvider(session),
-    listSkills: () => session.skills.list().map((s2) => s2.frontmatter.name),
-    listTools: () => session.tools.list().map((t2) => t2.name),
+    listSkills: () => session.skills.list().map((s2) => ({
+      name: s2.frontmatter.name,
+      description: s2.frontmatter.description ?? ""
+    })),
+    listTools: () => session.tools.list().map((t2) => ({ name: t2.name, description: t2.description ?? "" })),
     onChanged: syncSchedules,
     runNow,
     userDir: defaultUserWorkflowsDir(),
@@ -143321,6 +144692,13 @@ function buildWorkflowsIntegration(args) {
       session.workflows = view;
       await syncSchedules();
       await startFileWatchers();
+      void defaultWorkflowRunStore.sweepStale().then((n2) => {
+        if (n2 > 0) logger?.info?.("workflows: swept stale paused-run checkpoints", { count: n2 });
+      }).catch(
+        (err) => logger?.warn?.("workflows: checkpoint sweep failed", {
+          err: err instanceof Error ? err.message : String(err)
+        })
+      );
     }
   });
   return {
@@ -148864,9 +150242,9 @@ ${HELP12}`);
 function formatCapabilities(caps) {
   if (!caps) return "";
   const bits = [];
-  const fs43 = caps.fs;
-  if (fs43?.read?.length) bits.push(`fs:read(${fs43.read.length})`);
-  if (fs43?.write?.length) bits.push(`fs:write(${fs43.write.length})`);
+  const fs44 = caps.fs;
+  if (fs44?.read?.length) bits.push(`fs:read(${fs44.read.length})`);
+  if (fs44?.write?.length) bits.push(`fs:write(${fs44.write.length})`);
   const net3 = caps.net;
   if (net3?.mode) bits.push(`net:${net3.mode}`);
   const env3 = caps.env;