@qwen-code/qwen-code 0.23.5-dev.codemode-responses.20260915.af4da34719 → 0.23.5-preview.0

package/chunks/chunk-MZ3W3F44.js

@@ -1,4172 +0,0 @@
-// Force strict mode and setup for ESM
-"use strict";
-import {
-  AgentEventEmitter,
-  attachJsonlTranscriptWriter,
-  buildAgentTranscriptAttach,
-  deriveApprovalModeConfig,
-  deriveConfig,
-  deriveWorktreeConfig,
-  installSessionWorkflowRevisionWriteThrough,
-  isActiveWorkflowStatus,
-  isTerminalWorkflowStatus,
-  isWorkflowRunPersistenceActive,
-  parseSkillContent,
-  rebuildToolRegistryOnOverride,
-  resolveExternalWorktreeDir,
-  toModelVisibleSubagentResult
-} from "./chunk-AYMSNIYL.js";
-import {
-  parsePositiveIntegerEnv
-} from "./chunk-6PVPNMXU.js";
-import {
-  GitWorktreeService,
-  generateAgentWorktreeSlug,
-  writeWorktreeSessionMarker
-} from "./chunk-WKVZES7O.js";
-import {
-  resolveBundleDir
-} from "./chunk-ACHCT36C.js";
-import {
-  SUBAGENT_PLAN_LIFECYCLE_TOOLS
-} from "./chunk-AEWCOE64.js";
-import {
-  runWithAgentContext
-} from "./chunk-BW2SMO6L.js";
-import {
-  read,
-  writeLine
-} from "./chunk-UB2MATP5.js";
-import {
-  REASONING_EFFORT_TIERS,
-  normalizeReasoningEffort
-} from "./chunk-ARDHE6MM.js";
-import {
-  atomicWriteFile
-} from "./chunk-XFFRI3WM.js";
-import {
-  stripAnsiAndControl
-} from "./chunk-4Y2I3CI3.js";
-import {
-  SyntheticOutputTool
-} from "./chunk-SYROIHU7.js";
-import {
-  ToolNames,
-  resolveBuiltinToolName
-} from "./chunk-RSWBT7AZ.js";
-import {
-  Storage,
-  createDebugLogger
-} from "./chunk-ZAFYHRVY.js";
-import {
-  init_esbuild_shims
-} from "./chunk-5O2XNYP6.js";
-import {
-  __name
-} from "./chunk-J2S4EL5Y.js";
-
-// packages/core/src/agents/runtime/workflow-sandbox.ts
-init_esbuild_shims();
-import * as vm from "node:vm";
-
-// packages/core/src/agents/runtime/workflow-meta-literal.ts
-init_esbuild_shims();
-var WorkflowMetaSyntaxError = class extends Error {
-  static {
-    __name(this, "WorkflowMetaSyntaxError");
-  }
-  index;
-  constructor(message, index) {
-    super(message);
-    this.name = "WorkflowMetaSyntaxError";
-    this.index = index;
-  }
-};
-function parseWorkflowMetaLiteral(source) {
-  const parser = new MetaLiteralParser(source);
-  parser.skipTrivia();
-  const value = parser.parseValue(0);
-  parser.skipTrivia();
-  if (parser.index < source.length) {
-    throw parser.fail("unexpected trailing content");
-  }
-  return value;
-}
-__name(parseWorkflowMetaLiteral, "parseWorkflowMetaLiteral");
-var MAX_DEPTH = 32;
-var WHITESPACE = /* @__PURE__ */ new Set([" ", "	", "\n", "\r", "\f", "\v", "\xA0", "\uFEFF"]);
-var ID_START = /[A-Za-z_$]/;
-var ID_PART = /[A-Za-z0-9_$]/;
-var MetaLiteralParser = class {
-  constructor(src) {
-    this.src = src;
-  }
-  static {
-    __name(this, "MetaLiteralParser");
-  }
-  index = 0;
-  fail(message) {
-    const from = Math.max(0, this.index - 24);
-    const snippet = this.src.slice(from, this.index + 24).replace(/\s+/g, " ").trim();
-    return new WorkflowMetaSyntaxError(
-      `${message} at position ${this.index} (near "${snippet}"). meta must be a plain object literal \u2014 strings, numbers, booleans, null, arrays and objects only, with no variables, function calls, spreads, accessors or template substitutions.`,
-      this.index
-    );
-  }
-  skipTrivia() {
-    for (; ; ) {
-      while (this.index < this.src.length && WHITESPACE.has(this.src[this.index])) {
-        this.index++;
-      }
-      if (this.src.startsWith("//", this.index)) {
-        let end = this.index + 2;
-        while (end < this.src.length && !"\n\r\u2028\u2029".includes(this.src[end])) {
-          end++;
-        }
-        if (this.src[end] === "\r" && this.src[end + 1] === "\n") end++;
-        this.index = end < this.src.length ? end + 1 : this.src.length;
-        continue;
-      }
-      if (this.src.startsWith("/*", this.index)) {
-        const end = this.src.indexOf("*/", this.index + 2);
-        if (end === -1) throw this.fail("unterminated comment");
-        this.index = end + 2;
-        continue;
-      }
-      return;
-    }
-  }
-  parseValue(depth) {
-    if (depth > MAX_DEPTH) throw this.fail("meta literal is nested too deeply");
-    this.skipTrivia();
-    const c = this.src[this.index];
-    if (c === void 0) throw this.fail("unexpected end of meta literal");
-    if (c === "{") return this.parseObject(depth);
-    if (c === "[") return this.parseArray(depth);
-    if (c === '"' || c === "'" || c === "`") return this.parseString();
-    if (c === "-" || c >= "0" && c <= "9") return this.parseNumber();
-    if (this.src.startsWith("true", this.index)) return this.word("true", true);
-    if (this.src.startsWith("false", this.index)) {
-      return this.word("false", false);
-    }
-    if (this.src.startsWith("null", this.index)) return this.word("null", null);
-    if (c === "/")
-      throw this.fail("regular expressions are not allowed in meta");
-    throw this.fail("unsupported value");
-  }
-  word(literal, value) {
-    const after = this.src[this.index + literal.length];
-    if (after !== void 0 && ID_PART.test(after)) {
-      throw this.fail("unsupported value");
-    }
-    this.index += literal.length;
-    return value;
-  }
-  parseObject(depth) {
-    this.index++;
-    const out = /* @__PURE__ */ Object.create(null);
-    for (; ; ) {
-      this.skipTrivia();
-      const c = this.src[this.index];
-      if (c === "}") {
-        this.index++;
-        return out;
-      }
-      if (c === void 0) throw this.fail("unterminated object");
-      if (this.src.startsWith("...", this.index)) {
-        throw this.fail("spread is not allowed in meta");
-      }
-      if (c === "[") throw this.fail("computed keys are not allowed in meta");
-      const key = this.parseKey();
-      this.skipTrivia();
-      if (this.src[this.index] === "(") {
-        throw this.fail("methods are not allowed in meta");
-      }
-      if (this.src[this.index] !== ":")
-        throw this.fail('expected ":" after key');
-      this.index++;
-      out[key] = this.parseValue(depth + 1);
-      this.skipTrivia();
-      if (this.src[this.index] === ",") {
-        this.index++;
-        continue;
-      }
-      if (this.src[this.index] === "}") {
-        this.index++;
-        return out;
-      }
-      throw this.fail('expected "," or "}"');
-    }
-  }
-  parseKey() {
-    const c = this.src[this.index];
-    if (c === '"' || c === "'" || c === "`") return this.parseString();
-    if (c !== void 0 && ID_START.test(c)) {
-      const start = this.index;
-      while (this.index < this.src.length && ID_PART.test(this.src[this.index])) {
-        this.index++;
-      }
-      const word = this.src.slice(start, this.index);
-      if (word === "get" || word === "set" || word === "async") {
-        const save = this.index;
-        this.skipTrivia();
-        const next = this.src[this.index];
-        const startsPropertyName = next !== void 0 && (ID_START.test(next) || next === '"' || next === "'" || next === "[");
-        this.index = save;
-        if (startsPropertyName) {
-          throw this.fail(
-            word === "async" ? "async members are not allowed in meta" : `${word}ters are not allowed in meta`
-          );
-        }
-      }
-      return word;
-    }
-    throw this.fail("expected a property name");
-  }
-  parseArray(depth) {
-    this.index++;
-    const out = [];
-    for (; ; ) {
-      this.skipTrivia();
-      const c = this.src[this.index];
-      if (c === "]") {
-        this.index++;
-        return out;
-      }
-      if (c === void 0) throw this.fail("unterminated array");
-      if (this.src.startsWith("...", this.index)) {
-        throw this.fail("spread is not allowed in meta");
-      }
-      if (c === ",") throw this.fail("missing array element");
-      out.push(this.parseValue(depth + 1));
-      this.skipTrivia();
-      if (this.src[this.index] === ",") {
-        this.index++;
-        continue;
-      }
-      if (this.src[this.index] === "]") {
-        this.index++;
-        return out;
-      }
-      throw this.fail('expected "," or "]"');
-    }
-  }
-  parseString() {
-    const quote = this.src[this.index++];
-    let out = "";
-    for (; ; ) {
-      const c = this.src[this.index];
-      if (c === void 0) throw this.fail("unterminated string");
-      if (c === quote) {
-        this.index++;
-        return out;
-      }
-      if (c === "\n" || c === "\r") {
-        if (quote !== "`") throw this.fail("unterminated string");
-        if (c === "\r") {
-          this.index++;
-          if (this.src[this.index] === "\n") this.index++;
-          out += "\n";
-          continue;
-        }
-      }
-      if (quote === "`" && c === "$" && this.src[this.index + 1] === "{") {
-        throw this.fail("template substitutions are not allowed in meta");
-      }
-      if (c === "\\") {
-        out += this.parseEscape();
-        continue;
-      }
-      out += c;
-      this.index++;
-    }
-  }
-  parseEscape() {
-    this.index++;
-    const c = this.src[this.index++];
-    switch (c) {
-      case "n":
-        return "\n";
-      case "t":
-        return "	";
-      case "r":
-        return "\r";
-      case "b":
-        return "\b";
-      case "f":
-        return "\f";
-      case "v":
-        return "\v";
-      case "0":
-        if (/[0-9]/.test(this.src[this.index] ?? "")) {
-          throw this.fail("octal escapes are not allowed in meta");
-        }
-        return "\0";
-      case "x": {
-        const hex = this.src.slice(this.index, this.index + 2);
-        if (!/^[0-9a-fA-F]{2}$/.test(hex)) {
-          throw this.fail("invalid \\x escape");
-        }
-        this.index += 2;
-        return String.fromCharCode(parseInt(hex, 16));
-      }
-      case "u": {
-        if (this.src[this.index] === "{") {
-          const end = this.src.indexOf("}", this.index);
-          const hex2 = end === -1 ? "" : this.src.slice(this.index + 1, end);
-          if (!/^[0-9a-fA-F]{1,6}$/.test(hex2)) {
-            throw this.fail("invalid \\u{...} escape");
-          }
-          const code = parseInt(hex2, 16);
-          if (code > 1114111) throw this.fail("invalid \\u{...} escape");
-          this.index = end + 1;
-          return String.fromCodePoint(code);
-        }
-        const hex = this.src.slice(this.index, this.index + 4);
-        if (!/^[0-9a-fA-F]{4}$/.test(hex)) {
-          throw this.fail("invalid \\u escape");
-        }
-        this.index += 4;
-        return String.fromCharCode(parseInt(hex, 16));
-      }
-      case "\n":
-        return "";
-      // line continuation
-      case "\r":
-        if (this.src[this.index] === "\n") this.index++;
-        return "";
-      case "\u2028":
-      case "\u2029":
-        return "";
-      case void 0:
-        throw this.fail("unterminated escape sequence");
-      default:
-        return c;
-    }
-  }
-  parseNumber() {
-    const start = this.index;
-    if (this.src[this.index] === "-") this.index++;
-    while (this.index < this.src.length && /[0-9]/.test(this.src[this.index])) {
-      this.index++;
-    }
-    if (this.src[this.index] === ".") {
-      this.index++;
-      while (this.index < this.src.length && /[0-9]/.test(this.src[this.index])) {
-        this.index++;
-      }
-    }
-    if (this.src[this.index] === "e" || this.src[this.index] === "E") {
-      this.index++;
-      if (this.src[this.index] === "+" || this.src[this.index] === "-") {
-        this.index++;
-      }
-      while (this.index < this.src.length && /[0-9]/.test(this.src[this.index])) {
-        this.index++;
-      }
-    }
-    const after = this.src[this.index];
-    if (after !== void 0 && ID_PART.test(after)) {
-      throw this.fail("unsupported numeric literal");
-    }
-    const text = this.src.slice(start, this.index);
-    const value = Number(text);
-    if (text.length === 0 || !Number.isFinite(value)) {
-      throw this.fail("unsupported numeric literal");
-    }
-    return value;
-  }
-};
-
-// packages/core/src/agents/runtime/workflow-sandbox.ts
-function findMetaBlockBounds(source) {
-  const re = /^\s*export\s+const\s+meta\s*=\s*\{/;
-  const match = re.exec(source);
-  if (!match) return null;
-  const exportIdx = match.index;
-  const startBrace = source.indexOf("{", exportIdx);
-  let depth = 1;
-  let i = startBrace + 1;
-  while (i < source.length && depth > 0) {
-    const ch = source[i];
-    const next = source[i + 1];
-    if (ch === "/" && next === "/") {
-      i += 2;
-      while (i < source.length && source[i] !== "\n") i++;
-      continue;
-    }
-    if (ch === "/" && next === "*") {
-      i += 2;
-      while (i < source.length && !(source[i] === "*" && source[i + 1] === "/"))
-        i++;
-      i += 2;
-      continue;
-    }
-    if (ch === "/" && isRegexContext(source, i)) {
-      i++;
-      let inClass = false;
-      while (i < source.length && (inClass || source[i] !== "/") && source[i] !== "\n") {
-        if (source[i] === "\\") i += 2;
-        else if (source[i] === "[") {
-          inClass = true;
-          i++;
-        } else if (source[i] === "]") {
-          inClass = false;
-          i++;
-        } else {
-          i++;
-        }
-      }
-      i++;
-      while (i < source.length && /[gimsuy]/.test(source[i])) i++;
-      continue;
-    }
-    if (ch === '"' || ch === "'" || ch === "`") {
-      const q = ch;
-      i++;
-      while (i < source.length && source[i] !== q) {
-        if (source[i] === "\\") i++;
-        i++;
-      }
-      i++;
-      continue;
-    }
-    if (ch === "{") depth++;
-    else if (ch === "}") depth--;
-    i++;
-  }
-  if (depth !== 0) {
-    throw new Error(
-      "unbalanced braces in export const meta declaration \u2014 the workflow script cannot be safely stripped. Check the meta block syntax."
-    );
-  }
-  const endBraceIncl = i - 1;
-  while (i < source.length && /[\s;]/.test(source[i])) i++;
-  return { exportIdx, startBrace, endBraceIncl, afterMeta: i };
-}
-__name(findMetaBlockBounds, "findMetaBlockBounds");
-function extractAndStripMeta(source) {
-  const bounds = findMetaBlockBounds(source);
-  if (!bounds) return { stripped: source, meta: null };
-  const metaSource = source.slice(bounds.startBrace, bounds.endBraceIncl + 1);
-  const stripped = source.slice(0, bounds.exportIdx) + source.slice(bounds.afterMeta);
-  let raw;
-  try {
-    raw = parseWorkflowMetaLiteral(metaSource);
-  } catch (e) {
-    const msg = e instanceof Error ? e.message : String(e);
-    throw new Error(`invalid meta object literal: ${msg}`);
-  }
-  const meta = validateMeta(raw);
-  return { stripped, meta };
-}
-__name(extractAndStripMeta, "extractAndStripMeta");
-var WORKFLOW_SCRIPT_FILENAME = "workflow.js";
-function wrapWorkflowBody(strippedSource) {
-  return `(async () => {'use strict';
-${strippedSource}
-})()`;
-}
-__name(wrapWorkflowBody, "wrapWorkflowBody");
-function compileWorkflowScript(scriptSource) {
-  const { stripped, meta } = extractAndStripMeta(scriptSource);
-  const bounds = findMetaBlockBounds(scriptSource);
-  const compilable = bounds ? scriptSource.slice(0, bounds.exportIdx) + scriptSource.slice(bounds.exportIdx, bounds.afterMeta).replace(/[^\r\n\u2028\u2029]/g, " ") + scriptSource.slice(bounds.afterMeta) : stripped;
-  const script = new vm.Script(wrapWorkflowBody(compilable), {
-    filename: WORKFLOW_SCRIPT_FILENAME
-  });
-  return { script, meta };
-}
-__name(compileWorkflowScript, "compileWorkflowScript");
-function workflowCancelledError() {
-  const error = new Error("Workflow run was aborted (cancelled).");
-  error.name = "AbortError";
-  return error;
-}
-__name(workflowCancelledError, "workflowCancelledError");
-var COMPILE_ERROR_LINE_WIDTH = 80;
-function describeWorkflowCompileError(error, authorLineCount) {
-  const err = error instanceof Error ? error : new Error(String(error));
-  const stack = typeof err.stack === "string" ? err.stack : "";
-  const frame = [];
-  for (const line of stack.split("\n")) {
-    if (frame.length >= 3 && /^\s+at\s/.test(line)) break;
-    frame.push(line);
-  }
-  const header = frame[0] ?? "";
-  const match = /^.*?:(\d+)$/.exec(header);
-  if (frame.length < 3 || !match) {
-    return err.message;
-  }
-  const bodyLine = Number(match[1]) - 1;
-  if (bodyLine < 1) return err.message;
-  if (bodyLine > authorLineCount) {
-    return "The script ends with unmatched or incomplete syntax. Check parentheses, brackets, braces, quotes, and template literals near the end.";
-  }
-  const rendered = clampSourceFrame(frame[1] ?? "", frame[2] ?? "");
-  const tail = frame.slice(3).filter((l) => l.trim().length > 0).join("\n");
-  return [`line ${bodyLine}`, rendered, tail].filter(Boolean).join("\n");
-}
-__name(describeWorkflowCompileError, "describeWorkflowCompileError");
-function clampSourceFrame(sourceLine, caretLine) {
-  if (sourceLine.length <= COMPILE_ERROR_LINE_WIDTH) {
-    return `${sourceLine}
-${caretLine}`;
-  }
-  const caret = /\^+/.exec(caretLine);
-  if (!caret) return "";
-  const caretCol = caret.index;
-  const start = Math.max(
-    0,
-    Math.min(
-      caretCol - Math.floor(COMPILE_ERROR_LINE_WIDTH / 2),
-      sourceLine.length - COMPILE_ERROR_LINE_WIDTH
-    )
-  );
-  const prefix = start > 0 ? "\u2026" : "";
-  const window = sourceLine.slice(start, start + COMPILE_ERROR_LINE_WIDTH);
-  const suffix = start + COMPILE_ERROR_LINE_WIDTH < sourceLine.length ? "\u2026" : "";
-  const visibleCaretStart = Math.max(caretCol, start);
-  const visibleCaretEnd = Math.min(
-    caretCol + caret[0].length,
-    start + COMPILE_ERROR_LINE_WIDTH
-  );
-  const shiftedCaret = " ".repeat(prefix.length + visibleCaretStart - start) + "^".repeat(visibleCaretEnd - visibleCaretStart);
-  return `${prefix}${window}${suffix}
-${shiftedCaret}`;
-}
-__name(clampSourceFrame, "clampSourceFrame");
-function validateMeta(value) {
-  if (value === null || typeof value !== "object") {
-    throw new Error("meta must be an object");
-  }
-  const obj = value;
-  if (typeof obj["name"] !== "string" || obj["name"].length === 0) {
-    throw new Error("meta.name must be a non-empty string");
-  }
-  if (typeof obj["description"] !== "string" || obj["description"].length === 0) {
-    throw new Error("meta.description must be a non-empty string");
-  }
-  if (obj["whenToUse"] !== void 0 && typeof obj["whenToUse"] !== "string") {
-    throw new Error("meta.whenToUse must be a string");
-  }
-  let phases;
-  if (obj["phases"] !== void 0) {
-    if (!Array.isArray(obj["phases"])) {
-      throw new Error("meta.phases must be an array");
-    }
-    phases = [];
-    for (const p of obj["phases"]) {
-      if (p === null || typeof p !== "object") {
-        throw new Error("meta.phases entries must be objects");
-      }
-      const ph = p;
-      if (typeof ph["title"] !== "string" || ph["title"].length === 0) {
-        throw new Error("meta.phases[].title must be a non-empty string");
-      }
-      const phase = {
-        title: ph["title"]
-      };
-      if (ph["detail"] !== void 0) {
-        if (typeof ph["detail"] !== "string") {
-          throw new Error("meta.phases[].detail must be a string");
-        }
-        phase.detail = ph["detail"];
-      }
-      if (ph["model"] !== void 0) {
-        if (typeof ph["model"] !== "string") {
-          throw new Error("meta.phases[].model must be a string");
-        }
-        phase.model = ph["model"];
-      }
-      phases.push(phase);
-    }
-  }
-  const out = {
-    name: obj["name"],
-    description: obj["description"]
-  };
-  if (obj["whenToUse"] !== void 0) {
-    out.whenToUse = obj["whenToUse"];
-  }
-  if (phases !== void 0) {
-    out.phases = phases;
-  }
-  return out;
-}
-__name(validateMeta, "validateMeta");
-function isRegexContext(source, i) {
-  let j = i - 1;
-  while (j >= 0 && /\s/.test(source[j])) j--;
-  if (j < 0) return true;
-  const prev = source[j];
-  return /[{[(,;:=!&|?+\-*/%^~<>]/.test(prev);
-}
-__name(isRegexContext, "isRegexContext");
-var debugLogger = createDebugLogger("WORKFLOW");
-var MAX_LOG_LINES = 1e4;
-var MAX_PHASE_ENTRIES = 1e4;
-var ARGS_MAX_DEPTH = 64;
-var DEFAULT_MAX_WALL_CLOCK_MS = 30 * 60 * 1e3;
-var WORKFLOW_SYNC_EVALUATION_TIMEOUT_MS = 3e4;
-function resolveMaxWallClockMs(opts) {
-  if (typeof opts.maxWallClockMs === "number" && opts.maxWallClockMs > 0) {
-    return opts.maxWallClockMs;
-  }
-  const envSec = Number(process.env["QWEN_CODE_MAX_WORKFLOW_SECONDS"]);
-  if (Number.isFinite(envSec) && envSec > 0) return envSec * 1e3;
-  return DEFAULT_MAX_WALL_CLOCK_MS;
-}
-__name(resolveMaxWallClockMs, "resolveMaxWallClockMs");
-var WallClockWatchdog = class {
-  constructor(budgetMs, onFire) {
-    this.onFire = onFire;
-    this.remainingMs = budgetMs;
-    this.arm();
-  }
-  static {
-    __name(this, "WallClockWatchdog");
-  }
-  timer;
-  remainingMs;
-  armedAt = 0;
-  paused = false;
-  stopped = false;
-  pause() {
-    if (this.stopped || this.paused || this.timer === void 0) return;
-    this.paused = true;
-    clearTimeout(this.timer);
-    this.timer = void 0;
-    this.remainingMs = Math.max(
-      0,
-      this.remainingMs - (performance.now() - this.armedAt)
-    );
-  }
-  resume() {
-    if (this.stopped || !this.paused) return;
-    this.paused = false;
-    this.arm();
-  }
-  stop() {
-    this.stopped = true;
-    if (this.timer !== void 0) clearTimeout(this.timer);
-    this.timer = void 0;
-  }
-  arm() {
-    this.armedAt = performance.now();
-    this.timer = setTimeout(() => {
-      this.stopped = true;
-      this.timer = void 0;
-      this.onFire();
-    }, this.remainingMs);
-    this.timer.unref?.();
-  }
-};
-function validateArgs(val, depth = 0, seen = /* @__PURE__ */ new WeakSet()) {
-  if (depth > ARGS_MAX_DEPTH) {
-    throw new Error(
-      `WorkflowSandbox: args exceeded max nesting depth of ${ARGS_MAX_DEPTH}`
-    );
-  }
-  if (val === null) return;
-  const t = typeof val;
-  if (t === "function") {
-    throw new Error(
-      "WorkflowSandbox: args must be JSON-serializable (functions are not allowed)."
-    );
-  }
-  if (t === "bigint") {
-    throw new Error(
-      "WorkflowSandbox: args must be JSON-serializable (BigInt is not allowed \u2014 pass as string)."
-    );
-  }
-  if (t !== "object") return;
-  const obj = val;
-  if (seen.has(obj)) {
-    throw new Error(
-      "WorkflowSandbox: args must be JSON-serializable (circular reference detected)."
-    );
-  }
-  seen.add(obj);
-  if (Array.isArray(val)) {
-    for (const item of val) validateArgs(item, depth + 1, seen);
-  } else {
-    for (const v of Object.values(val)) {
-      validateArgs(v, depth + 1, seen);
-    }
-  }
-}
-__name(validateArgs, "validateArgs");
-function createWorkflowSandbox(opts) {
-  const phases = [];
-  const logs = [];
-  const emitLog = /* @__PURE__ */ __name((line) => {
-    try {
-      opts.emitter?.logAppended?.(line);
-    } catch (e) {
-      debugLogger.warn("emitter.logAppended threw:", e);
-    }
-  }, "emitLog");
-  const safeLog = /* @__PURE__ */ __name((msg, notify = true) => {
-    if (logs.length < MAX_LOG_LINES) {
-      const line = String(msg);
-      logs.push(line);
-      if (notify) emitLog(line);
-    } else if (logs.length === MAX_LOG_LINES) {
-      const line = `[workflow log truncated at ${MAX_LOG_LINES} lines]`;
-      logs.push(line);
-      if (notify) emitLog(line);
-    }
-  }, "safeLog");
-  const safePhase = /* @__PURE__ */ __name((title) => {
-    if (phases.length < MAX_PHASE_ENTRIES) {
-      const t = stripAnsiAndControl(String(title)).slice(0, 200) || "phase";
-      if (phases[phases.length - 1] === t) return;
-      phases.push(t);
-      try {
-        opts.emitter?.phaseStarted?.(t);
-      } catch (e) {
-        debugLogger.warn("emitter.phaseStarted threw:", e);
-      }
-    } else if (phases.length === MAX_PHASE_ENTRIES) {
-      phases.push(
-        `[workflow phases truncated at ${MAX_PHASE_ENTRIES} entries]`
-      );
-    }
-  }, "safePhase");
-  if (opts.args !== void 0) validateArgs(opts.args);
-  const argsJson = opts.args === void 0 ? null : JSON.stringify(opts.args);
-  const unconsumedRoots = /* @__PURE__ */ new Map();
-  const unconsumedRejections = /* @__PURE__ */ new Map();
-  let nextUnconsumedId = 1;
-  let unconsumedSettled = false;
-  let mirroredEscapeKeys = /* @__PURE__ */ new Set();
-  const unconsumedRejectionLine = /* @__PURE__ */ __name((rec) => {
-    if (rec.dispatchFailed) {
-      return rec.isRoot ? "dispatch failed (result not consumed): " + rec.msg : "dispatch failed (rejection not handled): " + rec.msg;
-    }
-    return "script handler failed (rejection not handled): " + rec.msg;
-  }, "unconsumedRejectionLine");
-  const bridge = {
-    argsJson,
-    pushPhase: safePhase,
-    pushLog: safeLog,
-    lastPhase: /* @__PURE__ */ __name(() => phases[phases.length - 1], "lastPhase"),
-    hostAgent: opts.dispatch,
-    // Effort tiers are resolved host-side so the sandbox accepts exactly the
-    // aliases `/effort` does without a second copy of the alias table. Takes
-    // and returns primitives only.
-    normalizeEffort: /* @__PURE__ */ __name((raw) => typeof raw === "string" ? normalizeReasoningEffort(raw) ?? null : null, "normalizeEffort"),
-    effortTiers: REASONING_EFFORT_TIERS.join(", "),
-    // A built-in tool named by its display name or a legacy alias becomes its
-    // tool name, so both spellings share one resume key; any other entry comes
-    // back as given for the host to judge. Primitives only.
-    canonicalDenyName: /* @__PURE__ */ __name((raw) => typeof raw === "string" ? resolveBuiltinToolName(raw) ?? raw : null, "canonicalDenyName"),
-    // JSON.stringify escapes only C0: strip DEL / C1 (incl. NEL) from a
-    // script-controlled echo so it cannot fragment a rejection message.
-    sanitizeForMessage: /* @__PURE__ */ __name((raw) => typeof raw === "string" ? stripAnsiAndControl(raw) : "", "sanitizeForMessage"),
-    // PR #4947 R2 T7 (qwen-code-ci-bot): host-side log hook for reviveInRealm's
-    // catch path. Mirrors the rejection-logging in settleToNullArray so an
-    // operator running with debug logging can distinguish "thunk rejected"
-    // (settleToNullArray.warn) from "thunk resolved to a non-JSON-serializable
-    // value" (this warn). Receives only primitive strings/numbers — the bridge
-    // contract forbids host objects crossing back to the script.
-    logRevivalFailure: /* @__PURE__ */ __name((idx, reason) => {
-      debugLogger.warn(
-        `Workflow result revival failed at index ${idx}: ${reason}; slot set to null (non-JSON-serializable thunk return).`
-      );
-    }, "logRevivalFailure"),
-    // --- Unconsumed-rejection mirror bookkeeping ---
-    wfRegisterRoot: /* @__PURE__ */ __name(() => {
-      const id = nextUnconsumedId++;
-      unconsumedRoots.set(id, { rejectionHandled: false, adoptedOut: false });
-      return id;
-    }, "wfRegisterRoot"),
-    wfMarkRejectionHandled: /* @__PURE__ */ __name((rootId) => {
-      const root = unconsumedRoots.get(rootId);
-      if (root) root.rejectionHandled = true;
-    }, "wfMarkRejectionHandled"),
-    wfIsRootHandled: /* @__PURE__ */ __name((rootId) => unconsumedRoots.get(rootId)?.rejectionHandled === true, "wfIsRootHandled"),
-    wfMarkAdopted: /* @__PURE__ */ __name((rootId) => {
-      const root = unconsumedRoots.get(rootId);
-      if (root) root.adoptedOut = true;
-    }, "wfMarkAdopted"),
-    runId: opts.runId ?? "",
-    wfReportUnconsumed: /* @__PURE__ */ __name((rootId, isRoot, dispatchFailed, msg) => {
-      if (unconsumedSettled) {
-        const rec = {
-          rootId,
-          isRoot,
-          dispatchFailed,
-          msg
-        };
-        const rootState = unconsumedRoots.get(rootId);
-        if (!rootState?.rejectionHandled && !(dispatchFailed && rootState?.adoptedOut)) {
-          safeLog(unconsumedRejectionLine(rec));
-        }
-        return 0;
-      }
-      const id = nextUnconsumedId++;
-      unconsumedRejections.set(id, { rootId, isRoot, dispatchFailed, msg });
-      return id;
-    }, "wfReportUnconsumed"),
-    wfClearUnconsumed: /* @__PURE__ */ __name((id) => {
-      unconsumedRejections.delete(id);
-    }, "wfClearUnconsumed"),
-    // R10-1: teardown discrimination cannot key on the error name alone.
-    // The dominant in-flight cancellation path (controller.abort() →
-    // subagent returns terminateMode=CANCELLED → runSingleDispatch throws
-    // a PLAIN Error) never produces an 'AbortError', so the mirror would
-    // log a spurious dispatch failure for a correctly-cancelled run. Once
-    // the run's abort signal has fired, the run is already settling as
-    // cancelled / timed-out — every rejection still crossing the boundary
-    // is teardown noise regardless of its shape.
-    isRunAborted: /* @__PURE__ */ __name(() => opts.abortOnTimeout?.signal.aborted === true, "isRunAborted"),
-    // The truthy flags distinguish "injected" from "default stub" inside the
-    // init script without leaking the host function itself when not used.
-    hasParallel: !!opts.parallel,
-    hasPipeline: !!opts.pipeline,
-    hasWorkflow: !!opts.workflow,
-    hasBudget: !!opts.budget,
-    hostParallel: opts.parallel,
-    hostPipeline: opts.pipeline,
-    hostWorkflow: opts.workflow,
-    budgetTotal: opts.budget ? opts.budget.total : null,
-    hostBudgetSpent: opts.budget ? opts.budget.spent.bind(opts.budget) : null,
-    hostBudgetRemaining: opts.budget ? opts.budget.remaining.bind(opts.budget) : null
-  };
-  Object.setPrototypeOf(bridge, null);
-  const sandboxGlobals = Object.assign(
-    /* @__PURE__ */ Object.create(null),
-    { __workflowBridge: bridge }
-  );
-  const ctx = vm.createContext(sandboxGlobals);
-  vm.runInContext(
-    `(() => {
-      const __b = globalThis.__workflowBridge;
-      delete globalThis.__workflowBridge;
-
-      // --- Math (vm-realm, random throws) ---
-      const realMath = Math;
-      const safeMath = Object.create(null);
-      for (const k of Object.getOwnPropertyNames(realMath)) {
-        if (k === 'random' || k === 'constructor') continue;
-        safeMath[k] = realMath[k];
-      }
-      safeMath.random = () => {
-        throw new Error(
-          'Math.random() is unavailable in workflow scripts (breaks resume). ' +
-          'For N independent samples, include the index in the agent label or prompt.'
-        );
-      };
-      globalThis.Math = safeMath;
-
-      // --- Date (vm-realm function that throws on any access) ---
-      const dateMsg = 'Date.now() / new Date() are unavailable in workflow ' +
-        'scripts (breaks resume). Stamp results after the workflow returns, ' +
-        'or pass timestamps via args.';
-      const safeDate = function Date() { throw new Error(dateMsg); };
-      safeDate.now = () => { throw new Error(dateMsg); };
-      safeDate.UTC = () => { throw new Error(dateMsg); };
-      safeDate.parse = () => { throw new Error(dateMsg); };
-      Object.setPrototypeOf(safeDate, null);
-      Object.defineProperty(safeDate, 'constructor', {
-        value: undefined, writable: false, configurable: false,
-      });
-      globalThis.Date = safeDate;
-
-      // --- args (parsed via vm-realm JSON \u2192 vm-realm objects/arrays) ---
-      // FIX-Round1-T2: vm-realm arrays keep their vm-realm Array.prototype,
-      // so for...of, .map, .forEach, spread, destructuring all work \u2014 and
-      // their inherited methods' constructors are vm-realm Function, which
-      // cannot reach host process.
-      globalThis.args = __b.argsJson === null ? undefined : JSON.parse(__b.argsJson);
-
-      // --- Wrap a host async function so it returns a vm-realm Promise ---
-      // FIX-Round1-T1/T8/T14: success and failure both cross the boundary
-      // as vm-realm values: resolve with the host's value (a primitive
-      // string for dispatch; vm-realm arrays for parallel/pipeline because
-      // those wrappers will produce vm-realm results); reject with a
-      // freshly-constructed vm-realm Error so e.constructor.constructor
-      // stays in the vm realm.
-      // Dispatch promises are ObservedPromise instances (a vm-realm
-      // Promise subclass). Its then override marks the result consumed
-      // and re-attaches the teardown observer to the derived promise, so
-      // script-derived chains (agent(...).then(...), await, and the
-      // ELEMENTS of static-combinator aggregates \u2014 everything that
-      // funnels through then) stay observed at every depth. The
-      // AGGREGATES of Promise.all/race/any are built by the native
-      // statics and never pass through the observed then, so those
-      // statics are wrapped explicitly below (observeAggregate).
-      // Without this, a correctly-cancelled run holding a pending derived
-      // chain fired a process-level unhandledRejection even though the
-      // bare dispatch promise was observed.
-      //
-      // Unconsumed rejections of an observed node are recorded through
-      // the bridge and mirrored into the run log at run settlement (a
-      // later consumption clears the record first) \u2014 a dispatch refused
-      // at the entry gate (budget / agent cap) or failing mid-run reaches
-      // no other surface, so without the mirror the failure leaves no
-      // log, alarm, or telemetry.
-      function mapDispatchError(hostErr) {
-        var msg;
-        try {
-          msg = (hostErr && hostErr.message != null)
-            ? String(hostErr.message)
-            : String(hostErr);
-        } catch (e) {
-          msg = '[unserializable rejection value]';
-        }
-        const vmErr = new Error(msg);
-        // Teardown discrimination at the host boundary \u2014 before the error
-        // is flattened into a vm-realm Error. Two shapes count as
-        // teardown: an error NAMED 'AbortError' (the scheduler's
-        // abortError() DOMException), and ANY rejection that crosses
-        // after the run's abort signal has fired \u2014 the dominant
-        // cancellation path rejects with a plain Error ('did not complete
-        // (terminate mode: CANCELLED).'), which a name-only match would
-        // mirror as a spurious dispatch failure on a correctly-cancelled
-        // run. Matching the name here (rather than the message text)
-        // still suppresses teardown noise without swallowing genuine
-        // failures whose message merely contains 'aborted' (e.g. a
-        // network-layer 'connection aborted by peer').
-        var isAbort = false;
-        try {
-          isAbort = !!(hostErr && hostErr.name === 'AbortError');
-        } catch (e) {
-          isAbort = false;
-        }
-        if (isAbort || __b.isRunAborted()) vmErr.__wfAbort = true;
-        var isRunFailure = false;
-        try {
-          isRunFailure = !!(hostErr && (
-            hostErr.__wfRunFailure === true ||
-            hostErr.name === 'WorkflowBudgetExceededError' ||
-            hostErr.name === 'WorkflowAgentCapExceededError'
-          ));
-        } catch (e) {
-          isRunFailure = false;
-        }
-        if (isRunFailure) vmErr.__wfRunFailure = true;
-        vmErr.__wfDispatchFailed = true;
-        return vmErr;
-      }
-      function readFlag(value, name) {
-        try {
-          return !!(value && value[name]);
-        } catch (e) {
-          return false;
-        }
-      }
-      function observeDispatch(promise) {
-        // Direct native-then call: routing through ObservedPromise.then
-        // would mark the promise consumed and recurse the observer. The
-        // observer body must be exception-safe on ANY rejection value:
-        // a script handler can throw an exotic value (a message getter
-        // that throws, a Proxy with throwing traps), and an observer
-        // killed mid-body would turn the very rejection it watches into
-        // a process-level unhandledRejection \u2014 the exact failure class
-        // the observer exists to remove.
-        Promise.prototype.then.call(promise, undefined, function (err) {
-          if (promise.__wfConsumed) return;
-          // R11-30: also suppress on the run-level abort state, not just
-          // the rejection's own marker \u2014 a wrapped Promise.any aggregate
-          // rejects with a natively built AggregateError that carries
-          // neither marker, so teardown rejections of a correctly-
-          // cancelled run would still be mirrored when it is unconsumed.
-          if (readFlag(err, '__wfAbort') || __b.isRunAborted()) return;
-          var dispatchFailed = readFlag(err, '__wfDispatchFailed');
-          var errors = null;
-          try {
-            if (err && Array.isArray(err.errors)) errors = err.errors;
-          } catch (e) {
-            errors = null;
-          }
-          if (!dispatchFailed && errors) {
-            // R11-4: Promise.any rejects with a fresh vm-realm
-            // AggregateError carrying no flags; the element errors are
-            // reachable on .errors with their markers preserved. Derive
-            // the attribution from the causes instead of blaming the
-            // script for a dispatch failure.
-            for (var i = 0; i < errors.length; i++) {
-              if (readFlag(errors[i], '__wfDispatchFailed')) {
-                dispatchFailed = true;
-                break;
-              }
-            }
-          }
-          // R11-15: cross-root suppression \u2014 aggregate roots track
-          // rejectionHandled independently of their elements' roots, so
-          // a forwarded dispatch failure whose originating element root
-          // the script already handled must not mirror from the
-          // aggregate. The element rootId is stamped in vmAsync;
-          // Promise.all/race forward the element's own reason,
-          // Promise.any surfaces them on .errors.
-          try {
-            var sourceIds = [];
-            if (err && err.__wfRootId) {
-              sourceIds.push(err.__wfRootId);
-            } else if (errors) {
-              for (var j = 0; j < errors.length; j++) {
-                if (errors[j] && errors[j].__wfRootId) {
-                  sourceIds.push(errors[j].__wfRootId);
-                }
-              }
-            }
-            for (var k = 0; k < sourceIds.length; k++) {
-              if (
-                sourceIds[k] !== promise.__wfRootId &&
-                __b.wfIsRootHandled(sourceIds[k])
-              ) {
-                return;
-              }
-            }
-          } catch (e) {
-            // A throwing exotic value must not kill the observer; fall
-            // through and mirror conservatively.
-          }
-          var msg;
-          try {
-            msg = String(err && err.message != null ? err.message : err);
-          } catch (e) {
-            msg = '[unserializable rejection value]';
-          }
-          promise.__wfUnconsumedId = __b.wfReportUnconsumed(
-            promise.__wfRootId,
-            promise.__wfIsRoot === true,
-            dispatchFailed,
-            msg,
-          );
-        });
-      }
-      // R11-3: await / Promise.resolve / returning a thenable from a
-      // handler adopts an ObservedPromise through this then with the
-      // adopting promise's capability (resolve, reject) pair \u2014 native
-      // functions, indistinguishable from real handlers by arity. They
-      // are detected by the native toString signature. Adoption
-      // CONSUMES the result (a delayed adoption clears a recorded
-      // verdict exactly like a delayed await) but is NOT a rejection
-      // handler: the rejection transfers into the adopting promise \u2014
-      // typically an async wrapper's implicit promise, which is a plain
-      // vm-realm Promise the mirror cannot observe. Marking adoption as
-      // handling would silently disarm the mirror for the forgotten-
-      // await failure class; the run-level escape hook in the host
-      // surfaces those escapes instead. Bound script functions also
-      // stringify as native code; misreading one as adoption only
-      // forgoes the rejectionHandled marking, never native semantics.
-      function isAdoptionAttach(handler) {
-        try {
-          return (
-            typeof handler === 'function' &&
-            Function.prototype.toString
-              .call(handler)
-              .indexOf('[native code]') !== -1
-          );
-        } catch (e) {
-          return false;
-        }
-      }
-      class ObservedPromise extends Promise {
-        then(onFulfilled, onRejected) {
-          // R11-26: introspect the handler BEFORE any state mutation.
-          // The read is guarded because a script-supplied handler can
-          // be exotic (a revoked Proxy wrapping a function, a throwing
-          // accessor) \u2014 an unguarded read made .then() throw
-          // synchronously, something native then never does, leaving
-          // the promise marked consumed with no handler attached.
-          var rethrows = false;
-          try {
-            rethrows = !!(onRejected && onRejected.__wfRethrows);
-          } catch (e) {
-            rethrows = false;
-          }
-          this.__wfConsumed = true;
-          // An attached rejection handler means the script can surface the
-          // root rejection itself; the mirror stays silent for it. The
-          // finally override below routes through this then with marked
-          // rethrow combinators \u2014 those re-raise the rejection instead of
-          // handling it, so they must NOT set the flag (marking them
-          // handled would silently drop a fire-and-forget
-          // agent(...).finally(...) failure). Adoption attaches count
-          // as consumption only, never handling (see isAdoptionAttach):
-          // they mark adoptedOut so forwarded sibling entries defer to
-          // the adopting chain / escape hook instead of mirroring.
-          if (isAdoptionAttach(onRejected)) {
-            __b.wfMarkAdopted(this.__wfRootId);
-          } else if (typeof onRejected === 'function' && !rethrows) {
-            __b.wfMarkRejectionHandled(this.__wfRootId);
-          }
-          // A delayed consumption clears a verdict recorded at
-          // rejection-settlement time, so a late-but-real await is not
-          // misreported as unconsumed.
-          if (this.__wfUnconsumedId !== undefined) {
-            __b.wfClearUnconsumed(this.__wfUnconsumedId);
-            this.__wfUnconsumedId = undefined;
-          }
-          const derived = super.then(onFulfilled, onRejected);
-          derived.__wfRootId = this.__wfRootId;
-          observeDispatch(derived);
-          return derived;
-        }
-        finally(onFinally) {
-          // Native Promise.prototype.finally calls the observed then with
-          // two function combinators, indistinguishable there from a real
-          // then(f, g) \u2014 which would mark the root rejection handled even
-          // though finally rethrows it. Implement finally through the
-          // observed then with an explicitly-marked rethrow combinator so
-          // the mirror stays armed for finally-only chains.
-          if (typeof onFinally !== 'function') {
-            return this.then(undefined, undefined);
-          }
-          const onRethrow = function (err) {
-            return Promise.resolve(onFinally()).then(function () {
-              throw err;
-            });
-          };
-          onRethrow.__wfRethrows = true;
-          return this.then(
-            function (value) {
-              return Promise.resolve(onFinally()).then(function () {
-                return value;
-              });
-            },
-            onRethrow,
-          );
-        }
-      }
-      // --- Static combinators: observe the aggregate promise ---
-      // Promise.all/race/any build their aggregate via the native static;
-      // it never passes through the observed then, so a fire-and-forget
-      // aggregate holding a failed dispatch would escape the run-log
-      // mirror. While the run is live the host's adoption-escape hook
-      // (R11-3) still catches and mirrors the process-level
-      // unhandledRejection \u2014 a round-14 A/B confirmed that hook, not
-      // this wrap, is the live-run backstop \u2014 but only with the coarse
-      // '(rejection not handled)' wording, and once the run's hook is
-      // detached nothing in the sandbox catches the escape. R14-A:
-      // wrapping the statics gives each aggregate its own observer, so
-      // consumption tracking works through the aggregate's own observed
-      // then (await / .catch / .then marks it handled) and the mirror
-      // itself classifies the rejection; the elements still funnel
-      // through the then override via the native static's internal
-      // attach, so they stay marked consumed.
-      function observeAggregate(nativeAggregate) {
-        const rootId = __b.wfRegisterRoot();
-        const observed = new ObservedPromise(function (resolve, reject) {
-          Promise.prototype.then.call(nativeAggregate, resolve, reject);
-        });
-        observed.__wfRootId = rootId;
-        observed.__wfIsRoot = true;
-        observeDispatch(observed);
-        return observed;
-      }
-      const nativePromiseAll = Promise.all;
-      const nativePromiseRace = Promise.race;
-      const nativePromiseAny = Promise.any;
-      // R11-16: a static called on a script-defined Promise subclass
-      // must honor the species contract and return a subclass instance,
-      // so non-default receivers bypass observation (their elements
-      // still funnel through the observed then, and a fire-and-forget
-      // dispatch failure escaping such an aggregate is still caught by
-      // the host's adoption-escape hook via its stamped markers).
-      Promise.all = function (items) {
-        if (this !== Promise) return nativePromiseAll.call(this, items);
-        return observeAggregate(nativePromiseAll.call(this, items));
-      };
-      Promise.race = function (items) {
-        if (this !== Promise) return nativePromiseRace.call(this, items);
-        return observeAggregate(nativePromiseRace.call(this, items));
-      };
-      Promise.any = function (items) {
-        if (this !== Promise) return nativePromiseAny.call(this, items);
-        return observeAggregate(nativePromiseAny.call(this, items));
-      };
-      function vmAsync(hostFn) {
-        return function (...vmArgs) {
-          const rootId = __b.wfRegisterRoot();
-          const p = new ObservedPromise(function (resolve, reject) {
-            function rejectMapped(hostErr) {
-              const vmErr = mapDispatchError(hostErr);
-              // Stamp the originating root and run BEFORE the error can
-              // be forwarded into aggregate promises: the observer's
-              // cross-root suppression (R11-15) reads __wfRootId and
-              // the host's adoption-escape hook (R11-3) attributes by
-              // __wfRunId.
-              try {
-                vmErr.__wfRootId = rootId;
-                vmErr.__wfRunId = __b.runId;
-              } catch (e) {}
-              reject(vmErr);
-            }
-            try {
-              const hostPromise = hostFn.apply(null, vmArgs);
-              hostPromise.then(
-                function (value) { resolve(value); },
-                rejectMapped
-              );
-            } catch (hostErr) {
-              rejectMapped(hostErr);
-            }
-          });
-          p.__wfRootId = rootId;
-          p.__wfIsRoot = true;
-          observeDispatch(p);
-          return p;
-        };
-      }
-
-      // --- phase / log ---
-      globalThis.phase = function phase(title) {
-        __b.pushPhase(String(title));
-      };
-      globalThis.log = function log(msg) {
-        __b.pushLog(msg);
-      };
-
-      // --- console (object with hardened methods, all in vm-realm) ---
-      const safeConsole = Object.create(null);
-      safeConsole.log = function () {
-        const parts = [];
-        for (let i = 0; i < arguments.length; i++) parts.push(String(arguments[i]));
-        __b.pushLog(parts.join(' '));
-      };
-      safeConsole.warn = safeConsole.log;
-      safeConsole.error = safeConsole.log;
-      globalThis.console = safeConsole;
-
-      // --- agent (with runtime allowlist + named throws, all vm-realm) ---
-      // FIX-Round1-T13: throw on any opts key not in the allowlist \u2014 catches
-      // typos like { scema: ... } that previously slipped through the
-      // [key:string]: unknown index signature.
-      const KNOWN_AGENT_OPTS = ['label', 'phase', 'schema', 'model', 'effort', 'isolation', 'agentType', 'stallMs', 'workingDir', 'disallowedTools'];
-      globalThis.agent = vmAsync(function (prompt, agentOpts) {
-        agentOpts = agentOpts || {};
-        const keys = Object.keys(agentOpts);
-        for (let i = 0; i < keys.length; i++) {
-          const k = keys[i];
-          if (KNOWN_AGENT_OPTS.indexOf(k) === -1) {
-            throw new Error(
-              "agent({" + k + "}): unknown option. " +
-              "Known options are: " + KNOWN_AGENT_OPTS.join(', ') + "."
-            );
-          }
-        }
-        // P3: schema + model + agentType + isolation are all wired through
-        // createProductionDispatch \u2192 SubagentManager.createAgentHeadless.
-        // The dispatch surfaces descriptive errors for "agent type not found",
-        // "isolation:'remote' is not available in this build", parent-dirty
-        // refuse, worktree creation failures, and StructuredOutput contract
-        // violations ("completed without calling StructuredOutput after 2
-        // in-conversation nudges").
-        if (
-          agentOpts.isolation !== undefined &&
-          agentOpts.isolation !== 'worktree' &&
-          agentOpts.isolation !== 'remote'
-        ) {
-          throw new Error(
-            "agent({isolation: '" + agentOpts.isolation + "'}): unknown isolation mode. " +
-            "Known modes are: 'worktree', 'remote'."
-          );
-        }
-        // NOTE: this init script is a host-side template literal \u2014 no
-        // backticks anywhere below, in code or comments.
-        //
-        // A non-number stallMs is silently dropped downstream and the
-        // default watchdog applies, contradicting "0 disables the watchdog"
-        // \u2014 refuse it loudly like the other option gates.
-        if (agentOpts.stallMs !== undefined && (typeof agentOpts.stallMs !== 'number' || !Number.isFinite(agentOpts.stallMs))) {
-          throw new Error("agent({stallMs}): must be a finite number of milliseconds (0 disables the watchdog).");
-        }
-        // workingDir pins the agent to a worktree the CALLER already owns;
-        // isolation creates and reaps one. Asking for both is a contradiction
-        // about who owns the directory's lifetime, so name it here rather than
-        // silently letting one win.
-        if (agentOpts.workingDir !== undefined) {
-          if (typeof agentOpts.workingDir !== 'string' || agentOpts.workingDir.trim().length === 0) {
-            throw new Error(
-              "agent({workingDir}): must be a non-empty string naming an existing " +
-              "git worktree of this repository."
-            );
-          }
-          if (agentOpts.isolation !== undefined) {
-            throw new Error(
-              "agent({workingDir, isolation}): incompatible options. workingDir " +
-              "pins the agent to a worktree you already own; isolation creates " +
-              "a fresh one and removes it afterwards. Pass one."
-            );
-          }
-        }
-        // SECURITY (P3 R2 self-review): user-script-controlled agentOpts
-        // cross the vm/host boundary verbatim via vmAsync's hostFn.apply.
-        // A Proxy / inherited-getter / non-plain object in agentOpts.schema
-        // would let host-side code (SyntheticOutputTool constructor + AJV
-        // compile) trigger user-controlled trap handlers that execute with
-        // the host realm's full surface. Revive agentOpts through JSON
-        // round-trip BEFORE crossing so the host only ever sees vm-realm
-        // plain objects with vm-realm prototypes. Same mechanism that
-        // makes args + parallel/pipeline results safe.
-        var safeOpts;
-        try {
-          safeOpts = JSON.parse(JSON.stringify(agentOpts));
-        } catch (e) {
-          throw new Error(
-            "agent() opts contain a non-JSON-serializable value: " +
-            String(e && e.message != null ? e.message : e)
-          );
-        }
-        // effort and disallowedTools are validated on the REVIVED copy: that
-        // is the object the host dispatch and the resume key see, so a getter
-        // cannot show one value here and hand another to the dispatch. Both
-        // are normalized in place (an effort alias becomes its tier; a deny
-        // list has built-in display names mapped to tool names and is sorted
-        // and de-duplicated) so equivalent spellings share one resume key.
-        if (safeOpts.effort !== undefined) {
-          var tier = __b.normalizeEffort(safeOpts.effort);
-          if (tier === null) {
-            throw new Error(
-              "agent({effort}): unknown effort tier " + __b.sanitizeForMessage(JSON.stringify(safeOpts.effort)) + ". " +
-              "Known tiers are: " + __b.effortTiers + "."
-            );
-          }
-          safeOpts.effort = tier;
-        }
-        if (safeOpts.disallowedTools !== undefined) {
-          var denied = safeOpts.disallowedTools;
-          if (
-            !Array.isArray(denied) ||
-            denied.some(function (name) {
-              return typeof name !== 'string' || name.length === 0 || name !== name.trim();
-            })
-          ) {
-            throw new Error(
-              "agent({disallowedTools}): must be an array of non-empty tool-name strings " +
-              "without surrounding whitespace, e.g. ['run_shell_command', 'write_file']."
-            );
-          }
-          var uniqueDenied = [];
-          for (var d = 0; d < denied.length; d++) {
-            var deniedName = __b.canonicalDenyName(denied[d]);
-            if (uniqueDenied.indexOf(deniedName) === -1) uniqueDenied.push(deniedName);
-          }
-          uniqueDenied.sort();
-          if (uniqueDenied.length === 0) {
-            delete safeOpts.disallowedTools;
-          } else {
-            safeOpts.disallowedTools = uniqueDenied;
-          }
-        }
-        // The phase is recorded only once every option gate above has passed,
-        // so a call its options rejected leaves no phase that dispatched
-        // nothing.
-        if (typeof agentOpts.phase === 'string' && agentOpts.phase.length > 0) {
-          if (__b.lastPhase() !== agentOpts.phase) {
-            __b.pushPhase(agentOpts.phase);
-          }
-        }
-        // SECURITY (PR #4947 R1 wenshao, extended for P3): vmAsync's resolve
-        // path is verbatim (no re-wrap of resolved values). Host-realm
-        // strings cross the boundary harmlessly because primitives have no
-        // prototype identity. But P3's schema-mode dispatch returns the
-        // validated structured_output args as a host-realm OBJECT --
-        // handing that to the script reopens the T1/T8/T14 escape:
-        // result.constructor.constructor("return process")() would walk
-        // the host Object.prototype chain to the host Function
-        // constructor. Per-call JSON revival inside this vm runInContext
-        // block makes the returned object carry vm-realm prototypes (same
-        // mechanism as parallel/pipeline reviveInRealm and the args
-        // global revival). The fallback to null on a non-serializable
-        // resolve mirrors the errors-as-data convention parallel/pipeline
-        // already use for individual slot failures.
-        // R3 review (wenshao T3 [Suggestion]): the null fallback below is
-        // a SECURITY backstop, not a contract path. In schema mode the
-        // host return is the validated args of a structured_output tool
-        // call -- LLM tool_call payloads are always JSON-serializable
-        // (the model sends them through the OpenAI tool-call protocol
-        // which serializes through JSON itself) and SyntheticOutputTool's
-        // AJV validation runs over the parsed JSON, so a non-serializable
-        // host return is unreachable in production schema mode. The
-        // sentinel preserves the errors-as-data convention parallel /
-        // pipeline already use for individual slot failures, and stays as
-        // residual defense for any future dispatch path whose return
-        // value isn't a tool_call payload. logRevivalFailure surfaces
-        // the actionable detail (slot 0 + the error string) to operators
-        // so a real trigger in production isn't silent.
-        return __b.hostAgent(prompt, safeOpts).then(function (value) {
-          if (value === null || typeof value !== 'object') {
-            return value;
-          }
-          try {
-            return JSON.parse(JSON.stringify(value));
-          } catch (e) {
-            __b.logRevivalFailure(0, String(e && e.message != null ? e.message : e));
-            return null;
-          }
-        });
-      });
-
-      // --- parallel / pipeline ---
-      // SECURITY (PR #4732 P2): the host impl resolves with a HOST-realm array.
-      // vmAsync's resolve path is verbatim (it does NOT re-wrap resolved
-      // values), so handing that host array to the script would reopen the
-      // T1/T8/T14 escape: result.constructor.constructor('return process')()
-      // walks the host Array.prototype chain to the host Function constructor.
-      // We revive the array INSIDE the vm realm with JSON.parse(JSON.stringify)
-      // -- the same mechanism that makes the args global safe (see the args
-      // revival above) -- so the value the script sees has vm-realm prototypes
-      // whose constructors can't reach host process. Agent results are JSON
-      // strings (and null slots), so the round-trip is lossless for P2.
-      //
-      // EAD-1 (P2 self-review): revive PER-ELEMENT, not the whole array in one
-      // JSON.stringify. A single slot whose VALUE is non-serializable (a thunk
-      // that returns a BigInt or a circular object) must become null at its
-      // index -- it must NOT throw on the whole array and destroy every sibling
-      // result, which would defeat errors-as-data for return values. The outer
-      // [] is built in-realm here, so the result keeps vm-realm prototypes.
-      //
-      // SECURITY (PR #4947 R1 wenshao): reviveInRealm MUST remain inside this
-      // vm init runInContext block. JSON, Array, Object here are vm-realm
-      // globals; extracting this function to a host-side utility (e.g. a
-      // shared utils/jsonRevive.ts) would resolve those references against
-      // the HOST realm, silently reopening the T1/T8/T14 escape that the
-      // revival is designed to prevent. The textual identity to a host-side
-      // util is exactly the trap.
-      function reviveInRealm(hostArr) {
-        const out = [];
-        for (let i = 0; i < hostArr.length; i++) {
-          try {
-            out[i] = JSON.parse(JSON.stringify(hostArr[i]));
-          } catch (e) {
-            // Cross to host realm for debug logging. The bridge function
-            // accepts only primitive strings/numbers; the error message is
-            // coerced to a String here so no vm-realm Error object crosses.
-            __b.logRevivalFailure(i, String(e?.message ?? e));
-            out[i] = null;
-          }
-        }
-        return out;
-      }
-      if (__b.hasParallel) {
-        const callParallel = vmAsync(function (thunks) {
-          return __b.hostParallel(thunks);
-        });
-        globalThis.parallel = function parallel(thunks) {
-          return callParallel(thunks).then(reviveInRealm);
-        };
-      } else {
-        globalThis.parallel = function parallel() {
-          return new Promise(function (_, reject) {
-            reject(new Error(
-              'parallel() is unavailable: this sandbox was created without a ' +
-              'parallel implementation. The orchestrator injects one; a bare ' +
-              'sandbox has no concurrent-dispatch capability.'
-            ));
-          });
-        };
-      }
-      if (__b.hasPipeline) {
-        const callPipeline = vmAsync(function (items) {
-          const stages = [];
-          for (let i = 1; i < arguments.length; i++) stages.push(arguments[i]);
-          return __b.hostPipeline.apply(null, [items].concat(stages));
-        });
-        globalThis.pipeline = function pipeline() {
-          return callPipeline.apply(null, arguments).then(reviveInRealm);
-        };
-      } else {
-        globalThis.pipeline = function pipeline() {
-          return new Promise(function (_, reject) {
-            reject(new Error(
-              'pipeline() is unavailable: this sandbox was created without a ' +
-              'pipeline implementation. The orchestrator injects one; a bare ' +
-              'sandbox has no staggered multi-stage capability.'
-            ));
-          });
-        };
-      }
-      // --- workflow (nested, single-level) ---
-      // Mirrors agent(): args cross vm\u2192host verbatim (safe direction), the
-      // single result is revived back into the vm realm via JSON round-trip
-      // (same T1/T8/T14 escape defense as agent / parallel / pipeline). The
-      // host impl resolves a saved workflow and runs it sharing this run's
-      // agent-count cap + token budget. When __b.hasWorkflow is false, the
-      // sandbox is either bare (no resolver wired) OR is itself a nested
-      // workflow \u2014 in both cases workflow() must throw, which is how the
-      // single-level nesting limit is enforced (a nested sandbox is created
-      // without a workflow impl, so its workflow() lands in the else branch).
-      if (__b.hasWorkflow) {
-        const callWorkflow = vmAsync(function (nameOrRef, wfArgs) {
-          // Sanitize args through a JSON round-trip BEFORE crossing so the
-          // host only ever sees vm-realm plain objects (same defense as
-          // agent()'s safeOpts). nameOrRef may be a string or {scriptPath}.
-          var safeRef;
-          var safeArgs;
-          try {
-            safeRef = nameOrRef === undefined
-              ? undefined
-              : JSON.parse(JSON.stringify(nameOrRef));
-            safeArgs = wfArgs === undefined
-              ? undefined
-              : JSON.parse(JSON.stringify(wfArgs));
-          } catch (e) {
-            throw new Error(
-              'workflow() received a non-JSON-serializable argument: ' +
-              String(e && e.message != null ? e.message : e)
-            );
-          }
-          return __b.hostWorkflow(safeRef, safeArgs).then(function (value) {
-            if (value === null || typeof value !== 'object') {
-              return value;
-            }
-            try {
-              return JSON.parse(JSON.stringify(value));
-            } catch (e) {
-              __b.logRevivalFailure(0, String(e && e.message != null ? e.message : e));
-              return null;
-            }
-          });
-        });
-        globalThis.workflow = function workflow(nameOrRef, wfArgs) {
-          return callWorkflow(nameOrRef, wfArgs);
-        };
-      } else {
-        globalThis.workflow = function workflow() {
-          return new Promise(function (_, reject) {
-            reject(new Error(
-              "workflow() is unavailable here. Either this sandbox was created " +
-              "without a saved-workflow resolver, or this script is already " +
-              "running as a nested workflow \u2014 workflow() nesting is limited to " +
-              "a single level (a workflow cannot call another workflow that " +
-              "itself calls workflow())."
-            ));
-          });
-        };
-      }
-
-      // --- budget ---
-      const safeBudget = Object.create(null);
-      Object.defineProperty(safeBudget, 'total', {
-        value: __b.budgetTotal,
-        writable: false, configurable: false,
-      });
-      if (__b.hasBudget) {
-        Object.defineProperty(safeBudget, 'spent', {
-          value: function spent() { return __b.hostBudgetSpent(); },
-          writable: false, configurable: false,
-        });
-        Object.defineProperty(safeBudget, 'remaining', {
-          value: function remaining() { return __b.hostBudgetRemaining(); },
-          writable: false, configurable: false,
-        });
-      } else {
-        Object.defineProperty(safeBudget, 'spent', {
-          value: function spent() {
-            throw new Error(
-              'budget.spent() is not supported in P1. Token tracking is scheduled for P5.'
-            );
-          },
-          writable: false, configurable: false,
-        });
-        Object.defineProperty(safeBudget, 'remaining', {
-          value: function remaining() {
-            throw new Error(
-              'budget.remaining() is not supported in P1. Token tracking is scheduled for P5.'
-            );
-          },
-          writable: false, configurable: false,
-        });
-      }
-      globalThis.budget = safeBudget;
-    })();`,
-    ctx,
-    { filename: "workflow-sandbox-init.js" }
-  );
-  const maxWallClockMs = resolveMaxWallClockMs(opts);
-  const flushUnconsumedRejections = /* @__PURE__ */ __name(async () => {
-    unconsumedSettled = true;
-    if (nextUnconsumedId === 1) return;
-    await new Promise((resolve2) => {
-      setImmediate(resolve2);
-    });
-    for (const rec of unconsumedRejections.values()) {
-      const rootState = unconsumedRoots.get(rec.rootId);
-      if (rootState?.rejectionHandled) {
-        continue;
-      }
-      if (rec.dispatchFailed && rootState?.adoptedOut) {
-        continue;
-      }
-      const key = rec.rootId + "\0" + rec.msg;
-      if (mirroredEscapeKeys.has(key)) continue;
-      mirroredEscapeKeys.add(key);
-      safeLog(unconsumedRejectionLine(rec));
-    }
-    unconsumedRejections.clear();
-  }, "flushUnconsumedRejections");
-  const hookRunId = opts.runId ?? "";
-  const adoptionEscapeHook = /* @__PURE__ */ __name((reason, _promise) => {
-    try {
-      if (!reason || typeof reason !== "object") return;
-      const marked = reason;
-      if (marked.__wfDispatchFailed !== true) return;
-      if (String(marked.__wfRunId ?? "") !== hookRunId) return;
-      const rootId = typeof marked.__wfRootId === "number" ? marked.__wfRootId : void 0;
-      if (rootId !== void 0 && unconsumedRoots.get(rootId)?.rejectionHandled) {
-        return;
-      }
-      let msg;
-      try {
-        msg = marked.message != null ? String(marked.message) : String(reason);
-      } catch {
-        msg = "[unserializable rejection value]";
-      }
-      const key = String(rootId ?? "") + "\0" + msg;
-      if (mirroredEscapeKeys.has(key)) return;
-      mirroredEscapeKeys.add(key);
-      safeLog("dispatch failed (rejection not handled): " + msg);
-    } catch (e) {
-      debugLogger.warn("adoptionEscapeHook failed:", e);
-    }
-  }, "adoptionEscapeHook");
-  let extractedMeta = null;
-  return {
-    async run(scriptSource) {
-      unconsumedSettled = false;
-      unconsumedRoots.clear();
-      unconsumedRejections.clear();
-      nextUnconsumedId = 1;
-      mirroredEscapeKeys = /* @__PURE__ */ new Set();
-      let watchdog;
-      let stopWatchingState;
-      let rearmWatchdogOnAbort;
-      let settleOnAbort;
-      let wallClockFired = false;
-      process.on("unhandledRejection", adoptionEscapeHook);
-      try {
-        const { script, meta } = compileWorkflowScript(scriptSource);
-        extractedMeta = meta;
-        if (opts.abortOnTimeout?.signal.aborted) {
-          throw workflowCancelledError();
-        }
-        const runOpts = {
-          timeout: WORKFLOW_SYNC_EVALUATION_TIMEOUT_MS
-        };
-        const result = script.runInContext(ctx, runOpts);
-        const timeoutPromise = new Promise((_, reject) => {
-          watchdog = new WallClockWatchdog(maxWallClockMs, () => {
-            wallClockFired = true;
-            opts.abortOnTimeout?.abort();
-            reject(
-              new Error(
-                `Workflow execution exceeded ${maxWallClockMs} ms of active time (paused time is not counted). Override via SandboxOptions.maxWallClockMs or QWEN_CODE_MAX_WORKFLOW_SECONDS env var.`
-              )
-            );
-          });
-        });
-        const aborted = /* @__PURE__ */ __name(() => opts.abortOnTimeout?.signal.aborted === true, "aborted");
-        stopWatchingState = opts.scheduler?.onStateChange(({ state }) => {
-          if (state === "paused" && !aborted()) watchdog?.pause();
-          else watchdog?.resume();
-        });
-        if (opts.scheduler?.snapshot().state === "paused" && !aborted()) {
-          watchdog?.pause();
-        }
-        rearmWatchdogOnAbort = /* @__PURE__ */ __name(() => watchdog?.resume(), "rearmWatchdogOnAbort");
-        opts.abortOnTimeout?.signal.addEventListener(
-          "abort",
-          rearmWatchdogOnAbort,
-          { once: true }
-        );
-        const abortPromise = new Promise((_, reject) => {
-          const signal = opts.abortOnTimeout?.signal;
-          if (!signal) return;
-          settleOnAbort = /* @__PURE__ */ __name(() => {
-            if (!wallClockFired) reject(workflowCancelledError());
-          }, "settleOnAbort");
-          signal.addEventListener("abort", settleOnAbort, { once: true });
-        });
-        return await Promise.race([result, timeoutPromise, abortPromise]);
-      } finally {
-        if (rearmWatchdogOnAbort) {
-          opts.abortOnTimeout?.signal.removeEventListener(
-            "abort",
-            rearmWatchdogOnAbort
-          );
-        }
-        if (settleOnAbort) {
-          opts.abortOnTimeout?.signal.removeEventListener(
-            "abort",
-            settleOnAbort
-          );
-        }
-        stopWatchingState?.();
-        watchdog?.stop();
-        await flushUnconsumedRejections();
-        process.off("unhandledRejection", adoptionEscapeHook);
-      }
-    },
-    getPhases: /* @__PURE__ */ __name(() => [...phases], "getPhases"),
-    getLogs: /* @__PURE__ */ __name(() => [...logs], "getLogs"),
-    appendLog: /* @__PURE__ */ __name((line) => safeLog(line, false), "appendLog"),
-    getMeta: /* @__PURE__ */ __name(() => extractedMeta, "getMeta")
-  };
-}
-__name(createWorkflowSandbox, "createWorkflowSandbox");
-
-// packages/core/src/agents/runtime/workflow-budget.ts
-init_esbuild_shims();
-var debugLogger2 = createDebugLogger("WORKFLOW_BUDGET");
-var MAX_TOKENS_PER_WORKFLOW_ENV = "QWEN_CODE_MAX_TOKENS_PER_WORKFLOW";
-var HARD_MAX_TOKENS_CEILING = 1e8;
-function resolveMaxTokensPerWorkflow(env = process.env) {
-  const raw = env[MAX_TOKENS_PER_WORKFLOW_ENV];
-  if (raw === void 0 || raw.trim() === "") {
-    return null;
-  }
-  const parsed = parsePositiveIntegerEnv(raw, 0);
-  if (parsed < 1) {
-    debugLogger2.warn(
-      `Invalid ${MAX_TOKENS_PER_WORKFLOW_ENV}=${JSON.stringify(raw)}, treating as unset (no cap)`
-    );
-    return null;
-  }
-  if (parsed > HARD_MAX_TOKENS_CEILING) {
-    debugLogger2.warn(
-      `${MAX_TOKENS_PER_WORKFLOW_ENV}=${parsed} exceeds hard ceiling (${HARD_MAX_TOKENS_CEILING}); clamping.`
-    );
-    return HARD_MAX_TOKENS_CEILING;
-  }
-  return parsed;
-}
-__name(resolveMaxTokensPerWorkflow, "resolveMaxTokensPerWorkflow");
-var WorkflowBudgetImpl = class _WorkflowBudgetImpl {
-  static {
-    __name(this, "WorkflowBudgetImpl");
-  }
-  total;
-  _spent;
-  constructor(total) {
-    this.total = total;
-    this._spent = 0;
-  }
-  spent() {
-    return this._spent;
-  }
-  remaining() {
-    if (this.total === null) return Infinity;
-    return Math.max(0, this.total - this._spent);
-  }
-  /**
-   * Host-side increment. NOT exposed to the script — the
-   * `WorkflowBudget` interface deliberately omits any setter so a
-   * malicious workflow cannot inflate / deflate the budget. Only the
-   * orchestrator (in `countedDispatch`) calls this after a dispatch
-   * resolves with the agent's output token count.
-   *
-   * Non-positive deltas are silently dropped (some dispatches return
-   * `output_tokens: 0` on early failures); negative deltas would be a
-   * caller bug and are also dropped rather than silently rewinding
-   * the counter.
-   */
-  recordSpent(deltaTokens) {
-    if (!Number.isFinite(deltaTokens) || deltaTokens <= 0) return;
-    this._spent += deltaTokens;
-  }
-  /**
-   * Factory: build a budget from the current environment. Convenience
-   * over `new WorkflowBudgetImpl(resolveMaxTokensPerWorkflow(env))`.
-   */
-  static fromEnv(env = process.env) {
-    return new _WorkflowBudgetImpl(resolveMaxTokensPerWorkflow(env));
-  }
-};
-var WorkflowBudgetExceededError = class extends Error {
-  static {
-    __name(this, "WorkflowBudgetExceededError");
-  }
-  name = "WorkflowBudgetExceededError";
-  runId;
-  budgetTotal;
-  spent;
-  constructor(runId, budgetTotal, spent) {
-    super(
-      `Workflow ${runId} exceeded the token budget (${spent} / ${budgetTotal} output tokens spent).`
-    );
-    this.runId = runId;
-    this.budgetTotal = budgetTotal;
-    this.spent = spent;
-  }
-};
-
-// packages/core/src/agents/runtime/workflow-saved.ts
-init_esbuild_shims();
-import { promises as fs } from "node:fs";
-import * as path from "node:path";
-var debugLogger3 = createDebugLogger("WORKFLOW_SAVED");
-var WORKFLOW_NAME_PATTERN = /^[a-z][a-z0-9-]{0,40}$/;
-function validateWorkflowName(name) {
-  if (!name) return "Workflow name is required.";
-  if (!WORKFLOW_NAME_PATTERN.test(name)) {
-    return `Invalid workflow name "${name}". Use lower-case letters, digits, and hyphens only (must start with a letter, max 41 chars).`;
-  }
-  return null;
-}
-__name(validateWorkflowName, "validateWorkflowName");
-function getSavedWorkflowDirs(config) {
-  return [
-    { dir: config.storage.getProjectWorkflowsDir(), source: "project" },
-    { dir: Storage.getUserWorkflowsDir(), source: "user" }
-  ];
-}
-__name(getSavedWorkflowDirs, "getSavedWorkflowDirs");
-function getWorkflowScriptRoots(config) {
-  return [
-    ...getSavedWorkflowDirs(config).map(({ dir }) => dir),
-    config.storage.getGeneratedWorkflowsDir()
-  ];
-}
-__name(getWorkflowScriptRoots, "getWorkflowScriptRoots");
-async function isSymlinkedRoot(dir) {
-  return fs.lstat(dir).then((st) => st.isSymbolicLink()).catch(() => false);
-}
-__name(isSymlinkedRoot, "isSymlinkedRoot");
-async function listJsFiles(dir) {
-  if (await isSymlinkedRoot(dir)) {
-    debugLogger3.warn(`refusing symlinked saved-workflow dir: ${dir}`);
-    return [];
-  }
-  try {
-    const names = await fs.readdir(dir);
-    const out = [];
-    for (const n of names) {
-      if (!n.endsWith(".js")) continue;
-      const st = await fs.lstat(path.join(dir, n)).catch(() => null);
-      if (!st || st.isSymbolicLink()) continue;
-      out.push(n);
-    }
-    return out;
-  } catch (e) {
-    const code = e?.code;
-    if (code !== "ENOENT") {
-      debugLogger3.warn(`listJsFiles failed for ${dir}: ${e}`);
-    }
-    return [];
-  }
-}
-__name(listJsFiles, "listJsFiles");
-async function readWorkflowFileSecurely(filePath, config) {
-  const real = await fs.realpath(filePath);
-  const roots = await Promise.all(
-    getWorkflowScriptRoots(config).map(async (dir) => {
-      if (await isSymlinkedRoot(dir)) return { dir, real: null };
-      try {
-        return { dir, real: await fs.realpath(dir) };
-      } catch {
-        return { dir, real: path.resolve(dir) };
-      }
-    })
-  );
-  const dirs = roots.flatMap((r) => r.real === null ? [] : [r.real]);
-  const inside = dirs.some((d) => real === d || real.startsWith(d + path.sep));
-  if (!inside) {
-    const refused = roots.flatMap((r) => r.real === null ? [r.dir] : []);
-    const refusedNote = refused.length > 0 ? `; refused symlinked ${refused.length === 1 ? "root" : "roots"}: ${refused.join(", ")}` : "";
-    throw new Error(
-      `refusing to load a workflow file outside the workflow script roots (checked: ${dirs.join(", ")}${refusedNote}): '${filePath}'.`
-    );
-  }
-  return fs.readFile(real, "utf8");
-}
-__name(readWorkflowFileSecurely, "readWorkflowFileSecurely");
-async function resolveSavedWorkflowNameForPath(scriptPath, config) {
-  const realScriptPath = await fs.realpath(scriptPath);
-  for (const { dir } of getSavedWorkflowDirs(config)) {
-    if (await isSymlinkedRoot(dir)) continue;
-    let realDir;
-    try {
-      realDir = await fs.realpath(dir);
-    } catch {
-      continue;
-    }
-    if (realScriptPath !== realDir && !realScriptPath.startsWith(realDir + path.sep)) {
-      continue;
-    }
-    const name = path.basename(realScriptPath).replace(/\.js$/, "");
-    return WORKFLOW_NAME_PATTERN.test(name) ? name : void 0;
-  }
-  return void 0;
-}
-__name(resolveSavedWorkflowNameForPath, "resolveSavedWorkflowNameForPath");
-async function listSavedWorkflows(config) {
-  const byName = /* @__PURE__ */ new Map();
-  for (const { dir, source } of [...getSavedWorkflowDirs(config)].reverse()) {
-    for (const file of await listJsFiles(dir)) {
-      const name = file.slice(0, -".js".length);
-      if (!WORKFLOW_NAME_PATTERN.test(name)) continue;
-      byName.set(name, { name, scriptPath: path.join(dir, file), source });
-    }
-  }
-  return Array.from(byName.values()).sort(
-    (a, b) => a.name.localeCompare(b.name)
-  );
-}
-__name(listSavedWorkflows, "listSavedWorkflows");
-async function resolveSavedWorkflowScript(nameOrRef, config) {
-  if (typeof nameOrRef === "object" && nameOrRef !== null) {
-    const scriptPath = nameOrRef.scriptPath;
-    if (typeof scriptPath !== "string" || scriptPath.length === 0) {
-      throw new Error(
-        "workflow() expects a workflow name (string) or {scriptPath: string}."
-      );
-    }
-    let script;
-    try {
-      script = await readWorkflowFileSecurely(scriptPath, config);
-    } catch (e) {
-      throw new Error(
-        `workflow({scriptPath: '${scriptPath}'}): ${e instanceof Error ? e.message : String(e)}`
-      );
-    }
-    const name2 = path.basename(scriptPath).replace(/\.js$/, "");
-    const savedWorkflowName = await resolveSavedWorkflowNameForPath(
-      scriptPath,
-      config
-    );
-    return {
-      name: name2,
-      scriptPath,
-      script,
-      ...savedWorkflowName ? { savedWorkflowName } : {}
-    };
-  }
-  if (typeof nameOrRef !== "string") {
-    throw new Error(
-      "workflow() expects a workflow name (string) or {scriptPath: string}."
-    );
-  }
-  const name = nameOrRef;
-  const nameError = validateWorkflowName(name);
-  if (nameError) {
-    throw new Error(`workflow('${name}'): ${nameError}`);
-  }
-  for (const { dir } of getSavedWorkflowDirs(config)) {
-    const scriptPath = path.join(dir, `${name}.js`);
-    try {
-      const script = await readWorkflowFileSecurely(scriptPath, config);
-      return { name, scriptPath, script, savedWorkflowName: name };
-    } catch {
-    }
-  }
-  const available = (await listSavedWorkflows(config)).map((e) => e.name);
-  throw new Error(
-    `workflow('${name}'): no workflow with that name. Available: ${available.length > 0 ? available.join(", ") : "(none)"}.`
-  );
-}
-__name(resolveSavedWorkflowScript, "resolveSavedWorkflowScript");
-async function saveWorkflowScript(config, opts) {
-  const { name, scope, script, overwrite = false } = opts;
-  const nameError = validateWorkflowName(name);
-  if (nameError) return { status: "invalid-name", error: nameError };
-  if (!script || script.trim().length === 0) {
-    return {
-      status: "empty-script",
-      error: "This run has no script source to save."
-    };
-  }
-  const dir = scope === "project" ? config.storage.getProjectWorkflowsDir() : Storage.getUserWorkflowsDir();
-  if (await isSymlinkedRoot(dir)) {
-    throw new Error(
-      `refusing to save into a symlinked saved-workflow directory: '${dir}'.`
-    );
-  }
-  const filePath = path.join(dir, `${name}.js`);
-  if (!overwrite) {
-    try {
-      await fs.access(filePath);
-      return { status: "exists", name, scope, path: filePath };
-    } catch {
-    }
-  }
-  await fs.mkdir(dir, { recursive: true });
-  await fs.writeFile(filePath, script, "utf8");
-  return { status: "saved", name, scope, path: filePath };
-}
-__name(saveWorkflowScript, "saveWorkflowScript");
-var INLINE_RUN_ID_PATTERN = /^wf_[0-9a-f]+$/;
-async function persistInlineWorkflowScript(config, runId, script) {
-  if (!INLINE_RUN_ID_PATTERN.test(runId)) {
-    debugLogger3.warn(`refusing to persist a script for run id: ${runId}`);
-    return null;
-  }
-  const storage = config.storage;
-  if (!storage) return null;
-  try {
-    const filePath = storage.getInlineWorkflowScriptPath(runId);
-    const dir = path.dirname(filePath);
-    if (await isSymlinkedRoot(storage.getGeneratedWorkflowsDir()) || await isSymlinkedRoot(dir)) {
-      debugLogger3.warn(
-        `refusing to persist an inline workflow script into a symlinked root: '${dir}'.`
-      );
-      return null;
-    }
-    await fs.mkdir(dir, { recursive: true });
-    await atomicWriteFile(filePath, script, {
-      encoding: "utf8",
-      mode: 384,
-      forceMode: true,
-      noFollow: true
-    });
-    return filePath;
-  } catch (error) {
-    debugLogger3.warn(
-      `failed to persist inline workflow script for ${runId}: ${error}`
-    );
-    return null;
-  }
-}
-__name(persistInlineWorkflowScript, "persistInlineWorkflowScript");
-async function deleteInlineWorkflowScript(config, runId) {
-  if (!INLINE_RUN_ID_PATTERN.test(runId)) return false;
-  const storage = config.storage;
-  if (!storage) return false;
-  try {
-    await fs.rm(storage.getInlineWorkflowScriptPath(runId), { force: true });
-    return true;
-  } catch (error) {
-    debugLogger3.warn(
-      `failed to delete inline workflow script for ${runId}: ${error}`
-    );
-    return false;
-  }
-}
-__name(deleteInlineWorkflowScript, "deleteInlineWorkflowScript");
-
-// packages/core/src/agents/runtime/workflow-orchestrator.ts
-init_esbuild_shims();
-import { randomBytes } from "node:crypto";
-import { AsyncLocalStorage } from "node:async_hooks";
-import * as os from "node:os";
-
-// packages/core/src/agents/runtime/workflow-agent-failure.ts
-init_esbuild_shims();
-var WorkflowAgentFailedError = class extends Error {
-  static {
-    __name(this, "WorkflowAgentFailedError");
-  }
-  name = "WorkflowAgentFailedError";
-  kind;
-  terminateMode;
-  constructor(message, kind, terminateMode) {
-    super(message);
-    this.kind = kind;
-    this.terminateMode = terminateMode;
-  }
-};
-function isWorkflowAgentFailedError(error) {
-  return typeof error === "object" && error !== null && error.name === "WorkflowAgentFailedError";
-}
-__name(isWorkflowAgentFailedError, "isWorkflowAgentFailedError");
-var WorkflowAgentCapExceededError = class extends Error {
-  static {
-    __name(this, "WorkflowAgentCapExceededError");
-  }
-  name = "WorkflowAgentCapExceededError";
-  constructor(maxAgents) {
-    super(
-      `Workflow exceeded the maximum of ${maxAgents} agent() calls per run.`
-    );
-  }
-};
-function isWorkflowRunLevelError(error) {
-  if (typeof error !== "object" || error === null) return false;
-  const name = error.name;
-  return name === "WorkflowBudgetExceededError" || name === "WorkflowAgentCapExceededError";
-}
-__name(isWorkflowRunLevelError, "isWorkflowRunLevelError");
-var WORKFLOW_ABORT_REASON_STALLED = "stalled";
-
-// packages/core/src/agents/runtime/workflow-stall.ts
-init_esbuild_shims();
-var DEFAULT_STALL_MS = 18e4;
-var MAX_STALL_ATTEMPTS = 3;
-var MAX_WORKFLOW_STALL_MS_ENV = "QWEN_CODE_WORKFLOW_STALL_SECONDS";
-function resolveStallMs(perCall, env = process.env) {
-  if (typeof perCall === "number" && Number.isFinite(perCall)) {
-    if (perCall === 0) return 0;
-    if (perCall > 0) return perCall;
-  }
-  const raw = env[MAX_WORKFLOW_STALL_MS_ENV];
-  const trimmed = raw?.trim();
-  if (trimmed) {
-    if (trimmed === "0") return 0;
-    const sec = parsePositiveIntegerEnv(trimmed, 0);
-    if (sec > 0) return sec * 1e3;
-  }
-  return DEFAULT_STALL_MS;
-}
-__name(resolveStallMs, "resolveStallMs");
-var debugLogger4 = createDebugLogger("WORKFLOW_STALL");
-function attachStallWatchdog(emitter, controller, stallMs) {
-  if (stallMs <= 0) {
-    return { stalled: /* @__PURE__ */ __name(() => false, "stalled"), dispose: /* @__PURE__ */ __name(() => {
-    }, "dispose") };
-  }
-  let inFlightTools = 0;
-  let fired = false;
-  let timer;
-  let disposed = false;
-  const clear = /* @__PURE__ */ __name(() => {
-    if (timer) {
-      clearTimeout(timer);
-      timer = void 0;
-    }
-  }, "clear");
-  const arm = /* @__PURE__ */ __name(() => {
-    clear();
-    if (disposed || fired) return;
-    if (inFlightTools > 0) return;
-    timer = setTimeout(() => {
-      if (disposed || fired) return;
-      fired = true;
-      debugLogger4.warn(
-        `[Workflow] agent dispatch stalled \u2014 no progress for ${stallMs}ms; aborting.`
-      );
-      try {
-        controller.abort(WORKFLOW_ABORT_REASON_STALLED);
-      } catch (e) {
-        debugLogger4.warn("stall watchdog abort threw:", e);
-      }
-    }, stallMs);
-    if (typeof timer.unref === "function") {
-      timer.unref();
-    }
-  }, "arm");
-  const onActivity = /* @__PURE__ */ __name(() => arm(), "onActivity");
-  const onToolCall = /* @__PURE__ */ __name(() => {
-    inFlightTools += 1;
-    clear();
-  }, "onToolCall");
-  const onToolResult = /* @__PURE__ */ __name(() => {
-    inFlightTools = Math.max(0, inFlightTools - 1);
-    arm();
-  }, "onToolResult");
-  emitter.on("round_start" /* ROUND_START */, onActivity);
-  emitter.on("round_end" /* ROUND_END */, onActivity);
-  emitter.on("stream_text" /* STREAM_TEXT */, onActivity);
-  emitter.on("usage_metadata" /* USAGE_METADATA */, onActivity);
-  emitter.on("tool_call" /* TOOL_CALL */, onToolCall);
-  emitter.on("tool_result" /* TOOL_RESULT */, onToolResult);
-  return {
-    stalled: /* @__PURE__ */ __name(() => fired, "stalled"),
-    dispose: /* @__PURE__ */ __name(() => {
-      if (disposed) return;
-      disposed = true;
-      clear();
-      emitter.off("round_start" /* ROUND_START */, onActivity);
-      emitter.off("round_end" /* ROUND_END */, onActivity);
-      emitter.off("stream_text" /* STREAM_TEXT */, onActivity);
-      emitter.off("usage_metadata" /* USAGE_METADATA */, onActivity);
-      emitter.off("tool_call" /* TOOL_CALL */, onToolCall);
-      emitter.off("tool_result" /* TOOL_RESULT */, onToolResult);
-    }, "dispose")
-  };
-}
-__name(attachStallWatchdog, "attachStallWatchdog");
-async function runStallResilient(attemptFn, opts) {
-  const { stallMs, signal, label } = opts;
-  if (stallMs <= 0) {
-    const emitter = new AgentEventEmitter();
-    return attemptFn(signal ?? new AbortController().signal, emitter);
-  }
-  let attempt = 0;
-  for (; ; ) {
-    attempt += 1;
-    const controller = new AbortController();
-    let onParentAbort;
-    if (signal) {
-      if (signal.aborted) {
-        controller.abort(signal.reason);
-      } else {
-        onParentAbort = /* @__PURE__ */ __name(() => controller.abort(signal.reason), "onParentAbort");
-        signal.addEventListener("abort", onParentAbort);
-      }
-    }
-    const emitter = new AgentEventEmitter();
-    const watchdog = attachStallWatchdog(emitter, controller, stallMs);
-    try {
-      return await attemptFn(controller.signal, emitter);
-    } catch (err) {
-      if (signal?.aborted) throw err;
-      if (watchdog.stalled() && attempt < MAX_STALL_ATTEMPTS) {
-        debugLogger4.warn(
-          `[Workflow] agent "${label ?? "workflow-agent"}" stalled (attempt ${attempt}/${MAX_STALL_ATTEMPTS}) \u2014 retrying.`
-        );
-        continue;
-      }
-      if (watchdog.stalled()) {
-        throw new WorkflowAgentFailedError(
-          `agent "${label ?? "workflow-agent"}" stalled on all ${MAX_STALL_ATTEMPTS} attempts (no progress for ${stallMs}ms each).`,
-          "stalled"
-        );
-      }
-      throw err;
-    } finally {
-      watchdog.dispose();
-      if (onParentAbort && signal) {
-        signal.removeEventListener("abort", onParentAbort);
-      }
-    }
-  }
-}
-__name(runStallResilient, "runStallResilient");
-
-// packages/core/src/agents/runtime/workflow-journal.ts
-init_esbuild_shims();
-import { createHash } from "node:crypto";
-import { constants, promises as fs2 } from "node:fs";
-import path2 from "node:path";
-var debugLogger5 = createDebugLogger("WORKFLOW_JOURNAL");
-var JOURNAL_KEY_VERSION = "v2";
-var DISPATCH_AFFECTING_AGENT_OPTS = [
-  "schema",
-  "model",
-  "effort",
-  "isolation",
-  "agentType",
-  "workingDir",
-  "disallowedTools"
-];
-function canonicalizeAgentOpts(opts) {
-  const projected = {};
-  for (const k of DISPATCH_AFFECTING_AGENT_OPTS) {
-    const v = opts[k];
-    if (v === void 0 || typeof v === "function") continue;
-    projected[k] = v;
-  }
-  const sortDeep = /* @__PURE__ */ __name((val) => {
-    if (typeof val === "function") return void 0;
-    if (Array.isArray(val)) return val.map(sortDeep);
-    if (val && typeof val === "object") {
-      const out = {};
-      for (const key of Object.keys(val).sort()) {
-        if (key === "__proto__") continue;
-        out[key] = sortDeep(val[key]);
-      }
-      return out;
-    }
-    return val;
-  }, "sortDeep");
-  try {
-    return JSON.stringify(sortDeep(projected));
-  } catch {
-    return "{}";
-  }
-}
-__name(canonicalizeAgentOpts, "canonicalizeAgentOpts");
-function deriveAgentKey(prefixHash, prompt, opts) {
-  const hash = createHash("sha256");
-  hash.update(prefixHash);
-  hash.update("\0");
-  hash.update(prompt);
-  hash.update("\0");
-  hash.update(canonicalizeAgentOpts(opts));
-  return `${JOURNAL_KEY_VERSION}:${hash.digest("hex")}`;
-}
-__name(deriveAgentKey, "deriveAgentKey");
-function deriveArgsSeed(args) {
-  const hash = createHash("sha256");
-  let serialized;
-  try {
-    serialized = JSON.stringify(args ?? null) ?? "null";
-  } catch {
-    serialized = "non-serializable-args";
-  }
-  hash.update(serialized);
-  return `${JOURNAL_KEY_VERSION}:${hash.digest("hex")}`;
-}
-__name(deriveArgsSeed, "deriveArgsSeed");
-function buildReplay(entries) {
-  const results = /* @__PURE__ */ new Map();
-  const started = /* @__PURE__ */ new Map();
-  const failed = /* @__PURE__ */ new Set();
-  for (const e of entries) {
-    if (e.type === "result") {
-      results.set(e.key, e);
-    } else if (e.type === "started") {
-      failed.delete(e.key);
-      const list = started.get(e.key);
-      if (list) list.push(e);
-      else started.set(e.key, [e]);
-    } else if (e.type === "failed") {
-      failed.add(e.key);
-    }
-  }
-  return { results, started, failed };
-}
-__name(buildReplay, "buildReplay");
-var WorkflowJournal = class {
-  constructor(journalPath, root = path2.dirname(path2.dirname(journalPath))) {
-    this.root = root;
-    this.path = journalPath;
-  }
-  static {
-    __name(this, "WorkflowJournal");
-  }
-  pending = Promise.resolve();
-  path;
-  async hasSymlinkedPath() {
-    if (await isSymlinkedRoot(this.root) || await isSymlinkedRoot(path2.dirname(this.path))) {
-      return true;
-    }
-    return fs2.lstat(this.path).then((stat) => stat.isSymbolicLink()).catch(() => false);
-  }
-  /** Ensure the advertised journal path exists without affecting the run. */
-  async ensureExists() {
-    try {
-      if (await this.hasSymlinkedPath()) return false;
-      await fs2.mkdir(path2.dirname(this.path), { recursive: true });
-      if (await this.hasSymlinkedPath()) return false;
-      const noFollow = process.platform === "win32" ? 0 : constants.O_NOFOLLOW;
-      const file = await fs2.open(
-        this.path,
-        constants.O_APPEND | constants.O_CREAT | constants.O_WRONLY | noFollow,
-        384
-      );
-      try {
-        await file.chmod(384);
-      } finally {
-        await file.close();
-      }
-      return true;
-    } catch (error) {
-      debugLogger5.warn(
-        `WorkflowJournal.ensureExists failed for ${this.path}: ${error}`
-      );
-      return false;
-    }
-  }
-  /** Remove a never-registered run's journal file, best-effort. */
-  async remove() {
-    try {
-      if (await this.hasSymlinkedPath()) return;
-      await fs2.rm(this.path, { force: true });
-      await fs2.rmdir(path2.dirname(this.path)).catch((error) => {
-        const code = error.code;
-        if (code !== "ENOENT" && code !== "ENOTEMPTY") throw error;
-      });
-    } catch (error) {
-      debugLogger5.warn(
-        `WorkflowJournal.remove failed for ${this.path}: ${error}`
-      );
-    }
-  }
-  /** Load + parse all entries into replay maps. Empty maps if no file. */
-  async load() {
-    try {
-      const entries = await read(this.path);
-      return buildReplay(entries);
-    } catch (e) {
-      debugLogger5.warn(`WorkflowJournal.load failed for ${this.path}: ${e}`);
-      return { results: /* @__PURE__ */ new Map(), started: /* @__PURE__ */ new Map(), failed: /* @__PURE__ */ new Set() };
-    }
-  }
-  /** Append one entry. Rejects only on I/O error (callers `.catch`). */
-  append(entry) {
-    const operation = this.pending.then(() => writeLine(this.path, entry));
-    this.pending = operation.catch(() => void 0);
-    return operation;
-  }
-  /** Wait until every append issued so far has settled. */
-  drain() {
-    return this.pending;
-  }
-};
-
-// packages/core/src/agents/runtime/workflow-prompts.ts
-init_esbuild_shims();
-var WORKFLOW_SUBAGENT_SYSTEM_PROMPT = 'You are a subagent spawned by a workflow orchestration script. Use the tools available to complete the task.\nCRITICAL: Your final text response is returned **verbatim** as a string to the calling script \u2014 it is your return value, not a message to a human.\n- Output the literal result (data, JSON, text). Do NOT output confirmations like "Done." or "Sent."\n- If asked for JSON, return ONLY the raw JSON \u2014 no code fences, no prose, no markdown.\n- Do NOT use SendUserMessage to deliver your answer. Put your answer in your final text response.\n- Be concise. The script will parse your output.';
-var WORKFLOW_SUBAGENT_SYSTEM_PROMPT_WITH_SCHEMA = "You are a subagent spawned by a workflow orchestration script. Use the tools available to complete the task.\nCRITICAL: You MUST deliver your final answer by calling the `structured_output` tool with arguments that conform to its parameter schema. Plain-text final answers are DISCARDED \u2014 only a valid `structured_output` call returns a result to the calling script.\n- Use other tools (Read, Grep, etc.) to gather information first.\n- When ready, call `structured_output` ONCE with the conforming JSON object.\n- If validation fails, the error tells you what to fix. Try again with corrected fields.\n- After two failed attempts, the run terminates \u2014 get the arguments right.\n- Do NOT use SendUserMessage to deliver your answer.\n- Be concise; the script reads only the structured payload, not your prose.";
-
-// packages/core/src/agents/runtime/workflow-dispatch-scheduler.ts
-init_esbuild_shims();
-function abortError() {
-  return new DOMException("Workflow dispatch scheduler aborted.", "AbortError");
-}
-__name(abortError, "abortError");
-var WorkflowDispatchScheduler = class {
-  constructor(limit, signal, onStateChange) {
-    this.limit = limit;
-    this.signal = signal;
-    if (!Number.isInteger(limit) || limit < 1) {
-      throw new Error(
-        `Workflow dispatch limit must be a positive integer, got ${String(limit)}.`
-      );
-    }
-    if (onStateChange) this.stateListeners.add(onStateChange);
-    if (signal && !signal.aborted) {
-      signal.addEventListener("abort", () => this.abortPending(), {
-        once: true
-      });
-    }
-  }
-  static {
-    __name(this, "WorkflowDispatchScheduler");
-  }
-  state = "running";
-  inFlight = 0;
-  queue = [];
-  gateWaiters = [];
-  stateListeners = /* @__PURE__ */ new Set();
-  /**
-   * Subscribe to state transitions. Returns an unsubscribe function.
-   * The constructor callback (when given) is registered as the first
-   * listener; this method lets additional observers — e.g. the sandbox's
-   * pause-aware wall-clock watchdog — hook the same transitions.
-   */
-  onStateChange(listener) {
-    this.stateListeners.add(listener);
-    return () => {
-      this.stateListeners.delete(listener);
-    };
-  }
-  run(thunk) {
-    return new Promise((resolve2, reject) => {
-      if (this.signal?.aborted) {
-        reject(abortError());
-        return;
-      }
-      this.queue.push({
-        thunk,
-        resolve: resolve2,
-        reject
-      });
-      this.pump();
-    });
-  }
-  pause() {
-    if (this.state !== "running" || this.signal?.aborted) return false;
-    this.setState("pausing");
-    if (this.inFlight === 0) this.setState("paused");
-    return true;
-  }
-  resume() {
-    if (this.state !== "paused" || this.signal?.aborted) return false;
-    this.setState("running");
-    while (this.gateWaiters.length > 0) {
-      this.gateWaiters.shift().resolve();
-    }
-    this.pump();
-    return true;
-  }
-  waitUntilRunning() {
-    if (this.signal?.aborted) return Promise.reject(abortError());
-    if (this.state === "running") return Promise.resolve();
-    return new Promise((resolve2, reject) => {
-      this.gateWaiters.push({ resolve: resolve2, reject });
-    });
-  }
-  snapshot() {
-    return {
-      state: this.state,
-      queued: this.queue.length,
-      inFlight: this.inFlight
-    };
-  }
-  pump() {
-    while (this.state === "running" && this.inFlight < this.limit && this.queue.length > 0) {
-      const job = this.queue.shift();
-      if (this.signal?.aborted) {
-        job.reject(abortError());
-        continue;
-      }
-      this.inFlight++;
-      Promise.resolve().then(job.thunk).then(job.resolve, job.reject).finally(() => {
-        this.inFlight--;
-        if (this.state === "pausing" && this.inFlight === 0) {
-          this.setState("paused");
-        }
-        this.pump();
-      });
-    }
-  }
-  setState(state) {
-    if (this.state === state) return;
-    this.state = state;
-    const snapshot = this.snapshot();
-    for (const listener of [...this.stateListeners]) listener(snapshot);
-  }
-  abortPending() {
-    const error = abortError();
-    while (this.queue.length > 0) this.queue.shift().reject(error);
-    while (this.gateWaiters.length > 0) {
-      this.gateWaiters.shift().reject(error);
-    }
-  }
-};
-
-// packages/core/src/agents/runtime/workflow-orchestrator.ts
-var DEFAULT_MAX_AGENTS_PER_RUN = 1e3;
-var MAX_WORKFLOW_AGENTS_ENV = "QWEN_CODE_MAX_WORKFLOW_AGENTS";
-var HARD_MAX_AGENTS_PER_RUN_CEILING = 1e4;
-function resolveMaxAgentsPerRun(env = process.env) {
-  const raw = env[MAX_WORKFLOW_AGENTS_ENV];
-  if (raw === void 0 || raw.trim() === "") {
-    return DEFAULT_MAX_AGENTS_PER_RUN;
-  }
-  const parsed = parsePositiveIntegerEnv(raw, 0);
-  if (parsed < 1) {
-    debugLogger.warn(
-      `Invalid ${MAX_WORKFLOW_AGENTS_ENV}=${JSON.stringify(raw)}, using default (${DEFAULT_MAX_AGENTS_PER_RUN})`
-    );
-    return DEFAULT_MAX_AGENTS_PER_RUN;
-  }
-  if (parsed > HARD_MAX_AGENTS_PER_RUN_CEILING) {
-    debugLogger.warn(
-      `${MAX_WORKFLOW_AGENTS_ENV}=${parsed} exceeds hard ceiling (${HARD_MAX_AGENTS_PER_RUN_CEILING}); clamping.`
-    );
-    return HARD_MAX_AGENTS_PER_RUN_CEILING;
-  }
-  return parsed;
-}
-__name(resolveMaxAgentsPerRun, "resolveMaxAgentsPerRun");
-var MAX_WORKFLOW_CONCURRENCY_ENV = "QWEN_CODE_MAX_WORKFLOW_CONCURRENCY";
-var HARD_MAX_CONCURRENCY_CEILING = 64;
-function resolveConcurrencyLimit(env = process.env, availableParallelism2 = os.availableParallelism) {
-  const raw = env[MAX_WORKFLOW_CONCURRENCY_ENV];
-  if (raw !== void 0 && raw.trim() !== "") {
-    const parsed = parsePositiveIntegerEnv(raw, 0);
-    if (parsed >= 1) {
-      if (parsed > HARD_MAX_CONCURRENCY_CEILING) {
-        debugLogger.warn(
-          `${MAX_WORKFLOW_CONCURRENCY_ENV}=${parsed} exceeds hard ceiling (${HARD_MAX_CONCURRENCY_CEILING}); clamping.`
-        );
-        return HARD_MAX_CONCURRENCY_CEILING;
-      }
-      return parsed;
-    }
-    debugLogger.warn(
-      `Invalid ${MAX_WORKFLOW_CONCURRENCY_ENV}=${JSON.stringify(raw)}, using cpu-derived default`
-    );
-  }
-  return Math.max(2, Math.min(16, availableParallelism2() - 2));
-}
-__name(resolveConcurrencyLimit, "resolveConcurrencyLimit");
-var DEFAULT_WORKFLOW_SUBAGENT_MAX_TURNS = 50;
-var DEFAULT_WORKFLOW_SUBAGENT_MAX_TIME_MINUTES = 10;
-var WORKFLOW_SUBAGENT_MAX_TURNS_ENV = "QWEN_CODE_WORKFLOW_AGENT_MAX_TURNS";
-var WORKFLOW_SUBAGENT_MAX_MINUTES_ENV = "QWEN_CODE_WORKFLOW_AGENT_MAX_MINUTES";
-var HARD_WORKFLOW_SUBAGENT_MAX_TURNS_CEILING = 500;
-var HARD_WORKFLOW_SUBAGENT_MAX_MINUTES_CEILING = 100;
-function resolveSubagentBound(envName, defaultValue, ceiling, env) {
-  const raw = env[envName];
-  if (raw === void 0 || raw.trim() === "") return defaultValue;
-  const parsed = parsePositiveIntegerEnv(raw, 0);
-  if (parsed < 1) {
-    debugLogger.warn(
-      `Invalid ${envName}=${JSON.stringify(raw)}, using default (${defaultValue})`
-    );
-    return defaultValue;
-  }
-  if (parsed > ceiling) {
-    debugLogger.warn(
-      `${envName}=${parsed} exceeds hard ceiling (${ceiling}); clamping.`
-    );
-    return ceiling;
-  }
-  return parsed;
-}
-__name(resolveSubagentBound, "resolveSubagentBound");
-function resolveSubagentMaxTurns(env = process.env, defaultValue = DEFAULT_WORKFLOW_SUBAGENT_MAX_TURNS) {
-  return resolveSubagentBound(
-    WORKFLOW_SUBAGENT_MAX_TURNS_ENV,
-    defaultValue,
-    HARD_WORKFLOW_SUBAGENT_MAX_TURNS_CEILING,
-    env
-  );
-}
-__name(resolveSubagentMaxTurns, "resolveSubagentMaxTurns");
-function resolveSubagentMaxTimeMinutes(env = process.env, defaultValue = DEFAULT_WORKFLOW_SUBAGENT_MAX_TIME_MINUTES) {
-  return resolveSubagentBound(
-    WORKFLOW_SUBAGENT_MAX_MINUTES_ENV,
-    defaultValue,
-    HARD_WORKFLOW_SUBAGENT_MAX_MINUTES_CEILING,
-    env
-  );
-}
-__name(resolveSubagentMaxTimeMinutes, "resolveSubagentMaxTimeMinutes");
-var WORKFLOW_SUBAGENT_DISALLOWED_TOOLS = [
-  ToolNames.ASK_USER_QUESTION,
-  ToolNames.SEND_MESSAGE,
-  ToolNames.MONITOR,
-  ...SUBAGENT_PLAN_LIFECYCLE_TOOLS,
-  // AgentTool: workflow subagents must not spawn sub-agents even where
-  // maxSubagentDepth would permit nesting — a leaf-spawned agent would run
-  // outside the orchestrator's concurrency cap, agent counter, and token
-  // budget, and its result would bypass the script's return-value contract.
-  // The WorkflowTool itself is already excluded from every subagent; this
-  // closes the same loop for plain `agent` calls (review #6189).
-  ToolNames.AGENT
-];
-var WorkflowExecutionError = class extends Error {
-  constructor(message, phases, logs, meta = null) {
-    super(message);
-    this.phases = phases;
-    this.logs = logs;
-    this.meta = meta;
-  }
-  static {
-    __name(this, "WorkflowExecutionError");
-  }
-  name = "WorkflowExecutionError";
-};
-function generateRunId() {
-  return `wf_${randomBytes(8).toString("hex")}`;
-}
-__name(generateRunId, "generateRunId");
-function sanitizeForErrorMessage(value) {
-  return stripAnsiAndControl(value);
-}
-__name(sanitizeForErrorMessage, "sanitizeForErrorMessage");
-function createProductionDispatch(config, signal, onTokens, bridgeApprovalEvents, subagentBounds) {
-  return async (prompt, opts, dispatchId) => {
-    if (typeof prompt !== "string" || prompt.length === 0) {
-      throw new Error("agent() requires a non-empty string prompt.");
-    }
-    const stallMs = resolveStallMs(
-      typeof opts.stallMs === "number" ? opts.stallMs : void 0
-    );
-    const workflowAgentId = `workflow-agent-${randomBytes(8).toString("hex")}`;
-    const agentIdentity = await resolveWorkflowAgentIdentity(config, opts);
-    if (agentIdentity.resolvedAgentType?.executor !== void 0) {
-      throw new Error(
-        "Workflow agent() does not support external-executor agents: token budgets, schema output, and workflow tool restrictions cannot be enforced. Use an in-process agent definition instead."
-      );
-    }
-    let attempt = 0;
-    return runStallResilient(
-      async (attemptSignal, emitter) => {
-        attempt += 1;
-        const cleanupApprovalBridge = bridgeApprovalEvents?.(
-          emitter,
-          dispatchId
-        );
-        const cleanupTranscript = attachDispatchTranscript(
-          config,
-          workflowAgentId,
-          prompt,
-          agentIdentity.name,
-          emitter,
-          attempt
-        );
-        try {
-          return await runSingleDispatch(
-            config,
-            prompt,
-            opts,
-            attemptSignal,
-            emitter,
-            workflowAgentId,
-            agentIdentity,
-            onTokens,
-            subagentBounds
-          );
-        } finally {
-          cleanupTranscript();
-          cleanupApprovalBridge?.();
-        }
-      },
-      {
-        stallMs,
-        signal,
-        // The name can carry a model-authored agentType spelling — keep
-        // the stall log / abandoned error single-line the same way the
-        // "not found" throw site sanitizes it.
-        label: sanitizeForErrorMessage(agentIdentity.name)
-      }
-    );
-  };
-}
-__name(createProductionDispatch, "createProductionDispatch");
-async function resolveWorkflowAgentIdentity(config, opts) {
-  if (opts.agentType) {
-    const resolved = await config.getSubagentManager().findSubagentByName(opts.agentType);
-    if (resolved) {
-      return { name: resolved.name, resolvedAgentType: resolved };
-    }
-  }
-  if (typeof opts.label === "string" && opts.label) {
-    return { name: opts.label };
-  }
-  return { name: opts.agentType || "workflow-agent" };
-}
-__name(resolveWorkflowAgentIdentity, "resolveWorkflowAgentIdentity");
-function attachDispatchTranscript(config, agentId, prompt, agentName, emitter, attempt) {
-  const append = attempt > 1;
-  try {
-    const { jsonlPath, options } = buildAgentTranscriptAttach(config, agentId, {
-      agentName,
-      // The prompt the SCRIPT dispatched, seeded as the transcript's first
-      // user record — the same shape AgentTool writes, so a reader that
-      // recovers a launch prompt from a transcript needs no workflow-
-      // specific branch. A retry re-uses the first attempt's record rather
-      // than seeding a second one.
-      initialUserPrompt: append ? void 0 : prompt,
-      appendToExisting: append,
-      retryAttempt: append ? attempt : void 0
-    });
-    return attachJsonlTranscriptWriter(emitter, jsonlPath, options).cleanup;
-  } catch (error) {
-    debugLogger.warn(
-      `[Workflow] failed to attach transcript for ${agentId}: ${error}`
-    );
-    return () => {
-    };
-  }
-}
-__name(attachDispatchTranscript, "attachDispatchTranscript");
-function terminalDispatchError(workflowAgentId, mode) {
-  const message = `Workflow subagent ${workflowAgentId} did not complete (terminate mode: ${mode}).`;
-  switch (mode) {
-    case "MAX_TURNS" /* MAX_TURNS */:
-      return new WorkflowAgentFailedError(message, "max_turns", mode);
-    case "TIMEOUT" /* TIMEOUT */:
-      return new WorkflowAgentFailedError(message, "timeout", mode);
-    case "ERROR" /* ERROR */:
-      return new WorkflowAgentFailedError(message, "error", mode);
-    default:
-      return new Error(message);
-  }
-}
-__name(terminalDispatchError, "terminalDispatchError");
-async function runSingleDispatch(config, prompt, opts, attemptSignal, emitter, workflowAgentId, agentIdentity, onTokens, subagentBounds) {
-  const { AgentHeadless, ContextState } = await import("./agent-headless-2JPJKYHK.js");
-  const ctx = new ContextState();
-  ctx.set("task_prompt", prompt);
-  debugLogger.debug(`[workflow] Dispatch ${workflowAgentId}`);
-  if (DISPATCH_AFFECTING_AGENT_OPTS.every((key) => opts[key] === void 0)) {
-    const subagent = await AgentHeadless.create(
-      agentIdentity.name,
-      config,
-      {
-        systemPrompt: WORKFLOW_SUBAGENT_SYSTEM_PROMPT
-      },
-      {},
-      // T11 (PR #4732 R1): bound resource ceiling so a single agent() call
-      // cannot loop the model indefinitely. Without this, runConfig was {}
-      // and the loop guards never tripped — combined with the cancellation
-      // bug below, workflows were effectively unkillable.
-      subagentBounds ?? {
-        max_turns: resolveSubagentMaxTurns(),
-        max_time_minutes: resolveSubagentMaxTimeMinutes()
-      },
-      // T11 (PR #4732 R1): disallow SendMessage / ExitPlanMode to align with
-      // upstream Tg8 — closes the back-channel that would let a subagent
-      // deliver its answer via user message instead of the script's read.
-      { tools: ["*"], disallowedTools: WORKFLOW_SUBAGENT_DISALLOWED_TOOLS },
-      // P-stall: the stall-watchdog emitter observes reasoning-loop events
-      // (round/tool/usage) to detect a hang and abort `attemptSignal`.
-      emitter,
-      void 0,
-      void 0,
-      prompt,
-      workflowAgentId
-    );
-    try {
-      await runWithAgentContext(
-        workflowAgentId,
-        () => subagent.execute(ctx, attemptSignal)
-      );
-    } finally {
-      reportTokens(subagent, opts, onTokens);
-    }
-    const mode = subagent.getTerminateMode();
-    if (mode !== "GOAL" /* GOAL */) {
-      throw terminalDispatchError(workflowAgentId, mode);
-    }
-    return toModelVisibleSubagentResult(subagent.getFinalText(), mode);
-  }
-  return runOverridePath(
-    config,
-    ctx,
-    opts,
-    attemptSignal,
-    workflowAgentId,
-    agentIdentity,
-    onTokens,
-    emitter,
-    subagentBounds
-  );
-}
-__name(runSingleDispatch, "runSingleDispatch");
-function reportTokens(subagent, opts, onTokens) {
-  if (!onTokens) return;
-  try {
-    const summary = subagent.getExecutionSummary();
-    onTokens(summary.outputTokens, opts);
-  } catch (e) {
-    debugLogger.warn("onTokens callback threw:", e);
-  }
-}
-__name(reportTokens, "reportTokens");
-function resolveDispatchEffort(raw) {
-  if (raw === void 0) return void 0;
-  const tier = typeof raw === "string" ? normalizeReasoningEffort(raw) : void 0;
-  if (tier === void 0) {
-    throw new Error(
-      `agent({effort}): unknown effort tier ${sanitizeForErrorMessage(
-        JSON.stringify(raw) ?? String(raw)
-      )}. Known tiers are: ${REASONING_EFFORT_TIERS.join(", ")}.`
-    );
-  }
-  return tier;
-}
-__name(resolveDispatchEffort, "resolveDispatchEffort");
-function resolveDispatchDenies(raw) {
-  if (raw === void 0) return [];
-  if (!Array.isArray(raw) || raw.some(
-    (name) => typeof name !== "string" || name.length === 0 || name !== name.trim()
-  )) {
-    throw new Error(
-      "agent({disallowedTools}): must be an array of non-empty tool-name strings without surrounding whitespace, e.g. ['run_shell_command', 'write_file']."
-    );
-  }
-  return raw.map((name) => resolveBuiltinToolName(name) ?? name);
-}
-__name(resolveDispatchDenies, "resolveDispatchDenies");
-async function runOverridePath(config, ctx, opts, signal, workflowAgentId, agentIdentity, onTokens, emitter, subagentBounds) {
-  if (opts.isolation === "remote") {
-    throw new Error(
-      "agent({isolation:'remote'}) is not available in this build."
-    );
-  }
-  const effort = resolveDispatchEffort(opts.effort);
-  const requestedDenies = resolveDispatchDenies(opts.disallowedTools);
-  const subagentMgr = config.getSubagentManager();
-  let baseConfig;
-  if (opts.agentType !== void 0) {
-    const resolved = agentIdentity.resolvedAgentType;
-    if (!resolved) {
-      const safeAgentType = sanitizeForErrorMessage(opts.agentType);
-      throw new Error(
-        `agent({agentType}): agent type '${safeAgentType}' not found.`
-      );
-    }
-    baseConfig = resolved;
-  } else {
-    baseConfig = {
-      name: agentIdentity.name,
-      description: "Default workflow subagent (per-call overrides).",
-      systemPrompt: WORKFLOW_SUBAGENT_SYSTEM_PROMPT,
-      level: "session",
-      isBuiltin: false
-    };
-  }
-  let schemaSystemPrompt;
-  if (opts.schema !== void 0) {
-    schemaSystemPrompt = opts.agentType !== void 0 && baseConfig.systemPrompt ? `${baseConfig.systemPrompt}
-
-${WORKFLOW_SUBAGENT_SYSTEM_PROMPT_WITH_SCHEMA}` : WORKFLOW_SUBAGENT_SYSTEM_PROMPT_WITH_SCHEMA;
-  }
-  let schemaTools;
-  if (opts.schema !== void 0 && baseConfig.tools && baseConfig.tools.length > 0 && !baseConfig.tools.includes("*") && !baseConfig.tools.includes(ToolNames.STRUCTURED_OUTPUT)) {
-    schemaTools = [...baseConfig.tools, ToolNames.STRUCTURED_OUTPUT];
-  }
-  const augmented = {
-    ...baseConfig,
-    ...opts.model !== void 0 ? { model: opts.model } : {},
-    ...schemaSystemPrompt !== void 0 ? { systemPrompt: schemaSystemPrompt } : {},
-    ...schemaTools !== void 0 ? { tools: schemaTools } : {},
-    disallowedTools: Array.from(
-      /* @__PURE__ */ new Set([
-        ...baseConfig.disallowedTools ?? [],
-        ...WORKFLOW_SUBAGENT_DISALLOWED_TOOLS,
-        ...requestedDenies
-      ])
-    )
-  };
-  if (requestedDenies.length > 0) {
-    const unmatched = await subagentMgr.findUnmatchedToolNames(requestedDenies);
-    if (unmatched.length > 0) {
-      throw new Error(
-        `agent({disallowedTools}): ${sanitizeForErrorMessage(
-          unmatched.map((name) => JSON.stringify(name)).join(", ")
-        )} ${unmatched.length === 1 ? "matches" : "match"} no tool. Use a tool name (run_shell_command, write_file, edit), a display name (Shell, WriteFile, Edit), or an MCP pattern (mcp__<server>, mcp__<server>__*, mcp__<server>__<tool>).`
-      );
-    }
-  }
-  if (opts.schema !== void 0 && [...baseConfig.disallowedTools ?? [], ...requestedDenies].some(
-    (name) => (resolveBuiltinToolName(name) ?? name) === ToolNames.STRUCTURED_OUTPUT
-  )) {
-    throw new Error(
-      "agent({schema, disallowedTools}): schema mode needs the structured_output tool, but disallowedTools deny it (from this call or from the agent type)."
-    );
-  }
-  let worktreeIsolation = null;
-  let effectiveContext = config;
-  let approvalCleanup;
-  if (opts.isolation !== void 0 && opts.workingDir !== void 0) {
-    throw new Error(
-      "agent({workingDir, isolation}): incompatible options. workingDir pins the agent to a worktree you already own; isolation creates a fresh one and removes it afterwards. Pass one."
-    );
-  }
-  if (opts.isolation === "worktree") {
-    worktreeIsolation = await provisionWorkflowWorktree(config);
-    effectiveContext = deriveWorktreeConfig(config, worktreeIsolation.path, {
-      customIgnoreFiles: config.getFileFilteringOptions().customIgnoreFiles
-    });
-    installSessionWorkflowRevisionWriteThrough(effectiveContext, config);
-  } else if (opts.workingDir !== void 0) {
-    if (typeof opts.workingDir !== "string" || opts.workingDir.trim().length === 0) {
-      throw new Error(
-        "agent({workingDir}): must be a non-empty string naming an existing git worktree of this repository."
-      );
-    }
-    const resolved = await resolveExternalWorktreeDir(
-      config,
-      opts.workingDir,
-      "workingDir"
-    );
-    if ("error" in resolved) {
-      throw new Error(
-        `agent({workingDir: ${sanitizeForErrorMessage(JSON.stringify(opts.workingDir))}}): ${sanitizeForErrorMessage(resolved.error)}`
-      );
-    }
-    effectiveContext = deriveWorktreeConfig(config, resolved.path, {
-      customIgnoreFiles: config.getFileFilteringOptions().customIgnoreFiles
-    });
-    installSessionWorkflowRevisionWriteThrough(effectiveContext, config);
-  }
-  if (effectiveContext !== config) {
-    const approvalHandle = deriveApprovalModeConfig(
-      effectiveContext,
-      config.getApprovalMode()
-    );
-    approvalCleanup = approvalHandle.cleanup;
-    effectiveContext = approvalHandle.config;
-  }
-  let onParentAbort;
-  try {
-    let schemaState = null;
-    if (opts.schema !== void 0) {
-      effectiveContext = await createSchemaConfigOverride(
-        effectiveContext,
-        opts.schema
-      );
-      schemaState = createSchemaModeState();
-    }
-    let dispatchSignal = signal;
-    if (schemaState) {
-      const child = new AbortController();
-      if (signal) {
-        if (signal.aborted) {
-          child.abort(signal.reason);
-        } else {
-          onParentAbort = /* @__PURE__ */ __name(() => child.abort(signal.reason), "onParentAbort");
-          signal.addEventListener("abort", onParentAbort);
-        }
-      }
-      schemaState.abortController = child;
-      dispatchSignal = child.signal;
-    }
-    const eventEmitter = emitter ?? (schemaState ? new AgentEventEmitter() : void 0);
-    if (schemaState && eventEmitter) {
-      attachSchemaListeners(eventEmitter, schemaState);
-    }
-    const { subagent, dispose } = await subagentMgr.createAgentHeadless(
-      augmented,
-      effectiveContext,
-      {
-        // Workflow always bounds resource ceiling regardless of agentType's
-        // own runConfig / maxTurns — these are workflow-level safety bounds,
-        // not subagent-level preferences. P5 will refine via budget.
-        runConfigOverrides: subagentBounds ?? {
-          max_turns: resolveSubagentMaxTurns(),
-          max_time_minutes: resolveSubagentMaxTimeMinutes()
-        },
-        ...effort !== void 0 ? { modelConfigOverrides: { reasoningEffort: effort } } : {},
-        eventEmitter,
-        taskName: String(ctx.get("task_prompt")),
-        subagentId: workflowAgentId
-      }
-    );
-    try {
-      try {
-        await runWithAgentContext(
-          workflowAgentId,
-          () => subagent.execute(ctx, dispatchSignal)
-        );
-      } finally {
-        reportTokens(subagent, opts, onTokens);
-      }
-      if (schemaState) {
-        if (schemaState.result !== null) {
-          if (worktreeIsolation) {
-            const isolation = worktreeIsolation;
-            worktreeIsolation = null;
-            const preserved = await cleanupWorkflowWorktree(isolation);
-            if (preserved) {
-              debugLogger.info(
-                `[Workflow] Schema-mode subagent preserved worktree at ${preserved.path ?? "(directory removed)"} on branch ${preserved.branch}. The structured payload is returned verbatim; recover the work from the preserved path / branch.`
-              );
-            }
-          }
-          return schemaState.result;
-        }
-        if (signal?.aborted) {
-          throw new DOMException("Workflow aborted.", "AbortError");
-        }
-        const mode2 = subagent.getTerminateMode();
-        if (mode2 !== "GOAL" /* GOAL */ && mode2 !== "CANCELLED" /* CANCELLED */) {
-          throw terminalDispatchError(workflowAgentId, mode2);
-        }
-        if (schemaState.attempts > 2) {
-          throw new WorkflowAgentFailedError(
-            "subagent completed without calling StructuredOutput (after 2 in-conversation nudges).",
-            "no_structured_output"
-          );
-        }
-        throw new WorkflowAgentFailedError(
-          "subagent completed without calling structured_output (no validation attempt \u2014 model produced plain-text content).",
-          "no_structured_output"
-        );
-      }
-      const mode = subagent.getTerminateMode();
-      if (mode !== "GOAL" /* GOAL */) {
-        throw terminalDispatchError(workflowAgentId, mode);
-      }
-      let finalText = toModelVisibleSubagentResult(
-        subagent.getFinalText(),
-        mode
-      );
-      if (worktreeIsolation) {
-        const isolation = worktreeIsolation;
-        worktreeIsolation = null;
-        const preserved = await cleanupWorkflowWorktree(isolation);
-        if (preserved && typeof finalText === "string") {
-          finalText = appendWorktreePreservedSuffix(finalText, preserved);
-        }
-      }
-      return finalText;
-    } finally {
-      await dispose();
-    }
-  } finally {
-    if (onParentAbort && signal) {
-      signal.removeEventListener("abort", onParentAbort);
-    }
-    approvalCleanup?.();
-    if (worktreeIsolation) {
-      try {
-        await cleanupWorkflowWorktree(worktreeIsolation);
-      } catch (error) {
-        debugLogger.warn(
-          `Workflow worktree cleanup in fallback finally failed for ${worktreeIsolation.path}: ${error instanceof Error ? error.message : String(error)}`
-        );
-      }
-    }
-  }
-}
-__name(runOverridePath, "runOverridePath");
-async function provisionWorkflowWorktree(config) {
-  const cwd = config.getTargetDir();
-  if (/\.qwen[\\/]worktrees[\\/]/.test(cwd)) {
-    throw new Error(
-      `agent({isolation:'worktree'}): parent is already inside a worktree (${cwd}). Nested isolation worktrees are not supported \u2014 the subagent's inherited paths would still reference the outer worktree.`
-    );
-  }
-  const probe = new GitWorktreeService(cwd);
-  const gitCheck = await probe.checkGitAvailable();
-  if (!gitCheck.available) {
-    throw new Error(
-      `agent({isolation:'worktree'}): ${gitCheck.error ?? "git is not available"}.`
-    );
-  }
-  if (!await probe.isGitRepository()) {
-    throw new Error(
-      `agent({isolation:'worktree'}): ${cwd} is not a git repository.`
-    );
-  }
-  const projectRoot = await probe.getRepoTopLevel() ?? cwd;
-  const wtService = projectRoot === cwd ? probe : new GitWorktreeService(projectRoot);
-  let parentDirty = false;
-  try {
-    parentDirty = await wtService.hasWorktreeChanges(projectRoot);
-  } catch (error) {
-    debugLogger.warn(
-      `[Workflow] hasWorktreeChanges failed at ${projectRoot}: ${error}`
-    );
-    parentDirty = true;
-  }
-  if (parentDirty) {
-    throw new Error(
-      `agent({isolation:'worktree'}): parent working tree at ${projectRoot} has uncommitted changes that would not propagate into the isolated worktree. The subagent would see the prior HEAD instead of the current state. Commit or stash the changes, then re-run.`
-    );
-  }
-  const slug = generateAgentWorktreeSlug();
-  let parentBranch;
-  try {
-    parentBranch = await wtService.getCurrentBranch();
-  } catch (error) {
-    debugLogger.warn(
-      `[Workflow] getCurrentBranch failed at ${projectRoot}: ${error}`
-    );
-  }
-  const created = await wtService.createUserWorktree(slug, parentBranch, {
-    symlinkDirectories: config.getWorktreeSymlinkDirectories()
-  });
-  if (!created.success || !created.worktree) {
-    throw new Error(
-      `agent({isolation:'worktree'}): failed to create worktree: ${created.error ?? "unknown error"}.`
-    );
-  }
-  try {
-    await writeWorktreeSessionMarker(
-      created.worktree.path,
-      config.getSessionId()
-    );
-  } catch (error) {
-    debugLogger.warn(
-      `[Workflow] failed to write session marker at ${created.worktree.path}: ${error}`
-    );
-  }
-  return {
-    slug,
-    path: created.worktree.path,
-    branch: created.worktree.branch,
-    repoRoot: projectRoot
-  };
-}
-__name(provisionWorkflowWorktree, "provisionWorkflowWorktree");
-async function cleanupWorkflowWorktree(isolation) {
-  const wtService = new GitWorktreeService(isolation.repoRoot);
-  const [hasChanges, hasUnmerged] = await Promise.all([
-    wtService.hasWorktreeChanges(isolation.path).catch((error) => {
-      debugLogger.warn(
-        `[Workflow] hasWorktreeChanges failed for ${isolation.path}: ${error}`
-      );
-      return true;
-    }),
-    wtService.hasUnmergedWorktreeCommits(isolation.slug).catch((error) => {
-      debugLogger.warn(
-        `[Workflow] hasUnmergedWorktreeCommits failed for ${isolation.slug}: ${error}`
-      );
-      return true;
-    })
-  ]);
-  if (hasChanges || hasUnmerged) {
-    debugLogger.info(
-      `[Workflow] Preserving isolation worktree ${isolation.path} (branch ${isolation.branch}, hasChanges=${hasChanges}, hasUnmerged=${hasUnmerged})`
-    );
-    return { path: isolation.path, branch: isolation.branch };
-  }
-  try {
-    const result = await wtService.removeUserWorktree(isolation.slug, {
-      deleteBranch: true
-    });
-    if (!result.success) {
-      debugLogger.warn(
-        `[Workflow] Failed to remove ephemeral worktree ${isolation.path}: ${result.error}`
-      );
-      return { path: isolation.path, branch: isolation.branch };
-    }
-    if (result.branchPreserved) {
-      debugLogger.warn(
-        `[Workflow] Removed worktree directory ${isolation.path} but kept branch ${isolation.branch} (unmerged commits at delete time)`
-      );
-      return { branch: isolation.branch };
-    }
-  } catch (error) {
-    debugLogger.warn(
-      `[Workflow] Failed to remove ephemeral worktree ${isolation.path}: ${error}`
-    );
-    return { path: isolation.path, branch: isolation.branch };
-  }
-  return null;
-}
-__name(cleanupWorkflowWorktree, "cleanupWorkflowWorktree");
-function appendWorktreePreservedSuffix(finalText, preserved) {
-  const sep2 = finalText.endsWith("\n") ? "\n" : "\n\n";
-  if (preserved.path) {
-    return `${finalText}${sep2}[worktree preserved: ${preserved.path} (branch ${preserved.branch})]`;
-  }
-  return `${finalText}${sep2}[worktree directory removed; branch ${preserved.branch} preserved \u2014 recover with \`git worktree add <path> ${preserved.branch}\`]`;
-}
-__name(appendWorktreePreservedSuffix, "appendWorktreePreservedSuffix");
-function createSchemaModeState() {
-  return {
-    result: null,
-    attempts: 0,
-    pendingArgs: /* @__PURE__ */ new Map(),
-    abortController: new AbortController()
-  };
-}
-__name(createSchemaModeState, "createSchemaModeState");
-function attachSchemaListeners(emitter, state) {
-  const targetTool = ToolNames.STRUCTURED_OUTPUT;
-  emitter.on("tool_call" /* TOOL_CALL */, (evt) => {
-    if (evt.name !== targetTool) return;
-    state.pendingArgs.set(evt.callId, evt.args);
-  });
-  emitter.on("tool_result" /* TOOL_RESULT */, (evt) => {
-    if (evt.name !== targetTool) return;
-    const args = state.pendingArgs.get(evt.callId);
-    state.pendingArgs.delete(evt.callId);
-    if (evt.success) {
-      if (args !== void 0 && state.result === null) {
-        state.result = args;
-        state.abortController.abort();
-      }
-      return;
-    }
-    state.attempts += 1;
-    if (state.attempts > 2 && state.result === null) {
-      state.abortController.abort();
-    }
-  });
-}
-__name(attachSchemaListeners, "attachSchemaListeners");
-async function createSchemaConfigOverride(base, schema) {
-  const override = deriveConfig(base);
-  installSessionWorkflowRevisionWriteThrough(override, base);
-  await rebuildToolRegistryOnOverride(override, base);
-  const registry = override.getToolRegistry();
-  registry.registerTool(new SyntheticOutputTool(schema));
-  return override;
-}
-__name(createSchemaConfigOverride, "createSchemaConfigOverride");
-var WorkflowOrchestrator = class {
-  constructor(dispatch) {
-    this.dispatch = dispatch;
-  }
-  static {
-    __name(this, "WorkflowOrchestrator");
-  }
-  async run(req) {
-    const runId = req.runId ?? generateRunId();
-    const maxAgents = resolveMaxAgentsPerRun();
-    const signal = req.abortOnTimeout?.signal;
-    const scheduler = req.scheduler ?? new WorkflowDispatchScheduler(resolveConcurrencyLimit(), signal);
-    const rejectThroughPauseGate = /* @__PURE__ */ __name((error) => scheduler.waitUntilRunning().then(
-      () => {
-        throw error;
-      },
-      () => {
-        throw error;
-      }
-    ), "rejectThroughPauseGate");
-    let agentCount = 0;
-    let dispatchTraceCount = 0;
-    const emitter = req.emitter;
-    const budget = req.budget;
-    const dependencyContext = new AsyncLocalStorage();
-    const issueDispatchTrace = /* @__PURE__ */ __name((prompt, opts, cached = false) => {
-      const id = `dispatch-${dispatchTraceCount += 1}`;
-      const store = dependencyContext.getStore();
-      const dependsOn = Array.from(new Set(store?.tails ?? []));
-      if (store) store.tails = [id];
-      try {
-        emitter?.dispatchQueued?.({
-          id,
-          ...typeof opts.label === "string" ? { label: opts.label } : {},
-          prompt,
-          dependsOn,
-          queuedAt: Date.now(),
-          ...cached ? { cached: true } : {}
-        });
-      } catch (e) {
-        debugLogger.warn("emitter.dispatchQueued threw:", e);
-      }
-      return id;
-    }, "issueDispatchTrace");
-    const journal = req.journal;
-    const replay = req.resumeReplay;
-    let prefixHash = deriveArgsSeed(req.args);
-    let hadMiss = false;
-    let journalAgentId = 0;
-    const parentSandboxRef = {
-      current: void 0
-    };
-    const countedDispatch = /* @__PURE__ */ __name((prompt, opts) => {
-      if (typeof prompt !== "string" || prompt.length === 0) {
-        return rejectThroughPauseGate(
-          new Error("agent() requires a non-empty string prompt.")
-        );
-      }
-      let journalKey;
-      let journalEntryId;
-      let respawnLine;
-      if (journal) {
-        journalKey = deriveAgentKey(prefixHash, prompt, opts);
-        prefixHash = journalKey;
-        if (!hadMiss && replay) {
-          const cached = replay.results.get(journalKey);
-          if (cached !== void 0) {
-            const respawns = replay.started.get(journalKey);
-            if (respawns && respawns.length > 0) {
-              debugLogger.info(
-                `[Workflow] resume cache hit after ${respawns.length} prior respawn(s) for runId=${runId}.`
-              );
-            }
-            const label2 = typeof opts.label === "string" ? opts.label : void 0;
-            const dispatchId2 = issueDispatchTrace(prompt, opts, true);
-            try {
-              emitter?.agentDispatched?.(label2);
-            } catch (e) {
-              debugLogger.warn("emitter.agentDispatched threw:", e);
-            }
-            try {
-              emitter?.agentCompleted?.(label2);
-            } catch (e) {
-              debugLogger.warn("emitter.agentCompleted threw:", e);
-            }
-            try {
-              emitter?.dispatchSettled?.(dispatchId2, void 0, Date.now());
-            } catch (e) {
-              debugLogger.warn("emitter.dispatchSettled threw:", e);
-            }
-            return scheduler.waitUntilRunning().then(
-              () => cached.result,
-              () => cached.result
-            );
-          }
-        }
-        const priorStarts = replay?.started.get(journalKey);
-        if (priorStarts && priorStarts.length > 0 && !replay?.results.has(journalKey)) {
-          const name = typeof opts.label === "string" ? `"${stripAnsiAndControl(opts.label)}"` : "an agent";
-          respawnLine = replay?.failed.has(journalKey) ? `[resume] re-running ${name}: it failed in the previous run` : `[resume] respawning ${name}: interrupted in a previous run (${priorStarts.length} prior attempt${priorStarts.length === 1 ? "" : "s"})`;
-        }
-        hadMiss = true;
-      }
-      if (budget && budget.total !== null && budget.remaining() <= 0) {
-        debugLogger.warn(
-          `[Workflow] budget gate refused dispatch at entry: runId=${runId} spent=${budget.spent()} total=${budget.total}`
-        );
-        return rejectThroughPauseGate(
-          new WorkflowBudgetExceededError(runId, budget.total, budget.spent())
-        );
-      }
-      if (agentCount >= maxAgents) {
-        return rejectThroughPauseGate(
-          new WorkflowAgentCapExceededError(maxAgents)
-        );
-      }
-      agentCount += 1;
-      if (journal && journalKey !== void 0) {
-        journalEntryId = String(journalAgentId += 1);
-      }
-      const label = typeof opts.label === "string" ? opts.label : void 0;
-      const dispatchId = issueDispatchTrace(prompt, opts);
-      try {
-        emitter?.agentDispatched?.(label);
-      } catch (e) {
-        debugLogger.warn("emitter.agentDispatched threw:", e);
-      }
-      let completionEmitted = false;
-      const emitCompletion = /* @__PURE__ */ __name((error) => {
-        if (completionEmitted) return;
-        completionEmitted = true;
-        const message = error === void 0 ? void 0 : error instanceof Error ? error.message : String(error);
-        try {
-          emitter?.agentCompleted?.(label, message);
-        } catch (e) {
-          debugLogger.warn("emitter.agentCompleted threw:", e);
-        }
-        try {
-          emitter?.dispatchSettled?.(dispatchId, message, Date.now());
-        } catch (e) {
-          debugLogger.warn("emitter.dispatchSettled threw:", e);
-        }
-      }, "emitCompletion");
-      return scheduler.run(async () => {
-        try {
-          try {
-            emitter?.dispatchStarted?.(dispatchId, Date.now());
-          } catch (e) {
-            debugLogger.warn("emitter.dispatchStarted threw:", e);
-          }
-          if (budget && budget.total !== null && budget.remaining() <= 0) {
-            debugLogger.warn(
-              `[Workflow] budget gate refused dispatch at slot-acquire: runId=${runId} spent=${budget.spent()} total=${budget.total}`
-            );
-            throw new WorkflowBudgetExceededError(
-              runId,
-              budget.total,
-              budget.spent()
-            );
-          }
-          if (journal && journalKey !== void 0 && journalEntryId !== void 0) {
-            journal.append({
-              type: "started",
-              key: journalKey,
-              agentId: journalEntryId
-            }).catch(
-              (e) => debugLogger.warn(`journal started-append failed: ${e}`)
-            );
-          }
-          if (respawnLine) {
-            parentSandboxRef.current?.appendLog(respawnLine);
-            try {
-              emitter?.resumeRespawn?.(respawnLine);
-            } catch (e) {
-              debugLogger.warn("emitter.resumeRespawn threw:", e);
-            }
-          }
-          const result = await this.dispatch(prompt, opts, dispatchId);
-          emitCompletion();
-          if (journal && journalKey !== void 0) {
-            journal.append({
-              type: "result",
-              key: journalKey,
-              agentId: journalEntryId ?? "",
-              result
-            }).catch(
-              (e) => debugLogger.warn(`journal result-append failed: ${e}`)
-            );
-          }
-          if (budget) {
-            try {
-              emitter?.budgetUpdated?.(budget.spent(), budget.total);
-            } catch (e) {
-              debugLogger.warn("emitter.budgetUpdated threw:", e);
-            }
-          }
-          return result;
-        } catch (err) {
-          emitCompletion(err);
-          if (budget) {
-            try {
-              emitter?.budgetUpdated?.(budget.spent(), budget.total);
-            } catch (e) {
-              debugLogger.warn("emitter.budgetUpdated threw:", e);
-            }
-          }
-          if (journal && journalKey !== void 0 && !signal?.aborted && !isWorkflowRunLevelError(err)) {
-            journal.append({
-              type: "failed",
-              key: journalKey,
-              agentId: journalEntryId ?? ""
-            }).catch(
-              (e) => debugLogger.warn(`journal failed-append failed: ${e}`)
-            );
-          }
-          if (signal?.aborted || isWorkflowRunLevelError(err)) throw err;
-          if (isWorkflowAgentFailedError(err)) {
-            debugLogger.warn(
-              `[Workflow] agent settled to null (${err.kind}): ${err.message}`
-            );
-          } else {
-            debugLogger.warn(
-              `[Workflow] agent settled to null: ${extractErrorMessage(err)}`
-            );
-          }
-          return null;
-        }
-      }).then(
-        // Resolve even if the gate aborts: a successful dispatch must not
-        // turn into a teardown rejection — for a fire-and-forget call the
-        // script never attached a handler, so the rejection would surface
-        // as a spurious process-level unhandledRejection alarm on a
-        // correctly-cancelled run.
-        (result) => scheduler.waitUntilRunning().then(
-          () => result,
-          () => result
-        ),
-        (error) => {
-          emitCompletion(error);
-          return scheduler.waitUntilRunning().then(
-            () => {
-              throw error;
-            },
-            () => {
-              throw error;
-            }
-          );
-        }
-      );
-    }, "countedDispatch");
-    const parallelImpl = makeParallelImpl(signal, dependencyContext);
-    const pipelineImpl = makePipelineImpl(signal, dependencyContext);
-    const resolveSavedWorkflow = req.resolveSavedWorkflow;
-    const workflowImpl = resolveSavedWorkflow ? async (nameOrRef, nestedArgs) => {
-      const resolved = await resolveSavedWorkflow(nameOrRef);
-      const nestedSandbox = createWorkflowSandbox({
-        args: nestedArgs,
-        runId,
-        dispatch: countedDispatch,
-        parallel: parallelImpl,
-        pipeline: pipelineImpl,
-        abortOnTimeout: req.abortOnTimeout,
-        emitter,
-        budget,
-        scheduler
-        // No `workflow` — single-level nesting limit.
-      });
-      try {
-        return await nestedSandbox.run(resolved.script);
-      } finally {
-        for (const line of nestedSandbox.getLogs()) {
-          parentSandboxRef.current?.appendLog(line);
-        }
-      }
-    } : void 0;
-    const sandbox = createWorkflowSandbox({
-      args: req.args,
-      maxWallClockMs: req.maxWallClockMs,
-      runId,
-      dispatch: countedDispatch,
-      parallel: parallelImpl,
-      pipeline: pipelineImpl,
-      workflow: workflowImpl,
-      abortOnTimeout: req.abortOnTimeout,
-      emitter,
-      budget,
-      scheduler
-    });
-    parentSandboxRef.current = sandbox;
-    try {
-      const result = await dependencyContext.run(
-        { tails: [] },
-        () => sandbox.run(req.script)
-      );
-      return {
-        runId,
-        result,
-        phases: sandbox.getPhases(),
-        logs: sandbox.getLogs(),
-        meta: sandbox.getMeta()
-      };
-    } catch (err) {
-      throw new WorkflowExecutionError(
-        extractErrorMessage(err),
-        sandbox.getPhases(),
-        sandbox.getLogs(),
-        sandbox.getMeta()
-      );
-    }
-  }
-};
-async function settleToNullArray(thunks, signal) {
-  const settled = await Promise.allSettled(
-    thunks.map((t) => Promise.resolve().then(t))
-  );
-  if (signal?.aborted)
-    throw new DOMException("Workflow run aborted.", "AbortError");
-  const visitedReasons = /* @__PURE__ */ new WeakSet();
-  const findRunFailureReason = /* @__PURE__ */ __name((reason) => {
-    if (reason === null || typeof reason !== "object") return void 0;
-    if (visitedReasons.has(reason)) return void 0;
-    visitedReasons.add(reason);
-    try {
-      if (reason.__wfRunFailure === true) {
-        return reason;
-      }
-      const errors = reason?.errors;
-      if (!Array.isArray(errors)) return void 0;
-      for (const error of errors) {
-        const runFailure = findRunFailureReason(error);
-        if (runFailure !== void 0) return runFailure;
-      }
-    } catch {
-      return void 0;
-    }
-    return void 0;
-  }, "findRunFailureReason");
-  for (const result of settled) {
-    if (result.status !== "rejected") continue;
-    const runFailure = findRunFailureReason(result.reason);
-    if (runFailure !== void 0) throw runFailure;
-  }
-  return settled.map((r, i) => {
-    if (r.status === "fulfilled") return r.value;
-    const reason = r.reason;
-    debugLogger.warn(
-      `Workflow thunk at index ${i} rejected: ${String(reason?.message ?? r.reason)}`
-    );
-    return null;
-  });
-}
-__name(settleToNullArray, "settleToNullArray");
-function makeParallelImpl(signal, dependencyContext) {
-  return (thunks) => {
-    if (!Array.isArray(thunks)) {
-      return Promise.reject(
-        new Error(
-          "parallel() expects an array of thunks (functions returning promises)."
-        )
-      );
-    }
-    for (const t of thunks) {
-      if (typeof t !== "function") {
-        return Promise.reject(
-          new Error(
-            "parallel() expects an array of functions, not values \u2014 wrap each call: parallel([() => agent(...), () => agent(...)])."
-          )
-        );
-      }
-    }
-    const parent = dependencyContext.getStore();
-    const inheritedTails = parent?.tails ?? [];
-    const branches = thunks.map((thunk) => {
-      const store = { tails: [...inheritedTails] };
-      return {
-        store,
-        thunk: /* @__PURE__ */ __name(() => dependencyContext.run(store, thunk), "thunk")
-      };
-    });
-    return settleToNullArray(
-      branches.map(({ thunk }) => thunk),
-      signal
-    ).then((result) => {
-      if (parent && branches.length > 0) {
-        parent.tails = mergeFanoutTails(
-          parent.tails,
-          inheritedTails,
-          branches.flatMap(({ store }) => store.tails)
-        );
-      }
-      return result;
-    });
-  };
-}
-__name(makeParallelImpl, "makeParallelImpl");
-function makePipelineImpl(signal, dependencyContext) {
-  return (items, ...stages) => {
-    if (!Array.isArray(items)) {
-      return Promise.reject(
-        new Error(
-          "pipeline() expects an array of items as its first argument."
-        )
-      );
-    }
-    for (const s of stages) {
-      if (typeof s !== "function") {
-        return Promise.reject(
-          new Error(
-            "pipeline() stages must be functions: pipeline(items, item => ..., result => ...)."
-          )
-        );
-      }
-    }
-    const parent = dependencyContext.getStore();
-    const inheritedTails = parent?.tails ?? [];
-    const branches = items.map((item, idx) => {
-      const store = { tails: [...inheritedTails] };
-      return {
-        store,
-        thunk: /* @__PURE__ */ __name(() => dependencyContext.run(
-          store,
-          () => runPipelineChain(item, idx, stages)
-        ), "thunk")
-      };
-    });
-    return settleToNullArray(
-      branches.map(({ thunk }) => thunk),
-      signal
-    ).then((result) => {
-      if (parent && branches.length > 0) {
-        parent.tails = mergeFanoutTails(
-          parent.tails,
-          inheritedTails,
-          branches.flatMap(({ store }) => store.tails)
-        );
-      }
-      return result;
-    });
-  };
-}
-__name(makePipelineImpl, "makePipelineImpl");
-function mergeFanoutTails(currentParentTails, inheritedTails, branchTails) {
-  const inherited = new Set(inheritedTails);
-  const newBranchTails = branchTails.filter((tail) => !inherited.has(tail));
-  const merged = newBranchTails.length > 0 ? [
-    ...newBranchTails,
-    ...currentParentTails.filter((tail) => !inherited.has(tail))
-  ] : currentParentTails;
-  return Array.from(new Set(merged));
-}
-__name(mergeFanoutTails, "mergeFanoutTails");
-async function runPipelineChain(item, idx, stages) {
-  let prev = item;
-  for (const stage of stages) {
-    if (prev === null) break;
-    prev = await stage(prev, item, idx);
-  }
-  return prev;
-}
-__name(runPipelineChain, "runPipelineChain");
-function extractErrorMessage(err) {
-  if (err && typeof err === "object" && "message" in err) {
-    const m = err.message;
-    if (typeof m === "string") return m;
-    return String(m);
-  }
-  return String(err);
-}
-__name(extractErrorMessage, "extractErrorMessage");
-
-// packages/core/src/agents/workflow-snapshot.ts
-init_esbuild_shims();
-import { promises as fs3 } from "node:fs";
-import path3 from "node:path";
-var debugLogger6 = createDebugLogger("WORKFLOW_SNAPSHOT");
-var MAX_RETAINED_SNAPSHOTS = 30;
-function toSnapshot(task) {
-  if (!isTerminalWorkflowStatus(task.status)) {
-    throw new Error(`Cannot snapshot active workflow ${task.runId}.`);
-  }
-  return {
-    runId: task.runId,
-    ...task.toolUseId ? { toolUseId: task.toolUseId } : {},
-    description: task.description,
-    ...task.workflowName ? { workflowName: task.workflowName } : {},
-    sourceRunId: task.sourceRunId,
-    startMode: task.startMode,
-    meta: task.meta,
-    status: task.status,
-    script: task.script ?? "",
-    scriptPath: task.scriptPath,
-    phases: [...task.phases],
-    phaseVisits: task.phaseVisits.map((visit) => ({ ...visit })),
-    dispatches: task.dispatches.map((dispatch) => ({
-      ...dispatch,
-      dependsOn: [...dispatch.dependsOn]
-    })),
-    agentsDispatched: task.agentsDispatched,
-    agentsCompleted: task.agentsCompleted,
-    agentsRespawned: task.agentsRespawned ?? 0,
-    tokensSpent: task.tokensSpent,
-    tokenBudgetTotal: task.tokenBudgetTotal,
-    perPhaseTokens: Array.from(task.perPhaseTokens.entries()),
-    recentLogs: [...task.recentLogs],
-    events: task.events.map((event) => ({ ...event })),
-    startTime: task.startTime,
-    endTime: task.endTime,
-    result: safeResult(task.result),
-    error: task.error
-  };
-}
-__name(toSnapshot, "toSnapshot");
-function safeResult(result) {
-  if (result === void 0) return void 0;
-  try {
-    JSON.stringify(result);
-    return result;
-  } catch {
-    return `(non-JSON-serializable ${typeof result})`;
-  }
-}
-__name(safeResult, "safeResult");
-async function writeWorkflowSnapshot(config, task) {
-  const storage = config.storage;
-  if (!storage) return false;
-  try {
-    const snapshot = toSnapshot(task);
-    const dir = storage.getWorkflowRunsDir();
-    await fs3.mkdir(dir, { recursive: true });
-    await fs3.writeFile(
-      storage.getWorkflowRunSnapshotPath(task.runId),
-      JSON.stringify(snapshot, null, 2),
-      "utf8"
-    );
-    await pruneSnapshots(config, dir);
-    return true;
-  } catch (e) {
-    debugLogger6.warn(`writeWorkflowSnapshot failed for ${task.runId}: ${e}`);
-    return false;
-  }
-}
-__name(writeWorkflowSnapshot, "writeWorkflowSnapshot");
-async function listWorkflowSnapshots(config) {
-  const storage = config.storage;
-  if (!storage) return [];
-  const dir = storage.getWorkflowRunsDir();
-  let files;
-  try {
-    files = (await fs3.readdir(dir)).filter((f) => f.endsWith(".json"));
-  } catch {
-    return [];
-  }
-  const snapshots = [];
-  for (const file of files) {
-    try {
-      const raw = await fs3.readFile(`${dir}/${file}`, "utf8");
-      const parsed = JSON.parse(raw);
-      if (!isWorkflowSnapshot(parsed)) {
-        debugLogger6.warn(`skipping invalid workflow snapshot ${file}`);
-        continue;
-      }
-      snapshots.push(parsed);
-    } catch (e) {
-      debugLogger6.warn(`skipping unparseable snapshot ${file}: ${e}`);
-    }
-  }
-  snapshots.sort((a, b) => (b.startTime ?? 0) - (a.startTime ?? 0));
-  return snapshots;
-}
-__name(listWorkflowSnapshots, "listWorkflowSnapshots");
-async function deleteWorkflowSnapshot(config, runId) {
-  const storage = config.storage;
-  if (!storage || !/^wf_[0-9a-f]+$/.test(runId)) return false;
-  try {
-    await fs3.rm(path3.dirname(storage.getWorkflowRunJournalPath(runId)), {
-      recursive: true,
-      force: true
-    });
-  } catch (error) {
-    debugLogger6.warn(`delete workflow journal failed for ${runId}: ${error}`);
-    return false;
-  }
-  if (!await deleteInlineWorkflowScript(config, runId)) return false;
-  try {
-    await fs3.unlink(storage.getWorkflowRunSnapshotPath(runId));
-  } catch (error) {
-    if (error.code !== "ENOENT") {
-      debugLogger6.warn(`deleteWorkflowSnapshot failed for ${runId}: ${error}`);
-      return false;
-    }
-  }
-  return true;
-}
-__name(deleteWorkflowSnapshot, "deleteWorkflowSnapshot");
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-__name(isRecord, "isRecord");
-function isFiniteNumber(value) {
-  return typeof value === "number" && Number.isFinite(value);
-}
-__name(isFiniteNumber, "isFiniteNumber");
-function isOptionalString(value) {
-  return value === void 0 || typeof value === "string";
-}
-__name(isOptionalString, "isOptionalString");
-function isStringArray(value) {
-  return Array.isArray(value) && value.every((item) => typeof item === "string");
-}
-__name(isStringArray, "isStringArray");
-function isWorkflowMeta(value) {
-  if (value === null) return true;
-  if (!isRecord(value)) return false;
-  if (typeof value["name"] !== "string" || typeof value["description"] !== "string" || !isOptionalString(value["whenToUse"])) {
-    return false;
-  }
-  const phases = value["phases"];
-  return phases === void 0 || Array.isArray(phases) && phases.every(
-    (phase) => isRecord(phase) && typeof phase["title"] === "string" && isOptionalString(phase["detail"]) && isOptionalString(phase["model"])
-  );
-}
-__name(isWorkflowMeta, "isWorkflowMeta");
-function isWorkflowPhaseVisit(value) {
-  return isRecord(value) && typeof value["id"] === "string" && isFiniteNumber(value["index"]) && typeof value["title"] === "string" && isFiniteNumber(value["startedAt"]) && (value["endedAt"] === void 0 || isFiniteNumber(value["endedAt"]));
-}
-__name(isWorkflowPhaseVisit, "isWorkflowPhaseVisit");
-function isWorkflowDispatch(value) {
-  if (!isRecord(value)) return false;
-  const status = value["status"];
-  return typeof value["id"] === "string" && (value["phaseVisitId"] === null || typeof value["phaseVisitId"] === "string") && typeof value["label"] === "string" && typeof value["prompt"] === "string" && isOptionalString(value["subagentId"]) && (status === "queued" || status === "running" || status === "completed" || status === "failed" || status === "cancelled" || status === "cached") && isStringArray(value["dependsOn"]) && isFiniteNumber(value["queuedAt"]) && (value["startedAt"] === void 0 || isFiniteNumber(value["startedAt"])) && (value["endedAt"] === void 0 || isFiniteNumber(value["endedAt"])) && isOptionalString(value["error"]);
-}
-__name(isWorkflowDispatch, "isWorkflowDispatch");
-function hasOnlyKeys(value, keys) {
-  const allowed = new Set(keys);
-  return Object.keys(value).every((key) => allowed.has(key));
-}
-__name(hasOnlyKeys, "hasOnlyKeys");
-function isWorkflowEvent(value) {
-  if (!isRecord(value) || typeof value["id"] !== "string" || !isFiniteNumber(value["at"]) || typeof value["type"] !== "string") {
-    return false;
-  }
-  const base = ["id", "type", "at"];
-  switch (value["type"]) {
-    case "phase-started":
-      return hasOnlyKeys(value, [...base, "phaseVisitId", "title"]) && typeof value["phaseVisitId"] === "string" && typeof value["title"] === "string";
-    case "phase-completed":
-      return hasOnlyKeys(value, [...base, "phaseVisitId"]) && typeof value["phaseVisitId"] === "string";
-    case "dispatch-queued":
-    case "dispatch-started":
-    case "dispatch-completed":
-    case "dispatch-cancelled":
-    case "dispatch-cached":
-      return hasOnlyKeys(value, [...base, "dispatchId"]) && typeof value["dispatchId"] === "string";
-    case "dispatch-failed":
-      return hasOnlyKeys(value, [...base, "dispatchId", "error"]) && typeof value["dispatchId"] === "string" && typeof value["error"] === "string";
-    case "log":
-      return hasOnlyKeys(value, [...base, "message"]) && typeof value["message"] === "string";
-    case "approval-requested":
-    case "approval-settled":
-      return hasOnlyKeys(value, [...base, "name", "dispatchId"]) && typeof value["name"] === "string" && isOptionalString(value["dispatchId"]);
-    case "workflow-completed":
-    case "workflow-cancelled":
-      return hasOnlyKeys(value, base);
-    case "workflow-failed":
-      return hasOnlyKeys(value, [...base, "error"]) && typeof value["error"] === "string";
-    default:
-      return false;
-  }
-}
-__name(isWorkflowEvent, "isWorkflowEvent");
-function isWorkflowSnapshot(value) {
-  if (!isRecord(value)) return false;
-  const status = value["status"];
-  const phaseVisits = value["phaseVisits"];
-  const dispatches = value["dispatches"];
-  const events = value["events"];
-  const perPhaseTokens = value["perPhaseTokens"];
-  return typeof value["runId"] === "string" && value["runId"].length > 0 && isOptionalString(value["toolUseId"]) && isOptionalString(value["description"]) && isOptionalString(value["workflowName"]) && isOptionalString(value["sourceRunId"]) && (value["startMode"] === void 0 || value["startMode"] === "retry" || value["startMode"] === "rerun") && isWorkflowMeta(value["meta"]) && (status === "completed" || status === "failed" || status === "cancelled") && typeof value["script"] === "string" && isOptionalString(value["scriptPath"]) && isStringArray(value["phases"]) && (phaseVisits === void 0 || Array.isArray(phaseVisits) && phaseVisits.every(isWorkflowPhaseVisit)) && (dispatches === void 0 || Array.isArray(dispatches) && dispatches.every(isWorkflowDispatch)) && (events === void 0 || Array.isArray(events) && events.every(isWorkflowEvent)) && isFiniteNumber(value["agentsDispatched"]) && isFiniteNumber(value["agentsCompleted"]) && (value["agentsRespawned"] === void 0 || isFiniteNumber(value["agentsRespawned"])) && isFiniteNumber(value["tokensSpent"]) && (value["tokenBudgetTotal"] === null || isFiniteNumber(value["tokenBudgetTotal"])) && Array.isArray(perPhaseTokens) && perPhaseTokens.every(
-    (entry) => Array.isArray(entry) && entry.length === 2 && (entry[0] === null || typeof entry[0] === "string") && isFiniteNumber(entry[1])
-  ) && isStringArray(value["recentLogs"]) && isFiniteNumber(value["startTime"]) && (value["endTime"] === void 0 || isFiniteNumber(value["endTime"])) && isOptionalString(value["error"]);
-}
-__name(isWorkflowSnapshot, "isWorkflowSnapshot");
-async function pruneSnapshots(config, dir) {
-  let files;
-  try {
-    files = (await fs3.readdir(dir)).filter((f) => f.endsWith(".json"));
-  } catch {
-    return;
-  }
-  if (files.length <= MAX_RETAINED_SNAPSHOTS) return;
-  const stats = await Promise.all(
-    files.map(async (f) => {
-      try {
-        const s = await fs3.stat(`${dir}/${f}`);
-        return { f, mtime: s.mtimeMs };
-      } catch {
-        return { f, mtime: 0 };
-      }
-    })
-  );
-  stats.sort((a, b) => a.mtime - b.mtime);
-  const toPrune = stats.slice(0, stats.length - MAX_RETAINED_SNAPSHOTS);
-  const registry = config.getWorkflowRunRegistry?.();
-  const protectedRunIds = /* @__PURE__ */ new Set([
-    ...(registry?.list() ?? []).filter((entry) => isActiveWorkflowStatus(entry.status)).map((entry) => entry.runId),
-    ...registry?.listStartingRunIds() ?? []
-  ]);
-  await Promise.all(
-    toPrune.map((s) => {
-      const runId = s.f.replace(/\.json$/, "");
-      const isRunDir = /^wf_[0-9a-f]+$/.test(runId);
-      const deleteArtifacts = isRunDir && !protectedRunIds.has(runId) && !isWorkflowRunPersistenceActive(config, runId);
-      return Promise.all([
-        fs3.unlink(`${dir}/${s.f}`).catch(
-          (e) => debugLogger6.warn(`prune unlink failed for ${s.f}: ${e}`)
-        ),
-        ...deleteArtifacts ? [
-          fs3.rm(
-            path3.dirname(config.storage.getWorkflowRunJournalPath(runId)),
-            { recursive: true, force: true }
-          ).catch(
-            (e) => debugLogger6.warn(
-              `prune journal dir failed for ${runId}: ${e}`
-            )
-          ),
-          deleteInlineWorkflowScript(config, runId)
-        ] : []
-      ]);
-    })
-  );
-}
-__name(pruneSnapshots, "pruneSnapshots");
-
-// packages/core/src/skills/workflow-authoring-skill.ts
-init_esbuild_shims();
-import { readFileSync } from "node:fs";
-import * as path4 from "node:path";
-var debugLogger7 = createDebugLogger("WORKFLOW_AUTHORING_SKILL");
-var WORKFLOW_AUTHORING_SKILL_NAME = "workflow-authoring";
-var cachedReference;
-function referencePath() {
-  return path4.join(
-    resolveBundleDir(import.meta.url),
-    "bundled",
-    WORKFLOW_AUTHORING_SKILL_NAME,
-    "SKILL.md"
-  );
-}
-__name(referencePath, "referencePath");
-function readWorkflowAuthoringReference() {
-  if (cachedReference !== void 0) return cachedReference;
-  try {
-    const filePath = referencePath();
-    const parsed = parseSkillContent(readFileSync(filePath, "utf8"), filePath);
-    cachedReference = { body: parsed.body, baseDir: path4.dirname(filePath) };
-  } catch (error) {
-    debugLogger7.warn(`cannot read the workflow-authoring reference: ${error}`);
-    cachedReference = null;
-  }
-  return cachedReference;
-}
-__name(readWorkflowAuthoringReference, "readWorkflowAuthoringReference");
-function resolveWorkflowAuthoringRoute(config) {
-  try {
-    if (config.getDisabledSkillLevels?.()?.has("bundled")) return "withheld";
-    if (config.isSkillEnabled?.({
-      name: WORKFLOW_AUTHORING_SKILL_NAME,
-      level: "bundled"
-    }) === false) {
-      return "withheld";
-    }
-    if (!config.getSkillManager?.()) return "inline";
-    const registry = config.getToolRegistry?.();
-    const toolNames = registry?.getAllToolNames?.();
-    if (!Array.isArray(toolNames)) return "skill";
-    if (!toolNames.includes(ToolNames.SKILL)) return "inline";
-    if (isToolDeferredBehindToolSearch(config, ToolNames.SKILL)) {
-      return toolNames.includes(ToolNames.TOOL_SEARCH) ? "skill-via-tool-search" : "inline";
-    }
-    return "skill";
-  } catch (error) {
-    debugLogger7.warn(`cannot resolve the workflow-authoring route: ${error}`);
-    return "skill";
-  }
-}
-__name(resolveWorkflowAuthoringRoute, "resolveWorkflowAuthoringRoute");
-function resolveWorkflowAuthoringSurface(config) {
-  const route = resolveWorkflowAuthoringRoute(config);
-  switch (route) {
-    case "skill":
-      return "pointer";
-    case "skill-via-tool-search":
-      return "pointer-via-tool-search";
-    case "withheld":
-      return "withheld";
-    case "inline":
-      return readWorkflowAuthoringReference() ? "inline" : "pointer";
-    default: {
-      const unhandled = route;
-      return unhandled;
-    }
-  }
-}
-__name(resolveWorkflowAuthoringSurface, "resolveWorkflowAuthoringSurface");
-function isToolDeferredBehindToolSearch(config, name) {
-  if (!config.getToolRegistry?.()?.isPermissionDeferred?.(name)) return false;
-  return !config.getVisibleTools?.()?.has(name);
-}
-__name(isToolDeferredBehindToolSearch, "isToolDeferredBehindToolSearch");
-function isToolHiddenBehindToolSearch(config, name) {
-  if (!isToolDeferredBehindToolSearch(config, name)) return false;
-  return !config.getToolRegistry?.()?.isDeferredToolRevealed?.(name);
-}
-__name(isToolHiddenBehindToolSearch, "isToolHiddenBehindToolSearch");
-function toolSearchRevealSentence(toolDisplayName) {
-  return `If the ${toolDisplayName} tool is not in your tool list, reveal it with ToolSearch first.`;
-}
-__name(toolSearchRevealSentence, "toolSearchRevealSentence");
-
-// packages/core/src/agents/runtime/review-workflow.ts
-init_esbuild_shims();
-import { createHash as createHash2 } from "node:crypto";
-import { promises as fs4 } from "node:fs";
-import path5 from "node:path";
-var debugLogger8 = createDebugLogger("REVIEW_WORKFLOW");
-function resolveReviewWorkflowConcurrency(env = process.env) {
-  const configured = parsePositiveIntegerEnv(env[MAX_WORKFLOW_CONCURRENCY_ENV], 0) || parsePositiveIntegerEnv(env["QWEN_CODE_MAX_TOOL_CONCURRENCY"], 10);
-  return resolveConcurrencyLimit({
-    [MAX_WORKFLOW_CONCURRENCY_ENV]: String(configured)
-  });
-}
-__name(resolveReviewWorkflowConcurrency, "resolveReviewWorkflowConcurrency");
-async function resolveReviewWorkflowLimits(scriptPath, generatedDir, scriptContent, env = process.env, nowMs = Date.now()) {
-  let canonicalScript;
-  try {
-    if ((await fs4.lstat(generatedDir)).isSymbolicLink()) return void 0;
-    const generatedRoot = await fs4.realpath(generatedDir);
-    canonicalScript = await fs4.realpath(scriptPath);
-    if (!canonicalScript.startsWith(path5.join(generatedRoot, "review") + path5.sep)) {
-      return void 0;
-    }
-  } catch (error) {
-    if (error.code !== "ENOENT") {
-      debugLogger8.warn(
-        "Cannot classify review workflow; using generic limits:",
-        error
-      );
-    }
-    return void 0;
-  }
-  const digest = /^qwen-review-[a-f0-9]{10}-([a-f0-9]{64})\.js$/.exec(
-    path5.basename(canonicalScript)
-  )?.[1];
-  if (!digest || createHash2("sha256").update(scriptContent).digest("hex") !== digest) {
-    return void 0;
-  }
-  const seconds = Number(env["QWEN_CODE_MAX_WORKFLOW_SECONDS"]);
-  let maxWallClockMs = (Number.isFinite(seconds) && seconds > 0 ? seconds : 6 * 60 * 60) * 1e3;
-  const deadline = Number(env["QWEN_REVIEW_DEADLINE_EPOCH"]);
-  if (Number.isFinite(deadline) && deadline > 0) {
-    const rawFloor = env["QWEN_REVIEW_DEADLINE_COMPOSE_FLOOR_SECONDS"];
-    const floor = Number(rawFloor);
-    const floorSeconds = rawFloor?.trim() && Number.isFinite(floor) && floor >= 0 ? floor : 1200;
-    const remainingMs = deadline * 1e3 - nowMs - floorSeconds * 1e3;
-    if (remainingMs <= 0) {
-      throw new Error(
-        "Review workflow was not launched: the review deadline has reached the compose reserve floor. Recover completed findings and compose now."
-      );
-    }
-    maxWallClockMs = Math.min(maxWallClockMs, remainingMs);
-  }
-  return {
-    subagent: {
-      max_turns: resolveSubagentMaxTurns(env, 500),
-      max_time_minutes: resolveSubagentMaxTimeMinutes(env, 100)
-    },
-    concurrency: resolveReviewWorkflowConcurrency(env),
-    maxWallClockMs
-  };
-}
-__name(resolveReviewWorkflowLimits, "resolveReviewWorkflowLimits");
-
-export {
-  extractAndStripMeta,
-  compileWorkflowScript,
-  describeWorkflowCompileError,
-  MAX_TOKENS_PER_WORKFLOW_ENV,
-  resolveMaxTokensPerWorkflow,
-  WorkflowBudgetImpl,
-  validateWorkflowName,
-  isSymlinkedRoot,
-  listSavedWorkflows,
-  resolveSavedWorkflowScript,
-  saveWorkflowScript,
-  persistInlineWorkflowScript,
-  deleteInlineWorkflowScript,
-  WorkflowJournal,
-  WorkflowDispatchScheduler,
-  DEFAULT_MAX_AGENTS_PER_RUN,
-  MAX_WORKFLOW_AGENTS_ENV,
-  MAX_WORKFLOW_CONCURRENCY_ENV,
-  resolveConcurrencyLimit,
-  DEFAULT_WORKFLOW_SUBAGENT_MAX_TURNS,
-  DEFAULT_WORKFLOW_SUBAGENT_MAX_TIME_MINUTES,
-  WORKFLOW_SUBAGENT_MAX_TURNS_ENV,
-  WORKFLOW_SUBAGENT_MAX_MINUTES_ENV,
-  WorkflowExecutionError,
-  createProductionDispatch,
-  WorkflowOrchestrator,
-  MAX_RETAINED_SNAPSHOTS,
-  toSnapshot,
-  writeWorkflowSnapshot,
-  listWorkflowSnapshots,
-  deleteWorkflowSnapshot,
-  resolveReviewWorkflowConcurrency,
-  resolveReviewWorkflowLimits,
-  WORKFLOW_AUTHORING_SKILL_NAME,
-  readWorkflowAuthoringReference,
-  resolveWorkflowAuthoringSurface,
-  isToolHiddenBehindToolSearch,
-  toolSearchRevealSentence
-};
-/**
- * @license
- * Copyright 2025 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */
-/**
- * @license
- * Copyright 2025 Qwen
- * SPDX-License-Identifier: Apache-2.0
- */
-/**
- * @license
- * Copyright 2026 Qwen Team
- * SPDX-License-Identifier: Apache-2.0
- */