@sema-agent/cli 1.0.122 → 1.0.123

package/sema-main.js

@@ -4331,9 +4331,143 @@ function isEnginePanelTaskResident(taskId) {
   return residentTaskIds.has(taskId);
 }
 function launchAnchorChanged(prev, next) {
-  return prev.kind !== "fleet-row" || next.kind !== "fleet-row" ? !1 : prev.startedAt !== void 0 && next.startedAt !== void 0 && prev.startedAt !== next.startedAt;
+  return prev.kind !== "fleet-row" || next.kind !== "fleet-row" ? !1 : prev.cycleSeq !== void 0 && next.cycleSeq !== void 0 && prev.cycleSeq !== next.cycleSeq ? !0 : prev.startedAt !== void 0 && next.startedAt !== void 0 && prev.startedAt !== next.startedAt;
+}
+function cycleSeqOf(v2) {
+  let n2 = v2?.cycleSeq;
+  return typeof n2 == "number" && Number.isInteger(n2) && n2 >= 1 ? n2 : void 0;
+}
+function startedAtOf(v2) {
+  let n2 = v2?.startedAt;
+  return typeof n2 == "number" && Number.isFinite(n2) && n2 > 0 ? n2 : void 0;
+}
+function isStaleEngineAgentPanelEnd(end, current6) {
+  let ec2 = cycleSeqOf(end), cc = cycleSeqOf(current6);
+  if (ec2 !== void 0 && cc !== void 0)
+    return ec2 < cc;
+  let es = startedAtOf(end), cs = startedAtOf(current6);
+  return es !== void 0 && cs !== void 0 ? es < cs : !1;
+}
+function remember(map2, key, alias2) {
+  if (map2.delete(key), map2.set(key, alias2), map2.size > MAX_IDENTITY_KEYS) {
+    let oldest = map2.keys().next().value;
+    oldest !== void 0 && map2.delete(oldest);
+  }
+}
+function resolveEnginePanelTaskId(wireTaskId, parentToolCallId) {
+  let byTranscript = fleetIdByTranscriptId.get(wireTaskId);
+  if (byTranscript !== void 0)
+    return remember(fleetIdByTranscriptId, wireTaskId, byTranscript), identityOf(byTranscript);
+  let byParent = parentToolCallId !== void 0 ? fleetIdByParentToolCallId.get(parentToolCallId) : void 0;
+  return byParent !== void 0 ? (remember(fleetIdByParentToolCallId, parentToolCallId, byParent), identityOf(byParent)) : { taskId: wireTaskId, origin: "wire" };
+}
+function identityOf(alias2) {
+  return {
+    taskId: alias2.fleetId,
+    origin: "fleet-row",
+    ...alias2.cycleSeq !== void 0 ? { cycleSeq: alias2.cycleSeq } : {},
+    ...alias2.startedAt !== void 0 ? { startedAt: alias2.startedAt } : {}
+  };
+}
+function rememberResolvedWire(wireTaskId, id) {
+  fleetIdByTranscriptId.has(wireTaskId) || remember(fleetIdByTranscriptId, wireTaskId, {
+    fleetId: id.taskId,
+    ...id.cycleSeq !== void 0 ? { cycleSeq: id.cycleSeq } : {},
+    ...id.startedAt !== void 0 ? { startedAt: id.startedAt } : {}
+  });
+}
+function ageHeld(except) {
+  for (let [wireId, held] of [...heldWireTicks])
+    wireId !== except && (held.beats += 1, held.beats >= MAX_HELD_WIRE_TICK_BEATS && (heldWireTicks.delete(wireId), deliverEngineAgentPanelEvent(asIsTick(held.ev))));
+}
+function migrateResidency(wireTaskId, fleetId) {
+  wireTaskId !== fleetId && residentTaskIds.has(wireTaskId) && (residentTaskIds.delete(wireTaskId), residentTaskIds.add(fleetId));
+}
+function normalizedTick(ev, fleetId) {
+  let { cardBound: _cardBound, ...rest } = ev;
+  return migrateResidency(ev.taskId, fleetId), { ...rest, taskId: fleetId, wireTaskId: ev.taskId, taskIdOrigin: "fleet-row" };
+}
+function asIsTick(ev) {
+  let { cardBound: _cardBound, ...rest } = ev;
+  return { ...rest, taskIdOrigin: "wire" };
+}
+function flushHeld(wireTaskId) {
+  let held = heldWireTicks.get(wireTaskId);
+  if (held === void 0)
+    return;
+  heldWireTicks.delete(wireTaskId);
+  let id = resolveEnginePanelTaskId(held.ev.taskId, held.ev.parentToolCallId);
+  id.origin === "fleet-row" && rememberResolvedWire(held.ev.taskId, id), deliverEngineAgentPanelEvent(id.origin === "fleet-row" ? normalizedTick(held.ev, id.taskId) : asIsTick(held.ev));
+}
+function clearEnginePanelTaskResidentByWire(wireTaskId) {
+  residentTaskIds.delete(wireTaskId);
+  let id = resolveEnginePanelTaskId(wireTaskId);
+  id.taskId !== wireTaskId && (isStaleEngineAgentPanelEnd(id, latestCycleByFleetId.get(id.taskId)) || residentTaskIds.delete(id.taskId));
+}
+function __resetEngineAgentPanelIdentityForTests() {
+  fleetIdByTranscriptId.clear(), fleetIdByParentToolCallId.clear(), heldWireTicks.clear(), latestCycleByFleetId.clear();
 }
 function publishEngineAgentPanelEvent(ev) {
+  switch ((ev.kind === "end" || ev.kind === "sweep") && ageHeld(ev.kind === "sweep" ? void 0 : ev.taskId), ev.kind) {
+    case "fleet-row": {
+      let alias2 = {
+        fleetId: ev.taskId,
+        ...ev.cycleSeq !== void 0 ? { cycleSeq: ev.cycleSeq } : {},
+        ...ev.startedAt !== void 0 ? { startedAt: ev.startedAt } : {}
+      };
+      if ((alias2.cycleSeq !== void 0 || alias2.startedAt !== void 0) && (latestCycleByFleetId.delete(ev.taskId), latestCycleByFleetId.set(ev.taskId, { ...alias2.cycleSeq !== void 0 ? { cycleSeq: alias2.cycleSeq } : {}, ...alias2.startedAt !== void 0 ? { startedAt: alias2.startedAt } : {} }), latestCycleByFleetId.size > MAX_IDENTITY_KEYS)) {
+        let oldest = latestCycleByFleetId.keys().next().value;
+        oldest !== void 0 && latestCycleByFleetId.delete(oldest);
+      }
+      ev.transcriptId !== void 0 && ev.transcriptId.length > 0 && remember(fleetIdByTranscriptId, ev.transcriptId, alias2), ev.parentToolCallId !== void 0 && ev.parentToolCallId.length > 0 && remember(fleetIdByParentToolCallId, ev.parentToolCallId, alias2), deliverEngineAgentPanelEvent(ev);
+      for (let [wireId, held] of [...heldWireTicks])
+        (wireId === ev.transcriptId || held.ev.parentToolCallId !== void 0 && held.ev.parentToolCallId === ev.parentToolCallId) && flushHeld(wireId);
+      ageHeld(void 0);
+      return;
+    }
+    case "tick": {
+      let id = resolveEnginePanelTaskId(ev.taskId, ev.parentToolCallId);
+      if (id.origin === "fleet-row") {
+        heldWireTicks.delete(ev.taskId), rememberResolvedWire(ev.taskId, id), deliverEngineAgentPanelEvent(normalizedTick(ev, id.taskId));
+        return;
+      }
+      if (ev.cardBound === !0) {
+        deliverEngineAgentPanelEvent(asIsTick(ev));
+        return;
+      }
+      if (heldWireTicks.has(ev.taskId)) {
+        heldWireTicks.delete(ev.taskId), deliverEngineAgentPanelEvent(asIsTick(ev));
+        return;
+      }
+      if (heldWireTicks.size >= MAX_HELD_WIRE_TICKS) {
+        let oldest = heldWireTicks.keys().next().value;
+        oldest !== void 0 && flushHeld(oldest);
+      }
+      heldWireTicks.set(ev.taskId, { ev, beats: 0 });
+      return;
+    }
+    case "end": {
+      let id = resolveEnginePanelTaskId(ev.taskId);
+      if (id.origin === "fleet-row" && id.taskId !== ev.taskId) {
+        flushHeld(ev.taskId), migrateResidency(ev.taskId, id.taskId), deliverEngineAgentPanelEvent({
+          ...ev,
+          taskId: id.taskId,
+          wireTaskId: ev.taskId,
+          taskIdOrigin: "fleet-row",
+          // end 自己不带周期身份(流内 close 臂恒不带)⇒ 借钥匙上的:复活后迟到的 end{旧 UUID} 由此带着旧代际,消费端按 isStaleEngineAgentPanelEnd 挡掉
+          ...ev.cycleSeq === void 0 && id.cycleSeq !== void 0 ? { cycleSeq: id.cycleSeq } : {},
+          ...ev.startedAt === void 0 && id.startedAt !== void 0 ? { startedAt: id.startedAt } : {}
+        });
+        return;
+      }
+      flushHeld(ev.taskId), deliverEngineAgentPanelEvent(ev);
+      return;
+    }
+    default:
+      deliverEngineAgentPanelEvent(ev);
+  }
+}
+function deliverEngineAgentPanelEvent(ev) {
   if (ev.kind !== "sweep" && absenceBuffer.delete(ev.taskId), listener) {
     try {
       listener(ev);
@@ -4421,13 +4555,14 @@ function subscribeEngineAgentPanelAbsence(fn2) {
 function __resetEngineAgentPanelAbsenceForTests() {
   absenceListener = null, absenceBuffer.clear();
 }
-var PANEL_TOOLUSES_LANE_POLICY, residentTaskIds, MAX_BUFFER, listener, buffer, MAX_ABSENCE_BUFFER, absenceListener, absenceBuffer, init_engineAgentPanelStore = __esm({
+var PANEL_TOOLUSES_LANE_POLICY, residentTaskIds, MAX_BUFFER, listener, buffer, MAX_IDENTITY_KEYS, MAX_HELD_WIRE_TICKS, MAX_HELD_WIRE_TICK_BEATS, fleetIdByTranscriptId, fleetIdByParentToolCallId, heldWireTicks, latestCycleByFleetId, MAX_ABSENCE_BUFFER, absenceListener, absenceBuffer, init_engineAgentPanelStore = __esm({
   "node_modules/@sema-agent/client-core/dist/engineAgentPanelStore.js"() {
     PANEL_TOOLUSES_LANE_POLICY = {
       tick: "required-engine-always-emits",
       "fleet-row": "optional-tolerate-absent"
     }, residentTaskIds = /* @__PURE__ */ new Set();
     MAX_BUFFER = 200, listener = null, buffer = [];
+    MAX_IDENTITY_KEYS = 2048, MAX_HELD_WIRE_TICKS = 64, MAX_HELD_WIRE_TICK_BEATS = 16, fleetIdByTranscriptId = /* @__PURE__ */ new Map(), fleetIdByParentToolCallId = /* @__PURE__ */ new Map(), heldWireTicks = /* @__PURE__ */ new Map(), latestCycleByFleetId = /* @__PURE__ */ new Map();
     MAX_ABSENCE_BUFFER = 200, absenceListener = null, absenceBuffer = /* @__PURE__ */ new Map();
   }
 });
@@ -4974,7 +5109,10 @@ function enqueueBgChildNotification(n2) {
         //    而 core [6908] 的 `blocked` 是 **agent 自报的终态**(不是等人)⇒ 一条自报走不下去的
         //    后台 run 在面板上被 settle 成**成功**。🔴 `suspended`/`needs_review` 仍不在表里
         //    (那两词是「等一次人的决定」,判成终局会把一条正等着你的 run 在面板上判死)。
-        isError: isTerminalNotSuccess(n2.status)
+        isError: isTerminalNotSuccess(n2.status),
+        // 0.74.0:周期身份 —— **wire 真给了 seq 才带**。上面的 `cycle` 是去重键用的归一值(缺席归一成首周期),
+        // 那是键不是事实;把它上屏等于对一条没报代际的通知声称「这是第一代」。
+        ...typeof n2.seq == "number" && Number.isInteger(n2.seq) && n2.seq >= BG_FIRST_SEQ ? { cycleSeq: n2.seq } : {}
       });
     } catch {
     }
@@ -7115,7 +7253,7 @@ var init_toolCards = __esm({
 
 // node_modules/@sema-agent/client-core/dist/adapt/panelTasks.js
 function createPanelTaskLedger(ctx, cards, inst) {
-  let taskCardBinding = /* @__PURE__ */ new Map(), boundToolCalls = /* @__PURE__ */ new Set(), livePanelTasks = /* @__PURE__ */ new Set(), endedPanelTasks = /* @__PURE__ */ new Set(), liveBoundPanelTasks = /* @__PURE__ */ new Set(), subagentTypeById = /* @__PURE__ */ new Map(), laneOf = (taskId) => {
+  let taskCardBinding = /* @__PURE__ */ new Map(), boundToolCalls = /* @__PURE__ */ new Set(), livePanelTasks = /* @__PURE__ */ new Set(), endedPanelTasks = /* @__PURE__ */ new Set(), liveBoundPanelTasks = /* @__PURE__ */ new Set(), clearResidencyBothKeys = (taskId) => clearEnginePanelTaskResidentByWire(taskId), subagentTypeById = /* @__PURE__ */ new Map(), laneOf = (taskId) => {
     let card = taskCardBinding.get(taskId);
     return card !== void 0 ? { lane: "subagent", parentToolCallId: card } : MAIN;
   };
@@ -7160,8 +7298,8 @@ function createPanelTaskLedger(ctx, cards, inst) {
     },
     // #6 session 常驻台账:live-bound(卡本 turn 开着)= 本 turn 生命周期,turn 末可 sweep;
     // inert/unbound(跨 turn bg 子代形)= 常驻,两处 sweep 都放行,终态只认通知帧。
-    noteResidency: (taskId) => {
-      liveBoundPanelTasks.has(taskId) ? clearEnginePanelTaskResident(taskId) : markEnginePanelTaskResident(taskId);
+    noteResidency: (taskId, residentKey = taskId) => {
+      liveBoundPanelTasks.has(taskId) ? clearEnginePanelTaskResident(residentKey) : markEnginePanelTaskResident(residentKey);
     },
     /** SubagentStart(cli fireSubagentStartHook 的臂化):类型恒记,fire 一生一次。 */
     *start(taskId, agentType) {
@@ -7208,7 +7346,7 @@ function createPanelTaskLedger(ctx, cards, inst) {
      *    (清一次幂等,真终态权威性不变)。
      */
     *settleFromNotification(taskId, isError) {
-      clearEnginePanelTaskResident(taskId), !endedPanelTasks.has(taskId) && (endedPanelTasks.add(taskId), yield chrome({
+      clearResidencyBothKeys(taskId), !endedPanelTasks.has(taskId) && (endedPanelTasks.add(taskId), yield chrome({
         kind: "panel_task",
         laneProof: MAIN,
         event: { kind: "end", taskId, isError }
@@ -7233,7 +7371,7 @@ function createPanelTaskLedger(ctx, cards, inst) {
     *settleFromTerminalTick(taskId, isError) {
       if (endedPanelTasks.has(taskId))
         return;
-      endedPanelTasks.add(taskId), clearEnginePanelTaskResident(taskId);
+      endedPanelTasks.add(taskId), clearResidencyBothKeys(taskId);
       let lane = laneOf(taskId), card = taskCardBinding.get(taskId);
       if (card !== void 0 && (yield chrome({
         kind: "inline_task_stats",
@@ -7616,7 +7754,7 @@ function safeCut(buf, at) {
   }
   return n2;
 }
-function remember(set2, key) {
+function remember2(set2, key) {
   if (!set2.has(key)) {
     if (set2.size >= MAX_REPLAY_KEYS) {
       let oldest = set2.values().next().value;
@@ -7626,7 +7764,7 @@ function remember(set2, key) {
   }
 }
 function rememberSegment(s, text2) {
-  remember(s.recordedSegments, text2);
+  remember2(s.recordedSegments, text2);
 }
 function scheduleNotify(taskId) {
   pendingNotify.add(taskId), !notifyTimer && (notifyTimer = setTimeout(() => {
@@ -7658,7 +7796,7 @@ function replaySeen(s, ev) {
   if (typeof id == "string" && id.length > 0) {
     if (s.seenAggregateIds.has(id))
       return !0;
-    remember(s.seenAggregateIds, id);
+    remember2(s.seenAggregateIds, id);
   }
   let body = ev.text;
   return !!(typeof body == "string" && s.recordedSegments.has(body));
@@ -7968,6 +8106,7 @@ var assistantArm, userArm, systemArm, diagnosticsArm, steeringInjectedArm, works
     init_toolResult();
     init_workflow();
     init_runTerminal();
+    init_engineAgentPanelStore();
     init_ids();
     init_wireShapes();
     assistantArm = function* (m2, { ctx, idOf, text: text2, cards, inst }) {
@@ -8377,7 +8516,8 @@ var assistantArm, userArm, systemArm, diagnosticsArm, steeringInjectedArm, works
         let agentType = typeof m2.name == "string" && m2.name.length > 0 ? m2.name : "subagent";
         yield* panel.start(taskId, agentType);
       }
-      panel.noteResidency(taskId), panel.markLive(taskId), yield chrome({
+      let identity3 = resolveEnginePanelTaskId(taskId, explicitParent);
+      panel.noteResidency(taskId, identity3.taskId), panel.markLive(taskId), yield chrome({
         kind: "panel_task",
         laneProof: panel.laneOf(taskId),
         event: {
@@ -8387,6 +8527,9 @@ var assistantArm, userArm, systemArm, diagnosticsArm, steeringInjectedArm, works
           ...description !== void 0 ? { description } : {},
           ...prompt !== void 0 ? { prompt } : {},
           ...currentAction !== void 0 ? { currentAction } : {},
+          // 0.74.3 CC-70:身份归一的两把钥匙 —— 退路键 + 发布方提示(绑卡 = 同步委派,漏斗不用等 fleet 行)。
+          ...explicitParent !== void 0 ? { parentToolCallId: explicitParent } : {},
+          ...panel.isLiveBound(taskId) ? { cardBound: !0 } : {},
           // 🔴 这里的 `: 0` 与 `fleetAgentPanelProjection` 那句「绝不在本层 `?? 0`」**不矛盾**,
           // 因为不是同一条 lane 的同一种供给形(两层的分层实情写在 `engineAgentPanelStore.ts`
           // 的 `PANEL_TOOLUSES_LANE_POLICY` 上,两条 lane 的可选性由编译钉锁住):
@@ -9026,7 +9169,7 @@ function wireNumberKey(key, v2) {
 }
 function projectWorkflows(rows3) {
   return rows3.map((r) => {
-    let startedCount = wireStartedCount(r);
+    let startedCount = wireStartedCount(r), errorCode = wireErrorCode(r);
     return {
       id: r.id,
       // 187 workflow label = `e.summary ?? e.description`(短 label);折成单行,空 → 187 占位符。
@@ -9038,10 +9181,15 @@ function projectWorkflows(rows3) {
       ...wireNumberKey("elapsedMs", wireDuration(r.elapsedMs)),
       ...wireNumberKey("tokens", wireCount(r.tokens)),
       ...wireNumberKey("failedCount", wireCount(r.failedCount)),
-      ...startedCount !== void 0 ? { startedCount } : {}
+      ...startedCount !== void 0 ? { startedCount } : {},
+      ...errorCode !== void 0 ? { errorCode } : {}
     };
   });
 }
+function wireErrorCode(r) {
+  let v2 = r.errorCode;
+  return typeof v2 == "string" && v2.length > 0 ? v2 : void 0;
+}
 var TERMINAL_FLEET_TASK_STATUSES, CONTROL_TOOL_VERBS, FLEET_TASK_VIEW_KEY_TUPLE, FLEET_TASK_VIEW_KEYS, FLEET_WORKFLOW_VIEW_KEY_TUPLE, FLEET_WORKFLOW_VIEW_KEYS, FLEET_TASK_ROW_WIRE_KEY_TUPLE, FLEET_TASK_ROW_WIRE_KEYS, FLEET_WORKFLOW_ROW_WIRE_KEY_TUPLE, FLEET_WORKFLOW_ROW_WIRE_KEYS, FLEET_TASK_ROW_KEYS_NOT_PROJECTED, FLEET_WORKFLOW_ROW_KEYS_NOT_PROJECTED, init_fleetProjection = __esm({
   "node_modules/@sema-agent/client-core/dist/fleet/fleetProjection.js"() {
     init_fleetTaskDesc();
@@ -9096,7 +9244,8 @@ var TERMINAL_FLEET_TASK_STATUSES, CONTROL_TOOL_VERBS, FLEET_TASK_VIEW_KEY_TUPLE,
       "elapsedMs",
       "tokens",
       "failedCount",
-      "startedCount"
+      "startedCount",
+      "errorCode"
     ], FLEET_WORKFLOW_VIEW_KEYS = FLEET_WORKFLOW_VIEW_KEY_TUPLE, FLEET_TASK_ROW_WIRE_KEY_TUPLE = [
       "id",
       "name",
@@ -9217,10 +9366,16 @@ function projectFleetAgentRowsFor(sessionKey, rows3, nowMs2 = Date.now()) {
     if (!taskId)
       continue;
     present2.add(taskId);
-    let status3 = row2.status ?? "running", tokens = typeof row2.tokens == "number" && Number.isInteger(row2.tokens) && row2.tokens >= 0 ? row2.tokens : void 0, toolUses = typeof row2.toolUses == "number" ? row2.toolUses : void 0, transcriptId = row2.transcriptId || void 0, startedAt = typeof row2.startedAt == "number" && row2.startedAt > 0 ? row2.startedAt : void 0, currentTool = currentToolKeyOf(row2.currentTool) !== void 0 ? row2.currentTool : void 0, currentToolKey = currentToolKeyOf(row2.currentTool), prev = seenMap.get(taskId), sameCycle = prev !== void 0 && !prev.settled && (startedAt === void 0 || prev.startedAt === void 0 || prev.startedAt === startedAt), knownTokens = tokens !== void 0 ? tokens : sameCycle ? prev?.tokens : void 0, knownStartedAt = startedAt !== void 0 ? startedAt : sameCycle ? prev?.startedAt : void 0;
+    let status3 = row2.status ?? "running", tokens = typeof row2.tokens == "number" && Number.isInteger(row2.tokens) && row2.tokens >= 0 ? row2.tokens : void 0, toolUses = typeof row2.toolUses == "number" ? row2.toolUses : void 0, transcriptId = row2.transcriptId || void 0, parentToolCallId = typeof row2.parentToolCallId == "string" && row2.parentToolCallId.length > 0 ? row2.parentToolCallId : void 0, startedAt = typeof row2.startedAt == "number" && row2.startedAt > 0 ? row2.startedAt : void 0, cycleSeq = typeof row2.cycleSeq == "number" && Number.isInteger(row2.cycleSeq) && row2.cycleSeq >= 1 ? row2.cycleSeq : void 0, currentTool = currentToolKeyOf(row2.currentTool) !== void 0 ? row2.currentTool : void 0, currentToolKey = currentToolKeyOf(row2.currentTool), prev = seenMap.get(taskId), rowIdentity = { ...cycleSeq !== void 0 ? { cycleSeq } : {}, ...startedAt !== void 0 ? { startedAt } : {} }, prevIdentity = prev !== void 0 ? { ...prev.cycleSeq !== void 0 ? { cycleSeq: prev.cycleSeq } : {}, ...prev.startedAt !== void 0 ? { startedAt: prev.startedAt } : {} } : void 0;
+    if (prev !== void 0 && isStaleEngineAgentPanelEnd(rowIdentity, prevIdentity))
+      continue;
+    let rowNewerCycle = prev !== void 0 && isStaleEngineAgentPanelEnd(prevIdentity, rowIdentity), sameCycle = prev !== void 0 && !prev.settled && (startedAt === void 0 || prev.startedAt === void 0 || prev.startedAt === startedAt) && // 0.74.0:代际号变了同样是新周期(两条都报了才比;任一条没报 = 这一帧没说)
+    (cycleSeq === void 0 || prev.cycleSeq === void 0 || prev.cycleSeq === cycleSeq), knownTokens = tokens !== void 0 ? tokens : sameCycle ? prev?.tokens : void 0, carryIdentity = prev !== void 0 && !rowNewerCycle, knownStartedAt = startedAt !== void 0 ? startedAt : carryIdentity ? prev.startedAt : void 0, knownCycleSeq = cycleSeq !== void 0 ? cycleSeq : carryIdentity ? prev.cycleSeq : void 0;
     if (TERMINAL_FLEET_TASK_STATUSES.has(status3)) {
-      prev?.settled || // 最终用量也算(终态帧常是唯一带全 usage 的一帧;消费端不更新非 running 行 ⇒ 必须赶在 end 之前发)
-      ((tokens !== void 0 && prev?.tokens !== tokens || toolUses !== void 0 && prev?.toolUses !== toolUses || transcriptId !== void 0 && prev?.transcriptId !== transcriptId || startedAt !== void 0 && prev?.startedAt !== startedAt) && publishEngineAgentPanelEvent({
+      prev?.settled === !0 && !rowNewerCycle || // 0.74.0:周期身份本身推进(或首帧就带身份)也是变化 —— 消费端要先记下身份才能对 end 判陈旧。
+      ((rowNewerCycle || cycleSeq !== void 0 && prev?.cycleSeq !== cycleSeq || // 含首帧(prev 缺席)就带身份的终态
+      // 最终用量也算(终态帧常是唯一带全 usage 的一帧;消费端不更新非 running 行 ⇒ 必须赶在 end 之前发)
+      tokens !== void 0 && prev?.tokens !== tokens || toolUses !== void 0 && prev?.toolUses !== toolUses || transcriptId !== void 0 && prev?.transcriptId !== transcriptId || parentToolCallId !== void 0 && prev?.parentToolCallId !== parentToolCallId || startedAt !== void 0 && prev?.startedAt !== startedAt) && publishEngineAgentPanelEvent({
         kind: "fleet-row",
         taskId,
         ...row2.name ? { name: row2.name } : {},
@@ -9228,20 +9383,27 @@ function projectFleetAgentRowsFor(sessionKey, rows3, nowMs2 = Date.now()) {
         ...knownTokens !== void 0 ? { totalTokens: knownTokens } : {},
         ...toolUses !== void 0 ? { toolUses } : {},
         ...transcriptId !== void 0 ? { transcriptId } : {},
-        ...knownStartedAt !== void 0 ? { startedAt: knownStartedAt } : {}
+        ...parentToolCallId !== void 0 ? { parentToolCallId } : {},
+        ...knownStartedAt !== void 0 ? { startedAt: knownStartedAt } : {},
+        ...knownCycleSeq !== void 0 ? { cycleSeq: knownCycleSeq } : {}
       }), publishEngineAgentPanelEvent({
         kind: "end",
         taskId,
         // L-215② 族扫(0.65.0):与 `notifications.enqueueBgChildNotification` 的 `isError` 位
         //    **同一个病形**(内联两词 ⇒ core [6908] 的 `blocked` 漏成「成功」)。两处一次改齐,
         //    读同一个单铸谓词;只修当格 = 下一次加词又漏一处。
-        isError: isTerminalNotSuccess(status3)
+        isError: isTerminalNotSuccess(status3),
+        // 0.74.0:这条终态属于哪个周期(在场才带)—— 消费端据此挡掉上一周期迟到的 end。
+        ...knownCycleSeq !== void 0 ? { cycleSeq: knownCycleSeq } : {},
+        ...knownStartedAt !== void 0 ? { startedAt: knownStartedAt } : {}
       })), seenMap.set(taskId, {
         status: status3,
         tokens: knownTokens,
         toolUses: toolUses !== void 0 ? toolUses : prev?.toolUses,
         transcriptId: transcriptId !== void 0 ? transcriptId : prev?.transcriptId,
+        parentToolCallId: parentToolCallId !== void 0 ? parentToolCallId : prev?.parentToolCallId,
         startedAt: knownStartedAt,
+        cycleSeq: knownCycleSeq,
         currentToolKey: currentToolKey !== void 0 ? currentToolKey : prev?.currentToolKey,
         lastSeenAt: nowMs2,
         settled: !0,
@@ -9252,7 +9414,7 @@ function projectFleetAgentRowsFor(sessionKey, rows3, nowMs2 = Date.now()) {
       continue;
     }
     (!prev || prev.settled || prev.absentReportedAtMs !== void 0 || // 行回来了:即使值未变也发一条,消费端据此撤掉 absent 标
-    prev.status !== status3 || prev.tokens !== knownTokens || toolUses !== void 0 && prev.toolUses !== toolUses || transcriptId !== void 0 && prev.transcriptId !== transcriptId || startedAt !== void 0 && prev.startedAt !== startedAt || currentToolKey !== void 0 && prev.currentToolKey !== currentToolKey) && publishEngineAgentPanelEvent({
+    prev.status !== status3 || prev.tokens !== knownTokens || toolUses !== void 0 && prev.toolUses !== toolUses || transcriptId !== void 0 && prev.transcriptId !== transcriptId || parentToolCallId !== void 0 && prev.parentToolCallId !== parentToolCallId || startedAt !== void 0 && prev.startedAt !== startedAt || cycleSeq !== void 0 && prev.cycleSeq !== cycleSeq || currentToolKey !== void 0 && prev.currentToolKey !== currentToolKey) && publishEngineAgentPanelEvent({
       kind: "fleet-row",
       taskId,
       ...row2.name ? { name: row2.name } : {},
@@ -9261,14 +9423,18 @@ function projectFleetAgentRowsFor(sessionKey, rows3, nowMs2 = Date.now()) {
       // 🔴 缺席即不落键(消费端据「键在不在」判三态)。
       ...toolUses !== void 0 ? { toolUses } : {},
       ...transcriptId !== void 0 ? { transcriptId } : {},
+      ...parentToolCallId !== void 0 ? { parentToolCallId } : {},
       ...knownStartedAt !== void 0 ? { startedAt: knownStartedAt } : {},
+      ...knownCycleSeq !== void 0 ? { cycleSeq: knownCycleSeq } : {},
       ...currentTool !== void 0 ? { currentTool } : {}
     }), seenMap.set(taskId, {
       status: status3,
       tokens: knownTokens,
       toolUses: toolUses !== void 0 ? toolUses : prev?.toolUses,
       transcriptId: transcriptId !== void 0 ? transcriptId : prev?.transcriptId,
+      parentToolCallId: parentToolCallId !== void 0 ? parentToolCallId : prev?.parentToolCallId,
       startedAt: knownStartedAt,
+      cycleSeq: knownCycleSeq,
       currentToolKey: currentToolKey !== void 0 ? currentToolKey : prev?.currentToolKey,
       lastSeenAt: nowMs2,
       settled: !1,
@@ -9601,6 +9767,29 @@ var installedByKey, init_engineWireTarget = __esm({
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/engineCapsGenerationGuard.js
+function snapshotCapsGeneration(opts) {
+  try {
+    return opts?.generation;
+  } catch {
+    return null;
+  }
+}
+function capsGenerationStillCurrent(baseUrl, gen) {
+  if (gen === void 0)
+    return !0;
+  try {
+    return gen === engineCapsGeneration(baseUrl);
+  } catch {
+    return !1;
+  }
+}
+var init_engineCapsGenerationGuard = __esm({
+  "node_modules/@sema-agent/client-core/dist/engineCapsGenerationGuard.js"() {
+    init_engineCapsCache();
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/sqlEngineCapability.js
 function projectSqlEngineCapability(caps) {
   if (caps === null || typeof caps != "object")
@@ -9614,21 +9803,28 @@ function projectSqlEngineCapability(caps) {
     return { kind: "not_reported" };
   if (typeof sql != "object")
     return;
-  let s = sql;
-  if (!(typeof s.engine != "string" || s.engine === "") && !(typeof s.isolation != "string" || s.isolation === "") && !(s.txnMode !== null && (typeof s.txnMode != "string" || s.txnMode === "")))
-    return { kind: "present", view: { engine: s.engine, isolation: s.isolation, txnMode: s.txnMode } };
+  let s = sql, engine = s.engine, isolation = s.isolation, txnMode = s.txnMode;
+  if (!(typeof engine != "string" || engine === "") && !(typeof isolation != "string" || isolation === "") && !(txnMode !== null && (typeof txnMode != "string" || txnMode === "")))
+    return { kind: "present", view: { engine, isolation, txnMode } };
 }
 function noteEngineCapsForSqlEngine(baseUrl, caps, opts) {
+  if (typeof baseUrl != "string" || baseUrl === "")
+    return;
+  let gen = snapshotCapsGeneration(opts);
+  if (gen === null || !capsGenerationStillCurrent(baseUrl, gen))
+    return;
+  let reading;
   try {
-    if (typeof baseUrl != "string" || baseUrl === "" || opts?.generation !== void 0 && opts.generation !== engineCapsGeneration(baseUrl))
-      return;
-    let reading = projectSqlEngineCapability(caps);
+    reading = projectSqlEngineCapability(caps);
+  } catch {
+    reading = void 0;
+  }
+  if (capsGenerationStillCurrent(baseUrl, gen)) {
     if (reading === void 0) {
       readingByBase.delete(baseUrl);
       return;
     }
     readingByBase.set(baseUrl, reading);
-  } catch {
   }
 }
 function observedSqlEngine(baseUrl = engineWireTarget()?.baseUrl) {
@@ -9640,7 +9836,7 @@ function cleanSqlDetailScalar(v2) {
 function sqlEngineDoctorDetail(reading) {
   switch (reading.kind) {
     case "unobserved":
-      return "not observed \u2014 the engine reports it on /v1/capabilities; this process has not received a capabilities response from the engine yet";
+      return "not observed \u2014 the engine reports it on /v1/capabilities; this process has no usable capabilities reading cached for it (none received, or the last one was unreadable)";
     case "not_reported":
       return "not reported by this engine \u2014 the capability position needs a newer engine";
     case "none":
@@ -9661,7 +9857,7 @@ var readingByBase, SQL_DETAIL_MAX, init_sqlEngineCapability = __esm({
   "node_modules/@sema-agent/client-core/dist/sqlEngineCapability.js"() {
     init_fleetTaskDesc();
     init_engineWireTarget();
-    init_engineCapsCache();
+    init_engineCapsGenerationGuard();
     readingByBase = /* @__PURE__ */ new Map();
     SQL_DETAIL_MAX = 40;
   }
@@ -9680,9 +9876,9 @@ function projectWriteProtectionCapability(caps) {
     return { kind: "not_reported" };
   if (typeof wp != "object" || Array.isArray(wp))
     return;
-  let w2 = wp;
-  if (typeof w2.armed == "boolean" && typeof w2.replaced == "boolean" && !(typeof w2.rows != "number" || !Number.isInteger(w2.rows) || w2.rows < 0))
-    return { kind: "present", view: { armed: w2.armed, rows: w2.rows, replaced: w2.replaced } };
+  let w2 = wp, armed3 = w2.armed, replaced = w2.replaced, rows3 = w2.rows;
+  if (typeof armed3 == "boolean" && typeof replaced == "boolean" && !(typeof rows3 != "number" || !Number.isInteger(rows3) || rows3 < 0))
+    return { kind: "present", view: { armed: armed3, rows: rows3, replaced } };
 }
 function projectWriteProtectionPosture(wiring) {
   if (wiring === null || typeof wiring != "object")
@@ -9708,16 +9904,23 @@ function projectWriteProtectionPosture(wiring) {
   };
 }
 function noteEngineCapsForWriteProtection(baseUrl, caps, opts) {
+  if (typeof baseUrl != "string" || baseUrl === "")
+    return;
+  let gen = snapshotCapsGeneration(opts);
+  if (gen === null || !capsGenerationStillCurrent(baseUrl, gen))
+    return;
+  let reading;
   try {
-    if (typeof baseUrl != "string" || baseUrl === "" || opts?.generation !== void 0 && opts.generation !== engineCapsGeneration(baseUrl))
-      return;
-    let reading = projectWriteProtectionCapability(caps);
+    reading = projectWriteProtectionCapability(caps);
+  } catch {
+    reading = void 0;
+  }
+  if (capsGenerationStillCurrent(baseUrl, gen)) {
     if (reading === void 0) {
       readingByBase2.delete(baseUrl);
       return;
     }
     readingByBase2.set(baseUrl, reading);
-  } catch {
   }
 }
 function observedWriteProtection(baseUrl = engineWireTarget()?.baseUrl) {
@@ -9726,7 +9929,7 @@ function observedWriteProtection(baseUrl = engineWireTarget()?.baseUrl) {
 function writeProtectionDoctorDetail(reading) {
   switch (reading.kind) {
     case "unobserved":
-      return "not observed \u2014 the engine reports it on /v1/capabilities; this process has not received a capabilities response from the engine yet";
+      return "not observed \u2014 the engine reports it on /v1/capabilities; this process has no usable capabilities reading cached for it (none received, or the last one was unreadable)";
     case "not_reported":
       return "not reported by this engine \u2014 the capability position needs a newer engine; this says nothing about whether a protected-name table is in effect (an absent seat is the engine shipping its own default table, not the absence of one)";
     case "none":
@@ -9754,7 +9957,7 @@ var readingByBase2, WP_DETAIL_MAX, init_writeProtectionCapability = __esm({
   "node_modules/@sema-agent/client-core/dist/writeProtectionCapability.js"() {
     init_fleetTaskDesc();
     init_engineWireTarget();
-    init_engineCapsCache();
+    init_engineCapsGenerationGuard();
     readingByBase2 = /* @__PURE__ */ new Map();
     WP_DETAIL_MAX = 40;
   }
@@ -9776,16 +9979,23 @@ function projectWebSearchBackendCapability(caps) {
     return backend === WEB_SEARCH_BACKEND_NONE ? { kind: "none" } : { kind: "present", view: { backend } };
 }
 function noteEngineCapsForWebSearchBackend(baseUrl, caps, opts) {
+  if (typeof baseUrl != "string" || baseUrl === "")
+    return;
+  let gen = snapshotCapsGeneration(opts);
+  if (gen === null || !capsGenerationStillCurrent(baseUrl, gen))
+    return;
+  let reading;
   try {
-    if (typeof baseUrl != "string" || baseUrl === "" || opts?.generation !== void 0 && opts.generation !== engineCapsGeneration(baseUrl))
-      return;
-    let reading = projectWebSearchBackendCapability(caps);
+    reading = projectWebSearchBackendCapability(caps);
+  } catch {
+    reading = void 0;
+  }
+  if (capsGenerationStillCurrent(baseUrl, gen)) {
     if (reading === void 0) {
       readingByBase3.delete(baseUrl);
       return;
     }
     readingByBase3.set(baseUrl, reading);
-  } catch {
   }
 }
 function observedWebSearchBackend(baseUrl = engineWireTarget()?.baseUrl) {
@@ -9794,7 +10004,7 @@ function observedWebSearchBackend(baseUrl = engineWireTarget()?.baseUrl) {
 function webSearchBackendDoctorDetail(reading) {
   switch (reading.kind) {
     case "unobserved":
-      return "deployment default backend not observed \u2014 the engine reports it on /v1/capabilities; this process has not received a capabilities response from the engine yet";
+      return "deployment default backend not observed \u2014 the engine reports it on /v1/capabilities; this process has no usable capabilities reading cached for it (none received, or the last one was unreadable)";
     case "not_reported":
       return "deployment default backend not reported by this engine \u2014 only newer engines advertise it; this does not say whether the deployment has a search backend";
     case "none":
@@ -9813,7 +10023,7 @@ var WEB_SEARCH_BACKEND_NONE, readingByBase3, WS_DETAIL_MAX, DEPLOY_ENV, init_web
   "node_modules/@sema-agent/client-core/dist/webSearchBackendCapability.js"() {
     init_fleetTaskDesc();
     init_engineWireTarget();
-    init_engineCapsCache();
+    init_engineCapsGenerationGuard();
     WEB_SEARCH_BACKEND_NONE = "none";
     readingByBase3 = /* @__PURE__ */ new Map();
     WS_DETAIL_MAX = 40, DEPLOY_ENV = "WEB_SEARCH_PROVIDER";
@@ -9836,16 +10046,23 @@ function projectExecutionLaneCapability(caps) {
     return { kind: "present", view: { provider, toolsOnThisHost } };
 }
 function noteEngineCapsForExecutionLane(baseUrl, caps, opts) {
+  if (typeof baseUrl != "string" || baseUrl === "")
+    return;
+  let gen = snapshotCapsGeneration(opts);
+  if (gen === null || !capsGenerationStillCurrent(baseUrl, gen))
+    return;
+  let reading;
   try {
-    if (typeof baseUrl != "string" || baseUrl === "" || opts?.generation !== void 0 && opts.generation !== engineCapsGeneration(baseUrl))
-      return;
-    let reading = projectExecutionLaneCapability(caps);
+    reading = projectExecutionLaneCapability(caps);
+  } catch {
+    reading = void 0;
+  }
+  if (capsGenerationStillCurrent(baseUrl, gen)) {
     if (reading === void 0) {
       readingByBase4.delete(baseUrl);
       return;
     }
     readingByBase4.set(baseUrl, reading);
-  } catch {
   }
 }
 function observedExecutionLane(baseUrl = engineWireTarget()?.baseUrl) {
@@ -9860,7 +10077,7 @@ function toolsRunHereFromExecutionLane(reading, legacyInference) {
 function executionLaneDoctorDetail(reading) {
   switch (reading.kind) {
     case "unobserved":
-      return "execution lane not observed \u2014 the engine reports it on /v1/capabilities; this process has not received a capabilities response from the engine yet";
+      return "execution lane not observed \u2014 the engine reports it on /v1/capabilities; this process has no usable capabilities reading cached for it (none received, or the last one was unreadable)";
     case "not_reported":
       return "execution lane not reported by this engine \u2014 only newer engines advertise it; this does not say where tools run, so the client keeps inferring it the way it did before";
     case "present": {
@@ -9879,7 +10096,7 @@ var readingByBase4, LANE_DETAIL_MAX, init_executionLaneCapability = __esm({
   "node_modules/@sema-agent/client-core/dist/executionLaneCapability.js"() {
     init_fleetTaskDesc();
     init_engineWireTarget();
-    init_engineCapsCache();
+    init_engineCapsGenerationGuard();
     readingByBase4 = /* @__PURE__ */ new Map();
     LANE_DETAIL_MAX = 40;
   }
@@ -9898,16 +10115,23 @@ function projectApprovalsStreamLiveCapability(caps) {
     return { kind: "present", live: v2 };
 }
 function noteEngineCapsForApprovalsStreamLive(baseUrl, caps, opts) {
+  if (typeof baseUrl != "string" || baseUrl === "")
+    return;
+  let gen = snapshotCapsGeneration(opts);
+  if (gen === null || !capsGenerationStillCurrent(baseUrl, gen))
+    return;
+  let reading;
   try {
-    if (typeof baseUrl != "string" || baseUrl === "" || opts?.generation !== void 0 && opts.generation !== engineCapsGeneration(baseUrl))
-      return;
-    let reading = projectApprovalsStreamLiveCapability(caps);
+    reading = projectApprovalsStreamLiveCapability(caps);
+  } catch {
+    reading = void 0;
+  }
+  if (capsGenerationStillCurrent(baseUrl, gen)) {
     if (reading === void 0) {
       readingByBase5.delete(baseUrl);
       return;
     }
     readingByBase5.set(baseUrl, reading);
-  } catch {
   }
 }
 function observedApprovalsStreamLive(baseUrl = engineWireTarget()?.baseUrl) {
@@ -9919,7 +10143,7 @@ function livePendingNeedsReconcile(reading) {
 function approvalsStreamLiveDoctorDetail(reading) {
   switch (reading.kind) {
     case "unobserved":
-      return "live approval push not observed \u2014 the engine reports it on /v1/capabilities; this process has not received a capabilities response yet, so suspended asks are pulled by the reconcile cadence";
+      return "live approval push not observed \u2014 the engine reports it on /v1/capabilities; this process has no usable capabilities reading cached for it (none received, or the last one was unreadable), so suspended asks are pulled by the reconcile cadence";
     case "not_reported":
       return "live approval push not reported by this engine \u2014 only newer engines advertise it; this does not say whether it pushes, so suspended asks are pulled by the reconcile cadence";
     case "present":
@@ -9935,11 +10159,86 @@ function __resetApprovalsStreamLiveReadingsForTests() {
 var readingByBase5, init_approvalsStreamLiveCapability = __esm({
   "node_modules/@sema-agent/client-core/dist/approvalsStreamLiveCapability.js"() {
     init_engineWireTarget();
-    init_engineCapsCache();
+    init_engineCapsGenerationGuard();
     readingByBase5 = /* @__PURE__ */ new Map();
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/deviceExecutorManagementCapability.js
+function projectDeviceExecutorManagementCapability(caps) {
+  if (caps === null || typeof caps != "object")
+    return;
+  let c3 = caps;
+  if (!Object.hasOwn(c3, "deviceExecutor"))
+    return { kind: "not_reported", why: "capability_absent" };
+  let d4 = c3.deviceExecutor;
+  if (d4 === void 0)
+    return { kind: "not_reported", why: "capability_absent" };
+  if (d4 === !1)
+    return { kind: "lane_absent" };
+  if (d4 === null || typeof d4 != "object" || Array.isArray(d4))
+    return;
+  let o = d4;
+  if (!Object.hasOwn(o, "management"))
+    return { kind: "not_reported", why: "management_absent" };
+  let mgmt = o.management;
+  if (mgmt === void 0)
+    return { kind: "not_reported", why: "management_absent" };
+  if (typeof mgmt == "boolean")
+    return { kind: "present", management: mgmt };
+}
+function noteEngineCapsForDeviceExecutorManagement(baseUrl, caps, opts) {
+  if (typeof baseUrl != "string" || baseUrl === "")
+    return;
+  let gen = snapshotCapsGeneration(opts);
+  if (gen === null || !capsGenerationStillCurrent(baseUrl, gen))
+    return;
+  let reading;
+  try {
+    reading = projectDeviceExecutorManagementCapability(caps);
+  } catch {
+    reading = void 0;
+  }
+  if (capsGenerationStillCurrent(baseUrl, gen)) {
+    if (reading === void 0) {
+      readingByBase6.delete(baseUrl);
+      return;
+    }
+    readingByBase6.set(baseUrl, reading);
+  }
+}
+function observedDeviceExecutorManagement(baseUrl = engineWireTarget()?.baseUrl) {
+  return typeof baseUrl != "string" || baseUrl === "" ? { kind: "unobserved" } : readingByBase6.get(baseUrl) ?? { kind: "unobserved" };
+}
+function deviceManagementVerbsAvailable(reading) {
+  return reading.kind === "present" ? reading.management ? "yes" : "no" : reading.kind === "lane_absent" ? "no" : "unknown";
+}
+function deviceExecutorManagementDoctorDetail(reading) {
+  switch (reading.kind) {
+    case "unobserved":
+      return "device management face not observed \u2014 the engine reports it on /v1/capabilities (deviceExecutor.management); this process has no usable capabilities reading cached for it (none received, or the last one was unreadable)";
+    case "not_reported":
+      return reading.why === "management_absent" ? "device management face not reported by this engine \u2014 the device lane is advertised but only newer engines say whether the /v1/devices management verbs exist; this does not say whether they exist, probe them directly" : "device executor capability not reported by this engine \u2014 only newer engines advertise the device lane at all; this does not say whether it exists";
+    case "lane_absent":
+      return "no device lane on this deployment \u2014 the /v1/devices management verbs are unavailable (capability.device_lane_required)";
+    case "present":
+      return reading.management ? "device management face on \u2014 the /v1/devices management verbs are available on this engine" : "device lane on but the /v1/devices management verbs are off on this deployment";
+  }
+}
+function forgetDeviceExecutorManagementReading(baseUrl) {
+  typeof baseUrl != "string" || baseUrl === "" || readingByBase6.delete(baseUrl);
+}
+function __resetDeviceExecutorManagementReadingsForTests() {
+  readingByBase6.clear();
+}
+var readingByBase6, init_deviceExecutorManagementCapability = __esm({
+  "node_modules/@sema-agent/client-core/dist/deviceExecutorManagementCapability.js"() {
+    init_engineWireTarget();
+    init_engineCapsGenerationGuard();
+    readingByBase6 = /* @__PURE__ */ new Map();
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/mcpReconnect.js
 function projectStatus(raw2) {
   if (!isRecord(raw2) || !nonEmpty(raw2.name) || !nonEmpty(raw2.status))
@@ -10128,6 +10427,78 @@ var LEADER_RUN_STATUSES, LEADER_REJ_HEAD_DISPLAY_MAX, DETAIL_FILES_MAX, DETAIL_P
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/runCancelContext.js
+function nonNegFinite(v2) {
+  return typeof v2 == "number" && Number.isFinite(v2) && v2 >= 0 ? v2 : void 0;
+}
+function readRunCancelContext(record3) {
+  if (record3 === null || typeof record3 != "object")
+    return;
+  let r = record3, holder = r.result !== null && typeof r.result == "object" ? r.result : r;
+  if (!Object.hasOwn(holder, "cancelContext") || holder.cancelContext === void 0)
+    return { kind: "not_reported" };
+  let c3 = holder.cancelContext;
+  if (c3 === null || typeof c3 != "object" || Array.isArray(c3))
+    return;
+  let o = c3, kind = typeof o.lastEventKind == "string" && o.lastEventKind.length > 0 ? o.lastEventKind : void 0, age = nonNegFinite(o.lastEventAgeMs), elapsed = nonNegFinite(o.elapsedMs), brain = o.lastBrainStatus !== null && typeof o.lastBrainStatus == "object" && !Array.isArray(o.lastBrainStatus) ? o.lastBrainStatus : void 0;
+  return {
+    kind: "present",
+    context: {
+      ...kind !== void 0 ? { lastEventKind: kind } : {},
+      ...age !== void 0 ? { lastEventAgeMs: age } : {},
+      ...elapsed !== void 0 ? { elapsedMs: elapsed } : {},
+      ...brain !== void 0 ? { lastBrainStatus: brain } : {}
+    }
+  };
+}
+function classifyRunAbortCause(record3) {
+  if (record3 === null || typeof record3 != "object")
+    return { kind: "unknown" };
+  let r = record3, status3 = typeof r.status == "string" && r.status.length > 0 ? r.status : void 0, holder = r.result !== null && typeof r.result == "object" ? r.result : record3, read = readRunTerminal(holder);
+  if (read !== null && read.kind === "failed") {
+    if (read.code === RUN_CANCELLED_CODE) {
+      let cc = readRunCancelContext(record3);
+      return { kind: "cancelled", ...cc?.kind === "present" ? { context: cc.context } : {} };
+    }
+    return { kind: "engine_error", ...read.code !== void 0 ? { code: read.code } : {}, ...read.message !== void 0 ? { message: read.message } : {} };
+  }
+  return read !== null && read.kind === "paused" ? { kind: "run_still_live", ...status3 !== void 0 ? { status: status3 } : {} } : (read === null || read.kind === "unknown") && status3 !== void 0 && LIVE_STATUSES.has(status3) ? { kind: "run_still_live", status: status3 } : { kind: "unknown", ...read !== null ? { terminal: read.kind } : {} };
+}
+var RUN_CANCELLED_CODE, LIVE_STATUSES, init_runCancelContext = __esm({
+  "node_modules/@sema-agent/client-core/dist/runCancelContext.js"() {
+    init_runTerminal();
+    RUN_CANCELLED_CODE = "cancelled", LIVE_STATUSES = /* @__PURE__ */ new Set(["running", "queued", "suspended", "needs_review"]);
+  }
+});
+
+// node_modules/@sema-agent/client-core/dist/argvFlagValue.js
+function lastFlagValue(argv, name, onMissingValue = "invalidate") {
+  let eq2 = `${name}=`, present2 = !1, raw2, valueMissing = !1;
+  for (let i = 0; i < argv.length; i++) {
+    let a = argv[i];
+    if (a !== void 0) {
+      if (a === "--")
+        break;
+      if (a === name) {
+        present2 = !0;
+        let nxt = argv[i + 1];
+        if (nxt === void 0 || nxt.startsWith("-")) {
+          if (onMissingValue === "latch-previous")
+            continue;
+          valueMissing = !0, raw2 = void 0;
+          continue;
+        }
+        valueMissing = !1, raw2 = nxt, i++;
+      } else a.startsWith(eq2) && (present2 = !0, valueMissing = !1, raw2 = a.slice(eq2.length));
+    }
+  }
+  return present2 ? valueMissing || raw2 === void 0 ? { present: !0 } : { present: !0, raw: raw2 } : { present: !1 };
+}
+var init_argvFlagValue = __esm({
+  "node_modules/@sema-agent/client-core/dist/argvFlagValue.js"() {
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/readFacePosture.js
 function projectReadFacePosture(wiring) {
   if (typeof wiring != "object" || wiring === null || Array.isArray(wiring) || !("readFace" in wiring))
@@ -15406,34 +15777,6 @@ var ensured, init_scratchpadWireCaps = __esm({
   }
 });
 
-// node_modules/@sema-agent/client-core/dist/argvFlagValue.js
-function lastFlagValue(argv, name, onMissingValue = "invalidate") {
-  let eq2 = `${name}=`, present2 = !1, raw2, valueMissing = !1;
-  for (let i = 0; i < argv.length; i++) {
-    let a = argv[i];
-    if (a !== void 0) {
-      if (a === "--")
-        break;
-      if (a === name) {
-        present2 = !0;
-        let nxt = argv[i + 1];
-        if (nxt === void 0 || nxt.startsWith("-")) {
-          if (onMissingValue === "latch-previous")
-            continue;
-          valueMissing = !0, raw2 = void 0;
-          continue;
-        }
-        valueMissing = !1, raw2 = nxt, i++;
-      } else a.startsWith(eq2) && (present2 = !0, valueMissing = !1, raw2 = a.slice(eq2.length));
-    }
-  }
-  return present2 ? valueMissing || raw2 === void 0 ? { present: !0 } : { present: !0, raw: raw2 } : { present: !1 };
-}
-var init_argvFlagValue = __esm({
-  "node_modules/@sema-agent/client-core/dist/argvFlagValue.js"() {
-  }
-});
-
 // node_modules/@sema-agent/client-core/dist/sandboxWire.js
 function parseSandboxArgv(argv) {
   let flag = lastFlagValue(argv, "--sandbox");
@@ -16255,7 +16598,20 @@ function isElapsedBase(v2) {
   return typeof v2 == "number" && Number.isFinite(v2) && v2 >= 0;
 }
 function createFleetLedger(hooks2 = {}, opts = {}) {
-  let sessionKey = opts.sessionKey ?? DEFAULT_SESSION_KEY, nowFn = opts.nowFn ?? Date.now, taskMap = /* @__PURE__ */ new Map(), wfMap = /* @__PURE__ */ new Map(), rowMeta = /* @__PURE__ */ new Map(), retained = /* @__PURE__ */ new Map(), droppedMalformed = 0, droppedUnknownFrame = 0, droppedForeignBgNotification = 0, droppedStaleIngress = 0, connected = !1, version4 = null, scoped = null, sessionScopedMeta, bgNotifyFailClosedMeta = !1, disposed4 = !1, epochSeq = 0, liveStreamEpoch = 0, liveSnapshotEpoch = 0, streamAnchor, everIssuedStream = !1, contentAnchor, contentAnchorSet = !1, ledgerWrites = 0, debug5 = (line) => {
+  let sessionKey = opts.sessionKey ?? DEFAULT_SESSION_KEY, nowFn = opts.nowFn ?? Date.now, taskMap = /* @__PURE__ */ new Map(), wfMap = /* @__PURE__ */ new Map(), rowMeta = /* @__PURE__ */ new Map(), retained = /* @__PURE__ */ new Map(), cycleWatermark = /* @__PURE__ */ new Map(), CYCLE_WATERMARK_MAX = 512;
+  function raiseCycleWatermark(tail, gen) {
+    if (gen === void 0 || tail.length === 0)
+      return;
+    let prior = cycleWatermark.get(tail);
+    if (!(prior !== void 0 && prior >= gen)) {
+      if (cycleWatermark.delete(tail), cycleWatermark.size >= CYCLE_WATERMARK_MAX) {
+        let oldest = cycleWatermark.keys().next().value;
+        oldest !== void 0 && cycleWatermark.delete(oldest);
+      }
+      cycleWatermark.set(tail, gen);
+    }
+  }
+  let droppedMalformed = 0, droppedUnknownFrame = 0, droppedForeignBgNotification = 0, droppedStaleIngress = 0, connected = !1, version4 = null, scoped = null, sessionScopedMeta, bgNotifyFailClosedMeta = !1, disposed4 = !1, epochSeq = 0, liveStreamEpoch = 0, liveSnapshotEpoch = 0, streamAnchor, everIssuedStream = !1, contentAnchor, contentAnchorSet = !1, ledgerWrites = 0, debug5 = (line) => {
     engineWireDebugEnabled() && hostLog("debug", line);
   }, toBgTask = (r, retired) => {
     let parentId = wireParentId(r);
@@ -16315,7 +16671,7 @@ function createFleetLedger(hooks2 = {}, opts = {}) {
           break;
         }
         let receivedAtMs = nowFn();
-        taskMap.set(row2.id, row2), rowMeta.set(row2.id, { receivedAtMs }), debug5(`[fleet-row] id=${row2.id} parent=${row2.parentId ?? "-"} agentType=${row2.agentType ?? "-"} agentName=${row2.agentName ?? "-"} name=${row2.name ?? "-"} status=${row2.status ?? "-"} tokens=${row2.tokens ?? "-"} parentToolCallId=${row2.parentToolCallId ?? "-"}`);
+        taskMap.set(row2.id, row2), raiseCycleWatermark(rowIdTail(row2.id), wireCycleSeq(row2)), rowMeta.set(row2.id, { receivedAtMs }), debug5(`[fleet-row] id=${row2.id} parent=${row2.parentId ?? "-"} agentType=${row2.agentType ?? "-"} agentName=${row2.agentName ?? "-"} name=${row2.name ?? "-"} status=${row2.status ?? "-"} tokens=${row2.tokens ?? "-"} parentToolCallId=${row2.parentToolCallId ?? "-"}`);
         let parentId = wireParentId(row2);
         if (parentId !== void 0) {
           let childTid = rowIdTail(row2.id), parentTid = rowIdTail(parentId), parentOwned = isOwnEngineRun(parentTid);
@@ -16335,9 +16691,27 @@ function createFleetLedger(hooks2 = {}, opts = {}) {
         }
         break;
       }
-      case "task_remove":
-        taskMap.delete(frame.id), rowMeta.delete(frame.id);
+      case "task_remove": {
+        let fr = frame, removedGen = typeof fr.cycleSeq == "number" && Number.isInteger(fr.cycleSeq) && fr.cycleSeq >= 1 ? fr.cycleSeq : void 0, held = taskMap.get(frame.id), heldGen = held !== void 0 ? wireCycleSeq(held) : void 0, stale = removedGen !== void 0 && heldGen !== void 0 && removedGen < heldGen;
+        if (stale || (taskMap.delete(frame.id), rowMeta.delete(frame.id)), hooks2.onTaskRemoved !== void 0) {
+          let reason = typeof fr.removeReason == "string" && fr.removeReason.length > 0 ? fr.removeReason : void 0;
+          try {
+            let out6 = hooks2.onTaskRemoved({
+              id: frame.id,
+              ...reason !== void 0 ? { removeReason: reason } : {},
+              ...removedGen !== void 0 ? { cycleSeq: removedGen } : {},
+              ...stale ? { stale: !0 } : {},
+              ...held === void 0 ? { unknownRow: !0 } : {}
+            });
+            out6 && typeof out6.then == "function" && Promise.resolve(out6).catch((e) => {
+              hostLog("debug", `[fleet-frame] onTaskRemoved hook rejected: ${String(e).slice(0, 160)}`);
+            });
+          } catch (e) {
+            hostLog("debug", `[fleet-frame] onTaskRemoved hook threw: ${String(e).slice(0, 160)}`);
+          }
+        }
         break;
+      }
       case "workflow":
         frame.row?.id ? wfMap.set(frame.row.id, frame.row) : (droppedMalformed++, debug5("[fleet-frame] MALFORMED workflow frame dropped(row \u6216 row.id \u7F3A\u5E2D)"));
         break;
@@ -16376,11 +16750,20 @@ function createFleetLedger(hooks2 = {}, opts = {}) {
       (id === n2.taskId || rowIdTail(id) === n2.taskId) && rowIds.push(id);
     if (TERMINAL_FLEET_TASK_STATUSES.has(n2.status)) {
       typeof n2.parentTaskId == "string" && n2.parentTaskId && recordBgParentRun(n2.taskId, n2.parentTaskId, ing?.session, ing?.sessionKey), typeof n2.transcriptId == "string" && n2.transcriptId.length > 0 && recordEngineTranscriptId(n2.taskId, n2.transcriptId);
-      let isWashGreen = (prior, next) => next === "completed" && (prior === "failed" || prior === "killed"), coerced = n2.status, nowMs2 = nowFn(), writtenIds = /* @__PURE__ */ new Set(), applied = !1, washBlocked = !1;
+      let isWashGreen = (prior, next) => next === "completed" && (prior === "failed" || prior === "killed"), coerced = n2.status, nowMs2 = nowFn(), writtenIds = /* @__PURE__ */ new Set(), applied = !1, washBlocked = !1, staleBlocked = !1, notifSeq = typeof n2.seq == "number" && Number.isInteger(n2.seq) && n2.seq >= 1 ? n2.seq : void 0;
+      {
+        let mark = cycleWatermark.get(n2.taskId);
+        notifSeq !== void 0 && mark !== void 0 && notifSeq < mark && (staleBlocked = !0, debug5(`[fleet-frame] bg_notification stale-cycle ignored(watermark=${mark} notif-seq=${notifSeq})`));
+      }
       for (let id of rowIds) {
         let known = taskMap.get(id);
         if (!known)
           continue;
+        let heldGen = wireCycleSeq(known);
+        if (notifSeq !== void 0 && heldGen !== void 0 && notifSeq < heldGen) {
+          staleBlocked = !0, debug5(`[fleet-frame] bg_notification stale-cycle ignored(row=${id} row-cycle=${heldGen} notif-seq=${notifSeq})`);
+          continue;
+        }
         let rowStatus = known.status ?? "";
         if (TERMINAL_FLEET_TASK_STATUSES.has(rowStatus)) {
           if (isWashGreen(rowStatus, n2.status)) {
@@ -16408,6 +16791,11 @@ function createFleetLedger(hooks2 = {}, opts = {}) {
       for (let [id, entry] of retained) {
         if (writtenIds.has(id) || id !== n2.taskId && rowIdTail(id) !== n2.taskId)
           continue;
+        let retainedGen = wireCycleSeq(entry.row);
+        if (notifSeq !== void 0 && retainedGen !== void 0 && notifSeq < retainedGen) {
+          staleBlocked = !0, debug5(`[fleet-frame] bg_notification stale-cycle ignored(retained=${id} row-cycle=${retainedGen} notif-seq=${notifSeq})`);
+          continue;
+        }
         let prior = entry.row.status ?? "";
         if (prior === n2.status) {
           applied = !0;
@@ -16424,11 +16812,21 @@ function createFleetLedger(hooks2 = {}, opts = {}) {
           ...entry.retiredByNotification === !0 ? { retiredByNotification: !0 } : {}
         }), applied = !0;
       }
-      applied || !washBlocked && (() => {
+      let factsAccepted = !staleBlocked && (applied || !washBlocked && (() => {
         let prior = getBgTerminalFacts(n2.taskId);
-        return !(prior !== void 0 && isWashGreen(prior.status, n2.status));
-      })() ? recordBgTerminalFacts(n2.taskId, {
+        if (prior === void 0)
+          return !0;
+        if (notifSeq !== void 0 && prior.cycleSeq !== void 0) {
+          if (notifSeq < prior.cycleSeq)
+            return !1;
+          if (notifSeq > prior.cycleSeq)
+            return !0;
+        }
+        return !isWashGreen(prior.status, n2.status);
+      })());
+      factsAccepted && raiseCycleWatermark(n2.taskId, notifSeq), factsAccepted ? recordBgTerminalFacts(n2.taskId, {
         status: n2.status,
+        ...notifSeq !== void 0 ? { cycleSeq: notifSeq } : {},
         ...typeof n2.summary == "string" ? { summary: n2.summary } : {},
         // 🔴 SDK 0.0.117 把 `recentSteps` 的三键 declare 成**必填** string,但那是**声称**不是保证:
         //    帧从 wire 上来,脏项(null / 缺键 / 非串)在类型面之外仍可能到达,而 BgTerminalFacts
@@ -17271,17 +17669,22 @@ function str4(v2) {
 function readDecideReceipt(result) {
   if (typeof result != "object" || result === null || Array.isArray(result))
     return;
-  let r = result, status3 = Object.hasOwn(r, "status") ? str4(r.status) : void 0, taskId = Object.hasOwn(r, "taskId") ? str4(r.taskId) : void 0, sessionId = Object.hasOwn(r, "sessionId") ? str4(r.sessionId) : void 0, idempotent = Object.hasOwn(r, "idempotent") && r.idempotent === !0 ? !0 : void 0, handoffTaskId = status3 === STATUS_RESUMING && taskId !== void 0 ? taskId : void 0, executionOutcome = Object.hasOwn(r, "executionOutcome") ? gateOutcomeOf({ gate: r.executionOutcome }) : void 0;
-  if (!(status3 === void 0 && taskId === void 0 && sessionId === void 0 && idempotent === void 0 && executionOutcome === void 0))
+  let r = result, status3 = Object.hasOwn(r, "status") ? str4(r.status) : void 0, taskId = Object.hasOwn(r, "taskId") ? str4(r.taskId) : void 0, sessionId = Object.hasOwn(r, "sessionId") ? str4(r.sessionId) : void 0, idempotent = Object.hasOwn(r, "idempotent") && r.idempotent === !0 ? !0 : void 0, handoffTaskId = status3 === STATUS_RESUMING && taskId !== void 0 ? taskId : void 0, executionOutcome = Object.hasOwn(r, "executionOutcome") ? gateOutcomeOf({ gate: r.executionOutcome }) : void 0, errorCode = Object.hasOwn(r, "errorCode") ? str4(r.errorCode) : void 0, retriable = Object.hasOwn(r, "retriable") && typeof r.retriable == "boolean" ? r.retriable : void 0;
+  if (!(status3 === void 0 && taskId === void 0 && sessionId === void 0 && idempotent === void 0 && executionOutcome === void 0 && errorCode === void 0 && retriable === void 0))
     return {
       ...status3 !== void 0 ? { status: status3 } : {},
       ...taskId !== void 0 ? { taskId } : {},
       ...sessionId !== void 0 ? { sessionId } : {},
       ...idempotent !== void 0 ? { idempotent } : {},
       ...handoffTaskId !== void 0 ? { handoffTaskId } : {},
-      ...executionOutcome !== void 0 ? { executionOutcome } : {}
+      ...executionOutcome !== void 0 ? { executionOutcome } : {},
+      ...errorCode !== void 0 ? { errorCode } : {},
+      ...retriable !== void 0 ? { retriable } : {}
     };
 }
+function decideReceiptReopen(receipt) {
+  return receipt === void 0 || receipt.status !== STATUS_FAILED ? null : resumeReopenFromError(receipt);
+}
 function decideAcceptedNotResolved(receipt) {
   return receipt?.status === STATUS_RESUMING;
 }
@@ -17297,11 +17700,13 @@ function decideRefusalFromError(e) {
     resendable: Object.hasOwn(DECIDE_RESENDABLE, code2) ? DECIDE_RESENDABLE[code2] === !0 : !1
   };
 }
-var STATUS_RESUMING, DECIDE_REFUSAL_SENTENCES, DECIDE_RESENDABLE, init_decideReceipt = __esm({
+var STATUS_RESUMING, STATUS_FAILED, DECIDE_REFUSAL_SENTENCES, DECIDE_RESENDABLE, init_decideReceipt = __esm({
   "node_modules/@sema-agent/client-core/dist/decideReceipt.js"() {
     init_gateOutcome();
+    init_resumeRefusalCopy();
     init_engineErrorCodes();
     STATUS_RESUMING = "resuming";
+    STATUS_FAILED = "failed";
     DECIDE_REFUSAL_SENTENCES = Object.freeze({
       [DECIDE_WORKFLOW_HOST_UNKNOWN]: "no session is attached to this run to receive the decision, so re-sending the same decision cannot help; the approval is still pending and can be decided again once the run is reachable",
       [DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED]: "this run cannot remember the decision for the session; re-send the same decision without the remember option \u2014 nothing was consumed by this refusal"
@@ -19711,6 +20116,22 @@ var PROVIDER_PRESETS, MODEL_FAMILIES, VARIANT_TAIL, presetIndexCache, init_provi
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/hitl/suspendedReopen.js
+function suspendedReopenOf(ev) {
+  if (ev === null || typeof ev != "object" || Array.isArray(ev))
+    return UNSTATED;
+  let o = ev;
+  if (!Object.hasOwn(o, "reopened"))
+    return UNSTATED;
+  let v2 = o.reopened;
+  return v2 === null ? NOT_REOPENED : typeof v2 == "string" && v2.length > 0 ? { kind: "reopened", code: v2 } : UNSTATED;
+}
+var UNSTATED, NOT_REOPENED, init_suspendedReopen = __esm({
+  "node_modules/@sema-agent/client-core/dist/hitl/suspendedReopen.js"() {
+    UNSTATED = Object.freeze({ kind: "unstated" }), NOT_REOPENED = Object.freeze({ kind: "not_reopened" });
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/hitl/hitlBridge.js
 function denyReasonForWire(reason, tag2) {
   if (typeof reason != "string")
@@ -19812,6 +20233,7 @@ var DEFAULT_DENY_REASON, MAX_DENY_REASON_CHARS, PLAN_REVIEW_MODE_AFTER_WORDS, Hi
     init_types();
     init_host();
     init_abortableSleep();
+    init_suspendedReopen();
     DEFAULT_DENY_REASON = "The user rejected this tool use", MAX_DENY_REASON_CHARS = 4096;
     PLAN_REVIEW_MODE_AFTER_WORDS = Object.freeze(["default", "acceptEdits"]);
     HitlSafetyError = class extends Error {
@@ -19852,7 +20274,7 @@ var DEFAULT_DENY_REASON, MAX_DENY_REASON_CHARS, PLAN_REVIEW_MODE_AFTER_WORDS, Hi
       observe(ev) {
         switch (ev.type) {
           case "suspended":
-            ev.gate ? this.active = { gate: ev.gate, seq: eventSeq(ev) } : this.active = { gate: { kind: "human" }, seq: eventSeq(ev) };
+            ev.gate ? this.active = { gate: ev.gate, seq: eventSeq(ev), reopened: suspendedReopenOf(ev) } : this.active = { gate: { kind: "human" }, seq: eventSeq(ev), reopened: suspendedReopenOf(ev) };
             break;
           case "done":
           case "failed":
@@ -19867,6 +20289,14 @@ var DEFAULT_DENY_REASON, MAX_DENY_REASON_CHARS, PLAN_REVIEW_MODE_AFTER_WORDS, Hi
       currentGate() {
         return this.active?.gate ?? null;
       }
+      /**
+       * 0.74.3 CC-73:当前挂起是不是一次 reopen(`suspended.reopened` 三态);没挂起 ⇒ `null`。
+       * 消费方据此把「真 reopen 成功、重试会重放」那半句说出来:`reopened` 在场码 ⇒ 卡仍 pending、决定没被消费、可再决;
+       * `not_reopened` / `unstated` ⇒ 普通挂起,一个字都不多说。
+       */
+      currentGateReopen() {
+        return this.active?.reopened ?? null;
+      }
       /**
        * Fetch the `PendingCheckpoint` this decide/answer is about to resolve, for the callers that do NOT
        * already have one in hand (see `decideTool`/`answerQuestion`'s `preResolvedPending` param — the wire
@@ -20420,6 +20850,8 @@ async function surfaceFsApprovalAndDecide(deps2, taskId, argsByCall, signal, par
   switch (card.kind) {
     case "failed":
       return { kind: "failed", stage: "card", gatedCallId, reason: card.reason };
+    case "retracted":
+      return hostLog("debug", `liveHitlAskWire: approval card retracted without a decision for ${gatedCallId ?? "(no call)"} \u2014 nothing sent`), { kind: "retracted", gatedCallId };
     case "aborted":
       return observeCancelByDeny(bridge3.decideTool({ decision: "deny", reason: "Interrupted by user" }, gatedCallId, void 0, pending4), taskId), { kind: "aborted", gatedCallId };
     case "allow":
@@ -20473,7 +20905,7 @@ function readReadRootCandidate(v2) {
     return;
   let o = v2;
   if (!(typeof o.dir != "string" || o.dir.length === 0 || o.clearsThisAsk !== !0))
-    return { dir: o.dir, clearsThisAsk: !0 };
+    return "covers" in o ? o.covers === "exact" ? { dir: o.dir, clearsThisAsk: !0, covers: "exact" } : void 0 : { dir: o.dir, clearsThisAsk: !0 };
 }
 function isToolApprovalDelegation(v2) {
   if (v2 === null || typeof v2 != "object")
@@ -20824,6 +21256,8 @@ async function surfaceToolApprovalFrameAndRespond(frame, respond, streamArgs, si
   });
   if (lane?.argsUnavailable === !0 && card.kind === "allow" && card.updatedInput !== void 0)
     return hostLog("error", `liveToolApprovalWire: ${frame.approvalId} card returned an edited approval on an args-unavailable ask \u2014 nothing sent (the ask stays pending)`), surfaceEditRefusedOnBlindAsk(), { decision: "unresolved", editRefused: !0 };
+  if (card.kind === RETRACTED_CARD_DECISION_KIND)
+    return hostLog("debug", `liveToolApprovalWire: ${frame.approvalId} card retracted without a decision${card.reason ? ` (${card.reason})` : ""} \u2014 nothing sent`), { decision: "unresolved", retracted: !0 };
   let decision = card.kind === "allow" ? card.allowSession ? "allow_session" : "allow" : "deny";
   card.kind === "failed" && hostLog("debug", `liveToolApprovalWire: approval card unavailable (${card.reason}) \u2014 fail-closed deny for ${frame.approvalId}`);
   let note;
@@ -20863,7 +21297,7 @@ async function surfaceToolApprovalFrameAndRespond(frame, respond, streamArgs, si
     return hostLog("debug", `liveToolApprovalWire: respond(${decision}) failed for ${frame.approvalId} (status=${respondRefusal?.status ?? "none"} errorCode=${logSafeErrorCode(respondRefusal?.errorCode)} messageLen=${respondRefusal?.message?.length ?? 0}) \u2014 engine self-settles (TTL/abort); the refusal text is handed back on outcome.respondRefusal for the host to surface`), respondRefusal !== void 0 ? { decision: "unresolved", respondRefusal } : { decision: "unresolved" };
   }
 }
-var cardPortByKey, cardPortMissesByKey, TOOL_APPROVAL_FRAME_KEYS_MIRROR, RESPOND_DECISIONS, USELESS_REFUSAL_TEXTS, MACHINE_CODE_SHAPE, FS_WRITE_GATE_ASK_PATTERN, MAX_RULE_OFFERS_TOLERATED, MAX_RULE_OFFER_BATCH_MEMBERS_TOLERATED, MAX_RULE_OFFER_UNCOVERED_DETAIL_TOLERATED, MAX_RESPOND_NOTE_CHARS, init_toolApprovalWire = __esm({
+var RETRACTED_CARD_DECISION_KIND, cardPortByKey, cardPortMissesByKey, TOOL_APPROVAL_FRAME_KEYS_MIRROR, RESPOND_DECISIONS, USELESS_REFUSAL_TEXTS, MACHINE_CODE_SHAPE, FS_WRITE_GATE_ASK_PATTERN, MAX_RULE_OFFERS_TOLERATED, MAX_RULE_OFFER_BATCH_MEMBERS_TOLERATED, MAX_RULE_OFFER_UNCOVERED_DETAIL_TOLERATED, MAX_RESPOND_NOTE_CHARS, init_toolApprovalWire = __esm({
   "node_modules/@sema-agent/client-core/dist/hitl/toolApprovalWire.js"() {
     init_hitlBridge();
     init_askParkRowRouting();
@@ -20874,7 +21308,7 @@ var cardPortByKey, cardPortMissesByKey, TOOL_APPROVAL_FRAME_KEYS_MIRROR, RESPOND
     init_gateIdentity();
     init_gateVocabulary();
     init_decideReceipt();
-    cardPortByKey = createSessionSlot(), cardPortMissesByKey = /* @__PURE__ */ new Map();
+    RETRACTED_CARD_DECISION_KIND = "retracted", cardPortByKey = createSessionSlot(), cardPortMissesByKey = /* @__PURE__ */ new Map();
     TOOL_APPROVAL_FRAME_KEYS_MIRROR = [
       "type",
       "approvalId",
@@ -21063,7 +21497,16 @@ async function routeToolApprovalFrame(ev, ctx) {
   }
   let fromSubagent = isFromSubagent(ev);
   hostLog("debug", `liveHitlAskWire: tool_approval frame ${ev.approvalId} tool=${String(ev.toolName)}${fromSubagent ? ` from-subagent=${String(ev.sourceTaskId ?? ev.sourceAgentName ?? "explicit")}` : ""}`);
-  let gatedCallId = fromSubagent ? void 0 : led.lastPendingFsCall(), { decision } = await surfaceToolApprovalFrameAndRespond(ev, deps2.respondToolApproval, argsOfGatedStart(led, gatedCallId), ctx.signal, deps2.approvalLane);
+  let gatedCallId = fromSubagent ? void 0 : led.lastPendingFsCall(), outcome = await surfaceToolApprovalFrameAndRespond(ev, deps2.respondToolApproval, argsOfGatedStart(led, gatedCallId), ctx.signal, deps2.approvalLane), { decision } = outcome;
+  if (deps2.onToolApprovalOutcome !== void 0)
+    try {
+      let out6 = deps2.onToolApprovalOutcome(ev, outcome);
+      out6 && typeof out6.then == "function" && Promise.resolve(out6).catch((e) => {
+        hostLog("debug", `liveHitlAskWire: onToolApprovalOutcome rejected: ${String(e).slice(0, 160)}`);
+      });
+    } catch (e) {
+      hostLog("debug", `liveHitlAskWire: onToolApprovalOutcome threw: ${String(e).slice(0, 160)}`);
+    }
   return decision === "deny" && !fromSubagent && (gatedCallId !== void 0 ? led.markDenied(gatedCallId) : led.armDenyStamp()), { kind: "skip" };
 }
 function routeToolStart(ev, callId, led) {
@@ -21577,14 +22020,15 @@ async function resolvePark(park, ctx) {
       outcome = { kind: "failed", stage: "orchestration", reason: stalledReason };
     else {
       let closing = await surfaceParkGate(park, ctx, park.gatedCallId, witness);
-      outcome = closing.kind === "decided" || closing.kind === "aborted" ? closing : { kind: "failed", stage: "orchestration", reason: `${stalledReason}; closing re-read: ${closing.reason}` };
+      outcome = closing.kind === "decided" || closing.kind === "aborted" || closing.kind === "retracted" ? closing : { kind: "failed", stage: "orchestration", reason: `${stalledReason}; closing re-read: ${closing.reason}` };
     }
   } else
     park.gate === "fs" && (candidateGatedCallId = led.lastFsOrShellGatedCallId()), outcome = await surfaceParkGate(park, ctx, park.gatedCallId, witness);
   let alreadyDecidedById = outcome.kind === "failed" && candidateGatedCallId !== void 0 && led.takeDecided(candidateGatedCallId);
   if (!closingCardTried && outcome.kind === "failed" && (isAlreadyResolvedFailure(outcome) || alreadyDecidedById)) {
     let firstReason = outcome.reason, streakKey = alreadyResolvedStreakKey(!isAlreadyResolvedFailure(outcome) && alreadyDecidedById), reasonToken = alreadyResolvedReasonToken(outcome.reason), rescan = isFetchStepNoPending(outcome) && stalledRounds <= MAX_GATE_HOPS ? await surfaceParkGate(park, ctx, park.gatedCallId, witness) : void 0;
-    if (rescan !== void 0 && (rescan.kind === "decided" || rescan.kind === "aborted" || rescan.kind === "failed" && rescan.retryExhausted === !0))
+    if (rescan !== void 0 && (rescan.kind === "decided" || rescan.kind === "aborted" || rescan.kind === "retracted" || // 0.74.1(CC-67):宿主撤卡也是「人那一侧有了处置」,采信,不再重探
+    rescan.kind === "failed" && rescan.retryExhausted === !0))
       hostLog("debug", `liveHitlAskWire: gate reported already-resolved (${firstReason}) but a fresh approvals re-read for run ${taskId} surfaced a decidable row under the current coordinates \u2014 re-presented it (rescan: ${rescan.kind}) instead of re-attaching on the stale park identity`), outcome = rescan;
     else {
       let streak = led.noteAlreadyResolvedGate(streakKey);
@@ -21616,8 +22060,11 @@ async function resolvePark(park, ctx) {
       reason: `the decide call failed on transport ${streak} times in a row while the run stayed parked (${outcome.reason})`
     };
   }
-  if (outcome.kind !== "decided")
-    return hostLog("debug", `liveHitlAskWire: gate not decided (${outcome.kind}${"reason" in outcome ? `: ${outcome.reason}` : ""}) \u2014 fail-soft to suspended terminal`), { kind: "failsoft", events: failsoftEvents(park, ctx, outcome.kind === "aborted", outcome.kind === "failed" ? outcome.reason : void 0) };
+  if (outcome.kind !== "decided") {
+    hostLog("debug", `liveHitlAskWire: gate not decided (${outcome.kind}${"reason" in outcome ? `: ${outcome.reason}` : ""}) \u2014 fail-soft to suspended terminal`);
+    let failedReason = outcome.kind === "failed" ? outcome.reason : outcome.kind === "retracted" ? "the approval card was retracted by the host without a decision (nothing was sent; the run stays parked and remains decidable elsewhere)" : void 0;
+    return { kind: "failsoft", events: failsoftEvents(park, ctx, outcome.kind === "aborted", failedReason) };
+  }
   led.dropHeldForDecidedPark(outcome.gatedCallId, park.gatedCallId), outcome.gatedCallId && (led.markDecided(outcome.gatedCallId), "answered" in outcome && outcome.answered && led.rememberAnswer(outcome.gatedCallId, outcome.answered));
   let handoffTaskId = "receipt" in outcome && outcome.receipt?.handoffTaskId !== void 0 && outcome.receipt.handoffTaskId !== taskId ? outcome.receipt.handoffTaskId : void 0, seq2 = led.lastSeq();
   return hostLog("debug", handoffTaskId !== void 0 ? `liveHitlAskWire: gate decided (call ${outcome.gatedCallId ?? "?"}) \u2014 the decide was ACCEPTED for delivery (status "resuming") and the engine handed the continuation to run ${handoffTaskId}; attaching runs.events(${handoffTaskId}) from the start (durable seq is per-run, so ${seq2 ?? "the previous seq"} does not apply there)` : `liveHitlAskWire: gate decided (call ${outcome.gatedCallId ?? "?"}) \u2014 attaching runs.events(${taskId})${seq2 ? ` from seq ${seq2}` : ""}`), {
@@ -24886,6 +25333,7 @@ __export(dist_exports, {
   MAX_AGENT_TOOLS: () => MAX_AGENT_TOOLS,
   MAX_AGENT_TOOL_NAME_CHARS: () => MAX_AGENT_TOOL_NAME_CHARS,
   MAX_GATE_HOPS: () => MAX_GATE_HOPS,
+  MAX_HELD_WIRE_TICK_BEATS: () => MAX_HELD_WIRE_TICK_BEATS,
   MAX_HOOK_NOTICE_TEXT_CHARS: () => MAX_HOOK_NOTICE_TEXT_CHARS,
   MAX_TASK_AGENTS: () => MAX_TASK_AGENTS,
   MAX_TOKENS_MAX: () => MAX_TOKENS_MAX,
@@ -24953,6 +25401,7 @@ __export(dist_exports, {
   RESUME_USAGE_WINDOW_EXHAUSTED: () => RESUME_USAGE_WINDOW_EXHAUSTED,
   RETAIN_BACKGROUND_ENV: () => RETAIN_BACKGROUND_ENV,
   RETIRED_PERMISSION_RULE_ISSUE_CODES: () => RETIRED_PERMISSION_RULE_ISSUE_CODES,
+  RETRACTED_CARD_DECISION_KIND: () => RETRACTED_CARD_DECISION_KIND,
   REVIEW_PARK_GATE_KINDS: () => REVIEW_PARK_GATE_KINDS,
   REWIND_ERROR_CODE_PREFIXES: () => REWIND_ERROR_CODE_PREFIXES,
   RULE_NOT_SENT_REJECTED_WARN_TEXT: () => RULE_NOT_SENT_REJECTED_WARN_TEXT,
@@ -24964,6 +25413,7 @@ __export(dist_exports, {
   RULE_STORE_UNREADABLE_KINDS: () => RULE_STORE_UNREADABLE_KINDS,
   RUNNING_STATES: () => RUNNING_STATES,
   RUN_BLOCKED_MESSAGE_PREFIX: () => RUN_BLOCKED_MESSAGE_PREFIX,
+  RUN_CANCELLED_CODE: () => RUN_CANCELLED_CODE,
   RUN_LEVEL_STOP_ERROR_CODES: () => RUN_LEVEL_STOP_ERROR_CODES,
   RUN_STOPPED_MESSAGE_PREFIX: () => RUN_STOPPED_MESSAGE_PREFIX,
   RUN_TERMINAL_NOT_SUCCESS_STATUSES: () => RUN_TERMINAL_NOT_SUCCESS_STATUSES,
@@ -25055,7 +25505,9 @@ __export(dist_exports, {
   __feedWorkflowActivityFrameForTests: () => __feedWorkflowActivityFrameForTests,
   __resetApprovalsStreamLiveReadingsForTests: () => __resetApprovalsStreamLiveReadingsForTests,
   __resetBgOwnerAbsenceForTests: () => __resetBgOwnerAbsenceForTests,
+  __resetDeviceExecutorManagementReadingsForTests: () => __resetDeviceExecutorManagementReadingsForTests,
   __resetEngineAgentPanelAbsenceForTests: () => __resetEngineAgentPanelAbsenceForTests,
+  __resetEngineAgentPanelIdentityForTests: () => __resetEngineAgentPanelIdentityForTests,
   __resetEngineCapsCacheForTests: () => __resetEngineCapsCacheForTests,
   __resetEngineCompactArmForTests: () => __resetEngineCompactArmForTests,
   __resetEngineDelegatedPromptForTests: () => __resetEngineDelegatedPromptForTests,
@@ -25162,6 +25614,7 @@ __export(dist_exports, {
   classifyMemoryStatusFailure: () => classifyMemoryStatusFailure,
   classifyPeerNotification: () => classifyPeerNotification,
   classifyRulesFailure: () => classifyRulesFailure,
+  classifyRunAbortCause: () => classifyRunAbortCause,
   classifySelfOrchestrationRefusal: () => classifySelfOrchestrationRefusal,
   classifySkippedReason: () => classifySkippedReason,
   classifySubagentResumeFailure: () => classifySubagentResumeFailure,
@@ -25172,6 +25625,7 @@ __export(dist_exports, {
   clearArmedGate: () => clearArmedGate,
   clearBgTerminalFacts: () => clearBgTerminalFacts,
   clearEnginePanelTaskResident: () => clearEnginePanelTaskResident,
+  clearEnginePanelTaskResidentByWire: () => clearEnginePanelTaskResidentByWire,
   clearRunningChoiceOffer: () => clearRunningChoiceOffer,
   clearSubagentContent: () => clearSubagentContent,
   clientContextField: () => clientContextField,
@@ -25206,6 +25660,7 @@ __export(dist_exports, {
   createWireToCcAdapter: () => createWireToCcAdapter,
   decideAcceptedNotResolved: () => decideAcceptedNotResolved,
   decidePlanReview: () => decidePlanReview,
+  decideReceiptReopen: () => decideReceiptReopen,
   decideRefusalFromError: () => decideRefusalFromError,
   decisionNoteAuditLine: () => decisionNoteAuditLine,
   defaultMaxTokensFor: () => defaultMaxTokensFor,
@@ -25222,6 +25677,8 @@ __export(dist_exports, {
   detachedTaskId: () => detachedTaskId,
   detectEngineBgShellReceipt: () => detectEngineBgShellReceipt,
   deviceAuthProviderFor: () => deviceAuthProviderFor,
+  deviceExecutorManagementDoctorDetail: () => deviceExecutorManagementDoctorDetail,
+  deviceManagementVerbsAvailable: () => deviceManagementVerbsAvailable,
   diagnoseSseIdleTear: () => diagnoseSseIdleTear,
   discussionWorkflowName: () => discussionWorkflowName,
   doneToSdkResult: () => doneToSdkResult,
@@ -25291,6 +25748,7 @@ __export(dist_exports, {
   fmtCtxOut: () => fmtCtxOut,
   fmtTokens: () => fmtTokens,
   forgetApprovalsStreamLiveReading: () => forgetApprovalsStreamLiveReading,
+  forgetDeviceExecutorManagementReading: () => forgetDeviceExecutorManagementReading,
   forgetExecutionLaneReading: () => forgetExecutionLaneReading,
   forgetSqlEngineReading: () => forgetSqlEngineReading,
   forgetWebSearchBackendReading: () => forgetWebSearchBackendReading,
@@ -25418,6 +25876,7 @@ __export(dist_exports, {
   isSeatModelCatalog: () => isSeatModelCatalog,
   isSendMessageAck: () => isSendMessageAck,
   isSseIdleError: () => isSseIdleError,
+  isStaleEngineAgentPanelEnd: () => isStaleEngineAgentPanelEnd,
   isSubFlowSegmentEnd: () => isSubFlowSegmentEnd,
   isSupportedCatalogSchemaVersion: () => isSupportedCatalogSchemaVersion,
   isTaskNotificationObjective: () => isTaskNotificationObjective,
@@ -25435,6 +25894,7 @@ __export(dist_exports, {
   isWorkflowCompletionCardEnqueued: () => isWorkflowCompletionCardEnqueued,
   isWorkflowParkRefusalCode: () => isWorkflowParkRefusalCode,
   kickEngineCapsProbe: () => kickEngineCapsProbe,
+  lastFlagValue: () => lastFlagValue,
   leaderConflictDetail: () => leaderConflictDetail,
   limitsForPrint: () => limitsForPrint,
   listAllPersistedRules: () => listAllPersistedRules,
@@ -25478,6 +25938,7 @@ __export(dist_exports, {
   normalizeWirePrincipal: () => normalizeWirePrincipal,
   noteBgOwnerAbsence: () => noteBgOwnerAbsence,
   noteEngineCapsForApprovalsStreamLive: () => noteEngineCapsForApprovalsStreamLive,
+  noteEngineCapsForDeviceExecutorManagement: () => noteEngineCapsForDeviceExecutorManagement,
   noteEngineCapsForExecutionLane: () => noteEngineCapsForExecutionLane,
   noteEngineCapsForSqlEngine: () => noteEngineCapsForSqlEngine,
   noteEngineCapsForWebSearchBackend: () => noteEngineCapsForWebSearchBackend,
@@ -25492,6 +25953,7 @@ __export(dist_exports, {
   notificationQueuePortMisses: () => notificationQueuePortMisses,
   observeCancelByDeny: () => observeCancelByDeny,
   observedApprovalsStreamLive: () => observedApprovalsStreamLive,
+  observedDeviceExecutorManagement: () => observedDeviceExecutorManagement,
   observedExecutionLane: () => observedExecutionLane,
   observedSqlEngine: () => observedSqlEngine,
   observedWebSearchBackend: () => observedWebSearchBackend,
@@ -25558,6 +26020,7 @@ __export(dist_exports, {
   projectBackgroundView: () => projectBackgroundView,
   projectCrashConverged: () => projectCrashConverged,
   projectDescription: () => projectDescription,
+  projectDeviceExecutorManagementCapability: () => projectDeviceExecutorManagementCapability,
   projectDiagnosticsFrame: () => projectDiagnosticsFrame,
   projectEffectiveBody: () => projectEffectiveBody,
   projectExecutionLaneCapability: () => projectExecutionLaneCapability,
@@ -25621,6 +26084,7 @@ __export(dist_exports, {
   readRuleOfferSupply: () => readRuleOfferSupply,
   readRuleOffers: () => readRuleOffers,
   readRulePersistOutcome: () => readRulePersistOutcome,
+  readRunCancelContext: () => readRunCancelContext,
   readRunCostFacts: () => readRunCostFacts,
   readRunTerminal: () => readRunTerminal,
   readSessionMemoryStatus: () => readSessionMemoryStatus,
@@ -25664,6 +26128,7 @@ __export(dist_exports, {
   resetWorkflowActivityLedgers: () => resetWorkflowActivityLedgers,
   resolveAutonomousLoopPrompt: () => resolveAutonomousLoopPrompt,
   resolveCatalogSources: () => resolveCatalogSources,
+  resolveEnginePanelTaskId: () => resolveEnginePanelTaskId,
   resolveEntryVision: () => resolveEntryVision,
   resolveHeadlessDetach: () => resolveHeadlessDetach,
   resolveHeadlessFinalVerify: () => resolveHeadlessFinalVerify,
@@ -25769,6 +26234,7 @@ __export(dist_exports, {
   surfaceRuleArmRejected: () => surfaceRuleArmRejected,
   surfaceSuspendedAskAndRespond: () => surfaceSuspendedAskAndRespond,
   surfaceToolApprovalFrameAndRespond: () => surfaceToolApprovalFrameAndRespond,
+  suspendedReopenOf: () => suspendedReopenOf,
   suspendedSubagentAsks: () => suspendedSubagentAsks,
   tailEngineSubagent: () => tailEngineSubagent,
   taskAgentsField: () => taskAgentsField,
@@ -25860,9 +26326,12 @@ var init_dist = __esm({
     init_webSearchBackendCapability();
     init_executionLaneCapability();
     init_approvalsStreamLiveCapability();
+    init_deviceExecutorManagementCapability();
     init_mcpReconnect();
     init_leaderConflict();
     init_runTerminal();
+    init_runCancelContext();
+    init_argvFlagValue();
     init_readFacePosture();
     init_mcpPanel();
     init_effectiveFacts();
@@ -25954,6 +26423,7 @@ var init_dist = __esm({
     init_liveInitToolFace();
     init_providerPresets2();
     init_hitlBridge();
+    init_suspendedReopen();
     init_frameRouter();
     init_frameRouter();
     init_hitlHostSurface();
@@ -69967,13 +70437,51 @@ function displaySafeFreeText(text2) {
   return out6 += text2.slice(cursor), out6.replace(SCHEMELESS_USERINFO, `${REDACTED_USERINFO}@$1`);
 }
 function redactSecretWords(text2) {
-  return text2.replace(SECRET_SCHEME_WORD, swapSecretValue).replace(SECRET_LABELLED_WORD, swapSecretValue);
+  return redactByLabel(redactByLabel(text2, SECRET_SCHEME_WORD), SECRET_LABELLED_WORD);
+}
+function scanSecretValue(text2, from) {
+  let i = from, slashes = 0;
+  for (; i < text2.length && text2[i] === "\\" && slashes < 4; )
+    i++, slashes++;
+  let q2 = text2[i];
+  if (q2 === '"' || q2 === "'") {
+    let open19 = i + 1;
+    if (slashes > 0) {
+      let close = text2.indexOf("\\" + q2, open19);
+      return close === -1 || close - open19 > VALUE_SCAN_CAP ? null : close > open19 ? { start: open19, end: close } : null;
+    }
+    let j4 = open19;
+    for (; j4 < text2.length && j4 - open19 <= VALUE_SCAN_CAP; ) {
+      if (text2[j4] === "\\") {
+        j4 += 2;
+        continue;
+      }
+      if (text2[j4] === q2) return j4 > open19 ? { start: open19, end: j4 } : null;
+      j4++;
+    }
+    return null;
+  }
+  let j3 = i;
+  for (; j3 < text2.length && j3 - i < VALUE_SCAN_CAP && !isBareValueStop(text2[j3]); ) j3++;
+  return j3 > i ? { start: i, end: j3 } : null;
 }
-function swapSecretValue(whole, label, value) {
+function isDiagnosticValue(value) {
+  if (value.startsWith("\xABredacted") || /^[a-z][a-z0-9+.-]{1,15}:\/\//i.test(value)) return !0;
   let bare = value.replace(/[.,;:!?)\]}'"]{0,8}$/, "").toLowerCase();
-  return DIAGNOSTIC_VALUE_WORDS.has(bare) ? whole : `${label} ${REDACTED_SECRET}`;
+  return bare === "" || DIAGNOSTIC_VALUE_WORDS.has(bare);
+}
+function redactByLabel(text2, re) {
+  let out6 = "", last4 = 0;
+  re.lastIndex = 0;
+  for (let m2 = re.exec(text2); m2 !== null; m2 = re.exec(text2)) {
+    let v2 = scanSecretValue(text2, m2.index + m2[0].length);
+    if (v2 === null) continue;
+    let value = text2.slice(v2.start, v2.end);
+    out6 += text2.slice(last4, v2.start) + (isDiagnosticValue(value) ? value : REDACTED_SECRET), last4 = v2.end, re.lastIndex = v2.end;
+  }
+  return out6 + text2.slice(last4);
 }
-var DISPLAY_REDACTION_MARKER_RE, REDACTED_USERINFO, REDACTED_QUERY, REDACTED_FRAGMENT, TOKEN_STOP, TRAILING_PUNCTUATION, VALUE_BOUNDARY_TAIL, isWhitespaceOrControl, isSchemeChar, isAlpha, SCHEMELESS_USERINFO, REDACTED_SECRET, DIAGNOSTIC_VALUE_WORDS, SECRET_SCHEME_WORD, SECRET_LABELLED_WORD, init_displaySafeUrl = __esm({
+var DISPLAY_REDACTION_MARKER_RE, REDACTED_USERINFO, REDACTED_QUERY, REDACTED_FRAGMENT, TOKEN_STOP, TRAILING_PUNCTUATION, VALUE_BOUNDARY_TAIL, isWhitespaceOrControl, isSchemeChar, isAlpha, SCHEMELESS_USERINFO, REDACTED_SECRET, DIAGNOSTIC_VALUE_WORDS, VALUE_SCAN_CAP, BARE_VALUE_STOP_CHARS, isBareValueStop, SECRET_SCHEME_WORD, SECRET_LABELLED_WORD, init_displaySafeUrl = __esm({
   "build-src/src/sema/displaySafeUrl.ts"() {
     DISPLAY_REDACTION_MARKER_RE = /^«redacted(?::[a-z-]{1,16}){0,2}»$/, REDACTED_USERINFO = "\xABredacted:userinfo\xBB", REDACTED_QUERY = "\xABredacted:query\xBB", REDACTED_FRAGMENT = "\xABredacted:fragment\xBB";
     TOKEN_STOP = /* @__PURE__ */ new Set(['"', "<", ">", "`", "|", "\\", "^", "{", "}"]), TRAILING_PUNCTUATION = /* @__PURE__ */ new Set([".", ",", ";", ":", "!", "?", "'"]), VALUE_BOUNDARY_TAIL = /[?#&=;]$/, isWhitespaceOrControl = (ch2) => {
@@ -70009,9 +70517,57 @@ var DISPLAY_REDACTION_MARKER_RE, REDACTED_USERINFO, REDACTED_QUERY, REDACTED_FRA
       "revoked",
       "disabled",
       "unavailable",
-      "incorrect"
-    ]);
-    SECRET_SCHEME_WORD = /(?:\b|(?<=\\[A-Za-z"']))(bearer|basic)[\s:=\uFF1A\uFF1D]{1,8}(?:\\{0,4}["']\s{0,4})?([A-Za-z0-9._~+/=%-]{8,})/gi, SECRET_LABELLED_WORD = /(?:\b|(?<=\\[A-Za-z"']))((?:access[-_ ]?|refresh[-_ ]?|id[-_ ]?|client[-_ ]?|api[-_ ]?|x[-_]api[-_ ]?|session[-_ ]?|auth[-_ ]?)?(?:token|key|secret|password|authorization|credential)s?)(?:\\{0,4}["']|\\{1,4})?\s{0,4}[:=\uFF1A\uFF1D]\s{0,4}(?:\\{0,4}["']|\\{1,4})?\s{0,4}([A-Za-z0-9._~+/=%-]{8,})/gi;
+      "incorrect",
+      "not",
+      "no",
+      "set",
+      "unset",
+      "blank",
+      "value",
+      "values",
+      "of",
+      "the",
+      "a",
+      "an",
+      "is",
+      "was",
+      "are",
+      "for",
+      "to",
+      "in",
+      "on",
+      "and",
+      "or",
+      "from",
+      "with",
+      "at",
+      "by",
+      "this",
+      "that",
+      "it",
+      "be",
+      "must",
+      "should",
+      "can",
+      "cannot",
+      "true",
+      "false",
+      "yes",
+      "ok",
+      "n/a",
+      "na",
+      // 认证方案词:`Authorization: Bearer <tok>` 里 `Bearer` 是标签的一部分,真值由 ① 那条正则接着洗。
+      "bearer",
+      "basic",
+      "digest",
+      "hmac",
+      "oauth",
+      "oauth2",
+      "jwt",
+      "apikey",
+      "api-key"
+    ]), VALUE_SCAN_CAP = 512, BARE_VALUE_STOP_CHARS = /* @__PURE__ */ new Set([",", ";", '"', "'", "\\", "(", ")", "[", "]", "{", "}", "<", ">"]), isBareValueStop = (ch2) => ch2 <= " " || BARE_VALUE_STOP_CHARS.has(ch2);
+    SECRET_SCHEME_WORD = /(?:\b|(?<=\\[A-Za-z"']))(bearer|basic)[\s:=\uFF1A\uFF1D]{1,8}/gi, SECRET_LABELLED_WORD = /(?:\b|(?<=\\[A-Za-z"']))((?:access[-_ ]?|refresh[-_ ]?|id[-_ ]?|client[-_ ]?|api[-_ ]?|x[-_]api[-_ ]?|session[-_ ]?|auth[-_ ]?)?(?:token|key|secret|password|authorization|credential)s?)(?:\\{0,4}["'])?\s{0,4}[:=\uFF1A\uFF1D]\s{0,4}/gi;
   }
 });
 
@@ -87951,7 +88507,10 @@ var USER_ROLES, NO_ENTRIES_DROPPED, OPEN_WORLD_KNOWN_KEYS, init_config_fns = __e
     init_types6();
     USER_ROLES = ["viewer", "editor", "publisher", "admin"];
     NO_ENTRIES_DROPPED = Object.freeze({}), OPEN_WORLD_KNOWN_KEYS = {
-      limits: { "": Object.keys(LimitsConfig.shape), infraCostRates: Object.keys(InfraCostRates.shape) }
+      limits: [
+        [[], Object.keys(LimitsConfig.shape)],
+        [["infraCostRates"], Object.keys(InfraCostRates.shape)]
+      ]
     };
   }
 });
@@ -88780,9 +89339,10 @@ var init_migrate = __esm({
   }
 });
 
-// node_modules/@sema-agent/settings-schema/dist/api/wire.js
-var DEVICE_GRANT_TYPE, REFRESH_TOKEN_TTL_SECONDS, OAUTH_ERROR_CODES, DEVICE_AUTH_STATUSES, init_wire = __esm({
-  "node_modules/@sema-agent/settings-schema/dist/api/wire.js"() {
+// node_modules/@sema-agent/settings-schema/dist/api/auth.js
+var DEVICE_GRANT_TYPE, REFRESH_TOKEN_TTL_SECONDS, OAUTH_ERROR_CODES, DEVICE_AUTH_STATUSES, OAuthErrorResponse, DeviceCodeRequest, DeviceCodeResponse, DeviceTokenRequest, TokenGrantResponse, TokenRefreshRequest, LogoutRequest, LogoutResponse, DeviceApproveLookupResponse, DeviceApproveRequest, DeviceApproveResponse, init_auth = __esm({
+  "node_modules/@sema-agent/settings-schema/dist/api/auth.js"() {
+    init_zod();
     DEVICE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code", REFRESH_TOKEN_TTL_SECONDS = 720 * 60 * 60, OAUTH_ERROR_CODES = [
       /** device/token: the user has not approved (or denied) the handshake yet — keep polling. */
       "authorization_pending",
@@ -88801,17 +89361,7 @@ var DEVICE_GRANT_TYPE, REFRESH_TOKEN_TTL_SECONDS, OAUTH_ERROR_CODES, DEVICE_AUTH
       "invalid_grant",
       /** SSO not configured on the registry (HTTP 503) — a deployment problem, not a client one. */
       "server_error"
-    ], DEVICE_AUTH_STATUSES = ["pending", "approved", "denied"];
-  }
-});
-
-// node_modules/@sema-agent/settings-schema/dist/api/auth.js
-var OAuthErrorResponse, DeviceCodeRequest, DeviceCodeResponse, DeviceTokenRequest, TokenGrantResponse, TokenRefreshRequest, LogoutRequest, LogoutResponse, DeviceApproveLookupResponse, DeviceApproveRequest, DeviceApproveResponse, init_auth = __esm({
-  "node_modules/@sema-agent/settings-schema/dist/api/auth.js"() {
-    init_zod();
-    init_wire();
-    init_wire();
-    OAuthErrorResponse = external_exports2.object({
+    ], DEVICE_AUTH_STATUSES = ["pending", "approved", "denied"], OAuthErrorResponse = external_exports2.object({
       error: external_exports2.enum(OAUTH_ERROR_CODES),
       error_description: external_exports2.string().optional()
     }).passthrough(), DeviceCodeRequest = external_exports2.object({
@@ -88913,8 +89463,6 @@ var GLOBAL_SCOPE, RESERVED_SCOPE_IDS, SCOPE_ID_REGEX, ScopeId, ScopeRole, Scope,
     init_zod();
     init_config_fns();
     init_auth();
-    init_wire();
-    init_wire();
     GLOBAL_SCOPE = "global", RESERVED_SCOPE_IDS = [GLOBAL_SCOPE], SCOPE_ID_REGEX = /^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$/;
     ScopeId = external_exports2.string().regex(SCOPE_ID_REGEX, "scope id must be a slug: [a-z0-9-], 1-64 chars, no edge dash"), ScopeRole = external_exports2.enum(USER_ROLES), Scope = external_exports2.object({
       id: ScopeId,
@@ -125350,6 +125898,29 @@ var init_types8 = __esm({
   }
 });
 
+// build-src/src/sema/apiErrorMessageWash.ts
+function washApiErrorMessage(m2) {
+  if (typeof m2 != "object" || m2 === null) return m2;
+  let rec = m2;
+  if (rec.isApiErrorMessage !== !0) return m2;
+  let envelope = rec.message;
+  if (typeof envelope != "object" || envelope === null) return m2;
+  let content = envelope.content;
+  if (!Array.isArray(content)) return m2;
+  let changed = !1, washed = content.map((block2) => {
+    let b3 = block2;
+    if (typeof b3 != "object" || b3 === null || b3.type !== "text" || typeof b3.text != "string") return block2;
+    let next = displaySafeFreeText(b3.text);
+    return next === b3.text ? block2 : (changed = !0, { ...b3, text: next });
+  });
+  return changed ? { ...rec, message: { ...envelope, content: washed } } : m2;
+}
+var init_apiErrorMessageWash = __esm({
+  "build-src/src/sema/apiErrorMessageWash.ts"() {
+    init_displaySafeUrl();
+  }
+});
+
 // build-src/src/sema/appStateRef.ts
 var appStateRef_exports = {};
 __export(appStateRef_exports, {
@@ -125951,8 +126522,8 @@ function rewriteActiveRunBusyRow(msgs, seen2, billTurnCosts = !0, runToken) {
 }
 function passThroughWithBusyRewrite(msgs, seen2) {
   return (async function* () {
-    for await (let m2 of msgs) {
-      let busy = seen2.busy;
+    for await (let raw2 of msgs) {
+      let m2 = washApiErrorMessage(raw2), busy = seen2.busy;
       if (busy && typeof m2 == "object" && m2 !== null && "isApiErrorMessage" in m2 && m2.isApiErrorMessage === !0) {
         let envelope = "message" in m2 ? m2.message : void 0;
         if (typeof envelope == "object" && envelope !== null) {
@@ -126057,6 +126628,7 @@ var runTokenSeq, mintRunToken, reportedDroppedTypes2, DROPPED_TYPE_MEMO_CAP2, in
   "build-src/src/seam/adapter/runStream.ts"() {
     init_dist();
     init_untrustedDisplayText();
+    init_apiErrorMessageWash();
     init_planReviewModeAfterOffer();
     init_turnUsageTranscriptStamp();
     init_activeRunSelfHeal2();
@@ -140263,6 +140835,94 @@ var PROBE_FACTS_OFF, PROBE_FACTS_ON, PROBE_VECTORS, init_epoch = __esm({
   }
 });
 
+// node_modules/@sema-agent/core/dist/tools/fs/read-deny.js
+function resolveReadDenyBuiltins(config4) {
+  let activeTiers;
+  if (config4?.tiers === void 0)
+    activeTiers = new Set(READ_DENY_DEFAULT_TIERS);
+  else {
+    if (!Array.isArray(config4.tiers))
+      throw new Error(`readDenyBuiltinTiers: expected an array of tier names, got ${JSON.stringify(config4.tiers)}.`);
+    for (let t2 of config4.tiers)
+      if (typeof t2 != "string" || !READ_DENY_BUILTIN_TIERS.includes(t2))
+        throw new Error(`readDenyBuiltinTiers: unknown tier ${JSON.stringify(t2)} \u2014 known tiers: ${READ_DENY_BUILTIN_TIERS.join(", ")}.`);
+    activeTiers = new Set(config4.tiers);
+  }
+  let excluded;
+  if (config4?.exclude === void 0)
+    excluded = /* @__PURE__ */ new Set();
+  else {
+    if (!Array.isArray(config4.exclude))
+      throw new Error(`readDenyBuiltinExclude: expected an array of built-in row names (canonical pattern texts), got ${JSON.stringify(config4.exclude)}.`);
+    for (let name of config4.exclude)
+      if (typeof name != "string" || !READ_FACE_BUILTIN_DENY_TABLE.some((r) => r.pattern === name))
+        throw new Error(`readDenyBuiltinExclude: ${JSON.stringify(name)} names no built-in row \u2014 row names are the canonical pattern texts of READ_FACE_BUILTIN_DENY_TABLE (e.g. ".ssh", ".config/gcloud").`);
+    excluded = new Set(config4.exclude);
+  }
+  return READ_FACE_BUILTIN_DENY_TABLE.filter((r) => activeTiers.has(r.tier) && !excluded.has(r.pattern));
+}
+var READ_DENY_BUILTIN_TIERS, READ_FACE_BUILTIN_DENY_TABLE, READ_DENY_DEFAULT_TIERS, READ_FACE_DEFAULT_DENY_ENTRIES, init_read_deny = __esm({
+  "node_modules/@sema-agent/core/dist/tools/fs/read-deny.js"() {
+    READ_DENY_BUILTIN_TIERS = ["credentials", "shell-history", "browser", "wallet", "agent-config"], READ_FACE_BUILTIN_DENY_TABLE = [
+      { pattern: ".ssh", tier: "credentials" },
+      { pattern: "id_rsa*", tier: "credentials" },
+      { pattern: "id_ed25519*", tier: "credentials" },
+      { pattern: "id_ecdsa*", tier: "credentials" },
+      { pattern: ".gnupg", tier: "credentials" },
+      { pattern: ".aws", tier: "credentials" },
+      { pattern: ".config/gcloud", tier: "credentials" },
+      { pattern: ".azure", tier: "credentials" },
+      { pattern: ".kube", tier: "credentials" },
+      { pattern: ".netrc", tier: "credentials" },
+      { pattern: "_netrc", tier: "credentials" },
+      { pattern: ".git-credentials", tier: "credentials" },
+      { pattern: ".docker/config.json", tier: "credentials" },
+      { pattern: ".config/gh", tier: "credentials" },
+      { pattern: ".npmrc", tier: "credentials" },
+      { pattern: ".pypirc", tier: "credentials" },
+      { pattern: ".local/share/keyrings", tier: "credentials" },
+      { pattern: "Library/Keychains", tier: "credentials" },
+      { pattern: ".credentials.json", tier: "credentials" },
+      { pattern: ".codex/auth.json", tier: "credentials" },
+      { pattern: ".config/github-copilot", tier: "credentials" },
+      { pattern: ".gemini/oauth_creds.json", tier: "credentials" },
+      { pattern: ".bash_history", tier: "shell-history" },
+      { pattern: ".zsh_history", tier: "shell-history" },
+      { pattern: "Library/Application Support/Google/Chrome", tier: "browser" },
+      { pattern: "Library/Application Support/Firefox", tier: "browser" },
+      { pattern: "Library/Safari", tier: "browser" },
+      { pattern: ".config/google-chrome", tier: "browser" },
+      { pattern: ".config/chromium", tier: "browser" },
+      { pattern: ".mozilla/firefox", tier: "browser" },
+      { pattern: "AppData/Local/Google/Chrome/User Data", tier: "browser" },
+      { pattern: "AppData/Local/Microsoft/Edge/User Data", tier: "browser" },
+      { pattern: "AppData/Roaming/Mozilla/Firefox", tier: "browser" },
+      { pattern: ".bitcoin", tier: "wallet" },
+      { pattern: ".ethereum", tier: "wallet" },
+      { pattern: ".electrum", tier: "wallet" },
+      { pattern: "Library/Application Support/Exodus", tier: "wallet" },
+      { pattern: "Library/Application Support/Ledger Live", tier: "wallet" },
+      { pattern: "wallet.dat", tier: "wallet" },
+      { pattern: ".sema/settings.json", tier: "agent-config" },
+      { pattern: ".sema/settings.local.json", tier: "agent-config" },
+      { pattern: ".sema.*", tier: "agent-config" },
+      { pattern: ".claude/settings.json", tier: "agent-config" },
+      { pattern: ".claude/settings.local.json", tier: "agent-config" },
+      { pattern: ".claude.*", tier: "agent-config" },
+      { pattern: ".mcp.json", tier: "agent-config" },
+      { pattern: ".ai-agent/.env", tier: "agent-config" },
+      { pattern: ".sema/engine-data/.env", tier: "agent-config" },
+      { pattern: ".codex/config.toml", tier: "agent-config" },
+      { pattern: ".cursor/mcp.json", tier: "agent-config" },
+      { pattern: ".continue/config.json", tier: "agent-config" },
+      { pattern: ".continue/config.yaml", tier: "agent-config" },
+      { pattern: ".aider.conf.yml", tier: "agent-config" },
+      { pattern: ".gemini/settings.json", tier: "agent-config" }
+    ], READ_DENY_DEFAULT_TIERS = [];
+    READ_FACE_DEFAULT_DENY_ENTRIES = resolveReadDenyBuiltins().map((r) => r.pattern);
+  }
+});
+
 // node_modules/@sema-agent/core/dist/core/tool-face.js
 var TOOL_FAMILIES, TOOL_MOUNT_TAGS, TOOL_APPROVAL_CARDS, TOOL_PATH_BASES, TOOL_PATH_ABSENCES, TOOL_WIRE_NAME_MAX_CHARS, TOOL_CONTRACT_MAX_CHARS, TOOL_CARD_ID_MAX_CHARS, TOOL_KEY_MAX_CHARS, TOOL_KEYS_MAX, RENDER_HINT_MAX_CHARS, RENDER_HINT_ACTIVITY_MAX_CHARS, RENDER_HINT_MAX_LIST, MOUNT_TAG_IN_HANDS_BAND, HANDS_BAND_TAGS, init_tool_face = __esm({
   "node_modules/@sema-agent/core/dist/core/tool-face.js"() {
@@ -140679,7 +141339,7 @@ var FULL_SHELL_CONTRACT_ID, READONLY_SHELL_CONTRACT_ID, TASK_CREATE_TOOL_NAME, T
       { id: "task-stop-hands", name: "TaskStop", source: "builtin", definedIn: "src/tools/fs/fs-bash.ts", mountedBy: ["hands"], cards: [], face: { family: "delegate", effect: "write", contract: TASK_STOP_CONTRACT } },
       { id: "task-output", name: "TaskOutput", source: "builtin", definedIn: "src/core/task-registry.ts", mountedBy: ["delegation"], cards: ["task-output"], face: { family: "delegate", effect: "read", contract: TASK_OUTPUT_CONTRACT } },
       { id: "task-stop", name: "TaskStop", source: "builtin", definedIn: "src/core/task-registry.ts", mountedBy: ["delegation"], cards: ["task-stop"], face: { family: "delegate", effect: "write", contract: TASK_STOP_CONTRACT } },
-      { id: "monitor", name: "Monitor", source: "builtin", definedIn: "src/tools/monitor.ts", mountedBy: ["backgroundTasks"], cards: ["monitor-start"], face: { family: "other", effect: "write", contract: c("core.monitor@1"), offloadThresholdChars: 1e4 } },
+      { id: "monitor", name: "Monitor", source: "builtin", definedIn: "src/tools/monitor.ts", mountedBy: ["backgroundTasks"], cards: ["monitor-start", "readonly_out_of_root"], face: { family: "other", effect: "write", contract: c("core.monitor@1"), offloadThresholdChars: 1e4 } },
       { id: "send-message", name: "SendMessage", source: "builtin", definedIn: "src/agents/send-message-tool.ts", mountedBy: ["delegation", "hostInternals", "peerLane"], cards: ["send-message"], face: { family: "protocol", effect: "write", contract: c("core.send_message@1") } },
       { id: "agent-transcript", name: "AgentTranscript", source: "builtin", definedIn: "src/agents/agent-transcript-tool.ts", mountedBy: ["delegation"], cards: ["agent-transcript"], face: { family: "delegate", effect: "read", contract: c("core.agent_transcript@1") } },
       { id: "list-agents", name: "ListAgents", source: "builtin", definedIn: "src/agents/list-agents-tool.ts", mountedBy: ["peerLane"], cards: ["list-agents"], face: { family: "protocol", effect: "read", aliases: ["ListPeers"], contract: c("core.list_agents@1") } },
@@ -140894,6 +141554,7 @@ function identityAnchorOf(identity3) {
 }
 var WIN_RESERVED_RE, asciiBytes, BINARY_MAGIC_SIGNATURES, init_safety = __esm({
   "node_modules/@sema-agent/core/dist/tools/fs/safety.js"() {
+    init_read_deny();
     init_surrogate_safe_slice();
     init_tool_registry();
     init_gate_bounded_await();
@@ -141143,6 +141804,7 @@ var init_tools = __esm({
   "node_modules/@sema-agent/core/dist/core/tools.js"() {
     init_value2();
     init_tool_errors();
+    init_thrown_value();
     init_tool_catalog();
   }
 });
@@ -151928,6 +152590,7 @@ function summarizeWorkflowRun(run2) {
     ...run2.name !== void 0 ? { name: run2.name } : {},
     ...run2.description !== void 0 ? { description: run2.description } : {},
     status: run2.status,
+    ...run2.errorCode !== void 0 ? { errorCode: run2.errorCode } : {},
     ...run2.agentFailures !== void 0 ? { agentFailures: run2.agentFailures } : {},
     ...run2.budgetOvershoot !== void 0 ? { budgetOvershoot: { ...run2.budgetOvershoot } } : {},
     ...run2.timeoutInterruption !== void 0 ? { timeoutInterruption: { ...run2.timeoutInterruption } } : {},
@@ -155071,7 +155734,10 @@ var SUBSTITUTION_PLACEHOLDER, UNREADABLE_EXPANSION_TEXT, UNDELIMITED_SUBSTITUTIO
 });
 
 // node_modules/@sema-agent/core/dist/tools/fs/bash-program-position.js
-var NOT_AUTO_ALLOWED, NO_DECLARED_OPTIONS, launcherRow, LAUNCHER_TABLE, COMMAND_LAUNCHERS, SHELL_SCAN_DECLINES, init_bash_program_position = __esm({
+function seatDeclineEvidence(table) {
+  return new Set(SHELL_SCAN_DECLINES.filter((decline) => table[decline] === !0));
+}
+var NOT_AUTO_ALLOWED, NO_DECLARED_OPTIONS, launcherRow, LAUNCHER_TABLE, COMMAND_LAUNCHERS, SHELL_SCAN_DECLINES, BOUNDARY_SEAT_READS_DECLINE, CLASSIFY_SEAT_READS_DECLINE, init_bash_program_position = __esm({
   "node_modules/@sema-agent/core/dist/tools/fs/bash-program-position.js"() {
     NOT_AUTO_ALLOWED = "\u2014 not auto-allowed", NO_DECLARED_OPTIONS = { optionArity: /* @__PURE__ */ new Map() }, launcherRow = (pairs, extra = {}) => ({ optionArity: new Map(pairs), ...extra }), LAUNCHER_TABLE = /* @__PURE__ */ new Map([
       ["env", launcherRow([["-i", 0], ["-0", 0], ["-v", 0], ["--ignore-environment", 0], ["--null", 0], ["--debug", 0], ["-u", 1], ["--unset", 1]], { assignmentOperands: !0 })],
@@ -155136,7 +155802,13 @@ var NOT_AUTO_ALLOWED, NO_DECLARED_OPTIONS, launcherRow, LAUNCHER_TABLE, COMMAND_
       ["valgrind", NO_DECLARED_OPTIONS],
       ["firejail", { optionArity: /* @__PURE__ */ new Map(), whenNoProgram: "shell" }],
       ["bwrap", NO_DECLARED_OPTIONS]
-    ]), COMMAND_LAUNCHERS = new Set(LAUNCHER_TABLE.keys()), SHELL_SCAN_DECLINES = ["unreadable_program_position", "stream_fed_operands"];
+    ]), COMMAND_LAUNCHERS = new Set(LAUNCHER_TABLE.keys()), SHELL_SCAN_DECLINES = ["unreadable_program_position", "stream_fed_operands"], BOUNDARY_SEAT_READS_DECLINE = {
+      unreadable_program_position: !0,
+      stream_fed_operands: !0
+    }, CLASSIFY_SEAT_READS_DECLINE = {
+      unreadable_program_position: !1,
+      stream_fed_operands: !1
+    };
   }
 });
 
@@ -155147,9 +155819,13 @@ function hasBareShellOperator(s, quotedOperatorsAreText) {
   let mask = quoteMask(s);
   if (!mask.balanced)
     return SHELL_OPERATORS.test(s);
-  for (let i = 0; i < s.length; i++)
-    if (!mask.quoted[i] && SHELL_OPERATORS.test(s[i]))
+  for (let i = 0; i < s.length; i++) {
+    let ch2 = s[i];
+    if (!SHELL_OPERATORS.test(ch2))
+      continue;
+    if (!(SHELL_EXPANDS_IN_DOUBLE_QUOTES.test(ch2) ? mask.openedBy[i] === "'" : mask.quoted[i]))
       return !0;
+  }
   return !1;
 }
 function parseLeadingCommandName(command8, options) {
@@ -155211,12 +155887,14 @@ function splitShellCompoundSegments(source, options) {
   let segments = lexed.segments.map((s) => s.text), connectors = lexed.segments.map((s) => s.connector);
   return { segments, pipeFed: connectors.map((k2) => k2 === "|"), connectors };
 }
-var SHELL_OPERATORS, SHELL_SEGMENT_QUOTE_BLIND_REJECT, SHELL_EXPANSION_CHARS, SHELL_REDIRECTION_OPERATORS, SHELL_CONNECTOR_CHARS, BLANK_INLINE, PERL_INLINE, RUBY_INLINE, PYTHON_INLINE, NODE_INLINE, PHP_INLINE, LUA_INLINE, TCL_INLINE, EXPECT_INLINE, AWK_INLINE, JQ_INLINE, BC_INLINE, DC_INLINE, SQLITE_INLINE, PSQL_INLINE, OSASCRIPT_INLINE, RSCRIPT_INLINE, JULIA_INLINE, GHCI_INLINE, GROOVY_INLINE, BUN_INLINE, init_bash_readonly_classifier = __esm({
+var SHELL_OPERATORS, SHELL_EXPANDS_IN_DOUBLE_QUOTES, SHELL_SEGMENT_QUOTE_BLIND_REJECT, SHELL_EXPANSION_CHARS, SHELL_REDIRECTION_OPERATORS, SHELL_CONNECTOR_CHARS, BLANK_INLINE, PERL_INLINE, RUBY_INLINE, PYTHON_INLINE, NODE_INLINE, PHP_INLINE, LUA_INLINE, TCL_INLINE, EXPECT_INLINE, AWK_INLINE, JQ_INLINE, BC_INLINE, DC_INLINE, SQLITE_INLINE, PSQL_INLINE, OSASCRIPT_INLINE, RSCRIPT_INLINE, JULIA_INLINE, GHCI_INLINE, GROOVY_INLINE, BUN_INLINE, init_bash_readonly_classifier = __esm({
   "node_modules/@sema-agent/core/dist/tools/fs/bash-readonly-classifier.js"() {
+    init_read_deny();
     init_safety();
     init_bash_lexer();
     init_bash_program_position();
     SHELL_OPERATORS = /[;&|<>$()`\n\r\\]/;
+    SHELL_EXPANDS_IN_DOUBLE_QUOTES = /[$`]/;
     SHELL_SEGMENT_QUOTE_BLIND_REJECT = /[<>()`\n\r\\]/, SHELL_EXPANSION_CHARS = /[$]/;
     SHELL_REDIRECTION_OPERATORS = /[<>]/, SHELL_CONNECTOR_CHARS = /[|&;]/;
     BLANK_INLINE = {
@@ -155411,7 +156089,7 @@ var init_gh_rate_limit = __esm({
 });
 
 // node_modules/@sema-agent/core/dist/tools/fs/fs-bash.js
-var BOUNDARY_SEAT_DECLINE_EVIDENCE, TOOL_PROGRESS_BOUND, READONLY_FACE_ESCAPE_PROSE, init_fs_bash = __esm({
+var BOUNDARY_SEAT_DECLINE_EVIDENCE, CLASSIFY_SEAT_DECLINE_EVIDENCE, TOOL_PROGRESS_BOUND, READONLY_FACE_ESCAPE_PROSE, FULL_SHELL_FACE_ESCAPE_PROSE, MONITOR_ESCAPE_PROSE, init_fs_bash = __esm({
   "node_modules/@sema-agent/core/dist/tools/fs/fs-bash.js"() {
     init_build3();
     init_tools();
@@ -155421,6 +156099,7 @@ var BOUNDARY_SEAT_DECLINE_EVIDENCE, TOOL_PROGRESS_BOUND, READONLY_FACE_ESCAPE_PR
     init_task_tool_shape();
     init_background_shell();
     init_untrusted_text();
+    init_surrogate_safe_slice();
     init_mcp();
     init_safety();
     init_remote_env();
@@ -155429,102 +156108,21 @@ var BOUNDARY_SEAT_DECLINE_EVIDENCE, TOOL_PROGRESS_BOUND, READONLY_FACE_ESCAPE_PR
     init_untrusted_text();
     init_bash_readonly_classifier();
     init_bash_program_position();
+    init_read_deny();
     init_tool_catalog_entries();
     init_thrown_value();
     init_tool_catalog_entries();
-    BOUNDARY_SEAT_DECLINE_EVIDENCE = new Set(SHELL_SCAN_DECLINES), TOOL_PROGRESS_BOUND = Object.freeze({ intervalMs: 1e3, tailLines: 20, tailMaxBytes: 16 * 1024 }), READONLY_FACE_ESCAPE_PROSE = {
+    BOUNDARY_SEAT_DECLINE_EVIDENCE = seatDeclineEvidence(BOUNDARY_SEAT_READS_DECLINE), CLASSIFY_SEAT_DECLINE_EVIDENCE = seatDeclineEvidence(CLASSIFY_SEAT_READS_DECLINE), TOOL_PROGRESS_BOUND = Object.freeze({ intervalMs: 1e3, tailLines: 20, tailMaxBytes: 16 * 1024 }), READONLY_FACE_ESCAPE_PROSE = {
+      tool: "Bash",
       subject: "a path this command reads",
       verdictPhrase: ` ${NOT_AUTO_ALLOWED}`,
       note: BASH_READONLY_CONFINEMENT_NOTE
-    };
-  }
-});
-
-// node_modules/@sema-agent/core/dist/tools/fs/read-deny.js
-function resolveReadDenyBuiltins(config4) {
-  let activeTiers;
-  if (config4?.tiers === void 0)
-    activeTiers = new Set(READ_DENY_DEFAULT_TIERS);
-  else {
-    if (!Array.isArray(config4.tiers))
-      throw new Error(`readDenyBuiltinTiers: expected an array of tier names, got ${JSON.stringify(config4.tiers)}.`);
-    for (let t2 of config4.tiers)
-      if (typeof t2 != "string" || !READ_DENY_BUILTIN_TIERS.includes(t2))
-        throw new Error(`readDenyBuiltinTiers: unknown tier ${JSON.stringify(t2)} \u2014 known tiers: ${READ_DENY_BUILTIN_TIERS.join(", ")}.`);
-    activeTiers = new Set(config4.tiers);
-  }
-  let excluded;
-  if (config4?.exclude === void 0)
-    excluded = /* @__PURE__ */ new Set();
-  else {
-    if (!Array.isArray(config4.exclude))
-      throw new Error(`readDenyBuiltinExclude: expected an array of built-in row names (canonical pattern texts), got ${JSON.stringify(config4.exclude)}.`);
-    for (let name of config4.exclude)
-      if (typeof name != "string" || !READ_FACE_BUILTIN_DENY_TABLE.some((r) => r.pattern === name))
-        throw new Error(`readDenyBuiltinExclude: ${JSON.stringify(name)} names no built-in row \u2014 row names are the canonical pattern texts of READ_FACE_BUILTIN_DENY_TABLE (e.g. ".ssh", ".config/gcloud").`);
-    excluded = new Set(config4.exclude);
-  }
-  return READ_FACE_BUILTIN_DENY_TABLE.filter((r) => activeTiers.has(r.tier) && !excluded.has(r.pattern));
-}
-var READ_DENY_BUILTIN_TIERS, READ_FACE_BUILTIN_DENY_TABLE, READ_DENY_DEFAULT_TIERS, READ_FACE_DEFAULT_DENY_ENTRIES, init_read_deny = __esm({
-  "node_modules/@sema-agent/core/dist/tools/fs/read-deny.js"() {
-    READ_DENY_BUILTIN_TIERS = ["credentials", "shell-history", "browser", "wallet", "agent-config"], READ_FACE_BUILTIN_DENY_TABLE = [
-      { pattern: ".ssh", tier: "credentials" },
-      { pattern: "id_rsa*", tier: "credentials" },
-      { pattern: "id_ed25519*", tier: "credentials" },
-      { pattern: "id_ecdsa*", tier: "credentials" },
-      { pattern: ".gnupg", tier: "credentials" },
-      { pattern: ".aws", tier: "credentials" },
-      { pattern: ".config/gcloud", tier: "credentials" },
-      { pattern: ".azure", tier: "credentials" },
-      { pattern: ".kube", tier: "credentials" },
-      { pattern: ".netrc", tier: "credentials" },
-      { pattern: "_netrc", tier: "credentials" },
-      { pattern: ".git-credentials", tier: "credentials" },
-      { pattern: ".docker/config.json", tier: "credentials" },
-      { pattern: ".config/gh", tier: "credentials" },
-      { pattern: ".npmrc", tier: "credentials" },
-      { pattern: ".pypirc", tier: "credentials" },
-      { pattern: ".local/share/keyrings", tier: "credentials" },
-      { pattern: "Library/Keychains", tier: "credentials" },
-      { pattern: ".credentials.json", tier: "credentials" },
-      { pattern: ".codex/auth.json", tier: "credentials" },
-      { pattern: ".config/github-copilot", tier: "credentials" },
-      { pattern: ".gemini/oauth_creds.json", tier: "credentials" },
-      { pattern: ".bash_history", tier: "shell-history" },
-      { pattern: ".zsh_history", tier: "shell-history" },
-      { pattern: "Library/Application Support/Google/Chrome", tier: "browser" },
-      { pattern: "Library/Application Support/Firefox", tier: "browser" },
-      { pattern: "Library/Safari", tier: "browser" },
-      { pattern: ".config/google-chrome", tier: "browser" },
-      { pattern: ".config/chromium", tier: "browser" },
-      { pattern: ".mozilla/firefox", tier: "browser" },
-      { pattern: "AppData/Local/Google/Chrome/User Data", tier: "browser" },
-      { pattern: "AppData/Local/Microsoft/Edge/User Data", tier: "browser" },
-      { pattern: "AppData/Roaming/Mozilla/Firefox", tier: "browser" },
-      { pattern: ".bitcoin", tier: "wallet" },
-      { pattern: ".ethereum", tier: "wallet" },
-      { pattern: ".electrum", tier: "wallet" },
-      { pattern: "Library/Application Support/Exodus", tier: "wallet" },
-      { pattern: "Library/Application Support/Ledger Live", tier: "wallet" },
-      { pattern: "wallet.dat", tier: "wallet" },
-      { pattern: ".sema/settings.json", tier: "agent-config" },
-      { pattern: ".sema/settings.local.json", tier: "agent-config" },
-      { pattern: ".sema.*", tier: "agent-config" },
-      { pattern: ".claude/settings.json", tier: "agent-config" },
-      { pattern: ".claude/settings.local.json", tier: "agent-config" },
-      { pattern: ".claude.*", tier: "agent-config" },
-      { pattern: ".mcp.json", tier: "agent-config" },
-      { pattern: ".ai-agent/.env", tier: "agent-config" },
-      { pattern: ".sema/engine-data/.env", tier: "agent-config" },
-      { pattern: ".codex/config.toml", tier: "agent-config" },
-      { pattern: ".cursor/mcp.json", tier: "agent-config" },
-      { pattern: ".continue/config.json", tier: "agent-config" },
-      { pattern: ".continue/config.yaml", tier: "agent-config" },
-      { pattern: ".aider.conf.yml", tier: "agent-config" },
-      { pattern: ".gemini/settings.json", tier: "agent-config" }
-    ], READ_DENY_DEFAULT_TIERS = [];
-    READ_FACE_DEFAULT_DENY_ENTRIES = resolveReadDenyBuiltins().map((r) => r.pattern);
+    }, FULL_SHELL_FACE_ESCAPE_PROSE = {
+      tool: "Bash",
+      subject: "a path this command names",
+      verdictPhrase: "",
+      note: "The read boundary judged this command's written spelling before the call was approved, and execution is past the approval step \u2014 a target reached only through symlink resolution is refused here rather than escalated."
+    }, MONITOR_ESCAPE_PROSE = { ...FULL_SHELL_FACE_ESCAPE_PROSE, tool: "Monitor" };
   }
 });
 
@@ -155910,7 +156508,7 @@ function ruleLaneShapeOf(command8, reading) {
       names2.push(void 0);
       continue;
     }
-    let floor = parseLeadingCommandName(segment2, { ...RULE_LANE_FLOOR, quotedOperatorsAreText: reading.quotedOperatorsAreText });
+    let floor = parseLeadingCommandName(segment2, RULE_LANE_FLOOR);
     if ("reject" in floor)
       return {
         reject: split.segments.length > 1 ? `the segment "${escapeForDisclosure(segment2.trim())}" is not a single simple command (${floor.reject})` : floor.reject
@@ -156044,7 +156642,7 @@ function admitsUnder(rule, command8, reading) {
   if (rule.match === "exact")
     return folded === rule.command;
   let bodyShape = ruleLaneShapeOf(rule.command, reading);
-  return "reject" in bodyShape || shape.segments.length !== bodyShape.segments.length ? !1 : folded === rule.command || folded.startsWith(rule.command + " ");
+  return "reject" in bodyShape || foldSpacing(rule.command) === void 0 || shape.segments.length !== bodyShape.segments.length ? !1 : folded === rule.command || folded.startsWith(rule.command + " ");
 }
 function ruleBreadthWarningsOf(rule) {
   if (rule.match !== "prefix" && rule.match !== "wildcard")
@@ -156242,7 +156840,10 @@ var RULE_BEHAVIORS, RULE_BEHAVIOR_SET, RULE_BEHAVIOR_PRECEDENCE, RULE_BEHAVIORS_
       "gh search prs",
       "gh search code"
     ], LEXICON_BODIES = SUGGESTION_LEXICON.map((b3) => b3.split(" ")), SCREENED_HEAD_NAMES = new Set([...BARE_INTERPRETER_NAMES].map((n2) => n2.toLowerCase()));
-    RULE_LANE_FLOOR = { pathPrefixedNameIsText: !0 }, MATCH_READING = { terminator: "keep", quotedOperatorsAreText: !1, redirection: "reject" };
+    RULE_LANE_FLOOR = {
+      pathPrefixedNameIsText: !0,
+      quotedOperatorsAreText: !0
+    }, MATCH_READING = { terminator: "keep", redirection: "reject" };
     CONTROL_CHARS_RE = /[\u0000-\u0008\u000A-\u001F\u007F-\u009F\p{Cf}\u2028\u2029]/u, CONTROL_CHARS_GLOBAL_RE = new RegExp(CONTROL_CHARS_RE.source, "gu"), DISCLOSED_RULE_TEXT_MAX_CHARS = 120;
     DISPLAY_STRIP_FORMAT_RE = new RegExp("\\p{Cf}", "gu");
     PATH_RULE_BASE_LABEL = {
@@ -156655,6 +157256,7 @@ var MAX_PENDING_STEER_CHARS, PENDING_STEER_QUEUE_BYTE_BUDGET_BYTES, MAX_PENDING_
     init_permission_rule_model();
     init_untrusted_egress();
     init_ask_question();
+    init_untrusted_text();
     MAX_PENDING_STEER_CHARS = 16e3, PENDING_STEER_QUEUE_BYTE_BUDGET_BYTES = 48e3, MAX_PENDING_STEER_ENTRIES = Math.floor(PENDING_STEER_QUEUE_BYTE_BUDGET_BYTES / MAX_PENDING_STEER_CHARS), CheckpointError = class extends Error {
       code;
       detail;
@@ -158224,10 +158826,19 @@ var init_task_outcome = __esm({
   }
 });
 
+// node_modules/@sema-agent/core/dist/brain/errors.js
+var BRAIN_ERROR_CODES, CODE_ALTERNATION, CODE_RE, CODE_PREFIX_RE, init_errors10 = __esm({
+  "node_modules/@sema-agent/core/dist/brain/errors.js"() {
+    init_thrown_value();
+    BRAIN_ERROR_CODES = ["auth", "rate_limit", "invalid_request", "server", "network", "http", "stream_torn", "refusal", "length_empty"], CODE_ALTERNATION = BRAIN_ERROR_CODES.join("|"), CODE_RE = new RegExp(`^\\[(${CODE_ALTERNATION})\\]`), CODE_PREFIX_RE = new RegExp(`^\\[(?:${CODE_ALTERNATION})\\]\\s*`);
+  }
+});
+
 // node_modules/@sema-agent/core/dist/brain/route-adjudicator.js
 var init_route_adjudicator = __esm({
   "node_modules/@sema-agent/core/dist/brain/route-adjudicator.js"() {
     init_request_params();
+    init_errors10();
   }
 });
 
@@ -158247,14 +158858,6 @@ var SWAPPABLE_DEP_SEATS, SWAPPABLE_DEP_SEAT_SET, init_swappable_deps = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/brain/errors.js
-var BRAIN_ERROR_CODES, CODE_ALTERNATION, CODE_RE, CODE_PREFIX_RE, init_errors10 = __esm({
-  "node_modules/@sema-agent/core/dist/brain/errors.js"() {
-    init_thrown_value();
-    BRAIN_ERROR_CODES = ["auth", "rate_limit", "invalid_request", "server", "network", "http", "stream_torn", "refusal", "length_empty"], CODE_ALTERNATION = BRAIN_ERROR_CODES.join("|"), CODE_RE = new RegExp(`^\\[(${CODE_ALTERNATION})\\]`), CODE_PREFIX_RE = new RegExp(`^\\[(?:${CODE_ALTERNATION})\\]\\s*`);
-  }
-});
-
 // node_modules/@sema-agent/core/dist/brain/circuit-breaker.js
 var init_circuit_breaker = __esm({
   "node_modules/@sema-agent/core/dist/brain/circuit-breaker.js"() {
@@ -160636,6 +161239,7 @@ var MONITOR_DESCRIPTION, init_monitor = __esm({
     init_background_shell();
     init_task_registry();
     init_tool_catalog_entries();
+    init_fs_bash();
     init_thrown_value();
     MONITOR_DESCRIPTION = `Run a shell command in the background and watch its stdout as a stream of events.
 
@@ -163830,11 +164434,13 @@ var ERROR_BODY_BYTE_CAP, init_stream_engine = __esm({
     init_stream_shared();
     init_context_overflow();
     init_errors10();
+    init_route_adjudicator();
     init_input_too_long();
     init_retry();
     init_status_sink();
     init_timeout();
     init_thrown_value();
+    init_untrusted_egress();
     ERROR_BODY_BYTE_CAP = 64 * 1024;
   }
 });
@@ -251285,7 +251891,7 @@ function ruleStoreUnreadableNote(kind) {
 function readRootCandidateNote(v2) {
   if (v2 === void 0) return;
   let dir = elideUntrustedPath(v2.dir, 512);
-  return `candidate read root ${dir} \u2014 if it is a directory, adding it as a session read directory (/add-dir ${dir}) clears this ask`;
+  return v2.covers === "exact" ? `candidate read root ${dir} \u2014 the engine named this exact path, not a directory. This host can only add directories as session read directories, and widening to the enclosing directory would grant more than this ask needs, so there is no one-step way to clear it here: answer this card instead.` : `candidate read root ${dir} \u2014 adding it as a session read directory (/add-dir ${dir}) clears this ask`;
 }
 function askFrameNoteParts(req2, _autoModeRaw) {
   let denial = denialLimitFallbackNote(req2.denialLimitFallback), origin2 = askOriginNote(req2.origin), ruleStore = ruleStoreUnreadableNote(req2.ruleStoreUnreadable), absence = ruleOffersAbsenceNote(req2.ruleOffersAbsence), readRoot = readRootCandidateNote(req2.readRootCandidate);
@@ -251904,10 +252510,17 @@ function planReviewEchoBackoffMs(attempt) {
   let i = Math.min(Math.floor(attempt), PLAN_REVIEW_ECHO_BACKOFF_LADDER.length - 1);
   return PLAN_REVIEW_ECHO_BACKOFF_LADDER[i];
 }
-var openWindows, PLAN_REVIEW_ECHO_BACKOFF_LADDER, PLAN_REVIEW_ECHO_MAX_RETRIES, init_planReviewDecisionWindow = __esm({
+function planReviewEchoDeferral(attempt, deferredSoFarMs) {
+  let spent = Number.isFinite(deferredSoFarMs) && deferredSoFarMs > 0 ? deferredSoFarMs : 0;
+  return spent >= PLAN_REVIEW_ECHO_TOTAL_CAP_MS ? { kind: "fallback" } : { kind: "defer", waitMs: Math.min(planReviewEchoBackoffMs(attempt), PLAN_REVIEW_ECHO_TOTAL_CAP_MS - spent) };
+}
+function shouldSuppressPlanReviewReopen(taskId) {
+  return typeof taskId == "string" && taskId !== "" && openWindows.has(taskId);
+}
+var openWindows, PLAN_REVIEW_ECHO_BACKOFF_LADDER, PLAN_REVIEW_ECHO_TOTAL_CAP_MS, PLAN_REVIEW_ECHO_MAX_RETRIES, init_planReviewDecisionWindow = __esm({
   "build-src/src/sema/planReviewDecisionWindow.ts"() {
     openWindows = /* @__PURE__ */ new Set();
-    PLAN_REVIEW_ECHO_BACKOFF_LADDER = [400, 800, 1600, 3200], PLAN_REVIEW_ECHO_MAX_RETRIES = PLAN_REVIEW_ECHO_BACKOFF_LADDER.length;
+    PLAN_REVIEW_ECHO_BACKOFF_LADDER = [400, 800, 1600, 3200, 6400], PLAN_REVIEW_ECHO_TOTAL_CAP_MS = 6e4, PLAN_REVIEW_ECHO_MAX_RETRIES = PLAN_REVIEW_ECHO_BACKOFF_LADDER.length;
   }
 });
 
@@ -307626,7 +308239,7 @@ function FileEditToolUseRejectedMessage(t0) {
 }
 var import_compiler_runtime38, import_jsx_runtime45, MAX_LINES_TO_RENDER, init_FileEditToolUseRejectedMessage = __esm({
   "build-src/src/components/FileEditToolUseRejectedMessage.tsx"() {
-    import_compiler_runtime38 = __toESM(require_compiler_runtime());
+    import_compiler_runtime38 = __toESM(require_compiler_runtime(), 1);
     init_useTerminalSize();
     init_cwd();
     init_ink2();
@@ -307634,7 +308247,7 @@ var import_compiler_runtime38, import_jsx_runtime45, MAX_LINES_TO_RENDER, init_F
     init_MessageResponse();
     init_StructuredDiffList();
     init_stringUtils();
-    import_jsx_runtime45 = __toESM(require_jsx_runtime()), MAX_LINES_TO_RENDER = 10;
+    import_jsx_runtime45 = __toESM(require_jsx_runtime(), 1), MAX_LINES_TO_RENDER = 10;
   }
 });
 
@@ -357967,10 +358580,12 @@ __export(suspendedAskPort_exports, {
   claimStreamApproval: () => claimStreamApproval,
   forgetSuspendedAsk: () => forgetSuspendedAsk,
   installLiveToolApprovalResponder: () => installLiveToolApprovalResponder,
+  installStreamApprovalOutcomeSink: () => installStreamApprovalOutcomeSink,
   installSuspendedAskTracker: () => installSuspendedAskTracker,
   liveToolApprovalResponder: () => liveToolApprovalResponder,
   noteApprovalsAwaitingDecision: () => noteApprovalsAwaitingDecision,
   noteSeamClientInstalled: () => noteSeamClientInstalled,
+  noteStreamApprovalOutcome: () => noteStreamApprovalOutcome,
   noteSuspendedAskDecided: () => noteSuspendedAskDecided,
   noteSuspendedAskFeedInstalled: () => noteSuspendedAskFeedInstalled,
   noteSuspendedAskSubmitted: () => noteSuspendedAskSubmitted,
@@ -358110,8 +358725,19 @@ function requeueSuspendedAsk(approvalId) {
   } catch {
   }
 }
+function installStreamApprovalOutcomeSink(fn2) {
+  outcomeSink = fn2;
+}
+function noteStreamApprovalOutcome(note) {
+  let sink2 = outcomeSink;
+  if (sink2 !== null)
+    try {
+      sink2(note);
+    } catch {
+    }
+}
 function _resetSuspendedAskPortForTest() {
-  tracker = null, responder = null, claimed.clear(), decided.clear(), requeueUsed.clear(), submitting.clear(), seenInSnapshot.clear(), ledgerOverflowed = !1, installed3 = !1, count3 = null, listeners10.clear(), clientListeners.clear();
+  tracker = null, responder = null, outcomeSink = null, claimed.clear(), decided.clear(), requeueUsed.clear(), submitting.clear(), seenInSnapshot.clear(), ledgerOverflowed = !1, installed3 = !1, count3 = null, listeners10.clear(), clientListeners.clear();
 }
 function emit5() {
   for (let l3 of [...listeners10])
@@ -358120,13 +358746,14 @@ function emit5() {
     } catch {
     }
 }
-var responder, clientListeners, tracker, claimed, decided, requeueUsed, submitting, seenInSnapshot, CLAIM_LEDGER_MAX, ledgerOverflowed, installed3, count3, listeners10, init_suspendedAskPort = __esm({
+var responder, clientListeners, tracker, claimed, decided, requeueUsed, submitting, seenInSnapshot, CLAIM_LEDGER_MAX, ledgerOverflowed, installed3, count3, listeners10, outcomeSink, init_suspendedAskPort = __esm({
   "build-src/src/sema/suspendedAskPort.ts"() {
     responder = null;
     clientListeners = /* @__PURE__ */ new Set();
     tracker = null, claimed = /* @__PURE__ */ new Set(), decided = /* @__PURE__ */ new Set(), requeueUsed = /* @__PURE__ */ new Map(), submitting = /* @__PURE__ */ new Set(), seenInSnapshot = /* @__PURE__ */ new Set(), CLAIM_LEDGER_MAX = 4096;
     ledgerOverflowed = !1;
     installed3 = !1, count3 = null, listeners10 = /* @__PURE__ */ new Set();
+    outcomeSink = null;
   }
 });
 
@@ -358701,11 +359328,11 @@ function RejectedPlanMessage(t0) {
 }
 var import_compiler_runtime106, import_jsx_runtime133, init_RejectedPlanMessage = __esm({
   "build-src/src/components/messages/UserToolResultMessage/RejectedPlanMessage.tsx"() {
-    import_compiler_runtime106 = __toESM(require_compiler_runtime());
+    import_compiler_runtime106 = __toESM(require_compiler_runtime(), 1);
     init_Markdown();
     init_MessageResponse();
     init_ink2();
-    import_jsx_runtime133 = __toESM(require_jsx_runtime());
+    import_jsx_runtime133 = __toESM(require_jsx_runtime(), 1);
   }
 });
 
@@ -395049,6 +395676,79 @@ var HOOK_NOTICE_WARN_KEY, HOOK_NOTICE_WARN_TIMEOUT_MS, HOOK_FAILURE_WARN_KEY, ho
   }
 });
 
+// build-src/src/sema/engineAgentAbsence.ts
+function isAbsentRow(task) {
+  return typeof task != "object" || task === null ? !1 : task._semaAbsence !== void 0;
+}
+function readRowAbsence(task) {
+  if (!(typeof task != "object" || task === null))
+    return task._semaAbsence;
+}
+function markEngineAgentRowAbsent(task, ev) {
+  return task.status !== "running" || task._semaAbsence !== void 0 ? task : {
+    ...task,
+    _semaAbsence: { lastSeenAtMs: ev.lastSeenAtMs, absentForMs: ev.absentForMs },
+    endTime: task.endTime ?? ev.lastSeenAtMs
+  };
+}
+function clearEngineAgentRowAbsence(task) {
+  return task._semaAbsence === void 0 ? task : { ...task, _semaAbsence: void 0, endTime: void 0 };
+}
+function engineAgentAbsenceExpired(task, now2 = Date.now(), ttlMs2 = 18e5) {
+  let absence = readRowAbsence(task);
+  return absence === void 0 ? !1 : now2 - absence.lastSeenAtMs >= ttlMs2;
+}
+function engineAgentAbsenceDroppedLine(label, ttlMs2 = 18e5, removeReason) {
+  let minutes = Math.round(ttlMs2 / 6e4), why = typeof removeReason == "string" && removeReason !== "" ? ` \xB7 the engine removed it from the fleet list (${removeReason}); that is not an outcome \u2014 read the run to settle it` : " \xB7 outcome unknown";
+  return `${label} was dropped from the task panel after ${minutes} min without an engine report${why}`;
+}
+function noteEngineAgentRowRemoved(taskId, removeReason) {
+  if (taskId.length !== 0 && !(typeof removeReason != "string" || removeReason === ""))
+    for (removedRowReasons.set(taskId, removeReason); removedRowReasons.size > REMOVED_ROW_REASON_LEDGER_MAX; ) {
+      let oldest = removedRowReasons.keys().next();
+      if (oldest.done === !0) break;
+      removedRowReasons.delete(oldest.value);
+    }
+}
+function takeEngineAgentRowRemoveReason(taskId) {
+  let reason = removedRowReasons.get(taskId);
+  return reason === void 0 ? null : (removedRowReasons.delete(taskId), reason);
+}
+function engineAgentTerminalAfterDropLine(label, status3, hasReport) {
+  return `${label} reported ${status3} after it was dropped from the task panel${hasReport ? " \xB7 its final report arrived too late to keep in the panel" : ""}`;
+}
+function noteEngineAgentRowReclaimed(taskId, label) {
+  if (taskId.length !== 0)
+    for (reclaimedRows.set(taskId, label.length > 0 ? label : taskId); reclaimedRows.size > RECLAIMED_ROW_LEDGER_MAX; ) {
+      let oldest = reclaimedRows.keys().next();
+      if (oldest.done === !0) break;
+      reclaimedRows.delete(oldest.value);
+    }
+}
+function takeEngineAgentReclaimedRow(taskId) {
+  let label = reclaimedRows.get(taskId);
+  return label === void 0 ? null : (reclaimedRows.delete(taskId), label);
+}
+function reapExpiredEngineAgentAbsences(tasks3, ownedRowIds, now2 = Date.now(), ttlMs2 = 18e5) {
+  let out6 = [];
+  for (let [id, task] of Object.entries(tasks3))
+    ownedRowIds.has(id) && engineAgentAbsenceExpired(task, now2, ttlMs2) && (typeof task == "object" && task !== null && task.retain === !0 || out6.push(id));
+  return out6;
+}
+function expiredButRetainedEngineAgentAbsences(tasks3, ownedRowIds, now2 = Date.now(), ttlMs2 = 18e5) {
+  let out6 = [];
+  for (let [id, task] of Object.entries(tasks3))
+    ownedRowIds.has(id) && engineAgentAbsenceExpired(task, now2, ttlMs2) && typeof task == "object" && task !== null && task.retain === !0 && out6.push(id);
+  return out6;
+}
+var ENGINE_AGENT_ABSENT_ROW_TEXT, REMOVED_ROW_REASON_LEDGER_MAX, removedRowReasons, RECLAIMED_ROW_LEDGER_MAX, reclaimedRows, init_engineAgentAbsence = __esm({
+  "build-src/src/sema/engineAgentAbsence.ts"() {
+    ENGINE_AGENT_ABSENT_ROW_TEXT = "engine no longer reports this agent \xB7 outcome unknown";
+    REMOVED_ROW_REASON_LEDGER_MAX = 256, removedRowReasons = /* @__PURE__ */ new Map();
+    RECLAIMED_ROW_LEDGER_MAX = 256, reclaimedRows = /* @__PURE__ */ new Map();
+  }
+});
+
 // build-src/src/sema/fleetClient.ts
 var fleetClient_exports = {};
 __export(fleetClient_exports, {
@@ -395106,7 +395806,17 @@ function createLiveFleetSource(config4, now2 = Date.now()) {
     // 按档留痕 —— 处置边界与论证见 fleetDurableTerminalOverlay.ts 的 `evidenceTier` 头注
     // (要点:本模块是进程内**呈现**面,不落库/不跨会话搬运/翻行另有一道正交归属门,
     //  故不属包文档划的「有副作用的归属动作」射程)。`rowIds` 本端暂无消费面,显式具名弃用。
-    onBgNotificationAccepted: (n2, _rowIds, evidence) => observeFleetBgNotification(n2, evidence)
+    onBgNotificationAccepted: (n2, _rowIds, evidence) => observeFleetBgNotification(n2, evidence),
+    // ── CC-65(client-core 0.74.0):`task_remove` 帧的**离场读口** ─────────────────────────
+    // 🔴 离场**不是终局证据**(包头注逐字:结算的属主在 durable 侧)⇒ 这一端一个状态都不改、
+    //    一行都不 settle,只把引擎给的**真因**记进缺席台账 —— 「为什么这一行不再上报」此前只能
+    //    落到 TTL 回收那句「outcome unknown」,而引擎其实说过。
+    // 🔴 两形不入账(包给的判别位,壳零自铸):`stale` = 退的是前一代、行根本没被删;
+    //    `unknownRow` = 账本里本来就没这一行(晚连接者收到的退场帧)。把这两形记进去就是拿
+    //    别的事实去解释这一行的缺席。
+    onTaskRemoved: (removal) => {
+      removal.stale === !0 || removal.unknownRow === !0 || noteEngineAgentRowRemoved(removal.id, removal.removeReason);
+    }
   }), lastError = null, disposed4 = !1, client3 = new AgentClient({
     baseUrl: config4.baseUrl,
     authToken: config4.authToken,
@@ -395232,6 +395942,7 @@ var ROW_FILTER, workflowRowObserver, init_fleetClient = __esm({
     init_fleetDurableTerminalOverlay();
     init_footerRowBelt();
     init_hookNoticeStore();
+    init_engineAgentAbsence();
     init_dist();
     ROW_FILTER = (rows3) => filterFooterTaskRows(rows3), workflowRowObserver = null;
     Promise.resolve().then(() => (init_state(), state_exports)).then((m2) => {
@@ -399482,7 +400193,7 @@ async function* query(params) {
             }
         }
       }
-    }, bgTearResends = 0, drainingRetries = 0, planReviewEchoRetries = 0, resumeAtRetried = !1, busySignal = null, readBusySignal = () => busySignal, runningChoiceOffered = !1, runningChoiceSilentWaitTaskId = null, engineFrameSeen = !1, boundRunId, retryStream = !0, interruptedResendDone = !1, pendingInterruptedSettledRow = null, pendingAttachRunId, pendingFollowRow = null;
+    }, bgTearResends = 0, drainingRetries = 0, planReviewEchoRetries = 0, planReviewEchoDeferredMs = 0, resumeAtRetried = !1, busySignal = null, readBusySignal = () => busySignal, runningChoiceOffered = !1, runningChoiceSilentWaitTaskId = null, engineFrameSeen = !1, boundRunId, retryStream = !0, interruptedResendDone = !1, pendingInterruptedSettledRow = null, pendingAttachRunId, pendingFollowRow = null;
     for (; retryStream; ) {
       retryStream = !1, engineFrameSeen = !1, busySignal = null, boundRunId = void 0;
       let attachRunId = pendingAttachRunId;
@@ -399607,18 +400318,18 @@ async function* query(params) {
             activeTaskStatus: detectedBusy.activeTaskStatus,
             pendingGateKind: detectedBusy.pendingGate?.kind ?? null
           };
-          if (submissionOrigin === "injected" && isMainLaneQuerySource(params.querySource) && !signal?.aborted && isStalePlanReviewEcho(planReviewEcho))
-            if (planReviewEchoRetries < PLAN_REVIEW_ECHO_MAX_RETRIES) {
-              let waitMs = planReviewEchoBackoffMs(planReviewEchoRetries);
-              planReviewEchoRetries++, logForDebugging(
-                `[sema][seamQuery] plan-review echo window on run ${String(detectedBusy.activeTaskId)} \u2014 deferring this injected submission ${String(planReviewEchoRetries)}/${String(PLAN_REVIEW_ECHO_MAX_RETRIES)} by ${String(waitMs)}ms instead of racing the decision (L-405)`
-              ), await new Promise((res) => setTimeout(res, waitMs)), signal?.aborted || (retryStream = !0);
+          if (submissionOrigin === "injected" && isMainLaneQuerySource(params.querySource) && !signal?.aborted && isStalePlanReviewEcho(planReviewEcho)) {
+            let deferral = planReviewEchoDeferral(planReviewEchoRetries, planReviewEchoDeferredMs);
+            if (deferral.kind === "defer") {
+              planReviewEchoRetries++, planReviewEchoDeferredMs += deferral.waitMs, logForDebugging(
+                `[sema][seamQuery] plan-review echo window on run ${String(detectedBusy.activeTaskId)} \u2014 deferring this injected submission (attempt ${String(planReviewEchoRetries)}, ${String(deferral.waitMs)}ms, ${String(planReviewEchoDeferredMs)}/${String(PLAN_REVIEW_ECHO_TOTAL_CAP_MS)}ms spent)`
+              ), await new Promise((res) => setTimeout(res, deferral.waitMs)), signal?.aborted || (retryStream = !0);
               continue;
             } else
               logForDebugging(
-                `[sema][seamQuery] plan-review echo window on run ${String(detectedBusy.activeTaskId)} did not clear within ${String(PLAN_REVIEW_ECHO_MAX_RETRIES)} deferrals \u2014 falling through to the existing self-heal leg (L-405)`
+                `[sema][seamQuery] plan-review echo window on run ${String(detectedBusy.activeTaskId)} did not clear within ${String(PLAN_REVIEW_ECHO_TOTAL_CAP_MS)}ms \u2014 falling back to the self-heal lane with plan-review reopen suppressed`
               );
-          else leftPlanReviewGate(planReviewEcho) && clearPlanReviewDecisionWindow(detectedBusy.activeTaskId);
+          } else leftPlanReviewGate(planReviewEcho) && clearPlanReviewDecisionWindow(detectedBusy.activeTaskId);
           let outcome = await attemptActiveRunSelfHeal2(detectedBusy, durableRunVerbs(client), {
             // `hasPendingDecision`(车L 12,原「故意不接」记账销案):真读面 = REPL
             // toolUseConfirmQueue 的模块级长度镜像(leaderPermissionBridge,队列变更 effect
@@ -399642,7 +400353,9 @@ async function* query(params) {
             // `plan-review:<taskId>`,而 REPL overlay 钩子带一个会话级 seenQuestionIds 去重集,
             // 同 id 再发一次会被**静默丢掉** —— 那样「已重新打开审批卡」就成了假话。
             // planReviewReopen 每次铸新身份,决断通路仍是同一个 decidePlanReview wire。
-            reopenPlanReview: reopenPlanReviewCard2,
+            // L-422 守卫:本端刚交过决断且窗没关 ⇒ 拒开(reopened:false),绝不把已决断的门再问一遍;
+            //    窗关(引擎已离开那道门 / 换代 / 清窗)才走真重开口。
+            reopenPlanReview: (tid) => shouldSuppressPlanReviewReopen(tid) ? (logForDebugging(`[sema][seamQuery] plan-review reopen for run ${tid} suppressed \u2014 a decision from this shell is still being applied by the engine`), { reopened: !1 }) : reopenPlanReviewCard2(tid),
             // ask park 的重开口(#155):待决行经 approvals.list 取。结构判定装配 —— client 真有
             // approvals 面(live SDK)才装;mock 车道缺席 ⇒ dep 不装 ⇒ ask-reopen-failed 诚实臂。
             // MED-6(复审):装配门与包 HitlClientLike 的四动词同宽——只校 list 会让「有 list
@@ -401145,66 +401858,6 @@ var init_sanitizeToolResultContent = __esm({
   }
 });
 
-// build-src/src/sema/engineAgentAbsence.ts
-function isAbsentRow(task) {
-  return typeof task != "object" || task === null ? !1 : task._semaAbsence !== void 0;
-}
-function readRowAbsence(task) {
-  if (!(typeof task != "object" || task === null))
-    return task._semaAbsence;
-}
-function markEngineAgentRowAbsent(task, ev) {
-  return task.status !== "running" || task._semaAbsence !== void 0 ? task : {
-    ...task,
-    _semaAbsence: { lastSeenAtMs: ev.lastSeenAtMs, absentForMs: ev.absentForMs },
-    endTime: task.endTime ?? ev.lastSeenAtMs
-  };
-}
-function clearEngineAgentRowAbsence(task) {
-  return task._semaAbsence === void 0 ? task : { ...task, _semaAbsence: void 0, endTime: void 0 };
-}
-function engineAgentAbsenceExpired(task, now2 = Date.now(), ttlMs2 = 18e5) {
-  let absence = readRowAbsence(task);
-  return absence === void 0 ? !1 : now2 - absence.lastSeenAtMs >= ttlMs2;
-}
-function engineAgentAbsenceDroppedLine(label, ttlMs2 = 18e5) {
-  let minutes = Math.round(ttlMs2 / 6e4);
-  return `${label} was dropped from the task panel after ${minutes} min without an engine report \xB7 outcome unknown`;
-}
-function engineAgentTerminalAfterDropLine(label, status3, hasReport) {
-  return `${label} reported ${status3} after it was dropped from the task panel${hasReport ? " \xB7 its final report arrived too late to keep in the panel" : ""}`;
-}
-function noteEngineAgentRowReclaimed(taskId, label) {
-  if (taskId.length !== 0)
-    for (reclaimedRows.set(taskId, label.length > 0 ? label : taskId); reclaimedRows.size > RECLAIMED_ROW_LEDGER_MAX; ) {
-      let oldest = reclaimedRows.keys().next();
-      if (oldest.done === !0) break;
-      reclaimedRows.delete(oldest.value);
-    }
-}
-function takeEngineAgentReclaimedRow(taskId) {
-  let label = reclaimedRows.get(taskId);
-  return label === void 0 ? null : (reclaimedRows.delete(taskId), label);
-}
-function reapExpiredEngineAgentAbsences(tasks3, ownedRowIds, now2 = Date.now(), ttlMs2 = 18e5) {
-  let out6 = [];
-  for (let [id, task] of Object.entries(tasks3))
-    ownedRowIds.has(id) && engineAgentAbsenceExpired(task, now2, ttlMs2) && (typeof task == "object" && task !== null && task.retain === !0 || out6.push(id));
-  return out6;
-}
-function expiredButRetainedEngineAgentAbsences(tasks3, ownedRowIds, now2 = Date.now(), ttlMs2 = 18e5) {
-  let out6 = [];
-  for (let [id, task] of Object.entries(tasks3))
-    ownedRowIds.has(id) && engineAgentAbsenceExpired(task, now2, ttlMs2) && typeof task == "object" && task !== null && task.retain === !0 && out6.push(id);
-  return out6;
-}
-var ENGINE_AGENT_ABSENT_ROW_TEXT, RECLAIMED_ROW_LEDGER_MAX, reclaimedRows, init_engineAgentAbsence = __esm({
-  "build-src/src/sema/engineAgentAbsence.ts"() {
-    ENGINE_AGENT_ABSENT_ROW_TEXT = "engine no longer reports this agent \xB7 outcome unknown";
-    RECLAIMED_ROW_LEDGER_MAX = 256, reclaimedRows = /* @__PURE__ */ new Map();
-  }
-});
-
 // build/stubs/internalLogging.ts
 async function logPermissionContextForAnts(_toolPermissionContext, _moment) {
 }
@@ -426139,11 +426792,11 @@ function AddDirError(t0) {
   ] }), $3[7] = t3, $3[8] = t4, $3[9] = t5) : t5 = $3[9], t5;
 }
 async function call5(onDone, context3, args) {
-  let directoryPath = (args ?? "").trim(), appState = context3.getAppState(), handleAddDirectory = async (path28, remember2 = !1) => {
+  let directoryPath = (args ?? "").trim(), appState = context3.getAppState(), handleAddDirectory = async (path28, remember3 = !1) => {
     let permissionUpdate = {
       type: "addDirectories",
       directories: [path28],
-      destination: remember2 ? "localSettings" : "session"
+      destination: remember3 ? "localSettings" : "session"
     }, latestAppState = context3.getAppState(), updatedContext = applyPermissionUpdate(latestAppState.toolPermissionContext, permissionUpdate);
     context3.setAppState((prev) => ({
       ...prev,
@@ -426152,7 +426805,7 @@ async function call5(onDone, context3, args) {
     let currentDirs = getAdditionalDirectoriesForClaudeMd();
     currentDirs.includes(path28) || setAdditionalDirectoriesForClaudeMd([...currentDirs, path28]), SandboxManager2.refreshConfig(), broadcastRootsListChanged();
     let message;
-    if (remember2) {
+    if (remember3) {
       let persistError = null;
       try {
         persistError = persistPermissionUpdate(permissionUpdate).error;
@@ -429410,23 +430063,20 @@ var sema_brand_default, init_sema_brand = __esm({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.122",
+        version: "1.0.123",
         notes: [
-          "Bundled engine 7.87.3 (core 7.23.2), client runtime 0.73.5 and client SDK 9.7.1; the settings schema stays 2.1.0. /doctor and the engine line report 7.87.3.",
-          "Credentials in an endpoint URL no longer reach the screen, the transcript or the log files. When the engine's own error text or a notice carries the URL it dialled, sema masks the user name, any query values and any fragment before rendering, on every surface: -p text, json and stream-json output, the interactive error row and notice, the /model failure receipt, sema doctor, the session transcript and the error log. Host, port, path and query key names are kept because those are what you need to fix the setting; a successful answer is never touched.",
-          "When both MODEL_GATEWAY_BASEURL and an explicit MODEL_PROVIDER are set and the gateway serves the hop, the line that says so now appears for every kind of model-lane failure (network, request construction, timeout, not only HTTP status codes) and in all three -p output formats. The startup warning and the /status row use the same wording, so the shell no longer says two different things about which setting routes the request. If the engine refuses to start because MODEL_PROVIDER is not one of the accepted values, the shell shows the engine's own refusal line with its machine-readable code, the offending value and the accepted values instead of guessing that the port is in use.",
-          "Background subagents that hit an approval gate now raise their card in the session instead of stalling silently. The footer says how many subagent approvals are waiting on you and shows a dash when the engine does not report it. On engines that do not carry the subagent call's arguments the card says so and no longer offers edit-then-approve.",
-          "Approving a plan no longer makes a second plan-review card appear afterwards.",
-          "Background task panel: a task parked at a pending approval keeps its row through compaction and the row says it is waiting for an approval. Numbers the engine did not report show as a dash instead of 0 (duration, progress), and the usage and queue badges are simply omitted. The workflow size warning no longer vanishes when the total is unknown; it says the size was not reported. When a background agent starts a new cycle its usage and tool counters reset instead of carrying the previous cycle's numbers, and the workflow details header omits the agent count when the details could not be fetched.",
-          "Cancel and submit failures are explained by the engine's own code: a cancel refused because the gate was already decided is worded differently from one where the cancel flag did not attach and can simply be resent, and a submit refused by the deployment's usage window says how long to wait when the engine gives a window and states no number when it does not.",
-          "Interrupted turns now tell you when the engine you were talking to was replaced by another process, not just when the whole instance changed. Cancelling a turn records which engine run it belonged to, so a later resume can ask the engine what happened to it.",
-          "Plugins: installing a plugin whose own plugin.json lists dependencies now installs them too, including plugins that come from a git or npm source. A dependency that cannot be installed automatically is named in the install output instead of being silent. Plugin options that declare a default value work without opening the configuration dialog first; the declared default is used until you set your own.",
-          "sema mcp list and sema mcp get now say why a connection failed (HTTP status text, the remote's own message, endpoint not found, connection refused) instead of a bare Failed to connect; credentials inside that text are masked and, when no reason is available, the row says so. mcp get adds an Issue line under Status for a failing server.",
-          "/context adds a note when the numbers shrank by less than the display's precision, and the read-directory hint on approval cards no longer promises that /add-dir will clear the question when the candidate is a single file."
+          "Bundled engine 7.88.2 (core 7.23.5), client runtime 0.74.3, client SDK 9.8.1 and settings schema 3.0.0. /doctor and the engine line report 7.88.2.",
+          "A background subagent's approval card is withdrawn when the session, the engine or the credentials change, and withdrawing it no longer sends a decision on your behalf. An approval whose answer never reached the engine comes back on the next update instead of after two.",
+          "A background agent that starts a new round now shows that round: its status, timer and counters move together, and a late ending from the previous round no longer closes it. When the engine says why it removed an agent, the panel's cleanup line says so. The same agent no longer shows up as two rows.",
+          "Credentials that a remote echoes back no longer reach the terminal, the streamed output or the saved transcript, including passwords with punctuation and short values. On engine 7.88 and later a gateway URL that carries credentials in its userinfo stops the engine from starting, and sema shows that refusal by name without printing the credentials. 1.0.122 covered the interactive screen, the -p result frame and stderr; the -p transcript and stream-json frames, and punctuated or short secrets, are covered from this version.",
+          "Approving a plan no longer brings a second card even when the engine takes a while to resume.",
+          "The workflow list now says why a failed run failed.",
+          "A read-root suggestion that names a single file no longer tells you to add it as a directory.",
+          "mcp list and mcp get no longer print a password that the server echoed back."
         ]
       },
-      productVersion: "1.0.122",
-      announcement: "sema 1.0.122 \u2014 engine 7.87.3 pickup (core 7.23.2), client runtime 0.73.5, client SDK 9.7.1. Credentials in endpoint URLs are masked on every surface; background subagents raise their approval card instead of stalling; approving a plan no longer brings a second card; the task panel shows a dash for numbers the engine did not report; plugins install their manifest dependencies and honour declared option defaults; mcp list and mcp get say why a connection failed.",
+      productVersion: "1.0.123",
+      announcement: "sema 1.0.123 \u2014 engine 7.88.2 pickup (core 7.23.5), client runtime 0.74.3, client SDK 9.8.1, settings schema 3.0.0. Background subagent approval cards are withdrawn without deciding for you; a revived agent shows its new round; credentials echoed by a remote stay out of the transcript and streamed output; a gateway URL with credentials now stops the engine at startup; approving a plan brings no second card; the workflow list says why a run failed.",
       version: "1.0.91"
     };
   }
@@ -456705,23 +457355,20 @@ var require_sema_brand = __commonJS({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.122",
+        version: "1.0.123",
         notes: [
-          "Bundled engine 7.87.3 (core 7.23.2), client runtime 0.73.5 and client SDK 9.7.1; the settings schema stays 2.1.0. /doctor and the engine line report 7.87.3.",
-          "Credentials in an endpoint URL no longer reach the screen, the transcript or the log files. When the engine's own error text or a notice carries the URL it dialled, sema masks the user name, any query values and any fragment before rendering, on every surface: -p text, json and stream-json output, the interactive error row and notice, the /model failure receipt, sema doctor, the session transcript and the error log. Host, port, path and query key names are kept because those are what you need to fix the setting; a successful answer is never touched.",
-          "When both MODEL_GATEWAY_BASEURL and an explicit MODEL_PROVIDER are set and the gateway serves the hop, the line that says so now appears for every kind of model-lane failure (network, request construction, timeout, not only HTTP status codes) and in all three -p output formats. The startup warning and the /status row use the same wording, so the shell no longer says two different things about which setting routes the request. If the engine refuses to start because MODEL_PROVIDER is not one of the accepted values, the shell shows the engine's own refusal line with its machine-readable code, the offending value and the accepted values instead of guessing that the port is in use.",
-          "Background subagents that hit an approval gate now raise their card in the session instead of stalling silently. The footer says how many subagent approvals are waiting on you and shows a dash when the engine does not report it. On engines that do not carry the subagent call's arguments the card says so and no longer offers edit-then-approve.",
-          "Approving a plan no longer makes a second plan-review card appear afterwards.",
-          "Background task panel: a task parked at a pending approval keeps its row through compaction and the row says it is waiting for an approval. Numbers the engine did not report show as a dash instead of 0 (duration, progress), and the usage and queue badges are simply omitted. The workflow size warning no longer vanishes when the total is unknown; it says the size was not reported. When a background agent starts a new cycle its usage and tool counters reset instead of carrying the previous cycle's numbers, and the workflow details header omits the agent count when the details could not be fetched.",
-          "Cancel and submit failures are explained by the engine's own code: a cancel refused because the gate was already decided is worded differently from one where the cancel flag did not attach and can simply be resent, and a submit refused by the deployment's usage window says how long to wait when the engine gives a window and states no number when it does not.",
-          "Interrupted turns now tell you when the engine you were talking to was replaced by another process, not just when the whole instance changed. Cancelling a turn records which engine run it belonged to, so a later resume can ask the engine what happened to it.",
-          "Plugins: installing a plugin whose own plugin.json lists dependencies now installs them too, including plugins that come from a git or npm source. A dependency that cannot be installed automatically is named in the install output instead of being silent. Plugin options that declare a default value work without opening the configuration dialog first; the declared default is used until you set your own.",
-          "sema mcp list and sema mcp get now say why a connection failed (HTTP status text, the remote's own message, endpoint not found, connection refused) instead of a bare Failed to connect; credentials inside that text are masked and, when no reason is available, the row says so. mcp get adds an Issue line under Status for a failing server.",
-          "/context adds a note when the numbers shrank by less than the display's precision, and the read-directory hint on approval cards no longer promises that /add-dir will clear the question when the candidate is a single file."
+          "Bundled engine 7.88.2 (core 7.23.5), client runtime 0.74.3, client SDK 9.8.1 and settings schema 3.0.0. /doctor and the engine line report 7.88.2.",
+          "A background subagent's approval card is withdrawn when the session, the engine or the credentials change, and withdrawing it no longer sends a decision on your behalf. An approval whose answer never reached the engine comes back on the next update instead of after two.",
+          "A background agent that starts a new round now shows that round: its status, timer and counters move together, and a late ending from the previous round no longer closes it. When the engine says why it removed an agent, the panel's cleanup line says so. The same agent no longer shows up as two rows.",
+          "Credentials that a remote echoes back no longer reach the terminal, the streamed output or the saved transcript, including passwords with punctuation and short values. On engine 7.88 and later a gateway URL that carries credentials in its userinfo stops the engine from starting, and sema shows that refusal by name without printing the credentials. 1.0.122 covered the interactive screen, the -p result frame and stderr; the -p transcript and stream-json frames, and punctuated or short secrets, are covered from this version.",
+          "Approving a plan no longer brings a second card even when the engine takes a while to resume.",
+          "The workflow list now says why a failed run failed.",
+          "A read-root suggestion that names a single file no longer tells you to add it as a directory.",
+          "mcp list and mcp get no longer print a password that the server echoed back."
         ]
       },
-      productVersion: "1.0.122",
-      announcement: "sema 1.0.122 \u2014 engine 7.87.3 pickup (core 7.23.2), client runtime 0.73.5, client SDK 9.7.1. Credentials in endpoint URLs are masked on every surface; background subagents raise their approval card instead of stalling; approving a plan no longer brings a second card; the task panel shows a dash for numbers the engine did not report; plugins install their manifest dependencies and honour declared option defaults; mcp list and mcp get say why a connection failed.",
+      productVersion: "1.0.123",
+      announcement: "sema 1.0.123 \u2014 engine 7.88.2 pickup (core 7.23.5), client runtime 0.74.3, client SDK 9.8.1, settings schema 3.0.0. Background subagent approval cards are withdrawn without deciding for you; a revived agent shows its new round; credentials echoed by a remote stay out of the transcript and streamed output; a gateway URL with credentials now stops the engine at startup; approving a plan brings no second card; the workflow list says why a run failed.",
       version: "1.0.91"
     };
   }
@@ -467420,19 +468067,19 @@ function PermissionRuleList(t0) {
   }
   if (isAddingWorkspaceDirectory) {
     let t222;
-    $3[56] !== setAppState || $3[57] !== toolPermissionContext ? (t222 = (path_0, remember2) => {
+    $3[56] !== setAppState || $3[57] !== toolPermissionContext ? (t222 = (path_0, remember3) => {
       let permissionUpdate = {
         type: "addDirectories",
         directories: [path_0],
-        destination: remember2 ? "localSettings" : "session"
+        destination: remember3 ? "localSettings" : "session"
       }, updatedContext = applyPermissionUpdate(toolPermissionContext, permissionUpdate);
       setAppState((prev_4) => ({
         ...prev_4,
         toolPermissionContext: updatedContext
       }));
       let persistError = null;
-      remember2 && (persistError = persistPermissionUpdate(permissionUpdate).error);
-      let savedSuffix = persistError ? sessionOnlyPersistSuffix("localSettings", persistError) : remember2 ? " and saved to local settings" : " for this session";
+      remember3 && (persistError = persistPermissionUpdate(permissionUpdate).error);
+      let savedSuffix = persistError ? sessionOnlyPersistSuffix("localSettings", persistError) : remember3 ? " and saved to local settings" : " for this session";
       setChanges((prev_5) => [...prev_5, `Added directory ${source_default.bold(path_0)} to workspace${savedSuffix}`]), setIsAddingWorkspaceDirectory(!1);
     }, $3[56] = setAppState, $3[57] = toolPermissionContext, $3[58] = t222) : t222 = $3[58];
     let t232;
@@ -484019,6 +484666,8 @@ function askRetractionRow(cause, toolName2) {
       return `${what} was withdrawn by the engine, so this card was taken down. Nothing was decided on your behalf here.`;
     case "unanswered-after-window":
       return `${what} was still unanswered well after the engine's approval window closed, so this card was taken down to let this turn finish. Nothing was decided on your behalf here. If the engine parked that step it is still waiting in its durable queue \u2014 send a message and sema will re-check what it is waiting on.`;
+    case "host-decision-port-gone":
+      return `${what} was taken down because this session no longer has a way to answer it \u2014 the engine connection or session it belonged to was replaced. Nothing was decided on your behalf here. If the engine is still waiting on that step, send a message and sema will re-check what it is waiting on.`;
     case "durable-reaped":
       return `${what} sat in the engine's durable queue past its deadline, so this card was taken down. The engine reaps rows that pass their deadline; nothing was decided on your behalf here. If the step is still needed, ask for it again.`;
     default:
@@ -484264,7 +484913,7 @@ function shellApprovalCardPort(req2) {
         } catch (e) {
           logForDebugging(`liveToolApprovalWire: could not surface the retraction row: ${String(e)}`);
         }
-        settle3({ kind: "aborted" });
+        settle3({ kind: RETRACTED_CARD_DECISION_KIND, reason: cause });
       }
     }, backstopWindowMs = 0, armBackstopOnce = () => {
       settled2 || askBackstopTimer !== void 0 || isParkRowCard(callKey) || (askBackstopTimer = setTimeout(() => {
@@ -485066,6 +485715,10 @@ async function* consumeStreamApprovalFrames(events3, deps2, opts = {}) {
         logging(`stream-approval ask=${askId} card aborted \u2014 no decision sent`);
         return;
       }
+      if (decision.kind === RETRACTED_CARD_DECISION_KIND) {
+        logging(`stream-approval ask=${askId} card retracted \u2014 no decision sent`);
+        return;
+      }
       if (decision.kind === "failed") {
         logging(`stream-approval ask=${askId} card unavailable (${decision.reason}) \u2014 no decision sent`);
         return;
@@ -485703,6 +486356,7 @@ __export(agentsWire_exports, {
   MAX_AGENT_TOOLS: () => MAX_AGENT_TOOLS,
   MAX_AGENT_TOOL_NAME_CHARS: () => MAX_AGENT_TOOL_NAME_CHARS,
   MAX_GATE_HOPS: () => MAX_GATE_HOPS,
+  MAX_HELD_WIRE_TICK_BEATS: () => MAX_HELD_WIRE_TICK_BEATS,
   MAX_HOOK_NOTICE_TEXT_CHARS: () => MAX_HOOK_NOTICE_TEXT_CHARS,
   MAX_TASK_AGENTS: () => MAX_TASK_AGENTS,
   MAX_TOKENS_MAX: () => MAX_TOKENS_MAX,
@@ -485770,6 +486424,7 @@ __export(agentsWire_exports, {
   RESUME_USAGE_WINDOW_EXHAUSTED: () => RESUME_USAGE_WINDOW_EXHAUSTED,
   RETAIN_BACKGROUND_ENV: () => RETAIN_BACKGROUND_ENV,
   RETIRED_PERMISSION_RULE_ISSUE_CODES: () => RETIRED_PERMISSION_RULE_ISSUE_CODES,
+  RETRACTED_CARD_DECISION_KIND: () => RETRACTED_CARD_DECISION_KIND,
   REVIEW_PARK_GATE_KINDS: () => REVIEW_PARK_GATE_KINDS,
   REWIND_ERROR_CODE_PREFIXES: () => REWIND_ERROR_CODE_PREFIXES,
   RULE_NOT_SENT_REJECTED_WARN_TEXT: () => RULE_NOT_SENT_REJECTED_WARN_TEXT,
@@ -485781,6 +486436,7 @@ __export(agentsWire_exports, {
   RULE_STORE_UNREADABLE_KINDS: () => RULE_STORE_UNREADABLE_KINDS,
   RUNNING_STATES: () => RUNNING_STATES,
   RUN_BLOCKED_MESSAGE_PREFIX: () => RUN_BLOCKED_MESSAGE_PREFIX,
+  RUN_CANCELLED_CODE: () => RUN_CANCELLED_CODE,
   RUN_LEVEL_STOP_ERROR_CODES: () => RUN_LEVEL_STOP_ERROR_CODES,
   RUN_STOPPED_MESSAGE_PREFIX: () => RUN_STOPPED_MESSAGE_PREFIX,
   RUN_TERMINAL_NOT_SUCCESS_STATUSES: () => RUN_TERMINAL_NOT_SUCCESS_STATUSES,
@@ -485872,7 +486528,9 @@ __export(agentsWire_exports, {
   __feedWorkflowActivityFrameForTests: () => __feedWorkflowActivityFrameForTests,
   __resetApprovalsStreamLiveReadingsForTests: () => __resetApprovalsStreamLiveReadingsForTests,
   __resetBgOwnerAbsenceForTests: () => __resetBgOwnerAbsenceForTests,
+  __resetDeviceExecutorManagementReadingsForTests: () => __resetDeviceExecutorManagementReadingsForTests,
   __resetEngineAgentPanelAbsenceForTests: () => __resetEngineAgentPanelAbsenceForTests,
+  __resetEngineAgentPanelIdentityForTests: () => __resetEngineAgentPanelIdentityForTests,
   __resetEngineCapsCacheForTests: () => __resetEngineCapsCacheForTests,
   __resetEngineCompactArmForTests: () => __resetEngineCompactArmForTests,
   __resetEngineDelegatedPromptForTests: () => __resetEngineDelegatedPromptForTests,
@@ -485980,6 +486638,7 @@ __export(agentsWire_exports, {
   classifyMemoryStatusFailure: () => classifyMemoryStatusFailure,
   classifyPeerNotification: () => classifyPeerNotification,
   classifyRulesFailure: () => classifyRulesFailure,
+  classifyRunAbortCause: () => classifyRunAbortCause,
   classifySelfOrchestrationRefusal: () => classifySelfOrchestrationRefusal,
   classifySkippedReason: () => classifySkippedReason,
   classifySubagentResumeFailure: () => classifySubagentResumeFailure,
@@ -485990,6 +486649,7 @@ __export(agentsWire_exports, {
   clearArmedGate: () => clearArmedGate,
   clearBgTerminalFacts: () => clearBgTerminalFacts,
   clearEnginePanelTaskResident: () => clearEnginePanelTaskResident,
+  clearEnginePanelTaskResidentByWire: () => clearEnginePanelTaskResidentByWire,
   clearRunningChoiceOffer: () => clearRunningChoiceOffer,
   clearSubagentContent: () => clearSubagentContent,
   clientContextField: () => clientContextField,
@@ -486024,6 +486684,7 @@ __export(agentsWire_exports, {
   createWireToCcAdapter: () => createWireToCcAdapter,
   decideAcceptedNotResolved: () => decideAcceptedNotResolved,
   decidePlanReview: () => decidePlanReview,
+  decideReceiptReopen: () => decideReceiptReopen,
   decideRefusalFromError: () => decideRefusalFromError,
   decisionNoteAuditLine: () => decisionNoteAuditLine,
   defaultMaxTokensFor: () => defaultMaxTokensFor,
@@ -486040,6 +486701,8 @@ __export(agentsWire_exports, {
   detachedTaskId: () => detachedTaskId,
   detectEngineBgShellReceipt: () => detectEngineBgShellReceipt,
   deviceAuthProviderFor: () => deviceAuthProviderFor,
+  deviceExecutorManagementDoctorDetail: () => deviceExecutorManagementDoctorDetail,
+  deviceManagementVerbsAvailable: () => deviceManagementVerbsAvailable,
   diagnoseSseIdleTear: () => diagnoseSseIdleTear,
   discussionWorkflowName: () => discussionWorkflowName,
   doneToSdkResult: () => doneToSdkResult,
@@ -486109,6 +486772,7 @@ __export(agentsWire_exports, {
   fmtCtxOut: () => fmtCtxOut,
   fmtTokens: () => fmtTokens,
   forgetApprovalsStreamLiveReading: () => forgetApprovalsStreamLiveReading,
+  forgetDeviceExecutorManagementReading: () => forgetDeviceExecutorManagementReading,
   forgetExecutionLaneReading: () => forgetExecutionLaneReading,
   forgetSqlEngineReading: () => forgetSqlEngineReading,
   forgetWebSearchBackendReading: () => forgetWebSearchBackendReading,
@@ -486236,6 +486900,7 @@ __export(agentsWire_exports, {
   isSeatModelCatalog: () => isSeatModelCatalog,
   isSendMessageAck: () => isSendMessageAck,
   isSseIdleError: () => isSseIdleError,
+  isStaleEngineAgentPanelEnd: () => isStaleEngineAgentPanelEnd,
   isSubFlowSegmentEnd: () => isSubFlowSegmentEnd,
   isSupportedCatalogSchemaVersion: () => isSupportedCatalogSchemaVersion,
   isTaskNotificationObjective: () => isTaskNotificationObjective,
@@ -486253,6 +486918,7 @@ __export(agentsWire_exports, {
   isWorkflowCompletionCardEnqueued: () => isWorkflowCompletionCardEnqueued,
   isWorkflowParkRefusalCode: () => isWorkflowParkRefusalCode,
   kickEngineCapsProbe: () => kickEngineCapsProbe,
+  lastFlagValue: () => lastFlagValue,
   leaderConflictDetail: () => leaderConflictDetail,
   limitsForPrint: () => limitsForPrint,
   listAllPersistedRules: () => listAllPersistedRules,
@@ -486296,6 +486962,7 @@ __export(agentsWire_exports, {
   normalizeWirePrincipal: () => normalizeWirePrincipal,
   noteBgOwnerAbsence: () => noteBgOwnerAbsence,
   noteEngineCapsForApprovalsStreamLive: () => noteEngineCapsForApprovalsStreamLive,
+  noteEngineCapsForDeviceExecutorManagement: () => noteEngineCapsForDeviceExecutorManagement,
   noteEngineCapsForExecutionLane: () => noteEngineCapsForExecutionLane,
   noteEngineCapsForSqlEngine: () => noteEngineCapsForSqlEngine,
   noteEngineCapsForWebSearchBackend: () => noteEngineCapsForWebSearchBackend,
@@ -486310,6 +486977,7 @@ __export(agentsWire_exports, {
   notificationQueuePortMisses: () => notificationQueuePortMisses,
   observeCancelByDeny: () => observeCancelByDeny,
   observedApprovalsStreamLive: () => observedApprovalsStreamLive,
+  observedDeviceExecutorManagement: () => observedDeviceExecutorManagement,
   observedExecutionLane: () => observedExecutionLane,
   observedSqlEngine: () => observedSqlEngine,
   observedWebSearchBackend: () => observedWebSearchBackend,
@@ -486377,6 +487045,7 @@ __export(agentsWire_exports, {
   projectBackgroundView: () => projectBackgroundView,
   projectCrashConverged: () => projectCrashConverged,
   projectDescription: () => projectDescription,
+  projectDeviceExecutorManagementCapability: () => projectDeviceExecutorManagementCapability,
   projectDiagnosticsFrame: () => projectDiagnosticsFrame,
   projectEffectiveBody: () => projectEffectiveBody,
   projectExecutionLaneCapability: () => projectExecutionLaneCapability,
@@ -486440,6 +487109,7 @@ __export(agentsWire_exports, {
   readRuleOfferSupply: () => readRuleOfferSupply,
   readRuleOffers: () => readRuleOffers,
   readRulePersistOutcome: () => readRulePersistOutcome,
+  readRunCancelContext: () => readRunCancelContext,
   readRunCostFacts: () => readRunCostFacts,
   readRunTerminal: () => readRunTerminal,
   readSessionMemoryStatus: () => readSessionMemoryStatus,
@@ -486483,6 +487153,7 @@ __export(agentsWire_exports, {
   resetWorkflowActivityLedgers: () => resetWorkflowActivityLedgers,
   resolveAutonomousLoopPrompt: () => resolveAutonomousLoopPrompt,
   resolveCatalogSources: () => resolveCatalogSources,
+  resolveEnginePanelTaskId: () => resolveEnginePanelTaskId,
   resolveEntryVision: () => resolveEntryVision,
   resolveHeadlessDetach: () => resolveHeadlessDetach,
   resolveHeadlessFinalVerify: () => resolveHeadlessFinalVerify,
@@ -486588,6 +487259,7 @@ __export(agentsWire_exports, {
   surfaceRuleArmRejected: () => surfaceRuleArmRejected,
   surfaceSuspendedAskAndRespond: () => surfaceSuspendedAskAndRespond,
   surfaceToolApprovalFrameAndRespond: () => surfaceToolApprovalFrameAndRespond,
+  suspendedReopenOf: () => suspendedReopenOf,
   suspendedSubagentAsks: () => suspendedSubagentAsks,
   tailEngineSubagent: () => tailEngineSubagent,
   taskAgentsField: () => taskAgentsField,
@@ -486829,6 +487501,13 @@ var init_approvalsStreamLiveCapability2 = __esm({
   }
 });
 
+// build-src/src/sema/deviceExecutorManagementCapability.ts
+var init_deviceExecutorManagementCapability2 = __esm({
+  "build-src/src/sema/deviceExecutorManagementCapability.ts"() {
+    init_dist();
+  }
+});
+
 // build-src/src/sema/engineCapsArm.ts
 function beginCapsTeeEpoch(baseUrl) {
   let next = (capsTeeEpochByBase.get(baseUrl) ?? 0) + 1;
@@ -486856,7 +487535,7 @@ function armEngineCapsProbes(input) {
       });
     } : capsProbe;
     if (afterEngineRespawn) {
-      resetCapsDiscoveryState(baseUrl), invalidateSelfKnowledgeCap(baseUrl), forgetSqlEngineReading(baseUrl), forgetWriteProtectionReading(baseUrl), forgetWebSearchBackendReading(baseUrl), forgetExecutionLaneReading(baseUrl), forgetApprovalsStreamLiveReading(baseUrl), forgetWiringManifestReading(), forgetClassifierRoundObservation(), forgetEffectiveTurnFacts(), kickAppendSystemPromptCapProbe(baseUrl, appendCapProbe), invalidateEngineCaps(baseUrl, guardedCapsProbe);
+      resetCapsDiscoveryState(baseUrl), invalidateSelfKnowledgeCap(baseUrl), forgetSqlEngineReading(baseUrl), forgetWriteProtectionReading(baseUrl), forgetWebSearchBackendReading(baseUrl), forgetExecutionLaneReading(baseUrl), forgetApprovalsStreamLiveReading(baseUrl), forgetDeviceExecutorManagementReading(baseUrl), forgetWiringManifestReading(), forgetClassifierRoundObservation(), forgetEffectiveTurnFacts(), kickAppendSystemPromptCapProbe(baseUrl, appendCapProbe), invalidateEngineCaps(baseUrl, guardedCapsProbe);
       return;
     }
     kickAppendSystemPromptCapProbe(baseUrl, appendCapProbe), kickEngineCapsProbe(baseUrl, guardedCapsProbe);
@@ -486873,6 +487552,7 @@ var capsTeeEpochByBase, init_engineCapsArm = __esm({
     init_webSearchBackendCapability2();
     init_executionLaneCapability2();
     init_approvalsStreamLiveCapability2();
+    init_deviceExecutorManagementCapability2();
     init_wiringManifestStore();
     init_classifierRoundObservation();
     init_effectiveTurnFactsStore();
@@ -487460,7 +488140,7 @@ function createLiveConversationClient(config4) {
     capsTee: (caps, generation2) => {
       noteEngineCapsForMcpGate(config4.baseUrl, caps), noteEngineCapsForSessionBackground(config4.baseUrl, caps), noteEngineCapsForProjectContext(config4.baseUrl, caps), readCrashConvergedOnce(client3, config4.baseUrl, { principal: config4.principal }), noteEngineCapsForWorkflowsGate(config4.baseUrl, caps, {
         ...typeof config4.principal == "string" ? { principal: config4.principal } : {}
-      }), noteEngineCapsForSqlEngine(config4.baseUrl, caps, { generation: generation2 }), noteEngineCapsForWriteProtection(config4.baseUrl, caps, { generation: generation2 }), noteEngineCapsForWebSearchBackend(config4.baseUrl, caps, { generation: generation2 }), noteEngineCapsForExecutionLane(config4.baseUrl, caps, { generation: generation2 }), noteEngineCapsForApprovalsStreamLive(config4.baseUrl, caps, { generation: generation2 });
+      }), noteEngineCapsForSqlEngine(config4.baseUrl, caps, { generation: generation2 }), noteEngineCapsForWriteProtection(config4.baseUrl, caps, { generation: generation2 }), noteEngineCapsForWebSearchBackend(config4.baseUrl, caps, { generation: generation2 }), noteEngineCapsForExecutionLane(config4.baseUrl, caps, { generation: generation2 }), noteEngineCapsForApprovalsStreamLive(config4.baseUrl, caps, { generation: generation2 }), noteEngineCapsForDeviceExecutorManagement(config4.baseUrl, caps, { generation: generation2 });
     },
     afterEngineRespawn: config4.afterEngineRespawn === !0
   }), prepareTaskAgentsWire({
@@ -487568,6 +488248,24 @@ function createLiveConversationClient(config4) {
           //    但显式 false 让「这条腿判过了」在 diff 与 census 上可见,不与「忘了传」同形)。
           windowIsCurrent
         };
+      },
+      // ── CC-68(client-core 0.74.1):流内帧腿的**结局回交** ───────────────────────────────
+      // 包每次 `tool_approval` 帧经卡口决断后恰调一次(撤卡也回交)。壳这一端**只转交**,一条
+      // 判定都不铸:「落没落定」由包答(`decision === 'unresolved'`),放不放认领 / 重不重出卡
+      // 由悬挂 ask 装配件的既有有界预算腿答。
+      // 🔴 为什么非它不可:帧腿在**出卡之前**就永久认领了这只 ask,而它那一发 respond 失败时壳
+      //    这一侧此前看不到 —— 只能靠「连续两张快照都看到已认领∧没决断∧台账无活卡」这条间接
+      //    判据把认领放回去(秒级两拍里审批入口是空的)。缺席 = 退回那条间接判据,零变化。
+      onToolApprovalOutcome: (frame, outcome) => {
+        let detail = outcome.retracted === !0 ? "the card was retracted (this host no longer has a decision port for it)" : outcome.editRefused === !0 ? "edits are not accepted on this card" : [outcome.respondRefusal?.errorCode, outcome.respondRefusal?.message].filter((x3) => typeof x3 == "string" && x3 !== "").join(" \xB7 ");
+        noteStreamApprovalOutcome({
+          approvalId: frame.approvalId,
+          settled: outcome.decision !== "unresolved",
+          // 🔴 判别位**原样过境**(不折进 detail 文本):撤卡 = 本端主动放手,与「引擎不收」在
+          //    `settled` 上同形却**不同义** —— 端口那一侧要靠它决定「释放认领但不扣重出卡预算」。
+          ...outcome.retracted === !0 ? { retracted: !0 } : {},
+          ...detail === "" ? {} : { detail }
+        });
       }
     };
   }, approvalStreamDeps = {
@@ -487864,6 +488562,7 @@ var ENGINE_TO_CC_TOOL, SUGGESTIONS_TAIL_MAX_ATTEMPTS, SUGGESTIONS_TAIL_RETRY_MS,
     init_webSearchBackendCapability2();
     init_executionLaneCapability2();
     init_approvalsStreamLiveCapability2();
+    init_deviceExecutorManagementCapability2();
     init_suspendedAskPort();
     init_liveApprovalCardHandles();
     init_debugLine();
@@ -490710,7 +491409,7 @@ function workflowParts(wf) {
     { text: wf.doneCount !== void 0 && wf.totalCount !== void 0 ? `${wf.doneCount}/${wf.totalCount} agents done${failedSeg}` : `${ABSENT_NUMBER_TEXT} agents done${failedSeg}` },
     { text: wf.elapsedMs !== void 0 ? fmtDur2(Math.max(0, wf.elapsedMs)) : ABSENT_NUMBER_TEXT }
   ];
-  wf.tokens !== void 0 && wf.tokens > 0 && segments.push({ text: `${ARROW_DOWN} ${fmtTokens3(wf.tokens)} tokens` });
+  wf.tokens !== void 0 && wf.tokens > 0 && segments.push({ text: `${ARROW_DOWN} ${fmtTokens3(wf.tokens)} tokens` }), typeof wf.errorCode == "string" && wf.errorCode !== "" && segments.push({ text: cleanUntrustedForDisplay(wf.errorCode, 48), warn: !0 });
   let bulletColor = isTerminal2(wf.status) ? statusColor(wf.status) : wf.failedCount !== void 0 && wf.failedCount > 0 ? "error" : void 0;
   return {
     name: wf.name,
@@ -491177,6 +491876,7 @@ var React127, import_react205, import_jsx_runtime364, F_POINTER2, F_CIRCLE, G_VI
     init_format2();
     init_AppState();
     init_appStateRef();
+    init_untrustedDisplayText();
     init_engineAgentView();
     init_subagentStatusLine();
     init_workflowSizeWarning2();
@@ -501214,7 +501914,8 @@ var RENDERED_UUID_PREFIX_LEN, init_rewindArm = __esm({
 
 // build-src/src/sema/fleetRowCycleProjection.ts
 function launchAnchorChanged2(existing, ev) {
-  return typeof ev.startedAt != "number" || !Number.isFinite(ev.startedAt) || existing.startTimeFromWire !== !0 || typeof existing.startTime != "number" || !Number.isFinite(existing.startTime) ? !1 : existing.startTime !== ev.startedAt;
+  let seqOf = (n2) => typeof n2 == "number" && Number.isFinite(n2) ? n2 : void 0, evSeq = seqOf(ev.cycleSeq), rowSeq = seqOf(existing.cycleSeq);
+  return evSeq !== void 0 && rowSeq !== void 0 ? evSeq !== rowSeq : typeof ev.startedAt != "number" || !Number.isFinite(ev.startedAt) || existing.startTimeFromWire !== !0 || typeof existing.startTime != "number" || !Number.isFinite(existing.startTime) ? !1 : existing.startTime !== ev.startedAt;
 }
 function progressAfterFleetRowFrame(existing, ev) {
   let num = (n2) => typeof n2 == "number" && Number.isFinite(n2), prior = launchAnchorChanged2(existing, ev) ? void 0 : existing.progress, toolUseCount = num(ev.toolUses) ? ev.toolUses : prior?.toolUseCount, tokenCount = num(ev.totalTokens) && (ev.totalTokens > 0 || num(ev.toolUses)) ? ev.totalTokens : prior?.tokenCount;
@@ -501307,6 +502008,13 @@ var import_compiler_runtime244, React132, import_jsx_runtime375, init_Coordinato
 function useCoordinatorTaskCount() {
   return fleetFooterTaskCount(useFleetFooterRows());
 }
+function noteFleetRowCycleIdentity(taskId, next) {
+  if (fleetRowCycleIdentities.delete(taskId), fleetRowCycleIdentities.set(taskId, next), !(fleetRowCycleIdentities.size <= FLEET_ROW_CYCLE_LEDGER_MAX))
+    for (let key of [...fleetRowCycleIdentities.keys()]) {
+      if (fleetRowCycleIdentities.size <= FLEET_ROW_CYCLE_LEDGER_MAX) break;
+      key === taskId || engineOwnedRowIds.has(key) || fleetRowCycleIdentities.delete(key);
+    }
+}
 function useEngineAgentPanelBridge(setAppState) {
   let ownedRows = engineOwnedRowIds, reapAbsentRows = React133.useCallback(() => {
     let reaped = [];
@@ -501321,7 +502029,10 @@ function useEngineAgentPanelBridge(setAppState) {
       return { ...prev, tasks: nextTasks };
     });
     for (let r of reaped) {
-      noteEngineAgentRowReclaimed(r.id, r.label), ownedRows.delete(r.id), fleetOwnedRowIds.delete(r.id), tickLaneRowIds.delete(r.id), queueTranscriptSystemNotice(engineAgentAbsenceDroppedLine(r.label), "info");
+      noteEngineAgentRowReclaimed(r.id, r.label), ownedRows.delete(r.id), fleetOwnedRowIds.delete(r.id), fleetRowCycleIdentities.delete(r.id), tickLaneRowIds.delete(r.id), queueTranscriptSystemNotice(
+        engineAgentAbsenceDroppedLine(r.label, 18e5, takeEngineAgentRowRemoveReason(r.id)),
+        "info"
+      );
       let pending4 = absenceReapTimers.get(r.id);
       pending4 !== void 0 && (clearTimeout(pending4), absenceReapTimers.delete(r.id));
     }
@@ -501417,7 +502128,19 @@ function useEngineAgentPanelBridge(setAppState) {
           return { ...prev, tasks: { ...prev.tasks, [ev.taskId]: row2 } };
         }), seedEngineAgentTranscript(setAppState, ev.taskId);
       else if (ev.kind === "fleet-row") {
-        if (tickLaneRowIds.has(ev.taskId)) {
+        let priorCycle = fleetRowCycleIdentities.get(ev.taskId);
+        (ev.cycleSeq !== void 0 || ev.startedAt !== void 0) && noteFleetRowCycleIdentity(ev.taskId, {
+          ...ev.cycleSeq !== void 0 ? { cycleSeq: ev.cycleSeq } : {},
+          ...ev.startedAt !== void 0 ? { startedAt: ev.startedAt } : {}
+        });
+        let withPriorCycle = (existing) => priorCycle?.cycleSeq === void 0 ? existing : { ...existing, cycleSeq: priorCycle.cycleSeq };
+        if (launchAnchorChanged2(
+          {
+            ...priorCycle?.startedAt !== void 0 ? { startTime: priorCycle.startedAt, startTimeFromWire: !0 } : {},
+            ...priorCycle?.cycleSeq !== void 0 ? { cycleSeq: priorCycle.cycleSeq } : {}
+          },
+          ev
+        ) && tickLaneRowIds.delete(ev.taskId), tickLaneRowIds.has(ev.taskId)) {
           updateTaskState(ev.taskId, setAppState, clearEngineAgentRowAbsence);
           return;
         }
@@ -501427,13 +502150,13 @@ function useEngineAgentPanelBridge(setAppState) {
           let existing = prev.tasks[ev.taskId];
           if (existing) {
             if (!isLocalAgentTask2(existing)) return prev;
-            let revived = launchAnchorChanged2(existing, ev);
-            if (!revived && (existing.status !== "running" || !fleetOwnedRowIds.has(ev.taskId)))
+            let revived = launchAnchorChanged2(withPriorCycle(existing), ev);
+            if (revived && fleetOwnedRowIds.add(ev.taskId), !revived && (existing.status !== "running" || !fleetOwnedRowIds.has(ev.taskId)))
               return prev;
             let absenceCleared = isAbsentRow(existing), tokensChanged = ev.totalTokens !== void 0 && existing.progress?.tokenCount !== ev.totalTokens, toolUsesChanged = ev.toolUses !== void 0 && existing.progress?.toolUseCount !== ev.toolUses, startChanged = ev.startedAt !== void 0 && existing.startTime !== ev.startedAt;
             if (!tokensChanged && !toolUsesChanged && !startChanged && !absenceCleared && !revived)
               return prev;
-            let mergedProgress = progressAfterFleetRowFrame(existing, ev), next = {
+            let mergedProgress = progressAfterFleetRowFrame(withPriorCycle(existing), ev), next = {
               ...existing,
               // 回来了 ⇒ 清缺席位 + 撤停表(endTime 是 absent 臂为了停表落的猜测值,不是终局钟;
               // 行还在跑,留着它 elapsed 就永远冻在缺席那一刻)。
@@ -501447,11 +502170,25 @@ function useEngineAgentPanelBridge(setAppState) {
               //       删掉 fleetOwnedRowIds,活着的任务显示完成还可能被回收。那比「数字是旧的」严重一个量级。
               //    ② [medium] 清 `result` 拦不住上一周期**在飞**的终报回填(`engineAgentView` 的异步回写
               //       只核行类型与「有没有 report」,不核周期)—— 清了也会被旧响应重新写回来。
-              //    ⇒ 两条的根治都要上游给终态事件一个**周期身份**(已记进车 P 回执的上游缺口段)。
-              //       在那之前,壳这一层只做证得出来的那一件:把**说了假话的那两个数**拿掉。
-              //    ⚠️ 留下的残留(如实记,已进 KNOWN-LIMITS):复活后的行在 grace 窗内仍显示上一轮的终态词,
-              //       数字已清;`evictAfter` 到期回收之后,下一帧走新行分支建一条干净的行 —— 窗有界(30 s)。
-              ...revived ? { progress: void 0, _semaAbsence: void 0 } : {},
+              //    ⇒ 两条的根治都要上游给终态事件一个**周期身份**。
+              //
+              // ── 🔴 1.0.123:那个根治到货了(client-core 0.74.0 CC-66)───────────────────────
+              //    `fleet-row` 与 `end` 都带 `cycleSeq` / `startedAt`,单源判据 `isStaleEngineAgentPanelEnd`
+              //    在 end 臂把「上一周期迟到的那只」挡掉(见下方 end 分支)⇒ ① 的理由不成立了。
+              //    ⇒ 复活**把状态整只翻回 running**:清终态词 / 撤停表(endTime)/ 撤回收期限(evictAfter)/
+              //      撤上一轮的终报(result),数字照旧整段清。只清数字不翻状态的那一版会让复活后的行在
+              //      grace 窗里挂着上一轮的终态词(旧 KNOWN-LIMITS 条目,本版随之删除)。
+              //    🔴 ② 那条残余(上一周期**在飞**的终报异步回填)不在本件射程内:它走的是
+              //      `engineAgentView` 的异步回写、不经这条 `end` 臂 —— 记在回执的上游缺口段,不在这里
+              //      靠猜去挡(挡错了会把**本轮**的真终报丢掉)。
+              ...revived ? {
+                progress: void 0,
+                _semaAbsence: void 0,
+                status: "running",
+                endTime: void 0,
+                evictAfter: void 0,
+                result: void 0
+              } : {},
               ...startChanged ? { startTime: ev.startedAt, startTimeFromWire: !0 } : {},
               // 🔴 三态 + 换周期(server 1.278.0 / L-401):
               //   · 同周期、有键 ⇒ 赋真值(**累计口径**,绝不 `+=`;真 0 也照写 0);
@@ -501513,6 +502250,16 @@ function useEngineAgentPanelBridge(setAppState) {
           );
         }
       } else if (ev.kind === "end") {
+        let endCycle = {
+          ...ev.cycleSeq !== void 0 ? { cycleSeq: ev.cycleSeq } : {},
+          ...ev.startedAt !== void 0 ? { startedAt: ev.startedAt } : {}
+        };
+        if (isStaleEngineAgentPanelEnd(endCycle, fleetRowCycleIdentities.get(ev.taskId))) {
+          logForDebugging(
+            `[sema][enginePanel] ignoring a stale end for ${ev.taskId} \u2014 it belongs to an earlier cycle than the row's current one (not settling, not writing the report, not dropping ownership)`
+          );
+          return;
+        }
         let droppedLabel = takeEngineAgentReclaimedRow(ev.taskId);
         if (droppedLabel !== null && queueTranscriptSystemNotice(
           engineAgentTerminalAfterDropLine(
@@ -501614,7 +502361,7 @@ function useEngineBgShellPanelBridge(setAppState) {
     [setAppState]
   );
 }
-var React133, import_jsx_runtime376, fleetOwnedRowIds, tickLaneRowIds, absenceReapTimers, RETAINED_ABSENCE_RECHECK_MS, init_chrome_agentprogress = __esm({
+var React133, import_jsx_runtime376, fleetOwnedRowIds, tickLaneRowIds, absenceReapTimers, fleetRowCycleIdentities, FLEET_ROW_CYCLE_LEDGER_MAX, RETAINED_ABSENCE_RECHECK_MS, init_chrome_agentprogress = __esm({
   "build-src/src/sema/overrides/chrome-agentprogress.tsx"() {
     React133 = __toESM(require_react(), 1);
     init_figures();
@@ -501645,7 +502392,8 @@ var React133, import_jsx_runtime376, fleetOwnedRowIds, tickLaneRowIds, absenceRe
     init_engineSubagentTail2();
     init_CoordinatorAgentStatus();
     import_jsx_runtime376 = __toESM(require_jsx_runtime(), 1);
-    fleetOwnedRowIds = /* @__PURE__ */ new Set(), tickLaneRowIds = /* @__PURE__ */ new Set(), absenceReapTimers = /* @__PURE__ */ new Map(), RETAINED_ABSENCE_RECHECK_MS = 6e4;
+    fleetOwnedRowIds = /* @__PURE__ */ new Set(), tickLaneRowIds = /* @__PURE__ */ new Set(), absenceReapTimers = /* @__PURE__ */ new Map(), fleetRowCycleIdentities = /* @__PURE__ */ new Map(), FLEET_ROW_CYCLE_LEDGER_MAX = 512;
+    RETAINED_ABSENCE_RECHECK_MS = 6e4;
   }
 });
 
@@ -562986,7 +563734,7 @@ Usage: sema --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("sema 1.0.122", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
+  }).version("sema 1.0.123", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).psHandler([]), process.exit(process.exitCode ?? 0);
   }), program2.command("logs [id]").description("Print a background session's recent terminal output").action(async (id) => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).logsHandler(id, []), process.exit(process.exitCode ?? 0);
@@ -564950,7 +565698,7 @@ __export(suspendedSubagentAskWire_exports, {
   startSuspendedSubagentAskWire: () => startSuspendedSubagentAskWire
 });
 function startSuspendedSubagentAskWire(opts) {
-  let surface = opts.deps?.surface ?? surfaceSuspendedAskAndRespond, retract = opts.deps?.retract ?? ((callKey) => retractApprovalCard(callKey, "settled-elsewhere")), notify5 = opts.deps?.notify ?? ((text2) => {
+  let surface = opts.deps?.surface ?? surfaceSuspendedAskAndRespond, retract = opts.deps?.retract ?? ((callKey, cause) => retractApprovalCard(callKey, cause)), notify5 = opts.deps?.notify ?? ((text2) => {
     surfaceTranscriptSystemNotice(text2, "warning");
   }), startFeed = opts.deps?.startFeed ?? startApprovalsFeed, sessionId = opts.sessionId(), tracker2 = createSuspendedAskTracker({ ...spreadSessionId(sessionId) });
   installSuspendedAskTracker(tracker2), noteSuspendedAskFeedInstalled(!0);
@@ -564993,7 +565741,7 @@ function startSuspendedSubagentAskWire(opts) {
     for (let id of [...orphanStreak.keys()]) liveIds.has(id) || orphanStreak.delete(id);
     noteSuspendedAsksListed(liveIds), pruneVanishedSuspendedAsks(liveIds);
     for (let approvalId of delta.gone)
-      openCards.delete(approvalId), orphanStreak.delete(approvalId), forgetSuspendedAsk(approvalId), retract(liveFrameCallKey(approvalId)) && (stats3.retracted += 1);
+      openCards.delete(approvalId), orphanStreak.delete(approvalId), forgetSuspendedAsk(approvalId), retract(liveFrameCallKey(approvalId), "settled-elsewhere") && (stats3.retracted += 1);
     for (let row2 of delta.upgraded)
       stats3.upgraded += 1, logForDebugging(
         `[sema][suspendedAsk] ${row2.approvalId} upgraded to a full frame after a blind card was already shown \u2014 leaving the shown card as-is (no in-place args refresh on this host)`
@@ -565010,6 +565758,12 @@ function startSuspendedSubagentAskWire(opts) {
           ), retryLater(row2.approvalId, "edits are not accepted on this card");
           return;
         }
+        if (outcome.retracted === !0) {
+          requeueSuspendedAsk(row2.approvalId), orphanStreak.delete(row2.approvalId), logForDebugging(
+            `[sema][suspendedAsk] ${row2.approvalId} card was retracted without a decision (this host let go of it) \u2014 claim released, re-surfaceable, no re-surface budget consumed`
+          );
+          return;
+        }
         if (outcome.decision === "unresolved") {
           let refused = outcome.respondRefusal, detail = refused === void 0 ? "the engine did not confirm it" : [refused.errorCode, refused.message].filter((x3) => typeof x3 == "string" && x3 !== "").join(" \xB7 ");
           retryLater(row2.approvalId, detail === "" ? "the engine did not confirm it" : detail);
@@ -565028,7 +565782,23 @@ function startSuspendedSubagentAskWire(opts) {
       return;
     }
     stats3.requeued += 1, logForDebugging(`[sema][suspendedAsk] ${approvalId} did not settle (${why}) \u2014 re-surfacing it`), requeueSuspendedAsk(approvalId);
-  }, feed = null;
+  };
+  installStreamApprovalOutcomeSink((note) => {
+    if (!stopped) {
+      if (note.settled) {
+        noteSuspendedAskDecided(note.approvalId), orphanStreak.delete(note.approvalId), openCards.delete(note.approvalId);
+        return;
+      }
+      if (openCards.delete(note.approvalId), orphanStreak.delete(note.approvalId), note.retracted === !0) {
+        requeueSuspendedAsk(note.approvalId), logForDebugging(
+          `[sema][suspendedAsk] ${note.approvalId} stream-leg card was retracted without a decision \u2014 claim released, re-surfaceable, no re-surface budget consumed`
+        );
+        return;
+      }
+      retryLater(note.approvalId, note.detail ?? "the engine did not confirm it");
+    }
+  });
+  let feed = null;
   try {
     feed = startFeed(opts.client, onSnapshot, {
       reconcile: {
@@ -565049,8 +565819,11 @@ function startSuspendedSubagentAskWire(opts) {
         } catch {
         }
         openCards.size > 0 && logForDebugging(
-          `[sema][suspendedAsk] teardown with ${String(openCards.size)} card(s) still on screen \u2014 leaving them up on purpose (retracting them would post a deny the user never chose)`
-        ), openCards.clear(), installSuspendedAskTracker(null), noteSuspendedAskFeedInstalled(!1);
+          `[sema][suspendedAsk] teardown with ${String(openCards.size)} card(s) still on screen \u2014 retracting them (this host no longer has a decision port for them; CC-67 retraction sends nothing)`
+        );
+        for (let approvalId of [...openCards])
+          retract(liveFrameCallKey(approvalId), "host-decision-port-gone") && (stats3.retracted += 1);
+        openCards.clear(), installStreamApprovalOutcomeSink(null), installSuspendedAskTracker(null), noteSuspendedAskFeedInstalled(!1);
       }
     },
     stats: () => ({ ...stats3 })