@sema-agent/cli 1.0.122 → 1.0.124

package/sema-main.js

@@ -4320,6 +4320,29 @@ var init_unrefTimer = __esm({
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/panelRunningHistory.js
+function notePanelRowRunning(taskId) {
+  if (!ids.has(taskId) && (ids.add(taskId), ids.size > 4096)) {
+    overflowed = !0;
+    let oldest = ids.values().next().value;
+    oldest !== void 0 && ids.delete(oldest);
+  }
+}
+function retirePanelRowRunning(taskId) {
+  ids.delete(taskId);
+}
+function panelRowNeverPublishedRunning(taskId) {
+  return !overflowed && !ids.has(taskId);
+}
+function __resetPanelRunningHistoryForTests() {
+  ids.clear(), overflowed = !1;
+}
+var ids, overflowed, init_panelRunningHistory = __esm({
+  "node_modules/@sema-agent/client-core/dist/panelRunningHistory.js"() {
+    ids = /* @__PURE__ */ new Set(), overflowed = !1;
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/engineAgentPanelStore.js
 function markEnginePanelTaskResident(taskId) {
   residentTaskIds.add(taskId);
@@ -4331,9 +4354,240 @@ function isEnginePanelTaskResident(taskId) {
   return residentTaskIds.has(taskId);
 }
 function launchAnchorChanged(prev, next) {
-  return prev.kind !== "fleet-row" || next.kind !== "fleet-row" ? !1 : prev.startedAt !== void 0 && next.startedAt !== void 0 && prev.startedAt !== next.startedAt;
+  return prev.kind !== "fleet-row" || next.kind !== "fleet-row" ? !1 : isNewEngineAgentPanelCycle(prev, next);
+}
+function isNewEngineAgentPanelCycle(prev, next) {
+  let pc = cycleSeqOf(prev), nc = cycleSeqOf(next);
+  if (pc !== void 0 && nc !== void 0)
+    return pc !== nc;
+  let ps = startedAtOf(prev), ns = startedAtOf(next);
+  return ps !== void 0 && ns !== void 0 && ps !== ns;
+}
+function cycleSeqOf(v2) {
+  let n2 = v2?.cycleSeq;
+  return typeof n2 == "number" && Number.isInteger(n2) && n2 >= 1 ? n2 : void 0;
+}
+function startedAtOf(v2) {
+  let n2 = v2?.startedAt;
+  return typeof n2 == "number" && Number.isFinite(n2) && n2 > 0 ? n2 : void 0;
+}
+function isStaleEngineAgentPanelEnd(end, current6) {
+  let ec2 = cycleSeqOf(end), cc = cycleSeqOf(current6);
+  if (ec2 !== void 0 && cc !== void 0)
+    return ec2 < cc;
+  let es = startedAtOf(end), cs = startedAtOf(current6);
+  return es !== void 0 && cs !== void 0 ? es < cs : !1;
+}
+function bounded(map2, key, value) {
+  if (map2.delete(key), map2.set(key, value), map2.size > MAX_IDENTITY_KEYS) {
+    let oldest = map2.keys().next().value;
+    oldest !== void 0 && map2.delete(oldest);
+  }
+}
+function boundedOwnership(map2, key, value) {
+  if (map2.delete(key), map2.set(key, value), map2.size <= MAX_OWNERSHIP_KEYS)
+    return;
+  for (let [k2, v2] of map2)
+    if (v2.retired) {
+      map2.delete(k2);
+      return;
+    }
+  let oldest = map2.keys().next().value;
+  oldest !== void 0 && map2.delete(oldest);
+}
+function notePublishedWire(ev) {
+  boundedOwnership(publishedWireIds, ev.taskId, { retired: publishedWireIds.get(ev.taskId)?.retired ?? !1 }), ev.parentToolCallId !== void 0 && ev.parentToolCallId.length > 0 && bounded(publishedWireByParent, ev.parentToolCallId, ev.taskId);
+}
+function retireWire(wireId) {
+  let w2 = publishedWireIds.get(wireId);
+  w2 !== void 0 && (w2.retired = !0);
+  for (let o of wireIdByFleetId.values())
+    o.wireId === wireId && (o.retired = !0);
+}
+function publishedWireFor(ev) {
+  if (ev.transcriptId !== void 0 && publishedWireIds.has(ev.transcriptId))
+    return ev.transcriptId;
+  if (ev.parentToolCallId !== void 0) {
+    let u = publishedWireByParent.get(ev.parentToolCallId);
+    if (u !== void 0 && publishedWireIds.get(u)?.retired === !1)
+      return u;
+  }
+}
+function wireOwnerOf(fleetId, current6, transcriptId) {
+  let o = wireIdByFleetId.get(fleetId);
+  if (o === void 0)
+    return;
+  if (transcriptId !== void 0 && transcriptId !== (o.transcriptId ?? o.wireId) || current6 !== void 0 && isStaleEngineAgentPanelEnd(o, current6)) {
+    wireIdByFleetId.delete(fleetId), retireWire(o.wireId);
+    return;
+  }
+  return o.wireId;
+}
+function remember(map2, key, alias2) {
+  if (map2.delete(key), map2.set(key, alias2), map2.size > MAX_IDENTITY_KEYS) {
+    let oldest = map2.keys().next().value;
+    oldest !== void 0 && map2.delete(oldest);
+  }
+}
+function resolveEnginePanelTaskId(wireTaskId, parentToolCallId) {
+  let byTranscript = fleetIdByTranscriptId.get(wireTaskId);
+  if (byTranscript !== void 0)
+    return remember(fleetIdByTranscriptId, wireTaskId, byTranscript), identityOf(byTranscript);
+  let byParent = parentToolCallId !== void 0 ? fleetIdByParentToolCallId.get(parentToolCallId) : void 0;
+  return byParent !== void 0 ? (remember(fleetIdByParentToolCallId, parentToolCallId, byParent), identityOf(byParent)) : { taskId: wireTaskId, origin: "wire" };
+}
+function identityOf(alias2) {
+  return {
+    taskId: alias2.fleetId,
+    origin: "fleet-row",
+    ...alias2.cycleSeq !== void 0 ? { cycleSeq: alias2.cycleSeq } : {},
+    ...alias2.startedAt !== void 0 ? { startedAt: alias2.startedAt } : {}
+  };
+}
+function rememberResolvedWire(wireTaskId, id) {
+  fleetIdByTranscriptId.has(wireTaskId) || remember(fleetIdByTranscriptId, wireTaskId, {
+    fleetId: id.taskId,
+    ...id.cycleSeq !== void 0 ? { cycleSeq: id.cycleSeq } : {},
+    ...id.startedAt !== void 0 ? { startedAt: id.startedAt } : {}
+  });
+}
+function ageHeld(except) {
+  for (let [wireId, held] of [...heldWireTicks])
+    wireId !== except && (held.beats += 1, held.beats >= MAX_HELD_WIRE_TICK_BEATS && (heldWireTicks.delete(wireId), deliverEngineAgentPanelEvent(asIsTick(held.ev))));
+}
+function migrateResidency(wireTaskId, fleetId) {
+  wireTaskId !== fleetId && residentTaskIds.has(wireTaskId) && (residentTaskIds.delete(wireTaskId), residentTaskIds.add(fleetId));
+}
+function normalizedTick(ev, fleetId) {
+  let { cardBound: _cardBound, ...rest } = ev;
+  return migrateResidency(ev.taskId, fleetId), { ...rest, taskId: fleetId, wireTaskId: ev.taskId, taskIdOrigin: "fleet-row" };
+}
+function asIsTick(ev) {
+  let { cardBound: _cardBound, ...rest } = ev;
+  return notePublishedWire(ev), { ...rest, taskIdOrigin: "wire" };
+}
+function staleWireTick(id) {
+  return isStaleEngineAgentPanelEnd(id, latestCycleByFleetId.get(id.taskId));
+}
+function flushHeld(wireTaskId) {
+  let held = heldWireTicks.get(wireTaskId);
+  if (held === void 0)
+    return;
+  if (heldWireTicks.delete(wireTaskId), publishedWireIds.has(held.ev.taskId)) {
+    deliverEngineAgentPanelEvent(asIsTick(held.ev));
+    return;
+  }
+  let id = resolveEnginePanelTaskId(held.ev.taskId, held.ev.parentToolCallId);
+  if (id.origin === "fleet-row") {
+    if (staleWireTick(id))
+      return;
+    rememberResolvedWire(held.ev.taskId, id), deliverEngineAgentPanelEvent(normalizedTick(held.ev, id.taskId));
+    return;
+  }
+  deliverEngineAgentPanelEvent(asIsTick(held.ev));
+}
+function clearEnginePanelTaskResidentByWire(wireTaskId, cycle) {
+  residentTaskIds.delete(wireTaskId);
+  let owner = wireIdByFleetId.get(wireTaskId);
+  owner !== void 0 && !(cycle !== void 0 && isStaleEngineAgentPanelEnd(cycle, owner)) && residentTaskIds.delete(owner.wireId);
+  let id = resolveEnginePanelTaskId(wireTaskId);
+  id.taskId !== wireTaskId && (isStaleEngineAgentPanelEnd(id, latestCycleByFleetId.get(id.taskId)) || residentTaskIds.delete(id.taskId));
+}
+function __resetEngineAgentPanelIdentityForTests() {
+  fleetIdByTranscriptId.clear(), fleetIdByParentToolCallId.clear(), heldWireTicks.clear(), latestCycleByFleetId.clear(), publishedWireIds.clear(), publishedWireByParent.clear(), wireIdByFleetId.clear();
 }
 function publishEngineAgentPanelEvent(ev) {
+  switch ((ev.kind === "end" || ev.kind === "sweep") && ageHeld(ev.kind === "sweep" ? void 0 : ev.taskId), ev.kind) {
+    case "fleet-row": {
+      let rowCycle = { ...ev.cycleSeq !== void 0 ? { cycleSeq: ev.cycleSeq } : {}, ...ev.startedAt !== void 0 ? { startedAt: ev.startedAt } : {} }, published = wireOwnerOf(ev.taskId, rowCycle, ev.transcriptId) ?? publishedWireFor(ev);
+      if (published !== void 0 && published !== ev.taskId) {
+        let prev = wireIdByFleetId.get(ev.taskId);
+        boundedOwnership(wireIdByFleetId, ev.taskId, { wireId: published, retired: prev?.wireId === published ? prev.retired : !1, ...ev.transcriptId !== void 0 ? { transcriptId: ev.transcriptId } : prev?.transcriptId !== void 0 ? { transcriptId: prev.transcriptId } : {}, ...rowCycle }), deliverEngineAgentPanelEvent({ ...ev, taskId: published, wireTaskId: ev.taskId, taskIdOrigin: "wire" }), ageHeld(void 0);
+        return;
+      }
+      let alias2 = {
+        fleetId: ev.taskId,
+        ...ev.cycleSeq !== void 0 ? { cycleSeq: ev.cycleSeq } : {},
+        ...ev.startedAt !== void 0 ? { startedAt: ev.startedAt } : {}
+      };
+      if ((alias2.cycleSeq !== void 0 || alias2.startedAt !== void 0) && (latestCycleByFleetId.delete(ev.taskId), latestCycleByFleetId.set(ev.taskId, { ...alias2.cycleSeq !== void 0 ? { cycleSeq: alias2.cycleSeq } : {}, ...alias2.startedAt !== void 0 ? { startedAt: alias2.startedAt } : {} }), latestCycleByFleetId.size > MAX_IDENTITY_KEYS)) {
+        let oldest = latestCycleByFleetId.keys().next().value;
+        oldest !== void 0 && latestCycleByFleetId.delete(oldest);
+      }
+      ev.transcriptId !== void 0 && ev.transcriptId.length > 0 && remember(fleetIdByTranscriptId, ev.transcriptId, alias2), ev.parentToolCallId !== void 0 && ev.parentToolCallId.length > 0 && remember(fleetIdByParentToolCallId, ev.parentToolCallId, alias2), deliverEngineAgentPanelEvent(ev);
+      for (let [wireId, held] of [...heldWireTicks])
+        (wireId === ev.transcriptId || held.ev.parentToolCallId !== void 0 && held.ev.parentToolCallId === ev.parentToolCallId) && flushHeld(wireId);
+      ageHeld(void 0);
+      return;
+    }
+    case "tick": {
+      if (publishedWireIds.has(ev.taskId)) {
+        heldWireTicks.delete(ev.taskId), deliverEngineAgentPanelEvent(asIsTick(ev));
+        return;
+      }
+      let id = resolveEnginePanelTaskId(ev.taskId, ev.parentToolCallId);
+      if (id.origin === "fleet-row") {
+        if (heldWireTicks.delete(ev.taskId), staleWireTick(id))
+          return;
+        rememberResolvedWire(ev.taskId, id), deliverEngineAgentPanelEvent(normalizedTick(ev, id.taskId));
+        return;
+      }
+      if (ev.cardBound === !0) {
+        deliverEngineAgentPanelEvent(asIsTick(ev));
+        return;
+      }
+      if (heldWireTicks.has(ev.taskId)) {
+        heldWireTicks.delete(ev.taskId), deliverEngineAgentPanelEvent(asIsTick(ev));
+        return;
+      }
+      if (heldWireTicks.size >= MAX_HELD_WIRE_TICKS) {
+        let oldest = heldWireTicks.keys().next().value;
+        oldest !== void 0 && flushHeld(oldest);
+      }
+      heldWireTicks.set(ev.taskId, { ev, beats: 0 });
+      return;
+    }
+    case "end": {
+      let wireOwner = wireOwnerOf(ev.taskId, ev);
+      if (wireOwner !== void 0) {
+        let ownerRec = wireIdByFleetId.get(ev.taskId);
+        deliverEngineAgentPanelEvent({ ...ev, taskId: wireOwner, wireTaskId: ev.taskId, taskIdOrigin: "wire" }), isStaleEngineAgentPanelEnd(ev, ownerRec) || (retireWire(wireOwner), retirePanelRowRunning(ev.taskId), retirePanelRowRunning(wireOwner));
+        return;
+      }
+      if (publishedWireIds.has(ev.taskId)) {
+        flushHeld(ev.taskId), deliverEngineAgentPanelEvent(ev), retireWire(ev.taskId), retirePanelRowRunning(ev.taskId);
+        for (let [fleetId, o] of wireIdByFleetId)
+          o.wireId === ev.taskId && !isStaleEngineAgentPanelEnd(ev, o) && retirePanelRowRunning(fleetId);
+        let alias2 = fleetIdByTranscriptId.get(ev.taskId);
+        alias2 !== void 0 && !isStaleEngineAgentPanelEnd(ev, alias2) && retirePanelRowRunning(alias2.fleetId);
+        return;
+      }
+      let id = resolveEnginePanelTaskId(ev.taskId);
+      if (id.origin === "fleet-row" && id.taskId !== ev.taskId) {
+        flushHeld(ev.taskId), migrateResidency(ev.taskId, id.taskId);
+        let effectiveEnd = {
+          ...ev.cycleSeq !== void 0 ? { cycleSeq: ev.cycleSeq } : id.cycleSeq !== void 0 ? { cycleSeq: id.cycleSeq } : {},
+          ...ev.startedAt !== void 0 ? { startedAt: ev.startedAt } : id.startedAt !== void 0 ? { startedAt: id.startedAt } : {}
+        };
+        isStaleEngineAgentPanelEnd(effectiveEnd, latestCycleByFleetId.get(id.taskId)) || retirePanelRowRunning(id.taskId), deliverEngineAgentPanelEvent({
+          ...ev,
+          taskId: id.taskId,
+          wireTaskId: ev.taskId,
+          taskIdOrigin: "fleet-row",
+          // end 自己不带周期身份(流内 close 臂恒不带)⇒ 借钥匙上的:复活后迟到的 end{旧 UUID} 由此带着旧代际,消费端按 isStaleEngineAgentPanelEnd 挡掉
+          ...ev.cycleSeq === void 0 && id.cycleSeq !== void 0 ? { cycleSeq: id.cycleSeq } : {},
+          ...ev.startedAt === void 0 && id.startedAt !== void 0 ? { startedAt: id.startedAt } : {}
+        });
+        return;
+      }
+      flushHeld(ev.taskId), deliverEngineAgentPanelEvent(ev), retireWire(ev.taskId), isStaleEngineAgentPanelEnd(ev, latestCycleByFleetId.get(ev.taskId)) || retirePanelRowRunning(ev.taskId);
+      return;
+    }
+    default:
+      deliverEngineAgentPanelEvent(ev);
+  }
+}
+function deliverEngineAgentPanelEvent(ev) {
   if (ev.kind !== "sweep" && absenceBuffer.delete(ev.taskId), listener) {
     try {
       listener(ev);
@@ -4392,7 +4646,8 @@ function subscribeEngineAgentPanel(fn2) {
   };
 }
 function publishEngineAgentPanelAbsence(ev) {
-  if (absenceListener) {
+  let owner = wireOwnerOf(ev.taskId);
+  if (owner !== void 0 && (ev = { ...ev, taskId: owner, wireTaskId: ev.taskId }), absenceListener) {
     try {
       absenceListener(ev);
     } catch {
@@ -4421,13 +4676,15 @@ function subscribeEngineAgentPanelAbsence(fn2) {
 function __resetEngineAgentPanelAbsenceForTests() {
   absenceListener = null, absenceBuffer.clear();
 }
-var PANEL_TOOLUSES_LANE_POLICY, residentTaskIds, MAX_BUFFER, listener, buffer, MAX_ABSENCE_BUFFER, absenceListener, absenceBuffer, init_engineAgentPanelStore = __esm({
+var PANEL_TOOLUSES_LANE_POLICY, residentTaskIds, MAX_BUFFER, listener, buffer, MAX_IDENTITY_KEYS, MAX_HELD_WIRE_TICKS, MAX_HELD_WIRE_TICK_BEATS, fleetIdByTranscriptId, fleetIdByParentToolCallId, heldWireTicks, latestCycleByFleetId, MAX_OWNERSHIP_KEYS, publishedWireIds, publishedWireByParent, wireIdByFleetId, MAX_ABSENCE_BUFFER, absenceListener, absenceBuffer, init_engineAgentPanelStore = __esm({
   "node_modules/@sema-agent/client-core/dist/engineAgentPanelStore.js"() {
+    init_panelRunningHistory();
     PANEL_TOOLUSES_LANE_POLICY = {
       tick: "required-engine-always-emits",
       "fleet-row": "optional-tolerate-absent"
     }, residentTaskIds = /* @__PURE__ */ new Set();
     MAX_BUFFER = 200, listener = null, buffer = [];
+    MAX_IDENTITY_KEYS = 2048, MAX_HELD_WIRE_TICKS = 64, MAX_HELD_WIRE_TICK_BEATS = 16, fleetIdByTranscriptId = /* @__PURE__ */ new Map(), fleetIdByParentToolCallId = /* @__PURE__ */ new Map(), heldWireTicks = /* @__PURE__ */ new Map(), latestCycleByFleetId = /* @__PURE__ */ new Map(), MAX_OWNERSHIP_KEYS = 8192, publishedWireIds = /* @__PURE__ */ new Map(), publishedWireByParent = /* @__PURE__ */ new Map(), wireIdByFleetId = /* @__PURE__ */ new Map();
     MAX_ABSENCE_BUFFER = 200, absenceListener = null, absenceBuffer = /* @__PURE__ */ new Map();
   }
 });
@@ -4967,14 +5224,17 @@ function enqueueBgChildNotification(n2) {
   let terminal = isTaskNotificationTerminalStatus(n2.status);
   if (terminal && (markRunNotified(n2.taskId, cycle), cardEnqueuedRunIds.add(n2.taskId)), terminal)
     try {
-      clearEnginePanelTaskResident(n2.taskId), publishEngineAgentPanelEvent({
+      clearEnginePanelTaskResidentByWire(n2.taskId, typeof n2.seq == "number" && Number.isInteger(n2.seq) && n2.seq >= BG_FIRST_SEQ ? { cycleSeq: n2.seq } : void 0), publishEngineAgentPanelEvent({
         kind: "end",
         taskId: n2.taskId,
         // L-215②(0.65.0):读**单铸谓词**而不是内联两词 —— 修前这里只认 `failed`/`killed`,
         //    而 core [6908] 的 `blocked` 是 **agent 自报的终态**(不是等人)⇒ 一条自报走不下去的
         //    后台 run 在面板上被 settle 成**成功**。🔴 `suspended`/`needs_review` 仍不在表里
         //    (那两词是「等一次人的决定」,判成终局会把一条正等着你的 run 在面板上判死)。
-        isError: isTerminalNotSuccess(n2.status)
+        isError: isTerminalNotSuccess(n2.status),
+        // 0.74.0:周期身份 —— **wire 真给了 seq 才带**。上面的 `cycle` 是去重键用的归一值(缺席归一成首周期),
+        // 那是键不是事实;把它上屏等于对一条没报代际的通知声称「这是第一代」。
+        ...typeof n2.seq == "number" && Number.isInteger(n2.seq) && n2.seq >= BG_FIRST_SEQ ? { cycleSeq: n2.seq } : {}
       });
     } catch {
     }
@@ -7115,7 +7375,7 @@ var init_toolCards = __esm({
 
 // node_modules/@sema-agent/client-core/dist/adapt/panelTasks.js
 function createPanelTaskLedger(ctx, cards, inst) {
-  let taskCardBinding = /* @__PURE__ */ new Map(), boundToolCalls = /* @__PURE__ */ new Set(), livePanelTasks = /* @__PURE__ */ new Set(), endedPanelTasks = /* @__PURE__ */ new Set(), liveBoundPanelTasks = /* @__PURE__ */ new Set(), subagentTypeById = /* @__PURE__ */ new Map(), laneOf = (taskId) => {
+  let taskCardBinding = /* @__PURE__ */ new Map(), boundToolCalls = /* @__PURE__ */ new Set(), livePanelTasks = /* @__PURE__ */ new Set(), endedPanelTasks = /* @__PURE__ */ new Set(), liveBoundPanelTasks = /* @__PURE__ */ new Set(), clearResidencyBothKeys = (taskId) => clearEnginePanelTaskResidentByWire(taskId), subagentTypeById = /* @__PURE__ */ new Map(), laneOf = (taskId) => {
     let card = taskCardBinding.get(taskId);
     return card !== void 0 ? { lane: "subagent", parentToolCallId: card } : MAIN;
   };
@@ -7160,8 +7420,8 @@ function createPanelTaskLedger(ctx, cards, inst) {
     },
     // #6 session 常驻台账:live-bound(卡本 turn 开着)= 本 turn 生命周期,turn 末可 sweep;
     // inert/unbound(跨 turn bg 子代形)= 常驻,两处 sweep 都放行,终态只认通知帧。
-    noteResidency: (taskId) => {
-      liveBoundPanelTasks.has(taskId) ? clearEnginePanelTaskResident(taskId) : markEnginePanelTaskResident(taskId);
+    noteResidency: (taskId, residentKey = taskId) => {
+      liveBoundPanelTasks.has(taskId) ? clearEnginePanelTaskResident(residentKey) : markEnginePanelTaskResident(residentKey);
     },
     /** SubagentStart(cli fireSubagentStartHook 的臂化):类型恒记,fire 一生一次。 */
     *start(taskId, agentType) {
@@ -7208,7 +7468,7 @@ function createPanelTaskLedger(ctx, cards, inst) {
      *    (清一次幂等,真终态权威性不变)。
      */
     *settleFromNotification(taskId, isError) {
-      clearEnginePanelTaskResident(taskId), !endedPanelTasks.has(taskId) && (endedPanelTasks.add(taskId), yield chrome({
+      clearResidencyBothKeys(taskId), !endedPanelTasks.has(taskId) && (endedPanelTasks.add(taskId), yield chrome({
         kind: "panel_task",
         laneProof: MAIN,
         event: { kind: "end", taskId, isError }
@@ -7233,7 +7493,7 @@ function createPanelTaskLedger(ctx, cards, inst) {
     *settleFromTerminalTick(taskId, isError) {
       if (endedPanelTasks.has(taskId))
         return;
-      endedPanelTasks.add(taskId), clearEnginePanelTaskResident(taskId);
+      endedPanelTasks.add(taskId), clearResidencyBothKeys(taskId);
       let lane = laneOf(taskId), card = taskCardBinding.get(taskId);
       if (card !== void 0 && (yield chrome({
         kind: "inline_task_stats",
@@ -7616,7 +7876,7 @@ function safeCut(buf, at) {
   }
   return n2;
 }
-function remember(set2, key) {
+function remember2(set2, key) {
   if (!set2.has(key)) {
     if (set2.size >= MAX_REPLAY_KEYS) {
       let oldest = set2.values().next().value;
@@ -7626,14 +7886,14 @@ function remember(set2, key) {
   }
 }
 function rememberSegment(s, text2) {
-  remember(s.recordedSegments, text2);
+  remember2(s.recordedSegments, text2);
 }
 function scheduleNotify(taskId) {
   pendingNotify.add(taskId), !notifyTimer && (notifyTimer = setTimeout(() => {
     notifyTimer = null;
-    let ids = [...pendingNotify];
+    let ids2 = [...pendingNotify];
     if (pendingNotify.clear(), !!notifyListener)
-      for (let id of ids)
+      for (let id of ids2)
         try {
           notifyListener(id);
         } catch {
@@ -7658,7 +7918,7 @@ function replaySeen(s, ev) {
   if (typeof id == "string" && id.length > 0) {
     if (s.seenAggregateIds.has(id))
       return !0;
-    remember(s.seenAggregateIds, id);
+    remember2(s.seenAggregateIds, id);
   }
   let body = ev.text;
   return !!(typeof body == "string" && s.recordedSegments.has(body));
@@ -7968,6 +8228,7 @@ var assistantArm, userArm, systemArm, diagnosticsArm, steeringInjectedArm, works
     init_toolResult();
     init_workflow();
     init_runTerminal();
+    init_engineAgentPanelStore();
     init_ids();
     init_wireShapes();
     assistantArm = function* (m2, { ctx, idOf, text: text2, cards, inst }) {
@@ -8377,7 +8638,8 @@ var assistantArm, userArm, systemArm, diagnosticsArm, steeringInjectedArm, works
         let agentType = typeof m2.name == "string" && m2.name.length > 0 ? m2.name : "subagent";
         yield* panel.start(taskId, agentType);
       }
-      panel.noteResidency(taskId), panel.markLive(taskId), yield chrome({
+      let identity3 = resolveEnginePanelTaskId(taskId, explicitParent);
+      panel.noteResidency(taskId, identity3.taskId), panel.markLive(taskId), yield chrome({
         kind: "panel_task",
         laneProof: panel.laneOf(taskId),
         event: {
@@ -8387,6 +8649,9 @@ var assistantArm, userArm, systemArm, diagnosticsArm, steeringInjectedArm, works
           ...description !== void 0 ? { description } : {},
           ...prompt !== void 0 ? { prompt } : {},
           ...currentAction !== void 0 ? { currentAction } : {},
+          // 0.74.3 CC-70:身份归一的两把钥匙 —— 退路键 + 发布方提示(绑卡 = 同步委派,漏斗不用等 fleet 行)。
+          ...explicitParent !== void 0 ? { parentToolCallId: explicitParent } : {},
+          ...panel.isLiveBound(taskId) ? { cardBound: !0 } : {},
           // 🔴 这里的 `: 0` 与 `fleetAgentPanelProjection` 那句「绝不在本层 `?? 0`」**不矛盾**,
           // 因为不是同一条 lane 的同一种供给形(两层的分层实情写在 `engineAgentPanelStore.ts`
           // 的 `PANEL_TOOLUSES_LANE_POLICY` 上,两条 lane 的可选性由编译钉锁住):
@@ -9026,7 +9291,7 @@ function wireNumberKey(key, v2) {
 }
 function projectWorkflows(rows3) {
   return rows3.map((r) => {
-    let startedCount = wireStartedCount(r);
+    let startedCount = wireStartedCount(r), errorCode = wireErrorCode(r);
     return {
       id: r.id,
       // 187 workflow label = `e.summary ?? e.description`(短 label);折成单行,空 → 187 占位符。
@@ -9038,10 +9303,15 @@ function projectWorkflows(rows3) {
       ...wireNumberKey("elapsedMs", wireDuration(r.elapsedMs)),
       ...wireNumberKey("tokens", wireCount(r.tokens)),
       ...wireNumberKey("failedCount", wireCount(r.failedCount)),
-      ...startedCount !== void 0 ? { startedCount } : {}
+      ...startedCount !== void 0 ? { startedCount } : {},
+      ...errorCode !== void 0 ? { errorCode } : {}
     };
   });
 }
+function wireErrorCode(r) {
+  let v2 = r.errorCode;
+  return typeof v2 == "string" && v2.length > 0 ? v2 : void 0;
+}
 var TERMINAL_FLEET_TASK_STATUSES, CONTROL_TOOL_VERBS, FLEET_TASK_VIEW_KEY_TUPLE, FLEET_TASK_VIEW_KEYS, FLEET_WORKFLOW_VIEW_KEY_TUPLE, FLEET_WORKFLOW_VIEW_KEYS, FLEET_TASK_ROW_WIRE_KEY_TUPLE, FLEET_TASK_ROW_WIRE_KEYS, FLEET_WORKFLOW_ROW_WIRE_KEY_TUPLE, FLEET_WORKFLOW_ROW_WIRE_KEYS, FLEET_TASK_ROW_KEYS_NOT_PROJECTED, FLEET_WORKFLOW_ROW_KEYS_NOT_PROJECTED, init_fleetProjection = __esm({
   "node_modules/@sema-agent/client-core/dist/fleet/fleetProjection.js"() {
     init_fleetTaskDesc();
@@ -9096,7 +9366,8 @@ var TERMINAL_FLEET_TASK_STATUSES, CONTROL_TOOL_VERBS, FLEET_TASK_VIEW_KEY_TUPLE,
       "elapsedMs",
       "tokens",
       "failedCount",
-      "startedCount"
+      "startedCount",
+      "errorCode"
     ], FLEET_WORKFLOW_VIEW_KEYS = FLEET_WORKFLOW_VIEW_KEY_TUPLE, FLEET_TASK_ROW_WIRE_KEY_TUPLE = [
       "id",
       "name",
@@ -9194,7 +9465,7 @@ function seenFor(sessionKey) {
   return m2 || (m2 = /* @__PURE__ */ new Map(), seen.set(sessionKey, m2)), m2;
 }
 function resetFleetAgentPanelProjection() {
-  seen.clear();
+  seen.clear(), __resetPanelRunningHistoryForTests();
 }
 function resetFleetAgentPanelProjectionFor(sessionKey) {
   seen.delete(sessionKey);
@@ -9217,10 +9488,17 @@ function projectFleetAgentRowsFor(sessionKey, rows3, nowMs2 = Date.now()) {
     if (!taskId)
       continue;
     present2.add(taskId);
-    let status3 = row2.status ?? "running", tokens = typeof row2.tokens == "number" && Number.isInteger(row2.tokens) && row2.tokens >= 0 ? row2.tokens : void 0, toolUses = typeof row2.toolUses == "number" ? row2.toolUses : void 0, transcriptId = row2.transcriptId || void 0, startedAt = typeof row2.startedAt == "number" && row2.startedAt > 0 ? row2.startedAt : void 0, currentTool = currentToolKeyOf(row2.currentTool) !== void 0 ? row2.currentTool : void 0, currentToolKey = currentToolKeyOf(row2.currentTool), prev = seenMap.get(taskId), sameCycle = prev !== void 0 && !prev.settled && (startedAt === void 0 || prev.startedAt === void 0 || prev.startedAt === startedAt), knownTokens = tokens !== void 0 ? tokens : sameCycle ? prev?.tokens : void 0, knownStartedAt = startedAt !== void 0 ? startedAt : sameCycle ? prev?.startedAt : void 0;
+    let status3 = row2.status ?? "running", tokens = typeof row2.tokens == "number" && Number.isInteger(row2.tokens) && row2.tokens >= 0 ? row2.tokens : void 0, toolUses = typeof row2.toolUses == "number" ? row2.toolUses : void 0, transcriptId = row2.transcriptId || void 0, parentToolCallId = typeof row2.parentToolCallId == "string" && row2.parentToolCallId.length > 0 ? row2.parentToolCallId : void 0, startedAt = typeof row2.startedAt == "number" && row2.startedAt > 0 ? row2.startedAt : void 0, cycleSeq = typeof row2.cycleSeq == "number" && Number.isInteger(row2.cycleSeq) && row2.cycleSeq >= 1 ? row2.cycleSeq : void 0, currentTool = currentToolKeyOf(row2.currentTool) !== void 0 ? row2.currentTool : void 0, currentToolKey = currentToolKeyOf(row2.currentTool), prev = seenMap.get(taskId), rowIdentity = { ...cycleSeq !== void 0 ? { cycleSeq } : {}, ...startedAt !== void 0 ? { startedAt } : {} }, prevIdentity = prev !== void 0 ? { ...prev.cycleSeq !== void 0 ? { cycleSeq: prev.cycleSeq } : {}, ...prev.startedAt !== void 0 ? { startedAt: prev.startedAt } : {} } : void 0;
+    if (prev !== void 0 && isStaleEngineAgentPanelEnd(rowIdentity, prevIdentity))
+      continue;
+    let rowNewerCycle = prev !== void 0 && isStaleEngineAgentPanelEnd(prevIdentity, rowIdentity), sameCycle = prev !== void 0 && !prev.settled && (startedAt === void 0 || prev.startedAt === void 0 || prev.startedAt === startedAt) && // 0.74.0:代际号变了同样是新周期(两条都报了才比;任一条没报 = 这一帧没说)
+    (cycleSeq === void 0 || prev.cycleSeq === void 0 || prev.cycleSeq === cycleSeq), knownTokens = tokens !== void 0 ? tokens : sameCycle ? prev?.tokens : void 0, carryIdentity = prev !== void 0 && !rowNewerCycle, knownStartedAt = startedAt !== void 0 ? startedAt : carryIdentity ? prev.startedAt : void 0, knownCycleSeq = cycleSeq !== void 0 ? cycleSeq : carryIdentity ? prev.cycleSeq : void 0;
     if (TERMINAL_FLEET_TASK_STATUSES.has(status3)) {
-      prev?.settled || // 最终用量也算(终态帧常是唯一带全 usage 的一帧;消费端不更新非 running 行 ⇒ 必须赶在 end 之前发)
-      ((tokens !== void 0 && prev?.tokens !== tokens || toolUses !== void 0 && prev?.toolUses !== toolUses || transcriptId !== void 0 && prev?.transcriptId !== transcriptId || startedAt !== void 0 && prev?.startedAt !== startedAt) && publishEngineAgentPanelEvent({
+      let newbornTerminal = prev === void 0 && panelRowNeverPublishedRunning(taskId);
+      !(prev?.settled === !0 && !rowNewerCycle) && !newbornTerminal && // 0.74.0:周期身份本身推进(或首帧就带身份)也是变化 —— 消费端要先记下身份才能对 end 判陈旧。
+      ((rowNewerCycle || cycleSeq !== void 0 && prev?.cycleSeq !== cycleSeq || // 含首帧(prev 缺席)就带身份的终态
+      // 最终用量也算(终态帧常是唯一带全 usage 的一帧;消费端不更新非 running 行 ⇒ 必须赶在 end 之前发)
+      tokens !== void 0 && prev?.tokens !== tokens || toolUses !== void 0 && prev?.toolUses !== toolUses || transcriptId !== void 0 && prev?.transcriptId !== transcriptId || parentToolCallId !== void 0 && prev?.parentToolCallId !== parentToolCallId || startedAt !== void 0 && prev?.startedAt !== startedAt) && publishEngineAgentPanelEvent({
         kind: "fleet-row",
         taskId,
         ...row2.name ? { name: row2.name } : {},
@@ -9228,20 +9506,27 @@ function projectFleetAgentRowsFor(sessionKey, rows3, nowMs2 = Date.now()) {
         ...knownTokens !== void 0 ? { totalTokens: knownTokens } : {},
         ...toolUses !== void 0 ? { toolUses } : {},
         ...transcriptId !== void 0 ? { transcriptId } : {},
-        ...knownStartedAt !== void 0 ? { startedAt: knownStartedAt } : {}
+        ...parentToolCallId !== void 0 ? { parentToolCallId } : {},
+        ...knownStartedAt !== void 0 ? { startedAt: knownStartedAt } : {},
+        ...knownCycleSeq !== void 0 ? { cycleSeq: knownCycleSeq } : {}
       }), publishEngineAgentPanelEvent({
         kind: "end",
         taskId,
         // L-215② 族扫(0.65.0):与 `notifications.enqueueBgChildNotification` 的 `isError` 位
         //    **同一个病形**(内联两词 ⇒ core [6908] 的 `blocked` 漏成「成功」)。两处一次改齐,
         //    读同一个单铸谓词;只修当格 = 下一次加词又漏一处。
-        isError: isTerminalNotSuccess(status3)
+        isError: isTerminalNotSuccess(status3),
+        // 0.74.0:这条终态属于哪个周期(在场才带)—— 消费端据此挡掉上一周期迟到的 end。
+        ...knownCycleSeq !== void 0 ? { cycleSeq: knownCycleSeq } : {},
+        ...knownStartedAt !== void 0 ? { startedAt: knownStartedAt } : {}
       })), seenMap.set(taskId, {
         status: status3,
         tokens: knownTokens,
         toolUses: toolUses !== void 0 ? toolUses : prev?.toolUses,
         transcriptId: transcriptId !== void 0 ? transcriptId : prev?.transcriptId,
+        parentToolCallId: parentToolCallId !== void 0 ? parentToolCallId : prev?.parentToolCallId,
         startedAt: knownStartedAt,
+        cycleSeq: knownCycleSeq,
         currentToolKey: currentToolKey !== void 0 ? currentToolKey : prev?.currentToolKey,
         lastSeenAt: nowMs2,
         settled: !0,
@@ -9252,7 +9537,7 @@ function projectFleetAgentRowsFor(sessionKey, rows3, nowMs2 = Date.now()) {
       continue;
     }
     (!prev || prev.settled || prev.absentReportedAtMs !== void 0 || // 行回来了:即使值未变也发一条,消费端据此撤掉 absent 标
-    prev.status !== status3 || prev.tokens !== knownTokens || toolUses !== void 0 && prev.toolUses !== toolUses || transcriptId !== void 0 && prev.transcriptId !== transcriptId || startedAt !== void 0 && prev.startedAt !== startedAt || currentToolKey !== void 0 && prev.currentToolKey !== currentToolKey) && publishEngineAgentPanelEvent({
+    prev.status !== status3 || prev.tokens !== knownTokens || toolUses !== void 0 && prev.toolUses !== toolUses || transcriptId !== void 0 && prev.transcriptId !== transcriptId || parentToolCallId !== void 0 && prev.parentToolCallId !== parentToolCallId || startedAt !== void 0 && prev.startedAt !== startedAt || cycleSeq !== void 0 && prev.cycleSeq !== cycleSeq || currentToolKey !== void 0 && prev.currentToolKey !== currentToolKey) && (notePanelRowRunning(taskId), publishEngineAgentPanelEvent({
       kind: "fleet-row",
       taskId,
       ...row2.name ? { name: row2.name } : {},
@@ -9261,14 +9546,18 @@ function projectFleetAgentRowsFor(sessionKey, rows3, nowMs2 = Date.now()) {
       // 🔴 缺席即不落键(消费端据「键在不在」判三态)。
       ...toolUses !== void 0 ? { toolUses } : {},
       ...transcriptId !== void 0 ? { transcriptId } : {},
+      ...parentToolCallId !== void 0 ? { parentToolCallId } : {},
       ...knownStartedAt !== void 0 ? { startedAt: knownStartedAt } : {},
+      ...knownCycleSeq !== void 0 ? { cycleSeq: knownCycleSeq } : {},
       ...currentTool !== void 0 ? { currentTool } : {}
-    }), seenMap.set(taskId, {
+    })), seenMap.set(taskId, {
       status: status3,
       tokens: knownTokens,
       toolUses: toolUses !== void 0 ? toolUses : prev?.toolUses,
       transcriptId: transcriptId !== void 0 ? transcriptId : prev?.transcriptId,
+      parentToolCallId: parentToolCallId !== void 0 ? parentToolCallId : prev?.parentToolCallId,
       startedAt: knownStartedAt,
+      cycleSeq: knownCycleSeq,
       currentToolKey: currentToolKey !== void 0 ? currentToolKey : prev?.currentToolKey,
       lastSeenAt: nowMs2,
       settled: !1,
@@ -9295,6 +9584,7 @@ function projectFleetAgentRowsFor(sessionKey, rows3, nowMs2 = Date.now()) {
 var ABSENT_SETTLE_MS, SETTLED_RETENTION_MS, seen, init_fleetAgentPanelProjection = __esm({
   "node_modules/@sema-agent/client-core/dist/fleetAgentPanelProjection.js"() {
     init_engineAgentPanelStore();
+    init_panelRunningHistory();
     init_workflow();
     init_fleetProjection();
     init_sessionSlot();
@@ -9601,6 +9891,29 @@ var installedByKey, init_engineWireTarget = __esm({
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/engineCapsGenerationGuard.js
+function snapshotCapsGeneration(opts) {
+  try {
+    return opts?.generation;
+  } catch {
+    return null;
+  }
+}
+function capsGenerationStillCurrent(baseUrl, gen) {
+  if (gen === void 0)
+    return !0;
+  try {
+    return gen === engineCapsGeneration(baseUrl);
+  } catch {
+    return !1;
+  }
+}
+var init_engineCapsGenerationGuard = __esm({
+  "node_modules/@sema-agent/client-core/dist/engineCapsGenerationGuard.js"() {
+    init_engineCapsCache();
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/sqlEngineCapability.js
 function projectSqlEngineCapability(caps) {
   if (caps === null || typeof caps != "object")
@@ -9614,21 +9927,28 @@ function projectSqlEngineCapability(caps) {
     return { kind: "not_reported" };
   if (typeof sql != "object")
     return;
-  let s = sql;
-  if (!(typeof s.engine != "string" || s.engine === "") && !(typeof s.isolation != "string" || s.isolation === "") && !(s.txnMode !== null && (typeof s.txnMode != "string" || s.txnMode === "")))
-    return { kind: "present", view: { engine: s.engine, isolation: s.isolation, txnMode: s.txnMode } };
+  let s = sql, engine = s.engine, isolation = s.isolation, txnMode = s.txnMode;
+  if (!(typeof engine != "string" || engine === "") && !(typeof isolation != "string" || isolation === "") && !(txnMode !== null && (typeof txnMode != "string" || txnMode === "")))
+    return { kind: "present", view: { engine, isolation, txnMode } };
 }
 function noteEngineCapsForSqlEngine(baseUrl, caps, opts) {
+  if (typeof baseUrl != "string" || baseUrl === "")
+    return;
+  let gen = snapshotCapsGeneration(opts);
+  if (gen === null || !capsGenerationStillCurrent(baseUrl, gen))
+    return;
+  let reading;
   try {
-    if (typeof baseUrl != "string" || baseUrl === "" || opts?.generation !== void 0 && opts.generation !== engineCapsGeneration(baseUrl))
-      return;
-    let reading = projectSqlEngineCapability(caps);
+    reading = projectSqlEngineCapability(caps);
+  } catch {
+    reading = void 0;
+  }
+  if (capsGenerationStillCurrent(baseUrl, gen)) {
     if (reading === void 0) {
       readingByBase.delete(baseUrl);
       return;
     }
     readingByBase.set(baseUrl, reading);
-  } catch {
   }
 }
 function observedSqlEngine(baseUrl = engineWireTarget()?.baseUrl) {
@@ -9640,7 +9960,7 @@ function cleanSqlDetailScalar(v2) {
 function sqlEngineDoctorDetail(reading) {
   switch (reading.kind) {
     case "unobserved":
-      return "not observed \u2014 the engine reports it on /v1/capabilities; this process has not received a capabilities response from the engine yet";
+      return "not observed \u2014 the engine reports it on /v1/capabilities; this process has no usable capabilities reading cached for it (none received, or the last one was unreadable)";
     case "not_reported":
       return "not reported by this engine \u2014 the capability position needs a newer engine";
     case "none":
@@ -9661,7 +9981,7 @@ var readingByBase, SQL_DETAIL_MAX, init_sqlEngineCapability = __esm({
   "node_modules/@sema-agent/client-core/dist/sqlEngineCapability.js"() {
     init_fleetTaskDesc();
     init_engineWireTarget();
-    init_engineCapsCache();
+    init_engineCapsGenerationGuard();
     readingByBase = /* @__PURE__ */ new Map();
     SQL_DETAIL_MAX = 40;
   }
@@ -9680,9 +10000,9 @@ function projectWriteProtectionCapability(caps) {
     return { kind: "not_reported" };
   if (typeof wp != "object" || Array.isArray(wp))
     return;
-  let w2 = wp;
-  if (typeof w2.armed == "boolean" && typeof w2.replaced == "boolean" && !(typeof w2.rows != "number" || !Number.isInteger(w2.rows) || w2.rows < 0))
-    return { kind: "present", view: { armed: w2.armed, rows: w2.rows, replaced: w2.replaced } };
+  let w2 = wp, armed3 = w2.armed, replaced = w2.replaced, rows3 = w2.rows;
+  if (typeof armed3 == "boolean" && typeof replaced == "boolean" && !(typeof rows3 != "number" || !Number.isInteger(rows3) || rows3 < 0))
+    return { kind: "present", view: { armed: armed3, rows: rows3, replaced } };
 }
 function projectWriteProtectionPosture(wiring) {
   if (wiring === null || typeof wiring != "object")
@@ -9708,16 +10028,23 @@ function projectWriteProtectionPosture(wiring) {
   };
 }
 function noteEngineCapsForWriteProtection(baseUrl, caps, opts) {
+  if (typeof baseUrl != "string" || baseUrl === "")
+    return;
+  let gen = snapshotCapsGeneration(opts);
+  if (gen === null || !capsGenerationStillCurrent(baseUrl, gen))
+    return;
+  let reading;
   try {
-    if (typeof baseUrl != "string" || baseUrl === "" || opts?.generation !== void 0 && opts.generation !== engineCapsGeneration(baseUrl))
-      return;
-    let reading = projectWriteProtectionCapability(caps);
+    reading = projectWriteProtectionCapability(caps);
+  } catch {
+    reading = void 0;
+  }
+  if (capsGenerationStillCurrent(baseUrl, gen)) {
     if (reading === void 0) {
       readingByBase2.delete(baseUrl);
       return;
     }
     readingByBase2.set(baseUrl, reading);
-  } catch {
   }
 }
 function observedWriteProtection(baseUrl = engineWireTarget()?.baseUrl) {
@@ -9726,7 +10053,7 @@ function observedWriteProtection(baseUrl = engineWireTarget()?.baseUrl) {
 function writeProtectionDoctorDetail(reading) {
   switch (reading.kind) {
     case "unobserved":
-      return "not observed \u2014 the engine reports it on /v1/capabilities; this process has not received a capabilities response from the engine yet";
+      return "not observed \u2014 the engine reports it on /v1/capabilities; this process has no usable capabilities reading cached for it (none received, or the last one was unreadable)";
     case "not_reported":
       return "not reported by this engine \u2014 the capability position needs a newer engine; this says nothing about whether a protected-name table is in effect (an absent seat is the engine shipping its own default table, not the absence of one)";
     case "none":
@@ -9754,7 +10081,7 @@ var readingByBase2, WP_DETAIL_MAX, init_writeProtectionCapability = __esm({
   "node_modules/@sema-agent/client-core/dist/writeProtectionCapability.js"() {
     init_fleetTaskDesc();
     init_engineWireTarget();
-    init_engineCapsCache();
+    init_engineCapsGenerationGuard();
     readingByBase2 = /* @__PURE__ */ new Map();
     WP_DETAIL_MAX = 40;
   }
@@ -9776,16 +10103,23 @@ function projectWebSearchBackendCapability(caps) {
     return backend === WEB_SEARCH_BACKEND_NONE ? { kind: "none" } : { kind: "present", view: { backend } };
 }
 function noteEngineCapsForWebSearchBackend(baseUrl, caps, opts) {
+  if (typeof baseUrl != "string" || baseUrl === "")
+    return;
+  let gen = snapshotCapsGeneration(opts);
+  if (gen === null || !capsGenerationStillCurrent(baseUrl, gen))
+    return;
+  let reading;
   try {
-    if (typeof baseUrl != "string" || baseUrl === "" || opts?.generation !== void 0 && opts.generation !== engineCapsGeneration(baseUrl))
-      return;
-    let reading = projectWebSearchBackendCapability(caps);
+    reading = projectWebSearchBackendCapability(caps);
+  } catch {
+    reading = void 0;
+  }
+  if (capsGenerationStillCurrent(baseUrl, gen)) {
     if (reading === void 0) {
       readingByBase3.delete(baseUrl);
       return;
     }
     readingByBase3.set(baseUrl, reading);
-  } catch {
   }
 }
 function observedWebSearchBackend(baseUrl = engineWireTarget()?.baseUrl) {
@@ -9794,7 +10128,7 @@ function observedWebSearchBackend(baseUrl = engineWireTarget()?.baseUrl) {
 function webSearchBackendDoctorDetail(reading) {
   switch (reading.kind) {
     case "unobserved":
-      return "deployment default backend not observed \u2014 the engine reports it on /v1/capabilities; this process has not received a capabilities response from the engine yet";
+      return "deployment default backend not observed \u2014 the engine reports it on /v1/capabilities; this process has no usable capabilities reading cached for it (none received, or the last one was unreadable)";
     case "not_reported":
       return "deployment default backend not reported by this engine \u2014 only newer engines advertise it; this does not say whether the deployment has a search backend";
     case "none":
@@ -9813,7 +10147,7 @@ var WEB_SEARCH_BACKEND_NONE, readingByBase3, WS_DETAIL_MAX, DEPLOY_ENV, init_web
   "node_modules/@sema-agent/client-core/dist/webSearchBackendCapability.js"() {
     init_fleetTaskDesc();
     init_engineWireTarget();
-    init_engineCapsCache();
+    init_engineCapsGenerationGuard();
     WEB_SEARCH_BACKEND_NONE = "none";
     readingByBase3 = /* @__PURE__ */ new Map();
     WS_DETAIL_MAX = 40, DEPLOY_ENV = "WEB_SEARCH_PROVIDER";
@@ -9836,16 +10170,23 @@ function projectExecutionLaneCapability(caps) {
     return { kind: "present", view: { provider, toolsOnThisHost } };
 }
 function noteEngineCapsForExecutionLane(baseUrl, caps, opts) {
+  if (typeof baseUrl != "string" || baseUrl === "")
+    return;
+  let gen = snapshotCapsGeneration(opts);
+  if (gen === null || !capsGenerationStillCurrent(baseUrl, gen))
+    return;
+  let reading;
   try {
-    if (typeof baseUrl != "string" || baseUrl === "" || opts?.generation !== void 0 && opts.generation !== engineCapsGeneration(baseUrl))
-      return;
-    let reading = projectExecutionLaneCapability(caps);
+    reading = projectExecutionLaneCapability(caps);
+  } catch {
+    reading = void 0;
+  }
+  if (capsGenerationStillCurrent(baseUrl, gen)) {
     if (reading === void 0) {
       readingByBase4.delete(baseUrl);
       return;
     }
     readingByBase4.set(baseUrl, reading);
-  } catch {
   }
 }
 function observedExecutionLane(baseUrl = engineWireTarget()?.baseUrl) {
@@ -9860,7 +10201,7 @@ function toolsRunHereFromExecutionLane(reading, legacyInference) {
 function executionLaneDoctorDetail(reading) {
   switch (reading.kind) {
     case "unobserved":
-      return "execution lane not observed \u2014 the engine reports it on /v1/capabilities; this process has not received a capabilities response from the engine yet";
+      return "execution lane not observed \u2014 the engine reports it on /v1/capabilities; this process has no usable capabilities reading cached for it (none received, or the last one was unreadable)";
     case "not_reported":
       return "execution lane not reported by this engine \u2014 only newer engines advertise it; this does not say where tools run, so the client keeps inferring it the way it did before";
     case "present": {
@@ -9879,7 +10220,7 @@ var readingByBase4, LANE_DETAIL_MAX, init_executionLaneCapability = __esm({
   "node_modules/@sema-agent/client-core/dist/executionLaneCapability.js"() {
     init_fleetTaskDesc();
     init_engineWireTarget();
-    init_engineCapsCache();
+    init_engineCapsGenerationGuard();
     readingByBase4 = /* @__PURE__ */ new Map();
     LANE_DETAIL_MAX = 40;
   }
@@ -9898,16 +10239,23 @@ function projectApprovalsStreamLiveCapability(caps) {
     return { kind: "present", live: v2 };
 }
 function noteEngineCapsForApprovalsStreamLive(baseUrl, caps, opts) {
+  if (typeof baseUrl != "string" || baseUrl === "")
+    return;
+  let gen = snapshotCapsGeneration(opts);
+  if (gen === null || !capsGenerationStillCurrent(baseUrl, gen))
+    return;
+  let reading;
   try {
-    if (typeof baseUrl != "string" || baseUrl === "" || opts?.generation !== void 0 && opts.generation !== engineCapsGeneration(baseUrl))
-      return;
-    let reading = projectApprovalsStreamLiveCapability(caps);
+    reading = projectApprovalsStreamLiveCapability(caps);
+  } catch {
+    reading = void 0;
+  }
+  if (capsGenerationStillCurrent(baseUrl, gen)) {
     if (reading === void 0) {
       readingByBase5.delete(baseUrl);
       return;
     }
     readingByBase5.set(baseUrl, reading);
-  } catch {
   }
 }
 function observedApprovalsStreamLive(baseUrl = engineWireTarget()?.baseUrl) {
@@ -9919,7 +10267,7 @@ function livePendingNeedsReconcile(reading) {
 function approvalsStreamLiveDoctorDetail(reading) {
   switch (reading.kind) {
     case "unobserved":
-      return "live approval push not observed \u2014 the engine reports it on /v1/capabilities; this process has not received a capabilities response yet, so suspended asks are pulled by the reconcile cadence";
+      return "live approval push not observed \u2014 the engine reports it on /v1/capabilities; this process has no usable capabilities reading cached for it (none received, or the last one was unreadable), so suspended asks are pulled by the reconcile cadence";
     case "not_reported":
       return "live approval push not reported by this engine \u2014 only newer engines advertise it; this does not say whether it pushes, so suspended asks are pulled by the reconcile cadence";
     case "present":
@@ -9935,11 +10283,86 @@ function __resetApprovalsStreamLiveReadingsForTests() {
 var readingByBase5, init_approvalsStreamLiveCapability = __esm({
   "node_modules/@sema-agent/client-core/dist/approvalsStreamLiveCapability.js"() {
     init_engineWireTarget();
-    init_engineCapsCache();
+    init_engineCapsGenerationGuard();
     readingByBase5 = /* @__PURE__ */ new Map();
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/deviceExecutorManagementCapability.js
+function projectDeviceExecutorManagementCapability(caps) {
+  if (caps === null || typeof caps != "object")
+    return;
+  let c3 = caps;
+  if (!Object.hasOwn(c3, "deviceExecutor"))
+    return { kind: "not_reported", why: "capability_absent" };
+  let d4 = c3.deviceExecutor;
+  if (d4 === void 0)
+    return { kind: "not_reported", why: "capability_absent" };
+  if (d4 === !1)
+    return { kind: "lane_absent" };
+  if (d4 === null || typeof d4 != "object" || Array.isArray(d4))
+    return;
+  let o = d4;
+  if (!Object.hasOwn(o, "management"))
+    return { kind: "not_reported", why: "management_absent" };
+  let mgmt = o.management;
+  if (mgmt === void 0)
+    return { kind: "not_reported", why: "management_absent" };
+  if (typeof mgmt == "boolean")
+    return { kind: "present", management: mgmt };
+}
+function noteEngineCapsForDeviceExecutorManagement(baseUrl, caps, opts) {
+  if (typeof baseUrl != "string" || baseUrl === "")
+    return;
+  let gen = snapshotCapsGeneration(opts);
+  if (gen === null || !capsGenerationStillCurrent(baseUrl, gen))
+    return;
+  let reading;
+  try {
+    reading = projectDeviceExecutorManagementCapability(caps);
+  } catch {
+    reading = void 0;
+  }
+  if (capsGenerationStillCurrent(baseUrl, gen)) {
+    if (reading === void 0) {
+      readingByBase6.delete(baseUrl);
+      return;
+    }
+    readingByBase6.set(baseUrl, reading);
+  }
+}
+function observedDeviceExecutorManagement(baseUrl = engineWireTarget()?.baseUrl) {
+  return typeof baseUrl != "string" || baseUrl === "" ? { kind: "unobserved" } : readingByBase6.get(baseUrl) ?? { kind: "unobserved" };
+}
+function deviceManagementVerbsAvailable(reading) {
+  return reading.kind === "present" ? reading.management ? "yes" : "no" : reading.kind === "lane_absent" ? "no" : "unknown";
+}
+function deviceExecutorManagementDoctorDetail(reading) {
+  switch (reading.kind) {
+    case "unobserved":
+      return "device management face not observed \u2014 the engine reports it on /v1/capabilities (deviceExecutor.management); this process has no usable capabilities reading cached for it (none received, or the last one was unreadable)";
+    case "not_reported":
+      return reading.why === "management_absent" ? "device management face not reported by this engine \u2014 the device lane is advertised but only newer engines say whether the /v1/devices management verbs exist; this does not say whether they exist, probe them directly" : "device executor capability not reported by this engine \u2014 only newer engines advertise the device lane at all; this does not say whether it exists";
+    case "lane_absent":
+      return "no device lane on this deployment \u2014 the /v1/devices management verbs are unavailable (capability.device_lane_required)";
+    case "present":
+      return reading.management ? "device management face on \u2014 the /v1/devices management verbs are available on this engine" : "device lane on but the /v1/devices management verbs are off on this deployment";
+  }
+}
+function forgetDeviceExecutorManagementReading(baseUrl) {
+  typeof baseUrl != "string" || baseUrl === "" || readingByBase6.delete(baseUrl);
+}
+function __resetDeviceExecutorManagementReadingsForTests() {
+  readingByBase6.clear();
+}
+var readingByBase6, init_deviceExecutorManagementCapability = __esm({
+  "node_modules/@sema-agent/client-core/dist/deviceExecutorManagementCapability.js"() {
+    init_engineWireTarget();
+    init_engineCapsGenerationGuard();
+    readingByBase6 = /* @__PURE__ */ new Map();
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/mcpReconnect.js
 function projectStatus(raw2) {
   if (!isRecord(raw2) || !nonEmpty(raw2.name) || !nonEmpty(raw2.status))
@@ -10128,6 +10551,85 @@ var LEADER_RUN_STATUSES, LEADER_REJ_HEAD_DISPLAY_MAX, DETAIL_FILES_MAX, DETAIL_P
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/runCancelContext.js
+function nonNegFinite(v2) {
+  return typeof v2 == "number" && Number.isFinite(v2) && v2 >= 0 ? v2 : void 0;
+}
+function runResultHolder(r) {
+  let inner = r.result;
+  if (inner === null || typeof inner != "object" || Array.isArray(inner))
+    return r;
+  let o = inner;
+  return Object.hasOwn(o, "terminal") || Object.hasOwn(o, "status") || Object.hasOwn(o, "cancelContext") ? o : r;
+}
+function readRunCancelContext(record3) {
+  if (record3 === null || typeof record3 != "object")
+    return;
+  let holder = runResultHolder(record3);
+  if (!Object.hasOwn(holder, "cancelContext") || holder.cancelContext === void 0)
+    return { kind: "not_reported" };
+  let c3 = holder.cancelContext;
+  if (c3 === null || typeof c3 != "object" || Array.isArray(c3))
+    return;
+  let o = c3, kind = typeof o.lastEventKind == "string" && o.lastEventKind.length > 0 ? o.lastEventKind : void 0, age = nonNegFinite(o.lastEventAgeMs), elapsed = nonNegFinite(o.elapsedMs), brain = o.lastBrainStatus !== null && typeof o.lastBrainStatus == "object" && !Array.isArray(o.lastBrainStatus) ? o.lastBrainStatus : void 0;
+  return {
+    kind: "present",
+    context: {
+      ...kind !== void 0 ? { lastEventKind: kind } : {},
+      ...age !== void 0 ? { lastEventAgeMs: age } : {},
+      ...elapsed !== void 0 ? { elapsedMs: elapsed } : {},
+      ...brain !== void 0 ? { lastBrainStatus: brain } : {}
+    }
+  };
+}
+function classifyRunAbortCause(record3) {
+  if (record3 === null || typeof record3 != "object")
+    return { kind: "unknown" };
+  let r = record3, status3 = typeof r.status == "string" && r.status.length > 0 ? r.status : void 0, read = readRunTerminal(runResultHolder(r));
+  if (read !== null && read.kind === "failed") {
+    if (read.code === RUN_CANCELLED_CODE) {
+      let cc = readRunCancelContext(record3);
+      return { kind: "cancelled", ...cc?.kind === "present" ? { context: cc.context } : {} };
+    }
+    return { kind: "engine_error", ...read.code !== void 0 ? { code: read.code } : {}, ...read.message !== void 0 ? { message: read.message } : {} };
+  }
+  return read !== null && read.kind === "paused" ? { kind: "run_still_live", ...status3 !== void 0 ? { status: status3 } : {} } : (read === null || read.kind === "unknown") && status3 !== void 0 && LIVE_STATUSES.has(status3) ? { kind: "run_still_live", status: status3 } : { kind: "unknown", ...read !== null ? { terminal: read.kind } : {} };
+}
+var RUN_CANCELLED_CODE, LIVE_STATUSES, init_runCancelContext = __esm({
+  "node_modules/@sema-agent/client-core/dist/runCancelContext.js"() {
+    init_runTerminal();
+    RUN_CANCELLED_CODE = "cancelled", LIVE_STATUSES = /* @__PURE__ */ new Set(["running", "queued", "suspended", "needs_review"]);
+  }
+});
+
+// node_modules/@sema-agent/client-core/dist/argvFlagValue.js
+function lastFlagValue(argv, name, onMissingValue = "invalidate") {
+  let eq2 = `${name}=`, present2 = !1, raw2, valueMissing = !1;
+  for (let i = 0; i < argv.length; i++) {
+    let a = argv[i];
+    if (a !== void 0) {
+      if (a === "--")
+        break;
+      if (a === name) {
+        present2 = !0;
+        let nxt = argv[i + 1];
+        if (nxt === void 0 || nxt.startsWith("-")) {
+          if (onMissingValue === "latch-previous")
+            continue;
+          valueMissing = !0, raw2 = void 0;
+          continue;
+        }
+        valueMissing = !1, raw2 = nxt, i++;
+      } else a.startsWith(eq2) && (present2 = !0, valueMissing = !1, raw2 = a.slice(eq2.length));
+    }
+  }
+  return present2 ? valueMissing || raw2 === void 0 ? { present: !0 } : { present: !0, raw: raw2 } : { present: !1 };
+}
+var init_argvFlagValue = __esm({
+  "node_modules/@sema-agent/client-core/dist/argvFlagValue.js"() {
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/readFacePosture.js
 function projectReadFacePosture(wiring) {
   if (typeof wiring != "object" || wiring === null || Array.isArray(wiring) || !("readFace" in wiring))
@@ -10690,7 +11192,7 @@ function eventToSdkMessage(ev, ctx) {
     //      臂上**还没有座位** ⇒ 这里是防御 raw 读(同 `label` / `model` 的既有姿势)。退役条件 =
     //      sdk 补上该位的当天,`run-compaction-boundary-projection-test.mjs` F10 行当场红逼复核。
     case "compacted": {
-      let raw2 = ev, attachedFiles = raw2.attachedFiles, seg = raw2.preserved_segment, firstKeptEntryId = typeof seg == "object" && seg !== null && !Array.isArray(seg) ? seg.firstKeptEntryId : void 0, clampedRatio = raw2.clampedRatio;
+      let raw2 = ev, freedTokens = typeof raw2.freedTokens == "number" && Number.isFinite(raw2.freedTokens) && raw2.freedTokens >= 0 ? raw2.freedTokens : void 0, attachedFiles = raw2.attachedFiles, seg = raw2.preserved_segment, firstKeptEntryId = typeof seg == "object" && seg !== null && !Array.isArray(seg) ? seg.firstKeptEntryId : void 0, clampedRatio = raw2.clampedRatio;
       return projected(stamp(ctx, {
         type: "system",
         subtype: "compact_boundary",
@@ -10702,7 +11204,8 @@ function eventToSdkMessage(ev, ctx) {
           trigger: typeof ev.trigger == "string" && ev.trigger.length > 0 ? ev.trigger : "auto",
           pre_tokens: ev.tokensBefore ?? 0,
           ...typeof firstKeptEntryId == "string" && firstKeptEntryId.length > 0 ? { _sema_preserved_segment: { firstKeptEntryId } } : {},
-          ...typeof clampedRatio == "number" && Number.isFinite(clampedRatio) ? { _sema_clamped_ratio: clampedRatio } : {}
+          ...typeof clampedRatio == "number" && Number.isFinite(clampedRatio) ? { _sema_clamped_ratio: clampedRatio } : {},
+          ...freedTokens !== void 0 ? { _sema_freed_tokens: freedTokens } : {}
         },
         ...Array.isArray(attachedFiles) && attachedFiles.length > 0 ? { attachedFiles } : {}
       }));
@@ -12684,11 +13187,11 @@ function toolNameKey(name) {
 function classifierDenyDisplay(toolName2, args) {
   let fallback = toolName2.length > 0 ? toolName2 : "tool", key = DISPLAY_ARG_KEY_BY_TOOL.get(toolNameKey(toolName2));
   if (key === void 0 || args === null || typeof args != "object")
-    return bounded(fallback);
+    return bounded2(fallback);
   let raw2 = args[key];
-  return typeof raw2 != "string" || raw2.trim().length === 0 ? bounded(fallback) : bounded(raw2);
+  return typeof raw2 != "string" || raw2.trim().length === 0 ? bounded2(fallback) : bounded2(raw2);
 }
-function bounded(s) {
+function bounded2(s) {
   if (s.length <= CLASSIFIER_DENY_DISPLAY_MAX)
     return s;
   let keep = CLASSIFIER_DENY_DISPLAY_MAX - 1, cut = s.slice(0, keep), last4 = cut.charCodeAt(cut.length - 1), next = s.charCodeAt(keep);
@@ -15406,34 +15909,6 @@ var ensured, init_scratchpadWireCaps = __esm({
   }
 });
 
-// node_modules/@sema-agent/client-core/dist/argvFlagValue.js
-function lastFlagValue(argv, name, onMissingValue = "invalidate") {
-  let eq2 = `${name}=`, present2 = !1, raw2, valueMissing = !1;
-  for (let i = 0; i < argv.length; i++) {
-    let a = argv[i];
-    if (a !== void 0) {
-      if (a === "--")
-        break;
-      if (a === name) {
-        present2 = !0;
-        let nxt = argv[i + 1];
-        if (nxt === void 0 || nxt.startsWith("-")) {
-          if (onMissingValue === "latch-previous")
-            continue;
-          valueMissing = !0, raw2 = void 0;
-          continue;
-        }
-        valueMissing = !1, raw2 = nxt, i++;
-      } else a.startsWith(eq2) && (present2 = !0, valueMissing = !1, raw2 = a.slice(eq2.length));
-    }
-  }
-  return present2 ? valueMissing || raw2 === void 0 ? { present: !0 } : { present: !0, raw: raw2 } : { present: !1 };
-}
-var init_argvFlagValue = __esm({
-  "node_modules/@sema-agent/client-core/dist/argvFlagValue.js"() {
-  }
-});
-
 // node_modules/@sema-agent/client-core/dist/sandboxWire.js
 function parseSandboxArgv(argv) {
   let flag = lastFlagValue(argv, "--sandbox");
@@ -16255,7 +16730,20 @@ function isElapsedBase(v2) {
   return typeof v2 == "number" && Number.isFinite(v2) && v2 >= 0;
 }
 function createFleetLedger(hooks2 = {}, opts = {}) {
-  let sessionKey = opts.sessionKey ?? DEFAULT_SESSION_KEY, nowFn = opts.nowFn ?? Date.now, taskMap = /* @__PURE__ */ new Map(), wfMap = /* @__PURE__ */ new Map(), rowMeta = /* @__PURE__ */ new Map(), retained = /* @__PURE__ */ new Map(), droppedMalformed = 0, droppedUnknownFrame = 0, droppedForeignBgNotification = 0, droppedStaleIngress = 0, connected = !1, version4 = null, scoped = null, sessionScopedMeta, bgNotifyFailClosedMeta = !1, disposed4 = !1, epochSeq = 0, liveStreamEpoch = 0, liveSnapshotEpoch = 0, streamAnchor, everIssuedStream = !1, contentAnchor, contentAnchorSet = !1, ledgerWrites = 0, debug5 = (line) => {
+  let sessionKey = opts.sessionKey ?? DEFAULT_SESSION_KEY, nowFn = opts.nowFn ?? Date.now, taskMap = /* @__PURE__ */ new Map(), wfMap = /* @__PURE__ */ new Map(), rowMeta = /* @__PURE__ */ new Map(), retained = /* @__PURE__ */ new Map(), cycleWatermark = /* @__PURE__ */ new Map(), CYCLE_WATERMARK_MAX = 512;
+  function raiseCycleWatermark(tail, gen) {
+    if (gen === void 0 || tail.length === 0)
+      return;
+    let prior = cycleWatermark.get(tail);
+    if (!(prior !== void 0 && prior >= gen)) {
+      if (cycleWatermark.delete(tail), cycleWatermark.size >= CYCLE_WATERMARK_MAX) {
+        let oldest = cycleWatermark.keys().next().value;
+        oldest !== void 0 && cycleWatermark.delete(oldest);
+      }
+      cycleWatermark.set(tail, gen);
+    }
+  }
+  let droppedMalformed = 0, droppedUnknownFrame = 0, droppedForeignBgNotification = 0, droppedStaleIngress = 0, connected = !1, version4 = null, scoped = null, sessionScopedMeta, bgNotifyFailClosedMeta = !1, disposed4 = !1, epochSeq = 0, liveStreamEpoch = 0, liveSnapshotEpoch = 0, streamAnchor, everIssuedStream = !1, contentAnchor, contentAnchorSet = !1, ledgerWrites = 0, debug5 = (line) => {
     engineWireDebugEnabled() && hostLog("debug", line);
   }, toBgTask = (r, retired) => {
     let parentId = wireParentId(r);
@@ -16315,7 +16803,7 @@ function createFleetLedger(hooks2 = {}, opts = {}) {
           break;
         }
         let receivedAtMs = nowFn();
-        taskMap.set(row2.id, row2), rowMeta.set(row2.id, { receivedAtMs }), debug5(`[fleet-row] id=${row2.id} parent=${row2.parentId ?? "-"} agentType=${row2.agentType ?? "-"} agentName=${row2.agentName ?? "-"} name=${row2.name ?? "-"} status=${row2.status ?? "-"} tokens=${row2.tokens ?? "-"} parentToolCallId=${row2.parentToolCallId ?? "-"}`);
+        taskMap.set(row2.id, row2), raiseCycleWatermark(rowIdTail(row2.id), wireCycleSeq(row2)), rowMeta.set(row2.id, { receivedAtMs }), debug5(`[fleet-row] id=${row2.id} parent=${row2.parentId ?? "-"} agentType=${row2.agentType ?? "-"} agentName=${row2.agentName ?? "-"} name=${row2.name ?? "-"} status=${row2.status ?? "-"} tokens=${row2.tokens ?? "-"} parentToolCallId=${row2.parentToolCallId ?? "-"}`);
         let parentId = wireParentId(row2);
         if (parentId !== void 0) {
           let childTid = rowIdTail(row2.id), parentTid = rowIdTail(parentId), parentOwned = isOwnEngineRun(parentTid);
@@ -16335,9 +16823,27 @@ function createFleetLedger(hooks2 = {}, opts = {}) {
         }
         break;
       }
-      case "task_remove":
-        taskMap.delete(frame.id), rowMeta.delete(frame.id);
+      case "task_remove": {
+        let fr = frame, removedGen = typeof fr.cycleSeq == "number" && Number.isInteger(fr.cycleSeq) && fr.cycleSeq >= 1 ? fr.cycleSeq : void 0, held = taskMap.get(frame.id), heldGen = held !== void 0 ? wireCycleSeq(held) : void 0, stale = removedGen !== void 0 && heldGen !== void 0 && removedGen < heldGen;
+        if (stale || (taskMap.delete(frame.id), rowMeta.delete(frame.id)), hooks2.onTaskRemoved !== void 0) {
+          let reason = typeof fr.removeReason == "string" && fr.removeReason.length > 0 ? fr.removeReason : void 0;
+          try {
+            let out6 = hooks2.onTaskRemoved({
+              id: frame.id,
+              ...reason !== void 0 ? { removeReason: reason } : {},
+              ...removedGen !== void 0 ? { cycleSeq: removedGen } : {},
+              ...stale ? { stale: !0 } : {},
+              ...held === void 0 ? { unknownRow: !0 } : {}
+            });
+            out6 && typeof out6.then == "function" && Promise.resolve(out6).catch((e) => {
+              hostLog("debug", `[fleet-frame] onTaskRemoved hook rejected: ${String(e).slice(0, 160)}`);
+            });
+          } catch (e) {
+            hostLog("debug", `[fleet-frame] onTaskRemoved hook threw: ${String(e).slice(0, 160)}`);
+          }
+        }
         break;
+      }
       case "workflow":
         frame.row?.id ? wfMap.set(frame.row.id, frame.row) : (droppedMalformed++, debug5("[fleet-frame] MALFORMED workflow frame dropped(row \u6216 row.id \u7F3A\u5E2D)"));
         break;
@@ -16376,11 +16882,20 @@ function createFleetLedger(hooks2 = {}, opts = {}) {
       (id === n2.taskId || rowIdTail(id) === n2.taskId) && rowIds.push(id);
     if (TERMINAL_FLEET_TASK_STATUSES.has(n2.status)) {
       typeof n2.parentTaskId == "string" && n2.parentTaskId && recordBgParentRun(n2.taskId, n2.parentTaskId, ing?.session, ing?.sessionKey), typeof n2.transcriptId == "string" && n2.transcriptId.length > 0 && recordEngineTranscriptId(n2.taskId, n2.transcriptId);
-      let isWashGreen = (prior, next) => next === "completed" && (prior === "failed" || prior === "killed"), coerced = n2.status, nowMs2 = nowFn(), writtenIds = /* @__PURE__ */ new Set(), applied = !1, washBlocked = !1;
+      let isWashGreen = (prior, next) => next === "completed" && (prior === "failed" || prior === "killed"), coerced = n2.status, nowMs2 = nowFn(), writtenIds = /* @__PURE__ */ new Set(), applied = !1, washBlocked = !1, staleBlocked = !1, notifSeq = typeof n2.seq == "number" && Number.isInteger(n2.seq) && n2.seq >= 1 ? n2.seq : void 0;
+      {
+        let mark = cycleWatermark.get(n2.taskId);
+        notifSeq !== void 0 && mark !== void 0 && notifSeq < mark && (staleBlocked = !0, debug5(`[fleet-frame] bg_notification stale-cycle ignored(watermark=${mark} notif-seq=${notifSeq})`));
+      }
       for (let id of rowIds) {
         let known = taskMap.get(id);
         if (!known)
           continue;
+        let heldGen = wireCycleSeq(known);
+        if (notifSeq !== void 0 && heldGen !== void 0 && notifSeq < heldGen) {
+          staleBlocked = !0, debug5(`[fleet-frame] bg_notification stale-cycle ignored(row=${id} row-cycle=${heldGen} notif-seq=${notifSeq})`);
+          continue;
+        }
         let rowStatus = known.status ?? "";
         if (TERMINAL_FLEET_TASK_STATUSES.has(rowStatus)) {
           if (isWashGreen(rowStatus, n2.status)) {
@@ -16408,6 +16923,11 @@ function createFleetLedger(hooks2 = {}, opts = {}) {
       for (let [id, entry] of retained) {
         if (writtenIds.has(id) || id !== n2.taskId && rowIdTail(id) !== n2.taskId)
           continue;
+        let retainedGen = wireCycleSeq(entry.row);
+        if (notifSeq !== void 0 && retainedGen !== void 0 && notifSeq < retainedGen) {
+          staleBlocked = !0, debug5(`[fleet-frame] bg_notification stale-cycle ignored(retained=${id} row-cycle=${retainedGen} notif-seq=${notifSeq})`);
+          continue;
+        }
         let prior = entry.row.status ?? "";
         if (prior === n2.status) {
           applied = !0;
@@ -16424,11 +16944,21 @@ function createFleetLedger(hooks2 = {}, opts = {}) {
           ...entry.retiredByNotification === !0 ? { retiredByNotification: !0 } : {}
         }), applied = !0;
       }
-      applied || !washBlocked && (() => {
+      let factsAccepted = !staleBlocked && (applied || !washBlocked && (() => {
         let prior = getBgTerminalFacts(n2.taskId);
-        return !(prior !== void 0 && isWashGreen(prior.status, n2.status));
-      })() ? recordBgTerminalFacts(n2.taskId, {
+        if (prior === void 0)
+          return !0;
+        if (notifSeq !== void 0 && prior.cycleSeq !== void 0) {
+          if (notifSeq < prior.cycleSeq)
+            return !1;
+          if (notifSeq > prior.cycleSeq)
+            return !0;
+        }
+        return !isWashGreen(prior.status, n2.status);
+      })());
+      factsAccepted && raiseCycleWatermark(n2.taskId, notifSeq), factsAccepted ? recordBgTerminalFacts(n2.taskId, {
         status: n2.status,
+        ...notifSeq !== void 0 ? { cycleSeq: notifSeq } : {},
         ...typeof n2.summary == "string" ? { summary: n2.summary } : {},
         // 🔴 SDK 0.0.117 把 `recentSteps` 的三键 declare 成**必填** string,但那是**声称**不是保证:
         //    帧从 wire 上来,脏项(null / 缺键 / 非串)在类型面之外仍可能到达,而 BgTerminalFacts
@@ -17271,17 +17801,22 @@ function str4(v2) {
 function readDecideReceipt(result) {
   if (typeof result != "object" || result === null || Array.isArray(result))
     return;
-  let r = result, status3 = Object.hasOwn(r, "status") ? str4(r.status) : void 0, taskId = Object.hasOwn(r, "taskId") ? str4(r.taskId) : void 0, sessionId = Object.hasOwn(r, "sessionId") ? str4(r.sessionId) : void 0, idempotent = Object.hasOwn(r, "idempotent") && r.idempotent === !0 ? !0 : void 0, handoffTaskId = status3 === STATUS_RESUMING && taskId !== void 0 ? taskId : void 0, executionOutcome = Object.hasOwn(r, "executionOutcome") ? gateOutcomeOf({ gate: r.executionOutcome }) : void 0;
-  if (!(status3 === void 0 && taskId === void 0 && sessionId === void 0 && idempotent === void 0 && executionOutcome === void 0))
+  let r = result, status3 = Object.hasOwn(r, "status") ? str4(r.status) : void 0, taskId = Object.hasOwn(r, "taskId") ? str4(r.taskId) : void 0, sessionId = Object.hasOwn(r, "sessionId") ? str4(r.sessionId) : void 0, idempotent = Object.hasOwn(r, "idempotent") && r.idempotent === !0 ? !0 : void 0, handoffTaskId = status3 === STATUS_RESUMING && taskId !== void 0 ? taskId : void 0, executionOutcome = Object.hasOwn(r, "executionOutcome") ? gateOutcomeOf({ gate: r.executionOutcome }) : void 0, errorCode = Object.hasOwn(r, "errorCode") ? str4(r.errorCode) : void 0, retriable = Object.hasOwn(r, "retriable") && typeof r.retriable == "boolean" ? r.retriable : void 0;
+  if (!(status3 === void 0 && taskId === void 0 && sessionId === void 0 && idempotent === void 0 && executionOutcome === void 0 && errorCode === void 0 && retriable === void 0))
     return {
       ...status3 !== void 0 ? { status: status3 } : {},
       ...taskId !== void 0 ? { taskId } : {},
       ...sessionId !== void 0 ? { sessionId } : {},
       ...idempotent !== void 0 ? { idempotent } : {},
       ...handoffTaskId !== void 0 ? { handoffTaskId } : {},
-      ...executionOutcome !== void 0 ? { executionOutcome } : {}
+      ...executionOutcome !== void 0 ? { executionOutcome } : {},
+      ...errorCode !== void 0 ? { errorCode } : {},
+      ...retriable !== void 0 ? { retriable } : {}
     };
 }
+function decideReceiptReopen(receipt) {
+  return receipt === void 0 || receipt.status !== STATUS_FAILED ? null : resumeReopenFromError(receipt);
+}
 function decideAcceptedNotResolved(receipt) {
   return receipt?.status === STATUS_RESUMING;
 }
@@ -17297,11 +17832,13 @@ function decideRefusalFromError(e) {
     resendable: Object.hasOwn(DECIDE_RESENDABLE, code2) ? DECIDE_RESENDABLE[code2] === !0 : !1
   };
 }
-var STATUS_RESUMING, DECIDE_REFUSAL_SENTENCES, DECIDE_RESENDABLE, init_decideReceipt = __esm({
+var STATUS_RESUMING, STATUS_FAILED, DECIDE_REFUSAL_SENTENCES, DECIDE_RESENDABLE, init_decideReceipt = __esm({
   "node_modules/@sema-agent/client-core/dist/decideReceipt.js"() {
     init_gateOutcome();
+    init_resumeRefusalCopy();
     init_engineErrorCodes();
     STATUS_RESUMING = "resuming";
+    STATUS_FAILED = "failed";
     DECIDE_REFUSAL_SENTENCES = Object.freeze({
       [DECIDE_WORKFLOW_HOST_UNKNOWN]: "no session is attached to this run to receive the decision, so re-sending the same decision cannot help; the approval is still pending and can be decided again once the run is reachable",
       [DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED]: "this run cannot remember the decision for the session; re-send the same decision without the remember option \u2014 nothing was consumed by this refusal"
@@ -19711,6 +20248,22 @@ var PROVIDER_PRESETS, MODEL_FAMILIES, VARIANT_TAIL, presetIndexCache, init_provi
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/hitl/suspendedReopen.js
+function suspendedReopenOf(ev) {
+  if (ev === null || typeof ev != "object" || Array.isArray(ev))
+    return UNSTATED;
+  let o = ev;
+  if (!Object.hasOwn(o, "reopened"))
+    return UNSTATED;
+  let v2 = o.reopened;
+  return v2 === null ? NOT_REOPENED : typeof v2 == "string" && v2.length > 0 ? { kind: "reopened", code: v2 } : UNSTATED;
+}
+var UNSTATED, NOT_REOPENED, init_suspendedReopen = __esm({
+  "node_modules/@sema-agent/client-core/dist/hitl/suspendedReopen.js"() {
+    UNSTATED = Object.freeze({ kind: "unstated" }), NOT_REOPENED = Object.freeze({ kind: "not_reopened" });
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/hitl/hitlBridge.js
 function denyReasonForWire(reason, tag2) {
   if (typeof reason != "string")
@@ -19812,6 +20365,7 @@ var DEFAULT_DENY_REASON, MAX_DENY_REASON_CHARS, PLAN_REVIEW_MODE_AFTER_WORDS, Hi
     init_types();
     init_host();
     init_abortableSleep();
+    init_suspendedReopen();
     DEFAULT_DENY_REASON = "The user rejected this tool use", MAX_DENY_REASON_CHARS = 4096;
     PLAN_REVIEW_MODE_AFTER_WORDS = Object.freeze(["default", "acceptEdits"]);
     HitlSafetyError = class extends Error {
@@ -19852,7 +20406,7 @@ var DEFAULT_DENY_REASON, MAX_DENY_REASON_CHARS, PLAN_REVIEW_MODE_AFTER_WORDS, Hi
       observe(ev) {
         switch (ev.type) {
           case "suspended":
-            ev.gate ? this.active = { gate: ev.gate, seq: eventSeq(ev) } : this.active = { gate: { kind: "human" }, seq: eventSeq(ev) };
+            ev.gate ? this.active = { gate: ev.gate, seq: eventSeq(ev), reopened: suspendedReopenOf(ev) } : this.active = { gate: { kind: "human" }, seq: eventSeq(ev), reopened: suspendedReopenOf(ev) };
             break;
           case "done":
           case "failed":
@@ -19867,6 +20421,14 @@ var DEFAULT_DENY_REASON, MAX_DENY_REASON_CHARS, PLAN_REVIEW_MODE_AFTER_WORDS, Hi
       currentGate() {
         return this.active?.gate ?? null;
       }
+      /**
+       * 0.74.3 CC-73:当前挂起是不是一次 reopen(`suspended.reopened` 三态);没挂起 ⇒ `null`。
+       * 消费方据此把「真 reopen 成功、重试会重放」那半句说出来:`reopened` 在场码 ⇒ 卡仍 pending、决定没被消费、可再决;
+       * `not_reopened` / `unstated` ⇒ 普通挂起,一个字都不多说。
+       */
+      currentGateReopen() {
+        return this.active?.reopened ?? null;
+      }
       /**
        * Fetch the `PendingCheckpoint` this decide/answer is about to resolve, for the callers that do NOT
        * already have one in hand (see `decideTool`/`answerQuestion`'s `preResolvedPending` param — the wire
@@ -20060,6 +20622,25 @@ var DEFAULT_DENY_REASON, MAX_DENY_REASON_CHARS, PLAN_REVIEW_MODE_AFTER_WORDS, Hi
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/hitl/approvalOutcomeNote.js
+function nonEmpty4(v2) {
+  return typeof v2 == "string" && v2.length > 0 ? v2 : void 0;
+}
+function approvalOutcomeNoteOf(frame, outcome) {
+  let retracted = outcome.retracted === !0, refusal = outcome.respondRefusal, detail = retracted ? APPROVAL_NOTE_RETRACTED_DETAIL : outcome.editRefused === !0 ? APPROVAL_NOTE_EDIT_REFUSED_DETAIL : [nonEmpty4(refusal?.errorCode), nonEmpty4(refusal?.message)].filter((x3) => x3 !== void 0).join(" \xB7 ");
+  return {
+    approvalId: frame.approvalId,
+    settled: outcome.decision !== "unresolved",
+    ...retracted ? { retracted: !0 } : {},
+    ...detail.length > 0 ? { detail } : {}
+  };
+}
+var APPROVAL_NOTE_RETRACTED_DETAIL, APPROVAL_NOTE_EDIT_REFUSED_DETAIL, init_approvalOutcomeNote = __esm({
+  "node_modules/@sema-agent/client-core/dist/hitl/approvalOutcomeNote.js"() {
+    APPROVAL_NOTE_RETRACTED_DETAIL = "the card was retracted (this host no longer has a decision port for it)", APPROVAL_NOTE_EDIT_REFUSED_DETAIL = "edits are not accepted on this card";
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/hitl/gateIdentity.js
 function approvalCallKey(gatedCallId, taskId) {
   return gatedCallId ?? taskId;
@@ -20420,6 +21001,8 @@ async function surfaceFsApprovalAndDecide(deps2, taskId, argsByCall, signal, par
   switch (card.kind) {
     case "failed":
       return { kind: "failed", stage: "card", gatedCallId, reason: card.reason };
+    case "retracted":
+      return hostLog("debug", `liveHitlAskWire: approval card retracted without a decision for ${gatedCallId ?? "(no call)"} \u2014 nothing sent`), { kind: "retracted", gatedCallId };
     case "aborted":
       return observeCancelByDeny(bridge3.decideTool({ decision: "deny", reason: "Interrupted by user" }, gatedCallId, void 0, pending4), taskId), { kind: "aborted", gatedCallId };
     case "allow":
@@ -20473,7 +21056,7 @@ function readReadRootCandidate(v2) {
     return;
   let o = v2;
   if (!(typeof o.dir != "string" || o.dir.length === 0 || o.clearsThisAsk !== !0))
-    return { dir: o.dir, clearsThisAsk: !0 };
+    return "covers" in o ? o.covers === "exact" ? { dir: o.dir, clearsThisAsk: !0, covers: "exact" } : void 0 : { dir: o.dir, clearsThisAsk: !0 };
 }
 function isToolApprovalDelegation(v2) {
   if (v2 === null || typeof v2 != "object")
@@ -20824,6 +21407,8 @@ async function surfaceToolApprovalFrameAndRespond(frame, respond, streamArgs, si
   });
   if (lane?.argsUnavailable === !0 && card.kind === "allow" && card.updatedInput !== void 0)
     return hostLog("error", `liveToolApprovalWire: ${frame.approvalId} card returned an edited approval on an args-unavailable ask \u2014 nothing sent (the ask stays pending)`), surfaceEditRefusedOnBlindAsk(), { decision: "unresolved", editRefused: !0 };
+  if (card.kind === RETRACTED_CARD_DECISION_KIND)
+    return hostLog("debug", `liveToolApprovalWire: ${frame.approvalId} card retracted without a decision${card.reason ? ` (${card.reason})` : ""} \u2014 nothing sent`), { decision: "unresolved", retracted: !0 };
   let decision = card.kind === "allow" ? card.allowSession ? "allow_session" : "allow" : "deny";
   card.kind === "failed" && hostLog("debug", `liveToolApprovalWire: approval card unavailable (${card.reason}) \u2014 fail-closed deny for ${frame.approvalId}`);
   let note;
@@ -20863,7 +21448,7 @@ async function surfaceToolApprovalFrameAndRespond(frame, respond, streamArgs, si
     return hostLog("debug", `liveToolApprovalWire: respond(${decision}) failed for ${frame.approvalId} (status=${respondRefusal?.status ?? "none"} errorCode=${logSafeErrorCode(respondRefusal?.errorCode)} messageLen=${respondRefusal?.message?.length ?? 0}) \u2014 engine self-settles (TTL/abort); the refusal text is handed back on outcome.respondRefusal for the host to surface`), respondRefusal !== void 0 ? { decision: "unresolved", respondRefusal } : { decision: "unresolved" };
   }
 }
-var cardPortByKey, cardPortMissesByKey, TOOL_APPROVAL_FRAME_KEYS_MIRROR, RESPOND_DECISIONS, USELESS_REFUSAL_TEXTS, MACHINE_CODE_SHAPE, FS_WRITE_GATE_ASK_PATTERN, MAX_RULE_OFFERS_TOLERATED, MAX_RULE_OFFER_BATCH_MEMBERS_TOLERATED, MAX_RULE_OFFER_UNCOVERED_DETAIL_TOLERATED, MAX_RESPOND_NOTE_CHARS, init_toolApprovalWire = __esm({
+var RETRACTED_CARD_DECISION_KIND, cardPortByKey, cardPortMissesByKey, TOOL_APPROVAL_FRAME_KEYS_MIRROR, RESPOND_DECISIONS, USELESS_REFUSAL_TEXTS, MACHINE_CODE_SHAPE, FS_WRITE_GATE_ASK_PATTERN, MAX_RULE_OFFERS_TOLERATED, MAX_RULE_OFFER_BATCH_MEMBERS_TOLERATED, MAX_RULE_OFFER_UNCOVERED_DETAIL_TOLERATED, MAX_RESPOND_NOTE_CHARS, init_toolApprovalWire = __esm({
   "node_modules/@sema-agent/client-core/dist/hitl/toolApprovalWire.js"() {
     init_hitlBridge();
     init_askParkRowRouting();
@@ -20874,7 +21459,7 @@ var cardPortByKey, cardPortMissesByKey, TOOL_APPROVAL_FRAME_KEYS_MIRROR, RESPOND
     init_gateIdentity();
     init_gateVocabulary();
     init_decideReceipt();
-    cardPortByKey = createSessionSlot(), cardPortMissesByKey = /* @__PURE__ */ new Map();
+    RETRACTED_CARD_DECISION_KIND = "retracted", cardPortByKey = createSessionSlot(), cardPortMissesByKey = /* @__PURE__ */ new Map();
     TOOL_APPROVAL_FRAME_KEYS_MIRROR = [
       "type",
       "approvalId",
@@ -21063,7 +21648,16 @@ async function routeToolApprovalFrame(ev, ctx) {
   }
   let fromSubagent = isFromSubagent(ev);
   hostLog("debug", `liveHitlAskWire: tool_approval frame ${ev.approvalId} tool=${String(ev.toolName)}${fromSubagent ? ` from-subagent=${String(ev.sourceTaskId ?? ev.sourceAgentName ?? "explicit")}` : ""}`);
-  let gatedCallId = fromSubagent ? void 0 : led.lastPendingFsCall(), { decision } = await surfaceToolApprovalFrameAndRespond(ev, deps2.respondToolApproval, argsOfGatedStart(led, gatedCallId), ctx.signal, deps2.approvalLane);
+  let gatedCallId = fromSubagent ? void 0 : led.lastPendingFsCall(), outcome = await surfaceToolApprovalFrameAndRespond(ev, deps2.respondToolApproval, argsOfGatedStart(led, gatedCallId), ctx.signal, deps2.approvalLane), { decision } = outcome;
+  if (deps2.onToolApprovalOutcome !== void 0)
+    try {
+      let out6 = deps2.onToolApprovalOutcome(ev, outcome);
+      out6 && typeof out6.then == "function" && Promise.resolve(out6).catch((e) => {
+        hostLog("debug", `liveHitlAskWire: onToolApprovalOutcome rejected: ${String(e).slice(0, 160)}`);
+      });
+    } catch (e) {
+      hostLog("debug", `liveHitlAskWire: onToolApprovalOutcome threw: ${String(e).slice(0, 160)}`);
+    }
   return decision === "deny" && !fromSubagent && (gatedCallId !== void 0 ? led.markDenied(gatedCallId) : led.armDenyStamp()), { kind: "skip" };
 }
 function routeToolStart(ev, callId, led) {
@@ -21577,14 +22171,15 @@ async function resolvePark(park, ctx) {
       outcome = { kind: "failed", stage: "orchestration", reason: stalledReason };
     else {
       let closing = await surfaceParkGate(park, ctx, park.gatedCallId, witness);
-      outcome = closing.kind === "decided" || closing.kind === "aborted" ? closing : { kind: "failed", stage: "orchestration", reason: `${stalledReason}; closing re-read: ${closing.reason}` };
+      outcome = closing.kind === "decided" || closing.kind === "aborted" || closing.kind === "retracted" ? closing : { kind: "failed", stage: "orchestration", reason: `${stalledReason}; closing re-read: ${closing.reason}` };
     }
   } else
     park.gate === "fs" && (candidateGatedCallId = led.lastFsOrShellGatedCallId()), outcome = await surfaceParkGate(park, ctx, park.gatedCallId, witness);
   let alreadyDecidedById = outcome.kind === "failed" && candidateGatedCallId !== void 0 && led.takeDecided(candidateGatedCallId);
   if (!closingCardTried && outcome.kind === "failed" && (isAlreadyResolvedFailure(outcome) || alreadyDecidedById)) {
     let firstReason = outcome.reason, streakKey = alreadyResolvedStreakKey(!isAlreadyResolvedFailure(outcome) && alreadyDecidedById), reasonToken = alreadyResolvedReasonToken(outcome.reason), rescan = isFetchStepNoPending(outcome) && stalledRounds <= MAX_GATE_HOPS ? await surfaceParkGate(park, ctx, park.gatedCallId, witness) : void 0;
-    if (rescan !== void 0 && (rescan.kind === "decided" || rescan.kind === "aborted" || rescan.kind === "failed" && rescan.retryExhausted === !0))
+    if (rescan !== void 0 && (rescan.kind === "decided" || rescan.kind === "aborted" || rescan.kind === "retracted" || // 0.74.1(CC-67):宿主撤卡也是「人那一侧有了处置」,采信,不再重探
+    rescan.kind === "failed" && rescan.retryExhausted === !0))
       hostLog("debug", `liveHitlAskWire: gate reported already-resolved (${firstReason}) but a fresh approvals re-read for run ${taskId} surfaced a decidable row under the current coordinates \u2014 re-presented it (rescan: ${rescan.kind}) instead of re-attaching on the stale park identity`), outcome = rescan;
     else {
       let streak = led.noteAlreadyResolvedGate(streakKey);
@@ -21616,8 +22211,11 @@ async function resolvePark(park, ctx) {
       reason: `the decide call failed on transport ${streak} times in a row while the run stayed parked (${outcome.reason})`
     };
   }
-  if (outcome.kind !== "decided")
-    return hostLog("debug", `liveHitlAskWire: gate not decided (${outcome.kind}${"reason" in outcome ? `: ${outcome.reason}` : ""}) \u2014 fail-soft to suspended terminal`), { kind: "failsoft", events: failsoftEvents(park, ctx, outcome.kind === "aborted", outcome.kind === "failed" ? outcome.reason : void 0) };
+  if (outcome.kind !== "decided") {
+    hostLog("debug", `liveHitlAskWire: gate not decided (${outcome.kind}${"reason" in outcome ? `: ${outcome.reason}` : ""}) \u2014 fail-soft to suspended terminal`);
+    let failedReason = outcome.kind === "failed" ? outcome.reason : outcome.kind === "retracted" ? "the approval card was retracted by the host without a decision (nothing was sent; the run stays parked and remains decidable elsewhere)" : void 0;
+    return { kind: "failsoft", events: failsoftEvents(park, ctx, outcome.kind === "aborted", failedReason) };
+  }
   led.dropHeldForDecidedPark(outcome.gatedCallId, park.gatedCallId), outcome.gatedCallId && (led.markDecided(outcome.gatedCallId), "answered" in outcome && outcome.answered && led.rememberAnswer(outcome.gatedCallId, outcome.answered));
   let handoffTaskId = "receipt" in outcome && outcome.receipt?.handoffTaskId !== void 0 && outcome.receipt.handoffTaskId !== taskId ? outcome.receipt.handoffTaskId : void 0, seq2 = led.lastSeq();
   return hostLog("debug", handoffTaskId !== void 0 ? `liveHitlAskWire: gate decided (call ${outcome.gatedCallId ?? "?"}) \u2014 the decide was ACCEPTED for delivery (status "resuming") and the engine handed the continuation to run ${handoffTaskId}; attaching runs.events(${handoffTaskId}) from the start (durable seq is per-run, so ${seq2 ?? "the previous seq"} does not apply there)` : `liveHitlAskWire: gate decided (call ${outcome.gatedCallId ?? "?"}) \u2014 attaching runs.events(${taskId})${seq2 ? ` from seq ${seq2}` : ""}`), {
@@ -24745,6 +25343,8 @@ __export(dist_exports, {
   ADAPTER_DIVERGENCES: () => ADAPTER_DIVERGENCES,
   AGENT_MEMORY_WORDS: () => AGENT_MEMORY_WORDS,
   AGENT_MESSAGE_TAG: () => AGENT_MESSAGE_TAG,
+  APPROVAL_NOTE_EDIT_REFUSED_DETAIL: () => APPROVAL_NOTE_EDIT_REFUSED_DETAIL,
+  APPROVAL_NOTE_RETRACTED_DETAIL: () => APPROVAL_NOTE_RETRACTED_DETAIL,
   ASK_ORIGIN_WORDS: () => ASK_ORIGIN_WORDS,
   ASK_PARK_GATE_KINDS: () => ASK_PARK_GATE_KINDS,
   ASK_PARK_ROW_POLL_MS: () => ASK_PARK_ROW_POLL_MS,
@@ -24886,6 +25486,7 @@ __export(dist_exports, {
   MAX_AGENT_TOOLS: () => MAX_AGENT_TOOLS,
   MAX_AGENT_TOOL_NAME_CHARS: () => MAX_AGENT_TOOL_NAME_CHARS,
   MAX_GATE_HOPS: () => MAX_GATE_HOPS,
+  MAX_HELD_WIRE_TICK_BEATS: () => MAX_HELD_WIRE_TICK_BEATS,
   MAX_HOOK_NOTICE_TEXT_CHARS: () => MAX_HOOK_NOTICE_TEXT_CHARS,
   MAX_TASK_AGENTS: () => MAX_TASK_AGENTS,
   MAX_TOKENS_MAX: () => MAX_TOKENS_MAX,
@@ -24953,6 +25554,7 @@ __export(dist_exports, {
   RESUME_USAGE_WINDOW_EXHAUSTED: () => RESUME_USAGE_WINDOW_EXHAUSTED,
   RETAIN_BACKGROUND_ENV: () => RETAIN_BACKGROUND_ENV,
   RETIRED_PERMISSION_RULE_ISSUE_CODES: () => RETIRED_PERMISSION_RULE_ISSUE_CODES,
+  RETRACTED_CARD_DECISION_KIND: () => RETRACTED_CARD_DECISION_KIND,
   REVIEW_PARK_GATE_KINDS: () => REVIEW_PARK_GATE_KINDS,
   REWIND_ERROR_CODE_PREFIXES: () => REWIND_ERROR_CODE_PREFIXES,
   RULE_NOT_SENT_REJECTED_WARN_TEXT: () => RULE_NOT_SENT_REJECTED_WARN_TEXT,
@@ -24964,6 +25566,7 @@ __export(dist_exports, {
   RULE_STORE_UNREADABLE_KINDS: () => RULE_STORE_UNREADABLE_KINDS,
   RUNNING_STATES: () => RUNNING_STATES,
   RUN_BLOCKED_MESSAGE_PREFIX: () => RUN_BLOCKED_MESSAGE_PREFIX,
+  RUN_CANCELLED_CODE: () => RUN_CANCELLED_CODE,
   RUN_LEVEL_STOP_ERROR_CODES: () => RUN_LEVEL_STOP_ERROR_CODES,
   RUN_STOPPED_MESSAGE_PREFIX: () => RUN_STOPPED_MESSAGE_PREFIX,
   RUN_TERMINAL_NOT_SUCCESS_STATUSES: () => RUN_TERMINAL_NOT_SUCCESS_STATUSES,
@@ -25055,7 +25658,9 @@ __export(dist_exports, {
   __feedWorkflowActivityFrameForTests: () => __feedWorkflowActivityFrameForTests,
   __resetApprovalsStreamLiveReadingsForTests: () => __resetApprovalsStreamLiveReadingsForTests,
   __resetBgOwnerAbsenceForTests: () => __resetBgOwnerAbsenceForTests,
+  __resetDeviceExecutorManagementReadingsForTests: () => __resetDeviceExecutorManagementReadingsForTests,
   __resetEngineAgentPanelAbsenceForTests: () => __resetEngineAgentPanelAbsenceForTests,
+  __resetEngineAgentPanelIdentityForTests: () => __resetEngineAgentPanelIdentityForTests,
   __resetEngineCapsCacheForTests: () => __resetEngineCapsCacheForTests,
   __resetEngineCompactArmForTests: () => __resetEngineCompactArmForTests,
   __resetEngineDelegatedPromptForTests: () => __resetEngineDelegatedPromptForTests,
@@ -25114,6 +25719,7 @@ __export(dist_exports, {
   approvalCardPortFor: () => approvalCardPortFor,
   approvalCardPortMisses: () => approvalCardPortMisses,
   approvalCardPortMissesFor: () => approvalCardPortMissesFor,
+  approvalOutcomeNoteOf: () => approvalOutcomeNoteOf,
   approvalsStreamLiveDoctorDetail: () => approvalsStreamLiveDoctorDetail,
   armDetachCancel: () => armDetachCancel,
   armPlanReviewApproval: () => armPlanReviewApproval,
@@ -25162,6 +25768,7 @@ __export(dist_exports, {
   classifyMemoryStatusFailure: () => classifyMemoryStatusFailure,
   classifyPeerNotification: () => classifyPeerNotification,
   classifyRulesFailure: () => classifyRulesFailure,
+  classifyRunAbortCause: () => classifyRunAbortCause,
   classifySelfOrchestrationRefusal: () => classifySelfOrchestrationRefusal,
   classifySkippedReason: () => classifySkippedReason,
   classifySubagentResumeFailure: () => classifySubagentResumeFailure,
@@ -25172,6 +25779,7 @@ __export(dist_exports, {
   clearArmedGate: () => clearArmedGate,
   clearBgTerminalFacts: () => clearBgTerminalFacts,
   clearEnginePanelTaskResident: () => clearEnginePanelTaskResident,
+  clearEnginePanelTaskResidentByWire: () => clearEnginePanelTaskResidentByWire,
   clearRunningChoiceOffer: () => clearRunningChoiceOffer,
   clearSubagentContent: () => clearSubagentContent,
   clientContextField: () => clientContextField,
@@ -25206,6 +25814,7 @@ __export(dist_exports, {
   createWireToCcAdapter: () => createWireToCcAdapter,
   decideAcceptedNotResolved: () => decideAcceptedNotResolved,
   decidePlanReview: () => decidePlanReview,
+  decideReceiptReopen: () => decideReceiptReopen,
   decideRefusalFromError: () => decideRefusalFromError,
   decisionNoteAuditLine: () => decisionNoteAuditLine,
   defaultMaxTokensFor: () => defaultMaxTokensFor,
@@ -25222,6 +25831,8 @@ __export(dist_exports, {
   detachedTaskId: () => detachedTaskId,
   detectEngineBgShellReceipt: () => detectEngineBgShellReceipt,
   deviceAuthProviderFor: () => deviceAuthProviderFor,
+  deviceExecutorManagementDoctorDetail: () => deviceExecutorManagementDoctorDetail,
+  deviceManagementVerbsAvailable: () => deviceManagementVerbsAvailable,
   diagnoseSseIdleTear: () => diagnoseSseIdleTear,
   discussionWorkflowName: () => discussionWorkflowName,
   doneToSdkResult: () => doneToSdkResult,
@@ -25291,6 +25902,7 @@ __export(dist_exports, {
   fmtCtxOut: () => fmtCtxOut,
   fmtTokens: () => fmtTokens,
   forgetApprovalsStreamLiveReading: () => forgetApprovalsStreamLiveReading,
+  forgetDeviceExecutorManagementReading: () => forgetDeviceExecutorManagementReading,
   forgetExecutionLaneReading: () => forgetExecutionLaneReading,
   forgetSqlEngineReading: () => forgetSqlEngineReading,
   forgetWebSearchBackendReading: () => forgetWebSearchBackendReading,
@@ -25403,6 +26015,7 @@ __export(dist_exports, {
   isLoopbackWireUrl: () => isLoopbackWireUrl,
   isModelOutputErrorRowText: () => isModelOutputErrorRowText,
   isModelOutputErrorText: () => isModelOutputErrorText,
+  isNewEngineAgentPanelCycle: () => isNewEngineAgentPanelCycle,
   isOutcomeUnknownRowText: () => isOutcomeUnknownRowText,
   isOwnEngineRun: () => isOwnEngineRun,
   isOwnWorkflowRun: () => isOwnWorkflowRun,
@@ -25418,6 +26031,7 @@ __export(dist_exports, {
   isSeatModelCatalog: () => isSeatModelCatalog,
   isSendMessageAck: () => isSendMessageAck,
   isSseIdleError: () => isSseIdleError,
+  isStaleEngineAgentPanelEnd: () => isStaleEngineAgentPanelEnd,
   isSubFlowSegmentEnd: () => isSubFlowSegmentEnd,
   isSupportedCatalogSchemaVersion: () => isSupportedCatalogSchemaVersion,
   isTaskNotificationObjective: () => isTaskNotificationObjective,
@@ -25435,6 +26049,7 @@ __export(dist_exports, {
   isWorkflowCompletionCardEnqueued: () => isWorkflowCompletionCardEnqueued,
   isWorkflowParkRefusalCode: () => isWorkflowParkRefusalCode,
   kickEngineCapsProbe: () => kickEngineCapsProbe,
+  lastFlagValue: () => lastFlagValue,
   leaderConflictDetail: () => leaderConflictDetail,
   limitsForPrint: () => limitsForPrint,
   listAllPersistedRules: () => listAllPersistedRules,
@@ -25478,6 +26093,7 @@ __export(dist_exports, {
   normalizeWirePrincipal: () => normalizeWirePrincipal,
   noteBgOwnerAbsence: () => noteBgOwnerAbsence,
   noteEngineCapsForApprovalsStreamLive: () => noteEngineCapsForApprovalsStreamLive,
+  noteEngineCapsForDeviceExecutorManagement: () => noteEngineCapsForDeviceExecutorManagement,
   noteEngineCapsForExecutionLane: () => noteEngineCapsForExecutionLane,
   noteEngineCapsForSqlEngine: () => noteEngineCapsForSqlEngine,
   noteEngineCapsForWebSearchBackend: () => noteEngineCapsForWebSearchBackend,
@@ -25492,6 +26108,7 @@ __export(dist_exports, {
   notificationQueuePortMisses: () => notificationQueuePortMisses,
   observeCancelByDeny: () => observeCancelByDeny,
   observedApprovalsStreamLive: () => observedApprovalsStreamLive,
+  observedDeviceExecutorManagement: () => observedDeviceExecutorManagement,
   observedExecutionLane: () => observedExecutionLane,
   observedSqlEngine: () => observedSqlEngine,
   observedWebSearchBackend: () => observedWebSearchBackend,
@@ -25558,6 +26175,7 @@ __export(dist_exports, {
   projectBackgroundView: () => projectBackgroundView,
   projectCrashConverged: () => projectCrashConverged,
   projectDescription: () => projectDescription,
+  projectDeviceExecutorManagementCapability: () => projectDeviceExecutorManagementCapability,
   projectDiagnosticsFrame: () => projectDiagnosticsFrame,
   projectEffectiveBody: () => projectEffectiveBody,
   projectExecutionLaneCapability: () => projectExecutionLaneCapability,
@@ -25621,6 +26239,7 @@ __export(dist_exports, {
   readRuleOfferSupply: () => readRuleOfferSupply,
   readRuleOffers: () => readRuleOffers,
   readRulePersistOutcome: () => readRulePersistOutcome,
+  readRunCancelContext: () => readRunCancelContext,
   readRunCostFacts: () => readRunCostFacts,
   readRunTerminal: () => readRunTerminal,
   readSessionMemoryStatus: () => readSessionMemoryStatus,
@@ -25664,6 +26283,7 @@ __export(dist_exports, {
   resetWorkflowActivityLedgers: () => resetWorkflowActivityLedgers,
   resolveAutonomousLoopPrompt: () => resolveAutonomousLoopPrompt,
   resolveCatalogSources: () => resolveCatalogSources,
+  resolveEnginePanelTaskId: () => resolveEnginePanelTaskId,
   resolveEntryVision: () => resolveEntryVision,
   resolveHeadlessDetach: () => resolveHeadlessDetach,
   resolveHeadlessFinalVerify: () => resolveHeadlessFinalVerify,
@@ -25769,6 +26389,7 @@ __export(dist_exports, {
   surfaceRuleArmRejected: () => surfaceRuleArmRejected,
   surfaceSuspendedAskAndRespond: () => surfaceSuspendedAskAndRespond,
   surfaceToolApprovalFrameAndRespond: () => surfaceToolApprovalFrameAndRespond,
+  suspendedReopenOf: () => suspendedReopenOf,
   suspendedSubagentAsks: () => suspendedSubagentAsks,
   tailEngineSubagent: () => tailEngineSubagent,
   taskAgentsField: () => taskAgentsField,
@@ -25860,9 +26481,12 @@ var init_dist = __esm({
     init_webSearchBackendCapability();
     init_executionLaneCapability();
     init_approvalsStreamLiveCapability();
+    init_deviceExecutorManagementCapability();
     init_mcpReconnect();
     init_leaderConflict();
     init_runTerminal();
+    init_runCancelContext();
+    init_argvFlagValue();
     init_readFacePosture();
     init_mcpPanel();
     init_effectiveFacts();
@@ -25954,6 +26578,8 @@ var init_dist = __esm({
     init_liveInitToolFace();
     init_providerPresets2();
     init_hitlBridge();
+    init_suspendedReopen();
+    init_approvalOutcomeNote();
     init_frameRouter();
     init_frameRouter();
     init_hitlHostSurface();
@@ -26120,12 +26746,13 @@ function publishEngineContextUsage(frame) {
   }, lastFrameSessionId = currentSessionIdOrNull3());
 }
 function noteEngineCompaction(record3) {
-  let preTokens = finiteOrUndefined(record3.preTokens), postTokens = finiteOrUndefined(record3.postTokens), triggerTokensBefore = finiteOrUndefined(record3.triggerTokensBefore), trigger = typeof record3.trigger == "string" && record3.trigger.length > 0 ? record3.trigger : void 0;
+  let preTokens = finiteOrUndefined(record3.preTokens), postTokens = finiteOrUndefined(record3.postTokens), triggerTokensBefore = finiteOrUndefined(record3.triggerTokensBefore), freedRaw = finiteOrUndefined(record3.freedTokens), freedTokens = freedRaw !== void 0 && freedRaw >= 0 ? freedRaw : void 0, trigger = typeof record3.trigger == "string" && record3.trigger.length > 0 ? record3.trigger : void 0;
   lastCompaction = {
     atMs: record3.atMs ?? Date.now(),
     ...preTokens !== void 0 ? { preTokens } : {},
     ...postTokens !== void 0 ? { postTokens } : {},
     ...triggerTokensBefore !== void 0 ? { triggerTokensBefore } : {},
+    ...freedTokens !== void 0 ? { freedTokens } : {},
     ...trigger !== void 0 ? { trigger } : {}
   }, lastCompactionSessionId = currentSessionIdOrNull3();
 }
@@ -27116,9 +27743,9 @@ function getSessionCronTasks() {
 function addSessionCronTask(task) {
   STATE.sessionCronTasks.push(task);
 }
-function removeSessionCronTasks(ids) {
-  if (ids.length === 0) return 0;
-  let idSet = new Set(ids), remaining = STATE.sessionCronTasks.filter((t2) => !idSet.has(t2.id)), removed = STATE.sessionCronTasks.length - remaining.length;
+function removeSessionCronTasks(ids2) {
+  if (ids2.length === 0) return 0;
+  let idSet = new Set(ids2), remaining = STATE.sessionCronTasks.filter((t2) => !idSet.has(t2.id)), removed = STATE.sessionCronTasks.length - remaining.length;
   return removed === 0 ? 0 : (STATE.sessionCronTasks = remaining, removed);
 }
 function setSessionTrustAccepted(accepted) {
@@ -39442,8 +40069,8 @@ function emoji() {
   return new RegExp(_emoji, "u");
 }
 function timeSource(args) {
-  let hhmm = "(?:[01]\\d|2[0-3]):[0-5]\\d";
-  return typeof args.precision == "number" ? args.precision === -1 ? `${hhmm}` : args.precision === 0 ? `${hhmm}:[0-5]\\d` : `${hhmm}:[0-5]\\d\\.\\d{${args.precision}}` : `${hhmm}(?::[0-5]\\d(?:\\.\\d+)?)?`;
+  let hhmm2 = "(?:[01]\\d|2[0-3]):[0-5]\\d";
+  return typeof args.precision == "number" ? args.precision === -1 ? `${hhmm2}` : args.precision === 0 ? `${hhmm2}:[0-5]\\d` : `${hhmm2}:[0-5]\\d\\.\\d{${args.precision}}` : `${hhmm2}(?::[0-5]\\d(?:\\.\\d+)?)?`;
 }
 function time(args) {
   return new RegExp(`^${timeSource(args)}$`);
@@ -40654,12 +41281,12 @@ var $ZodType, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, $ZodU
           return `shape[${k2}]._zod.run({ value: input[${k2}], issues: [] }, ctx)`;
         };
         doc.write("const input = payload.value;");
-        let ids = /* @__PURE__ */ Object.create(null), counter = 0;
+        let ids2 = /* @__PURE__ */ Object.create(null), counter = 0;
         for (let key of normalized.keys)
-          ids[key] = `key_${counter++}`;
+          ids2[key] = `key_${counter++}`;
         doc.write("const newResult = {};");
         for (let key of normalized.keys) {
-          let id = ids[key], k2 = esc(key), schema = shape[key], isOptionalIn = schema?._zod?.optin === "optional", isOptionalOut = schema?._zod?.optout === "optional";
+          let id = ids2[key], k2 = esc(key), schema = shape[key], isOptionalIn = schema?._zod?.optin === "optional", isOptionalOut = schema?._zod?.optout === "optional";
           doc.write(`const ${id} = ${parseStr(key)};`), isOptionalIn && isOptionalOut ? doc.write(`
         if (${id}.issues.length) {
           if (${k2} in input) {
@@ -69967,13 +70594,51 @@ function displaySafeFreeText(text2) {
   return out6 += text2.slice(cursor), out6.replace(SCHEMELESS_USERINFO, `${REDACTED_USERINFO}@$1`);
 }
 function redactSecretWords(text2) {
-  return text2.replace(SECRET_SCHEME_WORD, swapSecretValue).replace(SECRET_LABELLED_WORD, swapSecretValue);
+  return redactByLabel(redactByLabel(text2, SECRET_SCHEME_WORD), SECRET_LABELLED_WORD);
+}
+function scanSecretValue(text2, from) {
+  let i = from, slashes = 0;
+  for (; i < text2.length && text2[i] === "\\" && slashes < 4; )
+    i++, slashes++;
+  let q2 = text2[i];
+  if (q2 === '"' || q2 === "'") {
+    let open19 = i + 1;
+    if (slashes > 0) {
+      let close = text2.indexOf("\\" + q2, open19);
+      return close === -1 || close - open19 > VALUE_SCAN_CAP ? null : close > open19 ? { start: open19, end: close } : null;
+    }
+    let j4 = open19;
+    for (; j4 < text2.length && j4 - open19 <= VALUE_SCAN_CAP; ) {
+      if (text2[j4] === "\\") {
+        j4 += 2;
+        continue;
+      }
+      if (text2[j4] === q2) return j4 > open19 ? { start: open19, end: j4 } : null;
+      j4++;
+    }
+    return null;
+  }
+  let j3 = i;
+  for (; j3 < text2.length && j3 - i < VALUE_SCAN_CAP && !isBareValueStop(text2[j3]); ) j3++;
+  return j3 > i ? { start: i, end: j3 } : null;
 }
-function swapSecretValue(whole, label, value) {
+function isDiagnosticValue(value) {
+  if (value.startsWith("\xABredacted") || /^[a-z][a-z0-9+.-]{1,15}:\/\//i.test(value)) return !0;
   let bare = value.replace(/[.,;:!?)\]}'"]{0,8}$/, "").toLowerCase();
-  return DIAGNOSTIC_VALUE_WORDS.has(bare) ? whole : `${label} ${REDACTED_SECRET}`;
+  return bare === "" || DIAGNOSTIC_VALUE_WORDS.has(bare);
+}
+function redactByLabel(text2, re) {
+  let out6 = "", last4 = 0;
+  re.lastIndex = 0;
+  for (let m2 = re.exec(text2); m2 !== null; m2 = re.exec(text2)) {
+    let v2 = scanSecretValue(text2, m2.index + m2[0].length);
+    if (v2 === null) continue;
+    let value = text2.slice(v2.start, v2.end);
+    out6 += text2.slice(last4, v2.start) + (isDiagnosticValue(value) ? value : REDACTED_SECRET), last4 = v2.end, re.lastIndex = v2.end;
+  }
+  return out6 + text2.slice(last4);
 }
-var DISPLAY_REDACTION_MARKER_RE, REDACTED_USERINFO, REDACTED_QUERY, REDACTED_FRAGMENT, TOKEN_STOP, TRAILING_PUNCTUATION, VALUE_BOUNDARY_TAIL, isWhitespaceOrControl, isSchemeChar, isAlpha, SCHEMELESS_USERINFO, REDACTED_SECRET, DIAGNOSTIC_VALUE_WORDS, SECRET_SCHEME_WORD, SECRET_LABELLED_WORD, init_displaySafeUrl = __esm({
+var DISPLAY_REDACTION_MARKER_RE, REDACTED_USERINFO, REDACTED_QUERY, REDACTED_FRAGMENT, TOKEN_STOP, TRAILING_PUNCTUATION, VALUE_BOUNDARY_TAIL, isWhitespaceOrControl, isSchemeChar, isAlpha, SCHEMELESS_USERINFO, REDACTED_SECRET, DIAGNOSTIC_VALUE_WORDS, VALUE_SCAN_CAP, BARE_VALUE_STOP_CHARS, isBareValueStop, SECRET_SCHEME_WORD, SECRET_LABELLED_WORD, init_displaySafeUrl = __esm({
   "build-src/src/sema/displaySafeUrl.ts"() {
     DISPLAY_REDACTION_MARKER_RE = /^«redacted(?::[a-z-]{1,16}){0,2}»$/, REDACTED_USERINFO = "\xABredacted:userinfo\xBB", REDACTED_QUERY = "\xABredacted:query\xBB", REDACTED_FRAGMENT = "\xABredacted:fragment\xBB";
     TOKEN_STOP = /* @__PURE__ */ new Set(['"', "<", ">", "`", "|", "\\", "^", "{", "}"]), TRAILING_PUNCTUATION = /* @__PURE__ */ new Set([".", ",", ";", ":", "!", "?", "'"]), VALUE_BOUNDARY_TAIL = /[?#&=;]$/, isWhitespaceOrControl = (ch2) => {
@@ -70009,9 +70674,57 @@ var DISPLAY_REDACTION_MARKER_RE, REDACTED_USERINFO, REDACTED_QUERY, REDACTED_FRA
       "revoked",
       "disabled",
       "unavailable",
-      "incorrect"
-    ]);
-    SECRET_SCHEME_WORD = /(?:\b|(?<=\\[A-Za-z"']))(bearer|basic)[\s:=\uFF1A\uFF1D]{1,8}(?:\\{0,4}["']\s{0,4})?([A-Za-z0-9._~+/=%-]{8,})/gi, SECRET_LABELLED_WORD = /(?:\b|(?<=\\[A-Za-z"']))((?:access[-_ ]?|refresh[-_ ]?|id[-_ ]?|client[-_ ]?|api[-_ ]?|x[-_]api[-_ ]?|session[-_ ]?|auth[-_ ]?)?(?:token|key|secret|password|authorization|credential)s?)(?:\\{0,4}["']|\\{1,4})?\s{0,4}[:=\uFF1A\uFF1D]\s{0,4}(?:\\{0,4}["']|\\{1,4})?\s{0,4}([A-Za-z0-9._~+/=%-]{8,})/gi;
+      "incorrect",
+      "not",
+      "no",
+      "set",
+      "unset",
+      "blank",
+      "value",
+      "values",
+      "of",
+      "the",
+      "a",
+      "an",
+      "is",
+      "was",
+      "are",
+      "for",
+      "to",
+      "in",
+      "on",
+      "and",
+      "or",
+      "from",
+      "with",
+      "at",
+      "by",
+      "this",
+      "that",
+      "it",
+      "be",
+      "must",
+      "should",
+      "can",
+      "cannot",
+      "true",
+      "false",
+      "yes",
+      "ok",
+      "n/a",
+      "na",
+      // 认证方案词:`Authorization: Bearer <tok>` 里 `Bearer` 是标签的一部分,真值由 ① 那条正则接着洗。
+      "bearer",
+      "basic",
+      "digest",
+      "hmac",
+      "oauth",
+      "oauth2",
+      "jwt",
+      "apikey",
+      "api-key"
+    ]), VALUE_SCAN_CAP = 512, BARE_VALUE_STOP_CHARS = /* @__PURE__ */ new Set([",", ";", '"', "'", "\\", "(", ")", "[", "]", "{", "}", "<", ">"]), isBareValueStop = (ch2) => ch2 <= " " || BARE_VALUE_STOP_CHARS.has(ch2);
+    SECRET_SCHEME_WORD = /(?:\b|(?<=\\[A-Za-z"']))(bearer|basic)[\s:=\uFF1A\uFF1D]{1,8}/gi, SECRET_LABELLED_WORD = /(?:\b|(?<=\\[A-Za-z"']))((?:access[-_ ]?|refresh[-_ ]?|id[-_ ]?|client[-_ ]?|api[-_ ]?|x[-_]api[-_ ]?|session[-_ ]?|auth[-_ ]?)?(?:token|key|secret|password|authorization|credential)s?)(?:\\{0,4}["'])?\s{0,4}[:=\uFF1A\uFF1D]\s{0,4}/gi;
   }
 });
 
@@ -77188,7 +77901,7 @@ __export(modelRoutingEnvPrecedence_exports, {
   modelRoutingEnvNote: () => modelRoutingEnvNote
 });
 function classifyModelRoutingEnv(env6, entryBaseUrl) {
-  let rawUrl = nonEmpty4(servedEndpointRawValue("openai-completions", env6)), provider = nonEmpty4(env6.MODEL_PROVIDER);
+  let rawUrl = nonEmpty5(servedEndpointRawValue("openai-completions", env6)), provider = nonEmpty5(env6.MODEL_PROVIDER);
   if (rawUrl === void 0 || provider === void 0) return { kind: "not-applicable" };
   let envEndpoint = normalizeEndpoint(rawUrl);
   if (envEndpoint === "") return { kind: "not-applicable" };
@@ -77210,12 +77923,12 @@ function modelRoutingEnvClause(env6, hop) {
   let v2 = classifyModelRoutingEnv(env6);
   return v2.kind !== "gateway-wins" ? null : providerNotDecidingClause(v2.provider);
 }
-var ANTHROPIC_ROUTE_PROVIDERS, GATEWAY_ROUTE_PROVIDERS, nonEmpty4, init_modelRoutingEnvPrecedence = __esm({
+var ANTHROPIC_ROUTE_PROVIDERS, GATEWAY_ROUTE_PROVIDERS, nonEmpty5, init_modelRoutingEnvPrecedence = __esm({
   "build-src/src/sema/modelRoutingEnvPrecedence.ts"() {
     init_untrustedDisplayText();
     init_displaySafeUrl();
     init_servedEndpointEnv();
-    ANTHROPIC_ROUTE_PROVIDERS = /* @__PURE__ */ new Set(["anthropic"]), GATEWAY_ROUTE_PROVIDERS = /* @__PURE__ */ new Set(["gateway", "vllm"]), nonEmpty4 = (v2) => typeof v2 == "string" && v2.trim().length > 0 ? v2.trim() : void 0;
+    ANTHROPIC_ROUTE_PROVIDERS = /* @__PURE__ */ new Set(["anthropic"]), GATEWAY_ROUTE_PROVIDERS = /* @__PURE__ */ new Set(["gateway", "vllm"]), nonEmpty5 = (v2) => typeof v2 == "string" && v2.trim().length > 0 ? v2.trim() : void 0;
   }
 });
 
@@ -77350,9 +78063,9 @@ function classifyAnthropicEnvRouting(env6, opts) {
   let catalogPresent = modelCatalogPresent(opts?.configLocalDir), own2 = opts?.ownModelConfig ?? hasOwnModelConfig(env6), CATALOG_WHY = "a model catalog (config.d/models.json) drives routing \u2014 the env override is ignored";
   if (own2) {
     if (catalogPresent) return { kind: "ignored", why: CATALOG_WHY };
-    let nonEmpty5 = (v2) => typeof v2 == "string" && v2.length > 0 ? v2 : void 0, explicitProvider = nonEmpty5(env6.MODEL_PROVIDER);
+    let nonEmpty6 = (v2) => typeof v2 == "string" && v2.length > 0 ? v2 : void 0, explicitProvider = nonEmpty6(env6.MODEL_PROVIDER);
     if (explicitProvider === "anthropic") return { kind: "honored", via: "explicit-anthropic-provider" };
-    let inferBaseUrl = baseUrl, inferCred = nonEmpty5(env6.ANTHROPIC_API_KEY) ?? authToken;
+    let inferBaseUrl = baseUrl, inferCred = nonEmpty6(env6.ANTHROPIC_API_KEY) ?? authToken;
     if (explicitProvider === void 0 && inferBaseUrl && inferCred)
       return { kind: "honored", via: "engine-inferred-anthropic" };
     if (explicitProvider !== void 0) {
@@ -87951,7 +88664,10 @@ var USER_ROLES, NO_ENTRIES_DROPPED, OPEN_WORLD_KNOWN_KEYS, init_config_fns = __e
     init_types6();
     USER_ROLES = ["viewer", "editor", "publisher", "admin"];
     NO_ENTRIES_DROPPED = Object.freeze({}), OPEN_WORLD_KNOWN_KEYS = {
-      limits: { "": Object.keys(LimitsConfig.shape), infraCostRates: Object.keys(InfraCostRates.shape) }
+      limits: [
+        [[], Object.keys(LimitsConfig.shape)],
+        [["infraCostRates"], Object.keys(InfraCostRates.shape)]
+      ]
     };
   }
 });
@@ -88780,9 +89496,10 @@ var init_migrate = __esm({
   }
 });
 
-// node_modules/@sema-agent/settings-schema/dist/api/wire.js
-var DEVICE_GRANT_TYPE, REFRESH_TOKEN_TTL_SECONDS, OAUTH_ERROR_CODES, DEVICE_AUTH_STATUSES, init_wire = __esm({
-  "node_modules/@sema-agent/settings-schema/dist/api/wire.js"() {
+// node_modules/@sema-agent/settings-schema/dist/api/auth.js
+var DEVICE_GRANT_TYPE, REFRESH_TOKEN_TTL_SECONDS, OAUTH_ERROR_CODES, DEVICE_AUTH_STATUSES, OAuthErrorResponse, DeviceCodeRequest, DeviceCodeResponse, DeviceTokenRequest, TokenGrantResponse, TokenRefreshRequest, LogoutRequest, LogoutResponse, DeviceApproveLookupResponse, DeviceApproveRequest, DeviceApproveResponse, init_auth = __esm({
+  "node_modules/@sema-agent/settings-schema/dist/api/auth.js"() {
+    init_zod();
     DEVICE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code", REFRESH_TOKEN_TTL_SECONDS = 720 * 60 * 60, OAUTH_ERROR_CODES = [
       /** device/token: the user has not approved (or denied) the handshake yet — keep polling. */
       "authorization_pending",
@@ -88801,17 +89518,7 @@ var DEVICE_GRANT_TYPE, REFRESH_TOKEN_TTL_SECONDS, OAUTH_ERROR_CODES, DEVICE_AUTH
       "invalid_grant",
       /** SSO not configured on the registry (HTTP 503) — a deployment problem, not a client one. */
       "server_error"
-    ], DEVICE_AUTH_STATUSES = ["pending", "approved", "denied"];
-  }
-});
-
-// node_modules/@sema-agent/settings-schema/dist/api/auth.js
-var OAuthErrorResponse, DeviceCodeRequest, DeviceCodeResponse, DeviceTokenRequest, TokenGrantResponse, TokenRefreshRequest, LogoutRequest, LogoutResponse, DeviceApproveLookupResponse, DeviceApproveRequest, DeviceApproveResponse, init_auth = __esm({
-  "node_modules/@sema-agent/settings-schema/dist/api/auth.js"() {
-    init_zod();
-    init_wire();
-    init_wire();
-    OAuthErrorResponse = external_exports2.object({
+    ], DEVICE_AUTH_STATUSES = ["pending", "approved", "denied"], OAuthErrorResponse = external_exports2.object({
       error: external_exports2.enum(OAUTH_ERROR_CODES),
       error_description: external_exports2.string().optional()
     }).passthrough(), DeviceCodeRequest = external_exports2.object({
@@ -88913,8 +89620,6 @@ var GLOBAL_SCOPE, RESERVED_SCOPE_IDS, SCOPE_ID_REGEX, ScopeId, ScopeRole, Scope,
     init_zod();
     init_config_fns();
     init_auth();
-    init_wire();
-    init_wire();
     GLOBAL_SCOPE = "global", RESERVED_SCOPE_IDS = [GLOBAL_SCOPE], SCOPE_ID_REGEX = /^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$/;
     ScopeId = external_exports2.string().regex(SCOPE_ID_REGEX, "scope id must be a slug: [a-z0-9-], 1-64 chars, no edge dash"), ScopeRole = external_exports2.enum(USER_ROLES), Scope = external_exports2.object({
       id: ScopeId,
@@ -89863,10 +90568,10 @@ function patchPresent(intended, onDisk) {
   return intended === onDisk;
 }
 function keyEntriesOnDisk(pool, err8) {
-  let ids = err8.missingKeyEntries ?? [];
-  if (ids.length === 0) return !0;
+  let ids2 = err8.missingKeyEntries ?? [];
+  if (ids2.length === 0) return !0;
   let env6 = readSettingsEnv();
-  return ids.every((id) => {
+  return ids2.every((id) => {
     let e = pool.find((p) => p.id === id);
     return !e?.apiKey || env6[keyEnvNameForEntry(id)] === e.apiKey;
   });
@@ -90047,13 +90752,13 @@ function mergeRenameErrors(stage1, stage2) {
 function poolWriteErrorNotice(error51, verb = "Saved") {
   let e = error51;
   if (!e.keyWriteOnly) return `Pool write failed: ${error51.message}`;
-  let ids = e.missingKeyEntries ?? [];
-  if (ids.length === 0)
+  let ids2 = e.missingKeyEntries ?? [];
+  if (ids2.length === 0)
     return `${verb}. A settings write failed (${error51.message}) \u2014 no API key was lost.`;
-  if (ids.length === 1)
-    return `${verb}, but the API key for "${ids[0]}" was not stored (${error51.message}). Open it in the Hub and set the key again.`;
-  let shown = ids.slice(0, 3).join(", ");
-  return `${verb}, but the API keys for ${ids.length} entries (${shown}${ids.length > 3 ? ", \u2026" : ""}) were not stored (${error51.message}). Open each one in the Hub and set its key again.`;
+  if (ids2.length === 1)
+    return `${verb}, but the API key for "${ids2[0]}" was not stored (${error51.message}). Open it in the Hub and set the key again.`;
+  let shown = ids2.slice(0, 3).join(", ");
+  return `${verb}, but the API keys for ${ids2.length} entries (${shown}${ids2.length > 3 ? ", \u2026" : ""}) were not stored (${error51.message}). Open each one in the Hub and set its key again.`;
 }
 function poolSaveFailureNotice(error51, renamedTo, failVerb) {
   let e = error51;
@@ -90363,10 +91068,10 @@ function readSemaAutoModeOverride(env6 = process.env, configHome = resolveConfig
   let enabled = !0;
   if (env6.SEMA_AUTO_MODE_ENABLED !== void 0 ? enabled = ENABLED_ENV_TRUE.has(env6.SEMA_AUTO_MODE_ENABLED.trim().toLowerCase()) : sj?.semaAutoModeEnabled !== void 0 && (enabled = sj.semaAutoModeEnabled === !0), enabled && allowModels === void 0)
     try {
-      let { readModelPool: readModelPool2 } = (init_modelChannels(), __toCommonJS(modelChannels_exports)), pool = readModelPool2(), ids = /* @__PURE__ */ new Set();
+      let { readModelPool: readModelPool2 } = (init_modelChannels(), __toCommonJS(modelChannels_exports)), pool = readModelPool2(), ids2 = /* @__PURE__ */ new Set();
       for (let e of pool)
-        e.id && ids.add(e.id), e.modelId && ids.add(e.modelId);
-      env6.MODEL_ID?.trim() && ids.add(env6.MODEL_ID.trim()), ids.size > 0 && (allowModels = [...ids]);
+        e.id && ids2.add(e.id), e.modelId && ids2.add(e.modelId);
+      env6.MODEL_ID?.trim() && ids2.add(env6.MODEL_ID.trim()), ids2.size > 0 && (allowModels = [...ids2]);
     } catch {
     }
   if (!enabled && allowModels === void 0) return;
@@ -125350,6 +126055,29 @@ var init_types8 = __esm({
   }
 });
 
+// build-src/src/sema/apiErrorMessageWash.ts
+function washApiErrorMessage(m2) {
+  if (typeof m2 != "object" || m2 === null) return m2;
+  let rec = m2;
+  if (rec.isApiErrorMessage !== !0) return m2;
+  let envelope = rec.message;
+  if (typeof envelope != "object" || envelope === null) return m2;
+  let content = envelope.content;
+  if (!Array.isArray(content)) return m2;
+  let changed = !1, washed = content.map((block2) => {
+    let b3 = block2;
+    if (typeof b3 != "object" || b3 === null || b3.type !== "text" || typeof b3.text != "string") return block2;
+    let next = displaySafeFreeText(b3.text);
+    return next === b3.text ? block2 : (changed = !0, { ...b3, text: next });
+  });
+  return changed ? { ...rec, message: { ...envelope, content: washed } } : m2;
+}
+var init_apiErrorMessageWash = __esm({
+  "build-src/src/sema/apiErrorMessageWash.ts"() {
+    init_displaySafeUrl();
+  }
+});
+
 // build-src/src/sema/appStateRef.ts
 var appStateRef_exports = {};
 __export(appStateRef_exports, {
@@ -125906,6 +126634,7 @@ function watchEngineContextFrames(events3) {
               preTokens: c3.tokensBefore,
               postTokens: c3.tokensAfter,
               triggerTokensBefore: c3.triggerTokensBefore,
+              freedTokens: c3.freedTokens,
               trigger: c3.trigger
             })
           ).catch(() => {
@@ -125951,8 +126680,8 @@ function rewriteActiveRunBusyRow(msgs, seen2, billTurnCosts = !0, runToken) {
 }
 function passThroughWithBusyRewrite(msgs, seen2) {
   return (async function* () {
-    for await (let m2 of msgs) {
-      let busy = seen2.busy;
+    for await (let raw2 of msgs) {
+      let m2 = washApiErrorMessage(raw2), busy = seen2.busy;
       if (busy && typeof m2 == "object" && m2 !== null && "isApiErrorMessage" in m2 && m2.isApiErrorMessage === !0) {
         let envelope = "message" in m2 ? m2.message : void 0;
         if (typeof envelope == "object" && envelope !== null) {
@@ -126057,6 +126786,7 @@ var runTokenSeq, mintRunToken, reportedDroppedTypes2, DROPPED_TYPE_MEMO_CAP2, in
   "build-src/src/seam/adapter/runStream.ts"() {
     init_dist();
     init_untrustedDisplayText();
+    init_apiErrorMessageWash();
     init_planReviewModeAfterOffer();
     init_turnUsageTranscriptStamp();
     init_activeRunSelfHeal2();
@@ -140263,6 +140993,94 @@ var PROBE_FACTS_OFF, PROBE_FACTS_ON, PROBE_VECTORS, init_epoch = __esm({
   }
 });
 
+// node_modules/@sema-agent/core/dist/tools/fs/read-deny.js
+function resolveReadDenyBuiltins(config4) {
+  let activeTiers;
+  if (config4?.tiers === void 0)
+    activeTiers = new Set(READ_DENY_DEFAULT_TIERS);
+  else {
+    if (!Array.isArray(config4.tiers))
+      throw new Error(`readDenyBuiltinTiers: expected an array of tier names, got ${JSON.stringify(config4.tiers)}.`);
+    for (let t2 of config4.tiers)
+      if (typeof t2 != "string" || !READ_DENY_BUILTIN_TIERS.includes(t2))
+        throw new Error(`readDenyBuiltinTiers: unknown tier ${JSON.stringify(t2)} \u2014 known tiers: ${READ_DENY_BUILTIN_TIERS.join(", ")}.`);
+    activeTiers = new Set(config4.tiers);
+  }
+  let excluded;
+  if (config4?.exclude === void 0)
+    excluded = /* @__PURE__ */ new Set();
+  else {
+    if (!Array.isArray(config4.exclude))
+      throw new Error(`readDenyBuiltinExclude: expected an array of built-in row names (canonical pattern texts), got ${JSON.stringify(config4.exclude)}.`);
+    for (let name of config4.exclude)
+      if (typeof name != "string" || !READ_FACE_BUILTIN_DENY_TABLE.some((r) => r.pattern === name))
+        throw new Error(`readDenyBuiltinExclude: ${JSON.stringify(name)} names no built-in row \u2014 row names are the canonical pattern texts of READ_FACE_BUILTIN_DENY_TABLE (e.g. ".ssh", ".config/gcloud").`);
+    excluded = new Set(config4.exclude);
+  }
+  return READ_FACE_BUILTIN_DENY_TABLE.filter((r) => activeTiers.has(r.tier) && !excluded.has(r.pattern));
+}
+var READ_DENY_BUILTIN_TIERS, READ_FACE_BUILTIN_DENY_TABLE, READ_DENY_DEFAULT_TIERS, READ_FACE_DEFAULT_DENY_ENTRIES, init_read_deny = __esm({
+  "node_modules/@sema-agent/core/dist/tools/fs/read-deny.js"() {
+    READ_DENY_BUILTIN_TIERS = ["credentials", "shell-history", "browser", "wallet", "agent-config"], READ_FACE_BUILTIN_DENY_TABLE = [
+      { pattern: ".ssh", tier: "credentials" },
+      { pattern: "id_rsa*", tier: "credentials" },
+      { pattern: "id_ed25519*", tier: "credentials" },
+      { pattern: "id_ecdsa*", tier: "credentials" },
+      { pattern: ".gnupg", tier: "credentials" },
+      { pattern: ".aws", tier: "credentials" },
+      { pattern: ".config/gcloud", tier: "credentials" },
+      { pattern: ".azure", tier: "credentials" },
+      { pattern: ".kube", tier: "credentials" },
+      { pattern: ".netrc", tier: "credentials" },
+      { pattern: "_netrc", tier: "credentials" },
+      { pattern: ".git-credentials", tier: "credentials" },
+      { pattern: ".docker/config.json", tier: "credentials" },
+      { pattern: ".config/gh", tier: "credentials" },
+      { pattern: ".npmrc", tier: "credentials" },
+      { pattern: ".pypirc", tier: "credentials" },
+      { pattern: ".local/share/keyrings", tier: "credentials" },
+      { pattern: "Library/Keychains", tier: "credentials" },
+      { pattern: ".credentials.json", tier: "credentials" },
+      { pattern: ".codex/auth.json", tier: "credentials" },
+      { pattern: ".config/github-copilot", tier: "credentials" },
+      { pattern: ".gemini/oauth_creds.json", tier: "credentials" },
+      { pattern: ".bash_history", tier: "shell-history" },
+      { pattern: ".zsh_history", tier: "shell-history" },
+      { pattern: "Library/Application Support/Google/Chrome", tier: "browser" },
+      { pattern: "Library/Application Support/Firefox", tier: "browser" },
+      { pattern: "Library/Safari", tier: "browser" },
+      { pattern: ".config/google-chrome", tier: "browser" },
+      { pattern: ".config/chromium", tier: "browser" },
+      { pattern: ".mozilla/firefox", tier: "browser" },
+      { pattern: "AppData/Local/Google/Chrome/User Data", tier: "browser" },
+      { pattern: "AppData/Local/Microsoft/Edge/User Data", tier: "browser" },
+      { pattern: "AppData/Roaming/Mozilla/Firefox", tier: "browser" },
+      { pattern: ".bitcoin", tier: "wallet" },
+      { pattern: ".ethereum", tier: "wallet" },
+      { pattern: ".electrum", tier: "wallet" },
+      { pattern: "Library/Application Support/Exodus", tier: "wallet" },
+      { pattern: "Library/Application Support/Ledger Live", tier: "wallet" },
+      { pattern: "wallet.dat", tier: "wallet" },
+      { pattern: ".sema/settings.json", tier: "agent-config" },
+      { pattern: ".sema/settings.local.json", tier: "agent-config" },
+      { pattern: ".sema.*", tier: "agent-config" },
+      { pattern: ".claude/settings.json", tier: "agent-config" },
+      { pattern: ".claude/settings.local.json", tier: "agent-config" },
+      { pattern: ".claude.*", tier: "agent-config" },
+      { pattern: ".mcp.json", tier: "agent-config" },
+      { pattern: ".ai-agent/.env", tier: "agent-config" },
+      { pattern: ".sema/engine-data/.env", tier: "agent-config" },
+      { pattern: ".codex/config.toml", tier: "agent-config" },
+      { pattern: ".cursor/mcp.json", tier: "agent-config" },
+      { pattern: ".continue/config.json", tier: "agent-config" },
+      { pattern: ".continue/config.yaml", tier: "agent-config" },
+      { pattern: ".aider.conf.yml", tier: "agent-config" },
+      { pattern: ".gemini/settings.json", tier: "agent-config" }
+    ], READ_DENY_DEFAULT_TIERS = [];
+    READ_FACE_DEFAULT_DENY_ENTRIES = resolveReadDenyBuiltins().map((r) => r.pattern);
+  }
+});
+
 // node_modules/@sema-agent/core/dist/core/tool-face.js
 var TOOL_FAMILIES, TOOL_MOUNT_TAGS, TOOL_APPROVAL_CARDS, TOOL_PATH_BASES, TOOL_PATH_ABSENCES, TOOL_WIRE_NAME_MAX_CHARS, TOOL_CONTRACT_MAX_CHARS, TOOL_CARD_ID_MAX_CHARS, TOOL_KEY_MAX_CHARS, TOOL_KEYS_MAX, RENDER_HINT_MAX_CHARS, RENDER_HINT_ACTIVITY_MAX_CHARS, RENDER_HINT_MAX_LIST, MOUNT_TAG_IN_HANDS_BAND, HANDS_BAND_TAGS, init_tool_face = __esm({
   "node_modules/@sema-agent/core/dist/core/tool-face.js"() {
@@ -140679,7 +141497,7 @@ var FULL_SHELL_CONTRACT_ID, READONLY_SHELL_CONTRACT_ID, TASK_CREATE_TOOL_NAME, T
       { id: "task-stop-hands", name: "TaskStop", source: "builtin", definedIn: "src/tools/fs/fs-bash.ts", mountedBy: ["hands"], cards: [], face: { family: "delegate", effect: "write", contract: TASK_STOP_CONTRACT } },
       { id: "task-output", name: "TaskOutput", source: "builtin", definedIn: "src/core/task-registry.ts", mountedBy: ["delegation"], cards: ["task-output"], face: { family: "delegate", effect: "read", contract: TASK_OUTPUT_CONTRACT } },
       { id: "task-stop", name: "TaskStop", source: "builtin", definedIn: "src/core/task-registry.ts", mountedBy: ["delegation"], cards: ["task-stop"], face: { family: "delegate", effect: "write", contract: TASK_STOP_CONTRACT } },
-      { id: "monitor", name: "Monitor", source: "builtin", definedIn: "src/tools/monitor.ts", mountedBy: ["backgroundTasks"], cards: ["monitor-start"], face: { family: "other", effect: "write", contract: c("core.monitor@1"), offloadThresholdChars: 1e4 } },
+      { id: "monitor", name: "Monitor", source: "builtin", definedIn: "src/tools/monitor.ts", mountedBy: ["backgroundTasks"], cards: ["monitor-start", "readonly_out_of_root"], face: { family: "other", effect: "write", contract: c("core.monitor@1"), offloadThresholdChars: 1e4 } },
       { id: "send-message", name: "SendMessage", source: "builtin", definedIn: "src/agents/send-message-tool.ts", mountedBy: ["delegation", "hostInternals", "peerLane"], cards: ["send-message"], face: { family: "protocol", effect: "write", contract: c("core.send_message@1") } },
       { id: "agent-transcript", name: "AgentTranscript", source: "builtin", definedIn: "src/agents/agent-transcript-tool.ts", mountedBy: ["delegation"], cards: ["agent-transcript"], face: { family: "delegate", effect: "read", contract: c("core.agent_transcript@1") } },
       { id: "list-agents", name: "ListAgents", source: "builtin", definedIn: "src/agents/list-agents-tool.ts", mountedBy: ["peerLane"], cards: ["list-agents"], face: { family: "protocol", effect: "read", aliases: ["ListPeers"], contract: c("core.list_agents@1") } },
@@ -140894,6 +141712,7 @@ function identityAnchorOf(identity3) {
 }
 var WIN_RESERVED_RE, asciiBytes, BINARY_MAGIC_SIGNATURES, init_safety = __esm({
   "node_modules/@sema-agent/core/dist/tools/fs/safety.js"() {
+    init_read_deny();
     init_surrogate_safe_slice();
     init_tool_registry();
     init_gate_bounded_await();
@@ -141143,6 +141962,7 @@ var init_tools = __esm({
   "node_modules/@sema-agent/core/dist/core/tools.js"() {
     init_value2();
     init_tool_errors();
+    init_thrown_value();
     init_tool_catalog();
   }
 });
@@ -151928,6 +152748,7 @@ function summarizeWorkflowRun(run2) {
     ...run2.name !== void 0 ? { name: run2.name } : {},
     ...run2.description !== void 0 ? { description: run2.description } : {},
     status: run2.status,
+    ...run2.errorCode !== void 0 ? { errorCode: run2.errorCode } : {},
     ...run2.agentFailures !== void 0 ? { agentFailures: run2.agentFailures } : {},
     ...run2.budgetOvershoot !== void 0 ? { budgetOvershoot: { ...run2.budgetOvershoot } } : {},
     ...run2.timeoutInterruption !== void 0 ? { timeoutInterruption: { ...run2.timeoutInterruption } } : {},
@@ -153371,7 +154192,7 @@ async function deliverToRunningAgentLane(core, id, access7, notification, opts)
     return { ok: !1, reason: "not_found" };
   if (handle2.status !== "running")
     return { ok: !1, reason: "not_running" };
-  let bounded2 = (p, fallback, onTimeout) => new Promise((resolve59) => {
+  let bounded3 = (p, fallback, onTimeout) => new Promise((resolve59) => {
     let t2 = setTimeout(() => {
       try {
         onTimeout?.();
@@ -153389,12 +154210,12 @@ async function deliverToRunningAgentLane(core, id, access7, notification, opts)
     if (handle2.channelState !== "attaching")
       return { ok: !1, reason: "no_channel" };
     let q2 = handle2.preAttachQueue ??= [];
-    return q2.length >= 8 ? { ok: !1, reason: "queue_full" } : bounded2(new Promise((resolve59) => {
+    return q2.length >= 8 ? { ok: !1, reason: "queue_full" } : bounded3(new Promise((resolve59) => {
       q2.push([notification, opts, resolve59]);
     }), { ok: !0, disposition: "pending" });
   }
   let detachOnTimeout;
-  return await bounded2(new Promise((resolve59) => {
+  return await bounded3(new Promise((resolve59) => {
     let inflight4 = handle2.inFlightDirect ??= /* @__PURE__ */ new Set(), settleOnce = (r) => {
       inflight4.has(settleOnce) && (inflight4.delete(settleOnce), resolve59(r));
     };
@@ -155071,7 +155892,10 @@ var SUBSTITUTION_PLACEHOLDER, UNREADABLE_EXPANSION_TEXT, UNDELIMITED_SUBSTITUTIO
 });
 
 // node_modules/@sema-agent/core/dist/tools/fs/bash-program-position.js
-var NOT_AUTO_ALLOWED, NO_DECLARED_OPTIONS, launcherRow, LAUNCHER_TABLE, COMMAND_LAUNCHERS, SHELL_SCAN_DECLINES, init_bash_program_position = __esm({
+function seatDeclineEvidence(table) {
+  return new Set(SHELL_SCAN_DECLINES.filter((decline) => table[decline] === !0));
+}
+var NOT_AUTO_ALLOWED, NO_DECLARED_OPTIONS, launcherRow, LAUNCHER_TABLE, COMMAND_LAUNCHERS, SHELL_SCAN_DECLINES, BOUNDARY_SEAT_READS_DECLINE, CLASSIFY_SEAT_READS_DECLINE, init_bash_program_position = __esm({
   "node_modules/@sema-agent/core/dist/tools/fs/bash-program-position.js"() {
     NOT_AUTO_ALLOWED = "\u2014 not auto-allowed", NO_DECLARED_OPTIONS = { optionArity: /* @__PURE__ */ new Map() }, launcherRow = (pairs, extra = {}) => ({ optionArity: new Map(pairs), ...extra }), LAUNCHER_TABLE = /* @__PURE__ */ new Map([
       ["env", launcherRow([["-i", 0], ["-0", 0], ["-v", 0], ["--ignore-environment", 0], ["--null", 0], ["--debug", 0], ["-u", 1], ["--unset", 1]], { assignmentOperands: !0 })],
@@ -155136,7 +155960,13 @@ var NOT_AUTO_ALLOWED, NO_DECLARED_OPTIONS, launcherRow, LAUNCHER_TABLE, COMMAND_
       ["valgrind", NO_DECLARED_OPTIONS],
       ["firejail", { optionArity: /* @__PURE__ */ new Map(), whenNoProgram: "shell" }],
       ["bwrap", NO_DECLARED_OPTIONS]
-    ]), COMMAND_LAUNCHERS = new Set(LAUNCHER_TABLE.keys()), SHELL_SCAN_DECLINES = ["unreadable_program_position", "stream_fed_operands"];
+    ]), COMMAND_LAUNCHERS = new Set(LAUNCHER_TABLE.keys()), SHELL_SCAN_DECLINES = ["unreadable_program_position", "stream_fed_operands"], BOUNDARY_SEAT_READS_DECLINE = {
+      unreadable_program_position: !0,
+      stream_fed_operands: !0
+    }, CLASSIFY_SEAT_READS_DECLINE = {
+      unreadable_program_position: !1,
+      stream_fed_operands: !1
+    };
   }
 });
 
@@ -155147,9 +155977,13 @@ function hasBareShellOperator(s, quotedOperatorsAreText) {
   let mask = quoteMask(s);
   if (!mask.balanced)
     return SHELL_OPERATORS.test(s);
-  for (let i = 0; i < s.length; i++)
-    if (!mask.quoted[i] && SHELL_OPERATORS.test(s[i]))
+  for (let i = 0; i < s.length; i++) {
+    let ch2 = s[i];
+    if (!SHELL_OPERATORS.test(ch2))
+      continue;
+    if (!(SHELL_EXPANDS_IN_DOUBLE_QUOTES.test(ch2) ? mask.openedBy[i] === "'" : mask.quoted[i]))
       return !0;
+  }
   return !1;
 }
 function parseLeadingCommandName(command8, options) {
@@ -155211,12 +156045,14 @@ function splitShellCompoundSegments(source, options) {
   let segments = lexed.segments.map((s) => s.text), connectors = lexed.segments.map((s) => s.connector);
   return { segments, pipeFed: connectors.map((k2) => k2 === "|"), connectors };
 }
-var SHELL_OPERATORS, SHELL_SEGMENT_QUOTE_BLIND_REJECT, SHELL_EXPANSION_CHARS, SHELL_REDIRECTION_OPERATORS, SHELL_CONNECTOR_CHARS, BLANK_INLINE, PERL_INLINE, RUBY_INLINE, PYTHON_INLINE, NODE_INLINE, PHP_INLINE, LUA_INLINE, TCL_INLINE, EXPECT_INLINE, AWK_INLINE, JQ_INLINE, BC_INLINE, DC_INLINE, SQLITE_INLINE, PSQL_INLINE, OSASCRIPT_INLINE, RSCRIPT_INLINE, JULIA_INLINE, GHCI_INLINE, GROOVY_INLINE, BUN_INLINE, init_bash_readonly_classifier = __esm({
+var SHELL_OPERATORS, SHELL_EXPANDS_IN_DOUBLE_QUOTES, SHELL_SEGMENT_QUOTE_BLIND_REJECT, SHELL_EXPANSION_CHARS, SHELL_REDIRECTION_OPERATORS, SHELL_CONNECTOR_CHARS, BLANK_INLINE, PERL_INLINE, RUBY_INLINE, PYTHON_INLINE, NODE_INLINE, PHP_INLINE, LUA_INLINE, TCL_INLINE, EXPECT_INLINE, AWK_INLINE, JQ_INLINE, BC_INLINE, DC_INLINE, SQLITE_INLINE, PSQL_INLINE, OSASCRIPT_INLINE, RSCRIPT_INLINE, JULIA_INLINE, GHCI_INLINE, GROOVY_INLINE, BUN_INLINE, init_bash_readonly_classifier = __esm({
   "node_modules/@sema-agent/core/dist/tools/fs/bash-readonly-classifier.js"() {
+    init_read_deny();
     init_safety();
     init_bash_lexer();
     init_bash_program_position();
     SHELL_OPERATORS = /[;&|<>$()`\n\r\\]/;
+    SHELL_EXPANDS_IN_DOUBLE_QUOTES = /[$`]/;
     SHELL_SEGMENT_QUOTE_BLIND_REJECT = /[<>()`\n\r\\]/, SHELL_EXPANSION_CHARS = /[$]/;
     SHELL_REDIRECTION_OPERATORS = /[<>]/, SHELL_CONNECTOR_CHARS = /[|&;]/;
     BLANK_INLINE = {
@@ -155411,7 +156247,7 @@ var init_gh_rate_limit = __esm({
 });
 
 // node_modules/@sema-agent/core/dist/tools/fs/fs-bash.js
-var BOUNDARY_SEAT_DECLINE_EVIDENCE, TOOL_PROGRESS_BOUND, READONLY_FACE_ESCAPE_PROSE, init_fs_bash = __esm({
+var BOUNDARY_SEAT_DECLINE_EVIDENCE, CLASSIFY_SEAT_DECLINE_EVIDENCE, TOOL_PROGRESS_BOUND, READONLY_FACE_ESCAPE_PROSE, FULL_SHELL_FACE_ESCAPE_PROSE, MONITOR_ESCAPE_PROSE, init_fs_bash = __esm({
   "node_modules/@sema-agent/core/dist/tools/fs/fs-bash.js"() {
     init_build3();
     init_tools();
@@ -155421,6 +156257,7 @@ var BOUNDARY_SEAT_DECLINE_EVIDENCE, TOOL_PROGRESS_BOUND, READONLY_FACE_ESCAPE_PR
     init_task_tool_shape();
     init_background_shell();
     init_untrusted_text();
+    init_surrogate_safe_slice();
     init_mcp();
     init_safety();
     init_remote_env();
@@ -155429,102 +156266,21 @@ var BOUNDARY_SEAT_DECLINE_EVIDENCE, TOOL_PROGRESS_BOUND, READONLY_FACE_ESCAPE_PR
     init_untrusted_text();
     init_bash_readonly_classifier();
     init_bash_program_position();
+    init_read_deny();
     init_tool_catalog_entries();
     init_thrown_value();
     init_tool_catalog_entries();
-    BOUNDARY_SEAT_DECLINE_EVIDENCE = new Set(SHELL_SCAN_DECLINES), TOOL_PROGRESS_BOUND = Object.freeze({ intervalMs: 1e3, tailLines: 20, tailMaxBytes: 16 * 1024 }), READONLY_FACE_ESCAPE_PROSE = {
+    BOUNDARY_SEAT_DECLINE_EVIDENCE = seatDeclineEvidence(BOUNDARY_SEAT_READS_DECLINE), CLASSIFY_SEAT_DECLINE_EVIDENCE = seatDeclineEvidence(CLASSIFY_SEAT_READS_DECLINE), TOOL_PROGRESS_BOUND = Object.freeze({ intervalMs: 1e3, tailLines: 20, tailMaxBytes: 16 * 1024 }), READONLY_FACE_ESCAPE_PROSE = {
+      tool: "Bash",
       subject: "a path this command reads",
       verdictPhrase: ` ${NOT_AUTO_ALLOWED}`,
       note: BASH_READONLY_CONFINEMENT_NOTE
-    };
-  }
-});
-
-// node_modules/@sema-agent/core/dist/tools/fs/read-deny.js
-function resolveReadDenyBuiltins(config4) {
-  let activeTiers;
-  if (config4?.tiers === void 0)
-    activeTiers = new Set(READ_DENY_DEFAULT_TIERS);
-  else {
-    if (!Array.isArray(config4.tiers))
-      throw new Error(`readDenyBuiltinTiers: expected an array of tier names, got ${JSON.stringify(config4.tiers)}.`);
-    for (let t2 of config4.tiers)
-      if (typeof t2 != "string" || !READ_DENY_BUILTIN_TIERS.includes(t2))
-        throw new Error(`readDenyBuiltinTiers: unknown tier ${JSON.stringify(t2)} \u2014 known tiers: ${READ_DENY_BUILTIN_TIERS.join(", ")}.`);
-    activeTiers = new Set(config4.tiers);
-  }
-  let excluded;
-  if (config4?.exclude === void 0)
-    excluded = /* @__PURE__ */ new Set();
-  else {
-    if (!Array.isArray(config4.exclude))
-      throw new Error(`readDenyBuiltinExclude: expected an array of built-in row names (canonical pattern texts), got ${JSON.stringify(config4.exclude)}.`);
-    for (let name of config4.exclude)
-      if (typeof name != "string" || !READ_FACE_BUILTIN_DENY_TABLE.some((r) => r.pattern === name))
-        throw new Error(`readDenyBuiltinExclude: ${JSON.stringify(name)} names no built-in row \u2014 row names are the canonical pattern texts of READ_FACE_BUILTIN_DENY_TABLE (e.g. ".ssh", ".config/gcloud").`);
-    excluded = new Set(config4.exclude);
-  }
-  return READ_FACE_BUILTIN_DENY_TABLE.filter((r) => activeTiers.has(r.tier) && !excluded.has(r.pattern));
-}
-var READ_DENY_BUILTIN_TIERS, READ_FACE_BUILTIN_DENY_TABLE, READ_DENY_DEFAULT_TIERS, READ_FACE_DEFAULT_DENY_ENTRIES, init_read_deny = __esm({
-  "node_modules/@sema-agent/core/dist/tools/fs/read-deny.js"() {
-    READ_DENY_BUILTIN_TIERS = ["credentials", "shell-history", "browser", "wallet", "agent-config"], READ_FACE_BUILTIN_DENY_TABLE = [
-      { pattern: ".ssh", tier: "credentials" },
-      { pattern: "id_rsa*", tier: "credentials" },
-      { pattern: "id_ed25519*", tier: "credentials" },
-      { pattern: "id_ecdsa*", tier: "credentials" },
-      { pattern: ".gnupg", tier: "credentials" },
-      { pattern: ".aws", tier: "credentials" },
-      { pattern: ".config/gcloud", tier: "credentials" },
-      { pattern: ".azure", tier: "credentials" },
-      { pattern: ".kube", tier: "credentials" },
-      { pattern: ".netrc", tier: "credentials" },
-      { pattern: "_netrc", tier: "credentials" },
-      { pattern: ".git-credentials", tier: "credentials" },
-      { pattern: ".docker/config.json", tier: "credentials" },
-      { pattern: ".config/gh", tier: "credentials" },
-      { pattern: ".npmrc", tier: "credentials" },
-      { pattern: ".pypirc", tier: "credentials" },
-      { pattern: ".local/share/keyrings", tier: "credentials" },
-      { pattern: "Library/Keychains", tier: "credentials" },
-      { pattern: ".credentials.json", tier: "credentials" },
-      { pattern: ".codex/auth.json", tier: "credentials" },
-      { pattern: ".config/github-copilot", tier: "credentials" },
-      { pattern: ".gemini/oauth_creds.json", tier: "credentials" },
-      { pattern: ".bash_history", tier: "shell-history" },
-      { pattern: ".zsh_history", tier: "shell-history" },
-      { pattern: "Library/Application Support/Google/Chrome", tier: "browser" },
-      { pattern: "Library/Application Support/Firefox", tier: "browser" },
-      { pattern: "Library/Safari", tier: "browser" },
-      { pattern: ".config/google-chrome", tier: "browser" },
-      { pattern: ".config/chromium", tier: "browser" },
-      { pattern: ".mozilla/firefox", tier: "browser" },
-      { pattern: "AppData/Local/Google/Chrome/User Data", tier: "browser" },
-      { pattern: "AppData/Local/Microsoft/Edge/User Data", tier: "browser" },
-      { pattern: "AppData/Roaming/Mozilla/Firefox", tier: "browser" },
-      { pattern: ".bitcoin", tier: "wallet" },
-      { pattern: ".ethereum", tier: "wallet" },
-      { pattern: ".electrum", tier: "wallet" },
-      { pattern: "Library/Application Support/Exodus", tier: "wallet" },
-      { pattern: "Library/Application Support/Ledger Live", tier: "wallet" },
-      { pattern: "wallet.dat", tier: "wallet" },
-      { pattern: ".sema/settings.json", tier: "agent-config" },
-      { pattern: ".sema/settings.local.json", tier: "agent-config" },
-      { pattern: ".sema.*", tier: "agent-config" },
-      { pattern: ".claude/settings.json", tier: "agent-config" },
-      { pattern: ".claude/settings.local.json", tier: "agent-config" },
-      { pattern: ".claude.*", tier: "agent-config" },
-      { pattern: ".mcp.json", tier: "agent-config" },
-      { pattern: ".ai-agent/.env", tier: "agent-config" },
-      { pattern: ".sema/engine-data/.env", tier: "agent-config" },
-      { pattern: ".codex/config.toml", tier: "agent-config" },
-      { pattern: ".cursor/mcp.json", tier: "agent-config" },
-      { pattern: ".continue/config.json", tier: "agent-config" },
-      { pattern: ".continue/config.yaml", tier: "agent-config" },
-      { pattern: ".aider.conf.yml", tier: "agent-config" },
-      { pattern: ".gemini/settings.json", tier: "agent-config" }
-    ], READ_DENY_DEFAULT_TIERS = [];
-    READ_FACE_DEFAULT_DENY_ENTRIES = resolveReadDenyBuiltins().map((r) => r.pattern);
+    }, FULL_SHELL_FACE_ESCAPE_PROSE = {
+      tool: "Bash",
+      subject: "a path this command names",
+      verdictPhrase: "",
+      note: "The read boundary judged this command's written spelling before the call was approved, and execution is past the approval step \u2014 a target reached only through symlink resolution is refused here rather than escalated."
+    }, MONITOR_ESCAPE_PROSE = { ...FULL_SHELL_FACE_ESCAPE_PROSE, tool: "Monitor" };
   }
 });
 
@@ -155910,7 +156666,7 @@ function ruleLaneShapeOf(command8, reading) {
       names2.push(void 0);
       continue;
     }
-    let floor = parseLeadingCommandName(segment2, { ...RULE_LANE_FLOOR, quotedOperatorsAreText: reading.quotedOperatorsAreText });
+    let floor = parseLeadingCommandName(segment2, RULE_LANE_FLOOR);
     if ("reject" in floor)
       return {
         reject: split.segments.length > 1 ? `the segment "${escapeForDisclosure(segment2.trim())}" is not a single simple command (${floor.reject})` : floor.reject
@@ -156044,7 +156800,7 @@ function admitsUnder(rule, command8, reading) {
   if (rule.match === "exact")
     return folded === rule.command;
   let bodyShape = ruleLaneShapeOf(rule.command, reading);
-  return "reject" in bodyShape || shape.segments.length !== bodyShape.segments.length ? !1 : folded === rule.command || folded.startsWith(rule.command + " ");
+  return "reject" in bodyShape || foldSpacing(rule.command) === void 0 || shape.segments.length !== bodyShape.segments.length ? !1 : folded === rule.command || folded.startsWith(rule.command + " ");
 }
 function ruleBreadthWarningsOf(rule) {
   if (rule.match !== "prefix" && rule.match !== "wildcard")
@@ -156242,7 +156998,10 @@ var RULE_BEHAVIORS, RULE_BEHAVIOR_SET, RULE_BEHAVIOR_PRECEDENCE, RULE_BEHAVIORS_
       "gh search prs",
       "gh search code"
     ], LEXICON_BODIES = SUGGESTION_LEXICON.map((b3) => b3.split(" ")), SCREENED_HEAD_NAMES = new Set([...BARE_INTERPRETER_NAMES].map((n2) => n2.toLowerCase()));
-    RULE_LANE_FLOOR = { pathPrefixedNameIsText: !0 }, MATCH_READING = { terminator: "keep", quotedOperatorsAreText: !1, redirection: "reject" };
+    RULE_LANE_FLOOR = {
+      pathPrefixedNameIsText: !0,
+      quotedOperatorsAreText: !0
+    }, MATCH_READING = { terminator: "keep", redirection: "reject" };
     CONTROL_CHARS_RE = /[\u0000-\u0008\u000A-\u001F\u007F-\u009F\p{Cf}\u2028\u2029]/u, CONTROL_CHARS_GLOBAL_RE = new RegExp(CONTROL_CHARS_RE.source, "gu"), DISCLOSED_RULE_TEXT_MAX_CHARS = 120;
     DISPLAY_STRIP_FORMAT_RE = new RegExp("\\p{Cf}", "gu");
     PATH_RULE_BASE_LABEL = {
@@ -156655,6 +157414,7 @@ var MAX_PENDING_STEER_CHARS, PENDING_STEER_QUEUE_BYTE_BUDGET_BYTES, MAX_PENDING_
     init_permission_rule_model();
     init_untrusted_egress();
     init_ask_question();
+    init_untrusted_text();
     MAX_PENDING_STEER_CHARS = 16e3, PENDING_STEER_QUEUE_BYTE_BUDGET_BYTES = 48e3, MAX_PENDING_STEER_ENTRIES = Math.floor(PENDING_STEER_QUEUE_BYTE_BUDGET_BYTES / MAX_PENDING_STEER_CHARS), CheckpointError = class extends Error {
       code;
       detail;
@@ -158224,10 +158984,19 @@ var init_task_outcome = __esm({
   }
 });
 
+// node_modules/@sema-agent/core/dist/brain/errors.js
+var BRAIN_ERROR_CODES, CODE_ALTERNATION, CODE_RE, CODE_PREFIX_RE, init_errors10 = __esm({
+  "node_modules/@sema-agent/core/dist/brain/errors.js"() {
+    init_thrown_value();
+    BRAIN_ERROR_CODES = ["auth", "rate_limit", "invalid_request", "server", "network", "http", "stream_torn", "refusal", "length_empty"], CODE_ALTERNATION = BRAIN_ERROR_CODES.join("|"), CODE_RE = new RegExp(`^\\[(${CODE_ALTERNATION})\\]`), CODE_PREFIX_RE = new RegExp(`^\\[(?:${CODE_ALTERNATION})\\]\\s*`);
+  }
+});
+
 // node_modules/@sema-agent/core/dist/brain/route-adjudicator.js
 var init_route_adjudicator = __esm({
   "node_modules/@sema-agent/core/dist/brain/route-adjudicator.js"() {
     init_request_params();
+    init_errors10();
   }
 });
 
@@ -158247,14 +159016,6 @@ var SWAPPABLE_DEP_SEATS, SWAPPABLE_DEP_SEAT_SET, init_swappable_deps = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/brain/errors.js
-var BRAIN_ERROR_CODES, CODE_ALTERNATION, CODE_RE, CODE_PREFIX_RE, init_errors10 = __esm({
-  "node_modules/@sema-agent/core/dist/brain/errors.js"() {
-    init_thrown_value();
-    BRAIN_ERROR_CODES = ["auth", "rate_limit", "invalid_request", "server", "network", "http", "stream_torn", "refusal", "length_empty"], CODE_ALTERNATION = BRAIN_ERROR_CODES.join("|"), CODE_RE = new RegExp(`^\\[(${CODE_ALTERNATION})\\]`), CODE_PREFIX_RE = new RegExp(`^\\[(?:${CODE_ALTERNATION})\\]\\s*`);
-  }
-});
-
 // node_modules/@sema-agent/core/dist/brain/circuit-breaker.js
 var init_circuit_breaker = __esm({
   "node_modules/@sema-agent/core/dist/brain/circuit-breaker.js"() {
@@ -160636,6 +161397,7 @@ var MONITOR_DESCRIPTION, init_monitor = __esm({
     init_background_shell();
     init_task_registry();
     init_tool_catalog_entries();
+    init_fs_bash();
     init_thrown_value();
     MONITOR_DESCRIPTION = `Run a shell command in the background and watch its stdout as a stream of events.
 
@@ -163830,11 +164592,13 @@ var ERROR_BODY_BYTE_CAP, init_stream_engine = __esm({
     init_stream_shared();
     init_context_overflow();
     init_errors10();
+    init_route_adjudicator();
     init_input_too_long();
     init_retry();
     init_status_sink();
     init_timeout();
     init_thrown_value();
+    init_untrusted_egress();
     ERROR_BODY_BYTE_CAP = 64 * 1024;
   }
 });
@@ -183878,13 +184642,13 @@ var caPath, builtinRootBodies, init_tlsTrust = __esm({
 function nearestListed(body, modelId) {
   let data = body?.data;
   if (!Array.isArray(data)) return;
-  let ids = data.map((m2) => m2?.id).filter((x3) => typeof x3 == "string");
-  if (ids.includes(modelId)) return;
+  let ids2 = data.map((m2) => m2?.id).filter((x3) => typeof x3 == "string");
+  if (ids2.includes(modelId)) return;
   let norm3 = (s) => s.toLowerCase().replace(/[^a-z0-9]+/g, ""), target = norm3(modelId);
   for (let len of [6, 5, 4]) {
     let stem = target.slice(0, len);
     if (stem.length < len) continue;
-    let hit = ids.find((i) => norm3(i).startsWith(stem));
+    let hit = ids2.find((i) => norm3(i).startsWith(stem));
     if (hit) return hit;
   }
 }
@@ -221978,7 +222742,7 @@ async function resolveDependencyClosure(rootId, lookup, alreadyEnabled, allowedC
   return err8 || { ok: !0, closure };
 }
 async function expandClosureFromManifestDeps(opts) {
-  let ids = [], skipped = [], seen2 = /* @__PURE__ */ new Set();
+  let ids2 = [], skipped = [], seen2 = /* @__PURE__ */ new Set();
   for (let rawDep of opts.manifestDeps ?? []) {
     let dep = qualifyDependency(rawDep, opts.declaringId);
     if (seen2.has(dep) || opts.closureSet.has(dep) || opts.alreadyEnabled.has(dep)) continue;
@@ -222006,9 +222770,9 @@ async function expandClosureFromManifestDeps(opts) {
       });
       continue;
     }
-    seen2.add(dep), ids.push(dep);
+    seen2.add(dep), ids2.push(dep);
   }
-  return { ok: !0, ids, skipped };
+  return { ok: !0, ids: ids2, skipped };
 }
 function formatSkippedManifestDependency(s) {
   let depMkt = parsePluginIdentifier(s.dependency).marketplace;
@@ -224120,12 +224884,12 @@ function estimateMessageTokens(messages) {
   return Math.ceil(totalTokens * (4 / 3));
 }
 function collectCompactableToolIds(messages) {
-  let ids = [];
+  let ids2 = [];
   for (let message of messages)
     if (message.type === "assistant" && Array.isArray(message.message.content))
       for (let block2 of message.message.content)
-        block2.type === "tool_use" && COMPACTABLE_TOOLS2.has(block2.name) && ids.push(block2.id);
-  return ids;
+        block2.type === "tool_use" && COMPACTABLE_TOOLS2.has(block2.name) && ids2.push(block2.id);
+  return ids2;
 }
 function isMainThreadSource(querySource) {
   return !querySource || querySource.startsWith("repl_main_thread");
@@ -231498,7 +232262,7 @@ function stripUnderlineAnsi(content) {
 }
 var import_compiler_runtime22, React15, import_jsx_runtime26, MAX_JSON_FORMAT_LENGTH, URL_IN_JSON, init_OutputLine = __esm({
   "build-src/src/components/shell/OutputLine.tsx"() {
-    import_compiler_runtime22 = __toESM(require_compiler_runtime()), React15 = __toESM(require_react());
+    import_compiler_runtime22 = __toESM(require_compiler_runtime(), 1), React15 = __toESM(require_react(), 1);
     init_useTerminalSize();
     init_ink2();
     init_hyperlink();
@@ -231507,7 +232271,7 @@ var import_compiler_runtime22, React15, import_jsx_runtime26, MAX_JSON_FORMAT_LE
     init_MessageResponse();
     init_messageActions();
     init_ExpandShellOutputContext();
-    import_jsx_runtime26 = __toESM(require_jsx_runtime());
+    import_jsx_runtime26 = __toESM(require_jsx_runtime(), 1);
     MAX_JSON_FORMAT_LENGTH = 1e4;
     URL_IN_JSON = /https?:\/\/[^\s"'<>\\]+/g;
   }
@@ -251285,7 +252049,7 @@ function ruleStoreUnreadableNote(kind) {
 function readRootCandidateNote(v2) {
   if (v2 === void 0) return;
   let dir = elideUntrustedPath(v2.dir, 512);
-  return `candidate read root ${dir} \u2014 if it is a directory, adding it as a session read directory (/add-dir ${dir}) clears this ask`;
+  return v2.covers === "exact" ? `candidate read root ${dir} \u2014 the engine named this exact path, not a directory. This host can only add directories as session read directories, and widening to the enclosing directory would grant more than this ask needs, so there is no one-step way to clear it here: answer this card instead.` : `candidate read root ${dir} \u2014 adding it as a session read directory (/add-dir ${dir}) clears this ask`;
 }
 function askFrameNoteParts(req2, _autoModeRaw) {
   let denial = denialLimitFallbackNote(req2.denialLimitFallback), origin2 = askOriginNote(req2.origin), ruleStore = ruleStoreUnreadableNote(req2.ruleStoreUnreadable), absence = ruleOffersAbsenceNote(req2.ruleOffersAbsence), readRoot = readRootCandidateNote(req2.readRootCandidate);
@@ -251378,17 +252142,28 @@ function markApprovalCardGateRow(toolCallId, row2, streamEpoch) {
   let handle2 = liveApprovalCards.get(born.callKey);
   return handle2 === void 0 ? !1 : handle2.windowClosed(row2 === "parked" ? "parked-frame" : "auto-denied");
 }
+function noteHumanApprovalCardDecision(callKey) {
+  for (humanCardDecisions.delete(callKey), humanCardDecisions.add(callKey); humanCardDecisions.size > HUMAN_DECISION_MAX; ) {
+    let oldest = humanCardDecisions.values().next().value;
+    if (oldest === void 0) break;
+    humanCardDecisions.delete(oldest);
+  }
+}
+function takeHumanApprovalCardDecision(callKey) {
+  return humanCardDecisions.delete(callKey);
+}
 function surfaceToolEndAutoDenied(ev, streamEpoch) {
   let r = resolveToolEndAutoDenied(ev, streamEpoch);
   if (r.kind !== "late") return r.kind;
   let [content, level] = r.row === "parked" ? [approvalMovedToDurableQueueLateRow(r.toolName), "info"] : [approvalAutoDeniedRow(r.toolName), "warning"];
   return surfaceLateDecideOutcome(content, level) ? "late" : "late-unsurfaced";
 }
-var liveApprovalCards, callKeyByToolCallId, SETTLED_CARD_MAX, settledCardByToolCallId, settledKey, terminalSeenByToolCallId, init_liveApprovalCardHandles = __esm({
+var liveApprovalCards, callKeyByToolCallId, SETTLED_CARD_MAX, settledCardByToolCallId, settledKey, terminalSeenByToolCallId, HUMAN_DECISION_MAX, humanCardDecisions, init_liveApprovalCardHandles = __esm({
   "build-src/src/sema/liveApprovalCardHandles.ts"() {
     init_askParkExpiry();
     init_liveSessionStore();
     liveApprovalCards = /* @__PURE__ */ new Map(), callKeyByToolCallId = /* @__PURE__ */ new Map(), SETTLED_CARD_MAX = 64, settledCardByToolCallId = /* @__PURE__ */ new Map(), settledKey = (epoch, toolCallId) => `${String(epoch)}:${toolCallId}`, terminalSeenByToolCallId = /* @__PURE__ */ new Set();
+    HUMAN_DECISION_MAX = 256, humanCardDecisions = /* @__PURE__ */ new Set();
   }
 });
 
@@ -251904,10 +252679,17 @@ function planReviewEchoBackoffMs(attempt) {
   let i = Math.min(Math.floor(attempt), PLAN_REVIEW_ECHO_BACKOFF_LADDER.length - 1);
   return PLAN_REVIEW_ECHO_BACKOFF_LADDER[i];
 }
-var openWindows, PLAN_REVIEW_ECHO_BACKOFF_LADDER, PLAN_REVIEW_ECHO_MAX_RETRIES, init_planReviewDecisionWindow = __esm({
+function planReviewEchoDeferral(attempt, deferredSoFarMs) {
+  let spent = Number.isFinite(deferredSoFarMs) && deferredSoFarMs > 0 ? deferredSoFarMs : 0;
+  return spent >= PLAN_REVIEW_ECHO_TOTAL_CAP_MS ? { kind: "fallback" } : { kind: "defer", waitMs: Math.min(planReviewEchoBackoffMs(attempt), PLAN_REVIEW_ECHO_TOTAL_CAP_MS - spent) };
+}
+function shouldSuppressPlanReviewReopen(taskId) {
+  return typeof taskId == "string" && taskId !== "" && openWindows.has(taskId);
+}
+var openWindows, PLAN_REVIEW_ECHO_BACKOFF_LADDER, PLAN_REVIEW_ECHO_TOTAL_CAP_MS, PLAN_REVIEW_ECHO_MAX_RETRIES, init_planReviewDecisionWindow = __esm({
   "build-src/src/sema/planReviewDecisionWindow.ts"() {
     openWindows = /* @__PURE__ */ new Set();
-    PLAN_REVIEW_ECHO_BACKOFF_LADDER = [400, 800, 1600, 3200], PLAN_REVIEW_ECHO_MAX_RETRIES = PLAN_REVIEW_ECHO_BACKOFF_LADDER.length;
+    PLAN_REVIEW_ECHO_BACKOFF_LADDER = [400, 800, 1600, 3200, 6400], PLAN_REVIEW_ECHO_TOTAL_CAP_MS = 6e4, PLAN_REVIEW_ECHO_MAX_RETRIES = PLAN_REVIEW_ECHO_BACKOFF_LADDER.length;
   }
 });
 
@@ -307626,7 +308408,7 @@ function FileEditToolUseRejectedMessage(t0) {
 }
 var import_compiler_runtime38, import_jsx_runtime45, MAX_LINES_TO_RENDER, init_FileEditToolUseRejectedMessage = __esm({
   "build-src/src/components/FileEditToolUseRejectedMessage.tsx"() {
-    import_compiler_runtime38 = __toESM(require_compiler_runtime());
+    import_compiler_runtime38 = __toESM(require_compiler_runtime(), 1);
     init_useTerminalSize();
     init_cwd();
     init_ink2();
@@ -307634,7 +308416,7 @@ var import_compiler_runtime38, import_jsx_runtime45, MAX_LINES_TO_RENDER, init_F
     init_MessageResponse();
     init_StructuredDiffList();
     init_stringUtils();
-    import_jsx_runtime45 = __toESM(require_jsx_runtime()), MAX_LINES_TO_RENDER = 10;
+    import_jsx_runtime45 = __toESM(require_jsx_runtime(), 1), MAX_LINES_TO_RENDER = 10;
   }
 });
 
@@ -329009,15 +329791,15 @@ async function bashToolHasPermission(input, context3, getCommandSubcommandPrefix
     if (permissionResult.behavior === "ask" || permissionResult.behavior === "passthrough") {
       let updates = "suggestions" in permissionResult ? permissionResult.suggestions : void 0, rules = extractRules(updates);
       for (let rule of rules) {
-        let ruleKey = permissionRuleValueToString(rule);
-        collectedRules.set(ruleKey, rule);
+        let ruleKey2 = permissionRuleValueToString(rule);
+        collectedRules.set(ruleKey2, rule);
       }
       if (permissionResult.behavior === "ask" && rules.length === 0 && permissionResult.decisionReason?.type !== "rule")
         for (let rule of extractRules(
           suggestionForExactCommand3(subcommand)
         )) {
-          let ruleKey = permissionRuleValueToString(rule);
-          collectedRules.set(ruleKey, rule);
+          let ruleKey2 = permissionRuleValueToString(rule);
+          collectedRules.set(ruleKey2, rule);
         }
     }
   let decisionReason = {
@@ -329950,10 +330732,10 @@ async function addCronTask(cron, prompt, recurring, durable, agentId) {
     await writeCronTasks([...current6, task], root2);
   }), id) : (addSessionCronTask({ ...task, ...agentId ? { agentId } : {} }), id);
 }
-async function removeCronTasks(ids, dir) {
-  if (ids.length === 0 || dir === void 0 && removeSessionCronTasks(ids) === ids.length)
+async function removeCronTasks(ids2, dir) {
+  if (ids2.length === 0 || dir === void 0 && removeSessionCronTasks(ids2) === ids2.length)
     return;
-  let idSet = new Set(ids);
+  let idSet = new Set(ids2);
   await withCronFileLock(dir, async (current6, root2) => {
     let remaining = current6.filter((t2) => !idSet.has(t2.id));
     remaining.length !== current6.length && await writeCronTasks(remaining, root2);
@@ -331479,10 +332261,10 @@ function getToolUseIdsFromMessage(msg) {
   }).filter(Boolean) : [];
 }
 function getToolUseIdsFromCollapsedGroup(message) {
-  let ids = [];
+  let ids2 = [];
   for (let msg of message.messages)
-    ids.push(...getToolUseIdsFromMessage(msg));
-  return ids;
+    ids2.push(...getToolUseIdsFromMessage(msg));
+  return ids2;
 }
 function hasAnyToolInProgress(message, inProgressToolUseIDs) {
   return getToolUseIdsFromCollapsedGroup(message).some(
@@ -357967,10 +358749,12 @@ __export(suspendedAskPort_exports, {
   claimStreamApproval: () => claimStreamApproval,
   forgetSuspendedAsk: () => forgetSuspendedAsk,
   installLiveToolApprovalResponder: () => installLiveToolApprovalResponder,
+  installStreamApprovalOutcomeSink: () => installStreamApprovalOutcomeSink,
   installSuspendedAskTracker: () => installSuspendedAskTracker,
   liveToolApprovalResponder: () => liveToolApprovalResponder,
   noteApprovalsAwaitingDecision: () => noteApprovalsAwaitingDecision,
   noteSeamClientInstalled: () => noteSeamClientInstalled,
+  noteStreamApprovalOutcome: () => noteStreamApprovalOutcome,
   noteSuspendedAskDecided: () => noteSuspendedAskDecided,
   noteSuspendedAskFeedInstalled: () => noteSuspendedAskFeedInstalled,
   noteSuspendedAskSubmitted: () => noteSuspendedAskSubmitted,
@@ -358078,8 +358862,8 @@ function takeSuspendedAskRequeueBudget(approvalId, max2) {
 function forgetSuspendedAsk(approvalId) {
   claimed.delete(approvalId), decided.delete(approvalId), requeueUsed.delete(approvalId), submitting.delete(approvalId), seenInSnapshot.delete(approvalId);
 }
-function noteSuspendedAsksListed(ids) {
-  for (let id of ids) boundedAdd(seenInSnapshot, id);
+function noteSuspendedAsksListed(ids2) {
+  for (let id of ids2) boundedAdd(seenInSnapshot, id);
 }
 function pruneVanishedSuspendedAsks(liveIds) {
   let n2 = 0;
@@ -358110,8 +358894,19 @@ function requeueSuspendedAsk(approvalId) {
   } catch {
   }
 }
+function installStreamApprovalOutcomeSink(fn2) {
+  outcomeSink = fn2;
+}
+function noteStreamApprovalOutcome(note) {
+  let sink2 = outcomeSink;
+  if (sink2 !== null)
+    try {
+      sink2(note);
+    } catch {
+    }
+}
 function _resetSuspendedAskPortForTest() {
-  tracker = null, responder = null, claimed.clear(), decided.clear(), requeueUsed.clear(), submitting.clear(), seenInSnapshot.clear(), ledgerOverflowed = !1, installed3 = !1, count3 = null, listeners10.clear(), clientListeners.clear();
+  tracker = null, responder = null, outcomeSink = null, claimed.clear(), decided.clear(), requeueUsed.clear(), submitting.clear(), seenInSnapshot.clear(), ledgerOverflowed = !1, installed3 = !1, count3 = null, listeners10.clear(), clientListeners.clear();
 }
 function emit5() {
   for (let l3 of [...listeners10])
@@ -358120,13 +358915,14 @@ function emit5() {
     } catch {
     }
 }
-var responder, clientListeners, tracker, claimed, decided, requeueUsed, submitting, seenInSnapshot, CLAIM_LEDGER_MAX, ledgerOverflowed, installed3, count3, listeners10, init_suspendedAskPort = __esm({
+var responder, clientListeners, tracker, claimed, decided, requeueUsed, submitting, seenInSnapshot, CLAIM_LEDGER_MAX, ledgerOverflowed, installed3, count3, listeners10, outcomeSink, init_suspendedAskPort = __esm({
   "build-src/src/sema/suspendedAskPort.ts"() {
     responder = null;
     clientListeners = /* @__PURE__ */ new Set();
     tracker = null, claimed = /* @__PURE__ */ new Set(), decided = /* @__PURE__ */ new Set(), requeueUsed = /* @__PURE__ */ new Map(), submitting = /* @__PURE__ */ new Set(), seenInSnapshot = /* @__PURE__ */ new Set(), CLAIM_LEDGER_MAX = 4096;
     ledgerOverflowed = !1;
     installed3 = !1, count3 = null, listeners10 = /* @__PURE__ */ new Set();
+    outcomeSink = null;
   }
 });
 
@@ -358701,11 +359497,11 @@ function RejectedPlanMessage(t0) {
 }
 var import_compiler_runtime106, import_jsx_runtime133, init_RejectedPlanMessage = __esm({
   "build-src/src/components/messages/UserToolResultMessage/RejectedPlanMessage.tsx"() {
-    import_compiler_runtime106 = __toESM(require_compiler_runtime());
+    import_compiler_runtime106 = __toESM(require_compiler_runtime(), 1);
     init_Markdown();
     init_MessageResponse();
     init_ink2();
-    import_jsx_runtime133 = __toESM(require_jsx_runtime());
+    import_jsx_runtime133 = __toESM(require_jsx_runtime(), 1);
   }
 });
 
@@ -383618,12 +384414,12 @@ function resolveStopTargetByName(query2, appState) {
     tasks3
   ), namedExact = resolveNamedAgent((n2) => n2 === query2, appState);
   if (teammateExact.status !== "not_found" && namedExact) {
-    let ids = teammateExact.status === "found" ? [
+    let ids2 = teammateExact.status === "found" ? [
       teammateExact.task.identity?.agentId ?? teammateExact.taskId
     ] : teammateExact.candidates;
     return {
       status: "ambiguous",
-      message: teammateVsNamedAgentMessage(query2, ids, namedExact.taskId)
+      message: teammateVsNamedAgentMessage(query2, ids2, namedExact.taskId)
     };
   }
   if (teammateExact.status === "ambiguous")
@@ -383644,12 +384440,12 @@ function resolveStopTargetByName(query2, appState) {
     tasks3
   ), namedNorm = resolveNamedAgent((n2) => normalizeAgentName2(n2) === norm3, appState);
   if (teammateNorm.status !== "not_found" && namedNorm) {
-    let ids = teammateNorm.status === "found" ? [
+    let ids2 = teammateNorm.status === "found" ? [
       teammateNorm.task.identity?.agentId ?? teammateNorm.taskId
     ] : teammateNorm.candidates;
     return {
       status: "ambiguous",
-      message: teammateVsNamedAgentMessage(query2, ids, namedNorm.taskId)
+      message: teammateVsNamedAgentMessage(query2, ids2, namedNorm.taskId)
     };
   }
   return teammateNorm.status === "ambiguous" ? {
@@ -393931,6 +394727,48 @@ var SUBAGENT_OBSERVATION_EXEMPT_NAMES, WORKFLOW_ACCEPTED_EXEMPT_NAMES, latchedSe
   }
 });
 
+// build-src/src/sema/midTurnRuleNotice.ts
+function noteStampSentForRun(ruleKeys) {
+  lastSentRuleKeys = [...ruleKeys];
+}
+function noteRunStreamStarted() {
+  runStreamDepth += 1;
+}
+function noteRunStreamSettled() {
+  runStreamDepth > 0 && (runStreamDepth -= 1);
+}
+function ruleKey(behavior, rule) {
+  return `${behavior}:${rule}`;
+}
+function rulesMissFromInflightStamp(behavior, rules) {
+  if (runStreamDepth <= 0 || lastSentRuleKeys === void 0) return !1;
+  let sent = new Set(lastSentRuleKeys);
+  return rules.some((r) => !sent.has(ruleKey(behavior, r)));
+}
+function describeRuleAppliesNextTurn(behavior, rules) {
+  let shown = rules.slice(0, 5).map((r) => JSON.stringify(r)).join(", "), more = rules.length > 5 ? ` (+${String(rules.length - 5)} more)` : "";
+  return `Added ${String(rules.length)} ${behavior} rule(s): ${shown}${more} \u2014 this rule applies from your next turn; the turn that is running now still uses the rules it started with.`;
+}
+function noteRestrictionRulesAdded(behavior, rules) {
+  try {
+    if (rules.length === 0 || !rulesMissFromInflightStamp(behavior, rules)) return;
+    let text2 = describeRuleAppliesNextTurn(behavior, rules);
+    surfaceTranscriptSystemNotice(text2, "warning") || process.stderr.write(`[sema] ${text2}
+`);
+  } catch (e) {
+    logForDebugging(
+      `[sema][mid-turn-rule-notice] surface failed: ${e instanceof Error ? e.message : String(e)}`
+    );
+  }
+}
+var lastSentRuleKeys, runStreamDepth, init_midTurnRuleNotice = __esm({
+  "build-src/src/sema/midTurnRuleNotice.ts"() {
+    init_debug();
+    init_transcriptSystemNotice();
+    runStreamDepth = 0;
+  }
+});
+
 // build-src/src/sema/hooksWireCaps.ts
 var hooksWireCaps_exports = {};
 __export(hooksWireCaps_exports, {
@@ -395049,6 +395887,79 @@ var HOOK_NOTICE_WARN_KEY, HOOK_NOTICE_WARN_TIMEOUT_MS, HOOK_FAILURE_WARN_KEY, ho
   }
 });
 
+// build-src/src/sema/engineAgentAbsence.ts
+function isAbsentRow(task) {
+  return typeof task != "object" || task === null ? !1 : task._semaAbsence !== void 0;
+}
+function readRowAbsence(task) {
+  if (!(typeof task != "object" || task === null))
+    return task._semaAbsence;
+}
+function markEngineAgentRowAbsent(task, ev) {
+  return task.status !== "running" || task._semaAbsence !== void 0 ? task : {
+    ...task,
+    _semaAbsence: { lastSeenAtMs: ev.lastSeenAtMs, absentForMs: ev.absentForMs },
+    endTime: task.endTime ?? ev.lastSeenAtMs
+  };
+}
+function clearEngineAgentRowAbsence(task) {
+  return task._semaAbsence === void 0 ? task : { ...task, _semaAbsence: void 0, endTime: void 0 };
+}
+function engineAgentAbsenceExpired(task, now2 = Date.now(), ttlMs2 = 18e5) {
+  let absence = readRowAbsence(task);
+  return absence === void 0 ? !1 : now2 - absence.lastSeenAtMs >= ttlMs2;
+}
+function engineAgentAbsenceDroppedLine(label, ttlMs2 = 18e5, removeReason) {
+  let minutes = Math.round(ttlMs2 / 6e4), why = typeof removeReason == "string" && removeReason !== "" ? ` \xB7 the engine removed it from the fleet list (${removeReason}); that is not an outcome \u2014 read the run to settle it` : " \xB7 outcome unknown";
+  return `${label} was dropped from the task panel after ${minutes} min without an engine report${why}`;
+}
+function noteEngineAgentRowRemoved(taskId, removeReason) {
+  if (taskId.length !== 0 && !(typeof removeReason != "string" || removeReason === ""))
+    for (removedRowReasons.set(taskId, removeReason); removedRowReasons.size > REMOVED_ROW_REASON_LEDGER_MAX; ) {
+      let oldest = removedRowReasons.keys().next();
+      if (oldest.done === !0) break;
+      removedRowReasons.delete(oldest.value);
+    }
+}
+function takeEngineAgentRowRemoveReason(taskId) {
+  let reason = removedRowReasons.get(taskId);
+  return reason === void 0 ? null : (removedRowReasons.delete(taskId), reason);
+}
+function engineAgentTerminalAfterDropLine(label, status3, hasReport) {
+  return `${label} reported ${status3} after it was dropped from the task panel${hasReport ? " \xB7 its final report arrived too late to keep in the panel" : ""}`;
+}
+function noteEngineAgentRowReclaimed(taskId, label) {
+  if (taskId.length !== 0)
+    for (reclaimedRows.set(taskId, label.length > 0 ? label : taskId); reclaimedRows.size > RECLAIMED_ROW_LEDGER_MAX; ) {
+      let oldest = reclaimedRows.keys().next();
+      if (oldest.done === !0) break;
+      reclaimedRows.delete(oldest.value);
+    }
+}
+function takeEngineAgentReclaimedRow(taskId) {
+  let label = reclaimedRows.get(taskId);
+  return label === void 0 ? null : (reclaimedRows.delete(taskId), label);
+}
+function reapExpiredEngineAgentAbsences(tasks3, ownedRowIds, now2 = Date.now(), ttlMs2 = 18e5) {
+  let out6 = [];
+  for (let [id, task] of Object.entries(tasks3))
+    ownedRowIds.has(id) && engineAgentAbsenceExpired(task, now2, ttlMs2) && (typeof task == "object" && task !== null && task.retain === !0 || out6.push(id));
+  return out6;
+}
+function expiredButRetainedEngineAgentAbsences(tasks3, ownedRowIds, now2 = Date.now(), ttlMs2 = 18e5) {
+  let out6 = [];
+  for (let [id, task] of Object.entries(tasks3))
+    ownedRowIds.has(id) && engineAgentAbsenceExpired(task, now2, ttlMs2) && typeof task == "object" && task !== null && task.retain === !0 && out6.push(id);
+  return out6;
+}
+var ENGINE_AGENT_ABSENT_ROW_TEXT, REMOVED_ROW_REASON_LEDGER_MAX, removedRowReasons, RECLAIMED_ROW_LEDGER_MAX, reclaimedRows, init_engineAgentAbsence = __esm({
+  "build-src/src/sema/engineAgentAbsence.ts"() {
+    ENGINE_AGENT_ABSENT_ROW_TEXT = "engine no longer reports this agent \xB7 outcome unknown";
+    REMOVED_ROW_REASON_LEDGER_MAX = 256, removedRowReasons = /* @__PURE__ */ new Map();
+    RECLAIMED_ROW_LEDGER_MAX = 256, reclaimedRows = /* @__PURE__ */ new Map();
+  }
+});
+
 // build-src/src/sema/fleetClient.ts
 var fleetClient_exports = {};
 __export(fleetClient_exports, {
@@ -395106,7 +396017,17 @@ function createLiveFleetSource(config4, now2 = Date.now()) {
     // 按档留痕 —— 处置边界与论证见 fleetDurableTerminalOverlay.ts 的 `evidenceTier` 头注
     // (要点:本模块是进程内**呈现**面,不落库/不跨会话搬运/翻行另有一道正交归属门,
     //  故不属包文档划的「有副作用的归属动作」射程)。`rowIds` 本端暂无消费面,显式具名弃用。
-    onBgNotificationAccepted: (n2, _rowIds, evidence) => observeFleetBgNotification(n2, evidence)
+    onBgNotificationAccepted: (n2, _rowIds, evidence) => observeFleetBgNotification(n2, evidence),
+    // ── CC-65(client-core 0.74.0):`task_remove` 帧的**离场读口** ─────────────────────────
+    // 🔴 离场**不是终局证据**(包头注逐字:结算的属主在 durable 侧)⇒ 这一端一个状态都不改、
+    //    一行都不 settle,只把引擎给的**真因**记进缺席台账 —— 「为什么这一行不再上报」此前只能
+    //    落到 TTL 回收那句「outcome unknown」,而引擎其实说过。
+    // 🔴 两形不入账(包给的判别位,壳零自铸):`stale` = 退的是前一代、行根本没被删;
+    //    `unknownRow` = 账本里本来就没这一行(晚连接者收到的退场帧)。把这两形记进去就是拿
+    //    别的事实去解释这一行的缺席。
+    onTaskRemoved: (removal) => {
+      removal.stale === !0 || removal.unknownRow === !0 || noteEngineAgentRowRemoved(removal.id, removal.removeReason);
+    }
   }), lastError = null, disposed4 = !1, client3 = new AgentClient({
     baseUrl: config4.baseUrl,
     authToken: config4.authToken,
@@ -395232,6 +396153,7 @@ var ROW_FILTER, workflowRowObserver, init_fleetClient = __esm({
     init_fleetDurableTerminalOverlay();
     init_footerRowBelt();
     init_hookNoticeStore();
+    init_engineAgentAbsence();
     init_dist();
     ROW_FILTER = (rows3) => filterFooterTaskRows(rows3), workflowRowObserver = null;
     Promise.resolve().then(() => (init_state(), state_exports)).then((m2) => {
@@ -399425,6 +400347,7 @@ async function* query(params) {
     }
   noteEngineTurnStart();
   let setInProgress = params.toolUseContext?.setInProgressToolUseIDs, engineOpenToolIds = /* @__PURE__ */ new Set(), foregroundRunRegistered = null, semaQuotaDeniedThisTurn = !1, listenedRuns = /* @__PURE__ */ new Set();
+  noteRunStreamStarted();
   try {
     let sessionId = req2.sessionId ?? mockClientIds.sessionId;
     try {
@@ -399482,7 +400405,7 @@ async function* query(params) {
             }
         }
       }
-    }, bgTearResends = 0, drainingRetries = 0, planReviewEchoRetries = 0, resumeAtRetried = !1, busySignal = null, readBusySignal = () => busySignal, runningChoiceOffered = !1, runningChoiceSilentWaitTaskId = null, engineFrameSeen = !1, boundRunId, retryStream = !0, interruptedResendDone = !1, pendingInterruptedSettledRow = null, pendingAttachRunId, pendingFollowRow = null;
+    }, bgTearResends = 0, drainingRetries = 0, planReviewEchoRetries = 0, planReviewEchoDeferredMs = 0, resumeAtRetried = !1, busySignal = null, readBusySignal = () => busySignal, runningChoiceOffered = !1, runningChoiceSilentWaitTaskId = null, engineFrameSeen = !1, boundRunId, retryStream = !0, interruptedResendDone = !1, pendingInterruptedSettledRow = null, pendingAttachRunId, pendingFollowRow = null;
     for (; retryStream; ) {
       retryStream = !1, engineFrameSeen = !1, busySignal = null, boundRunId = void 0;
       let attachRunId = pendingAttachRunId;
@@ -399607,18 +400530,18 @@ async function* query(params) {
             activeTaskStatus: detectedBusy.activeTaskStatus,
             pendingGateKind: detectedBusy.pendingGate?.kind ?? null
           };
-          if (submissionOrigin === "injected" && isMainLaneQuerySource(params.querySource) && !signal?.aborted && isStalePlanReviewEcho(planReviewEcho))
-            if (planReviewEchoRetries < PLAN_REVIEW_ECHO_MAX_RETRIES) {
-              let waitMs = planReviewEchoBackoffMs(planReviewEchoRetries);
-              planReviewEchoRetries++, logForDebugging(
-                `[sema][seamQuery] plan-review echo window on run ${String(detectedBusy.activeTaskId)} \u2014 deferring this injected submission ${String(planReviewEchoRetries)}/${String(PLAN_REVIEW_ECHO_MAX_RETRIES)} by ${String(waitMs)}ms instead of racing the decision (L-405)`
-              ), await new Promise((res) => setTimeout(res, waitMs)), signal?.aborted || (retryStream = !0);
+          if (submissionOrigin === "injected" && isMainLaneQuerySource(params.querySource) && !signal?.aborted && isStalePlanReviewEcho(planReviewEcho)) {
+            let deferral = planReviewEchoDeferral(planReviewEchoRetries, planReviewEchoDeferredMs);
+            if (deferral.kind === "defer") {
+              planReviewEchoRetries++, planReviewEchoDeferredMs += deferral.waitMs, logForDebugging(
+                `[sema][seamQuery] plan-review echo window on run ${String(detectedBusy.activeTaskId)} \u2014 deferring this injected submission (attempt ${String(planReviewEchoRetries)}, ${String(deferral.waitMs)}ms, ${String(planReviewEchoDeferredMs)}/${String(PLAN_REVIEW_ECHO_TOTAL_CAP_MS)}ms spent)`
+              ), await new Promise((res) => setTimeout(res, deferral.waitMs)), signal?.aborted || (retryStream = !0);
               continue;
             } else
               logForDebugging(
-                `[sema][seamQuery] plan-review echo window on run ${String(detectedBusy.activeTaskId)} did not clear within ${String(PLAN_REVIEW_ECHO_MAX_RETRIES)} deferrals \u2014 falling through to the existing self-heal leg (L-405)`
+                `[sema][seamQuery] plan-review echo window on run ${String(detectedBusy.activeTaskId)} did not clear within ${String(PLAN_REVIEW_ECHO_TOTAL_CAP_MS)}ms \u2014 falling back to the self-heal lane with plan-review reopen suppressed`
               );
-          else leftPlanReviewGate(planReviewEcho) && clearPlanReviewDecisionWindow(detectedBusy.activeTaskId);
+          } else leftPlanReviewGate(planReviewEcho) && clearPlanReviewDecisionWindow(detectedBusy.activeTaskId);
           let outcome = await attemptActiveRunSelfHeal2(detectedBusy, durableRunVerbs(client), {
             // `hasPendingDecision`(车L 12,原「故意不接」记账销案):真读面 = REPL
             // toolUseConfirmQueue 的模块级长度镜像(leaderPermissionBridge,队列变更 effect
@@ -399642,7 +400565,9 @@ async function* query(params) {
             // `plan-review:<taskId>`,而 REPL overlay 钩子带一个会话级 seenQuestionIds 去重集,
             // 同 id 再发一次会被**静默丢掉** —— 那样「已重新打开审批卡」就成了假话。
             // planReviewReopen 每次铸新身份,决断通路仍是同一个 decidePlanReview wire。
-            reopenPlanReview: reopenPlanReviewCard2,
+            // L-422 守卫:本端刚交过决断且窗没关 ⇒ 拒开(reopened:false),绝不把已决断的门再问一遍;
+            //    窗关(引擎已离开那道门 / 换代 / 清窗)才走真重开口。
+            reopenPlanReview: (tid) => shouldSuppressPlanReviewReopen(tid) ? (logForDebugging(`[sema][seamQuery] plan-review reopen for run ${tid} suppressed \u2014 a decision from this shell is still being applied by the engine`), { reopened: !1 }) : reopenPlanReviewCard2(tid),
             // ask park 的重开口(#155):待决行经 approvals.list 取。结构判定装配 —— client 真有
             // approvals 面(live SDK)才装;mock 车道缺席 ⇒ dep 不装 ⇒ ask-reopen-failed 诚实臂。
             // MED-6(复审):装配门与包 HitlClientLike 的四动词同宽——只校 list 会让「有 list
@@ -399831,7 +400756,7 @@ ${notifSupplement}` : baseErrorContent
     }
     return void 0;
   } finally {
-    if (publishEngineAgentPanelEvent({ kind: "sweep" }), semaAutoResumeStore && !semaQuotaDeniedThisTurn && isMainLaneQuerySource(params.querySource) && !isBackgroundJournalSuppressed())
+    if (noteRunStreamSettled(), publishEngineAgentPanelEvent({ kind: "sweep" }), semaAutoResumeStore && !semaQuotaDeniedThisTurn && isMainLaneQuerySource(params.querySource) && !isBackgroundJournalSuppressed())
       try {
         semaAutoResumeStore.noteUsageLimitAutoResumeTurnCompleted();
       } catch {
@@ -400267,6 +401192,7 @@ var transcriptUsageDriveSeq, BG_TEAR_MAX_RESENDS, BG_RECOVERY_WAIT_MS, DRAINING_
     init_dist();
     init_deferSessionExemption();
     init_debug();
+    init_midTurnRuleNotice();
     init_hooksWireCaps2();
     init_dist();
     init_intl();
@@ -401145,66 +402071,6 @@ var init_sanitizeToolResultContent = __esm({
   }
 });
 
-// build-src/src/sema/engineAgentAbsence.ts
-function isAbsentRow(task) {
-  return typeof task != "object" || task === null ? !1 : task._semaAbsence !== void 0;
-}
-function readRowAbsence(task) {
-  if (!(typeof task != "object" || task === null))
-    return task._semaAbsence;
-}
-function markEngineAgentRowAbsent(task, ev) {
-  return task.status !== "running" || task._semaAbsence !== void 0 ? task : {
-    ...task,
-    _semaAbsence: { lastSeenAtMs: ev.lastSeenAtMs, absentForMs: ev.absentForMs },
-    endTime: task.endTime ?? ev.lastSeenAtMs
-  };
-}
-function clearEngineAgentRowAbsence(task) {
-  return task._semaAbsence === void 0 ? task : { ...task, _semaAbsence: void 0, endTime: void 0 };
-}
-function engineAgentAbsenceExpired(task, now2 = Date.now(), ttlMs2 = 18e5) {
-  let absence = readRowAbsence(task);
-  return absence === void 0 ? !1 : now2 - absence.lastSeenAtMs >= ttlMs2;
-}
-function engineAgentAbsenceDroppedLine(label, ttlMs2 = 18e5) {
-  let minutes = Math.round(ttlMs2 / 6e4);
-  return `${label} was dropped from the task panel after ${minutes} min without an engine report \xB7 outcome unknown`;
-}
-function engineAgentTerminalAfterDropLine(label, status3, hasReport) {
-  return `${label} reported ${status3} after it was dropped from the task panel${hasReport ? " \xB7 its final report arrived too late to keep in the panel" : ""}`;
-}
-function noteEngineAgentRowReclaimed(taskId, label) {
-  if (taskId.length !== 0)
-    for (reclaimedRows.set(taskId, label.length > 0 ? label : taskId); reclaimedRows.size > RECLAIMED_ROW_LEDGER_MAX; ) {
-      let oldest = reclaimedRows.keys().next();
-      if (oldest.done === !0) break;
-      reclaimedRows.delete(oldest.value);
-    }
-}
-function takeEngineAgentReclaimedRow(taskId) {
-  let label = reclaimedRows.get(taskId);
-  return label === void 0 ? null : (reclaimedRows.delete(taskId), label);
-}
-function reapExpiredEngineAgentAbsences(tasks3, ownedRowIds, now2 = Date.now(), ttlMs2 = 18e5) {
-  let out6 = [];
-  for (let [id, task] of Object.entries(tasks3))
-    ownedRowIds.has(id) && engineAgentAbsenceExpired(task, now2, ttlMs2) && (typeof task == "object" && task !== null && task.retain === !0 || out6.push(id));
-  return out6;
-}
-function expiredButRetainedEngineAgentAbsences(tasks3, ownedRowIds, now2 = Date.now(), ttlMs2 = 18e5) {
-  let out6 = [];
-  for (let [id, task] of Object.entries(tasks3))
-    ownedRowIds.has(id) && engineAgentAbsenceExpired(task, now2, ttlMs2) && typeof task == "object" && task !== null && task.retain === !0 && out6.push(id);
-  return out6;
-}
-var ENGINE_AGENT_ABSENT_ROW_TEXT, RECLAIMED_ROW_LEDGER_MAX, reclaimedRows, init_engineAgentAbsence = __esm({
-  "build-src/src/sema/engineAgentAbsence.ts"() {
-    ENGINE_AGENT_ABSENT_ROW_TEXT = "engine no longer reports this agent \xB7 outcome unknown";
-    RECLAIMED_ROW_LEDGER_MAX = 256, reclaimedRows = /* @__PURE__ */ new Map();
-  }
-});
-
 // build/stubs/internalLogging.ts
 async function logPermissionContextForAnts(_toolPermissionContext, _moment) {
 }
@@ -402582,10 +403448,10 @@ function getToolResultIds(message) {
   let content = message.message.content;
   if (!Array.isArray(content))
     return [];
-  let ids = [];
+  let ids2 = [];
   for (let block2 of content)
-    block2.type === "tool_result" && ids.push(block2.tool_use_id);
-  return ids;
+    block2.type === "tool_result" && ids2.push(block2.tool_use_id);
+  return ids2;
 }
 function hasToolUseWithIds(message, toolUseIds) {
   if (message.type !== "assistant")
@@ -405439,8 +406305,8 @@ function isValidImagePaste(c3) {
 function getImagePasteIds(pastedContents) {
   if (!pastedContents)
     return;
-  let ids = Object.values(pastedContents).filter(isValidImagePaste).map((c3) => c3.id);
-  return ids.length > 0 ? ids : void 0;
+  let ids2 = Object.values(pastedContents).filter(isValidImagePaste).map((c3) => c3.id);
+  return ids2.length > 0 ? ids2 : void 0;
 }
 var init_textInputTypes = __esm({
   "build-src/src/types/textInputTypes.ts"() {
@@ -424400,7 +425266,7 @@ function applyPermissionUpdate(context3, update2) {
       );
       logForDebugging(
         `Applying permission update: Adding ${update2.rules.length} ${update2.behavior} rule(s) to destination '${update2.destination}': ${jsonStringify(ruleStrings)}`
-      );
+      ), update2.behavior !== "allow" && noteRestrictionRulesAdded(update2.behavior, ruleStrings);
       let ruleKind = update2.behavior === "allow" ? "alwaysAllowRules" : update2.behavior === "deny" ? "alwaysDenyRules" : "alwaysAskRules";
       return {
         ...context3,
@@ -424637,6 +425503,7 @@ var init_PermissionUpdate = __esm({
     init_filesystem();
     init_permissionRuleParser();
     init_permissionsLoader();
+    init_midTurnRuleNotice();
   }
 });
 
@@ -426139,11 +427006,11 @@ function AddDirError(t0) {
   ] }), $3[7] = t3, $3[8] = t4, $3[9] = t5) : t5 = $3[9], t5;
 }
 async function call5(onDone, context3, args) {
-  let directoryPath = (args ?? "").trim(), appState = context3.getAppState(), handleAddDirectory = async (path28, remember2 = !1) => {
+  let directoryPath = (args ?? "").trim(), appState = context3.getAppState(), handleAddDirectory = async (path28, remember3 = !1) => {
     let permissionUpdate = {
       type: "addDirectories",
       directories: [path28],
-      destination: remember2 ? "localSettings" : "session"
+      destination: remember3 ? "localSettings" : "session"
     }, latestAppState = context3.getAppState(), updatedContext = applyPermissionUpdate(latestAppState.toolPermissionContext, permissionUpdate);
     context3.setAppState((prev) => ({
       ...prev,
@@ -426152,7 +427019,7 @@ async function call5(onDone, context3, args) {
     let currentDirs = getAdditionalDirectoriesForClaudeMd();
     currentDirs.includes(path28) || setAdditionalDirectoriesForClaudeMd([...currentDirs, path28]), SandboxManager2.refreshConfig(), broadcastRootsListChanged();
     let message;
-    if (remember2) {
+    if (remember3) {
       let persistError = null;
       try {
         persistError = persistPermissionUpdate(permissionUpdate).error;
@@ -429410,23 +430277,20 @@ var sema_brand_default, init_sema_brand = __esm({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.122",
+        version: "1.0.124",
         notes: [
-          "Bundled engine 7.87.3 (core 7.23.2), client runtime 0.73.5 and client SDK 9.7.1; the settings schema stays 2.1.0. /doctor and the engine line report 7.87.3.",
-          "Credentials in an endpoint URL no longer reach the screen, the transcript or the log files. When the engine's own error text or a notice carries the URL it dialled, sema masks the user name, any query values and any fragment before rendering, on every surface: -p text, json and stream-json output, the interactive error row and notice, the /model failure receipt, sema doctor, the session transcript and the error log. Host, port, path and query key names are kept because those are what you need to fix the setting; a successful answer is never touched.",
-          "When both MODEL_GATEWAY_BASEURL and an explicit MODEL_PROVIDER are set and the gateway serves the hop, the line that says so now appears for every kind of model-lane failure (network, request construction, timeout, not only HTTP status codes) and in all three -p output formats. The startup warning and the /status row use the same wording, so the shell no longer says two different things about which setting routes the request. If the engine refuses to start because MODEL_PROVIDER is not one of the accepted values, the shell shows the engine's own refusal line with its machine-readable code, the offending value and the accepted values instead of guessing that the port is in use.",
-          "Background subagents that hit an approval gate now raise their card in the session instead of stalling silently. The footer says how many subagent approvals are waiting on you and shows a dash when the engine does not report it. On engines that do not carry the subagent call's arguments the card says so and no longer offers edit-then-approve.",
-          "Approving a plan no longer makes a second plan-review card appear afterwards.",
-          "Background task panel: a task parked at a pending approval keeps its row through compaction and the row says it is waiting for an approval. Numbers the engine did not report show as a dash instead of 0 (duration, progress), and the usage and queue badges are simply omitted. The workflow size warning no longer vanishes when the total is unknown; it says the size was not reported. When a background agent starts a new cycle its usage and tool counters reset instead of carrying the previous cycle's numbers, and the workflow details header omits the agent count when the details could not be fetched.",
-          "Cancel and submit failures are explained by the engine's own code: a cancel refused because the gate was already decided is worded differently from one where the cancel flag did not attach and can simply be resent, and a submit refused by the deployment's usage window says how long to wait when the engine gives a window and states no number when it does not.",
-          "Interrupted turns now tell you when the engine you were talking to was replaced by another process, not just when the whole instance changed. Cancelling a turn records which engine run it belonged to, so a later resume can ask the engine what happened to it.",
-          "Plugins: installing a plugin whose own plugin.json lists dependencies now installs them too, including plugins that come from a git or npm source. A dependency that cannot be installed automatically is named in the install output instead of being silent. Plugin options that declare a default value work without opening the configuration dialog first; the declared default is used until you set your own.",
-          "sema mcp list and sema mcp get now say why a connection failed (HTTP status text, the remote's own message, endpoint not found, connection refused) instead of a bare Failed to connect; credentials inside that text are masked and, when no reason is available, the row says so. mcp get adds an Issue line under Status for a failing server.",
-          "/context adds a note when the numbers shrank by less than the display's precision, and the read-directory hint on approval cards no longer promises that /add-dir will clear the question when the candidate is a single file."
+          "Bundled engine 7.89.0 (core 7.23.5) and client runtime 0.74.5. /doctor and the engine line report 7.89.0.",
+          "Permission rules you add during a session with /permissions now reach the engine on your next turn. When a run is in progress, sema says the new rule applies from the next turn; when settings cannot be re-read, sema says so and /doctor shows how old the settings in use are.",
+          "A background subagent's approval card comes back after every failed delivery when you answered it, so the request never loses its card while it is still waiting on the engine. Automatic decisions keep a bounded retry.",
+          "The /context compaction line shows the number of tokens the engine measured as freed, or says it was not reported. It no longer subtracts two counters that are not comparable.",
+          "After reattaching to a session, the agent panel no longer shows completed rows for agents this session never saw running.",
+          "The footer count of subagent approval requests waiting on you shows a dash when the engine's approval list cannot be read, instead of keeping a stale number.",
+          "Cloud resource uploads detect credential-shaped values with the same rules the engine uses.",
+          "Engine 7.89 refuses to start when a model route URL in your environment cannot be parsed, including a stale ANTHROPIC_BASE_URL you no longer use. sema shows the refusal and names the variable; unset it or fix it to start."
         ]
       },
-      productVersion: "1.0.122",
-      announcement: "sema 1.0.122 \u2014 engine 7.87.3 pickup (core 7.23.2), client runtime 0.73.5, client SDK 9.7.1. Credentials in endpoint URLs are masked on every surface; background subagents raise their approval card instead of stalling; approving a plan no longer brings a second card; the task panel shows a dash for numbers the engine did not report; plugins install their manifest dependencies and honour declared option defaults; mcp list and mcp get say why a connection failed.",
+      productVersion: "1.0.124",
+      announcement: "sema 1.0.124 \u2014 engine 7.89.0 pickup (core 7.23.5), client runtime 0.74.5. Permission rules added during a session now reach the engine on your next turn, with a notice when a run is in progress; a background subagent's approval card comes back after every failed delivery you answered; /context shows the tokens the engine measured as freed; no ghost completed rows after reattaching; a dash instead of a stale count when the approval list cannot be read.",
       version: "1.0.91"
     };
   }
@@ -434992,6 +435856,9 @@ function modelBadge(model) {
 function autocompactSourceOf(data) {
   return data.autocompactSource ?? "auto";
 }
+function freedTail(freedTokens) {
+  return freedTokens === void 0 ? " \xB7 freed: not reported by the engine" : ` \xB7 freed ${String(freedTokens)} ${freedTokens === 1 ? "token" : "tokens"}`;
+}
 function localStamp(atMs) {
   let d4 = new Date(atMs), p2 = (n2) => String(n2).padStart(2, "0");
   return `${p2(d4.getMonth() + 1)}-${p2(d4.getDate())} ${p2(d4.getHours())}:${p2(d4.getMinutes())}:${p2(d4.getSeconds())}`;
@@ -434999,12 +435866,12 @@ function localStamp(atMs) {
 function lastCompactionLine(data) {
   let rec = data._sema_lastCompaction;
   if (rec === void 0 || !Number.isFinite(rec.atMs)) return null;
-  let at = localStamp(rec.atMs);
+  let at = localStamp(rec.atMs), freed = freedTail(rec.freedTokens);
   if (rec.triggerTokensBefore !== void 0 && rec.postTokens !== void 0) {
-    let shrank = rec.postTokens < rec.triggerTokensBefore, beforeText = formatTokens(rec.triggerTokensBefore), afterText = formatTokens(rec.postTokens), tail = shrank ? beforeText === afterText ? ` (shrank by ${rec.triggerTokensBefore - rec.postTokens} tokens \u2014 less than this display's precision)` : "" : " (context did not shrink)";
-    return `Last compaction seen at ${at} \xB7 ${beforeText} \u2192 ${afterText}` + tail;
+    let shrank = rec.postTokens < rec.triggerTokensBefore, beforeText = formatTokens(rec.triggerTokensBefore), afterText = formatTokens(rec.postTokens), tail = shrank ? beforeText === afterText ? " (shrank by less than this display's precision)" : "" : " (context did not shrink)";
+    return `Last compaction seen at ${at} \xB7 ${beforeText} \u2192 ${afterText}` + tail + freed;
   }
-  return rec.preTokens !== void 0 && rec.postTokens !== void 0 ? `Last compaction seen at ${at} \xB7 before ${formatTokens(rec.preTokens)} \xB7 after ${formatTokens(rec.postTokens)} (different scales \u2014 not a before/after delta)` : rec.preTokens !== void 0 ? `Last compaction seen at ${at} \xB7 before ${formatTokens(rec.preTokens)}` : rec.postTokens !== void 0 ? `Last compaction seen at ${at} \xB7 after ${formatTokens(rec.postTokens)}` : `Last compaction seen at ${at}`;
+  return rec.preTokens !== void 0 && rec.postTokens !== void 0 ? `Last compaction seen at ${at} \xB7 before ${formatTokens(rec.preTokens)} \xB7 after ${formatTokens(rec.postTokens)} (different scales \u2014 not a before/after delta)` + freed : rec.preTokens !== void 0 ? `Last compaction seen at ${at} \xB7 before ${formatTokens(rec.preTokens)}` + freed : rec.postTokens !== void 0 ? `Last compaction seen at ${at} \xB7 after ${formatTokens(rec.postTokens)}` + freed : `Last compaction seen at ${at}` + freed;
 }
 function autocompactBufferSourceLine(data, bufferRowPresent) {
   return !bufferRowPresent || data._sema_autoCompactThresholdSource !== "engine" ? null : "Autocompact buffer = context window \u2212 the engine's compaction threshold (context_usage.compactAtTokens) \u2014 on a small context window it is the engine's policy, not the shell, that decides how much is reserved";
@@ -456705,23 +457572,20 @@ var require_sema_brand = __commonJS({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.122",
+        version: "1.0.124",
         notes: [
-          "Bundled engine 7.87.3 (core 7.23.2), client runtime 0.73.5 and client SDK 9.7.1; the settings schema stays 2.1.0. /doctor and the engine line report 7.87.3.",
-          "Credentials in an endpoint URL no longer reach the screen, the transcript or the log files. When the engine's own error text or a notice carries the URL it dialled, sema masks the user name, any query values and any fragment before rendering, on every surface: -p text, json and stream-json output, the interactive error row and notice, the /model failure receipt, sema doctor, the session transcript and the error log. Host, port, path and query key names are kept because those are what you need to fix the setting; a successful answer is never touched.",
-          "When both MODEL_GATEWAY_BASEURL and an explicit MODEL_PROVIDER are set and the gateway serves the hop, the line that says so now appears for every kind of model-lane failure (network, request construction, timeout, not only HTTP status codes) and in all three -p output formats. The startup warning and the /status row use the same wording, so the shell no longer says two different things about which setting routes the request. If the engine refuses to start because MODEL_PROVIDER is not one of the accepted values, the shell shows the engine's own refusal line with its machine-readable code, the offending value and the accepted values instead of guessing that the port is in use.",
-          "Background subagents that hit an approval gate now raise their card in the session instead of stalling silently. The footer says how many subagent approvals are waiting on you and shows a dash when the engine does not report it. On engines that do not carry the subagent call's arguments the card says so and no longer offers edit-then-approve.",
-          "Approving a plan no longer makes a second plan-review card appear afterwards.",
-          "Background task panel: a task parked at a pending approval keeps its row through compaction and the row says it is waiting for an approval. Numbers the engine did not report show as a dash instead of 0 (duration, progress), and the usage and queue badges are simply omitted. The workflow size warning no longer vanishes when the total is unknown; it says the size was not reported. When a background agent starts a new cycle its usage and tool counters reset instead of carrying the previous cycle's numbers, and the workflow details header omits the agent count when the details could not be fetched.",
-          "Cancel and submit failures are explained by the engine's own code: a cancel refused because the gate was already decided is worded differently from one where the cancel flag did not attach and can simply be resent, and a submit refused by the deployment's usage window says how long to wait when the engine gives a window and states no number when it does not.",
-          "Interrupted turns now tell you when the engine you were talking to was replaced by another process, not just when the whole instance changed. Cancelling a turn records which engine run it belonged to, so a later resume can ask the engine what happened to it.",
-          "Plugins: installing a plugin whose own plugin.json lists dependencies now installs them too, including plugins that come from a git or npm source. A dependency that cannot be installed automatically is named in the install output instead of being silent. Plugin options that declare a default value work without opening the configuration dialog first; the declared default is used until you set your own.",
-          "sema mcp list and sema mcp get now say why a connection failed (HTTP status text, the remote's own message, endpoint not found, connection refused) instead of a bare Failed to connect; credentials inside that text are masked and, when no reason is available, the row says so. mcp get adds an Issue line under Status for a failing server.",
-          "/context adds a note when the numbers shrank by less than the display's precision, and the read-directory hint on approval cards no longer promises that /add-dir will clear the question when the candidate is a single file."
+          "Bundled engine 7.89.0 (core 7.23.5) and client runtime 0.74.5. /doctor and the engine line report 7.89.0.",
+          "Permission rules you add during a session with /permissions now reach the engine on your next turn. When a run is in progress, sema says the new rule applies from the next turn; when settings cannot be re-read, sema says so and /doctor shows how old the settings in use are.",
+          "A background subagent's approval card comes back after every failed delivery when you answered it, so the request never loses its card while it is still waiting on the engine. Automatic decisions keep a bounded retry.",
+          "The /context compaction line shows the number of tokens the engine measured as freed, or says it was not reported. It no longer subtracts two counters that are not comparable.",
+          "After reattaching to a session, the agent panel no longer shows completed rows for agents this session never saw running.",
+          "The footer count of subagent approval requests waiting on you shows a dash when the engine's approval list cannot be read, instead of keeping a stale number.",
+          "Cloud resource uploads detect credential-shaped values with the same rules the engine uses.",
+          "Engine 7.89 refuses to start when a model route URL in your environment cannot be parsed, including a stale ANTHROPIC_BASE_URL you no longer use. sema shows the refusal and names the variable; unset it or fix it to start."
         ]
       },
-      productVersion: "1.0.122",
-      announcement: "sema 1.0.122 \u2014 engine 7.87.3 pickup (core 7.23.2), client runtime 0.73.5, client SDK 9.7.1. Credentials in endpoint URLs are masked on every surface; background subagents raise their approval card instead of stalling; approving a plan no longer brings a second card; the task panel shows a dash for numbers the engine did not report; plugins install their manifest dependencies and honour declared option defaults; mcp list and mcp get say why a connection failed.",
+      productVersion: "1.0.124",
+      announcement: "sema 1.0.124 \u2014 engine 7.89.0 pickup (core 7.23.5), client runtime 0.74.5. Permission rules added during a session now reach the engine on your next turn, with a notice when a run is in progress; a background subagent's approval card comes back after every failed delivery you answered; /context shows the tokens the engine measured as freed; no ghost completed rows after reattaching; a dash instead of a stale count when the approval list cannot be read.",
       version: "1.0.91"
     };
   }
@@ -467267,15 +468131,15 @@ function PermissionRuleList(t0) {
       }
       return 0;
     }), lowerQuery = query2.toLowerCase();
-    for (let ruleKey of sortedRuleKeys) {
-      let rule_2 = rulesByKey.get(ruleKey);
+    for (let ruleKey2 of sortedRuleKeys) {
+      let rule_2 = rulesByKey.get(ruleKey2);
       if (rule_2) {
         let ruleString = permissionRuleValueToString(rule_2.ruleValue);
         if (query2 && !ruleString.toLowerCase().includes(lowerQuery))
           continue;
         options.push({
           label: ruleString,
-          value: ruleKey
+          value: ruleKey2
         });
       }
     }
@@ -467420,19 +468284,19 @@ function PermissionRuleList(t0) {
   }
   if (isAddingWorkspaceDirectory) {
     let t222;
-    $3[56] !== setAppState || $3[57] !== toolPermissionContext ? (t222 = (path_0, remember2) => {
+    $3[56] !== setAppState || $3[57] !== toolPermissionContext ? (t222 = (path_0, remember3) => {
       let permissionUpdate = {
         type: "addDirectories",
         directories: [path_0],
-        destination: remember2 ? "localSettings" : "session"
+        destination: remember3 ? "localSettings" : "session"
       }, updatedContext = applyPermissionUpdate(toolPermissionContext, permissionUpdate);
       setAppState((prev_4) => ({
         ...prev_4,
         toolPermissionContext: updatedContext
       }));
       let persistError = null;
-      remember2 && (persistError = persistPermissionUpdate(permissionUpdate).error);
-      let savedSuffix = persistError ? sessionOnlyPersistSuffix("localSettings", persistError) : remember2 ? " and saved to local settings" : " for this session";
+      remember3 && (persistError = persistPermissionUpdate(permissionUpdate).error);
+      let savedSuffix = persistError ? sessionOnlyPersistSuffix("localSettings", persistError) : remember3 ? " and saved to local settings" : " for this session";
       setChanges((prev_5) => [...prev_5, `Added directory ${source_default.bold(path_0)} to workspace${savedSuffix}`]), setIsAddingWorkspaceDirectory(!1);
     }, $3[56] = setAppState, $3[57] = toolPermissionContext, $3[58] = t222) : t222 = $3[58];
     let t232;
@@ -470067,15 +470931,15 @@ function PluginList({
 }) {
   let errors2 = useAppState((s) => s.plugins.errors), enabledPlugins = useAppState((s) => s.plugins.enabled), disabledPlugins = useAppState((s) => s.plugins.disabled);
   return (0, import_react190.useEffect)(() => {
-    let v2 = loadInstalledPluginsV2(), ids = Object.keys(v2.plugins).sort();
-    if (ids.length === 0) {
+    let v2 = loadInstalledPluginsV2(), ids2 = Object.keys(v2.plugins).sort();
+    if (ids2.length === 0) {
       onComplete(
         "No plugins installed. Use `/plugin install` to install a plugin."
       );
       return;
     }
     let enabledScopes = getPluginEditableScopes(), loadedEnabledSources = new Set(enabledPlugins.map((p) => p.source)), lines = ["Installed plugins:"], shown = 0;
-    for (let id of ids) {
+    for (let id of ids2) {
       let name = id.split("@")[0] ?? id, isEnabled3 = enabledScopes.has(id);
       if (filter2 !== void 0 && filter2 === "enabled" !== isEnabled3) continue;
       let hasError = errors2.some(
@@ -479740,12 +480604,12 @@ function isLoggableMessage(m2) {
   return m2.type === "progress" ? !1 : m2.type === "attachment" && getUserType() !== "ant" ? !!(m2.attachment.type === "hook_additional_context" && isEnvTruthy(process.env.SEMA_CODE_SAVE_HOOK_ADDITIONAL_CONTEXT)) : !0;
 }
 function collectReplIds(messages) {
-  let ids = /* @__PURE__ */ new Set();
+  let ids2 = /* @__PURE__ */ new Set();
   for (let m2 of messages)
     if (m2.type === "assistant" && Array.isArray(m2.message.content))
       for (let b3 of m2.message.content)
-        b3.type === "tool_use" && b3.name === REPL_TOOL_NAME && ids.add(b3.id);
-  return ids;
+        b3.type === "tool_use" && b3.name === REPL_TOOL_NAME && ids2.add(b3.id);
+  return ids2;
 }
 function transformMessagesForExternalTranscript(messages, replIds) {
   return messages.flatMap((m2) => {
@@ -483166,8 +484030,8 @@ function resolveEffective() {
   return resolveEffectiveSettings(consume88Layers());
 }
 function resolveSemaConfigWithEffective(opts) {
-  let eff = resolveEffectiveSettings(consume88Layers());
-  return { effective: eff, config: toEffectiveConfig(eff, opts) };
+  let layers2 = consume88Layers(), eff = resolveEffectiveSettings(layers2);
+  return { effective: eff, config: toEffectiveConfig(eff, opts), sources: layers2.map((l3) => l3.source) };
 }
 var init_settings5 = __esm({
   "build-src/src/sema/settings/index.ts"() {
@@ -484019,6 +484883,8 @@ function askRetractionRow(cause, toolName2) {
       return `${what} was withdrawn by the engine, so this card was taken down. Nothing was decided on your behalf here.`;
     case "unanswered-after-window":
       return `${what} was still unanswered well after the engine's approval window closed, so this card was taken down to let this turn finish. Nothing was decided on your behalf here. If the engine parked that step it is still waiting in its durable queue \u2014 send a message and sema will re-check what it is waiting on.`;
+    case "host-decision-port-gone":
+      return `${what} was taken down because this session no longer has a way to answer it \u2014 the engine connection or session it belonged to was replaced. Nothing was decided on your behalf here. If the engine is still waiting on that step, send a message and sema will re-check what it is waiting on.`;
     case "durable-reaped":
       return `${what} sat in the engine's durable queue past its deadline, so this card was taken down. The engine reaps rows that pass their deadline; nothing was decided on your behalf here. If the step is still needed, ask for it again.`;
     default:
@@ -484179,7 +485045,7 @@ function shellApprovalCardPort(req2) {
   let tool = lookup.kind === "tool" ? lookup.tool : genericGateTool(req2.toolName), { callKey, signal } = req2, askDeadlineMs = readAskDeadlineMs(req2) ?? readParkRowDeadline(req2.callKey);
   return new Promise((resolve59) => {
     let selectedPersistRule, selectedPersistRuleBatchOfferIndex, selectedPersistRuleEdited, windowClosedAtMs, lateApproveConfirmedOnce = !1, lateApproveConfirmShown = !1, stagedPermissionUpdates = [], lateDecideWatchdogTimer, settled2 = !1, saidWindowClosed = !1, bornEpoch = getLiveSessionEpoch(), settle3 = (o) => {
-      settled2 || (settled2 = !0, signal?.removeEventListener("abort", onAbortSignal), askWindowTimer !== void 0 && clearTimeout(askWindowTimer), askBackstopTimer !== void 0 && clearTimeout(askBackstopTimer), lateDecideWatchdogTimer !== void 0 && clearTimeout(lateDecideWatchdogTimer), liveApprovalCards.delete(callKey), forgetApprovalCardToolCallId(req2.toolCallId, callKey, bornEpoch, saidWindowClosed ? req2.toolName : void 0), journalGateResolved(callKey), resolve59(o));
+      settled2 || (settled2 = !0, signal?.removeEventListener("abort", onAbortSignal), askWindowTimer !== void 0 && clearTimeout(askWindowTimer), askBackstopTimer !== void 0 && clearTimeout(askBackstopTimer), lateDecideWatchdogTimer !== void 0 && clearTimeout(lateDecideWatchdogTimer), liveApprovalCards.delete(callKey), forgetApprovalCardToolCallId(req2.toolCallId, callKey, bornEpoch, saidWindowClosed ? req2.toolName : void 0), journalGateResolved(callKey), (o.kind === "allow" || o.kind === "deny") && noteHumanApprovalCardDecision(callKey), resolve59(o));
     }, removeFromQueue = () => {
       try {
         setQueue((queue3) => queue3.filter((item) => item.toolUseID !== callKey));
@@ -484264,7 +485130,7 @@ function shellApprovalCardPort(req2) {
         } catch (e) {
           logForDebugging(`liveToolApprovalWire: could not surface the retraction row: ${String(e)}`);
         }
-        settle3({ kind: "aborted" });
+        settle3({ kind: RETRACTED_CARD_DECISION_KIND, reason: cause });
       }
     }, backstopWindowMs = 0, armBackstopOnce = () => {
       settled2 || askBackstopTimer !== void 0 || isParkRowCard(callKey) || (askBackstopTimer = setTimeout(() => {
@@ -484426,7 +485292,7 @@ function shellApprovalCardPort(req2) {
       onUserInteraction() {
       },
       onAbort() {
-        settle3({ kind: "aborted" });
+        noteHumanApprovalCardDecision(callKey), settle3({ kind: "aborted" });
       },
       onAllow(updatedInput, permissionUpdates) {
         settleMaybeLate(buildAllowDecision(updatedInput, permissionUpdates), "approve");
@@ -484466,7 +485332,7 @@ function shellApprovalCardPort(req2) {
         onUserInteraction() {
         },
         onAbort() {
-          settle3({ kind: "aborted" });
+          noteHumanApprovalCardDecision(callKey), settle3({ kind: "aborted" });
         },
         onAllow(updatedInput, permissionUpdates) {
           lateApproveConfirmedOnce = !0;
@@ -485066,6 +485932,10 @@ async function* consumeStreamApprovalFrames(events3, deps2, opts = {}) {
         logging(`stream-approval ask=${askId} card aborted \u2014 no decision sent`);
         return;
       }
+      if (decision.kind === RETRACTED_CARD_DECISION_KIND) {
+        logging(`stream-approval ask=${askId} card retracted \u2014 no decision sent`);
+        return;
+      }
       if (decision.kind === "failed") {
         logging(`stream-approval ask=${askId} card unavailable (${decision.reason}) \u2014 no decision sent`);
         return;
@@ -485562,6 +486432,8 @@ __export(agentsWire_exports, {
   ADAPTER_DIVERGENCES: () => ADAPTER_DIVERGENCES,
   AGENT_MEMORY_WORDS: () => AGENT_MEMORY_WORDS,
   AGENT_MESSAGE_TAG: () => AGENT_MESSAGE_TAG,
+  APPROVAL_NOTE_EDIT_REFUSED_DETAIL: () => APPROVAL_NOTE_EDIT_REFUSED_DETAIL,
+  APPROVAL_NOTE_RETRACTED_DETAIL: () => APPROVAL_NOTE_RETRACTED_DETAIL,
   ASK_ORIGIN_WORDS: () => ASK_ORIGIN_WORDS,
   ASK_PARK_GATE_KINDS: () => ASK_PARK_GATE_KINDS,
   ASK_PARK_ROW_POLL_MS: () => ASK_PARK_ROW_POLL_MS,
@@ -485703,6 +486575,7 @@ __export(agentsWire_exports, {
   MAX_AGENT_TOOLS: () => MAX_AGENT_TOOLS,
   MAX_AGENT_TOOL_NAME_CHARS: () => MAX_AGENT_TOOL_NAME_CHARS,
   MAX_GATE_HOPS: () => MAX_GATE_HOPS,
+  MAX_HELD_WIRE_TICK_BEATS: () => MAX_HELD_WIRE_TICK_BEATS,
   MAX_HOOK_NOTICE_TEXT_CHARS: () => MAX_HOOK_NOTICE_TEXT_CHARS,
   MAX_TASK_AGENTS: () => MAX_TASK_AGENTS,
   MAX_TOKENS_MAX: () => MAX_TOKENS_MAX,
@@ -485770,6 +486643,7 @@ __export(agentsWire_exports, {
   RESUME_USAGE_WINDOW_EXHAUSTED: () => RESUME_USAGE_WINDOW_EXHAUSTED,
   RETAIN_BACKGROUND_ENV: () => RETAIN_BACKGROUND_ENV,
   RETIRED_PERMISSION_RULE_ISSUE_CODES: () => RETIRED_PERMISSION_RULE_ISSUE_CODES,
+  RETRACTED_CARD_DECISION_KIND: () => RETRACTED_CARD_DECISION_KIND,
   REVIEW_PARK_GATE_KINDS: () => REVIEW_PARK_GATE_KINDS,
   REWIND_ERROR_CODE_PREFIXES: () => REWIND_ERROR_CODE_PREFIXES,
   RULE_NOT_SENT_REJECTED_WARN_TEXT: () => RULE_NOT_SENT_REJECTED_WARN_TEXT,
@@ -485781,6 +486655,7 @@ __export(agentsWire_exports, {
   RULE_STORE_UNREADABLE_KINDS: () => RULE_STORE_UNREADABLE_KINDS,
   RUNNING_STATES: () => RUNNING_STATES,
   RUN_BLOCKED_MESSAGE_PREFIX: () => RUN_BLOCKED_MESSAGE_PREFIX,
+  RUN_CANCELLED_CODE: () => RUN_CANCELLED_CODE,
   RUN_LEVEL_STOP_ERROR_CODES: () => RUN_LEVEL_STOP_ERROR_CODES,
   RUN_STOPPED_MESSAGE_PREFIX: () => RUN_STOPPED_MESSAGE_PREFIX,
   RUN_TERMINAL_NOT_SUCCESS_STATUSES: () => RUN_TERMINAL_NOT_SUCCESS_STATUSES,
@@ -485872,7 +486747,9 @@ __export(agentsWire_exports, {
   __feedWorkflowActivityFrameForTests: () => __feedWorkflowActivityFrameForTests,
   __resetApprovalsStreamLiveReadingsForTests: () => __resetApprovalsStreamLiveReadingsForTests,
   __resetBgOwnerAbsenceForTests: () => __resetBgOwnerAbsenceForTests,
+  __resetDeviceExecutorManagementReadingsForTests: () => __resetDeviceExecutorManagementReadingsForTests,
   __resetEngineAgentPanelAbsenceForTests: () => __resetEngineAgentPanelAbsenceForTests,
+  __resetEngineAgentPanelIdentityForTests: () => __resetEngineAgentPanelIdentityForTests,
   __resetEngineCapsCacheForTests: () => __resetEngineCapsCacheForTests,
   __resetEngineCompactArmForTests: () => __resetEngineCompactArmForTests,
   __resetEngineDelegatedPromptForTests: () => __resetEngineDelegatedPromptForTests,
@@ -485931,6 +486808,7 @@ __export(agentsWire_exports, {
   approvalCardPortFor: () => approvalCardPortFor,
   approvalCardPortMisses: () => approvalCardPortMisses,
   approvalCardPortMissesFor: () => approvalCardPortMissesFor,
+  approvalOutcomeNoteOf: () => approvalOutcomeNoteOf,
   approvalsStreamLiveDoctorDetail: () => approvalsStreamLiveDoctorDetail,
   armDetachCancel: () => armDetachCancel,
   armPlanReviewApproval: () => armPlanReviewApproval,
@@ -485980,6 +486858,7 @@ __export(agentsWire_exports, {
   classifyMemoryStatusFailure: () => classifyMemoryStatusFailure,
   classifyPeerNotification: () => classifyPeerNotification,
   classifyRulesFailure: () => classifyRulesFailure,
+  classifyRunAbortCause: () => classifyRunAbortCause,
   classifySelfOrchestrationRefusal: () => classifySelfOrchestrationRefusal,
   classifySkippedReason: () => classifySkippedReason,
   classifySubagentResumeFailure: () => classifySubagentResumeFailure,
@@ -485990,6 +486869,7 @@ __export(agentsWire_exports, {
   clearArmedGate: () => clearArmedGate,
   clearBgTerminalFacts: () => clearBgTerminalFacts,
   clearEnginePanelTaskResident: () => clearEnginePanelTaskResident,
+  clearEnginePanelTaskResidentByWire: () => clearEnginePanelTaskResidentByWire,
   clearRunningChoiceOffer: () => clearRunningChoiceOffer,
   clearSubagentContent: () => clearSubagentContent,
   clientContextField: () => clientContextField,
@@ -486024,6 +486904,7 @@ __export(agentsWire_exports, {
   createWireToCcAdapter: () => createWireToCcAdapter,
   decideAcceptedNotResolved: () => decideAcceptedNotResolved,
   decidePlanReview: () => decidePlanReview,
+  decideReceiptReopen: () => decideReceiptReopen,
   decideRefusalFromError: () => decideRefusalFromError,
   decisionNoteAuditLine: () => decisionNoteAuditLine,
   defaultMaxTokensFor: () => defaultMaxTokensFor,
@@ -486040,6 +486921,8 @@ __export(agentsWire_exports, {
   detachedTaskId: () => detachedTaskId,
   detectEngineBgShellReceipt: () => detectEngineBgShellReceipt,
   deviceAuthProviderFor: () => deviceAuthProviderFor,
+  deviceExecutorManagementDoctorDetail: () => deviceExecutorManagementDoctorDetail,
+  deviceManagementVerbsAvailable: () => deviceManagementVerbsAvailable,
   diagnoseSseIdleTear: () => diagnoseSseIdleTear,
   discussionWorkflowName: () => discussionWorkflowName,
   doneToSdkResult: () => doneToSdkResult,
@@ -486109,6 +486992,7 @@ __export(agentsWire_exports, {
   fmtCtxOut: () => fmtCtxOut,
   fmtTokens: () => fmtTokens,
   forgetApprovalsStreamLiveReading: () => forgetApprovalsStreamLiveReading,
+  forgetDeviceExecutorManagementReading: () => forgetDeviceExecutorManagementReading,
   forgetExecutionLaneReading: () => forgetExecutionLaneReading,
   forgetSqlEngineReading: () => forgetSqlEngineReading,
   forgetWebSearchBackendReading: () => forgetWebSearchBackendReading,
@@ -486221,6 +487105,7 @@ __export(agentsWire_exports, {
   isLoopbackWireUrl: () => isLoopbackWireUrl,
   isModelOutputErrorRowText: () => isModelOutputErrorRowText,
   isModelOutputErrorText: () => isModelOutputErrorText,
+  isNewEngineAgentPanelCycle: () => isNewEngineAgentPanelCycle,
   isOutcomeUnknownRowText: () => isOutcomeUnknownRowText,
   isOwnEngineRun: () => isOwnEngineRun,
   isOwnWorkflowRun: () => isOwnWorkflowRun,
@@ -486236,6 +487121,7 @@ __export(agentsWire_exports, {
   isSeatModelCatalog: () => isSeatModelCatalog,
   isSendMessageAck: () => isSendMessageAck,
   isSseIdleError: () => isSseIdleError,
+  isStaleEngineAgentPanelEnd: () => isStaleEngineAgentPanelEnd,
   isSubFlowSegmentEnd: () => isSubFlowSegmentEnd,
   isSupportedCatalogSchemaVersion: () => isSupportedCatalogSchemaVersion,
   isTaskNotificationObjective: () => isTaskNotificationObjective,
@@ -486253,6 +487139,7 @@ __export(agentsWire_exports, {
   isWorkflowCompletionCardEnqueued: () => isWorkflowCompletionCardEnqueued,
   isWorkflowParkRefusalCode: () => isWorkflowParkRefusalCode,
   kickEngineCapsProbe: () => kickEngineCapsProbe,
+  lastFlagValue: () => lastFlagValue,
   leaderConflictDetail: () => leaderConflictDetail,
   limitsForPrint: () => limitsForPrint,
   listAllPersistedRules: () => listAllPersistedRules,
@@ -486296,6 +487183,7 @@ __export(agentsWire_exports, {
   normalizeWirePrincipal: () => normalizeWirePrincipal,
   noteBgOwnerAbsence: () => noteBgOwnerAbsence,
   noteEngineCapsForApprovalsStreamLive: () => noteEngineCapsForApprovalsStreamLive,
+  noteEngineCapsForDeviceExecutorManagement: () => noteEngineCapsForDeviceExecutorManagement,
   noteEngineCapsForExecutionLane: () => noteEngineCapsForExecutionLane,
   noteEngineCapsForSqlEngine: () => noteEngineCapsForSqlEngine,
   noteEngineCapsForWebSearchBackend: () => noteEngineCapsForWebSearchBackend,
@@ -486310,6 +487198,7 @@ __export(agentsWire_exports, {
   notificationQueuePortMisses: () => notificationQueuePortMisses,
   observeCancelByDeny: () => observeCancelByDeny,
   observedApprovalsStreamLive: () => observedApprovalsStreamLive,
+  observedDeviceExecutorManagement: () => observedDeviceExecutorManagement,
   observedExecutionLane: () => observedExecutionLane,
   observedSqlEngine: () => observedSqlEngine,
   observedWebSearchBackend: () => observedWebSearchBackend,
@@ -486377,6 +487266,7 @@ __export(agentsWire_exports, {
   projectBackgroundView: () => projectBackgroundView,
   projectCrashConverged: () => projectCrashConverged,
   projectDescription: () => projectDescription,
+  projectDeviceExecutorManagementCapability: () => projectDeviceExecutorManagementCapability,
   projectDiagnosticsFrame: () => projectDiagnosticsFrame,
   projectEffectiveBody: () => projectEffectiveBody,
   projectExecutionLaneCapability: () => projectExecutionLaneCapability,
@@ -486440,6 +487330,7 @@ __export(agentsWire_exports, {
   readRuleOfferSupply: () => readRuleOfferSupply,
   readRuleOffers: () => readRuleOffers,
   readRulePersistOutcome: () => readRulePersistOutcome,
+  readRunCancelContext: () => readRunCancelContext,
   readRunCostFacts: () => readRunCostFacts,
   readRunTerminal: () => readRunTerminal,
   readSessionMemoryStatus: () => readSessionMemoryStatus,
@@ -486483,6 +487374,7 @@ __export(agentsWire_exports, {
   resetWorkflowActivityLedgers: () => resetWorkflowActivityLedgers,
   resolveAutonomousLoopPrompt: () => resolveAutonomousLoopPrompt,
   resolveCatalogSources: () => resolveCatalogSources,
+  resolveEnginePanelTaskId: () => resolveEnginePanelTaskId,
   resolveEntryVision: () => resolveEntryVision,
   resolveHeadlessDetach: () => resolveHeadlessDetach,
   resolveHeadlessFinalVerify: () => resolveHeadlessFinalVerify,
@@ -486588,6 +487480,7 @@ __export(agentsWire_exports, {
   surfaceRuleArmRejected: () => surfaceRuleArmRejected,
   surfaceSuspendedAskAndRespond: () => surfaceSuspendedAskAndRespond,
   surfaceToolApprovalFrameAndRespond: () => surfaceToolApprovalFrameAndRespond,
+  suspendedReopenOf: () => suspendedReopenOf,
   suspendedSubagentAsks: () => suspendedSubagentAsks,
   tailEngineSubagent: () => tailEngineSubagent,
   taskAgentsField: () => taskAgentsField,
@@ -486829,6 +487722,13 @@ var init_approvalsStreamLiveCapability2 = __esm({
   }
 });
 
+// build-src/src/sema/deviceExecutorManagementCapability.ts
+var init_deviceExecutorManagementCapability2 = __esm({
+  "build-src/src/sema/deviceExecutorManagementCapability.ts"() {
+    init_dist();
+  }
+});
+
 // build-src/src/sema/engineCapsArm.ts
 function beginCapsTeeEpoch(baseUrl) {
   let next = (capsTeeEpochByBase.get(baseUrl) ?? 0) + 1;
@@ -486856,7 +487756,7 @@ function armEngineCapsProbes(input) {
       });
     } : capsProbe;
     if (afterEngineRespawn) {
-      resetCapsDiscoveryState(baseUrl), invalidateSelfKnowledgeCap(baseUrl), forgetSqlEngineReading(baseUrl), forgetWriteProtectionReading(baseUrl), forgetWebSearchBackendReading(baseUrl), forgetExecutionLaneReading(baseUrl), forgetApprovalsStreamLiveReading(baseUrl), forgetWiringManifestReading(), forgetClassifierRoundObservation(), forgetEffectiveTurnFacts(), kickAppendSystemPromptCapProbe(baseUrl, appendCapProbe), invalidateEngineCaps(baseUrl, guardedCapsProbe);
+      resetCapsDiscoveryState(baseUrl), invalidateSelfKnowledgeCap(baseUrl), forgetSqlEngineReading(baseUrl), forgetWriteProtectionReading(baseUrl), forgetWebSearchBackendReading(baseUrl), forgetExecutionLaneReading(baseUrl), forgetApprovalsStreamLiveReading(baseUrl), forgetDeviceExecutorManagementReading(baseUrl), forgetWiringManifestReading(), forgetClassifierRoundObservation(), forgetEffectiveTurnFacts(), kickAppendSystemPromptCapProbe(baseUrl, appendCapProbe), invalidateEngineCaps(baseUrl, guardedCapsProbe);
       return;
     }
     kickAppendSystemPromptCapProbe(baseUrl, appendCapProbe), kickEngineCapsProbe(baseUrl, guardedCapsProbe);
@@ -486873,6 +487773,7 @@ var capsTeeEpochByBase, init_engineCapsArm = __esm({
     init_webSearchBackendCapability2();
     init_executionLaneCapability2();
     init_approvalsStreamLiveCapability2();
+    init_deviceExecutorManagementCapability2();
     init_wiringManifestStore();
     init_classifierRoundObservation();
     init_effectiveTurnFactsStore();
@@ -487028,8 +487929,8 @@ function readDisclosureLedger(scope) {
   try {
     let { readFileSync: readFileSync69 } = __require("node:fs"), raw2 = JSON.parse(readFileSync69(path28, "utf8"));
     if (typeof raw2 != "object" || raw2 === null) return EMPTY_LEDGER;
-    let ids = raw2.ids;
-    return Array.isArray(ids) ? { ids: ids.filter((x3) => typeof x3 == "string" && x3.length > 0) } : EMPTY_LEDGER;
+    let ids2 = raw2.ids;
+    return Array.isArray(ids2) ? { ids: ids2.filter((x3) => typeof x3 == "string" && x3.length > 0) } : EMPTY_LEDGER;
   } catch {
     return EMPTY_LEDGER;
   }
@@ -487038,8 +487939,8 @@ function writeDisclosureLedger(scope, next) {
   let path28 = ledgerPath(scope);
   if (path28 !== null)
     try {
-      let { writeFileSync: writeFileSync34, renameSync: renameSync21 } = __require("node:fs"), merged = [...readDisclosureLedger(scope).ids, ...next.ids], ids = [...new Set(merged)].slice(-DISCLOSURE_LEDGER_MAX_IDS), tmp = `${path28}.${String(process.pid)}.tmp`;
-      writeFileSync34(tmp, JSON.stringify({ v: 1, ids }), { mode: 384 }), renameSync21(tmp, path28);
+      let { writeFileSync: writeFileSync34, renameSync: renameSync21 } = __require("node:fs"), merged = [...readDisclosureLedger(scope).ids, ...next.ids], ids2 = [...new Set(merged)].slice(-DISCLOSURE_LEDGER_MAX_IDS), tmp = `${path28}.${String(process.pid)}.tmp`;
+      writeFileSync34(tmp, JSON.stringify({ v: 1, ids: ids2 }), { mode: 384 }), renameSync21(tmp, path28);
     } catch {
     }
 }
@@ -487460,7 +488361,7 @@ function createLiveConversationClient(config4) {
     capsTee: (caps, generation2) => {
       noteEngineCapsForMcpGate(config4.baseUrl, caps), noteEngineCapsForSessionBackground(config4.baseUrl, caps), noteEngineCapsForProjectContext(config4.baseUrl, caps), readCrashConvergedOnce(client3, config4.baseUrl, { principal: config4.principal }), noteEngineCapsForWorkflowsGate(config4.baseUrl, caps, {
         ...typeof config4.principal == "string" ? { principal: config4.principal } : {}
-      }), noteEngineCapsForSqlEngine(config4.baseUrl, caps, { generation: generation2 }), noteEngineCapsForWriteProtection(config4.baseUrl, caps, { generation: generation2 }), noteEngineCapsForWebSearchBackend(config4.baseUrl, caps, { generation: generation2 }), noteEngineCapsForExecutionLane(config4.baseUrl, caps, { generation: generation2 }), noteEngineCapsForApprovalsStreamLive(config4.baseUrl, caps, { generation: generation2 });
+      }), noteEngineCapsForSqlEngine(config4.baseUrl, caps, { generation: generation2 }), noteEngineCapsForWriteProtection(config4.baseUrl, caps, { generation: generation2 }), noteEngineCapsForWebSearchBackend(config4.baseUrl, caps, { generation: generation2 }), noteEngineCapsForExecutionLane(config4.baseUrl, caps, { generation: generation2 }), noteEngineCapsForApprovalsStreamLive(config4.baseUrl, caps, { generation: generation2 }), noteEngineCapsForDeviceExecutorManagement(config4.baseUrl, caps, { generation: generation2 });
     },
     afterEngineRespawn: config4.afterEngineRespawn === !0
   }), prepareTaskAgentsWire({
@@ -487568,6 +488469,25 @@ function createLiveConversationClient(config4) {
           //    但显式 false 让「这条腿判过了」在 diff 与 census 上可见,不与「忘了传」同形)。
           windowIsCurrent
         };
+      },
+      // ── CC-68(client-core 0.74.1):流内帧腿的**结局回交** ───────────────────────────────
+      // 包每次 `tool_approval` 帧经卡口决断后恰调一次(撤卡也回交)。壳这一端**只转交**,一条
+      // 判定都不铸:「落没落定」由包答(`decision === 'unresolved'`),放不放认领 / 重不重出卡
+      // 由悬挂 ask 装配件的既有有界预算腿答。
+      // 🔴 为什么非它不可:帧腿在**出卡之前**就永久认领了这只 ask,而它那一发 respond 失败时壳
+      //    这一侧此前看不到 —— 只能靠「连续两张快照都看到已认领∧没决断∧台账无活卡」这条间接
+      //    判据把认领放回去(秒级两拍里审批入口是空的)。缺席 = 退回那条间接判据,零变化。
+      // 🔴 **映射归包**(client-core 0.74.5 CC-88,接入档 §73 S-5):`{approvalId, settled,
+      //    retracted?, detail?}` 这张便签此前三端各手拼一份(壳这一份是语义母本),0.74.5 起由
+      //    `approvalOutcomeNoteOf` 单源出。壳这一格因此只剩**转交**,一条判定、一句文案都不再自铸:
+      //    「落没落定」= `decision !== 'unresolved'`(不看 ack)、撤卡是**独立判别位**原样过境
+      //    (不折进 detail:撤卡 = 本端主动放手,与「引擎不收」在 `settled` 上同形却不同义,
+      //    端口那一侧要靠它决定「释放认领但不扣重出卡预算」)、detail 三支的优先序与两句固定文案
+      //    (`APPROVAL_NOTE_RETRACTED_DETAIL` / `APPROVAL_NOTE_EDIT_REFUSED_DETAIL`)都在包里。
+      //    切换前对拍 24 形逐键相等(六形骨架 = settled / retracted / editRefused /
+      //    respondRefusal 三位各缺其二 / 空 detail / 坏形),格在 suspendedSubagentAskWire.test.ts J8。
+      onToolApprovalOutcome: (frame, outcome) => {
+        noteStreamApprovalOutcome(approvalOutcomeNoteOf(frame, outcome));
       }
     };
   }, approvalStreamDeps = {
@@ -487831,6 +488751,7 @@ var ENGINE_TO_CC_TOOL, SUGGESTIONS_TAIL_MAX_ATTEMPTS, SUGGESTIONS_TAIL_RETRY_MS,
     init_engineToolDetach();
     init_dist();
     init_dist();
+    init_dist();
     init_engineSessionParam2();
     init_engineCompactWire2();
     init_liveSessionStore();
@@ -487864,6 +488785,7 @@ var ENGINE_TO_CC_TOOL, SUGGESTIONS_TAIL_MAX_ATTEMPTS, SUGGESTIONS_TAIL_RETRY_MS,
     init_webSearchBackendCapability2();
     init_executionLaneCapability2();
     init_approvalsStreamLiveCapability2();
+    init_deviceExecutorManagementCapability2();
     init_suspendedAskPort();
     init_liveApprovalCardHandles();
     init_debugLine();
@@ -490710,7 +491632,7 @@ function workflowParts(wf) {
     { text: wf.doneCount !== void 0 && wf.totalCount !== void 0 ? `${wf.doneCount}/${wf.totalCount} agents done${failedSeg}` : `${ABSENT_NUMBER_TEXT} agents done${failedSeg}` },
     { text: wf.elapsedMs !== void 0 ? fmtDur2(Math.max(0, wf.elapsedMs)) : ABSENT_NUMBER_TEXT }
   ];
-  wf.tokens !== void 0 && wf.tokens > 0 && segments.push({ text: `${ARROW_DOWN} ${fmtTokens3(wf.tokens)} tokens` });
+  wf.tokens !== void 0 && wf.tokens > 0 && segments.push({ text: `${ARROW_DOWN} ${fmtTokens3(wf.tokens)} tokens` }), typeof wf.errorCode == "string" && wf.errorCode !== "" && segments.push({ text: cleanUntrustedForDisplay(wf.errorCode, 48), warn: !0 });
   let bulletColor = isTerminal2(wf.status) ? statusColor(wf.status) : wf.failedCount !== void 0 && wf.failedCount > 0 ? "error" : void 0;
   return {
     name: wf.name,
@@ -491177,6 +492099,7 @@ var React127, import_react205, import_jsx_runtime364, F_POINTER2, F_CIRCLE, G_VI
     init_format2();
     init_AppState();
     init_appStateRef();
+    init_untrustedDisplayText();
     init_engineAgentView();
     init_subagentStatusLine();
     init_workflowSizeWarning2();
@@ -501214,7 +502137,17 @@ var RENDERED_UUID_PREFIX_LEN, init_rewindArm = __esm({
 
 // build-src/src/sema/fleetRowCycleProjection.ts
 function launchAnchorChanged2(existing, ev) {
-  return typeof ev.startedAt != "number" || !Number.isFinite(ev.startedAt) || existing.startTimeFromWire !== !0 || typeof existing.startTime != "number" || !Number.isFinite(existing.startTime) ? !1 : existing.startTime !== ev.startedAt;
+  return isNewEngineAgentPanelCycle(
+    {
+      ...existing.cycleSeq !== void 0 ? { cycleSeq: existing.cycleSeq } : {},
+      // 见上:只有 wire 给的真锚才是「上一代的 startedAt」,猜测基准一律不交。
+      ...existing.startTimeFromWire === !0 && existing.startTime !== void 0 ? { startedAt: existing.startTime } : {}
+    },
+    {
+      ...ev.cycleSeq !== void 0 ? { cycleSeq: ev.cycleSeq } : {},
+      ...ev.startedAt !== void 0 ? { startedAt: ev.startedAt } : {}
+    }
+  );
 }
 function progressAfterFleetRowFrame(existing, ev) {
   let num = (n2) => typeof n2 == "number" && Number.isFinite(n2), prior = launchAnchorChanged2(existing, ev) ? void 0 : existing.progress, toolUseCount = num(ev.toolUses) ? ev.toolUses : prior?.toolUseCount, tokenCount = num(ev.totalTokens) && (ev.totalTokens > 0 || num(ev.toolUses)) ? ev.totalTokens : prior?.tokenCount;
@@ -501223,6 +502156,7 @@ function progressAfterFleetRowFrame(existing, ev) {
 }
 var init_fleetRowCycleProjection = __esm({
   "build-src/src/sema/fleetRowCycleProjection.ts"() {
+    init_dist();
   }
 });
 
@@ -501307,21 +502241,31 @@ var import_compiler_runtime244, React132, import_jsx_runtime375, init_Coordinato
 function useCoordinatorTaskCount() {
   return fleetFooterTaskCount(useFleetFooterRows());
 }
+function noteFleetRowCycleIdentity(taskId, next) {
+  if (fleetRowCycleIdentities.delete(taskId), fleetRowCycleIdentities.set(taskId, next), !(fleetRowCycleIdentities.size <= FLEET_ROW_CYCLE_LEDGER_MAX))
+    for (let key of [...fleetRowCycleIdentities.keys()]) {
+      if (fleetRowCycleIdentities.size <= FLEET_ROW_CYCLE_LEDGER_MAX) break;
+      key === taskId || engineOwnedRowIds.has(key) || fleetRowCycleIdentities.delete(key);
+    }
+}
 function useEngineAgentPanelBridge(setAppState) {
   let ownedRows = engineOwnedRowIds, reapAbsentRows = React133.useCallback(() => {
     let reaped = [];
     setAppState((prev) => {
-      let ids = reapExpiredEngineAgentAbsences(prev.tasks ?? {}, ownedRows);
-      if (ids.length === 0) return prev;
+      let ids2 = reapExpiredEngineAgentAbsences(prev.tasks ?? {}, ownedRows);
+      if (ids2.length === 0) return prev;
       let nextTasks = { ...prev.tasks };
-      for (let id of ids) {
+      for (let id of ids2) {
         let row2 = nextTasks[id];
         reaped.push({ id, label: row2?.description ?? id }), delete nextTasks[id];
       }
       return { ...prev, tasks: nextTasks };
     });
     for (let r of reaped) {
-      noteEngineAgentRowReclaimed(r.id, r.label), ownedRows.delete(r.id), fleetOwnedRowIds.delete(r.id), tickLaneRowIds.delete(r.id), queueTranscriptSystemNotice(engineAgentAbsenceDroppedLine(r.label), "info");
+      noteEngineAgentRowReclaimed(r.id, r.label), ownedRows.delete(r.id), fleetOwnedRowIds.delete(r.id), fleetRowCycleIdentities.delete(r.id), tickLaneRowIds.delete(r.id), queueTranscriptSystemNotice(
+        engineAgentAbsenceDroppedLine(r.label, 18e5, takeEngineAgentRowRemoveReason(r.id)),
+        "info"
+      );
       let pending4 = absenceReapTimers.get(r.id);
       pending4 !== void 0 && (clearTimeout(pending4), absenceReapTimers.delete(r.id));
     }
@@ -501417,7 +502361,19 @@ function useEngineAgentPanelBridge(setAppState) {
           return { ...prev, tasks: { ...prev.tasks, [ev.taskId]: row2 } };
         }), seedEngineAgentTranscript(setAppState, ev.taskId);
       else if (ev.kind === "fleet-row") {
-        if (tickLaneRowIds.has(ev.taskId)) {
+        let priorCycle = fleetRowCycleIdentities.get(ev.taskId);
+        (ev.cycleSeq !== void 0 || ev.startedAt !== void 0) && noteFleetRowCycleIdentity(ev.taskId, {
+          ...ev.cycleSeq !== void 0 ? { cycleSeq: ev.cycleSeq } : {},
+          ...ev.startedAt !== void 0 ? { startedAt: ev.startedAt } : {}
+        });
+        let withPriorCycle = (existing) => priorCycle?.cycleSeq === void 0 ? existing : { ...existing, cycleSeq: priorCycle.cycleSeq };
+        if (launchAnchorChanged2(
+          {
+            ...priorCycle?.startedAt !== void 0 ? { startTime: priorCycle.startedAt, startTimeFromWire: !0 } : {},
+            ...priorCycle?.cycleSeq !== void 0 ? { cycleSeq: priorCycle.cycleSeq } : {}
+          },
+          ev
+        ) && tickLaneRowIds.delete(ev.taskId), tickLaneRowIds.has(ev.taskId)) {
           updateTaskState(ev.taskId, setAppState, clearEngineAgentRowAbsence);
           return;
         }
@@ -501427,13 +502383,13 @@ function useEngineAgentPanelBridge(setAppState) {
           let existing = prev.tasks[ev.taskId];
           if (existing) {
             if (!isLocalAgentTask2(existing)) return prev;
-            let revived = launchAnchorChanged2(existing, ev);
-            if (!revived && (existing.status !== "running" || !fleetOwnedRowIds.has(ev.taskId)))
+            let revived = launchAnchorChanged2(withPriorCycle(existing), ev);
+            if (revived && fleetOwnedRowIds.add(ev.taskId), !revived && (existing.status !== "running" || !fleetOwnedRowIds.has(ev.taskId)))
               return prev;
             let absenceCleared = isAbsentRow(existing), tokensChanged = ev.totalTokens !== void 0 && existing.progress?.tokenCount !== ev.totalTokens, toolUsesChanged = ev.toolUses !== void 0 && existing.progress?.toolUseCount !== ev.toolUses, startChanged = ev.startedAt !== void 0 && existing.startTime !== ev.startedAt;
             if (!tokensChanged && !toolUsesChanged && !startChanged && !absenceCleared && !revived)
               return prev;
-            let mergedProgress = progressAfterFleetRowFrame(existing, ev), next = {
+            let mergedProgress = progressAfterFleetRowFrame(withPriorCycle(existing), ev), next = {
               ...existing,
               // 回来了 ⇒ 清缺席位 + 撤停表(endTime 是 absent 臂为了停表落的猜测值,不是终局钟;
               // 行还在跑,留着它 elapsed 就永远冻在缺席那一刻)。
@@ -501447,11 +502403,25 @@ function useEngineAgentPanelBridge(setAppState) {
               //       删掉 fleetOwnedRowIds,活着的任务显示完成还可能被回收。那比「数字是旧的」严重一个量级。
               //    ② [medium] 清 `result` 拦不住上一周期**在飞**的终报回填(`engineAgentView` 的异步回写
               //       只核行类型与「有没有 report」,不核周期)—— 清了也会被旧响应重新写回来。
-              //    ⇒ 两条的根治都要上游给终态事件一个**周期身份**(已记进车 P 回执的上游缺口段)。
-              //       在那之前,壳这一层只做证得出来的那一件:把**说了假话的那两个数**拿掉。
-              //    ⚠️ 留下的残留(如实记,已进 KNOWN-LIMITS):复活后的行在 grace 窗内仍显示上一轮的终态词,
-              //       数字已清;`evictAfter` 到期回收之后,下一帧走新行分支建一条干净的行 —— 窗有界(30 s)。
-              ...revived ? { progress: void 0, _semaAbsence: void 0 } : {},
+              //    ⇒ 两条的根治都要上游给终态事件一个**周期身份**。
+              //
+              // ── 🔴 1.0.123:那个根治到货了(client-core 0.74.0 CC-66)───────────────────────
+              //    `fleet-row` 与 `end` 都带 `cycleSeq` / `startedAt`,单源判据 `isStaleEngineAgentPanelEnd`
+              //    在 end 臂把「上一周期迟到的那只」挡掉(见下方 end 分支)⇒ ① 的理由不成立了。
+              //    ⇒ 复活**把状态整只翻回 running**:清终态词 / 撤停表(endTime)/ 撤回收期限(evictAfter)/
+              //      撤上一轮的终报(result),数字照旧整段清。只清数字不翻状态的那一版会让复活后的行在
+              //      grace 窗里挂着上一轮的终态词(旧 KNOWN-LIMITS 条目,本版随之删除)。
+              //    🔴 ② 那条残余(上一周期**在飞**的终报异步回填)不在本件射程内:它走的是
+              //      `engineAgentView` 的异步回写、不经这条 `end` 臂 —— 记在回执的上游缺口段,不在这里
+              //      靠猜去挡(挡错了会把**本轮**的真终报丢掉)。
+              ...revived ? {
+                progress: void 0,
+                _semaAbsence: void 0,
+                status: "running",
+                endTime: void 0,
+                evictAfter: void 0,
+                result: void 0
+              } : {},
               ...startChanged ? { startTime: ev.startedAt, startTimeFromWire: !0 } : {},
               // 🔴 三态 + 换周期(server 1.278.0 / L-401):
               //   · 同周期、有键 ⇒ 赋真值(**累计口径**,绝不 `+=`;真 0 也照写 0);
@@ -501513,6 +502483,16 @@ function useEngineAgentPanelBridge(setAppState) {
           );
         }
       } else if (ev.kind === "end") {
+        let endCycle = {
+          ...ev.cycleSeq !== void 0 ? { cycleSeq: ev.cycleSeq } : {},
+          ...ev.startedAt !== void 0 ? { startedAt: ev.startedAt } : {}
+        };
+        if (isStaleEngineAgentPanelEnd(endCycle, fleetRowCycleIdentities.get(ev.taskId))) {
+          logForDebugging(
+            `[sema][enginePanel] ignoring a stale end for ${ev.taskId} \u2014 it belongs to an earlier cycle than the row's current one (not settling, not writing the report, not dropping ownership)`
+          );
+          return;
+        }
         let droppedLabel = takeEngineAgentReclaimedRow(ev.taskId);
         if (droppedLabel !== null && queueTranscriptSystemNotice(
           engineAgentTerminalAfterDropLine(
@@ -501614,7 +502594,7 @@ function useEngineBgShellPanelBridge(setAppState) {
     [setAppState]
   );
 }
-var React133, import_jsx_runtime376, fleetOwnedRowIds, tickLaneRowIds, absenceReapTimers, RETAINED_ABSENCE_RECHECK_MS, init_chrome_agentprogress = __esm({
+var React133, import_jsx_runtime376, fleetOwnedRowIds, tickLaneRowIds, absenceReapTimers, fleetRowCycleIdentities, FLEET_ROW_CYCLE_LEDGER_MAX, RETAINED_ABSENCE_RECHECK_MS, init_chrome_agentprogress = __esm({
   "build-src/src/sema/overrides/chrome-agentprogress.tsx"() {
     React133 = __toESM(require_react(), 1);
     init_figures();
@@ -501645,7 +502625,8 @@ var React133, import_jsx_runtime376, fleetOwnedRowIds, tickLaneRowIds, absenceRe
     init_engineSubagentTail2();
     init_CoordinatorAgentStatus();
     import_jsx_runtime376 = __toESM(require_jsx_runtime(), 1);
-    fleetOwnedRowIds = /* @__PURE__ */ new Set(), tickLaneRowIds = /* @__PURE__ */ new Set(), absenceReapTimers = /* @__PURE__ */ new Map(), RETAINED_ABSENCE_RECHECK_MS = 6e4;
+    fleetOwnedRowIds = /* @__PURE__ */ new Set(), tickLaneRowIds = /* @__PURE__ */ new Set(), absenceReapTimers = /* @__PURE__ */ new Map(), fleetRowCycleIdentities = /* @__PURE__ */ new Map(), FLEET_ROW_CYCLE_LEDGER_MAX = 512;
+    RETAINED_ABSENCE_RECHECK_MS = 6e4;
   }
 });
 
@@ -502462,7 +503443,7 @@ function readRestartInflightLine() {
     workflows,
     leaderStreaming,
     otherSessionsSharing: sharing
-  }), ids = (bgReading?.tasks ?? []).filter((t2) => t2.retiredByNotification !== !0).map((t2) => t2.id).sort(), key = JSON.stringify([ids, workflows, leaderStreaming, sharing.total, sharing.midTurn, unknown2]);
+  }), ids2 = (bgReading?.tasks ?? []).filter((t2) => t2.retiredByNotification !== !0).map((t2) => t2.id).sort(), key = JSON.stringify([ids2, workflows, leaderStreaming, sharing.total, sharing.midTurn, unknown2]);
   if (unknown2.length === 0) return { line, key };
   let caveat = `\u26A0 could not read ${unknown2.join(" / ")} \u2014 this list may be incomplete`;
   return { line: line === null ? caveat : `${line}
@@ -538591,6 +539572,168 @@ var DEFAULT_DEBUG_LINES_READ, TAIL_READ_BYTES, init_debug3 = __esm({
   }
 });
 
+// build-src/src/sema/interactiveSettingsStamp.ts
+var interactiveSettingsStamp_exports = {};
+__export(interactiveSettingsStamp_exports, {
+  STAMP_FALLBACK_TRACE: () => STAMP_FALLBACK_TRACE,
+  STAMP_HOLD_ON_UNHEALTHY_READ_TRACE: () => STAMP_HOLD_ON_UNHEALTHY_READ_TRACE,
+  STAMP_STALE_RECOVERED_TRACE: () => STAMP_STALE_RECOVERED_TRACE,
+  _resetSettingsStampStaleForTest: () => _resetSettingsStampStaleForTest,
+  assembleInteractiveWireStamp: () => assembleInteractiveWireStamp,
+  describeSettingsStampStale: () => describeSettingsStampStale,
+  readSettingsStampStale: () => readSettingsStampStale
+});
+function describeStampStaleEntered(reason, lastReadAt) {
+  return `settings could not be re-read (${reason}); this turn continues with the settings last read at ${hhmm(lastReadAt)}; rules added since then are not in effect \u2014 run /doctor`;
+}
+function hhmm(at) {
+  let d4 = new Date(at);
+  return `${String(d4.getHours()).padStart(2, "0")}:${String(d4.getMinutes()).padStart(2, "0")}`;
+}
+function readSettingsStampStale() {
+  return { ...staleState };
+}
+function describeSettingsStampStale(s) {
+  return s.stale && s.since !== void 0 ? ` \xB7 stale since ${hhmm(s.since)}` : "";
+}
+function _resetSettingsStampStaleForTest() {
+  staleState = { stale: !1 };
+}
+function readSessionRulesFromAppState() {
+  try {
+    let ctx = getAppStateStoreRef()?.getState?.()?.toolPermissionContext;
+    return {
+      deny: ctx?.alwaysDenyRules.session ?? [],
+      ask: ctx?.alwaysAskRules.session ?? []
+    };
+  } catch (e) {
+    return logForDebugging(
+      `[sema][settings-stamp] session-rule read failed \u2014 this turn carries the on-disk rules only: ${e instanceof Error ? e.message : String(e)}`
+    ), { deny: [], ask: [] };
+  }
+}
+function mergeSessionRules(full, session2) {
+  if (session2.deny.length === 0 && session2.ask.length === 0) return full;
+  let perms = { ...full.permissions ?? {} }, deny2 = [.../* @__PURE__ */ new Set([...perms.deny ?? [], ...session2.deny])], ask2 = [.../* @__PURE__ */ new Set([...perms.ask ?? [], ...session2.ask])];
+  return deny2.length > 0 && (perms.deny = deny2), ask2.length > 0 && (perms.ask = ask2), { ...full, permissions: perms };
+}
+function settingsReadHealth() {
+  try {
+    let errs = getSettingsWithErrors().errors;
+    return { sig: JSON.stringify(errs.map((e) => `${e.file}|${e.path}`).sort()), hasProblem: errs.length > 0 };
+  } catch (e) {
+    return logForDebugging(
+      `[sema][settings-stamp] settings health read failed: ${e instanceof Error ? e.message : String(e)}`
+    ), { sig: "<unreadable>", hasProblem: !0 };
+  }
+}
+function ruleNamesOf(full) {
+  let perms = full.permissions ?? {};
+  return [
+    .../* @__PURE__ */ new Set([
+      ...(perms.deny ?? []).map((r) => `deny:${r}`),
+      ...(perms.ask ?? []).map((r) => `ask:${r}`)
+    ])
+  ].sort();
+}
+function rulesLost(next, prev) {
+  let has2 = new Set(next);
+  return prev.filter((r) => !has2.has(r));
+}
+function withRulesReadded(full, lostKeys) {
+  if (lostKeys.length === 0) return full;
+  let perms = { ...full.permissions ?? {} }, deny2 = [
+    .../* @__PURE__ */ new Set([
+      ...perms.deny ?? [],
+      ...lostKeys.filter((k2) => k2.startsWith("deny:")).map((k2) => k2.slice(5))
+    ])
+  ], ask2 = [
+    .../* @__PURE__ */ new Set([
+      ...perms.ask ?? [],
+      ...lostKeys.filter((k2) => k2.startsWith("ask:")).map((k2) => k2.slice(4))
+    ])
+  ];
+  return deny2.length > 0 && (perms.deny = deny2), ask2.length > 0 && (perms.ask = ask2), { ...full, permissions: perms };
+}
+function assembleInteractiveWireStamp(opts) {
+  let { stampMode, seamOpts } = opts, resolve59 = opts.resolve ?? (() => resolveSemaConfigWithEffective(seamOpts)), readSessionRules = opts.readSessionRules ?? readSessionRulesFromAppState, surfaceNotice = opts.surfaceNotice ?? ((text2) => surfaceTranscriptSystemNotice(text2, "warning")), announced = /* @__PURE__ */ new Set();
+  function freshUnenforceableNotices(full) {
+    try {
+      let fresh = describeUnenforceableRules(unenforceableSettingsRules(full)).filter((l3) => !announced.has(l3));
+      for (let line of fresh) announced.add(line);
+      return fresh;
+    } catch (e) {
+      return logForDebugging(
+        `[sema][settings-stamp] unenforceable-rule notice failed: ${e instanceof Error ? e.message : String(e)}`
+      ), [];
+    }
+  }
+  let lastGoodFull, lastGoodStamp, lastGoodRules = [], lastGoodSources = [], lastGoodErrSig, lastGoodAt = Date.now(), lastGoodSet = !1, pendingHoldObservation, fallbackAnnounced = !1, holdAnnounced = !1;
+  staleState = { stale: !1 };
+  let staleActive = !1;
+  function recompute() {
+    let { effective, config: config4, sources } = resolve59(), health = settingsReadHealth(), errSig = health.sig, nextFull = mergeSessionRules(toWireSettings(effective, config4), readSessionRules()), cliToolFlags = readCliToolFlagsWire(), nextRules = ruleNamesOf(nextFull), nextSources = [...sources].map(String).sort(), lost = lastGoodSet ? rulesLost(nextRules, lastGoodRules) : [], sourcesLost = lastGoodSet ? lastGoodSources.filter((s) => !nextSources.includes(s)) : [], incomplete = health.hasProblem || sourcesLost.length > 0, observation2 = `${errSig}|${nextSources.join(",")}|${nextRules.join(",")}`;
+    if (lastGoodSet && lost.length > 0 && incomplete && observation2 !== pendingHoldObservation) {
+      pendingHoldObservation = observation2, logForDebugging(
+        `[sema][settings-stamp] incomplete settings read lost ${String(lost.length)} rule(s) \u2014 keeping the previous snapshot for one turn (lost: ${lost.join(",")}; sourcesLost: ${sourcesLost.join(",") || "none"}; readProblem=${String(health.hasProblem)})`
+      ), holdAnnounced || (holdAnnounced = !0, say(STAMP_HOLD_ON_UNHEALTHY_READ_TRACE));
+      let heldFull = withRulesReadded(nextFull, lost), heldStamp = buildWireSettingsStamp(stampMode, heldFull, { cliToolFlags });
+      return setWireStampProvenance({ full: heldFull, sendMode: stampMode, cliToolFlags }), { full: heldFull, stamp: heldStamp };
+    }
+    pendingHoldObservation = void 0;
+    let stamp2 = buildWireSettingsStamp(stampMode, nextFull, { cliToolFlags });
+    return setWireStampProvenance({ full: nextFull, sendMode: stampMode, cliToolFlags }), lastGoodFull = nextFull, lastGoodStamp = stamp2, lastGoodRules = nextRules, lastGoodSources = nextSources, lastGoodErrSig = errSig, lastGoodAt = Date.now(), lastGoodSet = !0, { full: nextFull, stamp: stamp2 };
+  }
+  let say = (text2) => {
+    surfaceNotice(`[sema] ${text2}`) || process.stderr.write(`[sema] ${text2}
+`);
+  }, supplier = () => {
+    try {
+      let { full, stamp: stamp2 } = recompute();
+      staleActive && (staleActive = !1, staleState = { stale: !1 }, say(STAMP_STALE_RECOVERED_TRACE)), noteStampSentForRun(ruleNamesOf(full));
+      for (let line of freshUnenforceableNotices(full)) say(line);
+      return stamp2;
+    } catch (e) {
+      let detail = e instanceof Error ? `${e.name}: ${e.message}` : String(e);
+      return lastGoodSet ? (logForDebugging(
+        `[sema][settings-stamp] per-turn recompute threw \u2014 reusing the last good snapshot (rules still sent): ${detail}`
+      ), staleActive || (staleActive = !0, staleState = { stale: !0, since: lastGoodAt, reason: detail }, say(describeStampStaleEntered(detail, lastGoodAt))), fallbackAnnounced || (fallbackAnnounced = !0, say(STAMP_FALLBACK_TRACE)), noteStampSentForRun(ruleNamesOf(lastGoodFull ?? {})), setWireStampProvenance({
+        full: lastGoodFull ?? {},
+        sendMode: stampMode,
+        cliToolFlags: readCliToolFlagsWire()
+      }), lastGoodStamp) : failOpen(
+        "P-DEBT-cli.settings.stamp-recompute-never-resolved",
+        void 0,
+        detail
+      );
+    }
+  }, bootWire = {}, bootStamp;
+  try {
+    let first = recompute();
+    bootWire = first.full, bootStamp = first.stamp, freshUnenforceableNotices(first.full);
+  } catch (e) {
+    logForDebugging(
+      `[sema][settings-stamp] boot recompute threw \u2014 the per-turn hook is still installed and will retry: ${e instanceof Error ? e.message : String(e)}`
+    );
+  }
+  return { supplier, bootWire, bootStamp };
+}
+var STAMP_FALLBACK_TRACE, STAMP_HOLD_ON_UNHEALTHY_READ_TRACE, STAMP_STALE_RECOVERED_TRACE, staleState, init_interactiveSettingsStamp = __esm({
+  "build-src/src/sema/interactiveSettingsStamp.ts"() {
+    init_debug();
+    init_appStateRef();
+    init_failOpen();
+    init_settingsRulesWire();
+    init_settings5();
+    init_settings2();
+    init_transcriptSystemNotice();
+    init_midTurnRuleNotice();
+    STAMP_FALLBACK_TRACE = "settings-stamp: could not re-read settings this turn \u2014 keeping the previous snapshot (your permission rules are still being sent)", STAMP_HOLD_ON_UNHEALTHY_READ_TRACE = "settings-stamp: this settings read lost permission rules while it was incomplete (a settings file was unreadable, empty, or mid-save) \u2014 keeping those rules in place for one more turn, on top of everything this read did produce";
+    STAMP_STALE_RECOVERED_TRACE = "settings re-read \u2014 your permission rules are current again";
+    staleState = { stale: !1 };
+  }
+});
+
 // build-src/src/commands/doctor/permissionsPostureRow.ts
 function formatApprovalWindow(ms) {
   return !Number.isFinite(ms) || ms < 0 ? "not observed" : ms % 36e5 === 0 ? `${String(ms / 36e5)}h` : ms % 6e4 === 0 ? `${String(ms / 6e4)}m` : ms % 1e3 === 0 ? `${String(ms / 1e3)}s` : `${String(ms)}ms`;
@@ -538605,7 +539748,7 @@ function modeSegment(r) {
 function permissionsPostureDetail(r) {
   let parts = [];
   return parts.push(modeSegment(r)), parts.push(
-    r.wireRules === null ? `permission rules ${NOT_OBSERVED}` : describeWireRules(r.wireRules)
+    (r.wireRules === null ? `permission rules ${NOT_OBSERVED}` : describeWireRules(r.wireRules)) + describeSettingsStampStale(r.wireStampStale)
   ), r.selfSpawnLane === !1 ? parts.push(`approval window ${NOT_OBSERVED} (external engine \u2014 this end does not set its env)`) : r.approvalWindowMs === null ? parts.push(`approval window ${NOT_OBSERVED}`) : parts.push(
     `approval window ${formatApprovalWindow(r.approvalWindowMs)}${r.approvalWindowSource === "env" ? " (env STREAM_ASK_WINDOW_MS, passed through to engines this shell starts)" : ""}`
   ), parts.push(
@@ -538619,6 +539762,7 @@ function permissionsPostureDetail(r) {
 var NOT_OBSERVED, init_permissionsPostureRow = __esm({
   "build-src/src/commands/doctor/permissionsPostureRow.ts"() {
     init_settingsRulesWire();
+    init_interactiveSettingsStamp();
     NOT_OBSERVED = "not observed";
   }
 });
@@ -538973,9 +540117,16 @@ async function readLivePermissionsPosture(engineTarget) {
   } catch {
     classifier = null;
   }
+  let wireStampStale = { stale: !1 };
+  try {
+    let { readSettingsStampStale: readSettingsStampStale2 } = await Promise.resolve().then(() => (init_interactiveSettingsStamp(), interactiveSettingsStamp_exports));
+    wireStampStale = readSettingsStampStale2();
+  } catch {
+    wireStampStale = { stale: !1 };
+  }
   let wireRules = null;
   try {
-    let { wireRuleSurface: wireRuleSurface2, resolveSendSettingsMode: resolveSendSettingsMode2, readWireStampProvenance: readWireStampProvenance2 } = await Promise.resolve().then(() => (init_settingsRulesWire(), settingsRulesWire_exports)), frozen = readWireStampProvenance2();
+    let { wireRuleSurface: wireRuleSurface2, resolveSendSettingsMode: resolveSendSettingsMode3, readWireStampProvenance: readWireStampProvenance2 } = await Promise.resolve().then(() => (init_settingsRulesWire(), settingsRulesWire_exports)), frozen = readWireStampProvenance2();
     if (frozen !== void 0)
       wireRules = wireRuleSurface2(frozen.full, {
         sendMode: frozen.sendMode,
@@ -538989,7 +540140,7 @@ async function readLivePermissionsPosture(engineTarget) {
         {
           // 🔴 总开关也是这一段的输入:`SEMA_SEND_SETTINGS=off` 时规则整份不发,读面若不看它
           //    就会报一个不存在的安全姿态。env 视图与播种同律取。
-          sendMode: resolveSendSettingsMode2(envView.SEMA_SEND_SETTINGS)
+          sendMode: resolveSendSettingsMode3(envView.SEMA_SEND_SETTINGS)
         }
       );
     }
@@ -539040,6 +540191,7 @@ async function readLivePermissionsPosture(engineTarget) {
     readDenyTiers,
     selfSpawnLane,
     wireRules,
+    wireStampStale,
     writeProtection,
     readFace,
     readFaceDisagreement: readFaceDisagreement2,
@@ -550687,7 +551839,7 @@ async function ensurePrintModeEngine() {
 async function printLaneWireSettings(knobs) {
   if (knobs.mockScenario) return;
   let { resolveSemaConfigWithEffective: resolveSemaConfigWithEffective2 } = await Promise.resolve().then(() => (init_settings5(), settings_exports4)), {
-    resolveSendSettingsMode: resolveSendSettingsMode2,
+    resolveSendSettingsMode: resolveSendSettingsMode3,
     buildWireSettingsStamp: buildWireSettingsStamp2,
     toWireSettings: toWireSettings2,
     unenforceableSettingsRules: unenforceableSettingsRules2,
@@ -550699,7 +551851,7 @@ async function printLaneWireSettings(knobs) {
   } = await Promise.resolve().then(() => (init_settingsRulesWire(), settingsRulesWire_exports)), { effective, config: config4 } = resolveSemaConfigWithEffective2(), fullWire = toWireSettings2(effective, config4);
   for (let msg of describeUnenforceableRules2(unenforceableSettingsRules2(fullWire))) emitPrintLaneRuleNotice(msg);
   emitPrintLaneRuleNotice(describeHeadlessAskContentRules2(askContentRulesDeniedHeadless2(fullWire)));
-  let stampMode = resolveSendSettingsMode2(knobs.sendSettings), cliToolFlags = readCliToolFlagsWire2();
+  let stampMode = resolveSendSettingsMode3(knobs.sendSettings), cliToolFlags = readCliToolFlagsWire2();
   return setWireStampProvenance2({ full: fullWire, sendMode: stampMode, cliToolFlags }), buildWireSettingsStamp2(stampMode, fullWire, {
     // L-66①:`--tools` / `--disallowedTools` 的壳本地快照。**求值点必须在这里**(晚绑定供给器内),
     // 不能在前置步就读:前置步跑在 `import('../main.js')` 之前,那时 commander 还没解析 argv,
@@ -550965,8 +552117,8 @@ function syncEntriesToTranscriptLines(entries, ctx) {
     leafUuid: lines.length > 0 ? lines[lines.length - 1].uuid : ctx.startingParentUuid ?? null
   };
 }
-function selectEntriesByIds(entries, ids) {
-  let want = new Set(ids);
+function selectEntriesByIds(entries, ids2) {
+  let want = new Set(ids2);
   return entries.filter((e) => want.has(e.id));
 }
 function lastLineUuid(jsonlBody) {
@@ -551365,7 +552517,9 @@ __export(cloudResources_exports, {
   cloudResourceInstall: () => cloudResourceInstall,
   cloudResourceList: () => cloudResourceList,
   cloudResourceRemove: () => cloudResourceRemove,
-  cloudResourceSync: () => cloudResourceSync
+  cloudResourceSync: () => cloudResourceSync,
+  findSecretShape: () => findSecretShape,
+  isEnvVarName: () => isEnvVarName
 });
 import { createHash as createHash31 } from "node:crypto";
 import { existsSync as existsSync37, readdirSync as readdirSync15, readFileSync as readFileSync56, statSync as statSync18 } from "node:fs";
@@ -551380,9 +552534,41 @@ function resolveTargetSel(o) {
   );
   return picked.length > 1 && (err6(`Error: ${picked.join(" and ")} conflict \u2014 pass ONE target. The same command writes to whoever the target switch names:`), err6("  (none)        your own personal config"), err6("  --user <u>    that user's personal config (admin-managed)"), err6("  --team        the active space's team standard"), err6("  --space <id>  that space's team standard"), err6("  --global      the instance-wide standard (instance admin)"), process.exit(1)), o.user ? { kind: "user", username: o.user } : o.global ? { kind: "team", space: "global" } : o.team || o.space ? { kind: "team", space: o.space } : { kind: "me" };
 }
+function isEnvVarName(s) {
+  return ENV_NAME.safeParse(s).success;
+}
+function hasPemPrivateKey(s) {
+  return PEM_PRIVATE_KEY_RE !== null && PEM_PRIVATE_KEY_RE.test(s);
+}
+function isSecretShapedLiteral(s) {
+  return containsSecretToken(s) || hasPemPrivateKey(s);
+}
+function pathSegment(k2) {
+  return k2.length > PATH_SEGMENT_MAX || isSecretShapedLiteral(k2) ? `<key, ${String(k2.length)} chars, redacted>` : k2;
+}
+function firstSecretLeafPath(v2, path28, depth, hit) {
+  if (depth > SECRET_SCAN_MAX_DEPTH) return null;
+  if (typeof v2 == "string") return hit(v2) ? path28 : null;
+  if (Array.isArray(v2)) {
+    for (let i = 0; i < v2.length; i++) {
+      let found = firstSecretLeafPath(v2[i], `${path28}[${String(i)}]`, depth + 1, hit);
+      if (found !== null) return found;
+    }
+    return null;
+  }
+  let rec = asRec3(v2);
+  if (rec === void 0) return null;
+  for (let [k2, child] of Object.entries(rec)) {
+    let seg = `${path28}.${pathSegment(k2)}`;
+    if (hit(k2)) return seg;
+    let found = firstSecretLeafPath(child, seg, depth + 1, hit);
+    if (found !== null) return found;
+  }
+  return null;
+}
 function findSecretShape(value) {
-  let s = JSON.stringify(value) ?? "", m2 = SECRET_SHAPE_RE.exec(s);
-  return m2 ? `${(m2[2] ?? m2[0]).slice(0, 8)}\u2026(redacted)` : null;
+  let s = JSON.stringify(value) ?? "", composed = containsSecretToken(s), pemPath = firstSecretLeafPath(value, "$", 0, hasPemPrivateKey);
+  return !composed && pemPath === null ? null : pemPath !== null ? pemPath : firstSecretLeafPath(value, "$", 0, containsSecretToken) ?? "a secret-shaped literal in the payload (redacted)";
 }
 function managedLaneError(forUser, status3, json2) {
   let detail = asStr4(json2.error_description);
@@ -551714,7 +552900,7 @@ async function prepareModel(m2) {
   let api2 = entry.api === "anthropic-messages" ? "anthropic-messages" : "openai-completions";
   entry.api = api2, entry.provider = api2 === "anthropic-messages" ? "anthropic" : asStr4(entry.provider) && entry.provider !== "anthropic" ? entry.provider : "gateway";
   let notes = [], keyEnv = asStr4(entry.apiKeyEnv);
-  keyEnv && !ENV_NAME_RE.test(keyEnv) && (delete entry.apiKeyEnv, strippedKeys.push("apiKeyEnv(not an env NAME)"));
+  keyEnv && !isEnvVarName(keyEnv) && (delete entry.apiKeyEnv, strippedKeys.push("apiKeyEnv(not an env NAME)"));
   let hasInlineKey = INLINE_KEY_FIELDS.some((f) => asStr4(m2[f]));
   if (!asStr4(entry.apiKeyEnv) && hasInlineKey) {
     let { keyEnvNameForEntry: keyEnvNameForEntry2 } = await Promise.resolve().then(() => (init_modelChannels(), modelChannels_exports));
@@ -551758,7 +552944,7 @@ function prepareMcp(name, c3) {
     if (!command8) return { name, display: display2, entry: null, notes, skipReason: `server '${name}' has no command` };
     let envRefs = {}, dropped2 = [];
     for (let k2 of Object.keys(asRec3(c3.env) ?? {}))
-      ENV_NAME_RE.test(k2) ? envRefs[k2] = k2 : dropped2.push(k2);
+      isEnvVarName(k2) ? envRefs[k2] = k2 : dropped2.push(k2);
     Object.keys(envRefs).length > 0 && notes.push(`env values stripped \u2014 cloud stores refs only; consuming machines must set: ${Object.values(envRefs).join(", ")}`), dropped2.length > 0 && notes.push(`env keys dropped (not env-NAME shaped, cannot be referenced): ${dropped2.join(", ")}`);
     let args = asArr3(c3.args).filter((a) => typeof a == "string");
     return {
@@ -552325,7 +553511,7 @@ async function cloudPublish(options) {
     fail5(e);
   }
 }
-var out4, err6, asRec3, asArr3, asStr4, ENV_NAME_RE, DOMAIN_NAME_RE, SECRET_SHAPE_RE, personalPath, wantsTeam, TEAM_WRITE_ROLE, teamConfigPath, NOUN, ADD_VERB, REMOVE_VERB, DOMAIN, LIST_KEY, LOCAL_SOURCE, MODEL_FIELD_ALLOWLIST, INLINE_KEY_FIELDS, MODEL_ROLES, GIT_SHA_RE, byName, init_cloudResources = __esm({
+var out4, err6, asRec3, asArr3, asStr4, DOMAIN_NAME_RE, SECRET_SCAN_MAX_DEPTH, PEM_PRIVATE_KEY_RE, PATH_SEGMENT_MAX, personalPath, wantsTeam, TEAM_WRITE_ROLE, teamConfigPath, NOUN, ADD_VERB, REMOVE_VERB, DOMAIN, LIST_KEY, LOCAL_SOURCE, MODEL_FIELD_ALLOWLIST, INLINE_KEY_FIELDS, MODEL_ROLES, GIT_SHA_RE, byName, init_cloudResources = __esm({
   "build-src/src/cli/handlers/cloudResources.ts"() {
     init_types6();
     init_cloudAuth();
@@ -552334,7 +553520,12 @@ var out4, err6, asRec3, asArr3, asStr4, ENV_NAME_RE, DOMAIN_NAME_RE, SECRET_SHAP
     out4 = (line) => process.stdout.write(`${line}
 `), err6 = (line) => process.stderr.write(`${line}
 `);
-    asRec3 = (v2) => typeof v2 == "object" && v2 !== null && !Array.isArray(v2) ? v2 : void 0, asArr3 = (v2) => Array.isArray(v2) ? v2 : [], asStr4 = (v2) => typeof v2 == "string" && v2.length > 0 ? v2 : void 0, ENV_NAME_RE = /^[A-Z_][A-Z0-9_]*$/, DOMAIN_NAME_RE = /^[a-z0-9][a-z0-9._-]*$/i, SECRET_SHAPE_RE = /(^|["\s:=,])(sk-[A-Za-z0-9_-]{8,}|gh[opus]_[A-Za-z0-9]{8,}|github_pat_[A-Za-z0-9_]{8,}|xox[baprse]-[A-Za-z0-9-]{8,}|AKIA[0-9A-Z]{12,}|AIza[0-9A-Za-z_-]{20,}|eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{4,}|-----BEGIN[A-Z0-9 ]*PRIVATE KEY)/;
+    asRec3 = (v2) => typeof v2 == "object" && v2 !== null && !Array.isArray(v2) ? v2 : void 0, asArr3 = (v2) => Array.isArray(v2) ? v2 : [], asStr4 = (v2) => typeof v2 == "string" && v2.length > 0 ? v2 : void 0;
+    DOMAIN_NAME_RE = /^[a-z0-9][a-z0-9._-]*$/i, SECRET_SCAN_MAX_DEPTH = 24, PEM_PRIVATE_KEY_RE = (() => {
+      let arm4 = SECRET_LITERAL_RE.source.replace(/^\^\(/, "").replace(/\)$/, "").split("|").find((a) => a.includes("PRIVATE KEY"));
+      return arm4 === void 0 ? null : new RegExp(arm4, "i");
+    })();
+    PATH_SEGMENT_MAX = 40;
     personalPath = (domain2, forUser) => forUser ? `/api/v1/users/${encodeURIComponent(forUser)}/config/${domain2}` : `/api/v1/me/config/${domain2}`;
     wantsTeam = (o) => !!(o.team || o.space || o.global);
     TEAM_WRITE_ROLE = { models: "editor", mcp: "publisher", skills: "publisher", plugins: "publisher" };
@@ -562986,7 +564177,7 @@ Usage: sema --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("sema 1.0.122", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
+  }).version("sema 1.0.124", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).psHandler([]), process.exit(process.exitCode ?? 0);
   }), program2.command("logs [id]").description("Print a background session's recent terminal output").action(async (id) => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).logsHandler(id, []), process.exit(process.exitCode ?? 0);
@@ -564950,11 +566141,21 @@ __export(suspendedSubagentAskWire_exports, {
   startSuspendedSubagentAskWire: () => startSuspendedSubagentAskWire
 });
 function startSuspendedSubagentAskWire(opts) {
-  let surface = opts.deps?.surface ?? surfaceSuspendedAskAndRespond, retract = opts.deps?.retract ?? ((callKey) => retractApprovalCard(callKey, "settled-elsewhere")), notify5 = opts.deps?.notify ?? ((text2) => {
+  let surface = opts.deps?.surface ?? surfaceSuspendedAskAndRespond, retract = opts.deps?.retract ?? ((callKey, cause) => retractApprovalCard(callKey, cause)), notify5 = opts.deps?.notify ?? ((text2) => {
     surfaceTranscriptSystemNotice(text2, "warning");
   }), startFeed = opts.deps?.startFeed ?? startApprovalsFeed, sessionId = opts.sessionId(), tracker2 = createSuspendedAskTracker({ ...spreadSessionId(sessionId) });
   installSuspendedAskTracker(tracker2), noteSuspendedAskFeedInstalled(!0);
-  let stats3 = { snapshots: 0, surfaced: 0, retracted: 0, upgraded: 0, requeued: 0, rebuilds: 0, released: 0 }, orphanStreak = /* @__PURE__ */ new Map(), openCards = /* @__PURE__ */ new Set(), stopped = !1, onSnapshot = (snap) => {
+  let stats3 = { snapshots: 0, surfaced: 0, retracted: 0, upgraded: 0, requeued: 0, rebuilds: 0, released: 0 }, orphanStreak = /* @__PURE__ */ new Map(), openCards = /* @__PURE__ */ new Set(), exhausted = /* @__PURE__ */ new Set(), stopped = !1, publishCountFrom = (snap) => {
+    if (sessionId === void 0) {
+      noteApprovalsAwaitingDecision(null);
+      return;
+    }
+    try {
+      noteApprovalsAwaitingDecision(countApprovalsAwaitingDecision(snap, { ...spreadSessionId(sessionId) }));
+    } catch (e) {
+      noteApprovalsAwaitingDecision(null), logForDebugging(`[sema][suspendedAsk] countApprovalsAwaitingDecision threw: ${String(e)}`);
+    }
+  }, onSnapshot = (snap) => {
     if (stopped) return;
     stats3.snapshots += 1;
     let now2 = opts.sessionId();
@@ -564965,11 +566166,7 @@ function startSuspendedSubagentAskWire(opts) {
       return;
     }
     let filter2 = spreadSessionId(sessionId);
-    try {
-      noteApprovalsAwaitingDecision(countApprovalsAwaitingDecision(snap, { ...filter2 }));
-    } catch (e) {
-      noteApprovalsAwaitingDecision(null), logForDebugging(`[sema][suspendedAsk] countApprovalsAwaitingDecision threw: ${String(e)}`);
-    }
+    publishCountFrom(snap);
     let delta;
     try {
       delta = tracker2.ingest(snap);
@@ -564981,19 +566178,19 @@ function startSuspendedSubagentAskWire(opts) {
     let appearedNow = new Set(delta.appeared.map((r) => r.approvalId)), liveIds = /* @__PURE__ */ new Set();
     for (let r of suspendedSubagentAsks(snap, { ...filter2 })) {
       if (liveIds.add(r.approvalId), appearedNow.has(r.approvalId)) continue;
-      if (!(suspendedAskClaimed(r.approvalId) && !suspendedAskDecided(r.approvalId) && !suspendedAskSubmitting(r.approvalId) && !openCards.has(r.approvalId) && !liveApprovalCards.has(liveFrameCallKey(r.approvalId)))) {
+      if (!(!exhausted.has(r.approvalId) && suspendedAskClaimed(r.approvalId) && !suspendedAskDecided(r.approvalId) && !suspendedAskSubmitting(r.approvalId) && !openCards.has(r.approvalId) && !liveApprovalCards.has(liveFrameCallKey(r.approvalId)))) {
         orphanStreak.delete(r.approvalId);
         continue;
       }
       let streak = (orphanStreak.get(r.approvalId) ?? 0) + 1;
       orphanStreak.set(r.approvalId, streak), !(streak < 2) && (orphanStreak.delete(r.approvalId), stats3.released += 1, logForDebugging(
         `[sema][suspendedAsk] ${r.approvalId} is still pending on the engine but nothing on this screen owns it (claimed, undecided, no live card for two snapshots) \u2014 releasing the claim so it can be surfaced again`
-      ), retryLater(r.approvalId, "the card that claimed it is gone and it is still pending on the engine"));
+      ), retryLater(r.approvalId, "the card that claimed it is gone and it is still pending on the engine", "auto"));
     }
     for (let id of [...orphanStreak.keys()]) liveIds.has(id) || orphanStreak.delete(id);
     noteSuspendedAsksListed(liveIds), pruneVanishedSuspendedAsks(liveIds);
     for (let approvalId of delta.gone)
-      openCards.delete(approvalId), orphanStreak.delete(approvalId), forgetSuspendedAsk(approvalId), retract(liveFrameCallKey(approvalId)) && (stats3.retracted += 1);
+      openCards.delete(approvalId), orphanStreak.delete(approvalId), exhausted.delete(approvalId), forgetSuspendedAsk(approvalId), retract(liveFrameCallKey(approvalId), "settled-elsewhere") && (stats3.retracted += 1);
     for (let row2 of delta.upgraded)
       stats3.upgraded += 1, logForDebugging(
         `[sema][suspendedAsk] ${row2.approvalId} upgraded to a full frame after a blind card was already shown \u2014 leaving the shown card as-is (no in-place args refresh on this host)`
@@ -565003,34 +566200,106 @@ function startSuspendedSubagentAskWire(opts) {
     let lane = safeLane(opts.lane);
     (async () => {
       try {
-        let outcome = await surface(row2, opts.respond, void 0, lane);
+        let outcome = await surface(row2, opts.respond, void 0, lane), human = takeHumanApprovalCardDecision(liveFrameCallKey(row2.approvalId));
         if (openCards.delete(row2.approvalId), outcome.editRefused === !0) {
           notify5(
             "that approval could not be sent with your edits: this request came from a background subagent and the engine's read face does not carry its tool input, so there is no original to edit. Nothing was decided \u2014 the card will come back so you can allow or deny the call as-is."
-          ), retryLater(row2.approvalId, "edits are not accepted on this card");
+          ), retryLater(row2.approvalId, "edits are not accepted on this card", "user", { alreadyNotified: !0 });
+          return;
+        }
+        if (outcome.retracted === !0) {
+          requeueSuspendedAsk(row2.approvalId), orphanStreak.delete(row2.approvalId), logForDebugging(
+            `[sema][suspendedAsk] ${row2.approvalId} card was retracted without a decision (this host let go of it) \u2014 claim released, re-surfaceable, no re-surface budget consumed`
+          );
           return;
         }
         if (outcome.decision === "unresolved") {
           let refused = outcome.respondRefusal, detail = refused === void 0 ? "the engine did not confirm it" : [refused.errorCode, refused.message].filter((x3) => typeof x3 == "string" && x3 !== "").join(" \xB7 ");
-          retryLater(row2.approvalId, detail === "" ? "the engine did not confirm it" : detail);
+          retryLater(row2.approvalId, detail === "" ? "the engine did not confirm it" : detail, human ? "user" : "auto");
           return;
         }
         noteSuspendedAskDecided(row2.approvalId), orphanStreak.delete(row2.approvalId);
       } catch (e) {
-        openCards.delete(row2.approvalId), logForDebugging(`[sema][suspendedAsk] surfaceSuspendedAskAndRespond threw for ${row2.approvalId}: ${String(e)}`), retryLater(row2.approvalId, e instanceof Error ? e.message : String(e));
+        takeHumanApprovalCardDecision(liveFrameCallKey(row2.approvalId)), openCards.delete(row2.approvalId), logForDebugging(`[sema][suspendedAsk] surfaceSuspendedAskAndRespond threw for ${row2.approvalId}: ${String(e)}`), retryLater(row2.approvalId, e instanceof Error ? e.message : String(e), "auto");
       }
     })();
-  }, retryLater = (approvalId, why) => {
-    if (!takeSuspendedAskRequeueBudget(approvalId, REQUEUE_MAX)) {
-      notify5(
-        `that background subagent approval could not be delivered to the engine after ${String(REQUEUE_MAX)} attempts (${why}). Nothing was decided here and the request is still waiting on the engine \u2014 run /doctor or send a message to re-check what it is waiting on.`
-      ), logForDebugging(`[sema][suspendedAsk] ${approvalId} exhausted the re-surface budget (${why})`);
+  }, retryLater = (approvalId, why, leg, o) => {
+    if (leg === "auto") {
+      if (exhausted.has(approvalId)) {
+        logForDebugging(`[sema][suspendedAsk] ${approvalId} already exhausted the re-surface budget \u2014 not repeating (${why})`);
+        return;
+      }
+      if (!takeSuspendedAskRequeueBudget(approvalId, REQUEUE_MAX)) {
+        exhausted.add(approvalId), notify5(
+          `that background subagent approval could not be delivered to the engine after ${String(REQUEUE_MAX)} attempts (${why}). Nothing was decided here and the request is still waiting on the engine \u2014 run /doctor or send a message to re-check what it is waiting on.`
+        ), logForDebugging(`[sema][suspendedAsk] ${approvalId} exhausted the re-surface budget (${why})`);
+        return;
+      }
+    } else o?.alreadyNotified !== !0 && notify5(
+      `that background subagent approval could not be delivered to the engine (${why}). Nothing was decided here and the request is still waiting on the engine \u2014 the card is back so you can answer it again, or run /doctor to re-check what it is waiting on.`
+    );
+    stats3.requeued += 1, logForDebugging(`[sema][suspendedAsk] ${approvalId} did not settle (${why}; ${leg} leg) \u2014 re-surfacing it`), requeueSuspendedAsk(approvalId);
+  };
+  installStreamApprovalOutcomeSink((note) => {
+    if (stopped) return;
+    let human = takeHumanApprovalCardDecision(liveFrameCallKey(note.approvalId));
+    if (note.settled) {
+      noteSuspendedAskDecided(note.approvalId), orphanStreak.delete(note.approvalId), openCards.delete(note.approvalId);
       return;
     }
-    stats3.requeued += 1, logForDebugging(`[sema][suspendedAsk] ${approvalId} did not settle (${why}) \u2014 re-surfacing it`), requeueSuspendedAsk(approvalId);
-  }, feed = null;
+    if (openCards.delete(note.approvalId), orphanStreak.delete(note.approvalId), note.retracted === !0) {
+      requeueSuspendedAsk(note.approvalId), logForDebugging(
+        `[sema][suspendedAsk] ${note.approvalId} stream-leg card was retracted without a decision \u2014 claim released, re-surfaceable, no re-surface budget consumed`
+      );
+      return;
+    }
+    retryLater(note.approvalId, note.detail ?? "the engine did not confirm it", human ? "user" : "auto");
+  });
+  let feed = null, observeApprovalsList = (client3) => {
+    let approvals = client3.approvals, listFn = approvals.list;
+    if (typeof listFn != "function") return client3;
+    let streamFn = approvals.stream, observeSeq = 0, lastObservedSeq = 0, observe2 = (body, failed, seq2) => {
+      if (!stopped) {
+        if (seq2 < lastObservedSeq) {
+          logForDebugging(`[sema][suspendedAsk] dropping out-of-order approvals.list observation #${String(seq2)} (newest observed #${String(lastObservedSeq)})`);
+          return;
+        }
+        lastObservedSeq = seq2;
+        try {
+          if (failed || readLivePendingRows(body).kind === "malformed") {
+            noteApprovalsAwaitingDecision(null);
+            return;
+          }
+          feed !== null && suspendedSubagentAwaitingCount() === null && publishCountFrom(feed.snapshot());
+        } catch (e) {
+          logForDebugging(`[sema][suspendedAsk] approvals.list observer threw: ${String(e)}`);
+        }
+      }
+    };
+    return {
+      approvals: {
+        list: (o) => {
+          let seq2 = ++observeSeq, p;
+          try {
+            p = listFn.call(approvals, o);
+          } catch (e) {
+            throw observe2(void 0, !0, seq2), e;
+          }
+          return Promise.resolve(p).then(
+            (body) => {
+              observe2(body, !1, seq2);
+            },
+            () => {
+              observe2(void 0, !0, seq2);
+            }
+          ), p;
+        },
+        ...streamFn === void 0 ? {} : { stream: (o) => streamFn.call(approvals, o) }
+      }
+    };
+  };
   try {
-    feed = startFeed(opts.client, onSnapshot, {
+    feed = startFeed(observeApprovalsList(opts.client), onSnapshot, {
       reconcile: {
         // 🔴 §61 S-2 逐字:「会话有活跃后台代理 ∧ 没有活着的宿主 run」。谓词抛 / 返回非布尔 ⇒ 包按「查」
         //    处置(少查一次 = 一只等人的 ask 迟迟不出现),所以这里不吞成 false。
@@ -565049,8 +566318,11 @@ function startSuspendedSubagentAskWire(opts) {
         } catch {
         }
         openCards.size > 0 && logForDebugging(
-          `[sema][suspendedAsk] teardown with ${String(openCards.size)} card(s) still on screen \u2014 leaving them up on purpose (retracting them would post a deny the user never chose)`
-        ), openCards.clear(), installSuspendedAskTracker(null), noteSuspendedAskFeedInstalled(!1);
+          `[sema][suspendedAsk] teardown with ${String(openCards.size)} card(s) still on screen \u2014 retracting them (this host no longer has a decision port for them; CC-67 retraction sends nothing)`
+        );
+        for (let approvalId of [...openCards])
+          retract(liveFrameCallKey(approvalId), "host-decision-port-gone") && (stats3.retracted += 1);
+        openCards.clear(), installStreamApprovalOutcomeSink(null), installSuspendedAskTracker(null), noteSuspendedAskFeedInstalled(!1);
       }
     },
     stats: () => ({ ...stats3 })
@@ -565386,11 +566658,11 @@ function partitionSessionReap(records, departedSessionIds) {
 function reapSessionRecords(io, departedSessionIds) {
   if (departedSessionIds.length === 0) return [];
   if (io.mutate) {
-    let ids = [], m2 = io.mutate((records) => {
+    let ids2 = [], m2 = io.mutate((records) => {
       let { kept: kept2, reaped: reaped2 } = partitionSessionReap(records, departedSessionIds);
-      return ids = reaped2.map((r) => r.id), reaped2.length === 0 ? null : kept2;
+      return ids2 = reaped2.map((r) => r.id), reaped2.length === 0 ? null : kept2;
     });
-    return m2.ok || "reason" in m2 && m2.reason === "aborted" ? ids : [];
+    return m2.ok || "reason" in m2 && m2.reason === "aborted" ? ids2 : [];
   }
   let { kept, reaped } = partitionSessionReap(io.load(), departedSessionIds);
   return reaped.length === 0 ? [] : (io.save(kept), reaped.map((r) => r.id));
@@ -565407,15 +566679,15 @@ function pidAlive3(pid) {
   }
 }
 function writeSchedulerClaim(storePath, sessionIds, pid = process.pid) {
-  let dir = schedulerClaimsDir(storePath), file2 = join215(dir, `${pid}.json`), ids = [...new Set(sessionIds.filter((id) => typeof id == "string" && id.length > 0))].sort();
+  let dir = schedulerClaimsDir(storePath), file2 = join215(dir, `${pid}.json`), ids2 = [...new Set(sessionIds.filter((id) => typeof id == "string" && id.length > 0))].sort();
   try {
     let prev = JSON.parse(readFileSync66(file2, "utf8"));
     if (Array.isArray(prev.sessionIds) && prev.sessionIds.join(`
-`) === ids.join(`
+`) === ids2.join(`
 `)) return;
   } catch {
   }
-  mkdirSync33(dir, { recursive: !0, mode: 448 }), writeFileSync31(file2, JSON.stringify({ pid, sessionIds: ids, writtenAt: Date.now() }), { mode: 384 });
+  mkdirSync33(dir, { recursive: !0, mode: 448 }), writeFileSync31(file2, JSON.stringify({ pid, sessionIds: ids2, writtenAt: Date.now() }), { mode: 384 });
 }
 function removeSchedulerClaim(storePath, pid = process.pid) {
   try {
@@ -565470,11 +566742,11 @@ function sweepOrphanSessionRecords(io, storePath, opts = {}) {
     return { kept: kept2, reapedIds: reapedIds2 };
   };
   if (io.mutate) {
-    let ids = [], m2 = io.mutate((all4) => {
+    let ids2 = [], m2 = io.mutate((all4) => {
       let t2 = partition3(all4);
-      return ids = t2.reapedIds, t2.reapedIds.length === 0 ? null : t2.kept;
+      return ids2 = t2.reapedIds, t2.reapedIds.length === 0 ? null : t2.kept;
     });
-    return m2.ok || "reason" in m2 && m2.reason === "aborted" ? ids : [];
+    return m2.ok || "reason" in m2 && m2.reason === "aborted" ? ids2 : [];
   }
   let { kept, reapedIds } = partition3(records);
   return reapedIds.length > 0 && io.save(kept), reapedIds;
@@ -565500,10 +566772,10 @@ function ownsScheduledRecord(r) {
   return r.sessionId === current6;
 }
 function currentOwnedSessionIds() {
-  let ids = [], live = getLiveSessionId();
-  live && ids.push(live);
+  let ids2 = [], live = getLiveSessionId();
+  live && ids2.push(live);
   let shell = String(getSessionId());
-  return ids.includes(shell) || ids.push(shell), ids;
+  return ids2.includes(shell) || ids2.push(shell), ids2;
 }
 function wireSchedulerSessionLifecycle(opts = {}) {
   let storePath = opts.storePath ?? schedulerStorePath(), io = fileSchedulerStoreIO(storePath), onError = opts.onError ?? (() => {
@@ -570896,11 +572168,11 @@ async function launchReplProduction() {
     launchMode && (tpc.mode = launchMode), tpc.isBypassPermissionsModeAvailable = isBypassPermissionsModeAvailable, bypassModeLaunch = isBypassPermissionsModeAvailable;
     let effectiveConfig;
     try {
-      let { feature: feature3 } = await Promise.resolve().then(() => (init_bun_bundle(), bun_bundle_exports)), { getAutoModeEnabledStateIfCached: getAutoModeEnabledStateIfCached2 } = await Promise.resolve().then(() => (init_permissionSetup(), permissionSetup_exports)), factoryDefaultAutoEligible = getAutoModeEnabledStateIfCached2() !== "disabled";
-      effectiveConfig = resolveSemaConfig({
+      let { feature: feature3 } = await Promise.resolve().then(() => (init_bun_bundle(), bun_bundle_exports)), { getAutoModeEnabledStateIfCached: getAutoModeEnabledStateIfCached2 } = await Promise.resolve().then(() => (init_permissionSetup(), permissionSetup_exports)), factoryDefaultAutoEligible = getAutoModeEnabledStateIfCached2() !== "disabled", seamOpts = {
         launchMode,
         factoryDefaultAuto: factoryDefaultAutoEligible
-      });
+      };
+      effectiveConfig = resolveSemaConfig(seamOpts);
       let dm = effectiveConfig.derivedMode;
       if (tpc.mode = dm === "bypassPermissions" && !isBypassPermissionsModeAvailable ? "default" : dm, bypassModeLaunch = tpc.mode === "bypassPermissions", tpc.mode === "auto") {
         let { setAutoModeActive: setAutoModeActive2 } = await Promise.resolve().then(() => (init_autoModeState(), autoModeState_exports));
@@ -570923,16 +572195,16 @@ async function launchReplProduction() {
             });
           }
         }
-        let stampMode = resolveSendSettingsMode(process.env.SEMA_SEND_SETTINGS), fullWire = toWireSettings(resolveEffective(), effectiveConfig);
+        let stampMode = resolveSendSettingsMode(process.env.SEMA_SEND_SETTINGS), { assembleInteractiveWireStamp: assembleInteractiveWireStamp2 } = await Promise.resolve().then(() => (init_interactiveSettingsStamp(), interactiveSettingsStamp_exports)), wireStampAssembly = assembleInteractiveWireStamp2({ stampMode, seamOpts }), fullWire = wireStampAssembly.bootWire;
         try {
           for (let msg of describeUnenforceableRules(unenforceableSettingsRules(fullWire)))
             process.stderr.write(`[sema] ${msg}
 `), bootFailClosedNotices.push(msg);
         } catch {
         }
-        let { readCliToolFlagsWire: readCliToolFlagsWire2 } = await Promise.resolve().then(() => (init_settingsRulesWire(), settingsRulesWire_exports)), stampSupplier = () => buildWireSettingsStamp(stampMode, fullWire, { cliToolFlags: readCliToolFlagsWire2() }), { setSeamConfig: setSeamConfig2 } = await Promise.resolve().then(() => (init_seamQuery(), seamQuery_exports));
-        setSeamConfig2(stampSupplier), setWireStampProvenance({ full: fullWire, sendMode: stampMode, cliToolFlags: readCliToolFlagsWire2() });
-        let stamp2 = stampSupplier();
+        let stampSupplier = wireStampAssembly.supplier, { setSeamConfig: setSeamConfig2 } = await Promise.resolve().then(() => (init_seamQuery(), seamQuery_exports));
+        setSeamConfig2(stampSupplier);
+        let stamp2 = wireStampAssembly.bootStamp;
         if (stamp2) {
           if (process.env.SEMA_DEBUG) {
             let p = stamp2.permissions ?? {};