@sema-agent/cli 1.0.66 → 1.0.67

package/sema-main.js

@@ -69214,6 +69214,64 @@ var init_patch = __esm({
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/engineErrorCodes.js
+function isConfigRefusalCode(code2) {
+  return typeof code2 === "string" && code2.startsWith("config.");
+}
+function isInterruptedToolEndCode(code2) {
+  return typeof code2 === "string" && TOOL_END_INTERRUPTED_CODES.has(code2);
+}
+function isRewindFamilyCode(code2) {
+  return typeof code2 === "string" && REWIND_ERROR_CODE_PREFIXES.some((p) => code2.startsWith(p));
+}
+function asModelFallbackReason(v2) {
+  return v2 === MODEL_FALLBACK_INHERIT_NO_TIER_BINDING ? MODEL_FALLBACK_INHERIT_NO_TIER_BINDING : void 0;
+}
+var LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, USAGE_WINDOW_EXHAUSTED, ENV_LIFETIME_EXPIRED, CONFIG_LIMIT_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_REFUSAL_CODES, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, TOOL_END_INTERRUPTED_CODES, ACTIVE_RUN_BUSY_ERROR_CODE, STOP_PARK_ARBITER_UNREACHABLE, STOP_PARK_RESUME_WON, STOP_NOT_LANDED, STOP_NOT_LOCAL, STOP_PARKED, STOP_CONFLICT_CODES, OUTPUT_INVALID, REWIND_ERROR_CODE_PREFIXES, STREAM_MAX_DURATION, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING;
+var init_engineErrorCodes = __esm({
+  "node_modules/@sema-agent/client-core/dist/engineErrorCodes.js"() {
+    LIMITS_MAX_TOKENS_EXCEEDED = "limits.max_tokens_exceeded";
+    LIMITS_MAX_COST_EXCEEDED = "limits.max_cost_exceeded";
+    LIMITS_MAX_TURNS_EXCEEDED = "limits.max_turns_exceeded";
+    LIMITS_MAX_WALLTIME_EXCEEDED = "limits.max_walltime_exceeded";
+    USAGE_WINDOW_EXHAUSTED = "usage.window_exhausted";
+    ENV_LIFETIME_EXPIRED = "env.lifetime_expired";
+    CONFIG_LIMIT_INVALID = "config.limit_invalid";
+    CONFIG_STRATEGY_FIND_LIMIT_INVALID = "config.strategy_find_limit_invalid";
+    CONFIG_STRATEGY_MAX_SIZE_INVALID = "config.strategy_max_size_invalid";
+    CONFIG_LIMIT_UNKNOWN_KEY = "config.limit_unknown_key";
+    CONFIG_REFUSAL_CODES = /* @__PURE__ */ new Set([
+      CONFIG_LIMIT_INVALID,
+      CONFIG_STRATEGY_FIND_LIMIT_INVALID,
+      CONFIG_STRATEGY_MAX_SIZE_INVALID,
+      CONFIG_LIMIT_UNKNOWN_KEY
+    ]);
+    TOOL_END_INTERRUPTED_NEVER_STARTED = "interrupted_never_started";
+    TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN = "interrupted_outcome_unknown";
+    TOOL_END_INTERRUPTED_CODES = /* @__PURE__ */ new Set([
+      TOOL_END_INTERRUPTED_NEVER_STARTED,
+      TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN
+    ]);
+    ACTIVE_RUN_BUSY_ERROR_CODE = "conflict.session_active_run";
+    STOP_PARK_ARBITER_UNREACHABLE = "stop.park_arbiter_unreachable";
+    STOP_PARK_RESUME_WON = "stop.park_resume_won";
+    STOP_NOT_LANDED = "stop.not_landed";
+    STOP_NOT_LOCAL = "stop.not_local";
+    STOP_PARKED = "stop.parked";
+    STOP_CONFLICT_CODES = [
+      STOP_PARK_ARBITER_UNREACHABLE,
+      STOP_PARK_RESUME_WON,
+      STOP_NOT_LANDED,
+      STOP_NOT_LOCAL,
+      STOP_PARKED
+    ];
+    OUTPUT_INVALID = "output.invalid";
+    REWIND_ERROR_CODE_PREFIXES = ["resume_at.", "rewind_snapshot."];
+    STREAM_MAX_DURATION = "STREAM_MAX_DURATION";
+    MODEL_FALLBACK_INHERIT_NO_TIER_BINDING = "inherit_no_tier_binding";
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/toolResult.js
 function structuredDetailType(structured) {
   if (typeof structured !== "object" || structured === null)
@@ -69752,15 +69810,54 @@ function reportFindingsToolUseResult(structured, rawInput) {
     }
   };
 }
+function readCompletedAgentCard(structured) {
+  if (structured === null || typeof structured !== "object")
+    return null;
+  const s = structured;
+  if (s.type !== "agent")
+    return null;
+  const status3 = s.status;
+  if (typeof status3 !== "string" || status3.length === 0 || status3 === "async_launched")
+    return null;
+  const taskId = s.taskId;
+  if (typeof taskId !== "string" || taskId.length === 0)
+    return null;
+  const str3 = (v2) => typeof v2 === "string" && v2.length > 0 ? v2 : void 0;
+  const num = (v2) => typeof v2 === "number" && Number.isFinite(v2) ? v2 : void 0;
+  return {
+    status: status3,
+    taskId,
+    ...str3(s.sessionId) !== void 0 ? { sessionId: str3(s.sessionId) } : {},
+    ...str3(s.subagent_type) !== void 0 ? { subagentType: str3(s.subagent_type) } : {},
+    // `result` 允许空串(子代没产出正文是一个诚实的事实),故这里不用 `str` 的非空过滤。
+    ...typeof s.result === "string" ? { result: s.result } : {},
+    ...typeof s.salvagedOutput === "string" ? { salvagedOutput: s.salvagedOutput } : {},
+    ...s.structuredOutput !== void 0 ? { structuredOutput: s.structuredOutput } : {},
+    ...str3(s.blockedReason) !== void 0 ? { blockedReason: str3(s.blockedReason) } : {},
+    ...str3(s.errorMessage) !== void 0 ? { errorMessage: str3(s.errorMessage) } : {},
+    ...str3(s.errorCode) !== void 0 ? { errorCode: str3(s.errorCode) } : {},
+    ...num(s.retryAfterMs) !== void 0 ? { retryAfterMs: num(s.retryAfterMs) } : {},
+    // 对象守卫(与 terminalToSdkResult.degradedOf 同姿势):非对象/null 一律当缺席,不硬塞。
+    ...typeof s.degraded === "object" && s.degraded !== null ? { degraded: s.degraded } : {},
+    ...str3(s.error_kind) !== void 0 ? { errorKind: str3(s.error_kind) } : {},
+    ...typeof s.retryable === "boolean" ? { retryable: s.retryable } : {},
+    ...typeof s.stats === "object" && s.stats !== null ? { stats: s.stats } : {},
+    ...str3(s.model) !== void 0 ? { model: str3(s.model) } : {},
+    ...str3(s.resolvedModel) !== void 0 ? { resolvedModel: str3(s.resolvedModel) } : {},
+    ...asModelFallbackReason(s.modelFallback) !== void 0 ? { modelFallback: asModelFallbackReason(s.modelFallback) } : {},
+    ...str3(s.worktreePath) !== void 0 ? { worktreePath: str3(s.worktreePath) } : {},
+    ...s.toolStats !== void 0 ? { toolStats: s.toolStats } : {}
+  };
+}
 var STRUCTURED_DETAIL_TYPES, MAX_STRUCTURED_FIELD_CHARS, WF_TERMINAL_STATUSES, PROTOCOL_MARKERS, modelFacingParseCount, THREE_GEN_BG_RECEIPT_RE, backgroundReceiptParseCount, TOOL_RESULT_DEGRADED_WIRE_NO_OUTPUT;
 var init_toolResult = __esm({
   "node_modules/@sema-agent/client-core/dist/toolResult.js"() {
     init_patch();
     init_notifications();
     init_workflow();
+    init_engineErrorCodes();
     STRUCTURED_DETAIL_TYPES = /* @__PURE__ */ new Set([
       "edit",
-      "multiedit",
       "create",
       "update",
       "bash",
@@ -69778,7 +69875,6 @@ var init_toolResult = __esm({
       "task",
       "task-list",
       "task-output",
-      "memory-saved",
       "workflow-run",
       "web-fetch",
       "web-search",
@@ -69789,7 +69885,6 @@ var init_toolResult = __esm({
       "image",
       "task-stop",
       "tool-search",
-      "memory-recall",
       "repo-map",
       "fork",
       "enter-plan-mode",
@@ -69800,7 +69895,22 @@ var init_toolResult = __esm({
       "file_unchanged",
       "worktree",
       "monitor-start",
-      "path_not_in_root"
+      "path_not_in_root",
+      // ── core 5.10.0 词表换代(2026-08-04 提货批;engine-vocab 等值门对 5.10.0 实装物直证)──────
+      // 5.10.0 的 structured-card 审计把这张表变成**双向契约**(每个铸点都登记 / 每个登记词都真被产出)。
+      // 新登记 7 词 —— 它们的工具**一直**在铸卡,漏的只是登记,于是这 7 类卡从来没上过 wire:
+      //   · `report-findings` 最坏(ReportFindings 的模型面被**故意**压成「N findings reported.」,
+      //     卡又丢了 ⇒ findings 模型看不到、宿主也看不到,两头落空);
+      //   · `readonly_out_of_root` 与既有 `path_not_in_root` 是同一份「按字段数拒绝次数」契约的两半
+      //     (一个在 shell 面、一个在 fs 面);
+      //   · `schedule-wakeup` / `send-message` / `agent-transcript` / `a2a` / `document` 同理。
+      "readonly_out_of_root",
+      "report-findings",
+      "schedule-wakeup",
+      "send-message",
+      "agent-transcript",
+      "a2a",
+      "document"
     ]);
     MAX_STRUCTURED_FIELD_CHARS = 1e6;
     WF_TERMINAL_STATUSES = /* @__PURE__ */ new Set([
@@ -73326,18 +73436,27 @@ function streamEventArm2(ctx, event) {
 function assertNeverArm(_ev) {
 }
 function eventToSdkMessage(ev, ctx) {
-  const raw2 = ev;
-  if (raw2.type === "workflow_complete") {
-    if (typeof raw2.runId !== "string")
-      return dropped("malformed", "workflow_complete");
-    return projected(stamp(ctx, armBody({
-      type: "workflow_complete",
-      runId: raw2.runId,
-      status: raw2.status === "failed" ? "failed" : "completed",
-      summary: typeof raw2.summary === "string" ? raw2.summary : ""
-    })));
-  }
   switch (ev.type) {
+    // service 1.75 — `workflow_complete`: an out-of-band background-workflow completion push, ridden onto
+    // the session's next stream open (BEFORE the run's own events). Projects to a NEUTRAL internal arm;
+    // the upstream bridge turns it into CC's `<task-notification>` injection.
+    // 🔴 **到期复核已兑现(sdk 6.2.0 提货批,2026-08-04)**:本臂此前是 switch 之前的**唯一** raw
+    // 预分派臂,理由写着「`workflow_complete` 至今不在 union 里……入 union 当天搬进 switch」。
+    // sdk 6.2.0 的 TR-7 批把它连同 question/elicitation 族一并加进了 `AgentEvent` union
+    // (判据 = `dist/events.d.ts` 出现 `type: "workflow_complete"`),故按原定计划搬进来 ——
+    // raw 预分派臂与 `raw` 变量一并退役,本函数从此**每一条臂都受 B5 编译期穷举保护**。
+    // 语义不变:至少一次投递(两条腿同开可能双发),消费方按 `runId` 去重(notifications 台账干这件事)。
+    case "workflow_complete": {
+      if (typeof ev.runId !== "string" || ev.runId.length === 0) {
+        return dropped("malformed", "workflow_complete");
+      }
+      return projected(stamp(ctx, armBody({
+        type: "workflow_complete",
+        runId: ev.runId,
+        status: ev.status === "failed" ? "failed" : "completed",
+        summary: typeof ev.summary === "string" ? ev.summary : ""
+      })));
+    }
     // CS-1 §2.2 — turn-aggregated answer text (durable). Drop raw block array.
     case "text":
       return projected(assistantArm2(ctx, [{ type: "text", text: ev.text }]));
@@ -73397,11 +73516,13 @@ function eventToSdkMessage(ev, ctx) {
     // a side-channel arm `sdkMessagesToCcEvents` reads; CC's own renderer never sees it.
     case "tool_end": {
       const structured = ev.structured;
+      const toolEndErrorCode = ev.errorCode;
       return projected(stamp(ctx, armBody({
         type: "tool_end_result",
         toolCallId: ev.toolCallId,
         toolName: ev.toolName,
         isError: ev.isError,
+        ...typeof toolEndErrorCode === "string" && toolEndErrorCode.length > 0 ? { errorCode: toolEndErrorCode } : {},
         // P0-2([1725] 清单A)— `tool_end.label` 同 tool_start 待遇(server trace/project.js:61 白名单
         // 本体产出)。此臂是壳内部侧信道(不进 transcript),所以这里带着无 provider 风险;
         // tool_start 先到时 bridge 已登记过,这条是补位(只有 tool_end 带 label 的场景)。
@@ -73550,7 +73671,35 @@ function eventToSdkMessage(ev, ctx) {
       return nothing("usage_only");
     // §2.9 — suspended 的 HITL 登记是 run driver 的活(hitlBridge.observe),本层不投影。
     case "suspended":
+    // ── sdk 6.2.0 TR-7 新入 union 的 HITL 带外族(2026-08-04 提货批)────────────────────────
+    // `question` / `question_complete`(AskUserQuestion 的开问/收尾)与 `elicitation` /
+    // `elicitation_complete`(入站 MCP server 向用户要输入)是**对话框覆盖层**的词汇,不是
+    // transcript 的。它们此前只走 live 腿的 SSE `event:` 名分派(`liveQuestionStore.ts` 的 demux
+    // 口),6.2.0 把 durable 腿的重放形也纳入了 union —— 于是它们第一次**流经本函数**。
+    // 🔴 处置理由与 `suspended` 同族、也与本包既有分工一致:HITL 的挂起/应答由
+    //    `hitl/hitlBridge.ts` 的 `observe()` 与 `liveQuestionStore` 负责,本切片(CC transcript
+    //    投影)对它们**没有对位渲染物** —— 硬投一个 transcript 形就是替覆盖层编一条假消息。
+    //    所以走 `hitl_out_of_slice`(可分辨的三态之一),不是 `dropped`(那是「我看不懂」)。
+    // 🔴 记档给下一棒(诚实缺席,不是无事发生):durable 重放腿上,一条被重放的 `question` 今天
+    //    **不会**再打开覆盖层 —— 覆盖层的入口是 liveQuestionStore 的 live demux 写口,而不是本函数。
+    //    这在交互 REPL 上无损(live 腿原路不变),在「断线后按 Last-Event-ID 续读」的场景下是一个
+    //    真缺口。补它属**行为面**改动(要先答「重放一条已经过期 5min TTL 的问题该不该弹窗」),
+    //    按宪法三问单独走,不在本提货批里顺手加 —— 但缺口写在这里,不留白。
+    case "question":
+    case "question_complete":
+    case "elicitation":
+    case "elicitation_complete":
       return nothing("hitl_out_of_slice");
+    // ── sdk 6.2.0 CB-1/TR-6 `error` 臂(2026-08-04 提货批)──────────────────────────────────
+    // 🔴 **名字骗人,别当终态**:这是流的 15 分钟帽帧(server `sse-log.ts`),帧自己就说
+    //    「run 仍然活着」。终态臂只有 `done` / `failed`。把它渲成终态 = 把一条还在跑的任务判死。
+    //    正确处置 = 按 `Last-Event-ID` 重连续读,而那件事 SDK 的 `runs.events` 车道内部就做了
+    //    (本包侧的坐标 = `headlessReconnectWire.ts` 的 STREAM_MAX_DURATION 段)。
+    //    ⇒ 本切片无对位渲染物,也**绝不终止**调用方的循环(返回 none,不是 terminal)。
+    // 🔴 `errorCode` 开集(已知 `STREAM_MAX_DURATION`):未知码同样按「可重连的流控信号」降级,
+    //    不要按成员判死 —— 词表见 `engineErrorCodes.ts`。
+    case "error":
+      return nothing("not_in_slice");
     // CS-10 / CS-11 — terminals are projected by terminalToSdkResult.
     case "done":
     case "failed":
@@ -73668,7 +73817,7 @@ function subtypeForErrorCode(code2) {
     return "error_max_budget_usd";
   if (TURNS_EXCEEDED_CODES.has(code2))
     return "error_max_turns";
-  if (code2 === "output.invalid")
+  if (code2 === OUTPUT_INVALID)
     return "error_max_structured_output_retries";
   return "error_during_execution";
 }
@@ -73738,7 +73887,7 @@ function doneToSdkResult(ev, ctx) {
       return errorResult(ctx, {
         ...errorBase,
         subtype: failedSubtype,
-        ...cutoffParts(r, rr.errorMessage, rr.errorCode === "limits.max_tokens_exceeded" ? "run exhausted its token budget" : "run hit its wall-clock limit", rr.errorCode)
+        ...cutoffParts(r, rr.errorMessage, rr.errorCode === LIMITS_MAX_TOKENS_EXCEEDED ? "run exhausted its token budget" : "run hit its wall-clock limit", rr.errorCode)
       });
     }
     return errorResult(ctx, {
@@ -73748,7 +73897,7 @@ function doneToSdkResult(ev, ctx) {
       // rewind_snapshot.unresolvable 骑在 done{status:"failed"} 帧的 errorCode 上,非 `failed` 帧)——
       // 与 failedToSdkResult 的同款 append 对齐,message 后附 code 便于对账。
       errors: [
-        typeof rr.errorCode === "string" && (rr.errorCode.startsWith("resume_at.") || rr.errorCode.startsWith("rewind_snapshot.")) && rr.errorMessage ? `${rr.errorMessage} (${rr.errorCode})` : rr.errorMessage ?? "run failed"
+        isRewindFamilyCode(rr.errorCode) && rr.errorMessage ? `${rr.errorMessage} (${rr.errorCode})` : rr.errorMessage ?? "run failed"
       ]
     });
   }
@@ -73832,7 +73981,7 @@ function failedToSdkResult(ev, ctx) {
     // resume_at.before_root_unsupported / rewind_snapshot.unresolvable)透传给用户 —— 这些是
     // 用户可自解的操作性错误(选错目标/回退过根/快照缺失),code 附在 message 后便于对账。
     errors: [
-      typeof ev.errorCode === "string" && (ev.errorCode.startsWith("resume_at.") || ev.errorCode.startsWith("rewind_snapshot.")) && ev.errorMessage ? `${ev.errorMessage} (${ev.errorCode})` : ev.errorMessage ?? ev.errorCode ?? "run failed"
+      isRewindFamilyCode(ev.errorCode) && ev.errorMessage ? `${ev.errorMessage} (${ev.errorCode})` : ev.errorMessage ?? ev.errorCode ?? "run failed"
     ]
   });
 }
@@ -73844,15 +73993,12 @@ var init_terminalToSdkResult = __esm({
   "node_modules/@sema-agent/client-core/dist/adapter/downstream/terminalToSdkResult.js"() {
     init_types4();
     init_turnUsageToModelUsage();
-    COST_EXCEEDED_CODES = /* @__PURE__ */ new Set([
-      "limits.max_cost_exceeded"
-    ]);
-    TURNS_EXCEEDED_CODES = /* @__PURE__ */ new Set([
-      "limits.max_turns_exceeded"
-    ]);
+    init_engineErrorCodes();
+    COST_EXCEEDED_CODES = /* @__PURE__ */ new Set([LIMITS_MAX_COST_EXCEEDED]);
+    TURNS_EXCEEDED_CODES = /* @__PURE__ */ new Set([LIMITS_MAX_TURNS_EXCEEDED]);
     CUTOFF_EXCEEDED_CODES = /* @__PURE__ */ new Set([
-      "limits.max_tokens_exceeded",
-      "limits.max_walltime_exceeded"
+      LIMITS_MAX_TOKENS_EXCEEDED,
+      LIMITS_MAX_WALLTIME_EXCEEDED
     ]);
   }
 });
@@ -74039,15 +74185,15 @@ async function* runStreamInner(events3, ctx, handle2 = {}) {
       reportDroppedFrame(projection.why, projection.type, ctx);
   }
 }
-var MAIN2, ACTIVE_RUN_BUSY_ERROR_CODE, reportedDroppedTypes, DROPPED_TYPE_MEMO_CAP, DROPPED_TYPE_DISPLAY_CAP, inFlightTurns;
+var MAIN2, reportedDroppedTypes, DROPPED_TYPE_MEMO_CAP, DROPPED_TYPE_DISPLAY_CAP, inFlightTurns;
 var init_runStream = __esm({
   "node_modules/@sema-agent/client-core/dist/adapter/runStream.js"() {
     init_types4();
     init_eventToSdkMessage();
     init_terminalToSdkResult();
     init_subagentContentStore();
+    init_engineErrorCodes();
     MAIN2 = { lane: "main" };
-    ACTIVE_RUN_BUSY_ERROR_CODE = "conflict.session_active_run";
     reportedDroppedTypes = /* @__PURE__ */ new Set();
     DROPPED_TYPE_MEMO_CAP = 64;
     DROPPED_TYPE_DISPLAY_CAP = 60;
@@ -74568,6 +74714,15 @@ function parseNoFinalVerifyArgv(argv) {
   }
   return false;
 }
+function parseFinalVerifyArgv(argv) {
+  for (const a of argv) {
+    if (a === "--")
+      break;
+    if (a === "--final-verify")
+      return true;
+  }
+  return false;
+}
 function headlessFinalVerifyDisabledByEnv(env5 = hostEnv()) {
   return envFlagOff(env5[HEADLESS_FINAL_VERIFY_ENV]);
 }
@@ -74583,9 +74738,13 @@ function resolveHeadlessFinalVerifyDetail(argv, env5 = hostEnv(), wireHooks) {
     return { on: false, offReason: "flag" };
   if (headlessFinalVerifyDisabledByEnv(env5))
     return { on: false, offReason: "env" };
-  if (hasUserStopHook(wireHooks))
-    return { on: false, offReason: "stop-hook" };
-  return { on: true };
+  const explicitOn = parseFinalVerifyArgv(argv) || envFlagOn(env5[HEADLESS_FINAL_VERIFY_ENV]);
+  if (explicitOn) {
+    if (hasUserStopHook(wireHooks))
+      return { on: false, offReason: "stop-hook" };
+    return { on: true };
+  }
+  return { on: false };
 }
 var HEADLESS_FINAL_VERIFY_ENV, FINAL_VERIFY_YIELD_NOTICE;
 var init_finalVerifyWire = __esm({
@@ -74608,7 +74767,7 @@ function parseIntInDomain(raw2, min, max2) {
   return n2;
 }
 function hasAnyLimit(l3) {
-  return l3.maxWalltimeMs !== void 0 || l3.maxTurns !== void 0 || l3.maxTokens !== void 0;
+  return l3.maxWalltimeMs !== void 0 || l3.maxTurns !== void 0 || l3.maxOutputTokens !== void 0;
 }
 function parseLimitsArgv(argv) {
   const limits = {};
@@ -74634,7 +74793,7 @@ function parseLimitsArgv(argv) {
     const n2 = mk.raw !== void 0 ? parseIntInDomain(mk.raw, MAX_TOKENS_MIN, MAX_TOKENS_MAX) : null;
     if (n2 === null)
       return { ok: false, error: MAX_TOKENS_USAGE };
-    limits.maxTokens = n2;
+    limits.maxOutputTokens = n2;
     flaggedFlags.push("--max-tokens");
   }
   return {
@@ -74670,7 +74829,7 @@ function headlessLimitsFromEnv(env5 = hostEnv()) {
     if (n2 === null) {
       return { ok: false, error: `Error: ${HEADLESS_MAX_TOKENS_ENV}="${mk}" is not a positive integer. Fix or unset it.` };
     }
-    out6.maxTokens = n2;
+    out6.maxOutputTokens = n2;
   }
   return { ok: true, limits: hasAnyLimit(out6) ? out6 : void 0 };
 }
@@ -75700,15 +75859,15 @@ function classifyTaskStopConflict(e) {
   const raw2 = e?.errorCode;
   const code2 = typeof raw2 === "string" ? raw2 : STOP_CONFLICT_CODES.find((c2) => detail.includes(c2)) ?? "";
   switch (code2) {
-    case "stop.not_local":
+    case STOP_NOT_LOCAL:
       return { ok: false, reason: "not_local", detail };
-    case "stop.parked":
+    case STOP_PARKED:
       return { ok: false, reason: "parked", detail };
-    case "stop.park_resume_won":
+    case STOP_PARK_RESUME_WON:
       return { ok: false, reason: "park_resume_won", detail };
-    case "stop.park_arbiter_unreachable":
+    case STOP_PARK_ARBITER_UNREACHABLE:
       return { ok: false, reason: "park_arbiter_unreachable", detail };
-    case "stop.not_landed":
+    case STOP_NOT_LANDED:
       return { ok: false, reason: "not_landed", detail };
     default:
       return { ok: false, reason: "unknown_conflict", detail };
@@ -75752,7 +75911,7 @@ async function stopEngineTask(handle2, opts) {
     return { ok: false, reason: "error", detail };
   }
 }
-var accumulated, STOP_CONFLICT_CODES;
+var accumulated;
 var init_engineTaskHandleWire = __esm({
   "node_modules/@sema-agent/client-core/dist/subagent/engineTaskHandleWire.js"() {
     init_host();
@@ -75762,14 +75921,8 @@ var init_engineTaskHandleWire = __esm({
     init_subagentContentStore();
     init_engineRowStopGate();
     init_toolResult();
+    init_engineErrorCodes();
     accumulated = /* @__PURE__ */ new Map();
-    STOP_CONFLICT_CODES = [
-      "stop.park_arbiter_unreachable",
-      "stop.park_resume_won",
-      "stop.not_landed",
-      "stop.not_local",
-      "stop.parked"
-    ];
   }
 });
 
@@ -78855,124 +79008,6 @@ var init_toolApprovalWire = __esm({
   }
 });
 
-// node_modules/@sema-agent/client-core/dist/hitl/gateLedger.js
-function createGateLedger() {
-  const startedCalls = /* @__PURE__ */ new Set();
-  const endedCalls = /* @__PURE__ */ new Set();
-  const heldAskEnds = /* @__PURE__ */ new Map();
-  const gatedStartArgsByCall = /* @__PURE__ */ new Map();
-  const deniedCalls = /* @__PURE__ */ new Set();
-  const pendingFsCalls = [];
-  const resolvedAnswers = /* @__PURE__ */ new Map();
-  const decidedGates = /* @__PURE__ */ new Set();
-  let lastFsOrShellGatedCall;
-  let denyStampNextFsEnd = false;
-  let seq;
-  return {
-    noteSeq(ev) {
-      const rawSeq = ev.id ?? ev.seq;
-      if (typeof rawSeq === "string" && rawSeq.length > 0)
-        seq = rawSeq;
-      else if (typeof rawSeq === "number" && Number.isFinite(rawSeq))
-        seq = String(rawSeq);
-    },
-    lastSeq() {
-      return seq;
-    },
-    markStarted(callId) {
-      if (startedCalls.has(callId))
-        return false;
-      startedCalls.add(callId);
-      return true;
-    },
-    noteGatedStart(callId, ev) {
-      gatedStartArgsByCall.set(callId, ev.args);
-    },
-    gatedStartArgs() {
-      return gatedStartArgsByCall;
-    },
-    isEnded(callId) {
-      return endedCalls.has(callId);
-    },
-    markEnded(callId) {
-      endedCalls.add(callId);
-    },
-    hold(callId, ev) {
-      heldAskEnds.set(callId, ev);
-    },
-    dropHeld(callId) {
-      heldAskEnds.delete(callId);
-    },
-    heldCount() {
-      return heldAskEnds.size;
-    },
-    *flushHeld() {
-      for (const [callId, held] of heldAskEnds) {
-        endedCalls.add(callId);
-        yield held;
-      }
-      heldAskEnds.clear();
-    },
-    markDenied(callId) {
-      deniedCalls.add(callId);
-    },
-    isDenied(callId) {
-      return deniedCalls.has(callId);
-    },
-    takeDenied(callId) {
-      return deniedCalls.delete(callId);
-    },
-    armDenyStamp() {
-      denyStampNextFsEnd = true;
-    },
-    takeDenyStamp() {
-      if (!denyStampNextFsEnd)
-        return false;
-      denyStampNextFsEnd = false;
-      return true;
-    },
-    pushFsCall(callId) {
-      pendingFsCalls.push(callId);
-    },
-    dropFsCall(callId) {
-      const at = pendingFsCalls.indexOf(callId);
-      if (at !== -1)
-        pendingFsCalls.splice(at, 1);
-    },
-    lastPendingFsCall() {
-      return pendingFsCalls.length > 0 ? pendingFsCalls[pendingFsCalls.length - 1] : void 0;
-    },
-    noteFsOrShellGate(callId) {
-      lastFsOrShellGatedCall = callId;
-    },
-    lastFsOrShellGatedCallId() {
-      return lastFsOrShellGatedCall;
-    },
-    rememberAnswer(callId, answered) {
-      resolvedAnswers.set(callId, answered);
-    },
-    answerFor(callId) {
-      return resolvedAnswers.get(callId);
-    },
-    dropAnswer(callId) {
-      resolvedAnswers.delete(callId);
-    },
-    markDecided(callId) {
-      decidedGates.add(callId);
-    },
-    takeDecided(callId) {
-      return decidedGates.delete(callId);
-    },
-    decidedCount() {
-      return decidedGates.size;
-    }
-  };
-}
-var init_gateLedger = __esm({
-  "node_modules/@sema-agent/client-core/dist/hitl/gateLedger.js"() {
-  }
-});
-
 // node_modules/@sema-agent/client-core/dist/hitl/frameRouter.js
 function rejectMessageForRender() {
   return HITL_REJECT_MESSAGE;
@@ -79230,6 +79265,124 @@ var init_frameRouter = __esm({
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/hitl/gateLedger.js
+function createGateLedger() {
+  const startedCalls = /* @__PURE__ */ new Set();
+  const endedCalls = /* @__PURE__ */ new Set();
+  const heldAskEnds = /* @__PURE__ */ new Map();
+  const gatedStartArgsByCall = /* @__PURE__ */ new Map();
+  const deniedCalls = /* @__PURE__ */ new Set();
+  const pendingFsCalls = [];
+  const resolvedAnswers = /* @__PURE__ */ new Map();
+  const decidedGates = /* @__PURE__ */ new Set();
+  let lastFsOrShellGatedCall;
+  let denyStampNextFsEnd = false;
+  let seq;
+  return {
+    noteSeq(ev) {
+      const rawSeq = ev.id ?? ev.seq;
+      if (typeof rawSeq === "string" && rawSeq.length > 0)
+        seq = rawSeq;
+      else if (typeof rawSeq === "number" && Number.isFinite(rawSeq))
+        seq = String(rawSeq);
+    },
+    lastSeq() {
+      return seq;
+    },
+    markStarted(callId) {
+      if (startedCalls.has(callId))
+        return false;
+      startedCalls.add(callId);
+      return true;
+    },
+    noteGatedStart(callId, ev) {
+      gatedStartArgsByCall.set(callId, ev.args);
+    },
+    gatedStartArgs() {
+      return gatedStartArgsByCall;
+    },
+    isEnded(callId) {
+      return endedCalls.has(callId);
+    },
+    markEnded(callId) {
+      endedCalls.add(callId);
+    },
+    hold(callId, ev) {
+      heldAskEnds.set(callId, ev);
+    },
+    dropHeld(callId) {
+      heldAskEnds.delete(callId);
+    },
+    heldCount() {
+      return heldAskEnds.size;
+    },
+    *flushHeld() {
+      for (const [callId, held] of heldAskEnds) {
+        endedCalls.add(callId);
+        yield held;
+      }
+      heldAskEnds.clear();
+    },
+    markDenied(callId) {
+      deniedCalls.add(callId);
+    },
+    isDenied(callId) {
+      return deniedCalls.has(callId);
+    },
+    takeDenied(callId) {
+      return deniedCalls.delete(callId);
+    },
+    armDenyStamp() {
+      denyStampNextFsEnd = true;
+    },
+    takeDenyStamp() {
+      if (!denyStampNextFsEnd)
+        return false;
+      denyStampNextFsEnd = false;
+      return true;
+    },
+    pushFsCall(callId) {
+      pendingFsCalls.push(callId);
+    },
+    dropFsCall(callId) {
+      const at = pendingFsCalls.indexOf(callId);
+      if (at !== -1)
+        pendingFsCalls.splice(at, 1);
+    },
+    lastPendingFsCall() {
+      return pendingFsCalls.length > 0 ? pendingFsCalls[pendingFsCalls.length - 1] : void 0;
+    },
+    noteFsOrShellGate(callId) {
+      lastFsOrShellGatedCall = callId;
+    },
+    lastFsOrShellGatedCallId() {
+      return lastFsOrShellGatedCall;
+    },
+    rememberAnswer(callId, answered) {
+      resolvedAnswers.set(callId, answered);
+    },
+    answerFor(callId) {
+      return resolvedAnswers.get(callId);
+    },
+    dropAnswer(callId) {
+      resolvedAnswers.delete(callId);
+    },
+    markDecided(callId) {
+      decidedGates.add(callId);
+    },
+    takeDecided(callId) {
+      return decidedGates.delete(callId);
+    },
+    decidedCount() {
+      return decidedGates.size;
+    }
+  };
+}
+var init_gateLedger = __esm({
+  "node_modules/@sema-agent/client-core/dist/hitl/gateLedger.js"() {
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/hitl/parkResolver.js
 function isGateFailureCode(v2) {
   return v2 === "no_pending" || v2 === "binding_mismatch" || v2 === "wrong_gate" || v2 === "bad_plan_edit";
@@ -81717,6 +81870,7 @@ var init_localeGeo = __esm({
 var dist_exports = {};
 __export(dist_exports, {
   ABSENT_SETTLE_MS: () => ABSENT_SETTLE_MS,
+  ACTIVE_RUN_BUSY_ERROR_CODE: () => ACTIVE_RUN_BUSY_ERROR_CODE,
   ADAPTER_COVERAGE: () => ADAPTER_COVERAGE,
   ADAPTER_DIVERGENCES: () => ADAPTER_DIVERGENCES,
   ATTACHMENTS_ENV: () => ATTACHMENTS_ENV,
@@ -81737,6 +81891,11 @@ __export(dist_exports, {
   CHROME_EVENT_KINDS: () => CHROME_EVENT_KINDS,
   CLASSIFIER_DENY_SIGNATURE: () => CLASSIFIER_DENY_SIGNATURE,
   CLIENT_VERBS: () => CLIENT_VERBS,
+  CONFIG_LIMIT_INVALID: () => CONFIG_LIMIT_INVALID,
+  CONFIG_LIMIT_UNKNOWN_KEY: () => CONFIG_LIMIT_UNKNOWN_KEY,
+  CONFIG_REFUSAL_CODES: () => CONFIG_REFUSAL_CODES,
+  CONFIG_STRATEGY_FIND_LIMIT_INVALID: () => CONFIG_STRATEGY_FIND_LIMIT_INVALID,
+  CONFIG_STRATEGY_MAX_SIZE_INVALID: () => CONFIG_STRATEGY_MAX_SIZE_INVALID,
   CONTEXT_LINES: () => CONTEXT_LINES,
   CONTROL_TOOL_VERBS: () => CONTROL_TOOL_VERBS,
   ControlRouter: () => ControlRouter,
@@ -81763,6 +81922,7 @@ __export(dist_exports, {
   ENGINE_HANDS_BAND: () => ENGINE_HANDS_BAND,
   ENGINE_RUNNER_FACE: () => ENGINE_RUNNER_FACE,
   ENGINE_SCENARIO_EXTRAS_DEFAULT: () => ENGINE_SCENARIO_EXTRAS_DEFAULT,
+  ENV_LIFETIME_EXPIRED: () => ENV_LIFETIME_EXPIRED,
   FALLBACK_CONTEXT_WINDOW: () => FALLBACK_CONTEXT_WINDOW,
   FINAL_VERIFY_YIELD_NOTICE: () => FINAL_VERIFY_YIELD_NOTICE,
   FLEET_TASK_ROW_KEYS_NOT_PROJECTED: () => FLEET_TASK_ROW_KEYS_NOT_PROJECTED,
@@ -81790,6 +81950,10 @@ __export(dist_exports, {
   HitlBridge: () => HitlBridge,
   HitlSafetyError: () => HitlSafetyError,
   IDLE_FLUSH_MS: () => IDLE_FLUSH_MS,
+  LIMITS_MAX_COST_EXCEEDED: () => LIMITS_MAX_COST_EXCEEDED,
+  LIMITS_MAX_TOKENS_EXCEEDED: () => LIMITS_MAX_TOKENS_EXCEEDED,
+  LIMITS_MAX_TURNS_EXCEEDED: () => LIMITS_MAX_TURNS_EXCEEDED,
+  LIMITS_MAX_WALLTIME_EXCEEDED: () => LIMITS_MAX_WALLTIME_EXCEEDED,
   LIMITS_WIRE_MIN_ENGINE: () => LIMITS_WIRE_MIN_ENGINE,
   LIVE_DEFAULT_FIELDS: () => LIVE_DEFAULT_FIELDS,
   LOCAL_SESSIONS_SPEC: () => LOCAL_SESSIONS_SPEC,
@@ -81811,7 +81975,9 @@ __export(dist_exports, {
   MAX_TURNS_MIN: () => MAX_TURNS_MIN,
   MCP_CAPS: () => MCP_CAPS,
   MIGRATED_COMPENSATIONS: () => MIGRATED_COMPENSATIONS,
+  MODEL_FALLBACK_INHERIT_NO_TIER_BINDING: () => MODEL_FALLBACK_INHERIT_NO_TIER_BINDING,
   MODEL_FAMILIES: () => MODEL_FAMILIES,
+  OUTPUT_INVALID: () => OUTPUT_INVALID,
   PANEL_TOOLUSES_LANE_POLICY: () => PANEL_TOOLUSES_LANE_POLICY,
   PERMISSION_MODE_INTENTS: () => PERMISSION_MODE_INTENTS,
   PLAN_REVIEW_APPROVE_LABEL: () => PLAN_REVIEW_APPROVE_LABEL,
@@ -81824,6 +81990,7 @@ __export(dist_exports, {
   REJECT_MESSAGE: () => REJECT_MESSAGE,
   REQUEST_FIELD_MATRIX: () => REQUEST_FIELD_MATRIX,
   RETAIN_BACKGROUND_ENV: () => RETAIN_BACKGROUND_ENV,
+  REWIND_ERROR_CODE_PREFIXES: () => REWIND_ERROR_CODE_PREFIXES,
   SANDBOX_CASCADE_CONFLICT_400_ANCHOR: () => SANDBOX_CASCADE_CONFLICT_400_ANCHOR,
   SANDBOX_K8S_ONLY_400_ANCHOR: () => SANDBOX_K8S_ONLY_400_ANCHOR,
   SANDBOX_NO_IMAGE_INDEX_400_ANCHOR: () => SANDBOX_NO_IMAGE_INDEX_400_ANCHOR,
@@ -81848,6 +82015,13 @@ __export(dist_exports, {
   SSE_GRACE_MIN_MS: () => SSE_GRACE_MIN_MS,
   SSE_HEARTBEAT_GRACE_ENV: () => SSE_HEARTBEAT_GRACE_ENV,
   START_SESSION_OPTION_KEYS: () => START_SESSION_OPTION_KEYS,
+  STOP_CONFLICT_CODES: () => STOP_CONFLICT_CODES,
+  STOP_NOT_LANDED: () => STOP_NOT_LANDED,
+  STOP_NOT_LOCAL: () => STOP_NOT_LOCAL,
+  STOP_PARKED: () => STOP_PARKED,
+  STOP_PARK_ARBITER_UNREACHABLE: () => STOP_PARK_ARBITER_UNREACHABLE,
+  STOP_PARK_RESUME_WON: () => STOP_PARK_RESUME_WON,
+  STREAM_MAX_DURATION: () => STREAM_MAX_DURATION,
   STRUCTURED_DETAIL_TYPES: () => STRUCTURED_DETAIL_TYPES,
   SUBAGENT_TOOL_NAMES: () => SUBAGENT_TOOL_NAMES,
   TASK_AGENT_WIRE_FIELDS: () => TASK_AGENT_WIRE_FIELDS,
@@ -81855,9 +82029,13 @@ __export(dist_exports, {
   TERMINAL_RETAIN_MS: () => TERMINAL_RETAIN_MS,
   TOCTOU_BINDING_KEYS: () => TOCTOU_BINDING_KEYS,
   TOOL_APPROVAL_FRAME_KEYS_MIRROR: () => TOOL_APPROVAL_FRAME_KEYS_MIRROR,
+  TOOL_END_INTERRUPTED_CODES: () => TOOL_END_INTERRUPTED_CODES,
+  TOOL_END_INTERRUPTED_NEVER_STARTED: () => TOOL_END_INTERRUPTED_NEVER_STARTED,
+  TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN: () => TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN,
   TOOL_PERMISSION_DECISION_KEYS: () => TOOL_PERMISSION_DECISION_KEYS,
   TOOL_PERMISSION_REQUEST_KEYS: () => TOOL_PERMISSION_REQUEST_KEYS,
   TOOL_RESULT_DEGRADED_WIRE_NO_OUTPUT: () => TOOL_RESULT_DEGRADED_WIRE_NO_OUTPUT,
+  USAGE_WINDOW_EXHAUSTED: () => USAGE_WINDOW_EXHAUSTED,
   USER_EMAIL_ENV: () => USER_EMAIL_ENV,
   WEBSEARCH_ENV: () => WEBSEARCH_ENV,
   WEB_SEARCH_ENGINE_DEFAULTS: () => WEB_SEARCH_ENGINE_DEFAULTS,
@@ -81906,6 +82084,7 @@ __export(dist_exports, {
   approvalCardPortMissesFor: () => approvalCardPortMissesFor,
   armDetachCancel: () => armDetachCancel,
   armPlanReviewApproval: () => armPlanReviewApproval,
+  asModelFallbackReason: () => asModelFallbackReason,
   assistantTaskToBackgroundRow: () => assistantTaskToBackgroundRow,
   attachmentsForRequest: () => attachmentsForRequest,
   awaitTaskAgentsWire: () => awaitTaskAgentsWire,
@@ -82067,6 +82246,7 @@ __export(dist_exports, {
   isAllowedCatalogUrl: () => isAllowedCatalogUrl,
   isAlreadyResolvedGateReason: () => isAlreadyResolvedGateReason,
   isAttachmentUploadReceipt: () => isAttachmentUploadReceipt,
+  isConfigRefusalCode: () => isConfigRefusalCode,
   isDetachArmed: () => isDetachArmed,
   isEngineCompactPending: () => isEngineCompactPending,
   isEnginePanelTaskResident: () => isEnginePanelTaskResident,
@@ -82079,6 +82259,7 @@ __export(dist_exports, {
   isFsApprovalGate: () => isFsApprovalGate,
   isGoalStopHookWireArmed: () => isGoalStopHookWireArmed,
   isHookNoticeFrame: () => isHookNoticeFrame,
+  isInterruptedToolEndCode: () => isInterruptedToolEndCode,
   isKnownWorkflowAgentTaskId: () => isKnownWorkflowAgentTaskId,
   isLocalSessionEvent: () => isLocalSessionEvent,
   isLocalSessionRecord: () => isLocalSessionRecord,
@@ -82086,6 +82267,7 @@ __export(dist_exports, {
   isOwnEngineRun: () => isOwnEngineRun,
   isOwnWorkflowRun: () => isOwnWorkflowRun,
   isPlanReviewPark: () => isPlanReviewPark,
+  isRewindFamilyCode: () => isRewindFamilyCode,
   isRunStreamActive: () => isRunStreamActive,
   isSeatModelCatalog: () => isSeatModelCatalog,
   isSendMessageAck: () => isSendMessageAck,
@@ -82136,6 +82318,7 @@ __export(dist_exports, {
   parentToolCallIdOf: () => parentToolCallIdOf,
   parseBackgroundReceipt: () => parseBackgroundReceipt,
   parseCatalogSources: () => parseCatalogSources,
+  parseFinalVerifyArgv: () => parseFinalVerifyArgv,
   parseLimitsArgv: () => parseLimitsArgv,
   parseModelFacingBash: () => parseModelFacingBash,
   parseModelFacingTaskOutput: () => parseModelFacingTaskOutput,
@@ -82174,6 +82357,7 @@ __export(dist_exports, {
   publishQuestionFrameFor: () => publishQuestionFrameFor,
   publishSubagentContentEvent: () => publishSubagentContentEvent,
   pushSubagentLocalEcho: () => pushSubagentLocalEcho,
+  readCompletedAgentCard: () => readCompletedAgentCard,
   readEngineActiveBgTasks: () => readEngineActiveBgTasks,
   readEngineActiveBgTasksFor: () => readEngineActiveBgTasksFor,
   recordBgParentRun: () => recordBgParentRun,
@@ -82266,6 +82450,7 @@ __export(dist_exports, {
   toCappedSpec: () => toCappedSpec,
   toCcModelUsage: () => toCcModelUsage,
   todoWriteToolUseResult: () => todoWriteToolUseResult,
+  toolEndOutputText: () => toolEndOutputText,
   toolEndResultToUserFrame: () => toolEndResultToUserFrame,
   toolNameIsFsWrite: () => toolNameIsFsWrite,
   toolNameIsShellExec: () => toolNameIsShellExec,
@@ -82324,6 +82509,7 @@ var init_dist = __esm({
     init_sseIdleTriage();
     init_engineWireSdk();
     init_classifierVerdictWire();
+    init_engineErrorCodes();
     init_agentsWireCaps();
     init_attachmentsWireCaps();
     init_clientContextWireCaps();
@@ -82381,6 +82567,7 @@ var init_dist = __esm({
     init_liveInitToolFace();
     init_providerPresets2();
     init_hitlBridge();
+    init_frameRouter();
     init_hitlHostSurface();
     init_toolApprovalWire();
     init_askGateWire();
@@ -136121,7 +136308,7 @@ function activeRunBusySignal2(ev) {
   const activeTaskId = "activeTaskId" in carrier ? carrier.activeTaskId : void 0;
   const activeTaskStatus = "activeTaskStatus" in carrier ? carrier.activeTaskStatus : void 0;
   const rawGate = "pendingGate" in carrier ? carrier.pendingGate : void 0;
-  const codeHit = errorCode === ACTIVE_RUN_BUSY_ERROR_CODE2;
+  const codeHit = errorCode === ACTIVE_RUN_BUSY_ERROR_CODE;
   const handle2 = typeof activeTaskId === "string" && activeTaskId.length > 0 ? activeTaskId : null;
   if (!codeHit && handle2 === null) return null;
   let pendingGate = null;
@@ -136203,15 +136390,42 @@ async function attemptActiveRunSelfHeal(signal, runs, deps2) {
   }
   return { kind: "healed", taskId, status: status3 };
 }
-function activeRunSelfHealRow(outcome) {
-  return activeRunSelfHealBaseRow(outcome);
+function gateKindPhrase(kind) {
+  return kind ? `a ${kind} decision` : "a decision";
+}
+function decidePathClause(signal) {
+  const decidePath = signal?.pendingGate?.decidePath;
+  if (!decidePath) return "";
+  return ` The engine says that run is waiting on ${gateKindPhrase(signal?.pendingGate?.kind)} and that it is decided at POST ${decidePath} \u2014 deciding it releases the session.`;
+}
+function healedCostClause(signal) {
+  const gate = signal?.pendingGate;
+  if (gate) return `it was waiting on ${gateKindPhrase(gate.kind)}, so that decision was declined`;
+  if (signal?.activeTaskStatus)
+    return "the engine reported no decision pending on it (a stale park), so nothing was decided on your behalf";
+  return "the engine did not report what it was waiting on, so anything still pending on it is now gone";
+}
+function activeRunSelfHealRow(outcome, signal) {
+  const base = activeRunSelfHealBaseRow(outcome, signal);
+  switch (outcome.kind) {
+    // 这四条是「用户此刻卡住了、而且没有别的把手」的结局 —— wire 给的 decide 入口在这里才有用。
+    case "not-parked":
+    case "state-unknown":
+    case "cancel-failed":
+    case "budget-exhausted":
+      return base + decidePathClause(signal);
+    // healed = 已经解开了;两条 plan-review 臂与 decision-pending 手上都另有一张更好的把手
+    // (重开的卡 / 已开的卡 / 基句自己渲的 decidePath)—— 再叠一条引擎路由只会稀释那一个动作。
+    default:
+      return base;
+  }
 }
-function activeRunSelfHealBaseRow(outcome) {
+function activeRunSelfHealBaseRow(outcome, signal) {
   switch (outcome.kind) {
     case "decision-pending":
       return `This session is held by an earlier turn${outcome.taskId ? ` (run ${outcome.taskId})` : ""} that is waiting on a decision you have not made yet, and there is a decision card open for it. sema did NOT cancel it \u2014 answering that card is what releases the session, and cancelling would decide it for you. Your message was NOT sent; answer the open card and send it again.`;
     case "healed": {
-      const cost2 = "it was waiting on an approval, so that approval was declined";
+      const cost2 = healedCostClause(signal);
       void outcome.status;
       return `Your previous turn was parked (run ${outcome.taskId}) and was still holding this session, so nothing new could start \u2014 ${cost2}. sema cancelled that parked run and re-sent this message.`;
     }
@@ -136222,6 +136436,9 @@ function activeRunSelfHealBaseRow(outcome) {
       return `The previous turn is parked waiting for a plan review (run ${outcome.taskId}) and sema could not reopen that approval card. It did NOT cancel the run \u2014 that would have discarded the plan for you. Your message was NOT sent; ${INTERACTIVE_WAY_OUT} if you no longer want that plan.${viaEngine}`;
     }
     case "not-parked":
+      if (signal?.pendingGate) {
+        return `This session is held by an earlier run (run ${outcome.taskId}, status ${outcome.status}) that is waiting on ${gateKindPhrase(signal.pendingGate.kind)} \u2014 it will not finish on its own. sema did NOT cancel it, because cancelling would decide that item for you. Your message was NOT sent; ${INTERACTIVE_WAY_OUT} if you no longer want it.`;
+      }
       return `This session already has a run in flight (run ${outcome.taskId}, status ${outcome.status}) \u2014 most likely a turn you sent to the background. sema did NOT cancel it, because that would throw away work you asked for. Wait for it to finish, or ${INTERACTIVE_WAY_OUT}.`;
     case "state-unknown":
       return `This session is locked by an earlier run${outcome.taskId ? ` (run ${outcome.taskId})` : ""} and sema could not read that run's state, so it did not touch it (${outcome.detail}). Your message was NOT sent. This session cannot start a new turn until that run settles \u2014 ${INTERACTIVE_WAY_OUT}.`;
@@ -136231,14 +136448,25 @@ function activeRunSelfHealBaseRow(outcome) {
       return `This session is still locked${outcome.taskId ? ` by run ${outcome.taskId}` : ""} after sema already cancelled one parked run for this message. Not retrying again (a second automatic cancel would only spin). Your message was NOT sent \u2014 ${INTERACTIVE_WAY_OUT}.`;
   }
 }
-function activeRunBusyHeadlessRow(activeTaskId) {
+function activeRunBusyHeadlessRow(signal) {
+  const activeTaskId = signal.activeTaskId;
   const handle2 = activeTaskId ? ` (run ${activeTaskId})` : "";
-  return `This session is locked by an earlier run${handle2} that was never released, so this message was NOT sent. Nothing here clears on its own. Start a new session (drop --resume/--continue), or release the run on the engine: POST /v1/runs/${activeTaskId ?? "<id>"}/cancel`;
+  const cancelPath = `POST /v1/runs/${activeTaskId ?? "<id>"}/cancel`;
+  const status3 = signal.activeTaskStatus;
+  const decidePath = signal.pendingGate?.decidePath ?? null;
+  const freshSession = "start a new session (drop --resume/--continue)";
+  if (decidePath) {
+    return `This session is held by an earlier run${handle2}${status3 ? ` (status ${status3})` : ""} that is parked waiting on ${gateKindPhrase(signal.pendingGate?.kind)}, so this message was NOT sent. Decide it and the session unlocks: POST ${decidePath}. Cancelling instead (${cancelPath}) also unlocks it, but it decides that item against you. Or ${freshSession}.`;
+  }
+  if (status3) {
+    return `This session is held by an earlier run${handle2} with status ${status3}, so this message was NOT sent. The engine reported no decision pending on that run: if it is still working, wait for it to finish; if it will never settle, release it with ${cancelPath} (that discards whatever it was doing). Or ${freshSession}.`;
+  }
+  return `This session is locked by an earlier run${handle2} that was never released, so this message was NOT sent. Nothing here clears on its own. Start a new session (drop --resume/--continue), or release the run on the engine: ${cancelPath}`;
 }
-var ACTIVE_RUN_BUSY_ERROR_CODE2, PLAN_REVIEW_STATES, ASK_PARK_STATES, ACTIVE_RUN_SELF_HEAL_MAX_ATTEMPTS, INTERACTIVE_WAY_OUT;
+var PLAN_REVIEW_STATES, ASK_PARK_STATES, ACTIVE_RUN_SELF_HEAL_MAX_ATTEMPTS, INTERACTIVE_WAY_OUT;
 var init_activeRunSelfHeal = __esm({
   "build-src/src/sema/activeRunSelfHeal.ts"() {
-    ACTIVE_RUN_BUSY_ERROR_CODE2 = "conflict.session_active_run";
+    init_dist();
     PLAN_REVIEW_STATES = ["needs_review"];
     ASK_PARK_STATES = ["suspended"];
     ACTIVE_RUN_SELF_HEAL_MAX_ATTEMPTS = 1;
@@ -136300,7 +136528,7 @@ function rewriteActiveRunBusyRow(msgs, seen2) {
             ...m2,
             message: {
               ...envelope,
-              content: [{ type: "text", text: activeRunBusyHeadlessRow(busy.activeTaskId) }]
+              content: [{ type: "text", text: activeRunBusyHeadlessRow(busy) }]
             }
           };
           continue;
@@ -137682,79 +137910,6 @@ var init_textModeError = __esm({
   }
 });
 
-// build-src/src/sema/subagentDurablePause.ts
-function detectDurablePauseReport(text2) {
-  const m2 = DURABLE_PAUSE_RE.exec(text2);
-  if (m2 === null) return null;
-  return {
-    status: m2[1],
-    checkpointToken: m2[2] ?? "?",
-    lane: m2[3] === "fork" ? "fork" : "delegation"
-  };
-}
-function honestDurablePauseReport(text2, facts) {
-  const what = facts.lane === "fork" ? "fork" : "delegation";
-  return text2.replace(
-    DURABLE_PAUSE_RE,
-    `status: paused
-paused: the sub-agent stopped at an approval gate and durably paused (${facts.status}). It is waiting for a human decision \u2014 this is NOT a task failure and NOT a tool error.
-checkpoint: ${facts.checkpointToken}
-what to do: a nested (sub-agent) durable pause cannot be adjudicated from inside this ${what}, so re-issuing the same approval-gated action will park again. Tell the user the gate is waiting (quote the checkpoint above), and either have the action pre-approved / the permission mode widened before re-running the ${what}, or take a route that does not need that gate. Do NOT report this to the user as a plain failure.`
-  );
-}
-function toolResultText(content) {
-  if (typeof content === "string") return content;
-  if (!Array.isArray(content)) return null;
-  const parts = [];
-  for (const b3 of content) {
-    const bb = b3;
-    if (bb?.type === "text" && typeof bb.text === "string") parts.push(bb.text);
-  }
-  return parts.length > 0 ? parts.join("") : null;
-}
-function rewriteToolResultContent(content, next) {
-  if (typeof content === "string") return next;
-  if (!Array.isArray(content)) return content;
-  let done = false;
-  return content.map((b3) => {
-    const bb = b3;
-    if (done || bb?.type !== "text" || typeof bb.text !== "string") return b3;
-    done = true;
-    return { ...bb, text: next };
-  });
-}
-function reduceSubagentDurablePauseEnvelope(msg) {
-  if (msg.type !== "user") return msg;
-  const message = msg.message;
-  const content = message?.content;
-  if (!Array.isArray(content)) return msg;
-  let changed = false;
-  const next = content.map((block2) => {
-    const b3 = block2;
-    if (b3?.type !== "tool_result") return block2;
-    const text2 = toolResultText(b3.content);
-    if (text2 === null) return block2;
-    const facts = detectDurablePauseReport(text2);
-    if (facts === null) return block2;
-    changed = true;
-    return {
-      ...b3,
-      content: rewriteToolResultContent(b3.content, honestDurablePauseReport(text2, facts)),
-      // 🔴 承重位:这是把 park 接回「UserToolResultMessage 的 `if (param.is_error)` →
-      //    renderToolUseErrorMessage」那条真会上屏的臂的唯一开关。删了它 = 退回零渲染(病象复发)。
-      is_error: true
-    };
-  });
-  if (!changed) return msg;
-  return { ...msg, message: { ...message, content: next } };
-}
-var DURABLE_PAUSE_RE;
-var init_subagentDurablePause = __esm({
-  "build-src/src/sema/subagentDurablePause.ts"() {
-    DURABLE_PAUSE_RE = /\bstatus: failed\n(?:error: )?unexpected durable pause \((suspended|needs_review), checkpoint ([^)]*)\) — treat this (delegation|fork) as failed; do not retry (?:with )?the same (?:approval-)?gated action\./;
-  }
-});
-
 // build-src/src/sema/appStateRef.ts
 var appStateRef_exports = {};
 __export(appStateRef_exports, {
@@ -224758,6 +224913,38 @@ var init_apiErrorSupplement = __esm({
   }
 });
 
+// build-src/src/sema/atMentionAttachmentWire.ts
+function collectSubmissionAttachmentTexts(msgs, submitted, normalize20) {
+  const anchorIdx = msgs.lastIndexOf(submitted);
+  if (anchorIdx < 0) return { ok: true, texts: [] };
+  const out6 = [];
+  for (let i = anchorIdx + 1; i < msgs.length; i++) {
+    const m2 = msgs[i];
+    if (m2?.type === "assistant") break;
+    if (m2?.type !== "attachment" || !m2.attachment) continue;
+    let projected2;
+    try {
+      projected2 = normalize20(m2.attachment);
+    } catch (e) {
+      return { ok: false, reason: `malformed attachment payload: ${String(e)}` };
+    }
+    for (const am of projected2) {
+      const c2 = am?.message?.content;
+      if (typeof c2 === "string") out6.push(c2);
+      else if (Array.isArray(c2)) {
+        for (const b3 of c2) {
+          if (b3?.type === "text" && typeof b3.text === "string" && b3.text.trim().length > 0) out6.push(b3.text);
+        }
+      }
+    }
+  }
+  return { ok: true, texts: out6 };
+}
+var init_atMentionAttachmentWire = __esm({
+  "build-src/src/sema/atMentionAttachmentWire.ts"() {
+  }
+});
+
 // build-src/src/sema/engineRuntimeStatus.ts
 var engineRuntimeStatus_exports = {};
 __export(engineRuntimeStatus_exports, {
@@ -226808,6 +226995,8 @@ function resetDeadRespawnStateForTests() {
   recentDeathTimestamps = [];
   cooldownRetryPending = false;
   cooldownRetryLevel = 0;
+  cooldownRetriesUsed = 0;
+  cooldownSpentMs = 0;
   cooldownRetryFire = void 0;
   cooldownRetryAt = 0;
   lastRespawnOkAt = null;
@@ -226826,18 +227015,8 @@ function stampFailedNextRetryAt() {
   } catch {
   }
 }
-function scheduleCooldownRetry(deps2) {
-  if (cooldownRetryPending) {
-    stampFailedNextRetryAt();
-    return;
-  }
-  cooldownRetryPending = true;
-  const delay = nextCooldownDelayMs();
-  cooldownRetryLevel++;
-  logForDebugging(
-    `[engine-lifecycle] engine auto-restart parked \u2014 cooldown retry scheduled in ${Math.round(delay / 1e3)}s`
-  );
-  const fire = () => {
+function makeCooldownFire(deps2) {
+  return () => {
     cooldownRetryPending = false;
     cooldownRetryFire = void 0;
     cooldownRetryAt = 0;
@@ -226850,6 +227029,33 @@ function scheduleCooldownRetry(deps2) {
     void runEngineDeadRespawn(deps2).catch(() => {
     });
   };
+}
+function giveUpOnAutoRestart(deps2) {
+  cooldownRetryAt = 0;
+  cooldownRetryFire = makeCooldownFire(deps2);
+  const spentMin = Math.max(1, Math.round(cooldownSpentMs / 6e4));
+  const detail = `automatic engine restart gave up after ${cooldownRetriesUsed} cooldown attempts over ~${spentMin} minutes \u2014 sema is not retrying on its own any more. Send a message to retry now, run sema doctor, or restart sema.`;
+  logForDebugging(`[engine-lifecycle] ${detail}`);
+  setEngineRuntimeStatus({ phase: "failed", detail });
+}
+function scheduleCooldownRetry(deps2) {
+  if (cooldownRetryPending) {
+    stampFailedNextRetryAt();
+    return;
+  }
+  if (cooldownRetriesUsed >= CRASH_LOOP_COOLDOWN_MAX_RETRIES) {
+    giveUpOnAutoRestart(deps2);
+    return;
+  }
+  cooldownRetryPending = true;
+  const delay = nextCooldownDelayMs();
+  cooldownRetryLevel++;
+  cooldownRetriesUsed++;
+  cooldownSpentMs += delay;
+  logForDebugging(
+    `[engine-lifecycle] engine auto-restart parked \u2014 cooldown retry ${cooldownRetriesUsed}/${CRASH_LOOP_COOLDOWN_MAX_RETRIES} scheduled in ${Math.round(delay / 1e3)}s`
+  );
+  const fire = makeCooldownFire(deps2);
   cooldownRetryFire = fire;
   cooldownRetryAt = Date.now() + delay;
   stampFailedNextRetryAt();
@@ -226861,9 +227067,11 @@ function scheduleCooldownRetry(deps2) {
   if (typeof cooldownRetryTimer.unref === "function") cooldownRetryTimer.unref();
 }
 function requestEngineRetryNow() {
-  if (!cooldownRetryPending || !cooldownRetryFire) return false;
+  if (!cooldownRetryFire) return false;
   if (deadRespawnInFlight) return false;
   logForDebugging("[engine-lifecycle] manual retry-now requested \u2014 firing the parked cooldown retry immediately");
+  cooldownRetriesUsed = 0;
+  cooldownSpentMs = 0;
   cooldownRetryFire();
   return true;
 }
@@ -226884,6 +227092,8 @@ async function runEngineDeadRespawn(deps2) {
     const t2 = now2();
     if (lastRespawnOkAt !== null && t2 - lastRespawnOkAt >= CRASH_LOOP_WINDOW_MS) {
       cooldownRetryLevel = 0;
+      cooldownRetriesUsed = 0;
+      cooldownSpentMs = 0;
     }
     recentDeathTimestamps = recentDeathTimestamps.filter((d4) => t2 - d4 < CRASH_LOOP_WINDOW_MS);
     recentDeathTimestamps.push(t2);
@@ -227164,7 +227374,7 @@ async function waitForExit(pid, timeoutMs) {
   }
   return !isProcessAlive(pid);
 }
-var PORT_FILE_VERSION, HEALTH_POLL_INTERVAL_MS, HEALTH_POLL_MAX_ATTEMPTS, HEALTH_FETCH_TIMEOUT_MS, HEARTBEAT_INTERVAL_MS, HEARTBEAT_MAX_MISSES, SHUTDOWN_GRACE_MS, SHUTDOWN_SECOND_TERM_GRACE_MS, LOCK_OPTS2, ENGINE_LOCK_WAIT_MS_DEFAULT, ENGINE_LOCK_WAIT_POLL_MS, WORKFLOW_SIZE_GUIDELINE_VALUES, RETIRED_ENV_RENAMES, lastServiceAuthToken, lastInitFailureReason, lastInitFailureDetail, localEngineActive, DERIVED_PORT_PROBE_MAX, expectedExitPids, onOwnedEngineExitCb, deadRespawnInFlight, CRASH_LOOP_WINDOW_MS, CRASH_LOOP_MAX_DEATHS, recentDeathTimestamps, CRASH_LOOP_COOLDOWN_BASE_MS, CRASH_LOOP_COOLDOWN_CAP_MS, cooldownRetryPending, cooldownRetryLevel, cooldownRetryFire, cooldownRetryTimer, cooldownRetryAt, lastRespawnOkAt, teardownGetInstance, teardownInstalled, teardownDone;
+var PORT_FILE_VERSION, HEALTH_POLL_INTERVAL_MS, HEALTH_POLL_MAX_ATTEMPTS, HEALTH_FETCH_TIMEOUT_MS, HEARTBEAT_INTERVAL_MS, HEARTBEAT_MAX_MISSES, SHUTDOWN_GRACE_MS, SHUTDOWN_SECOND_TERM_GRACE_MS, LOCK_OPTS2, ENGINE_LOCK_WAIT_MS_DEFAULT, ENGINE_LOCK_WAIT_POLL_MS, WORKFLOW_SIZE_GUIDELINE_VALUES, RETIRED_ENV_RENAMES, lastServiceAuthToken, lastInitFailureReason, lastInitFailureDetail, localEngineActive, DERIVED_PORT_PROBE_MAX, expectedExitPids, onOwnedEngineExitCb, deadRespawnInFlight, CRASH_LOOP_WINDOW_MS, CRASH_LOOP_MAX_DEATHS, recentDeathTimestamps, CRASH_LOOP_COOLDOWN_BASE_MS, CRASH_LOOP_COOLDOWN_CAP_MS, CRASH_LOOP_COOLDOWN_MAX_RETRIES, cooldownRetryPending, cooldownRetryLevel, cooldownRetriesUsed, cooldownSpentMs, cooldownRetryFire, cooldownRetryTimer, cooldownRetryAt, lastRespawnOkAt, teardownGetInstance, teardownInstalled, teardownDone;
 var init_engineLifecycleManager = __esm({
   "build-src/src/sema/engineLifecycleManager.ts"() {
     init_state2();
@@ -227205,8 +227415,11 @@ var init_engineLifecycleManager = __esm({
     recentDeathTimestamps = [];
     CRASH_LOOP_COOLDOWN_BASE_MS = 6e4;
     CRASH_LOOP_COOLDOWN_CAP_MS = 10 * 6e4;
+    CRASH_LOOP_COOLDOWN_MAX_RETRIES = 6;
     cooldownRetryPending = false;
     cooldownRetryLevel = 0;
+    cooldownRetriesUsed = 0;
+    cooldownSpentMs = 0;
     cooldownRetryAt = 0;
     lastRespawnOkAt = null;
     teardownGetInstance = null;
@@ -228228,6 +228441,18 @@ function toTaskRequest(params) {
       }
     }
   }
+  if (submitted) {
+    const collected = collectSubmissionAttachmentTexts(msgs, submitted, normalizeAttachmentForAPI);
+    if (!collected.ok) {
+      process.stderr.write(`[sema] @-mention attachment could not be included in the message \u2014 ${collected.reason}
+`);
+    } else if (collected.texts.length > 0) {
+      objective = [...collected.texts, objective].join("\n\n");
+      if (process.env.SEMA_DEBUG) {
+        console.error(`[sema][seamQuery] at-mention attachments wire: ${collected.texts.length} block(s) \u2192 objective prefix`);
+      }
+    }
+  }
   const standaloneMeta = trailingStandaloneMetaUserMessages(msgs);
   let metaIsSubmission = false;
   if (standaloneMeta.length > 0) {
@@ -228666,7 +228891,7 @@ Setup looks unfinished (no model was saved). Run \`sema onboard\` to finish setu
               reopenPlanReview: reopenPlanReviewCard
             })
           ) : { kind: "budget-exhausted", taskId: detectedBusy.activeTaskId };
-          yield apiErrorRow(activeRunSelfHealRow(outcome));
+          yield apiErrorRow(activeRunSelfHealRow(outcome, detectedBusy));
           if (outcome.kind === "healed") {
             selfHealAttempts++;
             retryStream = true;
@@ -228852,6 +229077,7 @@ var init_seamQuery = __esm({
     init_controlRouterStore();
     init_apiErrorSupplement();
     init_messages4();
+    init_atMentionAttachmentWire();
     init_dist();
     init_log2();
     init_engineRuntimeStatus();
@@ -309861,9 +310087,9 @@ function copyTextOf(msg) {
       return tc ? PRIMARY_INPUT[tc.name]?.extract(tc.input) ?? "" : "";
     }
     case "grouped_tool_use":
-      return msg.results.map(toolResultText2).filter(Boolean).join("\n\n");
+      return msg.results.map(toolResultText).filter(Boolean).join("\n\n");
     case "collapsed_read_search":
-      return msg.messages.flatMap((m2) => m2.type === "user" ? [toolResultText2(m2)] : m2.type === "grouped_tool_use" ? m2.results.map(toolResultText2) : []).filter(Boolean).join("\n\n");
+      return msg.messages.flatMap((m2) => m2.type === "user" ? [toolResultText(m2)] : m2.type === "grouped_tool_use" ? m2.results.map(toolResultText) : []).filter(Boolean).join("\n\n");
     case "system":
       if ("content" in msg) return msg.content;
       if ("error" in msg) return String(msg.error);
@@ -309879,7 +310105,7 @@ function copyTextOf(msg) {
   }
   return "";
 }
-function toolResultText2(r) {
+function toolResultText(r) {
   const b3 = r.message.content[0];
   if (b3?.type !== "tool_result") return "";
   const c2 = b3.content;
@@ -501752,8 +501978,8 @@ var init_sema_brand = __esm({
           "Bulk stop now lists the rows it could not stop with a named reason, and quota/scenario refusals carry a plain-language line next to the machine-readable error"
         ]
       },
-      productVersion: "1.0.66",
-      announcement: 'sema 1.0.66 \u2014 This release fixes the two most serious approval-flow bugs: pressing Yes on a permission card no longer leaves the screen stuck on "Error: Operation aborted" (the command ran; now the UI shows it), and a sub-agent that hits an approval gate is no longer reported as a plain failure \u2014 it now tells you it paused at a gate, with the checkpoint. Switching models no longer writes a retired env key that bricked the engine on restart (existing bad keys are migrated by `sema update`, translated from your shell env, and stale ones are scrubbed on every model switch). Startup is dramatically faster: `sema --version` drops from ~5s to ~0.1s, and a run killed during startup now emits a final result frame from ~113ms. Approval cards show a destructive-command warning line, /code-review gains structured findings, and misconfigured SEMA_HEADLESS_* limits now fail loudly instead of silently running unlimited. Engine 6.0.0, core 5.8.0, SDK 6.0.0, client-core 0.16.2, registry-core 0.14.0.'
+      productVersion: "1.0.67",
+      announcement: 'sema 1.0.67 \u2014 Final verification is now OFF by default for -p runs: it could overwrite a correct result while re-checking it; opt in with --final-verify or SEMA_HEADLESS_FINAL_VERIFY=true. --max-tokens now actually enforces a token budget (the old wire key was never adopted by the engine \u2014 requests silently ran unbounded; the run now fails loudly with partial output when the budget is hit). A sub-agent that pauses at an approval gate is reported honestly end-to-end (engine-side fix; the shell-side workaround was removed), and when the session is locked by an active run, every message now shows the concrete way out instead of a bare busy error. Engine crash recovery is bounded: after ~35 minutes of automatic retries sema stops, tells you how long it tried, and leaves a working manual retry. Workflow agent details now show "requested <model> \u2192 running on <model>" when a delegated agent ran on a different model than asked. Engine 6.4.0, core 5.10.0, SDK 6.3.0, client-core 0.17.1, registry-core 0.14.0.'
     };
   }
 });
@@ -508087,8 +508313,8 @@ var require_sema_brand = __commonJS({
           "Bulk stop now lists the rows it could not stop with a named reason, and quota/scenario refusals carry a plain-language line next to the machine-readable error"
         ]
       },
-      productVersion: "1.0.66",
-      announcement: 'sema 1.0.66 \u2014 This release fixes the two most serious approval-flow bugs: pressing Yes on a permission card no longer leaves the screen stuck on "Error: Operation aborted" (the command ran; now the UI shows it), and a sub-agent that hits an approval gate is no longer reported as a plain failure \u2014 it now tells you it paused at a gate, with the checkpoint. Switching models no longer writes a retired env key that bricked the engine on restart (existing bad keys are migrated by `sema update`, translated from your shell env, and stale ones are scrubbed on every model switch). Startup is dramatically faster: `sema --version` drops from ~5s to ~0.1s, and a run killed during startup now emits a final result frame from ~113ms. Approval cards show a destructive-command warning line, /code-review gains structured findings, and misconfigured SEMA_HEADLESS_* limits now fail loudly instead of silently running unlimited. Engine 6.0.0, core 5.8.0, SDK 6.0.0, client-core 0.16.2, registry-core 0.14.0.'
+      productVersion: "1.0.67",
+      announcement: 'sema 1.0.67 \u2014 Final verification is now OFF by default for -p runs: it could overwrite a correct result while re-checking it; opt in with --final-verify or SEMA_HEADLESS_FINAL_VERIFY=true. --max-tokens now actually enforces a token budget (the old wire key was never adopted by the engine \u2014 requests silently ran unbounded; the run now fails loudly with partial output when the budget is hit). A sub-agent that pauses at an approval gate is reported honestly end-to-end (engine-side fix; the shell-side workaround was removed), and when the session is locked by an active run, every message now shows the concrete way out instead of a bare busy error. Engine crash recovery is bounded: after ~35 minutes of automatic retries sema stops, tells you how long it tried, and leaves a working manual retry. Workflow agent details now show "requested <model> \u2192 running on <model>" when a delegated agent ran on a different model than asked. Engine 6.4.0, core 5.10.0, SDK 6.3.0, client-core 0.17.1, registry-core 0.14.0.'
     };
   }
 });
@@ -553640,9 +553866,7 @@ async function* sdkMessagesToCcEvents(sdk, meta3) {
       macrotaskPending = false;
     }
     if (out6.plane === "transcript") {
-      const msg = reduceSubagentDurablePauseEnvelope(
-        reduceApiErrorEnvelope(out6.message)
-      );
+      const msg = reduceApiErrorEnvelope(out6.message);
       noteModelEvidenceFrom(msg);
       const w2 = notifWatch.get(seenFrameNo);
       if (w2 !== void 0 && !w2.rowYielded && isTaskNotificationRow(msg)) w2.rowYielded = true;
@@ -553660,7 +553884,6 @@ var init_upstreamBridge = __esm({
     init_dist();
     init_bridgeAdapter();
     init_textModeError();
-    init_subagentDurablePause();
     init_appStateRef();
     init_modelVerificationStore();
     init_retryStatusStore();
@@ -568577,144 +568800,6 @@ var init_a2a = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/agents/tool-filter.js
-var init_tool_filter = __esm({
-  "node_modules/@sema-agent/core/dist/agents/tool-filter.js"() {
-  }
-});
-
-// node_modules/@sema-agent/core/dist/agents/builtin-agents.js
-var init_builtin_agents = __esm({
-  "node_modules/@sema-agent/core/dist/agents/builtin-agents.js"() {
-  }
-});
-
-// node_modules/@sema-agent/core/dist/agents/suspend-guard.js
-var init_suspend_guard = __esm({
-  "node_modules/@sema-agent/core/dist/agents/suspend-guard.js"() {
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/untrusted-egress.js
-function redactUserinfo2(scheme, userinfoWithAt) {
-  const userinfo = userinfoWithAt.slice(0, -1);
-  if (userinfo.includes("@"))
-    return `${scheme}[redacted-credentials]@`;
-  const colonIdx = userinfo.indexOf(":");
-  if (colonIdx === -1) {
-    return userinfo.length >= BARE_USERNAME_MAX_LEN ? `${scheme}[redacted-credentials]@` : `${scheme}${userinfo}@`;
-  }
-  return `${scheme}${userinfo.slice(0, colonIdx)}:[redacted-credentials]@`;
-}
-function redactSecrets3(s, report) {
-  return runRedactionPasses(s, SECRET_TIER_PASSES, report);
-}
-function countRedactionMarkers(s) {
-  return (s.match(REDACTION_MARKER_RE) ?? []).length;
-}
-function safeEllipsisTruncate(s, max2) {
-  if (max2 < 1)
-    return "";
-  const budget = max2 - 1;
-  let out6 = "";
-  for (const codePoint of s) {
-    if (out6.length + codePoint.length > budget)
-      break;
-    out6 += codePoint;
-  }
-  return out6 + "\u2026";
-}
-function boundedString(value, max2, redact) {
-  let s;
-  try {
-    s = typeof value === "string" ? value : JSON.stringify(value) ?? String(value);
-  } catch {
-    s = "[unserializable result]";
-  }
-  s = redact(s);
-  if (s.length <= max2)
-    return s;
-  const totalMarkers = countRedactionMarkers(s);
-  const plainSuffix = (kept) => `\u2026[+${s.length - kept.length} chars]`;
-  const enrichedSuffix = (kept) => {
-    const lost = totalMarkers - countRedactionMarkers(kept);
-    return lost > 0 ? `\u2026[+${s.length - kept.length} chars, ${lost} redaction marker(s) among them]` : plainSuffix(kept);
-  };
-  const converge = (suffixFor) => {
-    let keep = max2;
-    let out7 = "";
-    for (let i = 0; i < 4; i++) {
-      const kept = sliceHeadSafe(s, keep);
-      out7 = `${kept}${suffixFor(kept)}`;
-      if (out7.length <= max2)
-        return out7;
-      if (keep === 0)
-        return void 0;
-      keep = Math.max(0, keep - (out7.length - max2));
-    }
-    return out7.length <= max2 ? out7 : void 0;
-  };
-  const out6 = (totalMarkers > 0 ? converge(enrichedSuffix) : void 0) ?? converge(plainSuffix);
-  if (out6 === void 0) {
-    return safeEllipsisTruncate(s, max2);
-  }
-  if (out6.length >= s.length)
-    return s;
-  return out6;
-}
-function boundedRedactedSummary(value, max2) {
-  return boundedString(value, max2, redactSecrets3);
-}
-var URI_SCHEME, CREDENTIALS_IN_AUTHORITY, URL_OF_ANY_PROTOCOL, BARE_USERNAME_MAX_LEN, SECRET_TIER_PASSES, HOST_LEAK_PASSES, REDACTION_MARKER_RE;
-var init_untrusted_egress = __esm({
-  "node_modules/@sema-agent/core/dist/core/untrusted-egress.js"() {
-    init_untrusted_text();
-    init_arg_summary();
-    init_surrogate_safe_slice();
-    init_arg_summary();
-    URI_SCHEME = String.raw`[A-Za-z][A-Za-z0-9+.\-_]{0,63}`;
-    CREDENTIALS_IN_AUTHORITY = new RegExp(String.raw`(${URI_SCHEME}:\/\/)((?:[^/\s"'@]*@)+)`, "gi");
-    URL_OF_ANY_PROTOCOL = new RegExp(String.raw`${URI_SCHEME}:\/\/[^\s"'\`]+`, "gi");
-    BARE_USERNAME_MAX_LEN = 20;
-    SECRET_TIER_PASSES = [
-      ...SECRET_PASSES,
-      {
-        kind: "url-credentials",
-        confidence: "medium",
-        marker: "[redacted-credentials]",
-        source: "untrusted-egress",
-        re: CREDENTIALS_IN_AUTHORITY,
-        replace: (_m, scheme, userinfo) => redactUserinfo2(scheme, userinfo)
-      },
-      { kind: "signed-url-param", confidence: "high", marker: "[redacted]", source: "untrusted-egress", re: /([?&#](?:sig|signature|sas|code)=)[^&\s"'#]+/gi, replace: "$1[redacted]" }
-    ];
-    HOST_LEAK_PASSES = [
-      ...SECRET_TIER_PASSES,
-      { kind: "url", confidence: "medium", marker: "[redacted-url]", source: "untrusted-egress", re: URL_OF_ANY_PROTOCOL, replace: "[redacted-url]" },
-      { kind: "fs-path", confidence: "low", marker: "[redacted-path]", source: "untrusted-egress", re: /(?:\/[A-Za-z0-9_.-]+){2,}/g, replace: "[redacted-path]" }
-    ];
-    REDACTION_MARKER_RE = /\[redacted(?:-[a-z]+)?\]/g;
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/git-worktree-env.js
-var WORKTREE_PARENT;
-var init_git_worktree_env = __esm({
-  "node_modules/@sema-agent/core/dist/core/git-worktree-env.js"() {
-    WORKTREE_PARENT = ".sema-worktrees";
-  }
-});
-
-// node_modules/@sema-agent/core/dist/tools/fs/search.js
-var FILE_MAX_BYTES;
-var init_search = __esm({
-  "node_modules/@sema-agent/core/dist/tools/fs/search.js"() {
-    init_untrusted_text();
-    init_safety();
-    FILE_MAX_BYTES = 5 * 1024 * 1024;
-  }
-});
-
 // node_modules/@sema-agent/core/dist/core/background-agent-store.js
 var background_agent_store_exports = {};
 __export(background_agent_store_exports, {
@@ -569047,6 +569132,108 @@ var init_workflow_run_store = __esm({
   }
 });
 
+// node_modules/@sema-agent/core/dist/core/untrusted-egress.js
+function redactUserinfo2(scheme, userinfoWithAt) {
+  const userinfo = userinfoWithAt.slice(0, -1);
+  if (userinfo.includes("@"))
+    return `${scheme}[redacted-credentials]@`;
+  const colonIdx = userinfo.indexOf(":");
+  if (colonIdx === -1) {
+    return userinfo.length >= BARE_USERNAME_MAX_LEN ? `${scheme}[redacted-credentials]@` : `${scheme}${userinfo}@`;
+  }
+  return `${scheme}${userinfo.slice(0, colonIdx)}:[redacted-credentials]@`;
+}
+function redactSecrets3(s, report) {
+  return runRedactionPasses(s, SECRET_TIER_PASSES, report);
+}
+function countRedactionMarkers(s) {
+  return (s.match(REDACTION_MARKER_RE) ?? []).length;
+}
+function safeEllipsisTruncate(s, max2) {
+  if (max2 < 1)
+    return "";
+  const budget = max2 - 1;
+  let out6 = "";
+  for (const codePoint of s) {
+    if (out6.length + codePoint.length > budget)
+      break;
+    out6 += codePoint;
+  }
+  return out6 + "\u2026";
+}
+function boundedString(value, max2, redact) {
+  let s;
+  try {
+    s = typeof value === "string" ? value : JSON.stringify(value) ?? String(value);
+  } catch {
+    s = "[unserializable result]";
+  }
+  s = redact(s);
+  if (s.length <= max2)
+    return s;
+  const totalMarkers = countRedactionMarkers(s);
+  const plainSuffix = (kept) => `\u2026[+${s.length - kept.length} chars]`;
+  const enrichedSuffix = (kept) => {
+    const lost = totalMarkers - countRedactionMarkers(kept);
+    return lost > 0 ? `\u2026[+${s.length - kept.length} chars, ${lost} redaction marker(s) among them]` : plainSuffix(kept);
+  };
+  const converge = (suffixFor) => {
+    let keep = max2;
+    let out7 = "";
+    for (let i = 0; i < 4; i++) {
+      const kept = sliceHeadSafe(s, keep);
+      out7 = `${kept}${suffixFor(kept)}`;
+      if (out7.length <= max2)
+        return out7;
+      if (keep === 0)
+        return void 0;
+      keep = Math.max(0, keep - (out7.length - max2));
+    }
+    return out7.length <= max2 ? out7 : void 0;
+  };
+  const out6 = (totalMarkers > 0 ? converge(enrichedSuffix) : void 0) ?? converge(plainSuffix);
+  if (out6 === void 0) {
+    return safeEllipsisTruncate(s, max2);
+  }
+  if (out6.length >= s.length)
+    return s;
+  return out6;
+}
+function boundedRedactedSummary(value, max2) {
+  return boundedString(value, max2, redactSecrets3);
+}
+var URI_SCHEME, CREDENTIALS_IN_AUTHORITY, URL_OF_ANY_PROTOCOL, BARE_USERNAME_MAX_LEN, SECRET_TIER_PASSES, HOST_LEAK_PASSES, REDACTION_MARKER_RE;
+var init_untrusted_egress = __esm({
+  "node_modules/@sema-agent/core/dist/core/untrusted-egress.js"() {
+    init_untrusted_text();
+    init_arg_summary();
+    init_surrogate_safe_slice();
+    init_arg_summary();
+    URI_SCHEME = String.raw`[A-Za-z][A-Za-z0-9+.\-_]{0,63}`;
+    CREDENTIALS_IN_AUTHORITY = new RegExp(String.raw`(${URI_SCHEME}:\/\/)((?:[^/\s"'@]*@)+)`, "gi");
+    URL_OF_ANY_PROTOCOL = new RegExp(String.raw`${URI_SCHEME}:\/\/[^\s"'\`]+`, "gi");
+    BARE_USERNAME_MAX_LEN = 20;
+    SECRET_TIER_PASSES = [
+      ...SECRET_PASSES,
+      {
+        kind: "url-credentials",
+        confidence: "medium",
+        marker: "[redacted-credentials]",
+        source: "untrusted-egress",
+        re: CREDENTIALS_IN_AUTHORITY,
+        replace: (_m, scheme, userinfo) => redactUserinfo2(scheme, userinfo)
+      },
+      { kind: "signed-url-param", confidence: "high", marker: "[redacted]", source: "untrusted-egress", re: /([?&#](?:sig|signature|sas|code)=)[^&\s"'#]+/gi, replace: "$1[redacted]" }
+    ];
+    HOST_LEAK_PASSES = [
+      ...SECRET_TIER_PASSES,
+      { kind: "url", confidence: "medium", marker: "[redacted-url]", source: "untrusted-egress", re: URL_OF_ANY_PROTOCOL, replace: "[redacted-url]" },
+      { kind: "fs-path", confidence: "low", marker: "[redacted-path]", source: "untrusted-egress", re: /(?:\/[A-Za-z0-9_.-]+){2,}/g, replace: "[redacted-path]" }
+    ];
+    REDACTION_MARKER_RE = /\[redacted(?:-[a-z]+)?\]/g;
+  }
+});
+
 // node_modules/@sema-agent/core/dist/core/task-registry-shared.js
 function mintCompletionId(target) {
   if (target.completionId === void 0)
@@ -572382,6 +572569,283 @@ ${shape(stderr) || "(none)"}`;
   }
 });
 
+// node_modules/@sema-agent/core/dist/tools/fs/search.js
+var FILE_MAX_BYTES;
+var init_search = __esm({
+  "node_modules/@sema-agent/core/dist/tools/fs/search.js"() {
+    init_untrusted_text();
+    init_safety();
+    FILE_MAX_BYTES = 5 * 1024 * 1024;
+  }
+});
+
+// node_modules/@sema-agent/core/dist/tools/fs/repo-map.js
+var FILE_SCAN_MAX_BYTES;
+var init_repo_map = __esm({
+  "node_modules/@sema-agent/core/dist/tools/fs/repo-map.js"() {
+    init_build3();
+    init_tools3();
+    init_safety();
+    init_search();
+    FILE_SCAN_MAX_BYTES = 256 * 1024;
+  }
+});
+
+// node_modules/@sema-agent/core/dist/tools/fs/encoding.js
+var init_encoding = __esm({
+  "node_modules/@sema-agent/core/dist/tools/fs/encoding.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/tools/fs/notebook.js
+var init_notebook2 = __esm({
+  "node_modules/@sema-agent/core/dist/tools/fs/notebook.js"() {
+    init_safety();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/tools/fs/fs-shared.js
+var MAX_READ_BYTES2, SLICED_READ_MAX_BYTES, MAX_EDIT_BYTES, MAX_IMAGE_READ_BYTES, MAX_IMAGE_DOWNSAMPLE_INPUT_BYTES, NO_DOWNSAMPLER_IMAGE_CAP_HINT, BASH_DEFAULT_TIMEOUT_SEC, BASH_MAX_TIMEOUT_SEC, BASH_DEFAULT_TIMEOUT_MS2, BASH_MAX_TIMEOUT_MS, FILE_PATH_PARAMS;
+var init_fs_shared = __esm({
+  "node_modules/@sema-agent/core/dist/tools/fs/fs-shared.js"() {
+    init_build3();
+    init_tool_errors();
+    init_safety();
+    init_encoding();
+    init_search();
+    init_notebook2();
+    init_mcp4();
+    MAX_READ_BYTES2 = 256 * 1024;
+    SLICED_READ_MAX_BYTES = 64 * 1024 * 1024;
+    MAX_EDIT_BYTES = 1024 * 1024 * 1024;
+    MAX_IMAGE_READ_BYTES = 5 * 1024 * 1024;
+    MAX_IMAGE_DOWNSAMPLE_INPUT_BYTES = 64 * 1024 * 1024;
+    NO_DOWNSAMPLER_IMAGE_CAP_HINT = `Install the optional "sharp" dependency (declared in this package's optionalDependencies) to read images up to ${MAX_IMAGE_DOWNSAMPLE_INPUT_BYTES} bytes \u2014 it downsamples them to fit the API image limit.`;
+    BASH_DEFAULT_TIMEOUT_SEC = 120;
+    BASH_MAX_TIMEOUT_SEC = 600;
+    BASH_DEFAULT_TIMEOUT_MS2 = BASH_DEFAULT_TIMEOUT_SEC * 1e3;
+    BASH_MAX_TIMEOUT_MS = BASH_MAX_TIMEOUT_SEC * 1e3;
+    FILE_PATH_PARAMS = {
+      file_path: typebox_exports.String({ description: "File path (within the configured root)." })
+    };
+  }
+});
+
+// node_modules/@sema-agent/core/dist/tools/fs/pdf.js
+var PDF_TARGET_RAW_SIZE2, PDF_MAX_EXTRACT_SIZE2;
+var init_pdf2 = __esm({
+  "node_modules/@sema-agent/core/dist/tools/fs/pdf.js"() {
+    PDF_TARGET_RAW_SIZE2 = 20 * 1024 * 1024;
+    PDF_MAX_EXTRACT_SIZE2 = 100 * 1024 * 1024;
+  }
+});
+
+// node_modules/@sema-agent/core/dist/tools/fs/fs-pdf.js
+var init_fs_pdf = __esm({
+  "node_modules/@sema-agent/core/dist/tools/fs/fs-pdf.js"() {
+    init_tools3();
+    init_untrusted_text();
+    init_mcp4();
+    init_pdf2();
+    init_fs_shared();
+    init_pdf2();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/tools/fs/fs-read.js
+var init_fs_read = __esm({
+  "node_modules/@sema-agent/core/dist/tools/fs/fs-read.js"() {
+    init_build3();
+    init_tools3();
+    init_safety();
+    init_encoding();
+    init_notebook2();
+    init_mcp4();
+    init_pdf2();
+    init_fs_shared();
+    init_fs_pdf();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/tools/fs/fs-write.js
+var init_fs_write = __esm({
+  "node_modules/@sema-agent/core/dist/tools/fs/fs-write.js"() {
+    init_build3();
+    init_tools3();
+    init_safety();
+    init_encoding();
+    init_fs_shared();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/tools/fs/fs-search-tools.js
+var init_fs_search_tools = __esm({
+  "node_modules/@sema-agent/core/dist/tools/fs/fs-search-tools.js"() {
+    init_build3();
+    init_tools3();
+    init_safety();
+    init_search();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/tools/fs/bash-readonly-classifier.js
+var init_bash_readonly_classifier = __esm({
+  "node_modules/@sema-agent/core/dist/tools/fs/bash-readonly-classifier.js"() {
+    init_safety();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/remote-env.js
+var init_remote_env3 = __esm({
+  "node_modules/@sema-agent/core/dist/core/remote-env.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/tools/fs/gh-rate-limit.js
+var init_gh_rate_limit = __esm({
+  "node_modules/@sema-agent/core/dist/tools/fs/gh-rate-limit.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/tools/fs/fs-bash.js
+var init_fs_bash = __esm({
+  "node_modules/@sema-agent/core/dist/tools/fs/fs-bash.js"() {
+    init_build3();
+    init_tools3();
+    init_task_registry();
+    init_task_registry_shared();
+    init_task_tool_shape();
+    init_background_shell();
+    init_untrusted_text();
+    init_mcp4();
+    init_safety();
+    init_remote_env3();
+    init_gh_rate_limit();
+    init_fs_shared();
+    init_bash_readonly_classifier();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/tools/fs/index.js
+var init_fs = __esm({
+  "node_modules/@sema-agent/core/dist/tools/fs/index.js"() {
+    init_task_registry();
+    init_background_shell();
+    init_safety();
+    init_repo_map();
+    init_fs_shared();
+    init_fs_pdf();
+    init_fs_read();
+    init_fs_write();
+    init_fs_search_tools();
+    init_bash_readonly_classifier();
+    init_fs_bash();
+    init_bash_readonly_classifier();
+    init_fs_shared();
+    init_fs_read();
+    init_fs_write();
+    init_fs_search_tools();
+    init_fs_bash();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/tool-policy.js
+function refuseOutOfContractDecision(d4) {
+  if (typeof d4 !== "object" || d4 === null)
+    return d4;
+  if (!Object.prototype.hasOwnProperty.call(d4, RETIRED_TEXT_FIELD))
+    return d4;
+  return { action: "deny", message: RETIRED_TEXT_FIELD_DENY_MESSAGE, decisionReason: "rule" };
+}
+function toolPolicyNameSets(p) {
+  const sets = p?.nameSets;
+  return Array.isArray(sets) ? sets : [];
+}
+function createAllowDenyPolicy(opts) {
+  const allow = opts.allow ? new Set(opts.allow) : void 0;
+  const deny2 = new Set(opts.deny ?? []);
+  return {
+    nameSets: [{ ...opts.allow ? { allow: [...opts.allow] } : {}, ...opts.deny ? { deny: [...opts.deny] } : {} }],
+    check(req) {
+      const toolName2 = req.toolName;
+      if (deny2.has(toolName2)) {
+        return { action: "deny", message: `tool "${req.toolName}" is denied by policy` };
+      }
+      if (allow && !allow.has(toolName2)) {
+        return { action: "deny", message: `tool "${req.toolName}" is not in the allowlist` };
+      }
+      return ALLOW;
+    }
+  };
+}
+function combinePolicies(...policies) {
+  const nameSets = policies.flatMap(toolPolicyNameSets);
+  return {
+    ...nameSets.length > 0 ? { nameSets } : {},
+    async check(req, signal) {
+      let asked;
+      let current5 = req;
+      let rewrite;
+      for (const p of policies) {
+        const d4 = refuseOutOfContractDecision(await p.check(current5, signal));
+        if (d4.action === "deny") {
+          return rewrite?.updatedInput !== void 0 ? { ...d4, updatedInput: rewrite.updatedInput } : d4;
+        }
+        if (d4.updatedInput !== void 0) {
+          current5 = { ...current5, args: d4.updatedInput };
+          rewrite = d4;
+        }
+        if (d4.action === "ask" && (asked === void 0 || d4.requiresRealApproval === true && asked.requiresRealApproval !== true)) {
+          asked = d4;
+        }
+      }
+      if (asked) {
+        const merged = rewrite?.updatedInput;
+        return merged !== void 0 ? { ...asked, updatedInput: merged } : asked;
+      }
+      return rewrite ?? ALLOW;
+    }
+  };
+}
+var ALLOW, RETIRED_TEXT_FIELD, RETIRED_TEXT_FIELD_DENY_MESSAGE, COARSE_SHELL_TOOLS, CASE_INSENSITIVE_FS;
+var init_tool_policy = __esm({
+  "node_modules/@sema-agent/core/dist/core/tool-policy.js"() {
+    init_fs();
+    init_safety();
+    ALLOW = { action: "allow" };
+    RETIRED_TEXT_FIELD = "reason";
+    RETIRED_TEXT_FIELD_DENY_MESSAGE = `a permission decision carries the retired "${RETIRED_TEXT_FIELD}" field \u2014 rename it to "message" (the one text field a decision carries); denied fail-closed rather than executing a decision whose text this layer cannot read`;
+    COARSE_SHELL_TOOLS = ["Bash", "Monitor"];
+    CASE_INSENSITIVE_FS = process.platform === "darwin" || process.platform === "win32";
+  }
+});
+
+// node_modules/@sema-agent/core/dist/agents/tool-filter.js
+var init_tool_filter = __esm({
+  "node_modules/@sema-agent/core/dist/agents/tool-filter.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/agents/builtin-agents.js
+var init_builtin_agents = __esm({
+  "node_modules/@sema-agent/core/dist/agents/builtin-agents.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/agents/suspend-guard.js
+var init_suspend_guard = __esm({
+  "node_modules/@sema-agent/core/dist/agents/suspend-guard.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/git-worktree-env.js
+var WORKTREE_PARENT;
+var init_git_worktree_env = __esm({
+  "node_modules/@sema-agent/core/dist/core/git-worktree-env.js"() {
+    WORKTREE_PARENT = ".sema-worktrees";
+  }
+});
+
 // node_modules/@sema-agent/core/dist/agents/retain-ledger.js
 var init_retain_ledger = __esm({
   "node_modules/@sema-agent/core/dist/agents/retain-ledger.js"() {
@@ -572630,6 +573094,7 @@ var EXTRA_TOOLS_MAX_FACTORY_CALLS_PER_TREE, EXTRA_TOOLS_BUDGET_NOTE, FAILED_SESS
 var init_subagent = __esm({
   "node_modules/@sema-agent/core/dist/agents/subagent.js"() {
     init_build3();
+    init_tool_policy();
     init_roles();
     init_synthetic_tools();
     init_tool_disclosure();
@@ -572687,253 +573152,15 @@ var init_send_message_tool = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/tools/fs/repo-map.js
-var FILE_SCAN_MAX_BYTES;
-var init_repo_map = __esm({
-  "node_modules/@sema-agent/core/dist/tools/fs/repo-map.js"() {
-    init_build3();
-    init_tools3();
-    init_safety();
-    init_search();
-    FILE_SCAN_MAX_BYTES = 256 * 1024;
-  }
-});
-
-// node_modules/@sema-agent/core/dist/tools/fs/encoding.js
-var init_encoding = __esm({
-  "node_modules/@sema-agent/core/dist/tools/fs/encoding.js"() {
-  }
-});
-
-// node_modules/@sema-agent/core/dist/tools/fs/notebook.js
-var init_notebook2 = __esm({
-  "node_modules/@sema-agent/core/dist/tools/fs/notebook.js"() {
-    init_safety();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/tools/fs/fs-shared.js
-var MAX_READ_BYTES2, SLICED_READ_MAX_BYTES, MAX_EDIT_BYTES, MAX_IMAGE_READ_BYTES, MAX_IMAGE_DOWNSAMPLE_INPUT_BYTES, NO_DOWNSAMPLER_IMAGE_CAP_HINT, BASH_DEFAULT_TIMEOUT_SEC, BASH_MAX_TIMEOUT_SEC, BASH_DEFAULT_TIMEOUT_MS2, BASH_MAX_TIMEOUT_MS, FILE_PATH_PARAMS;
-var init_fs_shared = __esm({
-  "node_modules/@sema-agent/core/dist/tools/fs/fs-shared.js"() {
-    init_build3();
-    init_tool_errors();
-    init_safety();
-    init_encoding();
-    init_search();
-    init_notebook2();
-    init_mcp4();
-    MAX_READ_BYTES2 = 256 * 1024;
-    SLICED_READ_MAX_BYTES = 64 * 1024 * 1024;
-    MAX_EDIT_BYTES = 1024 * 1024 * 1024;
-    MAX_IMAGE_READ_BYTES = 5 * 1024 * 1024;
-    MAX_IMAGE_DOWNSAMPLE_INPUT_BYTES = 64 * 1024 * 1024;
-    NO_DOWNSAMPLER_IMAGE_CAP_HINT = `Install the optional "sharp" dependency (declared in this package's optionalDependencies) to read images up to ${MAX_IMAGE_DOWNSAMPLE_INPUT_BYTES} bytes \u2014 it downsamples them to fit the API image limit.`;
-    BASH_DEFAULT_TIMEOUT_SEC = 120;
-    BASH_MAX_TIMEOUT_SEC = 600;
-    BASH_DEFAULT_TIMEOUT_MS2 = BASH_DEFAULT_TIMEOUT_SEC * 1e3;
-    BASH_MAX_TIMEOUT_MS = BASH_MAX_TIMEOUT_SEC * 1e3;
-    FILE_PATH_PARAMS = {
-      file_path: typebox_exports.String({ description: "File path (within the configured root)." })
-    };
-  }
-});
-
-// node_modules/@sema-agent/core/dist/tools/fs/pdf.js
-var PDF_TARGET_RAW_SIZE2, PDF_MAX_EXTRACT_SIZE2;
-var init_pdf2 = __esm({
-  "node_modules/@sema-agent/core/dist/tools/fs/pdf.js"() {
-    PDF_TARGET_RAW_SIZE2 = 20 * 1024 * 1024;
-    PDF_MAX_EXTRACT_SIZE2 = 100 * 1024 * 1024;
-  }
-});
-
-// node_modules/@sema-agent/core/dist/tools/fs/fs-pdf.js
-var init_fs_pdf = __esm({
-  "node_modules/@sema-agent/core/dist/tools/fs/fs-pdf.js"() {
-    init_tools3();
-    init_untrusted_text();
-    init_mcp4();
-    init_pdf2();
-    init_fs_shared();
-    init_pdf2();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/tools/fs/fs-read.js
-var init_fs_read = __esm({
-  "node_modules/@sema-agent/core/dist/tools/fs/fs-read.js"() {
-    init_build3();
-    init_tools3();
-    init_safety();
-    init_encoding();
-    init_notebook2();
-    init_mcp4();
-    init_pdf2();
-    init_fs_shared();
-    init_fs_pdf();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/tools/fs/fs-write.js
-var init_fs_write = __esm({
-  "node_modules/@sema-agent/core/dist/tools/fs/fs-write.js"() {
-    init_build3();
-    init_tools3();
-    init_safety();
-    init_encoding();
-    init_fs_shared();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/tools/fs/fs-search-tools.js
-var init_fs_search_tools = __esm({
-  "node_modules/@sema-agent/core/dist/tools/fs/fs-search-tools.js"() {
-    init_build3();
-    init_tools3();
-    init_safety();
-    init_search();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/tools/fs/bash-readonly-classifier.js
-var init_bash_readonly_classifier = __esm({
-  "node_modules/@sema-agent/core/dist/tools/fs/bash-readonly-classifier.js"() {
-    init_safety();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/remote-env.js
-var init_remote_env3 = __esm({
-  "node_modules/@sema-agent/core/dist/core/remote-env.js"() {
-  }
-});
-
-// node_modules/@sema-agent/core/dist/tools/fs/gh-rate-limit.js
-var init_gh_rate_limit = __esm({
-  "node_modules/@sema-agent/core/dist/tools/fs/gh-rate-limit.js"() {
-  }
-});
-
-// node_modules/@sema-agent/core/dist/tools/fs/fs-bash.js
-var init_fs_bash = __esm({
-  "node_modules/@sema-agent/core/dist/tools/fs/fs-bash.js"() {
-    init_build3();
-    init_tools3();
-    init_task_registry();
-    init_task_registry_shared();
-    init_task_tool_shape();
-    init_background_shell();
-    init_untrusted_text();
-    init_mcp4();
-    init_safety();
-    init_remote_env3();
-    init_gh_rate_limit();
-    init_fs_shared();
-    init_bash_readonly_classifier();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/tools/fs/index.js
-var init_fs = __esm({
-  "node_modules/@sema-agent/core/dist/tools/fs/index.js"() {
-    init_task_registry();
-    init_background_shell();
-    init_safety();
-    init_repo_map();
-    init_fs_shared();
-    init_fs_pdf();
-    init_fs_read();
-    init_fs_write();
-    init_fs_search_tools();
-    init_bash_readonly_classifier();
-    init_fs_bash();
-    init_bash_readonly_classifier();
-    init_fs_shared();
-    init_fs_read();
-    init_fs_write();
-    init_fs_search_tools();
-    init_fs_bash();
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/tool-policy.js
-function refuseOutOfContractDecision(d4) {
-  if (typeof d4 !== "object" || d4 === null)
-    return d4;
-  if (!Object.prototype.hasOwnProperty.call(d4, RETIRED_TEXT_FIELD))
-    return d4;
-  return { action: "deny", message: RETIRED_TEXT_FIELD_DENY_MESSAGE, decisionReason: "rule" };
-}
-function toolPolicyNameSets(p) {
-  const sets = p?.nameSets;
-  return Array.isArray(sets) ? sets : [];
-}
-function createAllowDenyPolicy(opts) {
-  const allow = opts.allow ? new Set(opts.allow) : void 0;
-  const deny2 = new Set(opts.deny ?? []);
-  return {
-    nameSets: [{ ...opts.allow ? { allow: [...opts.allow] } : {}, ...opts.deny ? { deny: [...opts.deny] } : {} }],
-    check(req) {
-      const toolName2 = req.toolName;
-      if (deny2.has(toolName2)) {
-        return { action: "deny", message: `tool "${req.toolName}" is denied by policy` };
-      }
-      if (allow && !allow.has(toolName2)) {
-        return { action: "deny", message: `tool "${req.toolName}" is not in the allowlist` };
-      }
-      return ALLOW;
-    }
-  };
-}
-function combinePolicies(...policies) {
-  const nameSets = policies.flatMap(toolPolicyNameSets);
-  return {
-    ...nameSets.length > 0 ? { nameSets } : {},
-    async check(req, signal) {
-      let asked;
-      let current5 = req;
-      let rewrite;
-      for (const p of policies) {
-        const d4 = refuseOutOfContractDecision(await p.check(current5, signal));
-        if (d4.action === "deny") {
-          return rewrite?.updatedInput !== void 0 ? { ...d4, updatedInput: rewrite.updatedInput } : d4;
-        }
-        if (d4.updatedInput !== void 0) {
-          current5 = { ...current5, args: d4.updatedInput };
-          rewrite = d4;
-        }
-        if (d4.action === "ask" && (asked === void 0 || d4.requiresRealApproval === true && asked.requiresRealApproval !== true)) {
-          asked = d4;
-        }
-      }
-      if (asked) {
-        const merged = rewrite?.updatedInput;
-        return merged !== void 0 ? { ...asked, updatedInput: merged } : asked;
-      }
-      return rewrite ?? ALLOW;
-    }
-  };
-}
-var ALLOW, RETIRED_TEXT_FIELD, RETIRED_TEXT_FIELD_DENY_MESSAGE, COARSE_SHELL_TOOLS, CASE_INSENSITIVE_FS;
-var init_tool_policy = __esm({
-  "node_modules/@sema-agent/core/dist/core/tool-policy.js"() {
-    init_fs();
-    init_safety();
-    ALLOW = { action: "allow" };
-    RETIRED_TEXT_FIELD = "reason";
-    RETIRED_TEXT_FIELD_DENY_MESSAGE = `a permission decision carries the retired "${RETIRED_TEXT_FIELD}" field \u2014 rename it to "message" (the one text field a decision carries); denied fail-closed rather than executing a decision whose text this layer cannot read`;
-    COARSE_SHELL_TOOLS = ["Bash", "Monitor"];
-    CASE_INSENSITIVE_FS = process.platform === "darwin" || process.platform === "win32";
-  }
-});
-
 // node_modules/@sema-agent/core/dist/core/runner/session-rule-policy.js
+var PATH_WRITE_TOOLS, PATH_CONFINABLE_WRITE_TOOLS;
 var init_session_rule_policy = __esm({
   "node_modules/@sema-agent/core/dist/core/runner/session-rule-policy.js"() {
     init_safety();
     init_safety();
     init_tool_policy();
+    PATH_WRITE_TOOLS = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit"]);
+    PATH_CONFINABLE_WRITE_TOOLS = /* @__PURE__ */ new Set([...PATH_WRITE_TOOLS, "NotebookEdit"]);
   }
 });
 
@@ -573437,6 +573664,13 @@ var init_lsp = __esm({
   }
 });
 
+// node_modules/@sema-agent/core/dist/core/runner/session-file-state-replay.js
+var init_session_file_state_replay = __esm({
+  "node_modules/@sema-agent/core/dist/core/runner/session-file-state-replay.js"() {
+    init_safety();
+  }
+});
+
 // node_modules/@sema-agent/core/dist/core/usage-window-store.js
 var EMPTY_USAGE_WINDOW_RECORD;
 var init_usage_window_store = __esm({
@@ -573518,6 +573752,7 @@ var init_prepare_task = __esm({
     init_workflow_size_guideline();
     init_lsp();
     init_safety();
+    init_session_file_state_replay();
     init_checkpoint_store();
     init_canonical_json();
     init_usage_window_store();
@@ -573653,6 +573888,8 @@ var init_web = __esm({
     init_untrusted_text();
     init_untrusted_egress();
     init_image();
+    init_safety();
+    init_pdf2();
     DEFAULT_MAX_BYTES = 2 * 1024 * 1024;
     ERROR_BODY_CONVERT_MAX_CHARS = 64 * 1024;
     HTML_CONVERT_MAX_CHARS = 256 * 1024;
@@ -574942,6 +575179,22 @@ var init_anthropic = __esm({
   }
 });
 
+// node_modules/@sema-agent/core/dist/brain/open-responses.js
+var init_open_responses = __esm({
+  "node_modules/@sema-agent/core/dist/brain/open-responses.js"() {
+    init_llm2();
+    init_errors12();
+    init_repetition();
+    init_stream_shared();
+    init_tool_call_id();
+    init_status_sink();
+    init_media_degrade();
+    init_request_params();
+    init_reasoning();
+    init_stream_engine();
+  }
+});
+
 // node_modules/@sema-agent/core/dist/brain/model-presets.js
 var init_model_presets = __esm({
   "node_modules/@sema-agent/core/dist/brain/model-presets.js"() {
@@ -575157,6 +575410,7 @@ var init_dist10 = __esm({
     init_context_edit();
     init_openai();
     init_anthropic();
+    init_open_responses();
     init_model_presets();
     init_failover();
     init_routing();
@@ -576280,6 +576534,7 @@ __export(workflow_detail_dialog_exports, {
   WorkflowDetailDialog: () => WorkflowDetailDialog2,
   activityLine: () => activityLine,
   agentDisplayStatus: () => agentDisplayStatus,
+  agentStats: () => agentStats,
   buildAgentDetailLines: () => buildAgentDetailLines,
   computeVisibleWindow: () => computeVisibleWindow,
   default: () => workflow_detail_dialog_default
@@ -576547,7 +576802,9 @@ function buildAgentDetailLines({
   const wrapWidth = Math.max(8, width - 2);
   const { glyph, color: color4 } = statusGlyph(status3);
   const meta3 = [];
-  if (agent.model != null) meta3.push(agent.model);
+  if (agent.model != null && agent.fallbackModel != null && agent.fallbackModel !== agent.model)
+    meta3.push(`requested ${agent.model} \u2192 running on ${agent.fallbackModel}`);
+  else if (agent.model != null) meta3.push(agent.model);
   else if (agent.fallbackModel != null) meta3.push(agent.fallbackModel);
   if (agent.agentType != null) meta3.push(agent.agentType);
   if (agent.isolation != null)
@@ -593000,7 +593257,7 @@ var init_resumeModelRestore = __esm({
     init_dist();
     init_dist();
     RESUME_DECLINE_REASONS = {
-      unknown_family: "not a model this version of Sema recognizes"
+      unknown_family: "not in this session's configured model pool \u2014 pick one with /model or add it in settings"
     };
   }
 });
@@ -632634,8 +632891,8 @@ function _temp159() {
 var import_compiler_runtime309, import_react312, SETTINGS_ERRORS_NOTIFICATION_KEY;
 var init_useSettingsErrors = __esm({
   "build-src/src/hooks/notifs/useSettingsErrors.tsx"() {
-    import_compiler_runtime309 = __toESM(require_compiler_runtime(), 1);
-    import_react312 = __toESM(require_react(), 1);
+    import_compiler_runtime309 = __toESM(require_compiler_runtime());
+    import_react312 = __toESM(require_react());
     init_notifications2();
     init_state();
     init_allErrors();
@@ -638498,7 +638755,7 @@ Error: sandbox required but unavailable: ${reason}
       helpers.setCursorOffset(stashedPrompt.cursorOffset);
       setPastedContents(stashedPrompt.pastedContents);
       setStashedPrompt(void 0);
-    } else if (submitsNow) {
+    } else {
       if (!options?.fromKeybinding) {
         setInputValue("");
         helpers.setCursorOffset(0);
@@ -651839,8 +652096,8 @@ __export(printStreamJsonContract_exports, {
 import { randomUUID as randomUUID55 } from "crypto";
 function terminalReasonForResult(msg) {
   const code2 = msg.errorCode;
-  if (code2 === "limit.max_turns") return "max_turns";
-  if (code2 === "budget.exceeded" || code2 === "budget.precall") return "budget_exhausted";
+  if (code2 === "limits.max_turns_exceeded") return "max_turns";
+  if (code2 === "limits.max_cost_exceeded") return "budget_exhausted";
   if (code2 === "output.invalid") return "structured_output_retry_exhausted";
   if (msg.is_error !== true && msg.subtype === "success") {
     return "completed";
@@ -674986,7 +675243,7 @@ async function run() {
       throw new InvalidArgumentError(`It must be one of: ${allowed.join(", ")}`);
     }
     return value;
-  })).option("--sandbox <profile>", `Sandbox image profile for submitted runs: a profile name (explicit; k8s-lane workers only \u2014 list with 'sema cloud images list'), or 'auto' to let the model pick via its SelectEnvironment tool (advisory; choice + reason are echoed in the reply). Omit for the worker default image.`).option("--scenario <name>", `Engine scenario for submitted runs (only works with --print): route the run through a deployment-defined scenario (tool roster + system prompt). Unknown names fall back to the default scenario. Omit for the default scenario; a persistent default can be set via SEMA_HEADLESS_SCENARIO in the settings.json env block.`).option("--no-final-verify", `Disable the default final-verification pass for submitted runs (only works with --print). By default, headless -p runs that write files get up to two extra verification turns before finishing; this flag restores the upstream-aligned behaviour (no verification pass). A persistent default can be set via SEMA_HEADLESS_FINAL_VERIFY=false in the settings.json env block. Skipped automatically when a Stop hook is configured.`).option("--deadline <sec>", `Wall-clock limit in seconds for submitted runs (only works with --print; sema superset \u2014 no upstream equivalent). The run fails loudly with its partial output when the limit is hit; integer between 30 and 86400. A persistent default can be set via SEMA_HEADLESS_DEADLINE_SEC in the settings.json env block.`).option("--max-tokens <n>", `Total token budget for submitted runs (only works with --print; sema superset \u2014 no upstream equivalent). The primary recommended limit: the run fails loudly with its partial output when the budget is exhausted; positive integer. A persistent default can be set via SEMA_HEADLESS_MAX_TOKENS in the settings.json env block.`).option("--agent <agent>", `Agent for the current session. Overrides the 'agent' setting.`).option("--betas <betas...>", "Beta headers to include in API requests (API key users only)").option("--fallback-model <model>", "Enable automatic fallback to specified model when default model is overloaded (only works with --print)").addOption(new Option("--workload <tag>", "Workload tag for billing-header attribution (cc_workload). Process-scoped; set by SDK daemon callers that spawn subprocesses for cron work. (only works with --print)").hideHelp()).option("--settings <file-or-json>", "Path to a settings JSON file or a JSON string to load additional settings from").option("--add-dir <directories...>", "Additional directories to allow tool access to").option("--ide", "Automatically connect to IDE on startup if exactly one valid IDE is available", () => true).option("--strict-mcp-config", "Only use MCP servers from --mcp-config, ignoring all other MCP configurations", () => true).option("--session-id <uuid>", "Use a specific session ID for the conversation (must be a valid UUID)").option("-n, --name <name>", "Set a display name for this session (shown in /resume and terminal title)").option("--agents <json>", `JSON object defining custom agents (e.g. '{"reviewer": {"description": "Reviews code", "prompt": "You are a code reviewer"}}')`).option("--setting-sources <sources>", "Comma-separated list of setting sources to load (user, project, local).").option("--plugin-dir <path>", "Load plugins from a directory for this session only (repeatable: --plugin-dir A --plugin-dir B)", (val, prev) => [...prev, val], []).addOption(new Option("--plugin-dir-no-mcp <path>", "Like --plugin-dir but the engine will not read this plugin's .mcp.json (caller owns its MCP connections)").argParser((val, prev) => [...prev, val]).default([]).hideHelp()).option("--plugin-url <url>", "Fetch a plugin .zip from a URL for this session only (repeatable: --plugin-url A --plugin-url B)", (val, prev) => [...prev, ...val.split(/\s+/).filter(Boolean)], []).option("--disable-slash-commands", "Disable all skills", () => true).option("--chrome", "Enable Claude in Chrome integration").option("--no-chrome", "Disable Claude in Chrome integration").option("--file <specs...>", "File resources to download at startup. Format: file_id:relative_path (e.g., --file file_abc:doc.txt file_def:img.png)").action(async (prompt, options) => {
+  })).option("--sandbox <profile>", `Sandbox image profile for submitted runs: a profile name (explicit; k8s-lane workers only \u2014 list with 'sema cloud images list'), or 'auto' to let the model pick via its SelectEnvironment tool (advisory; choice + reason are echoed in the reply). Omit for the worker default image.`).option("--scenario <name>", `Engine scenario for submitted runs (only works with --print): route the run through a deployment-defined scenario (tool roster + system prompt). Unknown names fall back to the default scenario. Omit for the default scenario; a persistent default can be set via SEMA_HEADLESS_SCENARIO in the settings.json env block.`).option("--final-verify", `Enable a final-verification pass for submitted runs (only works with --print; off by default). When enabled, headless -p runs that write files get up to two extra verification turns before finishing. A persistent default can be set via SEMA_HEADLESS_FINAL_VERIFY=true in the settings.json env block. Yields automatically (with a notice) when a Stop hook is configured.`).option("--no-final-verify", `Explicitly disable the final-verification pass for submitted runs (only works with --print). Verification is off by default, so this flag only matters to override --final-verify or a persistent SEMA_HEADLESS_FINAL_VERIFY=true default; it always wins.`).option("--deadline <sec>", `Wall-clock limit in seconds for submitted runs (only works with --print; sema superset \u2014 no upstream equivalent). The run fails loudly with its partial output when the limit is hit; integer between 30 and 86400. A persistent default can be set via SEMA_HEADLESS_DEADLINE_SEC in the settings.json env block.`).option("--max-tokens <n>", `Total token budget for submitted runs (only works with --print; sema superset \u2014 no upstream equivalent). The primary recommended limit: the run fails loudly with its partial output when the budget is exhausted; positive integer. A persistent default can be set via SEMA_HEADLESS_MAX_TOKENS in the settings.json env block.`).option("--agent <agent>", `Agent for the current session. Overrides the 'agent' setting.`).option("--betas <betas...>", "Beta headers to include in API requests (API key users only)").option("--fallback-model <model>", "Enable automatic fallback to specified model when default model is overloaded (only works with --print)").addOption(new Option("--workload <tag>", "Workload tag for billing-header attribution (cc_workload). Process-scoped; set by SDK daemon callers that spawn subprocesses for cron work. (only works with --print)").hideHelp()).option("--settings <file-or-json>", "Path to a settings JSON file or a JSON string to load additional settings from").option("--add-dir <directories...>", "Additional directories to allow tool access to").option("--ide", "Automatically connect to IDE on startup if exactly one valid IDE is available", () => true).option("--strict-mcp-config", "Only use MCP servers from --mcp-config, ignoring all other MCP configurations", () => true).option("--session-id <uuid>", "Use a specific session ID for the conversation (must be a valid UUID)").option("-n, --name <name>", "Set a display name for this session (shown in /resume and terminal title)").option("--agents <json>", `JSON object defining custom agents (e.g. '{"reviewer": {"description": "Reviews code", "prompt": "You are a code reviewer"}}')`).option("--setting-sources <sources>", "Comma-separated list of setting sources to load (user, project, local).").option("--plugin-dir <path>", "Load plugins from a directory for this session only (repeatable: --plugin-dir A --plugin-dir B)", (val, prev) => [...prev, val], []).addOption(new Option("--plugin-dir-no-mcp <path>", "Like --plugin-dir but the engine will not read this plugin's .mcp.json (caller owns its MCP connections)").argParser((val, prev) => [...prev, val]).default([]).hideHelp()).option("--plugin-url <url>", "Fetch a plugin .zip from a URL for this session only (repeatable: --plugin-url A --plugin-url B)", (val, prev) => [...prev, ...val.split(/\s+/).filter(Boolean)], []).option("--disable-slash-commands", "Disable all skills", () => true).option("--chrome", "Enable Claude in Chrome integration").option("--no-chrome", "Disable Claude in Chrome integration").option("--file <specs...>", "File resources to download at startup. Format: file_id:relative_path (e.g., --file file_abc:doc.txt file_def:img.png)").action(async (prompt, options) => {
     profileCheckpoint("action_handler_start");
     {
       const UNWIRED_FLAGS = [
@@ -677125,7 +677382,7 @@ Auth: unix socket -R \u2192 local proxy`, "info");
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("sema 1.0.66", "-v, --version", "Output the version number");
+  }).version("sema 1.0.67", "-v, --version", "Output the version number");
   program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)");
   program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux.");
   if (canUserConfigureAdvisor()) {
@@ -682052,6 +682309,7 @@ var init_engineWireInjection = __esm({
 // build-src/src/sema/workflowLiveActivity.ts
 var workflowLiveActivity_exports = {};
 __export(workflowLiveActivity_exports, {
+  __feedWorkflowActivityFrameForTests: () => __feedWorkflowActivityFrameForTests,
   ensureWorkflowActivityLedger: () => ensureWorkflowActivityLedger,
   resetWorkflowActivityLedgers: () => resetWorkflowActivityLedgers,
   stopWorkflowActivityLedger: () => stopWorkflowActivityLedger,
@@ -682079,13 +682337,17 @@ function onFrame(ledger, frame) {
       const n2 = (ledger.startedLabels.get(label) ?? 0) + 1;
       ledger.startedLabels.set(label, n2);
       if (n2 > 1 && frame.data.replayed !== true) ledger.ambiguous.add(label);
+      const requested = frame.data.model;
+      if (typeof requested === "string" && requested) accFor(label).requestedModel = requested;
     }
     return;
   }
   if (frame.event === "agent_end") {
     const label = frame.data.label;
-    if (typeof label === "string" && label && typeof frame.data.toolCalls === "number") {
-      accFor(label).endedToolCalls = frame.data.toolCalls;
+    if (typeof label === "string" && label) {
+      if (typeof frame.data.toolCalls === "number") accFor(label).endedToolCalls = frame.data.toolCalls;
+      const resolved = frame.data.modelResolved;
+      if (typeof resolved === "string" && resolved) accFor(label).resolvedModel = resolved;
     }
     return;
   }
@@ -682179,6 +682441,20 @@ function resetWorkflowActivityLedgers() {
   for (const l3 of ledgers.values()) l3.abort.abort();
   ledgers.clear();
 }
+function __feedWorkflowActivityFrameForTests(workflowId, frame) {
+  let ledger = ledgers.get(workflowId);
+  if (!ledger) {
+    ledger = {
+      byLabel: /* @__PURE__ */ new Map(),
+      startedLabels: /* @__PURE__ */ new Map(),
+      ambiguous: /* @__PURE__ */ new Set(),
+      closed: true,
+      abort: new AbortController()
+    };
+    ledgers.set(workflowId, ledger);
+  }
+  onFrame(ledger, frame);
+}
 function wrapWorkflowDetailWithLiveActivity(base, opts) {
   ensureWorkflowActivityLedger(opts);
   const baseSubscribe = base.subscribe?.bind(base);
@@ -682205,6 +682481,10 @@ function wrapWorkflowDetailWithLiveActivity(base, opts) {
             if (tail.summary) patch2.lastToolSummary = tail.summary;
           }
         }
+        if (a.model == null && acc.requestedModel !== void 0) patch2.model = acc.requestedModel;
+        if (a.fallbackModel == null && acc.resolvedModel !== void 0) {
+          patch2.fallbackModel = acc.resolvedModel;
+        }
         if (acc.lastTs !== void 0 && (a.lastProgressAt == null || acc.lastTs > a.lastProgressAt)) {
           patch2.lastProgressAt = acc.lastTs;
         }