ai-whisper 0.2.0 → 0.3.0

package/dist/bin/broker-daemon.js

@@ -549,6 +549,100 @@ function getCollab(db, collabId2) {
   });
 }
 
+// ../broker/dist/storage/repositories/workflow-repository.js
+function rowToRecord(row) {
+  return {
+    workflowId: row.workflow_id,
+    collabId: row.collab_id,
+    workflowType: row.workflow_type,
+    name: row.name,
+    specPath: row.spec_path,
+    roleBindings: JSON.parse(row.role_bindings),
+    status: row.status,
+    currentPhaseIndex: row.current_phase_index,
+    haltReason: row.halt_reason,
+    workflowContext: JSON.parse(row.workflow_context),
+    createdAt: row.created_at,
+    updatedAt: row.updated_at
+  };
+}
+function insertWorkflow(db, input) {
+  db.prepare(`INSERT INTO workflows
+		 (workflow_id, collab_id, workflow_type, name, spec_path, role_bindings, status,
+		  current_phase_index, halt_reason, workflow_context, created_at, updated_at)
+		 VALUES (?, ?, ?, ?, ?, ?, ?, ?, NULL, ?, ?, ?)`).run(input.workflowId, input.collabId, input.workflowType, input.name, input.specPath, JSON.stringify(input.roleBindings), input.status, input.currentPhaseIndex, JSON.stringify(input.workflowContext), input.now, input.now);
+}
+function getWorkflowById(db, workflowId) {
+  const row = db.prepare("SELECT * FROM workflows WHERE workflow_id = ?").get(workflowId);
+  return row ? rowToRecord(row) : null;
+}
+function listWorkflows(db, filter = {}) {
+  const clauses = [];
+  const args = [];
+  if (filter.collabId) {
+    clauses.push("collab_id = ?");
+    args.push(filter.collabId);
+  }
+  if (filter.status) {
+    clauses.push("status = ?");
+    args.push(filter.status);
+  }
+  const where = clauses.length ? `WHERE ${clauses.join(" AND ")}` : "";
+  const rows = db.prepare(`SELECT * FROM workflows ${where} ORDER BY created_at DESC`).all(...args);
+  return rows.map(rowToRecord);
+}
+function setWorkflowStatus(db, input) {
+  db.prepare(`UPDATE workflows
+		   SET status = ?, halt_reason = ?, updated_at = ?
+		 WHERE workflow_id = ?`).run(input.status, input.haltReason, input.now, input.workflowId);
+}
+function updateWorkflowContext(db, input) {
+  const existing = getWorkflowById(db, input.workflowId);
+  if (!existing) {
+    throw new Error(`updateWorkflowContext: unknown workflowId ${input.workflowId}`);
+  }
+  const merged = { ...existing.workflowContext, ...input.patch };
+  db.prepare("UPDATE workflows SET workflow_context = ?, updated_at = ? WHERE workflow_id = ?").run(JSON.stringify(merged), input.now, input.workflowId);
+}
+function incrementCurrentPhaseIndex(db, input) {
+  db.prepare(`UPDATE workflows
+		   SET current_phase_index = current_phase_index + 1, updated_at = ?
+		 WHERE workflow_id = ?`).run(input.now, input.workflowId);
+}
+function countActiveWorkflowsForCollab(db, collabId2) {
+  const row = db.prepare("SELECT COUNT(*) AS n FROM workflows WHERE collab_id = ? AND status IN ('running', 'paused')").get(collabId2);
+  return row.n;
+}
+
+// ../broker/dist/runtime/workspace-snapshot.js
+import { execFileSync } from "node:child_process";
+function captureWorkspaceSnapshotSync(workspaceRoot) {
+  try {
+    const ref = execFileSync("git", ["-C", workspaceRoot, "stash", "create"], {
+      encoding: "utf8",
+      timeout: 1e4
+    }).trim();
+    if (ref)
+      return ref;
+    const head = execFileSync("git", ["-C", workspaceRoot, "rev-parse", "HEAD"], {
+      encoding: "utf8",
+      timeout: 1e4
+    }).trim();
+    return head || null;
+  } catch {
+    return null;
+  }
+}
+function diffChangedFilesSince(workspaceRoot, sinceRef) {
+  try {
+    const stdout = execFileSync("git", ["-C", workspaceRoot, "diff", "--name-only", sinceRef], { encoding: "utf8", timeout: 1e4 });
+    const files = stdout.split("\n").map((l) => l.trim()).filter((l) => l.length > 0 && !l.startsWith(".ai-whisper/"));
+    return [...new Set(files)].sort();
+  } catch {
+    return [];
+  }
+}
+
 // ../broker/dist/storage/repositories/reply-repository.js
 function insertReply(db, reply) {
   db.prepare(`INSERT INTO reply (
@@ -1014,7 +1108,7 @@ function upsertRelayTurnState(db, input) {
 }
 
 // ../broker/dist/storage/repositories/relay-capture-diagnostics-repository.js
-function rowToRecord(row) {
+function rowToRecord2(row) {
   return {
     captureId: row.capture_id,
     handoffId: row.handoff_id,
@@ -1031,6 +1125,7 @@ function rowToRecord(row) {
     clipSample: row.clip_sample,
     turnSample: row.turn_sample,
     abortedByRaceGuard: row.aborted_by_race_guard === 1,
+    interferenceDetected: row.interference_detected === 1,
     createdAt: row.created_at
   };
 }
@@ -1038,8 +1133,9 @@ function insertCaptureDiagnostic(db, input) {
   db.prepare(`INSERT INTO relay_capture_diagnostics
 		 (capture_id, handoff_id, collab_id, chain_id, workflow_id, target_provider,
 		  capture_status, clip_len, turn_len, turn_confidence, jaccard_score,
-		  containment_score, clip_sample, turn_sample, aborted_by_race_guard, created_at)
-		 VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(input.captureId, input.handoffId, input.collabId, input.chainId, input.workflowId, input.targetProvider, input.captureStatus, input.clipLen, input.turnLen, input.turnConfidence, input.jaccardScore, input.containmentScore, input.clipSample, input.turnSample, input.abortedByRaceGuard ? 1 : 0, input.createdAt);
+		  containment_score, clip_sample, turn_sample, aborted_by_race_guard,
+		  interference_detected, created_at)
+		 VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(input.captureId, input.handoffId, input.collabId, input.chainId, input.workflowId, input.targetProvider, input.captureStatus, input.clipLen, input.turnLen, input.turnConfidence, input.jaccardScore, input.containmentScore, input.clipSample, input.turnSample, input.abortedByRaceGuard ? 1 : 0, input.interferenceDetected ? 1 : 0, input.createdAt);
 }
 function listCaptureDiagnosticsByCollab(db, collabId2, limit, opts) {
   const filter = opts?.workflowFilter;
@@ -1049,32 +1145,32 @@ function listCaptureDiagnosticsByCollab(db, collabId2, limit, opts) {
     const rows2 = db.prepare(`SELECT * FROM relay_capture_diagnostics
 				 WHERE collab_id = ?${filterClause}
 				 ORDER BY created_at DESC`).all(collabId2, ...filterArgs);
-    return rows2.map(rowToRecord);
+    return rows2.map(rowToRecord2);
   }
   const rows = db.prepare(`SELECT * FROM relay_capture_diagnostics
 			 WHERE collab_id = ?${filterClause}
 			 ORDER BY created_at DESC
 			 LIMIT ?`).all(collabId2, ...filterArgs, limit);
-  return rows.map(rowToRecord);
+  return rows.map(rowToRecord2);
 }
 function listCaptureDiagnosticsByCollabAndChain(db, collabId2, chainId, limit) {
   if (limit === null) {
     const rows2 = db.prepare(`SELECT * FROM relay_capture_diagnostics
 				 WHERE collab_id = ? AND chain_id = ?
 				 ORDER BY created_at DESC`).all(collabId2, chainId);
-    return rows2.map(rowToRecord);
+    return rows2.map(rowToRecord2);
   }
   const rows = db.prepare(`SELECT * FROM relay_capture_diagnostics
 			 WHERE collab_id = ? AND chain_id = ?
 			 ORDER BY created_at DESC
 			 LIMIT ?`).all(collabId2, chainId, limit);
-  return rows.map(rowToRecord);
+  return rows.map(rowToRecord2);
 }
 function listCaptureDiagnosticsByHandoff(db, handoffId) {
   const rows = db.prepare(`SELECT * FROM relay_capture_diagnostics
 			 WHERE handoff_id = ?
 			 ORDER BY created_at ASC`).all(handoffId);
-  return rows.map(rowToRecord);
+  return rows.map(rowToRecord2);
 }
 function deleteCaptureDiagnosticsOlderThan(db, cutoffIso) {
   const result = db.prepare("DELETE FROM relay_capture_diagnostics WHERE created_at < ?").run(cutoffIso);
@@ -1082,7 +1178,7 @@ function deleteCaptureDiagnosticsOlderThan(db, cutoffIso) {
 }
 
 // ../broker/dist/storage/repositories/relay-evaluator-diagnostics-repository.js
-function rowToRecord2(row) {
+function rowToRecord3(row) {
   return {
     evaluatorId: row.evaluator_id,
     handoffId: row.handoff_id,
@@ -1127,32 +1223,32 @@ function listEvaluatorDiagnosticsByCollab(db, collabId2, limit, opts) {
     const rows2 = db.prepare(`SELECT * FROM relay_evaluator_diagnostics
 				 WHERE collab_id = ?${filterClause}
 				 ORDER BY created_at DESC`).all(collabId2, ...filterArgs);
-    return rows2.map(rowToRecord2);
+    return rows2.map(rowToRecord3);
   }
   const rows = db.prepare(`SELECT * FROM relay_evaluator_diagnostics
 			 WHERE collab_id = ?${filterClause}
 			 ORDER BY created_at DESC
 			 LIMIT ?`).all(collabId2, ...filterArgs, limit);
-  return rows.map(rowToRecord2);
+  return rows.map(rowToRecord3);
 }
 function listEvaluatorDiagnosticsByCollabAndChain(db, collabId2, chainId, limit) {
   if (limit === null) {
     const rows2 = db.prepare(`SELECT * FROM relay_evaluator_diagnostics
 				 WHERE collab_id = ? AND chain_id = ?
 				 ORDER BY created_at DESC`).all(collabId2, chainId);
-    return rows2.map(rowToRecord2);
+    return rows2.map(rowToRecord3);
   }
   const rows = db.prepare(`SELECT * FROM relay_evaluator_diagnostics
 			 WHERE collab_id = ? AND chain_id = ?
 			 ORDER BY created_at DESC
 			 LIMIT ?`).all(collabId2, chainId, limit);
-  return rows.map(rowToRecord2);
+  return rows.map(rowToRecord3);
 }
 function listEvaluatorDiagnosticsByHandoff(db, handoffId) {
   const rows = db.prepare(`SELECT * FROM relay_evaluator_diagnostics
 			 WHERE handoff_id = ?
 			 ORDER BY created_at ASC`).all(handoffId);
-  return rows.map(rowToRecord2);
+  return rows.map(rowToRecord3);
 }
 function deleteEvaluatorDiagnosticsOlderThan(db, cutoffIso) {
   const result = db.prepare("DELETE FROM relay_evaluator_diagnostics WHERE created_at < ?").run(cutoffIso);
@@ -1160,7 +1256,7 @@ function deleteEvaluatorDiagnosticsOlderThan(db, cutoffIso) {
 }
 
 // ../broker/dist/storage/repositories/relay-handoff-repository.js
-function rowToRecord3(row) {
+function rowToRecord4(row) {
   return {
     handoffId: row.handoff_id,
     collabId: row.collab_id,
@@ -1197,7 +1293,7 @@ function queryRelayHandoff(db, handoffId) {
 			 FROM relay_handoff h
 			 JOIN collab c ON c.collab_id = h.collab_id
 			 WHERE h.handoff_id = ?`).get(handoffId);
-  return row ? rowToRecord3(row) : null;
+  return row ? rowToRecord4(row) : null;
 }
 function createRelayHandoffTxn(db, input) {
   return db.transaction(() => {
@@ -1349,7 +1445,7 @@ function queryLatestHandedBackHandoff(db, collabId2) {
 			 WHERE h.collab_id = ? AND h.status = 'handed_back'
 			 ORDER BY h.resolved_at DESC
 			 LIMIT 1`).get(collabId2);
-  return row ? rowToRecord3(row) : null;
+  return row ? rowToRecord4(row) : null;
 }
 function failRelayHandoffOnDisconnectTxn(db, input) {
   db.transaction(() => {
@@ -1373,6 +1469,30 @@ function failRelayHandoffOnDisconnectTxn(db, input) {
     }
   })();
 }
+function hasInFlightAcceptedHandoffForWorkflow(db, workflowId) {
+  const row = db.prepare("SELECT COUNT(*) AS n FROM relay_handoff WHERE workflow_id = ? AND status = 'accepted'").get(workflowId);
+  return row.n > 0;
+}
+function resetStrandedOrchestrationForWorkflow(db, workflowId) {
+  const result = db.prepare(`UPDATE relay_handoff
+			    SET orchestrator_status = 'idle', orchestrator_claimed_at = NULL
+			  WHERE workflow_id = ?
+			    AND status = 'handed_back'
+			    AND orchestrator_status = 'pending'
+			    AND evaluator_verdict IS NULL`).run(workflowId);
+  return result.changes;
+}
+function prependToPendingHandoffRequestText(db, input) {
+  const row = db.prepare(`SELECT handoff_id, request_text FROM relay_handoff
+			  WHERE workflow_id = ? AND status = 'pending'
+			  ORDER BY created_at DESC LIMIT 1`).get(input.workflowId);
+  if (!row)
+    return false;
+  db.prepare("UPDATE relay_handoff SET request_text = ?, last_activity_at = ? WHERE handoff_id = ?").run(`${input.prefix}
+
+${row.request_text}`, input.now, row.handoff_id);
+  return true;
+}
 function claimRelayHandoffForOrchestrationTxn(db, input) {
   const result = db.prepare(`UPDATE relay_handoff
 			    SET orchestrator_status = 'pending',
@@ -1391,10 +1511,12 @@ function listRelayHandoffsPendingOrchestration(db, collabId2) {
 			        c.orchestrator_max_rounds AS max_rounds
 			 FROM relay_handoff h
 			 JOIN collab c ON c.collab_id = h.collab_id
+			 LEFT JOIN workflows w ON w.workflow_id = h.workflow_id
 			 WHERE h.collab_id = ?
 			   AND h.status = 'handed_back'
-			   AND h.orchestrator_status = 'idle'`).all(collabId2);
-  return rows.map(rowToRecord3);
+			   AND h.orchestrator_status = 'idle'
+			   AND (w.status IS NULL OR w.status <> 'paused')`).all(collabId2);
+  return rows.map(rowToRecord4);
 }
 function createLoopRelayHandoffTxn(db, input) {
   return db.transaction(() => {
@@ -1590,7 +1712,7 @@ function getHandoffWithWorkflowMetaById(db, handoffId) {
 			 WHERE h.handoff_id = ?`).get(handoffId);
   if (!row)
     return null;
-  const base = rowToRecord3(row);
+  const base = rowToRecord4(row);
   return {
     ...base,
     handoffStep: row.handoff_step,
@@ -1840,71 +1962,6 @@ function listRunCostRows(db, input) {
 // ../broker/dist/control/workflow-control.js
 import { randomUUID } from "node:crypto";
 
-// ../broker/dist/storage/repositories/workflow-repository.js
-function rowToRecord4(row) {
-  return {
-    workflowId: row.workflow_id,
-    collabId: row.collab_id,
-    workflowType: row.workflow_type,
-    name: row.name,
-    specPath: row.spec_path,
-    roleBindings: JSON.parse(row.role_bindings),
-    status: row.status,
-    currentPhaseIndex: row.current_phase_index,
-    haltReason: row.halt_reason,
-    workflowContext: JSON.parse(row.workflow_context),
-    createdAt: row.created_at,
-    updatedAt: row.updated_at
-  };
-}
-function insertWorkflow(db, input) {
-  db.prepare(`INSERT INTO workflows
-		 (workflow_id, collab_id, workflow_type, name, spec_path, role_bindings, status,
-		  current_phase_index, halt_reason, workflow_context, created_at, updated_at)
-		 VALUES (?, ?, ?, ?, ?, ?, ?, ?, NULL, ?, ?, ?)`).run(input.workflowId, input.collabId, input.workflowType, input.name, input.specPath, JSON.stringify(input.roleBindings), input.status, input.currentPhaseIndex, JSON.stringify(input.workflowContext), input.now, input.now);
-}
-function getWorkflowById(db, workflowId) {
-  const row = db.prepare("SELECT * FROM workflows WHERE workflow_id = ?").get(workflowId);
-  return row ? rowToRecord4(row) : null;
-}
-function listWorkflows(db, filter = {}) {
-  const clauses = [];
-  const args = [];
-  if (filter.collabId) {
-    clauses.push("collab_id = ?");
-    args.push(filter.collabId);
-  }
-  if (filter.status) {
-    clauses.push("status = ?");
-    args.push(filter.status);
-  }
-  const where = clauses.length ? `WHERE ${clauses.join(" AND ")}` : "";
-  const rows = db.prepare(`SELECT * FROM workflows ${where} ORDER BY created_at DESC`).all(...args);
-  return rows.map(rowToRecord4);
-}
-function setWorkflowStatus(db, input) {
-  db.prepare(`UPDATE workflows
-		   SET status = ?, halt_reason = ?, updated_at = ?
-		 WHERE workflow_id = ?`).run(input.status, input.haltReason, input.now, input.workflowId);
-}
-function updateWorkflowContext(db, input) {
-  const existing = getWorkflowById(db, input.workflowId);
-  if (!existing) {
-    throw new Error(`updateWorkflowContext: unknown workflowId ${input.workflowId}`);
-  }
-  const merged = { ...existing.workflowContext, ...input.patch };
-  db.prepare("UPDATE workflows SET workflow_context = ?, updated_at = ? WHERE workflow_id = ?").run(JSON.stringify(merged), input.now, input.workflowId);
-}
-function incrementCurrentPhaseIndex(db, input) {
-  db.prepare(`UPDATE workflows
-		   SET current_phase_index = current_phase_index + 1, updated_at = ?
-		 WHERE workflow_id = ?`).run(input.now, input.workflowId);
-}
-function countRunningWorkflowsForCollab(db, collabId2) {
-  const row = db.prepare("SELECT COUNT(*) AS n FROM workflows WHERE collab_id = ? AND status = 'running'").get(collabId2);
-  return row.n;
-}
-
 // ../broker/dist/storage/repositories/workflow-phase-repository.js
 function rowToRecord5(row) {
   return {
@@ -2025,6 +2082,14 @@ Findings:           (omit this block entirely if none)
 Non-blocking risks:
 - <quality risk that does NOT block this gate, or "None.">
 --- end protocol ---`;
+var WORKFLOW_OPERATOR_CONTROL = `--- ai-whisper operator control ---
+If the operator interrupts you and asks to pause the workflow (e.g. "pause the workflow, I need to fix X"):
+1. Find the active workflow id: run \`whisper workflow list\`.
+2. Run \`whisper workflow pause <id>\`.
+3. Acknowledge and STOP working \u2014 do not start the next change.
+The operator will edit artifacts and later run \`whisper workflow resume <id> [--message "..."]\`; you will then receive a notice of what changed and must re-read those files before continuing.
+Provider note: the Codex CLI EXITS its session on Ctrl+C at an idle prompt (a mid-task Ctrl+C only interrupts the running task). The operator typically interrupts you while you are BUSY before issuing this instruction; do not assume Ctrl+C is a safe no-op.
+--- end operator control ---`;
 var WORKFLOW_DIAGNOSIS_PROTOCOL = `--- ai-whisper diagnosis review protocol ---
 You are the gatekeeper for an ai-whisper complex-bug-fixing DIAGNOSIS gate. No human is in the loop. Do NOT trust the implementer's diagnosis \u2014 verify it yourself. The gate stays shut until YOU independently agree on the root cause and that the fix is net-safe.
 
@@ -2263,10 +2328,21 @@ var COMPLEX_BUG_FIXING = {
     }
   ]
 };
+function withOperatorControl(def) {
+  return {
+    ...def,
+    phases: def.phases.map((p) => ({
+      ...p,
+      kickoffTemplate: `${p.kickoffTemplate}
+
+${WORKFLOW_OPERATOR_CONTROL}`
+    }))
+  };
+}
 var REGISTRY = {
-  [SPEC_DRIVEN_DEVELOPMENT.type]: SPEC_DRIVEN_DEVELOPMENT,
-  [RALPH_LOOP.type]: RALPH_LOOP,
-  [COMPLEX_BUG_FIXING.type]: COMPLEX_BUG_FIXING
+  [SPEC_DRIVEN_DEVELOPMENT.type]: withOperatorControl(SPEC_DRIVEN_DEVELOPMENT),
+  [RALPH_LOOP.type]: withOperatorControl(RALPH_LOOP),
+  [COMPLEX_BUG_FIXING.type]: withOperatorControl(COMPLEX_BUG_FIXING)
 };
 function ralphRunDir(workspaceRoot, workflowId) {
   return join(workspaceRoot, ".ai-whisper", "ralph", workflowId);
@@ -2322,6 +2398,23 @@ function safeDerivePlanPath(specPath, createdAt) {
     return `${dir}${stem}.plan.md`;
   }
 }
+function composeResumeNotice(input) {
+  const hasFiles = input.changedFiles.length > 0;
+  const hasMessage = !!input.message && input.message.trim().length > 0;
+  if (!hasFiles && !hasMessage)
+    return null;
+  const lines = [];
+  if (hasFiles) {
+    lines.push("While paused, the operator modified these files:");
+    for (const f of input.changedFiles)
+      lines.push(`  - ${f}`);
+    lines.push("Re-read them before continuing.");
+  }
+  if (hasMessage)
+    lines.push(`Operator note: ${input.message.trim()}`);
+  lines.push("Re-evaluate whether your current direction still holds; correct course before proceeding.");
+  return lines.join("\n");
+}
 function createWorkflowControl(deps) {
   const { db, events } = deps;
   function createWorkflow(input) {
@@ -2344,8 +2437,9 @@ function createWorkflowControl(deps) {
     }
     const workflowId = `wf_${randomUUID().replace(/-/g, "").slice(0, 16)}`;
     const tx = db.transaction(() => {
-      if (countRunningWorkflowsForCollab(db, input.collabId) > 0) {
-        throw new Error(`another workflow is already running on this collab (${input.collabId})`);
+      if (countActiveWorkflowsForCollab(db, input.collabId) > 0) {
+        const active = listWorkflows(db, { collabId: input.collabId }).find((w) => w.status === "running" || w.status === "paused");
+        throw new Error(`another workflow is already active on this collab (${input.collabId})` + (active ? `: ${active.workflowId} (${active.status})` : ""));
       }
       insertWorkflow(db, {
         workflowId,
@@ -2513,6 +2607,24 @@ function createWorkflowControl(deps) {
       postmortemPath: bf.postmortemPath
     });
   }
+  function consumeResumeNotice(input) {
+    const wf = getWorkflowById(db, input.workflowId);
+    const notice = wf?.workflowContext?.resumeNotice ?? null;
+    if (notice) {
+      updateWorkflowContext(db, {
+        workflowId: input.workflowId,
+        patch: { resumeNotice: null },
+        now: input.now
+      });
+    }
+    return notice;
+  }
+  function withResumeNotice(workflowId, requestText, now) {
+    const notice = consumeResumeNotice({ workflowId, now });
+    return notice ? `${notice}
+
+${requestText}` : requestText;
+  }
   function createContinuationHandoff(input) {
     const handoffId = `ho_${randomUUID().replace(/-/g, "").slice(0, 16)}`;
     insertWorkflowOwnedRelayHandoff(db, {
@@ -2520,7 +2632,9 @@ function createWorkflowControl(deps) {
       collabId: input.workflow.collabId,
       senderAgent: input.sender,
       targetAgent: input.target,
-      requestText: input.requestText,
+      // Prepend the one-time resume notice (if any) to the FIRST outgoing request
+      // after a resume, then it is cleared — so the agent re-reads changed files.
+      requestText: withResumeNotice(input.workflow.workflowId, input.requestText, input.now),
       chainId: input.chain.chainId,
       roundNumber: input.incrementRound ? input.chain.currentRound + 1 : input.chain.currentRound,
       maxRounds: input.chain.maxRounds,
@@ -2580,7 +2694,9 @@ function createWorkflowControl(deps) {
       collabId: input.workflow.collabId,
       senderAgent: sender,
       targetAgent: target,
-      requestText: kickoffText,
+      // Prepend a pending resume notice (consumed once) so a phase-advance kickoff
+      // after a resume also carries the operator's change notice.
+      requestText: withResumeNotice(input.workflow.workflowId, kickoffText, input.now),
       chainId,
       roundNumber: 1,
       maxRounds: phase.maxRounds,
@@ -3041,20 +3157,100 @@ ${findingsText}`;
       reason: input.reason
     });
   }
+  function maybeCaptureQuiesceSnapshot(input) {
+    const wf = getWorkflowById(db, input.workflowId);
+    if (!wf || wf.status !== "paused")
+      return;
+    if (wf.workflowContext.pauseSnapshotRef !== void 0) {
+      return;
+    }
+    if (hasInFlightAcceptedHandoffForWorkflow(db, input.workflowId))
+      return;
+    const ref = deps.captureSnapshotRef ? deps.captureSnapshotRef(input.workflowId) : null;
+    updateWorkflowContext(db, {
+      workflowId: input.workflowId,
+      patch: { pauseSnapshotRef: ref },
+      now: input.now
+    });
+  }
+  function pauseWorkflow(input) {
+    const workflow = getWorkflowById(db, input.workflowId);
+    if (!workflow) {
+      throw new Error(`pauseWorkflow: unknown workflowId ${input.workflowId}`);
+    }
+    if (workflow.status !== "running") {
+      throw new Error(`pauseWorkflow: workflow ${input.workflowId} is ${workflow.status}, only running workflows can be paused`);
+    }
+    const tx = db.transaction(() => {
+      const current = getWorkflowById(db, input.workflowId);
+      if (!current || current.status !== "running")
+        return;
+      setWorkflowStatus(db, {
+        workflowId: input.workflowId,
+        status: "paused",
+        haltReason: null,
+        now: input.now
+      });
+      updateWorkflowContext(db, {
+        workflowId: input.workflowId,
+        patch: { pausedAt: input.now },
+        now: input.now
+      });
+    });
+    tx.immediate();
+    events.emit("workflow.paused", { workflowId: input.workflowId });
+    maybeCaptureQuiesceSnapshot({ workflowId: input.workflowId, now: input.now });
+  }
+  function resumeHaltedWorkflow(workflow, now) {
+    const tx = db.transaction(() => {
+      const others = listWorkflows(db, { collabId: workflow.collabId }).filter((w) => w.workflowId !== workflow.workflowId && (w.status === "running" || w.status === "paused"));
+      if (others.length > 0) {
+        throw new Error(`resumeWorkflow: another workflow is already active on collab ${workflow.collabId}`);
+      }
+      setWorkflowStatus(db, {
+        workflowId: workflow.workflowId,
+        status: "running",
+        haltReason: null,
+        now
+      });
+    });
+    tx.immediate();
+    events.emit("workflow.resumed", {
+      workflowId: workflow.workflowId,
+      phaseIndex: workflow.currentPhaseIndex
+    });
+  }
   function resumeWorkflow(input) {
     const workflow = getWorkflowById(db, input.workflowId);
     if (!workflow) {
       throw new Error(`resumeWorkflow: unknown workflowId ${input.workflowId}`);
     }
-    if (workflow.status === "canceled") {
-      throw new Error(`resumeWorkflow: workflow ${input.workflowId} is canceled and cannot be resumed`);
+    if (workflow.status === "halted") {
+      resumeHaltedWorkflow(workflow, input.now);
+      return;
     }
-    if (workflow.status !== "halted") {
-      throw new Error(`resumeWorkflow: workflow ${input.workflowId} is not halted (status=${workflow.status})`);
+    if (workflow.status !== "paused") {
+      throw new Error(`resumeWorkflow: workflow ${input.workflowId} is ${workflow.status}, only paused or halted workflows can be resumed`);
     }
+    const ref = workflow.workflowContext.pauseSnapshotRef ?? null;
+    const changedFiles = ref && deps.diffChangedFilesSinceSnapshot ? deps.diffChangedFilesSinceSnapshot(input.workflowId, ref) : [];
+    const notice = composeResumeNotice({
+      changedFiles,
+      message: input.message ?? null
+    });
     const tx = db.transaction(() => {
-      if (countRunningWorkflowsForCollab(db, workflow.collabId) > 0) {
-        throw new Error(`resumeWorkflow: another workflow is already running on collab ${workflow.collabId}`);
+      const others = listWorkflows(db, { collabId: workflow.collabId }).filter((w) => w.workflowId !== input.workflowId && (w.status === "running" || w.status === "paused"));
+      if (others.length > 0) {
+        throw new Error(`resumeWorkflow: another workflow is already active on collab ${workflow.collabId}`);
+      }
+      resetStrandedOrchestrationForWorkflow(db, input.workflowId);
+      let bakedIntoPending = false;
+      if (notice) {
+        bakedIntoPending = prependToPendingHandoffRequestText(db, {
+          workflowId: input.workflowId,
+          prefix: notice,
+          now: input.now
+        });
       }
       setWorkflowStatus(db, {
         workflowId: input.workflowId,
@@ -3062,6 +3258,15 @@ ${findingsText}`;
         haltReason: null,
         now: input.now
       });
+      updateWorkflowContext(db, {
+        workflowId: input.workflowId,
+        patch: {
+          resumeNotice: bakedIntoPending ? null : notice,
+          pausedAt: null,
+          pauseSnapshotRef: null
+        },
+        now: input.now
+      });
     });
     tx.immediate();
     events.emit("workflow.resumed", {
@@ -3162,6 +3367,9 @@ ${findingsText}`;
     beginPhaseRun,
     applyOrchestratorVerdict,
     haltWorkflow,
+    pauseWorkflow,
+    maybeCaptureQuiesceSnapshot,
+    consumeResumeNotice,
     resumeWorkflow,
     cancelWorkflow,
     getHandoffWithWorkflowMeta,
@@ -3177,8 +3385,32 @@ function buildEventId(kind, subjectId, timestamp) {
   return `evt_${kind}_${subjectId}_${normalizeTimestampForEventId(timestamp)}`;
 }
 function createControlService(db, events) {
-  const workflowControl = createWorkflowControl({ db, events });
+  const resolveWorkspaceRoot = (workflowId) => {
+    const wf = getWorkflowById(db, workflowId);
+    if (!wf)
+      return null;
+    return getCollab(db, wf.collabId)?.workspaceRoot ?? null;
+  };
+  const workflowControl = createWorkflowControl({
+    db,
+    events,
+    captureSnapshotRef: (workflowId) => {
+      const root = resolveWorkspaceRoot(workflowId);
+      return root ? captureWorkspaceSnapshotSync(root) : null;
+    },
+    diffChangedFilesSinceSnapshot: (workflowId, sinceRef) => {
+      const root = resolveWorkspaceRoot(workflowId);
+      return root ? diffChangedFilesSince(root, sinceRef) : [];
+    }
+  });
+  const isWorkflowDeliverySuspended = (handoffId) => {
+    const meta = workflowControl.getHandoffWithWorkflowMeta(handoffId);
+    if (!meta?.workflowId)
+      return false;
+    return workflowControl.getWorkflow(meta.workflowId)?.status === "paused";
+  };
   return Object.assign({
+    isWorkflowDeliverySuspended,
     startCollab(input) {
       const collab2 = collabSchema.parse({
         version: 1,
@@ -3806,6 +4038,8 @@ function createControlService(db, events) {
       return createRelayHandoffTxn(db, input);
     },
     acceptRelayHandoff(input) {
+      if (isWorkflowDeliverySuspended(input.handoffId))
+        return;
       return acceptRelayHandoffTxn(db, input);
     },
     deferRelayHandoff(input) {
@@ -3818,7 +4052,12 @@ function createControlService(db, events) {
       return markRelayHandoffStaleTxn(db, input);
     },
     handoffBackRelay(input) {
-      return handoffBackRelayTxn(db, input);
+      const result = handoffBackRelayTxn(db, input);
+      const meta = workflowControl.getHandoffWithWorkflowMeta(input.handoffId);
+      if (meta?.workflowId && workflowControl.getWorkflow(meta.workflowId)?.status === "paused") {
+        workflowControl.maybeCaptureQuiesceSnapshot({ workflowId: meta.workflowId, now: input.now });
+      }
+      return result;
     },
     failRelayHandoffOnDisconnect(input) {
       return failRelayHandoffOnDisconnectTxn(db, input);
@@ -3830,6 +4069,8 @@ function createControlService(db, events) {
       return queryLatestHandedBackHandoff(db, collabId2);
     },
     claimRelayHandoffForOrchestration(input) {
+      if (isWorkflowDeliverySuspended(input.handoffId))
+        return null;
       return claimRelayHandoffForOrchestrationTxn(db, input);
     },
     listRelayHandoffsPendingOrchestration(collabId2) {
@@ -3865,6 +4106,7 @@ function createControlService(db, events) {
         clipSample: input.clipSample,
         turnSample: input.turnSample,
         abortedByRaceGuard: input.abortedByRaceGuard,
+        interferenceDetected: input.interferenceDetected ?? false,
         createdAt: input.now
       });
       return { captureId };
@@ -3941,8 +4183,130 @@ function createBrokerApp(input) {
   return app;
 }
 
+// ../broker/dist/storage/enforce-one-active-collab.js
+function defaultIsPidAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (err) {
+    return err.code === "EPERM";
+  }
+}
+function dedupeActiveCollabs(db, opts) {
+  const rows = db.prepare(`SELECT c.collab_id, c.workspace_id, c.created_at, d.pid AS pid,
+			        (SELECT COUNT(*) FROM workflows w
+			           WHERE w.collab_id = c.collab_id AND w.status = 'running') AS running_workflows
+			   FROM collab c
+			   LEFT JOIN broker_daemon d ON d.collab_id = c.collab_id
+			  WHERE c.status = 'active' AND c.workspace_id IS NOT NULL`).all();
+  const byWorkspace = /* @__PURE__ */ new Map();
+  for (const row of rows) {
+    const key = row.workspace_id;
+    const list = byWorkspace.get(key);
+    if (list)
+      list.push(row);
+    else
+      byWorkspace.set(key, [row]);
+  }
+  const conflicted = [];
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const stop = db.prepare("UPDATE collab SET status = 'stopped', stopped_at = ?, updated_at = ? WHERE collab_id = ?");
+  for (const [workspaceId, group] of byWorkspace) {
+    if (group.length < 2)
+      continue;
+    const workflowOwners = group.filter((r) => r.running_workflows > 0);
+    if (workflowOwners.length >= 2) {
+      conflicted.push(workspaceId);
+      opts.warn(`Workspace ${workspaceId} has ${workflowOwners.length} active collabs that each own a running workflow: ${workflowOwners.map((r) => r.collab_id).join(", ")}. Refusing to auto-stop any (that would orphan a live run). Stop the extra collab(s) manually with \`whisper collab stop --collab <id>\`. The one-active-collab-per-workspace index will be created automatically once only one remains.`);
+      continue;
+    }
+    let survivor;
+    if (workflowOwners.length === 1) {
+      survivor = workflowOwners[0];
+    } else {
+      const live = group.filter((r) => r.pid !== null && opts.isPidAlive(r.pid));
+      if (live.length >= 1) {
+        survivor = live.reduce((a, b) => a.created_at >= b.created_at ? a : b);
+      } else {
+        survivor = group.reduce((a, b) => a.created_at >= b.created_at ? a : b);
+      }
+    }
+    for (const row of group) {
+      if (row.collab_id === survivor.collab_id)
+        continue;
+      stop.run(now, now, row.collab_id);
+    }
+  }
+  return conflicted;
+}
+var CREATE_INDEX_SQL = "CREATE UNIQUE INDEX IF NOT EXISTS idx_collab_one_active_per_workspace ON collab(workspace_id) WHERE status = 'active'";
+function residualDuplicateCount(db) {
+  const row = db.prepare(`SELECT COUNT(*) AS n FROM (
+			   SELECT workspace_id FROM collab
+			    WHERE status = 'active' AND workspace_id IS NOT NULL
+			    GROUP BY workspace_id HAVING COUNT(*) > 1
+			 )`).get();
+  return row.n;
+}
+function enforceOneActiveCollabPerWorkspace(db, options = {}) {
+  const opts = {
+    isPidAlive: options.isPidAlive ?? defaultIsPidAlive,
+    warn: options.warn ?? ((m) => console.error(m))
+  };
+  const tx = db.transaction(() => {
+    dedupeActiveCollabs(db, opts);
+    if (residualDuplicateCount(db) === 0) {
+      db.exec(CREATE_INDEX_SQL);
+    } else {
+      opts.warn("Skipping idx_collab_one_active_per_workspace: an irreducible duplicate active collab remains. The index will be created on a later startup once only one active collab per workspace exists.");
+    }
+  });
+  tx();
+}
+
+// ../broker/dist/storage/clipboard-capture-lease.js
+var LEASE_ID = 1;
+var DEFAULT_LEASE_TTL_MS = 5e3;
+function defaultIsPidAlive2(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (err) {
+    return err.code === "EPERM";
+  }
+}
+function resolveOptions(options) {
+  return {
+    isPidAlive: options.isPidAlive ?? defaultIsPidAlive2,
+    ttlMs: options.ttlMs ?? DEFAULT_LEASE_TTL_MS,
+    now: options.now ?? Date.now
+  };
+}
+function isStale(row, opts) {
+  if (row.holder_collab_id === null)
+    return true;
+  if (row.holder_pid === null || !opts.isPidAlive(row.holder_pid))
+    return true;
+  if (row.acquired_at === null)
+    return true;
+  const age = opts.now() - Date.parse(row.acquired_at);
+  return age > opts.ttlMs;
+}
+function sweepStaleCaptureLease(db, options = {}) {
+  const opts = resolveOptions(options);
+  const tx = db.transaction(() => {
+    const row = db.prepare("SELECT holder_collab_id, holder_pid, acquired_at FROM clipboard_capture_lease WHERE id = ?").get(LEASE_ID);
+    if (!row || row.holder_collab_id === null)
+      return;
+    if (isStale(row, opts)) {
+      db.prepare("UPDATE clipboard_capture_lease SET holder_collab_id = NULL, holder_pid = NULL, acquired_at = NULL WHERE id = ?").run(LEASE_ID);
+    }
+  });
+  tx();
+}
+
 // ../broker/dist/storage/apply-migrations.js
-var CURRENT_SCHEMA_VERSION = 4;
+var CURRENT_SCHEMA_VERSION = 5;
 var initMigrationSql = `
 CREATE TABLE IF NOT EXISTS broker_state (
   id INTEGER PRIMARY KEY CHECK (id = 1),
@@ -4160,8 +4524,9 @@ CREATE TABLE IF NOT EXISTS workflows (
   updated_at TEXT NOT NULL
 );
 
+DROP INDEX IF EXISTS workflows_one_running_per_collab;
 CREATE UNIQUE INDEX IF NOT EXISTS workflows_one_running_per_collab
-  ON workflows(collab_id) WHERE status = 'running';
+  ON workflows(collab_id) WHERE status IN ('running', 'paused');
 
 CREATE TABLE IF NOT EXISTS workflow_phases (
   phase_run_id TEXT PRIMARY KEY,
@@ -4229,6 +4594,13 @@ CREATE TABLE IF NOT EXISTS recovery_state (
   recovered_at         TEXT
 );
 
+CREATE TABLE IF NOT EXISTS clipboard_capture_lease (
+  id                INTEGER PRIMARY KEY CHECK (id = 1),
+  holder_collab_id  TEXT,
+  holder_pid        INTEGER,
+  acquired_at       TEXT
+);
+
 `;
 function ensureBrokerStateRow(db) {
   db.prepare(`INSERT INTO broker_state (id, schema_version, migrated)
@@ -4239,20 +4611,20 @@ function ensureBrokerStateRow(db) {
 }
 function applyMigrations(db) {
   const current = db.pragma("user_version", { simple: true });
-  if (current >= CURRENT_SCHEMA_VERSION) {
-    ensureBrokerStateRow(db);
-    return;
-  }
-  db.exec("BEGIN EXCLUSIVE");
-  try {
-    runMigrationBody(db);
-    db.pragma(`user_version = ${CURRENT_SCHEMA_VERSION}`);
-    ensureBrokerStateRow(db);
-    db.exec("COMMIT");
-  } catch (err) {
-    db.exec("ROLLBACK");
-    throw err;
+  if (current < CURRENT_SCHEMA_VERSION) {
+    db.exec("BEGIN EXCLUSIVE");
+    try {
+      runMigrationBody(db);
+      db.pragma(`user_version = ${CURRENT_SCHEMA_VERSION}`);
+      db.exec("COMMIT");
+    } catch (err) {
+      db.exec("ROLLBACK");
+      throw err;
+    }
   }
+  ensureBrokerStateRow(db);
+  enforceOneActiveCollabPerWorkspace(db);
+  sweepStaleCaptureLease(db);
 }
 function runMigrationBody(db) {
   db.exec(initMigrationSql);
@@ -4389,6 +4761,7 @@ function runMigrationBody(db) {
 			clip_sample TEXT,
 			turn_sample TEXT,
 			aborted_by_race_guard INTEGER NOT NULL DEFAULT 0,
+			interference_detected INTEGER NOT NULL DEFAULT 0,
 			created_at TEXT NOT NULL
 		);
 		CREATE INDEX IF NOT EXISTS idx_relay_capture_diagnostics_collab_created
@@ -4400,6 +4773,10 @@ function runMigrationBody(db) {
 		CREATE INDEX IF NOT EXISTS idx_relay_capture_diagnostics_status
 			ON relay_capture_diagnostics (capture_status);
 	`);
+  const captureDiagColumns = db.prepare("PRAGMA table_info(relay_capture_diagnostics)").all();
+  if (!captureDiagColumns.some((column) => column.name === "interference_detected")) {
+    db.exec("ALTER TABLE relay_capture_diagnostics ADD COLUMN interference_detected INTEGER NOT NULL DEFAULT 0");
+  }
   db.exec(`
 		CREATE TABLE IF NOT EXISTS relay_evaluator_diagnostics (
 			evaluator_id TEXT PRIMARY KEY,
@@ -5683,7 +6060,7 @@ ${JSON.stringify(event.payload)}`;
 }
 
 // src/runtime/process-start-time.ts
-import { execFileSync } from "node:child_process";
+import { execFileSync as execFileSync2 } from "node:child_process";
 import { readFileSync } from "node:fs";
 function readProcessStartTime(pid) {
   if (process.platform === "linux") {
@@ -5697,7 +6074,7 @@ function readProcessStartTime(pid) {
   }
   if (process.platform === "darwin") {
     try {
-      const out = execFileSync("ps", ["-o", "lstart=", "-p", String(pid)], {
+      const out = execFileSync2("ps", ["-o", "lstart=", "-p", String(pid)], {
         encoding: "utf8"
       });
       const trimmed = out.trim();