@qwen-code/qwen-code 0.21.1 → 0.21.2-nightly.20260801.bc382c3ff

package/chunks/{workflow-YCIVBYSB.js → workflow-SN3TJBTJ.js}

@@ -11,84 +11,89 @@ import {
   toModelVisibleSubagentResult,
   writeWorkflowSnapshot,
   writeWorktreeSessionMarker
-} from "./chunk-X5WNMMIA.js";
+} from "./chunk-NGWYUZZO.js";
+import "./chunk-GOFAQQZA.js";
+import "./chunk-5M6IDOMF.js";
 import "./chunk-TWPJO254.js";
 import "./chunk-H6XPXXMH.js";
-import "./chunk-5M6IDOMF.js";
-import "./chunk-UPUG4GXM.js";
-import "./chunk-64LQLPL7.js";
-import "./chunk-2LQTH543.js";
-import "./chunk-KRXPRVGL.js";
-import "./chunk-BMFALVGQ.js";
-import "./chunk-CVHIL5IG.js";
-import "./chunk-IRH27ZC2.js";
-import "./chunk-QHWCP53L.js";
-import "./chunk-PONHVBRT.js";
-import "./chunk-T26EAKDL.js";
+import "./chunk-CWEIMFFW.js";
+import "./chunk-I7JDGNG6.js";
+import "./chunk-A6SX5TAH.js";
+import "./chunk-33FNCQSY.js";
 import {
   parsePositiveIntegerEnv
 } from "./chunk-6PVPNMXU.js";
+import "./chunk-PXA5AWHY.js";
+import "./chunk-IRH27ZC2.js";
+import "./chunk-QHWCP53L.js";
+import "./chunk-MOHAWIAW.js";
+import "./chunk-MYT7N6QH.js";
+import "./chunk-O6GEWCJA.js";
+import "./chunk-T26EAKDL.js";
 import "./chunk-CPBF7KYF.js";
-import "./chunk-6QIGFD5W.js";
-import "./chunk-XWWKIXVD.js";
-import "./chunk-75GFAX4R.js";
-import "./chunk-OKF7JF3R.js";
+import "./chunk-MISUEWB4.js";
+import "./chunk-KRXPRVGL.js";
+import "./chunk-A5YZ3FA2.js";
+import "./chunk-YAVY33G4.js";
+import "./chunk-2UISUFHQ.js";
+import "./chunk-6FMJLI5M.js";
 import {
   SUBAGENT_PLAN_LIFECYCLE_TOOLS,
   runWithAgentContext
-} from "./chunk-JSD33JG6.js";
+} from "./chunk-PGEGUNH5.js";
 import "./chunk-S6LOFUVP.js";
-import "./chunk-JCW2R7WC.js";
+import "./chunk-K623ENWT.js";
+import "./chunk-AQ37AY7B.js";
 import {
   WorkspaceContext
-} from "./chunk-2DN4J57Y.js";
+} from "./chunk-432XCUHF.js";
 import "./chunk-ZPJWUGCS.js";
-import "./chunk-2LKVPASC.js";
+import "./chunk-XC656O42.js";
 import "./chunk-NAVJD2PQ.js";
-import "./chunk-LW3RFMG7.js";
-import "./chunk-W4MIWP6M.js";
+import "./chunk-QYPT3QUD.js";
+import "./chunk-QMBEW7EW.js";
 import "./chunk-DGEIYUC3.js";
 import "./chunk-MPHPFVKK.js";
 import "./chunk-GLNBDYUX.js";
 import {
   createChildAbortController
 } from "./chunk-DJ2GSRLV.js";
-import "./chunk-5KTQXHPY.js";
-import "./chunk-75MIQ3LV.js";
+import "./chunk-XCLLRKY5.js";
+import "./chunk-RPYYTL7E.js";
 import "./chunk-2J3OJGTL.js";
 import "./chunk-P3QQPMQA.js";
-import "./chunk-RPLGZJV2.js";
+import "./chunk-6O5DVH27.js";
 import "./chunk-GLCZKT5V.js";
-import "./chunk-DZLYR4U3.js";
+import "./chunk-2DNKEBXY.js";
 import {
   WorkflowRunEvent,
   logWorkflowRun,
   read,
   writeLine
-} from "./chunk-PT722TDT.js";
+} from "./chunk-M2F5PLOW.js";
 import "./chunk-VGC4I5JJ.js";
-import "./chunk-SGFT55XI.js";
+import "./chunk-E4WHKETF.js";
 import {
   SyntheticOutputTool
-} from "./chunk-Y4IHBGBP.js";
+} from "./chunk-BV4QX43X.js";
 import {
   BaseDeclarativeTool,
   BaseToolInvocation,
   ToolDisplayNames,
   ToolNames
-} from "./chunk-Y6AXW2OG.js";
-import "./chunk-VCPIZRYH.js";
+} from "./chunk-I5GNT6ZS.js";
+import "./chunk-TFFMATHX.js";
 import "./chunk-46UV252V.js";
 import "./chunk-ZBVS26BY.js";
-import "./chunk-WZRWHXFE.js";
-import "./chunk-A3NDJ5SB.js";
-import "./chunk-7XATOOE7.js";
-import "./chunk-BGTQCTQW.js";
+import "./chunk-BFHXDAR7.js";
+import "./chunk-TYERNYH4.js";
+import "./chunk-UH7Z7Y45.js";
+import "./chunk-O2ZYHG33.js";
 import "./chunk-W4RQUHY3.js";
-import "./chunk-S7W2GKIO.js";
+import "./chunk-G7XXKQYS.js";
 import {
   createDebugLogger
-} from "./chunk-UHUSJ6X7.js";
+} from "./chunk-3RXUYQJI.js";
 import "./chunk-VOQXFAY5.js";
 import "./chunk-75DOP5OR.js";
 import "./chunk-DMTGGOSA.js";
@@ -105,6 +110,95 @@ import {
 // packages/core/src/tools/workflow/workflow.ts
 init_esbuild_shims();
 
+// packages/core/src/agents/runtime/workflow-budget.ts
+init_esbuild_shims();
+var debugLogger = createDebugLogger("WORKFLOW_BUDGET");
+var MAX_TOKENS_PER_WORKFLOW_ENV = "QWEN_CODE_MAX_TOKENS_PER_WORKFLOW";
+var HARD_MAX_TOKENS_CEILING = 1e8;
+function resolveMaxTokensPerWorkflow(env = process.env) {
+  const raw = env[MAX_TOKENS_PER_WORKFLOW_ENV];
+  if (raw === void 0 || raw.trim() === "") {
+    return null;
+  }
+  const parsed = parsePositiveIntegerEnv(raw, 0);
+  if (parsed < 1) {
+    debugLogger.warn(
+      `Invalid ${MAX_TOKENS_PER_WORKFLOW_ENV}=${JSON.stringify(raw)}, treating as unset (no cap)`
+    );
+    return null;
+  }
+  if (parsed > HARD_MAX_TOKENS_CEILING) {
+    debugLogger.warn(
+      `${MAX_TOKENS_PER_WORKFLOW_ENV}=${parsed} exceeds hard ceiling (${HARD_MAX_TOKENS_CEILING}); clamping.`
+    );
+    return HARD_MAX_TOKENS_CEILING;
+  }
+  return parsed;
+}
+__name(resolveMaxTokensPerWorkflow, "resolveMaxTokensPerWorkflow");
+var WorkflowBudgetImpl = class _WorkflowBudgetImpl {
+  static {
+    __name(this, "WorkflowBudgetImpl");
+  }
+  total;
+  _spent;
+  constructor(total) {
+    this.total = total;
+    this._spent = 0;
+  }
+  spent() {
+    return this._spent;
+  }
+  remaining() {
+    if (this.total === null) return Infinity;
+    return Math.max(0, this.total - this._spent);
+  }
+  /**
+   * Host-side increment. NOT exposed to the script — the
+   * `WorkflowBudget` interface deliberately omits any setter so a
+   * malicious workflow cannot inflate / deflate the budget. Only the
+   * orchestrator (in `countedDispatch`) calls this after a dispatch
+   * resolves with the agent's output token count.
+   *
+   * Non-positive deltas are silently dropped (some dispatches return
+   * `output_tokens: 0` on early failures); negative deltas would be a
+   * caller bug and are also dropped rather than silently rewinding
+   * the counter.
+   */
+  recordSpent(deltaTokens) {
+    if (!Number.isFinite(deltaTokens) || deltaTokens <= 0) return;
+    this._spent += deltaTokens;
+  }
+  /**
+   * Factory: build a budget from the current environment. Convenience
+   * over `new WorkflowBudgetImpl(resolveMaxTokensPerWorkflow(env))`.
+   */
+  static fromEnv(env = process.env) {
+    return new _WorkflowBudgetImpl(resolveMaxTokensPerWorkflow(env));
+  }
+};
+var WorkflowBudgetExceededError = class extends Error {
+  static {
+    __name(this, "WorkflowBudgetExceededError");
+  }
+  name = "WorkflowBudgetExceededError";
+  runId;
+  budgetTotal;
+  spent;
+  constructor(runId, budgetTotal, spent) {
+    super(
+      `Workflow ${runId} exceeded the token budget (${spent} / ${budgetTotal} output tokens spent).`
+    );
+    this.runId = runId;
+    this.budgetTotal = budgetTotal;
+    this.spent = spent;
+  }
+};
+
+// packages/core/src/agents/runtime/workflow-runner.ts
+init_esbuild_shims();
+import { randomBytes as randomBytes2 } from "node:crypto";
+
 // packages/core/src/agents/runtime/workflow-orchestrator.ts
 init_esbuild_shims();
 import { randomBytes } from "node:crypto";
@@ -290,7 +384,7 @@ function isRegexContext(source, i) {
   return /[{[(,;:=!&|?+\-*/%^~<>]/.test(prev);
 }
 __name(isRegexContext, "isRegexContext");
-var debugLogger = createDebugLogger("WORKFLOW");
+var debugLogger2 = createDebugLogger("WORKFLOW");
 var MAX_LOG_LINES = 1e4;
 var MAX_PHASE_ENTRIES = 1e4;
 var ARGS_MAX_DEPTH = 64;
@@ -349,7 +443,7 @@ function createWorkflowSandbox(opts) {
       try {
         opts.emitter?.logAppended?.(line);
       } catch (e) {
-        debugLogger.warn("emitter.logAppended threw:", e);
+        debugLogger2.warn("emitter.logAppended threw:", e);
       }
     } else if (logs.length === MAX_LOG_LINES) {
       logs.push(`[workflow log truncated at ${MAX_LOG_LINES} lines]`);
@@ -363,7 +457,7 @@ function createWorkflowSandbox(opts) {
       try {
         opts.emitter?.phaseStarted?.(t);
       } catch (e) {
-        debugLogger.warn("emitter.phaseStarted threw:", e);
+        debugLogger2.warn("emitter.phaseStarted threw:", e);
       }
     } else if (phases.length === MAX_PHASE_ENTRIES) {
       phases.push(
@@ -386,7 +480,7 @@ function createWorkflowSandbox(opts) {
     // value" (this warn). Receives only primitive strings/numbers — the bridge
     // contract forbids host objects crossing back to the script.
     logRevivalFailure: /* @__PURE__ */ __name((idx, reason) => {
-      debugLogger.warn(
+      debugLogger2.warn(
         `Workflow result revival failed at index ${idx}: ${reason}; slot set to null (non-JSON-serializable thunk return).`
       );
     }, "logRevivalFailure"),
@@ -815,91 +909,6 @@ ${stripped}
 }
 __name(createWorkflowSandbox, "createWorkflowSandbox");
 
-// packages/core/src/agents/runtime/workflow-budget.ts
-init_esbuild_shims();
-var debugLogger2 = createDebugLogger("WORKFLOW_BUDGET");
-var MAX_TOKENS_PER_WORKFLOW_ENV = "QWEN_CODE_MAX_TOKENS_PER_WORKFLOW";
-var HARD_MAX_TOKENS_CEILING = 1e8;
-function resolveMaxTokensPerWorkflow(env = process.env) {
-  const raw = env[MAX_TOKENS_PER_WORKFLOW_ENV];
-  if (raw === void 0 || raw.trim() === "") {
-    return null;
-  }
-  const parsed = parsePositiveIntegerEnv(raw, 0);
-  if (parsed < 1) {
-    debugLogger2.warn(
-      `Invalid ${MAX_TOKENS_PER_WORKFLOW_ENV}=${JSON.stringify(raw)}, treating as unset (no cap)`
-    );
-    return null;
-  }
-  if (parsed > HARD_MAX_TOKENS_CEILING) {
-    debugLogger2.warn(
-      `${MAX_TOKENS_PER_WORKFLOW_ENV}=${parsed} exceeds hard ceiling (${HARD_MAX_TOKENS_CEILING}); clamping.`
-    );
-    return HARD_MAX_TOKENS_CEILING;
-  }
-  return parsed;
-}
-__name(resolveMaxTokensPerWorkflow, "resolveMaxTokensPerWorkflow");
-var WorkflowBudgetImpl = class _WorkflowBudgetImpl {
-  static {
-    __name(this, "WorkflowBudgetImpl");
-  }
-  total;
-  _spent;
-  constructor(total) {
-    this.total = total;
-    this._spent = 0;
-  }
-  spent() {
-    return this._spent;
-  }
-  remaining() {
-    if (this.total === null) return Infinity;
-    return Math.max(0, this.total - this._spent);
-  }
-  /**
-   * Host-side increment. NOT exposed to the script — the
-   * `WorkflowBudget` interface deliberately omits any setter so a
-   * malicious workflow cannot inflate / deflate the budget. Only the
-   * orchestrator (in `countedDispatch`) calls this after a dispatch
-   * resolves with the agent's output token count.
-   *
-   * Non-positive deltas are silently dropped (some dispatches return
-   * `output_tokens: 0` on early failures); negative deltas would be a
-   * caller bug and are also dropped rather than silently rewinding
-   * the counter.
-   */
-  recordSpent(deltaTokens) {
-    if (!Number.isFinite(deltaTokens) || deltaTokens <= 0) return;
-    this._spent += deltaTokens;
-  }
-  /**
-   * Factory: build a budget from the current environment. Convenience
-   * over `new WorkflowBudgetImpl(resolveMaxTokensPerWorkflow(env))`.
-   */
-  static fromEnv(env = process.env) {
-    return new _WorkflowBudgetImpl(resolveMaxTokensPerWorkflow(env));
-  }
-};
-var WorkflowBudgetExceededError = class extends Error {
-  static {
-    __name(this, "WorkflowBudgetExceededError");
-  }
-  name = "WorkflowBudgetExceededError";
-  runId;
-  budgetTotal;
-  spent;
-  constructor(runId, budgetTotal, spent) {
-    super(
-      `Workflow ${runId} exceeded the token budget (${spent} / ${budgetTotal} output tokens spent).`
-    );
-    this.runId = runId;
-    this.budgetTotal = budgetTotal;
-    this.spent = spent;
-  }
-};
-
 // packages/core/src/agents/runtime/workflow-stall.ts
 init_esbuild_shims();
 var DEFAULT_STALL_MS = 6e4;
@@ -1195,13 +1204,13 @@ function resolveMaxAgentsPerRun(env = process.env) {
   }
   const parsed = parsePositiveIntegerEnv(raw, 0);
   if (parsed < 1) {
-    debugLogger.warn(
+    debugLogger2.warn(
       `Invalid ${MAX_WORKFLOW_AGENTS_ENV}=${JSON.stringify(raw)}, using default (${DEFAULT_MAX_AGENTS_PER_RUN})`
     );
     return DEFAULT_MAX_AGENTS_PER_RUN;
   }
   if (parsed > HARD_MAX_AGENTS_PER_RUN_CEILING) {
-    debugLogger.warn(
+    debugLogger2.warn(
       `${MAX_WORKFLOW_AGENTS_ENV}=${parsed} exceeds hard ceiling (${HARD_MAX_AGENTS_PER_RUN_CEILING}); clamping.`
     );
     return HARD_MAX_AGENTS_PER_RUN_CEILING;
@@ -1217,14 +1226,14 @@ function resolveConcurrencyLimit(env = process.env) {
     const parsed = parsePositiveIntegerEnv(raw, 0);
     if (parsed >= 1) {
       if (parsed > HARD_MAX_CONCURRENCY_CEILING) {
-        debugLogger.warn(
+        debugLogger2.warn(
           `${MAX_WORKFLOW_CONCURRENCY_ENV}=${parsed} exceeds hard ceiling (${HARD_MAX_CONCURRENCY_CEILING}); clamping.`
         );
         return HARD_MAX_CONCURRENCY_CEILING;
       }
       return parsed;
     }
-    debugLogger.warn(
+    debugLogger2.warn(
       `Invalid ${MAX_WORKFLOW_CONCURRENCY_ENV}=${JSON.stringify(raw)}, using cpu-derived default`
     );
   }
@@ -1234,6 +1243,7 @@ __name(resolveConcurrencyLimit, "resolveConcurrencyLimit");
 var WORKFLOW_SUBAGENT_MAX_TURNS = 50;
 var WORKFLOW_SUBAGENT_MAX_TIME_MINUTES = 10;
 var WORKFLOW_SUBAGENT_DISALLOWED_TOOLS = [
+  ToolNames.ASK_USER_QUESTION,
   ToolNames.SEND_MESSAGE,
   ToolNames.MONITOR,
   ...SUBAGENT_PLAN_LIFECYCLE_TOOLS,
@@ -1265,20 +1275,27 @@ function sanitizeForErrorMessage(value) {
   return stripAnsiAndControl(value);
 }
 __name(sanitizeForErrorMessage, "sanitizeForErrorMessage");
-function createProductionDispatch(config, signal, onTokens) {
+function createProductionDispatch(config, signal, onTokens, bridgeApprovalEvents) {
   return async (prompt, opts) => {
     const stallMs = resolveStallMs(
       typeof opts.stallMs === "number" ? opts.stallMs : void 0
     );
     return runStallResilient(
-      (attemptSignal, emitter) => runSingleDispatch(
-        config,
-        prompt,
-        opts,
-        attemptSignal,
-        emitter,
-        onTokens
-      ),
+      async (attemptSignal, emitter) => {
+        const cleanupApprovalBridge = bridgeApprovalEvents?.(emitter);
+        try {
+          return await runSingleDispatch(
+            config,
+            prompt,
+            opts,
+            attemptSignal,
+            emitter,
+            onTokens
+          );
+        } finally {
+          cleanupApprovalBridge?.();
+        }
+      },
       {
         stallMs,
         signal,
@@ -1289,11 +1306,11 @@ function createProductionDispatch(config, signal, onTokens) {
 }
 __name(createProductionDispatch, "createProductionDispatch");
 async function runSingleDispatch(config, prompt, opts, attemptSignal, emitter, onTokens) {
-  const { AgentHeadless, ContextState } = await import("./agent-headless-NO4Y2HOE.js");
+  const { AgentHeadless, ContextState } = await import("./agent-headless-AS7K2K57.js");
   const ctx = new ContextState();
   ctx.set("task_prompt", prompt);
   const workflowAgentId = `workflow-agent-${randomBytes(8).toString("hex")}`;
-  debugLogger.debug(`[workflow] Dispatch ${workflowAgentId}`);
+  debugLogger2.debug(`[workflow] Dispatch ${workflowAgentId}`);
   if (opts.agentType === void 0 && opts.model === void 0 && opts.isolation === void 0 && opts.schema === void 0) {
     const subagent = await AgentHeadless.create(
       opts.label ?? "workflow-agent",
@@ -1351,7 +1368,7 @@ function reportTokens(subagent, opts, onTokens) {
     const summary = subagent.getExecutionSummary();
     onTokens(summary.outputTokens, opts);
   } catch (e) {
-    debugLogger.warn("onTokens callback threw:", e);
+    debugLogger2.warn("onTokens callback threw:", e);
   }
 }
 __name(reportTokens, "reportTokens");
@@ -1470,7 +1487,7 @@ ${WORKFLOW_SUBAGENT_SYSTEM_PROMPT_WITH_SCHEMA}` : WORKFLOW_SUBAGENT_SYSTEM_PROMP
             worktreeIsolation = null;
             const preserved = await cleanupWorkflowWorktree(isolation);
             if (preserved) {
-              debugLogger.info(
+              debugLogger2.info(
                 `[Workflow] Schema-mode subagent preserved worktree at ${preserved.path ?? "(directory removed)"} on branch ${preserved.branch}. The structured payload is returned verbatim; recover the work from the preserved path / branch.`
               );
             }
@@ -1525,7 +1542,7 @@ ${WORKFLOW_SUBAGENT_SYSTEM_PROMPT_WITH_SCHEMA}` : WORKFLOW_SUBAGENT_SYSTEM_PROMP
       try {
         await cleanupWorkflowWorktree(worktreeIsolation);
       } catch (error) {
-        debugLogger.warn(
+        debugLogger2.warn(
           `Workflow worktree cleanup in fallback finally failed for ${worktreeIsolation.path}: ${error instanceof Error ? error.message : String(error)}`
         );
       }
@@ -1558,7 +1575,7 @@ async function provisionWorkflowWorktree(config) {
   try {
     parentDirty = await wtService.hasWorktreeChanges(projectRoot);
   } catch (error) {
-    debugLogger.warn(
+    debugLogger2.warn(
       `[Workflow] hasWorktreeChanges failed at ${projectRoot}: ${error}`
     );
     parentDirty = true;
@@ -1573,7 +1590,7 @@ async function provisionWorkflowWorktree(config) {
   try {
     parentBranch = await wtService.getCurrentBranch();
   } catch (error) {
-    debugLogger.warn(
+    debugLogger2.warn(
       `[Workflow] getCurrentBranch failed at ${projectRoot}: ${error}`
     );
   }
@@ -1591,7 +1608,7 @@ async function provisionWorkflowWorktree(config) {
       config.getSessionId()
     );
   } catch (error) {
-    debugLogger.warn(
+    debugLogger2.warn(
       `[Workflow] failed to write session marker at ${created.worktree.path}: ${error}`
     );
   }
@@ -1624,20 +1641,20 @@ async function cleanupWorkflowWorktree(isolation) {
   const wtService = new GitWorktreeService(isolation.repoRoot);
   const [hasChanges, hasUnmerged] = await Promise.all([
     wtService.hasWorktreeChanges(isolation.path).catch((error) => {
-      debugLogger.warn(
+      debugLogger2.warn(
         `[Workflow] hasWorktreeChanges failed for ${isolation.path}: ${error}`
       );
       return true;
     }),
     wtService.hasUnmergedWorktreeCommits(isolation.slug).catch((error) => {
-      debugLogger.warn(
+      debugLogger2.warn(
         `[Workflow] hasUnmergedWorktreeCommits failed for ${isolation.slug}: ${error}`
       );
       return true;
     })
   ]);
   if (hasChanges || hasUnmerged) {
-    debugLogger.info(
+    debugLogger2.info(
       `[Workflow] Preserving isolation worktree ${isolation.path} (branch ${isolation.branch}, hasChanges=${hasChanges}, hasUnmerged=${hasUnmerged})`
     );
     return { path: isolation.path, branch: isolation.branch };
@@ -1647,19 +1664,19 @@ async function cleanupWorkflowWorktree(isolation) {
       deleteBranch: true
     });
     if (!result.success) {
-      debugLogger.warn(
+      debugLogger2.warn(
         `[Workflow] Failed to remove ephemeral worktree ${isolation.path}: ${result.error}`
       );
       return { path: isolation.path, branch: isolation.branch };
     }
     if (result.branchPreserved) {
-      debugLogger.warn(
+      debugLogger2.warn(
         `[Workflow] Removed worktree directory ${isolation.path} but kept branch ${isolation.branch} (unmerged commits at delete time)`
       );
       return { branch: isolation.branch };
     }
   } catch (error) {
-    debugLogger.warn(
+    debugLogger2.warn(
       `[Workflow] Failed to remove ephemeral worktree ${isolation.path}: ${error}`
     );
     return { path: isolation.path, branch: isolation.branch };
@@ -1747,7 +1764,7 @@ var WorkflowOrchestrator = class {
           if (cached !== void 0) {
             const respawns = replay.started.get(journalKey);
             if (respawns && respawns.length > 0) {
-              debugLogger.info(
+              debugLogger2.info(
                 `[Workflow] resume cache hit after ${respawns.length} prior respawn(s) for runId=${runId}.`
               );
             }
@@ -1755,12 +1772,12 @@ var WorkflowOrchestrator = class {
             try {
               emitter?.agentDispatched?.(label2);
             } catch (e) {
-              debugLogger.warn("emitter.agentDispatched threw:", e);
+              debugLogger2.warn("emitter.agentDispatched threw:", e);
             }
             try {
               emitter?.agentCompleted?.(label2);
             } catch (e) {
-              debugLogger.warn("emitter.agentCompleted threw:", e);
+              debugLogger2.warn("emitter.agentCompleted threw:", e);
             }
             return Promise.resolve(cached.result);
           }
@@ -1768,11 +1785,11 @@ var WorkflowOrchestrator = class {
         hadMiss = true;
         journalEntryId = String(journalAgentId += 1);
         journal.append({ type: "started", key: journalKey, agentId: journalEntryId }).catch(
-          (e) => debugLogger.warn(`journal started-append failed: ${e}`)
+          (e) => debugLogger2.warn(`journal started-append failed: ${e}`)
         );
       }
       if (budget && budget.total !== null && budget.remaining() <= 0) {
-        debugLogger.warn(
+        debugLogger2.warn(
           `[Workflow] budget gate refused dispatch at entry: runId=${runId} spent=${budget.spent()} total=${budget.total}`
         );
         return Promise.reject(
@@ -1791,11 +1808,11 @@ var WorkflowOrchestrator = class {
       try {
         emitter?.agentDispatched?.(label);
       } catch (e) {
-        debugLogger.warn("emitter.agentDispatched threw:", e);
+        debugLogger2.warn("emitter.agentDispatched threw:", e);
       }
       return limiter.run(() => {
         if (budget && budget.total !== null && budget.remaining() <= 0) {
-          debugLogger.warn(
+          debugLogger2.warn(
             `[Workflow] budget gate refused dispatch at slot-acquire: runId=${runId} spent=${budget.spent()} total=${budget.total}`
           );
           throw new WorkflowBudgetExceededError(
@@ -1810,7 +1827,7 @@ var WorkflowOrchestrator = class {
           try {
             emitter?.agentCompleted?.(label);
           } catch (e) {
-            debugLogger.warn("emitter.agentCompleted threw:", e);
+            debugLogger2.warn("emitter.agentCompleted threw:", e);
           }
           if (journal && journalKey !== void 0) {
             journal.append({
@@ -1819,14 +1836,14 @@ var WorkflowOrchestrator = class {
               agentId: journalEntryId ?? "",
               result
             }).catch(
-              (e) => debugLogger.warn(`journal result-append failed: ${e}`)
+              (e) => debugLogger2.warn(`journal result-append failed: ${e}`)
             );
           }
           if (budget) {
             try {
               emitter?.budgetUpdated?.(budget.spent(), budget.total);
             } catch (e) {
-              debugLogger.warn("emitter.budgetUpdated threw:", e);
+              debugLogger2.warn("emitter.budgetUpdated threw:", e);
             }
           }
           return result;
@@ -1836,13 +1853,13 @@ var WorkflowOrchestrator = class {
           try {
             emitter?.agentCompleted?.(label, msg);
           } catch (e) {
-            debugLogger.warn("emitter.agentCompleted threw:", e);
+            debugLogger2.warn("emitter.agentCompleted threw:", e);
           }
           if (budget) {
             try {
               emitter?.budgetUpdated?.(budget.spent(), budget.total);
             } catch (e) {
-              debugLogger.warn("emitter.budgetUpdated threw:", e);
+              debugLogger2.warn("emitter.budgetUpdated threw:", e);
             }
           }
           throw err;
@@ -1908,14 +1925,14 @@ async function settleToNullArray(thunks, signal, kind = "parallel") {
     if (reason?.name === "WorkflowBudgetExceededError") {
       budgetDropped += 1;
     } else {
-      debugLogger.warn(
+      debugLogger2.warn(
         `Workflow thunk at index ${i} rejected: ${String(reason?.message ?? r.reason)}`
       );
     }
     return null;
   });
   if (budgetDropped > 0) {
-    debugLogger.warn(
+    debugLogger2.warn(
       `${kind}: ${budgetDropped} slot${budgetDropped === 1 ? "" : "s"} dropped \u2014 token budget exceeded.`
     );
   }
@@ -1988,8 +2005,164 @@ function extractErrorMessage(err) {
 }
 __name(extractErrorMessage, "extractErrorMessage");
 
+// packages/core/src/agents/runtime/workflow-runner.ts
+var WorkflowRunHandle = class {
+  constructor(runId, budget, registry, controller, start) {
+    this.runId = runId;
+    this.budget = budget;
+    this.registry = registry;
+    this.controller = controller;
+    this.completion = Promise.resolve().then(start);
+  }
+  static {
+    __name(this, "WorkflowRunHandle");
+  }
+  completion;
+  abort() {
+    this.controller.abort();
+  }
+};
+var WorkflowRunner = class {
+  static {
+    __name(this, "WorkflowRunner");
+  }
+  static async start(options) {
+    const config = options.config;
+    const budget = WorkflowBudgetImpl.fromEnv();
+    const loaded = options.scriptPath && options.script === void 0 ? await resolveSavedWorkflowScript(
+      { scriptPath: options.scriptPath },
+      config
+    ) : void 0;
+    const script = loaded?.script ?? options.script ?? "";
+    const scriptPath = loaded?.scriptPath ?? options.scriptPath;
+    const runId = options.resumeFromRunId ?? `wf_${randomBytes2(8).toString("hex")}`;
+    const storage = config.storage;
+    const journal = storage ? new WorkflowJournal(storage.getWorkflowRunJournalPath(runId)) : void 0;
+    const resumeReplay = options.resumeFromRunId ? await journal?.load() : void 0;
+    const controller = createChildAbortController(options.signal);
+    const registry = config.getWorkflowRunRegistry?.();
+    const dispatch = options.dispatch ?? createProductionDispatch(
+      config,
+      controller.signal,
+      (outputTokens) => budget.recordSpent(outputTokens),
+      registry ? (emitter2) => registry.bridgeApprovalEvents(runId, emitter2) : void 0
+    );
+    const orchestrator = new WorkflowOrchestrator(dispatch);
+    const entry = registry?.register({
+      runId,
+      meta: null,
+      status: "running",
+      startTime: Date.now(),
+      outputFile: "",
+      abortController: controller,
+      tokenBudgetTotal: budget.total,
+      script,
+      scriptPath
+    });
+    const emitUpdate = /* @__PURE__ */ __name(() => {
+      if (!entry || !options.onUpdate) return;
+      try {
+        options.onUpdate(entry);
+      } catch {
+      }
+    }, "emitUpdate");
+    const emitter = {
+      phaseStarted: /* @__PURE__ */ __name((title) => {
+        registry?.onPhaseStarted(runId, title);
+        emitUpdate();
+      }, "phaseStarted"),
+      agentDispatched: /* @__PURE__ */ __name(() => {
+        registry?.onAgentDispatched(runId);
+        emitUpdate();
+      }, "agentDispatched"),
+      agentCompleted: /* @__PURE__ */ __name(() => {
+        registry?.onAgentCompleted(runId);
+      }, "agentCompleted"),
+      // Deliberate no-op: logs are snapshotted at terminal via
+      // setRecentLogs; per-line emit would cause up to 10k TUI redraws.
+      logAppended: /* @__PURE__ */ __name(() => {
+      }, "logAppended"),
+      budgetUpdated: /* @__PURE__ */ __name((spent, total) => {
+        registry?.onBudgetUpdated(runId, spent, total);
+        emitUpdate();
+      }, "budgetUpdated")
+    };
+    const handle = new WorkflowRunHandle(
+      runId,
+      budget,
+      registry,
+      controller,
+      async () => {
+        try {
+          const outcome = await orchestrator.run({
+            script,
+            args: options.args,
+            abortOnTimeout: controller,
+            runId,
+            emitter,
+            budget,
+            resolveSavedWorkflow: /* @__PURE__ */ __name((ref) => resolveSavedWorkflowScript(ref, config), "resolveSavedWorkflow"),
+            journal,
+            resumeReplay
+          });
+          if (entry) {
+            entry.meta = outcome.meta;
+            if (outcome.meta?.name && entry.description === runId) {
+              entry.description = outcome.meta.name;
+            }
+          }
+          registry?.setRecentLogs(runId, outcome.logs);
+          registry?.complete(runId, outcome.result, Date.now());
+          return { ok: true, outcome };
+        } catch (error) {
+          const details = error instanceof WorkflowExecutionError ? error : void 0;
+          const message = extractErrorMessage2(error);
+          if (entry && details?.meta && !entry.meta) entry.meta = details.meta;
+          if (details?.logs) registry?.setRecentLogs(runId, details.logs);
+          if (options.signal.aborted) {
+            registry?.cancel(runId, Date.now());
+          } else {
+            registry?.fail(runId, message, Date.now());
+          }
+          return { ok: false, message, details };
+        } finally {
+          controller.abort();
+          if (entry && entry.status !== "running") {
+            await writeWorkflowSnapshot(config, entry);
+            try {
+              logWorkflowRun(
+                config,
+                new WorkflowRunEvent({
+                  status: entry.status,
+                  agents_dispatched: entry.agentsDispatched,
+                  agents_completed: entry.agentsCompleted,
+                  phase_count: entry.phases.length,
+                  tokens_spent: entry.tokensSpent,
+                  duration_ms: (entry.endTime ?? entry.startTime) - entry.startTime
+                })
+              );
+            } catch {
+            }
+          }
+          registry?.releaseHandle(runId, handle);
+        }
+      }
+    );
+    registry?.attachHandle(handle);
+    return handle;
+  }
+};
+function extractErrorMessage2(error) {
+  if (error && typeof error === "object" && "message" in error) {
+    const message = error.message;
+    if (typeof message === "string") return message;
+    return String(message);
+  }
+  return String(error);
+}
+__name(extractErrorMessage2, "extractErrorMessage");
+
 // packages/core/src/tools/workflow/workflow.ts
-import { randomBytes as randomBytes2 } from "node:crypto";
 import * as path from "node:path";
 var WORKFLOW_PARAM_SCHEMA = {
   type: "object",
@@ -2037,104 +2210,23 @@ var WorkflowToolInvocation = class extends BaseToolInvocation {
     return Promise.resolve("ask");
   }
   async execute(signal, updateOutput, _shellExecutionConfig) {
-    const dispatchController = createChildAbortController(signal);
-    const budget = WorkflowBudgetImpl.fromEnv();
-    const dispatch = this.toolOptions.dispatch ?? createProductionDispatch(
-      this.config,
-      dispatchController.signal,
-      // P5 T3: production-dispatch onTokens callback. Test-injected
-      // dispatches (`toolOptions.dispatch`) handle their own
-      // recording — they don't surface stats the same way.
-      (outputTokens) => budget.recordSpent(outputTokens)
-    );
-    const orchestrator = new WorkflowOrchestrator(dispatch);
-    let resolvedScript = this.params.script ?? "";
-    let resolvedScriptPath = this.params.scriptPath;
-    if (this.params.scriptPath && this.params.script === void 0) {
-      const loaded = await resolveSavedWorkflowScript(
-        { scriptPath: this.params.scriptPath },
-        this.config
-      );
-      resolvedScript = loaded.script;
-      resolvedScriptPath = loaded.scriptPath;
-    }
-    const runId = this.params.resumeFromRunId ?? `wf_${randomBytes2(8).toString("hex")}`;
-    let journal;
-    let resumeReplay;
-    const storage = this.config.storage;
-    if (storage) {
-      journal = new WorkflowJournal(storage.getWorkflowRunJournalPath(runId));
-      if (this.params.resumeFromRunId) {
-        resumeReplay = await journal.load();
-      }
-    }
-    const registry = this.config.getWorkflowRunRegistry?.();
-    const registryEntry = registry?.register({
-      runId,
-      meta: null,
-      // populated after meta parses; safe default until then
-      status: "running",
-      startTime: Date.now(),
-      outputFile: "",
-      // P4b reserves the field but doesn't materialize
-      abortController: dispatchController,
-      // P5: seed the cap so the dialog can render the `M / N` form
-      // immediately, before the first `budgetUpdated` fires. Stays
-      // `null` when no env override.
-      tokenBudgetTotal: budget.total,
-      // P7b: carry the script source so a completed run can be snapshotted
-      // to disk and saved to `.qwen/workflows/<name>.js` from the dialog.
-      // `scriptPath` is set when the run was launched from a saved file (run
-      // provenance for the snapshot).
-      script: resolvedScript,
-      scriptPath: resolvedScriptPath
+    const handle = await WorkflowRunner.start({
+      config: this.config,
+      signal,
+      script: this.params.script,
+      scriptPath: this.params.scriptPath,
+      args: this.params.args,
+      resumeFromRunId: this.params.resumeFromRunId,
+      dispatch: this.toolOptions.dispatch,
+      onUpdate: updateOutput ? (entry) => safeEmitUpdate(updateOutput, entry) : void 0
     });
-    const emitter = {
-      phaseStarted: /* @__PURE__ */ __name((title) => {
-        registry?.onPhaseStarted(runId, title);
-        safeEmitUpdate(updateOutput, registryEntry);
-      }, "phaseStarted"),
-      agentDispatched: /* @__PURE__ */ __name(() => {
-        registry?.onAgentDispatched(runId);
-        safeEmitUpdate(updateOutput, registryEntry);
-      }, "agentDispatched"),
-      agentCompleted: /* @__PURE__ */ __name(() => {
-        registry?.onAgentCompleted(runId);
-      }, "agentCompleted"),
-      logAppended: /* @__PURE__ */ __name(() => {
-      }, "logAppended"),
-      budgetUpdated: /* @__PURE__ */ __name((spent, total) => {
-        registry?.onBudgetUpdated(runId, spent, total);
-        safeEmitUpdate(updateOutput, registryEntry);
-      }, "budgetUpdated")
-    };
-    try {
-      const outcome = await orchestrator.run({
-        script: resolvedScript,
-        args: this.params.args,
-        abortOnTimeout: dispatchController,
-        runId,
-        emitter,
-        budget,
-        // P-nested: resolve `workflow('<name>')` / `workflow({scriptPath})`
-        // against the saved-workflow scripts in `.qwen/workflows/`.
-        resolveSavedWorkflow: /* @__PURE__ */ __name((ref) => resolveSavedWorkflowScript(ref, this.config), "resolveSavedWorkflow"),
-        // P6: resume journal (always wired) + replay maps (resume only).
-        journal,
-        resumeReplay
-      });
-      if (registryEntry) {
-        registryEntry.meta = outcome.meta;
-        if (outcome.meta?.name && registryEntry.description === runId) {
-          registryEntry.description = outcome.meta.name;
-        }
-      }
-      registry?.setRecentLogs(runId, outcome.logs);
-      registry?.complete(runId, outcome.result, Date.now());
+    const settlement = await handle.completion;
+    if (settlement.ok) {
+      const { outcome } = settlement;
       const usageBanner = resolveUsageBanner(
         this.config,
-        registry,
-        budget.total
+        handle.registry,
+        handle.budget.total
       );
       const llmText = safeStringifyResult(outcome.result);
       const displayJson = safeStringifyDisplayPayload({
@@ -2149,10 +2241,10 @@ var WorkflowToolInvocation = class extends BaseToolInvocation {
         // tokens whenever ANY usage is reported OR a cap is set, not
         // only when spend > 0. A capped-but-zero-spend run still wants
         // the cap visible so the user sees the gate engaged.
-        ...budget.spent() > 0 || budget.total !== null ? {
+        ...handle.budget.spent() > 0 || handle.budget.total !== null ? {
           tokens: {
-            spent: budget.spent(),
-            total: budget.total
+            spent: handle.budget.spent(),
+            total: handle.budget.total
           }
         } : {}
       });
@@ -2160,20 +2252,9 @@ var WorkflowToolInvocation = class extends BaseToolInvocation {
         llmContent: [{ text: llmText }],
         returnDisplay: usageBanner + "```json\n" + displayJson + "\n```"
       };
-    } catch (err) {
-      const message = extractErrorMessage2(err);
-      const phases = err instanceof WorkflowExecutionError ? err.phases : void 0;
-      const logs = err instanceof WorkflowExecutionError ? err.logs : void 0;
-      const meta = err instanceof WorkflowExecutionError ? err.meta : void 0;
-      if (registryEntry) {
-        if (meta && !registryEntry.meta) registryEntry.meta = meta;
-      }
-      if (logs) registry?.setRecentLogs(runId, logs);
-      if (signal.aborted) {
-        registry?.cancel(runId, Date.now());
-      } else {
-        registry?.fail(runId, message, Date.now());
-      }
+    } else {
+      const { message, details } = settlement;
+      const { phases, logs, meta } = details ?? {};
       const display = phases || logs || meta ? `Workflow failed: ${message}
 
 ${safeStringifyDisplayPayload({
@@ -2189,25 +2270,6 @@ ${safeStringifyDisplayPayload({
         // the same way as other execution-time tool errors.
         error: { message, type: "execution_failed" /* EXECUTION_FAILED */ }
       };
-    } finally {
-      dispatchController.abort();
-      if (registryEntry && registryEntry.status !== "running") {
-        await writeWorkflowSnapshot(this.config, registryEntry);
-        try {
-          logWorkflowRun(
-            this.config,
-            new WorkflowRunEvent({
-              status: registryEntry.status,
-              agents_dispatched: registryEntry.agentsDispatched,
-              agents_completed: registryEntry.agentsCompleted,
-              phase_count: registryEntry.phases.length,
-              tokens_spent: registryEntry.tokensSpent,
-              duration_ms: (registryEntry.endTime ?? registryEntry.startTime) - registryEntry.startTime
-            })
-          );
-        } catch {
-        }
-      }
     }
   }
 };
@@ -2293,15 +2355,6 @@ function safeStringifyDisplayPayload(payload) {
   }
 }
 __name(safeStringifyDisplayPayload, "safeStringifyDisplayPayload");
-function extractErrorMessage2(err) {
-  if (err && typeof err === "object" && "message" in err) {
-    const m = err.message;
-    if (typeof m === "string") return m;
-    return String(m);
-  }
-  return String(err);
-}
-__name(extractErrorMessage2, "extractErrorMessage");
 var WorkflowTool = class extends BaseDeclarativeTool {
   constructor(config, toolOptions = {}) {
     super(
@@ -2344,11 +2397,11 @@ export {
 };
 /**
  * @license
- * Copyright 2025 Qwen
+ * Copyright 2026 Qwen Team
  * SPDX-License-Identifier: Apache-2.0
  */
 /**
  * @license
- * Copyright 2026 Qwen Team
+ * Copyright 2025 Qwen
  * SPDX-License-Identifier: Apache-2.0
  */