@sema-agent/cli 1.0.100 → 1.0.102

package/sema-main.js

@@ -47339,7 +47339,7 @@ var CHROME_ARM_TABLE, CHROME_ARMS, init_seam = __esm({
       },
       wiring_manifest: {
         required: !1,
-        duty: "\u53EF\u9009:\u6E32\u5F15\u64CE\u63A5\u7EBF\u81EA\u8FF0\u91CC\u7684\u4E24\u6BB5\u7528\u6237\u9762\u4E8B\u5B9E(modelGate = \u672C run \u88AB\u6A21\u578B\u95E8\u5378\u6389\u7684\u5DE5\u5177 + \u9010\u5B57\u6062\u590D\u529E\u6CD5;autoMode = \u6B66\u88C5\u4F4D + core \u516D\u8BCD\u539F\u56E0)\u3002\u{1F534} \u4E24\u6BB5\u7F3A\u5E2D\u4E00\u5F8B\u4E0D\u6E32\u80AF\u5B9A\u53E5;reason \u7EDD\u4E0D\u6620\u5C04 capabilities \u516D\u8BCD;restore \u539F\u6837\u5448\u73B0;durable \u91CD\u653E\u6309 run/leg \u5E42\u7B49"
+        duty: "\u53EF\u9009:\u6E32\u5F15\u64CE\u63A5\u7EBF\u81EA\u8FF0\u91CC\u7684\u4E09\u6BB5\u7528\u6237\u9762\u4E8B\u5B9E(modelGate = \u672C run \u88AB\u6A21\u578B\u95E8\u5378\u6389\u7684\u5DE5\u5177 + \u9010\u5B57\u6062\u590D\u529E\u6CD5;autoMode = \u6B66\u88C5\u4F4D + core \u516D\u8BCD\u539F\u56E0;mcp[] = \u672C\u817F\u7533\u62A5\u7684\u6BCF\u53F0 MCP \u670D\u52A1\u5668\u7684\u8FDE\u63A5\u65F6\u5FEB\u7167)\u3002\u{1F534} \u4E09\u6BB5\u7F3A\u5E2D\u4E00\u5F8B\u4E0D\u6E32\u80AF\u5B9A\u53E5;reason \u7EDD\u4E0D\u6620\u5C04 capabilities \u516D\u8BCD;restore \u539F\u6837\u5448\u73B0;mcp \u7684\u7A7A\u6570\u7EC4\u662F\u300C\u4E00\u53F0\u90FD\u6CA1\u7533\u62A5\u300D\u8FD9\u53E5\u6B63\u9762\u4E8B\u5B9E\u3001**\u4E0D\u662F**\u7F3A\u5E2D(\u5224\u5728\u573A\u5199 mcp !== undefined,\u522B\u5199 mcp?.length),errorCode \u6309\u5F00\u96C6\u5206\u652F\u5FC5\u5E26 default;durable \u91CD\u653E\u6309 run/leg \u5E42\u7B49"
       },
       text_segment_end: {
         required: !1,
@@ -49104,7 +49104,7 @@ function isRewindFamilyCode(code2) {
 function asModelFallbackReason(v2) {
   return v2 === MODEL_FALLBACK_INHERIT_NO_TIER_BINDING ? MODEL_FALLBACK_INHERIT_NO_TIER_BINDING : void 0;
 }
-var LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, LIMITS_ERROR_CODE_PREFIX, USAGE_WINDOW_EXHAUSTED, ENV_LIFETIME_EXPIRED, CONFIG_LIMIT_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_REFUSAL_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, DELEGATION_CAP_CODES, MCP_SERVER_REVOKED, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, TOOL_END_INTERRUPTED_CODES, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, ACTIVE_RUN_BUSY_ERROR_CODE, STOP_PARK_ARBITER_UNREACHABLE, STOP_PARK_RESUME_WON, STOP_NOT_LANDED, STOP_NOT_LOCAL, STOP_PARKED, STOP_CONFLICT_CODES, OUTPUT_INVALID, RESUME_AT_ERROR_CODE_PREFIX, REWIND_ERROR_CODE_PREFIXES, RESUME_USAGE_WINDOW_EXHAUSTED, RESUME_PREFLIGHT_REJECTED, RESUME_RETRY_LATER_CODES, DRAINING_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STREAM_MAX_DURATION, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, init_engineErrorCodes = __esm({
+var LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, LIMITS_ERROR_CODE_PREFIX, USAGE_WINDOW_EXHAUSTED, ENV_LIFETIME_EXPIRED, CONFIG_LIMIT_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_REFUSAL_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, DELEGATION_CAP_CODES, MCP_SERVER_REVOKED, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, TOOL_END_INTERRUPTED_CODES, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, ACTIVE_RUN_BUSY_ERROR_CODE, STOP_PARK_ARBITER_UNREACHABLE, STOP_PARK_RESUME_WON, STOP_NOT_LANDED, STOP_NOT_LOCAL, STOP_PARKED, STOP_CONFLICT_CODES, OUTPUT_INVALID, RESUME_AT_ERROR_CODE_PREFIX, REWIND_ERROR_CODE_PREFIXES, RESUME_USAGE_WINDOW_EXHAUSTED, RESUME_PREFLIGHT_REJECTED, RESUME_PLACEMENT_MISMATCH, RESUME_RETRY_LATER_CODES, DRAINING_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STREAM_MAX_DURATION, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, init_engineErrorCodes = __esm({
   "node_modules/@sema-agent/client-core/dist/engineErrorCodes.js"() {
     LIMITS_MAX_TOKENS_EXCEEDED = "limits.max_tokens_exceeded", LIMITS_MAX_COST_EXCEEDED = "limits.max_cost_exceeded", LIMITS_MAX_TURNS_EXCEEDED = "limits.max_turns_exceeded", LIMITS_MAX_WALLTIME_EXCEEDED = "limits.max_walltime_exceeded", LIMITS_ERROR_CODE_PREFIX = "limits.";
     USAGE_WINDOW_EXHAUSTED = "usage.window_exhausted", ENV_LIFETIME_EXPIRED = "env.lifetime_expired", CONFIG_LIMIT_INVALID = "config.limit_invalid", CONFIG_STRATEGY_FIND_LIMIT_INVALID = "config.strategy_find_limit_invalid", CONFIG_STRATEGY_MAX_SIZE_INVALID = "config.strategy_max_size_invalid", CONFIG_LIMIT_UNKNOWN_KEY = "config.limit_unknown_key", CONFIG_DELEGATION_ENTRY_CAPS = "config.delegation_entry_caps", CONFIG_REFUSAL_CODES = /* @__PURE__ */ new Set([
@@ -49129,7 +49129,7 @@ var LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TURNS_EXCEE
       STOP_NOT_LOCAL,
       STOP_PARKED
     ], OUTPUT_INVALID = "output.invalid", RESUME_AT_ERROR_CODE_PREFIX = "resume_at.", REWIND_ERROR_CODE_PREFIXES = [RESUME_AT_ERROR_CODE_PREFIX, "rewind_snapshot."];
-    RESUME_USAGE_WINDOW_EXHAUSTED = "resume.usage_window_exhausted", RESUME_PREFLIGHT_REJECTED = "resume.preflight_rejected", RESUME_RETRY_LATER_CODES = Object.freeze([
+    RESUME_USAGE_WINDOW_EXHAUSTED = "resume.usage_window_exhausted", RESUME_PREFLIGHT_REJECTED = "resume.preflight_rejected", RESUME_PLACEMENT_MISMATCH = "resume.placement_mismatch", RESUME_RETRY_LATER_CODES = Object.freeze([
       RESUME_USAGE_WINDOW_EXHAUSTED,
       RESUME_PREFLIGHT_REJECTED
     ]), DRAINING_ERROR_CODE = "draining", SCENARIO_NOT_ALLOWED_ERROR_CODE = "scenario_not_allowed", STREAM_MAX_DURATION = "STREAM_MAX_DURATION", MODEL_FALLBACK_INHERIT_NO_TIER_BINDING = "inherit_no_tier_binding";
@@ -50461,12 +50461,13 @@ var assistantArm, userArm, systemArm, diagnosticsArm, steeringInjectedArm, works
     }, wiringManifestArm = function* (m2) {
       if (m2.parentToolCallId !== void 0)
         return;
-      let modelGate = m2._sema_modelGate, autoMode = m2._sema_autoMode, hasGate = typeof modelGate == "object" && modelGate !== null, hasAuto = typeof autoMode == "object" && autoMode !== null;
-      !hasGate && !hasAuto || (yield chrome({
+      let modelGate = m2._sema_modelGate, autoMode = m2._sema_autoMode, mcp2 = m2._sema_mcp, hasGate = typeof modelGate == "object" && modelGate !== null, hasAuto = typeof autoMode == "object" && autoMode !== null, hasMcp = Array.isArray(mcp2);
+      !hasGate && !hasAuto && !hasMcp || (yield chrome({
         kind: "wiring_manifest",
         laneProof: MAIN,
         ...hasGate ? { modelGate } : {},
         ...hasAuto ? { autoMode } : {},
+        ...hasMcp ? { mcp: mcp2 } : {},
         ...typeof m2.eventId == "string" && m2.eventId.length > 0 ? { eventId: m2.eventId } : {}
       }));
     }, textSegmentEndArm = function* (m2) {
@@ -51595,6 +51596,17 @@ function engineCapNestedTrue(baseUrl, parentKey, key) {
   let parent2 = capsByBase.get(baseUrl)?.[parentKey];
   return parent2 === null || typeof parent2 != "object" ? !1 : parent2[key] === !0;
 }
+function engineCapValue(baseUrl, key) {
+  if (!baseUrl)
+    return { kind: "unobserved" };
+  let caps = capsByBase.get(baseUrl);
+  if (caps === void 0)
+    return { kind: "unobserved" };
+  if (!(key in caps))
+    return { kind: "not_reported" };
+  let v2 = caps[key];
+  return v2 === void 0 ? { kind: "not_reported" } : v2 === null ? { kind: "null" } : { kind: "value", value: v2 };
+}
 function engineCapString(baseUrl, key) {
   if (!baseUrl)
     return;
@@ -51615,6 +51627,123 @@ var capsByBase, inFlight, settleByBase, genByBase, init_engineCapsCache = __esm(
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/principalWire.js
+function normalizeWirePrincipal(v2) {
+  return v2 !== void 0 && v2.trim() !== "" ? v2 : void 0;
+}
+var init_principalWire = __esm({
+  "node_modules/@sema-agent/client-core/dist/principalWire.js"() {
+  }
+});
+
+// node_modules/@sema-agent/client-core/dist/engineWireTarget.js
+function installEngineWireTarget(t2) {
+  return installEngineWireTargetFor(DEFAULT_SESSION_KEY, t2);
+}
+function installEngineWireTargetFor(sessionKey, t2) {
+  let prev = installedByKey.get(sessionKey);
+  return installedByKey.set(sessionKey, t2), () => {
+    installedByKey.set(sessionKey, prev);
+  };
+}
+function engineWireTarget() {
+  return engineWireTargetFor(DEFAULT_SESSION_KEY);
+}
+function engineWireTargetFor(sessionKey) {
+  let installed6 = installedByKey.get(sessionKey) ?? null;
+  if (installed6 !== null) {
+    if (normalizeWirePrincipal(installed6.principal) === installed6.principal)
+      return installed6;
+    let { principal: _dropped, ...rest } = installed6;
+    return rest;
+  }
+  let env6 = hostEnv(), baseUrl = env6.SEMA_LIVE_BASEURL;
+  if (!baseUrl)
+    return null;
+  let envPrincipal = normalizeWirePrincipal(env6.SEMA_LIVE_PRINCIPAL);
+  return {
+    baseUrl,
+    ...env6.SEMA_LIVE_TOKEN ? { token: env6.SEMA_LIVE_TOKEN } : {},
+    ...envPrincipal !== void 0 ? { principal: envPrincipal } : {}
+  };
+}
+function engineWireDebugEnabled() {
+  return !!hostEnv().SEMA_DEBUG;
+}
+var installedByKey, init_engineWireTarget = __esm({
+  "node_modules/@sema-agent/client-core/dist/engineWireTarget.js"() {
+    init_hostEnv();
+    init_sessionSlot();
+    init_principalWire();
+    installedByKey = createSessionSlot();
+  }
+});
+
+// node_modules/@sema-agent/client-core/dist/sqlEngineCapability.js
+function projectSqlEngineCapability(caps) {
+  if (caps === null || typeof caps != "object")
+    return;
+  if (!("sql" in caps))
+    return { kind: "not_reported" };
+  let sql = caps.sql;
+  if (sql === null)
+    return { kind: "none" };
+  if (sql === void 0)
+    return { kind: "not_reported" };
+  if (typeof sql != "object")
+    return;
+  let s = sql;
+  if (!(typeof s.engine != "string" || s.engine === "") && !(typeof s.isolation != "string" || s.isolation === "") && !(s.txnMode !== null && (typeof s.txnMode != "string" || s.txnMode === "")))
+    return { kind: "present", view: { engine: s.engine, isolation: s.isolation, txnMode: s.txnMode } };
+}
+function noteEngineCapsForSqlEngine(baseUrl, caps) {
+  try {
+    if (typeof baseUrl != "string" || baseUrl === "")
+      return;
+    let reading = projectSqlEngineCapability(caps);
+    if (reading === void 0) {
+      readingByBase.delete(baseUrl);
+      return;
+    }
+    readingByBase.set(baseUrl, reading);
+  } catch {
+  }
+}
+function observedSqlEngine(baseUrl = engineWireTarget()?.baseUrl) {
+  return typeof baseUrl != "string" || baseUrl === "" ? { kind: "unobserved" } : readingByBase.get(baseUrl) ?? { kind: "unobserved" };
+}
+function cleanSqlDetailScalar(v2) {
+  return escapeDisplayControlChars(v2.slice(0, SQL_DETAIL_MAX));
+}
+function sqlEngineDoctorDetail(reading) {
+  switch (reading.kind) {
+    case "unobserved":
+      return "not observed \u2014 the engine reports it on /v1/capabilities; this process has not received a capabilities response from the engine yet";
+    case "not_reported":
+      return "not reported by this engine \u2014 the capability position needs a newer engine";
+    case "none":
+      return "none \u2014 the engine reports no SQL engine posture: either this deployment has no SQL backend, or its initialization was refused (the engine log says which)";
+    case "present": {
+      let e = cleanSqlDetailScalar(reading.view.engine), i = cleanSqlDetailScalar(reading.view.isolation), t2 = reading.view.txnMode === null ? "no txn-mode indicator on this engine" : cleanSqlDetailScalar(reading.view.txnMode);
+      return `${e} \xB7 isolation ${i} \xB7 txn ${t2}`;
+    }
+  }
+}
+function forgetSqlEngineReading(baseUrl) {
+  typeof baseUrl != "string" || baseUrl === "" || readingByBase.delete(baseUrl);
+}
+function __resetSqlEngineReadingsForTests() {
+  readingByBase.clear();
+}
+var readingByBase, SQL_DETAIL_MAX, init_sqlEngineCapability = __esm({
+  "node_modules/@sema-agent/client-core/dist/sqlEngineCapability.js"() {
+    init_fleetTaskDesc();
+    init_engineWireTarget();
+    readingByBase = /* @__PURE__ */ new Map();
+    SQL_DETAIL_MAX = 40;
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/adapter/types.js
 function eventSeq(ev) {
   return ev.id;
@@ -51883,15 +52012,6 @@ var SSE_HEARTBEAT_GRACE_ENV, SSE_GRACE_MIN_MS, SSE_GRACE_MAX_MS, SDK_DEFAULT_GRA
   }
 });
 
-// node_modules/@sema-agent/client-core/dist/principalWire.js
-function normalizeWirePrincipal(v2) {
-  return v2 !== void 0 && v2.trim() !== "" ? v2 : void 0;
-}
-var init_principalWire = __esm({
-  "node_modules/@sema-agent/client-core/dist/principalWire.js"() {
-  }
-});
-
 // node_modules/@sema-agent/client-core/dist/engineWireSdk.js
 import { AgentClient } from "@sema-agent/sdk";
 function isLoopbackWireUrl(url3) {
@@ -53106,7 +53226,7 @@ function eventToSdkMessage(ev, ctx) {
     // falls back to the mock synthesizer (events.d.ts:79). Not a renderable CC SDKMessage —
     // a side-channel arm `sdkMessagesToCcEvents` reads; CC's own renderer never sees it.
     case "tool_end": {
-      let structured = ev.structured, toolEndErrorCode = ev.errorCode, toolEndSettledBy = ev.settledBy, toolEndApprover = ev.approver, toolEndResolution = ev.resolution, collateralAbort = ev._sema_collateral_abort;
+      let structured = ev.structured, toolEndErrorCode = ev.errorCode, toolEndSettledBy = ev.settledBy, toolEndApprover = ev.approver, toolEndResolution = ev.resolution, toolEndAutoDenied = ev.autoDenied, collateralAbort = ev._sema_collateral_abort;
       return projected(stamp(ctx, {
         type: "tool_end_result",
         toolCallId: ev.toolCallId,
@@ -53125,6 +53245,8 @@ function eventToSdkMessage(ev, ctx) {
         ...typeof toolEndApprover == "string" && toolEndApprover.length > 0 ? { approver: toolEndApprover } : {},
         // A-D2:拒绝臂分类(开集、缺席不铸、在场原样;判据本体是上方那段头注)。
         ...typeof toolEndResolution == "string" && toolEndResolution.length > 0 ? { resolution: toolEndResolution } : {},
+        // S-125⑧:自动拒判别位(**严格 true** 才上臂;见上方头注)。
+        ...toolEndAutoDenied === !0 ? { autoDenied: !0 } : {},
         // #324:连坐 abort 机读位(严格 true 才上臂;见上方头注)。
         ...collateralAbort === !0 ? { _sema_collateral_abort: !0 } : {},
         ...ev.eventId !== void 0 ? { eventId: ev.eventId } : {},
@@ -53425,6 +53547,25 @@ function eventToSdkMessage(ev, ctx) {
      */
     case "approval_request":
       return dropped("unsupported_arm", "approval_request");
+    /**
+     * `approval_revoke`(design/172 撤卡帧;server ≥7.55.0 起也进重放,SDK 8.x 才把它写进
+     * `AgentEvent` union —— 0.58.0 sdk 8.2.0 提货批**编译期逼进来**的臂,与 `engine_notice`
+     * / `human_input` 走的是同一条路:臂一进 union,`default` 的 B5 穷举断言当场红)。
+     *
+     * 🔴 **与 `approval_request` 同源同处置,所以并**在它旁边而不是并进上面那两条 —— 它是
+     *    同一条流内审批协议的**撤销**半场(载荷同是 `ApprovalFrameEnvelope`,`schemaVersion`
+     *    未知的帧要按信封先读再窄化)。本包今天**零消费口**:`isToolApprovalFrame` 只认
+     *    legacy 的 `tool_approval` / `tool_approval_complete` 两词,新族两帧一个都不接。
+     * 🔴 分类 = `dropped/unsupported_arm` 而**不是** `nothing/not_in_slice`(与
+     *    `approval_request` 同一条理由,逐字见上一臂):`none` 是静默的,只有 `dropped` 会经
+     *    `reportDroppedFrame` 走宿主 sink + console 留痕。撤卡帧带的是**用户可见的状态迁移**
+     *    (那张卡已经不该再被决断了),悄悄丢掉它比吼一行更坏。
+     * 📋 缺口如实记账(**不**在本批修 —— 与 `approval_request` 是同一条新卡链,属功能不属修复):
+     *    接法在上一臂的「接法」段里写着,撤卡半场按 `approvalId` 撤同一张卡;在那条链落地之前
+     *    **不许**由本切片顺手编一个假 transcript 形来假装接上了。
+     */
+    case "approval_revoke":
+      return dropped("unsupported_arm", "approval_revoke");
     // ── `engine_notice`(#310 / #318 件①,server ≥7.36,契约 = ASSISTANT-WIRE-CONTRACT 附录 D)────
     // 🔴 **到期复核已兑现(sdk 7.4.0 提货,0.48.0)** —— 与 `human_input`(sdk 6.9.0)逐字同一条路。
     //    本臂此前是 switch **之前**的一条 raw 预分派,理由 = 它还没进已发布 SDK 的 `AgentEvent`
@@ -53456,6 +53597,25 @@ function textEndProjection(ev, ctx) {
     ...typeof ev.parentToolCallId == "string" ? { parentToolCallId: ev.parentToolCallId } : {}
   }));
 }
+function projectMcpSection(raw2) {
+  if (!Array.isArray(raw2))
+    return;
+  let rows2 = [];
+  for (let e of raw2) {
+    if (typeof e != "object" || e === null || Array.isArray(e))
+      continue;
+    let r = e, name = typeof r.name == "string" && r.name.length > 0 ? r.name : void 0, status3 = typeof r.status == "string" && r.status.length > 0 ? r.status : void 0;
+    name === void 0 || status3 === void 0 || rows2.push({
+      name,
+      status: status3,
+      ...typeof r.source == "string" && r.source.length > 0 ? { source: r.source } : {},
+      ...typeof r.errorCode == "string" && r.errorCode.length > 0 ? { errorCode: r.errorCode } : {},
+      ...typeof r.toolCount == "number" && Number.isFinite(r.toolCount) ? { toolCount: r.toolCount } : {}
+    });
+  }
+  if (!(raw2.length > 0 && rows2.length === 0))
+    return rows2;
+}
 function projectModelGateSection(raw2) {
   if (typeof raw2 != "object" || raw2 === null || Array.isArray(raw2))
     return;
@@ -53471,11 +53631,12 @@ function projectAutoModeSection(raw2) {
     return { armed: armed3, reason };
 }
 function wiringManifestSupersetBody(ev) {
-  let modelGate = projectModelGateSection(ev.modelGate), autoMode = projectAutoModeSection(ev.autoMode);
-  if (!(modelGate === void 0 && autoMode === void 0))
+  let modelGate = projectModelGateSection(ev.modelGate), autoMode = projectAutoModeSection(ev.autoMode), mcp2 = projectMcpSection(ev.mcp);
+  if (!(modelGate === void 0 && autoMode === void 0 && mcp2 === void 0))
     return {
       ...modelGate !== void 0 ? { _sema_modelGate: modelGate } : {},
-      ...autoMode !== void 0 ? { _sema_autoMode: autoMode } : {}
+      ...autoMode !== void 0 ? { _sema_autoMode: autoMode } : {},
+      ...mcp2 !== void 0 ? { _sema_mcp: mcp2 } : {}
     };
 }
 function engineNoticeProjection(ev, ctx) {
@@ -55354,49 +55515,6 @@ var HEADLESS_RECONNECT_MAX, RUN_ROW_TERMINAL_STATUSES, init_headlessReconnectWir
   }
 });
 
-// node_modules/@sema-agent/client-core/dist/engineWireTarget.js
-function installEngineWireTarget(t2) {
-  return installEngineWireTargetFor(DEFAULT_SESSION_KEY, t2);
-}
-function installEngineWireTargetFor(sessionKey, t2) {
-  let prev = installedByKey.get(sessionKey);
-  return installedByKey.set(sessionKey, t2), () => {
-    installedByKey.set(sessionKey, prev);
-  };
-}
-function engineWireTarget() {
-  return engineWireTargetFor(DEFAULT_SESSION_KEY);
-}
-function engineWireTargetFor(sessionKey) {
-  let installed6 = installedByKey.get(sessionKey) ?? null;
-  if (installed6 !== null) {
-    if (normalizeWirePrincipal(installed6.principal) === installed6.principal)
-      return installed6;
-    let { principal: _dropped, ...rest } = installed6;
-    return rest;
-  }
-  let env6 = hostEnv(), baseUrl = env6.SEMA_LIVE_BASEURL;
-  if (!baseUrl)
-    return null;
-  let envPrincipal = normalizeWirePrincipal(env6.SEMA_LIVE_PRINCIPAL);
-  return {
-    baseUrl,
-    ...env6.SEMA_LIVE_TOKEN ? { token: env6.SEMA_LIVE_TOKEN } : {},
-    ...envPrincipal !== void 0 ? { principal: envPrincipal } : {}
-  };
-}
-function engineWireDebugEnabled() {
-  return !!hostEnv().SEMA_DEBUG;
-}
-var installedByKey, init_engineWireTarget = __esm({
-  "node_modules/@sema-agent/client-core/dist/engineWireTarget.js"() {
-    init_hostEnv();
-    init_sessionSlot();
-    init_principalWire();
-    installedByKey = createSessionSlot();
-  }
-});
-
 // node_modules/@sema-agent/client-core/dist/engineSessionParam.js
 function engineSessionParamFor(sessionKey) {
   let sid = hostSessionFor(sessionKey)?.currentSessionId();
@@ -56641,6 +56759,37 @@ var capByBase2, CAP_FALSE_RETRY_TTL_MS2, activeTails, activitySink, tailMetaSink
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/resumeRefusalCopy.js
+function resumeRefusalFromError(err8) {
+  if (typeof err8 != "object" || err8 === null)
+    return null;
+  let code2 = err8.errorCode;
+  if (typeof code2 != "string" || !RESUME_REFUSAL_CODES.includes(code2))
+    return null;
+  if (code2 === RESUME_PLACEMENT_MISMATCH)
+    return { code: code2, waitable: !1 };
+  let timed = resumeRetryLaterFromError(err8);
+  return timed === null ? { code: code2, waitable: !1 } : {
+    code: code2,
+    waitable: timed.waitable,
+    ...timed.retryAfterSec !== void 0 ? { retryAfterSec: timed.retryAfterSec } : {}
+  };
+}
+function resumeRefusalContent(detail) {
+  let parts = [];
+  return detail.code === RESUME_PLACEMENT_MISMATCH ? (parts.push("This resume named a different placement root than the one recorded when the work was parked"), parts.push("The engine refused it before consuming anything \u2014 the parked work is untouched"), parts.push("Retry with the recorded root, or omit the placement root to inherit it"), parts.join(" \xB7 ")) : (parts.push("The deployment's resume preflight refused this attempt"), parts.push("The refusal happened before the commit \u2014 your decision was not consumed"), parts.push(detail.waitable ? "The engine supplied a wait, so this token stays redeemable once the obstacle clears" : "The engine line above says whether this token can still be redeemed"), parts.join(" \xB7 "));
+}
+var RESUME_REFUSAL_CODES, init_resumeRefusalCopy = __esm({
+  "node_modules/@sema-agent/client-core/dist/resumeRefusalCopy.js"() {
+    init_engineErrorCodes();
+    init_wireErrorTriage();
+    RESUME_REFUSAL_CODES = Object.freeze([
+      RESUME_PLACEMENT_MISMATCH,
+      RESUME_PREFLIGHT_REJECTED
+    ]);
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/sessionMap.js
 function engineNamespaceKeyFor(baseUrl) {
   if (!baseUrl)
@@ -59420,6 +59569,7 @@ var HITL_ASK_QUESTION_ID_PREFIX, PLAN_REVIEW_QUESTION_ID_PREFIX, HITL_FRAME_CALL
 });
 
 // node_modules/@sema-agent/client-core/dist/hitl/toolApprovalWire.js
+import { RULE_OFFER_MATCHES, RULE_OFFER_BATCH_MEMBER_KINDS, RULE_OFFER_UNCOVERED_REASONS, RULE_OFFERS_ABSENCE_REASONS, DENIAL_LIMIT_KINDS } from "@sema-agent/sdk";
 function isFsApprovalGate(gate) {
   return gate ? gate.kind === "tool_approval" ? !0 : typeof gate.toolName == "string" && toolNameIsFsWrite(gate.toolName) : !1;
 }
@@ -59684,13 +59834,58 @@ function isNonNegativeFinite(v2) {
 function isWireRecordCarrier(v2) {
   return typeof v2 == "object" && v2 !== null && !Array.isArray(v2);
 }
+function readDenialLimitFallback(v2) {
+  if (!isWireRecordCarrier(v2))
+    return;
+  let d4 = v2;
+  if (isNonNegativeFinite(d4.consecutive) && isNonNegativeFinite(d4.total) && isNonNegativeFinite(d4.autoDenyAfterMs) && !(typeof d4.limit != "string" || d4.limit === ""))
+    return {
+      consecutive: d4.consecutive,
+      total: d4.total,
+      limit: d4.limit,
+      autoDenyAfterMs: d4.autoDenyAfterMs
+    };
+}
+function isRuleOfferMatch(v2) {
+  return typeof v2 == "string" && RULE_OFFER_MATCHES.includes(v2);
+}
 function readRuleTriple(v2) {
   if (v2 === null || typeof v2 != "object")
     return;
   let o = v2;
-  if (!(typeof o.rule != "string" || o.rule === "") && !(o.match !== "exact" && o.match !== "prefix") && !(typeof o.command != "string" || o.command === ""))
+  if (!(typeof o.rule != "string" || o.rule === "") && isRuleOfferMatch(o.match) && !(typeof o.command != "string" || o.command === ""))
     return { rule: o.rule, match: o.match, command: o.command };
 }
+function readRuleOfferBatchMember(v2) {
+  if (v2 === null || typeof v2 != "object")
+    return;
+  let o = v2, seg = o.segment;
+  if (typeof seg != "string" || seg === "")
+    return;
+  let kind = o.kind === void 0 ? "command" : o.kind;
+  if (typeof kind == "string" && RULE_OFFER_BATCH_MEMBER_KINDS.includes(kind)) {
+    if (kind === "directoryRead") {
+      let rule = o.rule, dir = o.directory;
+      return typeof rule != "string" || rule === "" || typeof dir != "string" || dir === "" ? void 0 : { kind: "directoryRead", rule, directory: dir, segment: seg };
+    }
+    if (kind === "command") {
+      let triple = readRuleTriple(v2);
+      return triple === void 0 ? void 0 : { kind: "command", ...triple, segment: seg };
+    }
+  }
+}
+function readUncoveredDetail(v2) {
+  if (!Array.isArray(v2) || v2.length === 0 || v2.length > MAX_RULE_OFFER_UNCOVERED_DETAIL_TOLERATED)
+    return;
+  let out6 = [];
+  for (let raw2 of v2) {
+    if (raw2 === null || typeof raw2 != "object")
+      continue;
+    let o = raw2;
+    typeof o.segment != "string" || o.segment === "" || typeof o.reason == "string" && RULE_OFFER_UNCOVERED_REASONS.includes(o.reason) && out6.push({ segment: o.segment, reason: o.reason });
+  }
+  return out6.length > 0 ? out6 : void 0;
+}
 function readRuleOffers(v2) {
   if (!Array.isArray(v2) || v2.length === 0 || v2.length > MAX_RULE_OFFERS_TOLERATED)
     return;
@@ -59715,16 +59910,23 @@ function readRuleOffers(v2) {
         continue;
       let members = [], memberShapeOk = !0;
       for (let raw2 of o.rules) {
-        let triple = readRuleTriple(raw2), seg = raw2?.segment;
-        if (triple === void 0 || typeof seg != "string" || seg === "") {
+        let member = readRuleOfferBatchMember(raw2);
+        if (member === void 0) {
           memberShapeOk = !1;
           break;
         }
-        members.push({ ...triple, segment: seg });
+        members.push(member);
       }
       if (!memberShapeOk)
         continue;
-      out6.push({ kind: "batch", offerIndex: i, rules: members, uncoveredSegments: uncovered });
+      let detail = readUncoveredDetail(item.uncoveredDetail);
+      out6.push({
+        kind: "batch",
+        offerIndex: i,
+        rules: members,
+        uncoveredSegments: uncovered,
+        ...detail !== void 0 ? { uncoveredDetail: detail } : {}
+      });
       continue;
     }
   }
@@ -59762,7 +59964,7 @@ async function surfaceToolApprovalFrameAndRespond(frame, respond, streamArgs, si
     let p = pathFromGateMessage(frame.message);
     args = p !== void 0 ? { file_path: p } : {};
   }
-  let ruleOffers = readRuleOfferSupply(frame.ruleOffers, frame.ruleSuggestions), card = await surfaceApprovalCard({
+  let ruleOffers = readRuleOfferSupply(frame.ruleOffers, frame.ruleSuggestions), denialLimitFallback = readDenialLimitFallback(frame.denialLimitFallback), card = await surfaceApprovalCard({
     toolName: toolName2,
     args,
     // A-028.3:live 帧腿的卡身份键经 gateIdentity 唯一铸口(帧上无 gatedCallId,以 approvalId 铸)。
@@ -59823,7 +60025,22 @@ async function surfaceToolApprovalFrameAndRespond(frame, respond, streamArgs, si
     // requiresRealApproval 同一条纪律 —— 缺席同时覆盖「真的没有」与「扫不了」,折成显式 false 会把
     // 「没扫到」渲成「已确认干净」,而这一位存在的全部理由就是「人眼读到的顺序 ≠ 真跑的字节顺序」。
     // 🔴 披露不清洗:args 字节在本层一个都不改(清洗会让卡上显示的与真跑的不是同一个东西)。
-    ...frame.inputHasBidi === !0 ? { inputHasBidi: !0 } : {}
+    ...frame.inputHasBidi === !0 ? { inputHasBidi: !0 } : {},
+    // ── S-15 第五单(0.59.0):报价缺席因由透传 ────────────────────────────────────────────────
+    // **非空串才 stamp**,词表**不校**(开集;server 已按闭集拒过词表外的值,包再校一遍只会在
+    // core 加员当天把合法值判没 —— `autoMode.reason` 的透传纪律逐字同规)。缺席/坏形 ⇒ 键不 stamp。
+    // 🔴 与 `ruleOffers` 引擎侧互斥,但本层**不据此互删**:两者同时在场是上游坏形,原样上卡让端
+    //    看得见,包替上游把矛盾湮灭掉只会让排障说不清是谁窄没的。
+    ...typeof frame.ruleOffersAbsence == "string" && frame.ruleOffersAbsence !== "" ? { ruleOffersAbsence: frame.ruleOffersAbsence } : {},
+    // ── S-114(0.59.0):auto 分类器限额回落卡透传 ──────────────────────────────────────────────
+    // 经 `readDenialLimitFallback` 四成员窄读(缺一整只丢;判据本体在该函数顶注)。
+    // 🔴 stamp 的是**窄读产物**而不是原对象:端拿到的四座恒是有限非负数 + 非空 limit 串,
+    //    不必各自再写一遍同样的判断(三端各写一遍 = 三份会漂的判官)。
+    ...denialLimitFallback !== void 0 ? { denialLimitFallback } : {},
+    // ── S-125③/#564(0.59.0):ask 出身透传 ────────────────────────────────────────────────────
+    // 非空串才 stamp,词表**不校**(同 ruleOffersAbsence)。🔴 缺席 ⇒ 键不 stamp,**绝不折成
+    // `"policy"`**:那是一个正面事实(出自部署 ToolPolicy),把「老引擎没报」折进去 = 替引擎编话。
+    ...typeof frame.origin == "string" && frame.origin !== "" ? { origin: frame.origin } : {}
   }), decision = card.kind === "allow" ? card.allowSession ? "allow_session" : "allow" : "deny";
   card.kind === "failed" && hostLog("debug", `liveToolApprovalWire: approval card unavailable (${card.reason}) \u2014 fail-closed deny for ${frame.approvalId}`);
   let note;
@@ -59863,7 +60080,7 @@ async function surfaceToolApprovalFrameAndRespond(frame, respond, streamArgs, si
     return hostLog("debug", `liveToolApprovalWire: respond(${decision}) failed for ${frame.approvalId} (status=${respondRefusal?.status ?? "none"} errorCode=${logSafeErrorCode(respondRefusal?.errorCode)} messageLen=${respondRefusal?.message?.length ?? 0}) \u2014 engine self-settles (TTL/abort); the refusal text is handed back on outcome.respondRefusal for the host to surface`), respondRefusal !== void 0 ? { decision: "unresolved", respondRefusal } : { decision: "unresolved" };
   }
 }
-var cardPortByKey, cardPortMissesByKey, TOOL_APPROVAL_FRAME_KEYS_MIRROR, RESPOND_DECISIONS, USELESS_REFUSAL_TEXTS, MACHINE_CODE_SHAPE, FS_WRITE_GATE_ASK_PATTERN, MAX_RULE_OFFERS_TOLERATED, MAX_RULE_OFFER_BATCH_MEMBERS_TOLERATED, MAX_RESPOND_NOTE_CHARS, init_toolApprovalWire = __esm({
+var cardPortByKey, cardPortMissesByKey, TOOL_APPROVAL_FRAME_KEYS_MIRROR, RESPOND_DECISIONS, USELESS_REFUSAL_TEXTS, MACHINE_CODE_SHAPE, FS_WRITE_GATE_ASK_PATTERN, MAX_RULE_OFFERS_TOLERATED, MAX_RULE_OFFER_BATCH_MEMBERS_TOLERATED, MAX_RULE_OFFER_UNCOVERED_DETAIL_TOLERATED, MAX_RESPOND_NOTE_CHARS, init_toolApprovalWire = __esm({
   "node_modules/@sema-agent/client-core/dist/hitl/toolApprovalWire.js"() {
     init_hitlBridge();
     init_host();
@@ -59890,16 +60107,29 @@ var cardPortByKey, cardPortMissesByKey, TOOL_APPROVAL_FRAME_KEYS_MIRROR, RESPOND
       "governanceForced",
       // sdk 6.14.0 追平(#225 件1,client-core 0.26.0):server 7.12.0 起真发规则候选 —— 门
       // (run-approval-frame-keys-test.mjs)在 bump SDK 当天恰红抓获本键缺席,本次补齐。
-      // ⚠️ **退役键**(server 7.46.0 起同文件 0 命中):留在镜像里是因为 sdk 7.2.0 的运行期锚仍含它,
+      // ⚠️ **退役键**(server 7.46.0 起同文件 0 命中):留在镜像里是因为 sdk 8.2.0 的运行期锚仍含它,
       // 删了对账门的「SDK 锚的每个键本仓都有」当场红;本包对它只做归一读(见帧上同名键的 JSDoc)。
       "ruleSuggestions",
       // #334/[5223](client-core 0.43.0):server 7.46.0 起把规则候选整体换成判别联合 `ruleOffers`
       // (core 5.58.0 design/375;engine 7.46.0 fixture 的 `@sema-agent/server/dist/tool-approval.d.ts`
-      // 直证,同文件旧键 0 命中)。sdk 7.2.0 锚**尚无**本键 ⇒ 与 `requiresRealApproval`/窗三键同形=
-      // **领先**,进对账门 AHEAD_OF_ANCHOR 带退出条件登记。
+      // 直证,同文件旧键 0 命中)。✅ **sdk 8.2.0 锚已含本键**(S-134 锚②)⇒ 0.58.0 提货批按退出
+      // 条件删掉了对账门里那条 AHEAD_OF_ANCHOR 领先登记,本键回到「逐元素相等」的常态。
       "ruleOffers",
+      // S-15 第五单(client-core 0.59.0):server 7.55.0 起真发 `ruleOffersAbsence`(core #490 修②;
+      // engine 7.60.0 fixture 直证)。⚠️ 与 `ruleOffers` **同形不同命**:它是**追平**不是领先 ——
+      // sdk 8.3.0 的运行期锚已含本键(node 直读 27 项实证)⇒ **不**进 AHEAD_OF_ANCHOR
+      // (往那张表里塞一个锚已有的键,它的第二条退出条件当场红)。
+      "ruleOffersAbsence",
+      // S-114(client-core 0.59.0):server 7.57.0 起真发 `denialLimitFallback`(core 7.4.0 #548;
+      // engine 7.60.0 fixture 直证)。同上一条:sdk 8.3.0 锚已含本键 ⇒ 追平,不进领先表。
+      // 🔴 本键与 `requiresRealApproval` 是孪生键,但两者在镜像里各占一格 —— 合并会让「只有一位在场」
+      //    的坏形无处显形。
+      "denialLimitFallback",
+      // S-125③/#564(client-core 0.59.0):server 7.57.0 起真发 `origin`(core 7.5.0 `ASK_ORIGINS`
+      // 八词;engine 7.60.0 fixture 直证)。同上:sdk 8.3.0 锚已含本键 ⇒ 追平,不进领先表。
+      "origin",
       // #341/[5214]③(client-core 0.43.0):server 7.46.0 起真发 `inputHasBidi`(E-14 Trojan Source 族;
-      // 7.44 fixture 同文件 0 命中)。同样**领先** sdk 7.2.0 锚 ⇒ AHEAD_OF_ANCHOR 登记。
+      // 7.44 fixture 同文件 0 命中)。仍**领先** sdk 8.2.0 锚(node 直读 18 项无本键)⇒ AHEAD_OF_ANCHOR 登记。
       "inputHasBidi",
       // 🔴 **同形族扫的产物**(client-core 0.43.0,[same-shape-residue-constitution]):本批的病形是
       // 「镜像滞后于 server 实发键」。族扫 = 把 engine 7.46.0 fixture 的 `ToolApprovalFrame` 23 个声明键
@@ -59929,7 +60159,7 @@ var cardPortByKey, cardPortMissesByKey, TOOL_APPROVAL_FRAME_KEYS_MIRROR, RESPOND
       "requiresRealApproval",
       // [4851] 头号请托(client-core 0.38.2):server 7.34.0 起真发窗三键(#288/[4429]② cli 自己请托,
       // server src/tool-approval.ts 三键声明+条件 stamp)。⚠️ 与 requiresRealApproval 同形=**领先** SDK
-      // 运行期锚(sdk 7.2.0 锚 17 项,node 直读实证无三键)⇒ 进对账门 AHEAD_OF_ANCHOR 带退出条件登记
+      // 运行期锚(sdk 8.2.0 锚 18 项,node 直读实证无三键)⇒ 进对账门 AHEAD_OF_ANCHOR 带退出条件登记
       // (SDK 追平当天登记自红逼删)。0.38.1 把三键丢在包边界外 = [4845]「卡到期屏幕零反应」的直接成因
       // (壳读器 readAskDeadlineMs 早已预埋,缺的一直是包边界这一格——#283 逐字同形第四例)。
       "expiresInMs",
@@ -59942,7 +60172,7 @@ var cardPortByKey, cardPortMissesByKey, TOOL_APPROVAL_FRAME_KEYS_MIRROR, RESPOND
     USELESS_REFUSAL_TEXTS = /* @__PURE__ */ new Set(["[object Object]", "null", "undefined", ""]);
     MACHINE_CODE_SHAPE = /^[A-Za-z0-9._:-]{1,64}$/;
     FS_WRITE_GATE_ASK_PATTERN = /^approve write to "([^"]+)"\?$/;
-    MAX_RULE_OFFERS_TOLERATED = 8, MAX_RULE_OFFER_BATCH_MEMBERS_TOLERATED = 8;
+    MAX_RULE_OFFERS_TOLERATED = 8, MAX_RULE_OFFER_BATCH_MEMBERS_TOLERATED = 8, MAX_RULE_OFFER_UNCOVERED_DETAIL_TOLERATED = 32;
     MAX_RESPOND_NOTE_CHARS = 2048;
   }
 });
@@ -61066,13 +61296,18 @@ async function waitForParkRowBirth(deps2) {
         } catch {
         }
     }
-  };
+  }, lastProbeMs = 0;
   for (; ; ) {
     if (aborted2())
       return { kind: "aborted", waitedMs: now2() - startedAt, probes };
+    {
+      let remainingBeforeProbe = budgetMs - (now2() - startedAt);
+      if (budgetMs > 0 && probes > 0 && lastProbeMs > 0 && remainingBeforeProbe < lastProbeMs)
+        return { kind: "unborn", reason: lastReason, waitedMs: now2() - startedAt, probes };
+    }
     probes += 1;
-    let outcome = await probeWithinRemaining(probes, budgetMs - (now2() - startedAt));
-    if (outcome === "aborted" || aborted2())
+    let probeStartedAt = now2(), outcome = await probeWithinRemaining(probes, budgetMs - (now2() - startedAt));
+    if (lastProbeMs = now2() - probeStartedAt, outcome === "aborted" || aborted2())
       return { kind: "aborted", waitedMs: now2() - startedAt, probes };
     if (outcome === "deadline")
       return {
@@ -63437,6 +63672,7 @@ __export(dist_exports, {
   DELEGATION_CAP_CODES: () => DELEGATION_CAP_CODES,
   DELEGATION_CONCURRENCY_CAP: () => DELEGATION_CONCURRENCY_CAP,
   DELEGATION_SESSION_CAP: () => DELEGATION_SESSION_CAP,
+  DENIAL_LIMIT_KINDS: () => DENIAL_LIMIT_KINDS,
   DETACH_DURABLE_OFF_400_ANCHOR: () => DETACH_DURABLE_OFF_400_ANCHOR,
   DETACH_HEADER: () => DETACH_HEADER,
   DETACH_WIRE_MIN_ENGINE: () => DETACH_WIRE_MIN_ENGINE,
@@ -63548,7 +63784,9 @@ __export(dist_exports, {
   RESUME_CHOICE_BACKGROUND_LABEL: () => RESUME_CHOICE_BACKGROUND_LABEL,
   RESUME_CHOICE_CANCEL_LABEL: () => RESUME_CHOICE_CANCEL_LABEL,
   RESUME_CHOICE_HEADER: () => RESUME_CHOICE_HEADER,
+  RESUME_PLACEMENT_MISMATCH: () => RESUME_PLACEMENT_MISMATCH,
   RESUME_PREFLIGHT_REJECTED: () => RESUME_PREFLIGHT_REJECTED,
+  RESUME_REFUSAL_CODES: () => RESUME_REFUSAL_CODES,
   RESUME_RETRY_LATER_CODES: () => RESUME_RETRY_LATER_CODES,
   RESUME_RUNNING_GUIDANCE_TAG: () => RESUME_RUNNING_GUIDANCE_TAG,
   RESUME_RUNNING_NO_UI_EXIT_CODE: () => RESUME_RUNNING_NO_UI_EXIT_CODE,
@@ -63557,6 +63795,10 @@ __export(dist_exports, {
   REWIND_ERROR_CODE_PREFIXES: () => REWIND_ERROR_CODE_PREFIXES,
   RULE_NOT_SENT_REJECTED_WARN_TEXT: () => RULE_NOT_SENT_REJECTED_WARN_TEXT,
   RULE_NOT_SENT_WARN_TEXT: () => RULE_NOT_SENT_WARN_TEXT,
+  RULE_OFFERS_ABSENCE_REASONS: () => RULE_OFFERS_ABSENCE_REASONS,
+  RULE_OFFER_BATCH_MEMBER_KINDS: () => RULE_OFFER_BATCH_MEMBER_KINDS,
+  RULE_OFFER_MATCHES: () => RULE_OFFER_MATCHES,
+  RULE_OFFER_UNCOVERED_REASONS: () => RULE_OFFER_UNCOVERED_REASONS,
   RUNNING_STATES: () => RUNNING_STATES,
   RUN_BLOCKED_MESSAGE_PREFIX: () => RUN_BLOCKED_MESSAGE_PREFIX,
   RUN_LEVEL_STOP_ERROR_CODES: () => RUN_LEVEL_STOP_ERROR_CODES,
@@ -63635,6 +63877,7 @@ __export(dist_exports, {
   __resetHooksWireCapsForTests: () => __resetHooksWireCapsForTests,
   __resetRetainWithoutWakeWarningForTests: () => __resetRetainWithoutWakeWarningForTests,
   __resetRunningChoiceLedgerForTests: () => __resetRunningChoiceLedgerForTests,
+  __resetSqlEngineReadingsForTests: () => __resetSqlEngineReadingsForTests,
   __resetSubagentOutputCapCacheForTests: () => __resetSubagentOutputCapCacheForTests,
   __resetSubagentOwnerLedgerForTests: () => __resetSubagentOwnerLedgerForTests,
   __resetSubagentStreamCapCacheForTests: () => __resetSubagentStreamCapCacheForTests,
@@ -63780,6 +64023,7 @@ __export(dist_exports, {
   engineCapState: () => engineCapState,
   engineCapString: () => engineCapString,
   engineCapTrue: () => engineCapTrue,
+  engineCapValue: () => engineCapValue,
   engineCapsSettled: () => engineCapsSettled,
   engineCcStopSemantics: () => engineCcStopSemantics,
   engineLimitsSupportWarning: () => engineLimitsSupportWarning,
@@ -63822,6 +64066,7 @@ __export(dist_exports, {
   fleetViewStubRowIds: () => fleetViewStubRowIds,
   fmtCtxOut: () => fmtCtxOut,
   fmtTokens: () => fmtTokens,
+  forgetSqlEngineReading: () => forgetSqlEngineReading,
   gateArmedWaitMs: () => gateArmedWaitMs,
   gateKind: () => gateKind,
   getBgParentRun: () => getBgParentRun,
@@ -63965,6 +64210,7 @@ __export(dist_exports, {
   normalizeTaskNotification: () => normalizeTaskNotification,
   normalizeWirePrincipal: () => normalizeWirePrincipal,
   noteBgOwnerAbsence: () => noteBgOwnerAbsence,
+  noteEngineCapsForSqlEngine: () => noteEngineCapsForSqlEngine,
   notePlanReviewAnswered: () => notePlanReviewAnswered,
   notePlanReviewAnsweredFor: () => notePlanReviewAnsweredFor,
   notePlanReviewAnsweredIfDecisive: () => notePlanReviewAnsweredIfDecisive,
@@ -63973,6 +64219,7 @@ __export(dist_exports, {
   notificationDropCounters: () => notificationDropCounters,
   notificationQueuePortMisses: () => notificationQueuePortMisses,
   observeCancelByDeny: () => observeCancelByDeny,
+  observedSqlEngine: () => observedSqlEngine,
   onEngineTaskBound: () => onEngineTaskBound,
   onGateArmed: () => onGateArmed,
   onGateArmedFor: () => onGateArmedFor,
@@ -64029,6 +64276,7 @@ __export(dist_exports, {
   projectFleetAgentRows: () => projectFleetAgentRows,
   projectFleetAgentRowsFor: () => projectFleetAgentRowsFor,
   projectRewind: () => projectRewind,
+  projectSqlEngineCapability: () => projectSqlEngineCapability,
   projectTasks: () => projectTasks,
   projectWorkflowRun: () => projectWorkflowRun,
   projectWorkflowTaskOutput: () => projectWorkflowTaskOutput,
@@ -64114,6 +64362,8 @@ __export(dist_exports, {
   respondToQuestion: () => respondToQuestion,
   resumeAttachReplayDisclosure: () => resumeAttachReplayDisclosure,
   resumeChoiceFromLabels: () => resumeChoiceFromLabels,
+  resumeRefusalContent: () => resumeRefusalContent,
+  resumeRefusalFromError: () => resumeRefusalFromError,
   resumeRetryLaterFromError: () => resumeRetryLaterFromError,
   resumeRunningCancelUnconfirmedRow: () => resumeRunningCancelUnconfirmedRow,
   resumeRunningLivenessRow: () => resumeRunningLivenessRow,
@@ -64148,6 +64398,7 @@ __export(dist_exports, {
   skillCommandsToSpecs: () => skillCommandsToSpecs,
   splitApiErrorSupplement: () => splitApiErrorSupplement,
   spoolMarkerOf: () => spoolMarkerOf,
+  sqlEngineDoctorDetail: () => sqlEngineDoctorDetail,
   stamp: () => stamp,
   startApprovalsFeed: () => startApprovalsFeed,
   steerEngineSubagent: () => steerEngineSubagent,
@@ -64254,6 +64505,7 @@ var init_dist = __esm({
     init_engineInlineTaskStats();
     init_printToolResultFrame();
     init_engineCapsCache();
+    init_sqlEngineCapability();
     init_engineToolLabelStore();
     init_fleetTaskDesc();
     init_hostEnv();
@@ -64320,6 +64572,7 @@ var init_dist = __esm({
     init_engineWireTarget();
     init_principalWire();
     init_wireErrorTriage();
+    init_resumeRefusalCopy();
     init_sessionMap();
     init_detachWire();
     init_workflowMonitor();
@@ -81827,6 +82080,23 @@ var SECRET_LITERAL_RE, ENV_NAME, hasNul, NON_SECRET_URL, K8S_QUANTITY, TCP_PORT,
        *  declared `"local"`, the engine read ABSENT. A value outside the table is REJECTED at parse — a mistyped trust
        *  word must never be read as a legal one (the consumer's gate is equally severe: no case-folding). */
       contentOrigin: external_exports2.enum(MCP_CONTENT_ORIGINS).optional(),
+      /** Declaration-plane GROUPING LABEL for this server — maps 1:1 onto the engine's `McpServerSpec.source`
+       *  (core ≥7.5.0 echoes it verbatim on `wiring_manifest.mcp[].source`, single-line + 80-char cap, so a
+       *  consumer can group servers by where they were declared). An OPEN set: CC's `plugin` / `user` /
+       *  `project` / `local` are conventions, not a vocabulary — a deployment's own word is equally legal, so
+       *  no closed table here (a closed table would reject the operator's grouping word at parse). ABSENT =
+       *  no label (`.optional()`, no default — a label has no default tier). 🔴 ZERO rules here (`z.unknown()`):
+       *  the label RULE (string, non-empty, ≤80 chars) lives in ONE place — the consumer's projection helper,
+       *  which drops a malformed label's KEY, keeps the server and records the drop. Nothing may live here:
+       *  this domain parses all-or-nothing, so ANY rejection at parse (1.7.0 `min/max`, 1.7.1 `z.string()`
+       *  against a `null`) lets one bad label default the ENTIRE mcp domain — every server gone, silently when
+       *  no onWarning is wired — a blast radius a display label must never have. 1.7.2 makes the key
+       *  parse-transparent: whatever JSON value the file carries reaches the consumer verbatim. Display-only:
+       *  no gate / policy / trust
+       *  effect (the trust axis is `contentOrigin` above, which stays a closed table). Before this key existed
+       *  both legs stripped it (default-strip object); this is the declaration half of the consumer-side fix
+       *  (ticket B-036 / S-143), the projection half lives in the consumer. */
+      source: external_exports2.unknown().optional(),
       notes: external_exports2.string().optional()
     }), McpConfig = external_exports2.object({ servers: external_exports2.array(McpServerSpec).default([]) }).superRefine((cfg, ctx) => {
       let seen2 = /* @__PURE__ */ new Set();
@@ -89000,38 +89270,87 @@ var consumedProbe, init_metaComboFallback = __esm({
 // build-src/src/utils/earlyInput.ts
 var earlyInput_exports = {};
 __export(earlyInput_exports, {
+  __earlyInputStateForTests: () => __earlyInputStateForTests,
+  __processChunkForTests: () => __processChunkForTests,
+  __setEarlyInputStateForTests: () => __setEarlyInputStateForTests,
   consumeEarlyInput: () => consumeEarlyInput,
   flushPendingEscape: () => flushPendingEscape,
   foldEarlyInput: () => foldEarlyInput,
   hasEarlyInput: () => hasEarlyInput,
   isCapturingEarlyInput: () => isCapturingEarlyInput,
   releaseEarlyInputForNonReplLane: () => releaseEarlyInputForNonReplLane,
+  replayHandover: () => replayHandover,
   seedEarlyInput: () => seedEarlyInput,
   startCapturingEarlyInput: () => startCapturingEarlyInput,
   stopCapturingEarlyInput: () => stopCapturingEarlyInput
 });
+function earlyInputTrace(line) {
+  try {
+    let argv = process.argv, path28;
+    for (let i = 0; i < argv.length; i++) {
+      let a = argv[i];
+      if (a.startsWith("--debug-file=")) {
+        path28 = a.slice(13);
+        break;
+      }
+      if (a === "--debug-file" && typeof argv[i + 1] == "string") {
+        path28 = argv[i + 1];
+        break;
+      }
+    }
+    if (!path28) return;
+    __require("node:fs").appendFileSync(path28, `${(/* @__PURE__ */ new Date()).toISOString()} [DEBUG] [earlyInput] ${line}
+`);
+  } catch {
+  }
+}
 function startCapturingEarlyInput() {
-  if (!(!process.stdin.isTTY || isCapturing || process.argv.includes("-p") || process.argv.includes("--print"))) {
-    isCapturing = !0, captureArmedStdin = !0, earlyInputBuffer = "", flushPendingEscape();
-    try {
-      process.stdin.setEncoding("utf8"), process.stdin.setRawMode(!0), process.stdin.ref(), readableHandler = () => {
-        let chunk2 = process.stdin.read();
-        for (; chunk2 !== null; )
-          typeof chunk2 == "string" && processChunk(chunk2), chunk2 = process.stdin.read();
-      }, process.stdin.on("readable", readableHandler);
-    } catch {
-      isCapturing = !1;
+  if (!process.stdin.isTTY || isCapturing || process.argv.includes("-p") || process.argv.includes("--print"))
+    return;
+  isCapturing = !0, captureArmedStdin = !0, earlyInputBuffer = "", flushPendingEscape();
+  let handedOver = { chunks: [], stopped: !1 };
+  try {
+    let slot = globalThis[EARLY_INPUT_PRELUDE_SLOT];
+    slot !== void 0 && typeof slot.detach == "function" && (handedOver = slot.detach(), delete globalThis[EARLY_INPUT_PRELUDE_SLOT]);
+  } catch {
+    handedOver = { chunks: [], stopped: !1 };
+  }
+  try {
+    process.stdin.readableEncoding !== "utf8" && process.stdin.setEncoding("utf8"), process.stdin.setRawMode(!0), process.stdin.ref(), readableHandler = () => {
+      let chunk2 = process.stdin.read();
+      for (; chunk2 !== null; )
+        typeof chunk2 == "string" && processChunk(chunk2), chunk2 = process.stdin.read();
+    }, process.stdin.on("readable", readableHandler), replayHandover(handedOver, Date.now()), earlyInputTrace(`capture armed: handover chunks=${String(handedOver.chunks.length)} bytes=${String(handedOver.chunks.reduce((n2, c2) => n2 + c2.s.length, 0))} stopped=${String(handedOver.stopped)} buffer=${String(earlyInputBuffer.length)} capturing=${String(isCapturing)}`);
+  } catch (e) {
+    isCapturing = !1, earlyInputTrace(`capture FAILED: ${e instanceof Error ? e.stack ?? e.message : String(e)}`);
+  }
+}
+function replayHandover(h, now2) {
+  let list = h.chunks;
+  for (let i = 0; i < list.length; i++) {
+    let cur = list[i];
+    if (processChunk(cur.s), !isCapturing) return;
+    if (pendingEscape !== "\x1B") continue;
+    if (i + 1 < list.length) {
+      list[i + 1].t - cur.t > PENDING_ESCAPE_FLUSH_MS && flushPendingEscape();
+      continue;
     }
+    let waited = now2 - cur.t;
+    waited > PENDING_ESCAPE_FLUSH_MS ? flushPendingEscape() : armPendingEscapeFlush(PENDING_ESCAPE_FLUSH_MS - waited);
   }
 }
 function clearPendingEscapeTimer() {
   pendingEscapeTimer !== null && (clearTimeout(pendingEscapeTimer), pendingEscapeTimer = null);
 }
 function flushPendingEscape() {
-  clearPendingEscapeTimer(), pendingEscape = "";
+  clearPendingEscapeTimer(), pendingEscape = "", pendingEscapeDeadline = -1;
 }
-function armPendingEscapeFlush() {
-  clearPendingEscapeTimer(), pendingEscape === "\x1B" && (pendingEscapeTimer = setTimeout(flushPendingEscape, PENDING_ESCAPE_FLUSH_MS), pendingEscapeTimer.unref?.());
+function armPendingEscapeFlush(remainingMs = PENDING_ESCAPE_FLUSH_MS) {
+  if (clearPendingEscapeTimer(), pendingEscape !== "\x1B") {
+    pendingEscapeDeadline = -1;
+    return;
+  }
+  lastArmedEscapeMs = Math.max(0, remainingMs), pendingEscapeDeadline = Date.now() + lastArmedEscapeMs, pendingEscapeTimer = setTimeout(flushPendingEscape, lastArmedEscapeMs), pendingEscapeTimer.unref?.();
 }
 function foldEarlyInput(buffer5, pending4, str3) {
   let buf = buffer5, s = pending4 + str3, i = 0;
@@ -89086,7 +89405,7 @@ function processChunk(str3) {
       break;
     }
   }
-  clearPendingEscapeTimer();
+  pendingEscape === "\x1B" && pendingEscapeDeadline >= 0 && Date.now() > pendingEscapeDeadline && flushPendingEscape(), clearPendingEscapeTimer();
   let folded = foldEarlyInput(earlyInputBuffer, pendingEscape, head);
   if (earlyInputBuffer = folded.buffer, pendingEscape = folded.pending, armPendingEscapeFlush(), tail === "ctrl-c") {
     stopCapturingEarlyInput(), process.exit(130);
@@ -89117,7 +89436,16 @@ function releaseEarlyInputForNonReplLane() {
 function consumeEarlyInput() {
   stopCapturingEarlyInput();
   let input = earlyInputBuffer.trim();
-  return earlyInputBuffer = "", input;
+  return earlyInputTrace(`consume: buffer=${String(earlyInputBuffer.length)} trimmed=${String(input.length)}`), earlyInputBuffer = "", input;
+}
+function __earlyInputStateForTests() {
+  return { buffer: earlyInputBuffer, pending: pendingEscape, capturing: isCapturing, armedMs: lastArmedEscapeMs };
+}
+function __processChunkForTests(str3) {
+  processChunk(str3);
+}
+function __setEarlyInputStateForTests(o) {
+  o.buffer !== void 0 && (earlyInputBuffer = o.buffer), o.pending !== void 0 && (pendingEscape = o.pending), o.capturing !== void 0 && (isCapturing = o.capturing), clearPendingEscapeTimer();
 }
 function hasEarlyInput() {
   return earlyInputBuffer.trim().length > 0;
@@ -89128,11 +89456,13 @@ function seedEarlyInput(text2) {
 function isCapturingEarlyInput() {
   return isCapturing;
 }
-var earlyInputBuffer, isCapturing, captureArmedStdin, readableHandler, pendingEscape, PENDING_ESCAPE_FLUSH_MS, pendingEscapeTimer, init_earlyInput = __esm({
+var earlyInputBuffer, EARLY_INPUT_PRELUDE_SLOT, isCapturing, captureArmedStdin, readableHandler, pendingEscape, PENDING_ESCAPE_FLUSH_MS, pendingEscapeTimer, lastArmedEscapeMs, pendingEscapeDeadline, init_earlyInput = __esm({
   "build-src/src/utils/earlyInput.ts"() {
     init_intl();
-    earlyInputBuffer = "", isCapturing = !1, captureArmedStdin = !1, readableHandler = null;
+    earlyInputBuffer = "";
+    EARLY_INPUT_PRELUDE_SLOT = /* @__PURE__ */ Symbol.for("sema.earlyInputPrelude"), isCapturing = !1, captureArmedStdin = !1, readableHandler = null;
     pendingEscape = "", PENDING_ESCAPE_FLUSH_MS = 50, pendingEscapeTimer = null;
+    lastArmedEscapeMs = -1, pendingEscapeDeadline = -1;
   }
 });
 
@@ -120569,7 +120899,8 @@ beta`,
         type: "engine_notice",
         code: "mcp_server_unavailable",
         message: "the MCP server is not reachable",
-        detail: { serverName: "nope", sessionId: scenarioIds.sessionId },
+        // B-018 debug 不变量哨兵:未登记码的 detail **值**不许落任何日志(只落键名);无秘密纯哨兵串。
+        detail: { serverName: "nope", sessionId: scenarioIds.sessionId, auditDetail: "B018_DETAIL_VALUE_MUST_NOT_BE_LOGGED" },
         sessionId: scenarioIds.sessionId,
         ts: 1700000000001
       };
@@ -175588,7 +175919,7 @@ How to use the statusLine command:
    To display both 5-hour and 7-day limits when available:
    - input=$(cat); five=$(echo "$input" | jq -r '.rate_limits.five_hour.used_percentage // empty'); week=$(echo "$input" | jq -r '.rate_limits.seven_day.used_percentage // empty'); out=""; [ -n "$five" ] && out="5h:$(printf '%.0f' "$five")%"; [ -n "$week" ] && out="$out 7d:$(printf '%.0f' "$week")%"; echo "$out"
 
-2. For longer commands, you can save a new file in the user's ~/.claude directory, e.g.:
+2. For longer commands, you can save a new file in the user's ~/.sema directory, e.g.:
    - ~/.sema/statusline-command.sh and reference that file in the settings.
 
 3. Update the user's ~/.sema/settings.json with:
@@ -265997,7 +266328,7 @@ var require_extension = __commonJS({
 var require_websocket2 = __commonJS({
   "node_modules/ws/lib/websocket.js"(exports2, module2) {
     "use strict";
-    var EventEmitter5 = __require("events"), https2 = __require("https"), http3 = __require("http"), net = __require("net"), tls = __require("tls"), { randomBytes: randomBytes31, createHash: createHash34 } = __require("crypto"), { Duplex, Readable: Readable5 } = __require("stream"), { URL: URL6 } = __require("url"), PerMessageDeflate2 = require_permessage_deflate2(), Receiver2 = require_receiver2(), Sender2 = require_sender2(), { isBlob: isBlob2 } = require_validation2(), {
+    var EventEmitter5 = __require("events"), https2 = __require("https"), http3 = __require("http"), net = __require("net"), tls = __require("tls"), { randomBytes: randomBytes31, createHash: createHash33 } = __require("crypto"), { Duplex, Readable: Readable5 } = __require("stream"), { URL: URL6 } = __require("url"), PerMessageDeflate2 = require_permessage_deflate2(), Receiver2 = require_receiver2(), Sender2 = require_sender2(), { isBlob: isBlob2 } = require_validation2(), {
       BINARY_TYPES,
       CLOSE_TIMEOUT,
       EMPTY_BUFFER,
@@ -266459,7 +266790,7 @@ var require_websocket2 = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        let digest = createHash34("sha1").update(key + GUID).digest("base64");
+        let digest = createHash33("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -266697,7 +267028,7 @@ var require_subprotocol = __commonJS({
 var require_websocket_server = __commonJS({
   "node_modules/ws/lib/websocket-server.js"(exports2, module2) {
     "use strict";
-    var EventEmitter5 = __require("events"), http3 = __require("http"), { Duplex } = __require("stream"), { createHash: createHash34 } = __require("crypto"), extension2 = require_extension(), PerMessageDeflate2 = require_permessage_deflate2(), subprotocol2 = require_subprotocol(), WebSocket3 = require_websocket2(), { CLOSE_TIMEOUT, GUID, kWebSocket } = require_constants9(), keyRegex = /^[+/0-9A-Za-z]{22}==$/, RUNNING = 0, CLOSING = 1, CLOSED = 2, WebSocketServer2 = class extends EventEmitter5 {
+    var EventEmitter5 = __require("events"), http3 = __require("http"), { Duplex } = __require("stream"), { createHash: createHash33 } = __require("crypto"), extension2 = require_extension(), PerMessageDeflate2 = require_permessage_deflate2(), subprotocol2 = require_subprotocol(), WebSocket3 = require_websocket2(), { CLOSE_TIMEOUT, GUID, kWebSocket } = require_constants9(), keyRegex = /^[+/0-9A-Za-z]{22}==$/, RUNNING = 0, CLOSING = 1, CLOSED = 2, WebSocketServer2 = class extends EventEmitter5 {
       /**
        * Create a `WebSocketServer` instance.
        *
@@ -266944,7 +267275,7 @@ var require_websocket_server = __commonJS({
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
           "Connection: Upgrade",
-          `Sec-WebSocket-Accept: ${createHash34("sha1").update(key + GUID).digest("base64")}`
+          `Sec-WebSocket-Accept: ${createHash33("sha1").update(key + GUID).digest("base64")}`
         ], ws = new this.options.WebSocket(null, void 0, this.options);
         if (protocols.size) {
           let protocol = this.options.handleProtocols ? this.options.handleProtocols(protocols, req) : protocols.values().next().value;
@@ -290982,6 +291313,19 @@ function approvalMovedToDurableQueueRow(toolName2) {
 function approvalWindowClosedRow(toolName2) {
   return `sema: the approval window for "${toolName2}" closed \u2014 what happens to that step now is the engine's own policy. By default it keeps the call waiting in a durable queue, so this card is left up and answering it now is normally still accepted; if the engine settled it instead, answering will say so. Nothing was decided by this card.`;
 }
+function approvalAutoDeniedRow(toolName2) {
+  return `sema: the approval window for "${toolName2}" closed and the engine denied this call itself (auto-deny limit reached \u2014 no human decided it). This card no longer decides anything; the engine may ask again for a later call.`;
+}
+function readToolEndAutoDenied(ev) {
+  if (typeof ev != "object" || ev === null) return !1;
+  let rec = ev;
+  return rec.type !== "tool_end" ? !1 : rec.autoDenied === !0;
+}
+function readToolEndToolCallId(ev) {
+  if (typeof ev != "object" || ev === null) return;
+  let raw2 = ev.toolCallId;
+  return typeof raw2 == "string" && raw2 !== "" ? raw2 : void 0;
+}
 function parkRowDeadlineState(row2, nowMs2) {
   if (typeof row2 != "object" || row2 === null) return { kind: "none" };
   let raw2 = row2.deadline;
@@ -291238,6 +291582,53 @@ var PARK_DEADLINE_MAX_SANE_MS, parkRowDeadlineHandoff, lateDecideLane, MAX_LATE_
 });
 
 // build-src/src/sema/liveApprovalCardHandles.ts
+function noteTerminalSeen(epoch, toolCallId) {
+  for (; terminalSeenByToolCallId.size >= SETTLED_CARD_MAX; ) {
+    let oldest = terminalSeenByToolCallId.values().next();
+    if (oldest.done === !0) break;
+    terminalSeenByToolCallId.delete(oldest.value);
+  }
+  terminalSeenByToolCallId.add(settledKey(epoch, toolCallId));
+}
+function resolveToolEndAutoDenied(ev, streamEpoch) {
+  if (typeof ev != "object" || ev === null || ev.type !== "tool_end") return { kind: "none" };
+  let toolCallId = readToolEndToolCallId(ev);
+  if (toolCallId === void 0) return { kind: "none" };
+  let autoDenied = readToolEndAutoDenied(ev), settled = takeSettledCardToolName(toolCallId, streamEpoch), live = callKeyByToolCallId.get(toolCallId);
+  live !== void 0 && live.epoch === streamEpoch && noteTerminalSeen(streamEpoch, toolCallId);
+  let epochLive = streamEpoch === getLiveSessionEpoch();
+  return !autoDenied || !epochLive ? { kind: "none" } : markApprovalCardAutoDenied(toolCallId, streamEpoch) ? { kind: "live" } : settled !== void 0 ? { kind: "late", toolName: settled } : { kind: "none" };
+}
+function registerApprovalCardToolCallId(toolCallId, callKey) {
+  let epoch = getLiveSessionEpoch();
+  return typeof toolCallId != "string" || toolCallId === "" || callKeyByToolCallId.set(toolCallId, { callKey, epoch }), epoch;
+}
+function forgetApprovalCardToolCallId(toolCallId, callKey, bornEpoch, windowClosedToolName) {
+  if (typeof toolCallId != "string" || toolCallId === "") return;
+  let live = callKeyByToolCallId.get(toolCallId);
+  if (live !== void 0 && live.callKey === callKey && callKeyByToolCallId.delete(toolCallId), !(typeof windowClosedToolName != "string" || windowClosedToolName === "") && !terminalSeenByToolCallId.delete(settledKey(bornEpoch, toolCallId))) {
+    for (; settledCardByToolCallId.size >= SETTLED_CARD_MAX; ) {
+      let oldest = settledCardByToolCallId.keys().next();
+      if (oldest.done === !0) break;
+      settledCardByToolCallId.delete(oldest.value);
+    }
+    settledCardByToolCallId.set(settledKey(bornEpoch, toolCallId), windowClosedToolName);
+  }
+}
+function takeSettledCardToolName(toolCallId, epoch) {
+  if (typeof toolCallId != "string" || toolCallId === "") return;
+  if (epoch === void 0) {
+    for (let k3 of settledCardByToolCallId.keys())
+      if (k3.endsWith(`:${toolCallId}`)) {
+        let name2 = settledCardByToolCallId.get(k3);
+        return settledCardByToolCallId.delete(k3), name2;
+      }
+    return;
+  }
+  let k2 = settledKey(epoch, toolCallId), name = settledCardByToolCallId.get(k2);
+  if (name !== void 0)
+    return settledCardByToolCallId.delete(k2), name;
+}
 function retractApprovalCard(callKey, cause) {
   let handle2 = liveApprovalCards.get(callKey);
   return handle2 === void 0 ? !1 : (liveApprovalCards.delete(callKey), handle2.retract(cause), !0);
@@ -291246,9 +291637,22 @@ function markApprovalCardMovedToDurableQueue(callKey) {
   let handle2 = liveApprovalCards.get(callKey);
   return handle2 === void 0 ? !1 : handle2.windowClosed("parked-frame");
 }
-var liveApprovalCards, init_liveApprovalCardHandles = __esm({
+function markApprovalCardAutoDenied(toolCallId, streamEpoch) {
+  if (typeof toolCallId != "string" || toolCallId === "") return !1;
+  let born = callKeyByToolCallId.get(toolCallId);
+  if (born === void 0 || streamEpoch !== void 0 && born.epoch !== streamEpoch) return !1;
+  let handle2 = liveApprovalCards.get(born.callKey);
+  return handle2 === void 0 ? !1 : handle2.windowClosed("auto-denied");
+}
+function surfaceToolEndAutoDenied(ev, streamEpoch) {
+  let r = resolveToolEndAutoDenied(ev, streamEpoch);
+  return r.kind !== "late" ? r.kind : surfaceLateDecideOutcome(approvalAutoDeniedRow(r.toolName)) ? "late" : "late-unsurfaced";
+}
+var liveApprovalCards, callKeyByToolCallId, SETTLED_CARD_MAX, settledCardByToolCallId, settledKey, terminalSeenByToolCallId, init_liveApprovalCardHandles = __esm({
   "build-src/src/sema/liveApprovalCardHandles.ts"() {
-    liveApprovalCards = /* @__PURE__ */ new Map();
+    init_askParkExpiry();
+    init_liveSessionStore();
+    liveApprovalCards = /* @__PURE__ */ new Map(), callKeyByToolCallId = /* @__PURE__ */ new Map(), SETTLED_CARD_MAX = 64, settledCardByToolCallId = /* @__PURE__ */ new Map(), settledKey = (epoch, toolCallId) => `${String(epoch)}:${toolCallId}`, terminalSeenByToolCallId = /* @__PURE__ */ new Set();
   }
 });
 
@@ -367524,27 +367928,6 @@ var arm, DEVICE_LANE_ABSENT_CODE, DEVICE_RUN_STORE_ABSENT_CODE, DEVICE_SERVICE_T
   }
 });
 
-// build-src/src/sema/resumeRefusalCopy.ts
-function resumeRefusalFromError(err8) {
-  if (typeof err8 != "object" || err8 === null) return null;
-  let e = err8, code2 = e.errorCode;
-  if (typeof code2 != "string" || !RESUME_REFUSAL_CODES.includes(code2)) return null;
-  let sec = e.retryAfterSec;
-  return {
-    code: code2,
-    ...typeof sec == "number" && Number.isFinite(sec) && sec >= 0 ? { retryAfterSec: sec } : {}
-  };
-}
-function resumeRefusalContent(detail) {
-  let parts = [];
-  return detail.code === "resume.placement_mismatch" ? (parts.push("This resume named a different placement root than the one recorded when the work was parked"), parts.push("The engine refused it before consuming anything \u2014 the parked work is untouched"), parts.push("Retry with the recorded root, or omit the placement root to inherit it")) : (parts.push("The deployment's resume preflight refused this attempt"), parts.push("The refusal happened before the commit \u2014 your decision was not consumed"), parts.push("The engine line above says whether this token can still be redeemed")), parts.join(" \xB7 ");
-}
-var RESUME_REFUSAL_CODES, init_resumeRefusalCopy = __esm({
-  "build-src/src/sema/resumeRefusalCopy.ts"() {
-    RESUME_REFUSAL_CODES = ["resume.placement_mismatch", "resume.preflight_rejected"];
-  }
-});
-
 // build-src/src/sema/scenarioNotAllowedCopy.ts
 function scenarioNotAllowedContent(detail, requestedScenario) {
   let parts = [];
@@ -367585,7 +367968,7 @@ var init_apiErrorSupplement = __esm({
   "build-src/src/sema/apiErrorSupplement.ts"() {
     init_devicesWire();
     init_quotaExhaustedCopy();
-    init_resumeRefusalCopy();
+    init_dist();
     init_scenarioNotAllowedCopy();
   }
 });
@@ -368791,12 +369174,31 @@ function resolveEngineEntry() {
 function localEngineVersion() {
   let entry = resolveEngineEntry();
   if (entry)
+    return engineVersionOfEntry(entry);
+}
+function engineVersionOfEntry(entry) {
+  let readVersion = (dir) => {
     try {
-      let pkg = JSON.parse(readFileSync36(join124(entry.cwd, "package.json"), "utf8"));
+      let pkg = JSON.parse(readFileSync36(join124(dir, "package.json"), "utf8"));
       return typeof pkg.version == "string" && pkg.version.length > 0 ? pkg.version : void 0;
     } catch {
       return;
     }
+  }, script = entry.args[0], fromEntry;
+  if (typeof script == "string" && script.length > 0) {
+    let dir = dirname59(script);
+    for (let i = 0; i < 6 && dir !== dirname59(dir); i++) {
+      if (existsSync23(join124(dir, "package.json"))) {
+        fromEntry = readVersion(dir);
+        break;
+      }
+      dir = dirname59(dir);
+    }
+  }
+  let fromCwd = readVersion(entry.cwd);
+  return fromEntry !== void 0 && fromCwd !== void 0 && fromEntry !== fromCwd && logForDebugging(
+    `[engine-lifecycle] torn engine install: entry ${script} belongs to ${fromEntry} but cwd ${entry.cwd} is ${fromCwd} \u2014 version gate follows the ENTRY (what actually runs)`
+  ), fromEntry ?? fromCwd;
 }
 function localDistNewerThanEngine(wantVersion, engineVersion2) {
   if (engineVersion2 === wantVersion) return !1;
@@ -401427,30 +401829,18 @@ var sema_brand_default, init_sema_brand = __esm({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.100",
+        version: "1.0.102",
         notes: [
-          'If the local engine is older than this CLI build and nothing is running (no turn, no background tasks, no other sema session mid-turn), sema now switches to the newer engine on its own and says so in the transcript. When something is running, the footer banner now reads like "engine 7.55.0 running \xB7 7.57.0 installed (fixes not active) \xB7 ctrl+u to switch \u2014 interrupts N background tasks" instead of "engine update ready".',
-          "Approval cards whose window has closed no longer run on a single Yes: the first Yes shows a confirmation that says how long ago the window closed and what happens if you approve late; the second Yes approves. No still denies immediately, and cards inside their window are unchanged.",
-          "Permission rules such as Bash(touch:*) or Bash(npm run build:*) now auto-approve commands that create or write files inside the working directory (default mode). Previously those commands still prompted even with a matching allow rule; commands that write outside the working directory still prompt.",
-          `Choosing "Yes, and don't ask again for: <rule>" on an approval card now saves just that rule. It no longer silently allowed every call of that tool for the rest of the session.`,
-          "Turning file checkpointing off in /config now takes effect on the next turn instead of after a restart.",
-          "When you resume a session whose run is parked on an approval that no longer exists on the engine, sema now offers to cancel that run and send your message, or to leave it, instead of only suggesting /clear.",
-          "A sema started from inside an engine-run command (for example a hook or a Bash step) no longer writes a second state file under ~/.sema, so onboarding, directory trust, and marketplace state are not reset.",
-          "The bundled engine is 7.57.0: model request failures and retries are now written to the engine log, and secrets are scrubbed from stored run results.",
-          "The engine now refuses to let the model rewrite sema's own settings files (anything under ~/.sema and the other configuration roots), and the refusal is shown in the transcript instead of silently failing. Bundled engine is 7.59.0.",
-          "Switching models in /model no longer gets the whole model list rejected when an entry carries display-only keys; the switch takes effect without restarting the engine.",
-          "Typing while the prompt is still starting up no longer echoes raw characters or drops your Enter: keys are captured from the first millisecond and seeded into the input box once it is ready.",
-          "Control keys that arrive in the same burst as text (for example ctrl+U or a slash command typed quickly under load) are handled as keys again instead of landing in the input box as literal characters.",
-          "When the model has not sent its first token yet, the spinner line says so with the elapsed time instead of looking frozen; retry status shows what it is waiting on.",
-          'Messages from sub-agents and from other sema sessions now appear as their own collapsed rows ("Message from @name: \u2026", ctrl+o to expand) instead of being folded into a generic background-task card.',
-          "Tools removed by a model gate are announced once in the transcript with the way to restore them, and /doctor now reports whether auto mode is actually armed on the engine.",
-          "Permission rules and settings descriptions now refer to ~/.sema instead of ~/.claude, so allow rules written for the real configuration directory match.",
-          "MCP server connection warnings are shown once per session instead of on every message, and agent definitions that reference an MCP tool the server does not offer now get a hint instead of silently losing the tool.",
-          "sema ps, sema logs and sema attach exit normally again after printing their result (they no longer hang in the terminal), and ctrl+C works in those commands."
+          `Approval cards now carry the facts behind the ask: when the auto-deny limit tripped (counts, which limit, and how long until the engine auto-denies), when an org rule, an unreachable org rule store or a hook asked for the review, and why no "don't ask again" offer is available (mandated gate, shadowed by a higher-priority rule, or a lane that cannot persist rules). Routine asks add no extra line.`,
+          `When an approval window closes and the engine later auto-denies that call (auto-deny limit reached), the transcript now says so with a dedicated line instead of leaving the earlier "the engine's policy decides" note standing; the correction is bound to the card's own session and tool call, so a later session never inherits it.`,
+          `/doctor has a new "MCP servers (engine leg)" row read from the engine's wiring manifest: "not observed" when no run has reported it, "declared no MCP servers" when the engine leg reported an empty list, otherwise one entry per server with status, tool count, error code and source label ("source not declared" when the engine did not carry one).`,
+          "The engine version gate now follows the entry script's own package, so a torn install (new package on disk, old entry still running) is reported once and no longer triggers a second automatic restart.",
+          "The bundled engine is 7.62.0 (core 7.5.2, settings-schema 1.7.1): MCP servers declared with a source label keep it on the wiring manifest. Known issue: with this engine, writing `source: null` for a server in config.d/mcp.json empties the whole MCP server list for that engine \u2014 omit the key or use a string until the next engine update.",
+          'The SQL engine row in `sema doctor` no longer claims "local file stores" when the engine reports no SQL posture; it now says the backend is either not configured or its initialization was refused and points at the engine log.'
         ]
       },
-      productVersion: "1.0.100",
-      announcement: `sema 1.0.100 \u2014 the engine now refuses to let the model rewrite sema's own settings file (and says so on screen), switching models in /model takes effect without restarting the engine, typing before the prompt is ready no longer loses your Enter or leaves control characters in the input box, a stall while waiting for the model's first token is shown on the spinner instead of looking frozen, messages from other sessions and sub-agents appear as their own rows, tools removed by a model gate are announced with how to restore them, /doctor reports whether auto mode is actually armed, and sema ps/logs/attach exit cleanly again. Everything listed for 1.0.99 (engine auto-switch, late-approval confirmation, allow rules for file-writing commands, per-rule "don't ask again") ships here too \u2014 1.0.99 was never published.`,
+      productVersion: "1.0.102",
+      announcement: 'sema 1.0.102 \u2014 the bundled engine is 7.62.0 (MCP servers can carry a source label on the wiring manifest), approval cards now explain auto-deny limits, org rules, hooks and why a rule offer is missing, a card whose approval window closed is corrected when the engine auto-denies the call, /doctor gains an "MCP servers (engine leg)" row, and the engine version gate follows the entry script so a torn install no longer restarts the engine twice.',
       version: "1.0.91"
     };
   }
@@ -405783,30 +406173,18 @@ var require_sema_brand = __commonJS({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.100",
+        version: "1.0.102",
         notes: [
-          'If the local engine is older than this CLI build and nothing is running (no turn, no background tasks, no other sema session mid-turn), sema now switches to the newer engine on its own and says so in the transcript. When something is running, the footer banner now reads like "engine 7.55.0 running \xB7 7.57.0 installed (fixes not active) \xB7 ctrl+u to switch \u2014 interrupts N background tasks" instead of "engine update ready".',
-          "Approval cards whose window has closed no longer run on a single Yes: the first Yes shows a confirmation that says how long ago the window closed and what happens if you approve late; the second Yes approves. No still denies immediately, and cards inside their window are unchanged.",
-          "Permission rules such as Bash(touch:*) or Bash(npm run build:*) now auto-approve commands that create or write files inside the working directory (default mode). Previously those commands still prompted even with a matching allow rule; commands that write outside the working directory still prompt.",
-          `Choosing "Yes, and don't ask again for: <rule>" on an approval card now saves just that rule. It no longer silently allowed every call of that tool for the rest of the session.`,
-          "Turning file checkpointing off in /config now takes effect on the next turn instead of after a restart.",
-          "When you resume a session whose run is parked on an approval that no longer exists on the engine, sema now offers to cancel that run and send your message, or to leave it, instead of only suggesting /clear.",
-          "A sema started from inside an engine-run command (for example a hook or a Bash step) no longer writes a second state file under ~/.sema, so onboarding, directory trust, and marketplace state are not reset.",
-          "The bundled engine is 7.57.0: model request failures and retries are now written to the engine log, and secrets are scrubbed from stored run results.",
-          "The engine now refuses to let the model rewrite sema's own settings files (anything under ~/.sema and the other configuration roots), and the refusal is shown in the transcript instead of silently failing. Bundled engine is 7.59.0.",
-          "Switching models in /model no longer gets the whole model list rejected when an entry carries display-only keys; the switch takes effect without restarting the engine.",
-          "Typing while the prompt is still starting up no longer echoes raw characters or drops your Enter: keys are captured from the first millisecond and seeded into the input box once it is ready.",
-          "Control keys that arrive in the same burst as text (for example ctrl+U or a slash command typed quickly under load) are handled as keys again instead of landing in the input box as literal characters.",
-          "When the model has not sent its first token yet, the spinner line says so with the elapsed time instead of looking frozen; retry status shows what it is waiting on.",
-          'Messages from sub-agents and from other sema sessions now appear as their own collapsed rows ("Message from @name: \u2026", ctrl+o to expand) instead of being folded into a generic background-task card.',
-          "Tools removed by a model gate are announced once in the transcript with the way to restore them, and /doctor now reports whether auto mode is actually armed on the engine.",
-          "Permission rules and settings descriptions now refer to ~/.sema instead of ~/.claude, so allow rules written for the real configuration directory match.",
-          "MCP server connection warnings are shown once per session instead of on every message, and agent definitions that reference an MCP tool the server does not offer now get a hint instead of silently losing the tool.",
-          "sema ps, sema logs and sema attach exit normally again after printing their result (they no longer hang in the terminal), and ctrl+C works in those commands."
+          `Approval cards now carry the facts behind the ask: when the auto-deny limit tripped (counts, which limit, and how long until the engine auto-denies), when an org rule, an unreachable org rule store or a hook asked for the review, and why no "don't ask again" offer is available (mandated gate, shadowed by a higher-priority rule, or a lane that cannot persist rules). Routine asks add no extra line.`,
+          `When an approval window closes and the engine later auto-denies that call (auto-deny limit reached), the transcript now says so with a dedicated line instead of leaving the earlier "the engine's policy decides" note standing; the correction is bound to the card's own session and tool call, so a later session never inherits it.`,
+          `/doctor has a new "MCP servers (engine leg)" row read from the engine's wiring manifest: "not observed" when no run has reported it, "declared no MCP servers" when the engine leg reported an empty list, otherwise one entry per server with status, tool count, error code and source label ("source not declared" when the engine did not carry one).`,
+          "The engine version gate now follows the entry script's own package, so a torn install (new package on disk, old entry still running) is reported once and no longer triggers a second automatic restart.",
+          "The bundled engine is 7.62.0 (core 7.5.2, settings-schema 1.7.1): MCP servers declared with a source label keep it on the wiring manifest. Known issue: with this engine, writing `source: null` for a server in config.d/mcp.json empties the whole MCP server list for that engine \u2014 omit the key or use a string until the next engine update.",
+          'The SQL engine row in `sema doctor` no longer claims "local file stores" when the engine reports no SQL posture; it now says the backend is either not configured or its initialization was refused and points at the engine log.'
         ]
       },
-      productVersion: "1.0.100",
-      announcement: `sema 1.0.100 \u2014 the engine now refuses to let the model rewrite sema's own settings file (and says so on screen), switching models in /model takes effect without restarting the engine, typing before the prompt is ready no longer loses your Enter or leaves control characters in the input box, a stall while waiting for the model's first token is shown on the spinner instead of looking frozen, messages from other sessions and sub-agents appear as their own rows, tools removed by a model gate are announced with how to restore them, /doctor reports whether auto mode is actually armed, and sema ps/logs/attach exit cleanly again. Everything listed for 1.0.99 (engine auto-switch, late-approval confirmation, allow rules for file-writing commands, per-rule "don't ask again") ships here too \u2014 1.0.99 was never published.`,
+      productVersion: "1.0.102",
+      announcement: 'sema 1.0.102 \u2014 the bundled engine is 7.62.0 (MCP servers can carry a source label on the wiring manifest), approval cards now explain auto-deny limits, org rules, hooks and why a rule offer is missing, a card whose approval window closed is corrected when the engine auto-denies the call, /doctor gains an "MCP servers (engine leg)" row, and the engine version gate follows the entry script so a torn install no longer restarts the engine twice.',
       version: "1.0.91"
     };
   }
@@ -426866,9 +427244,10 @@ var AUTO_MODE_DENIAL_LIMIT_DEFAULTS, init_auto_mode_defaults = __esm({
 });
 
 // node_modules/@sema-agent/core/dist/core/auto-mode-arming.js
-var init_auto_mode_arming = __esm({
+var NO_BOUND_CEILING, init_auto_mode_arming = __esm({
   "node_modules/@sema-agent/core/dist/core/auto-mode-arming.js"() {
     init_auto_mode_defaults();
+    NO_BOUND_CEILING = Number.POSITIVE_INFINITY;
   }
 });
 
@@ -430056,9 +430435,9 @@ function makeProtocolNamespace(id, prefix) {
 function protocolOf(name) {
   return PROTOCOL_TABLE.find((ns) => name.startsWith(ns.prefix));
 }
-var MCP_PREFIX_NAME, A2A_PREFIX_NAME, MCP_NAMESPACE, A2A_NAMESPACE, PROTOCOL_TABLE, init_protocol_table = __esm({
+var MCP_PREFIX_NAME, A2A_PREFIX_NAME, MCP_NAMESPACE, A2A_NAMESPACE, PROTOCOL_TABLE, NAMESPACED_NAME_SHAPES, init_protocol_table = __esm({
   "node_modules/@sema-agent/core/dist/core/protocol-table.js"() {
-    MCP_PREFIX_NAME = "mcp__", A2A_PREFIX_NAME = "a2a__", MCP_NAMESPACE = makeProtocolNamespace("mcp", MCP_PREFIX_NAME), A2A_NAMESPACE = makeProtocolNamespace("a2a", A2A_PREFIX_NAME), PROTOCOL_TABLE = [MCP_NAMESPACE, A2A_NAMESPACE];
+    MCP_PREFIX_NAME = "mcp__", A2A_PREFIX_NAME = "a2a__", MCP_NAMESPACE = makeProtocolNamespace("mcp", MCP_PREFIX_NAME), A2A_NAMESPACE = makeProtocolNamespace("a2a", A2A_PREFIX_NAME), PROTOCOL_TABLE = [MCP_NAMESPACE, A2A_NAMESPACE], NAMESPACED_NAME_SHAPES = PROTOCOL_TABLE.map((ns) => `${ns.prefix}<peer>__<tool>`).join(", ");
   }
 });
 
@@ -430108,6 +430487,7 @@ import { tmpdir as tmpdir12 } from "node:os";
 import { join as join153 } from "node:path";
 var MCP_PREFIX, MCP_IDLE_TIMEOUT_STDIO_DEFAULT_MS, MCP_IDLE_TIMEOUT_HTTP_DEFAULT_MS, MCP_BLOB_DIR, MCP_SCHEMA_CHILD_SEAT, LIST_ENTRY_FINGERPRINT_MAX_CHARS, LOOP_REWIND_FINGERPRINT_MAX_CHARS, init_mcp4 = __esm({
   "node_modules/@sema-agent/core/dist/core/mcp.js"() {
+    init_untrusted_egress();
     init_protocol_table();
     init_protocol_naming();
     init_client5();
@@ -430690,6 +431070,9 @@ function refuseOutOfContractDecision(d4, opts) {
     return d4;
   if (Object.prototype.hasOwnProperty.call(d4, RETIRED_TEXT_FIELD))
     return { action: "deny", message: RETIRED_TEXT_FIELD_DENY_MESSAGE, decisionReason: "rule" };
+  let fb = d4.denialLimitFallback;
+  if (typeof fb == "object" && fb !== null && fb.autoDenyAfterMs !== void 0)
+    return { action: "deny", message: RETIRED_WINDOW_MEMBER_DENY_MESSAGE, decisionReason: "rule" };
   if (opts?.reasonIsNonInput === !0)
     return d4;
   let dr = d4.decisionReason;
@@ -430819,7 +431202,7 @@ function combinePolicies(...policies) {
     }
   };
 }
-var DECISION_REASONS, DECISION_REASON_SET, ALLOW, RETIRED_TEXT_FIELD, RETIRED_TEXT_FIELD_DENY_MESSAGE, COARSE_SHELL_TOOLS, CASE_INSENSITIVE_FS, ASK_DENY_RESOLUTION_VALUES, ASK_DENY_RESOLUTION_SET, coreMintedResolutions, init_tool_policy = __esm({
+var DECISION_REASONS, DECISION_REASON_SET, ALLOW, RETIRED_TEXT_FIELD, RETIRED_WINDOW_MEMBER, RETIRED_WINDOW_MEMBER_DENY_MESSAGE, RETIRED_TEXT_FIELD_DENY_MESSAGE, COARSE_SHELL_TOOLS, CASE_INSENSITIVE_FS, ASK_DENY_RESOLUTION_VALUES, ASK_DENY_RESOLUTION_SET, coreMintedResolutions, init_tool_policy = __esm({
   "node_modules/@sema-agent/core/dist/core/tool-policy.js"() {
     init_ask_class();
     init_auto_mode_arming();
@@ -430830,7 +431213,7 @@ var DECISION_REASONS, DECISION_REASON_SET, ALLOW, RETIRED_TEXT_FIELD, RETIRED_TE
     init_protocol_table();
     init_safety();
     DECISION_REASONS = ["rule", "mode", "hook", "safety", "classifier", "persisted_rule", "sandbox", "org_rule", "org_unavailable"], DECISION_REASON_SET = new Set(DECISION_REASONS);
-    ALLOW = { action: "allow" }, RETIRED_TEXT_FIELD = "reason", RETIRED_TEXT_FIELD_DENY_MESSAGE = `a permission decision carries the retired "${RETIRED_TEXT_FIELD}" field \u2014 rename it to "message" (the one text field a decision carries); denied fail-closed rather than executing a decision whose text this layer cannot read`;
+    ALLOW = { action: "allow" }, RETIRED_TEXT_FIELD = "reason", RETIRED_WINDOW_MEMBER = "autoDenyAfterMs", RETIRED_WINDOW_MEMBER_DENY_MESSAGE = `a permission decision's "denialLimitFallback" carries "${RETIRED_WINDOW_MEMBER}" \u2014 the decision names the counts only; the auto-deny window is decided by the ask's route (a live approver arms it, every other route runs none) and cannot be declared by a policy; denied fail-closed rather than silently replacing the declared number`, RETIRED_TEXT_FIELD_DENY_MESSAGE = `a permission decision carries the retired "${RETIRED_TEXT_FIELD}" field \u2014 rename it to "message" (the one text field a decision carries); denied fail-closed rather than executing a decision whose text this layer cannot read`;
     COARSE_SHELL_TOOLS = ["Bash", "Monitor"], CASE_INSENSITIVE_FS = process.platform === "darwin" || process.platform === "win32", ASK_DENY_RESOLUTION_VALUES = [
       "human_refused",
       "window_expired",
@@ -430845,6 +431228,20 @@ var DECISION_REASONS, DECISION_REASON_SET, ALLOW, RETIRED_TEXT_FIELD, RETIRED_TE
   }
 });
 
+// node_modules/@sema-agent/core/dist/core/auto-mode.js
+var init_auto_mode = __esm({
+  "node_modules/@sema-agent/core/dist/core/auto-mode.js"() {
+    init_auto_mode_defaults();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/ask-origin.js
+var ASK_ORIGINS, ASK_ORIGIN_SET, init_ask_origin = __esm({
+  "node_modules/@sema-agent/core/dist/core/ask-origin.js"() {
+    ASK_ORIGINS = ["content_question", "unresolvable", "org_unavailable", "org_rule", "hook", "ask_rule", "denial_limit_fallback", "policy"], ASK_ORIGIN_SET = new Set(ASK_ORIGINS);
+  }
+});
+
 // node_modules/@sema-agent/core/dist/core/permission-rule-model.js
 function foldSpacing(s) {
   let out6 = "", quote2, pendingGap = !1;
@@ -431203,6 +431600,8 @@ var MAX_PENDING_STEER_CHARS, PENDING_STEER_QUEUE_BYTE_BUDGET_BYTES, MAX_PENDING_
     init_harness();
     init_untrusted_text();
     init_tool_policy();
+    init_auto_mode();
+    init_ask_origin();
     init_permission_rule_model();
     init_untrusted_egress();
     init_ask_question();
@@ -432807,13 +433206,13 @@ function assertRedemptionNotQuarantined(quarantined, delta) {
   if (hit !== void 0)
     throw new Error(`this approval's add (dot ${delta.add.dot.actor}#${delta.add.dot.counter}) was quarantined (${hit.reason}) \u2014 replaying the old record cannot revive it; a new consent (a new ask, a new record, a new dot) is required`);
 }
-var PERMISSION_RULE_WRITER, ADD_ONLY_KEYS, InMemoryPermissionRuleStore, init_permission_rule_store = __esm({
+var PERMISSION_RULE_WRITER, ADD_ONLY_KEYS, InMemoryDurableRulePartition, init_permission_rule_store = __esm({
   "node_modules/@sema-agent/core/dist/core/permission-rule-store.js"() {
     init_canonical_json();
     init_permission_rule_model();
     PERMISSION_RULE_WRITER = "__semaPermissionRuleWriter";
     ADD_ONLY_KEYS = ["add", "redemption", "rule", "command", "match", "tool"];
-    InMemoryPermissionRuleStore = class {
+    InMemoryDurableRulePartition = class {
       actor;
       now;
       durability = "process-local";
@@ -432874,11 +433273,11 @@ var PERMISSION_RULE_WRITER, ADD_ONLY_KEYS, InMemoryPermissionRuleStore, init_per
 });
 
 // node_modules/@sema-agent/core/dist/core/permission-rule-org.js
-var ORG_FETCHED_AT_SKEW_ALLOWANCE_MS, init_permission_rule_org = __esm({
+var ORG_FETCHED_AT_SKEW_ALLOWANCE_MS, UNGOVERNED_ORG_RESOLUTION, init_permission_rule_org = __esm({
   "node_modules/@sema-agent/core/dist/core/permission-rule-org.js"() {
     init_permission_rule_model();
     init_permission_rule_store();
-    ORG_FETCHED_AT_SKEW_ALLOWANCE_MS = 5 * 6e4;
+    ORG_FETCHED_AT_SKEW_ALLOWANCE_MS = 5 * 6e4, UNGOVERNED_ORG_RESOLUTION = Object.freeze({ source: "org", status: "ungoverned", rules: [], disclosures: [] });
   }
 });
 
@@ -433045,82 +433444,6 @@ var init_compaction_call_options = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/auto-mode.js
-var init_auto_mode = __esm({
-  "node_modules/@sema-agent/core/dist/core/auto-mode.js"() {
-    init_auto_mode_defaults();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/runner/denial-limit-arms.js
-var init_denial_limit_arms = __esm({
-  "node_modules/@sema-agent/core/dist/core/runner/denial-limit-arms.js"() {
-    init_auto_mode();
-    init_types21();
-    init_untrusted_text();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/auto-mode-prompt-assets.js
-var init_auto_mode_prompt_assets = __esm({
-  "node_modules/@sema-agent/core/dist/core/auto-mode-prompt-assets.js"() {
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/auto-mode-prompt.js
-var init_auto_mode_prompt = __esm({
-  "node_modules/@sema-agent/core/dist/core/auto-mode-prompt.js"() {
-    init_auto_mode_defaults();
-    init_auto_mode_prompt_assets();
-    init_untrusted_text();
-    init_auto_mode_defaults();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/a2a-task-state.js
-var A2A_TASK_STATES, init_a2a_task_state = __esm({
-  "node_modules/@sema-agent/core/dist/core/a2a-task-state.js"() {
-    A2A_TASK_STATES = [
-      "submitted",
-      "working",
-      "input-required",
-      "completed",
-      "canceled",
-      "failed",
-      "rejected",
-      "auth-required",
-      "unknown"
-    ];
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/a2a.js
-var A2A_CALL_TOTAL_TIMEOUT_MS, A2A_RESPONSE_MAX_BYTES, A2A_STATE_SET, init_a2a = __esm({
-  "node_modules/@sema-agent/core/dist/core/a2a.js"() {
-    init_build3();
-    init_a2a_task_state();
-    init_mcp4();
-    init_protocol_naming();
-    init_protocol_table();
-    init_untrusted_text();
-    A2A_CALL_TOTAL_TIMEOUT_MS = 10 * 6e4, A2A_RESPONSE_MAX_BYTES = 8 * 1024 * 1024, A2A_STATE_SET = new Set(A2A_TASK_STATES);
-  }
-});
-
-// node_modules/@sema-agent/core/dist/agents/agent-transcript-tool.js
-var init_agent_transcript_tool = __esm({
-  "node_modules/@sema-agent/core/dist/agents/agent-transcript-tool.js"() {
-    init_build3();
-    init_tools3();
-    init_background_agent_store();
-    init_task_registry();
-    init_untrusted_text();
-    init_subagent_steps();
-    init_subagent();
-    init_retain_ledger();
-  }
-});
-
 // node_modules/@sema-agent/core/dist/core/mailbox-store.js
 var init_mailbox_store = __esm({
   "node_modules/@sema-agent/core/dist/core/mailbox-store.js"() {
@@ -433228,114 +433551,11 @@ var uplinkSeqGlobal, REVIVE_LEASE_TTL_MS, init_send_message_tool = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/runner/session-rule-policy.js
-var PATH_WRITE_TOOLS, PATH_CONFINABLE_WRITE_TOOLS, init_session_rule_policy = __esm({
-  "node_modules/@sema-agent/core/dist/core/runner/session-rule-policy.js"() {
-    init_safety();
-    init_safety();
-    init_tool_policy();
-    PATH_WRITE_TOOLS = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit"]), PATH_CONFINABLE_WRITE_TOOLS = /* @__PURE__ */ new Set([...PATH_WRITE_TOOLS, "NotebookEdit"]);
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/skill-tool-specifier.js
-var SPECIFIER_ENFORCED_TOOLS, init_skill_tool_specifier = __esm({
-  "node_modules/@sema-agent/core/dist/core/skill-tool-specifier.js"() {
-    init_permission_rules();
-    init_tool_policy();
-    init_bash_readonly_classifier();
-    SPECIFIER_ENFORCED_TOOLS = new Set(COARSE_SHELL_TOOLS);
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/runner/active-skill-scope.js
-var init_active_skill_scope = __esm({
-  "node_modules/@sema-agent/core/dist/core/runner/active-skill-scope.js"() {
-    init_safety();
-    init_session_rule_policy();
-    init_skill_tool_specifier();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/hooks.js
-var objectPrototype, init_hooks3 = __esm({
-  "node_modules/@sema-agent/core/dist/core/hooks.js"() {
-    init_tool_policy();
-    init_ask_class();
-    init_auto_mode();
+// node_modules/@sema-agent/core/dist/core/runner/announce-once-ledger.js
+var init_announce_once_ledger = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/announce-once-ledger.js"() {
+    init_untrusted_egress();
     init_untrusted_text();
-    init_reminder_mint();
-    init_checkpoint_store();
-    init_ask_question();
-    init_safe_notify();
-    init_permission_rule_org();
-    objectPrototype = Object.prototype;
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/write-protect.js
-var freezeTable, WRITE_PROTECTED_DEFAULT_TABLE, init_write_protect = __esm({
-  "node_modules/@sema-agent/core/dist/core/write-protect.js"() {
-    init_safety();
-    init_session_rule_policy();
-    freezeTable = (rows2) => Object.freeze(rows2.map((r) => Object.freeze(r))), WRITE_PROTECTED_DEFAULT_TABLE = freezeTable([
-      { name: ".gitconfig", kind: "basename" },
-      { name: ".gitmodules", kind: "basename" },
-      { name: ".bashrc", kind: "basename" },
-      { name: ".bash_profile", kind: "basename" },
-      { name: ".zshrc", kind: "basename" },
-      { name: ".zprofile", kind: "basename" },
-      { name: ".profile", kind: "basename" },
-      { name: ".zshenv", kind: "basename" },
-      { name: ".zlogin", kind: "basename" },
-      { name: ".zlogout", kind: "basename" },
-      { name: ".bash_login", kind: "basename" },
-      { name: ".bash_aliases", kind: "basename" },
-      { name: ".bash_logout", kind: "basename" },
-      { name: ".envrc", kind: "basename" },
-      { name: ".ripgreprc", kind: "basename" },
-      { name: ".mcp.json", kind: "basename" },
-      { name: ".claude.json", kind: "basename" },
-      { name: ".npmrc", kind: "basename" },
-      { name: ".yarnrc", kind: "basename" },
-      { name: ".yarnrc.yml", kind: "basename" },
-      { name: ".pnp.cjs", kind: "basename" },
-      { name: ".pnp.loader.mjs", kind: "basename" },
-      { name: ".pnpmfile.cjs", kind: "basename" },
-      { name: "bunfig.toml", kind: "basename" },
-      { name: ".bunfig.toml", kind: "basename" },
-      { name: ".bazelrc", kind: "basename" },
-      { name: ".bazelversion", kind: "basename" },
-      { name: ".bazeliskrc", kind: "basename" },
-      { name: ".pre-commit-config.yaml", kind: "basename" },
-      { name: "lefthook.yml", kind: "basename" },
-      { name: ".lefthook.yml", kind: "basename" },
-      { name: "lefthook.yaml", kind: "basename" },
-      { name: ".lefthook.yaml", kind: "basename" },
-      { name: "gradle-wrapper.properties", kind: "basename" },
-      { name: "maven-wrapper.properties", kind: "basename" },
-      { name: ".devcontainer.json", kind: "basename" },
-      { name: "pyrightconfig.json", kind: "basename" },
-      { name: ".git", kind: "segment" },
-      { name: ".vscode", kind: "segment" },
-      { name: ".idea", kind: "segment" },
-      { name: ".claude", kind: "segment" },
-      { name: ".husky", kind: "segment" },
-      { name: ".cargo", kind: "segment" },
-      { name: ".devcontainer", kind: "segment" },
-      { name: ".yarn", kind: "segment" },
-      { name: ".mvn", kind: "segment" },
-      { name: ".config/git", kind: "segment-run" },
-      { name: ".ssh", kind: "segment" },
-      { name: ".gnupg", kind: "segment" }
-    ]);
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/cache-break-detector.js
-var SERVER_GAP_MS, init_cache_break_detector = __esm({
-  "node_modules/@sema-agent/core/dist/core/cache-break-detector.js"() {
-    SERVER_GAP_MS = 5 * 6e4;
   }
 });
 
@@ -433345,121 +433565,6 @@ var init_timeout = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/tool-name-aliases.js
-var RETIRED_TOOL_NAMES, init_tool_name_aliases = __esm({
-  "node_modules/@sema-agent/core/dist/core/tool-name-aliases.js"() {
-    RETIRED_TOOL_NAMES = /* @__PURE__ */ new Map([
-      ["read_file", 'renamed "Read"'],
-      ["edit_file", 'renamed "Edit"'],
-      ["write_file", 'renamed "Write"'],
-      ["bash", 'renamed "Bash"'],
-      ["bash_readonly", 'folded into "Bash" (read-only posture rides handsReadOnly/shellGate, not a tool name)'],
-      ["glob", 'renamed "Glob"'],
-      ["grep", 'renamed "Grep"'],
-      ["web_fetch", 'renamed "WebFetch"'],
-      ["tool_search", 'renamed "ToolSearch"'],
-      ["skill", 'renamed "Skill"'],
-      ["present_plan", 'renamed "ExitPlanMode"'],
-      ["enter_plan_mode", 'renamed "EnterPlanMode"'],
-      ["spawn_subagent", 'renamed "Agent"'],
-      ["CronCancel", 'renamed "CronDelete"'],
-      ["lsp", 'renamed "LSP"'],
-      ["submit_output", 'renamed "StructuredOutput"'],
-      ["repo_map", 'renamed "RepoMap"'],
-      ["read_tool_result", 'renamed "ReadToolResult"'],
-      ["report_blocked", 'renamed "ReportBlocked"'],
-      ["declare_done", 'renamed "DeclareDone"'],
-      ["run_workflow", 'renamed "Workflow"'],
-      ["RunWorkflow", 'renamed "Workflow"'],
-      ["Task", 'renamed "Agent" (a deployment-defined tool named "Task" is fine \u2014 this fires only when the name matches nothing in the roster)'],
-      ["BashOutput", 'renamed "TaskOutput"'],
-      ["AgentOutputTool", 'renamed "TaskOutput"'],
-      ["BashOutputTool", 'renamed "TaskOutput"'],
-      ["AgentOutput", 'renamed "TaskOutput"'],
-      ["WorkflowStatus", 'folded into "TaskOutput" (poll by runId)'],
-      ["KillShell", 'renamed "TaskStop"'],
-      ["KillBash", 'renamed "TaskStop"'],
-      ["ListMcpResources", 'renamed "ListMcpResourcesTool"'],
-      ["ReadMcpResource", 'renamed "ReadMcpResourceTool"'],
-      ["ReadMcpResourceDir", 'renamed "ReadMcpResourceDirTool"'],
-      ["MultiEdit", 'removed \u2014 "Edit" accepts the edits[] shape'],
-      ["Fork", 'removed \u2014 use Agent with subagent_type: "fork"'],
-      ["Sleep", 'removed \u2014 schedule a re-wake with CronCreate({schedule:{kind:"delay"}}) or wait with Monitor'],
-      ["Remember", "removed \u2014 memory is file-based; write the memory directory with the ordinary file tools"],
-      ["remember", "removed \u2014 memory is file-based; write the memory directory with the ordinary file tools"],
-      ["Recall", "removed \u2014 memory is file-based; read the memory directory with the ordinary file tools"],
-      ["recall", "removed \u2014 memory is file-based; read the memory directory with the ordinary file tools"]
-    ]);
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/lsp-protocol.js
-var init_lsp_protocol = __esm({
-  "node_modules/@sema-agent/core/dist/core/lsp-protocol.js"() {
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/shared-memory/types.js
-var SHARED_MEMORY_LIST_TOOL_NAME, SHARED_MEMORY_READ_TOOL_NAME, init_types27 = __esm({
-  "node_modules/@sema-agent/core/dist/core/shared-memory/types.js"() {
-    SHARED_MEMORY_LIST_TOOL_NAME = "memory_list", SHARED_MEMORY_READ_TOOL_NAME = "memory_read";
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/shared-memory/normalize.js
-var init_normalize = __esm({
-  "node_modules/@sema-agent/core/dist/core/shared-memory/normalize.js"() {
-    init_untrusted_text();
-    init_types27();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/shared-memory/tools.js
-var LIST_HINT, LIST_DESCRIPTION, READ_HINT, READ_DESCRIPTION, init_tools4 = __esm({
-  "node_modules/@sema-agent/core/dist/core/shared-memory/tools.js"() {
-    init_build3();
-    init_tools3();
-    init_normalize();
-    init_types27();
-    LIST_HINT = "List shared memory stores and their documents \u2014 check here before telling the user you do not have something.", LIST_DESCRIPTION = [
-      LIST_HINT,
-      "",
-      `List the memory documents in a memory store, sorted by path \u2014 each line gives a document's path, size, and last-updated date, but no content (use ${SHARED_MEMORY_READ_TOOL_NAME} for that). Pass store (the store's id) to choose the store, path_prefix to list one directory, and the cursor from a previous call to continue a long listing. Call with no arguments at all to list the memory stores connected to this session \u2014 their ids, a one-line description, and whether each is writable or read-only; that set can change during the session, so re-check it whenever you are unsure which store to use.`,
-      "",
-      "When store is omitted this call lists the stores themselves, and path_prefix and cursor are ignored.",
-      "",
-      `Call ${SHARED_MEMORY_LIST_TOOL_NAME} early when context about the project or the work in it would help \u2014 and always before telling the user you do not have something. If a listed document looks relevant, ${SHARED_MEMORY_READ_TOOL_NAME} it.`
-    ].join(`
-`), READ_HINT = "Read one shared memory document by store id and path \u2014 treat it as a past snapshot, not the answer.", READ_DESCRIPTION = [
-      READ_HINT,
-      "",
-      "Read one memory document from a memory store by its store id and path.",
-      "",
-      "Read your memory often so corrections stick. Treat memories as past snapshots to verify against current sources, not the definitive answer.",
-      "",
-      "## When to access memories",
-      "- When memories seem relevant, or the user references prior work with them or others in their organization.",
-      "- You MUST access memory when the user explicitly asks you to check, recall, or remember.",
-      `- Call ${SHARED_MEMORY_LIST_TOOL_NAME} early when context about the project would help, and always before telling the user you do not have something; if a listed document looks relevant, ${SHARED_MEMORY_READ_TOOL_NAME} it.`,
-      "- If the user says to *ignore* or *not use* memory: Do not apply remembered facts, cite, compare against, or mention memory content.",
-      "- Memory records can become stale over time. Use memory as context for what was true at a given point in time. Before answering the user or building assumptions based solely on information in memory records, verify that the memory is still correct and up-to-date by reading the current state of the files or resources. If a recalled memory conflicts with current information, trust what you observe now \u2014 and update or remove the stale memory rather than acting on it.",
-      "",
-      "## Before recommending from memory",
-      "",
-      "A memory that names a specific function, file, or flag is a claim that it existed *when the memory was written*. It may have been renamed, removed, or never merged. Before recommending it:",
-      "",
-      "- If the memory names a file path: check the file exists.",
-      "- If the memory names a function or flag: grep for it.",
-      "- If the user is about to act on your recommendation (not just asking about history), verify first.",
-      "",
-      '"The memory says X exists" is not the same as "X exists now."',
-      "",
-      "A memory that summarizes repo state (activity logs, architecture snapshots) is frozen in time. If the user asks about *recent* or *current* state, prefer `git log` or reading the code over recalling the snapshot."
-    ].join(`
-`);
-  }
-});
-
 // node_modules/@sema-agent/core/dist/core/memory-vector.js
 var init_memory_vector = __esm({
   "node_modules/@sema-agent/core/dist/core/memory-vector.js"() {
@@ -433530,7 +433635,7 @@ var CONSOLIDATION_DEFAULTS, CONSOLIDATION_SEAT_FREEZE_GRACE_MS, init_consolidati
 });
 
 // node_modules/@sema-agent/core/dist/core/memory-engine/tools.js
-var MEMORY_SEARCH_TOOL_NAME2, MEMORY_GET_TOOL_NAME2, MEMORY_INDEX_TOOL_NAME, MEMORY_INDEX_PAGE_CAP_BYTES, MEMORY_GET_PAGE_CAP_BYTES, SEARCH_HINT, FENCE_SEMANTICS_SENTENCE, SEARCH_DESCRIPTION, GET_HINT, GET_DESCRIPTION, INDEX_HINT, INDEX_DESCRIPTION, init_tools5 = __esm({
+var MEMORY_SEARCH_TOOL_NAME2, MEMORY_GET_TOOL_NAME2, MEMORY_INDEX_TOOL_NAME, MEMORY_INDEX_PAGE_CAP_BYTES, MEMORY_GET_PAGE_CAP_BYTES, SEARCH_HINT, FENCE_SEMANTICS_SENTENCE, SEARCH_DESCRIPTION, GET_HINT, GET_DESCRIPTION, INDEX_HINT, INDEX_DESCRIPTION, init_tools4 = __esm({
   "node_modules/@sema-agent/core/dist/core/memory-engine/tools.js"() {
     init_build3();
     init_tools3();
@@ -433568,12 +433673,6 @@ var MEMORY_SEARCH_TOOL_NAME2, MEMORY_GET_TOOL_NAME2, MEMORY_INDEX_TOOL_NAME, MEM
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/compliance.js
-var init_compliance = __esm({
-  "node_modules/@sema-agent/core/dist/core/compliance.js"() {
-  }
-});
-
 // node_modules/@sema-agent/core/dist/core/memory-engine/dual-root.js
 var init_dual_root = __esm({
   "node_modules/@sema-agent/core/dist/core/memory-engine/dual-root.js"() {
@@ -433711,12 +433810,383 @@ var init_prepare_memory = __esm({
     init_engine5();
     init_memory_capture_optout();
     init_layout2();
-    init_tools5();
+    init_tools4();
     init_scope_contract();
     init_file_backend();
   }
 });
 
+// node_modules/@sema-agent/core/dist/core/runner/prepare-memory-engine-session.js
+var init_prepare_memory_engine_session = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-memory-engine-session.js"() {
+    init_content_origin();
+    init_delegation_provenance();
+    init_delegation_settlement();
+    init_protocol_table();
+    init_types21();
+    init_untrusted_text();
+    init_safety();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/shared-memory/types.js
+var SHARED_MEMORY_LIST_TOOL_NAME, SHARED_MEMORY_READ_TOOL_NAME, init_types27 = __esm({
+  "node_modules/@sema-agent/core/dist/core/shared-memory/types.js"() {
+    SHARED_MEMORY_LIST_TOOL_NAME = "memory_list", SHARED_MEMORY_READ_TOOL_NAME = "memory_read";
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-defer-classify.js
+var init_prepare_defer_classify = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-defer-classify.js"() {
+    init_tool_catalog();
+    init_fs();
+    init_ask_question();
+    init_tools4();
+    init_types27();
+    init_tool_disclosure();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-listings.js
+var init_prepare_listings = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-listings.js"() {
+    init_default6();
+    init_synthetic_tools();
+    init_turn_attachments();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-prompt-inputs.js
+var init_prepare_prompt_inputs = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-prompt-inputs.js"() {
+    init_default6();
+    init_remote_env();
+    init_git_status_frame();
+    init_turn_attachments();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/shared-memory/normalize.js
+var init_normalize = __esm({
+  "node_modules/@sema-agent/core/dist/core/shared-memory/normalize.js"() {
+    init_untrusted_text();
+    init_types27();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/shared-memory/tools.js
+var LIST_HINT, LIST_DESCRIPTION, READ_HINT, READ_DESCRIPTION, init_tools5 = __esm({
+  "node_modules/@sema-agent/core/dist/core/shared-memory/tools.js"() {
+    init_build3();
+    init_tools3();
+    init_normalize();
+    init_types27();
+    LIST_HINT = "List shared memory stores and their documents \u2014 check here before telling the user you do not have something.", LIST_DESCRIPTION = [
+      LIST_HINT,
+      "",
+      `List the memory documents in a memory store, sorted by path \u2014 each line gives a document's path, size, and last-updated date, but no content (use ${SHARED_MEMORY_READ_TOOL_NAME} for that). Pass store (the store's id) to choose the store, path_prefix to list one directory, and the cursor from a previous call to continue a long listing. Call with no arguments at all to list the memory stores connected to this session \u2014 their ids, a one-line description, and whether each is writable or read-only; that set can change during the session, so re-check it whenever you are unsure which store to use.`,
+      "",
+      "When store is omitted this call lists the stores themselves, and path_prefix and cursor are ignored.",
+      "",
+      `Call ${SHARED_MEMORY_LIST_TOOL_NAME} early when context about the project or the work in it would help \u2014 and always before telling the user you do not have something. If a listed document looks relevant, ${SHARED_MEMORY_READ_TOOL_NAME} it.`
+    ].join(`
+`), READ_HINT = "Read one shared memory document by store id and path \u2014 treat it as a past snapshot, not the answer.", READ_DESCRIPTION = [
+      READ_HINT,
+      "",
+      "Read one memory document from a memory store by its store id and path.",
+      "",
+      "Read your memory often so corrections stick. Treat memories as past snapshots to verify against current sources, not the definitive answer.",
+      "",
+      "## When to access memories",
+      "- When memories seem relevant, or the user references prior work with them or others in their organization.",
+      "- You MUST access memory when the user explicitly asks you to check, recall, or remember.",
+      `- Call ${SHARED_MEMORY_LIST_TOOL_NAME} early when context about the project would help, and always before telling the user you do not have something; if a listed document looks relevant, ${SHARED_MEMORY_READ_TOOL_NAME} it.`,
+      "- If the user says to *ignore* or *not use* memory: Do not apply remembered facts, cite, compare against, or mention memory content.",
+      "- Memory records can become stale over time. Use memory as context for what was true at a given point in time. Before answering the user or building assumptions based solely on information in memory records, verify that the memory is still correct and up-to-date by reading the current state of the files or resources. If a recalled memory conflicts with current information, trust what you observe now \u2014 and update or remove the stale memory rather than acting on it.",
+      "",
+      "## Before recommending from memory",
+      "",
+      "A memory that names a specific function, file, or flag is a claim that it existed *when the memory was written*. It may have been renamed, removed, or never merged. Before recommending it:",
+      "",
+      "- If the memory names a file path: check the file exists.",
+      "- If the memory names a function or flag: grep for it.",
+      "- If the user is about to act on your recommendation (not just asking about history), verify first.",
+      "",
+      '"The memory says X exists" is not the same as "X exists now."',
+      "",
+      "A memory that summarizes repo state (activity logs, architecture snapshots) is frozen in time. If the user asks about *recent* or *current* state, prefer `git log` or reading the code over recalling the snapshot."
+    ].join(`
+`);
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-project-context.js
+var init_prepare_project_context = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-project-context.js"() {
+    init_default6();
+    init_tools4();
+    init_memory4();
+    init_session4();
+    init_tools5();
+    init_types27();
+    init_tools3();
+    init_synthetic_tools();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/hooks.js
+var objectPrototype, init_hooks3 = __esm({
+  "node_modules/@sema-agent/core/dist/core/hooks.js"() {
+    init_tool_policy();
+    init_ask_class();
+    init_ask_origin();
+    init_auto_mode();
+    init_untrusted_text();
+    init_reminder_mint();
+    init_checkpoint_store();
+    init_ask_question();
+    init_safe_notify();
+    init_permission_rule_org();
+    objectPrototype = Object.prototype;
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/tool-name-aliases.js
+var RETIRED_TOOL_NAMES, init_tool_name_aliases = __esm({
+  "node_modules/@sema-agent/core/dist/core/tool-name-aliases.js"() {
+    RETIRED_TOOL_NAMES = /* @__PURE__ */ new Map([
+      ["read_file", 'renamed "Read"'],
+      ["edit_file", 'renamed "Edit"'],
+      ["write_file", 'renamed "Write"'],
+      ["bash", 'renamed "Bash"'],
+      ["bash_readonly", 'folded into "Bash" (read-only posture rides handsReadOnly/shellGate, not a tool name)'],
+      ["glob", 'renamed "Glob"'],
+      ["grep", 'renamed "Grep"'],
+      ["web_fetch", 'renamed "WebFetch"'],
+      ["tool_search", 'renamed "ToolSearch"'],
+      ["skill", 'renamed "Skill"'],
+      ["present_plan", 'renamed "ExitPlanMode"'],
+      ["enter_plan_mode", 'renamed "EnterPlanMode"'],
+      ["spawn_subagent", 'renamed "Agent"'],
+      ["CronCancel", 'renamed "CronDelete"'],
+      ["lsp", 'renamed "LSP"'],
+      ["submit_output", 'renamed "StructuredOutput"'],
+      ["repo_map", 'renamed "RepoMap"'],
+      ["read_tool_result", 'renamed "ReadToolResult"'],
+      ["report_blocked", 'renamed "ReportBlocked"'],
+      ["declare_done", 'renamed "DeclareDone"'],
+      ["run_workflow", 'renamed "Workflow"'],
+      ["RunWorkflow", 'renamed "Workflow"'],
+      ["Task", 'renamed "Agent" (a deployment-defined tool named "Task" is fine \u2014 this fires only when the name matches nothing in the roster)'],
+      ["BashOutput", 'renamed "TaskOutput"'],
+      ["AgentOutputTool", 'renamed "TaskOutput"'],
+      ["BashOutputTool", 'renamed "TaskOutput"'],
+      ["AgentOutput", 'renamed "TaskOutput"'],
+      ["WorkflowStatus", 'folded into "TaskOutput" (poll by runId)'],
+      ["KillShell", 'renamed "TaskStop"'],
+      ["KillBash", 'renamed "TaskStop"'],
+      ["ListMcpResources", 'renamed "ListMcpResourcesTool"'],
+      ["ReadMcpResource", 'renamed "ReadMcpResourceTool"'],
+      ["ReadMcpResourceDir", 'renamed "ReadMcpResourceDirTool"'],
+      ["MultiEdit", 'removed \u2014 "Edit" accepts the edits[] shape'],
+      ["Fork", 'removed \u2014 use Agent with subagent_type: "fork"'],
+      ["Sleep", 'removed \u2014 schedule a re-wake with CronCreate({schedule:{kind:"delay"}}) or wait with Monitor'],
+      ["Remember", "removed \u2014 memory is file-based; write the memory directory with the ordinary file tools"],
+      ["remember", "removed \u2014 memory is file-based; write the memory directory with the ordinary file tools"],
+      ["Recall", "removed \u2014 memory is file-based; read the memory directory with the ordinary file tools"],
+      ["recall", "removed \u2014 memory is file-based; read the memory directory with the ordinary file tools"]
+    ]);
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/session-rule-policy.js
+var PATH_WRITE_TOOLS, PATH_CONFINABLE_WRITE_TOOLS, init_session_rule_policy = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/session-rule-policy.js"() {
+    init_safety();
+    init_safety();
+    init_tool_policy();
+    PATH_WRITE_TOOLS = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit"]), PATH_CONFINABLE_WRITE_TOOLS = /* @__PURE__ */ new Set([...PATH_WRITE_TOOLS, "NotebookEdit"]);
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/skill-tool-specifier.js
+var SPECIFIER_ENFORCED_TOOLS, init_skill_tool_specifier = __esm({
+  "node_modules/@sema-agent/core/dist/core/skill-tool-specifier.js"() {
+    init_permission_rules();
+    init_tool_policy();
+    init_bash_readonly_classifier();
+    SPECIFIER_ENFORCED_TOOLS = new Set(COARSE_SHELL_TOOLS);
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/active-skill-scope.js
+var init_active_skill_scope = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/active-skill-scope.js"() {
+    init_safety();
+    init_session_rule_policy();
+    init_skill_tool_specifier();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/denial-limit-arms.js
+var init_denial_limit_arms = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/denial-limit-arms.js"() {
+    init_auto_mode();
+    init_auto_mode_arming();
+    init_types21();
+    init_untrusted_text();
+    init_ask_origin();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/inherited-ask-grants.js
+var init_inherited_ask_grants = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/inherited-ask-grants.js"() {
+    init_arg_summary();
+    init_tool_policy();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/permission-rule-lanes.js
+var init_permission_rule_lanes = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/permission-rule-lanes.js"() {
+    init_hooks3();
+    init_permission_rule_model();
+    init_permission_rule_org();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-policy-chain.js
+var init_prepare_policy_chain = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-policy-chain.js"() {
+    init_send_message_tool();
+    init_ask_class();
+    init_ask_question();
+    init_checkpoint_store();
+    init_hooks3();
+    init_permission_rules();
+    init_remote_env();
+    init_tool_policy();
+    init_tool_name_aliases();
+    init_protocol_table();
+    init_trace();
+    init_active_skill_scope();
+    init_denial_limit_arms();
+    init_inherited_ask_grants();
+    init_permission_rule_lanes();
+    init_session_rule_policy();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/media-byte-cap.js
+var init_media_byte_cap = __esm({
+  "node_modules/@sema-agent/core/dist/core/media-byte-cap.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/tool-result-budget.js
+var init_tool_result_budget = __esm({
+  "node_modules/@sema-agent/core/dist/core/tool-result-budget.js"() {
+    init_message_utils();
+    init_tool_result_store();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-context-lane.js
+var init_prepare_context_lane = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-context-lane.js"() {
+    init_harness();
+    init_context_edit();
+    init_context_guard();
+    init_media_byte_cap();
+    init_tool_result_budget();
+    init_tool_result_store();
+    init_trace();
+    init_types21();
+    init_git_status_frame();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/prompt-assembly/composer.js
+var SINGLE_BLOCK_LAYOUT, init_composer = __esm({
+  "node_modules/@sema-agent/core/dist/prompt-assembly/composer.js"() {
+    SINGLE_BLOCK_LAYOUT = { groups: [{ groupId: "body", untilRank: Number.POSITIVE_INFINITY, cacheControlBoundary: !0 }] };
+  }
+});
+
+// node_modules/@sema-agent/core/dist/prompt-assembly/assemble.js
+var init_assemble = __esm({
+  "node_modules/@sema-agent/core/dist/prompt-assembly/assemble.js"() {
+    init_default6();
+    init_composer();
+    init_sema_default();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/prompt-assembly/artifact.js
+var init_artifact = __esm({
+  "node_modules/@sema-agent/core/dist/prompt-assembly/artifact.js"() {
+    init_epoch();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/prompt-assembly/turn-snapshot.js
+var init_turn_snapshot = __esm({
+  "node_modules/@sema-agent/core/dist/prompt-assembly/turn-snapshot.js"() {
+    init_epoch();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/cache-break-detector.js
+var SERVER_GAP_MS, init_cache_break_detector = __esm({
+  "node_modules/@sema-agent/core/dist/core/cache-break-detector.js"() {
+    SERVER_GAP_MS = 5 * 6e4;
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prompt-hash-salt.js
+import { randomBytes as randomBytes25 } from "node:crypto";
+var PROMPT_HASH_SALT, init_prompt_hash_salt = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prompt-hash-salt.js"() {
+    PROMPT_HASH_SALT = randomBytes25(16);
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-turn-wiring.js
+var init_prepare_turn_wiring = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-turn-wiring.js"() {
+    init_assemble();
+    init_artifact();
+    init_turn_snapshot();
+    init_cache_break_detector();
+    init_task_registry();
+    init_tool_policy();
+    init_encoding();
+    init_fs();
+    init_safety();
+    init_prompt_hash_salt();
+    init_turn_attachments();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-prompt-assembly.js
+var init_prepare_prompt_assembly = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-prompt-assembly.js"() {
+    init_send_message_tool();
+    init_assemble();
+    init_artifact();
+    init_epoch();
+    init_sema_default();
+    init_tool_catalog();
+    init_default6();
+    init_protocol_table();
+    init_reminder_mint();
+    init_session4();
+    init_prompt_hash_salt();
+  }
+});
+
 // node_modules/@sema-agent/core/dist/core/retention.js
 var init_retention = __esm({
   "node_modules/@sema-agent/core/dist/core/retention.js"() {
@@ -433777,13 +434247,12 @@ var TASK_LIMIT_KEY_DICT, TASK_LIMIT_KEYS, init_prepare_config_doors = __esm({
 });
 
 // node_modules/@sema-agent/core/dist/core/runner/prepare-safety-scan.js
-var NAMESPACED_NAME_SHAPES, init_prepare_safety_scan = __esm({
+var init_prepare_safety_scan = __esm({
   "node_modules/@sema-agent/core/dist/core/runner/prepare-safety-scan.js"() {
     init_protocol_table();
     init_fs();
     init_tool_result_store();
     init_present_plan_tool();
-    NAMESPACED_NAME_SHAPES = PROTOCOL_TABLE.map((ns) => `${ns.prefix}<peer>__<tool>`).join(", ");
   }
 });
 
@@ -433812,17 +434281,9 @@ var init_session_file_state_replay = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/with-retry.js
-var init_with_retry = __esm({
-  "node_modules/@sema-agent/core/dist/core/with-retry.js"() {
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/runner/prepare-workspace-restore.js
-var init_prepare_workspace_restore = __esm({
-  "node_modules/@sema-agent/core/dist/core/runner/prepare-workspace-restore.js"() {
-    init_remote_env();
-    init_with_retry();
+// node_modules/@sema-agent/core/dist/core/runner/workspace-path.js
+var init_workspace_path = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/workspace-path.js"() {
   }
 });
 
@@ -433838,57 +434299,68 @@ var init_prepare_hands_readface = __esm({
     init_encoding();
     init_session_file_state_replay();
     init_types21();
-    init_prepare_workspace_restore();
+    init_workspace_path();
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/runner/edited-files-ledger.js
-var init_edited_files_ledger = __esm({
-  "node_modules/@sema-agent/core/dist/core/runner/edited-files-ledger.js"() {
+// node_modules/@sema-agent/core/dist/core/with-retry.js
+var init_with_retry = __esm({
+  "node_modules/@sema-agent/core/dist/core/with-retry.js"() {
   }
 });
 
-// node_modules/@sema-agent/core/dist/prompt-assembly/composer.js
-var SINGLE_BLOCK_LAYOUT, init_composer = __esm({
-  "node_modules/@sema-agent/core/dist/prompt-assembly/composer.js"() {
-    SINGLE_BLOCK_LAYOUT = { groups: [{ groupId: "body", untilRank: Number.POSITIVE_INFINITY, cacheControlBoundary: !0 }] };
+// node_modules/@sema-agent/core/dist/core/runner/remote-env-retry.js
+var init_remote_env_retry = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/remote-env-retry.js"() {
+    init_remote_env();
+    init_with_retry();
   }
 });
 
-// node_modules/@sema-agent/core/dist/prompt-assembly/assemble.js
-var init_assemble = __esm({
-  "node_modules/@sema-agent/core/dist/prompt-assembly/assemble.js"() {
-    init_default6();
-    init_composer();
-    init_sema_default();
+// node_modules/@sema-agent/core/dist/core/runner/prepare-workspace-restore.js
+var init_prepare_workspace_restore = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-workspace-restore.js"() {
+    init_remote_env();
+    init_remote_env_retry();
+    init_workspace_path();
+    init_remote_env_retry();
   }
 });
 
-// node_modules/@sema-agent/core/dist/prompt-assembly/artifact.js
-var init_artifact = __esm({
-  "node_modules/@sema-agent/core/dist/prompt-assembly/artifact.js"() {
-    init_epoch();
+// node_modules/@sema-agent/core/dist/core/runner/park-commit.js
+var init_park_commit = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/park-commit.js"() {
   }
 });
 
-// node_modules/@sema-agent/core/dist/prompt-assembly/turn-snapshot.js
-var init_turn_snapshot = __esm({
-  "node_modules/@sema-agent/core/dist/prompt-assembly/turn-snapshot.js"() {
-    init_epoch();
+// node_modules/@sema-agent/core/dist/core/runner/prepare-offload-wrappers.js
+var init_prepare_offload_wrappers = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-offload-wrappers.js"() {
+    init_tool_result_store();
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/tool-result-budget.js
-var init_tool_result_budget = __esm({
-  "node_modules/@sema-agent/core/dist/core/tool-result-budget.js"() {
-    init_message_utils();
-    init_tool_result_store();
+// node_modules/@sema-agent/core/dist/core/file-history-retention.js
+var init_file_history_retention = __esm({
+  "node_modules/@sema-agent/core/dist/core/file-history-retention.js"() {
+    init_retention_policy();
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/media-byte-cap.js
-var init_media_byte_cap = __esm({
-  "node_modules/@sema-agent/core/dist/core/media-byte-cap.js"() {
+// node_modules/@sema-agent/core/dist/core/file-history-store.js
+var init_file_history_store = __esm({
+  "node_modules/@sema-agent/core/dist/core/file-history-store.js"() {
+    init_safety();
+    init_file_history_retention();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-file-history.js
+var init_prepare_file_history = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-file-history.js"() {
+    init_node_execution_env();
+    init_remote_env();
+    init_file_history_store();
   }
 });
 
@@ -433898,6 +434370,159 @@ var init_teardown_bounded = __esm({
   }
 });
 
+// node_modules/@sema-agent/core/dist/core/runner/prepare-execution-env.js
+var init_prepare_execution_env = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-execution-env.js"() {
+    init_stub_env();
+    init_remote_env();
+    init_teardown_bounded();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/edited-files-ledger.js
+var init_edited_files_ledger = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/edited-files-ledger.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-run-refs.js
+var init_prepare_run_refs = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-run-refs.js"() {
+    init_subagent();
+    init_retain_ledger();
+    init_active_skill_scope();
+    init_edited_files_ledger();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-inherited-gate.js
+var init_prepare_inherited_gate = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-inherited-gate.js"() {
+    init_subagent();
+    init_ask_question();
+    init_hooks3();
+    init_stub_env();
+    init_tool_policy();
+    init_denial_limit_arms();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/orchestration/workflow-script-runner.js
+var init_workflow_script_runner = __esm({
+  "node_modules/@sema-agent/core/dist/orchestration/workflow-script-runner.js"() {
+    init_governance_baseline_validity();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/auto-mode-prompt-assets.js
+var init_auto_mode_prompt_assets = __esm({
+  "node_modules/@sema-agent/core/dist/core/auto-mode-prompt-assets.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/auto-mode-prompt.js
+var init_auto_mode_prompt = __esm({
+  "node_modules/@sema-agent/core/dist/core/auto-mode-prompt.js"() {
+    init_auto_mode_defaults();
+    init_auto_mode_prompt_assets();
+    init_untrusted_text();
+    init_auto_mode_defaults();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/compliance.js
+var init_compliance = __esm({
+  "node_modules/@sema-agent/core/dist/core/compliance.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/derived-route-fallback.js
+var init_derived_route_fallback = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/derived-route-fallback.js"() {
+    init_route_adjudicator();
+    init_types21();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-caps-and-workflow.js
+var init_prepare_caps_and_workflow = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-caps-and-workflow.js"() {
+    init_harness();
+    init_subagent();
+    init_cross_session_envelope();
+    init_run_workflow_tool();
+    init_workflow_script_runner();
+    init_workflow_size_guideline();
+    init_auto_mode_arming();
+    init_auto_mode_prompt();
+    init_auto_mode();
+    init_checkpoint_store();
+    init_compliance();
+    init_present_plan_tool();
+    init_roles();
+    init_runtime();
+    init_task_registry();
+    init_tools3();
+    init_derived_route_fallback();
+    init_synthetic_tools();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/agents/agent-transcript-tool.js
+var init_agent_transcript_tool = __esm({
+  "node_modules/@sema-agent/core/dist/agents/agent-transcript-tool.js"() {
+    init_build3();
+    init_tools3();
+    init_background_agent_store();
+    init_task_registry();
+    init_untrusted_text();
+    init_subagent_steps();
+    init_subagent();
+    init_retain_ledger();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/agents/list-agents-tool.js
+var init_list_agents_tool = __esm({
+  "node_modules/@sema-agent/core/dist/agents/list-agents-tool.js"() {
+    init_build3();
+    init_tools3();
+    init_untrusted_text();
+    init_cross_session_ref();
+    init_roster_store();
+    init_peer_directory();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/agents/peer-notice-route.js
+var init_peer_notice_route = __esm({
+  "node_modules/@sema-agent/core/dist/agents/peer-notice-route.js"() {
+    init_mailbox_store();
+    init_peer_directory();
+    init_peer_notices();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/agents/peer-session-drain.js
+var PEER_DRAIN_LEASE_TTL_MS, init_peer_session_drain = __esm({
+  "node_modules/@sema-agent/core/dist/agents/peer-session-drain.js"() {
+    init_mailbox_store();
+    init_types21();
+    init_cross_session_envelope();
+    init_cross_session_judge();
+    init_peer_admission();
+    init_peer_directory();
+    init_untrusted_text();
+    init_list_agents_tool();
+    init_cross_session_judge();
+    init_peer_held_queue();
+    init_peer_idle();
+    init_peer_notices();
+    init_peer_notice_route();
+    PEER_DRAIN_LEASE_TTL_MS = 5 * 6e4;
+  }
+});
+
 // node_modules/@sema-agent/core/dist/tools/monitor.js
 var MONITOR_DESCRIPTION, init_monitor = __esm({
   "node_modules/@sema-agent/core/dist/tools/monitor.js"() {
@@ -433958,44 +434583,290 @@ var ENTER_DESCRIPTION, init_worktree = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/agents/list-agents-tool.js
-var init_list_agents_tool = __esm({
-  "node_modules/@sema-agent/core/dist/agents/list-agents-tool.js"() {
-    init_build3();
-    init_tools3();
-    init_untrusted_text();
-    init_cross_session_ref();
-    init_roster_store();
-    init_peer_directory();
+// node_modules/@sema-agent/core/dist/core/runner/prepare-delegation-surface.js
+var init_prepare_delegation_surface = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-delegation-surface.js"() {
+    init_agent_transcript_tool();
+    init_send_message_tool();
+    init_peer_session_drain();
+    init_monitor();
+    init_worktree();
+    init_task_registry();
+    init_tool_result_store();
+    init_trace();
+    init_types21();
   }
 });
 
-// node_modules/@sema-agent/core/dist/agents/peer-notice-route.js
-var init_peer_notice_route = __esm({
-  "node_modules/@sema-agent/core/dist/agents/peer-notice-route.js"() {
-    init_mailbox_store();
-    init_peer_directory();
-    init_peer_notices();
+// node_modules/@sema-agent/core/dist/core/runner/prepare-tool-disclosure-mount.js
+var init_prepare_tool_disclosure_mount = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-tool-disclosure-mount.js"() {
+    init_harness();
+    init_cache_break_detector();
+    init_types21();
+    init_tool_disclosure();
   }
 });
 
-// node_modules/@sema-agent/core/dist/agents/peer-session-drain.js
-var PEER_DRAIN_LEASE_TTL_MS, init_peer_session_drain = __esm({
-  "node_modules/@sema-agent/core/dist/agents/peer-session-drain.js"() {
-    init_mailbox_store();
+// node_modules/@sema-agent/core/dist/core/runner/checkpoint-scope.js
+var init_checkpoint_scope = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/checkpoint-scope.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-wiring-manifest.js
+var init_prepare_wiring_manifest = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-wiring-manifest.js"() {
+    init_peer_session_drain();
+    init_fs();
+    init_checkpoint_store();
+    init_hooks3();
+    init_remote_env();
+    init_tool_result_store();
+    init_tool_policy();
     init_types21();
-    init_cross_session_envelope();
-    init_cross_session_judge();
-    init_peer_admission();
-    init_peer_directory();
     init_untrusted_text();
-    init_list_agents_tool();
-    init_cross_session_judge();
-    init_peer_held_queue();
-    init_peer_idle();
-    init_peer_notices();
-    init_peer_notice_route();
-    PEER_DRAIN_LEASE_TTL_MS = 5 * 6e4;
+    init_usage_window_store();
+    init_wiring_manifest();
+    init_checkpoint_scope();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/abort-race.js
+var init_abort_race = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/abort-race.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-ask-lane.js
+var init_prepare_ask_lane = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-ask-lane.js"() {
+    init_arg_summary();
+    init_hooks3();
+    init_tool_policy();
+    init_abort_race();
+    init_denial_limit_arms();
+    init_inherited_ask_grants();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-suspend-saga.js
+var init_prepare_suspend_saga = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-suspend-saga.js"() {
+    init_task_registry();
+    init_remote_env();
+    init_tool_policy();
+    init_abort_race();
+    init_checkpoint_scope();
+    init_announce_once_ledger();
+    init_remote_env_retry();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-boundary-parks.js
+var init_prepare_boundary_parks = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-boundary-parks.js"() {
+    init_background_shell();
+    init_checkpoint_store();
+    init_task_registry();
+    init_checkpoint_scope();
+    init_park_commit();
+    init_remote_env_retry();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/content-ask-bindings.js
+var init_content_ask_bindings = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/content-ask-bindings.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-park-ask.js
+var init_prepare_park_ask = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-park-ask.js"() {
+    init_uuid4();
+    init_value2();
+    init_ask_question();
+    init_background_shell();
+    init_canonical_json();
+    init_checkpoint_store();
+    init_hooks3();
+    init_task_registry();
+    init_tool_policy();
+    init_tool_result_store();
+    init_abort_race();
+    init_checkpoint_scope();
+    init_content_ask_bindings();
+    init_park_commit();
+    init_remote_env_retry();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/sensitive-path-policy.js
+var CASE_INSENSITIVE_FS3, init_sensitive_path_policy = __esm({
+  "node_modules/@sema-agent/core/dist/core/sensitive-path-policy.js"() {
+    init_safety();
+    init_read_deny();
+    CASE_INSENSITIVE_FS3 = process.platform === "darwin" || process.platform === "win32";
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/write-protect.js
+var freezeTable, WRITE_PROTECTED_DEFAULT_TABLE, init_write_protect = __esm({
+  "node_modules/@sema-agent/core/dist/core/write-protect.js"() {
+    init_safety();
+    init_session_rule_policy();
+    init_sensitive_path_policy();
+    freezeTable = (rows2) => Object.freeze(rows2.map((r) => Object.freeze(r))), WRITE_PROTECTED_DEFAULT_TABLE = freezeTable([
+      { name: ".gitconfig", kind: "basename" },
+      { name: ".gitmodules", kind: "basename" },
+      { name: ".bashrc", kind: "basename" },
+      { name: ".bash_profile", kind: "basename" },
+      { name: ".zshrc", kind: "basename" },
+      { name: ".zprofile", kind: "basename" },
+      { name: ".profile", kind: "basename" },
+      { name: ".zshenv", kind: "basename" },
+      { name: ".zlogin", kind: "basename" },
+      { name: ".zlogout", kind: "basename" },
+      { name: ".bash_login", kind: "basename" },
+      { name: ".bash_aliases", kind: "basename" },
+      { name: ".bash_logout", kind: "basename" },
+      { name: ".envrc", kind: "basename" },
+      { name: ".ripgreprc", kind: "basename" },
+      { name: ".mcp.json", kind: "basename" },
+      { name: ".claude.json", kind: "basename" },
+      { name: ".npmrc", kind: "basename" },
+      { name: ".yarnrc", kind: "basename" },
+      { name: ".yarnrc.yml", kind: "basename" },
+      { name: ".pnp.cjs", kind: "basename" },
+      { name: ".pnp.loader.mjs", kind: "basename" },
+      { name: ".pnpmfile.cjs", kind: "basename" },
+      { name: "bunfig.toml", kind: "basename" },
+      { name: ".bunfig.toml", kind: "basename" },
+      { name: ".bazelrc", kind: "basename" },
+      { name: ".bazelversion", kind: "basename" },
+      { name: ".bazeliskrc", kind: "basename" },
+      { name: ".pre-commit-config.yaml", kind: "basename" },
+      { name: "lefthook.yml", kind: "basename" },
+      { name: ".lefthook.yml", kind: "basename" },
+      { name: "lefthook.yaml", kind: "basename" },
+      { name: ".lefthook.yaml", kind: "basename" },
+      { name: "gradle-wrapper.properties", kind: "basename" },
+      { name: "maven-wrapper.properties", kind: "basename" },
+      { name: ".devcontainer.json", kind: "basename" },
+      { name: "pyrightconfig.json", kind: "basename" },
+      { name: ".git", kind: "segment" },
+      { name: ".vscode", kind: "segment" },
+      { name: ".idea", kind: "segment" },
+      { name: ".claude", kind: "segment" },
+      { name: ".husky", kind: "segment" },
+      { name: ".cargo", kind: "segment" },
+      { name: ".devcontainer", kind: "segment" },
+      { name: ".yarn", kind: "segment" },
+      { name: ".mvn", kind: "segment" },
+      { name: ".config/git", kind: "segment-run" },
+      { name: ".ssh", kind: "segment" },
+      { name: ".gnupg", kind: "segment" },
+      { name: ".sema.json", kind: "basename" },
+      { name: ".sema", kind: "segment" }
+    ]);
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-gate-stations.js
+var init_prepare_gate_stations = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-gate-stations.js"() {
+    init_send_message_tool();
+    init_compliance();
+    init_hooks3();
+    init_present_plan_tool();
+    init_tool_policy();
+    init_trace();
+    init_write_protect();
+    init_session_rule_policy();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/a2a-task-state.js
+var A2A_TASK_STATES, init_a2a_task_state = __esm({
+  "node_modules/@sema-agent/core/dist/core/a2a-task-state.js"() {
+    A2A_TASK_STATES = [
+      "submitted",
+      "working",
+      "input-required",
+      "completed",
+      "canceled",
+      "failed",
+      "rejected",
+      "auth-required",
+      "unknown"
+    ];
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/a2a.js
+var A2A_CALL_TOTAL_TIMEOUT_MS, A2A_RESPONSE_MAX_BYTES, A2A_STATE_SET, init_a2a = __esm({
+  "node_modules/@sema-agent/core/dist/core/a2a.js"() {
+    init_build3();
+    init_a2a_task_state();
+    init_mcp4();
+    init_protocol_naming();
+    init_protocol_table();
+    init_untrusted_text();
+    A2A_CALL_TOTAL_TIMEOUT_MS = 10 * 6e4, A2A_RESPONSE_MAX_BYTES = 8 * 1024 * 1024, A2A_STATE_SET = new Set(A2A_TASK_STATES);
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-protocol-tools.js
+var init_prepare_protocol_tools = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-protocol-tools.js"() {
+    init_build3();
+    init_mcp4();
+    init_a2a();
+    init_types21();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-question-face.js
+var init_prepare_question_face = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-question-face.js"() {
+    init_ask_question();
+    init_canonical_json();
+    init_checkpoint_store();
+    init_content_ask_bindings();
+    init_content_ask_bindings();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/lsp-protocol.js
+var init_lsp_protocol = __esm({
+  "node_modules/@sema-agent/core/dist/core/lsp-protocol.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/lsp.js
+var MAX_LSP_FILE_BYTES, init_lsp = __esm({
+  "node_modules/@sema-agent/core/dist/core/lsp.js"() {
+    init_lsp_protocol();
+    init_safety();
+    init_build3();
+    init_tools3();
+    MAX_LSP_FILE_BYTES = 10 * 1e3 * 1e3;
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-lsp.js
+var init_prepare_lsp = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-lsp.js"() {
+    init_lsp();
+    init_lsp_protocol();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/rollback-stack.js
+var init_rollback_stack = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/rollback-stack.js"() {
+    init_teardown_bounded();
   }
 });
 
@@ -434032,24 +434903,6 @@ One short sentence on what you chose and why. Goes to telemetry and is shown bac
   }
 });
 
-// node_modules/@sema-agent/core/dist/orchestration/workflow-script-runner.js
-var init_workflow_script_runner = __esm({
-  "node_modules/@sema-agent/core/dist/orchestration/workflow-script-runner.js"() {
-    init_governance_baseline_validity();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/lsp.js
-var MAX_LSP_FILE_BYTES, init_lsp = __esm({
-  "node_modules/@sema-agent/core/dist/core/lsp.js"() {
-    init_lsp_protocol();
-    init_safety();
-    init_build3();
-    init_tools3();
-    MAX_LSP_FILE_BYTES = 10 * 1e3 * 1e3;
-  }
-});
-
 // node_modules/@sema-agent/core/dist/core/park-selfcheck.js
 var init_park_selfcheck = __esm({
   "node_modules/@sema-agent/core/dist/core/park-selfcheck.js"() {
@@ -434059,131 +434912,84 @@ var init_park_selfcheck = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/file-history-retention.js
-var init_file_history_retention = __esm({
-  "node_modules/@sema-agent/core/dist/core/file-history-retention.js"() {
-    init_retention_policy();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/file-history-store.js
-var init_file_history_store = __esm({
-  "node_modules/@sema-agent/core/dist/core/file-history-store.js"() {
-    init_safety();
-    init_file_history_retention();
-  }
-});
-
 // node_modules/@sema-agent/core/dist/core/runner/prepare-task.js
-import { createHash as createHash27, randomBytes as randomBytes25 } from "node:crypto";
-var PROMPT_HASH_SALT, DEFAULT_RESOURCE_TTL_MS, USAGE_WINDOW_REAP_MARGIN_MS, DEFAULT_UNATTENDED_APPROVAL_TTL_MS, init_prepare_task = __esm({
+var init_prepare_task = __esm({
   "node_modules/@sema-agent/core/dist/core/runner/prepare-task.js"() {
     init_harness();
     init_auto_compaction();
     init_compaction_call_options();
-    init_auto_mode();
-    init_denial_limit_arms();
-    init_auto_mode_arming();
-    init_auto_mode_prompt();
-    init_roles();
-    init_arg_summary();
-    init_mcp4();
-    init_a2a();
-    init_build3();
-    init_value2();
     init_uuid4();
     init_runtime();
     init_session4();
-    init_subagent();
-    init_agent_transcript_tool();
     init_send_message_tool();
-    init_retain_ledger();
-    init_tool_policy();
-    init_permission_rule_model();
-    init_permission_rule_store();
-    init_active_skill_scope();
-    init_turn_attachments();
-    init_untrusted_text();
+    init_announce_once_ledger();
     init_reminder_mint();
-    init_ask_class();
     init_trace();
-    init_session_rule_policy();
-    init_hooks3();
-    init_write_protect();
-    init_permission_rule_org();
-    init_cache_break_detector();
     init_request_params();
-    init_route_adjudicator();
     init_timeout();
-    init_tools3();
-    init_tool_name_aliases();
-    init_protocol_table();
-    init_permission_rules();
-    init_lsp_protocol();
     init_tool_result_store();
     init_synthetic_tools();
     init_strict_output_schema();
-    init_tool_disclosure();
     init_tools4();
-    init_types27();
-    init_tools5();
-    init_content_origin();
-    init_delegation_provenance();
-    init_delegation_settlement();
-    init_memory4();
-    init_compliance();
     init_memory_admission();
     init_prepare_memory();
+    init_prepare_memory_engine_session();
+    init_prepare_defer_classify();
+    init_prepare_listings();
+    init_prepare_prompt_inputs();
+    init_prepare_project_context();
+    init_prepare_policy_chain();
+    init_prepare_context_lane();
+    init_prepare_turn_wiring();
+    init_prepare_context_lane();
+    init_prepare_prompt_assembly();
     init_prepare_config_doors();
     init_prepare_safety_scan();
     init_prepare_acquire_reconcile();
     init_prepare_hands_readface();
-    init_edited_files_ledger();
     init_prepare_workspace_restore();
-    init_default6();
-    init_git_status_frame();
-    init_assemble();
-    init_tool_catalog();
-    init_epoch();
-    init_artifact();
-    init_turn_snapshot();
-    init_sema_default();
+    init_park_commit();
+    init_park_commit();
+    init_prepare_offload_wrappers();
+    init_prepare_file_history();
+    init_prepare_execution_env();
+    init_prepare_run_refs();
+    init_prepare_inherited_gate();
+    init_prepare_caps_and_workflow();
+    init_prepare_delegation_surface();
+    init_prepare_tool_disclosure_mount();
+    init_prepare_wiring_manifest();
+    init_prepare_ask_lane();
+    init_prepare_suspend_saga();
+    init_prepare_boundary_parks();
+    init_prepare_park_ask();
+    init_prepare_gate_stations();
+    init_prepare_park_ask();
+    init_prepare_suspend_saga();
+    init_checkpoint_scope();
+    init_checkpoint_scope();
+    init_prepare_wiring_manifest();
+    init_derived_route_fallback();
+    init_prepare_protocol_tools();
+    init_prepare_question_face();
+    init_prepare_lsp();
+    init_rollback_stack();
+    init_prepare_tool_disclosure_mount();
+    init_prepare_file_history();
     init_context_edit();
-    init_tool_result_budget();
-    init_media_byte_cap();
-    init_context_guard();
-    init_stub_env();
     init_remote_env();
     init_teardown_bounded();
-    init_background_shell();
     init_task_registry();
-    init_monitor();
-    init_worktree();
     init_peer_session_drain();
-    init_cross_session_envelope();
-    init_node_execution_env();
-    init_fs();
-    init_encoding();
-    init_ask_question();
     init_scheduler_tools();
-    init_present_plan_tool();
     init_workflow_script_runner();
-    init_run_workflow_tool();
-    init_workflow_size_guideline();
-    init_lsp();
-    init_safety();
     init_checkpoint_store();
-    init_canonical_json();
-    init_wiring_manifest();
     init_park_selfcheck();
-    init_usage_window_store();
     init_types21();
-    init_file_history_store();
     init_prepare_hands_readface();
     init_checkpoint_store();
     init_prepare_config_doors();
-    init_prepare_workspace_restore();
-    PROMPT_HASH_SALT = randomBytes25(16), DEFAULT_RESOURCE_TTL_MS = 720 * 60 * 60 * 1e3, USAGE_WINDOW_REAP_MARGIN_MS = 3600 * 1e3, DEFAULT_UNATTENDED_APPROVAL_TTL_MS = 720 * 60 * 60 * 1e3;
+    init_workspace_path();
   }
 });
 
@@ -434290,6 +435096,7 @@ var init_runtask = __esm({
     init_hooks3();
     init_human_input_projection();
     init_untrusted_text();
+    init_announce_once_ledger();
     init_session_reconcile();
     init_tool_result_store();
     init_lsp_diagnostics();
@@ -435079,6 +435886,15 @@ var WINDOWS_DEVICE_NAMES, STALE_JOURNAL_MS, init_file_history_store2 = __esm({
   }
 });
 
+// node_modules/@sema-agent/core/dist/core/permission-rule-provider.js
+var init_permission_rule_provider = __esm({
+  "node_modules/@sema-agent/core/dist/core/permission-rule-provider.js"() {
+    init_permission_rule_model();
+    init_permission_rule_store();
+    init_permission_rule_org();
+  }
+});
+
 // node_modules/@sema-agent/core/dist/core/permission-rule-sync.js
 var init_permission_rule_sync = __esm({
   "node_modules/@sema-agent/core/dist/core/permission-rule-sync.js"() {
@@ -435089,9 +435905,16 @@ var init_permission_rule_sync = __esm({
 });
 
 // node_modules/@sema-agent/core/dist/stores/file/permission-rule-store.js
-import { closeSync as closeSync14, constants as FS2, existsSync as existsSync29, fsyncSync as fsyncSync11, lstatSync as lstatSync5, mkdirSync as mkdirSync24, openSync as openSync15, readFileSync as readFileSync42, renameSync as renameSync16, unlinkSync as unlinkSync15, writeFileSync as writeFileSync22 } from "node:fs";
+import { closeSync as closeSync14, constants as FS2, existsSync as existsSync29, fsyncSync as fsyncSync11, lstatSync as lstatSync5, mkdirSync as mkdirSync24, openSync as openSync15, readFileSync as readFileSync42, readdirSync as readdirSync13, renameSync as renameSync16, unlinkSync as unlinkSync15, writeFileSync as writeFileSync22 } from "node:fs";
 import { join as join157 } from "node:path";
-import { createHash as createHash28, randomBytes as randomBytes26 } from "node:crypto";
+import { createHash as createHash27, randomBytes as randomBytes26 } from "node:crypto";
+function isRuleFile(v2) {
+  let p = v2;
+  return typeof p == "object" && p !== null && p.schemaVersion === 3 && Array.isArray(p.rules) && Array.isArray(p.tombstones) && typeof p.rev == "number" && (p.quarantined === void 0 || Array.isArray(p.quarantined));
+}
+function schemaVersionWord(v2) {
+  return typeof v2 == "object" && v2 !== null ? v2.schemaVersion : void 0;
+}
 function atomicPublish(dir, file2, payload2) {
   let tmp = join157(dir, `.${randomBytes26(8).toString("hex")}.tmp`), fd2;
   try {
@@ -435117,7 +435940,7 @@ function atomicPublish(dir, file2, payload2) {
   }
 }
 function checksumOf(body) {
-  return `sha256:${createHash28("sha256").update(canonicalize3(body), "utf8").digest("hex")}`;
+  return `sha256:${createHash27("sha256").update(canonicalize3(body), "utf8").digest("hex")}`;
 }
 function assertSafeDir(dir) {
   mkdirSync24(dir, { recursive: !0, mode: 448 });
@@ -435129,14 +435952,14 @@ function assertSafeDir(dir) {
   if ((st2.mode & 18) !== 0)
     throw new Error(`permission-rule store directory ${dir} is writable by group or others (mode ${(st2.mode & 511).toString(8)}); refusing to use it \u2014 anyone who can write here can grant themselves permissions`);
 }
-var EMPTY_READ, FilePermissionRuleStore, init_permission_rule_store2 = __esm({
+var EMPTY_READ, FileDurableRulePartition, init_permission_rule_store2 = __esm({
   "node_modules/@sema-agent/core/dist/stores/file/permission-rule-store.js"() {
     init_permission_rule_store();
     init_canonical_json();
     init_fs_atomic();
     init_marker();
     EMPTY_READ = { rules: [], tombstones: [], rev: 0 };
-    FilePermissionRuleStore = class {
+    FileDurableRulePartition = class {
       dir;
       file;
       acquireWriteLock;
@@ -435170,8 +435993,8 @@ var EMPTY_READ, FilePermissionRuleStore, init_permission_rule_store2 = __esm({
           let why = `${this.file} is not valid JSON (${err8.message}); refusing the whole file and loading zero rules`;
           return this.disclose(why), { unreadable: why };
         }
-        if (parsed?.schemaVersion !== 1 && parsed?.schemaVersion !== 2 || !Array.isArray(parsed.rules) || !Array.isArray(parsed.tombstones) || typeof parsed.rev != "number" || parsed.quarantined !== void 0 && !Array.isArray(parsed.quarantined)) {
-          let why = `${this.file} does not carry a readable rule-file shape; refusing the whole file and loading zero rules`;
+        if (!isRuleFile(parsed)) {
+          let sv = schemaVersionWord(parsed), why = sv === 1 || sv === 2 ? `${this.file} is a schema ${String(sv)} bucket that was not migrated to schema 3 (written by an older engine after this directory was migrated?); refusing the whole file and loading zero rules` : `${this.file} does not carry a readable rule-file shape; refusing the whole file and loading zero rules`;
           return this.disclose(why), { unreadable: why };
         }
         let { checksum, ...body } = parsed;
@@ -435196,6 +436019,8 @@ var EMPTY_READ, FilePermissionRuleStore, init_permission_rule_store2 = __esm({
       }
       async list() {
         let r = this.read();
+        if ("unreadable" in r)
+          throw new Error(r.unreadable);
         if (!("file" in r))
           return { ...EMPTY_READ };
         let screened = this.screenDurableRows(r.file);
@@ -435210,26 +436035,11 @@ var EMPTY_READ, FilePermissionRuleStore, init_permission_rule_store2 = __esm({
         let r = this.read();
         return "file" in r ? this.screenDurableRows(r.file).quarantined : [];
       }
-      async readOrgState() {
-        let r = this.read();
-        return "file" in r ? r.file.org : void 0;
-      }
-      async installOrgState(state5) {
-        this.acquireWriteLock(), await this.serialize(() => {
-          let cur = this.current();
-          if (cur.org !== void 0 && state5.revisionHighWater < cur.org.revisionHighWater)
-            throw new Error(`refusing to lower the org revision high-water mark (${cur.org.revisionHighWater} \u2192 ${state5.revisionHighWater}) \u2014 an interleaved install must re-read and re-compare`);
-          if (cur.org !== void 0 && state5.snapshot.revision === cur.org.snapshot.revision && canonicalize3(state5.snapshot.rules) !== canonicalize3(cur.org.snapshot.rules))
-            throw new Error(`refusing to replace org revision ${state5.snapshot.revision} with DIFFERENT policy content under the same revision \u2014 content changes must bump the revision`);
-          if (!this.writeAndVerify({ ...cur, schemaVersion: 2, org: state5 }))
-            throw new Error("the permission-rule store did not survive its own write; the org snapshot was not installed");
-        });
-      }
       current() {
         let r = this.read();
         if ("unreadable" in r)
           throw new Error(`refusing to write the permission-rule store while it cannot be read: ${r.unreadable}`);
-        return "absent" in r ? { schemaVersion: 1, actor: `file-${randomBytes26(6).toString("hex")}`, counter: 0, rev: 0, rules: [], tombstones: [] } : {
+        return "absent" in r ? { schemaVersion: 3, actor: `file-${randomBytes26(6).toString("hex")}`, counter: 0, rev: 0, rules: [], tombstones: [] } : {
           schemaVersion: r.file.schemaVersion,
           actor: r.file.actor,
           counter: r.file.counter,
@@ -435237,7 +436047,6 @@ var EMPTY_READ, FilePermissionRuleStore, init_permission_rule_store2 = __esm({
           rules: r.file.rules,
           tombstones: r.file.tombstones,
           ...r.file.sync !== void 0 ? { sync: r.file.sync } : {},
-          ...r.file.org !== void 0 ? { org: r.file.org } : {},
           ...r.file.quarantined !== void 0 ? { quarantined: r.file.quarantined } : {}
         };
       }
@@ -435291,7 +436100,6 @@ var EMPTY_READ, FilePermissionRuleStore, init_permission_rule_store2 = __esm({
               ...cur.sync?.observedVector !== void 0 ? { observedVector: cur.sync.observedVector } : {}
             }, delta, Date.now()), landed = {
               ...cur,
-              schemaVersion: 2,
               rev: cur.rev + 1,
               rules: next2.rules,
               tombstones: next2.tombstones,
@@ -435319,6 +436127,7 @@ var EMPTY_READ, FilePermissionRuleStore, init_permission_rule_store2 = __esm({
 var init_permission_rule_adopt = __esm({
   "node_modules/@sema-agent/core/dist/stores/file/permission-rule-adopt.js"() {
     init_permission_rule_store();
+    init_permission_rule_provider();
     init_permission_rule_sync();
     init_permission_rule_store2();
   }
@@ -435369,15 +436178,6 @@ var init_file2 = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/sensitive-path-policy.js
-var CASE_INSENSITIVE_FS3, init_sensitive_path_policy = __esm({
-  "node_modules/@sema-agent/core/dist/core/sensitive-path-policy.js"() {
-    init_safety();
-    init_read_deny();
-    CASE_INSENSITIVE_FS3 = process.platform === "darwin" || process.platform === "win32";
-  }
-});
-
 // node_modules/@sema-agent/core/dist/core/fs-write-gate-policy.js
 var init_fs_write_gate_policy = __esm({
   "node_modules/@sema-agent/core/dist/core/fs-write-gate-policy.js"() {
@@ -435576,6 +436376,7 @@ function precheckEditedRuleText2(text2, command8) {
 var init_permission_rule_consent = __esm({
   "node_modules/@sema-agent/core/dist/core/permission-rule-consent.js"() {
     init_permission_rule_model();
+    init_permission_rule_provider();
     init_permission_rule_store();
   }
 });
@@ -435739,7 +436540,7 @@ var init_sync_client = __esm({
 var init_memory_engine = __esm({
   "node_modules/@sema-agent/core/dist/core/memory-engine/index.js"() {
     init_engine5();
-    init_tools5();
+    init_tools4();
     init_provenance_wording();
     init_scan();
     init_file_backend();
@@ -436232,6 +437033,7 @@ var init_dist10 = __esm({
     init_cascade();
     init_sql_adapters();
     init_mcp4();
+    init_mcp4();
     init_a2a();
     init_protocol_table();
     init_session_policy_store();
@@ -436314,6 +437116,8 @@ var init_dist10 = __esm({
     init_loop_tick();
     init_tighten_task_spec();
     init_tool_policy();
+    init_ask_origin();
+    init_hooks3();
     init_auto_mode();
     init_auto_mode_defaults();
     init_auto_mode_prompt();
@@ -436324,6 +437128,7 @@ var init_dist10 = __esm({
     init_permission_rule_model();
     init_permission_rule_store();
     init_permission_rule_sync();
+    init_permission_rule_provider();
     init_permission_rule_session();
     init_permission_rule_org();
     init_governance_codes();
@@ -458236,7 +459041,7 @@ var init_config7 = __esm({
 });
 
 // build-src/src/utils/api.ts
-import { createHash as createHash29 } from "crypto";
+import { createHash as createHash28 } from "crypto";
 function filterSwarmFieldsFromSchema(toolName2, schema) {
   let fieldsToRemove = SWARM_FIELDS_BY_TOOL[toolName2];
   if (!fieldsToRemove || fieldsToRemove.length === 0)
@@ -458299,7 +459104,7 @@ function logAPIPrefix(systemPrompt) {
   firstSystemPrompt?.slice(
     0,
     20
-  ), firstSystemPrompt?.length, firstSystemPrompt && createHash29("sha256").update(firstSystemPrompt).digest("hex");
+  ), firstSystemPrompt?.length, firstSystemPrompt && createHash28("sha256").update(firstSystemPrompt).digest("hex");
 }
 function splitSysPromptPrefix(systemPrompt, options) {
   let useGlobalCacheFeature = shouldUseGlobalCacheScope();
@@ -466186,12 +466991,15 @@ var CORE_ENGINE_NOTICE_CODES, PENDING_ENGINE_NOTICE_CODES, SURFACEABLE_ENGINE_NO
 var wiringManifestStore_exports = {};
 __export(wiringManifestStore_exports, {
   autoModeDoctorDetail: () => autoModeDoctorDetail,
+  forgetWiringManifestReading: () => forgetWiringManifestReading,
   modelGateRemovedLine: () => modelGateRemovedLine,
   noteWiringManifestReading: () => noteWiringManifestReading,
   observedAutoMode: () => observedAutoMode,
   observedModelGate: () => observedModelGate,
+  observedWiringMcp: () => observedWiringMcp,
   resetWiringManifestReadingForTest: () => resetWiringManifestReadingForTest,
-  wiringManifestChromeView: () => wiringManifestChromeView
+  wiringManifestChromeView: () => wiringManifestChromeView,
+  wiringMcpDoctorDetail: () => wiringMcpDoctorDetail
 });
 function wiringManifestChromeView(e) {
   if (typeof e != "object" || e === null) return null;
@@ -466210,23 +467018,50 @@ function wiringManifestChromeView(e) {
       } catch {
         return;
       }
-  }, gateClass = readFrom(gate, "class"), gateRestore = readFrom(gate, "restore"), removedRaw = readFrom(gate, "removed"), autoArmed = readFrom(auto, "armed"), autoReason = readFrom(auto, "reason"), modelGate = typeof gateClass == "string" && typeof gateRestore == "string" && Array.isArray(removedRaw) && removedRaw.every((t2) => typeof t2 == "string") ? { class: gateClass, removed: [...removedRaw], restore: gateRestore } : void 0, autoMode = typeof autoArmed == "boolean" && typeof autoReason == "string" ? { armed: autoArmed, reason: autoReason } : void 0;
+  }, gateClass = readFrom(gate, "class"), gateRestore = readFrom(gate, "restore"), removedRaw = readFrom(gate, "removed"), autoArmed = readFrom(auto, "armed"), autoReason = readFrom(auto, "reason"), modelGate = typeof gateClass == "string" && typeof gateRestore == "string" && Array.isArray(removedRaw) && removedRaw.every((t2) => typeof t2 == "string") ? { class: gateClass, removed: [...removedRaw], restore: gateRestore } : void 0, autoMode = typeof autoArmed == "boolean" && typeof autoReason == "string" ? { armed: autoArmed, reason: autoReason } : void 0, mcpRaw = read("mcp"), mcp2;
+  if (Array.isArray(mcpRaw)) {
+    let rows2 = [];
+    for (let raw2 of mcpRaw) {
+      if (typeof raw2 != "object" || raw2 === null || Array.isArray(raw2)) continue;
+      let r = raw2, name = readFrom(r, "name"), status3 = readFrom(r, "status");
+      if (typeof name != "string" || name === "" || typeof status3 != "string" || status3 === "") continue;
+      let source = readFrom(r, "source"), errorCode = readFrom(r, "errorCode"), toolCount = readFrom(r, "toolCount");
+      rows2.push({
+        name,
+        // 🔴 `status` / `errorCode` 一律**开集**读(词的属主是 core):认不得的词照渲不丢行;
+        //    抄一份闭集表会在 core 加员那天把一个合法值连同它那一行一起吞掉。
+        status: status3,
+        ...typeof source == "string" && source !== "" ? { source } : {},
+        ...typeof errorCode == "string" && errorCode !== "" ? { errorCode } : {},
+        // 🔴 `toolCount: 0` 是**读数**(连上了、零工具),不是缺席 ⇒ 有限数就收,别用 falsy 判。
+        ...typeof toolCount == "number" && Number.isFinite(toolCount) ? { toolCount } : {}
+      });
+    }
+    (mcpRaw.length === 0 || rows2.length > 0) && (mcp2 = rows2);
+  }
   return {
     ...modelGate !== void 0 ? { modelGate } : {},
-    ...autoMode !== void 0 ? { autoMode } : {}
+    ...autoMode !== void 0 ? { autoMode } : {},
+    ...mcp2 !== void 0 ? { mcp: mcp2 } : {}
   };
 }
 function noteWiringManifestReading(reading) {
-  reading.autoMode !== void 0 && (lastAutoMode = reading.autoMode), reading.modelGate !== void 0 && (lastModelGate = reading.modelGate);
+  reading.autoMode !== void 0 && (lastAutoMode = reading.autoMode), reading.modelGate !== void 0 && (lastModelGate = reading.modelGate), reading.mcp !== void 0 && (lastMcp = reading.mcp);
 }
 function observedAutoMode() {
   return lastAutoMode;
 }
+function observedWiringMcp() {
+  return lastMcp;
+}
 function observedModelGate() {
   return lastModelGate;
 }
+function forgetWiringManifestReading() {
+  lastMcp = null, lastAutoMode = null, lastModelGate = null;
+}
 function resetWiringManifestReadingForTest() {
-  lastAutoMode = null, lastModelGate = null;
+  lastMcp = null, lastAutoMode = null, lastModelGate = null;
 }
 function modelGateRemovedLine(gate) {
   return `Model gate removed ${gate.class}: ${gate.removed.join(", ")} \u2014 restore: ${gate.restore}`;
@@ -466234,15 +467069,21 @@ function modelGateRemovedLine(gate) {
 function autoModeDoctorDetail(reading) {
   return reading === null ? {
     status: "info",
-    detail: "not observed \u2014 the engine reports it per run leg; this one-shot process has none (run /doctor inside the REPL after a turn)"
+    detail: "not observed \u2014 the engine reports it per run leg; this process has not seen a wiring-manifest frame yet (nothing has run in it, or the engine is older than 7.58.0)"
   } : {
     status: reading.armed ? "ok" : "info",
     detail: `${reading.armed ? "armed" : "not armed"} \xB7 engine reason: ${reading.reason}`
   };
 }
-var lastAutoMode, lastModelGate, init_wiringManifestStore = __esm({
+function wiringMcpDoctorDetail(rows2, clean9) {
+  return rows2 === null ? "not observed - the engine reports declared MCP servers on the wiring manifest; this process has not seen such a frame yet (nothing has run in it, or the engine is older than 7.60.0)" : rows2.length === 0 ? "this engine leg declared no MCP servers" : rows2.map((r) => {
+    let parts = [`${clean9(r.name, 40)}: ${clean9(r.status, 24)}`];
+    return r.errorCode !== void 0 && parts.push(`code ${clean9(r.errorCode, 40)}`), typeof r.toolCount == "number" && Number.isFinite(r.toolCount) && parts.push(`${r.toolCount} tools`), parts.push(r.source !== void 0 ? `source ${clean9(r.source, 40)}` : "source not declared"), parts.join(" - ");
+  }).join(" | ");
+}
+var lastAutoMode, lastMcp, lastModelGate, init_wiringManifestStore = __esm({
   "build-src/src/sema/wiringManifestStore.ts"() {
-    lastAutoMode = null, lastModelGate = null;
+    lastAutoMode = null, lastMcp = null, lastModelGate = null;
   }
 });
 
@@ -466343,7 +467184,7 @@ __export(upstreamBridge_exports, {
   seedEngineTaskNotificationDedupFromTranscript: () => seedEngineTaskNotificationDedupFromTranscript,
   timeoutWindowExpiredCallIdOf: () => timeoutWindowExpiredCallIdOf
 });
-import { createHash as createHash30 } from "node:crypto";
+import { createHash as createHash29 } from "node:crypto";
 function appendBridgeProbe(envName, line) {
   let path28 = envName !== void 0 ? process.env[envName] : void 0;
   if (path28)
@@ -466463,7 +467304,7 @@ function timeoutWindowExpiredCallIdOf(frame) {
     return id.length <= MAX_COLLATERAL_ABORT_ID_CHARS ? id : void 0;
 }
 function identityDigest(v2) {
-  return createHash30("sha256").update(Buffer.from(v2, "utf16le")).digest("hex").slice(0, 32);
+  return createHash29("sha256").update(Buffer.from(v2, "utf16le")).digest("hex").slice(0, 32);
 }
 function wireIdentity(raw2) {
   return typeof raw2 != "string" || raw2.length === 0 ? "" : raw2.length <= IDENTITY_INLINE_MAX ? `${String(raw2.length)}:${raw2}` : `${String(raw2.length)}:${raw2.slice(0, 64)}#${identityDigest(raw2)}`;
@@ -468444,6 +469285,74 @@ var clean7, BENIGN_ABSENCE_WORDS, init_ruleEvidenceNote = __esm({
   }
 });
 
+// build-src/src/sema/askFrameNotes.ts
+function readDenialLimitFallback3(v2) {
+  if (typeof v2 != "object" || v2 === null) return;
+  let r = v2, num = (n2) => typeof n2 == "number" && Number.isFinite(n2) && n2 >= 0;
+  if (!(!num(r.consecutive) || !num(r.total) || !num(r.autoDenyAfterMs)) && !(typeof r.limit != "string" || r.limit === ""))
+    return {
+      consecutive: r.consecutive,
+      total: r.total,
+      limit: r.limit,
+      autoDenyAfterMs: r.autoDenyAfterMs
+    };
+}
+function denialLimitFallbackNote(v2) {
+  if (v2 == null || typeof v2 != "object") return;
+  let parts = ["auto-deny limit reached \u2014 this one needs a real human decision"], num = (n2) => typeof n2 == "number" && Number.isFinite(n2) && n2 >= 0 ? n2 : void 0, consecutive = num(v2.consecutive), total = num(v2.total);
+  consecutive !== void 0 && total !== void 0 && parts.push(`${consecutive} consecutive / ${total} total denials so far`);
+  let limit2 = typeof v2.limit == "string" && v2.limit !== "" ? v2.limit : void 0;
+  limit2 !== void 0 && parts.push(`the limit that tripped: ${cleanUntrustedForDisplay(limit2, 24)}`);
+  let windowMs = num(v2.autoDenyAfterMs);
+  return windowMs !== void 0 && windowMs > 0 && parts.push(`the engine auto-denies it in ${Math.round(windowMs / 1e3)}s if nobody answers`), parts.join("; ");
+}
+function askOriginNote(origin2) {
+  if (!(typeof origin2 != "string" || origin2 === ""))
+    switch (origin2) {
+      case "content_question":
+      case "unresolvable":
+      case "ask_rule":
+      case "policy":
+        return;
+      case "org_unavailable":
+        return "asked because the org rule store could not be reached";
+      case "org_rule":
+        return "asked by an org rule";
+      case "hook":
+        return "asked by a hook";
+      case "denial_limit_fallback":
+        return "asked because the auto-deny limit was reached";
+      default:
+        return `asked by an origin this build does not know yet (${cleanUntrustedForDisplay(origin2, 40)})`;
+    }
+}
+function ruleOffersAbsenceNote(reason) {
+  if (!(typeof reason != "string" || reason === ""))
+    switch (reason) {
+      case "mandated":
+        return `no "don't ask again" option here: this gate is mandated, so a rule could not switch it off`;
+      case "shadowed":
+        return `no "don't ask again" option here: a higher-priority rule already covers this call`;
+      case "lane_cannot_speak":
+        return `no "don't ask again" option here: this approval lane cannot persist rules`;
+      default:
+        return `no "don't ask again" option here (reason this build does not know yet: ${cleanUntrustedForDisplay(reason, 40)})`;
+    }
+}
+function askFrameNoteParts(req) {
+  let denial = denialLimitFallbackNote(req.denialLimitFallback), origin2 = askOriginNote(req.origin), absence = ruleOffersAbsenceNote(req.ruleOffersAbsence);
+  return [
+    ...denial !== void 0 ? [denial] : [],
+    ...origin2 !== void 0 ? [origin2] : [],
+    ...absence !== void 0 ? [absence] : []
+  ];
+}
+var init_askFrameNotes = __esm({
+  "build-src/src/sema/askFrameNotes.ts"() {
+    init_untrustedDisplayText();
+  }
+});
+
 // build-src/src/sema/turnGateJournal.ts
 function journalGatePresented(gateKind2, callId, engineTaskId) {
   try {
@@ -468680,6 +469589,12 @@ function composeCardWireNote(req) {
     ...bidiNote !== void 0 ? [bidiNote] : [],
     ...req.governanceForced === !0 ? ["Required by deployment governance \u2014 permission-mode overrides do not apply"] : [],
     ...req.wireNote !== void 0 ? [req.wireNote] : [],
+    // ── §23a 三位(L-107④):限额回落 · ask 出身 · 「不再询问」缺席原因 ─────────────────────
+    // 🔴 排在 probeCause / ruleEvidence **之前**:这三句答的是「这只门为什么在这儿、为什么必须
+    //    你来批」,而那两句答的是「引擎凭什么这么判」—— 先因后据。缺席零占位 ⇒ 老引擎上卡形与
+    //    修前逐字节相同(additive 不回削)。
+    // 🔴 三位的窄读与措辞全在 askFrameNotes(单源);本处只负责把它们放进这条 dim 行。
+    ...askFrameNoteParts(req),
     ...probeCause !== void 0 ? [probeCauseNoteText(probeCause)] : [],
     ...ruleEvidenceNote !== void 0 ? [ruleEvidenceNote] : []
   ];
@@ -468728,8 +469643,8 @@ function shellApprovalCardPort(req) {
   }
   let tool = lookup.kind === "tool" ? lookup.tool : genericGateTool(req.toolName), { callKey, signal } = req, askDeadlineMs = readAskDeadlineMs(req) ?? readParkRowDeadline(req.callKey);
   return new Promise((resolve58) => {
-    let selectedPersistRule, selectedPersistRuleBatchOfferIndex, selectedPersistRuleEdited, windowClosedAtMs, lateApproveConfirmedOnce = !1, lateApproveConfirmShown = !1, stagedPermissionUpdates = [], lateDecideWatchdogTimer, settled = !1, settle3 = (o) => {
-      settled || (settled = !0, signal?.removeEventListener("abort", onAbortSignal), askWindowTimer !== void 0 && clearTimeout(askWindowTimer), askBackstopTimer !== void 0 && clearTimeout(askBackstopTimer), lateDecideWatchdogTimer !== void 0 && clearTimeout(lateDecideWatchdogTimer), liveApprovalCards.delete(callKey), journalGateResolved(callKey), resolve58(o));
+    let selectedPersistRule, selectedPersistRuleBatchOfferIndex, selectedPersistRuleEdited, windowClosedAtMs, lateApproveConfirmedOnce = !1, lateApproveConfirmShown = !1, stagedPermissionUpdates = [], lateDecideWatchdogTimer, settled = !1, saidWindowClosed = !1, bornEpoch = getLiveSessionEpoch(), settle3 = (o) => {
+      settled || (settled = !0, signal?.removeEventListener("abort", onAbortSignal), askWindowTimer !== void 0 && clearTimeout(askWindowTimer), askBackstopTimer !== void 0 && clearTimeout(askBackstopTimer), lateDecideWatchdogTimer !== void 0 && clearTimeout(lateDecideWatchdogTimer), liveApprovalCards.delete(callKey), forgetApprovalCardToolCallId(req.toolCallId, callKey, bornEpoch, saidWindowClosed ? req.toolName : void 0), journalGateResolved(callKey), resolve58(o));
     }, removeFromQueue = () => {
       try {
         setQueue((queue3) => queue3.filter((item) => item.toolUseID !== callKey));
@@ -468821,9 +469736,9 @@ function shellApprovalCardPort(req) {
         retractApprovalCard(callKey, "unanswered-after-window");
       }, unansweredBackstopMs(backstopWindowMs)));
     }, windowClosedEvidence = null, windowClosed = (evidence) => {
-      if (settled || windowClosedEvidence === "parked-frame" || windowClosedEvidence === "timer" && evidence !== "parked-frame") return !1;
-      windowClosedEvidence = evidence, logForDebugging(`liveToolApprovalWire: window closed for "${req.toolName}" callKey=${callKey} evidence=${evidence}`), askWindowTimer !== void 0 && (clearTimeout(askWindowTimer), askWindowTimer = void 0), windowClosedAtMs === void 0 && (windowClosedAtMs = Date.now()), markApprovalCardWindowClosed(callKey);
-      let row2 = evidence === "parked-frame" ? approvalMovedToDurableQueueRow(req.toolName) : approvalWindowClosedRow(req.toolName);
+      if (settled || windowClosedEvidence !== null && windowClosedEvidence !== "timer" || windowClosedEvidence === "timer" && evidence === "timer") return !1;
+      windowClosedEvidence = evidence, logForDebugging(`liveToolApprovalWire: window closed for "${req.toolName}" callKey=${callKey} evidence=${evidence}`), askWindowTimer !== void 0 && (clearTimeout(askWindowTimer), askWindowTimer = void 0), windowClosedAtMs === void 0 && (windowClosedAtMs = Date.now()), markApprovalCardWindowClosed(callKey), saidWindowClosed = !0;
+      let row2 = evidence === "parked-frame" ? approvalMovedToDurableQueueRow(req.toolName) : evidence === "auto-denied" ? approvalAutoDeniedRow(req.toolName) : approvalWindowClosedRow(req.toolName);
       return surfaceLateDecideOutcome(row2) || logForDebugging("liveToolApprovalWire: the window-closed status row had nowhere to go \u2014 the user was NOT told"), armBackstopOnce(), !0;
     };
     if (signal?.aborted) {
@@ -469029,7 +469944,7 @@ function shellApprovalCardPort(req) {
       askBackstopTimer !== void 0 && (clearTimeout(askBackstopTimer), askBackstopTimer = void 0), armBackstopOnce(), surfaceLateDecideOutcome(row2) || logForDebugging("liveToolApprovalWire: the late-approve confirmation banner had nowhere to go");
     };
     try {
-      if (setQueue((queue3) => [...queue3, confirm2]), logEngineGateFallbackToAsk(req.toolName, syncVerdict), liveApprovalCards.set(callKey, { retract: retractCard, windowClosed }), askDeadlineMs !== void 0 && !isParkRowCard(callKey)) {
+      if (setQueue((queue3) => [...queue3, confirm2]), logEngineGateFallbackToAsk(req.toolName, syncVerdict), liveApprovalCards.set(callKey, { retract: retractCard, windowClosed }), bornEpoch = registerApprovalCardToolCallId(req.toolCallId, callKey), askDeadlineMs !== void 0 && !isParkRowCard(callKey)) {
         let remaining = askDeadlineMs - Date.now();
         backstopWindowMs = Math.max(0, remaining), remaining <= 0 ? (logForDebugging(`liveToolApprovalWire: gate for "${req.toolName}" arrived with its approval window already closed \u2014 the card stays up, saying so`), windowClosed("timer")) : askWindowTimer = setTimeout(() => {
           windowClosed("timer");
@@ -469074,6 +469989,9 @@ var asWireTool, forcedToolLoadFailureForTest, forcedToolNilExportForTest, loadFi
     init_ruleEvidenceNote();
     init_persistedRulesWire2();
     init_armedGateRegistry2();
+    init_askFrameNotes();
+    init_liveSessionStore();
+    init_liveApprovalCardHandles();
     init_liveApprovalCardHandles();
     init_turnGateJournal();
     init_untrustedDisplayText();
@@ -469274,6 +470192,9 @@ function windowKeysFrom(frame, opts) {
     ...typeof frame.serverNowMs == "number" && Number.isFinite(frame.serverNowMs) ? { serverNowMs: frame.serverNowMs } : {}
   };
 }
+function readRuleOffersAbsenceStamp(card) {
+  return typeof card.ruleOffersAbsence == "string" && card.ruleOffersAbsence !== "" ? { ruleOffersAbsence: card.ruleOffersAbsence } : {};
+}
 function approvalCardRequestFrom(frame, opts) {
   let card = frame.card, notes = [riskNoteFor(card.risk)];
   card.argsOmitted === !0 && notes.push("arguments omitted by the engine (over the 16 KiB cap) \u2014 this does NOT mean the call has no arguments");
@@ -469311,6 +470232,28 @@ function approvalCardRequestFrom(frame, opts) {
     //    不是 `ApprovalCard` 的键)⇒ 本处**不**去 card 上找它:两位不同源不同算点,在这里补一个同名读
     //    就是拿一个量冒充另一个。那一位由 client-core 的行→卡重铸腿供给(0.48.0 件②)。
     ...card.inputHasBidi === !0 ? { inputHasBidi: !0 } : {},
+    // ── §23a 两位(L-107④ 壳半场,1.0.102;登记在案的「刻意不透」两条同批清账)─────────────
+    // 🔴 修前这两位在本腿被整键剥掉,理由(写在 approvalStreamWire.test 的 DELIBERATELY_NOT_STAMPED
+    //    表里)是「壳侧零消费口 + client-core 也还没投影 ⇒ 透传一个没人读的对象 = 假 affordance」。
+    //    **两个前提本批同时消失**:client-core 0.59.0 把两位投影到 `ApprovalCardRequest` 的具名位,
+    //    壳侧 `composeCardWireNote` → `askFrameNoteParts` 是它们的消费口。⇒ 那条登记的退出条件
+    //    (逐字:「包侧投影落地那一批本腿改经包面透传,同批删本条」)兑现,两条同批从表里删掉。
+    // 🔴 **本腿一个字都不自己拼**:措辞单源在 askFrameNotes,由卡口(shellApprovalCardPort →
+    //    composeCardWireNote)统一渲 —— 本腿只把值原样送到卡入参上。两个铸卡口各拼一遍就是同一句
+    //    话在两条车道上漂开(probeCause / ruleEvidence 当年立的同一条纪律)。
+    // 🔴 **窄读走壳侧单源 `readDenialLimitFallback`**(askFrameNotes):活卡帧腿的窄读在包里做完了,
+    //    但本腿读的是**生 wire**,而包的同名窄读器**没有导出**(dist 直证)⇒ 壳侧只此一把,判据与
+    //    server `.strict()` / 包内那把**逐字对齐**(四成员缺一整只丢)。已记候包:包导出后同批删。
+    //    🔴 只按**铸点域**判,绝不再收窄一格(B-025「消费域比铸点域更窄」的病形)。
+    ...(() => {
+      let dlf = readDenialLimitFallback3(card.denialLimitFallback);
+      return dlf !== void 0 ? { denialLimitFallback: dlf } : {};
+    })(),
+    // 🔴 `ruleOffersAbsence` 按**开集**送(非空串即收):闭三词的属主是 core,壳再套一张闭集表会在
+    //    core 加员那天把合法值判没。空串是坏值不是「没有原因」⇒ 不送。
+    //    ⚠️ 本腿的「不再询问」档**本来就不渲**(ruleOffers/ruleSuggestions 刻意剥,见下方长注):
+    //    送这一位不会造出档位,只会让卡上多一句「为什么没有这一格」—— 那正是它答的那一问。
+    ...readRuleOffersAbsenceStamp(card),
     // ── #144 被越级的持久 allow 规则原文(合并批审计件⑧;**同族第三次**静默漏键)──────────────
     // 🔴 与 `model` / `requiresRealApproval` / `inputHasBidi` 逐字同形:SDK 的 `APPROVAL_CARD_KEYS`
     //    早已列了 `persistedRuleShadowed`(server ≥7.13.0 随卡真发),client-core 的
@@ -469390,6 +470333,15 @@ function genericCardRequestFrom(env6, askId, opts) {
     // 扫描结果,不是卡的展示语义)。防御读:**严格 `true` 才 stamp**,其余(含 `"true"` / `1` / `false`)
     // 一律键缺席。与 v1 腿同一条纪律 —— 未知形帧上少说一句披露只是降级,多说一句「已确认干净」是谎报。
     ...card.inputHasBidi === !0 ? { inputHasBidi: !0 } : {},
+    // §23a 两位同形(L-107④;与 toolCallId / inputHasBidi 同一条降级纪律):这两位与 schemaVersion
+    // **无关** —— 它们是引擎对这只 ask 本身的判定,不是卡的展示语义 ⇒ 未知形帧上照样防御读。
+    // 🔴 措辞与窄读都在 askFrameNotes 单源;本腿只送已成形的值。读法与 v1 腿**同一个函数**
+    //    (不是「同样写一遍」)—— 两腿各抄一份窄读器就是同形存量。读不出一律键缺席。
+    ...(() => {
+      let dlf = readDenialLimitFallback3(card.denialLimitFallback);
+      return dlf !== void 0 ? { denialLimitFallback: dlf } : {};
+    })(),
+    ...readRuleOffersAbsenceStamp(card),
     ...opts.signal !== void 0 ? { signal: opts.signal } : {},
     wireNote: notes.join(" \xB7 "),
     // 窗三键(见函数头注)——**先验自洽再投影**;验不过 ⇒ 整族不转(连本地锚点 `receivedAtMs` 都不盖:
@@ -469721,6 +470673,7 @@ var STREAM_APPROVAL_CAP, ASK_DECISION_DISABLED_CODE, IDEMPOTENCY_KEY_MAX, PARKIN
     init_ruleEvidenceNote();
     init_untrustedDisplayText();
     init_wireNoticePort();
+    init_askFrameNotes();
     init_liveToolApprovalWire();
     init_askParkExpiry();
     STREAM_APPROVAL_CAP = "streamApproval", ASK_DECISION_DISABLED_CODE = "feature.approval_ask_disabled", IDEMPOTENCY_KEY_MAX = 255, PARKING_POLL_MAX = 2, PARKING_POLL_DELAY_MS = 400, CAPS_SETTLE_BUDGET_MS = 1500, LEGACY_SETTLE_GRACE_MS = 750, MAX_DECISION_NOTE_CHARS = 2048, TEARDOWN_BUDGET_MS = 1e3;
@@ -470019,6 +470972,7 @@ __export(agentsWire_exports, {
   DELEGATION_CAP_CODES: () => DELEGATION_CAP_CODES,
   DELEGATION_CONCURRENCY_CAP: () => DELEGATION_CONCURRENCY_CAP,
   DELEGATION_SESSION_CAP: () => DELEGATION_SESSION_CAP,
+  DENIAL_LIMIT_KINDS: () => DENIAL_LIMIT_KINDS,
   DETACH_DURABLE_OFF_400_ANCHOR: () => DETACH_DURABLE_OFF_400_ANCHOR,
   DETACH_HEADER: () => DETACH_HEADER,
   DETACH_WIRE_MIN_ENGINE: () => DETACH_WIRE_MIN_ENGINE,
@@ -470130,7 +471084,9 @@ __export(agentsWire_exports, {
   RESUME_CHOICE_BACKGROUND_LABEL: () => RESUME_CHOICE_BACKGROUND_LABEL,
   RESUME_CHOICE_CANCEL_LABEL: () => RESUME_CHOICE_CANCEL_LABEL,
   RESUME_CHOICE_HEADER: () => RESUME_CHOICE_HEADER,
+  RESUME_PLACEMENT_MISMATCH: () => RESUME_PLACEMENT_MISMATCH,
   RESUME_PREFLIGHT_REJECTED: () => RESUME_PREFLIGHT_REJECTED,
+  RESUME_REFUSAL_CODES: () => RESUME_REFUSAL_CODES,
   RESUME_RETRY_LATER_CODES: () => RESUME_RETRY_LATER_CODES,
   RESUME_RUNNING_GUIDANCE_TAG: () => RESUME_RUNNING_GUIDANCE_TAG,
   RESUME_RUNNING_NO_UI_EXIT_CODE: () => RESUME_RUNNING_NO_UI_EXIT_CODE,
@@ -470139,6 +471095,10 @@ __export(agentsWire_exports, {
   REWIND_ERROR_CODE_PREFIXES: () => REWIND_ERROR_CODE_PREFIXES,
   RULE_NOT_SENT_REJECTED_WARN_TEXT: () => RULE_NOT_SENT_REJECTED_WARN_TEXT,
   RULE_NOT_SENT_WARN_TEXT: () => RULE_NOT_SENT_WARN_TEXT,
+  RULE_OFFERS_ABSENCE_REASONS: () => RULE_OFFERS_ABSENCE_REASONS,
+  RULE_OFFER_BATCH_MEMBER_KINDS: () => RULE_OFFER_BATCH_MEMBER_KINDS,
+  RULE_OFFER_MATCHES: () => RULE_OFFER_MATCHES,
+  RULE_OFFER_UNCOVERED_REASONS: () => RULE_OFFER_UNCOVERED_REASONS,
   RUNNING_STATES: () => RUNNING_STATES,
   RUN_BLOCKED_MESSAGE_PREFIX: () => RUN_BLOCKED_MESSAGE_PREFIX,
   RUN_LEVEL_STOP_ERROR_CODES: () => RUN_LEVEL_STOP_ERROR_CODES,
@@ -470217,6 +471177,7 @@ __export(agentsWire_exports, {
   __resetHooksWireCapsForTests: () => __resetHooksWireCapsForTests,
   __resetRetainWithoutWakeWarningForTests: () => __resetRetainWithoutWakeWarningForTests,
   __resetRunningChoiceLedgerForTests: () => __resetRunningChoiceLedgerForTests,
+  __resetSqlEngineReadingsForTests: () => __resetSqlEngineReadingsForTests,
   __resetSubagentOutputCapCacheForTests: () => __resetSubagentOutputCapCacheForTests,
   __resetSubagentOwnerLedgerForTests: () => __resetSubagentOwnerLedgerForTests,
   __resetSubagentStreamCapCacheForTests: () => __resetSubagentStreamCapCacheForTests,
@@ -470363,6 +471324,7 @@ __export(agentsWire_exports, {
   engineCapState: () => engineCapState,
   engineCapString: () => engineCapString,
   engineCapTrue: () => engineCapTrue,
+  engineCapValue: () => engineCapValue,
   engineCapsSettled: () => engineCapsSettled,
   engineCcStopSemantics: () => engineCcStopSemantics,
   engineLimitsSupportWarning: () => engineLimitsSupportWarning,
@@ -470405,6 +471367,7 @@ __export(agentsWire_exports, {
   fleetViewStubRowIds: () => fleetViewStubRowIds,
   fmtCtxOut: () => fmtCtxOut,
   fmtTokens: () => fmtTokens,
+  forgetSqlEngineReading: () => forgetSqlEngineReading,
   gateArmedWaitMs: () => gateArmedWaitMs,
   gateKind: () => gateKind,
   getBgParentRun: () => getBgParentRun,
@@ -470548,6 +471511,7 @@ __export(agentsWire_exports, {
   normalizeTaskNotification: () => normalizeTaskNotification,
   normalizeWirePrincipal: () => normalizeWirePrincipal,
   noteBgOwnerAbsence: () => noteBgOwnerAbsence,
+  noteEngineCapsForSqlEngine: () => noteEngineCapsForSqlEngine,
   notePlanReviewAnswered: () => notePlanReviewAnswered,
   notePlanReviewAnsweredFor: () => notePlanReviewAnsweredFor,
   notePlanReviewAnsweredIfDecisive: () => notePlanReviewAnsweredIfDecisive,
@@ -470556,6 +471520,7 @@ __export(agentsWire_exports, {
   notificationDropCounters: () => notificationDropCounters,
   notificationQueuePortMisses: () => notificationQueuePortMisses,
   observeCancelByDeny: () => observeCancelByDeny,
+  observedSqlEngine: () => observedSqlEngine,
   onEngineTaskBound: () => onEngineTaskBound,
   onGateArmed: () => onGateArmed,
   onGateArmedFor: () => onGateArmedFor,
@@ -470613,6 +471578,7 @@ __export(agentsWire_exports, {
   projectFleetAgentRows: () => projectFleetAgentRows,
   projectFleetAgentRowsFor: () => projectFleetAgentRowsFor,
   projectRewind: () => projectRewind,
+  projectSqlEngineCapability: () => projectSqlEngineCapability,
   projectTasks: () => projectTasks,
   projectWorkflowRun: () => projectWorkflowRun,
   projectWorkflowTaskOutput: () => projectWorkflowTaskOutput,
@@ -470698,6 +471664,8 @@ __export(agentsWire_exports, {
   respondToQuestion: () => respondToQuestion,
   resumeAttachReplayDisclosure: () => resumeAttachReplayDisclosure,
   resumeChoiceFromLabels: () => resumeChoiceFromLabels,
+  resumeRefusalContent: () => resumeRefusalContent,
+  resumeRefusalFromError: () => resumeRefusalFromError,
   resumeRetryLaterFromError: () => resumeRetryLaterFromError,
   resumeRunningCancelUnconfirmedRow: () => resumeRunningCancelUnconfirmedRow,
   resumeRunningLivenessRow: () => resumeRunningLivenessRow,
@@ -470732,6 +471700,7 @@ __export(agentsWire_exports, {
   skillCommandsToSpecs: () => skillCommandsToSpecs,
   splitApiErrorSupplement: () => splitApiErrorSupplement,
   spoolMarkerOf: () => spoolMarkerOf,
+  sqlEngineDoctorDetail: () => sqlEngineDoctorDetail,
   stamp: () => stamp,
   startApprovalsFeed: () => startApprovalsFeed,
   steerEngineSubagent: () => steerEngineSubagent,
@@ -470982,6 +471951,22 @@ var init_detachWire2 = __esm({
   }
 });
 
+// build-src/src/sema/sqlEngineCapability.ts
+var sqlEngineCapability_exports = {};
+__export(sqlEngineCapability_exports, {
+  __resetSqlEngineReadingsForTests: () => __resetSqlEngineReadingsForTests,
+  forgetSqlEngineReading: () => forgetSqlEngineReading,
+  noteEngineCapsForSqlEngine: () => noteEngineCapsForSqlEngine,
+  observedSqlEngine: () => observedSqlEngine,
+  projectSqlEngineCapability: () => projectSqlEngineCapability,
+  sqlEngineDoctorDetail: () => sqlEngineDoctorDetail
+});
+var init_sqlEngineCapability2 = __esm({
+  "build-src/src/sema/sqlEngineCapability.ts"() {
+    init_dist();
+  }
+});
+
 // build-src/src/sema/engineCapsArm.ts
 function beginCapsTeeEpoch(baseUrl) {
   let next = (capsTeeEpochByBase.get(baseUrl) ?? 0) + 1;
@@ -471006,7 +471991,7 @@ function armEngineCapsProbes(input) {
       return caps;
     }) : capsProbe;
     if (afterEngineRespawn) {
-      resetCapsDiscoveryState(baseUrl), invalidateSelfKnowledgeCap(baseUrl), kickAppendSystemPromptCapProbe(baseUrl, appendCapProbe), invalidateEngineCaps(baseUrl, guardedCapsProbe);
+      resetCapsDiscoveryState(baseUrl), invalidateSelfKnowledgeCap(baseUrl), forgetSqlEngineReading(baseUrl), forgetWiringManifestReading(), kickAppendSystemPromptCapProbe(baseUrl, appendCapProbe), invalidateEngineCaps(baseUrl, guardedCapsProbe);
       return;
     }
     kickAppendSystemPromptCapProbe(baseUrl, appendCapProbe), kickEngineCapsProbe(baseUrl, guardedCapsProbe);
@@ -471018,6 +472003,8 @@ var capsTeeEpochByBase, init_engineCapsArm = __esm({
     init_dist();
     init_projectContextCapGate();
     init_selfKnowledge();
+    init_sqlEngineCapability2();
+    init_wiringManifestStore();
     capsTeeEpochByBase = /* @__PURE__ */ new Map();
   }
 });
@@ -471144,8 +472131,8 @@ function ledgerPath(scope) {
 }
 function crashConvergedScopeDigest(baseUrl, principal) {
   try {
-    let { createHash: createHash34 } = __require("node:crypto");
-    return createHash34("sha256").update(scopeKeyOf(baseUrl, principal)).digest("hex").slice(0, 16);
+    let { createHash: createHash33 } = __require("node:crypto");
+    return createHash33("sha256").update(scopeKeyOf(baseUrl, principal)).digest("hex").slice(0, 16);
   } catch {
     return "nodigest";
   }
@@ -471306,6 +472293,17 @@ async function* normalizeToolNames(events3) {
     yield ev;
   }
 }
+async function* tapAutoDeniedToolEnds(events3, openEpoch) {
+  for await (let ev of events3) {
+    try {
+      let kind = surfaceToolEndAutoDenied(ev, openEpoch);
+      kind === "live" ? semaDebugLine("liveClient: tool_end autoDenied=true \u2014 the live card said so") : kind === "late" ? semaDebugLine("liveClient: tool_end autoDenied=true \u2014 corrected the window-closed row") : kind === "late-unsurfaced" && semaDebugLine("liveClient: tool_end autoDenied=true \u2014 the late correction could not be surfaced (no transcript sink); the ledger entry is consumed");
+    } catch (e) {
+      semaDebugLine(`liveClient: the autoDenied tap threw (ignored, the stream is never harmed): ${String(e)}`);
+    }
+    yield ev;
+  }
+}
 async function* stampSubagentOwners(events3, runIdOf, ownerSessionId) {
   for await (let ev of events3)
     recordSubagentOwnerFromProgress(ev, runIdOf(), ownerSessionId), yield ev;
@@ -471447,7 +472445,7 @@ function createLiveConversationClient(config4) {
     capsTee: (caps) => {
       noteEngineCapsForMcpGate(config4.baseUrl, caps), noteEngineCapsForSessionBackground(config4.baseUrl, caps), noteEngineCapsForProjectContext(config4.baseUrl, caps), readCrashConvergedOnce(client3, config4.baseUrl, { principal: config4.principal }), noteEngineCapsForWorkflowsGate(config4.baseUrl, caps, {
         ...typeof config4.principal == "string" ? { principal: config4.principal } : {}
-      });
+      }), noteEngineCapsForSqlEngine(config4.baseUrl, caps);
     },
     afterEngineRespawn: config4.afterEngineRespawn === !0
   }), prepareTaskAgentsWire({
@@ -471638,7 +472636,7 @@ function createLiveConversationClient(config4) {
             ...opts?.signal ? { signal: opts.signal } : {}
           }) : live;
           return diagnoseSseIdleTear(
-            normalizeToolNames(
+            normalizeToolNames(tapAutoDeniedToolEnds(
               captureSessionId(
                 // §4④ engine 1.163 — AskUserQuestion parks the run `suspended` (no `question` frames anymore);
                 // the bridge turns that park into dialog → approvals.decide → runs.events continuation, INSIDE
@@ -471674,8 +472672,9 @@ function createLiveConversationClient(config4) {
                 () => headerAcquired,
                 () => earlyTaskId,
                 () => getLiveSessionEpoch() === openEpoch
-              )
-            ),
+              ),
+              openEpoch
+            )),
             baseUrlTrimmed,
             opts?.signal
           );
@@ -471696,7 +472695,7 @@ function createLiveConversationClient(config4) {
       events(taskId, opts) {
         let openEpoch = getLiveSessionEpoch();
         return withDurableSuggestionsTail(
-          normalizeToolNames(
+          normalizeToolNames(tapAutoDeniedToolEnds(
             captureSessionId(
               bridgeAskUserQuestionGates(
                 demuxQuestionFrames(
@@ -471727,8 +472726,9 @@ function createLiveConversationClient(config4) {
               void 0,
               void 0,
               () => getLiveSessionEpoch() === openEpoch
-            )
-          ),
+            ),
+            openEpoch
+          )),
           taskId,
           (id) => client3.runs.get(id, { ...engineSessionParamSpread() }),
           // 调用方的中断口:补收窗(≤2s)里用户 Ctrl+C / 关流 ⇒ 立刻停,绝不在中断后多打 HTTP。
@@ -471824,6 +472824,9 @@ var ENGINE_TO_CC_TOOL, SUGGESTIONS_TAIL_MAX_ATTEMPTS, SUGGESTIONS_TAIL_RETRY_MS,
     init_engineCapsArm();
     init_crashConvergedNotice();
     init_selfOrchestrationDenial2();
+    init_sqlEngineCapability2();
+    init_liveApprovalCardHandles();
+    init_debugLine();
     init_projectContextCapGate();
     init_dist();
     init_dist();
@@ -487837,12 +488840,12 @@ function readOffers(confirm2, key = "ruleOffers") {
       if (!Array.isArray(o.rules) || o.rules.length === 0 || !Number.isSafeInteger(o.uncoveredSegments) || o.uncoveredSegments < 0) continue;
       let members = [], memberShapeOk = !0;
       for (let m2 of o.rules) {
-        let triple = readRuleTriple2(m2), segment2 = m2?.segment;
-        if (triple === void 0 || typeof segment2 != "string" || segment2 === "") {
+        let member = readBatchMember(m2);
+        if (member === void 0) {
           memberShapeOk = !1;
           break;
         }
-        members.push({ ...triple, segment: segment2 });
+        members.push(member);
       }
       if (!memberShapeOk) continue;
       out6.push({ kind: "batch", offerIndex, rules: members, uncoveredSegments: o.uncoveredSegments });
@@ -487851,12 +488854,27 @@ function readOffers(confirm2, key = "ruleOffers") {
   }
   return out6;
 }
+function isRuleOfferMatch2(v2) {
+  return RULE_OFFER_MATCHES.some((m2) => m2 === v2);
+}
 function readRuleTriple2(v2) {
   if (v2 === null || typeof v2 != "object") return;
   let s = v2;
-  if (!(typeof s.rule != "string" || s.rule === "") && !(s.match !== "exact" && s.match !== "prefix"))
+  if (!(typeof s.rule != "string" || s.rule === "") && isRuleOfferMatch2(s.match))
     return { rule: s.rule, match: s.match, command: typeof s.command == "string" ? s.command : "" };
 }
+function readBatchMember(v2) {
+  if (v2 === null || typeof v2 != "object") return;
+  let m2 = v2;
+  if (typeof m2.segment != "string" || m2.segment === "") return;
+  let segment2 = m2.segment, kind = m2.kind === void 0 ? "command" : m2.kind;
+  if (kind === "command") {
+    let triple = readRuleTriple2(v2);
+    return triple === void 0 ? void 0 : { kind: "command", ...triple, segment: segment2 };
+  }
+  if (kind === "directoryRead")
+    return typeof m2.rule != "string" || m2.rule === "" || typeof m2.directory != "string" || m2.directory === "" ? void 0 : { kind: "directoryRead", rule: m2.rule, directory: m2.directory, segment: segment2 };
+}
 function engineRuleSuggestionOptions(confirm2) {
   let offers = readOffers(confirm2);
   if (offers.length === 0) return [];
@@ -512371,7 +513389,7 @@ function _temp158() {
 }
 var import_compiler_runtime307, import_react317, SETTINGS_ERRORS_NOTIFICATION_KEY, init_useSettingsErrors = __esm({
   "build-src/src/hooks/notifs/useSettingsErrors.tsx"() {
-    import_compiler_runtime307 = __toESM(require_compiler_runtime(), 1), import_react317 = __toESM(require_react(), 1);
+    import_compiler_runtime307 = __toESM(require_compiler_runtime()), import_react317 = __toESM(require_react());
     init_notifications2();
     init_state();
     init_allErrors();
@@ -521907,6 +522925,24 @@ async function collectAxesRows(opts, deps2) {
   } catch {
     rows2.push({ label: "Auto mode", status: "warn", detail: "reading unavailable" });
   }
+  try {
+    let { sqlEngineDoctorDetail: sqlEngineDoctorDetail2, observedSqlEngine: observedSqlEngine2 } = await Promise.resolve().then(() => (init_sqlEngineCapability2(), sqlEngineCapability_exports)), reading = deps2?.readSqlEngine !== void 0 ? deps2.readSqlEngine() : observedSqlEngine2();
+    rows2.push({ label: "SQL engine", status: "info", detail: sqlEngineDoctorDetail2(reading) });
+  } catch {
+    rows2.push({ label: "SQL engine", status: "warn", detail: "reading unavailable" });
+  }
+  try {
+    let { wiringMcpDoctorDetail: wiringMcpDoctorDetail2, observedWiringMcp: observedWiringMcp2 } = await Promise.resolve().then(() => (init_wiringManifestStore(), wiringManifestStore_exports)), readRows = deps2?.readWiringMcp !== void 0 ? deps2.readWiringMcp() : observedWiringMcp2();
+    rows2.push({
+      label: "MCP servers (engine leg)",
+      status: "info",
+      // 消毒口在**呈现面**给(措辞在 store,消毒在这里 —— 与 modelGateRemovedLine 同分工):
+      // 三座都是 UNTRUSTED-for-display,只渲染、绝不参与判定。
+      detail: wiringMcpDoctorDetail2(readRows, (v2, max2) => cleanUntrustedForDisplay(v2, max2))
+    });
+  } catch {
+    rows2.push({ label: "MCP servers (engine leg)", status: "warn", detail: "reading unavailable" });
+  }
   let remote = (() => {
     try {
       return engineTarget.configuredEngineUrl();
@@ -525252,8 +526288,8 @@ var CC_DIR5, CC_GLOBAL_FILE2, MCP_SCOPE_LABELS, init_mcpChannels = __esm({
 });
 
 // build-src/src/sema/importSources.ts
-import { existsSync as existsSync34, mkdirSync as mkdirSync27, readdirSync as readdirSync13, readFileSync as readFileSync52, writeFileSync as writeFileSync27 } from "node:fs";
-import { createHash as createHash31 } from "node:crypto";
+import { existsSync as existsSync34, mkdirSync as mkdirSync27, readdirSync as readdirSync14, readFileSync as readFileSync52, writeFileSync as writeFileSync27 } from "node:fs";
+import { createHash as createHash30 } from "node:crypto";
 import { homedir as homedir48 } from "node:os";
 import { dirname as dirname89, join as join195, resolve as resolve50, sep as sep43 } from "node:path";
 function toSafeName(raw2) {
@@ -525261,14 +526297,14 @@ function toSafeName(raw2) {
 }
 function safeReaddirFiles(dir, ext) {
   try {
-    return readdirSync13(dir, { withFileTypes: !0 }).filter((e) => e.isFile() && e.name.endsWith(ext)).map((e) => e.name);
+    return readdirSync14(dir, { withFileTypes: !0 }).filter((e) => e.isFile() && e.name.endsWith(ext)).map((e) => e.name);
   } catch {
     return [];
   }
 }
 function hasNamespacedSubdirs(dir) {
   try {
-    return readdirSync13(dir, { withFileTypes: !0 }).filter((e) => e.isDirectory()).map((e) => e.name);
+    return readdirSync14(dir, { withFileTypes: !0 }).filter((e) => e.isDirectory()).map((e) => e.name);
   } catch {
     return [];
   }
@@ -525725,7 +526761,7 @@ async function scanImportSources(opts) {
 `) } : { scans, warnings };
 }
 function importScanDigest(scans) {
-  let hash2 = createHash31("sha256");
+  let hash2 = createHash30("sha256");
   for (let scan of [...scans].sort((a, b3) => a.sourceId.localeCompare(b3.sourceId))) {
     hash2.update(scan.sourceId).update("\0");
     for (let item of [...scan.result.items].sort((a, b3) => a.id.localeCompare(b3.id)))
@@ -526605,14 +527641,15 @@ async function* ask(params) {
             continue;
           }
           if (t2 === "engine_notice") {
-            let en2 = msg, clean9 = (v2) => cleanUntrustedForDisplay(v2, 160), detailText = "";
+            let en2 = msg, clean9 = (v2) => cleanUntrustedForDisplay(v2, 160), detailKeys = "";
             try {
-              detailText = en2.detail === void 0 ? "" : cleanUntrustedForDisplay(JSON.stringify(en2.detail), 400);
+              detailKeys = en2.detail !== null && typeof en2.detail == "object" && !Array.isArray(en2.detail) ? Object.keys(en2.detail).map((k2) => clean9(k2)).join(",") : en2.detail === void 0 ? "" : `<${typeof en2.detail}>`;
             } catch {
-              detailText = "(unserializable)";
+              detailKeys = "(unreadable)";
             }
+            let messageLen = typeof en2.message == "string" ? en2.message.length : 0;
             logForDebugging(
-              `[sema][print] engine_notice swallowed (audit; no stdout parity frame \u2014 see [4429]/#302): code=${clean9(en2.code)} eventId=${clean9(en2.eventId)} eventSeq=${clean9(en2.eventSeq)} ts=${clean9(en2.ts)} sessionId=${clean9(en2.sessionId)} message=${clean9(en2.message)} detail=${detailText}`
+              `[sema][print] engine_notice swallowed (audit; no stdout parity frame \u2014 see [4429]/#302): code=${clean9(en2.code)} eventId=${clean9(en2.eventId)} eventSeq=${clean9(en2.eventSeq)} ts=${clean9(en2.ts)} sessionId=${clean9(en2.sessionId)} messageLen=${String(messageLen)} detailKeys=[${detailKeys}]`
             );
             let noticeKey = `${clean9(en2.eventId)}|${clean9(en2.eventSeq)}|${clean9(en2.code)}`;
             if (!emittedNoticeKeys.has(noticeKey) && isSurfaceableEngineNoticeCode(en2.code)) {
@@ -531150,18 +532187,18 @@ __export(adoptionGuard_exports, {
   countLocalSessionArtifacts: () => countLocalSessionArtifacts,
   remoteSwitchSessionNotice: () => remoteSwitchSessionNotice
 });
-import { readdirSync as readdirSync14, existsSync as existsSync35 } from "node:fs";
+import { readdirSync as readdirSync15, existsSync as existsSync35 } from "node:fs";
 import { join as join198 } from "node:path";
 function countLocalSessionArtifacts() {
   let census = { projects: 0, sessions: 0 };
   try {
     let root2 = getProjectsDir();
     if (!existsSync35(root2)) return census;
-    for (let entry of readdirSync14(root2, { withFileTypes: !0 })) {
+    for (let entry of readdirSync15(root2, { withFileTypes: !0 })) {
       if (!entry.isDirectory()) continue;
       let n2 = 0;
       try {
-        n2 = readdirSync14(join198(root2, entry.name)).filter((f) => f.endsWith(".jsonl")).length;
+        n2 = readdirSync15(join198(root2, entry.name)).filter((f) => f.endsWith(".jsonl")).length;
       } catch {
         continue;
       }
@@ -533085,8 +534122,8 @@ __export(cloudResources_exports, {
   cloudResourceRemove: () => cloudResourceRemove,
   cloudResourceSync: () => cloudResourceSync
 });
-import { createHash as createHash32 } from "node:crypto";
-import { existsSync as existsSync37, readdirSync as readdirSync15, readFileSync as readFileSync56, statSync as statSync17 } from "node:fs";
+import { createHash as createHash31 } from "node:crypto";
+import { existsSync as existsSync37, readdirSync as readdirSync16, readFileSync as readFileSync56, statSync as statSync17 } from "node:fs";
 import { basename as basename69, dirname as dirname91, isAbsolute as isAbsolute34, join as join201, resolve as resolve51 } from "node:path";
 import { getEffective as getEffective2, getMeConfig, getScopeConfigDraft as getScopeConfigDraft2, OAuthFlowError as OAuthFlowError3, RegistryApiError as RegistryApiError3 } from "@sema-agent/sdk/registry";
 function fail4(e) {
@@ -533572,7 +534609,7 @@ async function readSkillEntry(file2, fallbackName) {
     return { name, display: display2, entry: null, notes: [], skipReason: `skill name '${name}' is not registry-safe (letters/digits/._- , no spaces). Set a conforming 'name:' in the frontmatter.` };
   if (!content)
     return { name, display: display2, entry: null, notes: [], skipReason: `${file2} has no body after the frontmatter \u2014 nothing to upload.` };
-  let contentHash = `sha256:${createHash32("sha256").update(content, "utf8").digest("hex")}`;
+  let contentHash = `sha256:${createHash31("sha256").update(content, "utf8").digest("hex")}`;
   return {
     name,
     display: display2,
@@ -533585,7 +534622,7 @@ async function loadLocalSkillEntries() {
   for (let root2 of roots) {
     let dirs = [];
     try {
-      dirs = readdirSync15(root2).filter((d4) => {
+      dirs = readdirSync16(root2).filter((d4) => {
         try {
           return statSync17(join201(root2, d4)).isDirectory() && existsSync37(join201(root2, d4, "SKILL.md"));
         } catch {
@@ -538731,7 +539768,7 @@ import {
   copyFileSync as copyFileSync8,
   existsSync as existsSync39,
   mkdirSync as mkdirSync29,
-  readdirSync as readdirSync16,
+  readdirSync as readdirSync17,
   readFileSync as readFileSync57,
   statSync as statSync19
 } from "node:fs";
@@ -538852,7 +539889,7 @@ function syncTree(srcDir, destDir, labelBase, opts, report) {
     syncPlainFile(srcDir, destDir, labelBase, opts, report);
     return;
   }
-  for (let name of readdirSync16(srcDir)) {
+  for (let name of readdirSync17(srcDir)) {
     let srcChild = join206(srcDir, name), destChild = join206(destDir, name), childStat;
     try {
       childStat = statSync19(srcChild);
@@ -541881,7 +542918,7 @@ var React202, import_jsx_runtime518, lastTierEditError, init_TiersHub = __esm({
 });
 
 // build-src/src/sema/config/skillsChannels.ts
-import { existsSync as existsSync40, mkdirSync as mkdirSync30, readdirSync as readdirSync17, readFileSync as readFileSync60, realpathSync as realpathSync17, renameSync as renameSync18, statSync as statSync20 } from "node:fs";
+import { existsSync as existsSync40, mkdirSync as mkdirSync30, readdirSync as readdirSync18, readFileSync as readFileSync60, realpathSync as realpathSync17, renameSync as renameSync18, statSync as statSync20 } from "node:fs";
 import { basename as basename72, dirname as dirname96, join as join209 } from "node:path";
 function skillsDirFor(source) {
   return source === "user" ? join209(resolveConfigHome(), "skills") : join209(getCwd(), ".sema", "skills");
@@ -541928,7 +542965,7 @@ function listInstalledSkills() {
   for (let source of sources) {
     let dir = skillsDirFor(source), entries;
     try {
-      entries = readdirSync17(dir).filter((n2) => !n2.startsWith("."));
+      entries = readdirSync18(dir).filter((n2) => !n2.startsWith("."));
     } catch {
       continue;
     }
@@ -544208,7 +545245,7 @@ Usage: sema --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("sema 1.0.100", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
+  }).version("sema 1.0.102", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).psHandler([]), process.exit(process.exitCode ?? 0);
   }), program2.command("logs [id]").description("Print a background session's recent terminal output").action(async (id) => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).logsHandler(id, []), process.exit(process.exitCode ?? 0);
@@ -546329,7 +547366,7 @@ var init_local_load = __esm({
 // node_modules/@sema-agent/settings-schema/dist/scheduler-store-node.js
 import { mkdirSync as mkdirSync32, readFileSync as readFileSync64, writeFileSync as writeFileSync30, renameSync as renameSync19 } from "node:fs";
 import { dirname as dirname98 } from "node:path";
-import { randomBytes as randomBytes30, createHash as createHash33 } from "node:crypto";
+import { randomBytes as randomBytes30, createHash as createHash32 } from "node:crypto";
 function loadSchedulerStore(path28) {
   try {
     return parseSchedulerStore(readFileSync64(path28, "utf-8"));
@@ -546428,7 +547465,7 @@ var init_schedulerDaemonWire = __esm({
 });
 
 // build-src/src/sema/scheduler/sessionReap.ts
-import { mkdirSync as mkdirSync33, readdirSync as readdirSync18, readFileSync as readFileSync65, unlinkSync as unlinkSync17, writeFileSync as writeFileSync31 } from "node:fs";
+import { mkdirSync as mkdirSync33, readdirSync as readdirSync19, readFileSync as readFileSync65, unlinkSync as unlinkSync17, writeFileSync as writeFileSync31 } from "node:fs";
 import { dirname as dirname99, join as join214 } from "node:path";
 function isSessionLifetimeRecord(r) {
   return r.lifetime === "session";
@@ -546482,7 +547519,7 @@ function removeSchedulerClaim(storePath, pid = process.pid) {
 function readAliveClaimedSessionIds(storePath, opts = {}) {
   let alive = opts.isPidAlive ?? pidAlive3, dir = schedulerClaimsDir(storePath), out6 = /* @__PURE__ */ new Set(), files2;
   try {
-    files2 = readdirSync18(dir);
+    files2 = readdirSync19(dir);
   } catch {
     return out6;
   }
@@ -547240,11 +548277,11 @@ var init_skillsFill = __esm({
 });
 
 // build-src/src/sema/teamOnboarding.ts
-import { existsSync as existsSync43, readdirSync as readdirSync19 } from "fs";
+import { existsSync as existsSync43, readdirSync as readdirSync20 } from "fs";
 function hasWorkspaceData() {
   try {
     let dir = getProjectsDir2();
-    return existsSync43(dir) ? readdirSync19(dir).length > 0 : !1;
+    return existsSync43(dir) ? readdirSync20(dir).length > 0 : !1;
   } catch {
     return !1;
   }