@sema-agent/cli 1.0.129 → 1.0.130

package/npm-shrinkwrap.json

@@ -1,16 +1,16 @@
 {
   "name": "@sema-agent/cli",
-  "version": "1.0.129",
+  "version": "1.0.130",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@sema-agent/cli",
-      "version": "1.0.129",
+      "version": "1.0.130",
       "license": "BUSL-1.1",
       "dependencies": {
         "@sema-agent/sdk": "11.3.0",
-        "@sema-agent/server": "7.93.3"
+        "@sema-agent/server": "7.93.5"
       },
       "bin": {
         "sema": "sema.js"
@@ -645,9 +645,9 @@
       }
     },
     "node_modules/@sema-agent/server": {
-      "version": "7.93.3",
-      "resolved": "https://registry.npmjs.org/@sema-agent/server/-/server-7.93.3.tgz",
-      "integrity": "sha512-pKBMMmCxO0dgQ5VamgFB3oaaD4eQgrT0+92yF5hh7/6E9ovskezacGJESi/zpptQ67pc0EhQf0WdvOkPahMo+A==",
+      "version": "7.93.5",
+      "resolved": "https://registry.npmjs.org/@sema-agent/server/-/server-7.93.5.tgz",
+      "integrity": "sha512-wAZa/GoBjCT8K+cviFDleWOe1NHrhjYetdsTR9lB/avj2rg2EwloTVC5aNXmQmybVp/es9I7j8G35CVRUx3+Iw==",
       "license": "BUSL-1.1",
       "dependencies": {
         "@sema-agent/core": "7.26.2",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@sema-agent/cli",
-  "version": "1.0.129",
-  "gitHead": "f0088d775748abee12ecead485d26d21ad82274a",
+  "version": "1.0.130",
+  "gitHead": "09da74e8ea0a82b0ffa2e48f6f8e877b112be7e5",
   "description": "Sema — your own Claude Code-grade coding agent, in the terminal.",
   "license": "BUSL-1.1",
   "bin": {
@@ -25,13 +25,13 @@
   ],
   "dependencies": {
     "@sema-agent/sdk": "11.3.0",
-    "@sema-agent/server": "7.93.3"
+    "@sema-agent/server": "7.93.5"
   },
   "overrides": {
     "@sema-agent/core": "7.26.2",
     "@sema-agent/settings-schema": "3.0.0"
   },
-  "semaEngineVersion": "server 7.93.3 / core 7.26.2 / settings-schema 3.0.0",
+  "semaEngineVersion": "server 7.93.5 / core 7.26.2 / settings-schema 3.0.0",
   "engines": {
     "node": ">=20.3"
   }

package/sema-main.js

@@ -15261,6 +15261,10 @@ function readRunCostFacts(stats3, observed) {
     reconcile
   };
 }
+function structuredOutputParts(r) {
+  let so = r.structuredOutput;
+  return so !== void 0 ? { structured_output: so, structuredOutput: so } : {};
+}
 function effectiveFactParts(rec) {
   let reasoning = readEffectiveReasoning(rec.effectiveReasoning), scopes = readEffectiveMemoryScopes(rec.effectiveMemoryScopes);
   return {
@@ -15475,10 +15479,7 @@ function doneToSdkResult(ev, ctx, observed) {
     is_error: !1,
     num_turns: stats3?.turns ?? 0,
     result: r.result ?? "",
-    ...(() => {
-      let so = r.structuredOutput;
-      return so !== void 0 ? { structuredOutput: so } : {};
-    })(),
+    ...structuredOutputParts(r),
     ...degraded !== void 0 ? { degraded } : {},
     stop_reason: null,
     total_cost_usd: costOrNull(stats3),
@@ -16631,7 +16632,7 @@ var REQUEST_FIELD_MATRIX, LIVE_DEFAULT_FIELDS, TASK_REQUEST_OMISSION_CAUSES, TAS
       { field: "limits", lanes: ["print", "utility"], live: !0, why: "P2-3-b:`-p` \u7684\u9884\u7B97\u62A4\u680F(--max-* flag \u65CF),\u4EA4\u4E92 REPL \u7531\u4EBA\u968F\u65F6 Esc", whyUtilityLane: "\u6709\u5EA7:side-channel \u5FC5\u987B\u5E26\u9884\u7B97\u62A4\u680F(\u5899\u949F / \u8F93\u51FA token / \u8F6E\u6570)\u2014\u2014 \u5B83\u540C\u6837\u6CA1\u6709\u4EBA\u770B\u7740,\u800C\u4E14\u6CA1\u6709\u540E\u7EED\u56DE\u5408\u53EF\u4EE5\u4E2D\u65AD" },
       { field: "interactiveTools", lanes: ["print", "utility"], live: !0, why: "[909]B \u4EF63:\u65E0\u4EBA\u503C\u5B88 stamp false,\u4ECE roster \u6E90\u5934\u706D\u6389 AskUserQuestion/plan \u95E8\u3002\u4EA4\u4E92\u8F66\u9053 stamp false \u7B49\u4E8E\u81EA\u5E9F\u6B66\u529F", whyUtilityLane: "\u6709\u5EA7:side-channel \u7EDD\u4E0D\u8BE5\u5F39\u4EA4\u4E92\u95EE\u7B54 / plan \u95E8(\u6CA1\u6709\u4EBA\u5728\u770B\u8FD9\u6761\u63D0\u4EA4)\u3002\u5B83\u4E0E excludeAllTools \u662F**\u4E24\u6761\u72EC\u7ACB**\u7684\u6536\u7D27\u58F0\u660E\u3001\u5728\u8FD9\u6761\u8F66\u9053\u4E0A**\u5E76\u5B58**(\u672C\u8F66\u9053\u5F3A\u5236\u5E26\u5378\u8F7D\u58F0\u660E,\u89C1 `refuseUtilityWithoutToolUnload`;\u8FD9\u4E00\u4F4D\u662F\u5B83\u65C1\u8FB9\u90A3\u6761\u300C\u8FDE\u95EE\u90FD\u522B\u95EE\u300D\u7684\u58F0\u660E,\u4E0D\u662F\u5B83\u7684\u964D\u7EA7\u66FF\u8EAB)" },
       { field: "oneShot", lanes: ["print", "utility"], live: !0, why: "SDK TaskRequest.oneShot(server \u22657.12.0 \u6D88\u8D39):`-p` \u63D0\u4EA4\u662F\u4E00\u6B21\u6027\u7684\u2014\u2014\u6CA1\u6709\u540E\u7EED\u56DE\u5408\u63A5\u4F4F\u5F02\u6B65\u540E\u53F0\u901A\u77E5,core \u636E\u6B64\u628A\u300C\u7ED3\u675F\u56DE\u5408\u7B49\u901A\u77E5\u300D\u6307\u5F15\u6362\u6210 block-wait;\u4EA4\u4E92\u8F66\u9053\u6709\u540E\u7EED\u56DE\u5408,stamp true \u5C31\u662F\u8C0E\u62A5\u3002\u8001 worker \u9759\u9ED8\u5FFD\u7565(\u5F00\u96C6\u63D0\u4EA4\u4F53),\u6545\u53D1\u9001\u4FA7\u4E0D\u8BBE\u80FD\u529B\u4F4D\u524D\u7F6E\u95E8(oneShotWireCaps \u5934\u6CE8)", whyUtilityLane: "\u6709\u5EA7:side-channel \u5C31\u662F\u4E00\u6B21\u6027\u63D0\u4EA4 \u2014\u2014 \u6CA1\u6709\u540E\u7EED\u56DE\u5408\u63A5\u4F4F\u5F02\u6B65\u540E\u53F0\u901A\u77E5,\u5F15\u64CE\u636E\u6B64\u628A\u300C\u7ED3\u675F\u56DE\u5408\u7B49\u901A\u77E5\u300D\u6362\u6210 block-wait" },
-      { field: "outputSchema", lanes: ["print", "utility"], live: !0, why: "\u7ED3\u6784\u5316\u8F93\u51FA\u7EA6\u675F(sdk `TaskRequest.outputSchema`:\u6700\u7EC8\u7B54\u6848\u5FC5\u987B\u5339\u914D\u7684 JSON Schema)\u3002\u4E0A\u6E38\u53EA\u9A8C\u5F62\u72B6\u4E0E\u5E8F\u5217\u5316\u5C3A\u5BF8(\u574F\u5F62 400 \u54CD\u4EAE\u62D2)\u3001\u6DF1\u5C42\u5408\u6CD5\u6027\u5F52\u5F15\u64CE \u21D2 \u672C\u5C42\u539F\u6837\u900F\u4F20\u3001\u4E0D\u9884\u94F8\u7B2C\u4E8C\u5224\u5B98\u3002\u6765\u6E90\u53EA\u5728\u65E0\u4EBA\u503C\u5B88\u8F66\u9053(`--json-schema` \u4E00\u7C7B\u65D7);\u4EA4\u4E92\u9762\u4ECA\u5929\u6CA1\u6709\u5165\u53E3 \u21D2 \u7F3A\u5E2D\u662F**\u6CA1\u6709\u6765\u6E90**,\u4E0D\u662F\u6F0F\u3002\u26A0\uFE0F \u672C\u884C\u53EA\u7BA1**\u4E0A\u884C**\u8FD9\u4E00\u4F4D:\u7ED3\u679C\u4E00\u4FA7\u7684\u7ED3\u6784\u5316\u4EA7\u51FA\u843D\u4E0D\u843D CC \u5F62 result \u5E27\u662F\u4E0B\u884C\u6295\u5F71\u7684\u4E8B,\u4E0D\u5728\u672C\u8868", whyUtilityLane: "\u6709\u5EA7:side-channel \u7684\u5178\u578B\u5F62\u6B63\u662F\u300C\u8981\u4E00\u4E2A\u53EF\u673A\u8BFB\u7684\u5C0F\u7B54\u6848\u300D(\u5206\u7C7B / \u6458\u8981 / \u62BD\u53D6),\u7ED3\u6784\u5316\u8F93\u51FA\u7EA6\u675F\u662F\u5B83\u6700\u76F4\u63A5\u7684\u4F4D,\u800C schema \u7531\u58F3\u81EA\u5DF1\u7ED9 \u21D2 \u6709\u6765\u6E90" },
+      { field: "outputSchema", lanes: ["print", "utility"], live: !0, why: "\u7ED3\u6784\u5316\u8F93\u51FA\u7EA6\u675F(sdk `TaskRequest.outputSchema`:\u6700\u7EC8\u7B54\u6848\u5FC5\u987B\u5339\u914D\u7684 JSON Schema)\u3002\u4E0A\u6E38\u53EA\u9A8C\u5F62\u72B6\u4E0E\u5E8F\u5217\u5316\u5C3A\u5BF8(\u574F\u5F62 400 \u54CD\u4EAE\u62D2)\u3001\u6DF1\u5C42\u5408\u6CD5\u6027\u5F52\u5F15\u64CE \u21D2 \u672C\u5C42\u539F\u6837\u900F\u4F20\u3001\u4E0D\u9884\u94F8\u7B2C\u4E8C\u5224\u5B98\u3002\u6765\u6E90\u53EA\u53EF\u80FD\u5728\u65E0\u4EBA\u503C\u5B88\u8F66\u9053(schema \u7531\u58F3\u7684\u65E0\u4EBA\u503C\u5B88\u5165\u53E3\u7ED9;\u54EA\u4E2A\u58F3\u4ECA\u5929\u771F\u7684\u63A5\u4E86\u90A3\u6761\u5165\u53E3\u662F\u58F3\u4FA7\u7684\u4E8B,\u672C\u8868\u53EA\u8BF4\u5EA7\u4F4D);\u4EA4\u4E92\u9762\u4ECA\u5929\u6CA1\u6709\u5165\u53E3 \u21D2 \u7F3A\u5E2D\u662F**\u6CA1\u6709\u6765\u6E90**,\u4E0D\u662F\u6F0F\u3002\u26A0\uFE0F \u672C\u884C\u53EA\u7BA1**\u4E0A\u884C**\u8FD9\u4E00\u4F4D:\u7ED3\u679C\u4E00\u4FA7\u7684\u7ED3\u6784\u5316\u4EA7\u51FA\u843D\u4E0D\u843D CC \u5F62 result \u5E27\u662F\u4E0B\u884C\u6295\u5F71\u7684\u4E8B,\u4E0D\u5728\u672C\u8868", whyUtilityLane: "\u6709\u5EA7:side-channel \u7684\u5178\u578B\u5F62\u6B63\u662F\u300C\u8981\u4E00\u4E2A\u53EF\u673A\u8BFB\u7684\u5C0F\u7B54\u6848\u300D(\u5206\u7C7B / \u6458\u8981 / \u62BD\u53D6),\u7ED3\u6784\u5316\u8F93\u51FA\u7EA6\u675F\u662F\u5B83\u6700\u76F4\u63A5\u7684\u4F4D,\u800C schema \u7531\u58F3\u81EA\u5DF1\u7ED9 \u21D2 \u6709\u6765\u6E90" },
       { field: "outputRetries", lanes: ["print", "utility"], live: !0, why: "\u7ED3\u6784\u5316\u8F93\u51FA\u7684\u91CD\u8BD5\u8F6E\u6570(sdk `TaskRequest.outputRetries`;\u4E0E `outputSchema` \u662F**\u6210\u5BF9\u65CB\u94AE** \u2014\u2014 \u6CA1\u6709 schema \u65F6\u5F15\u64CE\u5FFD\u7565\u5B83)\u3002\u{1F534} \u5EA7\u4F4D\u96C6\u4E0E `outputSchema` \u90A3\u4E00\u884C**\u9010\u5B57\u76F8\u540C**:\u4E00\u534A\u6709\u5EA7\u4E00\u534A\u6CA1\u5EA7 = \u7AEF\u8C03\u5F97\u52A8\u91CD\u8BD5\u8F6E\u6570\u5374\u8C03\u4E0D\u52A8\u5B83\u6240\u670D\u52A1\u7684\u7EA6\u675F(\u540C\u5EA7\u5B6A\u751F\u5206\u5F00\u5B9A\u5EA7,\u6B63\u662F\u300C\u4E3B\u8F74\u6539\u4E86\u3001\u5B6A\u751F\u6F0F\u4E86\u300D\u90A3\u4E00\u65CF)\u3002\u4E0A\u6E38\u63A5\u53D7\u57DF\u5F88\u7A84(\u6709\u9650\u3001\u22651\u3001\u5411\u4E0B\u53D6\u6574\u3001\u5C01\u9876 10),**\u8868\u5916\u4E00\u5F8B\u6574\u952E\u7701\u7565**\u5E76\u56DE\u843D\u5F15\u64CE\u7F3A\u7701 \u21D2 \u672C\u5C42\u5BF9\u574F\u503C**\u54CD\u4EAE\u62D2**(\u89C1 `refuseBadOutputRetries`),\u4F46**\u4E0D\u9884\u5939** [1,10]:\u5939\u662F\u4E0A\u6E38\u7684\u4E8B,\u672C\u5C42\u4E0D\u94F8\u7B2C\u4E8C\u5224\u5B98", whyUtilityLane: "\u6709\u5EA7:\u4E0E outputSchema \u540C\u5EA7\u5B6A\u751F \u2014\u2014 side-channel \u8981\u673A\u8BFB\u5C0F\u7B54\u6848\u65F6,\u91CD\u8BD5\u8F6E\u6570\u662F\u540C\u4E00\u4E2A\u65CB\u94AE\u7684\u53E6\u4E00\u534A" },
       { field: "maxCostUsd", lanes: ["print", "utility"], live: !0, why: "\u82B1\u8D39\u4E0A\u9650\u58F0\u660E(sdk `TaskRequest.maxCostUsd`,\u8BF7\u6C42\u4F53**\u9876\u5C42**\u4F4D;\u4E0A\u6E38\u5411\u4E0B\u5939\u5230\u90E8\u7F72\u4E0A\u9650 \u2014\u2014 \u53EA\u8BB8\u8981\u5F97\u66F4\u5C11)\u3002\u4E0E `limits` \u540C\u4E00\u6761\u7406\u7531\u53EA\u5728\u65E0\u4EBA\u503C\u5B88\u8F66\u9053:\u4EA4\u4E92\u9762\u7531\u4EBA\u968F\u65F6\u4E2D\u65AD\u3002\u{1F534} \u574F\u503C(\u975E\u6570 / \u975E\u6709\u9650 / \u975E\u6B63)\u5728\u672C\u5C42**\u54CD\u4EAE\u62D2**:\u4E0A\u6E38\u5BF9\u8FD9\u4E00\u4F4D\u7684\u574F\u503C\u662F\u5B89\u9759\u5FFD\u7565\u5E76\u56DE\u843D\u90E8\u7F72\u4E0A\u9650,\u4E0D\u662F 4xx(\u89C1 `refuseBadMaxCostUsd`)", whyUtilityLane: "\u6709\u5EA7:\u5C0F\u9884\u7B97\u662F\u672C\u8F66\u9053\u7684\u5B9A\u4E49\u4E4B\u4E00(\u4E0E limits \u540C\u4E00\u6761\u7406\u7531);\u4E0A\u6E38\u5411\u4E0B\u5939\u5230\u90E8\u7F72\u4E0A\u9650,\u53EA\u8BB8\u8981\u5F97\u66F4\u5C11" },
       { field: "maxTokens", lanes: ["print", "utility"], live: !0, why: "\u6574\u4EFB\u52A1 token \u9884\u7B97\u4E0A\u9650\u58F0\u660E(sdk `TaskRequest.maxTokens`,\u8BF7\u6C42\u4F53**\u9876\u5C42**\u4F4D,\u4E0E `maxCostUsd` \u540C\u5C5E\u4E0A\u6E38\u90A3\u4E00\u65CF\u300C\u8C03\u7528\u65B9\u8981\u6C42\u7684\u4E0A\u9650\u300D:\u5411\u4E0B\u5939\u5230\u90E8\u7F72\u4E0A\u9650 \u2014\u2014 \u53EA\u8BB8\u8981\u5F97\u66F4\u5C11)\u3002\u{1F534} \u5EA7\u4F4D\u96C6\u4E0E `maxCostUsd` \u90A3\u4E00\u884C**\u9010\u5B57\u76F8\u540C**:\u540C\u4E00\u6761\u9884\u7B97\u8F74\u7684\u4E24\u79CD\u8BA1\u4EF7\u5355\u4F4D,\u5206\u5F00\u5B9A\u5EA7\u5C31\u662F\u8BA9\u5176\u4E2D\u4E00\u6761\u9759\u9ED8\u6F02\u3002\u{1F534} \u574F\u503C(\u975E\u6570 / \u975E\u6709\u9650 / \u975E\u6B63 / \u975E\u6574)\u5728\u672C\u5C42**\u54CD\u4EAE\u62D2**:\u4E0A\u6E38\u5BF9\u8FD9\u4E00\u4F4D\u7684\u574F\u503C\u662F\u5B89\u9759\u6309\u300C\u8C03\u7528\u65B9\u6CA1\u7ED9\u300D\u5904\u7406\u5E76\u56DE\u843D\u90E8\u7F72\u4E0A\u9650,\u4E0D\u662F 4xx \u2014\u2014 \u90E8\u7F72\u6CA1\u8BBE\u4E0A\u9650\u65F6\u8FD9\u4E00\u6B21\u8FD0\u884C\u5C31\u6CA1\u6709 token \u95F8,\u800C\u58F0\u660E\u4EBA\u4E0D\u4F1A\u77E5\u9053(\u89C1 `refuseBadMaxTokens`)", whyUtilityLane: "\u6709\u5EA7:\u4E0E maxCostUsd \u540C\u8F74\u5B6A\u751F \u2014\u2014 \u5C0F\u9884\u7B97\u662F\u672C\u8F66\u9053\u7684\u5B9A\u4E49\u4E4B\u4E00,\u4E24\u79CD\u8BA1\u4EF7\u5355\u4F4D\u90FD\u8BE5\u80FD\u58F0\u660E" },
@@ -22165,8 +22166,11 @@ function isToolApprovalFrame(ev) {
   return !!e && (e.type === "tool_approval" || e.type === "tool_approval_complete") && typeof e.approvalId == "string" && e.approvalId.length > 0;
 }
 function pathFromGateMessage(message) {
-  if (typeof message == "string")
-    return FS_WRITE_GATE_ASK_PATTERN.exec(message)?.[1];
+  if (typeof message != "string" || !message.startsWith(FS_WRITE_GATE_ASK_PREFIX))
+    return;
+  let body = message.slice(FS_WRITE_GATE_ASK_PREFIX.length), close = body.indexOf(FS_WRITE_GATE_ASK_PATH_CLOSE);
+  if (!(close <= 0) && body.indexOf(FS_WRITE_GATE_ASK_PATH_CLOSE, close + 1) === -1)
+    return body.slice(0, close);
 }
 function isNonNegativeFinite(v2) {
   return typeof v2 == "number" && Number.isFinite(v2) && v2 >= 0;
@@ -22388,7 +22392,7 @@ async function surfaceToolApprovalFrameAndRespond(frame, respond, streamArgs, si
     return hostLog("debug", `liveToolApprovalWire: respond(${decision}) failed for ${frame.approvalId} (status=${respondRefusal?.status ?? "none"} errorCode=${logSafeErrorCode(respondRefusal?.errorCode)} messageLen=${respondRefusal?.message?.length ?? 0}) \u2014 engine self-settles (TTL/abort); the refusal text is handed back on outcome.respondRefusal for the host to surface`), respondRefusal !== void 0 ? { decision: "unresolved", respondRefusal } : { decision: "unresolved" };
   }
 }
-var APPROVAL_DENY_SETTLED_BY_WORDS, RETRACTED_CARD_DECISION_KIND, cardPortByKey, cardPortMissesByKey, TOOL_APPROVAL_FRAME_KEYS_MIRROR, MANDATED_ABSENCE_WORD, RESPOND_DECISIONS, USELESS_REFUSAL_TEXTS, MACHINE_CODE_SHAPE, FS_WRITE_GATE_ASK_PATTERN, MAX_RULE_OFFERS_TOLERATED, MAX_RULE_OFFER_BATCH_MEMBERS_TOLERATED, MAX_RULE_OFFER_UNCOVERED_DETAIL_TOLERATED, MAX_RESPOND_NOTE_CHARS, init_toolApprovalWire = __esm({
+var APPROVAL_DENY_SETTLED_BY_WORDS, RETRACTED_CARD_DECISION_KIND, cardPortByKey, cardPortMissesByKey, TOOL_APPROVAL_FRAME_KEYS_MIRROR, MANDATED_ABSENCE_WORD, RESPOND_DECISIONS, USELESS_REFUSAL_TEXTS, MACHINE_CODE_SHAPE, FS_WRITE_GATE_ASK_PREFIX, FS_WRITE_GATE_ASK_PATH_CLOSE, MAX_RULE_OFFERS_TOLERATED, MAX_RULE_OFFER_BATCH_MEMBERS_TOLERATED, MAX_RULE_OFFER_UNCOVERED_DETAIL_TOLERATED, MAX_RESPOND_NOTE_CHARS, init_toolApprovalWire = __esm({
   "node_modules/@sema-agent/client-core/dist/hitl/toolApprovalWire.js"() {
     init_hitlBridge();
     init_askParkRowRouting();
@@ -22436,7 +22440,7 @@ var APPROVAL_DENY_SETTLED_BY_WORDS, RETRACTED_CARD_DECISION_KIND, cardPortByKey,
     RESPOND_DECISIONS = ["allow", "allow_session", "deny"];
     USELESS_REFUSAL_TEXTS = /* @__PURE__ */ new Set(["[object Object]", "null", "undefined", ""]);
     MACHINE_CODE_SHAPE = /^[A-Za-z0-9._:-]{1,64}$/;
-    FS_WRITE_GATE_ASK_PATTERN = /^approve write to "([^"]+)"\?$/;
+    FS_WRITE_GATE_ASK_PREFIX = 'approve write to "', FS_WRITE_GATE_ASK_PATH_CLOSE = '"?';
     MAX_RULE_OFFERS_TOLERATED = 8, MAX_RULE_OFFER_BATCH_MEMBERS_TOLERATED = 8, MAX_RULE_OFFER_UNCOVERED_DETAIL_TOLERATED = 32;
     MAX_RESPOND_NOTE_CHARS = 2048;
   }
@@ -70760,6 +70764,11 @@ Keep messages tight \u2014 the decision, the file:line, the PR number. Second pe
 function normalizeLegacyToolName(name) {
   return LEGACY_TOOL_NAME_ALIASES[name] ?? name;
 }
+function retiredToolNameInRule(rule) {
+  for (let [legacy, canonical2] of Object.entries(LEGACY_TOOL_NAME_ALIASES))
+    if (canonical2 !== legacy && (rule === legacy || rule.startsWith(`${legacy}(`)))
+      return { legacy, canonical: canonical2 };
+}
 function getLegacyToolNames(canonicalName) {
   let result = [];
   for (let [legacy, canonical2] of Object.entries(LEGACY_TOOL_NAME_ALIASES))
@@ -72182,10 +72191,18 @@ function isDiagnosticValue(value) {
   let bare = value.replace(/[.,;:!?)\]}'"]{0,8}$/, "").toLowerCase();
   return bare === "" || DIAGNOSTIC_VALUE_WORDS.has(bare);
 }
+function isTokenCountLabel(text2, at, label) {
+  if (label.toLowerCase() !== "tokens" || at === 0 || text2[at - 1] !== "_") return !1;
+  let i = at - 1;
+  for (; i > 0 && isIdentChar(text2[i - 1]); ) i--;
+  let head = text2.slice(i, at - 1).toLowerCase();
+  return TOKEN_COUNT_HEAD_WORDS.has(head.slice(head.lastIndexOf("_") + 1));
+}
 function redactByLabel(text2, re, exempt = !0) {
   let out6 = "", last4 = 0;
   re.lastIndex = 0;
   for (let m2 = re.exec(text2); m2 !== null; m2 = re.exec(text2)) {
+    if (isTokenCountLabel(text2, m2.index, m2[1] ?? "")) continue;
     let v2 = scanSecretValue(text2, m2.index + m2[0].length);
     if (v2 === null) continue;
     let value = text2.slice(v2.start, v2.end);
@@ -72349,7 +72366,7 @@ function displaySafeMcpConfigForMachine(config4) {
   }
   return root2;
 }
-var DISPLAY_REDACTION_MARKER_RE, REDACTED_USERINFO, REDACTED_QUERY, REDACTED_FRAGMENT, TOKEN_STOP, TRAILING_PUNCTUATION, VALUE_BOUNDARY_TAIL, isWhitespaceOrControl, isSchemeChar, isAlpha, isHexDigit2, SCHEMELESS_USERINFO, MAX_FREE_TEXT_WASH_PASSES, REDACTED_SECRET, DIAGNOSTIC_VALUE_WORDS, BARE_VALUE_STOP_CHARS, isBareValueStop, SECRET_SCHEME_WORD, SECRET_LABELLED_WORD, SECRET_OPTION_NAME, LONG_OPTION_NAME, SECRET_CONFIG_NAME, init_displaySafeUrl = __esm({
+var DISPLAY_REDACTION_MARKER_RE, REDACTED_USERINFO, REDACTED_QUERY, REDACTED_FRAGMENT, TOKEN_STOP, TRAILING_PUNCTUATION, VALUE_BOUNDARY_TAIL, isWhitespaceOrControl, isSchemeChar, isAlpha, isHexDigit2, SCHEMELESS_USERINFO, MAX_FREE_TEXT_WASH_PASSES, REDACTED_SECRET, DIAGNOSTIC_VALUE_WORDS, BARE_VALUE_STOP_CHARS, isBareValueStop, TOKEN_COUNT_HEAD_WORDS, isIdentChar, SECRET_SCHEME_WORD, SECRET_LABELLED_WORD, SECRET_OPTION_NAME, LONG_OPTION_NAME, SECRET_CONFIG_NAME, init_displaySafeUrl = __esm({
   "build-src/src/sema/displaySafeUrl.ts"() {
     DISPLAY_REDACTION_MARKER_RE = /^«redacted(?::[a-z-]{1,16}){0,2}»$/, REDACTED_USERINFO = "\xABredacted:userinfo\xBB", REDACTED_QUERY = "\xABredacted:query\xBB", REDACTED_FRAGMENT = "\xABredacted:fragment\xBB";
     TOKEN_STOP = /* @__PURE__ */ new Set(['"', "<", ">", "`", "|", "\\", "^", "{", "}"]), TRAILING_PUNCTUATION = /* @__PURE__ */ new Set([".", ",", ";", ":", "!", "?", "'"]), VALUE_BOUNDARY_TAIL = /[?#&=;]$/, isWhitespaceOrControl = (ch2) => {
@@ -72436,6 +72453,39 @@ var DISPLAY_REDACTION_MARKER_RE, REDACTED_USERINFO, REDACTED_QUERY, REDACTED_FRA
       "apikey",
       "api-key"
     ]), BARE_VALUE_STOP_CHARS = /* @__PURE__ */ new Set([",", ";", '"', "'", "\\", "(", ")", "[", "]", "{", "}", "<", ">"]), isBareValueStop = (ch2) => ch2 <= " " || BARE_VALUE_STOP_CHARS.has(ch2);
+    TOKEN_COUNT_HEAD_WORDS = /* @__PURE__ */ new Set([
+      "max",
+      "min",
+      "num",
+      "n",
+      "input",
+      "output",
+      "total",
+      "prompt",
+      "completion",
+      "thinking",
+      "reasoning",
+      "cache",
+      "cached",
+      "context",
+      "budget",
+      "used",
+      "remaining",
+      "reserved",
+      "new",
+      "effective",
+      "limit",
+      "sampled",
+      "generated",
+      "response",
+      "request",
+      "cumulative",
+      "image",
+      "audio",
+      "text",
+      "tool"
+      // 刻意不收 `system`:别的鉴权体系里「system token」是真凭据名(test [7938] 提醒),`system_tokens=` 计数形罕见 ⇒ 留在遮蔽一侧。
+    ]), isIdentChar = (ch2) => ch2 >= "a" && ch2 <= "z" || ch2 >= "A" && ch2 <= "Z" || ch2 >= "0" && ch2 <= "9" || ch2 === "_";
     SECRET_SCHEME_WORD = /(?:\b|(?<=\\[A-Za-z"']))(bearer|basic)[\s:=\uFF1A\uFF1D]{1,8}/gi, SECRET_LABELLED_WORD = /(?:\b|(?<=_)|(?<=\\[A-Za-z"']))((?:access[-_ ]?|refresh[-_ ]?|id[-_ ]?|client[-_ ]?|api[-_ ]?|x[-_]api[-_ ]?|session[-_ ]?|auth[-_ ]?)?(?:token|key|secret|password|authorization|credential)s?)(?:\\{0,4}["'])?\s{0,4}[:=\uFF1A\uFF1D]\s{0,4}/gi;
     SECRET_OPTION_NAME = /^(?:access[-_]?|refresh[-_]?|id[-_]?|client[-_]?|api[-_]?|x[-_]api[-_]?|session[-_]?|auth[-_]?)?(?:token|key|secret|password|authorization|credential)s?$/i, LONG_OPTION_NAME = /^--[A-Za-z]/;
     SECRET_CONFIG_NAME = /(?:^|[-_.])(?:token|key|secret|password|authorization|credential|cookie)s?$/i;
@@ -129706,6 +129756,13 @@ var scenarioUserTurn, SESSION_ID, TASK_ID, READ_CALL_ID, BASH_CALL_ID, EDIT_CALL
   }
 });
 
+// build-src/src/sema/processTitle.ts
+var SEMA_PROCESS_TITLE, init_processTitle = __esm({
+  "build-src/src/sema/processTitle.ts"() {
+    SEMA_PROCESS_TITLE = "sema";
+  }
+});
+
 // build-src/src/sema/spawnNameRegistry.ts
 function subagentTypeForHooks(agentType) {
   return agentType !== void 0 && agentType !== "" ? agentType : ABSENT_SUBAGENT_TYPE;
@@ -252850,6 +252907,17 @@ var ENGINE_URL_ENV, TRUSTED_ENGINE_HOSTS_KEY, isLoopbackEngineUrl, isEngineTrans
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/sdkRegistryTransit.js
+import { RegistryClient } from "@sema-agent/sdk/registry";
+import { getMeConfig, getScopeConfigDraft, getEffective } from "@sema-agent/sdk/registry";
+import { probeRegistryHealth, postFeedback } from "@sema-agent/sdk/registry";
+import { REGISTRY_AUTH_PATHS, skillContentAddress } from "@sema-agent/sdk/registry";
+import { RegistryApiError, OAuthFlowError } from "@sema-agent/sdk/registry";
+var init_sdkRegistryTransit = __esm({
+  "node_modules/@sema-agent/client-core/dist/sdkRegistryTransit.js"() {
+  }
+});
+
 // build-src/src/sema/cloudProfile.ts
 import { existsSync as existsSync22, mkdirSync as mkdirSync17, readFileSync as readFileSync30, writeFileSync as writeFileSync18, chmodSync as chmodSync4, openSync as openSync13, fsyncSync as fsyncSync11, closeSync as closeSync13, renameSync as renameSync14, unlinkSync as unlinkSync12 } from "fs";
 import { join as join80, dirname as dirname39 } from "path";
@@ -252980,7 +253048,6 @@ var init_cloudProfile = __esm({
 });
 
 // build-src/src/sema/registrySdkClient.ts
-import { RegistryClient } from "@sema-agent/sdk/registry";
 function lockedTokenProvider(profileName) {
   let lastIssuedRefreshToken, foreignRotationObserved = !1;
   return {
@@ -253033,6 +253100,7 @@ function registryClientForProfile(registryUrl, profileName, opts = {}) {
 }
 var REGISTRY_TIMEOUT_MS, toTokens, init_registrySdkClient = __esm({
   "build-src/src/sema/registrySdkClient.ts"() {
+    init_sdkRegistryTransit();
     init_cloudProfile();
     REGISTRY_TIMEOUT_MS = 8e3, toTokens = (creds, profileName) => {
       let entry = creds[profileName];
@@ -253056,10 +253124,6 @@ __export(cloudAuth_exports, {
   switchScope: () => switchScope
 });
 import {
-  RegistryClient as RegistryClient2,
-  REGISTRY_AUTH_PATHS,
-  OAuthFlowError,
-  RegistryApiError,
   requestDeviceCode as sdkRequestDeviceCode,
   pollUntilApproved as sdkPollUntilApproved,
   refreshTokens as sdkRefreshTokens,
@@ -253150,7 +253214,7 @@ async function refreshTokens(registryUrl, refreshToken) {
   }
 }
 async function revokeGrant(registryUrl, refreshToken, accessToken) {
-  let client3 = new RegistryClient2({
+  let client3 = new RegistryClient({
     baseUrl: normalizeRegistryUrl(registryUrl),
     tokens: ephemeralTokenProvider(accessToken ?? "", refreshToken)
   }), status3, json2;
@@ -253172,7 +253236,7 @@ async function revokeGrant(registryUrl, refreshToken, accessToken) {
     );
 }
 function scopeClient(registryUrl, accessToken) {
-  return new RegistryClient2({
+  return new RegistryClient({
     baseUrl: normalizeRegistryUrl(registryUrl),
     tokens: ephemeralTokenProvider(accessToken)
   });
@@ -253330,6 +253394,7 @@ async function getValidAccessToken(profileName) {
 }
 var CloudAuthError, sdkStatus, isSdkError, REFRESH_SKEW_MS, init_cloudAuth = __esm({
   "build-src/src/sema/cloudAuth.ts"() {
+    init_sdkRegistryTransit();
     init_registrySdkClient();
     init_cloudProfile();
     CloudAuthError = class extends Error {
@@ -396168,11 +396233,6 @@ __export(cloudConfigWire_exports, {
 });
 import { existsSync as existsSync26, mkdirSync as mkdirSync21, readFileSync as readFileSync41, writeFileSync as writeFileSync22 } from "node:fs";
 import { dirname as dirname53, join as join125 } from "node:path";
-import {
-  getEffective,
-  getScopeConfigDraft,
-  skillContentAddress
-} from "@sema-agent/sdk/registry";
 function cloudConfigEnabled() {
   try {
     let resolved = resolveProfile();
@@ -396337,6 +396397,7 @@ function shadowModelsExists(profileName) {
 }
 var lastState, inflight3, bannerPrinted, init_cloudConfigWire = __esm({
   "build-src/src/sema/cloudConfigWire.ts"() {
+    init_sdkRegistryTransit();
     init_registrySdkClient();
     init_cloudProfile();
     init_dist();
@@ -423165,7 +423226,10 @@ var classifierDecisionModule, autoModeStateModule4, CLASSIFIER_FAIL_CLOSED_REFRE
 // build-src/src/utils/permissions/permissionSetup.ts
 var permissionSetup_exports = {};
 __export(permissionSetup_exports, {
+  FACTORY_DEFAULT_AUTO_MODE_BODY: () => FACTORY_DEFAULT_AUTO_MODE_BODY,
   FACTORY_DEFAULT_AUTO_MODE_NOTICE: () => FACTORY_DEFAULT_AUTO_MODE_NOTICE,
+  FACTORY_DEFAULT_AUTO_MODE_POINTER: () => FACTORY_DEFAULT_AUTO_MODE_POINTER,
+  FACTORY_DEFAULT_AUTO_MODE_TITLE: () => FACTORY_DEFAULT_AUTO_MODE_TITLE,
   __resetFactoryDefaultAutoForTests: () => __resetFactoryDefaultAutoForTests,
   checkAndDisableBypassPermissions: () => checkAndDisableBypassPermissions,
   createDisabledBypassPermissionsContext: () => createDisabledBypassPermissionsContext,
@@ -423174,6 +423238,7 @@ __export(permissionSetup_exports, {
   findDangerousClassifierPermissions: () => findDangerousClassifierPermissions,
   findOverlyBroadBashPermissions: () => findOverlyBroadBashPermissions2,
   findOverlyBroadPowerShellPermissions: () => findOverlyBroadPowerShellPermissions,
+  foldAdditionalWorkingDirectories: () => foldAdditionalWorkingDirectories,
   getAutoModeEnabledState: () => getAutoModeEnabledState,
   getAutoModeEnabledStateIfCached: () => getAutoModeEnabledStateIfCached,
   getAutoModeUnavailableNotification: () => getAutoModeUnavailableNotification,
@@ -423196,6 +423261,7 @@ __export(permissionSetup_exports, {
   prepareContextForPlanMode: () => prepareContextForPlanMode,
   removeDangerousPermissions: () => removeDangerousPermissions2,
   restoreDangerousPermissions: () => restoreDangerousPermissions,
+  retiredToolNameNotices: () => retiredToolNameNotices,
   shouldDisableBypassPermissions: () => shouldDisableBypassPermissions,
   shouldPlanUseAutoMode: () => shouldPlanUseAutoMode,
   stripDangerousPermissionsForAutoMode: () => stripDangerousPermissionsForAutoMode,
@@ -423464,6 +423530,18 @@ function deriveCliArgDenyRules({
   }
   return parsed;
 }
+function retiredToolNameNotices(lists) {
+  let seen2 = /* @__PURE__ */ new Set(), notices = [];
+  for (let list of lists)
+    if (!(!list || list.length === 0))
+      for (let rule of parseToolListFromCLI([...list])) {
+        let retired = retiredToolNameInRule(rule);
+        retired === void 0 || seen2.has(retired.legacy) || (seen2.add(retired.legacy), notices.push(
+          `Warning: "${retired.legacy}" is a retired tool name \u2014 treating it as "${retired.canonical}".`
+        ));
+      }
+  return notices;
+}
 function parseBaseToolsFromCLI(baseTools) {
   let joinedInput = baseTools.join(" ").trim();
   return parseToolPreset(joinedInput) ? getToolsForDefaultPreset() : parseToolListFromCLI(baseTools);
@@ -423572,7 +423650,11 @@ async function initializeToolPermissionContext({
 }) {
   let parsedAllowedToolsCli = parseToolListFromCLI(allowedToolsCli).map(
     (rule) => permissionRuleValueToString(permissionRuleValueFromString(rule))
-  ), parsedDisallowedToolsCli = deriveCliArgDenyRules({ disallowedToolsCli, baseToolsCli }), warnings = [], additionalWorkingDirectories = /* @__PURE__ */ new Map(), processPwd = process.env.PWD;
+  ), parsedDisallowedToolsCli = deriveCliArgDenyRules({ disallowedToolsCli, baseToolsCli }), warnings = [];
+  warnings.push(
+    ...retiredToolNameNotices([allowedToolsCli, disallowedToolsCli, baseToolsCli])
+  );
+  let additionalWorkingDirectories = /* @__PURE__ */ new Map(), processPwd = process.env.PWD;
   processPwd && processPwd !== getOriginalCwd() && isSymlinkTo({ originalCwd: getOriginalCwd(), processPwd }) && additionalWorkingDirectories.set(processPwd, {
     path: processPwd,
     source: "session"
@@ -423595,26 +423677,34 @@ async function initializeToolPermissionContext({
       isAutoModeAvailable: isAutoModeGateEnabled()
     },
     rulesFromDisk
-  ), allAdditionalDirectories = [
-    ...settings2.permissions?.additionalDirectories || [],
-    ...addDirs
-  ], validationResults = await Promise.all(
-    allAdditionalDirectories.map(
-      (dir) => validateDirectoryForWorkspace(dir, toolPermissionContext)
-    )
+  ), folded = await foldAdditionalWorkingDirectories({
+    toolPermissionContext,
+    directories: [
+      ...settings2.permissions?.additionalDirectories || [],
+      ...addDirs
+    ]
+  });
+  return toolPermissionContext = folded.toolPermissionContext, warnings.push(...folded.warnings), {
+    toolPermissionContext,
+    warnings,
+    dangerousPermissions,
+    overlyBroadBashPermissions
+  };
+}
+async function foldAdditionalWorkingDirectories({
+  toolPermissionContext,
+  directories
+}) {
+  let context3 = toolPermissionContext, warnings = [], validationResults = await Promise.all(
+    directories.map((dir) => validateDirectoryForWorkspace(dir, context3))
   );
   for (let result of validationResults)
-    result.resultType === "success" ? toolPermissionContext = applyPermissionUpdate(toolPermissionContext, {
+    result.resultType === "success" ? context3 = applyPermissionUpdate(context3, {
       type: "addDirectories",
       directories: [result.absolutePath],
       destination: "cliArg"
     }) : result.resultType !== "alreadyInWorkingDirectory" && result.resultType !== "pathNotFound" && warnings.push(addDirHelpMessage(result));
-  return {
-    toolPermissionContext,
-    warnings,
-    dangerousPermissions,
-    overlyBroadBashPermissions
-  };
+  return { toolPermissionContext: context3, warnings };
 }
 function getAutoModeUnavailableNotification(reason) {
   let base;
@@ -423765,7 +423855,7 @@ function transitionPlanAutoMode(context3) {
   let want = shouldPlanUseAutoMode(), have = autoModeStateModule5?.isAutoModeActive() ?? !1;
   return want && have ? stripDangerousPermissionsForAutoMode(context3) : !want && !have ? context3 : want ? (autoModeStateModule5?.setAutoModeActive(!0), setNeedsAutoModeExitAttachment(!1), stripDangerousPermissionsForAutoMode(context3)) : (autoModeStateModule5?.setAutoModeActive(!1), setNeedsAutoModeExitAttachment(!0), restoreDangerousPermissions(context3));
 }
-var autoModeStateModule5, factoryDefaultAutoActive, FACTORY_DEFAULT_AUTO_MODE_NOTICE, AUTO_MODE_ENABLED_DEFAULT, NO_CACHED_AUTO_MODE_CONFIG, init_permissionSetup = __esm({
+var autoModeStateModule5, factoryDefaultAutoActive, FACTORY_DEFAULT_AUTO_MODE_TITLE, FACTORY_DEFAULT_AUTO_MODE_BODY, FACTORY_DEFAULT_AUTO_MODE_POINTER, FACTORY_DEFAULT_AUTO_MODE_NOTICE, AUTO_MODE_ENABLED_DEFAULT, NO_CACHED_AUTO_MODE_CONFIG, init_permissionSetup = __esm({
   "build-src/src/utils/permissions/permissionSetup.ts"() {
     init_state();
     init_cwd();
@@ -423793,7 +423883,9 @@ var autoModeStateModule5, factoryDefaultAutoActive, FACTORY_DEFAULT_AUTO_MODE_NO
     init_permissionRuleParser();
     autoModeStateModule5 = (init_autoModeState(), __toCommonJS(autoModeState_exports));
     factoryDefaultAutoActive = !1;
-    FACTORY_DEFAULT_AUTO_MODE_NOTICE = "permission mode: auto (factory default) \u2014 shift+tab to change it";
+    FACTORY_DEFAULT_AUTO_MODE_TITLE = "permission mode: auto (factory default) \u2014 shift+tab to change it", FACTORY_DEFAULT_AUTO_MODE_BODY = "Auto mode lets Sema handle permission prompts automatically. Sema checks each tool call for risky actions and prompt injection before executing, runs the ones it assesses as lower-risk, and blocks the rest.", FACTORY_DEFAULT_AUTO_MODE_POINTER = "Run /help to see this again, or shift+tab to switch modes.", FACTORY_DEFAULT_AUTO_MODE_NOTICE = `${FACTORY_DEFAULT_AUTO_MODE_TITLE}
+${FACTORY_DEFAULT_AUTO_MODE_BODY}
+${FACTORY_DEFAULT_AUTO_MODE_POINTER}`;
     AUTO_MODE_ENABLED_DEFAULT = "disabled";
     NO_CACHED_AUTO_MODE_CONFIG = /* @__PURE__ */ Symbol("no-cached-auto-mode-config");
   }
@@ -426313,7 +426405,6 @@ var init_feedbackCenterSinkCaps = __esm({
 });
 
 // build-src/src/sema/feedbackCenterSink.ts
-import { postFeedback, RegistryApiError as RegistryApiError2 } from "@sema-agent/sdk/registry";
 function resolveFeedbackCenterGate() {
   let resolved = resolveProfile(), hasCredentials = !!(resolved && readCredentials()[resolved.name]);
   return feedbackCenterGateFromState(resolved?.profile, resolved?.name, hasCredentials);
@@ -426344,11 +426435,12 @@ async function submitFeedbackToCenter(data, signal) {
     let { id } = await postFeedback(client3, buildFeedbackCenterRequestBody(data), signal ? { signal } : {});
     return { success: !0, feedbackId: id };
   } catch (e) {
-    return e instanceof RegistryApiError2 ? e.status >= 200 && e.status < 300 ? { success: !1, error: "server_error", message: "Couldn't send feedback: response did not return an id." } : { success: !1, error: "server_error", message: `Couldn't send feedback (server returned ${e.status}).` } : { success: !1, error: "network_error", message: "Couldn't send feedback (couldn't reach the service)." };
+    return e instanceof RegistryApiError ? e.status >= 200 && e.status < 300 ? { success: !1, error: "server_error", message: "Couldn't send feedback: response did not return an id." } : { success: !1, error: "server_error", message: `Couldn't send feedback (server returned ${e.status}).` } : { success: !1, error: "network_error", message: "Couldn't send feedback (couldn't reach the service)." };
   }
 }
 var init_feedbackCenterSink = __esm({
   "build-src/src/sema/feedbackCenterSink.ts"() {
+    init_sdkRegistryTransit();
     init_cloudProfile();
     init_cloudAuth();
     init_registrySdkClient();
@@ -429151,31 +429243,23 @@ var sema_brand_default, init_sema_brand = __esm({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.129",
+        version: "1.0.130",
         notes: [
-          "Bundled engine 7.93.3 (core 7.26.2), client runtime 0.79.0 and client SDK 11.3.0. /doctor and the engine line report 7.93.3.",
-          "Quitting sema and starting it again right away no longer fails with an engine startup error while the previous engine is still shutting down: sema waits for it (and says so only when the wait takes more than a moment), then starts a fresh engine.",
-          "-p --model <name> is sent to the engine: a model that is not in the catalog is refused by name, and the init line shows the model that actually ran.",
-          "-p --agents definitions reach the model: agents declared on the command line are listed alongside the ones on disk, and a command-line definition overrides a same-named one on disk.",
-          "-p --json-schema constrains the answer: the result carries the structured output; a value that is not a JSON object is refused on one line with a non-zero exit instead of a stack trace.",
-          "--mcp-config and --strict-mcp-config work when starting the interactive session, not only with -p: the servers show up in /mcp and are reachable by the model.",
-          'In the slash-command menu, Enter runs what you typed: if no listed command starts with it, the input is submitted as is and answered with "Unknown command: /x" plus a "Did you mean" hint for a close name, instead of running the first menu entry. Tab still completes.',
-          "In -p mode under the default permission mode, stderr says up front that tools needing approval will be denied and how to change that; the same sentence is in --help.",
-          "A tool denied by policy in a run with no approval prompt tells the model it was denied by policy, not that the user declined.",
-          'Project writes are no longer folded into "scratchpad edit" rows just because a directory is named scratchpad; only the real scratchpad directory counts.',
-          `The onboarding wizard fits an 80\xD724 terminal: the "enter to start" line and the theme picker's hint stay on screen instead of being cut off.`,
-          "The interactive session prints a starting-up line immediately, and a second line when it starts or reuses the local engine, instead of staying blank until the engine answers.",
-          "/mcp server details show the engine's view of the server; a lost shell-side connection is noted as such instead of being shown as a failed server.",
-          "Deleting a rule from the Deny tab explains what removing it changes, and the panel stays on the Deny tab afterwards.",
-          "/tasks details show a delegated agent's report as plain text, with a note when the agent was stopped before finishing or produced no text.",
-          "--max-budget-usd rejects amounts it cannot read (exponent, hex, leading-dot, zero, negative, infinite) on one line with a non-zero exit.",
-          "Credentials pasted into error messages, MCP server URLs (including path parameters), plugin list --json, and the agents panel are redacted consistently; control characters and bidi marks in engine output cannot reach the terminal.",
-          "The webSearch section is taken from one settings source as a whole: a project's provider/endpoint can no longer borrow the user's key, and an untrusted workspace's webSearch section is ignored.",
-          "A background agent that finishes while the session is idle is announced on screen at once, not after the next message."
+          "Bundled engine 7.93.5 (core 7.26.2), client runtime 0.79.1 and client SDK 11.3.0. /doctor and the engine line report 7.93.5.",
+          "-p --json-schema: the structured output now arrives on the result line as structured_output (the older structuredOutput spelling is still present in this release); without --json-schema neither key is present.",
+          "Write approval cards show the target path on engine deployments that do not provide guarded writes (previously the card could show an empty write).",
+          "First screen in the factory auto permission mode explains what auto mode does and how to switch (three lines instead of one); /help has a Permission modes section with the same wording.",
+          "--help marks --ax-screen-reader, --plugin-url, --exclude-dynamic-system-prompt-sections, --fallback-model and --remote-control-session-name-prefix as recognized for compatibility but not wired yet; the --scenario, --fallback-model and --file descriptions now match what the flags do.",
+          "--add-dir works in the interactive session the same way as with -p (existing directories are added; a file path is skipped with a note).",
+          "--agent-teams: the team_create tool description tells the model how to work with named background agents instead of describing an empty team.",
+          "Slash-command typeahead: pressing Enter with stale text in the same input batch no longer runs a different command than the one on screen.",
+          "stream-json: the system/init line lists the Agent tool under the same name the stream uses (no longer the retired Task name), so a consumer that builds its own allow/deny list from that line matches what actually runs; --disallowedTools Task is still honoured and says it was applied to Agent.",
+          "The process name reported by ps is sema for -p runs and subcommands (doctor, mcp, plugin, auth), not only for the interactive session; CLAUDE_CODE_DISABLE_TERMINAL_TITLE=1 still leaves it untouched.",
+          "Printed diagnostics: a token count such as max_tokens=7 or num_tokens = 1024 is no longer replaced by the credential placeholder; credential-looking labels (api_key=, access_tokens=, ANTHROPIC_AUTH_TOKEN=) are still replaced."
         ]
       },
-      productVersion: "1.0.129",
-      announcement: "sema 1.0.129 \u2014 engine 7.93.3 pickup (core 7.26.2), client runtime 0.79.0, client SDK 11.3.0. Restarting sema right after quitting waits for the old engine instead of failing; -p --model, --agents and --json-schema now reach the engine and --mcp-config works in the interactive session; a tool denied by policy in -p mode is reported as a policy denial; Enter in the slash-command menu no longer runs the first entry when your text matches nothing; the onboarding wizard fits 80\xD724; the session prints a starting-up line at once; /mcp details, the Deny tab's delete card and /tasks reports are clearer; credentials in errors, URLs and panels are redacted consistently.",
+      productVersion: "1.0.130",
+      announcement: "sema 1.0.130 \u2014 engine 7.93.5 pickup (core 7.26.2), client runtime 0.79.1, client SDK 11.3.0. Structured output from -p --json-schema arrives as structured_output; --add-dir works in the interactive session; the first screen explains the factory auto permission mode; --help says which compatibility flags have no effect yet; the stream-json init line names tools the same way the stream does; a max_tokens value is no longer hidden as a credential.",
       version: "1.0.91"
     };
   }
@@ -456519,31 +456603,23 @@ var require_sema_brand = __commonJS({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.129",
+        version: "1.0.130",
         notes: [
-          "Bundled engine 7.93.3 (core 7.26.2), client runtime 0.79.0 and client SDK 11.3.0. /doctor and the engine line report 7.93.3.",
-          "Quitting sema and starting it again right away no longer fails with an engine startup error while the previous engine is still shutting down: sema waits for it (and says so only when the wait takes more than a moment), then starts a fresh engine.",
-          "-p --model <name> is sent to the engine: a model that is not in the catalog is refused by name, and the init line shows the model that actually ran.",
-          "-p --agents definitions reach the model: agents declared on the command line are listed alongside the ones on disk, and a command-line definition overrides a same-named one on disk.",
-          "-p --json-schema constrains the answer: the result carries the structured output; a value that is not a JSON object is refused on one line with a non-zero exit instead of a stack trace.",
-          "--mcp-config and --strict-mcp-config work when starting the interactive session, not only with -p: the servers show up in /mcp and are reachable by the model.",
-          'In the slash-command menu, Enter runs what you typed: if no listed command starts with it, the input is submitted as is and answered with "Unknown command: /x" plus a "Did you mean" hint for a close name, instead of running the first menu entry. Tab still completes.',
-          "In -p mode under the default permission mode, stderr says up front that tools needing approval will be denied and how to change that; the same sentence is in --help.",
-          "A tool denied by policy in a run with no approval prompt tells the model it was denied by policy, not that the user declined.",
-          'Project writes are no longer folded into "scratchpad edit" rows just because a directory is named scratchpad; only the real scratchpad directory counts.',
-          `The onboarding wizard fits an 80\xD724 terminal: the "enter to start" line and the theme picker's hint stay on screen instead of being cut off.`,
-          "The interactive session prints a starting-up line immediately, and a second line when it starts or reuses the local engine, instead of staying blank until the engine answers.",
-          "/mcp server details show the engine's view of the server; a lost shell-side connection is noted as such instead of being shown as a failed server.",
-          "Deleting a rule from the Deny tab explains what removing it changes, and the panel stays on the Deny tab afterwards.",
-          "/tasks details show a delegated agent's report as plain text, with a note when the agent was stopped before finishing or produced no text.",
-          "--max-budget-usd rejects amounts it cannot read (exponent, hex, leading-dot, zero, negative, infinite) on one line with a non-zero exit.",
-          "Credentials pasted into error messages, MCP server URLs (including path parameters), plugin list --json, and the agents panel are redacted consistently; control characters and bidi marks in engine output cannot reach the terminal.",
-          "The webSearch section is taken from one settings source as a whole: a project's provider/endpoint can no longer borrow the user's key, and an untrusted workspace's webSearch section is ignored.",
-          "A background agent that finishes while the session is idle is announced on screen at once, not after the next message."
+          "Bundled engine 7.93.5 (core 7.26.2), client runtime 0.79.1 and client SDK 11.3.0. /doctor and the engine line report 7.93.5.",
+          "-p --json-schema: the structured output now arrives on the result line as structured_output (the older structuredOutput spelling is still present in this release); without --json-schema neither key is present.",
+          "Write approval cards show the target path on engine deployments that do not provide guarded writes (previously the card could show an empty write).",
+          "First screen in the factory auto permission mode explains what auto mode does and how to switch (three lines instead of one); /help has a Permission modes section with the same wording.",
+          "--help marks --ax-screen-reader, --plugin-url, --exclude-dynamic-system-prompt-sections, --fallback-model and --remote-control-session-name-prefix as recognized for compatibility but not wired yet; the --scenario, --fallback-model and --file descriptions now match what the flags do.",
+          "--add-dir works in the interactive session the same way as with -p (existing directories are added; a file path is skipped with a note).",
+          "--agent-teams: the team_create tool description tells the model how to work with named background agents instead of describing an empty team.",
+          "Slash-command typeahead: pressing Enter with stale text in the same input batch no longer runs a different command than the one on screen.",
+          "stream-json: the system/init line lists the Agent tool under the same name the stream uses (no longer the retired Task name), so a consumer that builds its own allow/deny list from that line matches what actually runs; --disallowedTools Task is still honoured and says it was applied to Agent.",
+          "The process name reported by ps is sema for -p runs and subcommands (doctor, mcp, plugin, auth), not only for the interactive session; CLAUDE_CODE_DISABLE_TERMINAL_TITLE=1 still leaves it untouched.",
+          "Printed diagnostics: a token count such as max_tokens=7 or num_tokens = 1024 is no longer replaced by the credential placeholder; credential-looking labels (api_key=, access_tokens=, ANTHROPIC_AUTH_TOKEN=) are still replaced."
         ]
       },
-      productVersion: "1.0.129",
-      announcement: "sema 1.0.129 \u2014 engine 7.93.3 pickup (core 7.26.2), client runtime 0.79.0, client SDK 11.3.0. Restarting sema right after quitting waits for the old engine instead of failing; -p --model, --agents and --json-schema now reach the engine and --mcp-config works in the interactive session; a tool denied by policy in -p mode is reported as a policy denial; Enter in the slash-command menu no longer runs the first entry when your text matches nothing; the onboarding wizard fits 80\xD724; the session prints a starting-up line at once; /mcp details, the Deny tab's delete card and /tasks reports are clearer; credentials in errors, URLs and panels are redacted consistently.",
+      productVersion: "1.0.130",
+      announcement: "sema 1.0.130 \u2014 engine 7.93.5 pickup (core 7.26.2), client runtime 0.79.1, client SDK 11.3.0. Structured output from -p --json-schema arrives as structured_output; --add-dir works in the interactive session; the first screen explains the factory auto permission mode; --help says which compatibility flags have no effect yet; the stream-json init line names tools the same way the stream does; a max_tokens value is no longer hidden as a credential.",
       version: "1.0.91"
     };
   }
@@ -496270,23 +496346,20 @@ var init_teamMemPaths = __esm({
 var systemInit_exports = {};
 __export(systemInit_exports, {
   buildSystemInitMessage: () => buildSystemInitMessage,
-  localFastModeDisabledReason: () => localFastModeDisabledReason,
-  sdkCompatToolName: () => sdkCompatToolName
+  localFastModeDisabledReason: () => localFastModeDisabledReason
 });
 import { randomUUID as randomUUID37 } from "crypto";
 function localFastModeDisabledReason() {
   return isFastModeEnabled() ? void 0 : "disabled_by_env";
 }
-function sdkCompatToolName(name) {
-  return name === AGENT_TOOL_NAME ? LEGACY_AGENT_TOOL_NAME : name;
-}
 function buildSystemInitMessage(inputs) {
   let outputStyle2 = inputs.outputStyle, initMessage = {
     type: "system",
     subtype: "init",
     cwd: getCwd(),
     session_id: getSessionId(),
-    tools: inputs.tools.map((tool) => sdkCompatToolName(tool.name)),
+    // L-502:引擎 wire 上那个名字原样上报(修前过 sdkCompatToolName 翻成退休名;头注有取证与理由)
+    tools: inputs.tools.map((tool) => tool.name),
     mcp_servers: inputs.mcpClients.map((client3) => ({
       name: client3.name,
       status: client3.type
@@ -496328,7 +496401,6 @@ function buildSystemInitMessage(inputs) {
 var init_systemInit = __esm({
   "build-src/src/utils/messages/systemInit.ts"() {
     init_state();
-    init_constants3();
     init_config5();
     init_policyLimits();
     init_paths();
@@ -513871,6 +513943,9 @@ function shouldAutoSelectCommandSuggestion(input, suggestions) {
 function unarmedEnterSubmitsVerbatim(suggestionType) {
   return suggestionType === "command" || suggestionType === "custom-title" || suggestionType === "file" || suggestionType === "slack-channel";
 }
+function resolveTypeaheadEnterPrelude(a) {
+  return a.suggestionType === "command" && a.liveInput !== a.renderedInput ? { kind: "stale-command-input", value: a.liveInput } : a.selectedSuggestion < 0 || a.suggestionCount === 0 ? a.suggestionCount > 0 && unarmedEnterSubmitsVerbatim(a.suggestionType) ? { kind: "submit-verbatim", value: a.liveInput } : { kind: "swallow" } : { kind: "fall-through" };
+}
 function applyCommandSuggestion(suggestion, shouldExecute, commands, onInputChange, setCursorOffset, onSubmit) {
   if (typeof suggestion != "string") {
     let argReplacement = asCommandArgReplacement(suggestion.metadata);
@@ -514311,6 +514386,7 @@ function useTypeahead({
   onSubmit,
   setCursorOffset,
   input,
+  liveInputRef,
   cursorOffset,
   mode,
   agents: agents3,
@@ -514740,14 +514816,47 @@ function useTypeahead({
       })), setSuggestionType(suggestionType2), setMaxColumnWidth(void 0));
     }
   }, [suggestions, selectedSuggestion, input, suggestionType, commands, mode, onInputChange, setCursorOffset, onSubmit, clearSuggestions, cursorOffset, updateSuggestions, mcpResources, setSuggestionsState, agents3, debouncedFetchFileSuggestions, debouncedFetchSlackChannels, effectiveGhostText]), handleEnter = (0, import_react251.useCallback)(() => {
-    if (selectedSuggestion < 0 || suggestions.length === 0) {
-      suggestions.length > 0 && unarmedEnterSubmitsVerbatim(suggestionType) && (debouncedFetchFileSuggestions.cancel(), debouncedFetchSlackChannels.cancel(), clearSuggestions(), onSubmit(
-        input,
+    let liveInput = liveInputRef?.current ?? input, prelude = resolveTypeaheadEnterPrelude({
+      renderedInput: input,
+      liveInput,
+      suggestionType,
+      suggestionCount: suggestions.length,
+      selectedSuggestion
+    });
+    if (prelude.kind === "stale-command-input") {
+      debouncedFetchFileSuggestions.cancel(), debouncedFetchSlackChannels.cancel(), clearSuggestions();
+      let value = prelude.value;
+      if (mode === "prompt" && isCommandInput(value) && value.slice(1).trim() !== "") {
+        let freshItems = generateCommandSuggestions(value, commands), freshFirst = freshItems[0];
+        if (freshFirst && shouldAutoSelectCommandSuggestion(value, freshItems)) {
+          applyCommandSuggestion(
+            freshFirst,
+            !0,
+            // execute on return
+            commands,
+            onInputChange,
+            setCursorOffset,
+            onSubmit
+          );
+          return;
+        }
+      }
+      onSubmit(
+        value,
         /* isSubmittingSlashCommand */
         !0
-      ));
+      );
+      return;
+    }
+    if (prelude.kind === "submit-verbatim") {
+      debouncedFetchFileSuggestions.cancel(), debouncedFetchSlackChannels.cancel(), clearSuggestions(), onSubmit(
+        prelude.value,
+        /* isSubmittingSlashCommand */
+        !0
+      );
       return;
     }
+    if (prelude.kind === "swallow") return;
     let suggestion = suggestions[selectedSuggestion];
     if (suggestionType === "command" && selectedSuggestion < suggestions.length)
       suggestion && (applyCommandSuggestion(
@@ -514804,7 +514913,7 @@ function useTypeahead({
       }
       debouncedFetchFileSuggestions.cancel(), clearSuggestions();
     }
-  }, [suggestions, selectedSuggestion, suggestionType, commands, input, cursorOffset, mode, onInputChange, setCursorOffset, onSubmit, clearSuggestions, debouncedFetchFileSuggestions, debouncedFetchSlackChannels]), handleAutocompleteAccept = (0, import_react251.useCallback)(() => {
+  }, [suggestions, selectedSuggestion, suggestionType, commands, input, liveInputRef, cursorOffset, mode, onInputChange, setCursorOffset, onSubmit, clearSuggestions, debouncedFetchFileSuggestions, debouncedFetchSlackChannels]), handleAutocompleteAccept = (0, import_react251.useCallback)(() => {
     handleTab();
   }, [handleTab]), handleAutocompleteDismiss = (0, import_react251.useCallback)(() => {
     debouncedFetchFileSuggestions.cancel(), debouncedFetchSlackChannels.cancel(), clearSuggestions(), dismissedForInputRef.current = input;
@@ -518669,10 +518778,10 @@ function PromptInput({
     show: !1
   }), [cursorOffset, setCursorOffset] = (0, import_react272.useState)(input.length), localBatchSyncRef = React164.useRef(null), batchTextSyncRef = batchTextSyncRefProp ?? localBatchSyncRef, onInputChange = React164.useCallback((value) => {
     batchTextSyncRef.current?.(value), onInputChangeProp(value);
-  }, [onInputChangeProp, batchTextSyncRef]), lastInternalInputRef = React164.useRef(input);
-  input !== lastInternalInputRef.current && (setCursorOffset(input.length), lastInternalInputRef.current = input);
+  }, [onInputChangeProp, batchTextSyncRef]), lastInternalInputRef = React164.useRef(input), liveInputTextRef = React164.useRef(input);
+  input !== lastInternalInputRef.current && (setCursorOffset(input.length), lastInternalInputRef.current = input, liveInputTextRef.current = input);
   let trackAndSetInput = React164.useCallback((value) => {
-    lastInternalInputRef.current = value, onInputChange(value);
+    lastInternalInputRef.current = value, liveInputTextRef.current = value, onInputChange(value);
   }, [onInputChange]);
   insertTextRef && (insertTextRef.current = {
     cursorOffset,
@@ -518975,7 +519084,7 @@ function PromptInput({
     submitCount,
     viewingAgentName
   }), onChange = (0, import_react272.useCallback)((value) => {
-    if (value === "?") {
+    if (liveInputTextRef.current = value, value === "?") {
       setHelpOpen((v2) => !v2);
       return;
     }
@@ -519132,6 +519241,8 @@ function PromptInput({
     onSubmit,
     setCursorOffset,
     input,
+    // 见 liveInputTextRef 的头注:批内它就是输入框将要提交的那段文本,而 `input` prop 还差一拍。
+    liveInputRef: liveInputTextRef,
     cursorOffset,
     mode,
     agents: agents3,
@@ -542230,6 +542341,7 @@ var ENTERPRISE_MCP_STRICT_REJECTION, ENTERPRISE_MCP_DYNAMIC_REJECTION, init_mcpC
 var unwiredFlagNotice_exports = {};
 __export(unwiredFlagNotice_exports, {
   UNWIRED_FLAGS: () => UNWIRED_FLAGS,
+  UNWIRED_FLAG_HELP_SUFFIX: () => UNWIRED_FLAG_HELP_SUFFIX,
   flagUnwiredOnLane: () => flagUnwiredOnLane,
   resetUnwiredFlagNotices: () => resetUnwiredFlagNotices,
   takeUnwiredFlagNotice: () => takeUnwiredFlagNotice,
@@ -542259,7 +542371,7 @@ function flagUnwiredOnLane(spec, lane) {
 function resetUnwiredFlagNotices() {
   noticed2.clear();
 }
-var UNWIRED_FLAGS, noticed2, init_unwiredFlagNotice = __esm({
+var UNWIRED_FLAGS, UNWIRED_FLAG_HELP_SUFFIX, noticed2, init_unwiredFlagNotice = __esm({
   "build-src/src/sema/unwiredFlagNotice.ts"() {
     UNWIRED_FLAGS = [
       { optionKey: "thinkingDisplay", flag: "--thinking-display", argvToken: "--thinking-display" },
@@ -542272,9 +542384,8 @@ var UNWIRED_FLAGS, noticed2, init_unwiredFlagNotice = __esm({
       { optionKey: "replyOnResume", flag: "--reply-on-resume", argvToken: "--reply-on-resume" },
       { optionKey: "pluginDirNoMcp", flag: "--plugin-dir-no-mcp", argvToken: "--plugin-dir-no-mcp" },
       { optionKey: "pluginUrl", flag: "--plugin-url", argvToken: "--plugin-url" },
-      { optionKey: "background", flag: "--bg/--background", argvToken: "--background" },
-      { optionKey: "bg", flag: "--bg/--background", argvToken: "--bg" },
       { optionKey: "axScreenReader", flag: "--ax-screen-reader", argvToken: "--ax-screen-reader" },
+      { optionKey: "remoteControlSessionNamePrefix", flag: "--remote-control-session-name-prefix", argvToken: "--remote-control-session-name-prefix" },
       // L-433(1.0.125,活性普查)—— `-p` 车道上「解析了、传下去了、没人读」的那一族。
       // `--json-schema`:1.0.129 起 print 车道真上 wire(L-480),交互车道仍零消费点 —— 车道位理由
       // 与判据坐标见本文件头注「接线是按车道成立的」那一段(与 `--max-budget-usd` 同档)。
@@ -542287,7 +542398,7 @@ var UNWIRED_FLAGS, noticed2, init_unwiredFlagNotice = __esm({
       { optionKey: "maxBudgetUsd", flag: "--max-budget-usd", argvToken: "--max-budget-usd", lanes: ["interactive"] },
       { optionKey: "fallbackModel", flag: "--fallback-model", argvToken: "--fallback-model" },
       { optionKey: "permissionPromptTool", flag: "--permission-prompt-tool", argvToken: "--permission-prompt-tool" }
-    ];
+    ], UNWIRED_FLAG_HELP_SUFFIX = " Recognized for CC compatibility but not wired in this sema build yet \u2014 it currently has no effect.";
     noticed2 = /* @__PURE__ */ new Set();
   }
 });
@@ -550397,7 +550508,6 @@ __export(cloudAdmin_exports, {
   imageFaceAbsence: () => imageFaceAbsence,
   imageFaceAbsenceLines: () => imageFaceAbsenceLines
 });
-import { OAuthFlowError as OAuthFlowError2 } from "@sema-agent/sdk/registry";
 function fail3(e) {
   err4(`Error: ${e instanceof Error ? e.message : String(e)}`), process.exit(1);
 }
@@ -550430,7 +550540,7 @@ async function api(ctx, path28, init2) {
     });
     return { status: r.status, json: asRec2(r.body) ?? {} };
   } catch (e) {
-    throw e instanceof OAuthFlowError2 ? new CloudAuthError(
+    throw e instanceof OAuthFlowError ? new CloudAuthError(
       `the registry rejected your session (${e.code}) \u2014 sign in again: sema cloud login`,
       e.code,
       401
@@ -551190,6 +551300,7 @@ async function cloudPublishWithdraw(options) {
 }
 var out2, err4, asRec2, asArr2, asStr3, asNum2, ROLES, pad, colWidth, fmtTime, AUDIT_KINDS, IMAGE_STATUSES, shortDigest, fmtSize, init_cloudAdmin = __esm({
   "build-src/src/cli/handlers/cloudAdmin.ts"() {
+    init_sdkRegistryTransit();
     init_config_fns();
     init_cloudAuth();
     init_cloudProfile();
@@ -551961,7 +552072,6 @@ __export(cloudResources_exports, {
 import { createHash as createHash31 } from "node:crypto";
 import { existsSync as existsSync38, readdirSync as readdirSync15, readFileSync as readFileSync58, statSync as statSync18 } from "node:fs";
 import { basename as basename70, dirname as dirname92, isAbsolute as isAbsolute34, join as join202, resolve as resolve53 } from "node:path";
-import { getEffective as getEffective2, getMeConfig, getScopeConfigDraft as getScopeConfigDraft2, OAuthFlowError as OAuthFlowError3, RegistryApiError as RegistryApiError3 } from "@sema-agent/sdk/registry";
 function fail5(e) {
   err6(`Error: ${e instanceof Error ? e.message : String(e)}`), process.exit(1);
 }
@@ -552028,7 +552138,7 @@ async function personalFetch(auth2, path28, init2) {
     });
     return { status: r.status, json: asRec3(r.body) ?? {} };
   } catch (e) {
-    throw e instanceof OAuthFlowError3 ? new CloudAuthError(`the registry rejected your session (${e.code}) \u2014 sign in again: sema cloud login`, e.code, 401) : new CloudAuthError(`cannot reach registry at ${auth2.registryUrl}: ${e instanceof Error ? e.message : String(e)}`);
+    throw e instanceof OAuthFlowError ? new CloudAuthError(`the registry rejected your session (${e.code}) \u2014 sign in again: sema cloud login`, e.code, 401) : new CloudAuthError(`cannot reach registry at ${auth2.registryUrl}: ${e instanceof Error ? e.message : String(e)}`);
   }
 }
 async function meConfigGet(auth2, domain2, forUser) {
@@ -552036,9 +552146,9 @@ async function meConfigGet(auth2, domain2, forUser) {
   try {
     return await getMeConfig(client3, domain2, forUser ? { forUser } : {});
   } catch (e) {
-    if (e instanceof OAuthFlowError3)
+    if (e instanceof OAuthFlowError)
       throw new CloudAuthError(`the registry rejected your session (${e.code}) \u2014 sign in again: sema cloud login`, e.code, 401);
-    if (e instanceof RegistryApiError3) {
+    if (e instanceof RegistryApiError) {
       let json2 = asRec3(e.body) ?? {};
       if (forUser) {
         let managed = managedLaneError(forUser, e.status, json2);
@@ -552152,19 +552262,19 @@ async function teamFetch(ctx, path28, init2) {
     });
     return { status: r.status, json: asRec3(r.body) ?? {} };
   } catch (e) {
-    throw e instanceof OAuthFlowError3 ? new CloudAuthError(`the registry rejected your session (${e.code}) \u2014 sign in again: sema cloud login`, e.code, 401) : new CloudAuthError(`cannot reach registry at ${ctx.registryUrl}: ${e instanceof Error ? e.message : String(e)}`);
+    throw e instanceof OAuthFlowError ? new CloudAuthError(`the registry rejected your session (${e.code}) \u2014 sign in again: sema cloud login`, e.code, 401) : new CloudAuthError(`cannot reach registry at ${ctx.registryUrl}: ${e instanceof Error ? e.message : String(e)}`);
   }
 }
 async function teamConfigGetDraft(ctx, domain2) {
   try {
-    let draft = await getScopeConfigDraft2(ctx.client, ctx.space, domain2);
+    let draft = await getScopeConfigDraft(ctx.client, ctx.space, domain2);
     if (draft.version === null)
       throw new CloudAuthError(
         `the team ${domain2} config has no draft version yet (never published?) \u2014 publish once from the web console, then retry`
       );
     return { ...draft, version: draft.version };
   } catch (e) {
-    throw e instanceof OAuthFlowError3 ? new CloudAuthError(`the registry rejected your session (${e.code}) \u2014 sign in again: sema cloud login`, e.code, 401) : e instanceof RegistryApiError3 ? await teamHttpError(ctx, e.status, asRec3(e.body) ?? {}, `reading the team ${domain2} config`, "member (any role)") : new CloudAuthError(`cannot reach registry at ${ctx.registryUrl}: ${e instanceof Error ? e.message : String(e)}`);
+    throw e instanceof OAuthFlowError ? new CloudAuthError(`the registry rejected your session (${e.code}) \u2014 sign in again: sema cloud login`, e.code, 401) : e instanceof RegistryApiError ? await teamHttpError(ctx, e.status, asRec3(e.body) ?? {}, `reading the team ${domain2} config`, "member (any role)") : new CloudAuthError(`cannot reach registry at ${ctx.registryUrl}: ${e instanceof Error ? e.message : String(e)}`);
   }
 }
 async function teamConfigGetPublished(ctx, domain2) {
@@ -552238,7 +552348,7 @@ function effectiveNames(kind, config4) {
 }
 async function reportCeiling(auth2, username, kind, names2) {
   try {
-    let client3 = registryClientForProfile(auth2.registryUrl, auth2.profileName, { timeoutMs: 3e4 }), res = await getEffective2(client3, { principal: username });
+    let client3 = registryClientForProfile(auth2.registryUrl, auth2.profileName, { timeoutMs: 3e4 }), res = await getEffective(client3, { principal: username });
     if (res.status === 200) {
       let json2 = asRec3(res.body) ?? {}, visible = effectiveNames(kind, asRec3(json2.config));
       if (visible) {
@@ -552950,6 +553060,7 @@ async function cloudPublish(options) {
 }
 var out4, err6, asRec3, asArr3, asStr4, DOMAIN_NAME_RE, SECRET_SCAN_MAX_DEPTH, PEM_PRIVATE_KEY_RE, PATH_SEGMENT_MAX, personalPath, wantsTeam, TEAM_WRITE_ROLE, teamConfigPath, NOUN, ADD_VERB, REMOVE_VERB, DOMAIN, LIST_KEY, LOCAL_SOURCE, MODEL_FIELD_ALLOWLIST, INLINE_KEY_FIELDS, MODEL_ROLES2, GIT_SHA_RE, byName, init_cloudResources = __esm({
   "build-src/src/cli/handlers/cloudResources.ts"() {
+    init_sdkRegistryTransit();
     init_types6();
     init_cloudAuth();
     init_cloudProfile();
@@ -553007,7 +553118,6 @@ import { existsSync as existsSync39, statSync as statSync19 } from "fs";
 import { createRequire as createRequire5 } from "module";
 import { createInterface as createInterface3 } from "readline";
 import { dirname as dirname93, join as join203, resolve as resolve54 } from "path";
-import { getEffective as getEffective3, probeRegistryHealth } from "@sema-agent/sdk/registry";
 function fail6(e) {
   err7(`Error: ${e instanceof Error ? e.message : String(e)}`), process.exit(1);
 }
@@ -553179,7 +553289,7 @@ async function cloudSmoke(options) {
   try {
     await getValidAccessToken(resolved.name), effective = await probe2(async () => {
       let started3 = Date.now(), client3 = registryClientForProfile(registryUrl, resolved.name, { timeoutMs: 8e3 });
-      return { pass: !0, detail: `HTTP ${(await getEffective3(client3)).status}, ${Date.now() - started3}ms` };
+      return { pass: !0, detail: `HTTP ${(await getEffective(client3)).status}, ${Date.now() - started3}ms` };
     }), effective.pass ? failures += 0 : failures++;
   } catch (e) {
     e instanceof CloudAuthError ? effective = { pass: !1, detail: "", skipped: `${e.message}` } : (effective = { pass: !1, detail: e instanceof Error ? e.message : String(e) }, failures++);
@@ -553227,6 +553337,7 @@ async function cloudBench(options) {
 }
 var out5, err7, ENGINE_NPM_PACKAGES, ENGINE_REL_PATH, AnswerReader, init_cloudOps = __esm({
   "build-src/src/cli/handlers/cloudOps.ts"() {
+    init_sdkRegistryTransit();
     init_dist();
     init_cloudProfile();
     init_cloudAuth();
@@ -562579,7 +562690,7 @@ async function run() {
       }
     }
   }), profileCheckpoint("run_commander_initialized"), program2.hook("preAction", async (thisCommand) => {
-    profileCheckpoint("preAction_start"), await Promise.all([ensureMdmSettingsLoaded(), ensureKeychainPrefetchCompleted()]), profileCheckpoint("preAction_after_mdm"), await init(), profileCheckpoint("preAction_after_init"), isEnvTruthy(process.env.SEMA_CODE_DISABLE_TERMINAL_TITLE) || (process.title = "claude");
+    profileCheckpoint("preAction_start"), await Promise.all([ensureMdmSettingsLoaded(), ensureKeychainPrefetchCompleted()]), profileCheckpoint("preAction_after_mdm"), await init(), profileCheckpoint("preAction_after_init"), isEnvTruthy(process.env.SEMA_CODE_DISABLE_TERMINAL_TITLE) || (process.title = SEMA_PROCESS_TITLE);
     let {
       initSinks: initSinks2
     } = await Promise.resolve().then(() => (init_sinks(), sinks_exports));
@@ -562601,7 +562712,7 @@ async function run() {
     if (!truthy.includes(value) && !falsy.includes(value))
       throw new InvalidArgumentError("Allowed choices are true, false, 1, 0, yes, no, on, off.");
     return truthy.includes(value);
-  })).addOption(new Option("--session-mirror", "Emit transcript_mirror frames on stdout (SDK-internal; set by ProcessTransport when sessionStore is configured)").hideHelp()).addOption(new Option("--enable-auth-status", "Enable auth status messages in SDK mode").default(!1).hideHelp()).option("--allowedTools, --allowed-tools <tools...>", 'Comma or space-separated list of tool names to allow (e.g. "Bash(git:*) Edit")').option("--tools <tools...>", 'Specify the list of available tools from the built-in set. Use "" to disable all tools, "default" to use all tools, or specify tool names (e.g. "Bash,Edit,Read").').option("--disallowedTools, --disallowed-tools <tools...>", 'Comma or space-separated list of tool names to deny (e.g. "Bash(git:*) Edit")').option("--mcp-config <configs...>", "Load MCP servers from JSON files or strings (space-separated)").addOption(new Option("--permission-prompt-tool <tool>", "MCP tool to use for permission prompts (only works with --print)").argParser(String).hideHelp()).addOption(new Option("--system-prompt <prompt>", "System prompt to use for the session").argParser(String)).addOption(new Option("--system-prompt-file <file>", "Read system prompt from a file").argParser(String).hideHelp()).addOption(new Option("--append-system-prompt <prompt>", "Append a system prompt to the default system prompt").argParser(String)).addOption(new Option("--append-system-prompt-file <file>", "Read system prompt from a file and append to the default system prompt").argParser(String).hideHelp()).addOption(new Option("--exclude-dynamic-system-prompt-sections", "Move per-machine sections (cwd, env info, memory paths, git status) from the system prompt into the first user message. Improves cross-user prompt-cache reuse. Only applies with the default system prompt (ignored with --system-prompt).").default(!1)).addOption(new Option("--permission-mode <mode>", 'Permission mode to use for the session. "manual" is an alias of "default" \u2014 the mode the footer badge shows as "manual mode"; they are the same mode, not two. With --print there is no approval channel: tools that need approval are denied under the default permission mode \u2014 pass acceptEdits or auto.').argParser(String).choices([...USER_ADDRESSABLE_PERMISSION_MODES])).option("-c, --continue", "Continue the most recent conversation in the current directory", () => !0).option("-r, --resume [value]", "Resume a conversation by session ID, or open interactive picker with optional search term", (value) => value || !0).option("--fork-session", "When resuming, create a new session ID instead of reusing the original (use with --resume or --continue)", () => !0).addOption(new Option("--prefill <text>", "Pre-fill the prompt input with text without submitting it").hideHelp()).addOption(new Option("--deep-link-origin", "Signal that this session was launched from a deep link").hideHelp()).addOption(new Option("--deep-link-repo <slug>", "Repo slug the deep link ?repo= parameter resolved to the current cwd").hideHelp()).addOption(new Option("--deep-link-last-fetch <ms>", "FETCH_HEAD mtime in epoch ms, precomputed by the deep link trampoline").argParser((v2) => {
+  })).addOption(new Option("--session-mirror", "Emit transcript_mirror frames on stdout (SDK-internal; set by ProcessTransport when sessionStore is configured)").hideHelp()).addOption(new Option("--enable-auth-status", "Enable auth status messages in SDK mode").default(!1).hideHelp()).option("--allowedTools, --allowed-tools <tools...>", 'Comma or space-separated list of tool names to allow (e.g. "Bash(git:*) Edit")').option("--tools <tools...>", 'Specify the list of available tools from the built-in set. Use "" to disable all tools, "default" to use all tools, or specify tool names (e.g. "Bash,Edit,Read").').option("--disallowedTools, --disallowed-tools <tools...>", 'Comma or space-separated list of tool names to deny (e.g. "Bash(git:*) Edit")').option("--mcp-config <configs...>", "Load MCP servers from JSON files or strings (space-separated)").addOption(new Option("--permission-prompt-tool <tool>", "MCP tool to use for permission prompts (only works with --print)").argParser(String).hideHelp()).addOption(new Option("--system-prompt <prompt>", "System prompt to use for the session").argParser(String)).addOption(new Option("--system-prompt-file <file>", "Read system prompt from a file").argParser(String).hideHelp()).addOption(new Option("--append-system-prompt <prompt>", "Append a system prompt to the default system prompt").argParser(String)).addOption(new Option("--append-system-prompt-file <file>", "Read system prompt from a file and append to the default system prompt").argParser(String).hideHelp()).addOption(new Option("--exclude-dynamic-system-prompt-sections", "Move per-machine sections (cwd, env info, memory paths, git status) from the system prompt into the first user message. Improves cross-user prompt-cache reuse. Only applies with the default system prompt (ignored with --system-prompt)." + UNWIRED_FLAG_HELP_SUFFIX).default(!1)).addOption(new Option("--permission-mode <mode>", 'Permission mode to use for the session. "manual" is an alias of "default" \u2014 the mode the footer badge shows as "manual mode"; they are the same mode, not two. With --print there is no approval channel: tools that need approval are denied under the default permission mode \u2014 pass acceptEdits or auto.').argParser(String).choices([...USER_ADDRESSABLE_PERMISSION_MODES])).option("-c, --continue", "Continue the most recent conversation in the current directory", () => !0).option("-r, --resume [value]", "Resume a conversation by session ID, or open interactive picker with optional search term", (value) => value || !0).option("--fork-session", "When resuming, create a new session ID instead of reusing the original (use with --resume or --continue)", () => !0).addOption(new Option("--prefill <text>", "Pre-fill the prompt input with text without submitting it").hideHelp()).addOption(new Option("--deep-link-origin", "Signal that this session was launched from a deep link").hideHelp()).addOption(new Option("--deep-link-repo <slug>", "Repo slug the deep link ?repo= parameter resolved to the current cwd").hideHelp()).addOption(new Option("--deep-link-last-fetch <ms>", "FETCH_HEAD mtime in epoch ms, precomputed by the deep link trampoline").argParser((v2) => {
     let n2 = Number(v2);
     return Number.isFinite(n2) ? n2 : void 0;
   }).hideHelp()).option("--from-pr [value]", "Resume a session linked to a PR by PR number/URL, or open interactive picker with optional search term", (value) => value || !0).option("--no-session-persistence", "Disable session persistence - sessions will not be saved to disk and cannot be resumed (only works with --print)").addOption(new Option("--resume-session-at <message id>", "When resuming, only messages up to and including the assistant message with <message.id> (use with --resume in print mode)").argParser(String).hideHelp()).addOption(new Option("--rewind-files <user-message-id>", "Restore files to state at the specified user message and exit (requires --resume)").hideHelp()).addOption(new Option("--reply-on-resume", "When resuming, immediately query if the loaded transcript ends in a user-role message (set by /background mid-turn so the fork continues the in-flight turn).").hideHelp()).option("--model <model>", "Model for the current session. Provide an alias for the latest model (e.g. 'sonnet' or 'opus') or a model's full name (e.g. 'claude-sonnet-4-6').").addOption(new Option("--effort <level>", "Effort level for the current session (low, medium, high, xhigh, max)").argParser((rawValue) => {
@@ -562614,7 +562725,7 @@ async function run() {
       "--memory <mode>",
       "Run with no memory face at all for this session (sema superset \u2014 no upstream equivalent). Only 'off' is accepted: it declares on every submit that this run mounts no memory face (recall and remember are both absent), which is a different axis from /memory-capture off (that one keeps memory mounted and only stops this session's content from entering long-term memory). Requires an engine that accepts the request-level declaration; older engines answer 400."
     ).choices(["off"])
-  ).option("--scenario <name>", "Engine scenario for submitted runs (only works with --print): route the run through a deployment-defined scenario (tool roster + system prompt). Unknown names fall back to the default scenario. Omit for the default scenario; a persistent default can be set via SEMA_HEADLESS_SCENARIO in the settings.json env block.").option("--final-verify", "Enable a final-verification pass for submitted runs (only works with --print; off by default). When enabled, headless -p runs that write files get up to two extra verification turns before finishing. A persistent default can be set via SEMA_HEADLESS_FINAL_VERIFY=true in the settings.json env block. Yields automatically (with a notice) when a Stop hook is configured.").option("--no-final-verify", "Explicitly disable the final-verification pass for submitted runs (only works with --print). Verification is off by default, so this flag only matters to override --final-verify or a persistent SEMA_HEADLESS_FINAL_VERIFY=true default; it always wins.").option("--deadline <sec>", "Wall-clock limit in seconds for submitted runs (only works with --print; sema superset \u2014 no upstream equivalent). The run fails loudly with its partial output when the limit is hit; integer between 30 and 86400. A persistent default can be set via SEMA_HEADLESS_DEADLINE_SEC in the settings.json env block.").option("--max-tokens <n>", "Per-request output-token cap for submitted runs (only works with --print; sema superset \u2014 no upstream equivalent). Caps each model response rather than the whole run: hitting the cap cuts generation mid-stream, and a cut inside tool-call arguments surfaces as a provider truncation error; positive integer. A persistent default can be set via SEMA_HEADLESS_MAX_TOKENS in the settings.json env block.").option("--agent <agent>", "Agent for the current session. Overrides the 'agent' setting.").option("--betas <betas...>", "Beta headers to include in API requests (API key users only)").option("--fallback-model <model>", "Enable automatic fallback to specified model when default model is overloaded (only works with --print)").addOption(new Option("--workload <tag>", "Workload tag for billing-header attribution (cc_workload). Process-scoped; set by SDK daemon callers that spawn subprocesses for cron work. (only works with --print)").hideHelp()).option("--settings <file-or-json>", "Path to a settings JSON file or a JSON string to load additional settings from").option("--add-dir <directories...>", "Additional directories to allow tool access to").option("--ide", "Automatically connect to IDE on startup if exactly one valid IDE is available", () => !0).option("--strict-mcp-config", "Only use MCP servers from --mcp-config, ignoring all other MCP configurations", () => !0).option("--session-id <uuid>", "Use a specific session ID for the conversation (must be a valid UUID)").option("-n, --name <name>", "Set a display name for this session (shown in /resume and terminal title)").option("--agents <json>", `JSON object defining custom agents (e.g. '{"reviewer": {"description": "Reviews code", "prompt": "You are a code reviewer"}}')`).option("--setting-sources <sources>", "Comma-separated list of setting sources to load (user, project, local).").option("--plugin-dir <path>", "Load plugins from a directory for this session only (repeatable: --plugin-dir A --plugin-dir B)", (val, prev) => [...prev, val], []).addOption(new Option("--plugin-dir-no-mcp <path>", "Like --plugin-dir but the engine will not read this plugin's .mcp.json (caller owns its MCP connections)").argParser((val, prev) => [...prev, val]).default([]).hideHelp()).option("--plugin-url <url>", "Fetch a plugin .zip from a URL for this session only (repeatable: --plugin-url A --plugin-url B)", (val, prev) => [...prev, ...val.split(/\s+/).filter(Boolean)], []).option("--disable-slash-commands", "Disable all skills", () => !0).option("--chrome", "Enable Claude in Chrome integration").option("--no-chrome", "Disable Claude in Chrome integration").option("--file <specs...>", "File resources to download at startup. Format: file_id:relative_path (e.g., --file file_abc:doc.txt file_def:img.png)").action(async (prompt, options) => {
+  ).option("--scenario <name>", "Engine scenario for submitted runs (only works with --print): route the run through a deployment-defined scenario (tool roster + system prompt). A name the deployment does not define is rejected by the engine and the run exits with an error \u2014 it is not silently replaced by the default. Omit for the default scenario; a persistent default can be set via SEMA_HEADLESS_SCENARIO in the settings.json env block.").option("--final-verify", "Enable a final-verification pass for submitted runs (only works with --print; off by default). When enabled, headless -p runs that write files get up to two extra verification turns before finishing. A persistent default can be set via SEMA_HEADLESS_FINAL_VERIFY=true in the settings.json env block. Yields automatically (with a notice) when a Stop hook is configured.").option("--no-final-verify", "Explicitly disable the final-verification pass for submitted runs (only works with --print). Verification is off by default, so this flag only matters to override --final-verify or a persistent SEMA_HEADLESS_FINAL_VERIFY=true default; it always wins.").option("--deadline <sec>", "Wall-clock limit in seconds for submitted runs (only works with --print; sema superset \u2014 no upstream equivalent). The run fails loudly with its partial output when the limit is hit; integer between 30 and 86400. A persistent default can be set via SEMA_HEADLESS_DEADLINE_SEC in the settings.json env block.").option("--max-tokens <n>", "Per-request output-token cap for submitted runs (only works with --print; sema superset \u2014 no upstream equivalent). Caps each model response rather than the whole run: hitting the cap cuts generation mid-stream, and a cut inside tool-call arguments surfaces as a provider truncation error; positive integer. A persistent default can be set via SEMA_HEADLESS_MAX_TOKENS in the settings.json env block.").option("--agent <agent>", "Agent for the current session. Overrides the 'agent' setting.").option("--betas <betas...>", "Beta headers to include in API requests (API key users only)").option("--fallback-model <model>", "Enable automatic fallback to specified model when default model is overloaded." + UNWIRED_FLAG_HELP_SUFFIX).addOption(new Option("--workload <tag>", "Workload tag for billing-header attribution (cc_workload). Process-scoped; set by SDK daemon callers that spawn subprocesses for cron work. (only works with --print)").hideHelp()).option("--settings <file-or-json>", "Path to a settings JSON file or a JSON string to load additional settings from").option("--add-dir <directories...>", "Additional directories to allow tool access to").option("--ide", "Automatically connect to IDE on startup if exactly one valid IDE is available", () => !0).option("--strict-mcp-config", "Only use MCP servers from --mcp-config, ignoring all other MCP configurations", () => !0).option("--session-id <uuid>", "Use a specific session ID for the conversation (must be a valid UUID)").option("-n, --name <name>", "Set a display name for this session (shown in /resume and terminal title)").option("--agents <json>", `JSON object defining custom agents (e.g. '{"reviewer": {"description": "Reviews code", "prompt": "You are a code reviewer"}}')`).option("--setting-sources <sources>", "Comma-separated list of setting sources to load (user, project, local).").option("--plugin-dir <path>", "Load plugins from a directory for this session only (repeatable: --plugin-dir A --plugin-dir B)", (val, prev) => [...prev, val], []).addOption(new Option("--plugin-dir-no-mcp <path>", "Like --plugin-dir but the engine will not read this plugin's .mcp.json (caller owns its MCP connections)").argParser((val, prev) => [...prev, val]).default([]).hideHelp()).option("--plugin-url <url>", "Fetch a plugin .zip from a URL for this session only (repeatable: --plugin-url A --plugin-url B)." + UNWIRED_FLAG_HELP_SUFFIX, (val, prev) => [...prev, ...val.split(/\s+/).filter(Boolean)], []).option("--disable-slash-commands", "Disable all skills", () => !0).option("--chrome", "Enable Claude in Chrome integration").option("--no-chrome", "Disable Claude in Chrome integration").option("--file <specs...>", "File resources to download at startup. Format: file_id:relative_path (e.g., --file file_abc:doc.txt file_def:img.png). Requires the session ingress token in SEMA_CODE_SESSION_ACCESS_TOKEN; without it the launch exits with an error.").action(async (prompt, options) => {
     profileCheckpoint("action_handler_start");
     for (let spec of UNWIRED_FLAGS) {
       if (!flagUnwiredOnLane(spec, "print")) continue;
@@ -563614,7 +563725,7 @@ Usage: sema --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("sema 1.0.129", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
+  }).version("sema 1.0.130", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).psHandler([]), process.exit(process.exitCode ?? 0);
   }), program2.command("logs [id]").description("Print a background session's recent terminal output").action(async (id) => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).logsHandler(id, []), process.exit(process.exitCode ?? 0);
@@ -563622,7 +563733,7 @@ Usage: sema --remote "your task description"`, () => gracefulShutdown(1));
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).attachHandler(id, []), process.exit(process.exitCode ?? 0);
   }), program2.command("kill [id]").description("Terminate a background session").action(async (id) => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).killHandler(id, []), process.exit(process.exitCode ?? 0);
-  }), program2.addOption(new Option("--brief", "Enable SendUserMessage tool for agent-to-user communication")), program2.addOption(new Option("--ax-screen-reader", "Render screen-reader friendly output (flat text, no decorative borders or animations).")), program2.option("--agent-teams", "Enable agent teams: named persistent teammates with a shared task list (experimental, off by default)", () => !0), program2.addOption(new Option("--enable-auto-mode", "Opt in to auto mode").hideHelp()), program2.addOption(new Option("--agent-id <id>", "Teammate agent ID").hideHelp()), program2.addOption(new Option("--agent-name <name>", "Teammate display name").hideHelp()), program2.addOption(new Option("--team-name <name>", "Team name for swarm coordination").hideHelp()), program2.addOption(new Option("--agent-color <color>", "Teammate UI color").hideHelp()), program2.addOption(new Option("--plan-mode-required", "Require plan mode before implementation").hideHelp()), program2.addOption(new Option("--parent-session-id <id>", "Parent session ID for analytics correlation").hideHelp()), program2.addOption(new Option("--agent-type <type>", "Custom agent type for this teammate").hideHelp()), program2.addOption(new Option("--sdk-url <url>", "Use remote WebSocket endpoint for SDK I/O streaming (only with -p and stream-json format)").hideHelp()), program2.addOption(new Option("--teleport [session]", "Resume a teleport session, optionally specify session ID").hideHelp()), program2.addOption(new Option("--cloud [description|session_id|url]", "Create a cloud session with the given description, or attach to an existing one by session ID or claude.ai/code URL").hideHelp()), program2.addOption(new Option("--remote [description|session_id|url]", "Deprecated alias for --cloud").hideHelp()), program2.addOption(new Option("--remote-control [name]", "Start an interactive session with Remote Control enabled (optionally named)").argParser((value) => value || !0)), program2.addOption(new Option("--rc [name]", "Alias for --remote-control").argParser((value) => value || !0).hideHelp()), program2.option("--remote-control-session-name-prefix <prefix>", "Prefix for auto-generated Remote Control session names (default: hostname)"), profileCheckpoint("run_main_options_built");
+  }), program2.addOption(new Option("--brief", "Enable SendUserMessage tool for agent-to-user communication")), program2.addOption(new Option("--ax-screen-reader", "Render screen-reader friendly output (flat text, no decorative borders or animations)." + UNWIRED_FLAG_HELP_SUFFIX)), program2.option("--agent-teams", "Enable the team-scoped task list for engine-spawned teammates (Agent({name}); experimental, off by default)", () => !0), program2.addOption(new Option("--enable-auto-mode", "Opt in to auto mode").hideHelp()), program2.addOption(new Option("--agent-id <id>", "Teammate agent ID").hideHelp()), program2.addOption(new Option("--agent-name <name>", "Teammate display name").hideHelp()), program2.addOption(new Option("--team-name <name>", "Team name for swarm coordination").hideHelp()), program2.addOption(new Option("--agent-color <color>", "Teammate UI color").hideHelp()), program2.addOption(new Option("--plan-mode-required", "Require plan mode before implementation").hideHelp()), program2.addOption(new Option("--parent-session-id <id>", "Parent session ID for analytics correlation").hideHelp()), program2.addOption(new Option("--agent-type <type>", "Custom agent type for this teammate").hideHelp()), program2.addOption(new Option("--sdk-url <url>", "Use remote WebSocket endpoint for SDK I/O streaming (only with -p and stream-json format)").hideHelp()), program2.addOption(new Option("--teleport [session]", "Resume a teleport session, optionally specify session ID").hideHelp()), program2.addOption(new Option("--cloud [description|session_id|url]", "Create a cloud session with the given description, or attach to an existing one by session ID or claude.ai/code URL").hideHelp()), program2.addOption(new Option("--remote [description|session_id|url]", "Deprecated alias for --cloud").hideHelp()), program2.addOption(new Option("--remote-control [name]", "Start an interactive session with Remote Control enabled (optionally named)").argParser((value) => value || !0)), program2.addOption(new Option("--rc [name]", "Alias for --remote-control").argParser((value) => value || !0).hideHelp()), program2.option("--remote-control-session-name-prefix <prefix>", "Prefix for auto-generated Remote Control session names (default: hostname)." + UNWIRED_FLAG_HELP_SUFFIX), profileCheckpoint("run_main_options_built");
   let isPrintMode = process.argv.includes("-p") || process.argv.includes("--print"), isCcUrl = process.argv.some((a) => a.startsWith("cc://") || a.startsWith("cc+unix://"));
   if (isPrintMode && !isCcUrl)
     return profileCheckpoint("run_before_parse"), await program2.parseAsync(process.argv), profileCheckpoint("run_after_parse"), program2;
@@ -564334,6 +564445,7 @@ var getTeammateUtils, getTeammatePromptAddendum, coordinatorModeModule, autoMode
     init_asciicast();
     init_auth4();
     init_config();
+    init_processTitle();
     init_settings_187();
     init_earlyInput();
     init_effort();
@@ -566729,7 +566841,7 @@ function teamToolDefinitions() {
   return [
     {
       name: TEAM_MCP_CREATE_TOOL,
-      description: "Create a new team for coordinating multiple agents." + " NOTE: this build can create and delete the team container only. There is currently NO tool for adding teammates to a team, so a team you create stays empty \u2014 do not promise the user that work will be parallelized across teammates. Use it for the team-scoped task list, or say plainly that teammate spawning is unavailable.",
+      description: "Create a new team for coordinating multiple agents." + " NOTE: this build can create and delete the team container only, and what it gives you is the team-scoped task list. There is NO tool for adding teammates to a team, so a team you create stays empty \u2014 do not promise the user that team_create parallelizes work across teammates. Named teammates in this build are engine-spawned subagents instead: start one with Agent({ name, run_in_background: true }), talk to it with SendMessage({ to: name }), and read its progress with TaskOutput(task_id). ListAgents exists only where the deployment has cross-session seats, so do not rely on it being mounted.",
       inputSchema: {
         type: "object",
         properties: {
@@ -568561,27 +568673,42 @@ var init_bootPermissionMode = __esm({
 // build-src/src/sema/cliToolFlagsArgv.ts
 var cliToolFlagsArgv_exports = {};
 __export(cliToolFlagsArgv_exports, {
+  collectAddDirFlag: () => collectAddDirFlag,
   collectCliToolFlags: () => collectCliToolFlags
 });
 function collectCliToolFlags(argv) {
   let out6 = { tools: [], allowedTools: [], disallowedTools: [] };
+  for (let [name, values2] of collectFlagValues(argv, new Set(FLAGS.keys())))
+    out6[FLAGS.get(name)].push(...values2);
+  return out6;
+}
+function collectAddDirFlag(argv) {
+  return collectFlagValues(argv, /* @__PURE__ */ new Set(["--add-dir"])).get("--add-dir") ?? [];
+}
+function collectFlagValues(argv, names2) {
+  let out6 = /* @__PURE__ */ new Map();
   for (let i = 0; i < argv.length; i++) {
     let a = argv[i];
     if (a === "--") break;
-    let eq2 = a.indexOf("="), name = eq2 > 0 ? a.slice(0, eq2) : a, key = FLAGS.get(name);
-    if (key === void 0) continue;
+    let eq2 = a.indexOf("="), name = eq2 > 0 ? a.slice(0, eq2) : a;
+    if (!names2.has(name)) {
+      ROOT_VALUE_FLAGS.has(a) && i++;
+      continue;
+    }
+    let bucket = out6.get(name) ?? (out6.set(name, []), out6.get(name));
     if (eq2 > 0) {
       let v2 = a.slice(eq2 + 1);
-      v2.length > 0 && out6[key].push(v2);
+      v2.length > 0 && bucket.push(v2);
       continue;
     }
     let next = argv[i + 1];
-    next !== void 0 && !next.startsWith("-") && (out6[key].push(next), i++);
+    next !== void 0 && !next.startsWith("-") && (bucket.push(next), i++);
   }
   return out6;
 }
 var FLAGS, init_cliToolFlagsArgv = __esm({
   "build-src/src/sema/cliToolFlagsArgv.ts"() {
+    init_rootValueFlags();
     FLAGS = /* @__PURE__ */ new Map([
       ["--tools", "tools"],
       ["--allowedTools", "allowedTools"],
@@ -571159,7 +571286,7 @@ async function launchReplProduction() {
   let { setIsInteractive: setIsInteractive2 } = await Promise.resolve().then(() => (init_state(), state_exports));
   setIsInteractive2(!0);
   let { isEnvTruthy: isTitleDisableTruthy } = await Promise.resolve().then(() => (init_envUtils(), envUtils_exports));
-  isTitleDisableTruthy(process.env.SEMA_CODE_DISABLE_TERMINAL_TITLE) || (process.title = "sema");
+  isTitleDisableTruthy(process.env.SEMA_CODE_DISABLE_TERMINAL_TITLE) || (process.title = SEMA_PROCESS_TITLE);
   try {
     let { applyOpenAiEnvAliases: applyOpenAiEnvAliases2 } = await Promise.resolve().then(() => (init_engineLifecycleManager(), engineLifecycleManager_exports));
     applyOpenAiEnvAliases2(process.env);
@@ -572158,6 +572285,24 @@ ${asm.validationError}
   } catch (e) {
     process.env.SEMA_DEBUG && console.error("[sema] permission-rule load soft-failed (rules stay empty):", e);
   }
+  try {
+    let { collectAddDirFlag: collectAddDirFlag2 } = await Promise.resolve().then(() => (init_cliToolFlagsArgv(), cliToolFlagsArgv_exports)), addDirs = collectAddDirFlag2(process.argv.slice(2));
+    if (addDirs.length > 0) {
+      let tpc = initialState.toolPermissionContext, { foldAdditionalWorkingDirectories: foldAdditionalWorkingDirectories2 } = await Promise.resolve().then(() => (init_permissionSetup(), permissionSetup_exports)), folded = await foldAdditionalWorkingDirectories2({
+        toolPermissionContext: tpc,
+        directories: addDirs
+      });
+      Object.assign(tpc, folded.toolPermissionContext);
+      let { setBootAdditionalDirectories: setBootAdditionalDirectories2 } = await Promise.resolve().then(() => (init_appStateRef(), appStateRef_exports));
+      setBootAdditionalDirectories2(Array.from(tpc.additionalWorkingDirectories.keys()));
+      for (let w2 of folded.warnings) bootFailClosedNotices.push(w2);
+      process.env.SEMA_DEBUG && console.error(
+        `[sema] --add-dir folded: ${addDirs.length} requested, ${tpc.additionalWorkingDirectories.size} in context`
+      );
+    }
+  } catch (e) {
+    process.env.SEMA_DEBUG && console.error("[sema] --add-dir seeding soft-failed (no directories added):", e);
+  }
   try {
     let { resolveBootEffortValue: resolveBootEffortValue2 } = await Promise.resolve().then(() => (init_bootEffort(), bootEffort_exports)), bootEffort = resolveBootEffortValue2(process.argv.slice(2));
     bootEffort !== void 0 && (initialState.effortValue = bootEffort), process.env.SEMA_DEBUG && console.error(`[sema] boot effort: ${bootEffort === void 0 ? "auto (none persisted)" : String(bootEffort)}`);
@@ -572672,6 +572817,7 @@ var React215, import_jsx_runtime538, isMain, COMMANDER_SUBCOMMANDS, replEntry_de
     init_ink2();
     init_adapter();
     init_scenario();
+    init_processTitle();
     init_debugLine();
     init_upstreamBridge();
     init_settings5();

package/sema.js

@@ -89,7 +89,7 @@ function installBootSignalTailFrame(argv2 = process.argv.slice(2)) {
 installBootSignalTailFrame();
 
 // build-src/src/sema/preludeEntry.ts
-var versionLine = "sema 1.0.129" ? "sema 1.0.129" : "";
+var versionLine = "sema 1.0.130" ? "sema 1.0.130" : "";
 var argv = process.argv.slice(2);
 var wantsVersionFastPath = argv.length === 1 && (argv[0] === "--version" || argv[0] === "-v");
 var EARLY_INPUT_PRELUDE_SLOT = /* @__PURE__ */ Symbol.for("sema.earlyInputPrelude");