@sema-agent/cli 1.0.12 → 1.0.14

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@sema-agent/cli",
-  "version": "1.0.12",
+  "version": "1.0.14",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@sema-agent/cli",
-      "version": "1.0.12",
+      "version": "1.0.14",
       "license": "BUSL-1.1",
       "dependencies": {
         "@sema-agent/sdk": "0.0.53",
@@ -629,9 +629,9 @@
       }
     },
     "node_modules/@sema-agent/core": {
-      "version": "1.309.0",
-      "resolved": "https://registry.npmjs.org/@sema-agent/core/-/core-1.309.0.tgz",
-      "integrity": "sha512-xn97ll9ia9sdIYHloZCD2IMmMxFyMeEygPoXNpGdD5JNx/owpudZhae1NYQU9NR7yBvnRla7uZz4C841+mLMHw==",
+      "version": "1.312.0",
+      "resolved": "https://registry.npmjs.org/@sema-agent/core/-/core-1.312.0.tgz",
+      "integrity": "sha512-a50syYHBa3TT1FjqZCGwK2YH3gt6o4YiyamJYGwY4ABdwCaj8wGBJZmkQw48J+1XEDo7NL/rV5xtaNzxn656Gw==",
       "license": "BUSL-1.1",
       "dependencies": {
         "@modelcontextprotocol/sdk": "1.29.0",
@@ -645,9 +645,9 @@
       }
     },
     "node_modules/@sema-agent/registry-core": {
-      "version": "0.10.13",
-      "resolved": "https://registry.npmjs.org/@sema-agent/registry-core/-/registry-core-0.10.13.tgz",
-      "integrity": "sha512-3cYQ3eULB9zqMA2+bRW967NEuQSl+Nd0dmGcNvQ2Un0NFmFlx/6PqiZTDndOwS1zZvdGIovRKJgUk9XN6ZmxiQ==",
+      "version": "0.10.14",
+      "resolved": "https://registry.npmjs.org/@sema-agent/registry-core/-/registry-core-0.10.14.tgz",
+      "integrity": "sha512-6EJe0WmrOrnEY/mITs8FHwCbBy5zcUWzRd1QaOYdEPF5H1DGvv/YcowZ4fR9HTWOpa9l8VI5mJv8gJA4EVxD0w==",
       "license": "BUSL-1.1",
       "dependencies": {
         "zod": "^3.24.0"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/cli",
-  "version": "1.0.12",
+  "version": "1.0.14",
   "description": "Sema — your own Claude Code-grade coding agent, in the terminal.",
   "license": "BUSL-1.1",
   "bin": {
@@ -25,10 +25,10 @@
     "@sema-agent/server": "1.218.0"
   },
   "overrides": {
-    "@sema-agent/core": "1.309.0",
-    "@sema-agent/registry-core": "0.10.13"
+    "@sema-agent/core": "1.312.0",
+    "@sema-agent/registry-core": "0.10.14"
   },
-  "semaEngineVersion": "server 1.218.0 / core 1.309.0 / registry-core 0.10.13",
+  "semaEngineVersion": "server 1.218.0 / core 1.312.0 / registry-core 0.10.14",
   "engines": {
     "node": ">=18"
   }

package/sema.js

@@ -107341,6 +107341,8 @@ var init_ink = __esm({
       // screen readers / screen magnifiers track it — so parking at the text
       // input's caret makes CJK input appear inline and lets a11y tools follow.
       cursorDeclaration = null;
+      /** sema 光标/IME:声明光标当前是否已 ?25h 显示(防每帧重复写显隐序)。 */
+      declaredCursorShown = false;
       // Main-screen: physical cursor position after the declared-cursor move,
       // tracked separately from frame.cursor (which must stay at content-bottom
       // for log-update's relative-move invariants). Alt-screen doesn't need
@@ -107627,6 +107629,10 @@ var init_ink = __esm({
                 });
               }
             }
+            if (!this.declaredCursorShown) {
+              optimized.push({ type: "stdout", content: "\x1B[?25h" });
+              this.declaredCursorShown = true;
+            }
             this.displayCursor = target;
           } else {
             if (parked !== null && !this.altScreenActive && !hasDiff) {
@@ -107639,6 +107645,10 @@ var init_ink = __esm({
                 });
               }
             }
+            if (this.declaredCursorShown) {
+              optimized.push({ type: "stdout", content: "\x1B[?25l" });
+              this.declaredCursorShown = false;
+            }
             this.displayCursor = null;
           }
         }
@@ -359913,6 +359923,15 @@ function genericResultText(r, opts) {
         return typeof bb?.text === "string" ? bb.text : bb?.type === "image" ? "[image]" : "";
       }).filter(Boolean).join("\n");
   }
+  if (s.trimStart().startsWith("[")) {
+    try {
+      const arr = JSON.parse(s);
+      if (Array.isArray(arr) && arr.length > 0 && arr.every((b3) => b3 && typeof b3 === "object" && (b3.type === "text" || b3.type === "image"))) {
+        s = arr.map((bb) => typeof bb.text === "string" ? bb.text : bb.type === "image" ? "[image]" : "").filter(Boolean).join("\n");
+      }
+    } catch {
+    }
+  }
   s = s.trimEnd();
   if (!s) return "";
   if (opts?.full) return s;
@@ -359967,7 +359986,7 @@ function UserToolSuccessMessage({
     if (report) {
       renderedMessage = /* @__PURE__ */ (0, import_jsx_runtime118.jsx)(SubagentReportSummary, { report, isTranscriptMode });
     } else {
-      const fallbackText = genericResultText(message.toolUseResult);
+      const fallbackText = genericResultText(message.toolUseResult, { full: Boolean(isTranscriptMode) || verbose });
       if (fallbackText) renderedMessage = /* @__PURE__ */ (0, import_jsx_runtime118.jsx)(MessageResponse, { children: /* @__PURE__ */ (0, import_jsx_runtime118.jsx)(ThemedText, { children: fallbackText }) });
     }
   }
@@ -406129,7 +406148,10 @@ var init_lifetimeMarkers = __esm({
 
 // build-src/src/tools/ScheduleCronTool/UI.tsx
 function renderCreateToolUseMessage(input) {
-  return `${input.cron ?? ""}${input.prompt ? `: ${truncate(input.prompt, 60, true)}` : ""}`;
+  const s = input.schedule;
+  const sched = input.cron ?? (s?.kind === "cron" && typeof s.expr === "string" ? s.expr : s?.kind === "delay" && typeof s.delaySec === "number" ? `in ${s.delaySec}s` : s?.kind === "at" ? `at ${typeof s.at === "string" ? s.at : "\u2026"}` : void 0);
+  const label = input.label ? ` [${input.label}]` : "";
+  return `${sched ?? ""}${label}${input.prompt ? `: ${truncate(input.prompt, 60, true)}` : ""}`;
 }
 function renderCreateResultMessage(output) {
   return /* @__PURE__ */ (0, import_jsx_runtime154.jsx)(MessageResponse, { children: /* @__PURE__ */ (0, import_jsx_runtime154.jsxs)(ThemedText, { children: [
@@ -406203,10 +406225,17 @@ var init_CronCreateTool = __esm({
     init_UI24();
     MAX_JOBS = 50;
     inputSchema35 = lazySchema(
-      () => external_exports.strictObject({
-        cron: external_exports.string().describe(
+      () => external_exports.object({
+        cron: external_exports.string().optional().describe(
           'Standard 5-field cron expression in local time: "M H DoM Mon DoW" (e.g. "*/5 * * * *" = every 5 minutes, "30 14 28 2 *" = Feb 28 at 2:30pm local once).'
         ),
+        schedule: external_exports.object({
+          kind: external_exports.string().optional(),
+          expr: external_exports.string().optional(),
+          delaySec: external_exports.number().optional(),
+          at: external_exports.string().optional()
+        }).optional().describe("Engine schedule form (kinds cron/at/delay) \u2014 accepted by the live engine tool face."),
+        label: external_exports.string().optional(),
         prompt: external_exports.string().describe("The prompt to enqueue at each fire time."),
         recurring: semanticBoolean(external_exports.boolean().optional()).describe(
           `true (default) = fire on every cron match until deleted or auto-expired after ${DEFAULT_MAX_AGE_DAYS} days. false = fire once at the next match, then auto-delete. Use false for "remind me at X" one-shot requests with pinned minute/hour/dom/month.`
@@ -406251,6 +406280,13 @@ var init_CronCreateTool = __esm({
         return getCronFilePath();
       },
       async validateInput(input) {
+        if (typeof input.cron !== "string" || input.cron.length === 0) {
+          return {
+            result: false,
+            message: "This local CronCreate accepts the 5-field `cron` string form. The `schedule` object form is handled by the live engine tool \u2014 pass `cron` here.",
+            errorCode: 5
+          };
+        }
         if (!parseCronExpression(input.cron)) {
           return {
             result: false,
@@ -426077,7 +426113,7 @@ var init_BashTool = __esm({
     init_toolName();
     init_UI();
     init_utils6();
-    import_jsx_runtime163 = __toESM(require_jsx_runtime());
+    import_jsx_runtime163 = __toESM(require_jsx_runtime(), 1);
     EOL5 = "\n";
     PROGRESS_THRESHOLD_MS3 = 2e3;
     ASSISTANT_BLOCKING_BUDGET_MS2 = 15e3;
@@ -479492,8 +479528,8 @@ var init_sema_brand = __esm({
           "Slash-command gating wired to the fleet capability handshake"
         ]
       },
-      productVersion: "1.0.12",
-      announcement: "sema 1.0.12 \u2014 background-process and wakeup lifetimes are now honest (tool descriptions say what survives the session; headless wakeup scheduling is refused where it can never fire), finalize no longer triggers early on long-thinking first turns, and scheduler upsert keys stop colliding across sessions"
+      productVersion: "1.0.14",
+      announcement: "sema 1.0.14 \u2014 CJK input method candidate windows now anchor to the input caret (the terminal cursor is shown while typing), and autonomous-loop wakeups resolve to real tick instructions instead of a literal sentinel"
     };
   }
 });
@@ -482427,8 +482463,8 @@ var require_sema_brand = __commonJS({
           "Slash-command gating wired to the fleet capability handshake"
         ]
       },
-      productVersion: "1.0.12",
-      announcement: "sema 1.0.12 \u2014 background-process and wakeup lifetimes are now honest (tool descriptions say what survives the session; headless wakeup scheduling is refused where it can never fire), finalize no longer triggers early on long-thinking first turns, and scheduler upsert keys stop colliding across sessions"
+      productVersion: "1.0.14",
+      announcement: "sema 1.0.14 \u2014 CJK input method candidate windows now anchor to the input caret (the terminal cursor is shown while typing), and autonomous-loop wakeups resolve to real tick instructions instead of a literal sentinel"
     };
   }
 });
@@ -496964,6 +497000,7 @@ var init_types19 = __esm({
       maxTokens: external_exports3.number().int().positive().optional(),
       autoCompactTokens: external_exports3.number().int().positive().optional(),
       charsPerToken: external_exports3.number().finite().positive().optional(),
+      promptGuidance: external_exports3.array(external_exports3.string()).optional(),
       cost: ModelCost.optional(),
       extraBody: external_exports3.unknown().optional().transform((v2, ctx) => {
         if (v2 === void 0)
@@ -556835,6 +556872,98 @@ var init_fs_write_gate_policy = __esm({
   }
 });
 
+// node_modules/@sema-agent/core/dist/tools/loop-tick.js
+function pushNotificationAppendix(persistentVariant) {
+  const r = persistentVariant ? "newly blocked on a decision you won't make alone, you're ending the loop" : "newly blocked on a decision you won't make alone, third straight tick with nothing to do, you're ending the loop";
+  return `
+
+Use PushNotification when the loop can't move further without the user, or when something landed that they'd want to act on now: ${r}, or a major update arrived (CI went red, a review changes the plan). Progress you made yourself isn't a trigger \u2014 the transcript covers that. One ping per state, not per tick.`;
+}
+function cronTick(push) {
+  return `# Autonomous loop tick
+
+Run the autonomous check using the loop instructions established earlier in this conversation. If you cannot find them, treat this as a no-op tick. The recurring cron will fire the next tick automatically \u2014 do not call ${SCHEDULE_WAKEUP_TOOL_NAME} from this tick.${push}`;
+}
+function dynamicTick(push) {
+  return `# Autonomous loop tick (dynamic pacing)
+
+Run the autonomous check using the loop instructions established earlier in this conversation. If you cannot find them, treat this as a no-op tick.
+
+You scheduled this tick via the ${SCHEDULE_WAKEUP_TOOL_NAME} tool (not a recurring cron). To keep the loop alive, call ${SCHEDULE_WAKEUP_TOOL_NAME} again at the end of this turn with \`prompt\` set to the literal sentinel \`${AUTONOMOUS_LOOP_DYNAMIC_SENTINEL}\` \u2014 otherwise the loop ends after this tick.${DYNAMIC_APPENDIX}${push}`;
+}
+function resolveAutonomousLoopPrompt(prompt, opts) {
+  if (prompt !== AUTONOMOUS_LOOP_SENTINEL && prompt !== AUTONOMOUS_LOOP_DYNAMIC_SENTINEL)
+    return null;
+  const persistent = opts?.persistentVariant === true;
+  const push = opts?.pushNotification === true ? pushNotificationAppendix(persistent) : "";
+  const tick = prompt === AUTONOMOUS_LOOP_DYNAMIC_SENTINEL ? dynamicTick(push) : cronTick(push);
+  if (opts?.firstTick !== true)
+    return tick;
+  const preamble = persistent ? AUTONOMOUS_LOOP_PREAMBLE_PERSISTENT : AUTONOMOUS_LOOP_PREAMBLE;
+  return `${preamble}
+
+---
+
+${tick}`;
+}
+var AUTONOMOUS_LOOP_PREAMBLE, AUTONOMOUS_LOOP_PREAMBLE_PERSISTENT, DYNAMIC_APPENDIX;
+var init_loop_tick = __esm({
+  "node_modules/@sema-agent/core/dist/tools/loop-tick.js"() {
+    init_scheduler_tools();
+    AUTONOMOUS_LOOP_PREAMBLE = `# Autonomous loop check
+
+You're being invoked on a timer while the user is away or occupied. The point is to keep work moving forward without the user driving every step \u2014 finishing things they started, maintaining PRs they're building, catching problems before they come back to find them. You're a steward, not an initiator. The user set you loose on their work, and the value you provide comes from reliably advancing things they've already set in motion, not from finding new things to do.
+
+The key tension to navigate: the user trusts you enough to run autonomously, but that trust is easily lost. Acting on what the conversation already established is safe and valuable. Inventing new work or making irreversible changes without clear authorization erodes trust fast. When you're unsure whether something falls into "continuing established work" or "inventing new work," lean toward the former only when the transcript provides clear evidence the user wanted it done. If you find yourself reaching for justifications about why a push is probably fine, that's a signal to wait.
+
+## What to act on
+
+The current conversation is your highest-signal source \u2014 re-read the transcript above, since everything there is something the user was actively engaged with. The strongest signal is an in-progress PR you've been building together: review comments to address and resolve, failing CI checks to diagnose (and re-enqueue if they're flakes), merge conflicts to fix. The goal is to get the PR into a state where it's ready to merge pending only human review \u2014 the user shouldn't come back to find a PR blocked on things you could have handled. After that, look for unfinished implementation where the last exchange left something half-done, and explicit "I'll also..." or "next I'll..." commitments the conversation made and didn't honor. Weaker but still real: dangling questions you could now answer, verification steps that were skipped, edge cases that were mentioned but not handled, and natural continuations that don't require new decisions.
+
+If you find anything in this category, act on it \u2014 actually do the work, don't describe what could be done. Run the tests, don't say "you could run the tests." The whole point of autonomous operation is that work gets done while the user is away.
+
+When the conversation transcript has nothing left, the current branch's pull/merge request on the user's SCM is the next-best place to look. This is maintenance work \u2014 valuable, but lower priority than continuing the user's active work. Find the PR/MR for the current branch via the SCM's CLI, then check three things: CI status, unresolved review threads, and whether the branch has fallen behind the base. For failing CI, pull the failing job's logs and diagnose before acting \u2014 flaky-shaped failures (timeout, runner died, transient network) can be re-enqueued; real failures need a reproduction and a minimal fix. For unresolved review threads, fetch the comment, address the feedback, push, and resolve the thread via, for example, the GitHub GraphQL \`resolveReviewThread\` mutation (or the equivalent for whichever SCM the project uses). Before pushing anything, check whether someone else has pushed to the branch while you were working \u2014 if so, rebase (don't merge) to keep history clean.
+
+When CI is green, threads are clear, and there's idle time, sweeping the branch for issues is a good use of that time \u2014 bug-hunt or simplification passes catch problems before reviewers do, saving everyone a round-trip.
+
+If everything is genuinely quiet \u2014 no conversation work, no PR maintenance \u2014 say so in one sentence and stop. No summary of what you checked, no list of what you might do later. The user will see your message in the transcript when they come back; three consecutive "nothing to do" results means you should scale back to a quick CI check and stop, not narrate.
+
+## Repeated invocations
+
+If you see earlier autonomous checks in this conversation, adjust your scope accordingly. If a previous check left a question the user hasn't answered, the cost of acting depends on reversibility: for reversible actions (local edits, running tests), make your best call and proceed; for irreversible ones (pushing, deleting, sending), keep waiting \u2014 the cost of acting wrongly on something irreversible is much higher than the cost of waiting one more cycle. If three or more consecutive checks have found nothing actionable, things are quiet \u2014 do one quick CI/threads check and stop in a single line. Repeated "nothing to do" messages clutter the transcript and waste the user's attention when they come back to review.
+
+Read and analyze freely \u2014 understanding the state of things has no blast radius. Make edits and run tests when you're confident they continue established work. Commit and push only when you're clearly continuing something the user authorized, or when the work pattern makes the intent obvious \u2014 like fixing CI on a PR you've been building together.
+`;
+    AUTONOMOUS_LOOP_PREAMBLE_PERSISTENT = `# Autonomous loop check
+
+You're being invoked on a timer while the user is away or occupied. The point is to keep work moving forward without the user driving every step \u2014 finishing things they started, maintaining PRs they're building, catching problems before they come back to find them, and following through on the *spirit* of the task they gave you, not just its literal scope. The user set you loose on their work, and the value you provide comes from reliably advancing things they've already set in motion.
+
+The key tension to navigate: the user trusts you enough to run autonomously, but that trust is easily lost. Acting on what the conversation already established is safe and valuable. For irreversible actions (push, delete, send), require clear authorization in the transcript or use a reversible alternative (a draft, a local commit, a queued message). For reversible actions (edits, tests, drafts, exploration), bias toward acting \u2014 the cost of an unneeded local edit is near zero, and the cost of a stalled loop is high. When you're unsure whether something falls into "continuing established work" or "inventing new work," lean toward continuing whenever the transcript gives you any reasonable thread to pull on.
+
+## What to act on
+
+The current conversation is your highest-signal source \u2014 re-read the transcript above, since everything there is something the user was actively engaged with. The strongest signal is an in-progress PR you've been building together: review comments to address and resolve, failing CI checks to diagnose (and re-enqueue if they're flakes), merge conflicts to fix. The goal is to get the PR into a state where it's ready to merge pending only human review \u2014 the user shouldn't come back to find a PR blocked on things you could have handled. After that, look for unfinished implementation where the last exchange left something half-done, and explicit "I'll also..." or "next I'll..." commitments the conversation made and didn't honor. Weaker but still real: dangling questions you could now answer, verification steps that were skipped, edge cases that were mentioned but not handled, and natural continuations that don't require new decisions.
+
+If you find anything in this category, act on it \u2014 actually do the work, don't describe what could be done. Run the tests, don't say "you could run the tests." The whole point of autonomous operation is that work gets done while the user is away.
+
+When the conversation transcript has nothing left, the current branch's pull/merge request on the user's SCM is the next-best place to look. This is maintenance work \u2014 valuable, but lower priority than continuing the user's active work. Find the PR/MR for the current branch via the SCM's CLI, then check three things: CI status, unresolved review threads, and whether the branch has fallen behind the base. For failing CI, pull the failing job's logs and diagnose before acting \u2014 flaky-shaped failures (timeout, runner died, transient network) can be re-enqueued; real failures need a reproduction and a minimal fix. For unresolved review threads, fetch the comment, address the feedback, push, and resolve the thread via, for example, the GitHub GraphQL \`resolveReviewThread\` mutation (or the equivalent for whichever SCM the project uses). Before pushing anything, check whether someone else has pushed to the branch while you were working \u2014 if so, rebase (don't merge) to keep history clean.
+
+When CI is green, threads are clear, and there's idle time, sweeping the branch for issues is a good use of that time \u2014 bug-hunt or simplification passes catch problems before reviewers do, saving everyone a round-trip.
+
+If everything is genuinely quiet \u2014 no conversation work, no PR maintenance \u2014 say so in one sentence and keep the loop alive. Before stopping, broaden once: re-read the original task framing, check whether earlier ticks deferred anything ("I'll wait for X"), and look at sibling PRs/branches the user owns. Persistence is the point of autonomous mode. Only stop if the original task is provably complete or the user said to stop. (Pacing \u2014 how long to wait before the next tick \u2014 is handled by the per-mode reminder appended to this preamble; don't try to manage delay from here.)
+
+## Repeated invocations
+
+If you see earlier autonomous checks in this conversation, adjust your scope accordingly. If a previous check left a question the user hasn't answered, the cost of acting depends on reversibility: for reversible actions (local edits, running tests), make your best call and proceed; for irreversible ones (pushing, deleting, sending), keep waiting \u2014 the cost of acting wrongly on something irreversible is much higher than the cost of waiting one more cycle. If three or more consecutive checks have found nothing actionable, broaden scope once before considering stopping \u2014 re-read the original task, check sibling work, look for verification or polish steps that were skipped. A loop that quits the moment work goes quiet is less useful than one that waits.
+
+Read and analyze freely \u2014 understanding the state of things has no blast radius. Make edits and run tests when you're confident they continue established work. Commit and push only when you're clearly continuing something the user authorized, or when the work pattern makes the intent obvious \u2014 like fixing CI on a PR you've been building together.
+`;
+    DYNAMIC_APPENDIX = `
+
+If a Monitor is armed (check TaskList), keep \`delaySeconds\` at 1200\u20131800s \u2014 the Monitor is the wake signal and this is only the fallback heartbeat. If you were woken by a \`<task-notification>\`, handle the event before deciding whether to re-arm. To stop the loop, call ${SCHEDULE_WAKEUP_TOOL_NAME} with \`stop: true\` and TaskStop the monitor (use TaskList to find its task ID if no longer in context).`;
+  }
+});
+
 // node_modules/@sema-agent/core/dist/core/permission-rules.js
 var init_permission_rules = __esm({
   "node_modules/@sema-agent/core/dist/core/permission-rules.js"() {
@@ -557204,6 +557333,7 @@ var init_dist9 = __esm({
     init_background_shell();
     init_scheduler();
     init_scheduler_tools();
+    init_loop_tick();
     init_tighten_task_spec();
     init_tool_policy();
     init_auto_mode();
@@ -640407,6 +640537,7 @@ async function ensurePrintModeEngine() {
 }
 async function ensureLocalEngineOneShot(label = "one-shot") {
   seedUserSettingsEnv();
+  process.env.SCHEDULER_SESSION_WAKEUP ??= "false";
   try {
     const { applyPersistedTlsTrust: applyPersistedTlsTrust2 } = await Promise.resolve().then(() => (init_tlsTrust(), tlsTrust_exports));
     await applyPersistedTlsTrust2();
@@ -653659,7 +653790,7 @@ Auth: unix socket -R \u2192 local proxy`, "info");
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("sema 1.0.12", "-v, --version", "Output the version number");
+  }).version("sema 1.0.14", "-v, --version", "Output the version number");
   program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)");
   program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux.");
   if (canUserConfigureAdvisor()) {
@@ -657423,19 +657554,29 @@ var init_schedulerDaemon = __esm({
       /** Run one tick: fire due intents, persist the rescheduled/reaped record set. Returns the count fired. */
       async tickOnce() {
         const nowMs = (this.opts.now ?? (() => Date.now()))();
-        let all4;
-        try {
-          all4 = this.store.load();
-        } catch (e) {
-          this.opts.onError?.(e);
-          return 0;
-        }
-        const owned = [];
-        const foreign = [];
-        for (const r of all4) (this.opts.owns?.(r) ?? true ? owned : foreign).push(r);
-        const { toFire, updated } = tickRecords(owned, nowMs);
+        let toFire = [];
+        const computeNext = (all4) => {
+          const owned = [];
+          const foreign = [];
+          for (const r of all4) (this.opts.owns?.(r) ?? true ? owned : foreign).push(r);
+          const t2 = tickRecords(owned, nowMs);
+          toFire = t2.toFire;
+          if (t2.toFire.length === 0 && t2.updated.length === owned.length && t2.updated.every((r, i) => r === owned[i])) return null;
+          return [...t2.updated, ...foreign];
+        };
         try {
-          this.store.save([...updated, ...foreign]);
+          if (this.store.mutate) {
+            const m2 = this.store.mutate(computeNext);
+            if (!m2.ok && m2.reason !== "aborted") {
+              this.opts.onError?.(new Error(`scheduler store mutate failed: ${m2.reason}`));
+              return 0;
+            }
+            if (!m2.ok) return 0;
+          } else {
+            const next = computeNext(this.store.load());
+            if (next === null) return 0;
+            this.store.save(next);
+          }
         } catch (e) {
           this.opts.onError?.(e);
           return 0;
@@ -657529,6 +657670,30 @@ function saveSchedulerStore(path27, records) {
   writeFileSync21(tmp, serializeSchedulerStore(records), { mode: 384 });
   renameSync10(tmp, path27);
 }
+function mutateSchedulerStore(path27, fn2, opts) {
+  const maxRetries = Math.max(0, opts?.retries ?? 5);
+  const rawOf = () => {
+    try {
+      return readFileSync51(path27, "utf-8");
+    } catch {
+      return null;
+    }
+  };
+  for (let attempt = 0; ; attempt++) {
+    const baseRaw = rawOf();
+    const records = baseRaw === null ? [] : parseSchedulerStore(baseRaw);
+    const next = fn2(records);
+    if (next === null)
+      return { ok: false, reason: "aborted" };
+    if (rawOf() !== baseRaw) {
+      if (attempt >= maxRetries)
+        return { ok: false, reason: "conflict_exhausted", retries: attempt };
+      continue;
+    }
+    saveSchedulerStore(path27, next);
+    return { ok: true, records: next, retries: attempt };
+  }
+}
 var init_scheduler_store_node = __esm({
   "node_modules/@sema-agent/registry-core/dist/scheduler-store-node.js"() {
     init_scheduler_store();
@@ -657556,8 +657721,18 @@ function effectiveFirePrompt(fire) {
     substituted: true
   };
 }
+function makeSentinelResolver() {
+  const ticked = /* @__PURE__ */ new Set();
+  return (prompt, recordId) => {
+    const firstTick = !ticked.has(recordId);
+    const resolved = resolveAutonomousLoopPrompt(prompt, { firstTick });
+    if (resolved !== null) ticked.add(recordId);
+    return resolved ?? prompt;
+  };
+}
 var init_firePrompt = __esm({
   "build-src/src/sema/scheduler/firePrompt.ts"() {
+    init_dist9();
   }
 });
 
@@ -657570,7 +657745,9 @@ function schedulerStorePath() {
 function fileSchedulerStoreIO(storePath) {
   return {
     load: () => loadSchedulerStore(storePath),
-    save: (records) => saveSchedulerStore(storePath, records)
+    save: (records) => saveSchedulerStore(storePath, records),
+    // [1003] 唯一跨进程变更原语绑定:daemon tick/sessionReap/孤儿清扫的写路径全走它。
+    mutate: (fn2) => mutateSchedulerStore(storePath, fn2)
   };
 }
 var init_schedulerDaemonWire = __esm({
@@ -657599,6 +657776,15 @@ function partitionSessionReap(records, departedSessionIds) {
 }
 function reapSessionRecords(io, departedSessionIds) {
   if (departedSessionIds.length === 0) return [];
+  if (io.mutate) {
+    let ids = [];
+    const m2 = io.mutate((records) => {
+      const { kept: kept2, reaped: reaped2 } = partitionSessionReap(records, departedSessionIds);
+      ids = reaped2.map((r) => r.id);
+      return reaped2.length === 0 ? null : kept2;
+    });
+    return m2.ok || !m2.ok && m2.reason === "aborted" ? ids : [];
+  }
   const { kept, reaped } = partitionSessionReap(io.load(), departedSessionIds);
   if (reaped.length === 0) return [];
   io.save(kept);
@@ -657677,13 +657863,26 @@ function sweepOrphanSessionRecords(io, storePath, opts = {}) {
     cleanupDead: true
   });
   for (const id of opts.ownSessionIds ?? []) if (id) claimed.add(id);
-  const kept = [];
-  const reapedIds = [];
-  for (const r of records) {
-    const orphan = isSessionLifetimeRecord(r) && typeof r.sessionId === "string" && r.sessionId.length > 0 && !claimed.has(r.sessionId) && nowMs - r.createdMs > graceMs;
-    if (orphan) reapedIds.push(r.id);
-    else kept.push(r);
-  }
+  const partition3 = (all4) => {
+    const kept2 = [];
+    const reapedIds2 = [];
+    for (const r of all4) {
+      const orphan = isSessionLifetimeRecord(r) && typeof r.sessionId === "string" && r.sessionId.length > 0 && !claimed.has(r.sessionId) && nowMs - r.createdMs > graceMs;
+      if (orphan) reapedIds2.push(r.id);
+      else kept2.push(r);
+    }
+    return { kept: kept2, reapedIds: reapedIds2 };
+  };
+  if (io.mutate) {
+    let ids = [];
+    const m2 = io.mutate((all4) => {
+      const t2 = partition3(all4);
+      ids = t2.reapedIds;
+      return t2.reapedIds.length === 0 ? null : t2.kept;
+    });
+    return m2.ok || !m2.ok && m2.reason === "aborted" ? ids : [];
+  }
+  const { kept, reapedIds } = partition3(records);
   if (reapedIds.length > 0) io.save(kept);
   return reapedIds;
 }
@@ -657772,8 +657971,10 @@ function wireSchedulerSessionLifecycle(opts = {}) {
   };
 }
 function submitViaQueue(onWarn) {
+  const resolveSentinel = makeSentinelResolver();
   return async (fire) => {
-    const { prompt, substituted } = effectiveFirePrompt(fire);
+    const { prompt: rawPrompt, substituted } = effectiveFirePrompt(fire);
+    const prompt = resolveSentinel(rawPrompt, fire.recordId);
     if (substituted) {
       onWarn?.(`scheduler: record ${fire.recordId} fired with an EMPTY prompt \u2014 substituted a placeholder (never inject empty user content)`);
     }