@sema-agent/cli 1.0.67 → 1.0.68

package/sema-main.js

@@ -40445,7 +40445,7 @@ var init_gitFilesystem = __esm({
       }
       watchPath(path28, callback) {
         this.watchedPaths.push(path28);
-        watchFile(path28, { interval: WATCH_INTERVAL_MS }, callback);
+        watchFile(path28, { interval: WATCH_INTERVAL_MS, persistent: false }, callback);
       }
       /**
        * Watch the loose ref file for the current branch.
@@ -65953,11 +65953,11 @@ var init_types3 = __esm({
           "Show thinking summaries in the transcript view (ctrl+o). Default: false."
         ),
         skipDangerousModePermissionPrompt: external_exports.boolean().optional().describe(
-          "Whether the user has accepted the bypass permissions mode dialog"
+          "Whether the user has accepted the bypass permissions mode dialog. Remembers the warning screen only \u2014 it is NOT an approval switch and never changes what gets approved."
         ),
         ...true ? {
           skipAutoPermissionPrompt: external_exports.boolean().optional().describe(
-            "Whether the user has accepted the auto mode opt-in dialog"
+            "Whether the user has accepted the auto mode opt-in dialog. Remembers the opt-in screen only \u2014 it is NOT an approval switch and never changes what gets approved."
           ),
           useAutoModeDuringPlan: external_exports.boolean().optional().describe(
             "Whether plan mode uses auto mode semantics when auto mode is available (default: true)"
@@ -73313,8 +73313,8 @@ function defaultMaxTokensFor(contextWindow, perModelCap) {
   const ctx = normalizeCtx(contextWindow);
   const base = ctx >= 5e5 ? 64e3 : 32e3;
   const quarter = Math.floor(ctx / 4);
-  const cap = typeof perModelCap === "number" && Number.isFinite(perModelCap) && perModelCap > 0 ? perModelCap : Infinity;
-  return Math.min(base, quarter, cap);
+  const cap2 = typeof perModelCap === "number" && Number.isFinite(perModelCap) && perModelCap > 0 ? perModelCap : Infinity;
+  return Math.min(base, quarter, cap2);
 }
 function tierChoicesFor(contextWindow) {
   const ctx = normalizeCtx(contextWindow);
@@ -130801,20 +130801,20 @@ function drainAdaptive(node, pending2, innerHeight) {
   const step = abs <= SCROLL_INSTANT_THRESHOLD ? abs : abs < SCROLL_HIGH_PENDING ? SCROLL_STEP_MED : SCROLL_STEP_HIGH;
   applied += sign * step;
   const rem = abs - step;
-  const cap = Math.max(1, innerHeight - 1);
+  const cap2 = Math.max(1, innerHeight - 1);
   const totalAbs = Math.abs(applied);
-  if (totalAbs > cap) {
-    const excess = totalAbs - cap;
+  if (totalAbs > cap2) {
+    const excess = totalAbs - cap2;
     node.pendingScrollDelta = sign * (rem + excess);
-    return sign * cap;
+    return sign * cap2;
   }
   node.pendingScrollDelta = rem > 0 ? sign * rem : void 0;
   return applied;
 }
 function drainProportional(node, pending2, innerHeight) {
   const abs = Math.abs(pending2);
-  const cap = Math.max(1, innerHeight - 1);
-  const step = Math.min(cap, Math.max(SCROLL_MIN_PER_FRAME, abs * 3 >> 2));
+  const cap2 = Math.max(1, innerHeight - 1);
+  const step = Math.min(cap2, Math.max(SCROLL_MIN_PER_FRAME, abs * 3 >> 2));
   if (abs <= step) {
     node.pendingScrollDelta = void 0;
     return pending2;
@@ -136505,6 +136505,8 @@ var init_lastTurnUsageStore = __esm({
 // build-src/src/seam/adapter/runStream.ts
 var runStream_exports = {};
 __export(runStream_exports, {
+  _resetHostDroppedFrameMemoForTest: () => _resetHostDroppedFrameMemoForTest,
+  hostDroppedFrameSink: () => hostDroppedFrameSink,
   isRunStreamActive: () => isRunStreamActive,
   runStream: () => runStream2
 });
@@ -136550,20 +136552,47 @@ function hostSink(e) {
     });
   }
 }
+function consoleLegForDroppedFrame(type, line) {
+  if (reportedDroppedTypes2.has(type)) return;
+  if (reportedDroppedTypes2.size < DROPPED_TYPE_MEMO_CAP2) reportedDroppedTypes2.add(type);
+  console.error(line);
+}
+function _resetHostDroppedFrameMemoForTest() {
+  reportedDroppedTypes2.clear();
+}
+function hostDroppedFrameSink(info) {
+  const clean = (v2) => (
+    // eslint-disable-next-line no-control-regex
+    String(v2).replace(/[\x00-\x1f\x7f]/g, ".").slice(0, 120)
+  );
+  const type = clean(info.type);
+  const line = `[sema][wire] dropped engine frame: type=${type} why=${clean(info.why)} \u2014 this build's projector has no arm for it (engine newer than the client, or a malformed frame). It renders NOWHERE.`;
+  void Promise.resolve().then(() => (init_debug(), debug_exports)).then((m2) => {
+    m2.logForDebugging(line, { level: "warn" });
+    if (!m2.isDebugMode() && process.env.USER_TYPE !== "ant") consoleLegForDroppedFrame(type, line);
+  }).catch(() => consoleLegForDroppedFrame(type, line));
+}
 function runStream2(events3, ctx, handle2 = {}) {
   const seen2 = { busy: null };
   const projected2 = runStream(
     watchActiveRunBusy(events3, seen2),
-    { ...ctx, emitChrome: ctx.emitChrome ?? hostSink },
+    {
+      ...ctx,
+      emitChrome: ctx.emitChrome ?? hostSink,
+      onDroppedFrame: ctx.onDroppedFrame ?? hostDroppedFrameSink
+    },
     handle2
   );
   return rewriteActiveRunBusyRow(projected2, seen2);
 }
+var reportedDroppedTypes2, DROPPED_TYPE_MEMO_CAP2;
 var init_runStream2 = __esm({
   "build-src/src/seam/adapter/runStream.ts"() {
     init_dist();
     init_activeRunSelfHeal();
     init_dist();
+    reportedDroppedTypes2 = /* @__PURE__ */ new Set();
+    DROPPED_TYPE_MEMO_CAP2 = 64;
   }
 });
 
@@ -167698,12 +167727,12 @@ function getContextWindowForModel(model, betas) {
   if (has1mContext(model)) {
     return 1e6;
   }
-  const cap = getModelCapability(model);
-  if (cap?.max_input_tokens && cap.max_input_tokens >= 1e5) {
-    if (cap.max_input_tokens > MODEL_CONTEXT_WINDOW_DEFAULT && is1mContextDisabled()) {
+  const cap2 = getModelCapability(model);
+  if (cap2?.max_input_tokens && cap2.max_input_tokens >= 1e5) {
+    if (cap2.max_input_tokens > MODEL_CONTEXT_WINDOW_DEFAULT && is1mContextDisabled()) {
       return MODEL_CONTEXT_WINDOW_DEFAULT;
     }
-    return cap.max_input_tokens;
+    return cap2.max_input_tokens;
   }
   if (betas?.includes(CONTEXT_1M_BETA_HEADER) && modelSupports1M(model)) {
     return 1e6;
@@ -167792,9 +167821,9 @@ function getModelMaxOutputTokens(model) {
     defaultTokens = MAX_OUTPUT_TOKENS_DEFAULT;
     upperLimit = MAX_OUTPUT_TOKENS_UPPER_LIMIT;
   }
-  const cap = getModelCapability(model);
-  if (cap?.max_tokens && cap.max_tokens >= 4096) {
-    upperLimit = cap.max_tokens;
+  const cap2 = getModelCapability(model);
+  if (cap2?.max_tokens && cap2.max_tokens >= 4096) {
+    upperLimit = cap2.max_tokens;
     defaultTokens = Math.min(defaultTokens, upperLimit);
   }
   return { default: defaultTokens, upperLimit };
@@ -223432,59 +223461,6 @@ var init_rewindAnchorSidecar = __esm({
       list() {
         return [...this.index.entries()].map(([uuid8, taskId]) => ({ uuid: uuid8, taskId }));
       }
-      /**
-       * Drop all anchors whose record belongs to `shellSessionId` and rewrite the file (compaction — the only
-       * non-append operation, rare: used on /clear or session delete). Reads existing records, filters, atomic
-       * temp+rename. Best-effort.
-       */
-      deleteBySession(shellSessionId) {
-        if (!this.path) {
-          return;
-        }
-        let raw2;
-        try {
-          raw2 = readFileSync18(this.path, "utf8");
-        } catch {
-          return;
-        }
-        const kept = [];
-        const droppedUuids = /* @__PURE__ */ new Set();
-        for (const line of raw2.split("\n")) {
-          if (line.length === 0) continue;
-          try {
-            const rec = JSON.parse(line);
-            if (!rec || typeof rec.uuid !== "string") continue;
-            if (rec.shellSessionId === shellSessionId) {
-              droppedUuids.add(rec.uuid);
-            } else {
-              kept.push(rec);
-            }
-          } catch {
-          }
-        }
-        for (const uuid8 of droppedUuids) this.index.delete(uuid8);
-        const body = kept.map((r) => JSON.stringify(r) + "\n").join("");
-        const tmp = `${this.path}.tmp-${process.pid}`;
-        let release2;
-        try {
-          release2 = lockSyncRetry(this.path, LOCK_OPTS);
-        } catch {
-          release2 = void 0;
-        }
-        try {
-          writeFileSync10(tmp, body, { mode: 384 });
-          renameSync9(tmp, this.path);
-        } catch (err8) {
-          logForDebugging3(`rewindAnchorSidecar: compaction failed: ${err8}`);
-        } finally {
-          if (release2) {
-            try {
-              release2();
-            } catch {
-            }
-          }
-        }
-      }
       /**
        * Clear ALL anchors for the current sidecar file (it is per-session — filename = sessionId), truncating
        * the file to empty. Used on /clear. Atomic temp+rename. Best-effort.
@@ -234314,6 +234290,15 @@ var init_bashClassifier = __esm({
 });
 
 // build-src/src/utils/permissions/permissionsLoader.ts
+var permissionsLoader_exports = {};
+__export(permissionsLoader_exports, {
+  addPermissionRulesToSettings: () => addPermissionRulesToSettings,
+  deletePermissionRuleFromSettings: () => deletePermissionRuleFromSettings,
+  getPermissionRulesForSource: () => getPermissionRulesForSource,
+  loadAllPermissionRulesFromDisk: () => loadAllPermissionRulesFromDisk,
+  shouldAllowManagedPermissionRulesOnly: () => shouldAllowManagedPermissionRulesOnly,
+  shouldShowAlwaysAllowOptions: () => shouldShowAlwaysAllowOptions
+});
 function shouldAllowManagedPermissionRulesOnly() {
   return getSettingsForSource("policySettings")?.allowManagedPermissionRulesOnly === true;
 }
@@ -238518,6 +238503,33 @@ var init_pathValidation2 = __esm({
 });
 
 // build-src/src/tools/BashTool/bashPermissions.ts
+var bashPermissions_exports = {};
+__export(bashPermissions_exports, {
+  BINARY_HIJACK_VARS: () => BINARY_HIJACK_VARS,
+  MAX_SUBCOMMANDS_FOR_SECURITY_CHECK: () => MAX_SUBCOMMANDS_FOR_SECURITY_CHECK,
+  MAX_SUGGESTED_RULES_FOR_COMPOUND: () => MAX_SUGGESTED_RULES_FOR_COMPOUND,
+  awaitClassifierAutoApproval: () => awaitClassifierAutoApproval,
+  bashPermissionRule: () => bashPermissionRule,
+  bashToolCheckExactMatchPermission: () => bashToolCheckExactMatchPermission,
+  bashToolCheckPermission: () => bashToolCheckPermission,
+  bashToolHasPermission: () => bashToolHasPermission,
+  checkCommandAndSuggestRules: () => checkCommandAndSuggestRules,
+  clearSpeculativeChecks: () => clearSpeculativeChecks,
+  commandHasAnyCd: () => commandHasAnyCd,
+  consumeSpeculativeClassifierCheck: () => consumeSpeculativeClassifierCheck,
+  executeAsyncClassifierCheck: () => executeAsyncClassifierCheck,
+  getFirstWordPrefix: () => getFirstWordPrefix,
+  getSimpleCommandPrefix: () => getSimpleCommandPrefix,
+  isNormalizedCdCommand: () => isNormalizedCdCommand,
+  isNormalizedGitCommand: () => isNormalizedGitCommand,
+  matchWildcardPattern: () => matchWildcardPattern2,
+  peekSpeculativeClassifierCheck: () => peekSpeculativeClassifierCheck,
+  permissionRuleExtractPrefix: () => permissionRuleExtractPrefix3,
+  startSpeculativeClassifierCheck: () => startSpeculativeClassifierCheck,
+  stripAllLeadingEnvVars: () => stripAllLeadingEnvVars,
+  stripSafeWrappers: () => stripSafeWrappers,
+  stripWrappersFromArgv: () => stripWrappersFromArgv2
+});
 function logClassifierResultForAnts(command8, behavior, descriptions, result) {
   if (process.env.USER_TYPE !== "ant") {
     return;
@@ -238680,6 +238692,45 @@ function stripSafeWrappers(command8) {
   }
   return stripped.trim();
 }
+function skipTimeoutFlags2(a) {
+  let i = 1;
+  while (i < a.length) {
+    const arg = a[i];
+    const next = a[i + 1];
+    if (arg === "--foreground" || arg === "--preserve-status" || arg === "--verbose")
+      i++;
+    else if (/^--(?:kill-after|signal)=[A-Za-z0-9_.+-]+$/.test(arg)) i++;
+    else if ((arg === "--kill-after" || arg === "--signal") && next && TIMEOUT_FLAG_VALUE_RE2.test(next))
+      i += 2;
+    else if (arg === "--") {
+      i++;
+      break;
+    } else if (arg.startsWith("--")) return -1;
+    else if (arg === "-v") i++;
+    else if ((arg === "-k" || arg === "-s") && next && TIMEOUT_FLAG_VALUE_RE2.test(next))
+      i += 2;
+    else if (/^-[ks][A-Za-z0-9_.+-]+$/.test(arg)) i++;
+    else if (arg.startsWith("-")) return -1;
+    else break;
+  }
+  return i;
+}
+function stripWrappersFromArgv2(argv) {
+  let a = argv;
+  for (; ; ) {
+    if (a[0] === "time" || a[0] === "nohup") {
+      a = a.slice(a[1] === "--" ? 2 : 1);
+    } else if (a[0] === "timeout") {
+      const i = skipTimeoutFlags2(a);
+      if (i < 0 || !a[i] || !/^\d+(?:\.\d+)?[smhd]?$/.test(a[i])) return a;
+      a = a.slice(i + 1);
+    } else if (a[0] === "nice" && a[1] === "-n" && a[2] && /^-?\d+$/.test(a[2])) {
+      a = a.slice(a[3] === "--" ? 4 : 3);
+    } else {
+      return a;
+    }
+  }
+}
 function stripAllLeadingEnvVars(command8, blocklist) {
   const ENV_VAR_PATTERN = /^([A-Za-z_][A-Za-z0-9_]*(?:\[[^\]]*\])?)\+?=(?:'[^'\n\r]*'|"(?:\\.|[^"$`\\\n\r])*"|\\.|[^ \t\n\r$`;|&()<>\\\\'"])*[ \t]+/;
   let stripped = command8;
@@ -238979,9 +239030,96 @@ function checkSemanticsDeny(input, toolPermissionContext, commands) {
   }
   return null;
 }
+function peekSpeculativeClassifierCheck(command8) {
+  return speculativeChecks.get(command8);
+}
+function startSpeculativeClassifierCheck(command8, toolPermissionContext, signal, isNonInteractiveSession) {
+  if (!isClassifierPermissionsEnabled()) return false;
+  if (toolPermissionContext.mode === "auto")
+    return false;
+  if (toolPermissionContext.mode === "bypassPermissions") return false;
+  const allowDescriptions = getBashPromptAllowDescriptions(
+    toolPermissionContext
+  );
+  if (allowDescriptions.length === 0) return false;
+  const cwd5 = getCwd();
+  const promise2 = classifyBashCommand(
+    command8,
+    cwd5,
+    allowDescriptions,
+    "allow",
+    signal,
+    isNonInteractiveSession
+  );
+  promise2.catch(() => {
+  });
+  speculativeChecks.set(command8, promise2);
+  return true;
+}
+function consumeSpeculativeClassifierCheck(command8) {
+  const promise2 = speculativeChecks.get(command8);
+  if (promise2) {
+    speculativeChecks.delete(command8);
+  }
+  return promise2;
+}
 function clearSpeculativeChecks() {
   speculativeChecks.clear();
 }
+async function awaitClassifierAutoApproval(pendingCheck, signal, isNonInteractiveSession) {
+  const { command: command8, cwd: cwd5, descriptions } = pendingCheck;
+  const speculativeResult = consumeSpeculativeClassifierCheck(command8);
+  const classifierResult = speculativeResult ? await speculativeResult : await classifyBashCommand(
+    command8,
+    cwd5,
+    descriptions,
+    "allow",
+    signal,
+    isNonInteractiveSession
+  );
+  logClassifierResultForAnts(command8, "allow", descriptions, classifierResult);
+  if (false) {
+    return {
+      type: "classifier",
+      classifier: "bash_allow",
+      reason: `Allowed by prompt rule: "${classifierResult.matchedDescription}"`
+    };
+  }
+  return void 0;
+}
+async function executeAsyncClassifierCheck(pendingCheck, signal, isNonInteractiveSession, callbacks) {
+  const { command: command8, cwd: cwd5, descriptions } = pendingCheck;
+  const speculativeResult = consumeSpeculativeClassifierCheck(command8);
+  let classifierResult;
+  try {
+    classifierResult = speculativeResult ? await speculativeResult : await classifyBashCommand(
+      command8,
+      cwd5,
+      descriptions,
+      "allow",
+      signal,
+      isNonInteractiveSession
+    );
+  } catch (error51) {
+    if (error51 instanceof APIUserAbortError || error51 instanceof AbortError) {
+      callbacks.onComplete?.();
+      return;
+    }
+    callbacks.onComplete?.();
+    throw error51;
+  }
+  logClassifierResultForAnts(command8, "allow", descriptions, classifierResult);
+  if (!callbacks.shouldContinue()) return;
+  if (false) {
+    callbacks.onAllow({
+      type: "classifier",
+      classifier: "bash_allow",
+      reason: `Allowed by prompt rule: "${classifierResult.matchedDescription}"`
+    });
+  } else {
+    callbacks.onComplete?.();
+  }
+}
 async function bashToolHasPermission(input, context3, getCommandSubcommandPrefixFn = getCommandSubcommandPrefix) {
   let appState = context3.getAppState();
   const injectionCheckDisabled = isEnvTruthy(
@@ -239577,7 +239715,7 @@ function commandHasAnyCd(command8) {
     (subcmd) => isNormalizedCdCommand(subcmd.trim())
   );
 }
-var bashCommandIsSafeAsync, splitCommand, ENV_VAR_ASSIGN_RE, MAX_SUBCOMMANDS_FOR_SECURITY_CHECK, MAX_SUGGESTED_RULES_FOR_COMPOUND, BARE_SHELL_PREFIXES, permissionRuleExtractPrefix3, bashPermissionRule, SAFE_ENV_VARS2, ANT_ONLY_SAFE_ENV_VARS, BINARY_HIJACK_VARS, bashToolCheckExactMatchPermission, bashToolCheckPermission, speculativeChecks;
+var bashCommandIsSafeAsync, splitCommand, ENV_VAR_ASSIGN_RE, MAX_SUBCOMMANDS_FOR_SECURITY_CHECK, MAX_SUGGESTED_RULES_FOR_COMPOUND, BARE_SHELL_PREFIXES, permissionRuleExtractPrefix3, bashPermissionRule, SAFE_ENV_VARS2, ANT_ONLY_SAFE_ENV_VARS, TIMEOUT_FLAG_VALUE_RE2, BINARY_HIJACK_VARS, bashToolCheckExactMatchPermission, bashToolCheckPermission, speculativeChecks;
 var init_bashPermissions = __esm({
   "build-src/src/tools/BashTool/bashPermissions.ts"() {
     init_sdk();
@@ -239793,6 +239931,7 @@ var init_bashPermissions = __esm({
       "GROWTHBOOK_API_KEY"
       // self-hosted growthbook
     ]);
+    TIMEOUT_FLAG_VALUE_RE2 = /^[A-Za-z0-9_.+-]+$/;
     BINARY_HIJACK_VARS = /^(LD_|DYLD_|PATH$)/;
     bashToolCheckExactMatchPermission = (input, toolPermissionContext) => {
       const command8 = input.command.trim();
@@ -382966,7 +383105,7 @@ function createInProcessCanUseTool(identity3, abortController, onPermissionWaitM
       return result;
     }
     if (false) {
-      const classifierDecision = await awaitClassifierAutoApproval(
+      const classifierDecision = await awaitClassifierAutoApproval2(
         result.pendingClassifierCheck,
         abortController.signal,
         toolUseContext.options.isNonInteractiveSession
@@ -395177,16 +395316,29 @@ var init_RejectedToolUseMessage = __esm({
 });
 
 // build-src/src/components/messages/UserToolResultMessage/UserToolErrorMessage.tsx
+function unwrapWholeSystemReminder(content) {
+  const OPEN = "<system-reminder>";
+  const CLOSE = "</system-reminder>";
+  const trimmed2 = content.trim();
+  if (!trimmed2.startsWith(OPEN) || !trimmed2.endsWith(CLOSE)) return content;
+  return trimmed2.split(OPEN).join("").split(CLOSE).join("").trim();
+}
+function normalizeEngineReminderParam(p) {
+  if (typeof p.content !== "string") return p;
+  const unwrapped = unwrapWholeSystemReminder(p.content);
+  return unwrapped === p.content ? p : { ...p, content: unwrapped };
+}
 function UserToolErrorMessage(t0) {
   const $3 = (0, import_compiler_runtime105.c)(14);
   const {
     progressMessagesForMessage,
     tool,
     tools,
-    param,
+    param: rawParam,
     verbose,
     isTranscriptMode
   } = t0;
+  const param = normalizeEngineReminderParam(rawParam);
   if (typeof param.content === "string" && param.content.includes(INTERRUPT_MESSAGE_FOR_TOOL_USE)) {
     let t12;
     if ($3[0] === /* @__PURE__ */ Symbol.for("react.memo_cache_sentinel")) {
@@ -399733,6 +399885,7 @@ var client_exports2 = {};
 __export(client_exports2, {
   MAX_RPC_BYTES: () => MAX_RPC_BYTES,
   daemonRpc: () => daemonRpc,
+  daemonStartupFailureMessage: () => daemonStartupFailureMessage,
   dispatchJob: () => dispatchJob,
   ensureDaemonRunning: () => ensureDaemonRunning
 });
@@ -399829,13 +399982,16 @@ async function ensureDaemonRunning() {
     );
     child.unref();
   }
-  for (let i = 0; i < 40; i++) {
+  for (let i = 0; i < 100; i++) {
     await sleep5(150);
     info = await readDaemonInfo();
     if (info && isDaemonAlive(info) && await pingOk(info)) return info;
   }
   return null;
 }
+function daemonStartupFailureMessage(registeredLate) {
+  return registeredLate ? "the daemon registered but did not answer pings within the startup window \u2014 it may still be starting (slow machine) or wedged; check daemon.log" : "the daemon did not register within the startup window \u2014 slow first boot or a crash on boot; check daemon.log";
+}
 function mapResponse(r) {
   if (r.ok) return { ok: true, pid: r.pid };
   if (r.code === "short-alive" || r.code === "stale-short") {
@@ -399847,10 +400003,11 @@ function mapResponse(r) {
 async function dispatchJob(job) {
   let info = await ensureDaemonRunning();
   if (!info) {
+    const late3 = await readDaemonInfo();
     return {
       ok: false,
       code: "daemon-unreachable",
-      message: "the daemon was spawned but never came up (it likely crashed on boot)"
+      message: daemonStartupFailureMessage(late3 !== null)
     };
   }
   const nonce = randomUUID18();
@@ -409825,7 +409982,7 @@ var require_select = __commonJS({
       return url3.replace(/^(?:\w+:\/\/|\/+)/, "").replace(/(?:\/+|\/*#.*?)$/, "").split("/", num).join("/");
     };
     var parseNth = function(param_, test2) {
-      var param = param_.replace(/\s+/g, ""), cap;
+      var param = param_.replace(/\s+/g, ""), cap2;
       if (param === "even") {
         param = "2n+0";
       } else if (param === "odd") {
@@ -409833,10 +409990,10 @@ var require_select = __commonJS({
       } else if (param.indexOf("n") === -1) {
         param = "0n" + param;
       }
-      cap = /^([+-])?(\d+)?n([+-])?(\d+)?$/.exec(param);
+      cap2 = /^([+-])?(\d+)?n([+-])?(\d+)?$/.exec(param);
       return {
-        group: cap[1] === "-" ? -(cap[2] || 1) : +(cap[2] || 1),
-        offset: cap[4] ? cap[3] === "-" ? -cap[4] : +cap[4] : 0
+        group: cap2[1] === "-" ? -(cap2[2] || 1) : +(cap2[2] || 1),
+        offset: cap2[4] ? cap2[3] === "-" ? -cap2[4] : +cap2[4] : 0
       };
     };
     var nth = function(param_, test2, last3) {
@@ -410251,23 +410408,23 @@ var require_select = __commonJS({
     rules.ident = replace(rules.ident, "cssid", rules.cssid);
     rules.str_escape = replace(rules.str_escape, "escape", rules.escape);
     var compile = function(sel_) {
-      var sel = sel_.replace(/^\s+|\s+$/g, ""), test2, filter2 = [], buff = [], subject, qname, cap, op, ref;
+      var sel = sel_.replace(/^\s+|\s+$/g, ""), test2, filter2 = [], buff = [], subject, qname, cap2, op, ref;
       while (sel) {
-        if (cap = rules.qname.exec(sel)) {
-          sel = sel.substring(cap[0].length);
-          qname = decodeid(cap[1]);
+        if (cap2 = rules.qname.exec(sel)) {
+          sel = sel.substring(cap2[0].length);
+          qname = decodeid(cap2[1]);
           buff.push(tok(qname, true));
-        } else if (cap = rules.simple.exec(sel)) {
-          sel = sel.substring(cap[0].length);
+        } else if (cap2 = rules.simple.exec(sel)) {
+          sel = sel.substring(cap2[0].length);
           qname = "*";
           buff.push(tok(qname, true));
-          buff.push(tok(cap));
+          buff.push(tok(cap2));
         } else {
           throw new SyntaxError("Invalid selector.");
         }
-        while (cap = rules.simple.exec(sel)) {
-          sel = sel.substring(cap[0].length);
-          buff.push(tok(cap));
+        while (cap2 = rules.simple.exec(sel)) {
+          sel = sel.substring(cap2[0].length);
+          buff.push(tok(cap2));
         }
         if (sel[0] === "!") {
           sel = sel.substring(1);
@@ -410275,16 +410432,16 @@ var require_select = __commonJS({
           subject.qname = qname;
           buff.push(subject.simple);
         }
-        if (cap = rules.ref.exec(sel)) {
-          sel = sel.substring(cap[0].length);
-          ref = combinators.ref(makeSimple(buff), decodeid(cap[1]));
+        if (cap2 = rules.ref.exec(sel)) {
+          sel = sel.substring(cap2[0].length);
+          ref = combinators.ref(makeSimple(buff), decodeid(cap2[1]));
           filter2.push(ref.combinator);
           buff = [];
           continue;
         }
-        if (cap = rules.combinator.exec(sel)) {
-          sel = sel.substring(cap[0].length);
-          op = cap[1] || cap[2] || cap[3];
+        if (cap2 = rules.combinator.exec(sel)) {
+          sel = sel.substring(cap2[0].length);
+          op = cap2[1] || cap2[2] || cap2[3];
           if (op === ",") {
             filter2.push(combinators.noop(makeSimple(buff)));
             break;
@@ -410316,23 +410473,23 @@ var require_select = __commonJS({
       }
       return test2;
     };
-    var tok = function(cap, qname) {
+    var tok = function(cap2, qname) {
       if (qname) {
-        return cap === "*" ? selectors["*"] : selectors.type(cap);
+        return cap2 === "*" ? selectors["*"] : selectors.type(cap2);
       }
-      if (cap[1]) {
-        return cap[1][0] === "." ? selectors.attr("class", "~=", decodeid(cap[1].substring(1)), false) : selectors.attr("id", "=", decodeid(cap[1].substring(1)), false);
+      if (cap2[1]) {
+        return cap2[1][0] === "." ? selectors.attr("class", "~=", decodeid(cap2[1].substring(1)), false) : selectors.attr("id", "=", decodeid(cap2[1].substring(1)), false);
       }
-      if (cap[2]) {
-        return cap[3] ? selectors[decodeid(cap[2])](unquote(cap[3])) : selectors[decodeid(cap[2])];
+      if (cap2[2]) {
+        return cap2[3] ? selectors[decodeid(cap2[2])](unquote(cap2[3])) : selectors[decodeid(cap2[2])];
       }
-      if (cap[4]) {
-        var value = cap[6];
+      if (cap2[4]) {
+        var value = cap2[6];
         var i = /["'\s]\s*I$/i.test(value);
         if (i) {
           value = value.replace(/\s*I$/i, "");
         }
-        return selectors.attr(decodeid(cap[4]), cap[5] || "-", unquote(value), i);
+        return selectors.attr(decodeid(cap2[4]), cap2[5] || "-", unquote(value), i);
       }
       throw new SyntaxError("Unknown Selector.");
     };
@@ -458721,6 +458878,26 @@ var init_classifierDecision = __esm({
 });
 
 // build-src/src/utils/permissions/permissions.ts
+var permissions_exports2 = {};
+__export(permissions_exports2, {
+  applyPermissionRulesToPermissionContext: () => applyPermissionRulesToPermissionContext,
+  checkRuleBasedPermissions: () => checkRuleBasedPermissions,
+  createPermissionRequestMessage: () => createPermissionRequestMessage,
+  deletePermissionRule: () => deletePermissionRule,
+  filterDeniedAgents: () => filterDeniedAgents,
+  getAllowRules: () => getAllowRules,
+  getAskRuleForTool: () => getAskRuleForTool,
+  getAskRules: () => getAskRules,
+  getDenyRuleForAgent: () => getDenyRuleForAgent,
+  getDenyRuleForTool: () => getDenyRuleForTool,
+  getDenyRules: () => getDenyRules,
+  getRuleByContentsForTool: () => getRuleByContentsForTool,
+  getRuleByContentsForToolName: () => getRuleByContentsForToolName,
+  hasPermissionsToUseTool: () => hasPermissionsToUseTool,
+  permissionRuleSourceDisplayString: () => permissionRuleSourceDisplayString,
+  syncPermissionRulesFromDisk: () => syncPermissionRulesFromDisk,
+  toolAlwaysAllowedRule: () => toolAlwaysAllowedRule
+});
 function permissionRuleSourceDisplayString(source) {
   return getSettingSourceDisplayNameLowercase(source);
 }
@@ -458999,6 +459176,57 @@ Latest blocked action: ${classifierReason}`
     }
   };
 }
+async function checkRuleBasedPermissions(tool, input, context3) {
+  const appState = context3.getAppState();
+  const denyRule = getDenyRuleForTool(appState.toolPermissionContext, tool);
+  if (denyRule) {
+    return {
+      behavior: "deny",
+      decisionReason: {
+        type: "rule",
+        rule: denyRule
+      },
+      message: `Permission to use ${tool.name} has been denied.`
+    };
+  }
+  const askRule = getAskRuleForTool(appState.toolPermissionContext, tool);
+  if (askRule) {
+    const canSandboxAutoAllow = tool.name === BASH_TOOL_NAME && SandboxManager2.isSandboxingEnabled() && SandboxManager2.isAutoAllowBashIfSandboxedEnabled() && shouldUseSandbox(input);
+    if (!canSandboxAutoAllow) {
+      return {
+        behavior: "ask",
+        decisionReason: {
+          type: "rule",
+          rule: askRule
+        },
+        message: createPermissionRequestMessage(tool.name)
+      };
+    }
+  }
+  let toolPermissionResult = {
+    behavior: "passthrough",
+    message: createPermissionRequestMessage(tool.name)
+  };
+  try {
+    const parsedInput = tool.inputSchema.parse(input);
+    toolPermissionResult = await tool.checkPermissions(parsedInput, context3);
+  } catch (e) {
+    if (e instanceof AbortError || e instanceof APIUserAbortError) {
+      throw e;
+    }
+    logError(e);
+  }
+  if (toolPermissionResult?.behavior === "deny") {
+    return toolPermissionResult;
+  }
+  if (toolPermissionResult?.behavior === "ask" && toolPermissionResult.decisionReason?.type === "rule" && toolPermissionResult.decisionReason.rule.ruleBehavior === "ask") {
+    return toolPermissionResult;
+  }
+  if (toolPermissionResult?.behavior === "ask" && toolPermissionResult.decisionReason?.type === "safetyCheck") {
+    return toolPermissionResult;
+  }
+  return null;
+}
 async function hasPermissionsToUseToolInner(tool, input, context3) {
   if (context3.abortController.signal.aborted) {
     throw new AbortError();
@@ -501978,8 +502206,8 @@ var init_sema_brand = __esm({
           "Bulk stop now lists the rows it could not stop with a named reason, and quota/scenario refusals carry a plain-language line next to the machine-readable error"
         ]
       },
-      productVersion: "1.0.67",
-      announcement: 'sema 1.0.67 \u2014 Final verification is now OFF by default for -p runs: it could overwrite a correct result while re-checking it; opt in with --final-verify or SEMA_HEADLESS_FINAL_VERIFY=true. --max-tokens now actually enforces a token budget (the old wire key was never adopted by the engine \u2014 requests silently ran unbounded; the run now fails loudly with partial output when the budget is hit). A sub-agent that pauses at an approval gate is reported honestly end-to-end (engine-side fix; the shell-side workaround was removed), and when the session is locked by an active run, every message now shows the concrete way out instead of a bare busy error. Engine crash recovery is bounded: after ~35 minutes of automatic retries sema stops, tells you how long it tried, and leaves a working manual retry. Workflow agent details now show "requested <model> \u2192 running on <model>" when a delegated agent ran on a different model than asked. Engine 6.4.0, core 5.10.0, SDK 6.3.0, client-core 0.17.1, registry-core 0.14.0.'
+      productVersion: "1.0.68",
+      announcement: "sema 1.0.68 \u2014 Approvals got faster and quieter: permission rules you save in settings.json (permissions.allow/deny/ask) now actually apply in the interactive REPL, and a remembered allow rule answers the engine's approval gate instantly \u2014 no card, no pause, no suspend penalty. Reading your own config directory (~/.sema) no longer triggers a permission prompt on every read (engine 6.6.0 read-only whitelist); writes still ask. A background-task daemon that starts slowly on a cold machine is no longer misreported as crashed (startup window 6s \u2192 15s, and the error now distinguishes slow from dead). The setup wizard renders correctly in narrow 80-column terminals (help text word-wraps instead of losing the end of sentences) and no longer scrambles the option list if you paste an extremely long endpoint URL. Engine 6.6.0, core 5.11.0, SDK 6.5.0, client-core 0.17.1, registry-core 0.14.0."
     };
   }
 });
@@ -508313,8 +508541,8 @@ var require_sema_brand = __commonJS({
           "Bulk stop now lists the rows it could not stop with a named reason, and quota/scenario refusals carry a plain-language line next to the machine-readable error"
         ]
       },
-      productVersion: "1.0.67",
-      announcement: 'sema 1.0.67 \u2014 Final verification is now OFF by default for -p runs: it could overwrite a correct result while re-checking it; opt in with --final-verify or SEMA_HEADLESS_FINAL_VERIFY=true. --max-tokens now actually enforces a token budget (the old wire key was never adopted by the engine \u2014 requests silently ran unbounded; the run now fails loudly with partial output when the budget is hit). A sub-agent that pauses at an approval gate is reported honestly end-to-end (engine-side fix; the shell-side workaround was removed), and when the session is locked by an active run, every message now shows the concrete way out instead of a bare busy error. Engine crash recovery is bounded: after ~35 minutes of automatic retries sema stops, tells you how long it tried, and leaves a working manual retry. Workflow agent details now show "requested <model> \u2192 running on <model>" when a delegated agent ran on a different model than asked. Engine 6.4.0, core 5.10.0, SDK 6.3.0, client-core 0.17.1, registry-core 0.14.0.'
+      productVersion: "1.0.68",
+      announcement: "sema 1.0.68 \u2014 Approvals got faster and quieter: permission rules you save in settings.json (permissions.allow/deny/ask) now actually apply in the interactive REPL, and a remembered allow rule answers the engine's approval gate instantly \u2014 no card, no pause, no suspend penalty. Reading your own config directory (~/.sema) no longer triggers a permission prompt on every read (engine 6.6.0 read-only whitelist); writes still ask. A background-task daemon that starts slowly on a cold machine is no longer misreported as crashed (startup window 6s \u2192 15s, and the error now distinguishes slow from dead). The setup wizard renders correctly in narrow 80-column terminals (help text word-wraps instead of losing the end of sentences) and no longer scrambles the option list if you paste an extremely long endpoint URL. Engine 6.6.0, core 5.11.0, SDK 6.5.0, client-core 0.17.1, registry-core 0.14.0."
     };
   }
 });
@@ -508376,12 +508604,12 @@ function dropTextInBriefTurns(messages, briefToolNames) {
     return t2 === void 0 || !turnsWithBrief.has(t2);
   });
 }
-function computeSliceStart(collapsed, anchorRef, cap = MAX_MESSAGES_WITHOUT_VIRTUALIZATION, step = MESSAGE_CAP_STEP) {
+function computeSliceStart(collapsed, anchorRef, cap2 = MAX_MESSAGES_WITHOUT_VIRTUALIZATION, step = MESSAGE_CAP_STEP) {
   const anchor = anchorRef.current;
   const anchorIdx = anchor ? collapsed.findIndex((m2) => m2.uuid === anchor.uuid) : -1;
-  let start = anchorIdx >= 0 ? anchorIdx : anchor ? Math.min(anchor.idx, Math.max(0, collapsed.length - cap)) : 0;
-  if (collapsed.length - start > cap + step) {
-    start = collapsed.length - cap;
+  let start = anchorIdx >= 0 ? anchorIdx : anchor ? Math.min(anchor.idx, Math.max(0, collapsed.length - cap2)) : 0;
+  if (collapsed.length - start > cap2 + step) {
+    start = collapsed.length - cap2;
   }
   const msgAtStart = collapsed[start];
   if (msgAtStart && (anchor?.uuid !== msgAtStart.uuid || anchor.idx !== start)) {
@@ -529261,8 +529489,8 @@ var init_PermissionRuleList = __esm({
 });
 
 // build-src/src/commands/permissions/permissions.tsx
-var permissions_exports2 = {};
-__export(permissions_exports2, {
+var permissions_exports3 = {};
+__export(permissions_exports3, {
   call: () => call46
 });
 var import_jsx_runtime307, call46;
@@ -529289,7 +529517,7 @@ var init_permissions4 = __esm({
       aliases: ["allowed-tools"],
       // 218 parity (aligned 2026-07-24, F8b): "and", not "&".
       description: "Manage allow and deny tool permission rules",
-      load: () => Promise.resolve().then(() => (init_permissions3(), permissions_exports2))
+      load: () => Promise.resolve().then(() => (init_permissions3(), permissions_exports3))
     };
     permissions_default = permissions;
   }
@@ -547647,6 +547875,38 @@ var init_agentMemory = __esm({
 });
 
 // build-src/src/utils/permissions/filesystem.ts
+var filesystem_exports = {};
+__export(filesystem_exports, {
+  DANGEROUS_DIRECTORIES: () => DANGEROUS_DIRECTORIES2,
+  DANGEROUS_FILES: () => DANGEROUS_FILES2,
+  allWorkingDirectories: () => allWorkingDirectories,
+  checkEditableInternalPath: () => checkEditableInternalPath,
+  checkPathSafetyForAutoEdit: () => checkPathSafetyForAutoEdit,
+  checkReadPermissionForTool: () => checkReadPermissionForTool,
+  checkReadableInternalPath: () => checkReadableInternalPath,
+  checkWritePermissionForTool: () => checkWritePermissionForTool,
+  ensureScratchpadDir: () => ensureScratchpadDir,
+  generateSuggestions: () => generateSuggestions,
+  getBundledSkillsRoot: () => getBundledSkillsRoot,
+  getClaudeSkillScope: () => getClaudeSkillScope,
+  getClaudeTempDir: () => getClaudeTempDir,
+  getClaudeTempDirName: () => getClaudeTempDirName,
+  getFileReadIgnorePatterns: () => getFileReadIgnorePatterns,
+  getProjectTempDir: () => getProjectTempDir,
+  getResolvedWorkingDirPaths: () => getResolvedWorkingDirPaths,
+  getScratchpadDir: () => getScratchpadDir,
+  getSessionMemoryDir: () => getSessionMemoryDir,
+  getSessionMemoryPath: () => getSessionMemoryPath,
+  isClaudeSettingsPath: () => isClaudeSettingsPath,
+  isScratchpadEnabled: () => isScratchpadEnabled,
+  matchingRuleForInput: () => matchingRuleForInput,
+  normalizeCaseForComparison: () => normalizeCaseForComparison2,
+  normalizePatternsToPath: () => normalizePatternsToPath,
+  pathInAllowedWorkingPath: () => pathInAllowedWorkingPath,
+  pathInWorkingPath: () => pathInWorkingPath,
+  relativePath: () => relativePath,
+  toPosixPath: () => toPosixPath
+});
 import { randomBytes as randomBytes21 } from "crypto";
 import { homedir as homedir42, tmpdir as tmpdir14 } from "os";
 import { join as join166, normalize as normalize17, posix as posix8, sep as sep36 } from "path";
@@ -568986,6 +569246,7 @@ var init_background_agent_store = __esm({
       "errorCode",
       "errorRetryable",
       "errorKind",
+      "errorRetryAfterMs",
       "resultIsPartial",
       "summary",
       "recentSteps",
@@ -569286,10 +569547,10 @@ function statusFromBackground(status3, exitCode) {
     return exitCode === 0 ? "completed" : "failed";
   return "failed";
 }
-function rollSpoolText(spool, s, cap, onDrop) {
-  if (s.length <= cap)
+function rollSpoolText(spool, s, cap2, onDrop) {
+  if (s.length <= cap2)
     return s;
-  const half = Math.floor(cap / 2);
+  const half = Math.floor(cap2 / 2);
   const dropped2 = s.slice(half, s.length - half);
   spool.rolledChars += dropped2.length;
   onDrop?.(dropped2);
@@ -570813,6 +571074,8 @@ function settleBackgroundAgentLane(core, id, outcome) {
       handle2.errorRetryable = outcome.retryable;
     if (outcome.errorKind !== void 0)
       handle2.errorKind = outcome.errorKind;
+    if (outcome.retryAfterMs !== void 0)
+      handle2.errorRetryAfterMs = outcome.retryAfterMs;
   }
   handle2.updatedAt = Date.now();
   if (outcome.seq !== void 0)
@@ -570830,7 +571093,8 @@ function settleBackgroundAgentLane(core, id, outcome) {
     ...handle2.error !== void 0 ? { error: handle2.error } : {},
     ...handle2.errorCode !== void 0 ? { errorCode: handle2.errorCode } : {},
     ...handle2.errorRetryable !== void 0 ? { errorRetryable: handle2.errorRetryable } : {},
-    ...handle2.errorKind !== void 0 ? { errorKind: handle2.errorKind } : {}
+    ...handle2.errorKind !== void 0 ? { errorKind: handle2.errorKind } : {},
+    ...handle2.errorRetryAfterMs !== void 0 ? { errorRetryAfterMs: handle2.errorRetryAfterMs } : {}
   }, ["parkedCheckpointToken", "parkClaimId", "parkedAt"]);
   return outcome.status;
 }
@@ -570957,6 +571221,7 @@ function reviveBackgroundAgentLane(core, id, access7, abort) {
   handle2.errorCode = void 0;
   handle2.errorRetryable = void 0;
   handle2.errorKind = void 0;
+  handle2.errorRetryAfterMs = void 0;
   handle2.resultIsPartial = void 0;
   handle2.stopSource = void 0;
   handle2.completionId = void 0;
@@ -571141,6 +571406,7 @@ function buildAgentPollDetails(input) {
     ...failed && input.error !== void 0 ? { error: delimitUntrusted("agent error", boundedRedactedSummary(input.error, 300)) } : {},
     ...failed && input.errorCode !== void 0 ? { errorCode: input.errorCode } : {},
     ...failed && input.errorRetryable !== void 0 ? { retryable: input.errorRetryable } : {},
+    ...failed && input.errorRetryAfterMs !== void 0 ? { retryAfterMs: input.errorRetryAfterMs } : {},
     ...input.resultIsPartial === true ? { partial_result: true } : {},
     ...input.completionId !== void 0 ? { completionId: input.completionId } : {}
   };
@@ -571158,7 +571424,7 @@ The agent is durably suspended, waiting for an approval decision. It resumes whe
       })
     };
   }
-  const kindClause = row2.status === "failed" && row2.errorKind !== void 0 && row2.errorRetryable !== void 0 ? ` (error_kind: ${row2.errorKind}, retryable: ${row2.errorRetryable})` : "";
+  const kindClause = row2.status === "failed" && row2.errorKind !== void 0 && row2.errorRetryable !== void 0 ? ` (error_kind: ${row2.errorKind}, retryable: ${row2.errorRetryable}${row2.errorRetryAfterMs !== void 0 ? `, retry_after_ms: ${row2.errorRetryAfterMs}` : ""})` : "";
   const body = `status: ${row2.status}
 ${row2.error ? `error: ${row2.error}${kindClause}
 ` : ""}${row2.finalOutput ? `--- result${row2.resultIsPartial ? " (partial \u2014 produced before the task was stopped)" : ""} ---
@@ -571174,6 +571440,7 @@ ${clipTaskOutput(row2.finalOutputFull ?? row2.finalOutput)}` : "(no result text)
       ...row2.error !== void 0 ? { error: row2.error } : {},
       ...row2.errorCode !== void 0 ? { errorCode: row2.errorCode } : {},
       ...row2.errorRetryable !== void 0 ? { errorRetryable: row2.errorRetryable } : {},
+      ...row2.errorRetryAfterMs !== void 0 ? { errorRetryAfterMs: row2.errorRetryAfterMs } : {},
       ...row2.resultIsPartial === true ? { resultIsPartial: true } : {},
       ...row2.completionId !== void 0 ? { completionId: row2.completionId } : {}
     }),
@@ -571214,7 +571481,7 @@ The agent is durably suspended, waiting for an approval decision. It resumes whe
   }
   const fullResult = handle2.result ? handle2.resultFull ?? handle2.result : void 0;
   const resultText = fullResult !== void 0 ? await spillClippedAgentResult(handle2, fullResult, clipTaskOutput(fullResult, handle2.outputFile), store, sessionId) : void 0;
-  const kindClause = handle2.status === "failed" && handle2.errorKind !== void 0 && handle2.errorRetryable !== void 0 ? ` (error_kind: ${handle2.errorKind}, retryable: ${handle2.errorRetryable})` : "";
+  const kindClause = handle2.status === "failed" && handle2.errorKind !== void 0 && handle2.errorRetryable !== void 0 ? ` (error_kind: ${handle2.errorKind}, retryable: ${handle2.errorRetryable}${handle2.errorRetryAfterMs !== void 0 ? `, retry_after_ms: ${handle2.errorRetryAfterMs}` : ""})` : "";
   const body = running ? oneShot === true ? `status: running
 This is a ONE-SHOT submission \u2014 there is no later turn for a background notification to land in, so do NOT end your turn expecting one. Actively wait instead: TaskOutput({ task_id: "${handle2.id}", block: true }). If it is still running after the wait, wait again (bounded) rather than ending the turn, or write out your best available answer now if you are near your own time budget.` : `status: running
 The agent is still working \u2014 you will be notified when it completes.` : `status: ${handle2.status}
@@ -571232,6 +571499,7 @@ ${resultText}` : "(no result text)"}`;
       ...handle2.error !== void 0 ? { error: handle2.error } : {},
       ...handle2.errorCode !== void 0 ? { errorCode: handle2.errorCode } : {},
       ...handle2.errorRetryable !== void 0 ? { errorRetryable: handle2.errorRetryable } : {},
+      ...handle2.errorRetryAfterMs !== void 0 ? { errorRetryAfterMs: handle2.errorRetryAfterMs } : {},
       ...handle2.resultIsPartial === true ? { resultIsPartial: true } : {},
       ...handle2.completionId !== void 0 ? { completionId: handle2.completionId } : {}
     }),
@@ -571405,9 +571673,9 @@ async function drainBashTailBestEffort(handle2) {
     if (drained.ok && (drained.value.stdout.length > 0 || drained.value.stderr.length > 0)) {
       if (handle2.spool !== void 0) {
         const spool = handle2.spool;
-        const cap = 2 * TASK_OUTPUT_MAX_CHARS;
-        spool.stdout = rollSpoolText(spool, spool.stdout + drained.value.stdout, cap);
-        spool.stderr = rollSpoolText(spool, spool.stderr + drained.value.stderr, cap);
+        const cap2 = 2 * TASK_OUTPUT_MAX_CHARS;
+        spool.stdout = rollSpoolText(spool, spool.stdout + drained.value.stdout, cap2);
+        spool.stderr = rollSpoolText(spool, spool.stderr + drained.value.stderr, cap2);
         const ap = await handle2.env.appendFile(handle2.outputFile, drained.value.stdout + drained.value.stderr);
         if (!ap.ok)
           spool.mirrorFailed = true;
@@ -573880,7 +574148,7 @@ var init_skills_directory = __esm({
 });
 
 // node_modules/@sema-agent/core/dist/tools/web.js
-var DEFAULT_MAX_BYTES, ERROR_BODY_CONVERT_MAX_CHARS, HTML_CONVERT_MAX_CHARS;
+var DEFAULT_MAX_BYTES, GROUNDING_RATIO_MAX_TEXT_CHARS, GROUNDING_ECHO_MAX_CHARS, ERROR_BODY_CONVERT_MAX_CHARS, HTML_CONVERT_MAX_CHARS;
 var init_web = __esm({
   "node_modules/@sema-agent/core/dist/tools/web.js"() {
     init_build3();
@@ -573891,6 +574159,8 @@ var init_web = __esm({
     init_safety();
     init_pdf2();
     DEFAULT_MAX_BYTES = 2 * 1024 * 1024;
+    GROUNDING_RATIO_MAX_TEXT_CHARS = 2e3;
+    GROUNDING_ECHO_MAX_CHARS = GROUNDING_RATIO_MAX_TEXT_CHARS + 100;
     ERROR_BODY_CONVERT_MAX_CHARS = 64 * 1024;
     HTML_CONVERT_MAX_CHARS = 256 * 1024;
   }
@@ -589795,7 +590065,7 @@ async function startWorkPollLoop({
               if (hbConfig.non_exclusive_heartbeat_interval_ms <= 0) break;
               const info = getHeartbeatInfo();
               if (!info) break;
-              const cap = capacitySignal();
+              const cap2 = capacitySignal();
               try {
                 await api2.heartbeatWork(
                   info.environmentId,
@@ -589807,7 +590077,7 @@ async function startWorkPollLoop({
                   `[bridge:repl:heartbeat] Failed: ${errorMessage(err8)}`
                 );
                 if (err8 instanceof BridgeFatalError) {
-                  cap.cleanup();
+                  cap2.cleanup();
                   logEvent("tengu_bridge_heartbeat_error", {
                     status: err8.status,
                     error_type: err8.status === 401 || err8.status === 403 ? "auth_failed" : "fatal"
@@ -589826,9 +590096,9 @@ async function startWorkPollLoop({
               hbCycles++;
               await sleep2(
                 hbConfig.non_exclusive_heartbeat_interval_ms,
-                cap.signal
+                cap2.signal
               );
-              cap.cleanup();
+              cap2.cleanup();
             }
             const exitReason = needsBackoff ? "error" : signal.aborted ? "shutdown" : !isAtCapacity() ? "capacity_changed" : pollDeadline !== null && Date.now() >= pollDeadline ? "poll_due" : "config_disabled";
             logEvent("tengu_bridge_heartbeat_mode_exited", {
@@ -589846,10 +590116,10 @@ async function startWorkPollLoop({
           }
           const sleepMs2 = atCapMs > 0 ? atCapMs : pollConfig.non_exclusive_heartbeat_interval_ms;
           if (sleepMs2 > 0) {
-            const cap = capacitySignal();
+            const cap2 = capacitySignal();
             const sleepStart = Date.now();
-            await sleep2(sleepMs2, cap.signal);
-            cap.cleanup();
+            await sleep2(sleepMs2, cap2.signal);
+            cap2.cleanup();
             const overrun = Date.now() - sleepStart - sleepMs2;
             if (overrun > 6e4) {
               logForDebugging(
@@ -616922,7 +617192,7 @@ function pickDiverseCoreFiles(sortedPaths, want) {
   const picked = [];
   const seenBasenames = /* @__PURE__ */ new Set();
   const dirTally = /* @__PURE__ */ new Map();
-  for (let cap = 1; picked.length < want && cap <= want; cap++) {
+  for (let cap2 = 1; picked.length < want && cap2 <= want; cap2++) {
     for (const p of sortedPaths) {
       if (picked.length >= want) break;
       if (!isCoreFile(p)) continue;
@@ -616930,7 +617200,7 @@ function pickDiverseCoreFiles(sortedPaths, want) {
       const base = lastSep >= 0 ? p.slice(lastSep + 1) : p;
       if (!base || seenBasenames.has(base)) continue;
       const dir = lastSep >= 0 ? p.slice(0, lastSep) : ".";
-      if ((dirTally.get(dir) ?? 0) >= cap) continue;
+      if ((dirTally.get(dir) ?? 0) >= cap2) continue;
       picked.push(base);
       seenBasenames.add(base);
       dirTally.set(dir, (dirTally.get(dir) ?? 0) + 1);
@@ -623706,7 +623976,7 @@ function createPermissionContext(tool, input, toolUseContext, assistantMessage,
         if (tool.name !== BASH_TOOL_NAME3 || !pendingClassifierCheck) {
           return null;
         }
-        const classifierDecision = await awaitClassifierAutoApproval2(
+        const classifierDecision = await awaitClassifierAutoApproval3(
           pendingClassifierCheck,
           toolUseContext.abortController.signal,
           toolUseContext.options.isNonInteractiveSession
@@ -624151,7 +624421,7 @@ function handleInteractivePermission(params, resolve57) {
   }
   if (false) {
     setClassifierChecking2(ctx.toolUseID);
-    void executeAsyncClassifierCheck(
+    void executeAsyncClassifierCheck2(
       result.pendingClassifierCheck,
       ctx.toolUseContext.abortController.signal,
       ctx.toolUseContext.options.isNonInteractiveSession,
@@ -624427,14 +624697,14 @@ function useCanUseTool(setToolUseConfirmQueue, setToolPermissionContext) {
               return;
             }
             if (false) {
-              const speculativePromise = peekSpeculativeClassifierCheck(input.command);
+              const speculativePromise = peekSpeculativeClassifierCheck2(input.command);
               if (speculativePromise) {
                 const raceResult = await Promise.race([speculativePromise.then(_temp), new Promise(_temp2)]);
                 if (ctx.resolveIfAborted(resolve57)) {
                   return;
                 }
                 if (raceResult.type === "result" && raceResult.result.matches && raceResult.result.confidence === "high" && false) {
-                  consumeSpeculativeClassifierCheck(input.command);
+                  consumeSpeculativeClassifierCheck2(input.command);
                   const matchedRule = raceResult.result.matchedDescription ?? void 0;
                   if (matchedRule) {
                     setClassifierApproval3(toolUseID, matchedRule);
@@ -636071,16 +636341,16 @@ function computeWheelStep(state4, dir, now2) {
     }
     if (state4.wheelMode) {
       const m2 = Math.pow(0.5, gap2 / WHEEL_DECAY_HALFLIFE_MS);
-      const cap = Math.max(WHEEL_MODE_CAP, state4.base * 2);
+      const cap2 = Math.max(WHEEL_MODE_CAP, state4.base * 2);
       const next = 1 + (state4.mult - 1) * m2 + WHEEL_MODE_STEP * m2;
-      state4.mult = Math.min(cap, next, state4.mult + WHEEL_MODE_RAMP);
+      state4.mult = Math.min(cap2, next, state4.mult + WHEEL_MODE_RAMP);
       return Math.floor(state4.mult);
     }
     if (gap2 > WHEEL_ACCEL_WINDOW_MS) {
       state4.mult = state4.base;
     } else {
-      const cap = Math.max(WHEEL_ACCEL_MAX, state4.base * 2);
-      state4.mult = Math.min(cap, state4.mult + WHEEL_ACCEL_STEP);
+      const cap2 = Math.max(WHEEL_ACCEL_MAX, state4.base * 2);
+      state4.mult = Math.min(cap2, state4.mult + WHEEL_ACCEL_STEP);
     }
     return Math.floor(state4.mult);
   }
@@ -636094,8 +636364,8 @@ function computeWheelStep(state4, dir, now2) {
     state4.frac = 0;
   } else {
     const m2 = Math.pow(0.5, gap / WHEEL_DECAY_HALFLIFE_MS);
-    const cap = gap >= WHEEL_DECAY_GAP_MS ? WHEEL_DECAY_CAP_SLOW : WHEEL_DECAY_CAP_FAST;
-    state4.mult = Math.min(cap, 1 + (state4.mult - 1) * m2 + WHEEL_DECAY_STEP * m2);
+    const cap2 = gap >= WHEEL_DECAY_GAP_MS ? WHEEL_DECAY_CAP_SLOW : WHEEL_DECAY_CAP_FAST;
+    state4.mult = Math.min(cap2, 1 + (state4.mult - 1) * m2 + WHEEL_DECAY_STEP * m2);
   }
   const total = state4.mult + state4.frac;
   const rows2 = Math.floor(total);
@@ -644614,9 +644884,9 @@ be shared and iterated on outside the terminal:
 Skip this step if the review was invoked only to feed another tool (e.g. a
 workflow step whose caller handles its own output).
 `;
-    outputAsJson = (cap) => `## Output
+    outputAsJson = (cap2) => `## Output
 
-Return findings as a JSON array of at most ${cap} objects:
+Return findings as a JSON array of at most ${cap2} objects:
 
 \`\`\`json
 [
@@ -644629,19 +644899,19 @@ Return findings as a JSON array of at most ${cap} objects:
 ]
 \`\`\`
 
-Ranked most-severe first. If more than ${cap} survive, keep the ${cap} most
+Ranked most-severe first. If more than ${cap2} survive, keep the ${cap2} most
 severe. If nothing survives verification, return \`[]\`.
 `;
-    outputViaReportFindings = (cap) => `## Output
+    outputViaReportFindings = (cap2) => `## Output
 
 Call the ${REPORT_FINDINGS_TOOL_NAME} tool once to report this review's results
-with \`{level, findings}\`. \`findings\` is at most ${cap} entries ranked
+with \`{level, findings}\`. \`findings\` is at most ${cap2} entries ranked
 most-severe first; each entry has \`file\`, \`line\`, \`summary\`,
 \`failure_scenario\`, and \`category\` \u2014 a short kebab-case slug for the angle
 that produced it (\`correctness\`, \`simplification\`, \`efficiency\`,
 \`reuse\`, \`altitude\`, \`conventions\`, or a more specific slug like
 \`test-coverage\` when one fits better) \u2014 plus \`verdict\` when a verify pass
-produced one. If more than ${cap} survive, keep the ${cap} most severe. If
+produced one. If more than ${cap2} survive, keep the ${cap2} most severe. If
 nothing survives verification, call it with an empty array. Do not also print
 the findings as text.
 `;
@@ -644809,14 +645079,14 @@ Output at most **8 findings**, most-severe first, one line each:
 \`path/to/file.ext:123 \u2014 what's wrong and the concrete failure\`.
 Target at least min(files_changed, 4) findings \u2014 if you see fewer, widen to other hunks in the same diff before stopping. If fewer than 4 genuine findings exist, emit what you have.
 `;
-    withRecallFloor = (output) => (cap) => output(cap).replace(
+    withRecallFloor = (output) => (cap2) => output(cap2).replace(
       "## Output\n",
       `## Output
 
-Target **at least ${Math.floor(cap / 2)} findings**. If fewer genuine findings exist, emit what you have \u2014 do not invent to hit the floor.
+Target **at least ${Math.floor(cap2 / 2)} findings**. If fewer genuine findings exist, emit what you have \u2014 do not invent to hit the floor.
 `
     ).replace(/nothing survives verification/g, "nothing survives");
-    o48Cell = (header, stance, cap) => (output) => `\`${header}\`
+    o48Cell = (header, stance, cap2) => (output) => `\`${header}\`
 
 ${stance}
 
@@ -644841,7 +645111,7 @@ silently drop half-believed candidates are the dominant cause of misses.
 
 Pool all candidates. Dedup near-duplicates only (same defect, same location, same reason \u2192 keep one). Do NOT run verifiers; do NOT re-judge. Sort by severity.
 
-${withRecallFloor(output)(cap)}`;
+${withRecallFloor(output)(cap2)}`;
     cellO48Medium = o48Cell(
       "medium effort \u2192 8 inline angles \u2192 dedup (no verify) \u2192 \u22648 findings",
       `You are reviewing for **correctness bugs**: surface every plausible bug. At this
@@ -651126,6 +651396,141 @@ var init_classifierVerdictWire2 = __esm({
   }
 });
 
+// build-src/src/sema/engineGateSyncAllow.ts
+function cap() {
+  if (budgetCap !== null) return budgetCap;
+  const raw2 = process.env.SEMA_GATE_SYNC_ALLOW_BUDGET;
+  const parsed = raw2 !== void 0 && raw2 !== "" ? Number(raw2) : Number.NaN;
+  budgetCap = Number.isFinite(parsed) && parsed >= 0 ? Math.floor(parsed) : DEFAULT_BUDGET;
+  return budgetCap;
+}
+function readPermissionContext() {
+  try {
+    const state4 = getAppStateStoreRef()?.getState?.();
+    return state4?.toolPermissionContext ?? null;
+  } catch {
+    return null;
+  }
+}
+function canonicalToolName(name) {
+  const n2 = name.replace(/[\s_-]+/g, "").toLowerCase();
+  if (n2 === "bash") return { canonical: "Bash", family: "bash" };
+  if (n2 === "write" || n2 === "filewrite") return { canonical: "Write", family: "fsWrite", pathKey: "file_path" };
+  if (n2 === "edit" || n2 === "fileedit") return { canonical: "Edit", family: "fsWrite", pathKey: "file_path" };
+  if (n2 === "multiedit") return { canonical: "MultiEdit", family: "fsWrite", pathKey: "file_path" };
+  if (n2 === "notebookedit")
+    return { canonical: "NotebookEdit", family: "fsWrite", pathKey: "notebook_path" };
+  return { canonical: name, family: "other" };
+}
+function permissionsModule() {
+  return init_permissions2(), __toCommonJS(permissions_exports2);
+}
+function filesystemModule() {
+  return init_filesystem(), __toCommonJS(filesystem_exports);
+}
+function bashPermissionsModule() {
+  return init_bashPermissions(), __toCommonJS(bashPermissions_exports);
+}
+function bashVerdict(ctx, args) {
+  const command8 = args.command;
+  if (typeof command8 !== "string" || command8.trim() === "") {
+    return { allow: false, reason: "bash gate carries no command string" };
+  }
+  const result = bashPermissionsModule().bashToolCheckPermission(
+    { command: command8 },
+    ctx
+  );
+  if (result.behavior !== "allow") return { allow: false, reason: `bash rules say ${String(result.behavior)}` };
+  if (result.decisionReason?.type !== "rule") {
+    return { allow: false, reason: `bash allow came from ${String(result.decisionReason?.type)}, not a remembered rule` };
+  }
+  return { allow: true, reason: "remembered Bash allow rule" };
+}
+function fsWriteVerdict(ctx, canonical2, pathKey2, args) {
+  const perms = permissionsModule();
+  const tool = { name: canonical2, mcpInfo: void 0 };
+  if (perms.getDenyRuleForTool(ctx, tool) !== null) return { allow: false, reason: "tool-level deny rule" };
+  if (perms.getAskRuleForTool(ctx, tool) !== null) return { allow: false, reason: "tool-level ask rule" };
+  const path28 = args[pathKey2];
+  if (typeof path28 === "string" && path28 !== "") {
+    const fs15 = filesystemModule();
+    if (fs15.matchingRuleForInput(path28, ctx, "edit", "deny") !== null) return { allow: false, reason: "path deny rule" };
+    if (fs15.matchingRuleForInput(path28, ctx, "edit", "ask") !== null) return { allow: false, reason: "path ask rule" };
+    if (fs15.matchingRuleForInput(path28, ctx, "edit", "allow") !== null) {
+      return { allow: true, reason: "remembered path allow rule" };
+    }
+  }
+  if (perms.toolAlwaysAllowedRule(ctx, tool) !== null) {
+    return { allow: true, reason: "remembered whole-tool allow rule" };
+  }
+  return { allow: false, reason: "no remembered allow rule for this write" };
+}
+function genericVerdict(ctx, canonical2) {
+  const perms = permissionsModule();
+  const tool = { name: canonical2, mcpInfo: void 0 };
+  if (perms.getDenyRuleForTool(ctx, tool) !== null) return { allow: false, reason: "tool-level deny rule" };
+  if (perms.getAskRuleForTool(ctx, tool) !== null) return { allow: false, reason: "tool-level ask rule" };
+  if (perms.toolAlwaysAllowedRule(ctx, tool) !== null) {
+    return { allow: true, reason: "remembered whole-tool allow rule" };
+  }
+  return { allow: false, reason: "no remembered allow rule for this tool" };
+}
+function _evaluateWithContextForTest(ctx, req) {
+  if (ctx === null) return { allow: false, reason: "no toolPermissionContext on this lane" };
+  if (!SYNC_ALLOW_MODES.has(ctx.mode)) return { allow: false, reason: `mode ${ctx.mode} never auto-allows` };
+  if (typeof req.args !== "object" || req.args === null) {
+    return { allow: false, reason: "gate carries no tool input (argsOmitted?)" };
+  }
+  const args = req.args;
+  const { canonical: canonical2, family, pathKey: pathKey2 } = canonicalToolName(req.toolName);
+  try {
+    if (family === "bash") return bashVerdict(ctx, args);
+    if (family === "fsWrite") return fsWriteVerdict(ctx, canonical2, pathKey2 ?? "file_path", args);
+    return genericVerdict(ctx, canonical2);
+  } catch (e) {
+    logForDebugging(`engineGateSyncAllow: rule evaluation threw for "${req.toolName}": ${String(e)}`);
+    return { allow: false, reason: "rule evaluation failed" };
+  }
+}
+function evaluateEngineGateSyncAllow(req) {
+  const ctx = readPermissionContext();
+  const verdict = _evaluateWithContextForTest(ctx, req);
+  if (!verdict.allow) {
+    let allowRuleCount = -1;
+    try {
+      if (ctx) allowRuleCount = permissionsModule().getAllowRules(ctx).length;
+    } catch {
+    }
+    logForDebugging(
+      `engineGateSyncAllow: no sync allow for "${req.toolName}" (${verdict.reason}; mode=${ctx?.mode ?? "none"}, allowRules=${allowRuleCount})`
+    );
+    return verdict;
+  }
+  if (budgetUsed >= cap()) {
+    if (!budgetExhaustedLogged) {
+      budgetExhaustedLogged = true;
+      logForDebugging(
+        `engineGateSyncAllow: programmatic-allow budget exhausted (${budgetUsed}/${cap()}) \u2014 every further gate goes back to the approval card`
+      );
+    }
+    return { allow: false, reason: "programmatic-allow budget exhausted" };
+  }
+  budgetUsed++;
+  return verdict;
+}
+var SYNC_ALLOW_MODES, DEFAULT_BUDGET, budgetUsed, budgetCap, budgetExhaustedLogged;
+var init_engineGateSyncAllow = __esm({
+  "build-src/src/sema/engineGateSyncAllow.ts"() {
+    init_appStateRef();
+    init_debug();
+    SYNC_ALLOW_MODES = /* @__PURE__ */ new Set(["default", "acceptEdits", "auto"]);
+    DEFAULT_BUDGET = 100;
+    budgetUsed = 0;
+    budgetCap = null;
+    budgetExhaustedLogged = false;
+  }
+});
+
 // build-src/src/sema/liveToolApprovalWire.ts
 function toolForName(name) {
   const n2 = name.replace(/[\s_-]+/g, "").toLowerCase();
@@ -651172,6 +651577,13 @@ function shellApprovalCardPort(req) {
     );
     return Promise.resolve({ kind: "deny" });
   }
+  const syncAllow = evaluateEngineGateSyncAllow({ toolName: req.toolName, args: req.args });
+  if (syncAllow.allow) {
+    logForDebugging(
+      `liveToolApprovalWire: gate for "${req.toolName}" auto-allowed synchronously (${syncAllow.reason}) \u2014 no card, no park`
+    );
+    return Promise.resolve({ kind: "allow", allowSession: false });
+  }
   const tool = toolForName(req.toolName);
   if (!tool) {
     return Promise.resolve({ kind: "failed", reason: `no shell tool card for gate tool "${req.toolName}"` });
@@ -651260,6 +651672,7 @@ var init_liveToolApprovalWire = __esm({
     init_PermissionUpdate();
     init_appStateRef();
     init_debug();
+    init_engineGateSyncAllow();
     init_dist();
     asWireTool = (t2) => t2;
     installShellApprovalCardPort();
@@ -651669,6 +652082,12 @@ function toLiveRequest(req, capturedSessionId) {
     } catch {
     }
   }
+  if (out6.additionalReadDirectories === void 0) {
+    try {
+      out6.additionalReadDirectories = [getClaudeConfigHomeDir()];
+    } catch {
+    }
+  }
   if (out6.forwardSubagentEvents === void 0) {
     ;
     out6.forwardSubagentEvents = true;
@@ -651988,6 +652407,7 @@ var init_liveClient = __esm({
     init_sessionStorage();
     init_turnCommitSignal();
     init_appStateRef();
+    init_envUtils();
     init_dist();
     init_agentsWire();
     init_detachWire2();
@@ -652096,9 +652516,9 @@ __export(printStreamJsonContract_exports, {
 import { randomUUID as randomUUID55 } from "crypto";
 function terminalReasonForResult(msg) {
   const code2 = msg.errorCode;
-  if (code2 === "limits.max_turns_exceeded") return "max_turns";
-  if (code2 === "limits.max_cost_exceeded") return "budget_exhausted";
-  if (code2 === "output.invalid") return "structured_output_retry_exhausted";
+  if (code2 === LIMITS_MAX_TURNS_EXCEEDED) return "max_turns";
+  if (code2 === LIMITS_MAX_COST_EXCEEDED) return "budget_exhausted";
+  if (code2 === OUTPUT_INVALID) return "structured_output_retry_exhausted";
   if (msg.is_error !== true && msg.subtype === "success") {
     return "completed";
   }
@@ -652176,6 +652596,7 @@ async function buildPrintInitMessage(params, sessionId) {
 var PrintStreamProjector;
 var init_printStreamJsonContract = __esm({
   "build-src/src/sema/printStreamJsonContract.ts"() {
+    init_dist();
     init_modelContextResolver();
     PrintStreamProjector = class {
       includePartial;
@@ -665381,18 +665802,18 @@ async function runBridgeLoop(config4, environmentId, environmentSecret, api2, sp
             while (!loopSignal.aborted && activeSessions.size >= config4.maxSessions && (pollDeadline === null || Date.now() < pollDeadline)) {
               const hbConfig = getPollIntervalConfig();
               if (hbConfig.non_exclusive_heartbeat_interval_ms <= 0) break;
-              const cap = capacityWake.signal();
+              const cap2 = capacityWake.signal();
               hbResult = await heartbeatActiveWorkItems();
               if (hbResult === "auth_failed" || hbResult === "fatal") {
-                cap.cleanup();
+                cap2.cleanup();
                 break;
               }
               hbCycles++;
               await sleep2(
                 hbConfig.non_exclusive_heartbeat_interval_ms,
-                cap.signal
+                cap2.signal
               );
-              cap.cleanup();
+              cap2.cleanup();
             }
             const exitReason = hbResult === "auth_failed" || hbResult === "fatal" ? hbResult : loopSignal.aborted ? "shutdown" : activeSessions.size < config4.maxSessions ? "capacity_changed" : pollDeadline !== null && Date.now() >= pollDeadline ? "poll_due" : "config_disabled";
             logEvent("tengu_bridge_heartbeat_mode_exited", {
@@ -665406,17 +665827,17 @@ async function runBridgeLoop(config4, environmentId, environmentSecret, api2, sp
               );
             }
             if (hbResult === "auth_failed" || hbResult === "fatal") {
-              const cap = capacityWake.signal();
+              const cap2 = capacityWake.signal();
               await sleep2(
                 atCapMs > 0 ? atCapMs : pollConfig.non_exclusive_heartbeat_interval_ms,
-                cap.signal
+                cap2.signal
               );
-              cap.cleanup();
+              cap2.cleanup();
             }
           } else if (atCapMs > 0) {
-            const cap = capacityWake.signal();
-            await sleep2(atCapMs, cap.signal);
-            cap.cleanup();
+            const cap2 = capacityWake.signal();
+            await sleep2(atCapMs, cap2.signal);
+            cap2.cleanup();
           }
         } else {
           const interval = activeSessions.size > 0 ? pollConfig.multisession_poll_interval_ms_partial_capacity : pollConfig.multisession_poll_interval_ms_not_at_capacity;
@@ -665430,20 +665851,20 @@ async function runBridgeLoop(config4, environmentId, environmentSecret, api2, sp
           `[bridge:work] Skipping already-completed workId=${work.id}`
         );
         if (atCapacityBeforeSwitch) {
-          const cap = capacityWake.signal();
+          const cap2 = capacityWake.signal();
           if (pollConfig.non_exclusive_heartbeat_interval_ms > 0) {
             await heartbeatActiveWorkItems();
             await sleep2(
               pollConfig.non_exclusive_heartbeat_interval_ms,
-              cap.signal
+              cap2.signal
             );
           } else if (pollConfig.multisession_poll_interval_ms_at_capacity > 0) {
             await sleep2(
               pollConfig.multisession_poll_interval_ms_at_capacity,
-              cap.signal
+              cap2.signal
             );
           }
-          cap.cleanup();
+          cap2.cleanup();
         } else {
           await sleep2(1e3, loopSignal);
         }
@@ -665469,20 +665890,20 @@ async function runBridgeLoop(config4, environmentId, environmentSecret, api2, sp
           )
         );
         if (atCapacityBeforeSwitch) {
-          const cap = capacityWake.signal();
+          const cap2 = capacityWake.signal();
           if (pollConfig.non_exclusive_heartbeat_interval_ms > 0) {
             await heartbeatActiveWorkItems();
             await sleep2(
               pollConfig.non_exclusive_heartbeat_interval_ms,
-              cap.signal
+              cap2.signal
             );
           } else if (pollConfig.multisession_poll_interval_ms_at_capacity > 0) {
             await sleep2(
               pollConfig.multisession_poll_interval_ms_at_capacity,
-              cap.signal
+              cap2.signal
             );
           }
-          cap.cleanup();
+          cap2.cleanup();
         }
         continue;
       }
@@ -665777,20 +666198,20 @@ async function runBridgeLoop(config4, environmentId, environmentSecret, api2, sp
           break;
       }
       if (atCapacityBeforeSwitch) {
-        const cap = capacityWake.signal();
+        const cap2 = capacityWake.signal();
         if (pollConfig.non_exclusive_heartbeat_interval_ms > 0) {
           await heartbeatActiveWorkItems();
           await sleep2(
             pollConfig.non_exclusive_heartbeat_interval_ms,
-            cap.signal
+            cap2.signal
           );
         } else if (pollConfig.multisession_poll_interval_ms_at_capacity > 0) {
           await sleep2(
             pollConfig.multisession_poll_interval_ms_at_capacity,
-            cap.signal
+            cap2.signal
           );
         }
-        cap.cleanup();
+        cap2.cleanup();
       }
     } catch (err8) {
       if (loopSignal.aborted) {
@@ -670774,7 +671195,11 @@ function HubHeader({
       ] })
     ] }),
     /* @__PURE__ */ (0, import_jsx_runtime492.jsx)(ThemedText, { dimColor: true, children: subtitle }),
-    intro ? /* @__PURE__ */ (0, import_jsx_runtime492.jsx)(ThemedBox_default, { marginTop: 1, width: 96, children: /* @__PURE__ */ (0, import_jsx_runtime492.jsx)(ThemedText, { dimColor: true, children: intro }) }) : null
+    intro ? (
+      // BUG-0006:固定 width=96 在 80×24 终端下每个换行行都被硬裁掉 81-96 列丢字
+      // (裁点恰在 ~80 字节,截断处接空行的签名即由此来);maxWidth 让盒随终端收缩换行。
+      /* @__PURE__ */ (0, import_jsx_runtime492.jsx)(ThemedBox_default, { marginTop: 1, maxWidth: 96, children: /* @__PURE__ */ (0, import_jsx_runtime492.jsx)(ThemedText, { dimColor: true, children: intro }) })
+    ) : null
   ] });
 }
 function FormField({
@@ -671242,11 +671667,11 @@ function modelFormScreen(opts) {
       // 新增流程压根不显示,用户会误以为 Label 就是那个"身份"字段,而它的旧文案「display name in
       // the Hub」没说清楚留空会怎样。实际行为(modelChannels.ts:717):留空 → provider 分组名回落
       // 成通用的 channel 名(如"Custom provider"),不是回落到 Model ID。文案说清楚这一后果。
-      { label: `Label: ${draft.label || "(optional)"}`, value: "label", description: `edit \xB7 override how this entry's provider groups in the Hub (blank \u2192 generic "Custom provider")`, dimDescription: true },
-      { label: `Endpoint: ${draft.baseUrl || "(required \u2014 edit)"}`, value: "url", description: "edit", dimDescription: true },
+      { label: `Label: ${clampShown(draft.label) || "(optional)"}`, value: "label", description: `edit \xB7 override how this entry's provider groups in the Hub (blank \u2192 generic "Custom provider")`, dimDescription: true },
+      { label: `Endpoint: ${clampShown(draft.baseUrl) || "(required \u2014 edit)"}`, value: "url", description: "edit", dimDescription: true },
       { label: `API shape: ${draft.api}`, value: "api", description: "edit", dimDescription: true },
       { label: `API key: ${draft.apiKey ? "\u2022\u2022\u2022\u2022" + draft.apiKey.slice(-4) : "(not set)"}`, value: "key", description: "edit", dimDescription: true },
-      { label: `Model ID: ${draft.modelId || "(required \u2014 edit)"}`, value: "id", description: "edit", dimDescription: true },
+      { label: `Model ID: ${clampShown(draft.modelId) || "(required \u2014 edit)"}`, value: "id", description: "edit", dimDescription: true },
       { label: `Context window: ${fmt(draft.contextWindow)}`, value: "ctx", description: "pick 64K/128K/200K/256K/512K/1M or custom", dimDescription: true },
       {
         label: `Max output tokens: ${fmt(draft.maxTokens)}`,
@@ -671257,10 +671682,13 @@ function modelFormScreen(opts) {
     ];
     return /* @__PURE__ */ (0, import_jsx_runtime494.jsxs)(ThemedBox_default, { flexDirection: "column", paddingLeft: 1, children: [
       /* @__PURE__ */ (0, import_jsx_runtime494.jsx)(HubHeader, { subtitle: opts.title, intro: opts.intro }),
-      opts.hint ? /* @__PURE__ */ (0, import_jsx_runtime494.jsx)(ThemedBox_default, { marginBottom: 1, width: 96, children: /* @__PURE__ */ (0, import_jsx_runtime494.jsx)(ThemedText, { color: "yellow", children: opts.hint }) }) : null,
+      opts.hint ? (
+        // BUG-0006:固定 width 在 80 列终端下溢出被硬裁丢字;maxWidth 让盒随终端收缩换行
+        /* @__PURE__ */ (0, import_jsx_runtime494.jsx)(ThemedBox_default, { marginBottom: 1, maxWidth: 96, children: /* @__PURE__ */ (0, import_jsx_runtime494.jsx)(ThemedText, { color: "yellow", children: opts.hint }) })
+      ) : null,
       /* @__PURE__ */ (0, import_jsx_runtime494.jsx)(ThemedBox_default, { flexDirection: "column", paddingLeft: 1, marginBottom: 1, children: /* @__PURE__ */ (0, import_jsx_runtime494.jsxs)(ThemedText, { children: [
         /* @__PURE__ */ (0, import_jsx_runtime494.jsx)(ThemedText, { dimColor: true, children: "Endpoint  " }),
-        /* @__PURE__ */ (0, import_jsx_runtime494.jsx)(ThemedText, { children: draft.baseUrl || "(not set)" }),
+        /* @__PURE__ */ (0, import_jsx_runtime494.jsx)(ThemedText, { children: clampShown(draft.baseUrl) || "(not set)" }),
         /* @__PURE__ */ (0, import_jsx_runtime494.jsxs)(ThemedText, { dimColor: true, children: [
           "  ",
           draft.api
@@ -671882,7 +672310,7 @@ function ModelHubBody({
         slimHeader: onboard?.slimHeader
       }
     ),
-    onboard ? /* @__PURE__ */ (0, import_jsx_runtime494.jsx)(ThemedBox_default, { marginBottom: 1, width: 100, children: /* @__PURE__ */ (0, import_jsx_runtime494.jsx)(ThemedText, { dimColor: true, children: onboard.blurb }) }) : null,
+    onboard ? /* @__PURE__ */ (0, import_jsx_runtime494.jsx)(ThemedBox_default, { marginBottom: 1, maxWidth: 100, children: /* @__PURE__ */ (0, import_jsx_runtime494.jsx)(ThemedText, { dimColor: true, children: onboard.blurb }) }) : null,
     message ? /* @__PURE__ */ (0, import_jsx_runtime494.jsx)(ThemedBox_default, { marginBottom: 1, children: /* @__PURE__ */ (0, import_jsx_runtime494.jsx)(ThemedText, { color: "yellow", children: message }) }) : null,
     confirmDelete ? /* @__PURE__ */ (0, import_jsx_runtime494.jsxs)(ThemedBox_default, { marginBottom: 1, flexDirection: "column", children: [
       /* @__PURE__ */ (0, import_jsx_runtime494.jsxs)(ThemedText, { color: "red", children: [
@@ -671965,7 +672393,7 @@ function ModelHubBody({
     ] }) })
   ] });
 }
-var React184, import_jsx_runtime494, hostOf3, SUPPORTED_CHANNELS, channelModelCount;
+var React184, import_jsx_runtime494, clampShown, hostOf3, SUPPORTED_CHANNELS, channelModelCount;
 var init_ModelHub = __esm({
   "build-src/src/sema/config/ModelHub.tsx"() {
     React184 = __toESM(require_react(), 1);
@@ -671984,11 +672412,12 @@ var init_ModelHub = __esm({
     init_catalogScreens();
     init_providerLinks();
     import_jsx_runtime494 = __toESM(require_jsx_runtime(), 1);
+    clampShown = (v2, max2 = 64) => v2 && v2.length > max2 ? `${v2.slice(0, 30)}\u2026${v2.slice(-30)}` : v2 ?? "";
     hostOf3 = (u) => {
       try {
         return new URL(u).host;
       } catch {
-        return u;
+        return clampShown(u);
       }
     };
     SUPPORTED_CHANNELS = ["claude-code", "openclaw", "hermes"];
@@ -672118,7 +672547,10 @@ function ManualAddBody({
         intro: "Point sema at any MCP server by hand. It's saved to your user scope (all projects) when you confirm."
       }
     ),
-    error51 ? /* @__PURE__ */ (0, import_jsx_runtime495.jsx)(ThemedBox_default, { marginBottom: 1, width: 96, children: /* @__PURE__ */ (0, import_jsx_runtime495.jsx)(ThemedText, { color: "red", children: error51 }) }) : null,
+    error51 ? (
+      // BUG-0006 同族:固定 width 窄终端溢出硬裁,maxWidth 随终端收缩换行
+      /* @__PURE__ */ (0, import_jsx_runtime495.jsx)(ThemedBox_default, { marginBottom: 1, maxWidth: 96, children: /* @__PURE__ */ (0, import_jsx_runtime495.jsx)(ThemedText, { color: "red", children: error51 }) })
+    ) : null,
     /* @__PURE__ */ (0, import_jsx_runtime495.jsx)(
       Select,
       {
@@ -672326,7 +672758,7 @@ function McpHubBody({
         slimHeader: onboard?.slimHeader
       }
     ),
-    onboard ? /* @__PURE__ */ (0, import_jsx_runtime495.jsx)(ThemedBox_default, { marginBottom: 1, width: 100, children: /* @__PURE__ */ (0, import_jsx_runtime495.jsx)(ThemedText, { dimColor: true, children: onboard.blurb }) }) : null,
+    onboard ? /* @__PURE__ */ (0, import_jsx_runtime495.jsx)(ThemedBox_default, { marginBottom: 1, maxWidth: 100, children: /* @__PURE__ */ (0, import_jsx_runtime495.jsx)(ThemedText, { dimColor: true, children: onboard.blurb }) }) : null,
     message ? /* @__PURE__ */ (0, import_jsx_runtime495.jsx)(ThemedBox_default, { marginBottom: 1, children: /* @__PURE__ */ (0, import_jsx_runtime495.jsx)(ThemedText, { color: "yellow", children: message }) }) : null,
     confirmDelete ? /* @__PURE__ */ (0, import_jsx_runtime495.jsxs)(ThemedBox_default, { marginBottom: 1, flexDirection: "column", children: [
       /* @__PURE__ */ (0, import_jsx_runtime495.jsxs)(ThemedText, { color: "red", children: [
@@ -672773,8 +673205,8 @@ function PluginsHubBody({
         slimHeader: onboard?.slimHeader
       }
     ),
-    onboard ? /* @__PURE__ */ (0, import_jsx_runtime497.jsx)(ThemedBox_default, { marginBottom: 1, width: 100, children: /* @__PURE__ */ (0, import_jsx_runtime497.jsx)(ThemedText, { dimColor: true, children: onboard.blurb }) }) : null,
-    message ? /* @__PURE__ */ (0, import_jsx_runtime497.jsx)(ThemedBox_default, { marginBottom: 1, width: 100, children: /* @__PURE__ */ (0, import_jsx_runtime497.jsx)(ThemedText, { color: "yellow", children: message }) }) : null,
+    onboard ? /* @__PURE__ */ (0, import_jsx_runtime497.jsx)(ThemedBox_default, { marginBottom: 1, maxWidth: 100, children: /* @__PURE__ */ (0, import_jsx_runtime497.jsx)(ThemedText, { dimColor: true, children: onboard.blurb }) }) : null,
+    message ? /* @__PURE__ */ (0, import_jsx_runtime497.jsx)(ThemedBox_default, { marginBottom: 1, maxWidth: 100, children: /* @__PURE__ */ (0, import_jsx_runtime497.jsx)(ThemedText, { color: "yellow", children: message }) }) : null,
     confirmDelete ? /* @__PURE__ */ (0, import_jsx_runtime497.jsxs)(ThemedBox_default, { marginBottom: 1, flexDirection: "column", children: [
       /* @__PURE__ */ (0, import_jsx_runtime497.jsxs)(ThemedText, { color: "red", children: [
         "Uninstall ",
@@ -672986,7 +673418,7 @@ function TiersHubBody({
   }
   return /* @__PURE__ */ (0, import_jsx_runtime498.jsxs)(ThemedBox_default, { flexDirection: "column", paddingLeft: 1, children: [
     /* @__PURE__ */ (0, import_jsx_runtime498.jsx)(TiersHeader, { subtitle: "Model tiers \u2014 named tier bindings, switch as a set" }),
-    message ? /* @__PURE__ */ (0, import_jsx_runtime498.jsx)(ThemedBox_default, { marginBottom: 1, width: 100, children: /* @__PURE__ */ (0, import_jsx_runtime498.jsx)(ThemedText, { color: "yellow", children: message }) }) : null,
+    message ? /* @__PURE__ */ (0, import_jsx_runtime498.jsx)(ThemedBox_default, { marginBottom: 1, maxWidth: 100, children: /* @__PURE__ */ (0, import_jsx_runtime498.jsx)(ThemedText, { color: "yellow", children: message }) }) : null,
     confirmDelete ? /* @__PURE__ */ (0, import_jsx_runtime498.jsxs)(ThemedBox_default, { marginBottom: 1, flexDirection: "column", children: [
       /* @__PURE__ */ (0, import_jsx_runtime498.jsxs)(ThemedText, { color: "red", children: [
         'Delete group "',
@@ -673188,7 +673620,7 @@ function GroupEditBody({
         slimHeader: Boolean(onboard)
       }
     ),
-    onboard ? /* @__PURE__ */ (0, import_jsx_runtime498.jsx)(ThemedBox_default, { marginBottom: 1, width: 100, children: /* @__PURE__ */ (0, import_jsx_runtime498.jsx)(ThemedText, { dimColor: true, children: onboard.blurb }) }) : null,
+    onboard ? /* @__PURE__ */ (0, import_jsx_runtime498.jsx)(ThemedBox_default, { marginBottom: 1, maxWidth: 100, children: /* @__PURE__ */ (0, import_jsx_runtime498.jsx)(ThemedText, { dimColor: true, children: onboard.blurb }) }) : null,
     /* @__PURE__ */ (0, import_jsx_runtime498.jsx)(
       Select,
       {
@@ -673436,7 +673868,7 @@ function skillDetailScreen(skill) {
           formatTokens(skill.tokens),
           " tok"
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime499.jsx)(ThemedBox_default, { marginTop: 1, width: 96, children: /* @__PURE__ */ (0, import_jsx_runtime499.jsx)(ThemedText, { children: skill.description ?? /* @__PURE__ */ (0, import_jsx_runtime499.jsx)(ThemedText, { dimColor: true, children: "(no description in frontmatter)" }) }) })
+        /* @__PURE__ */ (0, import_jsx_runtime499.jsx)(ThemedBox_default, { marginTop: 1, maxWidth: 96, children: /* @__PURE__ */ (0, import_jsx_runtime499.jsx)(ThemedText, { children: skill.description ?? /* @__PURE__ */ (0, import_jsx_runtime499.jsx)(ThemedText, { dimColor: true, children: "(no description in frontmatter)" }) }) })
       ] }),
       /* @__PURE__ */ (0, import_jsx_runtime499.jsx)(
         Select,
@@ -673586,7 +674018,7 @@ function SkillsHubBody({
         slimHeader: onboard?.slimHeader
       }
     ),
-    onboard ? /* @__PURE__ */ (0, import_jsx_runtime499.jsx)(ThemedBox_default, { marginBottom: 1, width: 100, children: /* @__PURE__ */ (0, import_jsx_runtime499.jsx)(ThemedText, { dimColor: true, children: onboard.blurb }) }) : null,
+    onboard ? /* @__PURE__ */ (0, import_jsx_runtime499.jsx)(ThemedBox_default, { marginBottom: 1, maxWidth: 100, children: /* @__PURE__ */ (0, import_jsx_runtime499.jsx)(ThemedText, { dimColor: true, children: onboard.blurb }) }) : null,
     message ? /* @__PURE__ */ (0, import_jsx_runtime499.jsx)(ThemedBox_default, { marginBottom: 1, children: /* @__PURE__ */ (0, import_jsx_runtime499.jsx)(ThemedText, { color: "yellow", children: message }) }) : null,
     confirmDelete ? /* @__PURE__ */ (0, import_jsx_runtime499.jsxs)(ThemedBox_default, { marginBottom: 1, flexDirection: "column", children: [
       /* @__PURE__ */ (0, import_jsx_runtime499.jsxs)(ThemedText, { color: "red", children: [
@@ -675243,7 +675675,7 @@ async function run() {
       throw new InvalidArgumentError(`It must be one of: ${allowed.join(", ")}`);
     }
     return value;
-  })).option("--sandbox <profile>", `Sandbox image profile for submitted runs: a profile name (explicit; k8s-lane workers only \u2014 list with 'sema cloud images list'), or 'auto' to let the model pick via its SelectEnvironment tool (advisory; choice + reason are echoed in the reply). Omit for the worker default image.`).option("--scenario <name>", `Engine scenario for submitted runs (only works with --print): route the run through a deployment-defined scenario (tool roster + system prompt). Unknown names fall back to the default scenario. Omit for the default scenario; a persistent default can be set via SEMA_HEADLESS_SCENARIO in the settings.json env block.`).option("--final-verify", `Enable a final-verification pass for submitted runs (only works with --print; off by default). When enabled, headless -p runs that write files get up to two extra verification turns before finishing. A persistent default can be set via SEMA_HEADLESS_FINAL_VERIFY=true in the settings.json env block. Yields automatically (with a notice) when a Stop hook is configured.`).option("--no-final-verify", `Explicitly disable the final-verification pass for submitted runs (only works with --print). Verification is off by default, so this flag only matters to override --final-verify or a persistent SEMA_HEADLESS_FINAL_VERIFY=true default; it always wins.`).option("--deadline <sec>", `Wall-clock limit in seconds for submitted runs (only works with --print; sema superset \u2014 no upstream equivalent). The run fails loudly with its partial output when the limit is hit; integer between 30 and 86400. A persistent default can be set via SEMA_HEADLESS_DEADLINE_SEC in the settings.json env block.`).option("--max-tokens <n>", `Total token budget for submitted runs (only works with --print; sema superset \u2014 no upstream equivalent). The primary recommended limit: the run fails loudly with its partial output when the budget is exhausted; positive integer. A persistent default can be set via SEMA_HEADLESS_MAX_TOKENS in the settings.json env block.`).option("--agent <agent>", `Agent for the current session. Overrides the 'agent' setting.`).option("--betas <betas...>", "Beta headers to include in API requests (API key users only)").option("--fallback-model <model>", "Enable automatic fallback to specified model when default model is overloaded (only works with --print)").addOption(new Option("--workload <tag>", "Workload tag for billing-header attribution (cc_workload). Process-scoped; set by SDK daemon callers that spawn subprocesses for cron work. (only works with --print)").hideHelp()).option("--settings <file-or-json>", "Path to a settings JSON file or a JSON string to load additional settings from").option("--add-dir <directories...>", "Additional directories to allow tool access to").option("--ide", "Automatically connect to IDE on startup if exactly one valid IDE is available", () => true).option("--strict-mcp-config", "Only use MCP servers from --mcp-config, ignoring all other MCP configurations", () => true).option("--session-id <uuid>", "Use a specific session ID for the conversation (must be a valid UUID)").option("-n, --name <name>", "Set a display name for this session (shown in /resume and terminal title)").option("--agents <json>", `JSON object defining custom agents (e.g. '{"reviewer": {"description": "Reviews code", "prompt": "You are a code reviewer"}}')`).option("--setting-sources <sources>", "Comma-separated list of setting sources to load (user, project, local).").option("--plugin-dir <path>", "Load plugins from a directory for this session only (repeatable: --plugin-dir A --plugin-dir B)", (val, prev) => [...prev, val], []).addOption(new Option("--plugin-dir-no-mcp <path>", "Like --plugin-dir but the engine will not read this plugin's .mcp.json (caller owns its MCP connections)").argParser((val, prev) => [...prev, val]).default([]).hideHelp()).option("--plugin-url <url>", "Fetch a plugin .zip from a URL for this session only (repeatable: --plugin-url A --plugin-url B)", (val, prev) => [...prev, ...val.split(/\s+/).filter(Boolean)], []).option("--disable-slash-commands", "Disable all skills", () => true).option("--chrome", "Enable Claude in Chrome integration").option("--no-chrome", "Disable Claude in Chrome integration").option("--file <specs...>", "File resources to download at startup. Format: file_id:relative_path (e.g., --file file_abc:doc.txt file_def:img.png)").action(async (prompt, options) => {
+  })).option("--sandbox <profile>", `Sandbox image profile for submitted runs: a profile name (explicit; k8s-lane workers only \u2014 list with 'sema cloud images list'), or 'auto' to let the model pick via its SelectEnvironment tool (advisory; choice + reason are echoed in the reply). Omit for the worker default image.`).option("--scenario <name>", `Engine scenario for submitted runs (only works with --print): route the run through a deployment-defined scenario (tool roster + system prompt). Unknown names fall back to the default scenario. Omit for the default scenario; a persistent default can be set via SEMA_HEADLESS_SCENARIO in the settings.json env block.`).option("--final-verify", `Enable a final-verification pass for submitted runs (only works with --print; off by default). When enabled, headless -p runs that write files get up to two extra verification turns before finishing. A persistent default can be set via SEMA_HEADLESS_FINAL_VERIFY=true in the settings.json env block. Yields automatically (with a notice) when a Stop hook is configured.`).option("--no-final-verify", `Explicitly disable the final-verification pass for submitted runs (only works with --print). Verification is off by default, so this flag only matters to override --final-verify or a persistent SEMA_HEADLESS_FINAL_VERIFY=true default; it always wins.`).option("--deadline <sec>", `Wall-clock limit in seconds for submitted runs (only works with --print; sema superset \u2014 no upstream equivalent). The run fails loudly with its partial output when the limit is hit; integer between 30 and 86400. A persistent default can be set via SEMA_HEADLESS_DEADLINE_SEC in the settings.json env block.`).option("--max-tokens <n>", `Per-request output-token cap for submitted runs (only works with --print; sema superset \u2014 no upstream equivalent). Caps each model response rather than the whole run: hitting the cap cuts generation mid-stream, and a cut inside tool-call arguments surfaces as a provider truncation error; positive integer. A persistent default can be set via SEMA_HEADLESS_MAX_TOKENS in the settings.json env block.`).option("--agent <agent>", `Agent for the current session. Overrides the 'agent' setting.`).option("--betas <betas...>", "Beta headers to include in API requests (API key users only)").option("--fallback-model <model>", "Enable automatic fallback to specified model when default model is overloaded (only works with --print)").addOption(new Option("--workload <tag>", "Workload tag for billing-header attribution (cc_workload). Process-scoped; set by SDK daemon callers that spawn subprocesses for cron work. (only works with --print)").hideHelp()).option("--settings <file-or-json>", "Path to a settings JSON file or a JSON string to load additional settings from").option("--add-dir <directories...>", "Additional directories to allow tool access to").option("--ide", "Automatically connect to IDE on startup if exactly one valid IDE is available", () => true).option("--strict-mcp-config", "Only use MCP servers from --mcp-config, ignoring all other MCP configurations", () => true).option("--session-id <uuid>", "Use a specific session ID for the conversation (must be a valid UUID)").option("-n, --name <name>", "Set a display name for this session (shown in /resume and terminal title)").option("--agents <json>", `JSON object defining custom agents (e.g. '{"reviewer": {"description": "Reviews code", "prompt": "You are a code reviewer"}}')`).option("--setting-sources <sources>", "Comma-separated list of setting sources to load (user, project, local).").option("--plugin-dir <path>", "Load plugins from a directory for this session only (repeatable: --plugin-dir A --plugin-dir B)", (val, prev) => [...prev, val], []).addOption(new Option("--plugin-dir-no-mcp <path>", "Like --plugin-dir but the engine will not read this plugin's .mcp.json (caller owns its MCP connections)").argParser((val, prev) => [...prev, val]).default([]).hideHelp()).option("--plugin-url <url>", "Fetch a plugin .zip from a URL for this session only (repeatable: --plugin-url A --plugin-url B)", (val, prev) => [...prev, ...val.split(/\s+/).filter(Boolean)], []).option("--disable-slash-commands", "Disable all skills", () => true).option("--chrome", "Enable Claude in Chrome integration").option("--no-chrome", "Disable Claude in Chrome integration").option("--file <specs...>", "File resources to download at startup. Format: file_id:relative_path (e.g., --file file_abc:doc.txt file_def:img.png)").action(async (prompt, options) => {
     profileCheckpoint("action_handler_start");
     {
       const UNWIRED_FLAGS = [
@@ -677382,7 +677814,7 @@ Auth: unix socket -R \u2192 local proxy`, "info");
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("sema 1.0.67", "-v, --version", "Output the version number");
+  }).version("sema 1.0.68", "-v, --version", "Output the version number");
   program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)");
   program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux.");
   if (canUserConfigureAdvisor()) {
@@ -687463,6 +687895,27 @@ async function launchReplProduction() {
   } catch (e) {
     if (process.env.SEMA_DEBUG) console.error("[sema] permission-flag plumbing soft-failed:", e);
   }
+  try {
+    const tpc = initialState.toolPermissionContext;
+    const { loadAllPermissionRulesFromDisk: loadAllPermissionRulesFromDisk2 } = await Promise.resolve().then(() => (init_permissionsLoader(), permissionsLoader_exports));
+    const { applyPermissionRulesToPermissionContext: applyPermissionRulesToPermissionContext2 } = await Promise.resolve().then(() => (init_permissions2(), permissions_exports2));
+    const rulesFromDisk = loadAllPermissionRulesFromDisk2();
+    if (rulesFromDisk.length > 0) {
+      let next = applyPermissionRulesToPermissionContext2(tpc, rulesFromDisk);
+      if (tpc.mode === "auto") {
+        const { stripDangerousPermissionsForAutoMode: stripDangerousPermissionsForAutoMode2 } = await Promise.resolve().then(() => (init_permissionSetup(), permissionSetup_exports));
+        next = stripDangerousPermissionsForAutoMode2(next);
+      }
+      Object.assign(tpc, next);
+    }
+    if (process.env.SEMA_DEBUG) {
+      console.error(
+        `[sema] permission rules from disk: ${rulesFromDisk.length} loaded (mode=${String(tpc.mode)})`
+      );
+    }
+  } catch (e) {
+    if (process.env.SEMA_DEBUG) console.error("[sema] permission-rule load soft-failed (rules stay empty):", e);
+  }
   let mcpDynamicConfig = {};
   try {
     const mcpState = initialState.mcp;