botmux 2.33.0 → 2.33.1

package/dist/utils/cli-usage-limit.js

@@ -32,6 +32,10 @@ function parseMeridiemTime(text, now) {
             hour += 12;
         const retryAt = new Date(now);
         retryAt.setHours(hour, minute, 0, 0);
+        // CLI output only includes a wall-clock time, not a date. Roll passed AM
+        // times into tomorrow because afternoon→midnight resets are common. Passed
+        // PM times stay on today: they might mean "just reset" or "tomorrow PM",
+        // and a wrong ready state self-heals when the CLI rejects the retry again.
         if (retryAt.getTime() < now.getTime() && hour < 12) {
             retryAt.setDate(retryAt.getDate() + 1);
         }

package/dist/utils/cli-usage-limit.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-usage-limit.js","sourceRoot":"","sources":["../../src/utils/cli-usage-limit.ts"],"names":[],"mappings":"AAgBA,MAAM,oBAAoB,GAAG;IAC3B,uCAAuC;IACvC,oDAAoD;IACpD,2CAA2C;IAC3C,gEAAgE;CACjE,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC1B,yCAAyC;IACzC,mBAAmB;CACpB,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC1B,gEAAgE;IAChE,iEAAiE;CAClE,CAAC;AAEF,SAAS,UAAU,CAAC,IAAY,EAAE,QAAkB;IAClD,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,GAAS;IAChD,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAExE,IAAI,IAAI,GAAG,OAAO,GAAG,EAAE,CAAC;QACxB,IAAI,QAAQ,KAAK,IAAI;YAAE,IAAI,IAAI,EAAE,CAAC;QAElC,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC;YACnD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACzC,CAAC;QAED,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE;YAC5B,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,6CAA6C,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;SACvF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IAChE,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE1D,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAErC,MAAM,IAAI,GAA6B,UAAU,CAAC,IAAI,EAAE,mBAAmB,CAAC;QAC1E,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,oBAAoB,CAAC;YACtC,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,IAAI,CAAC;IAEX,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAErC,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS;KAC5C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC1D,OAAO,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;AAChE,CAAC"}
+{"version":3,"file":"cli-usage-limit.js","sourceRoot":"","sources":["../../src/utils/cli-usage-limit.ts"],"names":[],"mappings":"AAgBA,MAAM,oBAAoB,GAAG;IAC3B,uCAAuC;IACvC,oDAAoD;IACpD,2CAA2C;IAC3C,gEAAgE;CACjE,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC1B,yCAAyC;IACzC,mBAAmB;CACpB,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC1B,gEAAgE;IAChE,iEAAiE;CAClE,CAAC;AAEF,SAAS,UAAU,CAAC,IAAY,EAAE,QAAkB;IAClD,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,GAAS;IAChD,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAExE,IAAI,IAAI,GAAG,OAAO,GAAG,EAAE,CAAC;QACxB,IAAI,QAAQ,KAAK,IAAI;YAAE,IAAI,IAAI,EAAE,CAAC;QAElC,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,yEAAyE;QACzE,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,IAAI,OAAO,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC;YACnD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACzC,CAAC;QAED,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE;YAC5B,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,6CAA6C,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;SACvF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IAChE,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE1D,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAErC,MAAM,IAAI,GAA6B,UAAU,CAAC,IAAI,EAAE,mBAAmB,CAAC;QAC1E,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,oBAAoB,CAAC;YACtC,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,IAAI,CAAC;IAEX,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAErC,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS;KAC5C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC1D,OAAO,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;AAChE,CAAC"}

package/dist/worker.js

@@ -13,7 +13,7 @@
  *   7. On 'restart', kills CLI and re-spawns with --resume
  */
 import { randomBytes } from 'node:crypto';
-import { mkdirSync, writeFileSync, unlinkSync, existsSync, statSync, readdirSync, readlinkSync, readFileSync, watch as fsWatch } from 'node:fs';
+import { mkdirSync, writeFileSync, unlinkSync, existsSync, statSync, readdirSync, readlinkSync, readFileSync, watch as fsWatch, createWriteStream } from 'node:fs';
 import { join } from 'node:path';
 import { drainTranscript, joinAssistantText, findJsonlContainingFingerprint, findJsonlsContainingExactContent, findLatestJsonl, extractLastAssistantTurn, extractTurnStartText, splitTranscriptEventsByCutoff } from './services/claude-transcript.js';
 import { BridgeTurnQueue, makeFingerprint, normaliseForFingerprint } from './services/bridge-turn-queue.js';
@@ -22,6 +22,7 @@ import { shouldRunQuietRotation, evaluatePidResolverPullback, decideFingerprintS
 import { CodexBridgeQueue } from './services/codex-bridge-queue.js';
 import { drainCodexRollout, findCodexRolloutBySessionId, findCodexRolloutByPid, splitCodexEventsByCutoff, extractLastCodexTurn } from './services/codex-transcript.js';
 import { cocoEventsPathForSession, drainCocoEvents, findCocoSessionByPid } from './services/coco-transcript.js';
+import { baselineJsonlCursor } from './services/jsonl-cursor.js';
 import { dirname } from 'node:path';
 import { createServer as createHttpServer } from 'node:http';
 import { WebSocketServer, WebSocket } from 'ws';
@@ -379,6 +380,13 @@ function bridgeProbeOpenSessionIds() {
 function bridgeAbsorbBaseline() {
     if (!bridgeJsonlPath)
         return;
+    if (!lastInitConfig?.adoptMode) {
+        const cursor = baselineJsonlCursor(bridgeJsonlPath);
+        bridgeOffset = cursor.newOffset;
+        bridgePendingTail = cursor.pendingTail;
+        bridgeBaselineDone = true;
+        return;
+    }
     const result = drainTranscript(bridgeJsonlPath, 0);
     bridgeOffset = result.newOffset;
     bridgePendingTail = result.pendingTail;
@@ -1440,10 +1448,9 @@ function codexBridgeAttach(rolloutPath, mode) {
         log(`Codex bridge split-live degraded to fresh (file missing): ${rolloutPath}`);
     }
     else if (existsSync(rolloutPath)) {
-        const result = structuredBridgeIngestPath(rolloutPath, 0);
-        codexBridgeOffset = result.newOffset;
-        codexBridgePendingTail = result.pendingTail;
-        codexBridgeQueue.absorb(result.events);
+        const cursor = baselineJsonlCursor(rolloutPath);
+        codexBridgeOffset = cursor.newOffset;
+        codexBridgePendingTail = cursor.pendingTail;
         codexBridgeBaselineDone = true;
         log(`Codex bridge baselined: ${rolloutPath} (offset=${codexBridgeOffset})`);
     }
@@ -1685,6 +1692,10 @@ const SCREEN_UPDATE_INTERVAL_MS = 2_000;
 // ─── Scrollback Buffer (replay to late-connecting WS clients) ───────────────
 const MAX_SCROLLBACK = 1_000_000; // chars (~1MB)
 let scrollback = '';
+const WORKFLOW_TRANSCRIPT_MAX = 2_000_000; // chars (~2MB)
+const WORKFLOW_OUTPUT_END_MARKER = '</WORKFLOW_OUTPUT>';
+let workflowTranscript = '';
+let workflowFinalOutputSent = false;
 /** Tracks whether the CLI is currently in the alt screen buffer. Updated by
  *  scanning PTY output for DECSET 1049/47/1047 toggles. Used when trimming
  *  scrollback at cap so replay always starts with the correct buffer mode —
@@ -1698,6 +1709,66 @@ const ALT_EXIT_RE = /\x1b\[\?(1049|1047|47)l/g;
 let screenAnalyzer = null;
 /** When true, user messages are queued because a TUI prompt is active */
 let tuiPromptBlocking = false;
+function isWorkflowWorker() {
+    return process.env.BOTMUX_WORKFLOW === '1';
+}
+/**
+ *  Raw PTY byte stream writer — independent of the IPC `final_output` path.
+ *  Powers the dashboard "terminal replay" view: bytes flow straight through
+ *  without splitting on `\n` or prefixing each line, so ANSI cursor moves /
+ *  status bars / alt-screen toggles all survive and `xterm.write()` on the
+ *  client renders an actual recording of the live session.
+ *
+ *  Lazily opened on first PTY chunk so attempts that never produce data
+ *  don't leave empty `pty.log` files behind.  Closed at worker exit by the
+ *  process-shutdown hook below.
+ */
+let workflowPtyLogStream;
+let workflowPtyLogOpenFailed = false;
+function appendWorkflowPtyLog(data) {
+    if (!isWorkflowWorker() || workflowPtyLogOpenFailed)
+        return;
+    const path = process.env.BOTMUX_WORKFLOW_PTY_LOG_PATH;
+    if (!path)
+        return;
+    if (!workflowPtyLogStream) {
+        try {
+            mkdirSync(dirname(path), { recursive: true });
+            workflowPtyLogStream = createWriteStream(path, { flags: 'a' });
+            workflowPtyLogStream.on('error', (err) => {
+                log(`workflow pty log write error: ${err.message}`);
+            });
+        }
+        catch (err) {
+            workflowPtyLogOpenFailed = true;
+            log(`workflow pty log open failed (${path}): ${err.message}`);
+            return;
+        }
+    }
+    workflowPtyLogStream.write(data);
+}
+function captureWorkflowTranscript(data) {
+    appendWorkflowPtyLog(data);
+    if (!isWorkflowWorker() || workflowFinalOutputSent)
+        return;
+    workflowTranscript += data;
+    if (workflowTranscript.length > WORKFLOW_TRANSCRIPT_MAX) {
+        workflowTranscript = workflowTranscript.slice(-WORKFLOW_TRANSCRIPT_MAX);
+    }
+}
+function maybeEmitWorkflowTranscriptOutput() {
+    if (!isWorkflowWorker() || workflowFinalOutputSent)
+        return;
+    if (!workflowTranscript.includes(WORKFLOW_OUTPUT_END_MARKER))
+        return;
+    send({
+        type: 'final_output',
+        content: workflowTranscript,
+        lastUuid: `workflow-pty-${Date.now()}`,
+        turnId: `workflow-pty-${sessionId || 'unknown'}`,
+    });
+    log('Workflow PTY transcript final_output emitted');
+}
 function startScreenAnalyzer() {
     const sa = config.screenAnalyzer;
     log(`ScreenAnalyzer config: enabled=${sa.enabled}, baseUrl=${sa.baseUrl ? 'set' : 'empty'}, model=${sa.model || 'empty'}, extraHeaders=${JSON.stringify(sa.extraHeaders)}`);
@@ -2057,6 +2128,7 @@ const TRUST_DIALOG_PATTERN = /Yes, I trust this folder|Yes, continue/;
 let trustHandled = false;
 // ─── Prompt Detection ────────────────────────────────────────────────────────
 function onPtyData(data) {
+    captureWorkflowTranscript(data);
     renderer?.write(data);
     // In tmux-attach mode, each web client has its own tmux attach PTY —
     // no relay needed. In non-tmux mode AND in pipe mode (adopt-bridge),
@@ -2120,6 +2192,7 @@ function markPromptReady() {
     if (isPromptReady)
         return; // guard against duplicate calls
     isPromptReady = true;
+    maybeEmitWorkflowTranscriptOutput();
     if (awaitingFirstPrompt) {
         awaitingFirstPrompt = false;
         renderer?.markNewTurn(); // exclude history replay from streaming card
@@ -2141,6 +2214,7 @@ function persistCliSessionId(cliSessionId) {
         return;
     if (lastInitConfig)
         lastInitConfig.cliSessionId = cliSessionId;
+    send({ type: 'cli_session_id', cliSessionId });
     try {
         const session = sessionStore.getSession(sessionId);
         if (!session || session.cliSessionId === cliSessionId)
@@ -2614,6 +2688,9 @@ function spawnCli(cfg) {
     isTmuxMode = selectedBackend.isTmuxMode;
     isPipeMode = selectedBackend.isPipeMode;
     backend = selectedBackend.backend;
+    const adapterSessionId = cfg.resume
+        ? (cfg.originalSessionId ?? cfg.sessionId)
+        : cfg.sessionId;
     // Claude Code appends a line to ~/.claude/projects/<cwd-hash>/<sid>.jsonl each
     // time the user submits. The adapter uses this file to verify paste+Enter
     // actually committed (rather than trusting a fixed sleep), so wire it up now.
@@ -2621,10 +2698,10 @@ function spawnCli(cfg) {
     // so it needs no per-session wiring here.
     if (cfg.cliId === 'claude-code') {
         backend.claudeJsonlPath =
-            claudeJsonlPathForSession(cfg.sessionId, cfg.workingDir);
+            claudeJsonlPathForSession(cfg.cliSessionId ?? adapterSessionId, cfg.workingDir);
     }
     const args = cliAdapter.buildArgs({
-        sessionId: cfg.sessionId,
+        sessionId: adapterSessionId,
         resume: cfg.resume ?? false,
         workingDir: cfg.workingDir,
         resumeSessionId: cfg.cliSessionId,
@@ -2707,8 +2784,9 @@ function spawnCli(cfg) {
     // the file Claude creates on first submit isn't absorbed as history,
     // and baseline-existing on resume so prior-run turns ARE absorbed (we
     // don't want to re-emit yesterday's conversation as fresh turns).
-    if (cfg.cliId === 'claude-code' && cfg.sessionId) {
-        const claudeJsonl = claudeJsonlPathForSession(cfg.sessionId, cfg.workingDir);
+    if (cfg.cliId === 'claude-code' && adapterSessionId) {
+        const claudeBridgeSessionId = cfg.cliSessionId ?? adapterSessionId;
+        const claudeJsonl = claudeJsonlPathForSession(claudeBridgeSessionId, cfg.workingDir);
         startBridgeWatcher(claudeJsonl, {
             cliPid: cliPid ?? undefined,
             cliCwd: cfg.workingDir,
@@ -3186,6 +3264,9 @@ if(isTouch&&typeof Hammer!=='undefined'){
 }
 // ─── IPC Communication ───────────────────────────────────────────────────────
 function send(msg) {
+    if (isWorkflowWorker() && msg.type === 'final_output') {
+        workflowFinalOutputSent = true;
+    }
     process.send?.(msg);
 }
 function log(msg) {
@@ -3210,9 +3291,14 @@ process.on('message', async (raw) => {
                 const { setDefaultLocale } = await import('./i18n/index.js');
                 setDefaultLocale(msg.locale);
             }
-            // Scope session store to this bot's per-bot file
-            if (msg.larkAppId)
+            // Scope session store to this bot's per-bot file.
+            // Slice C0: workflow-spawned workers (BOTMUX_WORKFLOW=1) skip this —
+            // their `sessionId` is synthetic (`wf-<runId>-<activityId>-...`) and
+            // must not be appended to the bot's chat-session registry.  The
+            // workflow's own event log is the source of truth for run state.
+            if (msg.larkAppId && process.env.BOTMUX_WORKFLOW !== '1') {
                 sessionStore.init(msg.larkAppId);
+            }
             // Capture credentials for direct image upload from worker
             larkAppIdForUpload = msg.larkAppId;
             larkAppSecretForUpload = msg.larkAppSecret;
@@ -3226,9 +3312,20 @@ process.on('message', async (raw) => {
             renderRows = dims.rows;
             log(`Init: session=${sessionId}, cwd=${msg.workingDir}, render=${renderCols}x${renderRows}${msg.adoptMode ? ' (adopt-pane)' : ''}`);
             try {
-                const port = await startWebServer('0.0.0.0', msg.webPort);
-                startScreenUpdates();
-                startScreenAnalyzer();
+                let port = 0;
+                if (!isWorkflowWorker()) {
+                    port = await startWebServer('0.0.0.0', msg.webPort);
+                    startScreenUpdates();
+                    startScreenAnalyzer();
+                }
+                else {
+                    // Workflow attempts still expose a read-only web terminal so the
+                    // workflow dashboard can observe in-flight subagents.  Keep the
+                    // chat-side features disabled: no screen cards, no analyzer, no
+                    // sessionStore writes.
+                    port = await startWebServer('0.0.0.0', msg.webPort);
+                    log('Workflow worker mode: web terminal enabled; skipping screen updates and screen analyzer');
+                }
                 spawnCli(msg);
                 // Queue the initial prompt — flushed when CLI shows idle.
                 // Adapters with passesInitialPromptViaArgs (e.g. Gemini -i) bake the
@@ -3453,6 +3550,13 @@ function cleanup() {
         httpServer.close();
         httpServer = null;
     }
+    if (workflowPtyLogStream) {
+        try {
+            workflowPtyLogStream.end();
+        }
+        catch { /* already closed */ }
+        workflowPtyLogStream = undefined;
+    }
 }
 process.on('SIGTERM', () => { stopScreenshotLoop(); killCli(); cleanup(); process.exit(0); });
 process.on('SIGINT', () => { stopScreenshotLoop(); killCli(); cleanup(); process.exit(0); });