@vornrun/mcp 0.6.0 → 0.6.1-beta.1

package/dist/index.js

@@ -6,8 +6,6 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 
 // ../server/src/config-manager.ts
 import fs3 from "fs";
-import path3 from "path";
-import os2 from "os";
 
 // ../shared/src/agent-defaults.ts
 var DEFAULT_AGENT_COMMANDS = {
@@ -50,6 +48,11 @@ var logger_default = log;
 import { execFileSync, execFile } from "child_process";
 import fs from "fs";
 import path from "path";
+
+// ../shared/src/protocol.ts
+var LOCAL_TOKEN_FILENAME = "local-token";
+
+// ../server/src/process-utils.ts
 function getDefaultShell(configured) {
   const chosen = configured?.trim();
   if (chosen) return chosen;
@@ -92,9 +95,9 @@ var SDK_FILTER_KEYS = {
   version: "sdkVersion",
   icon: "sdkIcon"
 };
-function connectionConnectorId(connection) {
-  const packaged = connection.filters?.[SDK_FILTER_KEYS.connectorId];
-  return typeof packaged === "string" && packaged !== "" ? packaged : connection.connectorId;
+function connectionConnectorId(connection2) {
+  const packaged = connection2.filters?.[SDK_FILTER_KEYS.connectorId];
+  return typeof packaged === "string" && packaged !== "" ? packaged : connection2.connectorId;
 }
 
 // ../server/src/default-workflows.ts
@@ -140,25 +143,35 @@ function buildDefaultTaskWorkflow() {
 }
 
 // ../server/src/database.ts
-var CONFIG_DIR = path2.join(os.homedir(), ".vorn");
-var DB_PATH = path2.join(CONFIG_DIR, "vorn.db");
+var DEFAULT_DATA_DIR = path2.join(os.homedir(), ".vorn");
+var resolvedDataDir = null;
+function dbPath() {
+  return path2.join(getDataDir(), "vorn.db");
+}
 var db = null;
 function getDb() {
   if (!db) throw new Error("Database not initialized. Call initDatabase() first.");
   return db;
 }
-function initDatabase() {
-  if (!fs2.existsSync(CONFIG_DIR)) {
-    fs2.mkdirSync(CONFIG_DIR, { recursive: true, mode: 448 });
+function getDataDir() {
+  if (!resolvedDataDir) {
+    throw new Error("Data directory not resolved. Call initDatabase() first.");
+  }
+  return resolvedDataDir;
+}
+function initDatabase(dataDir) {
+  resolvedDataDir = dataDir ?? DEFAULT_DATA_DIR;
+  if (!fs2.existsSync(getDataDir())) {
+    fs2.mkdirSync(getDataDir(), { recursive: true, mode: 448 });
   }
   try {
-    db = new Database(DB_PATH);
+    db = new Database(dbPath());
     db.pragma("journal_mode = WAL");
     db.pragma("foreign_keys = ON");
     createSchema();
     seedSystemDefaults();
   } catch (err) {
-    logger_default.error("[database] Failed to open database:", err);
+    logger_default.error({ err }, "[database] Failed to open database:");
     const message = err instanceof Error ? err.message : String(err);
     const isCorrupt = /corrupt|notadb|malformed|not a database|file is not a database/i.test(
       message
@@ -212,39 +225,32 @@ function recoverCorruptDatabase() {
   }
   db = null;
   const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-  const backupPath = `${DB_PATH}.corrupt-${timestamp}`;
+  const backupPath = `${dbPath()}.corrupt-${timestamp}`;
   try {
-    if (fs2.existsSync(DB_PATH)) {
-      fs2.copyFileSync(DB_PATH, backupPath);
+    if (fs2.existsSync(dbPath())) {
+      fs2.copyFileSync(dbPath(), backupPath);
       logger_default.info(`[database] Backed up corrupt database to ${backupPath}`);
     }
     for (const suffix of ["", "-wal", "-shm"]) {
-      const file = DB_PATH + suffix;
+      const file = dbPath() + suffix;
       if (fs2.existsSync(file)) fs2.unlinkSync(file);
     }
   } catch (backupErr) {
-    logger_default.error("[database] Failed to back up corrupt database:", backupErr);
+    logger_default.error({ backupErr }, "[database] Failed to back up corrupt database:");
   }
   try {
-    db = new Database(DB_PATH);
+    db = new Database(dbPath());
     db.pragma("journal_mode = WAL");
     db.pragma("foreign_keys = ON");
     createSchema();
     seedSystemDefaults();
     logger_default.info("[database] Successfully created fresh database after corruption recovery");
   } catch (freshErr) {
-    logger_default.error("[database] Failed to create fresh database after corruption:", freshErr);
+    logger_default.error({ freshErr }, "[database] Failed to create fresh database after corruption:");
     throw freshErr;
   }
   logger_default.warn(`[database] Database was corrupted and has been reset. Backup saved to: ${backupPath}`);
 }
-function dbSignalChange() {
-  try {
-    const signalPath = path2.join(CONFIG_DIR, ".db-signal");
-    fs2.writeFileSync(signalPath, Date.now().toString());
-  } catch {
-  }
-}
 function closeDatabase() {
   if (db) {
     db.close();
@@ -269,6 +275,29 @@ function createSchema() {
       value TEXT NOT NULL
     );
 
+    CREATE TABLE IF NOT EXISTS users (
+      id TEXT PRIMARY KEY,
+      name TEXT NOT NULL,
+      role TEXT NOT NULL DEFAULT 'owner',
+      created_at TEXT NOT NULL
+    );
+
+    -- Only the hash is stored. The plaintext is shown once at creation and is
+    -- not recoverable afterwards, so a leaked database yields no usable
+    -- credential.
+    CREATE TABLE IF NOT EXISTS device_tokens (
+      id TEXT PRIMARY KEY,
+      user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+      name TEXT NOT NULL,
+      token_hash TEXT NOT NULL,
+      created_at TEXT NOT NULL,
+      last_seen_at TEXT,
+      revoked_at TEXT
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_device_tokens_user
+      ON device_tokens(user_id);
+
     CREATE TABLE IF NOT EXISTS projects (
       name TEXT PRIMARY KEY,
       path TEXT NOT NULL,
@@ -496,9 +525,9 @@ function seedLegacyConnectorPollState(d) {
     );
     const connectionId = trigger?.config?.connectionId;
     if (!connectionId) continue;
-    const connection = readConnection.get(connectionId);
-    if (!connection) continue;
-    insertState.run(workflow.id, connectionId, connection.sync_cursor, connection.last_sync_at);
+    const connection2 = readConnection.get(connectionId);
+    if (!connection2) continue;
+    insertState.run(workflow.id, connectionId, connection2.sync_cursor, connection2.last_sync_at);
   }
 }
 function migrateSchema(d) {
@@ -821,6 +850,57 @@ function migrateSchema(d) {
     })();
     logger_default.info("[database] migrated schema to version 13 (connection-scoped inbox)");
   }
+  if (version < 14) {
+    d.transaction(() => {
+      const existing = d.prepare("SELECT COUNT(*) AS n FROM users").get();
+      if (existing.n === 0) {
+        let name = "owner";
+        try {
+          name = os.userInfo().username || name;
+        } catch {
+        }
+        d.prepare("INSERT INTO users (id, name, role, created_at) VALUES (?, ?, 'owner', ?)").run(
+          randomUUID(),
+          name,
+          (/* @__PURE__ */ new Date()).toISOString()
+        );
+      }
+      d.prepare(
+        "INSERT OR REPLACE INTO schema_meta (key, value) VALUES ('schema_version', '14')"
+      ).run();
+    })();
+    logger_default.info("[database] migrated schema to version 14 (identity and device tokens)");
+  }
+  if (version < 15) {
+    d.transaction(() => {
+      for (const table of REVISIONED_TABLES) {
+        const columns = d.prepare(`PRAGMA table_info(${table})`).all();
+        if (columns.some((c) => c.name === "row_revision")) continue;
+        d.exec(`ALTER TABLE ${table} ADD COLUMN row_revision INTEGER NOT NULL DEFAULT 0`);
+      }
+      d.prepare("INSERT OR REPLACE INTO schema_meta (key, value) VALUES (?, ?)").run(
+        CONFIG_REVISION_KEY,
+        "0"
+      );
+      d.prepare(
+        "INSERT OR REPLACE INTO schema_meta (key, value) VALUES ('schema_version', '15')"
+      ).run();
+    })();
+    logger_default.info("[database] migrated schema to version 15 (config row revisions)");
+  }
+}
+var REVISIONED_TABLES = [
+  "projects",
+  "tasks",
+  "workspaces",
+  "remote_hosts",
+  "agent_commands"
+];
+var CONFIG_REVISION_KEY = "config_revision";
+function readConfigRevision(d) {
+  const row = d.prepare("SELECT value FROM schema_meta WHERE key = ?").get(CONFIG_REVISION_KEY);
+  const parsed = Number(row?.value);
+  return Number.isFinite(parsed) ? parsed : 0;
 }
 function verifySchema(d) {
   const expectedByTable = {
@@ -930,6 +1010,15 @@ function verifySchema(d) {
       }
     ]
   };
+  for (const table of REVISIONED_TABLES) {
+    expectedByTable[table] = [
+      ...expectedByTable[table] ?? [],
+      {
+        column: "row_revision",
+        ddl: `ALTER TABLE ${table} ADD COLUMN row_revision INTEGER NOT NULL DEFAULT 0`
+      }
+    ];
+  }
   for (const [table, columns] of Object.entries(expectedByTable)) {
     const existing = new Set(
       d.prepare(`PRAGMA table_info(${table})`).all().map((c) => c.name)
@@ -940,7 +1029,7 @@ function verifySchema(d) {
         d.exec(ddl);
         logger_default.warn(`[database] self-heal: added missing column ${table}.${column}`);
       } catch (err) {
-        logger_default.error(`[database] self-heal: failed to add ${table}.${column}:`, err);
+        logger_default.error({ err }, `[database] self-heal: failed to add ${table}.${column}:`);
       }
     }
   }
@@ -956,6 +1045,7 @@ function loadConfig() {
   const workspaces = loadWorkspaces(d);
   return {
     version: 1,
+    revision: readConfigRevision(d),
     defaults,
     projects,
     agentCommands: Object.keys(agentCommands).length > 0 ? agentCommands : { ...DEFAULT_AGENT_COMMANDS },
@@ -1027,6 +1117,7 @@ function loadDefaults(d) {
     ...map.mobileAccessEnabled !== void 0 && {
       mobileAccessEnabled: map.mobileAccessEnabled
     },
+    ...map.serverPort !== void 0 && { serverPort: map.serverPort },
     ...map.networkAccessEnabled !== void 0 && {
       networkAccessEnabled: map.networkAccessEnabled
     },
@@ -1038,6 +1129,23 @@ function loadDefaults(d) {
     },
     ...map.hasSeededDefaultTaskWorkflow !== void 0 && {
       hasSeededDefaultTaskWorkflow: map.hasSeededDefaultTaskWorkflow
+    },
+    // The four below were declared in AppConfig and consumed, but never listed
+    // here — exactly the failure the comment above describes. Each was written on
+    // save and dropped on the next load, so the setting appeared to work until a
+    // reload. `worktreeRetention` is the worst of them: it is read server-side
+    // (register-methods.ts) and so always resolved to undefined.
+    ...map.updateAutoDownload !== void 0 && {
+      updateAutoDownload: map.updateAutoDownload
+    },
+    ...map.headlessStepTimeoutMinutes !== void 0 && {
+      headlessStepTimeoutMinutes: map.headlessStepTimeoutMinutes
+    },
+    ...map.enableHoverPreview !== void 0 && {
+      enableHoverPreview: map.enableHoverPreview
+    },
+    ...map.worktreeRetention !== void 0 && {
+      worktreeRetention: map.worktreeRetention
     }
   };
 }
@@ -1086,19 +1194,48 @@ function loadWorkspaces(d) {
   const rows = d.prepare('SELECT * FROM workspaces ORDER BY "order"').all();
   return rows.map(rowToWorkspace);
 }
+function pruneMissing(d, table, keyColumn, keep, baseRevision) {
+  const wanted = new Set(keep.filter((k) => typeof k === "string"));
+  const existing = d.prepare(`SELECT ${keyColumn} AS key, row_revision AS revision FROM ${table}`).all();
+  const remove = d.prepare(`DELETE FROM ${table} WHERE ${keyColumn} = ?`);
+  for (const { key, revision } of existing) {
+    if (wanted.has(key)) continue;
+    if (revision > baseRevision) continue;
+    remove.run(key);
+  }
+}
 function saveConfig(config) {
   const d = getDb();
   const run = d.transaction(() => {
-    d.prepare("DELETE FROM defaults").run();
-    const insertDefault = d.prepare("INSERT INTO defaults (key, value) VALUES (?, ?)");
+    const baseRevision = config.revision ?? Number.MAX_SAFE_INTEGER;
+    const revision = readConfigRevision(d) + 1;
+    const upsertDefault = d.prepare(
+      `INSERT INTO defaults (key, value) VALUES (?, ?)
+       ON CONFLICT(key) DO UPDATE SET value = excluded.value`
+    );
+    const deleteDefault = d.prepare("DELETE FROM defaults WHERE key = ?");
     for (const [key, value] of Object.entries(config.defaults)) {
-      if (value !== void 0) {
-        insertDefault.run(key, JSON.stringify(value));
-      }
+      if (value === void 0) deleteDefault.run(key);
+      else upsertDefault.run(key, JSON.stringify(value));
     }
-    d.prepare("DELETE FROM projects").run();
+    pruneMissing(
+      d,
+      "projects",
+      "name",
+      config.projects.map((p) => p.name),
+      baseRevision
+    );
     const insertProject = d.prepare(
-      "INSERT INTO projects (name, path, preferred_agents, icon, icon_color, host_ids, workspace_id) VALUES (?, ?, ?, ?, ?, ?, ?)"
+      `INSERT INTO projects (name, path, preferred_agents, icon, icon_color, host_ids, workspace_id, row_revision)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+       ON CONFLICT(name) DO UPDATE SET
+         row_revision = excluded.row_revision,
+         path = excluded.path,
+         preferred_agents = excluded.preferred_agents,
+         icon = excluded.icon,
+         icon_color = excluded.icon_color,
+         host_ids = excluded.host_ids,
+         workspace_id = excluded.workspace_id`
     );
     for (const p of config.projects) {
       insertProject.run(
@@ -1108,7 +1245,8 @@ function saveConfig(config) {
         p.icon ?? null,
         p.iconColor ?? null,
         p.hostIds ? JSON.stringify(p.hostIds) : null,
-        p.workspaceId ?? "personal"
+        p.workspaceId ?? "personal",
+        revision
       );
     }
     const workflows = config.workflows ?? [];
@@ -1148,9 +1286,23 @@ function saveConfig(config) {
         w.workspaceId ?? "personal"
       );
     }
-    d.prepare("DELETE FROM agent_commands").run();
+    pruneMissing(
+      d,
+      "agent_commands",
+      "agent_type",
+      Object.keys(config.agentCommands ?? {}),
+      baseRevision
+    );
     const insertAgent = d.prepare(
-      "INSERT INTO agent_commands (agent_type, command, args, headless_args, fallback_command, fallback_args) VALUES (?, ?, ?, ?, ?, ?)"
+      `INSERT INTO agent_commands (agent_type, command, args, headless_args, fallback_command, fallback_args, row_revision)
+       VALUES (?, ?, ?, ?, ?, ?, ?)
+       ON CONFLICT(agent_type) DO UPDATE SET
+         row_revision = excluded.row_revision,
+         command = excluded.command,
+         args = excluded.args,
+         headless_args = excluded.headless_args,
+         fallback_command = excluded.fallback_command,
+         fallback_args = excluded.fallback_args`
     );
     if (config.agentCommands) {
       for (const [agentType, cmd] of Object.entries(config.agentCommands)) {
@@ -1161,14 +1313,33 @@ function saveConfig(config) {
             JSON.stringify(cmd.args),
             cmd.headlessArgs ? JSON.stringify(cmd.headlessArgs) : null,
             cmd.fallbackCommand ?? null,
-            cmd.fallbackArgs ? JSON.stringify(cmd.fallbackArgs) : null
+            cmd.fallbackArgs ? JSON.stringify(cmd.fallbackArgs) : null,
+            revision
           );
         }
       }
     }
-    d.prepare("DELETE FROM remote_hosts").run();
+    pruneMissing(
+      d,
+      "remote_hosts",
+      "id",
+      (config.remoteHosts ?? []).map((h) => h.id),
+      baseRevision
+    );
     const insertHost = d.prepare(
-      "INSERT INTO remote_hosts (id, label, hostname, user, port, auth_method, ssh_key_path, credential_id, encrypted_password, ssh_options) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)"
+      `INSERT INTO remote_hosts (id, label, hostname, user, port, auth_method, ssh_key_path, credential_id, encrypted_password, ssh_options, row_revision)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+       ON CONFLICT(id) DO UPDATE SET
+         row_revision = excluded.row_revision,
+         label = excluded.label,
+         hostname = excluded.hostname,
+         user = excluded.user,
+         port = excluded.port,
+         auth_method = excluded.auth_method,
+         ssh_key_path = excluded.ssh_key_path,
+         credential_id = excluded.credential_id,
+         encrypted_password = excluded.encrypted_password,
+         ssh_options = excluded.ssh_options`
     );
     for (const h of config.remoteHosts ?? []) {
       insertHost.run(
@@ -1181,13 +1352,39 @@ function saveConfig(config) {
         h.sshKeyPath ?? null,
         h.credentialId ?? null,
         h.encryptedPassword ?? null,
-        h.sshOptions ?? null
+        h.sshOptions ?? null,
+        revision
       );
     }
-    d.prepare("DELETE FROM tasks").run();
+    pruneMissing(
+      d,
+      "tasks",
+      "id",
+      (config.tasks ?? []).map((t) => t.id),
+      baseRevision
+    );
     const insertTask = d.prepare(
-      `INSERT INTO tasks (id, project_name, title, description, status, "order", assigned_session_id, assigned_agent, agent_session_id, branch, use_worktree, created_at, updated_at, completed_at, archived_at, source_connector_id, source_external_url, source_external_id)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
+      `INSERT INTO tasks (id, project_name, title, description, status, "order", assigned_session_id, assigned_agent, agent_session_id, branch, use_worktree, created_at, updated_at, completed_at, archived_at, source_connector_id, source_external_url, source_external_id, row_revision)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+       ON CONFLICT(id) DO UPDATE SET
+         row_revision = excluded.row_revision,
+         project_name = excluded.project_name,
+         title = excluded.title,
+         description = excluded.description,
+         status = excluded.status,
+         "order" = excluded."order",
+         assigned_session_id = excluded.assigned_session_id,
+         assigned_agent = excluded.assigned_agent,
+         agent_session_id = excluded.agent_session_id,
+         branch = excluded.branch,
+         use_worktree = excluded.use_worktree,
+         created_at = excluded.created_at,
+         updated_at = excluded.updated_at,
+         completed_at = excluded.completed_at,
+         archived_at = excluded.archived_at,
+         source_connector_id = excluded.source_connector_id,
+         source_external_url = excluded.source_external_url,
+         source_external_id = excluded.source_external_id`
     );
     for (const t of config.tasks ?? []) {
       insertTask.run(
@@ -1208,307 +1405,37 @@ function saveConfig(config) {
         t.archivedAt ?? null,
         t.sourceConnectorId ?? null,
         t.sourceExternalUrl ?? null,
-        t.sourceExternalId ?? null
+        t.sourceExternalId ?? null,
+        revision
       );
     }
-    d.prepare("DELETE FROM workspaces").run();
+    const workspaces = config.workspaces ?? [DEFAULT_WORKSPACE];
+    pruneMissing(
+      d,
+      "workspaces",
+      "id",
+      workspaces.map((ws) => ws.id),
+      baseRevision
+    );
     const insertWorkspace = d.prepare(
-      `INSERT INTO workspaces (id, name, icon, icon_color, "order") VALUES (?, ?, ?, ?, ?)`
+      `INSERT INTO workspaces (id, name, icon, icon_color, "order", row_revision) VALUES (?, ?, ?, ?, ?, ?)
+       ON CONFLICT(id) DO UPDATE SET
+         row_revision = excluded.row_revision,
+         name = excluded.name,
+         icon = excluded.icon,
+         icon_color = excluded.icon_color,
+         "order" = excluded."order"`
     );
-    for (const ws of config.workspaces ?? [DEFAULT_WORKSPACE]) {
-      insertWorkspace.run(ws.id, ws.name, ws.icon ?? null, ws.iconColor ?? null, ws.order);
+    for (const ws of workspaces) {
+      insertWorkspace.run(ws.id, ws.name, ws.icon ?? null, ws.iconColor ?? null, ws.order, revision);
     }
+    d.prepare("INSERT OR REPLACE INTO schema_meta (key, value) VALUES (?, ?)").run(
+      CONFIG_REVISION_KEY,
+      String(revision)
+    );
   });
   run();
 }
-function dbListTasks(projectName, status) {
-  const d = getDb();
-  let sql = "SELECT * FROM tasks";
-  const params = [];
-  const clauses = [];
-  if (projectName) {
-    clauses.push("project_name = ?");
-    params.push(projectName);
-  }
-  if (status) {
-    clauses.push("status = ?");
-    params.push(status);
-  }
-  if (clauses.length) sql += " WHERE " + clauses.join(" AND ");
-  sql += ' ORDER BY "order"';
-  const rows = d.prepare(sql).all(...params);
-  return rows.map(rowToTask);
-}
-function dbGetTask(id) {
-  const row = getDb().prepare("SELECT * FROM tasks WHERE id = ?").get(id);
-  return row ? rowToTask(row) : null;
-}
-function dbInsertTask(task) {
-  getDb().prepare(
-    `INSERT INTO tasks (id, project_name, title, description, status, "order", assigned_session_id, assigned_agent, agent_session_id, branch, use_worktree, created_at, updated_at, completed_at, archived_at, source_connector_id, source_external_url, source_external_id)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
-  ).run(
-    task.id,
-    task.projectName,
-    task.title,
-    task.description,
-    task.status,
-    task.order,
-    task.assignedSessionId ?? null,
-    task.assignedAgent ?? null,
-    task.agentSessionId ?? null,
-    task.branch ?? null,
-    task.useWorktree ? 1 : 0,
-    task.createdAt,
-    task.updatedAt,
-    task.completedAt ?? null,
-    task.archivedAt ?? null,
-    task.sourceConnectorId ?? null,
-    task.sourceExternalUrl ?? null,
-    task.sourceExternalId ?? null
-  );
-}
-function dbUpdateTask(id, updates) {
-  const sets = [];
-  const params = [];
-  if (updates.title !== void 0) {
-    sets.push("title = ?");
-    params.push(updates.title);
-  }
-  if (updates.description !== void 0) {
-    sets.push("description = ?");
-    params.push(updates.description);
-  }
-  if (updates.status !== void 0) {
-    sets.push("status = ?");
-    params.push(updates.status);
-  }
-  if (updates.order !== void 0) {
-    sets.push('"order" = ?');
-    params.push(updates.order);
-  }
-  if (updates.branch !== void 0) {
-    sets.push("branch = ?");
-    params.push(updates.branch);
-  }
-  if (updates.useWorktree !== void 0) {
-    sets.push("use_worktree = ?");
-    params.push(updates.useWorktree ? 1 : 0);
-  }
-  if (updates.assignedAgent !== void 0) {
-    sets.push("assigned_agent = ?");
-    params.push(updates.assignedAgent);
-  }
-  if (updates.assignedSessionId !== void 0) {
-    sets.push("assigned_session_id = ?");
-    params.push(updates.assignedSessionId);
-  }
-  if (updates.agentSessionId !== void 0) {
-    sets.push("agent_session_id = ?");
-    params.push(updates.agentSessionId);
-  }
-  if (updates.updatedAt !== void 0) {
-    sets.push("updated_at = ?");
-    params.push(updates.updatedAt);
-  }
-  if ("completedAt" in updates) {
-    sets.push("completed_at = ?");
-    params.push(updates.completedAt ?? null);
-  }
-  if ("archivedAt" in updates) {
-    sets.push("archived_at = ?");
-    params.push(updates.archivedAt ?? null);
-  }
-  if (updates.sourceConnectorId !== void 0) {
-    sets.push("source_connector_id = ?");
-    params.push(updates.sourceConnectorId);
-  }
-  if (updates.sourceExternalUrl !== void 0) {
-    sets.push("source_external_url = ?");
-    params.push(updates.sourceExternalUrl);
-  }
-  if (updates.sourceExternalId !== void 0) {
-    sets.push("source_external_id = ?");
-    params.push(updates.sourceExternalId);
-  }
-  if (sets.length === 0) return;
-  params.push(id);
-  getDb().prepare(`UPDATE tasks SET ${sets.join(", ")} WHERE id = ?`).run(...params);
-}
-function dbDeleteTask(id) {
-  getDb().prepare("DELETE FROM tasks WHERE id = ?").run(id);
-}
-function dbGetMaxTaskOrder(projectName) {
-  const row = getDb().prepare('SELECT MAX("order") as m FROM tasks WHERE project_name = ?').get(projectName);
-  return row.m ?? -1;
-}
-function dbListProjects() {
-  const rows = getDb().prepare("SELECT * FROM projects").all();
-  return rows.map(rowToProject);
-}
-function dbGetProject(name) {
-  const row = getDb().prepare("SELECT * FROM projects WHERE name = ?").get(name);
-  return row ? rowToProject(row) : null;
-}
-function dbInsertProject(project) {
-  getDb().prepare(
-    "INSERT INTO projects (name, path, preferred_agents, icon, icon_color, host_ids, workspace_id) VALUES (?, ?, ?, ?, ?, ?, ?)"
-  ).run(
-    project.name,
-    project.path,
-    JSON.stringify(project.preferredAgents),
-    project.icon ?? null,
-    project.iconColor ?? null,
-    project.hostIds ? JSON.stringify(project.hostIds) : null,
-    project.workspaceId ?? "personal"
-  );
-}
-function dbUpdateProject(name, updates) {
-  const sets = [];
-  const params = [];
-  if (updates.path !== void 0) {
-    sets.push("path = ?");
-    params.push(updates.path);
-  }
-  if (updates.preferredAgents !== void 0) {
-    sets.push("preferred_agents = ?");
-    params.push(JSON.stringify(updates.preferredAgents));
-  }
-  if (updates.icon !== void 0) {
-    sets.push("icon = ?");
-    params.push(updates.icon);
-  }
-  if (updates.iconColor !== void 0) {
-    sets.push("icon_color = ?");
-    params.push(updates.iconColor);
-  }
-  if (updates.hostIds !== void 0) {
-    sets.push("host_ids = ?");
-    params.push(JSON.stringify(updates.hostIds));
-  }
-  if (updates.workspaceId !== void 0) {
-    sets.push("workspace_id = ?");
-    params.push(updates.workspaceId);
-  }
-  if (sets.length === 0) return;
-  params.push(name);
-  getDb().prepare(`UPDATE projects SET ${sets.join(", ")} WHERE name = ?`).run(...params);
-}
-function dbDeleteProject(name) {
-  const d = getDb();
-  d.transaction(() => {
-    d.prepare("DELETE FROM tasks WHERE project_name = ?").run(name);
-    d.prepare("DELETE FROM projects WHERE name = ?").run(name);
-  })();
-}
-function dbListWorkflows() {
-  const rows = getDb().prepare("SELECT * FROM workflows").all();
-  return rows.map(rowToWorkflow);
-}
-function dbInsertWorkflow(workflow) {
-  getDb().prepare(
-    `INSERT INTO workflows (id, name, icon, icon_color, nodes, edges, enabled, last_run_at, last_run_status, stagger_delay_ms, workspace_id)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
-  ).run(
-    workflow.id,
-    workflow.name,
-    workflow.icon,
-    workflow.iconColor,
-    JSON.stringify(workflow.nodes),
-    JSON.stringify(workflow.edges),
-    workflow.enabled ? 1 : 0,
-    workflow.lastRunAt ?? null,
-    workflow.lastRunStatus ?? null,
-    workflow.staggerDelayMs ?? null,
-    workflow.workspaceId ?? "personal"
-  );
-}
-function dbUpdateWorkflow(id, updates) {
-  const sets = [];
-  const params = [];
-  if (updates.name !== void 0) {
-    sets.push("name = ?");
-    params.push(updates.name);
-  }
-  if (updates.nodes !== void 0) {
-    sets.push("nodes = ?");
-    params.push(JSON.stringify(updates.nodes));
-  }
-  if (updates.edges !== void 0) {
-    sets.push("edges = ?");
-    params.push(JSON.stringify(updates.edges));
-  }
-  if (updates.icon !== void 0) {
-    sets.push("icon = ?");
-    params.push(updates.icon);
-  }
-  if (updates.iconColor !== void 0) {
-    sets.push("icon_color = ?");
-    params.push(updates.iconColor);
-  }
-  if (updates.enabled !== void 0) {
-    sets.push("enabled = ?");
-    params.push(updates.enabled ? 1 : 0);
-  }
-  if (updates.staggerDelayMs !== void 0) {
-    sets.push("stagger_delay_ms = ?");
-    params.push(updates.staggerDelayMs);
-  }
-  if (updates.workspaceId !== void 0) {
-    sets.push("workspace_id = ?");
-    params.push(updates.workspaceId);
-  }
-  if (sets.length === 0) return;
-  params.push(id);
-  getDb().prepare(`UPDATE workflows SET ${sets.join(", ")} WHERE id = ?`).run(...params);
-}
-function dbDeleteWorkflow(id) {
-  getDb().prepare("DELETE FROM workflows WHERE id = ?").run(id);
-}
-function dbListWorkspaces() {
-  const rows = getDb().prepare('SELECT * FROM workspaces ORDER BY "order"').all();
-  return rows.map(rowToWorkspace);
-}
-function dbInsertWorkspace(workspace) {
-  getDb().prepare(`INSERT INTO workspaces (id, name, icon, icon_color, "order") VALUES (?, ?, ?, ?, ?)`).run(
-    workspace.id,
-    workspace.name,
-    workspace.icon ?? null,
-    workspace.iconColor ?? null,
-    workspace.order
-  );
-}
-function dbUpdateWorkspace(id, updates) {
-  const sets = [];
-  const params = [];
-  if (updates.name !== void 0) {
-    sets.push("name = ?");
-    params.push(updates.name);
-  }
-  if (updates.icon !== void 0) {
-    sets.push("icon = ?");
-    params.push(updates.icon);
-  }
-  if (updates.iconColor !== void 0) {
-    sets.push("icon_color = ?");
-    params.push(updates.iconColor);
-  }
-  if (updates.order !== void 0) {
-    sets.push('"order" = ?');
-    params.push(updates.order);
-  }
-  if (sets.length === 0) return;
-  params.push(id);
-  getDb().prepare(`UPDATE workspaces SET ${sets.join(", ")} WHERE id = ?`).run(...params);
-}
-function dbDeleteWorkspace(id) {
-  const d = getDb();
-  d.transaction(() => {
-    d.prepare("UPDATE projects SET workspace_id = 'personal' WHERE workspace_id = ?").run(id);
-    d.prepare("UPDATE workflows SET workspace_id = 'personal' WHERE workspace_id = ?").run(id);
-    d.prepare("DELETE FROM workspaces WHERE id = ?").run(id);
-  })();
-}
 function rowToTask(r) {
   return {
     id: r.id,
@@ -1568,141 +1495,15 @@ function rowToWorkspace(r) {
     order: r.order
   };
 }
-function mapNodeRow(n) {
-  const structured = n.structured_output != null ? parseStructuredOutput(n.structured_output) : void 0;
-  return {
-    nodeId: n.node_id,
-    status: n.status,
-    ...n.started_at != null && { startedAt: n.started_at },
-    ...n.completed_at != null && { completedAt: n.completed_at },
-    ...n.session_id != null && { sessionId: n.session_id },
-    ...n.error != null && { error: n.error },
-    ...n.logs != null && { logs: n.logs },
-    ...n.task_id != null && { taskId: n.task_id },
-    ...n.agent_session_id != null && { agentSessionId: n.agent_session_id },
-    ...n.agent_type != null && { agentType: n.agent_type },
-    ...n.project_name != null && { projectName: n.project_name },
-    ...n.project_path != null && { projectPath: n.project_path },
-    ...n.approved_at != null && { approvedAt: n.approved_at },
-    ...n.diagnostics != null && { diagnostics: n.diagnostics },
-    ...n.output != null && { output: n.output },
-    ...structured !== void 0 && { structuredOutput: structured },
-    ...n.iteration != null && { iteration: n.iteration }
-  };
-}
-function parseStructuredOutput(raw) {
-  try {
-    const parsed = JSON.parse(raw);
-    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : void 0;
-  } catch {
-    return void 0;
-  }
-}
-function fetchNodesByRunIds(d, runIds) {
-  if (runIds.length === 0) return /* @__PURE__ */ new Map();
-  const placeholders = runIds.map(() => "?").join(",");
-  const rows = d.prepare(`SELECT * FROM workflow_run_nodes WHERE run_id IN (${placeholders})`).all(...runIds);
-  const out = /* @__PURE__ */ new Map();
-  for (const r of rows) {
-    const bucket = out.get(r.run_id);
-    const node = mapNodeRow(r);
-    if (bucket) bucket.push(node);
-    else out.set(r.run_id, [node]);
-  }
-  return out;
-}
-function parseRunInputs(raw) {
-  if (!raw) return void 0;
-  try {
-    const parsed = JSON.parse(raw);
-    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : void 0;
-  } catch {
-    return void 0;
-  }
-}
-function mapRunRows(rows, nodesByRun) {
-  return rows.map((r) => {
-    const inputs = parseRunInputs(r.inputs);
-    const connectorItem = parseRunInputs(r.connector_item);
-    return {
-      runId: r.id,
-      workflowId: r.workflow_id,
-      startedAt: r.started_at,
-      ...r.completed_at != null && { completedAt: r.completed_at },
-      status: r.status,
-      ...r.trigger_task_id != null && { triggerTaskId: r.trigger_task_id },
-      ...inputs && { inputs },
-      ...connectorItem && { connectorItem },
-      ...r.connector_inbox_id != null && { connectorInboxId: r.connector_inbox_id },
-      ...r.connector_inbox_lease_token != null && {
-        connectorInboxLeaseToken: r.connector_inbox_lease_token
-      },
-      ...r.connector_inbox_disposition === "processed" || r.connector_inbox_disposition === "retry" ? { connectorInboxDisposition: r.connector_inbox_disposition } : {},
-      ...r.workflow_name != null && { workflowName: r.workflow_name },
-      nodeStates: nodesByRun.get(r.id) ?? []
-    };
-  });
-}
-function listWorkflowRuns(workflowId, limit = 20) {
-  const d = getDb();
-  const rows = d.prepare("SELECT * FROM workflow_runs WHERE workflow_id = ? ORDER BY started_at DESC LIMIT ?").all(workflowId, limit);
-  return mapRunRows(
-    rows,
-    fetchNodesByRunIds(
-      d,
-      rows.map((r) => r.id)
-    )
-  );
-}
-function listWorkflowRunsByTask(taskId, limit = 20) {
-  const d = getDb();
-  const rows = d.prepare(
-    `SELECT DISTINCT wr.*, w.name as workflow_name
-       FROM workflow_runs wr
-       LEFT JOIN workflows w ON w.id = wr.workflow_id
-       WHERE wr.trigger_task_id = ?
-          OR wr.id IN (SELECT run_id FROM workflow_run_nodes WHERE task_id = ?)
-       ORDER BY wr.started_at DESC
-       LIMIT ?`
-  ).all(taskId, taskId, limit);
-  return mapRunRows(
-    rows,
-    fetchNodesByRunIds(
-      d,
-      rows.map((r) => r.id)
-    )
-  );
-}
-function listAllWorkflowRuns(workspaceId, limit = 50) {
-  const d = getDb();
-  const cappedLimit = Math.max(1, Math.min(limit, 500));
-  const where = workspaceId ? `WHERE w.id IS NOT NULL AND COALESCE(w.workspace_id, 'personal') = ?` : "";
-  const sql = `SELECT wr.*, w.name as workflow_name
-               FROM workflow_runs wr
-               LEFT JOIN workflows w ON w.id = wr.workflow_id
-               ${where}
-               ORDER BY wr.started_at DESC
-               LIMIT ?`;
-  const params = workspaceId ? [workspaceId, cappedLimit] : [cappedLimit];
-  const rows = d.prepare(sql).all(...params);
-  return mapRunRows(
-    rows,
-    fetchNodesByRunIds(
-      d,
-      rows.map((r) => r.id)
-    )
-  );
-}
 
 // ../server/src/config-manager.ts
-var DB_DIR = path3.join(os2.homedir(), ".vorn");
 var ConfigManager = class {
   changeCallbacks = [];
   dbWatcher = null;
   debounceTimer = null;
   cachedConfig = null;
-  init() {
-    initDatabase();
+  init(dataDir) {
+    initDatabase(dataDir);
   }
   close() {
     this.stopWatchingDb();
@@ -1715,7 +1516,7 @@ var ConfigManager = class {
       this.cachedConfig = config;
       return config;
     } catch (err) {
-      logger_default.error("[config-manager] loadConfig failed, returning defaults:", err);
+      logger_default.error({ err }, "[config-manager] loadConfig failed, returning defaults:");
       return {
         version: 1,
         defaults: {
@@ -1735,7 +1536,7 @@ var ConfigManager = class {
       saveConfig(config);
       this.cachedConfig = null;
     } catch (err) {
-      logger_default.error("[config-manager] saveConfig failed:", err);
+      logger_default.error({ err }, "[config-manager] saveConfig failed:");
       throw err;
     }
   }
@@ -1759,7 +1560,7 @@ var ConfigManager = class {
     if (this.dbWatcher) return;
     const WATCH_SUFFIXES = [".db-signal", ".db-wal", ".db"];
     try {
-      this.dbWatcher = fs3.watch(DB_DIR, (eventType, filename) => {
+      this.dbWatcher = fs3.watch(getDataDir(), (eventType, filename) => {
         if (!filename || !WATCH_SUFFIXES.some((s) => filename.endsWith(s))) return;
         if (this.debounceTimer) clearTimeout(this.debounceTimer);
         this.debounceTimer = setTimeout(() => {
@@ -1795,30 +1596,336 @@ import crypto from "crypto";
 import path4 from "path";
 import { z as z2 } from "zod";
 
-// src/validation.ts
-import { z } from "zod";
-var safeName = z.string().min(1, "Name must not be empty").max(200, "Name must be 200 characters or less").refine((s) => !s.includes("..") && !s.includes("/") && !s.includes("\\"), {
-  message: "Name must not contain path traversal characters (.. / \\)"
-});
-var safeId = z.string().min(1, "ID must not be empty").max(100, "ID must be 100 characters or less");
-var safeTitle = z.string().min(1, "Title must not be empty").max(500, "Title must be 500 characters or less");
-var safeDescription = z.string().max(5e3, "Description must be 5000 characters or less");
-var safeShortText = z.string().max(200, "Value must be 200 characters or less");
-var safeUrl = z.string().min(1, "URL must not be empty").max(2048, "URL is too long");
-var safePrompt = z.string().max(1e4, "Prompt must be 10000 characters or less");
-var safeAbsolutePath = z.string().min(1, "Path must not be empty").max(1e3, "Path must be 1000 characters or less").refine((s) => s.startsWith("/"), { message: "Path must be absolute (start with /)" });
-var safeHexColor = z.string().regex(/^#[0-9a-fA-F]{3,8}$/, "Must be a valid hex color (e.g. #6366f1)");
-var V = {
-  name: safeName,
-  id: safeId,
-  title: safeTitle,
-  description: safeDescription,
-  shortText: safeShortText,
-  prompt: safePrompt,
-  absolutePath: safeAbsolutePath,
-  hexColor: safeHexColor,
-  url: safeUrl
-};
+// src/validation.ts
+import { z } from "zod";
+var safeName = z.string().min(1, "Name must not be empty").max(200, "Name must be 200 characters or less").refine((s) => !s.includes("..") && !s.includes("/") && !s.includes("\\"), {
+  message: "Name must not contain path traversal characters (.. / \\)"
+});
+var safeId = z.string().min(1, "ID must not be empty").max(100, "ID must be 100 characters or less");
+var safeTitle = z.string().min(1, "Title must not be empty").max(500, "Title must be 500 characters or less");
+var safeDescription = z.string().max(5e3, "Description must be 5000 characters or less");
+var safeShortText = z.string().max(200, "Value must be 200 characters or less");
+var safeUrl = z.string().min(1, "URL must not be empty").max(2048, "URL is too long");
+var safePrompt = z.string().max(1e4, "Prompt must be 10000 characters or less");
+var safeAbsolutePath = z.string().min(1, "Path must not be empty").max(1e3, "Path must be 1000 characters or less").refine((s) => s.startsWith("/"), { message: "Path must be absolute (start with /)" });
+var safeHexColor = z.string().regex(/^#[0-9a-fA-F]{3,8}$/, "Must be a valid hex color (e.g. #6366f1)");
+var V = {
+  name: safeName,
+  id: safeId,
+  title: safeTitle,
+  description: safeDescription,
+  shortText: safeShortText,
+  prompt: safePrompt,
+  absolutePath: safeAbsolutePath,
+  hexColor: safeHexColor,
+  url: safeUrl
+};
+
+// src/ws-client.ts
+import fs4 from "fs";
+import path3 from "path";
+import os2 from "os";
+import { execFileSync as execFileSync2 } from "child_process";
+import { WebSocket } from "ws";
+var DATA_DIR = process.env.VORN_DATA_DIR || path3.join(os2.homedir(), ".vorn");
+var PORT_FILE = path3.join(DATA_DIR, "ws-port");
+var LOCAL_TOKEN_FILE = path3.join(DATA_DIR, LOCAL_TOKEN_FILENAME);
+var TOKEN_FILE_MISSING_MSG = `Vorn local credential not found (${LOCAL_TOKEN_FILE}).
+The server writes it on startup and removes it on shutdown, so this usually means
+Vorn is not running. Start Vorn (or \`vorn-server serve\`) and try again.
+If the server runs with --data-dir, set VORN_DATA_DIR to the same directory.`;
+function readLocalToken() {
+  try {
+    const token = fs4.readFileSync(LOCAL_TOKEN_FILE, "utf-8").trim();
+    if (!token) throw new Error("empty");
+    return token;
+  } catch {
+    throw new Error(TOKEN_FILE_MISSING_MSG);
+  }
+}
+function connection() {
+  const result = readPort();
+  if (!result.port) {
+    const reason = "reason" in result ? result.reason : "missing";
+    throw new Error(reason === "invalid" ? PORT_FILE_INVALID_MSG : PORT_FILE_MISSING_MSG);
+  }
+  return {
+    url: `ws://127.0.0.1:${result.port}/ws`,
+    options: { headers: { Authorization: `Bearer ${readLocalToken()}` } }
+  };
+}
+var TIMEOUT_MS = 1e4;
+var IS_WIN = process.platform === "win32";
+var PORT_FILE_MISSING_MSG = IS_WIN ? `Vorn port file not found (~/.vorn/ws-port).
+The app may be running but the port file was deleted (e.g. by another instance shutting down).
+To fix, find the Vorn process and its listening port:
+  powershell -c "Get-NetTCPConnection -State Listen -OwningProcess (Get-Process Vorn).Id | Select LocalPort"
+Then write the WS port to the file:
+  echo {"port":<PORT>,"pid":<PID>} > %USERPROFILE%\\.vorn\\ws-port
+Or restart Vorn to regenerate it.` : `Vorn port file not found (~/.vorn/ws-port).
+The app may be running but the port file was deleted (e.g. by another instance shutting down).
+To fix, run:  lsof -iTCP -sTCP:LISTEN -P | grep Vorn
+Then write the WS port (the one on *:<port>) to the file:
+  echo '{"port":<PORT>,"pid":<PID>}' > ~/.vorn/ws-port
+Or restart Vorn to regenerate it.`;
+var PORT_FILE_INVALID_MSG = `Vorn port file exists but contains invalid data (~/.vorn/ws-port).
+Delete it and restart Vorn, or overwrite it with the correct port:
+  ${IS_WIN ? "del %USERPROFILE%\\.vorn\\ws-port" : "rm ~/.vorn/ws-port"}`;
+var rpcId = 0;
+var cachedPort = null;
+var cacheTimestamp = 0;
+var CACHE_TTL_MS = 5e3;
+var EXEC_OPTS = {
+  encoding: "utf-8",
+  timeout: 5e3,
+  stdio: ["pipe", "pipe", "pipe"]
+};
+function discoverPort() {
+  try {
+    if (IS_WIN) {
+      const taskOut = execFileSync2(
+        "tasklist",
+        ["/FI", "IMAGENAME eq Vorn.exe", "/FO", "CSV", "/NH"],
+        EXEC_OPTS
+      );
+      const pidMatch = taskOut.match(/"Vorn\.exe","(\d+)"/);
+      if (!pidMatch) return null;
+      const pid = pidMatch[1];
+      const lines = execFileSync2("netstat", ["-ano"], EXEC_OPTS).split("\n");
+      let fallback = null;
+      for (const line of lines) {
+        if (!line.includes("LISTENING") || !line.trim().endsWith(pid)) continue;
+        const m = line.match(/(?:0\.0\.0\.0|127\.0\.0\.1):(\d+)/);
+        if (!m) continue;
+        if (line.includes("0.0.0.0")) return parseInt(m[1], 10);
+        fallback ??= parseInt(m[1], 10);
+      }
+      return fallback;
+    } else {
+      const lines = execFileSync2("lsof", ["-iTCP", "-sTCP:LISTEN", "-P", "-n"], EXEC_OPTS).split(
+        "\n"
+      );
+      let fallback = null;
+      for (const line of lines) {
+        if (!line.includes("Vorn")) continue;
+        if (line.includes("*:")) {
+          const m = line.match(/\*:(\d+)/);
+          if (m) return parseInt(m[1], 10);
+        }
+        if (!fallback) {
+          const m = line.match(/:(\d+)\s/);
+          if (m) fallback = parseInt(m[1], 10);
+        }
+      }
+      return fallback;
+    }
+  } catch {
+  }
+  return null;
+}
+function discoverAndHeal() {
+  const now = Date.now();
+  if (cachedPort && now - cacheTimestamp < CACHE_TTL_MS) return { port: cachedPort };
+  const discovered = discoverPort();
+  cachedPort = discovered;
+  cacheTimestamp = now;
+  if (discovered) {
+    try {
+      fs4.mkdirSync(path3.dirname(PORT_FILE), { recursive: true });
+      fs4.writeFileSync(PORT_FILE, JSON.stringify({ port: discovered }), "utf-8");
+    } catch {
+    }
+    return { port: discovered };
+  }
+  return { port: null, reason: "missing" };
+}
+function readPort() {
+  try {
+    const raw = fs4.readFileSync(PORT_FILE, "utf-8").trim();
+    if (!raw) return { port: null, reason: "invalid" };
+    if (raw.startsWith("{")) {
+      const parsed = JSON.parse(raw);
+      const p2 = parsed?.port;
+      const pid = parsed?.pid;
+      if (typeof p2 !== "number" || !Number.isFinite(p2) || p2 <= 0) {
+        return { port: null, reason: "invalid" };
+      }
+      if (typeof pid === "number" && Number.isInteger(pid) && pid > 0) {
+        try {
+          process.kill(pid, 0);
+        } catch (err) {
+          if (err.code === "EPERM") return { port: p2 };
+          return discoverAndHeal();
+        }
+      }
+      return { port: p2 };
+    }
+    const p = parseInt(raw, 10);
+    return Number.isFinite(p) && p > 0 ? { port: p } : { port: null, reason: "invalid" };
+  } catch {
+    return discoverAndHeal();
+  }
+}
+async function rpcCall(method, params, timeoutMs = TIMEOUT_MS) {
+  const { url, options } = connection();
+  return new Promise((resolve, reject) => {
+    const ws = new WebSocket(url, options);
+    const id = ++rpcId;
+    const timer = setTimeout(() => {
+      ws.close();
+      reject(new Error(`RPC call "${method}" timed out after ${timeoutMs}ms`));
+    }, timeoutMs);
+    ws.on("open", () => {
+      ws.send(JSON.stringify({ jsonrpc: "2.0", id, method, params }));
+    });
+    ws.on("message", (raw) => {
+      try {
+        const msg = JSON.parse(raw.toString());
+        if (msg.id !== id) return;
+        clearTimeout(timer);
+        ws.close();
+        if (msg.error) {
+          reject(new Error(msg.error.message));
+        } else {
+          resolve(msg.result);
+        }
+      } catch {
+      }
+    });
+    ws.on("error", (err) => {
+      clearTimeout(timer);
+      reject(new Error(`Cannot connect to Vorn server: ${err.message}. Is the app running?`));
+    });
+  });
+}
+async function rpcNotify(method, params) {
+  const { url, options } = connection();
+  return new Promise((resolve, reject) => {
+    const ws = new WebSocket(url, options);
+    ws.on("open", () => {
+      ws.send(JSON.stringify({ jsonrpc: "2.0", method, params }));
+      ws.close();
+      resolve();
+    });
+    ws.on("error", (err) => {
+      reject(new Error(`Cannot connect to Vorn server: ${err.message}. Is the app running?`));
+    });
+  });
+}
+
+// src/data-access.ts
+async function loadConfig2() {
+  return rpcCall("config:load");
+}
+async function saveConfig2(config) {
+  await rpcCall("config:save", config);
+}
+async function mutate(change) {
+  const config = await loadConfig2();
+  await saveConfig2(change(config));
+}
+async function dbListProjects() {
+  return (await loadConfig2()).projects ?? [];
+}
+async function dbGetProject(name) {
+  return (await dbListProjects()).find((p) => p.name === name) ?? null;
+}
+async function dbInsertProject(project) {
+  await mutate((config) => ({ ...config, projects: [...config.projects ?? [], project] }));
+}
+async function dbUpdateProject(name, updates) {
+  await mutate((config) => ({
+    ...config,
+    projects: (config.projects ?? []).map((p) => p.name === name ? { ...p, ...updates } : p)
+  }));
+}
+async function dbDeleteProject(name) {
+  await mutate((config) => ({
+    ...config,
+    projects: (config.projects ?? []).filter((p) => p.name !== name)
+  }));
+}
+async function dbListWorkspaces() {
+  return (await loadConfig2()).workspaces ?? [];
+}
+async function dbInsertWorkspace(workspace) {
+  await mutate((config) => ({ ...config, workspaces: [...config.workspaces ?? [], workspace] }));
+}
+async function dbUpdateWorkspace(id, updates) {
+  await mutate((config) => ({
+    ...config,
+    workspaces: (config.workspaces ?? []).map((w) => w.id === id ? { ...w, ...updates } : w)
+  }));
+}
+async function dbDeleteWorkspace(id) {
+  await mutate((config) => ({
+    ...config,
+    workspaces: (config.workspaces ?? []).filter((w) => w.id !== id)
+  }));
+}
+async function dbListWorkflows() {
+  return (await loadConfig2()).workflows ?? [];
+}
+async function dbInsertWorkflow(workflow) {
+  await mutate((config) => ({ ...config, workflows: [...config.workflows ?? [], workflow] }));
+}
+async function dbUpdateWorkflow(id, updates) {
+  await mutate((config) => ({
+    ...config,
+    workflows: (config.workflows ?? []).map((w) => w.id === id ? { ...w, ...updates } : w)
+  }));
+}
+async function dbDeleteWorkflow(id) {
+  await mutate((config) => ({
+    ...config,
+    workflows: (config.workflows ?? []).filter((w) => w.id !== id)
+  }));
+}
+async function dbListTasks(projectName, status) {
+  const tasks = (await loadConfig2()).tasks ?? [];
+  return tasks.filter(
+    (t) => (projectName === void 0 || t.projectName === projectName) && (status === void 0 || t.status === status)
+  );
+}
+async function dbGetTask(id) {
+  return ((await loadConfig2()).tasks ?? []).find((t) => t.id === id) ?? null;
+}
+async function dbInsertTask(task) {
+  await mutate((config) => ({ ...config, tasks: [...config.tasks ?? [], task] }));
+}
+async function dbUpdateTask(id, updates) {
+  await mutate((config) => ({
+    ...config,
+    tasks: (config.tasks ?? []).map((t) => t.id === id ? { ...t, ...updates } : t)
+  }));
+}
+async function dbDeleteTask(id) {
+  await mutate((config) => ({
+    ...config,
+    tasks: (config.tasks ?? []).filter((t) => t.id !== id)
+  }));
+}
+async function dbGetMaxTaskOrder(projectName) {
+  const tasks = await dbListTasks(projectName);
+  return tasks.reduce((max, t) => Math.max(max, t.order ?? 0), 0);
+}
+function dbSignalChange() {
+}
+async function listWorkflowRuns(workflowId, limit = 20) {
+  return rpcCall("workflowRun:list", { workflowId, limit });
+}
+async function listWorkflowRunsByTask(taskId, limit = 20) {
+  return rpcCall("workflowRun:listByTask", {
+    taskId,
+    limit
+  });
+}
+async function listAllWorkflowRuns(workspaceId, limit = 50) {
+  return rpcCall("workflowRun:listAll", {
+    workspaceId,
+    limit
+  });
+}
 
 // src/tools/tasks.ts
 var TASK_STATUSES = ["todo", "in_progress", "in_review", "done", "cancelled"];
@@ -1841,12 +1948,12 @@ function registerTaskTools(server) {
       include_archived: z2.boolean().optional().describe("Include archived tasks in the result (default: false)")
     },
     async (args) => {
-      let tasks = dbListTasks(args.project_name, args.status);
+      let tasks = await dbListTasks(args.project_name, args.status);
       if (!args.include_archived) {
         tasks = tasks.filter((t) => !t.archivedAt);
       }
       if (args.workspace_id) {
-        const projects = dbListProjects();
+        const projects = await dbListProjects();
         const wsProjectNames = new Set(
           projects.filter((p) => (p.workspaceId ?? "personal") === args.workspace_id).map((p) => p.name)
         );
@@ -1871,14 +1978,14 @@ function registerTaskTools(server) {
       assigned_agent: z2.enum(AGENT_TYPES).optional().describe("Assign to an agent type")
     },
     async (args) => {
-      const project = dbGetProject(args.project_name);
+      const project = await dbGetProject(args.project_name);
       if (!project) {
         return {
           content: [{ type: "text", text: `Error: project "${args.project_name}" not found` }],
           isError: true
         };
       }
-      const maxOrder = dbGetMaxTaskOrder(args.project_name);
+      const maxOrder = await dbGetMaxTaskOrder(args.project_name);
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const status = args.status ?? "todo";
       const task = {
@@ -1895,13 +2002,13 @@ function registerTaskTools(server) {
         ...args.assigned_agent && { assignedAgent: args.assigned_agent },
         ...(status === "done" || status === "cancelled") && { completedAt: now }
       };
-      dbInsertTask(task);
+      await dbInsertTask(task);
       dbSignalChange();
       return { content: [{ type: "text", text: JSON.stringify(task, null, 2) }] };
     }
   );
   server.tool("get_task", "Get a task by ID", { id: V.id.describe("Task ID") }, async (args) => {
-    const task = dbGetTask(args.id);
+    const task = await dbGetTask(args.id);
     if (!task) {
       return {
         content: [{ type: "text", text: `Error: task "${args.id}" not found` }],
@@ -1924,7 +2031,7 @@ function registerTaskTools(server) {
       order: z2.number().optional().describe("Queue order")
     },
     async (args) => {
-      const task = dbGetTask(args.id);
+      const task = await dbGetTask(args.id);
       if (!task) {
         return {
           content: [{ type: "text", text: `Error: task "${args.id}" not found` }],
@@ -1950,9 +2057,9 @@ function registerTaskTools(server) {
           updates.archivedAt = void 0;
         }
       }
-      dbUpdateTask(args.id, updates);
+      await dbUpdateTask(args.id, updates);
       dbSignalChange();
-      const updated = dbGetTask(args.id);
+      const updated = await dbGetTask(args.id);
       return { content: [{ type: "text", text: JSON.stringify(updated, null, 2) }] };
     }
   );
@@ -1961,14 +2068,14 @@ function registerTaskTools(server) {
     "Delete a task by ID",
     { id: V.id.describe("Task ID") },
     async (args) => {
-      const task = dbGetTask(args.id);
+      const task = await dbGetTask(args.id);
       if (!task) {
         return {
           content: [{ type: "text", text: `Error: task "${args.id}" not found` }],
           isError: true
         };
       }
-      dbDeleteTask(args.id);
+      await dbDeleteTask(args.id);
       dbSignalChange();
       return { content: [{ type: "text", text: `Deleted task: ${task.title}` }] };
     }
@@ -1978,7 +2085,7 @@ function registerTaskTools(server) {
     "Archive a finished task (status must be done or cancelled). Archived tasks are hidden from default views but preserved and restorable.",
     { id: V.id.describe("Task ID") },
     async (args) => {
-      const task = dbGetTask(args.id);
+      const task = await dbGetTask(args.id);
       if (!task) {
         return {
           content: [{ type: "text", text: `Error: task "${args.id}" not found` }],
@@ -1997,9 +2104,9 @@ function registerTaskTools(server) {
         };
       }
       const now = (/* @__PURE__ */ new Date()).toISOString();
-      dbUpdateTask(args.id, { archivedAt: now, updatedAt: now });
+      await dbUpdateTask(args.id, { archivedAt: now, updatedAt: now });
       dbSignalChange();
-      const updated = dbGetTask(args.id);
+      const updated = await dbGetTask(args.id);
       return { content: [{ type: "text", text: JSON.stringify(updated, null, 2) }] };
     }
   );
@@ -2008,7 +2115,7 @@ function registerTaskTools(server) {
     "Restore an archived task so it shows in default views again.",
     { id: V.id.describe("Task ID") },
     async (args) => {
-      const task = dbGetTask(args.id);
+      const task = await dbGetTask(args.id);
       if (!task) {
         return {
           content: [{ type: "text", text: `Error: task "${args.id}" not found` }],
@@ -2016,9 +2123,9 @@ function registerTaskTools(server) {
         };
       }
       const now = (/* @__PURE__ */ new Date()).toISOString();
-      dbUpdateTask(args.id, { archivedAt: void 0, updatedAt: now });
+      await dbUpdateTask(args.id, { archivedAt: void 0, updatedAt: now });
       dbSignalChange();
-      const updated = dbGetTask(args.id);
+      const updated = await dbGetTask(args.id);
       return { content: [{ type: "text", text: JSON.stringify(updated, null, 2) }] };
     }
   );
@@ -2033,15 +2140,15 @@ function registerTaskTools(server) {
     },
     async (args) => {
       if (args.task_id) {
-        const task = dbGetTask(args.task_id);
+        const task = await dbGetTask(args.task_id);
         if (!task) {
           return {
             content: [{ type: "text", text: `Error: task "${args.task_id}" not found` }],
             isError: true
           };
         }
-        const project = dbGetProject(task.projectName);
-        const siblingTasks = dbListTasks(task.projectName);
+        const project = await dbGetProject(task.projectName);
+        const siblingTasks = await dbListTasks(task.projectName);
         return {
           content: [
             {
@@ -2066,7 +2173,7 @@ function registerTaskTools(server) {
       }
       const cwd = args.cwd || process.cwd();
       const normalizedCwd = path4.resolve(cwd);
-      const projects = dbListProjects();
+      const projects = await dbListProjects();
       let matchedProject = null;
       let matchLen = 0;
       for (const p of projects) {
@@ -2094,7 +2201,7 @@ function registerTaskTools(server) {
           ]
         };
       }
-      const projectTasks = dbListTasks(matchedProject.name);
+      const projectTasks = await dbListTasks(matchedProject.name);
       let matchedTask = null;
       for (const t of projectTasks) {
         if (t.worktreePath) {
@@ -2150,7 +2257,7 @@ function registerProjectTools(server) {
       workspace_id: V.id.optional().describe('Filter by workspace ID (e.g. "personal")')
     },
     async (args) => {
-      let projects = dbListProjects();
+      let projects = await dbListProjects();
       if (args.workspace_id) {
         projects = projects.filter((p) => (p.workspaceId ?? "personal") === args.workspace_id);
       }
@@ -2168,7 +2275,7 @@ function registerProjectTools(server) {
       icon_color: V.hexColor.optional().describe("Hex color for icon")
     },
     async (args) => {
-      if (dbGetProject(args.name)) {
+      if (await dbGetProject(args.name)) {
         return {
           content: [{ type: "text", text: `Error: project "${args.name}" already exists` }],
           isError: true
@@ -2181,7 +2288,7 @@ function registerProjectTools(server) {
         ...args.icon && { icon: args.icon },
         ...args.icon_color && { iconColor: args.icon_color }
       };
-      dbInsertProject(project);
+      await dbInsertProject(project);
       dbSignalChange();
       return { content: [{ type: "text", text: JSON.stringify(project, null, 2) }] };
     }
@@ -2197,7 +2304,7 @@ function registerProjectTools(server) {
       icon_color: V.hexColor.optional().describe("Hex color for icon")
     },
     async (args) => {
-      if (!dbGetProject(args.name)) {
+      if (!await dbGetProject(args.name)) {
         return {
           content: [{ type: "text", text: `Error: project "${args.name}" not found` }],
           isError: true
@@ -2209,9 +2316,9 @@ function registerProjectTools(server) {
         updates.preferredAgents = args.preferred_agents;
       if (args.icon !== void 0) updates.icon = args.icon;
       if (args.icon_color !== void 0) updates.iconColor = args.icon_color;
-      dbUpdateProject(args.name, updates);
+      await dbUpdateProject(args.name, updates);
       dbSignalChange();
-      const updated = dbGetProject(args.name);
+      const updated = await dbGetProject(args.name);
       return { content: [{ type: "text", text: JSON.stringify(updated, null, 2) }] };
     }
   );
@@ -2220,13 +2327,13 @@ function registerProjectTools(server) {
     "Delete a project and all its tasks",
     { name: V.name.describe("Project name") },
     async (args) => {
-      if (!dbGetProject(args.name)) {
+      if (!await dbGetProject(args.name)) {
         return {
           content: [{ type: "text", text: `Error: project "${args.name}" not found` }],
           isError: true
         };
       }
-      dbDeleteProject(args.name);
+      await dbDeleteProject(args.name);
       dbSignalChange();
       return { content: [{ type: "text", text: `Deleted project: ${args.name}` }] };
     }
@@ -2235,180 +2342,6 @@ function registerProjectTools(server) {
 
 // src/tools/sessions.ts
 import { z as z4 } from "zod";
-
-// src/ws-client.ts
-import fs4 from "fs";
-import path5 from "path";
-import os3 from "os";
-import { execFileSync as execFileSync2 } from "child_process";
-import { WebSocket } from "ws";
-var PORT_FILE = path5.join(os3.homedir(), ".vorn", "ws-port");
-var TIMEOUT_MS = 1e4;
-var IS_WIN = process.platform === "win32";
-var PORT_FILE_MISSING_MSG = IS_WIN ? `Vorn port file not found (~/.vorn/ws-port).
-The app may be running but the port file was deleted (e.g. by another instance shutting down).
-To fix, find the Vorn process and its listening port:
-  powershell -c "Get-NetTCPConnection -State Listen -OwningProcess (Get-Process Vorn).Id | Select LocalPort"
-Then write the WS port to the file:
-  echo {"port":<PORT>,"pid":<PID>} > %USERPROFILE%\\.vorn\\ws-port
-Or restart Vorn to regenerate it.` : `Vorn port file not found (~/.vorn/ws-port).
-The app may be running but the port file was deleted (e.g. by another instance shutting down).
-To fix, run:  lsof -iTCP -sTCP:LISTEN -P | grep Vorn
-Then write the WS port (the one on *:<port>) to the file:
-  echo '{"port":<PORT>,"pid":<PID>}' > ~/.vorn/ws-port
-Or restart Vorn to regenerate it.`;
-var PORT_FILE_INVALID_MSG = `Vorn port file exists but contains invalid data (~/.vorn/ws-port).
-Delete it and restart Vorn, or overwrite it with the correct port:
-  ${IS_WIN ? "del %USERPROFILE%\\.vorn\\ws-port" : "rm ~/.vorn/ws-port"}`;
-var rpcId = 0;
-var cachedPort = null;
-var cacheTimestamp = 0;
-var CACHE_TTL_MS = 5e3;
-var EXEC_OPTS = {
-  encoding: "utf-8",
-  timeout: 5e3,
-  stdio: ["pipe", "pipe", "pipe"]
-};
-function discoverPort() {
-  try {
-    if (IS_WIN) {
-      const taskOut = execFileSync2(
-        "tasklist",
-        ["/FI", "IMAGENAME eq Vorn.exe", "/FO", "CSV", "/NH"],
-        EXEC_OPTS
-      );
-      const pidMatch = taskOut.match(/"Vorn\.exe","(\d+)"/);
-      if (!pidMatch) return null;
-      const pid = pidMatch[1];
-      const lines = execFileSync2("netstat", ["-ano"], EXEC_OPTS).split("\n");
-      let fallback = null;
-      for (const line of lines) {
-        if (!line.includes("LISTENING") || !line.trim().endsWith(pid)) continue;
-        const m = line.match(/(?:0\.0\.0\.0|127\.0\.0\.1):(\d+)/);
-        if (!m) continue;
-        if (line.includes("0.0.0.0")) return parseInt(m[1], 10);
-        fallback ??= parseInt(m[1], 10);
-      }
-      return fallback;
-    } else {
-      const lines = execFileSync2("lsof", ["-iTCP", "-sTCP:LISTEN", "-P", "-n"], EXEC_OPTS).split(
-        "\n"
-      );
-      let fallback = null;
-      for (const line of lines) {
-        if (!line.includes("Vorn")) continue;
-        if (line.includes("*:")) {
-          const m = line.match(/\*:(\d+)/);
-          if (m) return parseInt(m[1], 10);
-        }
-        if (!fallback) {
-          const m = line.match(/:(\d+)\s/);
-          if (m) fallback = parseInt(m[1], 10);
-        }
-      }
-      return fallback;
-    }
-  } catch {
-  }
-  return null;
-}
-function discoverAndHeal() {
-  const now = Date.now();
-  if (cachedPort && now - cacheTimestamp < CACHE_TTL_MS) return { port: cachedPort };
-  const discovered = discoverPort();
-  cachedPort = discovered;
-  cacheTimestamp = now;
-  if (discovered) {
-    try {
-      fs4.mkdirSync(path5.dirname(PORT_FILE), { recursive: true });
-      fs4.writeFileSync(PORT_FILE, JSON.stringify({ port: discovered }), "utf-8");
-    } catch {
-    }
-    return { port: discovered };
-  }
-  return { port: null, reason: "missing" };
-}
-function readPort() {
-  try {
-    const raw = fs4.readFileSync(PORT_FILE, "utf-8").trim();
-    if (!raw) return { port: null, reason: "invalid" };
-    if (raw.startsWith("{")) {
-      const parsed = JSON.parse(raw);
-      const p2 = parsed?.port;
-      const pid = parsed?.pid;
-      if (typeof p2 !== "number" || !Number.isFinite(p2) || p2 <= 0) {
-        return { port: null, reason: "invalid" };
-      }
-      if (typeof pid === "number" && Number.isInteger(pid) && pid > 0) {
-        try {
-          process.kill(pid, 0);
-        } catch (err) {
-          if (err.code === "EPERM") return { port: p2 };
-          return discoverAndHeal();
-        }
-      }
-      return { port: p2 };
-    }
-    const p = parseInt(raw, 10);
-    return Number.isFinite(p) && p > 0 ? { port: p } : { port: null, reason: "invalid" };
-  } catch {
-    return discoverAndHeal();
-  }
-}
-async function rpcCall(method, params, timeoutMs = TIMEOUT_MS) {
-  const result = readPort();
-  if (!result.port) {
-    throw new Error(result.reason === "invalid" ? PORT_FILE_INVALID_MSG : PORT_FILE_MISSING_MSG);
-  }
-  return new Promise((resolve, reject) => {
-    const ws = new WebSocket(`ws://127.0.0.1:${result.port}/ws`);
-    const id = ++rpcId;
-    const timer = setTimeout(() => {
-      ws.close();
-      reject(new Error(`RPC call "${method}" timed out after ${timeoutMs}ms`));
-    }, timeoutMs);
-    ws.on("open", () => {
-      ws.send(JSON.stringify({ jsonrpc: "2.0", id, method, params }));
-    });
-    ws.on("message", (raw) => {
-      try {
-        const msg = JSON.parse(raw.toString());
-        if (msg.id !== id) return;
-        clearTimeout(timer);
-        ws.close();
-        if (msg.error) {
-          reject(new Error(msg.error.message));
-        } else {
-          resolve(msg.result);
-        }
-      } catch {
-      }
-    });
-    ws.on("error", (err) => {
-      clearTimeout(timer);
-      reject(new Error(`Cannot connect to Vorn server: ${err.message}. Is the app running?`));
-    });
-  });
-}
-async function rpcNotify(method, params) {
-  const result = readPort();
-  if (!result.port) {
-    throw new Error(result.reason === "invalid" ? PORT_FILE_INVALID_MSG : PORT_FILE_MISSING_MSG);
-  }
-  return new Promise((resolve, reject) => {
-    const ws = new WebSocket(`ws://127.0.0.1:${result.port}/ws`);
-    ws.on("open", () => {
-      ws.send(JSON.stringify({ jsonrpc: "2.0", method, params }));
-      ws.close();
-      resolve();
-    });
-    ws.on("error", (err) => {
-      reject(new Error(`Cannot connect to Vorn server: ${err.message}. Is the app running?`));
-    });
-  });
-}
-
-// src/tools/sessions.ts
 var AGENT_TYPES3 = [
   "claude",
   "copilot",
@@ -3138,7 +3071,7 @@ function registerWorkflowTools(server) {
       workspace_id: V.id.optional().describe("Filter by workspace ID")
     },
     async (args) => {
-      let workflows = dbListWorkflows();
+      let workflows = await dbListWorkflows();
       if (args.workspace_id) {
         workflows = workflows.filter((w) => (w.workspaceId ?? "personal") === args.workspace_id);
       }
@@ -3191,7 +3124,7 @@ function registerWorkflowTools(server) {
         enabled: args.enabled ?? true,
         ...args.stagger_delay_ms && { staggerDelayMs: args.stagger_delay_ms }
       };
-      dbInsertWorkflow(workflow);
+      await dbInsertWorkflow(workflow);
       dbSignalChange();
       return { content: [{ type: "text", text: JSON.stringify(workflow, null, 2) }] };
     }
@@ -3215,7 +3148,7 @@ function registerWorkflowTools(server) {
       if ("error" in resolved) {
         return { content: [{ type: "text", text: `Error: ${resolved.error}` }], isError: true };
       }
-      const workflows = dbListWorkflows();
+      const workflows = await dbListWorkflows();
       const workflow = workflows.find((w) => w.id === resolved.id);
       if (!workflow) {
         return {
@@ -3242,7 +3175,7 @@ function registerWorkflowTools(server) {
       if (args.icon_color !== void 0) updates.iconColor = args.icon_color;
       if (args.enabled !== void 0) updates.enabled = args.enabled;
       if (args.stagger_delay_ms !== void 0) updates.staggerDelayMs = args.stagger_delay_ms;
-      dbUpdateWorkflow(resolved.id, updates);
+      await dbUpdateWorkflow(resolved.id, updates);
       dbSignalChange();
       return {
         content: [{ type: "text", text: JSON.stringify({ ...workflow, ...updates }, null, 2) }]
@@ -3261,7 +3194,7 @@ function registerWorkflowTools(server) {
       if ("error" in resolved) {
         return { content: [{ type: "text", text: `Error: ${resolved.error}` }], isError: true };
       }
-      const workflows = dbListWorkflows();
+      const workflows = await dbListWorkflows();
       const workflow = workflows.find((w) => w.id === resolved.id);
       if (!workflow) {
         return {
@@ -3269,7 +3202,7 @@ function registerWorkflowTools(server) {
           isError: true
         };
       }
-      dbDeleteWorkflow(resolved.id);
+      await dbDeleteWorkflow(resolved.id);
       dbSignalChange();
       return { content: [{ type: "text", text: `Deleted workflow: ${workflow.name}` }] };
     }
@@ -3290,11 +3223,11 @@ function registerWorkflowTools(server) {
         };
       }
       if (args.task_id) {
-        const runs = listWorkflowRunsByTask(args.task_id, args.limit ?? 20);
+        const runs = await listWorkflowRunsByTask(args.task_id, args.limit ?? 20);
         return { content: [{ type: "text", text: JSON.stringify(runs, null, 2) }] };
       }
       if (args.workflow_id) {
-        const runs = listWorkflowRuns(args.workflow_id, args.limit ?? 20);
+        const runs = await listWorkflowRuns(args.workflow_id, args.limit ?? 20);
         return { content: [{ type: "text", text: JSON.stringify(runs, null, 2) }] };
       }
       return {
@@ -3310,7 +3243,7 @@ function registerWorkflowTools(server) {
       run_id: V.id.describe("Run ID (from list_workflow_runs)")
     },
     async (args) => {
-      const run = listAllWorkflowRuns(void 0, 500).find((r) => r.runId === args.run_id);
+      const run = (await listAllWorkflowRuns(void 0, 500)).find((r) => r.runId === args.run_id);
       if (!run) {
         return {
           content: [
@@ -3401,7 +3334,7 @@ The run is stopped by the instance holding it, so confirm with list_workflow_run
       inputs: z5.record(z5.string(), z5.union([z5.string(), z5.number(), z5.boolean()])).optional().describe("Values for the declared parameters, keyed by input key ({{inputs.<key>}})")
     },
     async (args) => {
-      const workflow = dbListWorkflows().find((w) => w.id === args.workflow_id);
+      const workflow = (await dbListWorkflows()).find((w) => w.id === args.workflow_id);
       if (!workflow) {
         return {
           content: [{ type: "text", text: `Error: workflow "${args.workflow_id}" not found` }],
@@ -3462,7 +3395,7 @@ Run history: list_workflow_runs with workflow_id ${args.workflow_id}`
       if ("error" in resolved) {
         return { content: [{ type: "text", text: `Error: ${resolved.error}` }], isError: true };
       }
-      const workflow = dbListWorkflows().find((w) => w.id === resolved.id);
+      const workflow = (await dbListWorkflows()).find((w) => w.id === resolved.id);
       if (!workflow) {
         return {
           content: [{ type: "text", text: `Error: workflow "${resolved.id}" not found` }],
@@ -3481,7 +3414,7 @@ Run history: list_workflow_runs with workflow_id ${args.workflow_id}`
           isError: true
         };
       }
-      const projects = dbListProjects();
+      const projects = await dbListProjects();
       const projectName = workflow.nodes.map((n) => n.config.projectName).find((name) => typeof name === "string" && name.length > 0);
       const project = projects.find((p) => p.name === projectName);
       if (!project) {
@@ -3549,7 +3482,7 @@ Warning: these still hold a machine-specific path and will not travel: ${residua
           isError: true
         };
       }
-      const project = dbListProjects().find((p) => p.name === args.project_name);
+      const project = (await dbListProjects()).find((p) => p.name === args.project_name);
       if (!project) {
         return {
           content: [
@@ -3591,11 +3524,11 @@ Warning: these still hold a machine-specific path and will not travel: ${residua
           isError: true
         };
       }
-      const existing = dbListWorkflows().find((w) => w.id === definition.id);
+      const existing = (await dbListWorkflows()).find((w) => w.id === definition.id);
       if (existing) {
-        dbUpdateWorkflow(definition.id, definition);
+        await dbUpdateWorkflow(definition.id, definition);
       } else {
-        dbInsertWorkflow(definition);
+        await dbInsertWorkflow(definition);
       }
       dbSignalChange();
       return {
@@ -3627,7 +3560,7 @@ import crypto3 from "crypto";
 import { z as z6 } from "zod";
 function registerWorkspaceTools(server) {
   server.tool("list_workspaces", "List all workspaces", async () => {
-    const workspaces = dbListWorkspaces();
+    const workspaces = await dbListWorkspaces();
     return { content: [{ type: "text", text: JSON.stringify(workspaces, null, 2) }] };
   });
   server.tool(
@@ -3639,7 +3572,7 @@ function registerWorkspaceTools(server) {
       icon_color: V.hexColor.optional().describe("Hex color for icon")
     },
     async (args) => {
-      const existing = dbListWorkspaces();
+      const existing = await dbListWorkspaces();
       const maxOrder = existing.reduce((max, w) => Math.max(max, w.order), 0);
       const workspace = {
         id: crypto3.randomUUID(),
@@ -3648,7 +3581,7 @@ function registerWorkspaceTools(server) {
         ...args.icon && { icon: args.icon },
         ...args.icon_color && { iconColor: args.icon_color }
       };
-      dbInsertWorkspace(workspace);
+      await dbInsertWorkspace(workspace);
       dbSignalChange();
       return { content: [{ type: "text", text: JSON.stringify(workspace, null, 2) }] };
     }
@@ -3664,7 +3597,7 @@ function registerWorkspaceTools(server) {
       order: z6.number().int().min(0).optional().describe("Sort order")
     },
     async (args) => {
-      const existing = dbListWorkspaces();
+      const existing = await dbListWorkspaces();
       if (!existing.find((w) => w.id === args.id)) {
         return {
           content: [{ type: "text", text: `Error: workspace "${args.id}" not found` }],
@@ -3676,9 +3609,9 @@ function registerWorkspaceTools(server) {
       if (args.icon !== void 0) updates.icon = args.icon;
       if (args.icon_color !== void 0) updates.iconColor = args.icon_color;
       if (args.order !== void 0) updates.order = args.order;
-      dbUpdateWorkspace(args.id, updates);
+      await dbUpdateWorkspace(args.id, updates);
       dbSignalChange();
-      const updated = dbListWorkspaces().find((w) => w.id === args.id);
+      const updated = (await dbListWorkspaces()).find((w) => w.id === args.id);
       return { content: [{ type: "text", text: JSON.stringify(updated, null, 2) }] };
     }
   );
@@ -3693,7 +3626,7 @@ function registerWorkspaceTools(server) {
           isError: true
         };
       }
-      const existing = dbListWorkspaces();
+      const existing = await dbListWorkspaces();
       const workspace = existing.find((w) => w.id === args.id);
       if (!workspace) {
         return {
@@ -3701,7 +3634,7 @@ function registerWorkspaceTools(server) {
           isError: true
         };
       }
-      dbDeleteWorkspace(args.id);
+      await dbDeleteWorkspace(args.id);
       dbSignalChange();
       return { content: [{ type: "text", text: `Deleted workspace: ${workspace.name}` }] };
     }
@@ -3884,7 +3817,7 @@ function registerConnectorTools(server) {
         );
       }
       const launch = typeof target === "string" ? parseLaunch(target) : target;
-      const connection = await rpcCall("connection:create", {
+      const connection2 = await rpcCall("connection:create", {
         connectorId: "mcp",
         name: args.name ?? (trigger ? `${manifest.name}: ${trigger.label}` : manifest.name),
         filters: {
@@ -3902,7 +3835,7 @@ function registerConnectorTools(server) {
       });
       return json({
         installed: manifest.name,
-        connectionId: connection.id,
+        connectionId: connection2.id,
         trigger: trigger?.type,
         note: "Poll it now with backfill_connection, or reference it from a workflow."
       });
@@ -3986,7 +3919,7 @@ function errorResult(err) {
   };
 }
 function source(label) {
-  return label.includes("WEB PAGE") ? "page" : "device";
+  return label.includes("WEB PAGE") || label.includes("BROWSER") ? "page" : "device";
 }
 function pageResult(data, label = "WEB PAGE CONTENT") {
   const nonce = crypto4.randomUUID();
@@ -4116,7 +4049,7 @@ function registerBrowserTools(server) {
   );
   server.tool(
     "browser_interact",
-    'Act on your session browser pane: click, hover, type, press a key, or scroll. Address the target by "ref" from read_page where possible \u2014 refs survive reflow, coordinates do not. A ref from before a navigation is refused rather than guessed at; re-read the page.',
+    'Act on your session browser pane: click, hover, type, press a key, or scroll. Address the target by "ref" from read_page where possible \u2014 refs survive reflow, coordinates do not. A ref from before a navigation is refused rather than guessed at; re-read the page. A ref target is scrolled into view first, so it does not need to be on screen already. "ok" means the input was dispatched, not that the page did what you expected \u2014 read the state back after anything that matters.',
     {
       action: z8.enum(["click", "hover", "type", "key", "scroll"]).describe('What to do. "type" clicks the target first when one is given.'),
       ref: V.shortText.optional().describe("Element ref from read_page"),
@@ -4147,13 +4080,19 @@ function registerBrowserTools(server) {
   );
   server.tool(
     "browser_tabs",
-    'Add, close, or switch tabs in your session browser pane. "close" and "select" take a zero-based index; closing the last remaining tab closes the pane.',
+    'List, add, close, or switch tabs in your session browser pane. "close" and "select" take a zero-based index \u2014 call "list" first to see what those indices name, since a tab that redirected or followed a link is no longer on the page it was opened with. Closing the last remaining tab closes the pane.',
     {
-      action: z8.enum(["add", "close", "select"]).describe("What to do with tabs"),
+      action: z8.enum(["list", "add", "close", "select"]).describe("What to do with tabs"),
       url: V.url.optional().describe('URL for "add"'),
       index: z8.number().int().min(0).optional().describe("Zero-based tab index for close/select")
     },
     async (args) => withSession(async (id) => {
+      if (args.action === "list") {
+        const result = await rpcCall("browser:listTabs", {
+          sessionId: id
+        });
+        return pageResult(result.tabs, "BROWSER TAB LIST");
+      }
       await rpcCall("browser:tabs", {
         sessionId: id,
         action: args.action,
@@ -4165,7 +4104,7 @@ function registerBrowserTools(server) {
   );
   server.tool(
     "browser_navigate",
-    "Navigate your session browser pane to a URL. Opens the pane first if none is open. Only http and https are allowed \u2014 the same restriction the address bar enforces for the person using the app.",
+    "Navigate your session browser pane to a URL. Opens the pane first if none is open. http and https, plus file: urls inside your session's own project or worktree \u2014 anything outside it is refused, so serve files from elsewhere over http instead. The pane carries no claude.ai login, so artifact URLs will not load in it.",
     { url: V.url.describe("URL to open") },
     async (args) => withSession(async (id) => {
       const result = await rpcCall("browser:navigate", {
@@ -4175,6 +4114,20 @@ function registerBrowserTools(server) {
       return { content: [{ type: "text", text: `Navigated to ${result.url}` }] };
     })
   );
+  server.tool(
+    "browser_history",
+    "Step back or forward through your session browser pane's own history \u2014 the same thing the pane's back and forward buttons do. Fails when there is no page to move to, rather than quietly staying put.",
+    { direction: z8.enum(["back", "forward"]).describe("Which way to step") },
+    async (args) => withSession(async (id) => {
+      const result = await rpcCall("browser:history", {
+        sessionId: id,
+        direction: args.direction
+      });
+      return {
+        content: [{ type: "text", text: `Went ${args.direction} to ${result.url}` }]
+      };
+    })
+  );
 }
 
 // src/tools/device.ts
@@ -4397,14 +4350,14 @@ Screen is ${r.screen.width}x${r.screen.height} points. Image pixels are ${r.scal
 function createMcpServer(version) {
   const server = new McpServer({ name: "vorn", version }, { capabilities: { tools: {} } });
   registerConfigTools(server);
-  registerProjectTools(server);
-  registerTaskTools(server);
   registerSessionTools(server);
-  registerWorkflowTools(server);
-  registerWorkspaceTools(server);
   registerConnectorTools(server);
   registerBrowserTools(server);
   registerDeviceTools(server);
+  registerProjectTools(server);
+  registerTaskTools(server);
+  registerWorkflowTools(server);
+  registerWorkspaceTools(server);
   return server;
 }
 
@@ -4417,7 +4370,7 @@ console.warn = (...args) => _origError("[mcp:warn]", ...args);
 console.error = (...args) => _origError("[mcp:error]", ...args);
 async function main() {
   configManager.init();
-  const version = true ? "0.6.0" : createRequire(import.meta.url)("../package.json").version;
+  const version = true ? "0.6.1-beta.1" : createRequire(import.meta.url)("../package.json").version;
   const server = createMcpServer(version);
   const transport = new StdioServerTransport();
   await server.connect(transport);