@sema-agent/cli 1.0.123 → 1.0.124

package/sema-main.js

@@ -4320,6 +4320,29 @@ var init_unrefTimer = __esm({
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/panelRunningHistory.js
+function notePanelRowRunning(taskId) {
+  if (!ids.has(taskId) && (ids.add(taskId), ids.size > 4096)) {
+    overflowed = !0;
+    let oldest = ids.values().next().value;
+    oldest !== void 0 && ids.delete(oldest);
+  }
+}
+function retirePanelRowRunning(taskId) {
+  ids.delete(taskId);
+}
+function panelRowNeverPublishedRunning(taskId) {
+  return !overflowed && !ids.has(taskId);
+}
+function __resetPanelRunningHistoryForTests() {
+  ids.clear(), overflowed = !1;
+}
+var ids, overflowed, init_panelRunningHistory = __esm({
+  "node_modules/@sema-agent/client-core/dist/panelRunningHistory.js"() {
+    ids = /* @__PURE__ */ new Set(), overflowed = !1;
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/engineAgentPanelStore.js
 function markEnginePanelTaskResident(taskId) {
   residentTaskIds.add(taskId);
@@ -4331,7 +4354,14 @@ function isEnginePanelTaskResident(taskId) {
   return residentTaskIds.has(taskId);
 }
 function launchAnchorChanged(prev, next) {
-  return prev.kind !== "fleet-row" || next.kind !== "fleet-row" ? !1 : prev.cycleSeq !== void 0 && next.cycleSeq !== void 0 && prev.cycleSeq !== next.cycleSeq ? !0 : prev.startedAt !== void 0 && next.startedAt !== void 0 && prev.startedAt !== next.startedAt;
+  return prev.kind !== "fleet-row" || next.kind !== "fleet-row" ? !1 : isNewEngineAgentPanelCycle(prev, next);
+}
+function isNewEngineAgentPanelCycle(prev, next) {
+  let pc = cycleSeqOf(prev), nc = cycleSeqOf(next);
+  if (pc !== void 0 && nc !== void 0)
+    return pc !== nc;
+  let ps = startedAtOf(prev), ns = startedAtOf(next);
+  return ps !== void 0 && ns !== void 0 && ps !== ns;
 }
 function cycleSeqOf(v2) {
   let n2 = v2?.cycleSeq;
@@ -4348,6 +4378,51 @@ function isStaleEngineAgentPanelEnd(end, current6) {
   let es = startedAtOf(end), cs = startedAtOf(current6);
   return es !== void 0 && cs !== void 0 ? es < cs : !1;
 }
+function bounded(map2, key, value) {
+  if (map2.delete(key), map2.set(key, value), map2.size > MAX_IDENTITY_KEYS) {
+    let oldest = map2.keys().next().value;
+    oldest !== void 0 && map2.delete(oldest);
+  }
+}
+function boundedOwnership(map2, key, value) {
+  if (map2.delete(key), map2.set(key, value), map2.size <= MAX_OWNERSHIP_KEYS)
+    return;
+  for (let [k2, v2] of map2)
+    if (v2.retired) {
+      map2.delete(k2);
+      return;
+    }
+  let oldest = map2.keys().next().value;
+  oldest !== void 0 && map2.delete(oldest);
+}
+function notePublishedWire(ev) {
+  boundedOwnership(publishedWireIds, ev.taskId, { retired: publishedWireIds.get(ev.taskId)?.retired ?? !1 }), ev.parentToolCallId !== void 0 && ev.parentToolCallId.length > 0 && bounded(publishedWireByParent, ev.parentToolCallId, ev.taskId);
+}
+function retireWire(wireId) {
+  let w2 = publishedWireIds.get(wireId);
+  w2 !== void 0 && (w2.retired = !0);
+  for (let o of wireIdByFleetId.values())
+    o.wireId === wireId && (o.retired = !0);
+}
+function publishedWireFor(ev) {
+  if (ev.transcriptId !== void 0 && publishedWireIds.has(ev.transcriptId))
+    return ev.transcriptId;
+  if (ev.parentToolCallId !== void 0) {
+    let u = publishedWireByParent.get(ev.parentToolCallId);
+    if (u !== void 0 && publishedWireIds.get(u)?.retired === !1)
+      return u;
+  }
+}
+function wireOwnerOf(fleetId, current6, transcriptId) {
+  let o = wireIdByFleetId.get(fleetId);
+  if (o === void 0)
+    return;
+  if (transcriptId !== void 0 && transcriptId !== (o.transcriptId ?? o.wireId) || current6 !== void 0 && isStaleEngineAgentPanelEnd(o, current6)) {
+    wireIdByFleetId.delete(fleetId), retireWire(o.wireId);
+    return;
+  }
+  return o.wireId;
+}
 function remember(map2, key, alias2) {
   if (map2.delete(key), map2.set(key, alias2), map2.size > MAX_IDENTITY_KEYS) {
     let oldest = map2.keys().next().value;
@@ -4389,27 +4464,47 @@ function normalizedTick(ev, fleetId) {
 }
 function asIsTick(ev) {
   let { cardBound: _cardBound, ...rest } = ev;
-  return { ...rest, taskIdOrigin: "wire" };
+  return notePublishedWire(ev), { ...rest, taskIdOrigin: "wire" };
+}
+function staleWireTick(id) {
+  return isStaleEngineAgentPanelEnd(id, latestCycleByFleetId.get(id.taskId));
 }
 function flushHeld(wireTaskId) {
   let held = heldWireTicks.get(wireTaskId);
   if (held === void 0)
     return;
-  heldWireTicks.delete(wireTaskId);
+  if (heldWireTicks.delete(wireTaskId), publishedWireIds.has(held.ev.taskId)) {
+    deliverEngineAgentPanelEvent(asIsTick(held.ev));
+    return;
+  }
   let id = resolveEnginePanelTaskId(held.ev.taskId, held.ev.parentToolCallId);
-  id.origin === "fleet-row" && rememberResolvedWire(held.ev.taskId, id), deliverEngineAgentPanelEvent(id.origin === "fleet-row" ? normalizedTick(held.ev, id.taskId) : asIsTick(held.ev));
+  if (id.origin === "fleet-row") {
+    if (staleWireTick(id))
+      return;
+    rememberResolvedWire(held.ev.taskId, id), deliverEngineAgentPanelEvent(normalizedTick(held.ev, id.taskId));
+    return;
+  }
+  deliverEngineAgentPanelEvent(asIsTick(held.ev));
 }
-function clearEnginePanelTaskResidentByWire(wireTaskId) {
+function clearEnginePanelTaskResidentByWire(wireTaskId, cycle) {
   residentTaskIds.delete(wireTaskId);
+  let owner = wireIdByFleetId.get(wireTaskId);
+  owner !== void 0 && !(cycle !== void 0 && isStaleEngineAgentPanelEnd(cycle, owner)) && residentTaskIds.delete(owner.wireId);
   let id = resolveEnginePanelTaskId(wireTaskId);
   id.taskId !== wireTaskId && (isStaleEngineAgentPanelEnd(id, latestCycleByFleetId.get(id.taskId)) || residentTaskIds.delete(id.taskId));
 }
 function __resetEngineAgentPanelIdentityForTests() {
-  fleetIdByTranscriptId.clear(), fleetIdByParentToolCallId.clear(), heldWireTicks.clear(), latestCycleByFleetId.clear();
+  fleetIdByTranscriptId.clear(), fleetIdByParentToolCallId.clear(), heldWireTicks.clear(), latestCycleByFleetId.clear(), publishedWireIds.clear(), publishedWireByParent.clear(), wireIdByFleetId.clear();
 }
 function publishEngineAgentPanelEvent(ev) {
   switch ((ev.kind === "end" || ev.kind === "sweep") && ageHeld(ev.kind === "sweep" ? void 0 : ev.taskId), ev.kind) {
     case "fleet-row": {
+      let rowCycle = { ...ev.cycleSeq !== void 0 ? { cycleSeq: ev.cycleSeq } : {}, ...ev.startedAt !== void 0 ? { startedAt: ev.startedAt } : {} }, published = wireOwnerOf(ev.taskId, rowCycle, ev.transcriptId) ?? publishedWireFor(ev);
+      if (published !== void 0 && published !== ev.taskId) {
+        let prev = wireIdByFleetId.get(ev.taskId);
+        boundedOwnership(wireIdByFleetId, ev.taskId, { wireId: published, retired: prev?.wireId === published ? prev.retired : !1, ...ev.transcriptId !== void 0 ? { transcriptId: ev.transcriptId } : prev?.transcriptId !== void 0 ? { transcriptId: prev.transcriptId } : {}, ...rowCycle }), deliverEngineAgentPanelEvent({ ...ev, taskId: published, wireTaskId: ev.taskId, taskIdOrigin: "wire" }), ageHeld(void 0);
+        return;
+      }
       let alias2 = {
         fleetId: ev.taskId,
         ...ev.cycleSeq !== void 0 ? { cycleSeq: ev.cycleSeq } : {},
@@ -4426,9 +4521,15 @@ function publishEngineAgentPanelEvent(ev) {
       return;
     }
     case "tick": {
+      if (publishedWireIds.has(ev.taskId)) {
+        heldWireTicks.delete(ev.taskId), deliverEngineAgentPanelEvent(asIsTick(ev));
+        return;
+      }
       let id = resolveEnginePanelTaskId(ev.taskId, ev.parentToolCallId);
       if (id.origin === "fleet-row") {
-        heldWireTicks.delete(ev.taskId), rememberResolvedWire(ev.taskId, id), deliverEngineAgentPanelEvent(normalizedTick(ev, id.taskId));
+        if (heldWireTicks.delete(ev.taskId), staleWireTick(id))
+          return;
+        rememberResolvedWire(ev.taskId, id), deliverEngineAgentPanelEvent(normalizedTick(ev, id.taskId));
         return;
       }
       if (ev.cardBound === !0) {
@@ -4447,9 +4548,28 @@ function publishEngineAgentPanelEvent(ev) {
       return;
     }
     case "end": {
+      let wireOwner = wireOwnerOf(ev.taskId, ev);
+      if (wireOwner !== void 0) {
+        let ownerRec = wireIdByFleetId.get(ev.taskId);
+        deliverEngineAgentPanelEvent({ ...ev, taskId: wireOwner, wireTaskId: ev.taskId, taskIdOrigin: "wire" }), isStaleEngineAgentPanelEnd(ev, ownerRec) || (retireWire(wireOwner), retirePanelRowRunning(ev.taskId), retirePanelRowRunning(wireOwner));
+        return;
+      }
+      if (publishedWireIds.has(ev.taskId)) {
+        flushHeld(ev.taskId), deliverEngineAgentPanelEvent(ev), retireWire(ev.taskId), retirePanelRowRunning(ev.taskId);
+        for (let [fleetId, o] of wireIdByFleetId)
+          o.wireId === ev.taskId && !isStaleEngineAgentPanelEnd(ev, o) && retirePanelRowRunning(fleetId);
+        let alias2 = fleetIdByTranscriptId.get(ev.taskId);
+        alias2 !== void 0 && !isStaleEngineAgentPanelEnd(ev, alias2) && retirePanelRowRunning(alias2.fleetId);
+        return;
+      }
       let id = resolveEnginePanelTaskId(ev.taskId);
       if (id.origin === "fleet-row" && id.taskId !== ev.taskId) {
-        flushHeld(ev.taskId), migrateResidency(ev.taskId, id.taskId), deliverEngineAgentPanelEvent({
+        flushHeld(ev.taskId), migrateResidency(ev.taskId, id.taskId);
+        let effectiveEnd = {
+          ...ev.cycleSeq !== void 0 ? { cycleSeq: ev.cycleSeq } : id.cycleSeq !== void 0 ? { cycleSeq: id.cycleSeq } : {},
+          ...ev.startedAt !== void 0 ? { startedAt: ev.startedAt } : id.startedAt !== void 0 ? { startedAt: id.startedAt } : {}
+        };
+        isStaleEngineAgentPanelEnd(effectiveEnd, latestCycleByFleetId.get(id.taskId)) || retirePanelRowRunning(id.taskId), deliverEngineAgentPanelEvent({
           ...ev,
           taskId: id.taskId,
           wireTaskId: ev.taskId,
@@ -4460,7 +4580,7 @@ function publishEngineAgentPanelEvent(ev) {
         });
         return;
       }
-      flushHeld(ev.taskId), deliverEngineAgentPanelEvent(ev);
+      flushHeld(ev.taskId), deliverEngineAgentPanelEvent(ev), retireWire(ev.taskId), isStaleEngineAgentPanelEnd(ev, latestCycleByFleetId.get(ev.taskId)) || retirePanelRowRunning(ev.taskId);
       return;
     }
     default:
@@ -4526,7 +4646,8 @@ function subscribeEngineAgentPanel(fn2) {
   };
 }
 function publishEngineAgentPanelAbsence(ev) {
-  if (absenceListener) {
+  let owner = wireOwnerOf(ev.taskId);
+  if (owner !== void 0 && (ev = { ...ev, taskId: owner, wireTaskId: ev.taskId }), absenceListener) {
     try {
       absenceListener(ev);
     } catch {
@@ -4555,14 +4676,15 @@ function subscribeEngineAgentPanelAbsence(fn2) {
 function __resetEngineAgentPanelAbsenceForTests() {
   absenceListener = null, absenceBuffer.clear();
 }
-var PANEL_TOOLUSES_LANE_POLICY, residentTaskIds, MAX_BUFFER, listener, buffer, MAX_IDENTITY_KEYS, MAX_HELD_WIRE_TICKS, MAX_HELD_WIRE_TICK_BEATS, fleetIdByTranscriptId, fleetIdByParentToolCallId, heldWireTicks, latestCycleByFleetId, MAX_ABSENCE_BUFFER, absenceListener, absenceBuffer, init_engineAgentPanelStore = __esm({
+var PANEL_TOOLUSES_LANE_POLICY, residentTaskIds, MAX_BUFFER, listener, buffer, MAX_IDENTITY_KEYS, MAX_HELD_WIRE_TICKS, MAX_HELD_WIRE_TICK_BEATS, fleetIdByTranscriptId, fleetIdByParentToolCallId, heldWireTicks, latestCycleByFleetId, MAX_OWNERSHIP_KEYS, publishedWireIds, publishedWireByParent, wireIdByFleetId, MAX_ABSENCE_BUFFER, absenceListener, absenceBuffer, init_engineAgentPanelStore = __esm({
   "node_modules/@sema-agent/client-core/dist/engineAgentPanelStore.js"() {
+    init_panelRunningHistory();
     PANEL_TOOLUSES_LANE_POLICY = {
       tick: "required-engine-always-emits",
       "fleet-row": "optional-tolerate-absent"
     }, residentTaskIds = /* @__PURE__ */ new Set();
     MAX_BUFFER = 200, listener = null, buffer = [];
-    MAX_IDENTITY_KEYS = 2048, MAX_HELD_WIRE_TICKS = 64, MAX_HELD_WIRE_TICK_BEATS = 16, fleetIdByTranscriptId = /* @__PURE__ */ new Map(), fleetIdByParentToolCallId = /* @__PURE__ */ new Map(), heldWireTicks = /* @__PURE__ */ new Map(), latestCycleByFleetId = /* @__PURE__ */ new Map();
+    MAX_IDENTITY_KEYS = 2048, MAX_HELD_WIRE_TICKS = 64, MAX_HELD_WIRE_TICK_BEATS = 16, fleetIdByTranscriptId = /* @__PURE__ */ new Map(), fleetIdByParentToolCallId = /* @__PURE__ */ new Map(), heldWireTicks = /* @__PURE__ */ new Map(), latestCycleByFleetId = /* @__PURE__ */ new Map(), MAX_OWNERSHIP_KEYS = 8192, publishedWireIds = /* @__PURE__ */ new Map(), publishedWireByParent = /* @__PURE__ */ new Map(), wireIdByFleetId = /* @__PURE__ */ new Map();
     MAX_ABSENCE_BUFFER = 200, absenceListener = null, absenceBuffer = /* @__PURE__ */ new Map();
   }
 });
@@ -5102,7 +5224,7 @@ function enqueueBgChildNotification(n2) {
   let terminal = isTaskNotificationTerminalStatus(n2.status);
   if (terminal && (markRunNotified(n2.taskId, cycle), cardEnqueuedRunIds.add(n2.taskId)), terminal)
     try {
-      clearEnginePanelTaskResident(n2.taskId), publishEngineAgentPanelEvent({
+      clearEnginePanelTaskResidentByWire(n2.taskId, typeof n2.seq == "number" && Number.isInteger(n2.seq) && n2.seq >= BG_FIRST_SEQ ? { cycleSeq: n2.seq } : void 0), publishEngineAgentPanelEvent({
         kind: "end",
         taskId: n2.taskId,
         // L-215②(0.65.0):读**单铸谓词**而不是内联两词 —— 修前这里只认 `failed`/`killed`,
@@ -7769,9 +7891,9 @@ function rememberSegment(s, text2) {
 function scheduleNotify(taskId) {
   pendingNotify.add(taskId), !notifyTimer && (notifyTimer = setTimeout(() => {
     notifyTimer = null;
-    let ids = [...pendingNotify];
+    let ids2 = [...pendingNotify];
     if (pendingNotify.clear(), !!notifyListener)
-      for (let id of ids)
+      for (let id of ids2)
         try {
           notifyListener(id);
         } catch {
@@ -9343,7 +9465,7 @@ function seenFor(sessionKey) {
   return m2 || (m2 = /* @__PURE__ */ new Map(), seen.set(sessionKey, m2)), m2;
 }
 function resetFleetAgentPanelProjection() {
-  seen.clear();
+  seen.clear(), __resetPanelRunningHistoryForTests();
 }
 function resetFleetAgentPanelProjectionFor(sessionKey) {
   seen.delete(sessionKey);
@@ -9372,7 +9494,8 @@ function projectFleetAgentRowsFor(sessionKey, rows3, nowMs2 = Date.now()) {
     let rowNewerCycle = prev !== void 0 && isStaleEngineAgentPanelEnd(prevIdentity, rowIdentity), sameCycle = prev !== void 0 && !prev.settled && (startedAt === void 0 || prev.startedAt === void 0 || prev.startedAt === startedAt) && // 0.74.0:代际号变了同样是新周期(两条都报了才比;任一条没报 = 这一帧没说)
     (cycleSeq === void 0 || prev.cycleSeq === void 0 || prev.cycleSeq === cycleSeq), knownTokens = tokens !== void 0 ? tokens : sameCycle ? prev?.tokens : void 0, carryIdentity = prev !== void 0 && !rowNewerCycle, knownStartedAt = startedAt !== void 0 ? startedAt : carryIdentity ? prev.startedAt : void 0, knownCycleSeq = cycleSeq !== void 0 ? cycleSeq : carryIdentity ? prev.cycleSeq : void 0;
     if (TERMINAL_FLEET_TASK_STATUSES.has(status3)) {
-      prev?.settled === !0 && !rowNewerCycle || // 0.74.0:周期身份本身推进(或首帧就带身份)也是变化 —— 消费端要先记下身份才能对 end 判陈旧。
+      let newbornTerminal = prev === void 0 && panelRowNeverPublishedRunning(taskId);
+      !(prev?.settled === !0 && !rowNewerCycle) && !newbornTerminal && // 0.74.0:周期身份本身推进(或首帧就带身份)也是变化 —— 消费端要先记下身份才能对 end 判陈旧。
       ((rowNewerCycle || cycleSeq !== void 0 && prev?.cycleSeq !== cycleSeq || // 含首帧(prev 缺席)就带身份的终态
       // 最终用量也算(终态帧常是唯一带全 usage 的一帧;消费端不更新非 running 行 ⇒ 必须赶在 end 之前发)
       tokens !== void 0 && prev?.tokens !== tokens || toolUses !== void 0 && prev?.toolUses !== toolUses || transcriptId !== void 0 && prev?.transcriptId !== transcriptId || parentToolCallId !== void 0 && prev?.parentToolCallId !== parentToolCallId || startedAt !== void 0 && prev?.startedAt !== startedAt) && publishEngineAgentPanelEvent({
@@ -9414,7 +9537,7 @@ function projectFleetAgentRowsFor(sessionKey, rows3, nowMs2 = Date.now()) {
       continue;
     }
     (!prev || prev.settled || prev.absentReportedAtMs !== void 0 || // 行回来了:即使值未变也发一条,消费端据此撤掉 absent 标
-    prev.status !== status3 || prev.tokens !== knownTokens || toolUses !== void 0 && prev.toolUses !== toolUses || transcriptId !== void 0 && prev.transcriptId !== transcriptId || parentToolCallId !== void 0 && prev.parentToolCallId !== parentToolCallId || startedAt !== void 0 && prev.startedAt !== startedAt || cycleSeq !== void 0 && prev.cycleSeq !== cycleSeq || currentToolKey !== void 0 && prev.currentToolKey !== currentToolKey) && publishEngineAgentPanelEvent({
+    prev.status !== status3 || prev.tokens !== knownTokens || toolUses !== void 0 && prev.toolUses !== toolUses || transcriptId !== void 0 && prev.transcriptId !== transcriptId || parentToolCallId !== void 0 && prev.parentToolCallId !== parentToolCallId || startedAt !== void 0 && prev.startedAt !== startedAt || cycleSeq !== void 0 && prev.cycleSeq !== cycleSeq || currentToolKey !== void 0 && prev.currentToolKey !== currentToolKey) && (notePanelRowRunning(taskId), publishEngineAgentPanelEvent({
       kind: "fleet-row",
       taskId,
       ...row2.name ? { name: row2.name } : {},
@@ -9427,7 +9550,7 @@ function projectFleetAgentRowsFor(sessionKey, rows3, nowMs2 = Date.now()) {
       ...knownStartedAt !== void 0 ? { startedAt: knownStartedAt } : {},
       ...knownCycleSeq !== void 0 ? { cycleSeq: knownCycleSeq } : {},
       ...currentTool !== void 0 ? { currentTool } : {}
-    }), seenMap.set(taskId, {
+    })), seenMap.set(taskId, {
       status: status3,
       tokens: knownTokens,
       toolUses: toolUses !== void 0 ? toolUses : prev?.toolUses,
@@ -9461,6 +9584,7 @@ function projectFleetAgentRowsFor(sessionKey, rows3, nowMs2 = Date.now()) {
 var ABSENT_SETTLE_MS, SETTLED_RETENTION_MS, seen, init_fleetAgentPanelProjection = __esm({
   "node_modules/@sema-agent/client-core/dist/fleetAgentPanelProjection.js"() {
     init_engineAgentPanelStore();
+    init_panelRunningHistory();
     init_workflow();
     init_fleetProjection();
     init_sessionSlot();
@@ -10431,10 +10555,17 @@ var LEADER_RUN_STATUSES, LEADER_REJ_HEAD_DISPLAY_MAX, DETAIL_FILES_MAX, DETAIL_P
 function nonNegFinite(v2) {
   return typeof v2 == "number" && Number.isFinite(v2) && v2 >= 0 ? v2 : void 0;
 }
+function runResultHolder(r) {
+  let inner = r.result;
+  if (inner === null || typeof inner != "object" || Array.isArray(inner))
+    return r;
+  let o = inner;
+  return Object.hasOwn(o, "terminal") || Object.hasOwn(o, "status") || Object.hasOwn(o, "cancelContext") ? o : r;
+}
 function readRunCancelContext(record3) {
   if (record3 === null || typeof record3 != "object")
     return;
-  let r = record3, holder = r.result !== null && typeof r.result == "object" ? r.result : r;
+  let holder = runResultHolder(record3);
   if (!Object.hasOwn(holder, "cancelContext") || holder.cancelContext === void 0)
     return { kind: "not_reported" };
   let c3 = holder.cancelContext;
@@ -10454,7 +10585,7 @@ function readRunCancelContext(record3) {
 function classifyRunAbortCause(record3) {
   if (record3 === null || typeof record3 != "object")
     return { kind: "unknown" };
-  let r = record3, status3 = typeof r.status == "string" && r.status.length > 0 ? r.status : void 0, holder = r.result !== null && typeof r.result == "object" ? r.result : record3, read = readRunTerminal(holder);
+  let r = record3, status3 = typeof r.status == "string" && r.status.length > 0 ? r.status : void 0, read = readRunTerminal(runResultHolder(r));
   if (read !== null && read.kind === "failed") {
     if (read.code === RUN_CANCELLED_CODE) {
       let cc = readRunCancelContext(record3);
@@ -11061,7 +11192,7 @@ function eventToSdkMessage(ev, ctx) {
     //      臂上**还没有座位** ⇒ 这里是防御 raw 读(同 `label` / `model` 的既有姿势)。退役条件 =
     //      sdk 补上该位的当天,`run-compaction-boundary-projection-test.mjs` F10 行当场红逼复核。
     case "compacted": {
-      let raw2 = ev, attachedFiles = raw2.attachedFiles, seg = raw2.preserved_segment, firstKeptEntryId = typeof seg == "object" && seg !== null && !Array.isArray(seg) ? seg.firstKeptEntryId : void 0, clampedRatio = raw2.clampedRatio;
+      let raw2 = ev, freedTokens = typeof raw2.freedTokens == "number" && Number.isFinite(raw2.freedTokens) && raw2.freedTokens >= 0 ? raw2.freedTokens : void 0, attachedFiles = raw2.attachedFiles, seg = raw2.preserved_segment, firstKeptEntryId = typeof seg == "object" && seg !== null && !Array.isArray(seg) ? seg.firstKeptEntryId : void 0, clampedRatio = raw2.clampedRatio;
       return projected(stamp(ctx, {
         type: "system",
         subtype: "compact_boundary",
@@ -11073,7 +11204,8 @@ function eventToSdkMessage(ev, ctx) {
           trigger: typeof ev.trigger == "string" && ev.trigger.length > 0 ? ev.trigger : "auto",
           pre_tokens: ev.tokensBefore ?? 0,
           ...typeof firstKeptEntryId == "string" && firstKeptEntryId.length > 0 ? { _sema_preserved_segment: { firstKeptEntryId } } : {},
-          ...typeof clampedRatio == "number" && Number.isFinite(clampedRatio) ? { _sema_clamped_ratio: clampedRatio } : {}
+          ...typeof clampedRatio == "number" && Number.isFinite(clampedRatio) ? { _sema_clamped_ratio: clampedRatio } : {},
+          ...freedTokens !== void 0 ? { _sema_freed_tokens: freedTokens } : {}
         },
         ...Array.isArray(attachedFiles) && attachedFiles.length > 0 ? { attachedFiles } : {}
       }));
@@ -13055,11 +13187,11 @@ function toolNameKey(name) {
 function classifierDenyDisplay(toolName2, args) {
   let fallback = toolName2.length > 0 ? toolName2 : "tool", key = DISPLAY_ARG_KEY_BY_TOOL.get(toolNameKey(toolName2));
   if (key === void 0 || args === null || typeof args != "object")
-    return bounded(fallback);
+    return bounded2(fallback);
   let raw2 = args[key];
-  return typeof raw2 != "string" || raw2.trim().length === 0 ? bounded(fallback) : bounded(raw2);
+  return typeof raw2 != "string" || raw2.trim().length === 0 ? bounded2(fallback) : bounded2(raw2);
 }
-function bounded(s) {
+function bounded2(s) {
   if (s.length <= CLASSIFIER_DENY_DISPLAY_MAX)
     return s;
   let keep = CLASSIFIER_DENY_DISPLAY_MAX - 1, cut = s.slice(0, keep), last4 = cut.charCodeAt(cut.length - 1), next = s.charCodeAt(keep);
@@ -20490,6 +20622,25 @@ var DEFAULT_DENY_REASON, MAX_DENY_REASON_CHARS, PLAN_REVIEW_MODE_AFTER_WORDS, Hi
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/hitl/approvalOutcomeNote.js
+function nonEmpty4(v2) {
+  return typeof v2 == "string" && v2.length > 0 ? v2 : void 0;
+}
+function approvalOutcomeNoteOf(frame, outcome) {
+  let retracted = outcome.retracted === !0, refusal = outcome.respondRefusal, detail = retracted ? APPROVAL_NOTE_RETRACTED_DETAIL : outcome.editRefused === !0 ? APPROVAL_NOTE_EDIT_REFUSED_DETAIL : [nonEmpty4(refusal?.errorCode), nonEmpty4(refusal?.message)].filter((x3) => x3 !== void 0).join(" \xB7 ");
+  return {
+    approvalId: frame.approvalId,
+    settled: outcome.decision !== "unresolved",
+    ...retracted ? { retracted: !0 } : {},
+    ...detail.length > 0 ? { detail } : {}
+  };
+}
+var APPROVAL_NOTE_RETRACTED_DETAIL, APPROVAL_NOTE_EDIT_REFUSED_DETAIL, init_approvalOutcomeNote = __esm({
+  "node_modules/@sema-agent/client-core/dist/hitl/approvalOutcomeNote.js"() {
+    APPROVAL_NOTE_RETRACTED_DETAIL = "the card was retracted (this host no longer has a decision port for it)", APPROVAL_NOTE_EDIT_REFUSED_DETAIL = "edits are not accepted on this card";
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/hitl/gateIdentity.js
 function approvalCallKey(gatedCallId, taskId) {
   return gatedCallId ?? taskId;
@@ -25192,6 +25343,8 @@ __export(dist_exports, {
   ADAPTER_DIVERGENCES: () => ADAPTER_DIVERGENCES,
   AGENT_MEMORY_WORDS: () => AGENT_MEMORY_WORDS,
   AGENT_MESSAGE_TAG: () => AGENT_MESSAGE_TAG,
+  APPROVAL_NOTE_EDIT_REFUSED_DETAIL: () => APPROVAL_NOTE_EDIT_REFUSED_DETAIL,
+  APPROVAL_NOTE_RETRACTED_DETAIL: () => APPROVAL_NOTE_RETRACTED_DETAIL,
   ASK_ORIGIN_WORDS: () => ASK_ORIGIN_WORDS,
   ASK_PARK_GATE_KINDS: () => ASK_PARK_GATE_KINDS,
   ASK_PARK_ROW_POLL_MS: () => ASK_PARK_ROW_POLL_MS,
@@ -25566,6 +25719,7 @@ __export(dist_exports, {
   approvalCardPortFor: () => approvalCardPortFor,
   approvalCardPortMisses: () => approvalCardPortMisses,
   approvalCardPortMissesFor: () => approvalCardPortMissesFor,
+  approvalOutcomeNoteOf: () => approvalOutcomeNoteOf,
   approvalsStreamLiveDoctorDetail: () => approvalsStreamLiveDoctorDetail,
   armDetachCancel: () => armDetachCancel,
   armPlanReviewApproval: () => armPlanReviewApproval,
@@ -25861,6 +26015,7 @@ __export(dist_exports, {
   isLoopbackWireUrl: () => isLoopbackWireUrl,
   isModelOutputErrorRowText: () => isModelOutputErrorRowText,
   isModelOutputErrorText: () => isModelOutputErrorText,
+  isNewEngineAgentPanelCycle: () => isNewEngineAgentPanelCycle,
   isOutcomeUnknownRowText: () => isOutcomeUnknownRowText,
   isOwnEngineRun: () => isOwnEngineRun,
   isOwnWorkflowRun: () => isOwnWorkflowRun,
@@ -26424,6 +26579,7 @@ var init_dist = __esm({
     init_providerPresets2();
     init_hitlBridge();
     init_suspendedReopen();
+    init_approvalOutcomeNote();
     init_frameRouter();
     init_frameRouter();
     init_hitlHostSurface();
@@ -26590,12 +26746,13 @@ function publishEngineContextUsage(frame) {
   }, lastFrameSessionId = currentSessionIdOrNull3());
 }
 function noteEngineCompaction(record3) {
-  let preTokens = finiteOrUndefined(record3.preTokens), postTokens = finiteOrUndefined(record3.postTokens), triggerTokensBefore = finiteOrUndefined(record3.triggerTokensBefore), trigger = typeof record3.trigger == "string" && record3.trigger.length > 0 ? record3.trigger : void 0;
+  let preTokens = finiteOrUndefined(record3.preTokens), postTokens = finiteOrUndefined(record3.postTokens), triggerTokensBefore = finiteOrUndefined(record3.triggerTokensBefore), freedRaw = finiteOrUndefined(record3.freedTokens), freedTokens = freedRaw !== void 0 && freedRaw >= 0 ? freedRaw : void 0, trigger = typeof record3.trigger == "string" && record3.trigger.length > 0 ? record3.trigger : void 0;
   lastCompaction = {
     atMs: record3.atMs ?? Date.now(),
     ...preTokens !== void 0 ? { preTokens } : {},
     ...postTokens !== void 0 ? { postTokens } : {},
     ...triggerTokensBefore !== void 0 ? { triggerTokensBefore } : {},
+    ...freedTokens !== void 0 ? { freedTokens } : {},
     ...trigger !== void 0 ? { trigger } : {}
   }, lastCompactionSessionId = currentSessionIdOrNull3();
 }
@@ -27586,9 +27743,9 @@ function getSessionCronTasks() {
 function addSessionCronTask(task) {
   STATE.sessionCronTasks.push(task);
 }
-function removeSessionCronTasks(ids) {
-  if (ids.length === 0) return 0;
-  let idSet = new Set(ids), remaining = STATE.sessionCronTasks.filter((t2) => !idSet.has(t2.id)), removed = STATE.sessionCronTasks.length - remaining.length;
+function removeSessionCronTasks(ids2) {
+  if (ids2.length === 0) return 0;
+  let idSet = new Set(ids2), remaining = STATE.sessionCronTasks.filter((t2) => !idSet.has(t2.id)), removed = STATE.sessionCronTasks.length - remaining.length;
   return removed === 0 ? 0 : (STATE.sessionCronTasks = remaining, removed);
 }
 function setSessionTrustAccepted(accepted) {
@@ -39912,8 +40069,8 @@ function emoji() {
   return new RegExp(_emoji, "u");
 }
 function timeSource(args) {
-  let hhmm = "(?:[01]\\d|2[0-3]):[0-5]\\d";
-  return typeof args.precision == "number" ? args.precision === -1 ? `${hhmm}` : args.precision === 0 ? `${hhmm}:[0-5]\\d` : `${hhmm}:[0-5]\\d\\.\\d{${args.precision}}` : `${hhmm}(?::[0-5]\\d(?:\\.\\d+)?)?`;
+  let hhmm2 = "(?:[01]\\d|2[0-3]):[0-5]\\d";
+  return typeof args.precision == "number" ? args.precision === -1 ? `${hhmm2}` : args.precision === 0 ? `${hhmm2}:[0-5]\\d` : `${hhmm2}:[0-5]\\d\\.\\d{${args.precision}}` : `${hhmm2}(?::[0-5]\\d(?:\\.\\d+)?)?`;
 }
 function time(args) {
   return new RegExp(`^${timeSource(args)}$`);
@@ -41124,12 +41281,12 @@ var $ZodType, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, $ZodU
           return `shape[${k2}]._zod.run({ value: input[${k2}], issues: [] }, ctx)`;
         };
         doc.write("const input = payload.value;");
-        let ids = /* @__PURE__ */ Object.create(null), counter = 0;
+        let ids2 = /* @__PURE__ */ Object.create(null), counter = 0;
         for (let key of normalized.keys)
-          ids[key] = `key_${counter++}`;
+          ids2[key] = `key_${counter++}`;
         doc.write("const newResult = {};");
         for (let key of normalized.keys) {
-          let id = ids[key], k2 = esc(key), schema = shape[key], isOptionalIn = schema?._zod?.optin === "optional", isOptionalOut = schema?._zod?.optout === "optional";
+          let id = ids2[key], k2 = esc(key), schema = shape[key], isOptionalIn = schema?._zod?.optin === "optional", isOptionalOut = schema?._zod?.optout === "optional";
           doc.write(`const ${id} = ${parseStr(key)};`), isOptionalIn && isOptionalOut ? doc.write(`
         if (${id}.issues.length) {
           if (${k2} in input) {
@@ -77744,7 +77901,7 @@ __export(modelRoutingEnvPrecedence_exports, {
   modelRoutingEnvNote: () => modelRoutingEnvNote
 });
 function classifyModelRoutingEnv(env6, entryBaseUrl) {
-  let rawUrl = nonEmpty4(servedEndpointRawValue("openai-completions", env6)), provider = nonEmpty4(env6.MODEL_PROVIDER);
+  let rawUrl = nonEmpty5(servedEndpointRawValue("openai-completions", env6)), provider = nonEmpty5(env6.MODEL_PROVIDER);
   if (rawUrl === void 0 || provider === void 0) return { kind: "not-applicable" };
   let envEndpoint = normalizeEndpoint(rawUrl);
   if (envEndpoint === "") return { kind: "not-applicable" };
@@ -77766,12 +77923,12 @@ function modelRoutingEnvClause(env6, hop) {
   let v2 = classifyModelRoutingEnv(env6);
   return v2.kind !== "gateway-wins" ? null : providerNotDecidingClause(v2.provider);
 }
-var ANTHROPIC_ROUTE_PROVIDERS, GATEWAY_ROUTE_PROVIDERS, nonEmpty4, init_modelRoutingEnvPrecedence = __esm({
+var ANTHROPIC_ROUTE_PROVIDERS, GATEWAY_ROUTE_PROVIDERS, nonEmpty5, init_modelRoutingEnvPrecedence = __esm({
   "build-src/src/sema/modelRoutingEnvPrecedence.ts"() {
     init_untrustedDisplayText();
     init_displaySafeUrl();
     init_servedEndpointEnv();
-    ANTHROPIC_ROUTE_PROVIDERS = /* @__PURE__ */ new Set(["anthropic"]), GATEWAY_ROUTE_PROVIDERS = /* @__PURE__ */ new Set(["gateway", "vllm"]), nonEmpty4 = (v2) => typeof v2 == "string" && v2.trim().length > 0 ? v2.trim() : void 0;
+    ANTHROPIC_ROUTE_PROVIDERS = /* @__PURE__ */ new Set(["anthropic"]), GATEWAY_ROUTE_PROVIDERS = /* @__PURE__ */ new Set(["gateway", "vllm"]), nonEmpty5 = (v2) => typeof v2 == "string" && v2.trim().length > 0 ? v2.trim() : void 0;
   }
 });
 
@@ -77906,9 +78063,9 @@ function classifyAnthropicEnvRouting(env6, opts) {
   let catalogPresent = modelCatalogPresent(opts?.configLocalDir), own2 = opts?.ownModelConfig ?? hasOwnModelConfig(env6), CATALOG_WHY = "a model catalog (config.d/models.json) drives routing \u2014 the env override is ignored";
   if (own2) {
     if (catalogPresent) return { kind: "ignored", why: CATALOG_WHY };
-    let nonEmpty5 = (v2) => typeof v2 == "string" && v2.length > 0 ? v2 : void 0, explicitProvider = nonEmpty5(env6.MODEL_PROVIDER);
+    let nonEmpty6 = (v2) => typeof v2 == "string" && v2.length > 0 ? v2 : void 0, explicitProvider = nonEmpty6(env6.MODEL_PROVIDER);
     if (explicitProvider === "anthropic") return { kind: "honored", via: "explicit-anthropic-provider" };
-    let inferBaseUrl = baseUrl, inferCred = nonEmpty5(env6.ANTHROPIC_API_KEY) ?? authToken;
+    let inferBaseUrl = baseUrl, inferCred = nonEmpty6(env6.ANTHROPIC_API_KEY) ?? authToken;
     if (explicitProvider === void 0 && inferBaseUrl && inferCred)
       return { kind: "honored", via: "engine-inferred-anthropic" };
     if (explicitProvider !== void 0) {
@@ -90411,10 +90568,10 @@ function patchPresent(intended, onDisk) {
   return intended === onDisk;
 }
 function keyEntriesOnDisk(pool, err8) {
-  let ids = err8.missingKeyEntries ?? [];
-  if (ids.length === 0) return !0;
+  let ids2 = err8.missingKeyEntries ?? [];
+  if (ids2.length === 0) return !0;
   let env6 = readSettingsEnv();
-  return ids.every((id) => {
+  return ids2.every((id) => {
     let e = pool.find((p) => p.id === id);
     return !e?.apiKey || env6[keyEnvNameForEntry(id)] === e.apiKey;
   });
@@ -90595,13 +90752,13 @@ function mergeRenameErrors(stage1, stage2) {
 function poolWriteErrorNotice(error51, verb = "Saved") {
   let e = error51;
   if (!e.keyWriteOnly) return `Pool write failed: ${error51.message}`;
-  let ids = e.missingKeyEntries ?? [];
-  if (ids.length === 0)
+  let ids2 = e.missingKeyEntries ?? [];
+  if (ids2.length === 0)
     return `${verb}. A settings write failed (${error51.message}) \u2014 no API key was lost.`;
-  if (ids.length === 1)
-    return `${verb}, but the API key for "${ids[0]}" was not stored (${error51.message}). Open it in the Hub and set the key again.`;
-  let shown = ids.slice(0, 3).join(", ");
-  return `${verb}, but the API keys for ${ids.length} entries (${shown}${ids.length > 3 ? ", \u2026" : ""}) were not stored (${error51.message}). Open each one in the Hub and set its key again.`;
+  if (ids2.length === 1)
+    return `${verb}, but the API key for "${ids2[0]}" was not stored (${error51.message}). Open it in the Hub and set the key again.`;
+  let shown = ids2.slice(0, 3).join(", ");
+  return `${verb}, but the API keys for ${ids2.length} entries (${shown}${ids2.length > 3 ? ", \u2026" : ""}) were not stored (${error51.message}). Open each one in the Hub and set its key again.`;
 }
 function poolSaveFailureNotice(error51, renamedTo, failVerb) {
   let e = error51;
@@ -90911,10 +91068,10 @@ function readSemaAutoModeOverride(env6 = process.env, configHome = resolveConfig
   let enabled = !0;
   if (env6.SEMA_AUTO_MODE_ENABLED !== void 0 ? enabled = ENABLED_ENV_TRUE.has(env6.SEMA_AUTO_MODE_ENABLED.trim().toLowerCase()) : sj?.semaAutoModeEnabled !== void 0 && (enabled = sj.semaAutoModeEnabled === !0), enabled && allowModels === void 0)
     try {
-      let { readModelPool: readModelPool2 } = (init_modelChannels(), __toCommonJS(modelChannels_exports)), pool = readModelPool2(), ids = /* @__PURE__ */ new Set();
+      let { readModelPool: readModelPool2 } = (init_modelChannels(), __toCommonJS(modelChannels_exports)), pool = readModelPool2(), ids2 = /* @__PURE__ */ new Set();
       for (let e of pool)
-        e.id && ids.add(e.id), e.modelId && ids.add(e.modelId);
-      env6.MODEL_ID?.trim() && ids.add(env6.MODEL_ID.trim()), ids.size > 0 && (allowModels = [...ids]);
+        e.id && ids2.add(e.id), e.modelId && ids2.add(e.modelId);
+      env6.MODEL_ID?.trim() && ids2.add(env6.MODEL_ID.trim()), ids2.size > 0 && (allowModels = [...ids2]);
     } catch {
     }
   if (!enabled && allowModels === void 0) return;
@@ -126477,6 +126634,7 @@ function watchEngineContextFrames(events3) {
               preTokens: c3.tokensBefore,
               postTokens: c3.tokensAfter,
               triggerTokensBefore: c3.triggerTokensBefore,
+              freedTokens: c3.freedTokens,
               trigger: c3.trigger
             })
           ).catch(() => {
@@ -154034,7 +154192,7 @@ async function deliverToRunningAgentLane(core, id, access7, notification, opts)
     return { ok: !1, reason: "not_found" };
   if (handle2.status !== "running")
     return { ok: !1, reason: "not_running" };
-  let bounded2 = (p, fallback, onTimeout) => new Promise((resolve59) => {
+  let bounded3 = (p, fallback, onTimeout) => new Promise((resolve59) => {
     let t2 = setTimeout(() => {
       try {
         onTimeout?.();
@@ -154052,12 +154210,12 @@ async function deliverToRunningAgentLane(core, id, access7, notification, opts)
     if (handle2.channelState !== "attaching")
       return { ok: !1, reason: "no_channel" };
     let q2 = handle2.preAttachQueue ??= [];
-    return q2.length >= 8 ? { ok: !1, reason: "queue_full" } : bounded2(new Promise((resolve59) => {
+    return q2.length >= 8 ? { ok: !1, reason: "queue_full" } : bounded3(new Promise((resolve59) => {
       q2.push([notification, opts, resolve59]);
     }), { ok: !0, disposition: "pending" });
   }
   let detachOnTimeout;
-  return await bounded2(new Promise((resolve59) => {
+  return await bounded3(new Promise((resolve59) => {
     let inflight4 = handle2.inFlightDirect ??= /* @__PURE__ */ new Set(), settleOnce = (r) => {
       inflight4.has(settleOnce) && (inflight4.delete(settleOnce), resolve59(r));
     };
@@ -184484,13 +184642,13 @@ var caPath, builtinRootBodies, init_tlsTrust = __esm({
 function nearestListed(body, modelId) {
   let data = body?.data;
   if (!Array.isArray(data)) return;
-  let ids = data.map((m2) => m2?.id).filter((x3) => typeof x3 == "string");
-  if (ids.includes(modelId)) return;
+  let ids2 = data.map((m2) => m2?.id).filter((x3) => typeof x3 == "string");
+  if (ids2.includes(modelId)) return;
   let norm3 = (s) => s.toLowerCase().replace(/[^a-z0-9]+/g, ""), target = norm3(modelId);
   for (let len of [6, 5, 4]) {
     let stem = target.slice(0, len);
     if (stem.length < len) continue;
-    let hit = ids.find((i) => norm3(i).startsWith(stem));
+    let hit = ids2.find((i) => norm3(i).startsWith(stem));
     if (hit) return hit;
   }
 }
@@ -222584,7 +222742,7 @@ async function resolveDependencyClosure(rootId, lookup, alreadyEnabled, allowedC
   return err8 || { ok: !0, closure };
 }
 async function expandClosureFromManifestDeps(opts) {
-  let ids = [], skipped = [], seen2 = /* @__PURE__ */ new Set();
+  let ids2 = [], skipped = [], seen2 = /* @__PURE__ */ new Set();
   for (let rawDep of opts.manifestDeps ?? []) {
     let dep = qualifyDependency(rawDep, opts.declaringId);
     if (seen2.has(dep) || opts.closureSet.has(dep) || opts.alreadyEnabled.has(dep)) continue;
@@ -222612,9 +222770,9 @@ async function expandClosureFromManifestDeps(opts) {
       });
       continue;
     }
-    seen2.add(dep), ids.push(dep);
+    seen2.add(dep), ids2.push(dep);
   }
-  return { ok: !0, ids, skipped };
+  return { ok: !0, ids: ids2, skipped };
 }
 function formatSkippedManifestDependency(s) {
   let depMkt = parsePluginIdentifier(s.dependency).marketplace;
@@ -224726,12 +224884,12 @@ function estimateMessageTokens(messages) {
   return Math.ceil(totalTokens * (4 / 3));
 }
 function collectCompactableToolIds(messages) {
-  let ids = [];
+  let ids2 = [];
   for (let message of messages)
     if (message.type === "assistant" && Array.isArray(message.message.content))
       for (let block2 of message.message.content)
-        block2.type === "tool_use" && COMPACTABLE_TOOLS2.has(block2.name) && ids.push(block2.id);
-  return ids;
+        block2.type === "tool_use" && COMPACTABLE_TOOLS2.has(block2.name) && ids2.push(block2.id);
+  return ids2;
 }
 function isMainThreadSource(querySource) {
   return !querySource || querySource.startsWith("repl_main_thread");
@@ -232104,7 +232262,7 @@ function stripUnderlineAnsi(content) {
 }
 var import_compiler_runtime22, React15, import_jsx_runtime26, MAX_JSON_FORMAT_LENGTH, URL_IN_JSON, init_OutputLine = __esm({
   "build-src/src/components/shell/OutputLine.tsx"() {
-    import_compiler_runtime22 = __toESM(require_compiler_runtime()), React15 = __toESM(require_react());
+    import_compiler_runtime22 = __toESM(require_compiler_runtime(), 1), React15 = __toESM(require_react(), 1);
     init_useTerminalSize();
     init_ink2();
     init_hyperlink();
@@ -232113,7 +232271,7 @@ var import_compiler_runtime22, React15, import_jsx_runtime26, MAX_JSON_FORMAT_LE
     init_MessageResponse();
     init_messageActions();
     init_ExpandShellOutputContext();
-    import_jsx_runtime26 = __toESM(require_jsx_runtime());
+    import_jsx_runtime26 = __toESM(require_jsx_runtime(), 1);
     MAX_JSON_FORMAT_LENGTH = 1e4;
     URL_IN_JSON = /https?:\/\/[^\s"'<>\\]+/g;
   }
@@ -251984,17 +252142,28 @@ function markApprovalCardGateRow(toolCallId, row2, streamEpoch) {
   let handle2 = liveApprovalCards.get(born.callKey);
   return handle2 === void 0 ? !1 : handle2.windowClosed(row2 === "parked" ? "parked-frame" : "auto-denied");
 }
+function noteHumanApprovalCardDecision(callKey) {
+  for (humanCardDecisions.delete(callKey), humanCardDecisions.add(callKey); humanCardDecisions.size > HUMAN_DECISION_MAX; ) {
+    let oldest = humanCardDecisions.values().next().value;
+    if (oldest === void 0) break;
+    humanCardDecisions.delete(oldest);
+  }
+}
+function takeHumanApprovalCardDecision(callKey) {
+  return humanCardDecisions.delete(callKey);
+}
 function surfaceToolEndAutoDenied(ev, streamEpoch) {
   let r = resolveToolEndAutoDenied(ev, streamEpoch);
   if (r.kind !== "late") return r.kind;
   let [content, level] = r.row === "parked" ? [approvalMovedToDurableQueueLateRow(r.toolName), "info"] : [approvalAutoDeniedRow(r.toolName), "warning"];
   return surfaceLateDecideOutcome(content, level) ? "late" : "late-unsurfaced";
 }
-var liveApprovalCards, callKeyByToolCallId, SETTLED_CARD_MAX, settledCardByToolCallId, settledKey, terminalSeenByToolCallId, init_liveApprovalCardHandles = __esm({
+var liveApprovalCards, callKeyByToolCallId, SETTLED_CARD_MAX, settledCardByToolCallId, settledKey, terminalSeenByToolCallId, HUMAN_DECISION_MAX, humanCardDecisions, init_liveApprovalCardHandles = __esm({
   "build-src/src/sema/liveApprovalCardHandles.ts"() {
     init_askParkExpiry();
     init_liveSessionStore();
     liveApprovalCards = /* @__PURE__ */ new Map(), callKeyByToolCallId = /* @__PURE__ */ new Map(), SETTLED_CARD_MAX = 64, settledCardByToolCallId = /* @__PURE__ */ new Map(), settledKey = (epoch, toolCallId) => `${String(epoch)}:${toolCallId}`, terminalSeenByToolCallId = /* @__PURE__ */ new Set();
+    HUMAN_DECISION_MAX = 256, humanCardDecisions = /* @__PURE__ */ new Set();
   }
 });
 
@@ -329622,15 +329791,15 @@ async function bashToolHasPermission(input, context3, getCommandSubcommandPrefix
     if (permissionResult.behavior === "ask" || permissionResult.behavior === "passthrough") {
       let updates = "suggestions" in permissionResult ? permissionResult.suggestions : void 0, rules = extractRules(updates);
       for (let rule of rules) {
-        let ruleKey = permissionRuleValueToString(rule);
-        collectedRules.set(ruleKey, rule);
+        let ruleKey2 = permissionRuleValueToString(rule);
+        collectedRules.set(ruleKey2, rule);
       }
       if (permissionResult.behavior === "ask" && rules.length === 0 && permissionResult.decisionReason?.type !== "rule")
         for (let rule of extractRules(
           suggestionForExactCommand3(subcommand)
         )) {
-          let ruleKey = permissionRuleValueToString(rule);
-          collectedRules.set(ruleKey, rule);
+          let ruleKey2 = permissionRuleValueToString(rule);
+          collectedRules.set(ruleKey2, rule);
         }
     }
   let decisionReason = {
@@ -330563,10 +330732,10 @@ async function addCronTask(cron, prompt, recurring, durable, agentId) {
     await writeCronTasks([...current6, task], root2);
   }), id) : (addSessionCronTask({ ...task, ...agentId ? { agentId } : {} }), id);
 }
-async function removeCronTasks(ids, dir) {
-  if (ids.length === 0 || dir === void 0 && removeSessionCronTasks(ids) === ids.length)
+async function removeCronTasks(ids2, dir) {
+  if (ids2.length === 0 || dir === void 0 && removeSessionCronTasks(ids2) === ids2.length)
     return;
-  let idSet = new Set(ids);
+  let idSet = new Set(ids2);
   await withCronFileLock(dir, async (current6, root2) => {
     let remaining = current6.filter((t2) => !idSet.has(t2.id));
     remaining.length !== current6.length && await writeCronTasks(remaining, root2);
@@ -332092,10 +332261,10 @@ function getToolUseIdsFromMessage(msg) {
   }).filter(Boolean) : [];
 }
 function getToolUseIdsFromCollapsedGroup(message) {
-  let ids = [];
+  let ids2 = [];
   for (let msg of message.messages)
-    ids.push(...getToolUseIdsFromMessage(msg));
-  return ids;
+    ids2.push(...getToolUseIdsFromMessage(msg));
+  return ids2;
 }
 function hasAnyToolInProgress(message, inProgressToolUseIDs) {
   return getToolUseIdsFromCollapsedGroup(message).some(
@@ -358693,8 +358862,8 @@ function takeSuspendedAskRequeueBudget(approvalId, max2) {
 function forgetSuspendedAsk(approvalId) {
   claimed.delete(approvalId), decided.delete(approvalId), requeueUsed.delete(approvalId), submitting.delete(approvalId), seenInSnapshot.delete(approvalId);
 }
-function noteSuspendedAsksListed(ids) {
-  for (let id of ids) boundedAdd(seenInSnapshot, id);
+function noteSuspendedAsksListed(ids2) {
+  for (let id of ids2) boundedAdd(seenInSnapshot, id);
 }
 function pruneVanishedSuspendedAsks(liveIds) {
   let n2 = 0;
@@ -384245,12 +384414,12 @@ function resolveStopTargetByName(query2, appState) {
     tasks3
   ), namedExact = resolveNamedAgent((n2) => n2 === query2, appState);
   if (teammateExact.status !== "not_found" && namedExact) {
-    let ids = teammateExact.status === "found" ? [
+    let ids2 = teammateExact.status === "found" ? [
       teammateExact.task.identity?.agentId ?? teammateExact.taskId
     ] : teammateExact.candidates;
     return {
       status: "ambiguous",
-      message: teammateVsNamedAgentMessage(query2, ids, namedExact.taskId)
+      message: teammateVsNamedAgentMessage(query2, ids2, namedExact.taskId)
     };
   }
   if (teammateExact.status === "ambiguous")
@@ -384271,12 +384440,12 @@ function resolveStopTargetByName(query2, appState) {
     tasks3
   ), namedNorm = resolveNamedAgent((n2) => normalizeAgentName2(n2) === norm3, appState);
   if (teammateNorm.status !== "not_found" && namedNorm) {
-    let ids = teammateNorm.status === "found" ? [
+    let ids2 = teammateNorm.status === "found" ? [
       teammateNorm.task.identity?.agentId ?? teammateNorm.taskId
     ] : teammateNorm.candidates;
     return {
       status: "ambiguous",
-      message: teammateVsNamedAgentMessage(query2, ids, namedNorm.taskId)
+      message: teammateVsNamedAgentMessage(query2, ids2, namedNorm.taskId)
     };
   }
   return teammateNorm.status === "ambiguous" ? {
@@ -394558,6 +394727,48 @@ var SUBAGENT_OBSERVATION_EXEMPT_NAMES, WORKFLOW_ACCEPTED_EXEMPT_NAMES, latchedSe
   }
 });
 
+// build-src/src/sema/midTurnRuleNotice.ts
+function noteStampSentForRun(ruleKeys) {
+  lastSentRuleKeys = [...ruleKeys];
+}
+function noteRunStreamStarted() {
+  runStreamDepth += 1;
+}
+function noteRunStreamSettled() {
+  runStreamDepth > 0 && (runStreamDepth -= 1);
+}
+function ruleKey(behavior, rule) {
+  return `${behavior}:${rule}`;
+}
+function rulesMissFromInflightStamp(behavior, rules) {
+  if (runStreamDepth <= 0 || lastSentRuleKeys === void 0) return !1;
+  let sent = new Set(lastSentRuleKeys);
+  return rules.some((r) => !sent.has(ruleKey(behavior, r)));
+}
+function describeRuleAppliesNextTurn(behavior, rules) {
+  let shown = rules.slice(0, 5).map((r) => JSON.stringify(r)).join(", "), more = rules.length > 5 ? ` (+${String(rules.length - 5)} more)` : "";
+  return `Added ${String(rules.length)} ${behavior} rule(s): ${shown}${more} \u2014 this rule applies from your next turn; the turn that is running now still uses the rules it started with.`;
+}
+function noteRestrictionRulesAdded(behavior, rules) {
+  try {
+    if (rules.length === 0 || !rulesMissFromInflightStamp(behavior, rules)) return;
+    let text2 = describeRuleAppliesNextTurn(behavior, rules);
+    surfaceTranscriptSystemNotice(text2, "warning") || process.stderr.write(`[sema] ${text2}
+`);
+  } catch (e) {
+    logForDebugging(
+      `[sema][mid-turn-rule-notice] surface failed: ${e instanceof Error ? e.message : String(e)}`
+    );
+  }
+}
+var lastSentRuleKeys, runStreamDepth, init_midTurnRuleNotice = __esm({
+  "build-src/src/sema/midTurnRuleNotice.ts"() {
+    init_debug();
+    init_transcriptSystemNotice();
+    runStreamDepth = 0;
+  }
+});
+
 // build-src/src/sema/hooksWireCaps.ts
 var hooksWireCaps_exports = {};
 __export(hooksWireCaps_exports, {
@@ -400136,6 +400347,7 @@ async function* query(params) {
     }
   noteEngineTurnStart();
   let setInProgress = params.toolUseContext?.setInProgressToolUseIDs, engineOpenToolIds = /* @__PURE__ */ new Set(), foregroundRunRegistered = null, semaQuotaDeniedThisTurn = !1, listenedRuns = /* @__PURE__ */ new Set();
+  noteRunStreamStarted();
   try {
     let sessionId = req2.sessionId ?? mockClientIds.sessionId;
     try {
@@ -400544,7 +400756,7 @@ ${notifSupplement}` : baseErrorContent
     }
     return void 0;
   } finally {
-    if (publishEngineAgentPanelEvent({ kind: "sweep" }), semaAutoResumeStore && !semaQuotaDeniedThisTurn && isMainLaneQuerySource(params.querySource) && !isBackgroundJournalSuppressed())
+    if (noteRunStreamSettled(), publishEngineAgentPanelEvent({ kind: "sweep" }), semaAutoResumeStore && !semaQuotaDeniedThisTurn && isMainLaneQuerySource(params.querySource) && !isBackgroundJournalSuppressed())
       try {
         semaAutoResumeStore.noteUsageLimitAutoResumeTurnCompleted();
       } catch {
@@ -400980,6 +401192,7 @@ var transcriptUsageDriveSeq, BG_TEAR_MAX_RESENDS, BG_RECOVERY_WAIT_MS, DRAINING_
     init_dist();
     init_deferSessionExemption();
     init_debug();
+    init_midTurnRuleNotice();
     init_hooksWireCaps2();
     init_dist();
     init_intl();
@@ -403235,10 +403448,10 @@ function getToolResultIds(message) {
   let content = message.message.content;
   if (!Array.isArray(content))
     return [];
-  let ids = [];
+  let ids2 = [];
   for (let block2 of content)
-    block2.type === "tool_result" && ids.push(block2.tool_use_id);
-  return ids;
+    block2.type === "tool_result" && ids2.push(block2.tool_use_id);
+  return ids2;
 }
 function hasToolUseWithIds(message, toolUseIds) {
   if (message.type !== "assistant")
@@ -406092,8 +406305,8 @@ function isValidImagePaste(c3) {
 function getImagePasteIds(pastedContents) {
   if (!pastedContents)
     return;
-  let ids = Object.values(pastedContents).filter(isValidImagePaste).map((c3) => c3.id);
-  return ids.length > 0 ? ids : void 0;
+  let ids2 = Object.values(pastedContents).filter(isValidImagePaste).map((c3) => c3.id);
+  return ids2.length > 0 ? ids2 : void 0;
 }
 var init_textInputTypes = __esm({
   "build-src/src/types/textInputTypes.ts"() {
@@ -425053,7 +425266,7 @@ function applyPermissionUpdate(context3, update2) {
       );
       logForDebugging(
         `Applying permission update: Adding ${update2.rules.length} ${update2.behavior} rule(s) to destination '${update2.destination}': ${jsonStringify(ruleStrings)}`
-      );
+      ), update2.behavior !== "allow" && noteRestrictionRulesAdded(update2.behavior, ruleStrings);
       let ruleKind = update2.behavior === "allow" ? "alwaysAllowRules" : update2.behavior === "deny" ? "alwaysDenyRules" : "alwaysAskRules";
       return {
         ...context3,
@@ -425290,6 +425503,7 @@ var init_PermissionUpdate = __esm({
     init_filesystem();
     init_permissionRuleParser();
     init_permissionsLoader();
+    init_midTurnRuleNotice();
   }
 });
 
@@ -430063,20 +430277,20 @@ var sema_brand_default, init_sema_brand = __esm({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.123",
+        version: "1.0.124",
         notes: [
-          "Bundled engine 7.88.2 (core 7.23.5), client runtime 0.74.3, client SDK 9.8.1 and settings schema 3.0.0. /doctor and the engine line report 7.88.2.",
-          "A background subagent's approval card is withdrawn when the session, the engine or the credentials change, and withdrawing it no longer sends a decision on your behalf. An approval whose answer never reached the engine comes back on the next update instead of after two.",
-          "A background agent that starts a new round now shows that round: its status, timer and counters move together, and a late ending from the previous round no longer closes it. When the engine says why it removed an agent, the panel's cleanup line says so. The same agent no longer shows up as two rows.",
-          "Credentials that a remote echoes back no longer reach the terminal, the streamed output or the saved transcript, including passwords with punctuation and short values. On engine 7.88 and later a gateway URL that carries credentials in its userinfo stops the engine from starting, and sema shows that refusal by name without printing the credentials. 1.0.122 covered the interactive screen, the -p result frame and stderr; the -p transcript and stream-json frames, and punctuated or short secrets, are covered from this version.",
-          "Approving a plan no longer brings a second card even when the engine takes a while to resume.",
-          "The workflow list now says why a failed run failed.",
-          "A read-root suggestion that names a single file no longer tells you to add it as a directory.",
-          "mcp list and mcp get no longer print a password that the server echoed back."
+          "Bundled engine 7.89.0 (core 7.23.5) and client runtime 0.74.5. /doctor and the engine line report 7.89.0.",
+          "Permission rules you add during a session with /permissions now reach the engine on your next turn. When a run is in progress, sema says the new rule applies from the next turn; when settings cannot be re-read, sema says so and /doctor shows how old the settings in use are.",
+          "A background subagent's approval card comes back after every failed delivery when you answered it, so the request never loses its card while it is still waiting on the engine. Automatic decisions keep a bounded retry.",
+          "The /context compaction line shows the number of tokens the engine measured as freed, or says it was not reported. It no longer subtracts two counters that are not comparable.",
+          "After reattaching to a session, the agent panel no longer shows completed rows for agents this session never saw running.",
+          "The footer count of subagent approval requests waiting on you shows a dash when the engine's approval list cannot be read, instead of keeping a stale number.",
+          "Cloud resource uploads detect credential-shaped values with the same rules the engine uses.",
+          "Engine 7.89 refuses to start when a model route URL in your environment cannot be parsed, including a stale ANTHROPIC_BASE_URL you no longer use. sema shows the refusal and names the variable; unset it or fix it to start."
         ]
       },
-      productVersion: "1.0.123",
-      announcement: "sema 1.0.123 \u2014 engine 7.88.2 pickup (core 7.23.5), client runtime 0.74.3, client SDK 9.8.1, settings schema 3.0.0. Background subagent approval cards are withdrawn without deciding for you; a revived agent shows its new round; credentials echoed by a remote stay out of the transcript and streamed output; a gateway URL with credentials now stops the engine at startup; approving a plan brings no second card; the workflow list says why a run failed.",
+      productVersion: "1.0.124",
+      announcement: "sema 1.0.124 \u2014 engine 7.89.0 pickup (core 7.23.5), client runtime 0.74.5. Permission rules added during a session now reach the engine on your next turn, with a notice when a run is in progress; a background subagent's approval card comes back after every failed delivery you answered; /context shows the tokens the engine measured as freed; no ghost completed rows after reattaching; a dash instead of a stale count when the approval list cannot be read.",
       version: "1.0.91"
     };
   }
@@ -435642,6 +435856,9 @@ function modelBadge(model) {
 function autocompactSourceOf(data) {
   return data.autocompactSource ?? "auto";
 }
+function freedTail(freedTokens) {
+  return freedTokens === void 0 ? " \xB7 freed: not reported by the engine" : ` \xB7 freed ${String(freedTokens)} ${freedTokens === 1 ? "token" : "tokens"}`;
+}
 function localStamp(atMs) {
   let d4 = new Date(atMs), p2 = (n2) => String(n2).padStart(2, "0");
   return `${p2(d4.getMonth() + 1)}-${p2(d4.getDate())} ${p2(d4.getHours())}:${p2(d4.getMinutes())}:${p2(d4.getSeconds())}`;
@@ -435649,12 +435866,12 @@ function localStamp(atMs) {
 function lastCompactionLine(data) {
   let rec = data._sema_lastCompaction;
   if (rec === void 0 || !Number.isFinite(rec.atMs)) return null;
-  let at = localStamp(rec.atMs);
+  let at = localStamp(rec.atMs), freed = freedTail(rec.freedTokens);
   if (rec.triggerTokensBefore !== void 0 && rec.postTokens !== void 0) {
-    let shrank = rec.postTokens < rec.triggerTokensBefore, beforeText = formatTokens(rec.triggerTokensBefore), afterText = formatTokens(rec.postTokens), tail = shrank ? beforeText === afterText ? ` (shrank by ${rec.triggerTokensBefore - rec.postTokens} tokens \u2014 less than this display's precision)` : "" : " (context did not shrink)";
-    return `Last compaction seen at ${at} \xB7 ${beforeText} \u2192 ${afterText}` + tail;
+    let shrank = rec.postTokens < rec.triggerTokensBefore, beforeText = formatTokens(rec.triggerTokensBefore), afterText = formatTokens(rec.postTokens), tail = shrank ? beforeText === afterText ? " (shrank by less than this display's precision)" : "" : " (context did not shrink)";
+    return `Last compaction seen at ${at} \xB7 ${beforeText} \u2192 ${afterText}` + tail + freed;
   }
-  return rec.preTokens !== void 0 && rec.postTokens !== void 0 ? `Last compaction seen at ${at} \xB7 before ${formatTokens(rec.preTokens)} \xB7 after ${formatTokens(rec.postTokens)} (different scales \u2014 not a before/after delta)` : rec.preTokens !== void 0 ? `Last compaction seen at ${at} \xB7 before ${formatTokens(rec.preTokens)}` : rec.postTokens !== void 0 ? `Last compaction seen at ${at} \xB7 after ${formatTokens(rec.postTokens)}` : `Last compaction seen at ${at}`;
+  return rec.preTokens !== void 0 && rec.postTokens !== void 0 ? `Last compaction seen at ${at} \xB7 before ${formatTokens(rec.preTokens)} \xB7 after ${formatTokens(rec.postTokens)} (different scales \u2014 not a before/after delta)` + freed : rec.preTokens !== void 0 ? `Last compaction seen at ${at} \xB7 before ${formatTokens(rec.preTokens)}` + freed : rec.postTokens !== void 0 ? `Last compaction seen at ${at} \xB7 after ${formatTokens(rec.postTokens)}` + freed : `Last compaction seen at ${at}` + freed;
 }
 function autocompactBufferSourceLine(data, bufferRowPresent) {
   return !bufferRowPresent || data._sema_autoCompactThresholdSource !== "engine" ? null : "Autocompact buffer = context window \u2212 the engine's compaction threshold (context_usage.compactAtTokens) \u2014 on a small context window it is the engine's policy, not the shell, that decides how much is reserved";
@@ -457355,20 +457572,20 @@ var require_sema_brand = __commonJS({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.123",
+        version: "1.0.124",
         notes: [
-          "Bundled engine 7.88.2 (core 7.23.5), client runtime 0.74.3, client SDK 9.8.1 and settings schema 3.0.0. /doctor and the engine line report 7.88.2.",
-          "A background subagent's approval card is withdrawn when the session, the engine or the credentials change, and withdrawing it no longer sends a decision on your behalf. An approval whose answer never reached the engine comes back on the next update instead of after two.",
-          "A background agent that starts a new round now shows that round: its status, timer and counters move together, and a late ending from the previous round no longer closes it. When the engine says why it removed an agent, the panel's cleanup line says so. The same agent no longer shows up as two rows.",
-          "Credentials that a remote echoes back no longer reach the terminal, the streamed output or the saved transcript, including passwords with punctuation and short values. On engine 7.88 and later a gateway URL that carries credentials in its userinfo stops the engine from starting, and sema shows that refusal by name without printing the credentials. 1.0.122 covered the interactive screen, the -p result frame and stderr; the -p transcript and stream-json frames, and punctuated or short secrets, are covered from this version.",
-          "Approving a plan no longer brings a second card even when the engine takes a while to resume.",
-          "The workflow list now says why a failed run failed.",
-          "A read-root suggestion that names a single file no longer tells you to add it as a directory.",
-          "mcp list and mcp get no longer print a password that the server echoed back."
+          "Bundled engine 7.89.0 (core 7.23.5) and client runtime 0.74.5. /doctor and the engine line report 7.89.0.",
+          "Permission rules you add during a session with /permissions now reach the engine on your next turn. When a run is in progress, sema says the new rule applies from the next turn; when settings cannot be re-read, sema says so and /doctor shows how old the settings in use are.",
+          "A background subagent's approval card comes back after every failed delivery when you answered it, so the request never loses its card while it is still waiting on the engine. Automatic decisions keep a bounded retry.",
+          "The /context compaction line shows the number of tokens the engine measured as freed, or says it was not reported. It no longer subtracts two counters that are not comparable.",
+          "After reattaching to a session, the agent panel no longer shows completed rows for agents this session never saw running.",
+          "The footer count of subagent approval requests waiting on you shows a dash when the engine's approval list cannot be read, instead of keeping a stale number.",
+          "Cloud resource uploads detect credential-shaped values with the same rules the engine uses.",
+          "Engine 7.89 refuses to start when a model route URL in your environment cannot be parsed, including a stale ANTHROPIC_BASE_URL you no longer use. sema shows the refusal and names the variable; unset it or fix it to start."
         ]
       },
-      productVersion: "1.0.123",
-      announcement: "sema 1.0.123 \u2014 engine 7.88.2 pickup (core 7.23.5), client runtime 0.74.3, client SDK 9.8.1, settings schema 3.0.0. Background subagent approval cards are withdrawn without deciding for you; a revived agent shows its new round; credentials echoed by a remote stay out of the transcript and streamed output; a gateway URL with credentials now stops the engine at startup; approving a plan brings no second card; the workflow list says why a run failed.",
+      productVersion: "1.0.124",
+      announcement: "sema 1.0.124 \u2014 engine 7.89.0 pickup (core 7.23.5), client runtime 0.74.5. Permission rules added during a session now reach the engine on your next turn, with a notice when a run is in progress; a background subagent's approval card comes back after every failed delivery you answered; /context shows the tokens the engine measured as freed; no ghost completed rows after reattaching; a dash instead of a stale count when the approval list cannot be read.",
       version: "1.0.91"
     };
   }
@@ -467914,15 +468131,15 @@ function PermissionRuleList(t0) {
       }
       return 0;
     }), lowerQuery = query2.toLowerCase();
-    for (let ruleKey of sortedRuleKeys) {
-      let rule_2 = rulesByKey.get(ruleKey);
+    for (let ruleKey2 of sortedRuleKeys) {
+      let rule_2 = rulesByKey.get(ruleKey2);
       if (rule_2) {
         let ruleString = permissionRuleValueToString(rule_2.ruleValue);
         if (query2 && !ruleString.toLowerCase().includes(lowerQuery))
           continue;
         options.push({
           label: ruleString,
-          value: ruleKey
+          value: ruleKey2
         });
       }
     }
@@ -470714,15 +470931,15 @@ function PluginList({
 }) {
   let errors2 = useAppState((s) => s.plugins.errors), enabledPlugins = useAppState((s) => s.plugins.enabled), disabledPlugins = useAppState((s) => s.plugins.disabled);
   return (0, import_react190.useEffect)(() => {
-    let v2 = loadInstalledPluginsV2(), ids = Object.keys(v2.plugins).sort();
-    if (ids.length === 0) {
+    let v2 = loadInstalledPluginsV2(), ids2 = Object.keys(v2.plugins).sort();
+    if (ids2.length === 0) {
       onComplete(
         "No plugins installed. Use `/plugin install` to install a plugin."
       );
       return;
     }
     let enabledScopes = getPluginEditableScopes(), loadedEnabledSources = new Set(enabledPlugins.map((p) => p.source)), lines = ["Installed plugins:"], shown = 0;
-    for (let id of ids) {
+    for (let id of ids2) {
       let name = id.split("@")[0] ?? id, isEnabled3 = enabledScopes.has(id);
       if (filter2 !== void 0 && filter2 === "enabled" !== isEnabled3) continue;
       let hasError = errors2.some(
@@ -480387,12 +480604,12 @@ function isLoggableMessage(m2) {
   return m2.type === "progress" ? !1 : m2.type === "attachment" && getUserType() !== "ant" ? !!(m2.attachment.type === "hook_additional_context" && isEnvTruthy(process.env.SEMA_CODE_SAVE_HOOK_ADDITIONAL_CONTEXT)) : !0;
 }
 function collectReplIds(messages) {
-  let ids = /* @__PURE__ */ new Set();
+  let ids2 = /* @__PURE__ */ new Set();
   for (let m2 of messages)
     if (m2.type === "assistant" && Array.isArray(m2.message.content))
       for (let b3 of m2.message.content)
-        b3.type === "tool_use" && b3.name === REPL_TOOL_NAME && ids.add(b3.id);
-  return ids;
+        b3.type === "tool_use" && b3.name === REPL_TOOL_NAME && ids2.add(b3.id);
+  return ids2;
 }
 function transformMessagesForExternalTranscript(messages, replIds) {
   return messages.flatMap((m2) => {
@@ -483813,8 +484030,8 @@ function resolveEffective() {
   return resolveEffectiveSettings(consume88Layers());
 }
 function resolveSemaConfigWithEffective(opts) {
-  let eff = resolveEffectiveSettings(consume88Layers());
-  return { effective: eff, config: toEffectiveConfig(eff, opts) };
+  let layers2 = consume88Layers(), eff = resolveEffectiveSettings(layers2);
+  return { effective: eff, config: toEffectiveConfig(eff, opts), sources: layers2.map((l3) => l3.source) };
 }
 var init_settings5 = __esm({
   "build-src/src/sema/settings/index.ts"() {
@@ -484828,7 +485045,7 @@ function shellApprovalCardPort(req2) {
   let tool = lookup.kind === "tool" ? lookup.tool : genericGateTool(req2.toolName), { callKey, signal } = req2, askDeadlineMs = readAskDeadlineMs(req2) ?? readParkRowDeadline(req2.callKey);
   return new Promise((resolve59) => {
     let selectedPersistRule, selectedPersistRuleBatchOfferIndex, selectedPersistRuleEdited, windowClosedAtMs, lateApproveConfirmedOnce = !1, lateApproveConfirmShown = !1, stagedPermissionUpdates = [], lateDecideWatchdogTimer, settled2 = !1, saidWindowClosed = !1, bornEpoch = getLiveSessionEpoch(), settle3 = (o) => {
-      settled2 || (settled2 = !0, signal?.removeEventListener("abort", onAbortSignal), askWindowTimer !== void 0 && clearTimeout(askWindowTimer), askBackstopTimer !== void 0 && clearTimeout(askBackstopTimer), lateDecideWatchdogTimer !== void 0 && clearTimeout(lateDecideWatchdogTimer), liveApprovalCards.delete(callKey), forgetApprovalCardToolCallId(req2.toolCallId, callKey, bornEpoch, saidWindowClosed ? req2.toolName : void 0), journalGateResolved(callKey), resolve59(o));
+      settled2 || (settled2 = !0, signal?.removeEventListener("abort", onAbortSignal), askWindowTimer !== void 0 && clearTimeout(askWindowTimer), askBackstopTimer !== void 0 && clearTimeout(askBackstopTimer), lateDecideWatchdogTimer !== void 0 && clearTimeout(lateDecideWatchdogTimer), liveApprovalCards.delete(callKey), forgetApprovalCardToolCallId(req2.toolCallId, callKey, bornEpoch, saidWindowClosed ? req2.toolName : void 0), journalGateResolved(callKey), (o.kind === "allow" || o.kind === "deny") && noteHumanApprovalCardDecision(callKey), resolve59(o));
     }, removeFromQueue = () => {
       try {
         setQueue((queue3) => queue3.filter((item) => item.toolUseID !== callKey));
@@ -485075,7 +485292,7 @@ function shellApprovalCardPort(req2) {
       onUserInteraction() {
       },
       onAbort() {
-        settle3({ kind: "aborted" });
+        noteHumanApprovalCardDecision(callKey), settle3({ kind: "aborted" });
       },
       onAllow(updatedInput, permissionUpdates) {
         settleMaybeLate(buildAllowDecision(updatedInput, permissionUpdates), "approve");
@@ -485115,7 +485332,7 @@ function shellApprovalCardPort(req2) {
         onUserInteraction() {
         },
         onAbort() {
-          settle3({ kind: "aborted" });
+          noteHumanApprovalCardDecision(callKey), settle3({ kind: "aborted" });
         },
         onAllow(updatedInput, permissionUpdates) {
           lateApproveConfirmedOnce = !0;
@@ -486215,6 +486432,8 @@ __export(agentsWire_exports, {
   ADAPTER_DIVERGENCES: () => ADAPTER_DIVERGENCES,
   AGENT_MEMORY_WORDS: () => AGENT_MEMORY_WORDS,
   AGENT_MESSAGE_TAG: () => AGENT_MESSAGE_TAG,
+  APPROVAL_NOTE_EDIT_REFUSED_DETAIL: () => APPROVAL_NOTE_EDIT_REFUSED_DETAIL,
+  APPROVAL_NOTE_RETRACTED_DETAIL: () => APPROVAL_NOTE_RETRACTED_DETAIL,
   ASK_ORIGIN_WORDS: () => ASK_ORIGIN_WORDS,
   ASK_PARK_GATE_KINDS: () => ASK_PARK_GATE_KINDS,
   ASK_PARK_ROW_POLL_MS: () => ASK_PARK_ROW_POLL_MS,
@@ -486589,6 +486808,7 @@ __export(agentsWire_exports, {
   approvalCardPortFor: () => approvalCardPortFor,
   approvalCardPortMisses: () => approvalCardPortMisses,
   approvalCardPortMissesFor: () => approvalCardPortMissesFor,
+  approvalOutcomeNoteOf: () => approvalOutcomeNoteOf,
   approvalsStreamLiveDoctorDetail: () => approvalsStreamLiveDoctorDetail,
   armDetachCancel: () => armDetachCancel,
   armPlanReviewApproval: () => armPlanReviewApproval,
@@ -486885,6 +487105,7 @@ __export(agentsWire_exports, {
   isLoopbackWireUrl: () => isLoopbackWireUrl,
   isModelOutputErrorRowText: () => isModelOutputErrorRowText,
   isModelOutputErrorText: () => isModelOutputErrorText,
+  isNewEngineAgentPanelCycle: () => isNewEngineAgentPanelCycle,
   isOutcomeUnknownRowText: () => isOutcomeUnknownRowText,
   isOwnEngineRun: () => isOwnEngineRun,
   isOwnWorkflowRun: () => isOwnWorkflowRun,
@@ -487708,8 +487929,8 @@ function readDisclosureLedger(scope) {
   try {
     let { readFileSync: readFileSync69 } = __require("node:fs"), raw2 = JSON.parse(readFileSync69(path28, "utf8"));
     if (typeof raw2 != "object" || raw2 === null) return EMPTY_LEDGER;
-    let ids = raw2.ids;
-    return Array.isArray(ids) ? { ids: ids.filter((x3) => typeof x3 == "string" && x3.length > 0) } : EMPTY_LEDGER;
+    let ids2 = raw2.ids;
+    return Array.isArray(ids2) ? { ids: ids2.filter((x3) => typeof x3 == "string" && x3.length > 0) } : EMPTY_LEDGER;
   } catch {
     return EMPTY_LEDGER;
   }
@@ -487718,8 +487939,8 @@ function writeDisclosureLedger(scope, next) {
   let path28 = ledgerPath(scope);
   if (path28 !== null)
     try {
-      let { writeFileSync: writeFileSync34, renameSync: renameSync21 } = __require("node:fs"), merged = [...readDisclosureLedger(scope).ids, ...next.ids], ids = [...new Set(merged)].slice(-DISCLOSURE_LEDGER_MAX_IDS), tmp = `${path28}.${String(process.pid)}.tmp`;
-      writeFileSync34(tmp, JSON.stringify({ v: 1, ids }), { mode: 384 }), renameSync21(tmp, path28);
+      let { writeFileSync: writeFileSync34, renameSync: renameSync21 } = __require("node:fs"), merged = [...readDisclosureLedger(scope).ids, ...next.ids], ids2 = [...new Set(merged)].slice(-DISCLOSURE_LEDGER_MAX_IDS), tmp = `${path28}.${String(process.pid)}.tmp`;
+      writeFileSync34(tmp, JSON.stringify({ v: 1, ids: ids2 }), { mode: 384 }), renameSync21(tmp, path28);
     } catch {
     }
 }
@@ -488256,16 +488477,17 @@ function createLiveConversationClient(config4) {
       // 🔴 为什么非它不可:帧腿在**出卡之前**就永久认领了这只 ask,而它那一发 respond 失败时壳
       //    这一侧此前看不到 —— 只能靠「连续两张快照都看到已认领∧没决断∧台账无活卡」这条间接
       //    判据把认领放回去(秒级两拍里审批入口是空的)。缺席 = 退回那条间接判据,零变化。
+      // 🔴 **映射归包**(client-core 0.74.5 CC-88,接入档 §73 S-5):`{approvalId, settled,
+      //    retracted?, detail?}` 这张便签此前三端各手拼一份(壳这一份是语义母本),0.74.5 起由
+      //    `approvalOutcomeNoteOf` 单源出。壳这一格因此只剩**转交**,一条判定、一句文案都不再自铸:
+      //    「落没落定」= `decision !== 'unresolved'`(不看 ack)、撤卡是**独立判别位**原样过境
+      //    (不折进 detail:撤卡 = 本端主动放手,与「引擎不收」在 `settled` 上同形却不同义,
+      //    端口那一侧要靠它决定「释放认领但不扣重出卡预算」)、detail 三支的优先序与两句固定文案
+      //    (`APPROVAL_NOTE_RETRACTED_DETAIL` / `APPROVAL_NOTE_EDIT_REFUSED_DETAIL`)都在包里。
+      //    切换前对拍 24 形逐键相等(六形骨架 = settled / retracted / editRefused /
+      //    respondRefusal 三位各缺其二 / 空 detail / 坏形),格在 suspendedSubagentAskWire.test.ts J8。
       onToolApprovalOutcome: (frame, outcome) => {
-        let detail = outcome.retracted === !0 ? "the card was retracted (this host no longer has a decision port for it)" : outcome.editRefused === !0 ? "edits are not accepted on this card" : [outcome.respondRefusal?.errorCode, outcome.respondRefusal?.message].filter((x3) => typeof x3 == "string" && x3 !== "").join(" \xB7 ");
-        noteStreamApprovalOutcome({
-          approvalId: frame.approvalId,
-          settled: outcome.decision !== "unresolved",
-          // 🔴 判别位**原样过境**(不折进 detail 文本):撤卡 = 本端主动放手,与「引擎不收」在
-          //    `settled` 上同形却**不同义** —— 端口那一侧要靠它决定「释放认领但不扣重出卡预算」。
-          ...outcome.retracted === !0 ? { retracted: !0 } : {},
-          ...detail === "" ? {} : { detail }
-        });
+        noteStreamApprovalOutcome(approvalOutcomeNoteOf(frame, outcome));
       }
     };
   }, approvalStreamDeps = {
@@ -488529,6 +488751,7 @@ var ENGINE_TO_CC_TOOL, SUGGESTIONS_TAIL_MAX_ATTEMPTS, SUGGESTIONS_TAIL_RETRY_MS,
     init_engineToolDetach();
     init_dist();
     init_dist();
+    init_dist();
     init_engineSessionParam2();
     init_engineCompactWire2();
     init_liveSessionStore();
@@ -501914,8 +502137,17 @@ var RENDERED_UUID_PREFIX_LEN, init_rewindArm = __esm({
 
 // build-src/src/sema/fleetRowCycleProjection.ts
 function launchAnchorChanged2(existing, ev) {
-  let seqOf = (n2) => typeof n2 == "number" && Number.isFinite(n2) ? n2 : void 0, evSeq = seqOf(ev.cycleSeq), rowSeq = seqOf(existing.cycleSeq);
-  return evSeq !== void 0 && rowSeq !== void 0 ? evSeq !== rowSeq : typeof ev.startedAt != "number" || !Number.isFinite(ev.startedAt) || existing.startTimeFromWire !== !0 || typeof existing.startTime != "number" || !Number.isFinite(existing.startTime) ? !1 : existing.startTime !== ev.startedAt;
+  return isNewEngineAgentPanelCycle(
+    {
+      ...existing.cycleSeq !== void 0 ? { cycleSeq: existing.cycleSeq } : {},
+      // 见上:只有 wire 给的真锚才是「上一代的 startedAt」,猜测基准一律不交。
+      ...existing.startTimeFromWire === !0 && existing.startTime !== void 0 ? { startedAt: existing.startTime } : {}
+    },
+    {
+      ...ev.cycleSeq !== void 0 ? { cycleSeq: ev.cycleSeq } : {},
+      ...ev.startedAt !== void 0 ? { startedAt: ev.startedAt } : {}
+    }
+  );
 }
 function progressAfterFleetRowFrame(existing, ev) {
   let num = (n2) => typeof n2 == "number" && Number.isFinite(n2), prior = launchAnchorChanged2(existing, ev) ? void 0 : existing.progress, toolUseCount = num(ev.toolUses) ? ev.toolUses : prior?.toolUseCount, tokenCount = num(ev.totalTokens) && (ev.totalTokens > 0 || num(ev.toolUses)) ? ev.totalTokens : prior?.tokenCount;
@@ -501924,6 +502156,7 @@ function progressAfterFleetRowFrame(existing, ev) {
 }
 var init_fleetRowCycleProjection = __esm({
   "build-src/src/sema/fleetRowCycleProjection.ts"() {
+    init_dist();
   }
 });
 
@@ -502019,10 +502252,10 @@ function useEngineAgentPanelBridge(setAppState) {
   let ownedRows = engineOwnedRowIds, reapAbsentRows = React133.useCallback(() => {
     let reaped = [];
     setAppState((prev) => {
-      let ids = reapExpiredEngineAgentAbsences(prev.tasks ?? {}, ownedRows);
-      if (ids.length === 0) return prev;
+      let ids2 = reapExpiredEngineAgentAbsences(prev.tasks ?? {}, ownedRows);
+      if (ids2.length === 0) return prev;
       let nextTasks = { ...prev.tasks };
-      for (let id of ids) {
+      for (let id of ids2) {
         let row2 = nextTasks[id];
         reaped.push({ id, label: row2?.description ?? id }), delete nextTasks[id];
       }
@@ -503210,7 +503443,7 @@ function readRestartInflightLine() {
     workflows,
     leaderStreaming,
     otherSessionsSharing: sharing
-  }), ids = (bgReading?.tasks ?? []).filter((t2) => t2.retiredByNotification !== !0).map((t2) => t2.id).sort(), key = JSON.stringify([ids, workflows, leaderStreaming, sharing.total, sharing.midTurn, unknown2]);
+  }), ids2 = (bgReading?.tasks ?? []).filter((t2) => t2.retiredByNotification !== !0).map((t2) => t2.id).sort(), key = JSON.stringify([ids2, workflows, leaderStreaming, sharing.total, sharing.midTurn, unknown2]);
   if (unknown2.length === 0) return { line, key };
   let caveat = `\u26A0 could not read ${unknown2.join(" / ")} \u2014 this list may be incomplete`;
   return { line: line === null ? caveat : `${line}
@@ -539339,6 +539572,168 @@ var DEFAULT_DEBUG_LINES_READ, TAIL_READ_BYTES, init_debug3 = __esm({
   }
 });
 
+// build-src/src/sema/interactiveSettingsStamp.ts
+var interactiveSettingsStamp_exports = {};
+__export(interactiveSettingsStamp_exports, {
+  STAMP_FALLBACK_TRACE: () => STAMP_FALLBACK_TRACE,
+  STAMP_HOLD_ON_UNHEALTHY_READ_TRACE: () => STAMP_HOLD_ON_UNHEALTHY_READ_TRACE,
+  STAMP_STALE_RECOVERED_TRACE: () => STAMP_STALE_RECOVERED_TRACE,
+  _resetSettingsStampStaleForTest: () => _resetSettingsStampStaleForTest,
+  assembleInteractiveWireStamp: () => assembleInteractiveWireStamp,
+  describeSettingsStampStale: () => describeSettingsStampStale,
+  readSettingsStampStale: () => readSettingsStampStale
+});
+function describeStampStaleEntered(reason, lastReadAt) {
+  return `settings could not be re-read (${reason}); this turn continues with the settings last read at ${hhmm(lastReadAt)}; rules added since then are not in effect \u2014 run /doctor`;
+}
+function hhmm(at) {
+  let d4 = new Date(at);
+  return `${String(d4.getHours()).padStart(2, "0")}:${String(d4.getMinutes()).padStart(2, "0")}`;
+}
+function readSettingsStampStale() {
+  return { ...staleState };
+}
+function describeSettingsStampStale(s) {
+  return s.stale && s.since !== void 0 ? ` \xB7 stale since ${hhmm(s.since)}` : "";
+}
+function _resetSettingsStampStaleForTest() {
+  staleState = { stale: !1 };
+}
+function readSessionRulesFromAppState() {
+  try {
+    let ctx = getAppStateStoreRef()?.getState?.()?.toolPermissionContext;
+    return {
+      deny: ctx?.alwaysDenyRules.session ?? [],
+      ask: ctx?.alwaysAskRules.session ?? []
+    };
+  } catch (e) {
+    return logForDebugging(
+      `[sema][settings-stamp] session-rule read failed \u2014 this turn carries the on-disk rules only: ${e instanceof Error ? e.message : String(e)}`
+    ), { deny: [], ask: [] };
+  }
+}
+function mergeSessionRules(full, session2) {
+  if (session2.deny.length === 0 && session2.ask.length === 0) return full;
+  let perms = { ...full.permissions ?? {} }, deny2 = [.../* @__PURE__ */ new Set([...perms.deny ?? [], ...session2.deny])], ask2 = [.../* @__PURE__ */ new Set([...perms.ask ?? [], ...session2.ask])];
+  return deny2.length > 0 && (perms.deny = deny2), ask2.length > 0 && (perms.ask = ask2), { ...full, permissions: perms };
+}
+function settingsReadHealth() {
+  try {
+    let errs = getSettingsWithErrors().errors;
+    return { sig: JSON.stringify(errs.map((e) => `${e.file}|${e.path}`).sort()), hasProblem: errs.length > 0 };
+  } catch (e) {
+    return logForDebugging(
+      `[sema][settings-stamp] settings health read failed: ${e instanceof Error ? e.message : String(e)}`
+    ), { sig: "<unreadable>", hasProblem: !0 };
+  }
+}
+function ruleNamesOf(full) {
+  let perms = full.permissions ?? {};
+  return [
+    .../* @__PURE__ */ new Set([
+      ...(perms.deny ?? []).map((r) => `deny:${r}`),
+      ...(perms.ask ?? []).map((r) => `ask:${r}`)
+    ])
+  ].sort();
+}
+function rulesLost(next, prev) {
+  let has2 = new Set(next);
+  return prev.filter((r) => !has2.has(r));
+}
+function withRulesReadded(full, lostKeys) {
+  if (lostKeys.length === 0) return full;
+  let perms = { ...full.permissions ?? {} }, deny2 = [
+    .../* @__PURE__ */ new Set([
+      ...perms.deny ?? [],
+      ...lostKeys.filter((k2) => k2.startsWith("deny:")).map((k2) => k2.slice(5))
+    ])
+  ], ask2 = [
+    .../* @__PURE__ */ new Set([
+      ...perms.ask ?? [],
+      ...lostKeys.filter((k2) => k2.startsWith("ask:")).map((k2) => k2.slice(4))
+    ])
+  ];
+  return deny2.length > 0 && (perms.deny = deny2), ask2.length > 0 && (perms.ask = ask2), { ...full, permissions: perms };
+}
+function assembleInteractiveWireStamp(opts) {
+  let { stampMode, seamOpts } = opts, resolve59 = opts.resolve ?? (() => resolveSemaConfigWithEffective(seamOpts)), readSessionRules = opts.readSessionRules ?? readSessionRulesFromAppState, surfaceNotice = opts.surfaceNotice ?? ((text2) => surfaceTranscriptSystemNotice(text2, "warning")), announced = /* @__PURE__ */ new Set();
+  function freshUnenforceableNotices(full) {
+    try {
+      let fresh = describeUnenforceableRules(unenforceableSettingsRules(full)).filter((l3) => !announced.has(l3));
+      for (let line of fresh) announced.add(line);
+      return fresh;
+    } catch (e) {
+      return logForDebugging(
+        `[sema][settings-stamp] unenforceable-rule notice failed: ${e instanceof Error ? e.message : String(e)}`
+      ), [];
+    }
+  }
+  let lastGoodFull, lastGoodStamp, lastGoodRules = [], lastGoodSources = [], lastGoodErrSig, lastGoodAt = Date.now(), lastGoodSet = !1, pendingHoldObservation, fallbackAnnounced = !1, holdAnnounced = !1;
+  staleState = { stale: !1 };
+  let staleActive = !1;
+  function recompute() {
+    let { effective, config: config4, sources } = resolve59(), health = settingsReadHealth(), errSig = health.sig, nextFull = mergeSessionRules(toWireSettings(effective, config4), readSessionRules()), cliToolFlags = readCliToolFlagsWire(), nextRules = ruleNamesOf(nextFull), nextSources = [...sources].map(String).sort(), lost = lastGoodSet ? rulesLost(nextRules, lastGoodRules) : [], sourcesLost = lastGoodSet ? lastGoodSources.filter((s) => !nextSources.includes(s)) : [], incomplete = health.hasProblem || sourcesLost.length > 0, observation2 = `${errSig}|${nextSources.join(",")}|${nextRules.join(",")}`;
+    if (lastGoodSet && lost.length > 0 && incomplete && observation2 !== pendingHoldObservation) {
+      pendingHoldObservation = observation2, logForDebugging(
+        `[sema][settings-stamp] incomplete settings read lost ${String(lost.length)} rule(s) \u2014 keeping the previous snapshot for one turn (lost: ${lost.join(",")}; sourcesLost: ${sourcesLost.join(",") || "none"}; readProblem=${String(health.hasProblem)})`
+      ), holdAnnounced || (holdAnnounced = !0, say(STAMP_HOLD_ON_UNHEALTHY_READ_TRACE));
+      let heldFull = withRulesReadded(nextFull, lost), heldStamp = buildWireSettingsStamp(stampMode, heldFull, { cliToolFlags });
+      return setWireStampProvenance({ full: heldFull, sendMode: stampMode, cliToolFlags }), { full: heldFull, stamp: heldStamp };
+    }
+    pendingHoldObservation = void 0;
+    let stamp2 = buildWireSettingsStamp(stampMode, nextFull, { cliToolFlags });
+    return setWireStampProvenance({ full: nextFull, sendMode: stampMode, cliToolFlags }), lastGoodFull = nextFull, lastGoodStamp = stamp2, lastGoodRules = nextRules, lastGoodSources = nextSources, lastGoodErrSig = errSig, lastGoodAt = Date.now(), lastGoodSet = !0, { full: nextFull, stamp: stamp2 };
+  }
+  let say = (text2) => {
+    surfaceNotice(`[sema] ${text2}`) || process.stderr.write(`[sema] ${text2}
+`);
+  }, supplier = () => {
+    try {
+      let { full, stamp: stamp2 } = recompute();
+      staleActive && (staleActive = !1, staleState = { stale: !1 }, say(STAMP_STALE_RECOVERED_TRACE)), noteStampSentForRun(ruleNamesOf(full));
+      for (let line of freshUnenforceableNotices(full)) say(line);
+      return stamp2;
+    } catch (e) {
+      let detail = e instanceof Error ? `${e.name}: ${e.message}` : String(e);
+      return lastGoodSet ? (logForDebugging(
+        `[sema][settings-stamp] per-turn recompute threw \u2014 reusing the last good snapshot (rules still sent): ${detail}`
+      ), staleActive || (staleActive = !0, staleState = { stale: !0, since: lastGoodAt, reason: detail }, say(describeStampStaleEntered(detail, lastGoodAt))), fallbackAnnounced || (fallbackAnnounced = !0, say(STAMP_FALLBACK_TRACE)), noteStampSentForRun(ruleNamesOf(lastGoodFull ?? {})), setWireStampProvenance({
+        full: lastGoodFull ?? {},
+        sendMode: stampMode,
+        cliToolFlags: readCliToolFlagsWire()
+      }), lastGoodStamp) : failOpen(
+        "P-DEBT-cli.settings.stamp-recompute-never-resolved",
+        void 0,
+        detail
+      );
+    }
+  }, bootWire = {}, bootStamp;
+  try {
+    let first = recompute();
+    bootWire = first.full, bootStamp = first.stamp, freshUnenforceableNotices(first.full);
+  } catch (e) {
+    logForDebugging(
+      `[sema][settings-stamp] boot recompute threw \u2014 the per-turn hook is still installed and will retry: ${e instanceof Error ? e.message : String(e)}`
+    );
+  }
+  return { supplier, bootWire, bootStamp };
+}
+var STAMP_FALLBACK_TRACE, STAMP_HOLD_ON_UNHEALTHY_READ_TRACE, STAMP_STALE_RECOVERED_TRACE, staleState, init_interactiveSettingsStamp = __esm({
+  "build-src/src/sema/interactiveSettingsStamp.ts"() {
+    init_debug();
+    init_appStateRef();
+    init_failOpen();
+    init_settingsRulesWire();
+    init_settings5();
+    init_settings2();
+    init_transcriptSystemNotice();
+    init_midTurnRuleNotice();
+    STAMP_FALLBACK_TRACE = "settings-stamp: could not re-read settings this turn \u2014 keeping the previous snapshot (your permission rules are still being sent)", STAMP_HOLD_ON_UNHEALTHY_READ_TRACE = "settings-stamp: this settings read lost permission rules while it was incomplete (a settings file was unreadable, empty, or mid-save) \u2014 keeping those rules in place for one more turn, on top of everything this read did produce";
+    STAMP_STALE_RECOVERED_TRACE = "settings re-read \u2014 your permission rules are current again";
+    staleState = { stale: !1 };
+  }
+});
+
 // build-src/src/commands/doctor/permissionsPostureRow.ts
 function formatApprovalWindow(ms) {
   return !Number.isFinite(ms) || ms < 0 ? "not observed" : ms % 36e5 === 0 ? `${String(ms / 36e5)}h` : ms % 6e4 === 0 ? `${String(ms / 6e4)}m` : ms % 1e3 === 0 ? `${String(ms / 1e3)}s` : `${String(ms)}ms`;
@@ -539353,7 +539748,7 @@ function modeSegment(r) {
 function permissionsPostureDetail(r) {
   let parts = [];
   return parts.push(modeSegment(r)), parts.push(
-    r.wireRules === null ? `permission rules ${NOT_OBSERVED}` : describeWireRules(r.wireRules)
+    (r.wireRules === null ? `permission rules ${NOT_OBSERVED}` : describeWireRules(r.wireRules)) + describeSettingsStampStale(r.wireStampStale)
   ), r.selfSpawnLane === !1 ? parts.push(`approval window ${NOT_OBSERVED} (external engine \u2014 this end does not set its env)`) : r.approvalWindowMs === null ? parts.push(`approval window ${NOT_OBSERVED}`) : parts.push(
     `approval window ${formatApprovalWindow(r.approvalWindowMs)}${r.approvalWindowSource === "env" ? " (env STREAM_ASK_WINDOW_MS, passed through to engines this shell starts)" : ""}`
   ), parts.push(
@@ -539367,6 +539762,7 @@ function permissionsPostureDetail(r) {
 var NOT_OBSERVED, init_permissionsPostureRow = __esm({
   "build-src/src/commands/doctor/permissionsPostureRow.ts"() {
     init_settingsRulesWire();
+    init_interactiveSettingsStamp();
     NOT_OBSERVED = "not observed";
   }
 });
@@ -539721,9 +540117,16 @@ async function readLivePermissionsPosture(engineTarget) {
   } catch {
     classifier = null;
   }
+  let wireStampStale = { stale: !1 };
+  try {
+    let { readSettingsStampStale: readSettingsStampStale2 } = await Promise.resolve().then(() => (init_interactiveSettingsStamp(), interactiveSettingsStamp_exports));
+    wireStampStale = readSettingsStampStale2();
+  } catch {
+    wireStampStale = { stale: !1 };
+  }
   let wireRules = null;
   try {
-    let { wireRuleSurface: wireRuleSurface2, resolveSendSettingsMode: resolveSendSettingsMode2, readWireStampProvenance: readWireStampProvenance2 } = await Promise.resolve().then(() => (init_settingsRulesWire(), settingsRulesWire_exports)), frozen = readWireStampProvenance2();
+    let { wireRuleSurface: wireRuleSurface2, resolveSendSettingsMode: resolveSendSettingsMode3, readWireStampProvenance: readWireStampProvenance2 } = await Promise.resolve().then(() => (init_settingsRulesWire(), settingsRulesWire_exports)), frozen = readWireStampProvenance2();
     if (frozen !== void 0)
       wireRules = wireRuleSurface2(frozen.full, {
         sendMode: frozen.sendMode,
@@ -539737,7 +540140,7 @@ async function readLivePermissionsPosture(engineTarget) {
         {
           // 🔴 总开关也是这一段的输入:`SEMA_SEND_SETTINGS=off` 时规则整份不发,读面若不看它
           //    就会报一个不存在的安全姿态。env 视图与播种同律取。
-          sendMode: resolveSendSettingsMode2(envView.SEMA_SEND_SETTINGS)
+          sendMode: resolveSendSettingsMode3(envView.SEMA_SEND_SETTINGS)
         }
       );
     }
@@ -539788,6 +540191,7 @@ async function readLivePermissionsPosture(engineTarget) {
     readDenyTiers,
     selfSpawnLane,
     wireRules,
+    wireStampStale,
     writeProtection,
     readFace,
     readFaceDisagreement: readFaceDisagreement2,
@@ -551435,7 +551839,7 @@ async function ensurePrintModeEngine() {
 async function printLaneWireSettings(knobs) {
   if (knobs.mockScenario) return;
   let { resolveSemaConfigWithEffective: resolveSemaConfigWithEffective2 } = await Promise.resolve().then(() => (init_settings5(), settings_exports4)), {
-    resolveSendSettingsMode: resolveSendSettingsMode2,
+    resolveSendSettingsMode: resolveSendSettingsMode3,
     buildWireSettingsStamp: buildWireSettingsStamp2,
     toWireSettings: toWireSettings2,
     unenforceableSettingsRules: unenforceableSettingsRules2,
@@ -551447,7 +551851,7 @@ async function printLaneWireSettings(knobs) {
   } = await Promise.resolve().then(() => (init_settingsRulesWire(), settingsRulesWire_exports)), { effective, config: config4 } = resolveSemaConfigWithEffective2(), fullWire = toWireSettings2(effective, config4);
   for (let msg of describeUnenforceableRules2(unenforceableSettingsRules2(fullWire))) emitPrintLaneRuleNotice(msg);
   emitPrintLaneRuleNotice(describeHeadlessAskContentRules2(askContentRulesDeniedHeadless2(fullWire)));
-  let stampMode = resolveSendSettingsMode2(knobs.sendSettings), cliToolFlags = readCliToolFlagsWire2();
+  let stampMode = resolveSendSettingsMode3(knobs.sendSettings), cliToolFlags = readCliToolFlagsWire2();
   return setWireStampProvenance2({ full: fullWire, sendMode: stampMode, cliToolFlags }), buildWireSettingsStamp2(stampMode, fullWire, {
     // L-66①:`--tools` / `--disallowedTools` 的壳本地快照。**求值点必须在这里**(晚绑定供给器内),
     // 不能在前置步就读:前置步跑在 `import('../main.js')` 之前,那时 commander 还没解析 argv,
@@ -551713,8 +552117,8 @@ function syncEntriesToTranscriptLines(entries, ctx) {
     leafUuid: lines.length > 0 ? lines[lines.length - 1].uuid : ctx.startingParentUuid ?? null
   };
 }
-function selectEntriesByIds(entries, ids) {
-  let want = new Set(ids);
+function selectEntriesByIds(entries, ids2) {
+  let want = new Set(ids2);
   return entries.filter((e) => want.has(e.id));
 }
 function lastLineUuid(jsonlBody) {
@@ -552113,7 +552517,9 @@ __export(cloudResources_exports, {
   cloudResourceInstall: () => cloudResourceInstall,
   cloudResourceList: () => cloudResourceList,
   cloudResourceRemove: () => cloudResourceRemove,
-  cloudResourceSync: () => cloudResourceSync
+  cloudResourceSync: () => cloudResourceSync,
+  findSecretShape: () => findSecretShape,
+  isEnvVarName: () => isEnvVarName
 });
 import { createHash as createHash31 } from "node:crypto";
 import { existsSync as existsSync37, readdirSync as readdirSync15, readFileSync as readFileSync56, statSync as statSync18 } from "node:fs";
@@ -552128,9 +552534,41 @@ function resolveTargetSel(o) {
   );
   return picked.length > 1 && (err6(`Error: ${picked.join(" and ")} conflict \u2014 pass ONE target. The same command writes to whoever the target switch names:`), err6("  (none)        your own personal config"), err6("  --user <u>    that user's personal config (admin-managed)"), err6("  --team        the active space's team standard"), err6("  --space <id>  that space's team standard"), err6("  --global      the instance-wide standard (instance admin)"), process.exit(1)), o.user ? { kind: "user", username: o.user } : o.global ? { kind: "team", space: "global" } : o.team || o.space ? { kind: "team", space: o.space } : { kind: "me" };
 }
+function isEnvVarName(s) {
+  return ENV_NAME.safeParse(s).success;
+}
+function hasPemPrivateKey(s) {
+  return PEM_PRIVATE_KEY_RE !== null && PEM_PRIVATE_KEY_RE.test(s);
+}
+function isSecretShapedLiteral(s) {
+  return containsSecretToken(s) || hasPemPrivateKey(s);
+}
+function pathSegment(k2) {
+  return k2.length > PATH_SEGMENT_MAX || isSecretShapedLiteral(k2) ? `<key, ${String(k2.length)} chars, redacted>` : k2;
+}
+function firstSecretLeafPath(v2, path28, depth, hit) {
+  if (depth > SECRET_SCAN_MAX_DEPTH) return null;
+  if (typeof v2 == "string") return hit(v2) ? path28 : null;
+  if (Array.isArray(v2)) {
+    for (let i = 0; i < v2.length; i++) {
+      let found = firstSecretLeafPath(v2[i], `${path28}[${String(i)}]`, depth + 1, hit);
+      if (found !== null) return found;
+    }
+    return null;
+  }
+  let rec = asRec3(v2);
+  if (rec === void 0) return null;
+  for (let [k2, child] of Object.entries(rec)) {
+    let seg = `${path28}.${pathSegment(k2)}`;
+    if (hit(k2)) return seg;
+    let found = firstSecretLeafPath(child, seg, depth + 1, hit);
+    if (found !== null) return found;
+  }
+  return null;
+}
 function findSecretShape(value) {
-  let s = JSON.stringify(value) ?? "", m2 = SECRET_SHAPE_RE.exec(s);
-  return m2 ? `${(m2[2] ?? m2[0]).slice(0, 8)}\u2026(redacted)` : null;
+  let s = JSON.stringify(value) ?? "", composed = containsSecretToken(s), pemPath = firstSecretLeafPath(value, "$", 0, hasPemPrivateKey);
+  return !composed && pemPath === null ? null : pemPath !== null ? pemPath : firstSecretLeafPath(value, "$", 0, containsSecretToken) ?? "a secret-shaped literal in the payload (redacted)";
 }
 function managedLaneError(forUser, status3, json2) {
   let detail = asStr4(json2.error_description);
@@ -552462,7 +552900,7 @@ async function prepareModel(m2) {
   let api2 = entry.api === "anthropic-messages" ? "anthropic-messages" : "openai-completions";
   entry.api = api2, entry.provider = api2 === "anthropic-messages" ? "anthropic" : asStr4(entry.provider) && entry.provider !== "anthropic" ? entry.provider : "gateway";
   let notes = [], keyEnv = asStr4(entry.apiKeyEnv);
-  keyEnv && !ENV_NAME_RE.test(keyEnv) && (delete entry.apiKeyEnv, strippedKeys.push("apiKeyEnv(not an env NAME)"));
+  keyEnv && !isEnvVarName(keyEnv) && (delete entry.apiKeyEnv, strippedKeys.push("apiKeyEnv(not an env NAME)"));
   let hasInlineKey = INLINE_KEY_FIELDS.some((f) => asStr4(m2[f]));
   if (!asStr4(entry.apiKeyEnv) && hasInlineKey) {
     let { keyEnvNameForEntry: keyEnvNameForEntry2 } = await Promise.resolve().then(() => (init_modelChannels(), modelChannels_exports));
@@ -552506,7 +552944,7 @@ function prepareMcp(name, c3) {
     if (!command8) return { name, display: display2, entry: null, notes, skipReason: `server '${name}' has no command` };
     let envRefs = {}, dropped2 = [];
     for (let k2 of Object.keys(asRec3(c3.env) ?? {}))
-      ENV_NAME_RE.test(k2) ? envRefs[k2] = k2 : dropped2.push(k2);
+      isEnvVarName(k2) ? envRefs[k2] = k2 : dropped2.push(k2);
     Object.keys(envRefs).length > 0 && notes.push(`env values stripped \u2014 cloud stores refs only; consuming machines must set: ${Object.values(envRefs).join(", ")}`), dropped2.length > 0 && notes.push(`env keys dropped (not env-NAME shaped, cannot be referenced): ${dropped2.join(", ")}`);
     let args = asArr3(c3.args).filter((a) => typeof a == "string");
     return {
@@ -553073,7 +553511,7 @@ async function cloudPublish(options) {
     fail5(e);
   }
 }
-var out4, err6, asRec3, asArr3, asStr4, ENV_NAME_RE, DOMAIN_NAME_RE, SECRET_SHAPE_RE, personalPath, wantsTeam, TEAM_WRITE_ROLE, teamConfigPath, NOUN, ADD_VERB, REMOVE_VERB, DOMAIN, LIST_KEY, LOCAL_SOURCE, MODEL_FIELD_ALLOWLIST, INLINE_KEY_FIELDS, MODEL_ROLES, GIT_SHA_RE, byName, init_cloudResources = __esm({
+var out4, err6, asRec3, asArr3, asStr4, DOMAIN_NAME_RE, SECRET_SCAN_MAX_DEPTH, PEM_PRIVATE_KEY_RE, PATH_SEGMENT_MAX, personalPath, wantsTeam, TEAM_WRITE_ROLE, teamConfigPath, NOUN, ADD_VERB, REMOVE_VERB, DOMAIN, LIST_KEY, LOCAL_SOURCE, MODEL_FIELD_ALLOWLIST, INLINE_KEY_FIELDS, MODEL_ROLES, GIT_SHA_RE, byName, init_cloudResources = __esm({
   "build-src/src/cli/handlers/cloudResources.ts"() {
     init_types6();
     init_cloudAuth();
@@ -553082,7 +553520,12 @@ var out4, err6, asRec3, asArr3, asStr4, ENV_NAME_RE, DOMAIN_NAME_RE, SECRET_SHAP
     out4 = (line) => process.stdout.write(`${line}
 `), err6 = (line) => process.stderr.write(`${line}
 `);
-    asRec3 = (v2) => typeof v2 == "object" && v2 !== null && !Array.isArray(v2) ? v2 : void 0, asArr3 = (v2) => Array.isArray(v2) ? v2 : [], asStr4 = (v2) => typeof v2 == "string" && v2.length > 0 ? v2 : void 0, ENV_NAME_RE = /^[A-Z_][A-Z0-9_]*$/, DOMAIN_NAME_RE = /^[a-z0-9][a-z0-9._-]*$/i, SECRET_SHAPE_RE = /(^|["\s:=,])(sk-[A-Za-z0-9_-]{8,}|gh[opus]_[A-Za-z0-9]{8,}|github_pat_[A-Za-z0-9_]{8,}|xox[baprse]-[A-Za-z0-9-]{8,}|AKIA[0-9A-Z]{12,}|AIza[0-9A-Za-z_-]{20,}|eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{4,}|-----BEGIN[A-Z0-9 ]*PRIVATE KEY)/;
+    asRec3 = (v2) => typeof v2 == "object" && v2 !== null && !Array.isArray(v2) ? v2 : void 0, asArr3 = (v2) => Array.isArray(v2) ? v2 : [], asStr4 = (v2) => typeof v2 == "string" && v2.length > 0 ? v2 : void 0;
+    DOMAIN_NAME_RE = /^[a-z0-9][a-z0-9._-]*$/i, SECRET_SCAN_MAX_DEPTH = 24, PEM_PRIVATE_KEY_RE = (() => {
+      let arm4 = SECRET_LITERAL_RE.source.replace(/^\^\(/, "").replace(/\)$/, "").split("|").find((a) => a.includes("PRIVATE KEY"));
+      return arm4 === void 0 ? null : new RegExp(arm4, "i");
+    })();
+    PATH_SEGMENT_MAX = 40;
     personalPath = (domain2, forUser) => forUser ? `/api/v1/users/${encodeURIComponent(forUser)}/config/${domain2}` : `/api/v1/me/config/${domain2}`;
     wantsTeam = (o) => !!(o.team || o.space || o.global);
     TEAM_WRITE_ROLE = { models: "editor", mcp: "publisher", skills: "publisher", plugins: "publisher" };
@@ -563734,7 +564177,7 @@ Usage: sema --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("sema 1.0.123", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
+  }).version("sema 1.0.124", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).psHandler([]), process.exit(process.exitCode ?? 0);
   }), program2.command("logs [id]").description("Print a background session's recent terminal output").action(async (id) => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).logsHandler(id, []), process.exit(process.exitCode ?? 0);
@@ -565702,7 +566145,17 @@ function startSuspendedSubagentAskWire(opts) {
     surfaceTranscriptSystemNotice(text2, "warning");
   }), startFeed = opts.deps?.startFeed ?? startApprovalsFeed, sessionId = opts.sessionId(), tracker2 = createSuspendedAskTracker({ ...spreadSessionId(sessionId) });
   installSuspendedAskTracker(tracker2), noteSuspendedAskFeedInstalled(!0);
-  let stats3 = { snapshots: 0, surfaced: 0, retracted: 0, upgraded: 0, requeued: 0, rebuilds: 0, released: 0 }, orphanStreak = /* @__PURE__ */ new Map(), openCards = /* @__PURE__ */ new Set(), stopped = !1, onSnapshot = (snap) => {
+  let stats3 = { snapshots: 0, surfaced: 0, retracted: 0, upgraded: 0, requeued: 0, rebuilds: 0, released: 0 }, orphanStreak = /* @__PURE__ */ new Map(), openCards = /* @__PURE__ */ new Set(), exhausted = /* @__PURE__ */ new Set(), stopped = !1, publishCountFrom = (snap) => {
+    if (sessionId === void 0) {
+      noteApprovalsAwaitingDecision(null);
+      return;
+    }
+    try {
+      noteApprovalsAwaitingDecision(countApprovalsAwaitingDecision(snap, { ...spreadSessionId(sessionId) }));
+    } catch (e) {
+      noteApprovalsAwaitingDecision(null), logForDebugging(`[sema][suspendedAsk] countApprovalsAwaitingDecision threw: ${String(e)}`);
+    }
+  }, onSnapshot = (snap) => {
     if (stopped) return;
     stats3.snapshots += 1;
     let now2 = opts.sessionId();
@@ -565713,11 +566166,7 @@ function startSuspendedSubagentAskWire(opts) {
       return;
     }
     let filter2 = spreadSessionId(sessionId);
-    try {
-      noteApprovalsAwaitingDecision(countApprovalsAwaitingDecision(snap, { ...filter2 }));
-    } catch (e) {
-      noteApprovalsAwaitingDecision(null), logForDebugging(`[sema][suspendedAsk] countApprovalsAwaitingDecision threw: ${String(e)}`);
-    }
+    publishCountFrom(snap);
     let delta;
     try {
       delta = tracker2.ingest(snap);
@@ -565729,19 +566178,19 @@ function startSuspendedSubagentAskWire(opts) {
     let appearedNow = new Set(delta.appeared.map((r) => r.approvalId)), liveIds = /* @__PURE__ */ new Set();
     for (let r of suspendedSubagentAsks(snap, { ...filter2 })) {
       if (liveIds.add(r.approvalId), appearedNow.has(r.approvalId)) continue;
-      if (!(suspendedAskClaimed(r.approvalId) && !suspendedAskDecided(r.approvalId) && !suspendedAskSubmitting(r.approvalId) && !openCards.has(r.approvalId) && !liveApprovalCards.has(liveFrameCallKey(r.approvalId)))) {
+      if (!(!exhausted.has(r.approvalId) && suspendedAskClaimed(r.approvalId) && !suspendedAskDecided(r.approvalId) && !suspendedAskSubmitting(r.approvalId) && !openCards.has(r.approvalId) && !liveApprovalCards.has(liveFrameCallKey(r.approvalId)))) {
         orphanStreak.delete(r.approvalId);
         continue;
       }
       let streak = (orphanStreak.get(r.approvalId) ?? 0) + 1;
       orphanStreak.set(r.approvalId, streak), !(streak < 2) && (orphanStreak.delete(r.approvalId), stats3.released += 1, logForDebugging(
         `[sema][suspendedAsk] ${r.approvalId} is still pending on the engine but nothing on this screen owns it (claimed, undecided, no live card for two snapshots) \u2014 releasing the claim so it can be surfaced again`
-      ), retryLater(r.approvalId, "the card that claimed it is gone and it is still pending on the engine"));
+      ), retryLater(r.approvalId, "the card that claimed it is gone and it is still pending on the engine", "auto"));
     }
     for (let id of [...orphanStreak.keys()]) liveIds.has(id) || orphanStreak.delete(id);
     noteSuspendedAsksListed(liveIds), pruneVanishedSuspendedAsks(liveIds);
     for (let approvalId of delta.gone)
-      openCards.delete(approvalId), orphanStreak.delete(approvalId), forgetSuspendedAsk(approvalId), retract(liveFrameCallKey(approvalId), "settled-elsewhere") && (stats3.retracted += 1);
+      openCards.delete(approvalId), orphanStreak.delete(approvalId), exhausted.delete(approvalId), forgetSuspendedAsk(approvalId), retract(liveFrameCallKey(approvalId), "settled-elsewhere") && (stats3.retracted += 1);
     for (let row2 of delta.upgraded)
       stats3.upgraded += 1, logForDebugging(
         `[sema][suspendedAsk] ${row2.approvalId} upgraded to a full frame after a blind card was already shown \u2014 leaving the shown card as-is (no in-place args refresh on this host)`
@@ -565751,11 +566200,11 @@ function startSuspendedSubagentAskWire(opts) {
     let lane = safeLane(opts.lane);
     (async () => {
       try {
-        let outcome = await surface(row2, opts.respond, void 0, lane);
+        let outcome = await surface(row2, opts.respond, void 0, lane), human = takeHumanApprovalCardDecision(liveFrameCallKey(row2.approvalId));
         if (openCards.delete(row2.approvalId), outcome.editRefused === !0) {
           notify5(
             "that approval could not be sent with your edits: this request came from a background subagent and the engine's read face does not carry its tool input, so there is no original to edit. Nothing was decided \u2014 the card will come back so you can allow or deny the call as-is."
-          ), retryLater(row2.approvalId, "edits are not accepted on this card");
+          ), retryLater(row2.approvalId, "edits are not accepted on this card", "user", { alreadyNotified: !0 });
           return;
         }
         if (outcome.retracted === !0) {
@@ -565766,41 +566215,91 @@ function startSuspendedSubagentAskWire(opts) {
         }
         if (outcome.decision === "unresolved") {
           let refused = outcome.respondRefusal, detail = refused === void 0 ? "the engine did not confirm it" : [refused.errorCode, refused.message].filter((x3) => typeof x3 == "string" && x3 !== "").join(" \xB7 ");
-          retryLater(row2.approvalId, detail === "" ? "the engine did not confirm it" : detail);
+          retryLater(row2.approvalId, detail === "" ? "the engine did not confirm it" : detail, human ? "user" : "auto");
           return;
         }
         noteSuspendedAskDecided(row2.approvalId), orphanStreak.delete(row2.approvalId);
       } catch (e) {
-        openCards.delete(row2.approvalId), logForDebugging(`[sema][suspendedAsk] surfaceSuspendedAskAndRespond threw for ${row2.approvalId}: ${String(e)}`), retryLater(row2.approvalId, e instanceof Error ? e.message : String(e));
+        takeHumanApprovalCardDecision(liveFrameCallKey(row2.approvalId)), openCards.delete(row2.approvalId), logForDebugging(`[sema][suspendedAsk] surfaceSuspendedAskAndRespond threw for ${row2.approvalId}: ${String(e)}`), retryLater(row2.approvalId, e instanceof Error ? e.message : String(e), "auto");
       }
     })();
-  }, retryLater = (approvalId, why) => {
-    if (!takeSuspendedAskRequeueBudget(approvalId, REQUEUE_MAX)) {
-      notify5(
-        `that background subagent approval could not be delivered to the engine after ${String(REQUEUE_MAX)} attempts (${why}). Nothing was decided here and the request is still waiting on the engine \u2014 run /doctor or send a message to re-check what it is waiting on.`
-      ), logForDebugging(`[sema][suspendedAsk] ${approvalId} exhausted the re-surface budget (${why})`);
-      return;
-    }
-    stats3.requeued += 1, logForDebugging(`[sema][suspendedAsk] ${approvalId} did not settle (${why}) \u2014 re-surfacing it`), requeueSuspendedAsk(approvalId);
-  };
-  installStreamApprovalOutcomeSink((note) => {
-    if (!stopped) {
-      if (note.settled) {
-        noteSuspendedAskDecided(note.approvalId), orphanStreak.delete(note.approvalId), openCards.delete(note.approvalId);
+  }, retryLater = (approvalId, why, leg, o) => {
+    if (leg === "auto") {
+      if (exhausted.has(approvalId)) {
+        logForDebugging(`[sema][suspendedAsk] ${approvalId} already exhausted the re-surface budget \u2014 not repeating (${why})`);
         return;
       }
-      if (openCards.delete(note.approvalId), orphanStreak.delete(note.approvalId), note.retracted === !0) {
-        requeueSuspendedAsk(note.approvalId), logForDebugging(
-          `[sema][suspendedAsk] ${note.approvalId} stream-leg card was retracted without a decision \u2014 claim released, re-surfaceable, no re-surface budget consumed`
-        );
+      if (!takeSuspendedAskRequeueBudget(approvalId, REQUEUE_MAX)) {
+        exhausted.add(approvalId), notify5(
+          `that background subagent approval could not be delivered to the engine after ${String(REQUEUE_MAX)} attempts (${why}). Nothing was decided here and the request is still waiting on the engine \u2014 run /doctor or send a message to re-check what it is waiting on.`
+        ), logForDebugging(`[sema][suspendedAsk] ${approvalId} exhausted the re-surface budget (${why})`);
         return;
       }
-      retryLater(note.approvalId, note.detail ?? "the engine did not confirm it");
+    } else o?.alreadyNotified !== !0 && notify5(
+      `that background subagent approval could not be delivered to the engine (${why}). Nothing was decided here and the request is still waiting on the engine \u2014 the card is back so you can answer it again, or run /doctor to re-check what it is waiting on.`
+    );
+    stats3.requeued += 1, logForDebugging(`[sema][suspendedAsk] ${approvalId} did not settle (${why}; ${leg} leg) \u2014 re-surfacing it`), requeueSuspendedAsk(approvalId);
+  };
+  installStreamApprovalOutcomeSink((note) => {
+    if (stopped) return;
+    let human = takeHumanApprovalCardDecision(liveFrameCallKey(note.approvalId));
+    if (note.settled) {
+      noteSuspendedAskDecided(note.approvalId), orphanStreak.delete(note.approvalId), openCards.delete(note.approvalId);
+      return;
     }
+    if (openCards.delete(note.approvalId), orphanStreak.delete(note.approvalId), note.retracted === !0) {
+      requeueSuspendedAsk(note.approvalId), logForDebugging(
+        `[sema][suspendedAsk] ${note.approvalId} stream-leg card was retracted without a decision \u2014 claim released, re-surfaceable, no re-surface budget consumed`
+      );
+      return;
+    }
+    retryLater(note.approvalId, note.detail ?? "the engine did not confirm it", human ? "user" : "auto");
   });
-  let feed = null;
+  let feed = null, observeApprovalsList = (client3) => {
+    let approvals = client3.approvals, listFn = approvals.list;
+    if (typeof listFn != "function") return client3;
+    let streamFn = approvals.stream, observeSeq = 0, lastObservedSeq = 0, observe2 = (body, failed, seq2) => {
+      if (!stopped) {
+        if (seq2 < lastObservedSeq) {
+          logForDebugging(`[sema][suspendedAsk] dropping out-of-order approvals.list observation #${String(seq2)} (newest observed #${String(lastObservedSeq)})`);
+          return;
+        }
+        lastObservedSeq = seq2;
+        try {
+          if (failed || readLivePendingRows(body).kind === "malformed") {
+            noteApprovalsAwaitingDecision(null);
+            return;
+          }
+          feed !== null && suspendedSubagentAwaitingCount() === null && publishCountFrom(feed.snapshot());
+        } catch (e) {
+          logForDebugging(`[sema][suspendedAsk] approvals.list observer threw: ${String(e)}`);
+        }
+      }
+    };
+    return {
+      approvals: {
+        list: (o) => {
+          let seq2 = ++observeSeq, p;
+          try {
+            p = listFn.call(approvals, o);
+          } catch (e) {
+            throw observe2(void 0, !0, seq2), e;
+          }
+          return Promise.resolve(p).then(
+            (body) => {
+              observe2(body, !1, seq2);
+            },
+            () => {
+              observe2(void 0, !0, seq2);
+            }
+          ), p;
+        },
+        ...streamFn === void 0 ? {} : { stream: (o) => streamFn.call(approvals, o) }
+      }
+    };
+  };
   try {
-    feed = startFeed(opts.client, onSnapshot, {
+    feed = startFeed(observeApprovalsList(opts.client), onSnapshot, {
       reconcile: {
         // 🔴 §61 S-2 逐字:「会话有活跃后台代理 ∧ 没有活着的宿主 run」。谓词抛 / 返回非布尔 ⇒ 包按「查」
         //    处置(少查一次 = 一只等人的 ask 迟迟不出现),所以这里不吞成 false。
@@ -566159,11 +566658,11 @@ function partitionSessionReap(records, departedSessionIds) {
 function reapSessionRecords(io, departedSessionIds) {
   if (departedSessionIds.length === 0) return [];
   if (io.mutate) {
-    let ids = [], m2 = io.mutate((records) => {
+    let ids2 = [], m2 = io.mutate((records) => {
       let { kept: kept2, reaped: reaped2 } = partitionSessionReap(records, departedSessionIds);
-      return ids = reaped2.map((r) => r.id), reaped2.length === 0 ? null : kept2;
+      return ids2 = reaped2.map((r) => r.id), reaped2.length === 0 ? null : kept2;
     });
-    return m2.ok || "reason" in m2 && m2.reason === "aborted" ? ids : [];
+    return m2.ok || "reason" in m2 && m2.reason === "aborted" ? ids2 : [];
   }
   let { kept, reaped } = partitionSessionReap(io.load(), departedSessionIds);
   return reaped.length === 0 ? [] : (io.save(kept), reaped.map((r) => r.id));
@@ -566180,15 +566679,15 @@ function pidAlive3(pid) {
   }
 }
 function writeSchedulerClaim(storePath, sessionIds, pid = process.pid) {
-  let dir = schedulerClaimsDir(storePath), file2 = join215(dir, `${pid}.json`), ids = [...new Set(sessionIds.filter((id) => typeof id == "string" && id.length > 0))].sort();
+  let dir = schedulerClaimsDir(storePath), file2 = join215(dir, `${pid}.json`), ids2 = [...new Set(sessionIds.filter((id) => typeof id == "string" && id.length > 0))].sort();
   try {
     let prev = JSON.parse(readFileSync66(file2, "utf8"));
     if (Array.isArray(prev.sessionIds) && prev.sessionIds.join(`
-`) === ids.join(`
+`) === ids2.join(`
 `)) return;
   } catch {
   }
-  mkdirSync33(dir, { recursive: !0, mode: 448 }), writeFileSync31(file2, JSON.stringify({ pid, sessionIds: ids, writtenAt: Date.now() }), { mode: 384 });
+  mkdirSync33(dir, { recursive: !0, mode: 448 }), writeFileSync31(file2, JSON.stringify({ pid, sessionIds: ids2, writtenAt: Date.now() }), { mode: 384 });
 }
 function removeSchedulerClaim(storePath, pid = process.pid) {
   try {
@@ -566243,11 +566742,11 @@ function sweepOrphanSessionRecords(io, storePath, opts = {}) {
     return { kept: kept2, reapedIds: reapedIds2 };
   };
   if (io.mutate) {
-    let ids = [], m2 = io.mutate((all4) => {
+    let ids2 = [], m2 = io.mutate((all4) => {
       let t2 = partition3(all4);
-      return ids = t2.reapedIds, t2.reapedIds.length === 0 ? null : t2.kept;
+      return ids2 = t2.reapedIds, t2.reapedIds.length === 0 ? null : t2.kept;
     });
-    return m2.ok || "reason" in m2 && m2.reason === "aborted" ? ids : [];
+    return m2.ok || "reason" in m2 && m2.reason === "aborted" ? ids2 : [];
   }
   let { kept, reapedIds } = partition3(records);
   return reapedIds.length > 0 && io.save(kept), reapedIds;
@@ -566273,10 +566772,10 @@ function ownsScheduledRecord(r) {
   return r.sessionId === current6;
 }
 function currentOwnedSessionIds() {
-  let ids = [], live = getLiveSessionId();
-  live && ids.push(live);
+  let ids2 = [], live = getLiveSessionId();
+  live && ids2.push(live);
   let shell = String(getSessionId());
-  return ids.includes(shell) || ids.push(shell), ids;
+  return ids2.includes(shell) || ids2.push(shell), ids2;
 }
 function wireSchedulerSessionLifecycle(opts = {}) {
   let storePath = opts.storePath ?? schedulerStorePath(), io = fileSchedulerStoreIO(storePath), onError = opts.onError ?? (() => {
@@ -571669,11 +572168,11 @@ async function launchReplProduction() {
     launchMode && (tpc.mode = launchMode), tpc.isBypassPermissionsModeAvailable = isBypassPermissionsModeAvailable, bypassModeLaunch = isBypassPermissionsModeAvailable;
     let effectiveConfig;
     try {
-      let { feature: feature3 } = await Promise.resolve().then(() => (init_bun_bundle(), bun_bundle_exports)), { getAutoModeEnabledStateIfCached: getAutoModeEnabledStateIfCached2 } = await Promise.resolve().then(() => (init_permissionSetup(), permissionSetup_exports)), factoryDefaultAutoEligible = getAutoModeEnabledStateIfCached2() !== "disabled";
-      effectiveConfig = resolveSemaConfig({
+      let { feature: feature3 } = await Promise.resolve().then(() => (init_bun_bundle(), bun_bundle_exports)), { getAutoModeEnabledStateIfCached: getAutoModeEnabledStateIfCached2 } = await Promise.resolve().then(() => (init_permissionSetup(), permissionSetup_exports)), factoryDefaultAutoEligible = getAutoModeEnabledStateIfCached2() !== "disabled", seamOpts = {
         launchMode,
         factoryDefaultAuto: factoryDefaultAutoEligible
-      });
+      };
+      effectiveConfig = resolveSemaConfig(seamOpts);
       let dm = effectiveConfig.derivedMode;
       if (tpc.mode = dm === "bypassPermissions" && !isBypassPermissionsModeAvailable ? "default" : dm, bypassModeLaunch = tpc.mode === "bypassPermissions", tpc.mode === "auto") {
         let { setAutoModeActive: setAutoModeActive2 } = await Promise.resolve().then(() => (init_autoModeState(), autoModeState_exports));
@@ -571696,16 +572195,16 @@ async function launchReplProduction() {
             });
           }
         }
-        let stampMode = resolveSendSettingsMode(process.env.SEMA_SEND_SETTINGS), fullWire = toWireSettings(resolveEffective(), effectiveConfig);
+        let stampMode = resolveSendSettingsMode(process.env.SEMA_SEND_SETTINGS), { assembleInteractiveWireStamp: assembleInteractiveWireStamp2 } = await Promise.resolve().then(() => (init_interactiveSettingsStamp(), interactiveSettingsStamp_exports)), wireStampAssembly = assembleInteractiveWireStamp2({ stampMode, seamOpts }), fullWire = wireStampAssembly.bootWire;
         try {
           for (let msg of describeUnenforceableRules(unenforceableSettingsRules(fullWire)))
             process.stderr.write(`[sema] ${msg}
 `), bootFailClosedNotices.push(msg);
         } catch {
         }
-        let { readCliToolFlagsWire: readCliToolFlagsWire2 } = await Promise.resolve().then(() => (init_settingsRulesWire(), settingsRulesWire_exports)), stampSupplier = () => buildWireSettingsStamp(stampMode, fullWire, { cliToolFlags: readCliToolFlagsWire2() }), { setSeamConfig: setSeamConfig2 } = await Promise.resolve().then(() => (init_seamQuery(), seamQuery_exports));
-        setSeamConfig2(stampSupplier), setWireStampProvenance({ full: fullWire, sendMode: stampMode, cliToolFlags: readCliToolFlagsWire2() });
-        let stamp2 = stampSupplier();
+        let stampSupplier = wireStampAssembly.supplier, { setSeamConfig: setSeamConfig2 } = await Promise.resolve().then(() => (init_seamQuery(), seamQuery_exports));
+        setSeamConfig2(stampSupplier);
+        let stamp2 = wireStampAssembly.bootStamp;
         if (stamp2) {
           if (process.env.SEMA_DEBUG) {
             let p = stamp2.permissions ?? {};