@sema-agent/cli 1.0.101 → 1.0.102

package/sema-main.js

@@ -47339,7 +47339,7 @@ var CHROME_ARM_TABLE, CHROME_ARMS, init_seam = __esm({
       },
       wiring_manifest: {
         required: !1,
-        duty: "\u53EF\u9009:\u6E32\u5F15\u64CE\u63A5\u7EBF\u81EA\u8FF0\u91CC\u7684\u4E24\u6BB5\u7528\u6237\u9762\u4E8B\u5B9E(modelGate = \u672C run \u88AB\u6A21\u578B\u95E8\u5378\u6389\u7684\u5DE5\u5177 + \u9010\u5B57\u6062\u590D\u529E\u6CD5;autoMode = \u6B66\u88C5\u4F4D + core \u516D\u8BCD\u539F\u56E0)\u3002\u{1F534} \u4E24\u6BB5\u7F3A\u5E2D\u4E00\u5F8B\u4E0D\u6E32\u80AF\u5B9A\u53E5;reason \u7EDD\u4E0D\u6620\u5C04 capabilities \u516D\u8BCD;restore \u539F\u6837\u5448\u73B0;durable \u91CD\u653E\u6309 run/leg \u5E42\u7B49"
+        duty: "\u53EF\u9009:\u6E32\u5F15\u64CE\u63A5\u7EBF\u81EA\u8FF0\u91CC\u7684\u4E09\u6BB5\u7528\u6237\u9762\u4E8B\u5B9E(modelGate = \u672C run \u88AB\u6A21\u578B\u95E8\u5378\u6389\u7684\u5DE5\u5177 + \u9010\u5B57\u6062\u590D\u529E\u6CD5;autoMode = \u6B66\u88C5\u4F4D + core \u516D\u8BCD\u539F\u56E0;mcp[] = \u672C\u817F\u7533\u62A5\u7684\u6BCF\u53F0 MCP \u670D\u52A1\u5668\u7684\u8FDE\u63A5\u65F6\u5FEB\u7167)\u3002\u{1F534} \u4E09\u6BB5\u7F3A\u5E2D\u4E00\u5F8B\u4E0D\u6E32\u80AF\u5B9A\u53E5;reason \u7EDD\u4E0D\u6620\u5C04 capabilities \u516D\u8BCD;restore \u539F\u6837\u5448\u73B0;mcp \u7684\u7A7A\u6570\u7EC4\u662F\u300C\u4E00\u53F0\u90FD\u6CA1\u7533\u62A5\u300D\u8FD9\u53E5\u6B63\u9762\u4E8B\u5B9E\u3001**\u4E0D\u662F**\u7F3A\u5E2D(\u5224\u5728\u573A\u5199 mcp !== undefined,\u522B\u5199 mcp?.length),errorCode \u6309\u5F00\u96C6\u5206\u652F\u5FC5\u5E26 default;durable \u91CD\u653E\u6309 run/leg \u5E42\u7B49"
       },
       text_segment_end: {
         required: !1,
@@ -50461,12 +50461,13 @@ var assistantArm, userArm, systemArm, diagnosticsArm, steeringInjectedArm, works
     }, wiringManifestArm = function* (m2) {
       if (m2.parentToolCallId !== void 0)
         return;
-      let modelGate = m2._sema_modelGate, autoMode = m2._sema_autoMode, hasGate = typeof modelGate == "object" && modelGate !== null, hasAuto = typeof autoMode == "object" && autoMode !== null;
-      !hasGate && !hasAuto || (yield chrome({
+      let modelGate = m2._sema_modelGate, autoMode = m2._sema_autoMode, mcp2 = m2._sema_mcp, hasGate = typeof modelGate == "object" && modelGate !== null, hasAuto = typeof autoMode == "object" && autoMode !== null, hasMcp = Array.isArray(mcp2);
+      !hasGate && !hasAuto && !hasMcp || (yield chrome({
         kind: "wiring_manifest",
         laneProof: MAIN,
         ...hasGate ? { modelGate } : {},
         ...hasAuto ? { autoMode } : {},
+        ...hasMcp ? { mcp: mcp2 } : {},
         ...typeof m2.eventId == "string" && m2.eventId.length > 0 ? { eventId: m2.eventId } : {}
       }));
     }, textSegmentEndArm = function* (m2) {
@@ -51595,6 +51596,17 @@ function engineCapNestedTrue(baseUrl, parentKey, key) {
   let parent2 = capsByBase.get(baseUrl)?.[parentKey];
   return parent2 === null || typeof parent2 != "object" ? !1 : parent2[key] === !0;
 }
+function engineCapValue(baseUrl, key) {
+  if (!baseUrl)
+    return { kind: "unobserved" };
+  let caps = capsByBase.get(baseUrl);
+  if (caps === void 0)
+    return { kind: "unobserved" };
+  if (!(key in caps))
+    return { kind: "not_reported" };
+  let v2 = caps[key];
+  return v2 === void 0 ? { kind: "not_reported" } : v2 === null ? { kind: "null" } : { kind: "value", value: v2 };
+}
 function engineCapString(baseUrl, key) {
   if (!baseUrl)
     return;
@@ -51615,6 +51627,123 @@ var capsByBase, inFlight, settleByBase, genByBase, init_engineCapsCache = __esm(
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/principalWire.js
+function normalizeWirePrincipal(v2) {
+  return v2 !== void 0 && v2.trim() !== "" ? v2 : void 0;
+}
+var init_principalWire = __esm({
+  "node_modules/@sema-agent/client-core/dist/principalWire.js"() {
+  }
+});
+
+// node_modules/@sema-agent/client-core/dist/engineWireTarget.js
+function installEngineWireTarget(t2) {
+  return installEngineWireTargetFor(DEFAULT_SESSION_KEY, t2);
+}
+function installEngineWireTargetFor(sessionKey, t2) {
+  let prev = installedByKey.get(sessionKey);
+  return installedByKey.set(sessionKey, t2), () => {
+    installedByKey.set(sessionKey, prev);
+  };
+}
+function engineWireTarget() {
+  return engineWireTargetFor(DEFAULT_SESSION_KEY);
+}
+function engineWireTargetFor(sessionKey) {
+  let installed6 = installedByKey.get(sessionKey) ?? null;
+  if (installed6 !== null) {
+    if (normalizeWirePrincipal(installed6.principal) === installed6.principal)
+      return installed6;
+    let { principal: _dropped, ...rest } = installed6;
+    return rest;
+  }
+  let env6 = hostEnv(), baseUrl = env6.SEMA_LIVE_BASEURL;
+  if (!baseUrl)
+    return null;
+  let envPrincipal = normalizeWirePrincipal(env6.SEMA_LIVE_PRINCIPAL);
+  return {
+    baseUrl,
+    ...env6.SEMA_LIVE_TOKEN ? { token: env6.SEMA_LIVE_TOKEN } : {},
+    ...envPrincipal !== void 0 ? { principal: envPrincipal } : {}
+  };
+}
+function engineWireDebugEnabled() {
+  return !!hostEnv().SEMA_DEBUG;
+}
+var installedByKey, init_engineWireTarget = __esm({
+  "node_modules/@sema-agent/client-core/dist/engineWireTarget.js"() {
+    init_hostEnv();
+    init_sessionSlot();
+    init_principalWire();
+    installedByKey = createSessionSlot();
+  }
+});
+
+// node_modules/@sema-agent/client-core/dist/sqlEngineCapability.js
+function projectSqlEngineCapability(caps) {
+  if (caps === null || typeof caps != "object")
+    return;
+  if (!("sql" in caps))
+    return { kind: "not_reported" };
+  let sql = caps.sql;
+  if (sql === null)
+    return { kind: "none" };
+  if (sql === void 0)
+    return { kind: "not_reported" };
+  if (typeof sql != "object")
+    return;
+  let s = sql;
+  if (!(typeof s.engine != "string" || s.engine === "") && !(typeof s.isolation != "string" || s.isolation === "") && !(s.txnMode !== null && (typeof s.txnMode != "string" || s.txnMode === "")))
+    return { kind: "present", view: { engine: s.engine, isolation: s.isolation, txnMode: s.txnMode } };
+}
+function noteEngineCapsForSqlEngine(baseUrl, caps) {
+  try {
+    if (typeof baseUrl != "string" || baseUrl === "")
+      return;
+    let reading = projectSqlEngineCapability(caps);
+    if (reading === void 0) {
+      readingByBase.delete(baseUrl);
+      return;
+    }
+    readingByBase.set(baseUrl, reading);
+  } catch {
+  }
+}
+function observedSqlEngine(baseUrl = engineWireTarget()?.baseUrl) {
+  return typeof baseUrl != "string" || baseUrl === "" ? { kind: "unobserved" } : readingByBase.get(baseUrl) ?? { kind: "unobserved" };
+}
+function cleanSqlDetailScalar(v2) {
+  return escapeDisplayControlChars(v2.slice(0, SQL_DETAIL_MAX));
+}
+function sqlEngineDoctorDetail(reading) {
+  switch (reading.kind) {
+    case "unobserved":
+      return "not observed \u2014 the engine reports it on /v1/capabilities; this process has not received a capabilities response from the engine yet";
+    case "not_reported":
+      return "not reported by this engine \u2014 the capability position needs a newer engine";
+    case "none":
+      return "none \u2014 the engine reports no SQL engine posture: either this deployment has no SQL backend, or its initialization was refused (the engine log says which)";
+    case "present": {
+      let e = cleanSqlDetailScalar(reading.view.engine), i = cleanSqlDetailScalar(reading.view.isolation), t2 = reading.view.txnMode === null ? "no txn-mode indicator on this engine" : cleanSqlDetailScalar(reading.view.txnMode);
+      return `${e} \xB7 isolation ${i} \xB7 txn ${t2}`;
+    }
+  }
+}
+function forgetSqlEngineReading(baseUrl) {
+  typeof baseUrl != "string" || baseUrl === "" || readingByBase.delete(baseUrl);
+}
+function __resetSqlEngineReadingsForTests() {
+  readingByBase.clear();
+}
+var readingByBase, SQL_DETAIL_MAX, init_sqlEngineCapability = __esm({
+  "node_modules/@sema-agent/client-core/dist/sqlEngineCapability.js"() {
+    init_fleetTaskDesc();
+    init_engineWireTarget();
+    readingByBase = /* @__PURE__ */ new Map();
+    SQL_DETAIL_MAX = 40;
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/adapter/types.js
 function eventSeq(ev) {
   return ev.id;
@@ -51883,15 +52012,6 @@ var SSE_HEARTBEAT_GRACE_ENV, SSE_GRACE_MIN_MS, SSE_GRACE_MAX_MS, SDK_DEFAULT_GRA
   }
 });
 
-// node_modules/@sema-agent/client-core/dist/principalWire.js
-function normalizeWirePrincipal(v2) {
-  return v2 !== void 0 && v2.trim() !== "" ? v2 : void 0;
-}
-var init_principalWire = __esm({
-  "node_modules/@sema-agent/client-core/dist/principalWire.js"() {
-  }
-});
-
 // node_modules/@sema-agent/client-core/dist/engineWireSdk.js
 import { AgentClient } from "@sema-agent/sdk";
 function isLoopbackWireUrl(url3) {
@@ -53106,7 +53226,7 @@ function eventToSdkMessage(ev, ctx) {
     // falls back to the mock synthesizer (events.d.ts:79). Not a renderable CC SDKMessage —
     // a side-channel arm `sdkMessagesToCcEvents` reads; CC's own renderer never sees it.
     case "tool_end": {
-      let structured = ev.structured, toolEndErrorCode = ev.errorCode, toolEndSettledBy = ev.settledBy, toolEndApprover = ev.approver, toolEndResolution = ev.resolution, collateralAbort = ev._sema_collateral_abort;
+      let structured = ev.structured, toolEndErrorCode = ev.errorCode, toolEndSettledBy = ev.settledBy, toolEndApprover = ev.approver, toolEndResolution = ev.resolution, toolEndAutoDenied = ev.autoDenied, collateralAbort = ev._sema_collateral_abort;
       return projected(stamp(ctx, {
         type: "tool_end_result",
         toolCallId: ev.toolCallId,
@@ -53125,6 +53245,8 @@ function eventToSdkMessage(ev, ctx) {
         ...typeof toolEndApprover == "string" && toolEndApprover.length > 0 ? { approver: toolEndApprover } : {},
         // A-D2:拒绝臂分类(开集、缺席不铸、在场原样;判据本体是上方那段头注)。
         ...typeof toolEndResolution == "string" && toolEndResolution.length > 0 ? { resolution: toolEndResolution } : {},
+        // S-125⑧:自动拒判别位(**严格 true** 才上臂;见上方头注)。
+        ...toolEndAutoDenied === !0 ? { autoDenied: !0 } : {},
         // #324:连坐 abort 机读位(严格 true 才上臂;见上方头注)。
         ...collateralAbort === !0 ? { _sema_collateral_abort: !0 } : {},
         ...ev.eventId !== void 0 ? { eventId: ev.eventId } : {},
@@ -53475,6 +53597,25 @@ function textEndProjection(ev, ctx) {
     ...typeof ev.parentToolCallId == "string" ? { parentToolCallId: ev.parentToolCallId } : {}
   }));
 }
+function projectMcpSection(raw2) {
+  if (!Array.isArray(raw2))
+    return;
+  let rows2 = [];
+  for (let e of raw2) {
+    if (typeof e != "object" || e === null || Array.isArray(e))
+      continue;
+    let r = e, name = typeof r.name == "string" && r.name.length > 0 ? r.name : void 0, status3 = typeof r.status == "string" && r.status.length > 0 ? r.status : void 0;
+    name === void 0 || status3 === void 0 || rows2.push({
+      name,
+      status: status3,
+      ...typeof r.source == "string" && r.source.length > 0 ? { source: r.source } : {},
+      ...typeof r.errorCode == "string" && r.errorCode.length > 0 ? { errorCode: r.errorCode } : {},
+      ...typeof r.toolCount == "number" && Number.isFinite(r.toolCount) ? { toolCount: r.toolCount } : {}
+    });
+  }
+  if (!(raw2.length > 0 && rows2.length === 0))
+    return rows2;
+}
 function projectModelGateSection(raw2) {
   if (typeof raw2 != "object" || raw2 === null || Array.isArray(raw2))
     return;
@@ -53490,11 +53631,12 @@ function projectAutoModeSection(raw2) {
     return { armed: armed3, reason };
 }
 function wiringManifestSupersetBody(ev) {
-  let modelGate = projectModelGateSection(ev.modelGate), autoMode = projectAutoModeSection(ev.autoMode);
-  if (!(modelGate === void 0 && autoMode === void 0))
+  let modelGate = projectModelGateSection(ev.modelGate), autoMode = projectAutoModeSection(ev.autoMode), mcp2 = projectMcpSection(ev.mcp);
+  if (!(modelGate === void 0 && autoMode === void 0 && mcp2 === void 0))
     return {
       ...modelGate !== void 0 ? { _sema_modelGate: modelGate } : {},
-      ...autoMode !== void 0 ? { _sema_autoMode: autoMode } : {}
+      ...autoMode !== void 0 ? { _sema_autoMode: autoMode } : {},
+      ...mcp2 !== void 0 ? { _sema_mcp: mcp2 } : {}
     };
 }
 function engineNoticeProjection(ev, ctx) {
@@ -55373,49 +55515,6 @@ var HEADLESS_RECONNECT_MAX, RUN_ROW_TERMINAL_STATUSES, init_headlessReconnectWir
   }
 });
 
-// node_modules/@sema-agent/client-core/dist/engineWireTarget.js
-function installEngineWireTarget(t2) {
-  return installEngineWireTargetFor(DEFAULT_SESSION_KEY, t2);
-}
-function installEngineWireTargetFor(sessionKey, t2) {
-  let prev = installedByKey.get(sessionKey);
-  return installedByKey.set(sessionKey, t2), () => {
-    installedByKey.set(sessionKey, prev);
-  };
-}
-function engineWireTarget() {
-  return engineWireTargetFor(DEFAULT_SESSION_KEY);
-}
-function engineWireTargetFor(sessionKey) {
-  let installed6 = installedByKey.get(sessionKey) ?? null;
-  if (installed6 !== null) {
-    if (normalizeWirePrincipal(installed6.principal) === installed6.principal)
-      return installed6;
-    let { principal: _dropped, ...rest } = installed6;
-    return rest;
-  }
-  let env6 = hostEnv(), baseUrl = env6.SEMA_LIVE_BASEURL;
-  if (!baseUrl)
-    return null;
-  let envPrincipal = normalizeWirePrincipal(env6.SEMA_LIVE_PRINCIPAL);
-  return {
-    baseUrl,
-    ...env6.SEMA_LIVE_TOKEN ? { token: env6.SEMA_LIVE_TOKEN } : {},
-    ...envPrincipal !== void 0 ? { principal: envPrincipal } : {}
-  };
-}
-function engineWireDebugEnabled() {
-  return !!hostEnv().SEMA_DEBUG;
-}
-var installedByKey, init_engineWireTarget = __esm({
-  "node_modules/@sema-agent/client-core/dist/engineWireTarget.js"() {
-    init_hostEnv();
-    init_sessionSlot();
-    init_principalWire();
-    installedByKey = createSessionSlot();
-  }
-});
-
 // node_modules/@sema-agent/client-core/dist/engineSessionParam.js
 function engineSessionParamFor(sessionKey) {
   let sid = hostSessionFor(sessionKey)?.currentSessionId();
@@ -59470,7 +59569,7 @@ var HITL_ASK_QUESTION_ID_PREFIX, PLAN_REVIEW_QUESTION_ID_PREFIX, HITL_FRAME_CALL
 });
 
 // node_modules/@sema-agent/client-core/dist/hitl/toolApprovalWire.js
-import { RULE_OFFER_MATCHES, RULE_OFFER_BATCH_MEMBER_KINDS, RULE_OFFER_UNCOVERED_REASONS } from "@sema-agent/sdk";
+import { RULE_OFFER_MATCHES, RULE_OFFER_BATCH_MEMBER_KINDS, RULE_OFFER_UNCOVERED_REASONS, RULE_OFFERS_ABSENCE_REASONS, DENIAL_LIMIT_KINDS } from "@sema-agent/sdk";
 function isFsApprovalGate(gate) {
   return gate ? gate.kind === "tool_approval" ? !0 : typeof gate.toolName == "string" && toolNameIsFsWrite(gate.toolName) : !1;
 }
@@ -59735,6 +59834,18 @@ function isNonNegativeFinite(v2) {
 function isWireRecordCarrier(v2) {
   return typeof v2 == "object" && v2 !== null && !Array.isArray(v2);
 }
+function readDenialLimitFallback(v2) {
+  if (!isWireRecordCarrier(v2))
+    return;
+  let d4 = v2;
+  if (isNonNegativeFinite(d4.consecutive) && isNonNegativeFinite(d4.total) && isNonNegativeFinite(d4.autoDenyAfterMs) && !(typeof d4.limit != "string" || d4.limit === ""))
+    return {
+      consecutive: d4.consecutive,
+      total: d4.total,
+      limit: d4.limit,
+      autoDenyAfterMs: d4.autoDenyAfterMs
+    };
+}
 function isRuleOfferMatch(v2) {
   return typeof v2 == "string" && RULE_OFFER_MATCHES.includes(v2);
 }
@@ -59853,7 +59964,7 @@ async function surfaceToolApprovalFrameAndRespond(frame, respond, streamArgs, si
     let p = pathFromGateMessage(frame.message);
     args = p !== void 0 ? { file_path: p } : {};
   }
-  let ruleOffers = readRuleOfferSupply(frame.ruleOffers, frame.ruleSuggestions), card = await surfaceApprovalCard({
+  let ruleOffers = readRuleOfferSupply(frame.ruleOffers, frame.ruleSuggestions), denialLimitFallback = readDenialLimitFallback(frame.denialLimitFallback), card = await surfaceApprovalCard({
     toolName: toolName2,
     args,
     // A-028.3:live 帧腿的卡身份键经 gateIdentity 唯一铸口(帧上无 gatedCallId,以 approvalId 铸)。
@@ -59914,7 +60025,22 @@ async function surfaceToolApprovalFrameAndRespond(frame, respond, streamArgs, si
     // requiresRealApproval 同一条纪律 —— 缺席同时覆盖「真的没有」与「扫不了」,折成显式 false 会把
     // 「没扫到」渲成「已确认干净」,而这一位存在的全部理由就是「人眼读到的顺序 ≠ 真跑的字节顺序」。
     // 🔴 披露不清洗:args 字节在本层一个都不改(清洗会让卡上显示的与真跑的不是同一个东西)。
-    ...frame.inputHasBidi === !0 ? { inputHasBidi: !0 } : {}
+    ...frame.inputHasBidi === !0 ? { inputHasBidi: !0 } : {},
+    // ── S-15 第五单(0.59.0):报价缺席因由透传 ────────────────────────────────────────────────
+    // **非空串才 stamp**,词表**不校**(开集;server 已按闭集拒过词表外的值,包再校一遍只会在
+    // core 加员当天把合法值判没 —— `autoMode.reason` 的透传纪律逐字同规)。缺席/坏形 ⇒ 键不 stamp。
+    // 🔴 与 `ruleOffers` 引擎侧互斥,但本层**不据此互删**:两者同时在场是上游坏形,原样上卡让端
+    //    看得见,包替上游把矛盾湮灭掉只会让排障说不清是谁窄没的。
+    ...typeof frame.ruleOffersAbsence == "string" && frame.ruleOffersAbsence !== "" ? { ruleOffersAbsence: frame.ruleOffersAbsence } : {},
+    // ── S-114(0.59.0):auto 分类器限额回落卡透传 ──────────────────────────────────────────────
+    // 经 `readDenialLimitFallback` 四成员窄读(缺一整只丢;判据本体在该函数顶注)。
+    // 🔴 stamp 的是**窄读产物**而不是原对象:端拿到的四座恒是有限非负数 + 非空 limit 串,
+    //    不必各自再写一遍同样的判断(三端各写一遍 = 三份会漂的判官)。
+    ...denialLimitFallback !== void 0 ? { denialLimitFallback } : {},
+    // ── S-125③/#564(0.59.0):ask 出身透传 ────────────────────────────────────────────────────
+    // 非空串才 stamp,词表**不校**(同 ruleOffersAbsence)。🔴 缺席 ⇒ 键不 stamp,**绝不折成
+    // `"policy"`**:那是一个正面事实(出自部署 ToolPolicy),把「老引擎没报」折进去 = 替引擎编话。
+    ...typeof frame.origin == "string" && frame.origin !== "" ? { origin: frame.origin } : {}
   }), decision = card.kind === "allow" ? card.allowSession ? "allow_session" : "allow" : "deny";
   card.kind === "failed" && hostLog("debug", `liveToolApprovalWire: approval card unavailable (${card.reason}) \u2014 fail-closed deny for ${frame.approvalId}`);
   let note;
@@ -59989,6 +60115,19 @@ var cardPortByKey, cardPortMissesByKey, TOOL_APPROVAL_FRAME_KEYS_MIRROR, RESPOND
       // 直证,同文件旧键 0 命中)。✅ **sdk 8.2.0 锚已含本键**(S-134 锚②)⇒ 0.58.0 提货批按退出
       // 条件删掉了对账门里那条 AHEAD_OF_ANCHOR 领先登记,本键回到「逐元素相等」的常态。
       "ruleOffers",
+      // S-15 第五单(client-core 0.59.0):server 7.55.0 起真发 `ruleOffersAbsence`(core #490 修②;
+      // engine 7.60.0 fixture 直证)。⚠️ 与 `ruleOffers` **同形不同命**:它是**追平**不是领先 ——
+      // sdk 8.3.0 的运行期锚已含本键(node 直读 27 项实证)⇒ **不**进 AHEAD_OF_ANCHOR
+      // (往那张表里塞一个锚已有的键,它的第二条退出条件当场红)。
+      "ruleOffersAbsence",
+      // S-114(client-core 0.59.0):server 7.57.0 起真发 `denialLimitFallback`(core 7.4.0 #548;
+      // engine 7.60.0 fixture 直证)。同上一条:sdk 8.3.0 锚已含本键 ⇒ 追平,不进领先表。
+      // 🔴 本键与 `requiresRealApproval` 是孪生键,但两者在镜像里各占一格 —— 合并会让「只有一位在场」
+      //    的坏形无处显形。
+      "denialLimitFallback",
+      // S-125③/#564(client-core 0.59.0):server 7.57.0 起真发 `origin`(core 7.5.0 `ASK_ORIGINS`
+      // 八词;engine 7.60.0 fixture 直证)。同上:sdk 8.3.0 锚已含本键 ⇒ 追平,不进领先表。
+      "origin",
       // #341/[5214]③(client-core 0.43.0):server 7.46.0 起真发 `inputHasBidi`(E-14 Trojan Source 族;
       // 7.44 fixture 同文件 0 命中)。仍**领先** sdk 8.2.0 锚(node 直读 18 项无本键)⇒ AHEAD_OF_ANCHOR 登记。
       "inputHasBidi",
@@ -61157,13 +61296,18 @@ async function waitForParkRowBirth(deps2) {
         } catch {
         }
     }
-  };
+  }, lastProbeMs = 0;
   for (; ; ) {
     if (aborted2())
       return { kind: "aborted", waitedMs: now2() - startedAt, probes };
+    {
+      let remainingBeforeProbe = budgetMs - (now2() - startedAt);
+      if (budgetMs > 0 && probes > 0 && lastProbeMs > 0 && remainingBeforeProbe < lastProbeMs)
+        return { kind: "unborn", reason: lastReason, waitedMs: now2() - startedAt, probes };
+    }
     probes += 1;
-    let outcome = await probeWithinRemaining(probes, budgetMs - (now2() - startedAt));
-    if (outcome === "aborted" || aborted2())
+    let probeStartedAt = now2(), outcome = await probeWithinRemaining(probes, budgetMs - (now2() - startedAt));
+    if (lastProbeMs = now2() - probeStartedAt, outcome === "aborted" || aborted2())
       return { kind: "aborted", waitedMs: now2() - startedAt, probes };
     if (outcome === "deadline")
       return {
@@ -63528,6 +63672,7 @@ __export(dist_exports, {
   DELEGATION_CAP_CODES: () => DELEGATION_CAP_CODES,
   DELEGATION_CONCURRENCY_CAP: () => DELEGATION_CONCURRENCY_CAP,
   DELEGATION_SESSION_CAP: () => DELEGATION_SESSION_CAP,
+  DENIAL_LIMIT_KINDS: () => DENIAL_LIMIT_KINDS,
   DETACH_DURABLE_OFF_400_ANCHOR: () => DETACH_DURABLE_OFF_400_ANCHOR,
   DETACH_HEADER: () => DETACH_HEADER,
   DETACH_WIRE_MIN_ENGINE: () => DETACH_WIRE_MIN_ENGINE,
@@ -63650,6 +63795,7 @@ __export(dist_exports, {
   REWIND_ERROR_CODE_PREFIXES: () => REWIND_ERROR_CODE_PREFIXES,
   RULE_NOT_SENT_REJECTED_WARN_TEXT: () => RULE_NOT_SENT_REJECTED_WARN_TEXT,
   RULE_NOT_SENT_WARN_TEXT: () => RULE_NOT_SENT_WARN_TEXT,
+  RULE_OFFERS_ABSENCE_REASONS: () => RULE_OFFERS_ABSENCE_REASONS,
   RULE_OFFER_BATCH_MEMBER_KINDS: () => RULE_OFFER_BATCH_MEMBER_KINDS,
   RULE_OFFER_MATCHES: () => RULE_OFFER_MATCHES,
   RULE_OFFER_UNCOVERED_REASONS: () => RULE_OFFER_UNCOVERED_REASONS,
@@ -63731,6 +63877,7 @@ __export(dist_exports, {
   __resetHooksWireCapsForTests: () => __resetHooksWireCapsForTests,
   __resetRetainWithoutWakeWarningForTests: () => __resetRetainWithoutWakeWarningForTests,
   __resetRunningChoiceLedgerForTests: () => __resetRunningChoiceLedgerForTests,
+  __resetSqlEngineReadingsForTests: () => __resetSqlEngineReadingsForTests,
   __resetSubagentOutputCapCacheForTests: () => __resetSubagentOutputCapCacheForTests,
   __resetSubagentOwnerLedgerForTests: () => __resetSubagentOwnerLedgerForTests,
   __resetSubagentStreamCapCacheForTests: () => __resetSubagentStreamCapCacheForTests,
@@ -63876,6 +64023,7 @@ __export(dist_exports, {
   engineCapState: () => engineCapState,
   engineCapString: () => engineCapString,
   engineCapTrue: () => engineCapTrue,
+  engineCapValue: () => engineCapValue,
   engineCapsSettled: () => engineCapsSettled,
   engineCcStopSemantics: () => engineCcStopSemantics,
   engineLimitsSupportWarning: () => engineLimitsSupportWarning,
@@ -63918,6 +64066,7 @@ __export(dist_exports, {
   fleetViewStubRowIds: () => fleetViewStubRowIds,
   fmtCtxOut: () => fmtCtxOut,
   fmtTokens: () => fmtTokens,
+  forgetSqlEngineReading: () => forgetSqlEngineReading,
   gateArmedWaitMs: () => gateArmedWaitMs,
   gateKind: () => gateKind,
   getBgParentRun: () => getBgParentRun,
@@ -64061,6 +64210,7 @@ __export(dist_exports, {
   normalizeTaskNotification: () => normalizeTaskNotification,
   normalizeWirePrincipal: () => normalizeWirePrincipal,
   noteBgOwnerAbsence: () => noteBgOwnerAbsence,
+  noteEngineCapsForSqlEngine: () => noteEngineCapsForSqlEngine,
   notePlanReviewAnswered: () => notePlanReviewAnswered,
   notePlanReviewAnsweredFor: () => notePlanReviewAnsweredFor,
   notePlanReviewAnsweredIfDecisive: () => notePlanReviewAnsweredIfDecisive,
@@ -64069,6 +64219,7 @@ __export(dist_exports, {
   notificationDropCounters: () => notificationDropCounters,
   notificationQueuePortMisses: () => notificationQueuePortMisses,
   observeCancelByDeny: () => observeCancelByDeny,
+  observedSqlEngine: () => observedSqlEngine,
   onEngineTaskBound: () => onEngineTaskBound,
   onGateArmed: () => onGateArmed,
   onGateArmedFor: () => onGateArmedFor,
@@ -64125,6 +64276,7 @@ __export(dist_exports, {
   projectFleetAgentRows: () => projectFleetAgentRows,
   projectFleetAgentRowsFor: () => projectFleetAgentRowsFor,
   projectRewind: () => projectRewind,
+  projectSqlEngineCapability: () => projectSqlEngineCapability,
   projectTasks: () => projectTasks,
   projectWorkflowRun: () => projectWorkflowRun,
   projectWorkflowTaskOutput: () => projectWorkflowTaskOutput,
@@ -64246,6 +64398,7 @@ __export(dist_exports, {
   skillCommandsToSpecs: () => skillCommandsToSpecs,
   splitApiErrorSupplement: () => splitApiErrorSupplement,
   spoolMarkerOf: () => spoolMarkerOf,
+  sqlEngineDoctorDetail: () => sqlEngineDoctorDetail,
   stamp: () => stamp,
   startApprovalsFeed: () => startApprovalsFeed,
   steerEngineSubagent: () => steerEngineSubagent,
@@ -64352,6 +64505,7 @@ var init_dist = __esm({
     init_engineInlineTaskStats();
     init_printToolResultFrame();
     init_engineCapsCache();
+    init_sqlEngineCapability();
     init_engineToolLabelStore();
     init_fleetTaskDesc();
     init_hostEnv();
@@ -81926,6 +82080,23 @@ var SECRET_LITERAL_RE, ENV_NAME, hasNul, NON_SECRET_URL, K8S_QUANTITY, TCP_PORT,
        *  declared `"local"`, the engine read ABSENT. A value outside the table is REJECTED at parse — a mistyped trust
        *  word must never be read as a legal one (the consumer's gate is equally severe: no case-folding). */
       contentOrigin: external_exports2.enum(MCP_CONTENT_ORIGINS).optional(),
+      /** Declaration-plane GROUPING LABEL for this server — maps 1:1 onto the engine's `McpServerSpec.source`
+       *  (core ≥7.5.0 echoes it verbatim on `wiring_manifest.mcp[].source`, single-line + 80-char cap, so a
+       *  consumer can group servers by where they were declared). An OPEN set: CC's `plugin` / `user` /
+       *  `project` / `local` are conventions, not a vocabulary — a deployment's own word is equally legal, so
+       *  no closed table here (a closed table would reject the operator's grouping word at parse). ABSENT =
+       *  no label (`.optional()`, no default — a label has no default tier). 🔴 ZERO rules here (`z.unknown()`):
+       *  the label RULE (string, non-empty, ≤80 chars) lives in ONE place — the consumer's projection helper,
+       *  which drops a malformed label's KEY, keeps the server and records the drop. Nothing may live here:
+       *  this domain parses all-or-nothing, so ANY rejection at parse (1.7.0 `min/max`, 1.7.1 `z.string()`
+       *  against a `null`) lets one bad label default the ENTIRE mcp domain — every server gone, silently when
+       *  no onWarning is wired — a blast radius a display label must never have. 1.7.2 makes the key
+       *  parse-transparent: whatever JSON value the file carries reaches the consumer verbatim. Display-only:
+       *  no gate / policy / trust
+       *  effect (the trust axis is `contentOrigin` above, which stays a closed table). Before this key existed
+       *  both legs stripped it (default-strip object); this is the declaration half of the consumer-side fix
+       *  (ticket B-036 / S-143), the projection half lives in the consumer. */
+      source: external_exports2.unknown().optional(),
       notes: external_exports2.string().optional()
     }), McpConfig = external_exports2.object({ servers: external_exports2.array(McpServerSpec).default([]) }).superRefine((cfg, ctx) => {
       let seen2 = /* @__PURE__ */ new Set();
@@ -266157,7 +266328,7 @@ var require_extension = __commonJS({
 var require_websocket2 = __commonJS({
   "node_modules/ws/lib/websocket.js"(exports2, module2) {
     "use strict";
-    var EventEmitter5 = __require("events"), https2 = __require("https"), http3 = __require("http"), net = __require("net"), tls = __require("tls"), { randomBytes: randomBytes31, createHash: createHash34 } = __require("crypto"), { Duplex, Readable: Readable5 } = __require("stream"), { URL: URL6 } = __require("url"), PerMessageDeflate2 = require_permessage_deflate2(), Receiver2 = require_receiver2(), Sender2 = require_sender2(), { isBlob: isBlob2 } = require_validation2(), {
+    var EventEmitter5 = __require("events"), https2 = __require("https"), http3 = __require("http"), net = __require("net"), tls = __require("tls"), { randomBytes: randomBytes31, createHash: createHash33 } = __require("crypto"), { Duplex, Readable: Readable5 } = __require("stream"), { URL: URL6 } = __require("url"), PerMessageDeflate2 = require_permessage_deflate2(), Receiver2 = require_receiver2(), Sender2 = require_sender2(), { isBlob: isBlob2 } = require_validation2(), {
       BINARY_TYPES,
       CLOSE_TIMEOUT,
       EMPTY_BUFFER,
@@ -266619,7 +266790,7 @@ var require_websocket2 = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        let digest = createHash34("sha1").update(key + GUID).digest("base64");
+        let digest = createHash33("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -266857,7 +267028,7 @@ var require_subprotocol = __commonJS({
 var require_websocket_server = __commonJS({
   "node_modules/ws/lib/websocket-server.js"(exports2, module2) {
     "use strict";
-    var EventEmitter5 = __require("events"), http3 = __require("http"), { Duplex } = __require("stream"), { createHash: createHash34 } = __require("crypto"), extension2 = require_extension(), PerMessageDeflate2 = require_permessage_deflate2(), subprotocol2 = require_subprotocol(), WebSocket3 = require_websocket2(), { CLOSE_TIMEOUT, GUID, kWebSocket } = require_constants9(), keyRegex = /^[+/0-9A-Za-z]{22}==$/, RUNNING = 0, CLOSING = 1, CLOSED = 2, WebSocketServer2 = class extends EventEmitter5 {
+    var EventEmitter5 = __require("events"), http3 = __require("http"), { Duplex } = __require("stream"), { createHash: createHash33 } = __require("crypto"), extension2 = require_extension(), PerMessageDeflate2 = require_permessage_deflate2(), subprotocol2 = require_subprotocol(), WebSocket3 = require_websocket2(), { CLOSE_TIMEOUT, GUID, kWebSocket } = require_constants9(), keyRegex = /^[+/0-9A-Za-z]{22}==$/, RUNNING = 0, CLOSING = 1, CLOSED = 2, WebSocketServer2 = class extends EventEmitter5 {
       /**
        * Create a `WebSocketServer` instance.
        *
@@ -267104,7 +267275,7 @@ var require_websocket_server = __commonJS({
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
           "Connection: Upgrade",
-          `Sec-WebSocket-Accept: ${createHash34("sha1").update(key + GUID).digest("base64")}`
+          `Sec-WebSocket-Accept: ${createHash33("sha1").update(key + GUID).digest("base64")}`
         ], ws = new this.options.WebSocket(null, void 0, this.options);
         if (protocols.size) {
           let protocol = this.options.handleProtocols ? this.options.handleProtocols(protocols, req) : protocols.values().next().value;
@@ -284728,7 +284899,7 @@ function FileEditToolUseRejectedMessage(t0) {
 }
 var import_compiler_runtime43, import_jsx_runtime53, MAX_LINES_TO_RENDER, init_FileEditToolUseRejectedMessage = __esm({
   "build-src/src/components/FileEditToolUseRejectedMessage.tsx"() {
-    import_compiler_runtime43 = __toESM(require_compiler_runtime(), 1);
+    import_compiler_runtime43 = __toESM(require_compiler_runtime());
     init_useTerminalSize();
     init_cwd();
     init_ink2();
@@ -284736,7 +284907,7 @@ var import_compiler_runtime43, import_jsx_runtime53, MAX_LINES_TO_RENDER, init_F
     init_MessageResponse();
     init_StructuredDiffList();
     init_stringUtils();
-    import_jsx_runtime53 = __toESM(require_jsx_runtime(), 1), MAX_LINES_TO_RENDER = 10;
+    import_jsx_runtime53 = __toESM(require_jsx_runtime()), MAX_LINES_TO_RENDER = 10;
   }
 });
 
@@ -291142,6 +291313,19 @@ function approvalMovedToDurableQueueRow(toolName2) {
 function approvalWindowClosedRow(toolName2) {
   return `sema: the approval window for "${toolName2}" closed \u2014 what happens to that step now is the engine's own policy. By default it keeps the call waiting in a durable queue, so this card is left up and answering it now is normally still accepted; if the engine settled it instead, answering will say so. Nothing was decided by this card.`;
 }
+function approvalAutoDeniedRow(toolName2) {
+  return `sema: the approval window for "${toolName2}" closed and the engine denied this call itself (auto-deny limit reached \u2014 no human decided it). This card no longer decides anything; the engine may ask again for a later call.`;
+}
+function readToolEndAutoDenied(ev) {
+  if (typeof ev != "object" || ev === null) return !1;
+  let rec = ev;
+  return rec.type !== "tool_end" ? !1 : rec.autoDenied === !0;
+}
+function readToolEndToolCallId(ev) {
+  if (typeof ev != "object" || ev === null) return;
+  let raw2 = ev.toolCallId;
+  return typeof raw2 == "string" && raw2 !== "" ? raw2 : void 0;
+}
 function parkRowDeadlineState(row2, nowMs2) {
   if (typeof row2 != "object" || row2 === null) return { kind: "none" };
   let raw2 = row2.deadline;
@@ -291398,6 +291582,53 @@ var PARK_DEADLINE_MAX_SANE_MS, parkRowDeadlineHandoff, lateDecideLane, MAX_LATE_
 });
 
 // build-src/src/sema/liveApprovalCardHandles.ts
+function noteTerminalSeen(epoch, toolCallId) {
+  for (; terminalSeenByToolCallId.size >= SETTLED_CARD_MAX; ) {
+    let oldest = terminalSeenByToolCallId.values().next();
+    if (oldest.done === !0) break;
+    terminalSeenByToolCallId.delete(oldest.value);
+  }
+  terminalSeenByToolCallId.add(settledKey(epoch, toolCallId));
+}
+function resolveToolEndAutoDenied(ev, streamEpoch) {
+  if (typeof ev != "object" || ev === null || ev.type !== "tool_end") return { kind: "none" };
+  let toolCallId = readToolEndToolCallId(ev);
+  if (toolCallId === void 0) return { kind: "none" };
+  let autoDenied = readToolEndAutoDenied(ev), settled = takeSettledCardToolName(toolCallId, streamEpoch), live = callKeyByToolCallId.get(toolCallId);
+  live !== void 0 && live.epoch === streamEpoch && noteTerminalSeen(streamEpoch, toolCallId);
+  let epochLive = streamEpoch === getLiveSessionEpoch();
+  return !autoDenied || !epochLive ? { kind: "none" } : markApprovalCardAutoDenied(toolCallId, streamEpoch) ? { kind: "live" } : settled !== void 0 ? { kind: "late", toolName: settled } : { kind: "none" };
+}
+function registerApprovalCardToolCallId(toolCallId, callKey) {
+  let epoch = getLiveSessionEpoch();
+  return typeof toolCallId != "string" || toolCallId === "" || callKeyByToolCallId.set(toolCallId, { callKey, epoch }), epoch;
+}
+function forgetApprovalCardToolCallId(toolCallId, callKey, bornEpoch, windowClosedToolName) {
+  if (typeof toolCallId != "string" || toolCallId === "") return;
+  let live = callKeyByToolCallId.get(toolCallId);
+  if (live !== void 0 && live.callKey === callKey && callKeyByToolCallId.delete(toolCallId), !(typeof windowClosedToolName != "string" || windowClosedToolName === "") && !terminalSeenByToolCallId.delete(settledKey(bornEpoch, toolCallId))) {
+    for (; settledCardByToolCallId.size >= SETTLED_CARD_MAX; ) {
+      let oldest = settledCardByToolCallId.keys().next();
+      if (oldest.done === !0) break;
+      settledCardByToolCallId.delete(oldest.value);
+    }
+    settledCardByToolCallId.set(settledKey(bornEpoch, toolCallId), windowClosedToolName);
+  }
+}
+function takeSettledCardToolName(toolCallId, epoch) {
+  if (typeof toolCallId != "string" || toolCallId === "") return;
+  if (epoch === void 0) {
+    for (let k3 of settledCardByToolCallId.keys())
+      if (k3.endsWith(`:${toolCallId}`)) {
+        let name2 = settledCardByToolCallId.get(k3);
+        return settledCardByToolCallId.delete(k3), name2;
+      }
+    return;
+  }
+  let k2 = settledKey(epoch, toolCallId), name = settledCardByToolCallId.get(k2);
+  if (name !== void 0)
+    return settledCardByToolCallId.delete(k2), name;
+}
 function retractApprovalCard(callKey, cause) {
   let handle2 = liveApprovalCards.get(callKey);
   return handle2 === void 0 ? !1 : (liveApprovalCards.delete(callKey), handle2.retract(cause), !0);
@@ -291406,9 +291637,22 @@ function markApprovalCardMovedToDurableQueue(callKey) {
   let handle2 = liveApprovalCards.get(callKey);
   return handle2 === void 0 ? !1 : handle2.windowClosed("parked-frame");
 }
-var liveApprovalCards, init_liveApprovalCardHandles = __esm({
+function markApprovalCardAutoDenied(toolCallId, streamEpoch) {
+  if (typeof toolCallId != "string" || toolCallId === "") return !1;
+  let born = callKeyByToolCallId.get(toolCallId);
+  if (born === void 0 || streamEpoch !== void 0 && born.epoch !== streamEpoch) return !1;
+  let handle2 = liveApprovalCards.get(born.callKey);
+  return handle2 === void 0 ? !1 : handle2.windowClosed("auto-denied");
+}
+function surfaceToolEndAutoDenied(ev, streamEpoch) {
+  let r = resolveToolEndAutoDenied(ev, streamEpoch);
+  return r.kind !== "late" ? r.kind : surfaceLateDecideOutcome(approvalAutoDeniedRow(r.toolName)) ? "late" : "late-unsurfaced";
+}
+var liveApprovalCards, callKeyByToolCallId, SETTLED_CARD_MAX, settledCardByToolCallId, settledKey, terminalSeenByToolCallId, init_liveApprovalCardHandles = __esm({
   "build-src/src/sema/liveApprovalCardHandles.ts"() {
-    liveApprovalCards = /* @__PURE__ */ new Map();
+    init_askParkExpiry();
+    init_liveSessionStore();
+    liveApprovalCards = /* @__PURE__ */ new Map(), callKeyByToolCallId = /* @__PURE__ */ new Map(), SETTLED_CARD_MAX = 64, settledCardByToolCallId = /* @__PURE__ */ new Map(), settledKey = (epoch, toolCallId) => `${String(epoch)}:${toolCallId}`, terminalSeenByToolCallId = /* @__PURE__ */ new Set();
   }
 });
 
@@ -368930,12 +369174,31 @@ function resolveEngineEntry() {
 function localEngineVersion() {
   let entry = resolveEngineEntry();
   if (entry)
+    return engineVersionOfEntry(entry);
+}
+function engineVersionOfEntry(entry) {
+  let readVersion = (dir) => {
     try {
-      let pkg = JSON.parse(readFileSync36(join124(entry.cwd, "package.json"), "utf8"));
+      let pkg = JSON.parse(readFileSync36(join124(dir, "package.json"), "utf8"));
       return typeof pkg.version == "string" && pkg.version.length > 0 ? pkg.version : void 0;
     } catch {
       return;
     }
+  }, script = entry.args[0], fromEntry;
+  if (typeof script == "string" && script.length > 0) {
+    let dir = dirname59(script);
+    for (let i = 0; i < 6 && dir !== dirname59(dir); i++) {
+      if (existsSync23(join124(dir, "package.json"))) {
+        fromEntry = readVersion(dir);
+        break;
+      }
+      dir = dirname59(dir);
+    }
+  }
+  let fromCwd = readVersion(entry.cwd);
+  return fromEntry !== void 0 && fromCwd !== void 0 && fromEntry !== fromCwd && logForDebugging(
+    `[engine-lifecycle] torn engine install: entry ${script} belongs to ${fromEntry} but cwd ${entry.cwd} is ${fromCwd} \u2014 version gate follows the ENTRY (what actually runs)`
+  ), fromEntry ?? fromCwd;
 }
 function localDistNewerThanEngine(wantVersion, engineVersion2) {
   if (engineVersion2 === wantVersion) return !1;
@@ -401566,18 +401829,18 @@ var sema_brand_default, init_sema_brand = __esm({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.101",
+        version: "1.0.102",
         notes: [
-          "Keys typed in the first second or two after launch \u2014 while the 25MB main bundle is still being parsed \u2014 are now captured by the tiny launcher and seeded into the input box once the prompt is ready, instead of being echoed raw by the terminal or lost. A lone Escape pressed during that window is still treated as Escape, and Ctrl+D still stops the capture.",
-          "Approval cards now show rule offers whose match kind is wildcard or subpath, and batch offers that include a directory-read grant (for example the `cd /srv` segment of a compound command); previously those offers were silently dropped from the card.",
-          "The wording shown when a resume is refused (placement root changed, or the deployment's preflight refused the token) now comes from the shared client library, so every sema client says the same thing; a retry-after window is only shown when the engine actually sent one.",
-          '/doctor has a new "SQL engine" row: on a local single-machine engine it reports none (file stores); on a deployment with a SQL backend it reports the engine, isolation level and transaction mode, and it says "not observed" rather than inventing a value when no engine has answered yet.',
-          "sema ps, sema logs and sema attach no longer hang after printing when Ctrl+D was pressed during startup.",
-          "The bundled engine is 7.60.0 (core 7.5.0): rule stores are unified, the wiring manifest lists MCP servers, and classifier denial-limit fallbacks are marked on the wire."
+          `Approval cards now carry the facts behind the ask: when the auto-deny limit tripped (counts, which limit, and how long until the engine auto-denies), when an org rule, an unreachable org rule store or a hook asked for the review, and why no "don't ask again" offer is available (mandated gate, shadowed by a higher-priority rule, or a lane that cannot persist rules). Routine asks add no extra line.`,
+          `When an approval window closes and the engine later auto-denies that call (auto-deny limit reached), the transcript now says so with a dedicated line instead of leaving the earlier "the engine's policy decides" note standing; the correction is bound to the card's own session and tool call, so a later session never inherits it.`,
+          `/doctor has a new "MCP servers (engine leg)" row read from the engine's wiring manifest: "not observed" when no run has reported it, "declared no MCP servers" when the engine leg reported an empty list, otherwise one entry per server with status, tool count, error code and source label ("source not declared" when the engine did not carry one).`,
+          "The engine version gate now follows the entry script's own package, so a torn install (new package on disk, old entry still running) is reported once and no longer triggers a second automatic restart.",
+          "The bundled engine is 7.62.0 (core 7.5.2, settings-schema 1.7.1): MCP servers declared with a source label keep it on the wiring manifest. Known issue: with this engine, writing `source: null` for a server in config.d/mcp.json empties the whole MCP server list for that engine \u2014 omit the key or use a string until the next engine update.",
+          'The SQL engine row in `sema doctor` no longer claims "local file stores" when the engine reports no SQL posture; it now says the backend is either not configured or its initialization was refused and points at the engine log.'
         ]
       },
-      productVersion: "1.0.101",
-      announcement: 'sema 1.0.101 \u2014 keys typed in the first seconds after launch (before the main bundle has even loaded) are now captured instead of echoed raw or lost, approval cards show rule offers that use wildcard or subpath matching and directory-read grants, resume refusals share one wording with the other sema clients, /doctor has a new "SQL engine" row, and the bundled engine is 7.60.0.',
+      productVersion: "1.0.102",
+      announcement: 'sema 1.0.102 \u2014 the bundled engine is 7.62.0 (MCP servers can carry a source label on the wiring manifest), approval cards now explain auto-deny limits, org rules, hooks and why a rule offer is missing, a card whose approval window closed is corrected when the engine auto-denies the call, /doctor gains an "MCP servers (engine leg)" row, and the engine version gate follows the entry script so a torn install no longer restarts the engine twice.',
       version: "1.0.91"
     };
   }
@@ -405910,18 +406173,18 @@ var require_sema_brand = __commonJS({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.101",
+        version: "1.0.102",
         notes: [
-          "Keys typed in the first second or two after launch \u2014 while the 25MB main bundle is still being parsed \u2014 are now captured by the tiny launcher and seeded into the input box once the prompt is ready, instead of being echoed raw by the terminal or lost. A lone Escape pressed during that window is still treated as Escape, and Ctrl+D still stops the capture.",
-          "Approval cards now show rule offers whose match kind is wildcard or subpath, and batch offers that include a directory-read grant (for example the `cd /srv` segment of a compound command); previously those offers were silently dropped from the card.",
-          "The wording shown when a resume is refused (placement root changed, or the deployment's preflight refused the token) now comes from the shared client library, so every sema client says the same thing; a retry-after window is only shown when the engine actually sent one.",
-          '/doctor has a new "SQL engine" row: on a local single-machine engine it reports none (file stores); on a deployment with a SQL backend it reports the engine, isolation level and transaction mode, and it says "not observed" rather than inventing a value when no engine has answered yet.',
-          "sema ps, sema logs and sema attach no longer hang after printing when Ctrl+D was pressed during startup.",
-          "The bundled engine is 7.60.0 (core 7.5.0): rule stores are unified, the wiring manifest lists MCP servers, and classifier denial-limit fallbacks are marked on the wire."
+          `Approval cards now carry the facts behind the ask: when the auto-deny limit tripped (counts, which limit, and how long until the engine auto-denies), when an org rule, an unreachable org rule store or a hook asked for the review, and why no "don't ask again" offer is available (mandated gate, shadowed by a higher-priority rule, or a lane that cannot persist rules). Routine asks add no extra line.`,
+          `When an approval window closes and the engine later auto-denies that call (auto-deny limit reached), the transcript now says so with a dedicated line instead of leaving the earlier "the engine's policy decides" note standing; the correction is bound to the card's own session and tool call, so a later session never inherits it.`,
+          `/doctor has a new "MCP servers (engine leg)" row read from the engine's wiring manifest: "not observed" when no run has reported it, "declared no MCP servers" when the engine leg reported an empty list, otherwise one entry per server with status, tool count, error code and source label ("source not declared" when the engine did not carry one).`,
+          "The engine version gate now follows the entry script's own package, so a torn install (new package on disk, old entry still running) is reported once and no longer triggers a second automatic restart.",
+          "The bundled engine is 7.62.0 (core 7.5.2, settings-schema 1.7.1): MCP servers declared with a source label keep it on the wiring manifest. Known issue: with this engine, writing `source: null` for a server in config.d/mcp.json empties the whole MCP server list for that engine \u2014 omit the key or use a string until the next engine update.",
+          'The SQL engine row in `sema doctor` no longer claims "local file stores" when the engine reports no SQL posture; it now says the backend is either not configured or its initialization was refused and points at the engine log.'
         ]
       },
-      productVersion: "1.0.101",
-      announcement: 'sema 1.0.101 \u2014 keys typed in the first seconds after launch (before the main bundle has even loaded) are now captured instead of echoed raw or lost, approval cards show rule offers that use wildcard or subpath matching and directory-read grants, resume refusals share one wording with the other sema clients, /doctor has a new "SQL engine" row, and the bundled engine is 7.60.0.',
+      productVersion: "1.0.102",
+      announcement: 'sema 1.0.102 \u2014 the bundled engine is 7.62.0 (MCP servers can carry a source label on the wiring manifest), approval cards now explain auto-deny limits, org rules, hooks and why a rule offer is missing, a card whose approval window closed is corrected when the engine auto-denies the call, /doctor gains an "MCP servers (engine leg)" row, and the engine version gate follows the entry script so a torn install no longer restarts the engine twice.',
       version: "1.0.91"
     };
   }
@@ -430172,9 +430435,9 @@ function makeProtocolNamespace(id, prefix) {
 function protocolOf(name) {
   return PROTOCOL_TABLE.find((ns) => name.startsWith(ns.prefix));
 }
-var MCP_PREFIX_NAME, A2A_PREFIX_NAME, MCP_NAMESPACE, A2A_NAMESPACE, PROTOCOL_TABLE, init_protocol_table = __esm({
+var MCP_PREFIX_NAME, A2A_PREFIX_NAME, MCP_NAMESPACE, A2A_NAMESPACE, PROTOCOL_TABLE, NAMESPACED_NAME_SHAPES, init_protocol_table = __esm({
   "node_modules/@sema-agent/core/dist/core/protocol-table.js"() {
-    MCP_PREFIX_NAME = "mcp__", A2A_PREFIX_NAME = "a2a__", MCP_NAMESPACE = makeProtocolNamespace("mcp", MCP_PREFIX_NAME), A2A_NAMESPACE = makeProtocolNamespace("a2a", A2A_PREFIX_NAME), PROTOCOL_TABLE = [MCP_NAMESPACE, A2A_NAMESPACE];
+    MCP_PREFIX_NAME = "mcp__", A2A_PREFIX_NAME = "a2a__", MCP_NAMESPACE = makeProtocolNamespace("mcp", MCP_PREFIX_NAME), A2A_NAMESPACE = makeProtocolNamespace("a2a", A2A_PREFIX_NAME), PROTOCOL_TABLE = [MCP_NAMESPACE, A2A_NAMESPACE], NAMESPACED_NAME_SHAPES = PROTOCOL_TABLE.map((ns) => `${ns.prefix}<peer>__<tool>`).join(", ");
   }
 });
 
@@ -430965,6 +431228,13 @@ var DECISION_REASONS, DECISION_REASON_SET, ALLOW, RETIRED_TEXT_FIELD, RETIRED_WI
   }
 });
 
+// node_modules/@sema-agent/core/dist/core/auto-mode.js
+var init_auto_mode = __esm({
+  "node_modules/@sema-agent/core/dist/core/auto-mode.js"() {
+    init_auto_mode_defaults();
+  }
+});
+
 // node_modules/@sema-agent/core/dist/core/ask-origin.js
 var ASK_ORIGINS, ASK_ORIGIN_SET, init_ask_origin = __esm({
   "node_modules/@sema-agent/core/dist/core/ask-origin.js"() {
@@ -431330,6 +431600,7 @@ var MAX_PENDING_STEER_CHARS, PENDING_STEER_QUEUE_BYTE_BUDGET_BYTES, MAX_PENDING_
     init_harness();
     init_untrusted_text();
     init_tool_policy();
+    init_auto_mode();
     init_ask_origin();
     init_permission_rule_model();
     init_untrusted_egress();
@@ -433173,84 +433444,6 @@ var init_compaction_call_options = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/auto-mode.js
-var init_auto_mode = __esm({
-  "node_modules/@sema-agent/core/dist/core/auto-mode.js"() {
-    init_auto_mode_defaults();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/runner/denial-limit-arms.js
-var init_denial_limit_arms = __esm({
-  "node_modules/@sema-agent/core/dist/core/runner/denial-limit-arms.js"() {
-    init_auto_mode();
-    init_auto_mode_arming();
-    init_types21();
-    init_untrusted_text();
-    init_ask_origin();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/auto-mode-prompt-assets.js
-var init_auto_mode_prompt_assets = __esm({
-  "node_modules/@sema-agent/core/dist/core/auto-mode-prompt-assets.js"() {
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/auto-mode-prompt.js
-var init_auto_mode_prompt = __esm({
-  "node_modules/@sema-agent/core/dist/core/auto-mode-prompt.js"() {
-    init_auto_mode_defaults();
-    init_auto_mode_prompt_assets();
-    init_untrusted_text();
-    init_auto_mode_defaults();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/a2a-task-state.js
-var A2A_TASK_STATES, init_a2a_task_state = __esm({
-  "node_modules/@sema-agent/core/dist/core/a2a-task-state.js"() {
-    A2A_TASK_STATES = [
-      "submitted",
-      "working",
-      "input-required",
-      "completed",
-      "canceled",
-      "failed",
-      "rejected",
-      "auth-required",
-      "unknown"
-    ];
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/a2a.js
-var A2A_CALL_TOTAL_TIMEOUT_MS, A2A_RESPONSE_MAX_BYTES, A2A_STATE_SET, init_a2a = __esm({
-  "node_modules/@sema-agent/core/dist/core/a2a.js"() {
-    init_build3();
-    init_a2a_task_state();
-    init_mcp4();
-    init_protocol_naming();
-    init_protocol_table();
-    init_untrusted_text();
-    A2A_CALL_TOTAL_TIMEOUT_MS = 10 * 6e4, A2A_RESPONSE_MAX_BYTES = 8 * 1024 * 1024, A2A_STATE_SET = new Set(A2A_TASK_STATES);
-  }
-});
-
-// node_modules/@sema-agent/core/dist/agents/agent-transcript-tool.js
-var init_agent_transcript_tool = __esm({
-  "node_modules/@sema-agent/core/dist/agents/agent-transcript-tool.js"() {
-    init_build3();
-    init_tools3();
-    init_background_agent_store();
-    init_task_registry();
-    init_untrusted_text();
-    init_subagent_steps();
-    init_subagent();
-    init_retain_ledger();
-  }
-});
-
 // node_modules/@sema-agent/core/dist/core/mailbox-store.js
 var init_mailbox_store = __esm({
   "node_modules/@sema-agent/core/dist/core/mailbox-store.js"() {
@@ -433358,267 +433551,20 @@ var uplinkSeqGlobal, REVIVE_LEASE_TTL_MS, init_send_message_tool = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/runner/prepare-permission-rules.js
-var init_prepare_permission_rules = __esm({
-  "node_modules/@sema-agent/core/dist/core/runner/prepare-permission-rules.js"() {
-    init_permission_rule_model();
-    init_permission_rule_org();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/runner/session-rule-policy.js
-var PATH_WRITE_TOOLS, PATH_CONFINABLE_WRITE_TOOLS, init_session_rule_policy = __esm({
-  "node_modules/@sema-agent/core/dist/core/runner/session-rule-policy.js"() {
-    init_safety();
-    init_safety();
-    init_tool_policy();
-    PATH_WRITE_TOOLS = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit"]), PATH_CONFINABLE_WRITE_TOOLS = /* @__PURE__ */ new Set([...PATH_WRITE_TOOLS, "NotebookEdit"]);
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/skill-tool-specifier.js
-var SPECIFIER_ENFORCED_TOOLS, init_skill_tool_specifier = __esm({
-  "node_modules/@sema-agent/core/dist/core/skill-tool-specifier.js"() {
-    init_permission_rules();
-    init_tool_policy();
-    init_bash_readonly_classifier();
-    SPECIFIER_ENFORCED_TOOLS = new Set(COARSE_SHELL_TOOLS);
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/runner/active-skill-scope.js
-var init_active_skill_scope = __esm({
-  "node_modules/@sema-agent/core/dist/core/runner/active-skill-scope.js"() {
-    init_safety();
-    init_session_rule_policy();
-    init_skill_tool_specifier();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/runner/prepare-announce-once.js
-var init_prepare_announce_once = __esm({
-  "node_modules/@sema-agent/core/dist/core/runner/prepare-announce-once.js"() {
+// node_modules/@sema-agent/core/dist/core/runner/announce-once-ledger.js
+var init_announce_once_ledger = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/announce-once-ledger.js"() {
     init_untrusted_egress();
     init_untrusted_text();
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/hooks.js
-var objectPrototype, init_hooks3 = __esm({
-  "node_modules/@sema-agent/core/dist/core/hooks.js"() {
-    init_tool_policy();
-    init_ask_class();
-    init_ask_origin();
-    init_auto_mode();
-    init_untrusted_text();
-    init_reminder_mint();
-    init_checkpoint_store();
-    init_ask_question();
-    init_safe_notify();
-    init_permission_rule_org();
-    objectPrototype = Object.prototype;
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/sensitive-path-policy.js
-var CASE_INSENSITIVE_FS3, init_sensitive_path_policy = __esm({
-  "node_modules/@sema-agent/core/dist/core/sensitive-path-policy.js"() {
-    init_safety();
-    init_read_deny();
-    CASE_INSENSITIVE_FS3 = process.platform === "darwin" || process.platform === "win32";
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/write-protect.js
-var freezeTable, WRITE_PROTECTED_DEFAULT_TABLE, init_write_protect = __esm({
-  "node_modules/@sema-agent/core/dist/core/write-protect.js"() {
-    init_safety();
-    init_session_rule_policy();
-    init_sensitive_path_policy();
-    freezeTable = (rows2) => Object.freeze(rows2.map((r) => Object.freeze(r))), WRITE_PROTECTED_DEFAULT_TABLE = freezeTable([
-      { name: ".gitconfig", kind: "basename" },
-      { name: ".gitmodules", kind: "basename" },
-      { name: ".bashrc", kind: "basename" },
-      { name: ".bash_profile", kind: "basename" },
-      { name: ".zshrc", kind: "basename" },
-      { name: ".zprofile", kind: "basename" },
-      { name: ".profile", kind: "basename" },
-      { name: ".zshenv", kind: "basename" },
-      { name: ".zlogin", kind: "basename" },
-      { name: ".zlogout", kind: "basename" },
-      { name: ".bash_login", kind: "basename" },
-      { name: ".bash_aliases", kind: "basename" },
-      { name: ".bash_logout", kind: "basename" },
-      { name: ".envrc", kind: "basename" },
-      { name: ".ripgreprc", kind: "basename" },
-      { name: ".mcp.json", kind: "basename" },
-      { name: ".claude.json", kind: "basename" },
-      { name: ".npmrc", kind: "basename" },
-      { name: ".yarnrc", kind: "basename" },
-      { name: ".yarnrc.yml", kind: "basename" },
-      { name: ".pnp.cjs", kind: "basename" },
-      { name: ".pnp.loader.mjs", kind: "basename" },
-      { name: ".pnpmfile.cjs", kind: "basename" },
-      { name: "bunfig.toml", kind: "basename" },
-      { name: ".bunfig.toml", kind: "basename" },
-      { name: ".bazelrc", kind: "basename" },
-      { name: ".bazelversion", kind: "basename" },
-      { name: ".bazeliskrc", kind: "basename" },
-      { name: ".pre-commit-config.yaml", kind: "basename" },
-      { name: "lefthook.yml", kind: "basename" },
-      { name: ".lefthook.yml", kind: "basename" },
-      { name: "lefthook.yaml", kind: "basename" },
-      { name: ".lefthook.yaml", kind: "basename" },
-      { name: "gradle-wrapper.properties", kind: "basename" },
-      { name: "maven-wrapper.properties", kind: "basename" },
-      { name: ".devcontainer.json", kind: "basename" },
-      { name: "pyrightconfig.json", kind: "basename" },
-      { name: ".git", kind: "segment" },
-      { name: ".vscode", kind: "segment" },
-      { name: ".idea", kind: "segment" },
-      { name: ".claude", kind: "segment" },
-      { name: ".husky", kind: "segment" },
-      { name: ".cargo", kind: "segment" },
-      { name: ".devcontainer", kind: "segment" },
-      { name: ".yarn", kind: "segment" },
-      { name: ".mvn", kind: "segment" },
-      { name: ".config/git", kind: "segment-run" },
-      { name: ".ssh", kind: "segment" },
-      { name: ".gnupg", kind: "segment" },
-      { name: ".sema.json", kind: "basename" },
-      { name: ".sema", kind: "segment" }
-    ]);
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/cache-break-detector.js
-var SERVER_GAP_MS, init_cache_break_detector = __esm({
-  "node_modules/@sema-agent/core/dist/core/cache-break-detector.js"() {
-    SERVER_GAP_MS = 5 * 6e4;
-  }
-});
-
 // node_modules/@sema-agent/core/dist/brain/timeout.js
 var init_timeout = __esm({
   "node_modules/@sema-agent/core/dist/brain/timeout.js"() {
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/tool-name-aliases.js
-var RETIRED_TOOL_NAMES, init_tool_name_aliases = __esm({
-  "node_modules/@sema-agent/core/dist/core/tool-name-aliases.js"() {
-    RETIRED_TOOL_NAMES = /* @__PURE__ */ new Map([
-      ["read_file", 'renamed "Read"'],
-      ["edit_file", 'renamed "Edit"'],
-      ["write_file", 'renamed "Write"'],
-      ["bash", 'renamed "Bash"'],
-      ["bash_readonly", 'folded into "Bash" (read-only posture rides handsReadOnly/shellGate, not a tool name)'],
-      ["glob", 'renamed "Glob"'],
-      ["grep", 'renamed "Grep"'],
-      ["web_fetch", 'renamed "WebFetch"'],
-      ["tool_search", 'renamed "ToolSearch"'],
-      ["skill", 'renamed "Skill"'],
-      ["present_plan", 'renamed "ExitPlanMode"'],
-      ["enter_plan_mode", 'renamed "EnterPlanMode"'],
-      ["spawn_subagent", 'renamed "Agent"'],
-      ["CronCancel", 'renamed "CronDelete"'],
-      ["lsp", 'renamed "LSP"'],
-      ["submit_output", 'renamed "StructuredOutput"'],
-      ["repo_map", 'renamed "RepoMap"'],
-      ["read_tool_result", 'renamed "ReadToolResult"'],
-      ["report_blocked", 'renamed "ReportBlocked"'],
-      ["declare_done", 'renamed "DeclareDone"'],
-      ["run_workflow", 'renamed "Workflow"'],
-      ["RunWorkflow", 'renamed "Workflow"'],
-      ["Task", 'renamed "Agent" (a deployment-defined tool named "Task" is fine \u2014 this fires only when the name matches nothing in the roster)'],
-      ["BashOutput", 'renamed "TaskOutput"'],
-      ["AgentOutputTool", 'renamed "TaskOutput"'],
-      ["BashOutputTool", 'renamed "TaskOutput"'],
-      ["AgentOutput", 'renamed "TaskOutput"'],
-      ["WorkflowStatus", 'folded into "TaskOutput" (poll by runId)'],
-      ["KillShell", 'renamed "TaskStop"'],
-      ["KillBash", 'renamed "TaskStop"'],
-      ["ListMcpResources", 'renamed "ListMcpResourcesTool"'],
-      ["ReadMcpResource", 'renamed "ReadMcpResourceTool"'],
-      ["ReadMcpResourceDir", 'renamed "ReadMcpResourceDirTool"'],
-      ["MultiEdit", 'removed \u2014 "Edit" accepts the edits[] shape'],
-      ["Fork", 'removed \u2014 use Agent with subagent_type: "fork"'],
-      ["Sleep", 'removed \u2014 schedule a re-wake with CronCreate({schedule:{kind:"delay"}}) or wait with Monitor'],
-      ["Remember", "removed \u2014 memory is file-based; write the memory directory with the ordinary file tools"],
-      ["remember", "removed \u2014 memory is file-based; write the memory directory with the ordinary file tools"],
-      ["Recall", "removed \u2014 memory is file-based; read the memory directory with the ordinary file tools"],
-      ["recall", "removed \u2014 memory is file-based; read the memory directory with the ordinary file tools"]
-    ]);
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/lsp-protocol.js
-var init_lsp_protocol = __esm({
-  "node_modules/@sema-agent/core/dist/core/lsp-protocol.js"() {
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/shared-memory/types.js
-var SHARED_MEMORY_LIST_TOOL_NAME, SHARED_MEMORY_READ_TOOL_NAME, init_types27 = __esm({
-  "node_modules/@sema-agent/core/dist/core/shared-memory/types.js"() {
-    SHARED_MEMORY_LIST_TOOL_NAME = "memory_list", SHARED_MEMORY_READ_TOOL_NAME = "memory_read";
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/shared-memory/normalize.js
-var init_normalize = __esm({
-  "node_modules/@sema-agent/core/dist/core/shared-memory/normalize.js"() {
-    init_untrusted_text();
-    init_types27();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/shared-memory/tools.js
-var LIST_HINT, LIST_DESCRIPTION, READ_HINT, READ_DESCRIPTION, init_tools4 = __esm({
-  "node_modules/@sema-agent/core/dist/core/shared-memory/tools.js"() {
-    init_build3();
-    init_tools3();
-    init_normalize();
-    init_types27();
-    LIST_HINT = "List shared memory stores and their documents \u2014 check here before telling the user you do not have something.", LIST_DESCRIPTION = [
-      LIST_HINT,
-      "",
-      `List the memory documents in a memory store, sorted by path \u2014 each line gives a document's path, size, and last-updated date, but no content (use ${SHARED_MEMORY_READ_TOOL_NAME} for that). Pass store (the store's id) to choose the store, path_prefix to list one directory, and the cursor from a previous call to continue a long listing. Call with no arguments at all to list the memory stores connected to this session \u2014 their ids, a one-line description, and whether each is writable or read-only; that set can change during the session, so re-check it whenever you are unsure which store to use.`,
-      "",
-      "When store is omitted this call lists the stores themselves, and path_prefix and cursor are ignored.",
-      "",
-      `Call ${SHARED_MEMORY_LIST_TOOL_NAME} early when context about the project or the work in it would help \u2014 and always before telling the user you do not have something. If a listed document looks relevant, ${SHARED_MEMORY_READ_TOOL_NAME} it.`
-    ].join(`
-`), READ_HINT = "Read one shared memory document by store id and path \u2014 treat it as a past snapshot, not the answer.", READ_DESCRIPTION = [
-      READ_HINT,
-      "",
-      "Read one memory document from a memory store by its store id and path.",
-      "",
-      "Read your memory often so corrections stick. Treat memories as past snapshots to verify against current sources, not the definitive answer.",
-      "",
-      "## When to access memories",
-      "- When memories seem relevant, or the user references prior work with them or others in their organization.",
-      "- You MUST access memory when the user explicitly asks you to check, recall, or remember.",
-      `- Call ${SHARED_MEMORY_LIST_TOOL_NAME} early when context about the project would help, and always before telling the user you do not have something; if a listed document looks relevant, ${SHARED_MEMORY_READ_TOOL_NAME} it.`,
-      "- If the user says to *ignore* or *not use* memory: Do not apply remembered facts, cite, compare against, or mention memory content.",
-      "- Memory records can become stale over time. Use memory as context for what was true at a given point in time. Before answering the user or building assumptions based solely on information in memory records, verify that the memory is still correct and up-to-date by reading the current state of the files or resources. If a recalled memory conflicts with current information, trust what you observe now \u2014 and update or remove the stale memory rather than acting on it.",
-      "",
-      "## Before recommending from memory",
-      "",
-      "A memory that names a specific function, file, or flag is a claim that it existed *when the memory was written*. It may have been renamed, removed, or never merged. Before recommending it:",
-      "",
-      "- If the memory names a file path: check the file exists.",
-      "- If the memory names a function or flag: grep for it.",
-      "- If the user is about to act on your recommendation (not just asking about history), verify first.",
-      "",
-      '"The memory says X exists" is not the same as "X exists now."',
-      "",
-      "A memory that summarizes repo state (activity logs, architecture snapshots) is frozen in time. If the user asks about *recent* or *current* state, prefer `git log` or reading the code over recalling the snapshot."
-    ].join(`
-`);
-  }
-});
-
 // node_modules/@sema-agent/core/dist/core/memory-vector.js
 var init_memory_vector = __esm({
   "node_modules/@sema-agent/core/dist/core/memory-vector.js"() {
@@ -433689,7 +433635,7 @@ var CONSOLIDATION_DEFAULTS, CONSOLIDATION_SEAT_FREEZE_GRACE_MS, init_consolidati
 });
 
 // node_modules/@sema-agent/core/dist/core/memory-engine/tools.js
-var MEMORY_SEARCH_TOOL_NAME2, MEMORY_GET_TOOL_NAME2, MEMORY_INDEX_TOOL_NAME, MEMORY_INDEX_PAGE_CAP_BYTES, MEMORY_GET_PAGE_CAP_BYTES, SEARCH_HINT, FENCE_SEMANTICS_SENTENCE, SEARCH_DESCRIPTION, GET_HINT, GET_DESCRIPTION, INDEX_HINT, INDEX_DESCRIPTION, init_tools5 = __esm({
+var MEMORY_SEARCH_TOOL_NAME2, MEMORY_GET_TOOL_NAME2, MEMORY_INDEX_TOOL_NAME, MEMORY_INDEX_PAGE_CAP_BYTES, MEMORY_GET_PAGE_CAP_BYTES, SEARCH_HINT, FENCE_SEMANTICS_SENTENCE, SEARCH_DESCRIPTION, GET_HINT, GET_DESCRIPTION, INDEX_HINT, INDEX_DESCRIPTION, init_tools4 = __esm({
   "node_modules/@sema-agent/core/dist/core/memory-engine/tools.js"() {
     init_build3();
     init_tools3();
@@ -433727,12 +433673,6 @@ var MEMORY_SEARCH_TOOL_NAME2, MEMORY_GET_TOOL_NAME2, MEMORY_INDEX_TOOL_NAME, MEM
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/compliance.js
-var init_compliance = __esm({
-  "node_modules/@sema-agent/core/dist/core/compliance.js"() {
-  }
-});
-
 // node_modules/@sema-agent/core/dist/core/memory-engine/dual-root.js
 var init_dual_root = __esm({
   "node_modules/@sema-agent/core/dist/core/memory-engine/dual-root.js"() {
@@ -433870,12 +433810,383 @@ var init_prepare_memory = __esm({
     init_engine5();
     init_memory_capture_optout();
     init_layout2();
-    init_tools5();
+    init_tools4();
     init_scope_contract();
     init_file_backend();
   }
 });
 
+// node_modules/@sema-agent/core/dist/core/runner/prepare-memory-engine-session.js
+var init_prepare_memory_engine_session = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-memory-engine-session.js"() {
+    init_content_origin();
+    init_delegation_provenance();
+    init_delegation_settlement();
+    init_protocol_table();
+    init_types21();
+    init_untrusted_text();
+    init_safety();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/shared-memory/types.js
+var SHARED_MEMORY_LIST_TOOL_NAME, SHARED_MEMORY_READ_TOOL_NAME, init_types27 = __esm({
+  "node_modules/@sema-agent/core/dist/core/shared-memory/types.js"() {
+    SHARED_MEMORY_LIST_TOOL_NAME = "memory_list", SHARED_MEMORY_READ_TOOL_NAME = "memory_read";
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-defer-classify.js
+var init_prepare_defer_classify = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-defer-classify.js"() {
+    init_tool_catalog();
+    init_fs();
+    init_ask_question();
+    init_tools4();
+    init_types27();
+    init_tool_disclosure();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-listings.js
+var init_prepare_listings = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-listings.js"() {
+    init_default6();
+    init_synthetic_tools();
+    init_turn_attachments();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-prompt-inputs.js
+var init_prepare_prompt_inputs = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-prompt-inputs.js"() {
+    init_default6();
+    init_remote_env();
+    init_git_status_frame();
+    init_turn_attachments();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/shared-memory/normalize.js
+var init_normalize = __esm({
+  "node_modules/@sema-agent/core/dist/core/shared-memory/normalize.js"() {
+    init_untrusted_text();
+    init_types27();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/shared-memory/tools.js
+var LIST_HINT, LIST_DESCRIPTION, READ_HINT, READ_DESCRIPTION, init_tools5 = __esm({
+  "node_modules/@sema-agent/core/dist/core/shared-memory/tools.js"() {
+    init_build3();
+    init_tools3();
+    init_normalize();
+    init_types27();
+    LIST_HINT = "List shared memory stores and their documents \u2014 check here before telling the user you do not have something.", LIST_DESCRIPTION = [
+      LIST_HINT,
+      "",
+      `List the memory documents in a memory store, sorted by path \u2014 each line gives a document's path, size, and last-updated date, but no content (use ${SHARED_MEMORY_READ_TOOL_NAME} for that). Pass store (the store's id) to choose the store, path_prefix to list one directory, and the cursor from a previous call to continue a long listing. Call with no arguments at all to list the memory stores connected to this session \u2014 their ids, a one-line description, and whether each is writable or read-only; that set can change during the session, so re-check it whenever you are unsure which store to use.`,
+      "",
+      "When store is omitted this call lists the stores themselves, and path_prefix and cursor are ignored.",
+      "",
+      `Call ${SHARED_MEMORY_LIST_TOOL_NAME} early when context about the project or the work in it would help \u2014 and always before telling the user you do not have something. If a listed document looks relevant, ${SHARED_MEMORY_READ_TOOL_NAME} it.`
+    ].join(`
+`), READ_HINT = "Read one shared memory document by store id and path \u2014 treat it as a past snapshot, not the answer.", READ_DESCRIPTION = [
+      READ_HINT,
+      "",
+      "Read one memory document from a memory store by its store id and path.",
+      "",
+      "Read your memory often so corrections stick. Treat memories as past snapshots to verify against current sources, not the definitive answer.",
+      "",
+      "## When to access memories",
+      "- When memories seem relevant, or the user references prior work with them or others in their organization.",
+      "- You MUST access memory when the user explicitly asks you to check, recall, or remember.",
+      `- Call ${SHARED_MEMORY_LIST_TOOL_NAME} early when context about the project would help, and always before telling the user you do not have something; if a listed document looks relevant, ${SHARED_MEMORY_READ_TOOL_NAME} it.`,
+      "- If the user says to *ignore* or *not use* memory: Do not apply remembered facts, cite, compare against, or mention memory content.",
+      "- Memory records can become stale over time. Use memory as context for what was true at a given point in time. Before answering the user or building assumptions based solely on information in memory records, verify that the memory is still correct and up-to-date by reading the current state of the files or resources. If a recalled memory conflicts with current information, trust what you observe now \u2014 and update or remove the stale memory rather than acting on it.",
+      "",
+      "## Before recommending from memory",
+      "",
+      "A memory that names a specific function, file, or flag is a claim that it existed *when the memory was written*. It may have been renamed, removed, or never merged. Before recommending it:",
+      "",
+      "- If the memory names a file path: check the file exists.",
+      "- If the memory names a function or flag: grep for it.",
+      "- If the user is about to act on your recommendation (not just asking about history), verify first.",
+      "",
+      '"The memory says X exists" is not the same as "X exists now."',
+      "",
+      "A memory that summarizes repo state (activity logs, architecture snapshots) is frozen in time. If the user asks about *recent* or *current* state, prefer `git log` or reading the code over recalling the snapshot."
+    ].join(`
+`);
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-project-context.js
+var init_prepare_project_context = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-project-context.js"() {
+    init_default6();
+    init_tools4();
+    init_memory4();
+    init_session4();
+    init_tools5();
+    init_types27();
+    init_tools3();
+    init_synthetic_tools();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/hooks.js
+var objectPrototype, init_hooks3 = __esm({
+  "node_modules/@sema-agent/core/dist/core/hooks.js"() {
+    init_tool_policy();
+    init_ask_class();
+    init_ask_origin();
+    init_auto_mode();
+    init_untrusted_text();
+    init_reminder_mint();
+    init_checkpoint_store();
+    init_ask_question();
+    init_safe_notify();
+    init_permission_rule_org();
+    objectPrototype = Object.prototype;
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/tool-name-aliases.js
+var RETIRED_TOOL_NAMES, init_tool_name_aliases = __esm({
+  "node_modules/@sema-agent/core/dist/core/tool-name-aliases.js"() {
+    RETIRED_TOOL_NAMES = /* @__PURE__ */ new Map([
+      ["read_file", 'renamed "Read"'],
+      ["edit_file", 'renamed "Edit"'],
+      ["write_file", 'renamed "Write"'],
+      ["bash", 'renamed "Bash"'],
+      ["bash_readonly", 'folded into "Bash" (read-only posture rides handsReadOnly/shellGate, not a tool name)'],
+      ["glob", 'renamed "Glob"'],
+      ["grep", 'renamed "Grep"'],
+      ["web_fetch", 'renamed "WebFetch"'],
+      ["tool_search", 'renamed "ToolSearch"'],
+      ["skill", 'renamed "Skill"'],
+      ["present_plan", 'renamed "ExitPlanMode"'],
+      ["enter_plan_mode", 'renamed "EnterPlanMode"'],
+      ["spawn_subagent", 'renamed "Agent"'],
+      ["CronCancel", 'renamed "CronDelete"'],
+      ["lsp", 'renamed "LSP"'],
+      ["submit_output", 'renamed "StructuredOutput"'],
+      ["repo_map", 'renamed "RepoMap"'],
+      ["read_tool_result", 'renamed "ReadToolResult"'],
+      ["report_blocked", 'renamed "ReportBlocked"'],
+      ["declare_done", 'renamed "DeclareDone"'],
+      ["run_workflow", 'renamed "Workflow"'],
+      ["RunWorkflow", 'renamed "Workflow"'],
+      ["Task", 'renamed "Agent" (a deployment-defined tool named "Task" is fine \u2014 this fires only when the name matches nothing in the roster)'],
+      ["BashOutput", 'renamed "TaskOutput"'],
+      ["AgentOutputTool", 'renamed "TaskOutput"'],
+      ["BashOutputTool", 'renamed "TaskOutput"'],
+      ["AgentOutput", 'renamed "TaskOutput"'],
+      ["WorkflowStatus", 'folded into "TaskOutput" (poll by runId)'],
+      ["KillShell", 'renamed "TaskStop"'],
+      ["KillBash", 'renamed "TaskStop"'],
+      ["ListMcpResources", 'renamed "ListMcpResourcesTool"'],
+      ["ReadMcpResource", 'renamed "ReadMcpResourceTool"'],
+      ["ReadMcpResourceDir", 'renamed "ReadMcpResourceDirTool"'],
+      ["MultiEdit", 'removed \u2014 "Edit" accepts the edits[] shape'],
+      ["Fork", 'removed \u2014 use Agent with subagent_type: "fork"'],
+      ["Sleep", 'removed \u2014 schedule a re-wake with CronCreate({schedule:{kind:"delay"}}) or wait with Monitor'],
+      ["Remember", "removed \u2014 memory is file-based; write the memory directory with the ordinary file tools"],
+      ["remember", "removed \u2014 memory is file-based; write the memory directory with the ordinary file tools"],
+      ["Recall", "removed \u2014 memory is file-based; read the memory directory with the ordinary file tools"],
+      ["recall", "removed \u2014 memory is file-based; read the memory directory with the ordinary file tools"]
+    ]);
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/session-rule-policy.js
+var PATH_WRITE_TOOLS, PATH_CONFINABLE_WRITE_TOOLS, init_session_rule_policy = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/session-rule-policy.js"() {
+    init_safety();
+    init_safety();
+    init_tool_policy();
+    PATH_WRITE_TOOLS = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit"]), PATH_CONFINABLE_WRITE_TOOLS = /* @__PURE__ */ new Set([...PATH_WRITE_TOOLS, "NotebookEdit"]);
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/skill-tool-specifier.js
+var SPECIFIER_ENFORCED_TOOLS, init_skill_tool_specifier = __esm({
+  "node_modules/@sema-agent/core/dist/core/skill-tool-specifier.js"() {
+    init_permission_rules();
+    init_tool_policy();
+    init_bash_readonly_classifier();
+    SPECIFIER_ENFORCED_TOOLS = new Set(COARSE_SHELL_TOOLS);
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/active-skill-scope.js
+var init_active_skill_scope = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/active-skill-scope.js"() {
+    init_safety();
+    init_session_rule_policy();
+    init_skill_tool_specifier();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/denial-limit-arms.js
+var init_denial_limit_arms = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/denial-limit-arms.js"() {
+    init_auto_mode();
+    init_auto_mode_arming();
+    init_types21();
+    init_untrusted_text();
+    init_ask_origin();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/inherited-ask-grants.js
+var init_inherited_ask_grants = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/inherited-ask-grants.js"() {
+    init_arg_summary();
+    init_tool_policy();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/permission-rule-lanes.js
+var init_permission_rule_lanes = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/permission-rule-lanes.js"() {
+    init_hooks3();
+    init_permission_rule_model();
+    init_permission_rule_org();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-policy-chain.js
+var init_prepare_policy_chain = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-policy-chain.js"() {
+    init_send_message_tool();
+    init_ask_class();
+    init_ask_question();
+    init_checkpoint_store();
+    init_hooks3();
+    init_permission_rules();
+    init_remote_env();
+    init_tool_policy();
+    init_tool_name_aliases();
+    init_protocol_table();
+    init_trace();
+    init_active_skill_scope();
+    init_denial_limit_arms();
+    init_inherited_ask_grants();
+    init_permission_rule_lanes();
+    init_session_rule_policy();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/media-byte-cap.js
+var init_media_byte_cap = __esm({
+  "node_modules/@sema-agent/core/dist/core/media-byte-cap.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/tool-result-budget.js
+var init_tool_result_budget = __esm({
+  "node_modules/@sema-agent/core/dist/core/tool-result-budget.js"() {
+    init_message_utils();
+    init_tool_result_store();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-context-lane.js
+var init_prepare_context_lane = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-context-lane.js"() {
+    init_harness();
+    init_context_edit();
+    init_context_guard();
+    init_media_byte_cap();
+    init_tool_result_budget();
+    init_tool_result_store();
+    init_trace();
+    init_types21();
+    init_git_status_frame();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/prompt-assembly/composer.js
+var SINGLE_BLOCK_LAYOUT, init_composer = __esm({
+  "node_modules/@sema-agent/core/dist/prompt-assembly/composer.js"() {
+    SINGLE_BLOCK_LAYOUT = { groups: [{ groupId: "body", untilRank: Number.POSITIVE_INFINITY, cacheControlBoundary: !0 }] };
+  }
+});
+
+// node_modules/@sema-agent/core/dist/prompt-assembly/assemble.js
+var init_assemble = __esm({
+  "node_modules/@sema-agent/core/dist/prompt-assembly/assemble.js"() {
+    init_default6();
+    init_composer();
+    init_sema_default();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/prompt-assembly/artifact.js
+var init_artifact = __esm({
+  "node_modules/@sema-agent/core/dist/prompt-assembly/artifact.js"() {
+    init_epoch();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/prompt-assembly/turn-snapshot.js
+var init_turn_snapshot = __esm({
+  "node_modules/@sema-agent/core/dist/prompt-assembly/turn-snapshot.js"() {
+    init_epoch();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/cache-break-detector.js
+var SERVER_GAP_MS, init_cache_break_detector = __esm({
+  "node_modules/@sema-agent/core/dist/core/cache-break-detector.js"() {
+    SERVER_GAP_MS = 5 * 6e4;
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prompt-hash-salt.js
+import { randomBytes as randomBytes25 } from "node:crypto";
+var PROMPT_HASH_SALT, init_prompt_hash_salt = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prompt-hash-salt.js"() {
+    PROMPT_HASH_SALT = randomBytes25(16);
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-turn-wiring.js
+var init_prepare_turn_wiring = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-turn-wiring.js"() {
+    init_assemble();
+    init_artifact();
+    init_turn_snapshot();
+    init_cache_break_detector();
+    init_task_registry();
+    init_tool_policy();
+    init_encoding();
+    init_fs();
+    init_safety();
+    init_prompt_hash_salt();
+    init_turn_attachments();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-prompt-assembly.js
+var init_prepare_prompt_assembly = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-prompt-assembly.js"() {
+    init_send_message_tool();
+    init_assemble();
+    init_artifact();
+    init_epoch();
+    init_sema_default();
+    init_tool_catalog();
+    init_default6();
+    init_protocol_table();
+    init_reminder_mint();
+    init_session4();
+    init_prompt_hash_salt();
+  }
+});
+
 // node_modules/@sema-agent/core/dist/core/retention.js
 var init_retention = __esm({
   "node_modules/@sema-agent/core/dist/core/retention.js"() {
@@ -433936,13 +434247,12 @@ var TASK_LIMIT_KEY_DICT, TASK_LIMIT_KEYS, init_prepare_config_doors = __esm({
 });
 
 // node_modules/@sema-agent/core/dist/core/runner/prepare-safety-scan.js
-var NAMESPACED_NAME_SHAPES, init_prepare_safety_scan = __esm({
+var init_prepare_safety_scan = __esm({
   "node_modules/@sema-agent/core/dist/core/runner/prepare-safety-scan.js"() {
     init_protocol_table();
     init_fs();
     init_tool_result_store();
     init_present_plan_tool();
-    NAMESPACED_NAME_SHAPES = PROTOCOL_TABLE.map((ns) => `${ns.prefix}<peer>__<tool>`).join(", ");
   }
 });
 
@@ -433971,17 +434281,9 @@ var init_session_file_state_replay = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/with-retry.js
-var init_with_retry = __esm({
-  "node_modules/@sema-agent/core/dist/core/with-retry.js"() {
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/runner/prepare-workspace-restore.js
-var init_prepare_workspace_restore = __esm({
-  "node_modules/@sema-agent/core/dist/core/runner/prepare-workspace-restore.js"() {
-    init_remote_env();
-    init_with_retry();
+// node_modules/@sema-agent/core/dist/core/runner/workspace-path.js
+var init_workspace_path = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/workspace-path.js"() {
   }
 });
 
@@ -433997,57 +434299,68 @@ var init_prepare_hands_readface = __esm({
     init_encoding();
     init_session_file_state_replay();
     init_types21();
-    init_prepare_workspace_restore();
+    init_workspace_path();
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/runner/edited-files-ledger.js
-var init_edited_files_ledger = __esm({
-  "node_modules/@sema-agent/core/dist/core/runner/edited-files-ledger.js"() {
+// node_modules/@sema-agent/core/dist/core/with-retry.js
+var init_with_retry = __esm({
+  "node_modules/@sema-agent/core/dist/core/with-retry.js"() {
   }
 });
 
-// node_modules/@sema-agent/core/dist/prompt-assembly/composer.js
-var SINGLE_BLOCK_LAYOUT, init_composer = __esm({
-  "node_modules/@sema-agent/core/dist/prompt-assembly/composer.js"() {
-    SINGLE_BLOCK_LAYOUT = { groups: [{ groupId: "body", untilRank: Number.POSITIVE_INFINITY, cacheControlBoundary: !0 }] };
+// node_modules/@sema-agent/core/dist/core/runner/remote-env-retry.js
+var init_remote_env_retry = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/remote-env-retry.js"() {
+    init_remote_env();
+    init_with_retry();
   }
 });
 
-// node_modules/@sema-agent/core/dist/prompt-assembly/assemble.js
-var init_assemble = __esm({
-  "node_modules/@sema-agent/core/dist/prompt-assembly/assemble.js"() {
-    init_default6();
-    init_composer();
-    init_sema_default();
+// node_modules/@sema-agent/core/dist/core/runner/prepare-workspace-restore.js
+var init_prepare_workspace_restore = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-workspace-restore.js"() {
+    init_remote_env();
+    init_remote_env_retry();
+    init_workspace_path();
+    init_remote_env_retry();
   }
 });
 
-// node_modules/@sema-agent/core/dist/prompt-assembly/artifact.js
-var init_artifact = __esm({
-  "node_modules/@sema-agent/core/dist/prompt-assembly/artifact.js"() {
-    init_epoch();
+// node_modules/@sema-agent/core/dist/core/runner/park-commit.js
+var init_park_commit = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/park-commit.js"() {
   }
 });
 
-// node_modules/@sema-agent/core/dist/prompt-assembly/turn-snapshot.js
-var init_turn_snapshot = __esm({
-  "node_modules/@sema-agent/core/dist/prompt-assembly/turn-snapshot.js"() {
-    init_epoch();
+// node_modules/@sema-agent/core/dist/core/runner/prepare-offload-wrappers.js
+var init_prepare_offload_wrappers = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-offload-wrappers.js"() {
+    init_tool_result_store();
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/tool-result-budget.js
-var init_tool_result_budget = __esm({
-  "node_modules/@sema-agent/core/dist/core/tool-result-budget.js"() {
-    init_message_utils();
-    init_tool_result_store();
+// node_modules/@sema-agent/core/dist/core/file-history-retention.js
+var init_file_history_retention = __esm({
+  "node_modules/@sema-agent/core/dist/core/file-history-retention.js"() {
+    init_retention_policy();
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/media-byte-cap.js
-var init_media_byte_cap = __esm({
-  "node_modules/@sema-agent/core/dist/core/media-byte-cap.js"() {
+// node_modules/@sema-agent/core/dist/core/file-history-store.js
+var init_file_history_store = __esm({
+  "node_modules/@sema-agent/core/dist/core/file-history-store.js"() {
+    init_safety();
+    init_file_history_retention();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-file-history.js
+var init_prepare_file_history = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-file-history.js"() {
+    init_node_execution_env();
+    init_remote_env();
+    init_file_history_store();
   }
 });
 
@@ -434057,6 +434370,159 @@ var init_teardown_bounded = __esm({
   }
 });
 
+// node_modules/@sema-agent/core/dist/core/runner/prepare-execution-env.js
+var init_prepare_execution_env = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-execution-env.js"() {
+    init_stub_env();
+    init_remote_env();
+    init_teardown_bounded();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/edited-files-ledger.js
+var init_edited_files_ledger = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/edited-files-ledger.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-run-refs.js
+var init_prepare_run_refs = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-run-refs.js"() {
+    init_subagent();
+    init_retain_ledger();
+    init_active_skill_scope();
+    init_edited_files_ledger();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-inherited-gate.js
+var init_prepare_inherited_gate = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-inherited-gate.js"() {
+    init_subagent();
+    init_ask_question();
+    init_hooks3();
+    init_stub_env();
+    init_tool_policy();
+    init_denial_limit_arms();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/orchestration/workflow-script-runner.js
+var init_workflow_script_runner = __esm({
+  "node_modules/@sema-agent/core/dist/orchestration/workflow-script-runner.js"() {
+    init_governance_baseline_validity();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/auto-mode-prompt-assets.js
+var init_auto_mode_prompt_assets = __esm({
+  "node_modules/@sema-agent/core/dist/core/auto-mode-prompt-assets.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/auto-mode-prompt.js
+var init_auto_mode_prompt = __esm({
+  "node_modules/@sema-agent/core/dist/core/auto-mode-prompt.js"() {
+    init_auto_mode_defaults();
+    init_auto_mode_prompt_assets();
+    init_untrusted_text();
+    init_auto_mode_defaults();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/compliance.js
+var init_compliance = __esm({
+  "node_modules/@sema-agent/core/dist/core/compliance.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/derived-route-fallback.js
+var init_derived_route_fallback = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/derived-route-fallback.js"() {
+    init_route_adjudicator();
+    init_types21();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-caps-and-workflow.js
+var init_prepare_caps_and_workflow = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-caps-and-workflow.js"() {
+    init_harness();
+    init_subagent();
+    init_cross_session_envelope();
+    init_run_workflow_tool();
+    init_workflow_script_runner();
+    init_workflow_size_guideline();
+    init_auto_mode_arming();
+    init_auto_mode_prompt();
+    init_auto_mode();
+    init_checkpoint_store();
+    init_compliance();
+    init_present_plan_tool();
+    init_roles();
+    init_runtime();
+    init_task_registry();
+    init_tools3();
+    init_derived_route_fallback();
+    init_synthetic_tools();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/agents/agent-transcript-tool.js
+var init_agent_transcript_tool = __esm({
+  "node_modules/@sema-agent/core/dist/agents/agent-transcript-tool.js"() {
+    init_build3();
+    init_tools3();
+    init_background_agent_store();
+    init_task_registry();
+    init_untrusted_text();
+    init_subagent_steps();
+    init_subagent();
+    init_retain_ledger();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/agents/list-agents-tool.js
+var init_list_agents_tool = __esm({
+  "node_modules/@sema-agent/core/dist/agents/list-agents-tool.js"() {
+    init_build3();
+    init_tools3();
+    init_untrusted_text();
+    init_cross_session_ref();
+    init_roster_store();
+    init_peer_directory();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/agents/peer-notice-route.js
+var init_peer_notice_route = __esm({
+  "node_modules/@sema-agent/core/dist/agents/peer-notice-route.js"() {
+    init_mailbox_store();
+    init_peer_directory();
+    init_peer_notices();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/agents/peer-session-drain.js
+var PEER_DRAIN_LEASE_TTL_MS, init_peer_session_drain = __esm({
+  "node_modules/@sema-agent/core/dist/agents/peer-session-drain.js"() {
+    init_mailbox_store();
+    init_types21();
+    init_cross_session_envelope();
+    init_cross_session_judge();
+    init_peer_admission();
+    init_peer_directory();
+    init_untrusted_text();
+    init_list_agents_tool();
+    init_cross_session_judge();
+    init_peer_held_queue();
+    init_peer_idle();
+    init_peer_notices();
+    init_peer_notice_route();
+    PEER_DRAIN_LEASE_TTL_MS = 5 * 6e4;
+  }
+});
+
 // node_modules/@sema-agent/core/dist/tools/monitor.js
 var MONITOR_DESCRIPTION, init_monitor = __esm({
   "node_modules/@sema-agent/core/dist/tools/monitor.js"() {
@@ -434117,44 +434583,290 @@ var ENTER_DESCRIPTION, init_worktree = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/agents/list-agents-tool.js
-var init_list_agents_tool = __esm({
-  "node_modules/@sema-agent/core/dist/agents/list-agents-tool.js"() {
-    init_build3();
-    init_tools3();
-    init_untrusted_text();
-    init_cross_session_ref();
-    init_roster_store();
-    init_peer_directory();
+// node_modules/@sema-agent/core/dist/core/runner/prepare-delegation-surface.js
+var init_prepare_delegation_surface = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-delegation-surface.js"() {
+    init_agent_transcript_tool();
+    init_send_message_tool();
+    init_peer_session_drain();
+    init_monitor();
+    init_worktree();
+    init_task_registry();
+    init_tool_result_store();
+    init_trace();
+    init_types21();
   }
 });
 
-// node_modules/@sema-agent/core/dist/agents/peer-notice-route.js
-var init_peer_notice_route = __esm({
-  "node_modules/@sema-agent/core/dist/agents/peer-notice-route.js"() {
-    init_mailbox_store();
-    init_peer_directory();
-    init_peer_notices();
+// node_modules/@sema-agent/core/dist/core/runner/prepare-tool-disclosure-mount.js
+var init_prepare_tool_disclosure_mount = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-tool-disclosure-mount.js"() {
+    init_harness();
+    init_cache_break_detector();
+    init_types21();
+    init_tool_disclosure();
   }
 });
 
-// node_modules/@sema-agent/core/dist/agents/peer-session-drain.js
-var PEER_DRAIN_LEASE_TTL_MS, init_peer_session_drain = __esm({
-  "node_modules/@sema-agent/core/dist/agents/peer-session-drain.js"() {
-    init_mailbox_store();
+// node_modules/@sema-agent/core/dist/core/runner/checkpoint-scope.js
+var init_checkpoint_scope = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/checkpoint-scope.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-wiring-manifest.js
+var init_prepare_wiring_manifest = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-wiring-manifest.js"() {
+    init_peer_session_drain();
+    init_fs();
+    init_checkpoint_store();
+    init_hooks3();
+    init_remote_env();
+    init_tool_result_store();
+    init_tool_policy();
     init_types21();
-    init_cross_session_envelope();
-    init_cross_session_judge();
-    init_peer_admission();
-    init_peer_directory();
     init_untrusted_text();
-    init_list_agents_tool();
-    init_cross_session_judge();
-    init_peer_held_queue();
-    init_peer_idle();
-    init_peer_notices();
-    init_peer_notice_route();
-    PEER_DRAIN_LEASE_TTL_MS = 5 * 6e4;
+    init_usage_window_store();
+    init_wiring_manifest();
+    init_checkpoint_scope();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/abort-race.js
+var init_abort_race = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/abort-race.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-ask-lane.js
+var init_prepare_ask_lane = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-ask-lane.js"() {
+    init_arg_summary();
+    init_hooks3();
+    init_tool_policy();
+    init_abort_race();
+    init_denial_limit_arms();
+    init_inherited_ask_grants();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-suspend-saga.js
+var init_prepare_suspend_saga = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-suspend-saga.js"() {
+    init_task_registry();
+    init_remote_env();
+    init_tool_policy();
+    init_abort_race();
+    init_checkpoint_scope();
+    init_announce_once_ledger();
+    init_remote_env_retry();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-boundary-parks.js
+var init_prepare_boundary_parks = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-boundary-parks.js"() {
+    init_background_shell();
+    init_checkpoint_store();
+    init_task_registry();
+    init_checkpoint_scope();
+    init_park_commit();
+    init_remote_env_retry();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/content-ask-bindings.js
+var init_content_ask_bindings = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/content-ask-bindings.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-park-ask.js
+var init_prepare_park_ask = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-park-ask.js"() {
+    init_uuid4();
+    init_value2();
+    init_ask_question();
+    init_background_shell();
+    init_canonical_json();
+    init_checkpoint_store();
+    init_hooks3();
+    init_task_registry();
+    init_tool_policy();
+    init_tool_result_store();
+    init_abort_race();
+    init_checkpoint_scope();
+    init_content_ask_bindings();
+    init_park_commit();
+    init_remote_env_retry();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/sensitive-path-policy.js
+var CASE_INSENSITIVE_FS3, init_sensitive_path_policy = __esm({
+  "node_modules/@sema-agent/core/dist/core/sensitive-path-policy.js"() {
+    init_safety();
+    init_read_deny();
+    CASE_INSENSITIVE_FS3 = process.platform === "darwin" || process.platform === "win32";
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/write-protect.js
+var freezeTable, WRITE_PROTECTED_DEFAULT_TABLE, init_write_protect = __esm({
+  "node_modules/@sema-agent/core/dist/core/write-protect.js"() {
+    init_safety();
+    init_session_rule_policy();
+    init_sensitive_path_policy();
+    freezeTable = (rows2) => Object.freeze(rows2.map((r) => Object.freeze(r))), WRITE_PROTECTED_DEFAULT_TABLE = freezeTable([
+      { name: ".gitconfig", kind: "basename" },
+      { name: ".gitmodules", kind: "basename" },
+      { name: ".bashrc", kind: "basename" },
+      { name: ".bash_profile", kind: "basename" },
+      { name: ".zshrc", kind: "basename" },
+      { name: ".zprofile", kind: "basename" },
+      { name: ".profile", kind: "basename" },
+      { name: ".zshenv", kind: "basename" },
+      { name: ".zlogin", kind: "basename" },
+      { name: ".zlogout", kind: "basename" },
+      { name: ".bash_login", kind: "basename" },
+      { name: ".bash_aliases", kind: "basename" },
+      { name: ".bash_logout", kind: "basename" },
+      { name: ".envrc", kind: "basename" },
+      { name: ".ripgreprc", kind: "basename" },
+      { name: ".mcp.json", kind: "basename" },
+      { name: ".claude.json", kind: "basename" },
+      { name: ".npmrc", kind: "basename" },
+      { name: ".yarnrc", kind: "basename" },
+      { name: ".yarnrc.yml", kind: "basename" },
+      { name: ".pnp.cjs", kind: "basename" },
+      { name: ".pnp.loader.mjs", kind: "basename" },
+      { name: ".pnpmfile.cjs", kind: "basename" },
+      { name: "bunfig.toml", kind: "basename" },
+      { name: ".bunfig.toml", kind: "basename" },
+      { name: ".bazelrc", kind: "basename" },
+      { name: ".bazelversion", kind: "basename" },
+      { name: ".bazeliskrc", kind: "basename" },
+      { name: ".pre-commit-config.yaml", kind: "basename" },
+      { name: "lefthook.yml", kind: "basename" },
+      { name: ".lefthook.yml", kind: "basename" },
+      { name: "lefthook.yaml", kind: "basename" },
+      { name: ".lefthook.yaml", kind: "basename" },
+      { name: "gradle-wrapper.properties", kind: "basename" },
+      { name: "maven-wrapper.properties", kind: "basename" },
+      { name: ".devcontainer.json", kind: "basename" },
+      { name: "pyrightconfig.json", kind: "basename" },
+      { name: ".git", kind: "segment" },
+      { name: ".vscode", kind: "segment" },
+      { name: ".idea", kind: "segment" },
+      { name: ".claude", kind: "segment" },
+      { name: ".husky", kind: "segment" },
+      { name: ".cargo", kind: "segment" },
+      { name: ".devcontainer", kind: "segment" },
+      { name: ".yarn", kind: "segment" },
+      { name: ".mvn", kind: "segment" },
+      { name: ".config/git", kind: "segment-run" },
+      { name: ".ssh", kind: "segment" },
+      { name: ".gnupg", kind: "segment" },
+      { name: ".sema.json", kind: "basename" },
+      { name: ".sema", kind: "segment" }
+    ]);
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-gate-stations.js
+var init_prepare_gate_stations = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-gate-stations.js"() {
+    init_send_message_tool();
+    init_compliance();
+    init_hooks3();
+    init_present_plan_tool();
+    init_tool_policy();
+    init_trace();
+    init_write_protect();
+    init_session_rule_policy();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/a2a-task-state.js
+var A2A_TASK_STATES, init_a2a_task_state = __esm({
+  "node_modules/@sema-agent/core/dist/core/a2a-task-state.js"() {
+    A2A_TASK_STATES = [
+      "submitted",
+      "working",
+      "input-required",
+      "completed",
+      "canceled",
+      "failed",
+      "rejected",
+      "auth-required",
+      "unknown"
+    ];
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/a2a.js
+var A2A_CALL_TOTAL_TIMEOUT_MS, A2A_RESPONSE_MAX_BYTES, A2A_STATE_SET, init_a2a = __esm({
+  "node_modules/@sema-agent/core/dist/core/a2a.js"() {
+    init_build3();
+    init_a2a_task_state();
+    init_mcp4();
+    init_protocol_naming();
+    init_protocol_table();
+    init_untrusted_text();
+    A2A_CALL_TOTAL_TIMEOUT_MS = 10 * 6e4, A2A_RESPONSE_MAX_BYTES = 8 * 1024 * 1024, A2A_STATE_SET = new Set(A2A_TASK_STATES);
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-protocol-tools.js
+var init_prepare_protocol_tools = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-protocol-tools.js"() {
+    init_build3();
+    init_mcp4();
+    init_a2a();
+    init_types21();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-question-face.js
+var init_prepare_question_face = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-question-face.js"() {
+    init_ask_question();
+    init_canonical_json();
+    init_checkpoint_store();
+    init_content_ask_bindings();
+    init_content_ask_bindings();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/lsp-protocol.js
+var init_lsp_protocol = __esm({
+  "node_modules/@sema-agent/core/dist/core/lsp-protocol.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/lsp.js
+var MAX_LSP_FILE_BYTES, init_lsp = __esm({
+  "node_modules/@sema-agent/core/dist/core/lsp.js"() {
+    init_lsp_protocol();
+    init_safety();
+    init_build3();
+    init_tools3();
+    MAX_LSP_FILE_BYTES = 10 * 1e3 * 1e3;
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/prepare-lsp.js
+var init_prepare_lsp = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/prepare-lsp.js"() {
+    init_lsp();
+    init_lsp_protocol();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/runner/rollback-stack.js
+var init_rollback_stack = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/rollback-stack.js"() {
+    init_teardown_bounded();
   }
 });
 
@@ -434191,24 +434903,6 @@ One short sentence on what you chose and why. Goes to telemetry and is shown bac
   }
 });
 
-// node_modules/@sema-agent/core/dist/orchestration/workflow-script-runner.js
-var init_workflow_script_runner = __esm({
-  "node_modules/@sema-agent/core/dist/orchestration/workflow-script-runner.js"() {
-    init_governance_baseline_validity();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/lsp.js
-var MAX_LSP_FILE_BYTES, init_lsp = __esm({
-  "node_modules/@sema-agent/core/dist/core/lsp.js"() {
-    init_lsp_protocol();
-    init_safety();
-    init_build3();
-    init_tools3();
-    MAX_LSP_FILE_BYTES = 10 * 1e3 * 1e3;
-  }
-});
-
 // node_modules/@sema-agent/core/dist/core/park-selfcheck.js
 var init_park_selfcheck = __esm({
   "node_modules/@sema-agent/core/dist/core/park-selfcheck.js"() {
@@ -434218,131 +434912,84 @@ var init_park_selfcheck = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/file-history-retention.js
-var init_file_history_retention = __esm({
-  "node_modules/@sema-agent/core/dist/core/file-history-retention.js"() {
-    init_retention_policy();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/file-history-store.js
-var init_file_history_store = __esm({
-  "node_modules/@sema-agent/core/dist/core/file-history-store.js"() {
-    init_safety();
-    init_file_history_retention();
-  }
-});
-
 // node_modules/@sema-agent/core/dist/core/runner/prepare-task.js
-import { createHash as createHash27, randomBytes as randomBytes25 } from "node:crypto";
-var PROMPT_HASH_SALT, DEFAULT_RESOURCE_TTL_MS, USAGE_WINDOW_REAP_MARGIN_MS, DEFAULT_UNATTENDED_APPROVAL_TTL_MS, init_prepare_task = __esm({
+var init_prepare_task = __esm({
   "node_modules/@sema-agent/core/dist/core/runner/prepare-task.js"() {
     init_harness();
     init_auto_compaction();
     init_compaction_call_options();
-    init_auto_mode();
-    init_denial_limit_arms();
-    init_auto_mode_arming();
-    init_auto_mode_prompt();
-    init_roles();
-    init_arg_summary();
-    init_mcp4();
-    init_a2a();
-    init_build3();
-    init_value2();
     init_uuid4();
     init_runtime();
     init_session4();
-    init_subagent();
-    init_agent_transcript_tool();
     init_send_message_tool();
-    init_retain_ledger();
-    init_tool_policy();
-    init_permission_rule_model();
-    init_prepare_permission_rules();
-    init_active_skill_scope();
-    init_turn_attachments();
-    init_untrusted_text();
-    init_prepare_announce_once();
+    init_announce_once_ledger();
     init_reminder_mint();
-    init_ask_class();
     init_trace();
-    init_session_rule_policy();
-    init_hooks3();
-    init_write_protect();
-    init_cache_break_detector();
     init_request_params();
-    init_route_adjudicator();
     init_timeout();
-    init_tools3();
-    init_tool_name_aliases();
-    init_protocol_table();
-    init_permission_rules();
-    init_lsp_protocol();
     init_tool_result_store();
     init_synthetic_tools();
     init_strict_output_schema();
-    init_tool_disclosure();
     init_tools4();
-    init_types27();
-    init_tools5();
-    init_content_origin();
-    init_delegation_provenance();
-    init_delegation_settlement();
-    init_memory4();
-    init_compliance();
     init_memory_admission();
     init_prepare_memory();
+    init_prepare_memory_engine_session();
+    init_prepare_defer_classify();
+    init_prepare_listings();
+    init_prepare_prompt_inputs();
+    init_prepare_project_context();
+    init_prepare_policy_chain();
+    init_prepare_context_lane();
+    init_prepare_turn_wiring();
+    init_prepare_context_lane();
+    init_prepare_prompt_assembly();
     init_prepare_config_doors();
     init_prepare_safety_scan();
     init_prepare_acquire_reconcile();
     init_prepare_hands_readface();
-    init_edited_files_ledger();
     init_prepare_workspace_restore();
-    init_default6();
-    init_git_status_frame();
-    init_assemble();
-    init_tool_catalog();
-    init_epoch();
-    init_artifact();
-    init_turn_snapshot();
-    init_sema_default();
+    init_park_commit();
+    init_park_commit();
+    init_prepare_offload_wrappers();
+    init_prepare_file_history();
+    init_prepare_execution_env();
+    init_prepare_run_refs();
+    init_prepare_inherited_gate();
+    init_prepare_caps_and_workflow();
+    init_prepare_delegation_surface();
+    init_prepare_tool_disclosure_mount();
+    init_prepare_wiring_manifest();
+    init_prepare_ask_lane();
+    init_prepare_suspend_saga();
+    init_prepare_boundary_parks();
+    init_prepare_park_ask();
+    init_prepare_gate_stations();
+    init_prepare_park_ask();
+    init_prepare_suspend_saga();
+    init_checkpoint_scope();
+    init_checkpoint_scope();
+    init_prepare_wiring_manifest();
+    init_derived_route_fallback();
+    init_prepare_protocol_tools();
+    init_prepare_question_face();
+    init_prepare_lsp();
+    init_rollback_stack();
+    init_prepare_tool_disclosure_mount();
+    init_prepare_file_history();
     init_context_edit();
-    init_tool_result_budget();
-    init_media_byte_cap();
-    init_context_guard();
-    init_stub_env();
     init_remote_env();
     init_teardown_bounded();
-    init_background_shell();
     init_task_registry();
-    init_monitor();
-    init_worktree();
     init_peer_session_drain();
-    init_cross_session_envelope();
-    init_node_execution_env();
-    init_fs();
-    init_encoding();
-    init_ask_question();
     init_scheduler_tools();
-    init_present_plan_tool();
     init_workflow_script_runner();
-    init_run_workflow_tool();
-    init_workflow_size_guideline();
-    init_lsp();
-    init_safety();
     init_checkpoint_store();
-    init_canonical_json();
-    init_wiring_manifest();
     init_park_selfcheck();
-    init_usage_window_store();
     init_types21();
-    init_file_history_store();
     init_prepare_hands_readface();
     init_checkpoint_store();
     init_prepare_config_doors();
-    init_prepare_workspace_restore();
-    PROMPT_HASH_SALT = randomBytes25(16), DEFAULT_RESOURCE_TTL_MS = 720 * 60 * 60 * 1e3, USAGE_WINDOW_REAP_MARGIN_MS = 3600 * 1e3, DEFAULT_UNATTENDED_APPROVAL_TTL_MS = 720 * 60 * 60 * 1e3;
+    init_workspace_path();
   }
 });
 
@@ -434449,7 +435096,7 @@ var init_runtask = __esm({
     init_hooks3();
     init_human_input_projection();
     init_untrusted_text();
-    init_prepare_announce_once();
+    init_announce_once_ledger();
     init_session_reconcile();
     init_tool_result_store();
     init_lsp_diagnostics();
@@ -435260,7 +435907,7 @@ var init_permission_rule_sync = __esm({
 // node_modules/@sema-agent/core/dist/stores/file/permission-rule-store.js
 import { closeSync as closeSync14, constants as FS2, existsSync as existsSync29, fsyncSync as fsyncSync11, lstatSync as lstatSync5, mkdirSync as mkdirSync24, openSync as openSync15, readFileSync as readFileSync42, readdirSync as readdirSync13, renameSync as renameSync16, unlinkSync as unlinkSync15, writeFileSync as writeFileSync22 } from "node:fs";
 import { join as join157 } from "node:path";
-import { createHash as createHash28, randomBytes as randomBytes26 } from "node:crypto";
+import { createHash as createHash27, randomBytes as randomBytes26 } from "node:crypto";
 function isRuleFile(v2) {
   let p = v2;
   return typeof p == "object" && p !== null && p.schemaVersion === 3 && Array.isArray(p.rules) && Array.isArray(p.tombstones) && typeof p.rev == "number" && (p.quarantined === void 0 || Array.isArray(p.quarantined));
@@ -435293,7 +435940,7 @@ function atomicPublish(dir, file2, payload2) {
   }
 }
 function checksumOf(body) {
-  return `sha256:${createHash28("sha256").update(canonicalize3(body), "utf8").digest("hex")}`;
+  return `sha256:${createHash27("sha256").update(canonicalize3(body), "utf8").digest("hex")}`;
 }
 function assertSafeDir(dir) {
   mkdirSync24(dir, { recursive: !0, mode: 448 });
@@ -435893,7 +436540,7 @@ var init_sync_client = __esm({
 var init_memory_engine = __esm({
   "node_modules/@sema-agent/core/dist/core/memory-engine/index.js"() {
     init_engine5();
-    init_tools5();
+    init_tools4();
     init_provenance_wording();
     init_scan();
     init_file_backend();
@@ -458394,7 +459041,7 @@ var init_config7 = __esm({
 });
 
 // build-src/src/utils/api.ts
-import { createHash as createHash29 } from "crypto";
+import { createHash as createHash28 } from "crypto";
 function filterSwarmFieldsFromSchema(toolName2, schema) {
   let fieldsToRemove = SWARM_FIELDS_BY_TOOL[toolName2];
   if (!fieldsToRemove || fieldsToRemove.length === 0)
@@ -458457,7 +459104,7 @@ function logAPIPrefix(systemPrompt) {
   firstSystemPrompt?.slice(
     0,
     20
-  ), firstSystemPrompt?.length, firstSystemPrompt && createHash29("sha256").update(firstSystemPrompt).digest("hex");
+  ), firstSystemPrompt?.length, firstSystemPrompt && createHash28("sha256").update(firstSystemPrompt).digest("hex");
 }
 function splitSysPromptPrefix(systemPrompt, options) {
   let useGlobalCacheFeature = shouldUseGlobalCacheScope();
@@ -466344,12 +466991,15 @@ var CORE_ENGINE_NOTICE_CODES, PENDING_ENGINE_NOTICE_CODES, SURFACEABLE_ENGINE_NO
 var wiringManifestStore_exports = {};
 __export(wiringManifestStore_exports, {
   autoModeDoctorDetail: () => autoModeDoctorDetail,
+  forgetWiringManifestReading: () => forgetWiringManifestReading,
   modelGateRemovedLine: () => modelGateRemovedLine,
   noteWiringManifestReading: () => noteWiringManifestReading,
   observedAutoMode: () => observedAutoMode,
   observedModelGate: () => observedModelGate,
+  observedWiringMcp: () => observedWiringMcp,
   resetWiringManifestReadingForTest: () => resetWiringManifestReadingForTest,
-  wiringManifestChromeView: () => wiringManifestChromeView
+  wiringManifestChromeView: () => wiringManifestChromeView,
+  wiringMcpDoctorDetail: () => wiringMcpDoctorDetail
 });
 function wiringManifestChromeView(e) {
   if (typeof e != "object" || e === null) return null;
@@ -466368,23 +467018,50 @@ function wiringManifestChromeView(e) {
       } catch {
         return;
       }
-  }, gateClass = readFrom(gate, "class"), gateRestore = readFrom(gate, "restore"), removedRaw = readFrom(gate, "removed"), autoArmed = readFrom(auto, "armed"), autoReason = readFrom(auto, "reason"), modelGate = typeof gateClass == "string" && typeof gateRestore == "string" && Array.isArray(removedRaw) && removedRaw.every((t2) => typeof t2 == "string") ? { class: gateClass, removed: [...removedRaw], restore: gateRestore } : void 0, autoMode = typeof autoArmed == "boolean" && typeof autoReason == "string" ? { armed: autoArmed, reason: autoReason } : void 0;
+  }, gateClass = readFrom(gate, "class"), gateRestore = readFrom(gate, "restore"), removedRaw = readFrom(gate, "removed"), autoArmed = readFrom(auto, "armed"), autoReason = readFrom(auto, "reason"), modelGate = typeof gateClass == "string" && typeof gateRestore == "string" && Array.isArray(removedRaw) && removedRaw.every((t2) => typeof t2 == "string") ? { class: gateClass, removed: [...removedRaw], restore: gateRestore } : void 0, autoMode = typeof autoArmed == "boolean" && typeof autoReason == "string" ? { armed: autoArmed, reason: autoReason } : void 0, mcpRaw = read("mcp"), mcp2;
+  if (Array.isArray(mcpRaw)) {
+    let rows2 = [];
+    for (let raw2 of mcpRaw) {
+      if (typeof raw2 != "object" || raw2 === null || Array.isArray(raw2)) continue;
+      let r = raw2, name = readFrom(r, "name"), status3 = readFrom(r, "status");
+      if (typeof name != "string" || name === "" || typeof status3 != "string" || status3 === "") continue;
+      let source = readFrom(r, "source"), errorCode = readFrom(r, "errorCode"), toolCount = readFrom(r, "toolCount");
+      rows2.push({
+        name,
+        // 🔴 `status` / `errorCode` 一律**开集**读(词的属主是 core):认不得的词照渲不丢行;
+        //    抄一份闭集表会在 core 加员那天把一个合法值连同它那一行一起吞掉。
+        status: status3,
+        ...typeof source == "string" && source !== "" ? { source } : {},
+        ...typeof errorCode == "string" && errorCode !== "" ? { errorCode } : {},
+        // 🔴 `toolCount: 0` 是**读数**(连上了、零工具),不是缺席 ⇒ 有限数就收,别用 falsy 判。
+        ...typeof toolCount == "number" && Number.isFinite(toolCount) ? { toolCount } : {}
+      });
+    }
+    (mcpRaw.length === 0 || rows2.length > 0) && (mcp2 = rows2);
+  }
   return {
     ...modelGate !== void 0 ? { modelGate } : {},
-    ...autoMode !== void 0 ? { autoMode } : {}
+    ...autoMode !== void 0 ? { autoMode } : {},
+    ...mcp2 !== void 0 ? { mcp: mcp2 } : {}
   };
 }
 function noteWiringManifestReading(reading) {
-  reading.autoMode !== void 0 && (lastAutoMode = reading.autoMode), reading.modelGate !== void 0 && (lastModelGate = reading.modelGate);
+  reading.autoMode !== void 0 && (lastAutoMode = reading.autoMode), reading.modelGate !== void 0 && (lastModelGate = reading.modelGate), reading.mcp !== void 0 && (lastMcp = reading.mcp);
 }
 function observedAutoMode() {
   return lastAutoMode;
 }
+function observedWiringMcp() {
+  return lastMcp;
+}
 function observedModelGate() {
   return lastModelGate;
 }
+function forgetWiringManifestReading() {
+  lastMcp = null, lastAutoMode = null, lastModelGate = null;
+}
 function resetWiringManifestReadingForTest() {
-  lastAutoMode = null, lastModelGate = null;
+  lastMcp = null, lastAutoMode = null, lastModelGate = null;
 }
 function modelGateRemovedLine(gate) {
   return `Model gate removed ${gate.class}: ${gate.removed.join(", ")} \u2014 restore: ${gate.restore}`;
@@ -466392,15 +467069,21 @@ function modelGateRemovedLine(gate) {
 function autoModeDoctorDetail(reading) {
   return reading === null ? {
     status: "info",
-    detail: "not observed \u2014 the engine reports it per run leg; this one-shot process has none (run /doctor inside the REPL after a turn)"
+    detail: "not observed \u2014 the engine reports it per run leg; this process has not seen a wiring-manifest frame yet (nothing has run in it, or the engine is older than 7.58.0)"
   } : {
     status: reading.armed ? "ok" : "info",
     detail: `${reading.armed ? "armed" : "not armed"} \xB7 engine reason: ${reading.reason}`
   };
 }
-var lastAutoMode, lastModelGate, init_wiringManifestStore = __esm({
+function wiringMcpDoctorDetail(rows2, clean9) {
+  return rows2 === null ? "not observed - the engine reports declared MCP servers on the wiring manifest; this process has not seen such a frame yet (nothing has run in it, or the engine is older than 7.60.0)" : rows2.length === 0 ? "this engine leg declared no MCP servers" : rows2.map((r) => {
+    let parts = [`${clean9(r.name, 40)}: ${clean9(r.status, 24)}`];
+    return r.errorCode !== void 0 && parts.push(`code ${clean9(r.errorCode, 40)}`), typeof r.toolCount == "number" && Number.isFinite(r.toolCount) && parts.push(`${r.toolCount} tools`), parts.push(r.source !== void 0 ? `source ${clean9(r.source, 40)}` : "source not declared"), parts.join(" - ");
+  }).join(" | ");
+}
+var lastAutoMode, lastMcp, lastModelGate, init_wiringManifestStore = __esm({
   "build-src/src/sema/wiringManifestStore.ts"() {
-    lastAutoMode = null, lastModelGate = null;
+    lastAutoMode = null, lastMcp = null, lastModelGate = null;
   }
 });
 
@@ -466501,7 +467184,7 @@ __export(upstreamBridge_exports, {
   seedEngineTaskNotificationDedupFromTranscript: () => seedEngineTaskNotificationDedupFromTranscript,
   timeoutWindowExpiredCallIdOf: () => timeoutWindowExpiredCallIdOf
 });
-import { createHash as createHash30 } from "node:crypto";
+import { createHash as createHash29 } from "node:crypto";
 function appendBridgeProbe(envName, line) {
   let path28 = envName !== void 0 ? process.env[envName] : void 0;
   if (path28)
@@ -466621,7 +467304,7 @@ function timeoutWindowExpiredCallIdOf(frame) {
     return id.length <= MAX_COLLATERAL_ABORT_ID_CHARS ? id : void 0;
 }
 function identityDigest(v2) {
-  return createHash30("sha256").update(Buffer.from(v2, "utf16le")).digest("hex").slice(0, 32);
+  return createHash29("sha256").update(Buffer.from(v2, "utf16le")).digest("hex").slice(0, 32);
 }
 function wireIdentity(raw2) {
   return typeof raw2 != "string" || raw2.length === 0 ? "" : raw2.length <= IDENTITY_INLINE_MAX ? `${String(raw2.length)}:${raw2}` : `${String(raw2.length)}:${raw2.slice(0, 64)}#${identityDigest(raw2)}`;
@@ -468602,6 +469285,74 @@ var clean7, BENIGN_ABSENCE_WORDS, init_ruleEvidenceNote = __esm({
   }
 });
 
+// build-src/src/sema/askFrameNotes.ts
+function readDenialLimitFallback3(v2) {
+  if (typeof v2 != "object" || v2 === null) return;
+  let r = v2, num = (n2) => typeof n2 == "number" && Number.isFinite(n2) && n2 >= 0;
+  if (!(!num(r.consecutive) || !num(r.total) || !num(r.autoDenyAfterMs)) && !(typeof r.limit != "string" || r.limit === ""))
+    return {
+      consecutive: r.consecutive,
+      total: r.total,
+      limit: r.limit,
+      autoDenyAfterMs: r.autoDenyAfterMs
+    };
+}
+function denialLimitFallbackNote(v2) {
+  if (v2 == null || typeof v2 != "object") return;
+  let parts = ["auto-deny limit reached \u2014 this one needs a real human decision"], num = (n2) => typeof n2 == "number" && Number.isFinite(n2) && n2 >= 0 ? n2 : void 0, consecutive = num(v2.consecutive), total = num(v2.total);
+  consecutive !== void 0 && total !== void 0 && parts.push(`${consecutive} consecutive / ${total} total denials so far`);
+  let limit2 = typeof v2.limit == "string" && v2.limit !== "" ? v2.limit : void 0;
+  limit2 !== void 0 && parts.push(`the limit that tripped: ${cleanUntrustedForDisplay(limit2, 24)}`);
+  let windowMs = num(v2.autoDenyAfterMs);
+  return windowMs !== void 0 && windowMs > 0 && parts.push(`the engine auto-denies it in ${Math.round(windowMs / 1e3)}s if nobody answers`), parts.join("; ");
+}
+function askOriginNote(origin2) {
+  if (!(typeof origin2 != "string" || origin2 === ""))
+    switch (origin2) {
+      case "content_question":
+      case "unresolvable":
+      case "ask_rule":
+      case "policy":
+        return;
+      case "org_unavailable":
+        return "asked because the org rule store could not be reached";
+      case "org_rule":
+        return "asked by an org rule";
+      case "hook":
+        return "asked by a hook";
+      case "denial_limit_fallback":
+        return "asked because the auto-deny limit was reached";
+      default:
+        return `asked by an origin this build does not know yet (${cleanUntrustedForDisplay(origin2, 40)})`;
+    }
+}
+function ruleOffersAbsenceNote(reason) {
+  if (!(typeof reason != "string" || reason === ""))
+    switch (reason) {
+      case "mandated":
+        return `no "don't ask again" option here: this gate is mandated, so a rule could not switch it off`;
+      case "shadowed":
+        return `no "don't ask again" option here: a higher-priority rule already covers this call`;
+      case "lane_cannot_speak":
+        return `no "don't ask again" option here: this approval lane cannot persist rules`;
+      default:
+        return `no "don't ask again" option here (reason this build does not know yet: ${cleanUntrustedForDisplay(reason, 40)})`;
+    }
+}
+function askFrameNoteParts(req) {
+  let denial = denialLimitFallbackNote(req.denialLimitFallback), origin2 = askOriginNote(req.origin), absence = ruleOffersAbsenceNote(req.ruleOffersAbsence);
+  return [
+    ...denial !== void 0 ? [denial] : [],
+    ...origin2 !== void 0 ? [origin2] : [],
+    ...absence !== void 0 ? [absence] : []
+  ];
+}
+var init_askFrameNotes = __esm({
+  "build-src/src/sema/askFrameNotes.ts"() {
+    init_untrustedDisplayText();
+  }
+});
+
 // build-src/src/sema/turnGateJournal.ts
 function journalGatePresented(gateKind2, callId, engineTaskId) {
   try {
@@ -468838,6 +469589,12 @@ function composeCardWireNote(req) {
     ...bidiNote !== void 0 ? [bidiNote] : [],
     ...req.governanceForced === !0 ? ["Required by deployment governance \u2014 permission-mode overrides do not apply"] : [],
     ...req.wireNote !== void 0 ? [req.wireNote] : [],
+    // ── §23a 三位(L-107④):限额回落 · ask 出身 · 「不再询问」缺席原因 ─────────────────────
+    // 🔴 排在 probeCause / ruleEvidence **之前**:这三句答的是「这只门为什么在这儿、为什么必须
+    //    你来批」,而那两句答的是「引擎凭什么这么判」—— 先因后据。缺席零占位 ⇒ 老引擎上卡形与
+    //    修前逐字节相同(additive 不回削)。
+    // 🔴 三位的窄读与措辞全在 askFrameNotes(单源);本处只负责把它们放进这条 dim 行。
+    ...askFrameNoteParts(req),
     ...probeCause !== void 0 ? [probeCauseNoteText(probeCause)] : [],
     ...ruleEvidenceNote !== void 0 ? [ruleEvidenceNote] : []
   ];
@@ -468886,8 +469643,8 @@ function shellApprovalCardPort(req) {
   }
   let tool = lookup.kind === "tool" ? lookup.tool : genericGateTool(req.toolName), { callKey, signal } = req, askDeadlineMs = readAskDeadlineMs(req) ?? readParkRowDeadline(req.callKey);
   return new Promise((resolve58) => {
-    let selectedPersistRule, selectedPersistRuleBatchOfferIndex, selectedPersistRuleEdited, windowClosedAtMs, lateApproveConfirmedOnce = !1, lateApproveConfirmShown = !1, stagedPermissionUpdates = [], lateDecideWatchdogTimer, settled = !1, settle3 = (o) => {
-      settled || (settled = !0, signal?.removeEventListener("abort", onAbortSignal), askWindowTimer !== void 0 && clearTimeout(askWindowTimer), askBackstopTimer !== void 0 && clearTimeout(askBackstopTimer), lateDecideWatchdogTimer !== void 0 && clearTimeout(lateDecideWatchdogTimer), liveApprovalCards.delete(callKey), journalGateResolved(callKey), resolve58(o));
+    let selectedPersistRule, selectedPersistRuleBatchOfferIndex, selectedPersistRuleEdited, windowClosedAtMs, lateApproveConfirmedOnce = !1, lateApproveConfirmShown = !1, stagedPermissionUpdates = [], lateDecideWatchdogTimer, settled = !1, saidWindowClosed = !1, bornEpoch = getLiveSessionEpoch(), settle3 = (o) => {
+      settled || (settled = !0, signal?.removeEventListener("abort", onAbortSignal), askWindowTimer !== void 0 && clearTimeout(askWindowTimer), askBackstopTimer !== void 0 && clearTimeout(askBackstopTimer), lateDecideWatchdogTimer !== void 0 && clearTimeout(lateDecideWatchdogTimer), liveApprovalCards.delete(callKey), forgetApprovalCardToolCallId(req.toolCallId, callKey, bornEpoch, saidWindowClosed ? req.toolName : void 0), journalGateResolved(callKey), resolve58(o));
     }, removeFromQueue = () => {
       try {
         setQueue((queue3) => queue3.filter((item) => item.toolUseID !== callKey));
@@ -468979,9 +469736,9 @@ function shellApprovalCardPort(req) {
         retractApprovalCard(callKey, "unanswered-after-window");
       }, unansweredBackstopMs(backstopWindowMs)));
     }, windowClosedEvidence = null, windowClosed = (evidence) => {
-      if (settled || windowClosedEvidence === "parked-frame" || windowClosedEvidence === "timer" && evidence !== "parked-frame") return !1;
-      windowClosedEvidence = evidence, logForDebugging(`liveToolApprovalWire: window closed for "${req.toolName}" callKey=${callKey} evidence=${evidence}`), askWindowTimer !== void 0 && (clearTimeout(askWindowTimer), askWindowTimer = void 0), windowClosedAtMs === void 0 && (windowClosedAtMs = Date.now()), markApprovalCardWindowClosed(callKey);
-      let row2 = evidence === "parked-frame" ? approvalMovedToDurableQueueRow(req.toolName) : approvalWindowClosedRow(req.toolName);
+      if (settled || windowClosedEvidence !== null && windowClosedEvidence !== "timer" || windowClosedEvidence === "timer" && evidence === "timer") return !1;
+      windowClosedEvidence = evidence, logForDebugging(`liveToolApprovalWire: window closed for "${req.toolName}" callKey=${callKey} evidence=${evidence}`), askWindowTimer !== void 0 && (clearTimeout(askWindowTimer), askWindowTimer = void 0), windowClosedAtMs === void 0 && (windowClosedAtMs = Date.now()), markApprovalCardWindowClosed(callKey), saidWindowClosed = !0;
+      let row2 = evidence === "parked-frame" ? approvalMovedToDurableQueueRow(req.toolName) : evidence === "auto-denied" ? approvalAutoDeniedRow(req.toolName) : approvalWindowClosedRow(req.toolName);
       return surfaceLateDecideOutcome(row2) || logForDebugging("liveToolApprovalWire: the window-closed status row had nowhere to go \u2014 the user was NOT told"), armBackstopOnce(), !0;
     };
     if (signal?.aborted) {
@@ -469187,7 +469944,7 @@ function shellApprovalCardPort(req) {
       askBackstopTimer !== void 0 && (clearTimeout(askBackstopTimer), askBackstopTimer = void 0), armBackstopOnce(), surfaceLateDecideOutcome(row2) || logForDebugging("liveToolApprovalWire: the late-approve confirmation banner had nowhere to go");
     };
     try {
-      if (setQueue((queue3) => [...queue3, confirm2]), logEngineGateFallbackToAsk(req.toolName, syncVerdict), liveApprovalCards.set(callKey, { retract: retractCard, windowClosed }), askDeadlineMs !== void 0 && !isParkRowCard(callKey)) {
+      if (setQueue((queue3) => [...queue3, confirm2]), logEngineGateFallbackToAsk(req.toolName, syncVerdict), liveApprovalCards.set(callKey, { retract: retractCard, windowClosed }), bornEpoch = registerApprovalCardToolCallId(req.toolCallId, callKey), askDeadlineMs !== void 0 && !isParkRowCard(callKey)) {
         let remaining = askDeadlineMs - Date.now();
         backstopWindowMs = Math.max(0, remaining), remaining <= 0 ? (logForDebugging(`liveToolApprovalWire: gate for "${req.toolName}" arrived with its approval window already closed \u2014 the card stays up, saying so`), windowClosed("timer")) : askWindowTimer = setTimeout(() => {
           windowClosed("timer");
@@ -469232,6 +469989,9 @@ var asWireTool, forcedToolLoadFailureForTest, forcedToolNilExportForTest, loadFi
     init_ruleEvidenceNote();
     init_persistedRulesWire2();
     init_armedGateRegistry2();
+    init_askFrameNotes();
+    init_liveSessionStore();
+    init_liveApprovalCardHandles();
     init_liveApprovalCardHandles();
     init_turnGateJournal();
     init_untrustedDisplayText();
@@ -469432,6 +470192,9 @@ function windowKeysFrom(frame, opts) {
     ...typeof frame.serverNowMs == "number" && Number.isFinite(frame.serverNowMs) ? { serverNowMs: frame.serverNowMs } : {}
   };
 }
+function readRuleOffersAbsenceStamp(card) {
+  return typeof card.ruleOffersAbsence == "string" && card.ruleOffersAbsence !== "" ? { ruleOffersAbsence: card.ruleOffersAbsence } : {};
+}
 function approvalCardRequestFrom(frame, opts) {
   let card = frame.card, notes = [riskNoteFor(card.risk)];
   card.argsOmitted === !0 && notes.push("arguments omitted by the engine (over the 16 KiB cap) \u2014 this does NOT mean the call has no arguments");
@@ -469469,6 +470232,28 @@ function approvalCardRequestFrom(frame, opts) {
     //    不是 `ApprovalCard` 的键)⇒ 本处**不**去 card 上找它:两位不同源不同算点,在这里补一个同名读
     //    就是拿一个量冒充另一个。那一位由 client-core 的行→卡重铸腿供给(0.48.0 件②)。
     ...card.inputHasBidi === !0 ? { inputHasBidi: !0 } : {},
+    // ── §23a 两位(L-107④ 壳半场,1.0.102;登记在案的「刻意不透」两条同批清账)─────────────
+    // 🔴 修前这两位在本腿被整键剥掉,理由(写在 approvalStreamWire.test 的 DELIBERATELY_NOT_STAMPED
+    //    表里)是「壳侧零消费口 + client-core 也还没投影 ⇒ 透传一个没人读的对象 = 假 affordance」。
+    //    **两个前提本批同时消失**:client-core 0.59.0 把两位投影到 `ApprovalCardRequest` 的具名位,
+    //    壳侧 `composeCardWireNote` → `askFrameNoteParts` 是它们的消费口。⇒ 那条登记的退出条件
+    //    (逐字:「包侧投影落地那一批本腿改经包面透传,同批删本条」)兑现,两条同批从表里删掉。
+    // 🔴 **本腿一个字都不自己拼**:措辞单源在 askFrameNotes,由卡口(shellApprovalCardPort →
+    //    composeCardWireNote)统一渲 —— 本腿只把值原样送到卡入参上。两个铸卡口各拼一遍就是同一句
+    //    话在两条车道上漂开(probeCause / ruleEvidence 当年立的同一条纪律)。
+    // 🔴 **窄读走壳侧单源 `readDenialLimitFallback`**(askFrameNotes):活卡帧腿的窄读在包里做完了,
+    //    但本腿读的是**生 wire**,而包的同名窄读器**没有导出**(dist 直证)⇒ 壳侧只此一把,判据与
+    //    server `.strict()` / 包内那把**逐字对齐**(四成员缺一整只丢)。已记候包:包导出后同批删。
+    //    🔴 只按**铸点域**判,绝不再收窄一格(B-025「消费域比铸点域更窄」的病形)。
+    ...(() => {
+      let dlf = readDenialLimitFallback3(card.denialLimitFallback);
+      return dlf !== void 0 ? { denialLimitFallback: dlf } : {};
+    })(),
+    // 🔴 `ruleOffersAbsence` 按**开集**送(非空串即收):闭三词的属主是 core,壳再套一张闭集表会在
+    //    core 加员那天把合法值判没。空串是坏值不是「没有原因」⇒ 不送。
+    //    ⚠️ 本腿的「不再询问」档**本来就不渲**(ruleOffers/ruleSuggestions 刻意剥,见下方长注):
+    //    送这一位不会造出档位,只会让卡上多一句「为什么没有这一格」—— 那正是它答的那一问。
+    ...readRuleOffersAbsenceStamp(card),
     // ── #144 被越级的持久 allow 规则原文(合并批审计件⑧;**同族第三次**静默漏键)──────────────
     // 🔴 与 `model` / `requiresRealApproval` / `inputHasBidi` 逐字同形:SDK 的 `APPROVAL_CARD_KEYS`
     //    早已列了 `persistedRuleShadowed`(server ≥7.13.0 随卡真发),client-core 的
@@ -469548,6 +470333,15 @@ function genericCardRequestFrom(env6, askId, opts) {
     // 扫描结果,不是卡的展示语义)。防御读:**严格 `true` 才 stamp**,其余(含 `"true"` / `1` / `false`)
     // 一律键缺席。与 v1 腿同一条纪律 —— 未知形帧上少说一句披露只是降级,多说一句「已确认干净」是谎报。
     ...card.inputHasBidi === !0 ? { inputHasBidi: !0 } : {},
+    // §23a 两位同形(L-107④;与 toolCallId / inputHasBidi 同一条降级纪律):这两位与 schemaVersion
+    // **无关** —— 它们是引擎对这只 ask 本身的判定,不是卡的展示语义 ⇒ 未知形帧上照样防御读。
+    // 🔴 措辞与窄读都在 askFrameNotes 单源;本腿只送已成形的值。读法与 v1 腿**同一个函数**
+    //    (不是「同样写一遍」)—— 两腿各抄一份窄读器就是同形存量。读不出一律键缺席。
+    ...(() => {
+      let dlf = readDenialLimitFallback3(card.denialLimitFallback);
+      return dlf !== void 0 ? { denialLimitFallback: dlf } : {};
+    })(),
+    ...readRuleOffersAbsenceStamp(card),
     ...opts.signal !== void 0 ? { signal: opts.signal } : {},
     wireNote: notes.join(" \xB7 "),
     // 窗三键(见函数头注)——**先验自洽再投影**;验不过 ⇒ 整族不转(连本地锚点 `receivedAtMs` 都不盖:
@@ -469879,6 +470673,7 @@ var STREAM_APPROVAL_CAP, ASK_DECISION_DISABLED_CODE, IDEMPOTENCY_KEY_MAX, PARKIN
     init_ruleEvidenceNote();
     init_untrustedDisplayText();
     init_wireNoticePort();
+    init_askFrameNotes();
     init_liveToolApprovalWire();
     init_askParkExpiry();
     STREAM_APPROVAL_CAP = "streamApproval", ASK_DECISION_DISABLED_CODE = "feature.approval_ask_disabled", IDEMPOTENCY_KEY_MAX = 255, PARKING_POLL_MAX = 2, PARKING_POLL_DELAY_MS = 400, CAPS_SETTLE_BUDGET_MS = 1500, LEGACY_SETTLE_GRACE_MS = 750, MAX_DECISION_NOTE_CHARS = 2048, TEARDOWN_BUDGET_MS = 1e3;
@@ -470177,6 +470972,7 @@ __export(agentsWire_exports, {
   DELEGATION_CAP_CODES: () => DELEGATION_CAP_CODES,
   DELEGATION_CONCURRENCY_CAP: () => DELEGATION_CONCURRENCY_CAP,
   DELEGATION_SESSION_CAP: () => DELEGATION_SESSION_CAP,
+  DENIAL_LIMIT_KINDS: () => DENIAL_LIMIT_KINDS,
   DETACH_DURABLE_OFF_400_ANCHOR: () => DETACH_DURABLE_OFF_400_ANCHOR,
   DETACH_HEADER: () => DETACH_HEADER,
   DETACH_WIRE_MIN_ENGINE: () => DETACH_WIRE_MIN_ENGINE,
@@ -470299,6 +471095,7 @@ __export(agentsWire_exports, {
   REWIND_ERROR_CODE_PREFIXES: () => REWIND_ERROR_CODE_PREFIXES,
   RULE_NOT_SENT_REJECTED_WARN_TEXT: () => RULE_NOT_SENT_REJECTED_WARN_TEXT,
   RULE_NOT_SENT_WARN_TEXT: () => RULE_NOT_SENT_WARN_TEXT,
+  RULE_OFFERS_ABSENCE_REASONS: () => RULE_OFFERS_ABSENCE_REASONS,
   RULE_OFFER_BATCH_MEMBER_KINDS: () => RULE_OFFER_BATCH_MEMBER_KINDS,
   RULE_OFFER_MATCHES: () => RULE_OFFER_MATCHES,
   RULE_OFFER_UNCOVERED_REASONS: () => RULE_OFFER_UNCOVERED_REASONS,
@@ -470380,6 +471177,7 @@ __export(agentsWire_exports, {
   __resetHooksWireCapsForTests: () => __resetHooksWireCapsForTests,
   __resetRetainWithoutWakeWarningForTests: () => __resetRetainWithoutWakeWarningForTests,
   __resetRunningChoiceLedgerForTests: () => __resetRunningChoiceLedgerForTests,
+  __resetSqlEngineReadingsForTests: () => __resetSqlEngineReadingsForTests,
   __resetSubagentOutputCapCacheForTests: () => __resetSubagentOutputCapCacheForTests,
   __resetSubagentOwnerLedgerForTests: () => __resetSubagentOwnerLedgerForTests,
   __resetSubagentStreamCapCacheForTests: () => __resetSubagentStreamCapCacheForTests,
@@ -470526,6 +471324,7 @@ __export(agentsWire_exports, {
   engineCapState: () => engineCapState,
   engineCapString: () => engineCapString,
   engineCapTrue: () => engineCapTrue,
+  engineCapValue: () => engineCapValue,
   engineCapsSettled: () => engineCapsSettled,
   engineCcStopSemantics: () => engineCcStopSemantics,
   engineLimitsSupportWarning: () => engineLimitsSupportWarning,
@@ -470568,6 +471367,7 @@ __export(agentsWire_exports, {
   fleetViewStubRowIds: () => fleetViewStubRowIds,
   fmtCtxOut: () => fmtCtxOut,
   fmtTokens: () => fmtTokens,
+  forgetSqlEngineReading: () => forgetSqlEngineReading,
   gateArmedWaitMs: () => gateArmedWaitMs,
   gateKind: () => gateKind,
   getBgParentRun: () => getBgParentRun,
@@ -470711,6 +471511,7 @@ __export(agentsWire_exports, {
   normalizeTaskNotification: () => normalizeTaskNotification,
   normalizeWirePrincipal: () => normalizeWirePrincipal,
   noteBgOwnerAbsence: () => noteBgOwnerAbsence,
+  noteEngineCapsForSqlEngine: () => noteEngineCapsForSqlEngine,
   notePlanReviewAnswered: () => notePlanReviewAnswered,
   notePlanReviewAnsweredFor: () => notePlanReviewAnsweredFor,
   notePlanReviewAnsweredIfDecisive: () => notePlanReviewAnsweredIfDecisive,
@@ -470719,6 +471520,7 @@ __export(agentsWire_exports, {
   notificationDropCounters: () => notificationDropCounters,
   notificationQueuePortMisses: () => notificationQueuePortMisses,
   observeCancelByDeny: () => observeCancelByDeny,
+  observedSqlEngine: () => observedSqlEngine,
   onEngineTaskBound: () => onEngineTaskBound,
   onGateArmed: () => onGateArmed,
   onGateArmedFor: () => onGateArmedFor,
@@ -470776,6 +471578,7 @@ __export(agentsWire_exports, {
   projectFleetAgentRows: () => projectFleetAgentRows,
   projectFleetAgentRowsFor: () => projectFleetAgentRowsFor,
   projectRewind: () => projectRewind,
+  projectSqlEngineCapability: () => projectSqlEngineCapability,
   projectTasks: () => projectTasks,
   projectWorkflowRun: () => projectWorkflowRun,
   projectWorkflowTaskOutput: () => projectWorkflowTaskOutput,
@@ -470897,6 +471700,7 @@ __export(agentsWire_exports, {
   skillCommandsToSpecs: () => skillCommandsToSpecs,
   splitApiErrorSupplement: () => splitApiErrorSupplement,
   spoolMarkerOf: () => spoolMarkerOf,
+  sqlEngineDoctorDetail: () => sqlEngineDoctorDetail,
   stamp: () => stamp,
   startApprovalsFeed: () => startApprovalsFeed,
   steerEngineSubagent: () => steerEngineSubagent,
@@ -471157,59 +471961,9 @@ __export(sqlEngineCapability_exports, {
   projectSqlEngineCapability: () => projectSqlEngineCapability,
   sqlEngineDoctorDetail: () => sqlEngineDoctorDetail
 });
-function projectSqlEngineCapability(caps) {
-  if (caps === null || typeof caps != "object") return;
-  if (!("sql" in caps)) return { kind: "not_reported" };
-  let sql = caps.sql;
-  if (sql === null) return { kind: "none" };
-  if (sql === void 0) return { kind: "not_reported" };
-  if (typeof sql != "object") return;
-  let s = sql;
-  if (!(typeof s.engine != "string" || s.engine === "") && !(typeof s.isolation != "string" || s.isolation === "") && !(s.txnMode !== null && (typeof s.txnMode != "string" || s.txnMode === "")))
-    return { kind: "present", view: { engine: s.engine, isolation: s.isolation, txnMode: s.txnMode } };
-}
-function noteEngineCapsForSqlEngine(baseUrl, caps) {
-  try {
-    let reading = projectSqlEngineCapability(caps);
-    if (reading === void 0) {
-      readingByBase.delete(baseUrl);
-      return;
-    }
-    readingByBase.set(baseUrl, reading);
-  } catch {
-  }
-}
-function capsBaseUrl5() {
-  let raw2 = process.env.SEMA_LIVE_BASEURL;
-  return typeof raw2 == "string" && raw2.trim() !== "" ? raw2 : void 0;
-}
-function observedSqlEngine(baseUrl = capsBaseUrl5()) {
-  return typeof baseUrl != "string" || baseUrl === "" ? { kind: "unobserved" } : readingByBase.get(baseUrl) ?? { kind: "unobserved" };
-}
-function sqlEngineDoctorDetail(reading) {
-  switch (reading.kind) {
-    case "unobserved":
-      return "not observed \u2014 the engine reports it on /v1/capabilities; this one-shot process has no engine response (run /doctor inside the REPL after a turn)";
-    case "not_reported":
-      return "not reported by this engine \u2014 the capability position needs a newer engine";
-    case "none":
-      return "none \u2014 the engine reports no SQL backend on this deployment (local file stores)";
-    case "present": {
-      let e = cleanUntrustedForDisplay(reading.view.engine, 40), i = cleanUntrustedForDisplay(reading.view.isolation, 40), t2 = reading.view.txnMode === null ? "no txn-mode indicator on this engine" : cleanUntrustedForDisplay(reading.view.txnMode, 40);
-      return `${e} \xB7 isolation ${i} \xB7 txn ${t2}`;
-    }
-  }
-}
-function forgetSqlEngineReading(baseUrl) {
-  typeof baseUrl != "string" || baseUrl === "" || readingByBase.delete(baseUrl);
-}
-function __resetSqlEngineReadingsForTests() {
-  readingByBase.clear();
-}
-var readingByBase, init_sqlEngineCapability = __esm({
+var init_sqlEngineCapability2 = __esm({
   "build-src/src/sema/sqlEngineCapability.ts"() {
-    init_untrustedDisplayText();
-    readingByBase = /* @__PURE__ */ new Map();
+    init_dist();
   }
 });
 
@@ -471237,7 +471991,7 @@ function armEngineCapsProbes(input) {
       return caps;
     }) : capsProbe;
     if (afterEngineRespawn) {
-      resetCapsDiscoveryState(baseUrl), invalidateSelfKnowledgeCap(baseUrl), forgetSqlEngineReading(baseUrl), kickAppendSystemPromptCapProbe(baseUrl, appendCapProbe), invalidateEngineCaps(baseUrl, guardedCapsProbe);
+      resetCapsDiscoveryState(baseUrl), invalidateSelfKnowledgeCap(baseUrl), forgetSqlEngineReading(baseUrl), forgetWiringManifestReading(), kickAppendSystemPromptCapProbe(baseUrl, appendCapProbe), invalidateEngineCaps(baseUrl, guardedCapsProbe);
       return;
     }
     kickAppendSystemPromptCapProbe(baseUrl, appendCapProbe), kickEngineCapsProbe(baseUrl, guardedCapsProbe);
@@ -471249,7 +472003,8 @@ var capsTeeEpochByBase, init_engineCapsArm = __esm({
     init_dist();
     init_projectContextCapGate();
     init_selfKnowledge();
-    init_sqlEngineCapability();
+    init_sqlEngineCapability2();
+    init_wiringManifestStore();
     capsTeeEpochByBase = /* @__PURE__ */ new Map();
   }
 });
@@ -471376,8 +472131,8 @@ function ledgerPath(scope) {
 }
 function crashConvergedScopeDigest(baseUrl, principal) {
   try {
-    let { createHash: createHash34 } = __require("node:crypto");
-    return createHash34("sha256").update(scopeKeyOf(baseUrl, principal)).digest("hex").slice(0, 16);
+    let { createHash: createHash33 } = __require("node:crypto");
+    return createHash33("sha256").update(scopeKeyOf(baseUrl, principal)).digest("hex").slice(0, 16);
   } catch {
     return "nodigest";
   }
@@ -471538,6 +472293,17 @@ async function* normalizeToolNames(events3) {
     yield ev;
   }
 }
+async function* tapAutoDeniedToolEnds(events3, openEpoch) {
+  for await (let ev of events3) {
+    try {
+      let kind = surfaceToolEndAutoDenied(ev, openEpoch);
+      kind === "live" ? semaDebugLine("liveClient: tool_end autoDenied=true \u2014 the live card said so") : kind === "late" ? semaDebugLine("liveClient: tool_end autoDenied=true \u2014 corrected the window-closed row") : kind === "late-unsurfaced" && semaDebugLine("liveClient: tool_end autoDenied=true \u2014 the late correction could not be surfaced (no transcript sink); the ledger entry is consumed");
+    } catch (e) {
+      semaDebugLine(`liveClient: the autoDenied tap threw (ignored, the stream is never harmed): ${String(e)}`);
+    }
+    yield ev;
+  }
+}
 async function* stampSubagentOwners(events3, runIdOf, ownerSessionId) {
   for await (let ev of events3)
     recordSubagentOwnerFromProgress(ev, runIdOf(), ownerSessionId), yield ev;
@@ -471870,7 +472636,7 @@ function createLiveConversationClient(config4) {
             ...opts?.signal ? { signal: opts.signal } : {}
           }) : live;
           return diagnoseSseIdleTear(
-            normalizeToolNames(
+            normalizeToolNames(tapAutoDeniedToolEnds(
               captureSessionId(
                 // §4④ engine 1.163 — AskUserQuestion parks the run `suspended` (no `question` frames anymore);
                 // the bridge turns that park into dialog → approvals.decide → runs.events continuation, INSIDE
@@ -471906,8 +472672,9 @@ function createLiveConversationClient(config4) {
                 () => headerAcquired,
                 () => earlyTaskId,
                 () => getLiveSessionEpoch() === openEpoch
-              )
-            ),
+              ),
+              openEpoch
+            )),
             baseUrlTrimmed,
             opts?.signal
           );
@@ -471928,7 +472695,7 @@ function createLiveConversationClient(config4) {
       events(taskId, opts) {
         let openEpoch = getLiveSessionEpoch();
         return withDurableSuggestionsTail(
-          normalizeToolNames(
+          normalizeToolNames(tapAutoDeniedToolEnds(
             captureSessionId(
               bridgeAskUserQuestionGates(
                 demuxQuestionFrames(
@@ -471959,8 +472726,9 @@ function createLiveConversationClient(config4) {
               void 0,
               void 0,
               () => getLiveSessionEpoch() === openEpoch
-            )
-          ),
+            ),
+            openEpoch
+          )),
           taskId,
           (id) => client3.runs.get(id, { ...engineSessionParamSpread() }),
           // 调用方的中断口:补收窗(≤2s)里用户 Ctrl+C / 关流 ⇒ 立刻停,绝不在中断后多打 HTTP。
@@ -472056,7 +472824,9 @@ var ENGINE_TO_CC_TOOL, SUGGESTIONS_TAIL_MAX_ATTEMPTS, SUGGESTIONS_TAIL_RETRY_MS,
     init_engineCapsArm();
     init_crashConvergedNotice();
     init_selfOrchestrationDenial2();
-    init_sqlEngineCapability();
+    init_sqlEngineCapability2();
+    init_liveApprovalCardHandles();
+    init_debugLine();
     init_projectContextCapGate();
     init_dist();
     init_dist();
@@ -472754,11 +473524,11 @@ var powerupUnlocked, powerupState_default, init_powerupState = __esm({
 });
 
 // build-src/src/sema/workflowJournalWire.ts
-function capsBaseUrl6() {
+function capsBaseUrl5() {
   let raw2 = process.env.SEMA_LIVE_BASEURL;
   return typeof raw2 == "string" && raw2.trim() !== "" ? raw2 : void 0;
 }
-function workflowJournalAvailable(baseUrl = capsBaseUrl6()) {
+function workflowJournalAvailable(baseUrl = capsBaseUrl5()) {
   return engineCapTrue(baseUrl, WORKFLOW_JOURNAL_CAP);
 }
 function resolveJournalFacade() {
@@ -522156,11 +522926,23 @@ async function collectAxesRows(opts, deps2) {
     rows2.push({ label: "Auto mode", status: "warn", detail: "reading unavailable" });
   }
   try {
-    let { sqlEngineDoctorDetail: sqlEngineDoctorDetail2, observedSqlEngine: observedSqlEngine2 } = await Promise.resolve().then(() => (init_sqlEngineCapability(), sqlEngineCapability_exports)), reading = deps2?.readSqlEngine !== void 0 ? deps2.readSqlEngine() : observedSqlEngine2();
+    let { sqlEngineDoctorDetail: sqlEngineDoctorDetail2, observedSqlEngine: observedSqlEngine2 } = await Promise.resolve().then(() => (init_sqlEngineCapability2(), sqlEngineCapability_exports)), reading = deps2?.readSqlEngine !== void 0 ? deps2.readSqlEngine() : observedSqlEngine2();
     rows2.push({ label: "SQL engine", status: "info", detail: sqlEngineDoctorDetail2(reading) });
   } catch {
     rows2.push({ label: "SQL engine", status: "warn", detail: "reading unavailable" });
   }
+  try {
+    let { wiringMcpDoctorDetail: wiringMcpDoctorDetail2, observedWiringMcp: observedWiringMcp2 } = await Promise.resolve().then(() => (init_wiringManifestStore(), wiringManifestStore_exports)), readRows = deps2?.readWiringMcp !== void 0 ? deps2.readWiringMcp() : observedWiringMcp2();
+    rows2.push({
+      label: "MCP servers (engine leg)",
+      status: "info",
+      // 消毒口在**呈现面**给(措辞在 store,消毒在这里 —— 与 modelGateRemovedLine 同分工):
+      // 三座都是 UNTRUSTED-for-display,只渲染、绝不参与判定。
+      detail: wiringMcpDoctorDetail2(readRows, (v2, max2) => cleanUntrustedForDisplay(v2, max2))
+    });
+  } catch {
+    rows2.push({ label: "MCP servers (engine leg)", status: "warn", detail: "reading unavailable" });
+  }
   let remote = (() => {
     try {
       return engineTarget.configuredEngineUrl();
@@ -525507,7 +526289,7 @@ var CC_DIR5, CC_GLOBAL_FILE2, MCP_SCOPE_LABELS, init_mcpChannels = __esm({
 
 // build-src/src/sema/importSources.ts
 import { existsSync as existsSync34, mkdirSync as mkdirSync27, readdirSync as readdirSync14, readFileSync as readFileSync52, writeFileSync as writeFileSync27 } from "node:fs";
-import { createHash as createHash31 } from "node:crypto";
+import { createHash as createHash30 } from "node:crypto";
 import { homedir as homedir48 } from "node:os";
 import { dirname as dirname89, join as join195, resolve as resolve50, sep as sep43 } from "node:path";
 function toSafeName(raw2) {
@@ -525979,7 +526761,7 @@ async function scanImportSources(opts) {
 `) } : { scans, warnings };
 }
 function importScanDigest(scans) {
-  let hash2 = createHash31("sha256");
+  let hash2 = createHash30("sha256");
   for (let scan of [...scans].sort((a, b3) => a.sourceId.localeCompare(b3.sourceId))) {
     hash2.update(scan.sourceId).update("\0");
     for (let item of [...scan.result.items].sort((a, b3) => a.id.localeCompare(b3.id)))
@@ -533340,7 +534122,7 @@ __export(cloudResources_exports, {
   cloudResourceRemove: () => cloudResourceRemove,
   cloudResourceSync: () => cloudResourceSync
 });
-import { createHash as createHash32 } from "node:crypto";
+import { createHash as createHash31 } from "node:crypto";
 import { existsSync as existsSync37, readdirSync as readdirSync16, readFileSync as readFileSync56, statSync as statSync17 } from "node:fs";
 import { basename as basename69, dirname as dirname91, isAbsolute as isAbsolute34, join as join201, resolve as resolve51 } from "node:path";
 import { getEffective as getEffective2, getMeConfig, getScopeConfigDraft as getScopeConfigDraft2, OAuthFlowError as OAuthFlowError3, RegistryApiError as RegistryApiError3 } from "@sema-agent/sdk/registry";
@@ -533827,7 +534609,7 @@ async function readSkillEntry(file2, fallbackName) {
     return { name, display: display2, entry: null, notes: [], skipReason: `skill name '${name}' is not registry-safe (letters/digits/._- , no spaces). Set a conforming 'name:' in the frontmatter.` };
   if (!content)
     return { name, display: display2, entry: null, notes: [], skipReason: `${file2} has no body after the frontmatter \u2014 nothing to upload.` };
-  let contentHash = `sha256:${createHash32("sha256").update(content, "utf8").digest("hex")}`;
+  let contentHash = `sha256:${createHash31("sha256").update(content, "utf8").digest("hex")}`;
   return {
     name,
     display: display2,
@@ -544463,7 +545245,7 @@ Usage: sema --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("sema 1.0.101", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
+  }).version("sema 1.0.102", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).psHandler([]), process.exit(process.exitCode ?? 0);
   }), program2.command("logs [id]").description("Print a background session's recent terminal output").action(async (id) => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).logsHandler(id, []), process.exit(process.exitCode ?? 0);
@@ -546584,7 +547366,7 @@ var init_local_load = __esm({
 // node_modules/@sema-agent/settings-schema/dist/scheduler-store-node.js
 import { mkdirSync as mkdirSync32, readFileSync as readFileSync64, writeFileSync as writeFileSync30, renameSync as renameSync19 } from "node:fs";
 import { dirname as dirname98 } from "node:path";
-import { randomBytes as randomBytes30, createHash as createHash33 } from "node:crypto";
+import { randomBytes as randomBytes30, createHash as createHash32 } from "node:crypto";
 function loadSchedulerStore(path28) {
   try {
     return parseSchedulerStore(readFileSync64(path28, "utf-8"));