funolio-agent 1.0.7 → 1.0.48

package/dist/workflow-engine.js

@@ -62,18 +62,47 @@ const safeguards_1 = require("./orchestration/safeguards");
 const data = __importStar(require("./local-data"));
 const orchestrator_profile_1 = require("./orchestrator-profile");
 const subscription_runtime_1 = require("./auth/subscription-runtime");
+const runtime_context_1 = require("./runtime-context");
+const local_cli_pty_manager_1 = require("./local-cli-pty-manager");
+const cli_session_epoch_1 = require("./cli-session-epoch");
 // ─── Workflow Engine ─────────────────────────────────────────────
 const MAX_STEP_ATTEMPTS = safeguards_1.SAFEGUARDS.MAX_AGENT_ATTEMPTS;
 const MAX_STEPS = safeguards_1.SAFEGUARDS.MAX_WORKFLOW_STEPS;
 function isInteractiveAuthFailure(text) {
     return /\b(not logged in|please run \/login|unauthorized|invalid api key|authentication required)\b/i.test(text);
 }
+const LOCAL_WORKFLOW_RUNTIME_RETRY_LIMIT = 2;
+function shouldRetrySelectedWorkflowRuntime(err) {
+    const text = String(err?.message || err || '').toLowerCase();
+    if (!text)
+        return false;
+    if (/\b(no api key|configure one in settings|not available on this machine|not installed|please run \/login|not logged in|invalid api key)\b/i.test(text)) {
+        return false;
+    }
+    return /\b(429|rate limit|timeout|timed out|temporar|temporarily|econnreset|etimedout|enotfound|econnrefused|socket hang up|network|try again|overloaded|busy)\b/i.test(text);
+}
+async function pauseWorkflowRuntimeRetry(attempt) {
+    const delayMs = attempt <= 1 ? 750 : 1500;
+    await new Promise((resolve) => setTimeout(resolve, delayMs));
+}
+function buildWorkflowPtyConversationKey(conversationId, step, workflowContext) {
+    if (conversationId)
+        return conversationId;
+    if (workflowContext?.workflowId)
+        return `workflow:${workflowContext.workflowId}`;
+    return `adhoc:${step.agentId}:${step.id}`;
+}
 class WorkflowEngine extends events_1.EventEmitter {
     projectDir;
+    runtimeMode;
     activeWorkflows = new Map();
-    constructor(projectDir) {
+    constructor(projectDir, runtimeMode) {
         super();
         this.projectDir = projectDir;
+        this.runtimeMode = (0, runtime_context_1.normalizeRuntimeMode)(runtimeMode || (0, runtime_context_1.getDefaultRuntimeMode)());
+    }
+    getRuntimeMode() {
+        return this.runtimeMode;
     }
     /**
      * Execute a workflow: decompose a prompt into steps, route, and execute.
@@ -82,7 +111,8 @@ class WorkflowEngine extends events_1.EventEmitter {
     async execute(prompt, conversationId, agentId, opts) {
         const workflowId = crypto.randomUUID();
         const startedAt = Date.now();
-        const clerk = (0, clerk_model_1.getClerk)();
+        const effectiveRuntimeMode = (0, runtime_context_1.normalizeRuntimeMode)(opts?.runtimeMode || this.runtimeMode);
+        const clerk = (0, clerk_model_1.getClerk)({ runtimeMode: effectiveRuntimeMode });
         const allProfiles = data.listAgentProfiles();
         // Filter out orchestrator profiles by default, but allow explicitly assigned specialists
         // and the selected agent back into the planning pool when needed.
@@ -100,10 +130,12 @@ class WorkflowEngine extends events_1.EventEmitter {
         }
         else {
             // Single agent, single step
+            const stepDescription = opts?.stepDescription?.trim()
+                || prompt.slice(0, 100);
             steps = [{
                     id: `${workflowId}-0`,
                     index: 0,
-                    description: prompt.slice(0, 100),
+                    description: stepDescription,
                     prompt,
                     agentId: profile.id,
                     agentName: profile.name,
@@ -281,7 +313,7 @@ class WorkflowEngine extends events_1.EventEmitter {
             `TODO ITEM #${task.id}: ${task.title}`,
             task.details ? `Task details:\n${task.details}` : '',
             'Work only on this TODO item. Do not mark any other item complete.',
-            'When your stage is complete, return the structured footer Funolio requires so routing can continue automatically.',
+            'When your stage is complete, return the structured footer required below so routing can continue automatically.',
         ].filter(Boolean).join('\n\n');
         const steps = template.steps
             .sort((a, b) => a.order_index - b.order_index)
@@ -633,7 +665,7 @@ class WorkflowEngine extends events_1.EventEmitter {
             ? 'Include REASON only when STATUS is FAIL.'
             : 'Include REASON only when STATUS is BLOCKED.';
         return [
-            `You are ${profile?.name || 'a Funolio workflow worker'}.`,
+            `You are ${profile?.name || 'a workflow worker'}.`,
             'Complete only the assigned workflow step.',
             roleLine,
             'Use available tools when the task requires creating, changing, or verifying files.',
@@ -654,8 +686,8 @@ class WorkflowEngine extends events_1.EventEmitter {
                 ? 'Your role is QA. Verify the delivered work, then complete the TODO through the worker tool or create the next fix handoff.'
                 : 'Your role is implementer. Do the assigned work, then complete the TODO through the worker tool.';
         return [
-            `You are ${profile?.name || 'a Funolio workflow worker'}.`,
-            'You are executing one orchestrated TODO task inside Funolio.',
+            `You are ${profile?.name || 'a workflow worker'}.`,
+            'You are executing one orchestrated TODO task.',
             roleLine,
             'Follow the assignment in the user message exactly.',
             'Use available tools when needed.',
@@ -831,6 +863,7 @@ class WorkflowEngine extends events_1.EventEmitter {
      * Handles checkpoint loop-back and footer-driven retry/failure logic.
      */
     async executeSteps(workflowId, steps, conversationId, opts) {
+        const effectiveRuntimeMode = (0, runtime_context_1.normalizeRuntimeMode)(opts?.runtimeMode || this.runtimeMode);
         const completed = new Set();
         const failed = new Set();
         const allowMissingFooterForDirectStep = !opts?.isOrchestrated && !!opts?.disableDecomposition && steps.length === 1;
@@ -902,6 +935,53 @@ class WorkflowEngine extends events_1.EventEmitter {
                         loopCount: step.loopCount,
                     };
                     const result = await this.executeStep(step, fullPrompt, conversationId, opts, opts?.apiKey, wfContext);
+                    if (opts?.isOrchestrated && opts.taskId) {
+                        const completedTodo = data.getTodoTask(opts.taskId, 'completed');
+                        if (completedTodo) {
+                            step.status = 'completed';
+                            step.result = completedTodo.output_summary || completedTodo.handoff_prompt || result;
+                            step.completedAt = Date.now();
+                            completed.add(step.index);
+                            this.emitProgress(workflowId, step, steps, 'step-completed', opts?.onProgress, undefined, opts?.onWorkerChunk);
+                            try {
+                                const execId = step._execId;
+                                if (execId) {
+                                    data.updateStepExecution(execId, {
+                                        status: 'completed',
+                                        attempts: step.attempts,
+                                        resultSummary: step.result.length > 200 ? step.result.slice(0, 200) + '...' : step.result,
+                                        completedAt: new Date().toISOString().replace('T', ' ').replace('Z', ''),
+                                    });
+                                    data.updateWorkflowExecution(workflowId, { completedSteps: completed.size });
+                                }
+                            }
+                            catch { /* best effort */ }
+                            return;
+                        }
+                        const blockedTodo = data.getTodoTask(opts.taskId, 'active');
+                        if (blockedTodo?.blocker_summary) {
+                            step.status = 'failed';
+                            step.result = blockedTodo.blocker_summary;
+                            step.error = blockedTodo.blocker_summary;
+                            step.completedAt = Date.now();
+                            failed.add(step.index);
+                            this.emitProgress(workflowId, step, steps, 'step-failed', opts?.onProgress, undefined, opts?.onWorkerChunk);
+                            try {
+                                const execId = step._execId;
+                                if (execId) {
+                                    data.updateStepExecution(execId, {
+                                        status: 'failed',
+                                        attempts: step.attempts,
+                                        error: step.error,
+                                        resultSummary: blockedTodo.blocker_summary.slice(0, 200),
+                                        completedAt: new Date().toISOString().replace('T', ' ').replace('Z', ''),
+                                    });
+                                }
+                            }
+                            catch { /* best effort */ }
+                            return;
+                        }
+                    }
                     const footer = (0, status_parser_1.parseStructuredFooter)(result);
                     const stepRole = this.inferRoleForStep(step);
                     if (stepRole !== 'qa' && (footer.status === 'PASS' || footer.status === 'FAIL')) {
@@ -1066,7 +1146,7 @@ class WorkflowEngine extends events_1.EventEmitter {
                         && !hasFutureQaStep
                         && !opts?.isOrchestrated;
                     if (shouldRunClerkVerification) {
-                        const verifyClerk = (0, clerk_model_1.getClerk)();
+                        const verifyClerk = (0, clerk_model_1.getClerk)({ runtimeMode: effectiveRuntimeMode });
                         if (verifyClerk) {
                             try {
                                 const verification = await verifyClerk.verifyStepOutput(step.description, step.expectedOutput, result);
@@ -1237,7 +1317,7 @@ class WorkflowEngine extends events_1.EventEmitter {
                     }
                     else if (step.attempts < step.maxAttempts) {
                         // Nudge on retry — generate adjusted prompt
-                        const nudgeClerk = (0, clerk_model_1.getClerk)();
+                        const nudgeClerk = (0, clerk_model_1.getClerk)({ runtimeMode: effectiveRuntimeMode });
                         if (nudgeClerk) {
                             try {
                                 const nudge = await nudgeClerk.generateNudge(step.description, step.prompt, err.message);
@@ -1278,12 +1358,14 @@ class WorkflowEngine extends events_1.EventEmitter {
      * Execute a single workflow step: call LLM with tools, agentic loop.
      */
     async executeStep(step, prompt, conversationId, opts, apiKey, workflowContext) {
+        const effectiveRuntimeMode = (0, runtime_context_1.normalizeRuntimeMode)(opts?.runtimeMode || this.runtimeMode);
         const profile = data.getAgentProfile(step.agentId);
-        const runtime = await this.resolveStepRuntime(step, profile, apiKey);
+        const runtime = await this.resolveStepRuntime(step, profile, apiKey, opts);
         let activeRuntime = runtime;
         let llm = (0, index_1.createProvider)(activeRuntime.providerName, {
             apiKey: activeRuntime.apiKey,
             model: activeRuntime.model,
+            runtimeMode: effectiveRuntimeMode,
             ...(activeRuntime.requestShape ? { requestShape: activeRuntime.requestShape } : {}),
             ...(activeRuntime.baseUrl ? { baseUrl: activeRuntime.baseUrl } : {}),
             ...(activeRuntime.apiQuery ? { apiQuery: activeRuntime.apiQuery } : {}),
@@ -1295,19 +1377,22 @@ class WorkflowEngine extends events_1.EventEmitter {
             ...(opts?.isOrchestrated ? { toolProjectId: opts?.projectId ?? null } : {}),
             ...(opts?.isOrchestrated ? { currentTodoTaskId: opts?.taskId } : {}),
         });
-        const toolDefs = (0, index_2.getAllToolDefinitions)();
+        const toolDefs = (0, index_2.getAllToolDefinitions)(effectiveRuntimeMode);
         const workspacePath = opts?.workspacePath?.trim();
         const effectiveProjectDir = workspacePath || this.projectDir;
+        const unrestrictedCliProvider = index_1.CLI_PROVIDERS.has(step.provider);
         const toolCtx = (0, index_2.createToolContext)(effectiveProjectDir, {
             projectId: opts?.projectId ?? null,
             currentTodoTaskId: opts?.taskId,
             actorType: 'llm',
             actorId: step.agentName || step.agentId,
+            runtimeMode: effectiveRuntimeMode,
+            restrictFileAccessToProject: unrestrictedCliProvider ? false : undefined,
         });
         const isWorkflowWorker = opts?.workerMode !== false;
         let systemPrompt = profile?.soul_md
-            || 'You are a Funolio AI agent working on a specific task step.';
-        const clerk = (0, clerk_model_1.getClerk)();
+            || 'You are an AI assistant working on a specific task step.';
+        const clerk = (0, clerk_model_1.getClerk)({ runtimeMode: effectiveRuntimeMode });
         if (opts?.systemPromptOverride?.trim()) {
             systemPrompt = opts.systemPromptOverride.trim();
         }
@@ -1342,12 +1427,27 @@ class WorkflowEngine extends events_1.EventEmitter {
         const messages = [{ role: 'user', content: effectivePrompt }];
         const promptChars = effectivePrompt.length;
         const systemChars = systemPrompt.length;
+        const isLocalCliSession = effectiveRuntimeMode === 'local_desktop'
+            && (activeRuntime.providerName === 'claude-cli' || activeRuntime.providerName === 'codex-cli');
+        const hasPersistentConversation = isLocalCliSession && !!conversationId;
+        const cliSessionEpochPlan = hasPersistentConversation
+            ? (0, cli_session_epoch_1.selectCliSessionEpoch)(conversationId, step.agentId, activeRuntime.providerName)
+            : { existing: undefined, resumeSessionId: null, resetReason: null };
+        let activeCliSessionId = cliSessionEpochPlan.resumeSessionId;
+        const cliEpochStartedAt = cliSessionEpochPlan.resumeSessionId
+            ? (cliSessionEpochPlan.existing?.epoch_started_at || (0, cli_session_epoch_1.localTimestamp)())
+            : (0, cli_session_epoch_1.localTimestamp)();
+        const ptyConversationKey = buildWorkflowPtyConversationKey(conversationId, step, workflowContext);
         console.info(`[workflow-engine] step runtime: agent=${step.agentName} provider=${activeRuntime.providerName} model=${activeRuntime.model} runtime=${activeRuntime.runtimeLabel || 'unknown'} promptChars=${promptChars} systemChars=${systemChars} tools=${opts?.disableTools ? 0 : toolDefs.length}`);
         // Agentic loop
         let iteration = 0;
         const MAX_ITERATIONS = safeguards_1.SAFEGUARDS.MAX_WORKFLOW_ITERATIONS;
         let incompleteExecutionRecoveries = 0;
+        let selectedRuntimeRetryCount = 0;
         while (iteration < MAX_ITERATIONS) {
+            if (opts?.isOrchestrated && this.orchestratedTodoHandled(opts.taskId)) {
+                return this.buildOrchestratedTodoHandledResult(opts.taskId);
+            }
             iteration++;
             let streamedContent = '';
             let lastChunkProgressAt = 0;
@@ -1364,70 +1464,155 @@ class WorkflowEngine extends events_1.EventEmitter {
                         : 'auto';
             let response;
             try {
-                response = await llm.chat({
-                    messages,
-                    system: systemPrompt,
-                    stream: true,
-                    toolChoice,
-                    onChunk: async (chunk) => {
-                        streamedContent += chunk;
-                        // Forward chunks to onWorkerChunk with 150ms/80-char buffer
-                        if (opts?.onWorkerChunk) {
-                            chunkBuffer += chunk;
-                            const now2 = Date.now();
-                            if (chunkBuffer.length >= 80 || now2 - lastChunkForwardAt >= 150) {
-                                opts.onWorkerChunk({
-                                    type: 'chunk',
-                                    stepId: step.id,
-                                    agentName: step.agentName,
-                                    description: step.description,
-                                    stepIndex: workflowContext?.stepIndex ?? 0,
-                                    totalSteps: workflowContext?.totalSteps ?? 1,
-                                    text: chunkBuffer,
-                                });
-                                chunkBuffer = '';
-                                lastChunkForwardAt = now2;
+                if (isLocalCliSession) {
+                    if (cliSessionEpochPlan.resetReason && iteration === 1 && opts?.onWorkerChunk) {
+                        const resetDetail = cliSessionEpochPlan.resetReason === 'turn_limit'
+                            ? 'Resetting CLI session after reaching the turn limit.'
+                            : cliSessionEpochPlan.resetReason === 'token_limit'
+                                ? 'Resetting CLI session after reaching the context budget.'
+                                : 'Resetting CLI session because the runtime changed.';
+                        opts.onWorkerChunk({
+                            type: opts?.isOrchestrated ? 'worker_chunk' : 'chunk',
+                            stepId: step.id,
+                            agentName: step.agentName,
+                            description: step.description,
+                            stepIndex: workflowContext?.stepIndex ?? 0,
+                            totalSteps: workflowContext?.totalSteps ?? 1,
+                            text: resetDetail,
+                        });
+                    }
+                    const ptyManager = (0, local_cli_pty_manager_1.getLocalCliPtySessionManager)();
+                    let ptyAttempt = 0;
+                    while (true) {
+                        ptyAttempt++;
+                        try {
+                            const ptyResult = await ptyManager.runTurn({
+                                conversationId: ptyConversationKey,
+                                botId: step.agentId,
+                                provider: activeRuntime.providerName,
+                                cwd: effectiveProjectDir,
+                                systemPrompt,
+                                messages,
+                                forceFreshSession: !hasPersistentConversation || (iteration === 1 && !cliSessionEpochPlan.resumeSessionId),
+                                onDetail: async (detail) => {
+                                    streamedContent += streamedContent ? `\n${detail}` : detail;
+                                    if (opts?.onWorkerChunk) {
+                                        opts.onWorkerChunk({
+                                            type: opts?.isOrchestrated ? 'worker_chunk' : 'chunk',
+                                            stepId: step.id,
+                                            agentName: step.agentName,
+                                            description: step.description,
+                                            stepIndex: workflowContext?.stepIndex ?? 0,
+                                            totalSteps: workflowContext?.totalSteps ?? 1,
+                                            text: detail,
+                                        });
+                                    }
+                                    const now = Date.now();
+                                    if (now - lastChunkProgressAt < 8000)
+                                        return;
+                                    lastChunkProgressAt = now;
+                                    const activeSteps = workflowContext?.workflowId
+                                        ? this.getActiveWorkflows().find((w) => w.id === workflowContext.workflowId)?.steps || [step]
+                                        : [step];
+                                    this.emitProgress(workflowContext?.workflowId || 'workflow', step, activeSteps, 'step-progress', opts?.onProgress, `${step.agentName} is still working on ${step.description}`);
+                                },
+                            });
+                            if (ptyResult.sessionId) {
+                                activeCliSessionId = ptyResult.sessionId;
                             }
+                            response = {
+                                content: ptyResult.content || '',
+                                usage: ptyResult.usage,
+                            };
+                            break;
                         }
-                        // Existing 8-second heartbeat for backward compat
-                        const now = Date.now();
-                        if (now - lastChunkProgressAt < 8000)
-                            return;
-                        lastChunkProgressAt = now;
-                        const compact = chunk.replace(/\s+/g, ' ').trim();
-                        if (!compact && emittedChunkHeartbeat)
-                            return;
-                        emittedChunkHeartbeat = true;
-                        const preview = `${step.agentName} is still working on ${step.description}`;
-                        const activeSteps = workflowContext?.workflowId
-                            ? this.getActiveWorkflows().find((w) => w.id === workflowContext.workflowId)?.steps || [step]
-                            : [step];
-                        this.emitProgress(workflowContext?.workflowId || 'workflow', step, activeSteps, 'step-progress', opts?.onProgress, preview);
-                    },
-                    tools: opts?.disableTools ? undefined : toolDefs,
-                    cwd: effectiveProjectDir,
-                });
-                // Flush remaining chunk buffer
-                if (opts?.onWorkerChunk && chunkBuffer) {
-                    opts.onWorkerChunk({
-                        type: 'chunk',
-                        stepId: step.id,
-                        agentName: step.agentName,
-                        description: step.description,
-                        stepIndex: workflowContext?.stepIndex ?? 0,
-                        totalSteps: workflowContext?.totalSteps ?? 1,
-                        text: chunkBuffer,
+                        catch (ptyErr) {
+                            if (ptyAttempt >= LOCAL_WORKFLOW_RUNTIME_RETRY_LIMIT
+                                || !shouldRetrySelectedWorkflowRuntime(ptyErr)) {
+                                throw ptyErr;
+                            }
+                            console.warn(`[workflow-engine] ${step.agentName} selected runtime failed, retrying the same connection (${ptyAttempt + 1}/${LOCAL_WORKFLOW_RUNTIME_RETRY_LIMIT})`);
+                            await pauseWorkflowRuntimeRetry(ptyAttempt);
+                        }
+                    }
+                }
+                else {
+                    response = await llm.chat({
+                        messages,
+                        system: systemPrompt,
+                        stream: true,
+                        toolChoice,
+                        onChunk: async (chunk) => {
+                            streamedContent += chunk;
+                            // Forward chunks to onWorkerChunk with 150ms/80-char buffer
+                            if (opts?.onWorkerChunk) {
+                                chunkBuffer += chunk;
+                                const now2 = Date.now();
+                                if (chunkBuffer.length >= 80 || now2 - lastChunkForwardAt >= 150) {
+                                    opts.onWorkerChunk({
+                                        type: opts?.isOrchestrated ? 'worker_chunk' : 'chunk',
+                                        stepId: step.id,
+                                        agentName: step.agentName,
+                                        description: step.description,
+                                        stepIndex: workflowContext?.stepIndex ?? 0,
+                                        totalSteps: workflowContext?.totalSteps ?? 1,
+                                        text: chunkBuffer,
+                                    });
+                                    chunkBuffer = '';
+                                    lastChunkForwardAt = now2;
+                                }
+                            }
+                            // Existing 8-second heartbeat for backward compat
+                            const now = Date.now();
+                            if (now - lastChunkProgressAt < 8000)
+                                return;
+                            lastChunkProgressAt = now;
+                            const compact = chunk.replace(/\s+/g, ' ').trim();
+                            if (!compact && emittedChunkHeartbeat)
+                                return;
+                            emittedChunkHeartbeat = true;
+                            const preview = `${step.agentName} is still working on ${step.description}`;
+                            const activeSteps = workflowContext?.workflowId
+                                ? this.getActiveWorkflows().find((w) => w.id === workflowContext.workflowId)?.steps || [step]
+                                : [step];
+                            this.emitProgress(workflowContext?.workflowId || 'workflow', step, activeSteps, 'step-progress', opts?.onProgress, preview);
+                        },
+                        tools: opts?.disableTools ? undefined : toolDefs,
+                        cwd: effectiveProjectDir,
                     });
-                    chunkBuffer = '';
+                    // Flush remaining chunk buffer
+                    if (opts?.onWorkerChunk && chunkBuffer) {
+                        opts.onWorkerChunk({
+                            type: opts?.isOrchestrated ? 'worker_chunk' : 'chunk',
+                            stepId: step.id,
+                            agentName: step.agentName,
+                            description: step.description,
+                            stepIndex: workflowContext?.stepIndex ?? 0,
+                            totalSteps: workflowContext?.totalSteps ?? 1,
+                            text: chunkBuffer,
+                        });
+                        chunkBuffer = '';
+                    }
                 }
+                selectedRuntimeRetryCount = 0;
             }
             catch (err) {
                 console.warn(`[workflow-engine] step error: agent=${step.agentName} provider=${activeRuntime.providerName} model=${activeRuntime.model} runtime=${activeRuntime.runtimeLabel || 'unknown'} iteration=${iteration} message=${err?.message || err}`);
-                if (activeRuntime.fallback) {
+                if (effectiveRuntimeMode === 'local_desktop'
+                    && selectedRuntimeRetryCount < (LOCAL_WORKFLOW_RUNTIME_RETRY_LIMIT - 1)
+                    && shouldRetrySelectedWorkflowRuntime(err)) {
+                    selectedRuntimeRetryCount++;
+                    console.warn(`[workflow-engine] ${step.agentName} selected runtime failed, retrying the same connection (${selectedRuntimeRetryCount + 1}/${LOCAL_WORKFLOW_RUNTIME_RETRY_LIMIT})`);
+                    await pauseWorkflowRuntimeRetry(selectedRuntimeRetryCount);
+                    iteration--;
+                    continue;
+                }
+                if (effectiveRuntimeMode !== 'local_desktop' && activeRuntime.fallback) {
                     activeRuntime = activeRuntime.fallback;
                     llm = (0, index_1.createProvider)(activeRuntime.providerName, {
                         apiKey: activeRuntime.apiKey,
                         model: activeRuntime.model,
+                        runtimeMode: effectiveRuntimeMode,
                         ...(activeRuntime.requestShape ? { requestShape: activeRuntime.requestShape } : {}),
                         ...(activeRuntime.baseUrl ? { baseUrl: activeRuntime.baseUrl } : {}),
                         ...(activeRuntime.apiQuery ? { apiQuery: activeRuntime.apiQuery } : {}),
@@ -1445,6 +1630,23 @@ class WorkflowEngine extends events_1.EventEmitter {
                 }
                 throw err;
             }
+            if (hasPersistentConversation && activeCliSessionId && !response.toolCalls?.length) {
+                const nextEpochTurnCount = cliSessionEpochPlan.resumeSessionId
+                    ? ((cliSessionEpochPlan.existing?.epoch_turn_count || 0) + 1)
+                    : 1;
+                data.upsertCliSessionEpoch({
+                    conversationId: conversationId,
+                    botId: step.agentId,
+                    provider: activeRuntime.providerName,
+                    sessionId: activeCliSessionId,
+                    epochTurnCount: nextEpochTurnCount,
+                    lastInputTokens: response.usage?.inputTokens ?? null,
+                    lastOutputTokens: response.usage?.outputTokens ?? null,
+                    resetReason: cliSessionEpochPlan.resetReason,
+                    epochStartedAt: cliEpochStartedAt,
+                    lastUsedAt: (0, cli_session_epoch_1.localTimestamp)(),
+                });
+            }
             if (response.toolCalls && response.toolCalls.length > 0) {
                 messages.push({
                     role: 'assistant',
@@ -1452,7 +1654,9 @@ class WorkflowEngine extends events_1.EventEmitter {
                     toolCalls: response.toolCalls,
                 });
                 for (const tc of response.toolCalls) {
-                    const permMode = (profile?.permission_mode || 'autopilot');
+                    const permMode = unrestrictedCliProvider
+                        ? 'autopilot'
+                        : (profile?.permission_mode || 'autopilot');
                     const approval = (0, approval_1.checkPermission)(tc.name, permMode);
                     if (!approval.approved) {
                         throw new Error(`APPROVAL_REQUIRED: ${approval.reason}`);
@@ -1460,7 +1664,7 @@ class WorkflowEngine extends events_1.EventEmitter {
                     // Emit tool_call event so UI can show what's happening
                     if (opts?.onWorkerChunk) {
                         opts.onWorkerChunk({
-                            type: 'tool_call',
+                            type: opts?.isOrchestrated ? 'worker_tool_call' : 'tool_call',
                             stepId: step.id,
                             agentName: step.agentName,
                             description: step.description,
@@ -1477,7 +1681,7 @@ class WorkflowEngine extends events_1.EventEmitter {
                     // Emit tool_result event
                     if (opts?.onWorkerChunk) {
                         opts.onWorkerChunk({
-                            type: 'tool_result',
+                            type: opts?.isOrchestrated ? 'worker_tool_result' : 'tool_result',
                             stepId: step.id,
                             agentName: step.agentName,
                             description: step.description,
@@ -1489,6 +1693,9 @@ class WorkflowEngine extends events_1.EventEmitter {
                             toolIsError: !result.success,
                         });
                     }
+                    if (opts?.isOrchestrated && this.orchestratedTodoHandled(opts.taskId)) {
+                        return this.buildOrchestratedTodoHandledResult(opts.taskId);
+                    }
                 }
                 if (opts?.isOrchestrated && this.orchestratedTodoHandled(opts.taskId)) {
                     return this.buildOrchestratedTodoHandledResult(opts.taskId);
@@ -1551,12 +1758,15 @@ class WorkflowEngine extends events_1.EventEmitter {
                     this.emitProgress(workflowContext?.workflowId || 'workflow', step, activeSteps, 'step-progress', opts?.onProgress, `${step.agentName} described intended work instead of executing it. Retrying with an explicit tool-use correction.`);
                     continue;
                 }
-                if (activeRuntime.fallback && activeRuntime.providerName !== activeRuntime.fallback.providerName) {
+                if (effectiveRuntimeMode !== 'local_desktop'
+                    && activeRuntime.fallback
+                    && activeRuntime.providerName !== activeRuntime.fallback.providerName) {
                     console.warn(`[workflow-engine] forcing runtime fallback after repeated incomplete execution: agent=${step.agentName} from=${activeRuntime.providerName} to=${activeRuntime.fallback.providerName}`);
                     activeRuntime = activeRuntime.fallback;
                     llm = (0, index_1.createProvider)(activeRuntime.providerName, {
                         apiKey: activeRuntime.apiKey,
                         model: activeRuntime.model,
+                        runtimeMode: effectiveRuntimeMode,
                         ...(activeRuntime.requestShape ? { requestShape: activeRuntime.requestShape } : {}),
                         ...(activeRuntime.baseUrl ? { baseUrl: activeRuntime.baseUrl } : {}),
                         ...(activeRuntime.apiQuery ? { apiQuery: activeRuntime.apiQuery } : {}),
@@ -1687,12 +1897,13 @@ class WorkflowEngine extends events_1.EventEmitter {
             default: return undefined;
         }
     }
-    async resolveStepRuntime(step, profile, apiKey) {
+    async resolveStepRuntime(step, profile, apiKey, opts) {
+        const effectiveRuntimeMode = (0, runtime_context_1.normalizeRuntimeMode)(opts?.runtimeMode || this.runtimeMode);
         if (step.provider === 'claude-cli') {
-            return this.resolveClaudeWorkflowRuntime(step, profile);
+            return this.resolveClaudeWorkflowRuntime(step, profile, opts?.disallowCliRuntime === true && effectiveRuntimeMode !== 'local_desktop', effectiveRuntimeMode);
         }
         if (step.provider === 'codex-cli') {
-            return this.resolveCodexWorkflowRuntime(step, profile);
+            return this.resolveCodexWorkflowRuntime(step, profile, opts?.disallowCliRuntime === true && effectiveRuntimeMode !== 'local_desktop', effectiveRuntimeMode);
         }
         const profileConnection = profile?.provider_connection_id
             ? data.getProviderConnection(profile.provider_connection_id)
@@ -1701,6 +1912,22 @@ class WorkflowEngine extends events_1.EventEmitter {
             || profileConnection?.api_key_enc
             || apiKey
             || this.resolveApiKey(step.provider);
+        if (effectiveRuntimeMode !== 'local_desktop' && !resolvedKey && step.provider === 'openai') {
+            const preferredModel = (0, subscription_runtime_1.resolveSubscriptionApiModel)(step.model || profile?.model, data.findProviderConnection('openai')?.default_model || undefined) || (step.model || profile?.model || 'default').trim() || 'default';
+            const subscriptionRuntime = await (0, subscription_runtime_1.resolveCodexSubscriptionRuntime)({
+                preferredModel,
+            });
+            if (subscriptionRuntime) {
+                return {
+                    providerName: subscriptionRuntime.providerName,
+                    apiKey: subscriptionRuntime.apiKey,
+                    model: subscriptionRuntime.model,
+                    runtimeLabel: 'Subscription API (Token)',
+                    ...(subscriptionRuntime.baseUrl ? { baseUrl: subscriptionRuntime.baseUrl } : {}),
+                    ...(subscriptionRuntime.apiStyle ? { apiStyle: subscriptionRuntime.apiStyle } : {}),
+                };
+            }
+        }
         if (!resolvedKey) {
             throw new Error(`No API key for provider ${step.provider}`);
         }
@@ -1711,7 +1938,15 @@ class WorkflowEngine extends events_1.EventEmitter {
             runtimeLabel: 'API Key',
         };
     }
-    async resolveClaudeWorkflowRuntime(step, profile) {
+    async resolveClaudeWorkflowRuntime(step, profile, disallowCliRuntime = false, runtimeMode = this.runtimeMode) {
+        if (runtimeMode === 'local_desktop') {
+            return {
+                providerName: 'claude-cli',
+                apiKey: 'cli-auth',
+                model: (step.model || profile?.model || 'default').trim() || 'default',
+                runtimeLabel: 'Subscription CLI',
+            };
+        }
         const preferredModel = (0, subscription_runtime_1.resolveSubscriptionApiModel)(step.model || profile?.model, data.findProviderConnection('anthropic')?.default_model || data.findProviderConnection('claude-cli')?.default_model || undefined) || (step.model || profile?.model || 'default').trim() || 'default';
         const apiKeyFallback = data.findProviderConnection('anthropic')?.api_key_enc || process.env.ANTHROPIC_API_KEY;
         const apiFallbackConfig = apiKeyFallback
@@ -1722,6 +1957,26 @@ class WorkflowEngine extends events_1.EventEmitter {
                 runtimeLabel: 'API Key',
             }
             : undefined;
+        if (disallowCliRuntime) {
+            const subscriptionRuntime = await (0, subscription_runtime_1.resolveClaudeSubscriptionRuntime)({
+                preferredModel,
+            });
+            if (subscriptionRuntime) {
+                return {
+                    providerName: subscriptionRuntime.providerName,
+                    apiKey: subscriptionRuntime.apiKey,
+                    model: subscriptionRuntime.model,
+                    runtimeLabel: 'Subscription API (Token)',
+                    ...(subscriptionRuntime.authMode ? { authMode: subscriptionRuntime.authMode } : {}),
+                    ...(subscriptionRuntime.baseUrl ? { baseUrl: subscriptionRuntime.baseUrl } : {}),
+                    ...(subscriptionRuntime.apiQuery ? { apiQuery: subscriptionRuntime.apiQuery } : {}),
+                    ...(subscriptionRuntime.extraHeaders ? { extraHeaders: subscriptionRuntime.extraHeaders } : {}),
+                };
+            }
+            if (apiFallbackConfig)
+                return apiFallbackConfig;
+            throw new Error('No non-CLI Anthropic runtime is available for this workflow step.');
+        }
         const cliFallbackConfig = {
             providerName: 'claude-cli',
             apiKey: 'cli-auth',
@@ -1731,11 +1986,43 @@ class WorkflowEngine extends events_1.EventEmitter {
         };
         return cliFallbackConfig;
     }
-    async resolveCodexWorkflowRuntime(step, profile) {
+    async resolveCodexWorkflowRuntime(step, profile, disallowCliRuntime = false, runtimeMode = this.runtimeMode) {
+        if (runtimeMode === 'local_desktop') {
+            return {
+                providerName: 'codex-cli',
+                apiKey: 'cli-auth',
+                model: (step.model || profile?.model || 'default').trim() || 'default',
+                runtimeLabel: 'Subscription CLI',
+            };
+        }
         const preferredModel = (0, subscription_runtime_1.resolveSubscriptionApiModel)(step.model || profile?.model, data.findProviderConnection('openai')?.default_model || data.findProviderConnection('codex-cli')?.default_model || undefined)
             || (step.model || profile?.model || 'default').trim()
             || 'default';
+        const subscriptionRuntime = await (0, subscription_runtime_1.resolveCodexSubscriptionRuntime)({
+            preferredModel,
+        });
+        if (subscriptionRuntime) {
+            return {
+                providerName: subscriptionRuntime.providerName,
+                apiKey: subscriptionRuntime.apiKey,
+                model: subscriptionRuntime.model,
+                runtimeLabel: 'Subscription API (Token)',
+                ...(subscriptionRuntime.baseUrl ? { baseUrl: subscriptionRuntime.baseUrl } : {}),
+                ...(subscriptionRuntime.apiStyle ? { apiStyle: subscriptionRuntime.apiStyle } : {}),
+            };
+        }
         const apiKeyFallback = data.findProviderConnection('openai')?.api_key_enc || process.env.OPENAI_API_KEY;
+        if (disallowCliRuntime) {
+            if (apiKeyFallback) {
+                return {
+                    providerName: 'openai',
+                    apiKey: apiKeyFallback,
+                    model: preferredModel,
+                    runtimeLabel: 'API Key',
+                };
+            }
+            throw new Error('No non-CLI OpenAI runtime is available for this workflow step.');
+        }
         return {
             providerName: 'codex-cli',
             apiKey: 'cli-auth',
@@ -1860,7 +2147,7 @@ class WorkflowEngine extends events_1.EventEmitter {
     async replanRemainingSteps(steps, failedStep, agents, defaultProfile) {
         if (steps.length <= 1)
             return null;
-        const clerk = (0, clerk_model_1.getClerk)();
+        const clerk = (0, clerk_model_1.getClerk)({ runtimeMode: this.runtimeMode });
         if (!clerk)
             return null;
         const completedSummary = steps
@@ -1951,15 +2238,24 @@ Rules:
 }
 exports.WorkflowEngine = WorkflowEngine;
 // ─── Singleton ───────────────────────────────────────────────────
-let _engine = null;
-function getWorkflowEngine(projectDir) {
-    if (!_engine && projectDir) {
-        _engine = new WorkflowEngine(projectDir);
+const _workflowEngines = new Map();
+function getWorkflowEngine(projectDir, runtimeMode) {
+    const effectiveRuntimeMode = (0, runtime_context_1.normalizeRuntimeMode)(runtimeMode || (0, runtime_context_1.getDefaultRuntimeMode)());
+    const existing = _workflowEngines.get(effectiveRuntimeMode);
+    if (existing) {
+        if (!projectDir || existing.projectDir === projectDir) {
+            return existing;
+        }
+    }
+    if (projectDir) {
+        const engine = new WorkflowEngine(projectDir, effectiveRuntimeMode);
+        _workflowEngines.set(effectiveRuntimeMode, engine);
+        return engine;
     }
-    if (!_engine) {
+    if (!_workflowEngines.size) {
         throw new Error('Workflow engine not initialized. Call getWorkflowEngine(projectDir) first.');
     }
-    return _engine;
+    throw new Error(`Workflow engine not initialized for runtime ${effectiveRuntimeMode}. Call getWorkflowEngine(projectDir, runtimeMode) first.`);
 }
 // ─── JSON Parsing Helper ─────────────────────────────────────────
 function parseJsonResponse(text) {