diwallows multiple workflows to run at the same time

Author: rishabhpoddar

OPENCODE_UPGRADE_CHECKLIST.md

@@ -31,11 +31,13 @@ Use this whenever changing `opencode-ai`, `@opencode-ai/sdk`, `@opencode-ai/plug
 - [ ] `src/utils/session-abort.ts`: pending question replies, pending permission rejects, custom permission cleanup, and `session.abort`.
 - [ ] `src/utils/chat-usage.ts`: `session.messages()` shape, assistant `tokens`, `providerID`, `modelID`, `time.completed`, and last-synced message behavior.
 - [ ] `src/utils/chat-session.ts`: message part types, tool state statuses, pending input detection, and stale running tool normalization.
+- [ ] Pagination API for `session.messages()` in `src/utils/session-messages-page.ts`
 
 ## OpenCode Message And Permission Shapes
 
 - [ ] Confirm `SessionStatusMap` still maps session id to `{ type: "busy" | "retry" | "idle" }`.
 - [ ] Confirm message containers still look like `{ info, parts }` for `session.messages()`.
+- [ ] Confirm `session.messages({ query: { limit: 1 } })` still returns the latest message first.
 - [ ] Confirm `ToolPart` still has `tool`, `callID`, `messageID`, and `state.status`.
 - [ ] Confirm tool states still use `pending`, `running`, `completed`, and `error`.
 - [ ] Confirm pending questions still expose `id`, `sessionID`, `questions`, and optional `tool.messageID` / `tool.callID`.
@@ -77,6 +79,7 @@ Known risky areas:
 - [ ] `python-protection.ts`: `command.execute.before`, `tool.execute.before`, `command`, `arguments`, `workdir`, `cwd`, `directory`, and `worktree`.
 - [ ] `honeytoken-protection.ts`: `tool.execute.before`, `tool.execute.after`, output shape, metadata shape, title shape, and input args visibility.
 - [ ] `skill-command-guard.ts`: `tool.execute.before`, `task` tool id, `command` arg shape, root session resolution, and backend skill metadata response.
+- [ ] `runWorkflow.ts`: latest-message concurrency guard, `client.session.messages({ limit: 1 })`, `runWorkflow` tool-part detection, and same-`callID` allowance.
 - [ ] Custom tools in `.opencode/plugins/*.ts`: `tool()` definition shape, `execute(args, context)`, return type, `context.sessionID`, `context.messageID`, `context.callID`, `context.ask`, `context.metadata`, and backend fetch behavior.
 
 ## Custom TeamCopilot Tools To Smoke Test
@@ -116,6 +119,8 @@ Known risky areas:
 - [ ] Trigger a custom TeamCopilot permission prompt and approve/reject it.
 - [ ] Run a prompt cronjob through planning, todo execution, user attention, resume, completion, and failure.
 - [ ] Run a workflow via `runWorkflow`.
+- [ ] Try one `runWorkflow` call and confirm it is allowed.
+- [ ] Try two `runWorkflow` calls in the same latest assistant message and confirm the second one is rejected.
 - [ ] Verify secret placeholder rewriting in shell commands without exposing plaintext in model-visible output.
 - [ ] Abort an active session and verify pending questions/permissions are cleaned up.
 - [ ] Sync usage and confirm token/cost rows are updated.

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "teamcopilot",
-  "version": "0.4.8",
+  "version": "0.4.9",
   "description": "A shared AI Agent for Teams",
   "homepage": "https://teamcopilot.ai",
   "repository": {

package.json

@@ -1,4 +1,5 @@
 import { type Plugin, tool } from "@opencode-ai/plugin"
+import type { OpencodeClient } from "@opencode-ai/sdk"
 
 function getApiBaseUrl(): string {
   const port = process.env.TEAMCOPILOT_PORT?.trim()
@@ -64,11 +65,41 @@ function sleep(ms: number): Promise<void> {
   return new Promise((resolve) => setTimeout(resolve, ms))
 }
 
-interface SessionLookupResponse {
-  error?: unknown
-  data?: {
-    id?: string
-    parentID?: string
+async function rejectIfLatestMessageAlreadyRunningWorkflow(
+  client: Pick<OpencodeClient, "session">,
+  sessionID: string,
+  currentCallID: string
+): Promise<void> {
+  const response = await client.session.messages({
+    path: {
+      id: sessionID,
+    },
+    query: {
+      limit: 1,
+    },
+  })
+
+  if (response.error) {
+    throw new Error("Failed to load session messages while checking workflow concurrency.")
+  }
+
+  const latestMessage = response.data?.[0] ?? null
+  if (!latestMessage || latestMessage.info.role !== "assistant") {
+    return
+  }
+
+  const hasAnotherActiveRunWorkflow = latestMessage.parts.some((part) => {
+    if (part.type !== "tool" || part.tool !== "runWorkflow") {
+      return false
+    }
+    if (part.callID === currentCallID) {
+      return false
+    }
+    return true
+  })
+
+  if (hasAnotherActiveRunWorkflow) {
+    throw new Error("You cannot run multiple workflows at the same time. Run them one by one, after each one completes.")
   }
 }
 
@@ -81,7 +112,7 @@ export const RunWorkflowPlugin: Plugin = async ({ client }) => {
         path: {
           id: currentSessionID,
         },
-      })) as SessionLookupResponse
+      }))
       if (response.error) {
         throw new Error(`Failed to resolve root session for ${currentSessionID}`)
       }
@@ -131,6 +162,8 @@ export const RunWorkflowPlugin: Plugin = async ({ client }) => {
             throw new Error("Could not determine call id from tool context.")
           }
 
+          await rejectIfLatestMessageAlreadyRunningWorkflow(client, authSessionID, callId)
+
           const startResponse = await fetch(`${getApiBaseUrl()}/api/workflows/execute`, {
             method: "POST",
             headers: {