@workflow-code/cli 0.2.4-20261011006.codex-cli-web → 0.2.4-20261011008.codex-cli-web

package/dist/index.js

@@ -24,7 +24,7 @@ async function main(argv = process.argv.slice(2)) {
   const prepared = prepareCliInvocation(argv);
   argv = prepared.argv;
   if (argv[0] === "web") {
-    const webCli = await import("./web-KEM7Y2ZR.js");
+    const webCli = await import("./web-7M4WBBL7.js");
     return webCli.main(argv.slice(1));
   }
   if (argv[0] === "workspace") {

package/dist/web/kanban-workspace.js

@@ -2443,8 +2443,7 @@ ${state2.user?.avatarUrl ?? ""}`;
         void this.connect();
       });
       addEventListener("offline", () => {
-        this.source?.close();
-        clearTimeout(this.retry);
+        this.disconnect();
         this.update("offline");
       });
       addEventListener("online", () => {
@@ -2452,15 +2451,22 @@ ${state2.user?.avatarUrl ?? ""}`;
       });
       addEventListener("pagehide", () => {
         this.closed = true;
-        clearTimeout(this.retry);
-        this.source?.close();
-      }, { once: true });
+        this.disconnect();
+      });
+      addEventListener("pageshow", (event) => {
+        if (event.persisted) {
+          this.closed = false;
+          void this.connect();
+        }
+      });
     }
     emit;
     clientId = crypto.randomUUID();
     source;
     banner;
     connecting;
+    handshake;
+    epoch = 0;
     retry;
     status = "connecting";
     attempts = 0;
@@ -2480,9 +2486,17 @@ ${state2.user?.avatarUrl ?? ""}`;
       this.banner.querySelector(".connection-copy > span").textContent = status === "reconnecting" ? "\u6B63\u5728\u91CD\u65B0\u8FDE\u63A5..." : status === "offline" ? "\u7F51\u7EDC\u6062\u590D\u540E\u5C06\u81EA\u52A8\u91CD\u8FDE\u3002" : status === "expired" ? "\u8BF7\u4F7F\u7528\u9879\u76EE\u8FD0\u884C\u5730\u5740\u91CD\u65B0\u6253\u5F00\u3002" : "";
       this.banner.querySelector("button").disabled = status === "offline" || !!this.connecting;
     }
-    interrupted() {
+    disconnect() {
+      this.epoch++;
+      this.handshake?.abort();
+      this.handshake = void 0;
+      this.connecting = void 0;
       this.source?.close();
+      this.source = void 0;
       clearTimeout(this.retry);
+    }
+    interrupted() {
+      this.disconnect();
       this.update(navigator.onLine ? "reconnecting" : "offline");
       if (!this.closed && navigator.onLine) {
         this.retry = setTimeout(() => {
@@ -2502,12 +2516,18 @@ ${state2.user?.avatarUrl ?? ""}`;
         this.update("offline");
         return Promise.resolve();
       }
-      this.source?.close();
+      this.disconnect();
+      const epoch = this.epoch, handshake = this.handshake = new AbortController();
+      const active = () => epoch === this.epoch && !this.closed && navigator.onLine;
+      const signal = AbortSignal.any([handshake.signal, AbortSignal.timeout(1e4)]);
       this.update(this.attempts ? "reconnecting" : "connecting");
       this.connecting = (async () => {
         try {
           if (this.token) {
-            const session2 = await fetch("/api/session", { method: "POST", headers: { Authorization: `Bearer ${this.token}` }, signal: AbortSignal.timeout(1e4) });
+            const session2 = await fetch("/api/session", { method: "POST", headers: { Authorization: `Bearer ${this.token}` }, signal });
+            if (!active()) {
+              return;
+            }
             if (session2.status === 401) {
               this.update("expired");
               return;
@@ -2516,7 +2536,10 @@ ${state2.user?.avatarUrl ?? ""}`;
               throw new Error("Cannot connect to the project.");
             }
           }
-          const session = await fetch("/api/session", { headers: this.headers(), signal: AbortSignal.timeout(1e4) });
+          const session = await fetch("/api/session", { headers: this.headers(), signal });
+          if (!active()) {
+            return;
+          }
           if (session.status === 401) {
             this.update("expired");
             return;
@@ -2528,24 +2551,32 @@ ${state2.user?.avatarUrl ?? ""}`;
           eventsUrl.searchParams.set("clientId", this.clientId);
           const source = this.source = new EventSource(eventsUrl.href);
           source.onopen = () => {
-            this.attempts = 0;
-            this.update("connected");
+            if (active()) {
+              this.attempts = 0;
+              this.update("connected");
+            }
           };
           source.onmessage = (event) => {
-            this.emit(this.publicFiles(JSON.parse(event.data)));
+            if (active()) {
+              this.emit(this.publicFiles(JSON.parse(event.data)));
+            }
           };
           source.onerror = () => {
-            if (this.source === source && !this.closed) {
+            if (active()) {
               this.interrupted();
             }
           };
         } catch {
-          if (!this.closed) {
+          if (active()) {
             this.interrupted();
           }
         }
       })().finally(() => {
+        if (epoch !== this.epoch) {
+          return;
+        }
         this.connecting = void 0;
+        this.handshake = void 0;
         if (this.banner) {
           this.banner.querySelector("button").disabled = this.status === "offline";
         }
@@ -2557,16 +2588,22 @@ ${state2.user?.avatarUrl ?? ""}`;
       if (this.status !== "connected") {
         throw new ConnectionError("\u8FDE\u63A5\u5DF2\u4E2D\u65AD\u3002");
       }
+      const epoch = this.epoch;
       let response;
       try {
         const body = ["kanban-method-state", "kanban-method-reply"].includes(message.type) ? { ...message, clientId: this.clientId } : message;
         response = await fetch("/api/message", { method: "POST", headers: { ...this.headers(), "Content-Type": "application/json" }, body: JSON.stringify(body) });
       } catch {
-        this.interrupted();
+        if (epoch === this.epoch && !this.closed) {
+          this.interrupted();
+        }
         throw new ConnectionError("\u8FDE\u63A5\u5DF2\u4E2D\u65AD\u3002");
       }
+      if (epoch !== this.epoch || this.closed) {
+        throw new ConnectionError("\u8FDE\u63A5\u5DF2\u53D8\u66F4\u3002");
+      }
       if (response.status === 401) {
-        this.source?.close();
+        this.disconnect();
         this.update("expired");
         throw new ConnectionError("\u9879\u76EE\u8FDE\u63A5\u5DF2\u5931\u6548\u3002");
       }
@@ -2574,9 +2611,14 @@ ${state2.user?.avatarUrl ?? ""}`;
       try {
         reply = await response.json();
       } catch {
-        this.interrupted();
+        if (epoch === this.epoch && !this.closed) {
+          this.interrupted();
+        }
         throw new ConnectionError("\u8FDE\u63A5\u5DF2\u4E2D\u65AD\u3002");
       }
+      if (epoch !== this.epoch || this.closed) {
+        throw new ConnectionError("\u8FDE\u63A5\u5DF2\u53D8\u66F4\u3002");
+      }
       if (!response.ok) {
         throw new Error(reply.message || "Request failed.");
       }
@@ -4399,7 +4441,7 @@ ${state2.user?.avatarUrl ?? ""}`;
       controls();
     }
   };
-  element("usage").onclick = () => host.postMessage({ type: "usage" });
+  element("usage").onclick = () => dialogs.usage(() => host.postMessage({ type: "usage" }));
   window.addEventListener("message", (event) => {
     const message = event.data;
     if (event.source === frame.contentWindow) {
@@ -4500,7 +4542,11 @@ ${state2.user?.avatarUrl ?? ""}`;
       update(message.kanban);
     }
     if (message.type === "usage") {
-      dialogs.usage(message.usage);
+      dialogs.usageResult(message.usage);
+    }
+    if (message.type === "error" && message.requestType === "usage") {
+      dialogs.usageResult(void 0, message.message);
+      return;
     }
     if (message.type === "error" && !message.silent && !message.requestId) {
       showError(message.message);
@@ -4518,6 +4564,14 @@ ${state2.user?.avatarUrl ?? ""}`;
     clearTimeout(readyTimer);
     clearInterval(methodHeartbeat);
   });
+  addEventListener("pageshow", (event) => {
+    if (!event.persisted) {
+      return;
+    }
+    mountPreview();
+    clearInterval(methodHeartbeat);
+    methodHeartbeat = setInterval(publishMethods, 5e3);
+  });
 })();
 /*! Bundled license information:
 

package/dist/web/workflow-ui.js

@@ -2846,7 +2846,8 @@ Please report this to https://github.com/markedjs/marked.`, e) {
       if (field.type === "file" || field.control === "audio") {
         let names = "";
         try {
-          names = JSON.parse(String(value || "[]")).map((file) => file.name).join(", ");
+          const files = JSON.parse(String(value || "[]"));
+          names = (Array.isArray(files) ? files : [files]).map((file) => file?.name ?? "").join(", ");
         } catch {
         }
         const selected = document.createElement("span");
@@ -4133,8 +4134,7 @@ ${state.user?.avatarUrl ?? ""}`;
         void this.connect();
       });
       addEventListener("offline", () => {
-        this.source?.close();
-        clearTimeout(this.retry);
+        this.disconnect();
         this.update("offline");
       });
       addEventListener("online", () => {
@@ -4142,15 +4142,22 @@ ${state.user?.avatarUrl ?? ""}`;
       });
       addEventListener("pagehide", () => {
         this.closed = true;
-        clearTimeout(this.retry);
-        this.source?.close();
-      }, { once: true });
+        this.disconnect();
+      });
+      addEventListener("pageshow", (event) => {
+        if (event.persisted) {
+          this.closed = false;
+          void this.connect();
+        }
+      });
     }
     emit;
     clientId = crypto.randomUUID();
     source;
     banner;
     connecting;
+    handshake;
+    epoch = 0;
     retry;
     status = "connecting";
     attempts = 0;
@@ -4170,9 +4177,17 @@ ${state.user?.avatarUrl ?? ""}`;
       this.banner.querySelector(".connection-copy > span").textContent = status === "reconnecting" ? "\u6B63\u5728\u91CD\u65B0\u8FDE\u63A5..." : status === "offline" ? "\u7F51\u7EDC\u6062\u590D\u540E\u5C06\u81EA\u52A8\u91CD\u8FDE\u3002" : status === "expired" ? "\u8BF7\u4F7F\u7528\u9879\u76EE\u8FD0\u884C\u5730\u5740\u91CD\u65B0\u6253\u5F00\u3002" : "";
       this.banner.querySelector("button").disabled = status === "offline" || !!this.connecting;
     }
-    interrupted() {
+    disconnect() {
+      this.epoch++;
+      this.handshake?.abort();
+      this.handshake = void 0;
+      this.connecting = void 0;
       this.source?.close();
+      this.source = void 0;
       clearTimeout(this.retry);
+    }
+    interrupted() {
+      this.disconnect();
       this.update(navigator.onLine ? "reconnecting" : "offline");
       if (!this.closed && navigator.onLine) {
         this.retry = setTimeout(() => {
@@ -4192,12 +4207,18 @@ ${state.user?.avatarUrl ?? ""}`;
         this.update("offline");
         return Promise.resolve();
       }
-      this.source?.close();
+      this.disconnect();
+      const epoch = this.epoch, handshake = this.handshake = new AbortController();
+      const active = () => epoch === this.epoch && !this.closed && navigator.onLine;
+      const signal = AbortSignal.any([handshake.signal, AbortSignal.timeout(1e4)]);
       this.update(this.attempts ? "reconnecting" : "connecting");
       this.connecting = (async () => {
         try {
           if (this.token) {
-            const session2 = await fetch("/api/session", { method: "POST", headers: { Authorization: `Bearer ${this.token}` }, signal: AbortSignal.timeout(1e4) });
+            const session2 = await fetch("/api/session", { method: "POST", headers: { Authorization: `Bearer ${this.token}` }, signal });
+            if (!active()) {
+              return;
+            }
             if (session2.status === 401) {
               this.update("expired");
               return;
@@ -4206,7 +4227,10 @@ ${state.user?.avatarUrl ?? ""}`;
               throw new Error("Cannot connect to the project.");
             }
           }
-          const session = await fetch("/api/session", { headers: this.headers(), signal: AbortSignal.timeout(1e4) });
+          const session = await fetch("/api/session", { headers: this.headers(), signal });
+          if (!active()) {
+            return;
+          }
           if (session.status === 401) {
             this.update("expired");
             return;
@@ -4218,24 +4242,32 @@ ${state.user?.avatarUrl ?? ""}`;
           eventsUrl.searchParams.set("clientId", this.clientId);
           const source = this.source = new EventSource(eventsUrl.href);
           source.onopen = () => {
-            this.attempts = 0;
-            this.update("connected");
+            if (active()) {
+              this.attempts = 0;
+              this.update("connected");
+            }
           };
           source.onmessage = (event) => {
-            this.emit(this.publicFiles(JSON.parse(event.data)));
+            if (active()) {
+              this.emit(this.publicFiles(JSON.parse(event.data)));
+            }
           };
           source.onerror = () => {
-            if (this.source === source && !this.closed) {
+            if (active()) {
               this.interrupted();
             }
           };
         } catch {
-          if (!this.closed) {
+          if (active()) {
             this.interrupted();
           }
         }
       })().finally(() => {
+        if (epoch !== this.epoch) {
+          return;
+        }
         this.connecting = void 0;
+        this.handshake = void 0;
         if (this.banner) {
           this.banner.querySelector("button").disabled = this.status === "offline";
         }
@@ -4247,16 +4279,22 @@ ${state.user?.avatarUrl ?? ""}`;
       if (this.status !== "connected") {
         throw new ConnectionError("\u8FDE\u63A5\u5DF2\u4E2D\u65AD\u3002");
       }
+      const epoch = this.epoch;
       let response;
       try {
         const body = ["kanban-method-state", "kanban-method-reply"].includes(message.type) ? { ...message, clientId: this.clientId } : message;
         response = await fetch("/api/message", { method: "POST", headers: { ...this.headers(), "Content-Type": "application/json" }, body: JSON.stringify(body) });
       } catch {
-        this.interrupted();
+        if (epoch === this.epoch && !this.closed) {
+          this.interrupted();
+        }
         throw new ConnectionError("\u8FDE\u63A5\u5DF2\u4E2D\u65AD\u3002");
       }
+      if (epoch !== this.epoch || this.closed) {
+        throw new ConnectionError("\u8FDE\u63A5\u5DF2\u53D8\u66F4\u3002");
+      }
       if (response.status === 401) {
-        this.source?.close();
+        this.disconnect();
         this.update("expired");
         throw new ConnectionError("\u9879\u76EE\u8FDE\u63A5\u5DF2\u5931\u6548\u3002");
       }
@@ -4264,9 +4302,14 @@ ${state.user?.avatarUrl ?? ""}`;
       try {
         reply = await response.json();
       } catch {
-        this.interrupted();
+        if (epoch === this.epoch && !this.closed) {
+          this.interrupted();
+        }
         throw new ConnectionError("\u8FDE\u63A5\u5DF2\u4E2D\u65AD\u3002");
       }
+      if (epoch !== this.epoch || this.closed) {
+        throw new ConnectionError("\u8FDE\u63A5\u5DF2\u53D8\u66F4\u3002");
+      }
       if (!response.ok) {
         throw new Error(reply.message || "Request failed.");
       }

package/dist/web/workflow-workspace.js

@@ -5987,8 +5987,7 @@ ${state2.user?.avatarUrl ?? ""}`;
         void this.connect();
       });
       addEventListener("offline", () => {
-        this.source?.close();
-        clearTimeout(this.retry);
+        this.disconnect();
         this.update("offline");
       });
       addEventListener("online", () => {
@@ -5996,15 +5995,22 @@ ${state2.user?.avatarUrl ?? ""}`;
       });
       addEventListener("pagehide", () => {
         this.closed = true;
-        clearTimeout(this.retry);
-        this.source?.close();
-      }, { once: true });
+        this.disconnect();
+      });
+      addEventListener("pageshow", (event) => {
+        if (event.persisted) {
+          this.closed = false;
+          void this.connect();
+        }
+      });
     }
     emit;
     clientId = crypto.randomUUID();
     source;
     banner;
     connecting;
+    handshake;
+    epoch = 0;
     retry;
     status = "connecting";
     attempts = 0;
@@ -6024,9 +6030,17 @@ ${state2.user?.avatarUrl ?? ""}`;
       this.banner.querySelector(".connection-copy > span").textContent = status === "reconnecting" ? "\u6B63\u5728\u91CD\u65B0\u8FDE\u63A5..." : status === "offline" ? "\u7F51\u7EDC\u6062\u590D\u540E\u5C06\u81EA\u52A8\u91CD\u8FDE\u3002" : status === "expired" ? "\u8BF7\u4F7F\u7528\u9879\u76EE\u8FD0\u884C\u5730\u5740\u91CD\u65B0\u6253\u5F00\u3002" : "";
       this.banner.querySelector("button").disabled = status === "offline" || !!this.connecting;
     }
-    interrupted() {
+    disconnect() {
+      this.epoch++;
+      this.handshake?.abort();
+      this.handshake = void 0;
+      this.connecting = void 0;
       this.source?.close();
+      this.source = void 0;
       clearTimeout(this.retry);
+    }
+    interrupted() {
+      this.disconnect();
       this.update(navigator.onLine ? "reconnecting" : "offline");
       if (!this.closed && navigator.onLine) {
         this.retry = setTimeout(() => {
@@ -6046,12 +6060,18 @@ ${state2.user?.avatarUrl ?? ""}`;
         this.update("offline");
         return Promise.resolve();
       }
-      this.source?.close();
+      this.disconnect();
+      const epoch = this.epoch, handshake = this.handshake = new AbortController();
+      const active = () => epoch === this.epoch && !this.closed && navigator.onLine;
+      const signal = AbortSignal.any([handshake.signal, AbortSignal.timeout(1e4)]);
       this.update(this.attempts ? "reconnecting" : "connecting");
       this.connecting = (async () => {
         try {
           if (this.token) {
-            const session2 = await fetch("/api/session", { method: "POST", headers: { Authorization: `Bearer ${this.token}` }, signal: AbortSignal.timeout(1e4) });
+            const session2 = await fetch("/api/session", { method: "POST", headers: { Authorization: `Bearer ${this.token}` }, signal });
+            if (!active()) {
+              return;
+            }
             if (session2.status === 401) {
               this.update("expired");
               return;
@@ -6060,7 +6080,10 @@ ${state2.user?.avatarUrl ?? ""}`;
               throw new Error("Cannot connect to the project.");
             }
           }
-          const session = await fetch("/api/session", { headers: this.headers(), signal: AbortSignal.timeout(1e4) });
+          const session = await fetch("/api/session", { headers: this.headers(), signal });
+          if (!active()) {
+            return;
+          }
           if (session.status === 401) {
             this.update("expired");
             return;
@@ -6072,24 +6095,32 @@ ${state2.user?.avatarUrl ?? ""}`;
           eventsUrl.searchParams.set("clientId", this.clientId);
           const source = this.source = new EventSource(eventsUrl.href);
           source.onopen = () => {
-            this.attempts = 0;
-            this.update("connected");
+            if (active()) {
+              this.attempts = 0;
+              this.update("connected");
+            }
           };
           source.onmessage = (event) => {
-            this.emit(this.publicFiles(JSON.parse(event.data)));
+            if (active()) {
+              this.emit(this.publicFiles(JSON.parse(event.data)));
+            }
           };
           source.onerror = () => {
-            if (this.source === source && !this.closed) {
+            if (active()) {
               this.interrupted();
             }
           };
         } catch {
-          if (!this.closed) {
+          if (active()) {
             this.interrupted();
           }
         }
       })().finally(() => {
+        if (epoch !== this.epoch) {
+          return;
+        }
         this.connecting = void 0;
+        this.handshake = void 0;
         if (this.banner) {
           this.banner.querySelector("button").disabled = this.status === "offline";
         }
@@ -6101,16 +6132,22 @@ ${state2.user?.avatarUrl ?? ""}`;
       if (this.status !== "connected") {
         throw new ConnectionError("\u8FDE\u63A5\u5DF2\u4E2D\u65AD\u3002");
       }
+      const epoch = this.epoch;
       let response;
       try {
         const body = ["kanban-method-state", "kanban-method-reply"].includes(message.type) ? { ...message, clientId: this.clientId } : message;
         response = await fetch("/api/message", { method: "POST", headers: { ...this.headers(), "Content-Type": "application/json" }, body: JSON.stringify(body) });
       } catch {
-        this.interrupted();
+        if (epoch === this.epoch && !this.closed) {
+          this.interrupted();
+        }
         throw new ConnectionError("\u8FDE\u63A5\u5DF2\u4E2D\u65AD\u3002");
       }
+      if (epoch !== this.epoch || this.closed) {
+        throw new ConnectionError("\u8FDE\u63A5\u5DF2\u53D8\u66F4\u3002");
+      }
       if (response.status === 401) {
-        this.source?.close();
+        this.disconnect();
         this.update("expired");
         throw new ConnectionError("\u9879\u76EE\u8FDE\u63A5\u5DF2\u5931\u6548\u3002");
       }
@@ -6118,9 +6155,14 @@ ${state2.user?.avatarUrl ?? ""}`;
       try {
         reply = await response.json();
       } catch {
-        this.interrupted();
+        if (epoch === this.epoch && !this.closed) {
+          this.interrupted();
+        }
         throw new ConnectionError("\u8FDE\u63A5\u5DF2\u4E2D\u65AD\u3002");
       }
+      if (epoch !== this.epoch || this.closed) {
+        throw new ConnectionError("\u8FDE\u63A5\u5DF2\u53D8\u66F4\u3002");
+      }
       if (!response.ok) {
         throw new Error(reply.message || "Request failed.");
       }
@@ -7833,7 +7875,8 @@ ${JSON.stringify(output2.details, null, 2)}` : "");
       if (field.type === "file" || field.control === "audio") {
         let names = "";
         try {
-          names = JSON.parse(String(value || "[]")).map((file) => file.name).join(", ");
+          const files = JSON.parse(String(value || "[]"));
+          names = (Array.isArray(files) ? files : [files]).map((file) => file?.name ?? "").join(", ");
         } catch {
         }
         const selected = document.createElement("span");

package/dist/{web-KEM7Y2ZR.js → web-7M4WBBL7.js}

@@ -443,7 +443,7 @@ var ConversationController = class {
         throw new Error("\u5DF2\u505C\u6B62");
       }
       const report = await this.runtime.run(request, (event) => {
-        if (this.disposed) {
+        if (task.cancelled || this.disposed || this.tasks.get(answer.runId) !== task) {
           return;
         }
         (answer.events ??= []).push(event);
@@ -475,11 +475,14 @@ var ConversationController = class {
         }
         this.changed();
       });
+      if (task.cancelled || this.disposed) {
+        throw new Error("\u5DF2\u505C\u6B62");
+      }
       answer.report = report;
       answer.status = report.status;
       answer.durationMs = report.durationMs;
-      if (report.output?.items?.length) {
-        answer.items = report.output.items;
+      if (report.output) {
+        answer.items = report.output.items ?? [];
         answer.content = outputText(answer.items);
       }
       answer.pendingInput = report.status === "waiting_for_input" ? report.pendingUserInput : void 0;
@@ -995,6 +998,9 @@ var WorkflowController = class {
         this.changed();
         this.scheduleSave();
       });
+      if (task.cancelled || this.disposed) {
+        throw new Error("Stopped.");
+      }
       record2.report = report;
       record2.durationMs = report.durationMs;
       record2.status = report.status;
@@ -1116,10 +1122,16 @@ var WorkflowController = class {
     }
     const other = workflowStorageReferences([this.runs.filter((item) => item !== record2), this.workspace.drafts, this.options.legacy ?? []]);
     const own = workflowStorageReferences(record2);
+    for (const session of this.options.legacy ?? []) {
+      other.scopes.add(session.id);
+    }
+    let unresolvedOwner = false;
     for (const id2 of other.files) {
       const file = await this.runtime.readFile(this.project, id2).catch(() => void 0);
       if (file?.reference.conversationId) {
         other.scopes.add(file.reference.conversationId);
+      } else {
+        unresolvedOwner = true;
       }
     }
     const owners = /* @__PURE__ */ new Map();
@@ -1137,7 +1149,7 @@ var WorkflowController = class {
     for (const [scope, ids] of owners) {
       await this.runtime.deleteFiles(this.project, scope, ids);
     }
-    if (!other.scopes.has(record2.scopeId)) {
+    if (!unresolvedOwner && !other.scopes.has(record2.scopeId)) {
       await this.runtime.deleteConversation(this.project, record2.scopeId);
     }
     this.runs.splice(this.runs.indexOf(record2), 1);
@@ -1430,6 +1442,7 @@ var KanbanController = class {
   missingRelatedProjectAliases = [];
   relatedProjectWarning = "";
   pendingSave = Promise.resolve();
+  updates = Promise.resolve();
   poll;
   feed;
   retry;
@@ -1495,34 +1508,49 @@ var KanbanController = class {
   }
   refresh() {
     clearTimeout(this.refreshTimer);
-    return this.refreshing ??= this.load().finally(() => {
+    return this.refreshing ??= this.update(() => this.load()).finally(() => {
       this.refreshing = void 0;
     });
   }
+  update(operation) {
+    const task = this.updates.then(() => {
+      if (this.disposed) {
+        throw new Error("Kanban has closed.");
+      }
+      return operation();
+    });
+    this.updates = task.then(() => void 0, () => void 0);
+    return task;
+  }
   async load() {
     const pkg = JSON.parse(await readFile3(path3.join(this.project.folderPath, "package.json"), "utf8"));
     const artifact = readKanbanArtifactConfig(pkg);
-    this.project.kanban = artifact;
-    this.project.projectInfo = readKanbanProjectInfo(pkg);
+    const projectInfo = readKanbanProjectInfo(pkg);
+    let params;
     try {
-      this.params = parseKanbanManifestText(await readFile3(path3.join(this.project.folderPath, "kanban.json"), "utf8")).params;
+      params = parseKanbanManifestText(await readFile3(path3.join(this.project.folderPath, "kanban.json"), "utf8")).params;
     } catch (error) {
       if (error.code !== "ENOENT") {
         throw error;
       }
-      this.params = [];
+      params = [];
     }
-    this.project.fields = this.params;
-    for (const item of this.workspace.configurations) {
-      item.values = sanitizeKanbanValues(this.params, item.values);
+    const workspace = structuredClone(this.workspace);
+    for (const item of workspace.configurations) {
+      item.values = sanitizeKanbanValues(params, item.values);
     }
-    if (!this.workspace.configurations.length && this.params.length) {
-      this.create();
+    if (!workspace.configurations.length && params.length) {
+      this.create(workspace, params);
     }
-    this.workspace.activeConfigurationId = this.current?.id ?? this.workspace.configurations[0]?.id;
-    this.workspace.revision++;
+    workspace.activeConfigurationId = workspace.configurations.find((item) => item.id === workspace.activeConfigurationId)?.id ?? workspace.configurations[0]?.id;
+    workspace.revision++;
+    await this.persist(workspace);
+    this.workspace = workspace;
+    this.params = params;
+    this.project.kanban = artifact;
+    this.project.projectInfo = projectInfo;
+    this.project.fields = params;
     this.newPreview();
-    await this.persist();
     this.authenticationChanged();
     await this.updateLocalRevisions();
     this.hooks.changed();
@@ -1532,21 +1560,21 @@ var KanbanController = class {
     this.methods.clear();
     this.preview = new KanbanPreview(this.project.folderPath, this.project.kanban, () => this.configuration());
   }
-  name() {
-    let index = 1;
-    while (this.workspace.configurations.some((item) => item.name === `\u914D\u7F6E ${index}`)) {
-      index++;
+  create(workspace, params, values = createDefaultKanbanValues(params), name) {
+    if (!name) {
+      let index = 1;
+      while (workspace.configurations.some((item2) => item2.name === `\u914D\u7F6E ${index}`)) {
+        index++;
+      }
+      name = `\u914D\u7F6E ${index}`;
     }
-    return `\u914D\u7F6E ${index}`;
-  }
-  create(values = createDefaultKanbanValues(this.params), name = this.name()) {
     const date = (/* @__PURE__ */ new Date()).toISOString(), item = { id: randomUUID2(), name, values: { ...values }, createdAt: date, updatedAt: date };
-    this.workspace.configurations.push(item);
-    this.workspace.activeConfigurationId = item.id;
+    workspace.configurations.push(item);
+    workspace.activeConfigurationId = item.id;
     return item;
   }
-  async persist() {
-    const content = JSON.stringify(this.workspace);
+  async persist(workspace = this.workspace) {
+    const content = JSON.stringify(workspace);
     this.pendingSave = this.pendingSave.catch(() => void 0).then(async () => {
       await mkdir(path3.dirname(this.historyPath), { recursive: true });
       const temp = `${this.historyPath}.${process.pid}.tmp`;
@@ -1590,10 +1618,15 @@ var KanbanController = class {
     if (message.type !== "kanban-configuration") {
       throw new Error(`Unsupported Kanban action: ${message.type}`);
     }
+    return this.update(() => this.configure(message));
+  }
+  async configure(message) {
     if (message.revision !== this.workspace.revision) {
       throw new Error("Kanban configuration changed. Try again.");
     }
-    const action = String(message.action), item = this.workspace.configurations.find((item2) => item2.id === message.id);
+    const workspace = structuredClone(this.workspace);
+    const action = String(message.action), item = workspace.configurations.find((item2) => item2.id === message.id);
+    let previewChanged = false;
     if (!["create", "duplicate", "rename", "save", "select", "delete"].includes(action)) {
       throw new Error("Unknown Kanban configuration action.");
     }
@@ -1605,12 +1638,12 @@ var KanbanController = class {
         if (!this.params.length) {
           throw new Error("The project does not define parameters.");
         }
-        this.create();
-        this.newPreview();
+        this.create(workspace, this.params);
+        previewChanged = true;
         break;
       case "duplicate":
-        this.create(sanitizeKanbanValues(this.params, item.values), `${item.name} (copy)`);
-        this.newPreview();
+        this.create(workspace, this.params, sanitizeKanbanValues(this.params, item.values), `${item.name} (copy)`);
+        previewChanged = true;
         break;
       case "rename": {
         if (typeof message.name !== "string" || !message.name.trim() || message.name.length > 200) {
@@ -1629,23 +1662,27 @@ var KanbanController = class {
         break;
       }
       case "select":
-        this.workspace.activeConfigurationId = item.id;
-        this.newPreview();
+        workspace.activeConfigurationId = item.id;
+        previewChanged = true;
         break;
       case "delete": {
-        if (this.workspace.configurations.length <= 1) {
+        if (workspace.configurations.length <= 1) {
           throw new Error("The last configuration cannot be deleted.");
         }
-        this.workspace.configurations = this.workspace.configurations.filter((value) => value !== item);
-        if (item.id === this.workspace.activeConfigurationId) {
-          this.workspace.activeConfigurationId = this.workspace.configurations[0].id;
-          this.newPreview();
+        workspace.configurations = workspace.configurations.filter((value) => value !== item);
+        if (item.id === workspace.activeConfigurationId) {
+          workspace.activeConfigurationId = workspace.configurations[0].id;
+          previewChanged = true;
         }
         break;
       }
     }
-    this.workspace.revision++;
-    await this.persist();
+    workspace.revision++;
+    await this.persist(workspace);
+    this.workspace = workspace;
+    if (previewChanged) {
+      this.newPreview();
+    }
     this.hooks.changed();
     return [{ type: "kanban-updated", requestId: message.requestId, kanban: this.state() }];
   }
@@ -1782,7 +1819,7 @@ var KanbanController = class {
     for (const request of this.requests) {
       request.abort();
     }
-    await this.refreshing?.catch(() => void 0);
+    await this.updates;
     await this.pendingSave;
   }
 };
@@ -2042,7 +2079,7 @@ function createWorkflowActions(controller, runtime, project, revision, changed)
           if (!record2) {
             throw new Error("Run no longer exists.");
           }
-          replies.push({ type: "download", name: `workflow-${record2.id}.json`, content: JSON.stringify(redactWorkflowData(record2), null, 2) });
+          replies.push({ type: "download", name: `workflow-${record2.id}.json`, content: JSON.stringify(redactWorkflowData(record2, [], false), null, 2) });
           break;
         }
         case "tool-policy": {
@@ -2426,9 +2463,9 @@ async function startWebServer(options) {
     type: "state",
     project,
     ...isKanban ? { kanban: kanbanController.state() } : isWorkflow ? workflowActions.state() : { sessions: controller.sessions, activeId: controller.activeId, running: controller.running, parameterValues: controller.current.parameterValues ?? {} },
-    account,
+    account: { ...account, user: account.user && { userId: account.user.userId, email: account.user.email, displayName: account.user.displayName, avatarUrl: account.user.avatarUrl } },
     authenticationRevision: authRevision
-  }, [...sensitiveTokens]));
+  }, [...sensitiveTokens], false));
   const broadcast = () => {
     if (broadcastTimer) {
       return;
@@ -2555,6 +2592,9 @@ ${token}`;
       if (authenticationInitialized) {
         await stopForAuthentication();
       }
+      if (epoch !== authEpoch) {
+        return;
+      }
     }
     authenticationInitialized = true;
     account = { status: candidate ? "checking" : "signed-out", serverUrl: serverUrl || "http://localhost:7126", user: candidate ? changed ? hostManaged ? void 0 : config.user : account.user : void 0, revision: account.revision + 1 };
@@ -2592,6 +2632,9 @@ ${token}`;
           workflowActions?.invalidate();
           await stopForAuthentication();
         }
+        if (epoch !== authEpoch) {
+          return;
+        }
         account = { ...account, status: unauthorized ? "expired" : "error", error: String(error.message) };
       }
     } else {
@@ -2788,7 +2831,7 @@ ${token}`;
         } else if (message.action === "delete") {
           await controller.remove(session.id);
         } else if (message.action === "export") {
-          replies.push({ type: "download", name: `conversation-${session.id}.json`, content: JSON.stringify(redactWorkflowData(session), null, 2) });
+          replies.push({ type: "download", name: `conversation-${session.id}.json`, content: JSON.stringify(redactWorkflowData(session, [...sensitiveTokens], false), null, 2) });
         }
         break;
       }
@@ -2808,7 +2851,7 @@ ${token}`;
           throw new Error("Message no longer exists.");
         }
         if (message.type === "export-message") {
-          replies.push({ type: "download", name: `run-${answer.id}.json`, content: JSON.stringify(redactWorkflowData(answer), null, 2) }, { type: "exported", sessionId: current.id, messageId: answer.id });
+          replies.push({ type: "download", name: `run-${answer.id}.json`, content: JSON.stringify(redactWorkflowData(answer, [...sensitiveTokens], false), null, 2) }, { type: "exported", sessionId: current.id, messageId: answer.id });
         } else {
           replies.push({ type: "preview", title: message.type === "logs" ? "\u8FD0\u884C\u65E5\u5FD7" : "\u8FD0\u884C\u8DDF\u8E2A", content: message.type === "logs" ? answer.report?.logs ?? "" : answer.report });
         }
@@ -2992,7 +3035,7 @@ ${token}`;
             mutations = task;
           }
           await task;
-          json(response, 200, { messages: redactWorkflowData(messages, [...sensitiveTokens]) });
+          json(response, 200, { messages: redactWorkflowData(messages, [...sensitiveTokens], false) });
           return;
         }
         if (url.pathname.startsWith("/api/file/") && request.method === "GET") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@workflow-code/cli",
-  "version": "0.2.4-20261011006.codex-cli-web",
+  "version": "0.2.4-20261011008.codex-cli-web",
   "type": "module",
   "bin": {
     "workflow-code": "./dist/index.js"
@@ -42,11 +42,11 @@
     "@workflow-code/kanban-project": "0.1.0",
     "@workflow-code/openai-responses": "0.1.0",
     "@workflow-code/project-dependencies": "0.1.0",
-    "@workflow-code/project-upload": "0.1.0",
-    "@workflow-code/runtime-compatibility": "0.1.0",
     "@workflow-code/project-info": "0.1.0",
-    "@workflow-code/workflow-ids": "0.1.0",
-    "@workflow-code/workflow-mcp": "0.1.0"
+    "@workflow-code/runtime-compatibility": "0.1.0",
+    "@workflow-code/project-upload": "0.1.0",
+    "@workflow-code/workflow-mcp": "0.1.0",
+    "@workflow-code/workflow-ids": "0.1.0"
   },
   "scripts": {
     "bootstrap": "node scripts/bootstrap.mjs",