@sema-agent/cli 1.0.75 → 1.0.76

package/sema-main.js

@@ -55924,10 +55924,11 @@ function structuredToToolUseResult(structured, modelText) {
         }
       ] : []) } } : null;
     case "agent": {
-      if (s.status !== "async_launched")
+      let receipt = readAsyncLaunchedAgentReceipt(s);
+      if (receipt === null)
         return null;
-      let agentId = typeof s.task_id == "string" ? s.task_id : void 0;
-      return agentId === void 0 || typeof s.description != "string" || typeof s.prompt != "string" ? null : (registerOutstandingBgTask(agentId, s.description, s.prompt, typeof s.seq == "number" ? s.seq : void 0), {
+      let agentId = receipt.taskId;
+      return typeof s.description != "string" || typeof s.prompt != "string" ? null : (registerOutstandingBgTask(agentId, s.description, s.prompt, receipt.seq), {
         toolUseResult: {
           isAsync: !0,
           status: "async_launched",
@@ -56047,6 +56048,18 @@ function reportFindingsToolUseResult(structured, rawInput) {
     }
   };
 }
+function readAsyncLaunchedAgentReceipt(structured) {
+  if (structured === null || typeof structured != "object")
+    return null;
+  let s = structured;
+  if (s.type !== "agent" || s.status !== "async_launched")
+    return null;
+  let taskId = s.task_id;
+  return typeof taskId != "string" || taskId.length === 0 ? null : {
+    taskId,
+    ...typeof s.seq == "number" && Number.isFinite(s.seq) ? { seq: s.seq } : {}
+  };
+}
 function readCompletedAgentCard(structured) {
   if (structured === null || typeof structured != "object")
     return null;
@@ -56471,6 +56484,26 @@ var labels, init_engineToolLabelStore = __esm({
 });
 
 // node_modules/@sema-agent/client-core/dist/subagentContentStore.js
+function coerceOutput(v2) {
+  if (v2 != null) {
+    if (typeof v2 == "string")
+      return v2;
+    if (Array.isArray(v2)) {
+      let parts = [];
+      for (let block2 of v2)
+        if (block2 && typeof block2 == "object") {
+          let b3 = block2;
+          b3.type === "text" && typeof b3.text == "string" ? parts.push(b3.text) : b3.type === "image" && parts.push("[image]");
+        }
+      return parts.join("");
+    }
+    try {
+      return JSON.stringify(v2);
+    } catch {
+      return String(v2);
+    }
+  }
+}
 function touchLru(map2, key) {
   let v2 = map2.get(key);
   v2 !== void 0 && (map2.delete(key), map2.set(key, v2));
@@ -56480,7 +56513,7 @@ function stateFor(taskId, parentToolCallId) {
   if (s)
     touchLru(tasks, taskId);
   else {
-    if (tasks.size >= 32) {
+    if (tasks.size >= MAX_TASKS) {
       let oldest = tasks.keys().next().value;
       oldest !== void 0 && tasks.delete(oldest);
     }
@@ -56489,7 +56522,7 @@ function stateFor(taskId, parentToolCallId) {
   return s;
 }
 function pushItem(s, item) {
-  s.items.push(item), s.items.length > 200 && (s.items.splice(0, s.items.length - 200), s.openTools.clear(), s.items.forEach((it2, i) => {
+  s.items.push(item), s.items.length > MAX_ITEMS_PER_TASK && (s.items.splice(0, s.items.length - MAX_ITEMS_PER_TASK), s.openTools.clear(), s.items.forEach((it2, i) => {
     it2.kind === "tool" && it2.output === void 0 && s.openTools.set(it2.id, i);
   }));
 }
@@ -56506,14 +56539,20 @@ function scheduleNotify(taskId) {
           notifyListener(id);
         } catch {
         }
-  }, 250));
+  }, NOTIFY_COALESCE_MS));
 }
-function registerSubagentAlias(parentToolCallId, taskId) {
+function registerSubagentContentAlias(parentToolCallId, taskId) {
+  aliasContentKey(parentToolCallId, taskId);
+}
+function aliasContentKey(parentToolCallId, taskId) {
   if (!parentToolCallId || !taskId || parentToolCallId === taskId)
-    return;
-  parentToTask.set(parentToolCallId, taskId), taskToParent.set(taskId, parentToolCallId), pendingNotify.delete(parentToolCallId) && pendingNotify.add(taskId);
+    return !1;
+  parentToTask.set(parentToolCallId, taskId), pendingNotify.delete(parentToolCallId) && pendingNotify.add(taskId);
   let parked = tasks.get(parentToolCallId);
-  parked && !tasks.has(taskId) && (tasks.delete(parentToolCallId), tasks.set(taskId, parked), scheduleNotify(taskId));
+  return parked && !tasks.has(taskId) && (tasks.delete(parentToolCallId), tasks.set(taskId, parked), scheduleNotify(taskId)), !0;
+}
+function registerSubagentAlias(parentToolCallId, taskId) {
+  aliasContentKey(parentToolCallId, taskId) && taskToParent.set(taskId, parentToolCallId);
 }
 function canonicalKey(ev) {
   return ev.taskId !== ev.parentToolCallId ? ev.taskId : parentToTask.get(ev.parentToolCallId) ?? ev.parentToolCallId;
@@ -56589,7 +56628,7 @@ function clearSubagentContent(taskId) {
 }
 function recordBgTerminalFacts(taskId, facts2) {
   if (taskId) {
-    if (bgFacts.size >= 32 && !bgFacts.has(taskId)) {
+    if (bgFacts.size >= MAX_TASKS && !bgFacts.has(taskId)) {
       let oldest = bgFacts.keys().next().value;
       oldest !== void 0 && bgFacts.delete(oldest);
     }
@@ -56602,7 +56641,7 @@ function getBgTerminalFacts(taskId) {
 }
 function recordBgParentRun(taskId, runId) {
   if (!(!taskId || !runId || taskId === runId)) {
-    if (bgParentRun.size >= 64 && !bgParentRun.has(taskId)) {
+    if (bgParentRun.size >= MAX_TASKS * 2 && !bgParentRun.has(taskId)) {
       let oldest = bgParentRun.keys().next().value;
       oldest !== void 0 && bgParentRun.delete(oldest);
     }
@@ -56632,9 +56671,9 @@ function subscribeSubagentContent(fn2) {
     notifyListener === fn2 && (notifyListener = null);
   };
 }
-var tasks, parentToTask, taskToParent, notifyListener, pendingNotify, notifyTimer, bgFacts, bgParentRun, ownEngineRuns, init_subagentContentStore = __esm({
+var MAX_ITEMS_PER_TASK, MAX_TASKS, NOTIFY_COALESCE_MS, tasks, parentToTask, taskToParent, notifyListener, pendingNotify, notifyTimer, bgFacts, bgParentRun, ownEngineRuns, init_subagentContentStore = __esm({
   "node_modules/@sema-agent/client-core/dist/subagentContentStore.js"() {
-    tasks = /* @__PURE__ */ new Map(), parentToTask = /* @__PURE__ */ new Map(), taskToParent = /* @__PURE__ */ new Map(), notifyListener = null, pendingNotify = /* @__PURE__ */ new Set(), notifyTimer = null;
+    MAX_ITEMS_PER_TASK = 200, MAX_TASKS = 32, NOTIFY_COALESCE_MS = 250, tasks = /* @__PURE__ */ new Map(), parentToTask = /* @__PURE__ */ new Map(), taskToParent = /* @__PURE__ */ new Map(), notifyListener = null, pendingNotify = /* @__PURE__ */ new Set(), notifyTimer = null;
     bgFacts = /* @__PURE__ */ new Map();
     bgParentRun = /* @__PURE__ */ new Map();
     ownEngineRuns = /* @__PURE__ */ new Set();
@@ -56650,6 +56689,7 @@ var assistantArm, userArm, systemArm, diagnosticsArm, steeringInjectedArm, works
     init_diagnostics();
     init_engineToolLabelStore();
     init_subagentContentStore();
+    init_toolResult();
     init_workflow();
     init_ids();
     init_wireShapes();
@@ -56818,7 +56858,11 @@ var assistantArm, userArm, systemArm, diagnosticsArm, steeringInjectedArm, works
       list.length > 0 && (yield chrome({ kind: "prompt_suggestions", laneProof: MAIN, suggestions: list }));
     }, toolEndResultArm = function* (m2, { ctx, idOf, cards, panel }) {
       let callId = typeof m2.toolCallId == "string" ? m2.toolCallId : void 0;
-      recordEngineToolLabel(callId, m2.label), callId !== void 0 && (yield* panel.settle(callId, m2.isError === !0, m2.output !== void 0 ? flattenWireOutput(m2.output) : void 0));
+      if (recordEngineToolLabel(callId, m2.label), callId !== void 0) {
+        let launched = readAsyncLaunchedAgentReceipt(m2.structured);
+        launched !== null && registerSubagentContentAlias(callId, launched.taskId);
+      }
+      callId !== void 0 && (yield* panel.settle(callId, m2.isError === !0, m2.output !== void 0 ? flattenWireOutput(m2.output) : void 0));
       let p = callId !== void 0 ? cards.peek(callId) : void 0;
       if (p === void 0 || callId === void 0)
         return;
@@ -58120,15 +58164,15 @@ function wireAuthTokenFor(baseUrl, token) {
 }
 function makeEngineWireClient(cfg) {
   try {
-    return new AgentClient({
+    let base = {
       baseUrl: cfg.baseUrl,
-      authToken: resolveWireAuth(cfg.baseUrl, cfg.token),
       // F-011 停发:缺席/空串=不给键(SDK 6.11 缺席=不发 x-agent-principal 头,owner-null)。
       ...cfg.principal !== void 0 && cfg.principal !== "" ? { principal: cfg.principal } : {},
       ...cfg.timeoutMs !== void 0 ? { timeoutMs: cfg.timeoutMs } : {},
       maxRetries: cfg.maxRetries ?? 0,
       ...cfg.fetchImpl ? { fetch: cfg.fetchImpl } : {}
-    });
+    };
+    return typeof cfg.token == "object" ? new AgentClient({ ...base, authToken: cfg.token }) : new AgentClient({ ...base, authToken: resolveWireAuth(cfg.baseUrl, cfg.token) });
   } catch {
     return null;
   }
@@ -59805,14 +59849,24 @@ async function* runStreamInner(events3, ctx, handle2 = {}) {
       let sub = ev;
       publishSubagentContentEvent({
         type: sub.type,
-        // taskId is on every subagent event (EventIdentity); parentToolCallId keys the fallback
+        // 🔴 EventIdentity 上**没有** `taskId`(sdk events.d.ts 的 `interface EventIdentity` 只有
+        // eventId / parentToolCallId,加 LIVE 白名单四臂的 sourceTaskId / bgAgentId;`taskId` 只长在
+        // `meta` 首帧)⇒ 生产上这里恒走右臂,归账键由 store 的 `parentToTask` 补(canonicalKey)。
+        // `??` 保留是**容将来**:哪天上游真在内容帧上发 taskId,这条直接认,不必改形。
+        // (0.30.0 发包扫描订正:此前这行注释写「taskId is on every subagent event」,与 store 侧
+        //  `canonicalKey` 的注释互相矛盾,且被 .d.ts 直接证伪。)
         taskId: sub.taskId ?? sub.parentToolCallId,
         parentToolCallId: sub.parentToolCallId,
         delta: sub.delta,
         toolCallId: sub.toolCallId,
         toolName: sub.toolName,
         args: sub.args,
-        output: typeof sub.output == "string" ? sub.output : void 0,
+        // #158 移交①([3674](d) 姊妹病,2026-08-12):此前是 `typeof sub.output === 'string' ?
+        // sub.output : undefined` —— 而 wire 的 `tool_end.output` 是非均匀的(块数组形合法),
+        // 于是子代 lane 的块数组 output 经本臂进内容账本**恒空**(查看态卡有工具、结果栏永远空白)。
+        // 换用 store 自己的那个唯一字符串化口(tail 腿 engineSubagentTail 用的同一份):两条腿喂
+        // 同一个账本,字符串化口就不能有第二份。
+        output: coerceOutput(sub.output),
         isError: sub.isError
       });
       continue;
@@ -59883,7 +59937,31 @@ var MAIN2, reportedDroppedTypes, DROPPED_TYPE_MEMO_CAP, DROPPED_TYPE_DISPLAY_CAP
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/abortableSleep.js
+function abortableSleep(ms, signal) {
+  return signal.aborted ? Promise.resolve() : new Promise((resolve57) => {
+    let timer2 = setTimeout(() => {
+      signal.removeEventListener("abort", onAbort), resolve57();
+    }, ms), onAbort = () => {
+      clearTimeout(timer2), resolve57();
+    };
+    signal.addEventListener("abort", onAbort, { once: !0 });
+  });
+}
+var init_abortableSleep = __esm({
+  "node_modules/@sema-agent/client-core/dist/abortableSleep.js"() {
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/adapter/activeRunSelfHeal.js
+function askParkForeignGateKind(row2) {
+  let kind = typeof row2.gateKind == "string" && row2.gateKind.length > 0 ? row2.gateKind : null;
+  return kind !== null && !ASK_PARK_GATE_KINDS.includes(kind) ? kind : null;
+}
+function sessionOpts(deps2) {
+  let sessionId = deps2?.sessionId;
+  return typeof sessionId == "string" && sessionId.length > 0 ? { session: sessionId } : {};
+}
 function describeFailure(e) {
   if (typeof e == "object" && e !== null && "message" in e) {
     let m2 = e.message;
@@ -59899,6 +59977,64 @@ function readStatus(record2) {
 function reopenDelivered(verdict) {
   return verdict.reopened === !0 && verdict.presented !== !1;
 }
+function atMostOnceFailureClass(e) {
+  let status3 = e?.status;
+  return typeof status3 == "number" && status3 >= 400 && status3 < 500 ? "rejected" : "unknown";
+}
+function readSteerDelivery(receipt) {
+  if (typeof receipt != "object" || receipt === null || !("delivery" in receipt))
+    return null;
+  let d4 = receipt.delivery;
+  return typeof d4 == "string" && d4.length > 0 ? d4 : null;
+}
+function readSteerReceiptStatus(receipt) {
+  if (typeof receipt != "object" || receipt === null || !("status" in receipt))
+    return null;
+  let s = receipt.status;
+  return typeof s == "string" && s.length > 0 ? s : null;
+}
+function claimPollSleep(ms, signal) {
+  return abortableSleep(ms, signal ?? new AbortController().signal);
+}
+function claimProbeLease(caller, remainingMs) {
+  let ctl = new AbortController(), timer2 = setTimeout(() => {
+    ctl.abort(new Error("probe deadline"));
+  }, Math.max(1, remainingMs)), onCaller = () => {
+    ctl.abort(caller?.reason);
+  };
+  return caller?.aborted === !0 ? onCaller() : caller?.addEventListener("abort", onCaller, { once: !0 }), {
+    signal: ctl.signal,
+    release: () => {
+      clearTimeout(timer2), caller?.removeEventListener("abort", onCaller);
+    }
+  };
+}
+async function waitForClaimRelease(taskId, deps2) {
+  let now2 = typeof deps2.now == "function" ? deps2.now : () => Date.now(), sleep10 = typeof deps2.sleep == "function" ? deps2.sleep : claimPollSleep, budgetMs = Number.isFinite(deps2.budgetMs) && deps2.budgetMs > 0 ? deps2.budgetMs : 0, startedAt = now2(), deadline = startedAt + budgetMs, waited = () => now2() - startedAt, isAborted3 = () => deps2.signal?.aborted === !0, delay = CANCEL_POLL_START_MS, lastStatus = null;
+  for (; ; ) {
+    if (isAborted3())
+      return { released: !1, waitedMs: waited(), aborted: !0, lastStatus };
+    let remaining = deadline - now2();
+    if (remaining <= 0)
+      return { released: !1, waitedMs: waited(), aborted: !1, lastStatus };
+    if (await sleep10(Math.min(delay, remaining), deps2.signal), isAborted3())
+      return { released: !1, waitedMs: waited(), aborted: !0, lastStatus };
+    delay = Math.min(Math.round(delay * 1.5), CANCEL_POLL_MAX_MS);
+    let status3, lease = claimProbeLease(deps2.signal, deadline - now2());
+    try {
+      status3 = readStatus(await deps2.get(taskId, {
+        signal: lease.signal,
+        ...deps2.session !== void 0 ? { session: deps2.session } : {}
+      }));
+    } catch {
+      if (lastStatus = null, lease.release(), isAborted3())
+        return { released: !1, waitedMs: waited(), aborted: !0, lastStatus };
+      continue;
+    }
+    if (lease.release(), lastStatus = status3, status3 !== null && CLAIM_RELEASED_STATES.includes(status3))
+      return { released: !0, waitedMs: waited(), aborted: !1, lastStatus: status3 };
+  }
+}
 async function attemptActiveRunSelfHeal(signal, runs, deps2) {
   let pending2 = !1;
   try {
@@ -59916,7 +60052,7 @@ async function attemptActiveRunSelfHeal(signal, runs, deps2) {
       detail: "the engine did not name the run that holds this session"
     };
   let gateKind2 = signal.pendingGate?.kind ?? null;
-  if (gateKind2 === PLAN_REVIEW_GATE_KIND)
+  if (gateKind2 !== null && PLAN_REVIEW_GATE_KINDS.includes(gateKind2))
     return planReviewArm(taskId, signal, deps2);
   if (gateKind2 !== null && ASK_PARK_GATE_KINDS.includes(gateKind2))
     return askParkArm(taskId, signal, deps2);
@@ -59926,31 +60062,95 @@ async function attemptActiveRunSelfHeal(signal, runs, deps2) {
       return { kind: "state-unknown", taskId, detail: "this client exposes no durable run verbs" };
     let record2;
     try {
-      record2 = await runs.get(taskId);
+      record2 = await runs.get(taskId, sessionOpts(deps2));
     } catch (e) {
       return { kind: "state-unknown", taskId, detail: describeFailure(e) };
     }
     status3 = readStatus(record2);
   }
-  return status3 === null ? { kind: "state-unknown", taskId, detail: "the engine reported no status for that run" } : gateKind2 !== null ? { kind: "not-parked", taskId, status: status3 } : PLAN_REVIEW_STATES.includes(status3) ? planReviewArm(taskId, signal, deps2) : ASK_PARK_STATES.includes(status3) ? askParkArm(taskId, signal, deps2) : { kind: "not-parked", taskId, status: status3 };
+  return status3 === null ? { kind: "state-unknown", taskId, detail: "the engine reported no status for that run" } : gateKind2 !== null ? { kind: "not-parked", taskId, status: status3 } : PLAN_REVIEW_STATES.includes(status3) ? planReviewArm(taskId, signal, deps2) : ASK_PARK_STATES.includes(status3) ? askParkArm(taskId, signal, deps2) : RUNNING_STATES.includes(status3) ? runningChoiceArm(taskId, status3, runs, deps2) : { kind: "not-parked", taskId, status: status3 };
+}
+async function planVerdict(taskId, deps2) {
+  try {
+    return await deps2?.reopenPlanReview?.(taskId) ?? { reopened: !1 };
+  } catch {
+    return { reopened: !1 };
+  }
 }
-function planReviewArm(taskId, signal, deps2) {
-  let verdict = { reopened: !1 };
+async function askVerdict(taskId, deps2) {
   try {
-    verdict = deps2?.reopenPlanReview?.(taskId) ?? { reopened: !1 };
+    return await deps2?.reopenAskPark?.(taskId) ?? { reopened: !1 };
   } catch {
-    verdict = { reopened: !1 };
+    return { reopened: !1 };
   }
+}
+async function planReviewArm(taskId, signal, deps2) {
+  let verdict = await planVerdict(taskId, deps2);
   return reopenDelivered(verdict) ? { kind: "plan-review-reopened", taskId, firstSight: verdict.firstSight === !0 } : { kind: "plan-review-reopen-failed", taskId, decidePath: signal.pendingGate?.decidePath ?? null };
 }
 async function askParkArm(taskId, signal, deps2) {
-  let verdict = { reopened: !1 };
+  let verdict = await askVerdict(taskId, deps2);
+  return reopenDelivered(verdict) ? { kind: "ask-reopened", taskId, firstSight: verdict.firstSight === !0 } : { kind: "ask-reopen-failed", taskId, decidePath: signal.pendingGate?.decidePath ?? null };
+}
+async function runningChoiceArm(taskId, status3, runs, deps2) {
+  let notParked = { kind: "not-parked", taskId, status: status3 }, offer = deps2?.offerRunningChoice;
+  if (typeof offer != "function")
+    return notParked;
+  let text2 = typeof deps2?.deniedMessage == "string" ? deps2.deniedMessage : "", canSteer = typeof runs?.steer == "function" && text2.length > 0, canCancel = typeof runs?.cancel == "function" && typeof runs?.get == "function";
+  if (!canSteer && !canCancel)
+    return notParked;
+  let choice = "wait";
   try {
-    verdict = await deps2?.reopenAskPark?.(taskId) ?? { reopened: !1 };
+    choice = await offer({ taskId, status: status3, canSteer, canCancel }) ?? "wait";
   } catch {
-    verdict = { reopened: !1 };
+    choice = "wait";
   }
-  return reopenDelivered(verdict) ? { kind: "ask-reopened", taskId, firstSight: verdict.firstSight === !0 } : { kind: "ask-reopen-failed", taskId, decidePath: signal.pendingGate?.decidePath ?? null };
+  if (choice === "steer" && canSteer && runs?.steer !== void 0)
+    try {
+      let receipt = await runs.steer(taskId, { text: text2 }, sessionOpts(deps2)), delivery = readSteerDelivery(receipt), receiptStatus = readSteerReceiptStatus(receipt);
+      if (delivery === "queued") {
+        let verdict = receiptStatus !== null && PLAN_REVIEW_STATES.includes(receiptStatus) ? await planVerdict(taskId, deps2) : receiptStatus !== null && ASK_PARK_STATES.includes(receiptStatus) ? await askVerdict(taskId, deps2) : null;
+        return { kind: "running-steered", taskId, delivery, status: receiptStatus, reopened: verdict };
+      }
+      return { kind: "running-steered", taskId, delivery, status: receiptStatus, reopened: null };
+    } catch (e) {
+      return { kind: "running-steer-failed", taskId, detail: describeFailure(e), delivery: atMostOnceFailureClass(e) };
+    }
+  if (choice === "cancel" && canCancel && runs?.cancel !== void 0 && runs.get !== void 0) {
+    let durable = runs, durableGet = runs.get, boundGet = (id, opts) => durableGet.call(durable, id, opts), cancelFailure = null, cancelWaitMs = deps2?.cancelReleaseWaitMs ?? CANCEL_RELEASE_WAIT_MS, cancelStartedAt = Date.now(), cancelLease = claimProbeLease(deps2?.signal, cancelWaitMs);
+    try {
+      await durable.cancel?.(taskId, { signal: cancelLease.signal, ...sessionOpts(deps2) });
+    } catch (e) {
+      if (deps2?.signal?.aborted === !0)
+        return {
+          kind: "running-cancel-timeout",
+          taskId,
+          waitedMs: Date.now() - cancelStartedAt,
+          aborted: !0,
+          confirmedHeld: !1
+        };
+      let delivery = atMostOnceFailureClass(e);
+      if (delivery === "rejected")
+        return { kind: "running-cancel-failed", taskId, detail: describeFailure(e), delivery };
+      cancelFailure = { detail: describeFailure(e), delivery };
+    } finally {
+      cancelLease.release();
+    }
+    let verdict = await waitForClaimRelease(taskId, {
+      get: boundGet,
+      budgetMs: cancelWaitMs,
+      ...deps2?.signal !== void 0 ? { signal: deps2.signal } : {},
+      ...sessionOpts(deps2)
+    });
+    return verdict.released ? { kind: "running-cancelled", taskId } : cancelFailure !== null ? { kind: "running-cancel-failed", taskId, ...cancelFailure } : {
+      kind: "running-cancel-timeout",
+      taskId,
+      waitedMs: verdict.waitedMs,
+      aborted: verdict.aborted,
+      confirmedHeld: verdict.lastStatus !== null && CLAIM_HELD_STATES.includes(verdict.lastStatus)
+    };
+  }
+  return notParked;
 }
 function gateKindPhrase(kind) {
   return kind ? `a ${kind} decision` : "a decision";
@@ -59994,6 +60194,27 @@ function activeRunSelfHealBaseRow(outcome, signal, wayOut) {
       let viaEngine = outcome.decidePath ? ` You can also decide it on the engine directly: POST ${outcome.decidePath}.` : "";
       return `The previous turn is parked waiting for a plan review (run ${outcome.taskId}) and sema could not reopen that approval card. It did NOT cancel the run \u2014 that would have discarded the plan for you. Your message was NOT sent; ${wayOut} if you no longer want that plan.${viaEngine}`;
     }
+    // ── 三选卡的四种动作结局(选 ③ / 没答 / 没呈上都落 not-parked)────────────────────────────
+    case "running-steered": {
+      let handle2 = `run ${outcome.taskId}`, textOnly = "Only the TEXT of your message was handed over \u2014 a steer carries no attachments, so any images in that submission were NOT sent.";
+      if (outcome.delivery === "applied")
+        return `sema handed your message to the run that is already working (${handle2}) \u2014 the engine applied it to that run, so it is picked up at that run's next step. ${textOnly} Nothing was cancelled, and your message did NOT start a new turn \u2014 watch that run for what it does with it.`;
+      if (outcome.delivery === "queued") {
+        let parked = outcome.status ? `parked (status ${outcome.status})` : "parked", next = outcome.reopened !== null && reopenDelivered(outcome.reopened) ? "sema has surfaced that decision card \u2014 answering it is what lets that run resume and pick your message up." : `sema could not surface that decision card here, so nothing will resume that run until that decision is made; ${wayOut} if you no longer want it.`;
+        return `${handle2} is not actually working right now: the engine reports it ${parked} on a decision it needs from you, so it queued your message on that park instead of running it. ${next} ${textOnly} Nothing was cancelled, and your message did NOT start a new turn.`;
+      }
+      return outcome.delivery === "parked_for_wake" ? `${handle2} had already finished, so the engine parked your message on that finished run instead of running it \u2014 a parked message is delivered only if this session is woken on the engine (POST /v1/sessions/:id/wake), which sema does not do here. That run is no longer holding this session: send your message again to run it as a new turn \u2014 but note that the parked copy is NOT discarded, so if anything ever wakes this session on the engine that instruction would run a second time. ${textOnly} Nothing was cancelled.` : `sema handed your message to ${handle2}, but the engine did not say how it will be delivered${outcome.status ? ` (it reported that run as ${outcome.status})` : ""}. ${textOnly} Nothing was cancelled, and your message did NOT start a new turn \u2014 watch that run before sending it again.`;
+    }
+    case "running-steer-failed":
+      return outcome.delivery === "rejected" ? `The engine rejected handing your message to the running run (run ${outcome.taskId}): ${outcome.detail}. sema did NOT retry it (a steer is not safe to send twice) and it did NOT cancel that run. Your message was NOT sent; send it again if you still want it.` : `sema sent your message to the running run (run ${outcome.taskId}) but could not confirm what happened to it (${outcome.detail}). A steer is not safe to send twice, so sema did NOT retry it, and it did NOT cancel that run. That run may or may not have received your message \u2014 watch what it does next before sending it again.`;
+    case "running-cancelled":
+      return `You chose to cancel run ${outcome.taskId}. The engine confirmed it is no longer holding this session, so sema is sending your message now.`;
+    case "running-cancel-timeout": {
+      let waited = `${String(Math.max(1, Math.round(outcome.waitedMs / 1e3)))}s`;
+      return outcome.aborted ? `sema asked the engine to cancel run ${outcome.taskId} and you interrupted while it was still confirming (${waited} in). Cancelling is asynchronous, so that run may still be winding down and may still hold this session. Your message was NOT sent; send it again in a moment, or ${wayOut}.` : outcome.confirmedHeld ? `sema asked the engine to cancel run ${outcome.taskId}, but that run still held this session ${waited} later \u2014 cancelling is asynchronous and it may still be winding down. Your message was NOT sent; send it again in a moment, or ${wayOut}.` : `sema asked the engine to cancel run ${outcome.taskId} but could not read that run's state back within ${waited}, so it cannot confirm whether the session was released. Your message was NOT sent; send it again in a moment (if that run really is gone it will just run), or ${wayOut}.`;
+    }
+    case "running-cancel-failed":
+      return outcome.delivery === "unknown" ? `sema sent the cancel for run ${outcome.taskId} but could not confirm what happened to it (${outcome.detail}), and it could not read that run back as released either. That run may or may not still be holding this session. Your message was NOT sent; send it again in a moment, or ${wayOut}.` : `sema could not cancel run ${outcome.taskId} \u2014 the engine rejected that request (${outcome.detail}), so nothing was cancelled and sema cannot tell whether that run is still holding this session. Your message was NOT sent; send it again to find out, or ${wayOut}.`;
     case "not-parked":
       return signal?.pendingGate ? `This session is held by an earlier run (run ${outcome.taskId}, status ${outcome.status}) that is waiting on ${gateKindPhrase(signal.pendingGate.kind)} \u2014 it will not finish on its own. sema did NOT cancel it, because cancelling would decide that item for you. Your message was NOT sent; ${wayOut} if you no longer want it.` : `This session already has a run in flight (run ${outcome.taskId}, status ${outcome.status}) \u2014 most likely a turn you sent to the background. sema did NOT cancel it, because that would throw away work you asked for. Wait for it to finish, or ${wayOut}.`;
     case "state-unknown":
@@ -60014,9 +60235,12 @@ function activeRunBusyHeadlessRow(signal, copy2) {
   let startOver = `${freshSession.charAt(0).toUpperCase()}${freshSession.slice(1)}`;
   return `This session is locked by an earlier run${handle2} that was never released, so this message was NOT sent. Nothing here clears on its own. ${startOver}, or release the run on the engine: ${cancelPath}`;
 }
-var PLAN_REVIEW_GATE_KIND, ASK_PARK_GATE_KINDS, PLAN_REVIEW_STATES, ASK_PARK_STATES, DEFAULT_WAY_OUT, DEFAULT_FRESH_SESSION, init_activeRunSelfHeal = __esm({
+var PLAN_REVIEW_GATE_KIND, PLAN_REVIEW_GATE_KINDS, ASK_PARK_GATE_KINDS, PLAN_REVIEW_STATES, ASK_PARK_STATES, RUNNING_STATES, CLAIM_RELEASED_STATES, CLAIM_HELD_STATES, CANCEL_RELEASE_WAIT_MS, CANCEL_POLL_START_MS, CANCEL_POLL_MAX_MS, DEFAULT_WAY_OUT, DEFAULT_FRESH_SESSION, init_activeRunSelfHeal = __esm({
   "node_modules/@sema-agent/client-core/dist/adapter/activeRunSelfHeal.js"() {
-    PLAN_REVIEW_GATE_KIND = "plan_review", ASK_PARK_GATE_KINDS = ["human", "irreversible_ask", "tool_approval"], PLAN_REVIEW_STATES = ["needs_review"], ASK_PARK_STATES = ["suspended"];
+    init_abortableSleep();
+    PLAN_REVIEW_GATE_KIND = "plan_review", PLAN_REVIEW_GATE_KINDS = [PLAN_REVIEW_GATE_KIND, "dry_run_review"], ASK_PARK_GATE_KINDS = ["human", "irreversible_ask", "policy_ask", "tool_approval"];
+    PLAN_REVIEW_STATES = ["needs_review"], ASK_PARK_STATES = ["suspended"], RUNNING_STATES = ["running"], CLAIM_RELEASED_STATES = ["completed", "failed", "blocked", "timeout"], CLAIM_HELD_STATES = ["running", "suspended", "needs_review"];
+    CANCEL_RELEASE_WAIT_MS = 1e4, CANCEL_POLL_START_MS = 200, CANCEL_POLL_MAX_MS = 2e3;
     DEFAULT_WAY_OUT = "run /clear to keep working in a fresh session", DEFAULT_FRESH_SESSION = "start a new session (drop --resume/--continue)";
   }
 });
@@ -61538,17 +61762,6 @@ function installSubagentActivitySink(sink2) {
     activitySink = prev;
   };
 }
-function coerceOutput(v2) {
-  if (v2 != null) {
-    if (typeof v2 == "string")
-      return v2;
-    try {
-      return JSON.stringify(v2);
-    } catch {
-      return String(v2);
-    }
-  }
-}
 function isEngineSubagentTailActive(taskId) {
   return activeTails.has(taskId);
 }
@@ -61713,22 +61926,6 @@ var init_workflowMonitor = __esm({
   }
 });
 
-// node_modules/@sema-agent/client-core/dist/abortableSleep.js
-function abortableSleep(ms, signal) {
-  return signal.aborted ? Promise.resolve() : new Promise((resolve57) => {
-    let timer2 = setTimeout(() => {
-      signal.removeEventListener("abort", onAbort), resolve57();
-    }, ms), onAbort = () => {
-      clearTimeout(timer2), resolve57();
-    };
-    signal.addEventListener("abort", onAbort, { once: !0 });
-  });
-}
-var init_abortableSleep = __esm({
-  "node_modules/@sema-agent/client-core/dist/abortableSleep.js"() {
-  }
-});
-
 // node_modules/@sema-agent/client-core/dist/workflowClient.js
 import { APIError as APIError2 } from "@sema-agent/sdk";
 function coerceRunStatus(s) {
@@ -63647,7 +63844,7 @@ async function findPendingForTask(client3, taskId, matches2, opts) {
   } catch (e) {
     return { ok: !1, reason: `approvals.list failed: ${String(e)}` };
   }
-  let pending2 = rows2.find((r) => r.taskId === taskId && matches2(typeof r.toolName == "string" ? r.toolName : void 0)) ?? rows2.find((r) => r.taskId === taskId);
+  let decidable = rows2.filter((r) => askParkForeignGateKind(r) === null), pending2 = decidable.find((r) => r.taskId === taskId && matches2(typeof r.toolName == "string" ? r.toolName : void 0)) ?? decidable.find((r) => r.taskId === taskId);
   return pending2 ? { ok: !0, pending: pending2, gatedCallId: pending2.toolCallId ?? pending2.boundCallId ?? void 0 } : { ok: !1, reason: "no pending checkpoint for this run (resolved/expired?)", code: "no_pending" };
 }
 function makeHitlCanUseTool(bridge3, prompt) {
@@ -63688,6 +63885,7 @@ function backendDeny(reason) {
 }
 var DEFAULT_DENY_REASON, MAX_DENY_REASON_CHARS, HitlSafetyError, HitlBridge, init_hitlBridge = __esm({
   "node_modules/@sema-agent/client-core/dist/hitl/hitlBridge.js"() {
+    init_activeRunSelfHeal();
     init_types4();
     init_host();
     DEFAULT_DENY_REASON = "The user rejected this tool use", MAX_DENY_REASON_CHARS = 4096;
@@ -64054,11 +64252,13 @@ async function surfaceFsApprovalAndDecide(deps2, taskId, argsByCall, signal) {
   let { pending: pending2, gatedCallId } = found, toolName2 = typeof pending2.toolName == "string" ? pending2.toolName : "", args = (gatedCallId !== void 0 ? argsByCall.get(gatedCallId) : void 0) ?? pending2.input ?? {};
   if (typeof args != "object" || args === null)
     return { kind: "failed", gatedCallId, reason: "gate has no tool input payload" };
-  let bridge3 = new HitlBridge(deps2.client, taskId), callKey = approvalCallKey(gatedCallId, taskId), card = await surfaceApprovalCard({
+  let bridge3 = new HitlBridge(deps2.client, taskId), callKey = approvalCallKey(gatedCallId, taskId), ruleSuggestionsReadOnly = readRuleSuggestions(pending2.ruleSuggestions), card = await surfaceApprovalCard({
     toolName: toolName2,
     args,
     callKey,
-    ...signal ? { signal } : {}
+    ...signal ? { signal } : {},
+    ...pending2.governanceForced === !0 ? { governanceForced: !0 } : {},
+    ...ruleSuggestionsReadOnly !== void 0 ? { ruleSuggestionsReadOnly } : {}
   });
   switch (card.kind) {
     case "failed":
@@ -64931,6 +65131,260 @@ var init_parkOwnership = __esm({
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/hitl/parkRowBirthWait.js
+function parkRowPollDelay(ms, signal) {
+  return abortableSleep(ms, signal ?? new AbortController().signal);
+}
+async function waitForParkRowBirth(deps2) {
+  let now2 = typeof deps2.now == "function" ? deps2.now : () => Date.now(), sleep10 = typeof deps2.sleep == "function" ? deps2.sleep : parkRowPollDelay, budgetMs = Number.isFinite(deps2.budgetMs) && deps2.budgetMs > 0 ? deps2.budgetMs : 0, intervalMs = Number.isFinite(deps2.intervalMs) && deps2.intervalMs > 0 ? deps2.intervalMs : 1, startedAt = now2(), probes = 0, lastReason = "no decidable pending row for this park", aborted2 = () => deps2.signal?.aborted === !0, safeProbe = async (attempt, signal) => {
+    try {
+      return await deps2.probe(attempt, signal);
+    } catch (e) {
+      return { kind: "unborn", reason: `probe threw: ${String(e)}` };
+    }
+  }, probeWithinRemaining = async (attempt, remainingMs) => {
+    if (budgetMs <= 0)
+      return safeProbe(attempt, deps2.signal);
+    let ctl = new AbortController(), timer2, deadline = new Promise((resolve57) => {
+      timer2 = setTimeout(() => {
+        ctl.abort(), resolve57("deadline");
+      }, Math.max(1, remainingMs));
+    }), caller = deps2.signal, abortProbeLane = () => {
+      try {
+        ctl.abort();
+      } catch {
+      }
+    }, onAbort, externalAbort = new Promise((resolve57) => {
+      if (caller !== void 0) {
+        if (caller.aborted) {
+          abortProbeLane(), resolve57("aborted");
+          return;
+        }
+        onAbort = () => {
+          abortProbeLane(), resolve57("aborted");
+        };
+        try {
+          caller.addEventListener("abort", onAbort, { once: !0 });
+        } catch {
+          onAbort = void 0;
+        }
+      }
+    }), merged = caller !== void 0 && typeof AbortSignal.any == "function" ? AbortSignal.any([caller, ctl.signal]) : ctl.signal;
+    try {
+      return await Promise.race([safeProbe(attempt, merged), deadline, externalAbort]);
+    } finally {
+      if (timer2 !== void 0 && clearTimeout(timer2), onAbort !== void 0 && caller !== void 0)
+        try {
+          caller.removeEventListener("abort", onAbort);
+        } catch {
+        }
+    }
+  };
+  for (; ; ) {
+    if (aborted2())
+      return { kind: "aborted", waitedMs: now2() - startedAt, probes };
+    probes += 1;
+    let outcome = await probeWithinRemaining(probes, budgetMs - (now2() - startedAt));
+    if (outcome === "aborted" || aborted2())
+      return { kind: "aborted", waitedMs: now2() - startedAt, probes };
+    if (outcome === "deadline")
+      return {
+        kind: "unborn",
+        reason: `${lastReason} (the last read face did not answer within the remaining window)`,
+        waitedMs: now2() - startedAt,
+        probes
+      };
+    let probed = outcome;
+    if (probed.kind === "row")
+      return { kind: "row", row: probed.row, waitedMs: now2() - startedAt, probes };
+    if (probed.kind === "settled")
+      return { kind: "settled", reason: probed.reason, waitedMs: now2() - startedAt, probes };
+    lastReason = probed.reason;
+    let remainingMs = budgetMs - (now2() - startedAt);
+    if (remainingMs <= 0)
+      return { kind: "unborn", reason: lastReason, waitedMs: now2() - startedAt, probes };
+    if (await sleep10(Math.min(intervalMs, remainingMs), deps2.signal), aborted2())
+      return { kind: "aborted", waitedMs: now2() - startedAt, probes };
+  }
+}
+var init_parkRowBirthWait = __esm({
+  "node_modules/@sema-agent/client-core/dist/hitl/parkRowBirthWait.js"() {
+    init_abortableSleep();
+  }
+});
+
+// node_modules/@sema-agent/client-core/dist/hitl/approvalDecisionNoteAudit.js
+function cleanNote(raw2) {
+  let flat = raw2.replace(/[\u0000-\u001f\u007f-\u009f]+/g, " ").replace(/ {2,}/g, " ").trim();
+  return flat.length <= 200 ? flat : `${flat.slice(0, 199)}\u2026`;
+}
+function readDecisionNoteAudit(ack) {
+  if (ack === null || typeof ack != "object")
+    return { state: "unknown" };
+  let o = ack, note = typeof o.decisionNote == "string" && o.decisionNote.trim() !== "" ? cleanNote(o.decisionNote) : void 0;
+  return o.noteRecorded === !1 ? { state: "not-recorded", ...note !== void 0 ? { note } : {} } : o.noteRecorded === !0 ? { state: "recorded", ...note !== void 0 ? { note } : {} } : note !== void 0 ? { state: "recorded", note } : { state: "unknown" };
+}
+function decisionNoteAuditLine(audit, opts) {
+  if (audit.state === "unknown")
+    return null;
+  let quoted = audit.note !== void 0 ? `: "${audit.note}"` : "";
+  return opts?.settledElsewhere === !0 ? audit.state === "recorded" ? `this approval was already decided elsewhere \u2014 the reason recorded on the audit trail${quoted}` : `this approval was already decided elsewhere; your reason was not saved to the audit trail \u2014 that decision stands${quoted}` : audit.state === "recorded" ? `decision reason recorded on the audit trail${quoted}` : `your decision stands \u2014 the engine did not save its reason to the audit trail${quoted}`;
+}
+var DECISION_NOTE_NOTICE_KEY, init_approvalDecisionNoteAudit = __esm({
+  "node_modules/@sema-agent/client-core/dist/hitl/approvalDecisionNoteAudit.js"() {
+    DECISION_NOTE_NOTICE_KEY = "approval-decision-note";
+  }
+});
+
+// node_modules/@sema-agent/client-core/dist/hitl/askParkRowRouting.js
+function classifyAskParkRows(rows2, taskId, deps2) {
+  let isOwned = deps2?.isOwned ?? ((row2) => pendingRowIsOwnedByThisSession(row2, deps2?.ownership)), own2 = rows2.find((r) => r.taskId === taskId), sole = rows2.length === 1 ? rows2[0] : void 0, soleUnowned = sole !== void 0 && !isOwned(sole), pending2 = own2 ?? (soleUnowned ? void 0 : sole);
+  if (pending2 === void 0)
+    return {
+      kind: "unborn",
+      reason: rows2.length === 0 ? (
+        // 空表两义:要么真孤儿 park(座位占着却没有待决行 = 引擎态异常),要么下一只门的行还没
+        // 铸出来。两义分不开 ⇒ 按可修的那一义有界重查,窗尽才按前者如实收口。
+        `no pending row at all for task ${taskId} \u2014 either an orphan park (a seat held with no decision outstanding) or the next gate's row is not minted yet`
+      ) : soleUnowned ? `the only pending row (task ${String(sole?.taskId)} / session ${String(sole?.sessionId)}) could not be proven to belong to this client (not in its own-run ledger, session id absent or different) \u2014 refusing to surface an approval that may be another session's` : `${String(rows2.length)} pending rows but none for task ${taskId} \u2014 ambiguous queue, refusing to surface an unrelated row`
+    };
+  let foreignKind = askParkForeignGateKind(pending2);
+  return foreignKind !== null ? {
+    kind: "unborn",
+    reason: `the visible pending row (task ${String(pending2.taskId)}) is parked on a '${foreignKind}' gate \u2014 not an ask/approval gate; this arm will not surface or decide it, and it may also be the previous gate's row still visible during a transition`
+  } : { kind: "row", row: pending2 };
+}
+function askParkRowGateKind(row2) {
+  return typeof row2.gateKind == "string" && row2.gateKind.length > 0 ? row2.gateKind : null;
+}
+function askParkRowIdentity(taskId, row2) {
+  let rowTaskId = typeof row2.taskId == "string" && row2.taskId.length > 0 ? row2.taskId : taskId, gatedCallId = row2.toolCallId ?? row2.boundCallId ?? void 0;
+  return { rowTaskId, gatedCallId, armedKey: approvalCallKey(gatedCallId, rowTaskId) };
+}
+function askParkRowArm(row2) {
+  let rowGateKind = askParkRowGateKind(row2), toolNameIsAsk = isAskTool(row2.toolName ?? void 0);
+  if (rowGateKind === null)
+    return toolNameIsAsk ? "question" : "tool-gate";
+  if (!GENERIC_DECISION_GATE_KINDS.includes(rowGateKind))
+    return "tool-gate";
+  let rowHasToolName = typeof row2.toolName == "string" && row2.toolName.trim().length > 0;
+  return toolNameIsAsk || askQuestionsFromPending(row2) !== null || !rowHasToolName ? "question" : "tool-gate";
+}
+function askParkRowStillPending(rows2, identity3) {
+  return rows2.some((r) => identity3.gatedCallId !== void 0 ? (r.toolCallId ?? r.boundCallId ?? void 0) === identity3.gatedCallId : r.taskId === identity3.rowTaskId);
+}
+function classifyAskParkChainFailure(i) {
+  return i.rowStillPending ? "retry" : i.cardPresented ? "row-gone-after-card" : "row-unborn";
+}
+function createRowArmSingleFlight() {
+  let inFlight4 = /* @__PURE__ */ new Map(), starting = /* @__PURE__ */ new Set();
+  return {
+    join: (key, start) => {
+      if (starting.has(key))
+        return Promise.reject(new Error(`row-arm single flight: start() re-entered join() for its own key while starting (${key})`));
+      let joined = inFlight4.get(key);
+      if (joined !== void 0)
+        return joined;
+      let settle2, fail6, run2 = new Promise((resolve57, reject3) => {
+        settle2 = resolve57, fail6 = reject3;
+      });
+      inFlight4.set(key, run2);
+      let release2 = () => {
+        inFlight4.get(key) === run2 && inFlight4.delete(key);
+      };
+      run2.then(release2, release2), starting.add(key);
+      try {
+        let started2 = start();
+        started2 === run2 ? fail6?.(new Error("row-arm single flight: start() returned the in-flight placeholder for the same key")) : settle2?.(started2);
+      } catch (e) {
+        fail6?.(e);
+      } finally {
+        starting.delete(key);
+      }
+      return run2;
+    },
+    size: () => inFlight4.size,
+    clear: () => {
+      inFlight4.clear();
+    }
+  };
+}
+var ASK_PARK_ROW_WAIT_MS, ASK_PARK_ROW_POLL_MS, GENERIC_DECISION_GATE_KINDS, init_askParkRowRouting = __esm({
+  "node_modules/@sema-agent/client-core/dist/hitl/askParkRowRouting.js"() {
+    init_activeRunSelfHeal();
+    init_frameRouter();
+    init_gateIdentity();
+    init_parkOwnership();
+    ASK_PARK_ROW_WAIT_MS = 15e3, ASK_PARK_ROW_POLL_MS = 500;
+    GENERIC_DECISION_GATE_KINDS = ["human", "policy_ask"];
+  }
+});
+
+// node_modules/@sema-agent/client-core/dist/hitl/resumeRunningCard.js
+function resumeRunningLivenessRow(msSinceLastActivity) {
+  let ms = msSinceLastActivity;
+  return typeof ms != "number" || !Number.isFinite(ms) || ms < 0 ? null : `The engine last recorded activity on it ${String(Math.round(ms / 1e3))}s ago.`;
+}
+function resumeRunningQuestionText(i) {
+  let head = `This conversation was resumed while an earlier turn is still executing on the engine (run ${i.taskId}, status ${i.status}). sema did not touch it. What should it do?`, liveness = resumeRunningLivenessRow(i.msSinceLastActivity);
+  return liveness === null ? head : `${head}
+${liveness}`;
+}
+function resumeRunningOptions(i) {
+  let options = [
+    {
+      // 🔴 默认焦点 —— 三条路里唯一零副作用的一条,所以它是手滑回车的落点。
+      // 🔴 措辞:这一项**不许**承诺「它会留在某个任务面板里」—— 这张卡的前提恰恰是「那条 run 活得
+      //    比上一个客户端进程久」,新进程里没有任何腿会为它建行(③ 的处置本身也是显式零动作)。
+      //    默认焦点上的一句假 affordance 是最坏的一格:手滑回车的人拿到一条既看不见、也停不掉、
+      //    还占着会话锁的 run。换成两句**可证的**真话:本屏不会列出它;它还占着会话,所以下一条
+      //    消息会再撞上它(那时 409 三选卡会带着 steer/cancel 两条真出路出现)。
+      label: RESUME_CHOICE_BACKGROUND_LABEL,
+      description: "Leaves the run alone. It keeps executing on the engine, but this screen will not show it and it will not be listed here \u2014 your next message runs into it again, and sema asks you then."
+    }
+  ];
+  return i.canAttach && options.push({
+    label: RESUME_CHOICE_ATTACH_LABEL,
+    // 🔴 第二句是**知情同意**那一半(见 {@link resumeAttachReplayDisclosure}):resume 入口没有
+    //    事件锚可用,durable 尾只能从这条 run 的第一帧读起,所以崩溃前已经落盘并被 resume 还原到
+    //    屏上的那一段会再出现一次。用户按下之前就得看见这句 —— 一个会做出用户没预料到的事的
+    //    选项,和一个按了没用的选项同样是假 affordance。
+    description: "Follows that run from here: sema replays it from the engine ledger and keeps streaming it into this conversation. Anything from that turn already shown above will appear a second time \u2014 sema has no resume marker for it."
+  }), i.canCancel && options.push({
+    label: RESUME_CHOICE_CANCEL_LABEL,
+    description: "Stops that run on the engine (whatever it has been doing is discarded) and frees this session for a new turn."
+  }), options;
+}
+function resumeChoiceFromLabels(selected) {
+  if (!Array.isArray(selected) || selected.length !== 1)
+    return "background";
+  let label = selected[0];
+  return label === RESUME_CHOICE_ATTACH_LABEL ? "attach" : label === RESUME_CHOICE_CANCEL_LABEL ? "cancel" : "background";
+}
+function resumeRunningNoUiGuidance(i) {
+  let sid = typeof i.sessionId == "string" && i.sessionId.length > 0 ? i.sessionId : null, attach = sid === null ? "sema --resume (pick this session from the list)" : `sema --resume ${sid}`, T3 = RESUME_RUNNING_GUIDANCE_TAG;
+  return [
+    `${T3} run ${i.taskId} from an earlier turn is still executing on the engine, and this lane has no card to ask you on. sema did NOT cancel it and did NOT attach to it.`,
+    `${T3} attach=${attach}`,
+    `${T3} cancel=POST /v1/runs/${i.taskId}/cancel`,
+    // 🔴 这条车道连 REPL 都不挂载,更没有任何本地面板可看。给的是引擎侧真读面。
+    `${T3} background=do nothing \u2014 run ${i.taskId} keeps executing on the engine; this client does not list it (read it with GET /v1/runs/${i.taskId})`
+  ].join(`
+`);
+}
+function resumeAttachReplayDisclosure(taskId) {
+  return `sema: attaching to run ${taskId} \u2014 sema is replaying it from the engine's ledger, so anything from that turn already shown above will appear again below. There is no resume marker for a run that outlived its shell. The replayed turns are not billed into this session's cost again either \u2014 the engine's own record (GET /v1/runs/${taskId}) is the authority on what that run really spent.`;
+}
+function resumeRunningCancelUnconfirmedRow(taskId) {
+  return `sema: the cancel for run ${taskId} did not come back confirmed, so that run may still be executing. This screen does not list it \u2014 read its real state on the engine (GET /v1/runs/${taskId}) before assuming this session is free.`;
+}
+var RESUME_CHOICE_ATTACH_LABEL, RESUME_CHOICE_CANCEL_LABEL, RESUME_CHOICE_BACKGROUND_LABEL, RESUME_CHOICE_HEADER, RESUME_RUNNING_NO_UI_EXIT_CODE, RESUME_RUNNING_GUIDANCE_TAG, init_resumeRunningCard = __esm({
+  "node_modules/@sema-agent/client-core/dist/hitl/resumeRunningCard.js"() {
+    RESUME_CHOICE_ATTACH_LABEL = "Attach and watch", RESUME_CHOICE_CANCEL_LABEL = "Cancel it", RESUME_CHOICE_BACKGROUND_LABEL = "Leave it running in the background", RESUME_CHOICE_HEADER = "Earlier run still in flight";
+    RESUME_RUNNING_NO_UI_EXIT_CODE = 75, RESUME_RUNNING_GUIDANCE_TAG = "sema: resume-running:";
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/hitl/approvalsFeed.js
 function digestOf(rows2) {
   return rows2.map((r) => [r.sessionId ?? "", r.taskId ?? "", r.toolCallId ?? "", r.boundCallId ?? "", r.boundInputHash ?? "", r.toolName ?? ""].join("
")).sort().join("");
@@ -65293,6 +65747,16 @@ function toolPermissionRequestIdDomain(requestId) {
   if (typeof requestId == "string")
     return TOOL_PERMISSION_REQUEST_ID_DOMAINS.find((d4) => requestId.startsWith(d4));
 }
+function toolPermissionRequestId(domain2, id) {
+  if (!TOOL_PERMISSION_REQUEST_ID_DOMAINS.includes(domain2))
+    throw new Error(`toolPermissionRequestId: \u672A\u767B\u8BB0\u7684 requestId \u57DF \u2014\u2014 \u53EA\u8BA4 ${TOOL_PERMISSION_REQUEST_ID_DOMAINS.join(" / ")}(\u57DF\u524D\u7F00\u5C31\u662F\u51B3\u65AD\u7684\u8DEF\u7531\u4F9D\u636E,\u57DF\u5916\u952E\u65E0\u5904\u53EF\u53BB)`);
+  if (typeof id != "string" || id.length === 0)
+    throw new Error(`toolPermissionRequestId: \u57DF ${domain2} \u7684 id \u5FC5\u987B\u662F\u975E\u7A7A\u4E32(\u6536\u5230 ${typeof id})\u2014\u2014 \u534A\u622A\u952E\u4F1A\u88AB\u8BFB\u53E3\u8BA4\u6210\u672C\u57DF,\u5374\u8DEF\u7531\u4E0D\u5230\u4EFB\u4F55\u76EE\u6807`);
+  let nested2 = toolPermissionRequestIdDomain(id);
+  if (nested2 !== void 0)
+    throw new Error(`toolPermissionRequestId: \u57DF ${domain2} \u7684 id \u672C\u8EAB\u5DF2\u5E26\u57DF\u524D\u7F00 ${nested2} \u2014\u2014 \u628A\u94F8\u597D\u7684 requestId \u5F53 id \u518D\u5582\u8FDB\u6765\u4F1A\u5F97\u5230\u53CC\u524D\u7F00\u952E(durable \u7684 id \u6BB5\u53EF\u4EE5\u542B\u5192\u53F7,\u4F46\u4E0D\u80FD\u4EE5\u57DF\u524D\u7F00\u5F00\u5934)`);
+  return `${domain2}${id}`;
+}
 function isLocalSessionRecord(s) {
   return checkLocalSessionRecord(s) === !0;
 }
@@ -66547,6 +67011,8 @@ __export(dist_exports, {
   ADAPTER_COVERAGE: () => ADAPTER_COVERAGE,
   ADAPTER_DIVERGENCES: () => ADAPTER_DIVERGENCES,
   ASK_PARK_GATE_KINDS: () => ASK_PARK_GATE_KINDS,
+  ASK_PARK_ROW_POLL_MS: () => ASK_PARK_ROW_POLL_MS,
+  ASK_PARK_ROW_WAIT_MS: () => ASK_PARK_ROW_WAIT_MS,
   ASK_PARK_STATES: () => ASK_PARK_STATES,
   ATTACHMENTS_DEFAULT_ON_KEYS: () => ATTACHMENTS_DEFAULT_ON_KEYS,
   ATTACHMENTS_ENV: () => ATTACHMENTS_ENV,
@@ -66559,6 +67025,7 @@ __export(dist_exports, {
   CANCEL_DENY_BUDGET_MS: () => CANCEL_DENY_BUDGET_MS,
   CANCEL_DENY_WARN_TEXT: () => CANCEL_DENY_WARN_TEXT,
   CANCEL_MESSAGE: () => CANCEL_MESSAGE,
+  CANCEL_RELEASE_WAIT_MS: () => CANCEL_RELEASE_WAIT_MS,
   CATALOG_CACHE_RELATIVE_PATH: () => CATALOG_CACHE_RELATIVE_PATH,
   CATALOG_CACHE_STALE_MS: () => CATALOG_CACHE_STALE_MS,
   CATALOG_DEFAULT_HOSTS: () => CATALOG_DEFAULT_HOSTS,
@@ -66568,6 +67035,8 @@ __export(dist_exports, {
   CC_STOP_SEMANTICS_MIN_SERVER: () => CC_STOP_SEMANTICS_MIN_SERVER,
   CHROME_ARMS: () => CHROME_ARMS,
   CHROME_EVENT_KINDS: () => CHROME_EVENT_KINDS,
+  CLAIM_HELD_STATES: () => CLAIM_HELD_STATES,
+  CLAIM_RELEASED_STATES: () => CLAIM_RELEASED_STATES,
   CLASSIFIER_DENY_SIGNATURE: () => CLASSIFIER_DENY_SIGNATURE,
   CLIENT_VERBS: () => CLIENT_VERBS,
   CONFIG_LIMIT_INVALID: () => CONFIG_LIMIT_INVALID,
@@ -66581,6 +67050,7 @@ __export(dist_exports, {
   ControlSafetyError: () => ControlSafetyError,
   DEADLINE_SEC_MAX: () => DEADLINE_SEC_MAX,
   DEADLINE_SEC_MIN: () => DEADLINE_SEC_MIN,
+  DECISION_NOTE_NOTICE_KEY: () => DECISION_NOTE_NOTICE_KEY,
   DEFAULT_CATALOG_SOURCES: () => DEFAULT_CATALOG_SOURCES,
   DEFAULT_CATALOG_TIMEOUT_MS: () => DEFAULT_CATALOG_TIMEOUT_MS,
   DEFAULT_DENY_REASON: () => DEFAULT_DENY_REASON,
@@ -66669,6 +67139,7 @@ __export(dist_exports, {
   PERMISSION_MODE_INTENTS: () => PERMISSION_MODE_INTENTS,
   PLAN_REVIEW_APPROVE_LABEL: () => PLAN_REVIEW_APPROVE_LABEL,
   PLAN_REVIEW_GATE_KIND: () => PLAN_REVIEW_GATE_KIND,
+  PLAN_REVIEW_GATE_KINDS: () => PLAN_REVIEW_GATE_KINDS,
   PLAN_REVIEW_QUESTION_ID_PREFIX: () => PLAN_REVIEW_QUESTION_ID_PREFIX,
   PLAN_REVIEW_REJECT_LABEL: () => PLAN_REVIEW_REJECT_LABEL,
   PLAN_REVIEW_STATES: () => PLAN_REVIEW_STATES,
@@ -66681,8 +67152,15 @@ __export(dist_exports, {
   REMEMBER_NOT_APPLIED_WARN_TEXT: () => REMEMBER_NOT_APPLIED_WARN_TEXT,
   REOPEN_ID_TAIL: () => REOPEN_ID_TAIL,
   REQUEST_FIELD_MATRIX: () => REQUEST_FIELD_MATRIX,
+  RESUME_CHOICE_ATTACH_LABEL: () => RESUME_CHOICE_ATTACH_LABEL,
+  RESUME_CHOICE_BACKGROUND_LABEL: () => RESUME_CHOICE_BACKGROUND_LABEL,
+  RESUME_CHOICE_CANCEL_LABEL: () => RESUME_CHOICE_CANCEL_LABEL,
+  RESUME_CHOICE_HEADER: () => RESUME_CHOICE_HEADER,
+  RESUME_RUNNING_GUIDANCE_TAG: () => RESUME_RUNNING_GUIDANCE_TAG,
+  RESUME_RUNNING_NO_UI_EXIT_CODE: () => RESUME_RUNNING_NO_UI_EXIT_CODE,
   RETAIN_BACKGROUND_ENV: () => RETAIN_BACKGROUND_ENV,
   REWIND_ERROR_CODE_PREFIXES: () => REWIND_ERROR_CODE_PREFIXES,
+  RUNNING_STATES: () => RUNNING_STATES,
   SANDBOX_CASCADE_CONFLICT_400_ANCHOR: () => SANDBOX_CASCADE_CONFLICT_400_ANCHOR,
   SANDBOX_K8S_ONLY_400_ANCHOR: () => SANDBOX_K8S_ONLY_400_ANCHOR,
   SANDBOX_NO_IMAGE_INDEX_400_ANCHOR: () => SANDBOX_NO_IMAGE_INDEX_400_ANCHOR,
@@ -66785,8 +67263,13 @@ __export(dist_exports, {
   armedKeyFromQuestionId: () => armedKeyFromQuestionId,
   asModelFallbackReason: () => asModelFallbackReason,
   askGateQuestionId: () => askGateQuestionId,
+  askParkForeignGateKind: () => askParkForeignGateKind,
+  askParkRowArm: () => askParkRowArm,
+  askParkRowIdentity: () => askParkRowIdentity,
+  askParkRowStillPending: () => askParkRowStillPending,
   askQuestionsFromPending: () => askQuestionsFromPending,
   assistantTaskToBackgroundRow: () => assistantTaskToBackgroundRow,
+  atMostOnceFailureClass: () => atMostOnceFailureClass,
   attachmentsForRequest: () => attachmentsForRequest,
   attemptActiveRunSelfHeal: () => attemptActiveRunSelfHeal,
   awaitTaskAgentsWire: () => awaitTaskAgentsWire,
@@ -66804,6 +67287,8 @@ __export(dist_exports, {
   ccStopSemanticsFromVersion: () => ccStopSemanticsFromVersion,
   classifierDenyFromToolEnd: () => classifierDenyFromToolEnd,
   classifierDenyNoticeText: () => classifierDenyNoticeText,
+  classifyAskParkChainFailure: () => classifyAskParkChainFailure,
+  classifyAskParkRows: () => classifyAskParkRows,
   classifyHookNoticeFrame: () => classifyHookNoticeFrame,
   classifyTaskStopConflict: () => classifyTaskStopConflict,
   clearAllRetainedFleetRows: () => clearAllRetainedFleetRows,
@@ -66831,8 +67316,10 @@ __export(dist_exports, {
   createBackgroundView: () => createBackgroundView,
   createFleetLedger: () => createFleetLedger,
   createLiveWorkflowSource: () => createLiveWorkflowSource,
+  createRowArmSingleFlight: () => createRowArmSingleFlight,
   createWireToCcAdapter: () => createWireToCcAdapter,
   decidePlanReview: () => decidePlanReview,
+  decisionNoteAuditLine: () => decisionNoteAuditLine,
   defaultMaxTokensFor: () => defaultMaxTokensFor,
   deferToolsForRequest: () => deferToolsForRequest,
   degradedToolResultBody: () => degradedToolResultBody,
@@ -67070,9 +67557,13 @@ __export(dist_exports, {
   publishQuestionFrameFor: () => publishQuestionFrameFor,
   publishSubagentContentEvent: () => publishSubagentContentEvent,
   pushSubagentLocalEcho: () => pushSubagentLocalEcho,
+  readAsyncLaunchedAgentReceipt: () => readAsyncLaunchedAgentReceipt,
   readCompletedAgentCard: () => readCompletedAgentCard,
+  readDecisionNoteAudit: () => readDecisionNoteAudit,
   readEngineActiveBgTasks: () => readEngineActiveBgTasks,
   readEngineActiveBgTasksFor: () => readEngineActiveBgTasksFor,
+  readSteerDelivery: () => readSteerDelivery,
+  readSteerReceiptStatus: () => readSteerReceiptStatus,
   readToolApprovalRespondAck: () => readToolApprovalRespondAck,
   recordBgParentRun: () => recordBgParentRun,
   recordBgTerminalFacts: () => recordBgTerminalFacts,
@@ -67089,6 +67580,7 @@ __export(dist_exports, {
   registerOutstandingBgTask: () => registerOutstandingBgTask,
   registerOutstandingWorkflowRun: () => registerOutstandingWorkflowRun,
   registerSubagentAlias: () => registerSubagentAlias,
+  registerSubagentContentAlias: () => registerSubagentContentAlias,
   renderTaskNotificationXml: () => renderTaskNotificationXml,
   reopenPlanReviewCard: () => reopenPlanReviewCard,
   reportFindingsToolUseResult: () => reportFindingsToolUseResult,
@@ -67110,6 +67602,13 @@ __export(dist_exports, {
   resolveWebSearch: () => resolveWebSearch,
   resolveWireAuth: () => resolveWireAuth,
   respondToQuestion: () => respondToQuestion,
+  resumeAttachReplayDisclosure: () => resumeAttachReplayDisclosure,
+  resumeChoiceFromLabels: () => resumeChoiceFromLabels,
+  resumeRunningCancelUnconfirmedRow: () => resumeRunningCancelUnconfirmedRow,
+  resumeRunningLivenessRow: () => resumeRunningLivenessRow,
+  resumeRunningNoUiGuidance: () => resumeRunningNoUiGuidance,
+  resumeRunningOptions: () => resumeRunningOptions,
+  resumeRunningQuestionText: () => resumeRunningQuestionText,
   retainBackgroundFromEnv: () => retainBackgroundFromEnv,
   rewindSpecForMode: () => rewindSpecForMode,
   rowIdTail: () => rowIdTail,
@@ -67175,6 +67674,7 @@ __export(dist_exports, {
   toolEndResultToUserFrame: () => toolEndResultToUserFrame,
   toolNameIsFsWrite: () => toolNameIsFsWrite,
   toolNameIsShellExec: () => toolNameIsShellExec,
+  toolPermissionRequestId: () => toolPermissionRequestId,
   toolPermissionRequestIdDomain: () => toolPermissionRequestIdDomain,
   turnEndUsage: () => turnEndUsage,
   turnUsageToModelUsage: () => turnUsageToModelUsage,
@@ -67189,6 +67689,8 @@ __export(dist_exports, {
   validateWebSearchChoice: () => validateWebSearchChoice,
   versionSupportsDetach: () => versionSupportsDetach,
   versionSupportsLimits: () => versionSupportsLimits,
+  waitForClaimRelease: () => waitForClaimRelease,
+  waitForParkRowBirth: () => waitForParkRowBirth,
   wasGateArmed: () => wasGateArmed,
   wasGateArmedFor: () => wasGateArmedFor,
   webSearchFromEnv: () => webSearchFromEnv,
@@ -67303,6 +67805,10 @@ var init_dist = __esm({
     init_gateIdentity();
     init_armedGateRegistry();
     init_parkOwnership();
+    init_parkRowBirthWait();
+    init_approvalDecisionNoteAudit();
+    init_askParkRowRouting();
+    init_resumeRunningCard();
     init_approvalsFeed();
     init_compensations();
     init_printNotification();
@@ -80955,12 +81461,14 @@ function settingsJsonTheme() {
   try {
     let v2 = resolveUserSetting("theme");
     if (typeof v2 == "string") return v2;
-  } catch {
+  } catch (e) {
+    failOpen("theme-source-user-setting", void 0, String(e));
   }
   try {
     let raw2 = readFileSync10(join31(homedir14(), ".sema", "settings.json"), "utf8"), parsed = JSON.parse(raw2);
     if (typeof parsed.theme == "string") return parsed.theme;
-  } catch {
+  } catch (e) {
+    failOpen("theme-source-settings-file", void 0, String(e));
   }
 }
 function resolveThemeSetting(setting) {
@@ -80973,7 +81481,8 @@ function semaInitialTheme() {
 function persistThemeToSettings(setting) {
   try {
     updateSettingsForSource("userSettings", { theme: setting }), resetUserSettingCache();
-  } catch {
+  } catch (e) {
+    failOpen("theme-write-user-setting", void 0, String(e));
   }
 }
 function detectFromColorFgBg() {
@@ -80989,6 +81498,7 @@ var cachedSystemTheme, init_systemTheme = __esm({
   "build-src/src/utils/systemTheme.ts"() {
     init_settings2();
     init_userSetting();
+    init_failOpen();
   }
 });
 
@@ -114247,7 +114757,7 @@ function readReceiptStatus(receipt) {
   return typeof s == "string" && s.length > 0 ? s : null;
 }
 function cancelReleaseWaitMs() {
-  return cancelReleaseWaitOverrideMs ?? CANCEL_RELEASE_WAIT_MS;
+  return cancelReleaseWaitOverrideMs ?? CANCEL_RELEASE_WAIT_MS2;
 }
 function sleep2(ms, signal) {
   return signal?.aborted === !0 ? Promise.resolve() : new Promise((resolve57) => {
@@ -114266,14 +114776,14 @@ function claimProbeSignal(caller, deadline) {
   let ac = new AbortController(), abort = (s) => ac.abort(s.reason);
   return caller.aborted ? abort(caller) : caller.addEventListener("abort", () => abort(caller), { once: !0 }), budget.addEventListener("abort", () => abort(budget), { once: !0 }), ac.signal;
 }
-async function waitForClaimRelease(taskId, get4, budgetMs, signal) {
-  let startedAt = Date.now(), deadline = startedAt + budgetMs, waited = () => Date.now() - startedAt, isAborted3 = () => signal?.aborted === !0, delay = CANCEL_POLL_START_MS;
+async function waitForClaimRelease2(taskId, get4, budgetMs, signal) {
+  let startedAt = Date.now(), deadline = startedAt + budgetMs, waited = () => Date.now() - startedAt, isAborted3 = () => signal?.aborted === !0, delay = CANCEL_POLL_START_MS2;
   for (; ; ) {
     if (isAborted3()) return { released: !1, waitedMs: waited(), aborted: !0 };
     let remaining = deadline - Date.now();
     if (remaining <= 0) return { released: !1, waitedMs: waited(), aborted: !1 };
     if (await sleep2(Math.min(delay, remaining), signal), isAborted3()) return { released: !1, waitedMs: waited(), aborted: !0 };
-    delay = Math.min(Math.round(delay * 1.5), CANCEL_POLL_MAX_MS);
+    delay = Math.min(Math.round(delay * 1.5), CANCEL_POLL_MAX_MS2);
     let status3;
     try {
       status3 = readStatus2(await get4(taskId, { signal: claimProbeSignal(signal, deadline) }));
@@ -114282,7 +114792,7 @@ async function waitForClaimRelease(taskId, get4, budgetMs, signal) {
       if (e?.status === 404) return { released: !0, waitedMs: waited(), aborted: !1 };
       continue;
     }
-    if (status3 !== null && CLAIM_RELEASED_STATES.includes(status3)) return { released: !0, waitedMs: waited(), aborted: !1 };
+    if (status3 !== null && CLAIM_RELEASED_STATES2.includes(status3)) return { released: !0, waitedMs: waited(), aborted: !1 };
   }
 }
 async function attemptActiveRunSelfHeal2(signal, runs, deps2) {
@@ -114292,6 +114802,11 @@ async function attemptActiveRunSelfHeal2(signal, runs, deps2) {
   } catch {
     pending2 = !1;
   }
+  if (pending2 && deps2?.listOwnedPendingApprovals !== void 0)
+    try {
+      await deps2.listOwnedPendingApprovals() === 0 && (pending2 = !1);
+    } catch {
+    }
   if (pending2) return { kind: "decision-pending", taskId: signal.activeTaskId };
   let taskId = signal.activeTaskId;
   if (taskId === null)
@@ -114300,28 +114815,28 @@ async function attemptActiveRunSelfHeal2(signal, runs, deps2) {
       taskId: null,
       detail: "the engine did not name the run that holds this session"
     };
-  let planVerdict = async () => {
+  let planVerdict2 = async () => {
     try {
       return await deps2?.reopenPlanReview?.(taskId) ?? { reopened: !1 };
     } catch {
       return { reopened: !1 };
     }
-  }, askVerdict = async () => {
+  }, askVerdict2 = async () => {
     try {
       return await deps2?.reopenAskPark?.(taskId) ?? { reopened: !1 };
     } catch {
       return { reopened: !1 };
     }
   }, reopenPlanArm = async () => {
-    let verdict = await planVerdict();
+    let verdict = await planVerdict2();
     return verdict.reopened === !0 ? { kind: "plan-review-reopened", taskId, firstSight: verdict.firstSight === !0 } : { kind: "plan-review-reopen-failed", taskId, decidePath: signal.pendingGate?.decidePath ?? null };
   }, reopenAskArm = async () => {
-    let verdict = await askVerdict();
+    let verdict = await askVerdict2();
     return verdict.reopened === !0 ? { kind: "ask-reopened", taskId, firstSight: verdict.firstSight === !0 } : { kind: "ask-reopen-failed", taskId, decidePath: signal.pendingGate?.decidePath ?? null };
-  }, runningChoiceArm = async (status4) => {
+  }, runningChoiceArm2 = async (status4) => {
     let notParked = { kind: "not-parked", taskId, status: status4 }, offer = deps2?.offerRunningChoice;
     if (typeof offer != "function") return notParked;
-    let text2 = typeof deps2?.deniedMessage == "string" ? deps2.deniedMessage : "", steer = runs?.steer, cancel = runs?.cancel, get4 = runs?.get, canSteer = typeof steer == "function" && text2.length > 0, canCancel = typeof cancel == "function" && typeof get4 == "function";
+    let text2 = typeof deps2?.deniedMessage == "string" ? deps2.deniedMessage : "", steer = typeof runs?.steer == "function" ? runs.steer.bind(runs) : void 0, cancel = typeof runs?.cancel == "function" ? runs.cancel.bind(runs) : void 0, get4 = typeof runs?.get == "function" ? runs.get.bind(runs) : void 0, canSteer = typeof steer == "function" && text2.length > 0, canCancel = typeof cancel == "function" && typeof get4 == "function";
     if (!canSteer && !canCancel) return notParked;
     let choice = "wait";
     try {
@@ -114333,7 +114848,7 @@ async function attemptActiveRunSelfHeal2(signal, runs, deps2) {
       try {
         let receipt = await steer(taskId, { text: text2 }), delivery = readDelivery(receipt), receiptStatus = readReceiptStatus(receipt);
         if (delivery === "queued") {
-          let verdict = receiptStatus !== null && PLAN_REVIEW_STATES2.includes(receiptStatus) ? await planVerdict() : receiptStatus !== null && ASK_PARK_STATES2.includes(receiptStatus) ? await askVerdict() : null;
+          let verdict = receiptStatus !== null && PLAN_REVIEW_STATES2.includes(receiptStatus) ? await planVerdict2() : receiptStatus !== null && ASK_PARK_STATES2.includes(receiptStatus) ? await askVerdict2() : null;
           return { kind: "running-steered", taskId, delivery, status: receiptStatus, reopened: verdict };
         }
         return { kind: "running-steered", taskId, delivery, status: receiptStatus, reopened: null };
@@ -114346,12 +114861,12 @@ async function attemptActiveRunSelfHeal2(signal, runs, deps2) {
       } catch (e) {
         return { kind: "running-cancel-failed", taskId, detail: describeFailure2(e) };
       }
-      let verdict = await waitForClaimRelease(taskId, get4, cancelReleaseWaitMs(), deps2?.signal);
+      let verdict = await waitForClaimRelease2(taskId, get4, cancelReleaseWaitMs(), deps2?.signal);
       return verdict.released ? { kind: "running-cancelled", taskId } : { kind: "running-cancel-timeout", taskId, waitedMs: verdict.waitedMs, aborted: verdict.aborted };
     }
     return notParked;
   }, gateKind2 = signal.pendingGate?.kind ?? null;
-  if (gateKind2 !== null && PLAN_REVIEW_GATE_KINDS.includes(gateKind2)) return reopenPlanArm();
+  if (gateKind2 !== null && PLAN_REVIEW_GATE_KINDS2.includes(gateKind2)) return reopenPlanArm();
   if (gateKind2 !== null && ASK_PARK_GATE_KINDS2.includes(gateKind2)) return reopenAskArm();
   let status3 = signal.activeTaskStatus;
   if (status3 === null) {
@@ -114365,7 +114880,7 @@ async function attemptActiveRunSelfHeal2(signal, runs, deps2) {
     }
     status3 = readStatus2(record2);
   }
-  return status3 === null ? { kind: "state-unknown", taskId, detail: "the engine reported no status for that run" } : gateKind2 !== null ? { kind: "not-parked", taskId, status: status3 } : PLAN_REVIEW_STATES2.includes(status3) ? reopenPlanArm() : ASK_PARK_STATES2.includes(status3) ? reopenAskArm() : RUNNING_STATES.includes(status3) ? runningChoiceArm(status3) : { kind: "not-parked", taskId, status: status3 };
+  return status3 === null ? { kind: "state-unknown", taskId, detail: "the engine reported no status for that run" } : gateKind2 !== null ? { kind: "not-parked", taskId, status: status3 } : PLAN_REVIEW_STATES2.includes(status3) ? reopenPlanArm() : ASK_PARK_STATES2.includes(status3) ? reopenAskArm() : RUNNING_STATES2.includes(status3) ? runningChoiceArm2(status3) : { kind: "not-parked", taskId, status: status3 };
 }
 function gateKindPhrase2(kind) {
   return kind ? `a ${kind} decision` : "a decision";
@@ -114439,11 +114954,11 @@ function activeRunBusyHeadlessRow2(signal) {
   // 用户唯一能读到的就是这一段话。
   governanceOriginClause2(signal) : status3 ? `This session is held by an earlier run${handle2} with status ${status3}, so this message was NOT sent. The engine reported no decision pending on that run: if it is still working, wait for it to finish; if it will never settle, release it with ${cancelPath} (that discards whatever it was doing). Or ${freshSession}.` : `This session is locked by an earlier run${handle2} that was never released, so this message was NOT sent. Nothing here clears on its own. Start a new session (drop --resume/--continue), or release the run on the engine: ${cancelPath}`;
 }
-var PLAN_REVIEW_STATES2, ASK_PARK_STATES2, PLAN_REVIEW_GATE_KINDS, ASK_PARK_GATE_KINDS2, RUNNING_STATES, CLAIM_RELEASED_STATES, CANCEL_RELEASE_WAIT_MS, CANCEL_POLL_START_MS, CANCEL_POLL_MAX_MS, cancelReleaseWaitOverrideMs, INTERACTIVE_WAY_OUT, init_activeRunSelfHeal2 = __esm({
+var PLAN_REVIEW_STATES2, ASK_PARK_STATES2, PLAN_REVIEW_GATE_KINDS2, ASK_PARK_GATE_KINDS2, RUNNING_STATES2, CLAIM_RELEASED_STATES2, CANCEL_RELEASE_WAIT_MS2, CANCEL_POLL_START_MS2, CANCEL_POLL_MAX_MS2, cancelReleaseWaitOverrideMs, INTERACTIVE_WAY_OUT, init_activeRunSelfHeal2 = __esm({
   "build-src/src/sema/activeRunSelfHeal.ts"() {
     init_dist();
-    PLAN_REVIEW_STATES2 = ["needs_review"], ASK_PARK_STATES2 = ["suspended"], PLAN_REVIEW_GATE_KINDS = ["plan_review", "dry_run_review"], ASK_PARK_GATE_KINDS2 = ["human", "irreversible_ask", "policy_ask", "tool_approval"], RUNNING_STATES = ["running"], CLAIM_RELEASED_STATES = ["completed", "failed", "blocked", "timeout"];
-    CANCEL_RELEASE_WAIT_MS = 1e4, CANCEL_POLL_START_MS = 200, CANCEL_POLL_MAX_MS = 2e3, cancelReleaseWaitOverrideMs = null;
+    PLAN_REVIEW_STATES2 = ["needs_review"], ASK_PARK_STATES2 = ["suspended"], PLAN_REVIEW_GATE_KINDS2 = ["plan_review", "dry_run_review"], ASK_PARK_GATE_KINDS2 = ["human", "irreversible_ask", "policy_ask", "tool_approval"], RUNNING_STATES2 = ["running"], CLAIM_RELEASED_STATES2 = ["completed", "failed", "blocked", "timeout"];
+    CANCEL_RELEASE_WAIT_MS2 = 1e4, CANCEL_POLL_START_MS2 = 200, CANCEL_POLL_MAX_MS2 = 2e3, cancelReleaseWaitOverrideMs = null;
     INTERACTIVE_WAY_OUT = "run /clear to keep working in a fresh session";
   }
 });
@@ -178379,7 +178894,8 @@ function _resetPlanReviewReopenSeqForTest() {
   for (let [, entry] of activeReopenByCanonical)
     try {
       entry.unregister();
-    } catch {
+    } catch (e) {
+      failOpen("plan-review-reopen-unregister", void 0, String(e));
     }
   activeReopenByCanonical.clear();
 }
@@ -178435,6 +178951,7 @@ var APPROVE_LABEL2, REJECT_LABEL2, reopenSeq, activeReopenByCanonical, init_plan
     init_dist();
     init_armedGateRegistry2();
     init_transcriptSystemNotice();
+    init_failOpen();
     APPROVE_LABEL2 = PLAN_REVIEW_APPROVE_LABEL, REJECT_LABEL2 = PLAN_REVIEW_REJECT_LABEL, reopenSeq = 0, activeReopenByCanonical = /* @__PURE__ */ new Map();
   }
 });
@@ -178483,95 +179000,19 @@ var DECIDE_RETRY_DELAY_MS, delayOverrideMs, init_decideRetry = __esm({
   }
 });
 
-// build-src/src/sema/parkRowBirthWait.ts
-function abortableDelay(ms, signal) {
-  return signal?.aborted === !0 ? Promise.resolve() : new Promise((resolve57) => {
-    let done = () => {
-      clearTimeout(timer2);
-      try {
-        signal?.removeEventListener("abort", done);
-      } catch {
-      }
-      resolve57();
-    }, timer2 = setTimeout(done, ms);
-    try {
-      signal?.addEventListener("abort", done, { once: !0 });
-    } catch {
-    }
-  });
-}
-async function waitForParkRowBirth(deps2) {
-  let now2 = typeof deps2.now == "function" ? deps2.now : () => Date.now(), sleep10 = typeof deps2.sleep == "function" ? deps2.sleep : abortableDelay, budgetMs = Number.isFinite(deps2.budgetMs) && deps2.budgetMs > 0 ? deps2.budgetMs : 0, intervalMs = Number.isFinite(deps2.intervalMs) && deps2.intervalMs > 0 ? deps2.intervalMs : 1, startedAt = now2(), probes = 0, lastReason = "no decidable pending row for this park", aborted2 = () => deps2.signal?.aborted === !0, safeProbe = async (attempt, signal) => {
-    try {
-      return await deps2.probe(attempt, signal);
-    } catch (e) {
-      return { kind: "unborn", reason: `probe threw: ${String(e)}` };
-    }
-  }, probeWithinRemaining = async (attempt, remainingMs) => {
-    if (budgetMs <= 0) return safeProbe(attempt, deps2.signal);
-    let ctl = new AbortController(), timer2, deadline = new Promise((resolve57) => {
-      timer2 = setTimeout(() => {
-        ctl.abort(), resolve57("deadline");
-      }, Math.max(1, remainingMs));
-    }), caller = deps2.signal, onAbort, externalAbort = new Promise((resolve57) => {
-      if (caller !== void 0) {
-        if (caller.aborted) {
-          resolve57("aborted");
-          return;
-        }
-        onAbort = () => resolve57("aborted");
-        try {
-          caller.addEventListener("abort", onAbort, { once: !0 });
-        } catch {
-          onAbort = void 0;
-        }
-      }
-    }), merged = caller !== void 0 && typeof AbortSignal.any == "function" ? AbortSignal.any([caller, ctl.signal]) : ctl.signal;
-    try {
-      return await Promise.race([safeProbe(attempt, merged), deadline, externalAbort]);
-    } finally {
-      if (timer2 !== void 0 && clearTimeout(timer2), onAbort !== void 0 && caller !== void 0)
-        try {
-          caller.removeEventListener("abort", onAbort);
-        } catch {
-        }
-    }
-  };
-  for (; ; ) {
-    if (aborted2()) return { kind: "aborted", waitedMs: now2() - startedAt, probes };
-    probes += 1;
-    let outcome = await probeWithinRemaining(probes, budgetMs - (now2() - startedAt));
-    if (outcome === "aborted" || aborted2()) return { kind: "aborted", waitedMs: now2() - startedAt, probes };
-    if (outcome === "deadline")
-      return {
-        kind: "unborn",
-        reason: `${lastReason} (the last read face did not answer within the remaining window)`,
-        waitedMs: now2() - startedAt,
-        probes
-      };
-    let probed = outcome;
-    if (probed.kind === "row") return { kind: "row", row: probed.row, waitedMs: now2() - startedAt, probes };
-    if (probed.kind === "settled")
-      return { kind: "settled", reason: probed.reason, waitedMs: now2() - startedAt, probes };
-    lastReason = probed.reason;
-    let remainingMs = budgetMs - (now2() - startedAt);
-    if (remainingMs <= 0) return { kind: "unborn", reason: lastReason, waitedMs: now2() - startedAt, probes };
-    if (await sleep10(Math.min(intervalMs, remainingMs), deps2.signal), aborted2()) return { kind: "aborted", waitedMs: now2() - startedAt, probes };
-  }
-}
-var init_parkRowBirthWait = __esm({
-  "build-src/src/sema/parkRowBirthWait.ts"() {
-  }
-});
-
 // build-src/src/sema/askParkReopen.ts
 var askParkReopen_exports = {};
 __export(askParkReopen_exports, {
   _resetAskParkReopenInFlightForTest: () => _resetAskParkReopenInFlightForTest,
+  _rowArmFlightForTest: () => _rowArmFlightForTest,
   _setAskParkRowWaitForTest: () => _setAskParkRowWaitForTest,
   askParkRowWaitMs: () => askParkRowWaitMs,
+  countOwnedPendingApprovals: () => countOwnedPendingApprovals,
   reopenAskParkCard: () => reopenAskParkCard
 });
+async function countOwnedPendingApprovals(client3) {
+  return ((await client3.approvals.list()).pending ?? []).filter((row2) => pendingRowIsOwnedByThisSession(row2, ownershipDeps)).length;
+}
 function reopenAskParkCard(taskId, client3, signal) {
   if (typeof taskId != "string" || taskId.length === 0) return Promise.resolve({ reopened: !1 });
   let inFlight4 = inFlightReopenByTask.get(taskId);
@@ -178586,7 +179027,10 @@ function reopenAskParkCard(taskId, client3, signal) {
   ), run2;
 }
 function _resetAskParkReopenInFlightForTest() {
-  inFlightReopenByTask.clear(), inFlightArmByRow.clear();
+  inFlightReopenByTask.clear(), rowArmSingleFlight().clear();
+}
+function _rowArmFlightForTest() {
+  return rowArmSingleFlight();
 }
 function _setAskParkRowWaitForTest(o) {
   o.budgetMs !== void 0 && (rowWaitOverrideMs = o.budgetMs), o.intervalMs !== void 0 && (rowPollOverrideMs = o.intervalMs);
@@ -178604,29 +179048,19 @@ async function probeOwnedAskRow(taskId, client3, signal) {
   } catch (e) {
     return { kind: "unborn", reason: `approvals.list failed for task ${taskId}: ${String(e)}` };
   }
-  let own2 = rows2.find((r) => r.taskId === taskId), sole = rows2.length === 1 ? rows2[0] : void 0, soleUnowned = sole !== void 0 && !pendingRowIsOwnedByThisSession(sole, ownershipDeps), pending2 = own2 ?? (soleUnowned ? void 0 : sole);
-  if (!pending2)
-    return {
-      kind: "unborn",
-      reason: rows2.length === 0 ? (
-        // 空表两义(#269):要么真孤儿 park(座位占着却没有待决行 = 引擎态异常),要么下一只门的
-        // 行还没铸出来。两义分不开 ⇒ 按可修的那一义有界重查,窗尽才按前者如实收口。
-        `no pending row at all for task ${taskId} \u2014 either an orphan park (a seat held with no decision outstanding) or the next gate's row is not minted yet`
-      ) : soleUnowned ? `the only pending row (task ${String(sole?.taskId)} / session ${String(sole?.sessionId)}) could not be proven to belong to this shell (not in its own-run ledger, session id absent or different) \u2014 refusing to surface an approval that may be another session's` : `${String(rows2.length)} pending rows but none for task ${taskId} \u2014 ambiguous queue, refusing to surface an unrelated row`
-    };
-  let rowGateKind = typeof pending2.gateKind == "string" && pending2.gateKind.length > 0 ? pending2.gateKind : null;
-  return rowGateKind !== null && !ASK_PARK_GATE_KINDS2.includes(rowGateKind) ? {
-    kind: "unborn",
-    reason: `the visible pending row (task ${String(pending2.taskId)}) is parked on a '${rowGateKind}' gate \u2014 not an ask/approval gate; this arm will not surface or decide it, and it may also be the previous gate's row still visible during a transition`
-  } : { kind: "row", row: pending2 };
+  return classifyAskParkRows(rows2, taskId, { ownership: ownershipDeps });
 }
 async function reopenAskParkCardOnce(taskId, client3, signal) {
   try {
     if (typeof taskId != "string" || taskId.length === 0) return { reopened: !1 };
-    let deadlineAt = Date.now() + askParkRowWaitMs();
+    let deadlineAt = Date.now() + askParkRowWaitMs(), flight = rowArmSingleFlight();
     for (; ; ) {
       let found = await waitForParkRowBirth({
-        probe: () => probeOwnedAskRow(taskId, client3, signal),
+        // 🔴 第二参 = 重查环给的**本拍**合流信号(外部 Esc × 剩余预算),必须原样透传进真实读面
+        //    ——包的 `ParkRowBirthWaitDeps.probe` 头注把这条写成红线。丢掉它(改回零参、或顶替成
+        //    外层 caller signal)⇒「有界」只在判决面成立:窗尽时环如实收口,而那条挂死的
+        //    `approvals.list` 没人去掐,连接活到进程结束。常驻反钉 = activeRunSelfHeal 套 N-o1。
+        probe: (_attempt, probeSignal) => probeOwnedAskRow(taskId, client3, probeSignal ?? signal),
         budgetMs: Math.max(0, deadlineAt - Date.now()),
         intervalMs: askParkRowPollMs(),
         ...signal ? { signal } : {}
@@ -178635,7 +179069,7 @@ async function reopenAskParkCardOnce(taskId, client3, signal) {
         return process.env.SEMA_DEBUG && console.error(
           `[sema][askParkReopen] no decidable pending row for task ${taskId} after ${String(found.waitedMs)}ms / ${String(found.probes)} probe(s) \u2014 ${found.kind === "aborted" ? "the wait was interrupted" : found.reason} \u2014 reporting reopened:false`
         ), { reopened: !1 };
-      let armed3 = await armPendingRowCoalesced(taskId, found.row, client3);
+      let armed3 = await armPendingRowCoalesced(flight, taskId, found.row, client3);
       if (armed3.kind === "verdict") return armed3.verdict;
       if (Date.now() >= deadlineAt || signal?.aborted === !0)
         return process.env.SEMA_DEBUG && console.error(
@@ -178649,36 +179083,32 @@ async function reopenAskParkCardOnce(taskId, client3, signal) {
     return process.env.SEMA_DEBUG && console.error(`[sema][askParkReopen] reopen lane for task ${taskId} threw (${String(e)}) \u2014 reporting reopened:false`), { reopened: !1 };
   }
 }
-function rowIdentityOf(taskId, pending2) {
-  let rowTaskId = typeof pending2.taskId == "string" && pending2.taskId.length > 0 ? pending2.taskId : taskId, gatedCallId = pending2.toolCallId ?? pending2.boundCallId ?? void 0;
-  return { rowTaskId, gatedCallId, armedKey: approvalCallKey(gatedCallId, rowTaskId) };
+function rowArmSingleFlight() {
+  let epoch = getLiveSessionEpoch();
+  return (rowArmFlight === null || epoch !== rowArmFlightEpoch) && (rowArmFlightEpoch = epoch, rowArmFlight = createRowArmSingleFlight()), rowArmFlight;
 }
-function armPendingRowCoalesced(taskId, pending2, client3) {
-  let identity3 = rowIdentityOf(taskId, pending2), inFlight4 = inFlightArmByRow.get(identity3.armedKey);
-  if (inFlight4 !== void 0)
-    return process.env.SEMA_DEBUG && console.error(
-      `[sema][askParkReopen] a card for row ${identity3.armedKey} is already being presented \u2014 joining it instead of minting a second card (requested by task ${taskId})`
-    ), inFlight4;
-  let run2 = armPendingRow(taskId, pending2, client3, identity3);
-  return inFlightArmByRow.set(identity3.armedKey, run2), run2.then(
-    () => inFlightArmByRow.delete(identity3.armedKey),
-    () => inFlightArmByRow.delete(identity3.armedKey)
-  ), run2;
+function armPendingRowCoalesced(flight, taskId, pending2, client3) {
+  let identity3 = askParkRowIdentity(taskId, pending2);
+  return flight.size() > 0 && process.env.SEMA_DEBUG && console.error(
+    `[sema][askParkReopen] row-arm single flight holds ${String(flight.size())} in-flight chain(s); a card for row ${identity3.armedKey} that is already being presented will be joined instead of minting a second one (requested by task ${taskId})`
+  ), flight.join(identity3.armedKey, () => armPendingRow(taskId, pending2, client3, identity3));
 }
 async function armPendingRow(taskId, pending2, client3, identity3) {
   try {
     let { rowTaskId, gatedCallId, armedKey } = identity3, firstSight = !wasGateArmed2(armedKey), rowStillPending = async () => {
       try {
-        return (await client3.approvals.list()).pending.some(
-          (r) => gatedCallId !== void 0 ? (r.toolCallId ?? r.boundCallId ?? void 0) === gatedCallId : r.taskId === rowTaskId
-        );
+        return askParkRowStillPending((await client3.approvals.list()).pending, identity3);
       } catch {
         return !0;
       }
-    }, rowGateKind = typeof pending2.gateKind == "string" && pending2.gateKind.length > 0 ? pending2.gateKind : null, askQuestions = askQuestionsFromPending(pending2), toolNameIsAsk = isAskTool(pending2.toolName ?? void 0), rowHasToolName = typeof pending2.toolName == "string" && pending2.toolName.trim().length > 0, questionGate = rowGateKind === null ? toolNameIsAsk : rowGateKind === "human" ? toolNameIsAsk || askQuestions !== null || !rowHasToolName : !1;
-    if (process.env.SEMA_DEBUG && console.error(
-      `[sema][askParkReopen] routing row (task ${rowTaskId} \xB7 gateKind ${rowGateKind ?? "null"} \xB7 toolName ${String(pending2.toolName ?? "null")} \xB7 callId ${String(gatedCallId ?? "null")}) \u21D2 ${questionGate ? "question" : "tool-gate"} arm`
-    ), questionGate) {
+    }, askQuestions = askQuestionsFromPending(pending2), questionGate = askParkRowArm(pending2) === "question";
+    if (process.env.SEMA_DEBUG) {
+      let rowGateKind = typeof pending2.gateKind == "string" && pending2.gateKind.length > 0 ? pending2.gateKind : null;
+      console.error(
+        `[sema][askParkReopen] routing row (task ${rowTaskId} \xB7 gateKind ${rowGateKind ?? "null"} \xB7 toolName ${String(pending2.toolName ?? "null")} \xB7 callId ${String(gatedCallId ?? "null")}) \u21D2 ${questionGate ? "question" : "tool-gate"} arm`
+      );
+    }
+    if (questionGate) {
       if (!hasQuestionOverlay())
         return process.env.SEMA_DEBUG && console.error(
           `[sema][askParkReopen] question arm for task ${rowTaskId} has no overlay subscriber (headless / REPL not mounted) \u2014 reporting reopened:false`
@@ -178693,7 +179123,8 @@ async function armPendingRow(taskId, pending2, client3, identity3) {
       let questionId = `ask-park:${rowTaskId}${REOPEN_ID_TAIL}${String(reopenSeq2)}`, unregister = registerLocalQuestionResponder(questionId, async (_id, answer) => {
         try {
           unregister();
-        } catch {
+        } catch (e) {
+          failOpen("ask-park-reopen-unregister", void 0, String(e));
         }
         let deliver = async () => {
           try {
@@ -178730,7 +179161,13 @@ async function armPendingRow(taskId, pending2, client3, identity3) {
       ), { kind: "verdict", verdict: { reopened: !1 } };
     let cardPresented = !1, unsubscribeArm = onGateArmed((key) => {
       key === armedKey && (cardPresented = !0);
-    }), chainNote = { vanishedBeforeCard: null }, classifyChainFailure = async (detail) => await rowStillPending() ? { ok: !1, detail } : cardPresented ? { ok: !0 } : (chainNote.vanishedBeforeCard = detail, { ok: !0 }), runToolChain = async () => {
+    }), chainNote = { vanishedBeforeCard: null }, classifyChainFailure = async (detail) => {
+      let disposition = classifyAskParkChainFailure({
+        rowStillPending: await rowStillPending(),
+        cardPresented
+      });
+      return disposition === "retry" ? { ok: !1, detail } : (disposition === "row-unborn" && (chainNote.vanishedBeforeCard = detail), { ok: !0 });
+    }, runToolChain = async () => {
       try {
         let out6 = await surfaceFsApprovalAndDecide({ client: client3 }, rowTaskId, /* @__PURE__ */ new Map());
         return out6.kind !== "failed" ? { ok: !0 } : classifyChainFailure(out6.reason);
@@ -178764,17 +179201,198 @@ async function armPendingRow(taskId, pending2, client3, identity3) {
     ), { kind: "verdict", verdict: { reopened: !1 } };
   }
 }
-var reopenSeq2, ownershipDeps, inFlightReopenByTask, ASK_PARK_ROW_WAIT_MS, ASK_PARK_ROW_POLL_MS, rowWaitOverrideMs, rowPollOverrideMs, inFlightArmByRow, init_askParkReopen = __esm({
+var reopenSeq2, ownershipDeps, inFlightReopenByTask, rowWaitOverrideMs, rowPollOverrideMs, rowArmFlightEpoch, rowArmFlight, init_askParkReopen = __esm({
   "build-src/src/sema/askParkReopen.ts"() {
     init_dist();
     init_liveSessionStore();
-    init_activeRunSelfHeal2();
     init_armedGateRegistry2();
     init_decideRetry();
-    init_parkRowBirthWait();
-    reopenSeq2 = 0, ownershipDeps = { currentSessionId: getLiveSessionId }, inFlightReopenByTask = /* @__PURE__ */ new Map();
-    ASK_PARK_ROW_WAIT_MS = 15e3, ASK_PARK_ROW_POLL_MS = 500, rowWaitOverrideMs = null, rowPollOverrideMs = null;
-    inFlightArmByRow = /* @__PURE__ */ new Map();
+    init_failOpen();
+    reopenSeq2 = 0, ownershipDeps = {
+      currentSessionId: getLiveSessionId,
+      isOwnRun: (taskIdTail) => {
+        if (isOwnEngineRun(taskIdTail)) return !0;
+        let persisted = restoredEngineTaskId();
+        return typeof persisted == "string" && persisted.length > 0 && taskIdTail === rowIdTail(persisted);
+      }
+    };
+    inFlightReopenByTask = /* @__PURE__ */ new Map();
+    rowWaitOverrideMs = null, rowPollOverrideMs = null;
+    rowArmFlightEpoch = -1, rowArmFlight = null;
+  }
+});
+
+// build-src/src/sema/activeRunRunningChoice.ts
+function choiceAnswerWaitMs() {
+  return answerWaitOverrideMs ?? CHOICE_ANSWER_WAIT_MS;
+}
+function openRunningChoiceCardCount() {
+  return openCardCount;
+}
+async function offerActiveRunChoice(req) {
+  try {
+    let { taskId } = req;
+    if (typeof taskId != "string" || taskId.length === 0 || !req.canSteer && !req.canCancel || !hasQuestionOverlay() || req.signal?.aborted === !0) return "wait";
+    if (offeringByTask.has(taskId))
+      return process.env.SEMA_DEBUG && console.error(
+        `[sema][activeRunRunningChoice] a choice card for run ${taskId} is already open \u2014 this caller waits instead of minting a second card`
+      ), "wait";
+    offeringByTask.add(taskId);
+    try {
+      let options = [
+        ...req.canSteer ? [
+          {
+            label: RUNNING_CHOICE_STEER_LABEL,
+            // 🔴 两句都是**兑现得了**的话(1.0.75 车B):①「it picks it up at its next step」对一条
+            //    已经结束/已经 park 的 run 不成立 —— 引擎的回执才知道真到了哪儿(delivery 三分形),
+            //    所以这里只说「交给引擎」,不替引擎承诺投递时点;②steer 的 wire body 只有 `text`
+            //    (SDK runs.steer 签名无 images 位),同一次提交里的图片不随行,按下之前就得知道。
+            // 🔴 不许把「一定说得清落点」写成承诺(二次评审 [medium]):回执有**读不出投递语义**
+            //    与**送达未知**(5xx / 回执路上断连)两条真分支,而 steer 非幂等 —— 对一条可能已经
+            //    注入的指令说「我会告诉你它到底去哪了」,下一行的「无法确认」就当场打脸。
+            description: 'Hands the TEXT of your message to the engine for the run that is already working \u2014 attachments do not ride along, and sema reports back whatever the engine says about where it landed (which can be "unconfirmed"). Nothing is cancelled.'
+          }
+        ] : [],
+        ...req.canCancel ? [
+          {
+            label: RUNNING_CHOICE_CANCEL_LABEL,
+            description: "Stops that run (whatever it has been doing is discarded), waits for it to release the session, then sends your message as a new turn."
+          }
+        ] : [],
+        {
+          label: RUNNING_CHOICE_WAIT_LABEL,
+          description: "Leaves the run alone. Your message is NOT sent \u2014 send it again whenever you want."
+        }
+      ], decided = await presentChoiceCard({
+        taskId,
+        header: RUNNING_CHOICE_HEADER,
+        question: `An earlier turn is still running in this session (run ${taskId}, status ${req.status}), so your message was not sent \u2014 a session runs one turn at a time. What should sema do with it?`,
+        options,
+        decode: choiceFromAnswer,
+        onNoAnswer: "wait",
+        ...req.signal ? { signal: req.signal } : {}
+      });
+      return decided === NOT_PRESENTED ? "wait" : decided;
+    } finally {
+      offeringByTask.delete(taskId);
+    }
+  } catch {
+    return "wait";
+  }
+}
+async function offerResumeRunningChoice(req) {
+  try {
+    let { taskId } = req;
+    if (typeof taskId != "string" || taskId.length === 0 || !req.canAttach && !req.canCancel || !hasQuestionOverlay() || req.signal?.aborted === !0) return "unavailable";
+    if (offeringByTask.has(taskId))
+      return process.env.SEMA_DEBUG && console.error(
+        `[sema][activeRunRunningChoice] a choice card for run ${taskId} is already open \u2014 the resume entry stands down instead of minting a second card`
+      ), "unavailable";
+    offeringByTask.add(taskId);
+    try {
+      let decided = await presentChoiceCard({
+        taskId,
+        header: RESUME_CHOICE_HEADER,
+        question: resumeRunningQuestionText(req),
+        // 🔴 顺序 = 默认焦点(裁点③:③ 必须是 options[0])—— 判据单源在 resumeRunningOptions。
+        options: resumeRunningOptions(req),
+        decode: (answer) => resumeChoiceFromLabels(answer?.answers?.[0]?.selected),
+        // Esc / 看门狗到点 ⇒ ③(零动作)。#155:破坏性动作只认显式选择。
+        onNoAnswer: "background",
+        ...req.signal ? { signal: req.signal } : {}
+      });
+      return decided === NOT_PRESENTED ? "unavailable" : decided;
+    } finally {
+      offeringByTask.delete(taskId);
+    }
+  } catch {
+    return "unavailable";
+  }
+}
+async function presentChoiceCard(spec) {
+  let taskId = spec.taskId;
+  cardSeq += 1;
+  let questionId = `${QUESTION_ID_PREFIX}${taskId}${REOPEN_ID_TAIL}${String(cardSeq)}`, settle2 = () => {
+  }, decided = new Promise((resolve57) => {
+    settle2 = resolve57;
+  }), unregister = registerLocalQuestionResponder(questionId, (_id, answer) => (settle2(spec.decode(answer)), Promise.resolve({ ok: !0 }))), retired = !1, counted = !1, retire = () => {
+    if (!retired) {
+      retired = !0, counted && (counted = !1, openCardCount = Math.max(0, openCardCount - 1));
+      try {
+        unregister();
+      } catch {
+      }
+      publishQuestionFrame({ type: "question_complete", questionId });
+    }
+  }, frame = {
+    type: "question",
+    questionId,
+    questions: [
+      {
+        header: spec.header,
+        question: spec.question,
+        options: spec.options,
+        multiSelect: !1
+      }
+    ]
+  }, receipt = waitForGateArmed([questionId], gateArmedWaitMs());
+  if (publishQuestionFrame(frame), !await receipt)
+    return process.env.SEMA_DEBUG && console.error(
+      `[sema][activeRunRunningChoice] question frame ${questionId} published but no presentation receipt arrived within ${String(gateArmedWaitMs())}ms \u2014 treating it as no decision`
+    ), retire(), NOT_PRESENTED;
+  counted = !0, openCardCount += 1;
+  let watchdog = watchdogToNoAnswer(spec.onNoAnswer), abortWatch = abortToNoAnswer(spec.signal, spec.onNoAnswer), choice;
+  try {
+    choice = await Promise.race([decided, abortWatch.promise, watchdog.promise]);
+  } finally {
+    watchdog.cancel(), abortWatch.cancel();
+  }
+  return retire(), choice;
+}
+function abortToNoAnswer(signal, onNoAnswer) {
+  if (signal === void 0) return { promise: new Promise(() => {
+  }), cancel: () => {
+  } };
+  if (signal.aborted) return { promise: Promise.resolve(onNoAnswer), cancel: () => {
+  } };
+  let onAbort = () => {
+  };
+  return {
+    promise: new Promise((resolve57) => {
+      onAbort = () => resolve57(onNoAnswer), signal.addEventListener("abort", onAbort, { once: !0 });
+    }),
+    cancel: () => {
+      try {
+        signal.removeEventListener("abort", onAbort);
+      } catch {
+      }
+    }
+  };
+}
+function watchdogToNoAnswer(onNoAnswer) {
+  let timer2;
+  return {
+    promise: new Promise((resolve57) => {
+      timer2 = setTimeout(() => resolve57(onNoAnswer), choiceAnswerWaitMs());
+    }),
+    cancel: () => {
+      timer2 !== void 0 && clearTimeout(timer2);
+    }
+  };
+}
+function choiceFromAnswer(answer) {
+  let selected = answer?.answers?.[0]?.selected;
+  if (!Array.isArray(selected) || selected.length !== 1) return "wait";
+  let label = selected[0];
+  return label === RUNNING_CHOICE_STEER_LABEL ? "steer" : label === RUNNING_CHOICE_CANCEL_LABEL ? "cancel" : "wait";
+}
+var RUNNING_CHOICE_STEER_LABEL, RUNNING_CHOICE_CANCEL_LABEL, RUNNING_CHOICE_WAIT_LABEL, RUNNING_CHOICE_HEADER, QUESTION_ID_PREFIX, CHOICE_ANSWER_WAIT_MS, answerWaitOverrideMs, cardSeq, offeringByTask, openCardCount, NOT_PRESENTED, init_activeRunRunningChoice = __esm({
+  "build-src/src/sema/activeRunRunningChoice.ts"() {
+    init_dist();
+    init_armedGateRegistry2();
+    RUNNING_CHOICE_STEER_LABEL = "Queue it into the running turn", RUNNING_CHOICE_CANCEL_LABEL = "Cancel that run and send this message now", RUNNING_CHOICE_WAIT_LABEL = "Do nothing for now", RUNNING_CHOICE_HEADER = "Session busy", QUESTION_ID_PREFIX = "active-run:", CHOICE_ANSWER_WAIT_MS = 3e5, answerWaitOverrideMs = null;
+    cardSeq = 0, offeringByTask = /* @__PURE__ */ new Set(), openCardCount = 0;
+    NOT_PRESENTED = /* @__PURE__ */ Symbol("sema.choiceCardNotPresented");
   }
 });
 
@@ -179068,63 +179686,6 @@ var REATTACH_BACKOFF_START_MS, REATTACH_BACKOFF_CAP_MS, REATTACH_WINDOW_MS, PROD
 });
 
 // build-src/src/sema/resumeRunningArm.ts
-function resumeRunningLivenessRow(msSinceLastActivity) {
-  let ms = msSinceLastActivity;
-  return typeof ms != "number" || !Number.isFinite(ms) || ms < 0 ? null : `The engine last recorded activity on it ${String(Math.round(ms / 1e3))}s ago.`;
-}
-function resumeRunningQuestionText(i) {
-  let head = `This conversation was resumed while an earlier turn is still executing on the engine (run ${i.taskId}, status ${i.status}). sema did not touch it. What should it do?`, liveness = resumeRunningLivenessRow(i.msSinceLastActivity);
-  return liveness === null ? head : `${head}
-${liveness}`;
-}
-function resumeRunningOptions(i) {
-  let options = [
-    {
-      // 🔴 默认焦点(裁点③)—— 三条路里唯一零副作用的一条,所以它是手滑回车的落点。
-      // 🔴 措辞(1.0.75 车B / cli-049):这一项曾写「stays visible in /tasks」——**假的**。`/tasks`
-      //    面板读的是纯进程内的 `AppState.tasks`,而这张卡的前提恰恰是「那条 run 活得比上一个壳
-      //    进程久」,新进程里没有任何腿会为它建行(③ 的处置本身也是显式零动作)。默认焦点上的一句
-      //    假 affordance 是最坏的一格:手滑回车的人拿到一条既看不见、也停不掉、还占着会话锁的 run。
-      //    换成两句**可证的**真话:本屏不会列出它;它还占着会话,所以下一条消息会再撞上它(那时
-      //    C3 三选卡会带着 steer/cancel 两条真出路出现)。
-      label: RESUME_CHOICE_BACKGROUND_LABEL,
-      description: "Leaves the run alone. It keeps executing on the engine, but this screen will not show it and it will not be listed here \u2014 your next message runs into it again, and sema asks you then."
-    }
-  ];
-  return i.canAttach && options.push({
-    label: RESUME_CHOICE_ATTACH_LABEL,
-    // 🔴 第二句是**知情同意**那一半(二次评审 r1-[high] 处置,见 resumeAttachReplayDisclosure):
-    //    resume 入口没有事件锚可用,durable 尾只能从这条 run 的第一帧读起,所以崩溃前已经落盘
-    //    并被 resume 还原到屏上的那一段会再出现一次。用户按下之前就得看见这句 —— 一个会做出
-    //    用户没预料到的事的选项,和一个按了没用的选项同样是假 affordance。
-    description: "Follows that run from here: sema replays it from the engine ledger and keeps streaming it into this conversation. Anything from that turn already shown above will appear a second time \u2014 sema has no resume marker for it."
-  }), i.canCancel && options.push({
-    label: RESUME_CHOICE_CANCEL_LABEL,
-    description: "Stops that run on the engine (whatever it has been doing is discarded) and frees this session for a new turn."
-  }), options;
-}
-function resumeChoiceFromLabels(selected) {
-  if (!Array.isArray(selected) || selected.length !== 1) return "background";
-  let label = selected[0];
-  return label === RESUME_CHOICE_ATTACH_LABEL ? "attach" : label === RESUME_CHOICE_CANCEL_LABEL ? "cancel" : "background";
-}
-function resumeRunningNoUiGuidance(i) {
-  let sid = typeof i.sessionId == "string" && i.sessionId.length > 0 ? i.sessionId : null, attach = sid === null ? "sema --resume (pick this session from the list)" : `sema --resume ${sid}`, T3 = RESUME_RUNNING_GUIDANCE_TAG;
-  return [
-    `${T3} run ${i.taskId} from an earlier turn is still executing on the engine, and this lane has no card to ask you on. sema did NOT cancel it and did NOT attach to it.`,
-    `${T3} attach=${attach}`,
-    `${T3} cancel=POST /v1/runs/${i.taskId}/cancel`,
-    // 🔴 同 cli-049:这条车道更没有 `/tasks` 可看(headless 连 REPL 都不挂载)。给的是引擎侧真读面。
-    `${T3} background=do nothing \u2014 run ${i.taskId} keeps executing on the engine; this client does not list it (read it with GET /v1/runs/${i.taskId})`
-  ].join(`
-`);
-}
-function resumeAttachReplayDisclosure(taskId) {
-  return `sema: attaching to run ${taskId} \u2014 sema is replaying it from the engine's ledger, so anything from that turn already shown above will appear again below. There is no resume marker for a run that outlived its shell. The replayed turns are not billed into this session's cost again either \u2014 the engine's own record (GET /v1/runs/${taskId}) is the authority on what that run really spent.`;
-}
-function resumeRunningCancelUnconfirmedRow(taskId) {
-  return `sema: the cancel for run ${taskId} did not come back confirmed, so that run may still be executing. This screen does not list it \u2014 read its real state on the engine (GET /v1/runs/${taskId}) before assuming this session is free.`;
-}
 function resumeRunningActionableVerbs(deps2) {
   return {
     canAttach: deps2.canAttach === !0 && typeof deps2.attach == "function",
@@ -179254,186 +179815,10 @@ async function* resumeAttachStream(taskId, deps2, opts) {
     deps: deps2
   });
 }
-var RESUME_CHOICE_ATTACH_LABEL, RESUME_CHOICE_CANCEL_LABEL, RESUME_CHOICE_BACKGROUND_LABEL, RESUME_CHOICE_HEADER, RESUME_RUNNING_NO_UI_EXIT_CODE, RESUME_RUNNING_GUIDANCE_TAG, init_resumeRunningArm = __esm({
+var init_resumeRunningArm = __esm({
   "build-src/src/sema/resumeRunningArm.ts"() {
-    init_interactiveReattach();
-    RESUME_CHOICE_ATTACH_LABEL = "Attach and watch", RESUME_CHOICE_CANCEL_LABEL = "Cancel it", RESUME_CHOICE_BACKGROUND_LABEL = "Leave it running in the background", RESUME_CHOICE_HEADER = "Earlier run still in flight";
-    RESUME_RUNNING_NO_UI_EXIT_CODE = 75, RESUME_RUNNING_GUIDANCE_TAG = "sema: resume-running:";
-  }
-});
-
-// build-src/src/sema/activeRunRunningChoice.ts
-function choiceAnswerWaitMs() {
-  return answerWaitOverrideMs ?? CHOICE_ANSWER_WAIT_MS;
-}
-function openRunningChoiceCardCount() {
-  return openCardCount;
-}
-async function offerActiveRunChoice(req) {
-  try {
-    let { taskId } = req;
-    if (typeof taskId != "string" || taskId.length === 0 || !req.canSteer && !req.canCancel || !hasQuestionOverlay() || req.signal?.aborted === !0) return "wait";
-    if (offeringByTask.has(taskId))
-      return process.env.SEMA_DEBUG && console.error(
-        `[sema][activeRunRunningChoice] a choice card for run ${taskId} is already open \u2014 this caller waits instead of minting a second card`
-      ), "wait";
-    offeringByTask.add(taskId);
-    try {
-      let options = [
-        ...req.canSteer ? [
-          {
-            label: RUNNING_CHOICE_STEER_LABEL,
-            // 🔴 两句都是**兑现得了**的话(1.0.75 车B):①「it picks it up at its next step」对一条
-            //    已经结束/已经 park 的 run 不成立 —— 引擎的回执才知道真到了哪儿(delivery 三分形),
-            //    所以这里只说「交给引擎」,不替引擎承诺投递时点;②steer 的 wire body 只有 `text`
-            //    (SDK runs.steer 签名无 images 位),同一次提交里的图片不随行,按下之前就得知道。
-            // 🔴 不许把「一定说得清落点」写成承诺(二次评审 [medium]):回执有**读不出投递语义**
-            //    与**送达未知**(5xx / 回执路上断连)两条真分支,而 steer 非幂等 —— 对一条可能已经
-            //    注入的指令说「我会告诉你它到底去哪了」,下一行的「无法确认」就当场打脸。
-            description: 'Hands the TEXT of your message to the engine for the run that is already working \u2014 attachments do not ride along, and sema reports back whatever the engine says about where it landed (which can be "unconfirmed"). Nothing is cancelled.'
-          }
-        ] : [],
-        ...req.canCancel ? [
-          {
-            label: RUNNING_CHOICE_CANCEL_LABEL,
-            description: "Stops that run (whatever it has been doing is discarded), waits for it to release the session, then sends your message as a new turn."
-          }
-        ] : [],
-        {
-          label: RUNNING_CHOICE_WAIT_LABEL,
-          description: "Leaves the run alone. Your message is NOT sent \u2014 send it again whenever you want."
-        }
-      ], decided = await presentChoiceCard({
-        taskId,
-        header: RUNNING_CHOICE_HEADER,
-        question: `An earlier turn is still running in this session (run ${taskId}, status ${req.status}), so your message was not sent \u2014 a session runs one turn at a time. What should sema do with it?`,
-        options,
-        decode: choiceFromAnswer,
-        onNoAnswer: "wait",
-        ...req.signal ? { signal: req.signal } : {}
-      });
-      return decided === NOT_PRESENTED ? "wait" : decided;
-    } finally {
-      offeringByTask.delete(taskId);
-    }
-  } catch {
-    return "wait";
-  }
-}
-async function offerResumeRunningChoice(req) {
-  try {
-    let { taskId } = req;
-    if (typeof taskId != "string" || taskId.length === 0 || !req.canAttach && !req.canCancel || !hasQuestionOverlay() || req.signal?.aborted === !0) return "unavailable";
-    if (offeringByTask.has(taskId))
-      return process.env.SEMA_DEBUG && console.error(
-        `[sema][activeRunRunningChoice] a choice card for run ${taskId} is already open \u2014 the resume entry stands down instead of minting a second card`
-      ), "unavailable";
-    offeringByTask.add(taskId);
-    try {
-      let decided = await presentChoiceCard({
-        taskId,
-        header: RESUME_CHOICE_HEADER,
-        question: resumeRunningQuestionText(req),
-        // 🔴 顺序 = 默认焦点(裁点③:③ 必须是 options[0])—— 判据单源在 resumeRunningOptions。
-        options: resumeRunningOptions(req),
-        decode: (answer) => resumeChoiceFromLabels(answer?.answers?.[0]?.selected),
-        // Esc / 看门狗到点 ⇒ ③(零动作)。#155:破坏性动作只认显式选择。
-        onNoAnswer: "background",
-        ...req.signal ? { signal: req.signal } : {}
-      });
-      return decided === NOT_PRESENTED ? "unavailable" : decided;
-    } finally {
-      offeringByTask.delete(taskId);
-    }
-  } catch {
-    return "unavailable";
-  }
-}
-async function presentChoiceCard(spec) {
-  let taskId = spec.taskId;
-  cardSeq += 1;
-  let questionId = `${QUESTION_ID_PREFIX}${taskId}${REOPEN_ID_TAIL}${String(cardSeq)}`, settle2 = () => {
-  }, decided = new Promise((resolve57) => {
-    settle2 = resolve57;
-  }), unregister = registerLocalQuestionResponder(questionId, (_id, answer) => (settle2(spec.decode(answer)), Promise.resolve({ ok: !0 }))), retired = !1, counted = !1, retire = () => {
-    if (!retired) {
-      retired = !0, counted && (counted = !1, openCardCount = Math.max(0, openCardCount - 1));
-      try {
-        unregister();
-      } catch {
-      }
-      publishQuestionFrame({ type: "question_complete", questionId });
-    }
-  }, frame = {
-    type: "question",
-    questionId,
-    questions: [
-      {
-        header: spec.header,
-        question: spec.question,
-        options: spec.options,
-        multiSelect: !1
-      }
-    ]
-  }, receipt = waitForGateArmed([questionId], gateArmedWaitMs());
-  if (publishQuestionFrame(frame), !await receipt)
-    return process.env.SEMA_DEBUG && console.error(
-      `[sema][activeRunRunningChoice] question frame ${questionId} published but no presentation receipt arrived within ${String(gateArmedWaitMs())}ms \u2014 treating it as no decision`
-    ), retire(), NOT_PRESENTED;
-  counted = !0, openCardCount += 1;
-  let watchdog = watchdogToNoAnswer(spec.onNoAnswer), abortWatch = abortToNoAnswer(spec.signal, spec.onNoAnswer), choice;
-  try {
-    choice = await Promise.race([decided, abortWatch.promise, watchdog.promise]);
-  } finally {
-    watchdog.cancel(), abortWatch.cancel();
-  }
-  return retire(), choice;
-}
-function abortToNoAnswer(signal, onNoAnswer) {
-  if (signal === void 0) return { promise: new Promise(() => {
-  }), cancel: () => {
-  } };
-  if (signal.aborted) return { promise: Promise.resolve(onNoAnswer), cancel: () => {
-  } };
-  let onAbort = () => {
-  };
-  return {
-    promise: new Promise((resolve57) => {
-      onAbort = () => resolve57(onNoAnswer), signal.addEventListener("abort", onAbort, { once: !0 });
-    }),
-    cancel: () => {
-      try {
-        signal.removeEventListener("abort", onAbort);
-      } catch {
-      }
-    }
-  };
-}
-function watchdogToNoAnswer(onNoAnswer) {
-  let timer2;
-  return {
-    promise: new Promise((resolve57) => {
-      timer2 = setTimeout(() => resolve57(onNoAnswer), choiceAnswerWaitMs());
-    }),
-    cancel: () => {
-      timer2 !== void 0 && clearTimeout(timer2);
-    }
-  };
-}
-function choiceFromAnswer(answer) {
-  let selected = answer?.answers?.[0]?.selected;
-  if (!Array.isArray(selected) || selected.length !== 1) return "wait";
-  let label = selected[0];
-  return label === RUNNING_CHOICE_STEER_LABEL ? "steer" : label === RUNNING_CHOICE_CANCEL_LABEL ? "cancel" : "wait";
-}
-var RUNNING_CHOICE_STEER_LABEL, RUNNING_CHOICE_CANCEL_LABEL, RUNNING_CHOICE_WAIT_LABEL, RUNNING_CHOICE_HEADER, QUESTION_ID_PREFIX, CHOICE_ANSWER_WAIT_MS, answerWaitOverrideMs, cardSeq, offeringByTask, openCardCount, NOT_PRESENTED, init_activeRunRunningChoice = __esm({
-  "build-src/src/sema/activeRunRunningChoice.ts"() {
     init_dist();
-    init_armedGateRegistry2();
-    init_resumeRunningArm();
-    RUNNING_CHOICE_STEER_LABEL = "Queue it into the running turn", RUNNING_CHOICE_CANCEL_LABEL = "Cancel that run and send this message now", RUNNING_CHOICE_WAIT_LABEL = "Do nothing for now", RUNNING_CHOICE_HEADER = "Session busy", QUESTION_ID_PREFIX = "active-run:", CHOICE_ANSWER_WAIT_MS = 3e5, answerWaitOverrideMs = null;
-    cardSeq = 0, offeringByTask = /* @__PURE__ */ new Set(), openCardCount = 0;
-    NOT_PRESENTED = /* @__PURE__ */ Symbol("sema.choiceCardNotPresented");
+    init_interactiveReattach();
   }
 });
 
@@ -184108,7 +184493,16 @@ Fix: run \`sema doctor\` to diagnose, or restart sema to retry.`
             // 无 decide」的 client 过门,在用户按卡之后才 TypeError。类型谓词一次收窄,零散 cast。
             ...(() => {
               let hitl = hasHitlVerbs(client) ? client : null;
-              return hitl ? { reopenAskPark: (tid) => reopenAskParkCard(tid, hitl, signal ?? void 0) } : {};
+              return hitl ? {
+                reopenAskPark: (tid) => reopenAskParkCard(tid, hitl, signal ?? void 0),
+                // [3892]-[3899] P0 假死锁防御的复核读口:hasPendingDecision 那个镜像在
+                // --resume 后可能卡脏值(队列里躺着从未渲上屏的幽灵卡 ⇒ 布尔恒真,消息全被
+                // 闸,而引擎侧 run 早已 completed)。selfHeal 在镜像说有卡时向引擎复核
+                // **属主** pending 行数,恰 0 = 脏值正面证据 ⇒ 放行真分诊;归属过滤见
+                // countOwnedPendingApprovals 头注(引擎全局队列有别家陈年行,裸计数恒非零
+                // = 防御恒不触发)。mock 车道无 approvals 面 ⇒ 读口不装 = 旧行为(S-g)。
+                listOwnedPendingApprovals: () => countOwnedPendingApprovals(hitl)
+              } : {};
             })(),
             // C3([3777]/[3779])running 形的三选卡口。**一条用户消息至多一张**(runningChoiceOffered
             // 一次性闸,见声明处):cancel 那条路会触发一次重发,重发再撞 409 时不许再铸卡。
@@ -184235,7 +184629,7 @@ async function probeEngineRunState(taskId) {
 async function probeEngineRunLiveness(taskId, opts) {
   let absent = { state: "unreachable", msSinceLastActivity: null };
   if (typeof taskId != "string" || taskId.length === 0) return absent;
-  let get4 = client.runs.get;
+  let getRaw = client.runs.get, get4 = typeof getRaw == "function" ? getRaw.bind(client.runs) : void 0;
   if (typeof get4 != "function") return absent;
   let row2;
   try {
@@ -184264,7 +184658,8 @@ async function cancelEngineRun(taskId) {
   }
 }
 async function attachToResumedRun(taskId) {
-  if (typeof client.runs.events != "function") throw new Error(`no durable events verb on this lane (run ${taskId})`);
+  let eventsRaw = client.runs.events;
+  if (typeof (typeof eventsRaw == "function" ? eventsRaw.bind(client.runs) : void 0) != "function") throw new Error(`no durable events verb on this lane (run ${taskId})`);
   let sessionId = getSessionId(), ac = new AbortController(), stream5 = resumeAttachStream(
     taskId,
     {
@@ -184386,6 +184781,7 @@ var BG_TEAR_MAX_RESENDS, BG_RECOVERY_WAIT_MS, DRAINING_MAX_RETRIES, DEFAULT_DRAI
     init_planReviewReopen();
     init_askParkReopen();
     init_activeRunRunningChoice();
+    init_dist();
     init_resumeRunningArm();
     init_transcriptSystemNotice();
     init_interactiveReattach();
@@ -188671,6 +189067,17 @@ var SUPPORTED_RULE_BEHAVIORS, EDITABLE_SOURCES, init_permissionsLoader = __esm({
 });
 
 // build-src/src/utils/permissions/PermissionUpdate.ts
+var PermissionUpdate_exports = {};
+__export(PermissionUpdate_exports, {
+  applyPermissionUpdate: () => applyPermissionUpdate,
+  applyPermissionUpdates: () => applyPermissionUpdates,
+  createReadRuleSuggestion: () => createReadRuleSuggestion,
+  extractRules: () => extractRules,
+  hasRules: () => hasRules,
+  persistPermissionUpdate: () => persistPermissionUpdate,
+  persistPermissionUpdates: () => persistPermissionUpdates,
+  supportsPersistence: () => supportsPersistence
+});
 import { posix as posix2 } from "path";
 function extractRules(updates) {
   return updates ? updates.flatMap((update2) => update2.type === "addRules" ? update2.rules : []) : [];
@@ -191716,6 +192123,7 @@ __export(bashPermissions_exports, {
   MAX_SUGGESTED_RULES_FOR_COMPOUND: () => MAX_SUGGESTED_RULES_FOR_COMPOUND,
   awaitClassifierAutoApproval: () => awaitClassifierAutoApproval,
   bashPermissionRule: () => bashPermissionRule,
+  bashRuleContentHasDangerousBarePrefix: () => bashRuleContentHasDangerousBarePrefix,
   bashToolCheckExactMatchPermission: () => bashToolCheckExactMatchPermission,
   bashToolCheckPermission: () => bashToolCheckPermission,
   bashToolHasPermission: () => bashToolHasPermission,
@@ -191767,6 +192175,14 @@ function getFirstWordPrefix(command8) {
   let cmd = tokens[i];
   return !cmd || !/^[a-z][a-z0-9]*(-[a-z0-9]+)*$/.test(cmd) || BARE_SHELL_PREFIXES.has(cmd) ? null : cmd;
 }
+function bashRuleContentHasDangerousBarePrefix(ruleContent) {
+  let first = (ruleContent.endsWith(":*") ? ruleContent.slice(0, -2) : ruleContent).trim().split(/\s+/).filter(Boolean)[0];
+  if (first === void 0) return !1;
+  let lowered = first.toLowerCase();
+  if (BARE_SHELL_PREFIXES.has(lowered)) return !0;
+  let base = lowered.split(/[/\\]/).pop();
+  return !!(base !== void 0 && base !== "" && BARE_SHELL_PREFIXES.has(base) || base !== void 0 && base.endsWith(".exe") && BARE_SHELL_PREFIXES.has(base.slice(0, -4)));
+}
 function suggestionForExactCommand2(command8) {
   let heredocPrefix = extractPrefixBeforeHeredoc(command8);
   if (heredocPrefix)
@@ -257527,7 +257943,7 @@ function stripUnderlineAnsi(content) {
 }
 var import_compiler_runtime24, React16, import_jsx_runtime27, MAX_JSON_FORMAT_LENGTH, URL_IN_JSON, init_OutputLine = __esm({
   "build-src/src/components/shell/OutputLine.tsx"() {
-    import_compiler_runtime24 = __toESM(require_compiler_runtime()), React16 = __toESM(require_react());
+    import_compiler_runtime24 = __toESM(require_compiler_runtime(), 1), React16 = __toESM(require_react(), 1);
     init_useTerminalSize();
     init_ink2();
     init_hyperlink();
@@ -257536,7 +257952,7 @@ var import_compiler_runtime24, React16, import_jsx_runtime27, MAX_JSON_FORMAT_LE
     init_MessageResponse();
     init_messageActions();
     init_ExpandShellOutputContext();
-    import_jsx_runtime27 = __toESM(require_jsx_runtime());
+    import_jsx_runtime27 = __toESM(require_jsx_runtime(), 1);
     MAX_JSON_FORMAT_LENGTH = 1e4;
     URL_IN_JSON = /https?:\/\/[^\s"'<>\\]+/g;
   }
@@ -285711,7 +286127,7 @@ function FileEditToolUseRejectedMessage(t0) {
 }
 var import_compiler_runtime43, import_jsx_runtime52, MAX_LINES_TO_RENDER, init_FileEditToolUseRejectedMessage = __esm({
   "build-src/src/components/FileEditToolUseRejectedMessage.tsx"() {
-    import_compiler_runtime43 = __toESM(require_compiler_runtime(), 1);
+    import_compiler_runtime43 = __toESM(require_compiler_runtime());
     init_useTerminalSize();
     init_cwd();
     init_ink2();
@@ -285719,7 +286135,7 @@ var import_compiler_runtime43, import_jsx_runtime52, MAX_LINES_TO_RENDER, init_F
     init_MessageResponse();
     init_StructuredDiffList();
     init_stringUtils();
-    import_jsx_runtime52 = __toESM(require_jsx_runtime(), 1), MAX_LINES_TO_RENDER = 10;
+    import_jsx_runtime52 = __toESM(require_jsx_runtime()), MAX_LINES_TO_RENDER = 10;
   }
 });
 
@@ -307339,7 +307755,8 @@ async function buildHelper() {
     await execFileP("/usr/libexec/PlistBuddy", ["-c", "Add :LSUIElement bool true", plist]), await execFileP("/usr/libexec/PlistBuddy", ["-c", "Set :CFBundleName Sema", plist]), (await execFileP("/usr/libexec/PlistBuddy", ["-c", "Add :CFBundleIdentifier string com.sema.notifier", plist])).code !== 0 && await execFileP("/usr/libexec/PlistBuddy", ["-c", "Set :CFBundleIdentifier com.sema.notifier", plist]), await execFileP("/usr/bin/touch", [app]);
     try {
       chmodSync4(appletBinaryPath(), 493);
-    } catch {
+    } catch (e) {
+      failOpen("mac-notifier-chmod", void 0, String(e));
     }
     return rmSync6(tmp, { recursive: !0, force: !0 }), logForDebugging(`[mac-notifier] helper built at ${app}`), macNotifierReady();
   } catch (e) {
@@ -307359,6 +307776,7 @@ var HELPER_DIR_NAME, APPLET_SOURCE, buildInFlight, SEMA_ICON_512_B64, init_macNo
   "build-src/src/sema/macNotifier.ts"() {
     init_envUtils();
     init_debug();
+    init_failOpen();
     HELPER_DIR_NAME = "Sema Notifier.app", APPLET_SOURCE = `on run argv
   set theTitle to "Sema"
   set theMessage to ""
@@ -308502,7 +308920,7 @@ function TaskListV2({
     visibleTasks2.map((task_0) => /* @__PURE__ */ (0, import_jsx_runtime83.jsx)(TaskItem, { task: task_0, ownerColor: task_0.owner ? teammateColors[task_0.owner] : void 0, openBlockers: task_0.blockedBy.filter((id_3) => unresolvedTaskIds.has(id_3)), activity: task_0.owner ? teammateActivity[task_0.owner] : void 0, ownerActive: task_0.owner ? activeTeammates.has(task_0.owner) : !1, columns }, task_0.id)),
     maxDisplay > 0 && hiddenSummary && /* @__PURE__ */ (0, import_jsx_runtime83.jsx)(ThemedText, { dimColor: !0, children: hiddenSummary })
   ] });
-  return isStandalone ? /* @__PURE__ */ (0, import_jsx_runtime83.jsxs)(ThemedBox_default, { flexDirection: "column", marginTop: 1, marginLeft: 2, children: [
+  return isStandalone ? /* @__PURE__ */ (0, import_jsx_runtime83.jsxs)(ThemedBox_default, { flexDirection: "column", marginTop: 1, marginLeft: 2, flexShrink: 0, children: [
     /* @__PURE__ */ (0, import_jsx_runtime83.jsx)(ThemedBox_default, { children: /* @__PURE__ */ (0, import_jsx_runtime83.jsxs)(ThemedText, { dimColor: !0, children: [
       /* @__PURE__ */ (0, import_jsx_runtime83.jsx)(ThemedText, { bold: !0, children: tasks3.length }),
       " tasks (",
@@ -308516,7 +308934,7 @@ function TaskListV2({
       " open)"
     ] }) }),
     content
-  ] }) : /* @__PURE__ */ (0, import_jsx_runtime83.jsx)(ThemedBox_default, { flexDirection: "column", children: content });
+  ] }) : /* @__PURE__ */ (0, import_jsx_runtime83.jsx)(ThemedBox_default, { flexDirection: "column", flexShrink: 0, children: content });
 }
 function getTaskIcon(status3) {
   switch (status3) {
@@ -316554,7 +316972,7 @@ function useClaudeAiLimits() {
 }
 var import_react69, init_claudeAiLimitsHook = __esm({
   "build-src/src/services/claudeAiLimitsHook.ts"() {
-    import_react69 = __toESM(require_react());
+    import_react69 = __toESM(require_react(), 1);
     init_claudeAiLimits();
   }
 });
@@ -395840,6 +396258,7 @@ var import_compiler_runtime174, import_react144, import_jsx_runtime245, init_Plu
     init_PluginErrors();
     init_parseArgs();
     init_ValidatePlugin();
+    init_failOpen();
     import_jsx_runtime245 = __toESM(require_jsx_runtime(), 1);
   }
 });
@@ -399696,21 +400115,20 @@ var sema_brand_default, init_sema_brand = __esm({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.74",
+        version: "1.0.76",
         notes: [
-          `Reopened approval cards now tell the truth about their own history: a card that's genuinely being shown for the first time no longer claims it was "closed without being answered" (per-session tracking of which cards actually got shown)`,
-          "Child-delegated approvals that were parking under the wrong session now surface correctly, with an explicit note on which run they belong to; a decide call that fails in flight gets one short retry before it's reported",
-          "In-stream approval requests (design/172) are now consumed end to end \u2014 reconnects and non-sticky replicas that used to miss `approval_request`/`approval_revoke` frames now decide through the durable path instead of stalling",
-          `The Permissions panel gained a "Worker policy" page showing the deployment's real, live-enforced autonomy band and command rules \u2014 separate from your local Allow/Ask/Deny/Workspace settings, which can legitimately differ from what the server actually enforces`,
-          "File-delivery notices (`SendUserFile`) now show up as a system line in the transcript instead of vanishing silently; subagent resume can target a background agent by its precise call id instead of guessing from a display name",
-          `The Fleet panel's terminal-state fallback now also watches the idle-period notification channel, not just the in-turn one \u2014 background subagents that finish after a turn has already ended no longer get stuck showing "running" forever`,
-          "Engine 7.14.0 rides in (core ^5.27.0 / SDK ^6.15.0). Deployment-facing BREAKING for SQL-backed installs only: upgrading past this engine on a Postgres/MySQL-backed deployment requires `DROP TABLE tool_result` before boot (the engine refuses to start otherwise, with the exact recovery command in the error). Local single-machine installs (the default for this shell) are unaffected \u2014 they use the file-backed store, not the SQL one.",
-          "Headless (`-p`) runs now refuse to attach to an already-running engine that can't be confirmed permission-gate-aware (missing capability or a failed probe), instead of silently running ungated; interactive sessions still warn and proceed",
-          "`sema cloud images list/show --json` now exits non-zero when the deployment honestly has no image backend configured, instead of always exiting 0 on that path"
+          "The agents panel no longer opens mid-turn: while a turn is in flight, the left-arrow key stays with the composer, and the footer hint plus the background-agent placeholder only advertise \u2190 when the prompt is idle and empty \u2014 the panel can no longer yank the screen away from a streaming turn",
+          "ctrl+b (send the current work to the background) no longer takes the turn's already-backgrounded subagents down with it",
+          "Resuming a session with a parked approval no longer risks a false deadlock: the ownership recheck that guards card re-presentation now recognizes runs by their persisted task id as well as the in-process ledger, so a first-turn park \u2192 kill \u2192 resume re-presents exactly one live card",
+          `Approval-card rule suggestions got stricter and more honest: interpreter-style commands (python, node, npx, eval, exec, ssh and friends) are never offered as persistent allow rules in any spelling, and "won't ask again" is only claimed when the rule took effect live \u2014 otherwise the card says it fully applies after restart`,
+          "Background subagents stream their transcript into the viewing pane while they run (per-agent detail stream), and the idle placeholder points at the agents panel instead of a stale hint",
+          "Task list rendering no longer collapses rows in fullscreen (alt-screen) terminals",
+          "Durable run controls from a reconnected session no longer fail due to a lost client binding on the run verbs",
+          "Engine unchanged at 7.19.0 (same pin as 1.0.75); this release is a shell-side interaction-safety and correctness batch"
         ]
       },
-      productVersion: "1.0.75",
-      announcement: "sema 1.0.75 \u2014 Decision-wall correctness batch: plan-review cards route by what the row actually asks (no more silent false answers when a Write approval wore a human-gate label), rows that have not been minted yet get a bounded birth-wait instead of being misread as already decided, and resume/cold-start now reconciles parked approvals with an honest re-present path. Approval decision notes ride the wire three-state (recorded / not recorded / unknown) so the audit line never echoes a note the store dropped. Subagent detail streams are consumed live, and the task list renders with CC-parity windowing (5-row window, completed fade, collapsed tail). Engine 7.19.0 rides in (core ^5.31.0 / SDK ^6.17.2); the background-monitor reversibility probe now fail-closes on glob operands upstream \u2014 background shell probes ask instead of guessing."
+      productVersion: "1.0.76",
+      announcement: `sema 1.0.76 \u2014 Interaction-safety batch: the agents panel no longer opens mid-turn (\u2190 stays with the composer while a turn is in flight, and every hint that advertises it follows the same predicate), ctrl+b no longer takes backgrounded subagents down with it, and resume ownership rechecks recognize persisted task ids so parked approvals re-present exactly once instead of dead-locking. Approval-card rule suggestions refuse interpreter-family commands in every spelling and only claim "won't ask again" when the rule applied live. Background subagents stream their transcripts into the viewer, and fullscreen task lists render without row collapse. Engine unchanged at 7.19.0.`
     };
   }
 });
@@ -403312,7 +403730,8 @@ function _temp230(url3) {
   if (url3.startsWith("file:"))
     try {
       openPath(fileURLToPath7(url3));
-    } catch {
+    } catch (e) {
+      failOpen("fullscreen-open-file-url", void 0, String(e));
     }
   else
     openBrowser(url3);
@@ -403387,6 +403806,7 @@ var import_compiler_runtime191, import_react160, import_jsx_runtime270, MODAL_TR
     init_stringUtils();
     init_nullRenderingAttachments();
     init_PromptInputFooterSuggestions();
+    init_failOpen();
     import_jsx_runtime270 = __toESM(require_jsx_runtime(), 1), MODAL_TRANSCRIPT_PEEK = 2, ScrollChromeContext = (0, import_react160.createContext)({
       setStickyPrompt: () => {
       }
@@ -403911,21 +404331,20 @@ var require_sema_brand = __commonJS({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.74",
+        version: "1.0.76",
         notes: [
-          `Reopened approval cards now tell the truth about their own history: a card that's genuinely being shown for the first time no longer claims it was "closed without being answered" (per-session tracking of which cards actually got shown)`,
-          "Child-delegated approvals that were parking under the wrong session now surface correctly, with an explicit note on which run they belong to; a decide call that fails in flight gets one short retry before it's reported",
-          "In-stream approval requests (design/172) are now consumed end to end \u2014 reconnects and non-sticky replicas that used to miss `approval_request`/`approval_revoke` frames now decide through the durable path instead of stalling",
-          `The Permissions panel gained a "Worker policy" page showing the deployment's real, live-enforced autonomy band and command rules \u2014 separate from your local Allow/Ask/Deny/Workspace settings, which can legitimately differ from what the server actually enforces`,
-          "File-delivery notices (`SendUserFile`) now show up as a system line in the transcript instead of vanishing silently; subagent resume can target a background agent by its precise call id instead of guessing from a display name",
-          `The Fleet panel's terminal-state fallback now also watches the idle-period notification channel, not just the in-turn one \u2014 background subagents that finish after a turn has already ended no longer get stuck showing "running" forever`,
-          "Engine 7.14.0 rides in (core ^5.27.0 / SDK ^6.15.0). Deployment-facing BREAKING for SQL-backed installs only: upgrading past this engine on a Postgres/MySQL-backed deployment requires `DROP TABLE tool_result` before boot (the engine refuses to start otherwise, with the exact recovery command in the error). Local single-machine installs (the default for this shell) are unaffected \u2014 they use the file-backed store, not the SQL one.",
-          "Headless (`-p`) runs now refuse to attach to an already-running engine that can't be confirmed permission-gate-aware (missing capability or a failed probe), instead of silently running ungated; interactive sessions still warn and proceed",
-          "`sema cloud images list/show --json` now exits non-zero when the deployment honestly has no image backend configured, instead of always exiting 0 on that path"
+          "The agents panel no longer opens mid-turn: while a turn is in flight, the left-arrow key stays with the composer, and the footer hint plus the background-agent placeholder only advertise \u2190 when the prompt is idle and empty \u2014 the panel can no longer yank the screen away from a streaming turn",
+          "ctrl+b (send the current work to the background) no longer takes the turn's already-backgrounded subagents down with it",
+          "Resuming a session with a parked approval no longer risks a false deadlock: the ownership recheck that guards card re-presentation now recognizes runs by their persisted task id as well as the in-process ledger, so a first-turn park \u2192 kill \u2192 resume re-presents exactly one live card",
+          `Approval-card rule suggestions got stricter and more honest: interpreter-style commands (python, node, npx, eval, exec, ssh and friends) are never offered as persistent allow rules in any spelling, and "won't ask again" is only claimed when the rule took effect live \u2014 otherwise the card says it fully applies after restart`,
+          "Background subagents stream their transcript into the viewing pane while they run (per-agent detail stream), and the idle placeholder points at the agents panel instead of a stale hint",
+          "Task list rendering no longer collapses rows in fullscreen (alt-screen) terminals",
+          "Durable run controls from a reconnected session no longer fail due to a lost client binding on the run verbs",
+          "Engine unchanged at 7.19.0 (same pin as 1.0.75); this release is a shell-side interaction-safety and correctness batch"
         ]
       },
-      productVersion: "1.0.75",
-      announcement: "sema 1.0.75 \u2014 Decision-wall correctness batch: plan-review cards route by what the row actually asks (no more silent false answers when a Write approval wore a human-gate label), rows that have not been minted yet get a bounded birth-wait instead of being misread as already decided, and resume/cold-start now reconciles parked approvals with an honest re-present path. Approval decision notes ride the wire three-state (recorded / not recorded / unknown) so the audit line never echoes a note the store dropped. Subagent detail streams are consumed live, and the task list renders with CC-parity windowing (5-row window, completed fade, collapsed tail). Engine 7.19.0 rides in (core ^5.31.0 / SDK ^6.17.2); the background-monitor reversibility probe now fail-closes on glob operands upstream \u2014 background shell probes ask instead of guessing."
+      productVersion: "1.0.76",
+      announcement: `sema 1.0.76 \u2014 Interaction-safety batch: the agents panel no longer opens mid-turn (\u2190 stays with the composer while a turn is in flight, and every hint that advertises it follows the same predicate), ctrl+b no longer takes backgrounded subagents down with it, and resume ownership rechecks recognize persisted task ids so parked approvals re-present exactly once instead of dead-locking. Approval-card rule suggestions refuse interpreter-family commands in every spelling and only claim "won't ask again" when the rule applied live. Background subagents stream their transcripts into the viewer, and fullscreen task lists render without row collapse. Engine unchanged at 7.19.0.`
     };
   }
 });
@@ -407694,7 +408113,7 @@ function livePlaceholderUuid(taskId) {
 }
 function createLivePlaceholderMessage(taskId) {
   return { ...createAssistantMessage({
-    content: "*waiting for agent output \u2014 streamed transcript appears here when available; a background agent shows tool/token progress in the agents tree and lands its outcome here on completion*",
+    content: "*waiting for agent output \u2014 streamed transcript appears here when available; a background agent shows tool/token progress in the agents tree and lands its outcome here on completion. When idle with the prompt empty, press \u2190 for agents to follow its live tool/token detail meanwhile.*",
     isVirtual: !0
   }), uuid: livePlaceholderUuid(taskId) };
 }
@@ -412398,6 +412817,23 @@ function surfaceRulePersistOutcome(ack) {
     logForDebugging(`persistedRulesWire: surfacing rule-persist outcome failed (non-fatal): ${String(e)}`);
   }
 }
+function surfaceLocalRulePersistOutcome(outcome) {
+  let text2 = outcome.ok ? outcome.appliedLive ? "Saved: won't ask again for this rule" : "Saved to settings \u2014 fully applies after restart (this session may ask once more)" : `"Don't ask again" was not saved (${outcome.error}) \u2014 the one-time approval is still being submitted`;
+  try {
+    surfaceWireNotice(
+      {
+        key: RULE_PERSIST_NOTICE_KEY,
+        text: text2,
+        color: "warning",
+        priority: "immediate",
+        timeoutMs: rulePersistNoticeMs
+      },
+      "preempt"
+    );
+  } catch (e) {
+    logForDebugging(`persistedRulesWire: surfacing local rule-persist outcome failed (non-fatal): ${String(e)}`);
+  }
+}
 var facadeOverride, PAGE_LIMIT, MAX_PAGES, CC_DIR4, LAYER_BYTE_CAP, RULE_PERSIST_NOTICE_KEY, RULE_PERSIST_NOTICE_DEFAULT_MS, rulePersistNoticeMs, init_persistedRulesWire = __esm({
   "build-src/src/sema/persistedRulesWire.ts"() {
     init_main2();
@@ -416537,7 +416973,8 @@ function ErrorsTabContent({
       try {
         let config4 = await loadKnownMarketplacesConfig(), { failures } = await loadMarketplacesWithGracefulDegradation(config4);
         setMarketplaceLoadFailures(failures);
-      } catch {
+      } catch (e) {
+        failOpen("cmd-plugin-marketplace-load", void 0, String(e));
       }
     })();
   }, []);
@@ -416985,6 +417422,7 @@ var import_react185, import_jsx_runtime326, TAG_USAGE, TRANSIENT_ERROR_TYPES, in
     init_PluginErrors();
     init_parseArgs();
     init_ValidatePlugin();
+    init_failOpen();
     import_jsx_runtime326 = __toESM(require_jsx_runtime(), 1);
     TAG_USAGE = `Usage: /plugin tag [path] [--push] [--dry-run] [-f|--force]
 
@@ -466951,7 +467389,13 @@ function createFleetViewControl() {
       return process.env.SEMA_NO_LEFTARROW_AGENTS !== "1";
     },
     canOpenFromComposer() {
-      return this.leftArrowOpensAgents() && !_isOpen;
+      return this.leftArrowOpensAgents() && !_isOpen && !_turnInFlight;
+    },
+    setTurnInFlight(inFlight4) {
+      _turnInFlight = !!inFlight4;
+    },
+    turnInFlight() {
+      return _turnInFlight;
     },
     isComposerEmpty() {
       return _composerEmpty;
@@ -466975,9 +467419,9 @@ function createFleetViewControl() {
     }
   };
 }
-var _composerEmpty, g3, fleetViewControl, fleetViewControl_default, init_fleetViewControl = __esm({
+var _composerEmpty, _turnInFlight, g3, fleetViewControl, fleetViewControl_default, init_fleetViewControl = __esm({
   "build-src/src/sema/fleetViewControl.ts"() {
-    _composerEmpty = !0;
+    _composerEmpty = !0, _turnInFlight = !1;
     g3 = globalThis, fleetViewControl = g3.__semaFleetView ?? (g3.__semaFleetView = createFleetViewControl()), fleetViewControl_default = fleetViewControl;
   }
 });
@@ -469434,9 +469878,136 @@ var NUMERIC, ENV_VAR, WRAPPER_COMMANDS, toArray4, init_prefix2 = __esm({
   }
 });
 
+// build-src/src/sema/localAllowRuleWrite.ts
+function parseLocalAllowRule(rule, expectedToolName) {
+  if (typeof rule != "string" || rule === "")
+    return { ok: !1, error: "rule text is empty" };
+  let value;
+  try {
+    value = permissionRuleValueFromString(rule);
+  } catch (e) {
+    return { ok: !1, error: `rule text did not parse (${String(e)})` };
+  }
+  if (typeof value.toolName != "string" || value.toolName === "")
+    return { ok: !1, error: "rule text carries no tool name" };
+  if (value.ruleContent === void 0 || value.ruleContent === "")
+    return {
+      ok: !1,
+      error: "candidate is a whole-tool allow rule (broader than this ask) \u2014 not offered locally"
+    };
+  if (expectedToolName !== void 0 && value.toolName !== expectedToolName)
+    return {
+      ok: !1,
+      error: `candidate names tool "${value.toolName}" but this ask is for "${expectedToolName}" \u2014 a rule for another tool would never match`
+    };
+  if (!hasLiteralAnchor(value.ruleContent))
+    return {
+      ok: !1,
+      error: "candidate is all wildcard (matches every command for this tool) \u2014 equivalent to a whole-tool allow, not offered locally"
+    };
+  if (value.toolName === BASH_TOOL_NAME_FOR_RULES && bashPermissionsModule().bashRuleContentHasDangerousBarePrefix(value.ruleContent))
+    return {
+      ok: !1,
+      error: "candidate is a bare interpreter/wrapper prefix (bash/sh/env/sudo/\u2026) \u2014 persisting it would authorize arbitrary commands, not offered locally"
+    };
+  {
+    let setup2 = permissionSetupModule2();
+    if (setup2.isDangerousBashPermission(value.toolName, value.ruleContent) || setup2.isDangerousPowerShellPermission(value.toolName, value.ruleContent))
+      return {
+        ok: !1,
+        error: "candidate allow-rule matches a code-execution interpreter/wrapper pattern (python/node/eval/ssh/\u2026) \u2014 persisting it would authorize arbitrary code, not offered locally"
+      };
+  }
+  return { ok: !0, value, canonical: permissionRuleValueToString(value) };
+}
+function localAllowRulesPermittedByPolicy() {
+  try {
+    return permissionsLoaderModule().shouldShowAlwaysAllowOptions();
+  } catch {
+    return !1;
+  }
+}
+function hasLiteralAnchor(ruleContent) {
+  let out6 = "";
+  for (let i = 0; i < ruleContent.length; i++) {
+    let ch2 = ruleContent[i];
+    if (ch2 === "\\" && i + 1 < ruleContent.length) {
+      out6 += ruleContent[i + 1], i++;
+      continue;
+    }
+    ch2 !== "*" && (out6 += ch2);
+  }
+  return out6.trim() !== "";
+}
+function permissionUpdateModule() {
+  return init_PermissionUpdate(), __toCommonJS(PermissionUpdate_exports);
+}
+function permissionsLoaderModule() {
+  return init_permissionsLoader(), __toCommonJS(permissionsLoader_exports);
+}
+function bashPermissionsModule() {
+  return init_bashPermissions(), __toCommonJS(bashPermissions_exports);
+}
+function permissionSetupModule2() {
+  return init_permissionSetup(), __toCommonJS(permissionSetup_exports);
+}
+function leaderBridgeModule() {
+  return init_leaderPermissionBridge(), __toCommonJS(leaderPermissionBridge_exports);
+}
+function persistLocalAllowRule(rule) {
+  let parsed = parseLocalAllowRule(rule);
+  if (!parsed.ok)
+    return logForDebugging(`localAllowRuleWrite: refusing to persist a rule candidate \u2014 ${parsed.error}`), { ok: !1, error: parsed.error };
+  let update2 = {
+    type: "addRules",
+    rules: [parsed.value],
+    behavior: "allow",
+    destination: "localSettings"
+  };
+  if (!localAllowRulesPermittedByPolicy()) {
+    let error51 = `managed policy allows only managed permission rules \u2014 this deployment cannot save a local "don't ask again" rule`;
+    return logForDebugging(`localAllowRuleWrite: ${error51}`), { ok: !1, error: error51 };
+  }
+  let mod = permissionUpdateModule(), written = !1;
+  try {
+    written = permissionsLoaderModule().addPermissionRulesToSettings(
+      { ruleValues: [parsed.value], ruleBehavior: "allow" },
+      "localSettings"
+    );
+  } catch (e) {
+    let error51 = `writing the rule to local settings threw (${String(e)})`;
+    return logForDebugging(`localAllowRuleWrite: ${error51}`), { ok: !1, error: error51 };
+  }
+  if (!written) {
+    let error51 = "local settings refused the rule (managed-rules-only policy, or a settings parse/lock/write failure) \u2014 nothing was saved";
+    return logForDebugging(`localAllowRuleWrite: ${error51}`), { ok: !1, error: error51 };
+  }
+  try {
+    let setCtx = leaderBridgeModule().getLeaderSetToolPermissionContext(), state4 = getAppStateStoreRef()?.getState?.();
+    if (setCtx && state4?.toolPermissionContext)
+      return setCtx(mod.applyPermissionUpdate(state4.toolPermissionContext, update2)), { ok: !0, appliedLive: !0 };
+    logForDebugging(
+      "localAllowRuleWrite: rule persisted to local settings, but this lane has no in-memory permission context to update (it will take effect on next start)"
+    );
+  } catch (e) {
+    logForDebugging(
+      `localAllowRuleWrite: rule persisted, but applying it to the in-memory permission context failed (non-fatal): ${String(e)}`
+    );
+  }
+  return { ok: !0, appliedLive: !1 };
+}
+var BASH_TOOL_NAME_FOR_RULES, init_localAllowRuleWrite = __esm({
+  "build-src/src/sema/localAllowRuleWrite.ts"() {
+    init_permissionRuleParser();
+    init_debug();
+    init_appStateRef();
+    BASH_TOOL_NAME_FOR_RULES = "Bash";
+  }
+});
+
 // build-src/src/components/permissions/engineRuleSuggestions.tsx
-function readSuggestions(confirm2) {
-  let raw2 = confirm2.ruleSuggestions;
+function readSuggestions(confirm2, key = "ruleSuggestions") {
+  let raw2 = confirm2[key];
   if (!Array.isArray(raw2)) return [];
   let out6 = [];
   for (let item of raw2) {
@@ -469472,6 +470043,41 @@ function tryEngineRulePersistSelection(confirm2, value, onDone) {
   let onSelected = confirm2.onPersistRuleSelected;
   return onSelected?.(rule), onDone?.(), confirm2.onAllow(confirm2.input, []), !0;
 }
+function readLocalRedeemable(confirm2) {
+  let expected = typeof confirm2.tool?.name == "string" ? confirm2.tool.name : void 0, out6 = [];
+  for (let s of readSuggestions(confirm2, "ruleSuggestionsReadOnly")) {
+    let parsed = parseLocalAllowRule(s.rule, expected);
+    parsed.ok && out6.push({ rule: s.rule, canonical: parsed.canonical });
+  }
+  return out6;
+}
+function localRuleSuggestionOptions(confirm2) {
+  if (!localAllowRulesPermittedByPolicy()) return [];
+  let suggestions = readLocalRedeemable(confirm2);
+  if (suggestions.length === 0) return [];
+  let scope = getOriginalCwd();
+  return suggestions.map((s, i) => ({
+    label: /* @__PURE__ */ (0, import_jsx_runtime378.jsxs)(ThemedText, { children: [
+      "Yes, and don't ask again for ",
+      /* @__PURE__ */ (0, import_jsx_runtime378.jsx)(ThemedText, { bold: !0, children: s.canonical }),
+      " in ",
+      /* @__PURE__ */ (0, import_jsx_runtime378.jsx)(ThemedText, { bold: !0, children: scope })
+    ] }),
+    value: `${LOCAL_RULE_OPTION_VALUE_PREFIX}${i}`
+  }));
+}
+function localRuleForOptionValue(confirm2, value) {
+  if (!value.startsWith(LOCAL_RULE_OPTION_VALUE_PREFIX)) return;
+  let idx = Number(value.slice(LOCAL_RULE_OPTION_VALUE_PREFIX.length));
+  if (!(!Number.isInteger(idx) || idx < 0))
+    return readLocalRedeemable(confirm2)[idx]?.rule;
+}
+function tryLocalRulePersistSelection(confirm2, value, onDone) {
+  let rule = localRuleForOptionValue(confirm2, value);
+  if (rule === void 0) return !1;
+  let onSelected = confirm2.onPersistLocalRuleSelected;
+  return onSelected?.(rule), onDone?.(), confirm2.onAllow(confirm2.input, []), !0;
+}
 function PersistedRuleShadowedRow({ confirm: confirm2 }) {
   let shadowed = confirm2.persistedRuleShadowed;
   return typeof shadowed != "string" || shadowed === "" ? null : /* @__PURE__ */ (0, import_jsx_runtime378.jsxs)(ThemedText, { dimColor: !0, children: [
@@ -469480,11 +470086,13 @@ function PersistedRuleShadowedRow({ confirm: confirm2 }) {
     ") still exists \u2014 it just cannot clear this particular call, so this one is confirmed individually."
   ] });
 }
-var import_jsx_runtime378, ENGINE_RULE_OPTION_VALUE_PREFIX, init_engineRuleSuggestions = __esm({
+var import_jsx_runtime378, ENGINE_RULE_OPTION_VALUE_PREFIX, LOCAL_RULE_OPTION_VALUE_PREFIX, init_engineRuleSuggestions = __esm({
   "build-src/src/components/permissions/engineRuleSuggestions.tsx"() {
     init_ink2();
     init_state();
+    init_localAllowRuleWrite();
     import_jsx_runtime378 = __toESM(require_jsx_runtime(), 1), ENGINE_RULE_OPTION_VALUE_PREFIX = "sema-engine-rule:";
+    LOCAL_RULE_OPTION_VALUE_PREFIX = "sema-local-rule:";
   }
 });
 
@@ -470938,14 +471546,17 @@ function FilePermissionDialog({
     ideName
   } = useDiffInIDE(diffParams), onChange = (option_0, feedback2) => {
     closeTabInIDE2?.(), fileDialogResult.onChange(option_0, parsedInput, feedback2?.trim());
-  }, shadowedRow = toolUseConfirm.persistedRuleShadowed !== void 0 ? /* @__PURE__ */ (0, import_jsx_runtime384.jsx)(PersistedRuleShadowedRow, { confirm: toolUseConfirm }) : null, ruleOptions = engineRuleSuggestionOptions(toolUseConfirm), optionsWithRules = ruleOptions.length > 0 ? [...options.slice(0, -1), ...ruleOptions.map((o) => ({
+  }, shadowedRow = toolUseConfirm.persistedRuleShadowed !== void 0 ? /* @__PURE__ */ (0, import_jsx_runtime384.jsx)(PersistedRuleShadowedRow, { confirm: toolUseConfirm }) : null, ruleOptions = [...engineRuleSuggestionOptions(toolUseConfirm), ...localRuleSuggestionOptions(toolUseConfirm)], optionsWithRules = ruleOptions.length > 0 ? [...options.slice(0, -1), ...ruleOptions.map((o) => ({
     ...o,
     option: {
       type: "accept-once"
     }
-  })), ...options.slice(-1)] : options, handleEngineRuleValue = (value) => tryEngineRulePersistSelection(toolUseConfirm, value, () => {
-    closeTabInIDE2?.(), onDone();
-  });
+  })), ...options.slice(-1)] : options, handleEngineRuleValue = (value) => {
+    let done = () => {
+      closeTabInIDE2?.(), onDone();
+    };
+    return tryEngineRulePersistSelection(toolUseConfirm, value, done) || tryLocalRulePersistSelection(toolUseConfirm, value, done);
+  };
   if (showingDiffInIDE && ideDiffConfig && path28)
     return /* @__PURE__ */ (0, import_jsx_runtime384.jsx)(ShowInIDEPrompt, { onChange: (option_1, _input, feedback_0) => onChange(option_1, feedback_0), onSelectValue: handleEngineRuleValue, extraNote: shadowedRow, options: optionsWithRules, filePath: path28, input: parsedInput, ideName, symlinkTarget, rejectFeedback, acceptFeedback, setFocusedOption, onInputModeToggle: handleInputModeToggle, focusedOption, yesInputMode, noInputMode });
   let isSymlinkOutsideCwd = symlinkTarget != null && relative31(getCwd(), symlinkTarget).startsWith(".."), symlinkWarning = symlinkTarget ? /* @__PURE__ */ (0, import_jsx_runtime384.jsx)(ThemedBox_default, { paddingX: 1, marginBottom: 1, children: /* @__PURE__ */ (0, import_jsx_runtime384.jsx)(ThemedText, { color: "warning", children: isSymlinkOutsideCwd ? `This will modify ${symlinkTarget} (outside working directory) via a symlink` : `Symlink target: ${symlinkTarget}` }) }) : null, wireNote = toolUseConfirm.wireNote, wireNoteRow = typeof wireNote == "string" && wireNote.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime384.jsx)(ThemedBox_default, { paddingX: 1, marginBottom: 1, children: /* @__PURE__ */ (0, import_jsx_runtime384.jsx)(ThemedText, { dimColor: !0, children: wireNote }) }) : null;
@@ -471552,7 +472163,7 @@ function BashPermissionRequestInner({
     editablePrefix,
     onEditablePrefixChange
   }), [toolUseConfirm, classifierDescription, initialClassifierDescriptionEmpty, existingAllowDescriptions, yesInputMode, noInputMode, editablePrefix, onEditablePrefixChange]), engineRuleOptionsAppended = (base) => {
-    let extra = engineRuleSuggestionOptions(toolUseConfirm);
+    let extra = [...engineRuleSuggestionOptions(toolUseConfirm), ...localRuleSuggestionOptions(toolUseConfirm)];
     return extra.length === 0 ? base : [...base.slice(0, -1), ...extra, ...base.slice(-1)];
   }, handleToggleDebug = (0, import_react223.useCallback)(() => {
     setShowPermissionDebug((prev) => !prev);
@@ -471568,7 +472179,7 @@ function BashPermissionRequestInner({
     isActive: !1
   });
   function onSelect(value_0) {
-    if (tryEngineRulePersistSelection(toolUseConfirm, value_0, onDone))
+    if (tryEngineRulePersistSelection(toolUseConfirm, value_0, onDone) || tryLocalRulePersistSelection(toolUseConfirm, value_0, onDone))
       return;
     ({
       yes: 1,
@@ -472339,7 +472950,7 @@ function FallbackPermissionRequest(t0) {
   }, $3[4] = t2) : t2 = $3[4], usePermissionRequestLogging(toolUseConfirm, t2);
   let t3;
   $3[5] !== onDone || $3[6] !== onReject || $3[7] !== toolUseConfirm ? (t3 = (value, feedback2) => {
-    if (!tryEngineRulePersistSelection(toolUseConfirm, value, onDone))
+    if (!tryEngineRulePersistSelection(toolUseConfirm, value, onDone) && !tryLocalRulePersistSelection(toolUseConfirm, value, onDone))
       bb8: switch (value) {
         case "yes": {
           logUnaryEvent({
@@ -472473,7 +473084,7 @@ function FallbackPermissionRequest(t0) {
   ] }), $3[44] = toolUseConfirm.permissionResult, $3[45] = t17) : t17 = $3[45];
   let t18;
   $3[46] !== handleCancel || $3[47] !== handleSelect || $3[48] !== options || $3[49] !== toolAnalyticsContext ? (t18 = /* @__PURE__ */ (0, import_jsx_runtime391.jsx)(PermissionPrompt, { options: (() => {
-    let extra = engineRuleSuggestionOptions(toolUseConfirm);
+    let extra = [...engineRuleSuggestionOptions(toolUseConfirm), ...localRuleSuggestionOptions(toolUseConfirm)];
     return extra.length === 0 ? options : [...options.slice(0, -1), ...extra, ...options.slice(-1)];
   })(), onSelect: handleSelect, onCancel: handleCancel, toolAnalyticsContext, defaultFocusValue: toolUseConfirm.governanceForced === !0 ? "no" : void 0 }), $3[46] = handleCancel, $3[47] = handleSelect, $3[48] = options, $3[49] = toolAnalyticsContext, $3[50] = t18) : t18 = $3[50];
   let t19;
@@ -491185,7 +491796,7 @@ async function reconcileResumePendingApprovals(deps2) {
       debug3("an owned pending row carries no taskId handle \u2014 both reopen arms address by taskId, nothing to reopen"), verdict.skipped.push({ taskId: null, reason: "no-task-handle" });
       continue;
     }
-    let kind = gateKindOf(row2), arm = kind === null ? null : ASK_PARK_GATE_KINDS2.includes(kind) ? "ask" : PLAN_REVIEW_GATE_KINDS.includes(kind) ? "plan" : null;
+    let kind = gateKindOf(row2), arm = kind === null ? null : ASK_PARK_GATE_KINDS2.includes(kind) ? "ask" : PLAN_REVIEW_GATE_KINDS2.includes(kind) ? "plan" : null;
     if (arm === null) {
       debug3(
         `owned pending row (task ${taskId}) is parked on gate kind '${kind ?? "<absent>"}' \u2014 not in either triage table, refusing to route it into a known reopen arm`
@@ -491518,6 +492129,28 @@ var import_compiler_runtime299, import_react298, init_useIDEIntegration = __esm(
   }
 });
 
+// build-src/src/sema/sessionBackgroundArm.ts
+function engineHostsTheTurn(env5 = process.env) {
+  let live = env5.SEMA_LIVE_BASEURL;
+  return typeof live == "string" && live.length > 0;
+}
+function remoteHostsTheTurn(readGlobal = getIsRemoteMode, readPosture = hasRemoteConnection) {
+  try {
+    return readGlobal() || readPosture();
+  } catch {
+    return !0;
+  }
+}
+function sessionBackgroundingAvailable(env5 = process.env) {
+  return !engineHostsTheTurn(env5) && !remoteHostsTheTurn();
+}
+var init_sessionBackgroundArm = __esm({
+  "build-src/src/sema/sessionBackgroundArm.ts"() {
+    init_state();
+    init_remoteWriteSeam();
+  }
+});
+
 // build-src/src/components/SessionBackgroundHint.tsx
 function SessionBackgroundHint(t0) {
   let $3 = (0, import_compiler_runtime300.c)(10), {
@@ -491528,11 +492161,11 @@ function SessionBackgroundHint(t0) {
     if (isEnvTruthy(process.env.SEMA_CODE_DISABLE_BACKGROUND_TASKS))
       return;
     let state4 = appStateStore.getState();
-    hasForegroundTasks(state4) ? (backgroundAll(() => appStateStore.getState(), setAppState), getGlobalConfig().hasUsedBackgroundTask || saveGlobalConfig(_temp257)) : isLoading && handleDoublePress();
+    hasForegroundTasks(state4) ? (backgroundAll(() => appStateStore.getState(), setAppState), getGlobalConfig().hasUsedBackgroundTask || saveGlobalConfig(_temp257)) : isLoading && sessionBackgroundingAvailable() && handleDoublePress();
   }, $3[0] = appStateStore, $3[1] = handleDoublePress, $3[2] = isLoading, $3[3] = setAppState, $3[4] = t1) : t1 = $3[4];
   let handleBackground = t1, hasForeground = useAppState(hasForegroundTasks), t2;
   $3[5] === /* @__PURE__ */ Symbol.for("react.memo_cache_sentinel") ? (t2 = !0, $3[5] = t2) : t2 = $3[5];
-  let t3 = hasForeground || t2 && isLoading, t4;
+  let t3 = hasForeground || t2 && isLoading && sessionBackgroundingAvailable(), t4;
   $3[6] !== t3 ? (t4 = {
     context: "Task",
     isActive: t3
@@ -491558,6 +492191,7 @@ var import_compiler_runtime300, import_react299, import_jsx_runtime452, init_Ses
     init_ink2();
     init_useKeybinding();
     init_useShortcutDisplay();
+    init_sessionBackgroundArm();
     init_AppState();
     init_LocalShellTask();
     init_config();
@@ -494708,7 +495342,7 @@ function _temp158() {
 }
 var import_compiler_runtime308, import_react313, SETTINGS_ERRORS_NOTIFICATION_KEY, init_useSettingsErrors = __esm({
   "build-src/src/hooks/notifs/useSettingsErrors.tsx"() {
-    import_compiler_runtime308 = __toESM(require_compiler_runtime()), import_react313 = __toESM(require_react());
+    import_compiler_runtime308 = __toESM(require_compiler_runtime(), 1), import_react313 = __toESM(require_react(), 1);
     init_notifications2();
     init_state();
     init_allErrors();
@@ -497463,7 +498097,11 @@ function REPL({
   abortControllerRef.current = abortController;
   let sendBridgeResultRef = (0, import_react332.useRef)(() => {
   }), restoreMessageSyncRef = (0, import_react332.useRef)(() => {
-  }), scrollRef = (0, import_react332.useRef)(null), modalScrollRef = (0, import_react332.useRef)(null), lastUserScrollTsRef = (0, import_react332.useRef)(0), queryGuard = React175.useRef(new QueryGuard()).current, isQueryActive = React175.useSyncExternalStore(queryGuard.subscribe, queryGuard.getSnapshot), [isExternalLoading, setIsExternalLoadingRaw] = React175.useState(remoteSessionConfig?.hasInitialPrompt ?? !1), isLoading = isQueryActive || isExternalLoading, [userInputOnProcessing, setUserInputOnProcessingRaw] = React175.useState(void 0), userInputBaselineRef = React175.useRef(0), userMessagePendingRef = React175.useRef(!1), loadingStartTimeRef = React175.useRef(0), totalPausedMsRef = React175.useRef(0), pauseStartTimeRef = React175.useRef(null);
+  }), scrollRef = (0, import_react332.useRef)(null), modalScrollRef = (0, import_react332.useRef)(null), lastUserScrollTsRef = (0, import_react332.useRef)(0), queryGuard = React175.useRef(new QueryGuard()).current, isQueryActive = React175.useSyncExternalStore(queryGuard.subscribe, queryGuard.getSnapshot), [isExternalLoading, setIsExternalLoadingRaw] = React175.useState(remoteSessionConfig?.hasInitialPrompt ?? !1), isLoading = isQueryActive || isExternalLoading;
+  React175.useEffect(() => {
+    fleetViewControl_default.setTurnInFlight(isLoading);
+  }, [isLoading]);
+  let [userInputOnProcessing, setUserInputOnProcessingRaw] = React175.useState(void 0), userInputBaselineRef = React175.useRef(0), userMessagePendingRef = React175.useRef(!1), loadingStartTimeRef = React175.useRef(0), totalPausedMsRef = React175.useRef(0), pauseStartTimeRef = React175.useRef(null);
   publishSpinnerTimingAnchors({ loadingStartTimeRef, totalPausedMsRef, pauseStartTimeRef });
   let resetTimingRefs = React175.useCallback(() => {
     loadingStartTimeRef.current = Date.now(), totalPausedMsRef.current = 0, pauseStartTimeRef.current = null;
@@ -508915,7 +509553,7 @@ function permissionsModule() {
 function filesystemModule() {
   return init_filesystem(), __toCommonJS(filesystem_exports);
 }
-function bashPermissionsModule() {
+function bashPermissionsModule2() {
   return init_bashPermissions(), __toCommonJS(bashPermissions_exports);
 }
 function bashCommandsModule() {
@@ -508962,15 +509600,15 @@ function denyVerdict(ctx, req) {
     let command8 = args.command;
     if (typeof command8 == "string" && command8.trim() !== "") {
       let segments = bashCommandsModule().splitCommand_DEPRECATED(command8);
-      if (segments.length > bashPermissionsModule().MAX_SUBCOMMANDS_FOR_SECURITY_CHECK)
+      if (segments.length > bashPermissionsModule2().MAX_SUBCOMMANDS_FOR_SECURITY_CHECK)
         throw new Error(
-          `compound command has ${segments.length} subcommands (cap ${bashPermissionsModule().MAX_SUBCOMMANDS_FOR_SECURITY_CHECK}) \u2014 fail-closed to card`
+          `compound command has ${segments.length} subcommands (cap ${bashPermissionsModule2().MAX_SUBCOMMANDS_FOR_SECURITY_CHECK}) \u2014 fail-closed to card`
         );
       let candidates = segments.length > 1 ? [command8, ...segments] : [command8], candidateEvalFailed = null;
       for (let cand of candidates)
         if (!(typeof cand != "string" || cand.trim() === ""))
           try {
-            let result = bashPermissionsModule().bashToolCheckPermission({ command: cand }, ctx);
+            let result = bashPermissionsModule2().bashToolCheckPermission({ command: cand }, ctx);
             if (result.behavior === "deny" && result.decisionReason?.type === "rule") {
               let rule = result.decisionReason.rule;
               return {
@@ -508988,9 +509626,9 @@ function denyVerdict(ctx, req) {
     let command8 = args.command;
     if (typeof command8 == "string" && command8.trim() !== "") {
       let fragments = /[`'"]/.test(command8) ? [] : command8.split(/[;|\n\r{}()&]+/).filter((f) => f.trim() !== "");
-      if (fragments.length > bashPermissionsModule().MAX_SUBCOMMANDS_FOR_SECURITY_CHECK)
+      if (fragments.length > bashPermissionsModule2().MAX_SUBCOMMANDS_FOR_SECURITY_CHECK)
         throw new Error(
-          `powershell command has ${fragments.length} fragments (cap ${bashPermissionsModule().MAX_SUBCOMMANDS_FOR_SECURITY_CHECK}) \u2014 fail-closed to card`
+          `powershell command has ${fragments.length} fragments (cap ${bashPermissionsModule2().MAX_SUBCOMMANDS_FOR_SECURITY_CHECK}) \u2014 fail-closed to card`
         );
       let candidates = fragments.length > 1 ? [command8, ...fragments] : [command8], candidateEvalFailed = null;
       for (let cand of candidates)
@@ -509033,7 +509671,7 @@ function bashVerdict(ctx, args) {
   let command8 = args.command;
   if (typeof command8 != "string" || command8.trim() === "")
     return { allow: !1, reason: "bash gate carries no command string" };
-  let result = bashPermissionsModule().bashToolCheckPermission(
+  let result = bashPermissionsModule2().bashToolCheckPermission(
     { command: command8 },
     ctx
   );
@@ -509273,9 +509911,24 @@ function shellApprovalCardPort(req) {
       // 🔴 两元素**各渲各的**,壳不写互斥逻辑(互斥由 core 铸点保证)。
       ...req.ruleSuggestions !== void 0 && req.ruleSuggestions.length > 0 ? { ruleSuggestions: req.ruleSuggestions } : {},
       ...typeof req.persistedRuleShadowed == "string" && req.persistedRuleShadowed !== "" ? { persistedRuleShadowed: req.persistedRuleShadowed } : {},
+      // ── #249③ / [3892]③ / [3895]:**durable park 腿**的只读候选(F-003 渲染半场)────────────
+      // 修前这一位到卡口就被整段丢掉 ⇒ 那条腿上的 Bash 审批卡恒只有 `1. Yes / 2. No`,CC 的第三态
+      // 在**供给已经在场**(server 7.16.0 起行上就有,client-core 0.29.0 已合形窄化落卡入参)的
+      // 情况下依然渲不出来。
+      // 🔴 与上面的 `ruleSuggestions` **分键不合流**:那一位兑付到 respond 的 `persistRule`,本位
+      //    的 `/decide` 体无规则位 ⇒ 兑付走 `onPersistLocalRuleSelected` 的壳侧 settings 写入,
+      //    **决断字节一个键都不多**(常驻套 localRuleSuggestionsCard ⑤-5/⑥-5 钉住)。
+      ...Array.isArray(req.ruleSuggestionsReadOnly) && req.ruleSuggestionsReadOnly.length > 0 ? { ruleSuggestionsReadOnly: req.ruleSuggestionsReadOnly } : {},
       onPersistRuleSelected(rule) {
         selectedPersistRule = rule;
       },
+      // durable 腿的落规则口:写壳自己的 `permissions.allow`(判定与窄化全在 localAllowRuleWrite),
+      // 成败**都**上屏 —— 「点了『不再询问』,下次它又问」是这条腿唯一会被问的问题,静默失败等于
+      // 把答案藏起来。🔴 刻意不碰 `selectedPersistRule`:回决字节与两态时代必须逐字节相同。
+      onPersistLocalRuleSelected(rule) {
+        let outcome = persistLocalAllowRule(rule);
+        surfaceLocalRulePersistOutcome(outcome);
+      },
       // governanceForced(client-core 0.20.1 透传位,server ≥7.5.0):此门来自部署治理层
       // (AUTONOMY/commandPolicy/MANUAL_MODE_SHELL_GATE/SENSITIVE_WRITE_PATTERNS),权限模式
       // 表态掀不掉——呈现走 wireNote 超集车道(dim 行,与 argsOmitted 提示同位,可叠加)。
@@ -509337,6 +509990,8 @@ var asWireTool, forcedToolLoadFailureForTest, forcedToolNilExportForTest, loadFi
     init_appStateRef();
     init_debug();
     init_engineGateSyncAllow();
+    init_localAllowRuleWrite();
+    init_persistedRulesWire();
     init_armedGateRegistry2();
     init_dist();
     asWireTool = (t2) => t2, forcedToolLoadFailureForTest = null, forcedToolNilExportForTest = null, loadFileWrite = () => (init_FileWriteTool(), __toCommonJS(FileWriteTool_exports)).FileWriteTool, loadFileEdit = () => (init_FileEditTool(), __toCommonJS(FileEditTool_exports)).FileEditTool, loadNotebookEdit = () => (init_NotebookEditTool(), __toCommonJS(NotebookEditTool_exports)).NotebookEditTool, loadBash = () => (init_BashTool(), __toCommonJS(BashTool_exports)).BashTool, loadEngineWorkflow = () => (init_EngineWorkflowTool(), __toCommonJS(EngineWorkflowTool_exports)).EngineWorkflowTool, KNOWN_TOOL_LOADERS = {
@@ -509395,27 +510050,6 @@ var init_liveHitlAskWire = __esm({
   }
 });
 
-// build-src/src/sema/approvalDecisionNoteAudit.ts
-function cleanNote(raw2) {
-  let flat = raw2.replace(/[\u0000-\u001f\u007f-\u009f]+/g, " ").replace(/ {2,}/g, " ").trim();
-  return flat.length <= 200 ? flat : `${flat.slice(0, 199)}\u2026`;
-}
-function readDecisionNoteAudit(ack) {
-  if (ack === null || typeof ack != "object") return { state: "unknown" };
-  let o = ack, note = typeof o.decisionNote == "string" && o.decisionNote.trim() !== "" ? cleanNote(o.decisionNote) : void 0;
-  return o.noteRecorded === !1 ? { state: "not-recorded", ...note !== void 0 ? { note } : {} } : o.noteRecorded === !0 ? { state: "recorded", ...note !== void 0 ? { note } : {} } : note !== void 0 ? { state: "recorded", note } : { state: "unknown" };
-}
-function decisionNoteAuditLine(audit, opts) {
-  if (audit.state === "unknown") return null;
-  let quoted = audit.note !== void 0 ? `: "${audit.note}"` : "";
-  return opts?.settledElsewhere === !0 ? audit.state === "recorded" ? `this approval was already decided elsewhere \u2014 the reason recorded on the audit trail${quoted}` : `this approval was already decided elsewhere; your reason was not saved to the audit trail \u2014 that decision stands${quoted}` : audit.state === "recorded" ? `decision reason recorded on the audit trail${quoted}` : `your decision stands \u2014 the engine did not save its reason to the audit trail${quoted}`;
-}
-var DECISION_NOTE_NOTICE_KEY, init_approvalDecisionNoteAudit = __esm({
-  "build-src/src/sema/approvalDecisionNoteAudit.ts"() {
-    DECISION_NOTE_NOTICE_KEY = "approval-decision-note";
-  }
-});
-
 // build-src/src/sema/approvalStreamWire.ts
 import {
   isApprovalRequestFrameV1,
@@ -509659,7 +510293,7 @@ async function* consumeStreamApprovalFrames(events3, deps2, opts = {}) {
       release2();
     }
   }
-  function abortableDelay3(ms, signal) {
+  function abortableDelay2(ms, signal) {
     return signal.aborted ? Promise.resolve() : new Promise((resolve57) => {
       let t2 = setTimeout(done, ms);
       function done() {
@@ -509685,7 +510319,7 @@ async function* consumeStreamApprovalFrames(events3, deps2, opts = {}) {
       } catch (e) {
         let f = classifyAskDecisionFailure(e);
         if (f.kind === "parking" && attempt < PARKING_POLL_MAX && !signal.aborted) {
-          await abortableDelay3(PARKING_POLL_DELAY_MS * (attempt + 1), signal);
+          await abortableDelay2(PARKING_POLL_DELAY_MS * (attempt + 1), signal);
           continue;
         }
         reportDecisionFailure(f, askId), f.kind === "ask-lane-disabled" && await fallbackLegacyRespond(approvalId, decision, askId, signal);
@@ -509775,7 +510409,6 @@ var STREAM_APPROVAL_CAP, ASK_DECISION_DISABLED_CODE, IDEMPOTENCY_KEY_MAX, PARKIN
   "build-src/src/sema/approvalStreamWire.ts"() {
     init_dist();
     init_debug();
-    init_approvalDecisionNoteAudit();
     init_appStateRef();
     init_wireNoticePort();
     STREAM_APPROVAL_CAP = "streamApproval", ASK_DECISION_DISABLED_CODE = "feature.approval_ask_disabled", IDEMPOTENCY_KEY_MAX = 255, PARKING_POLL_MAX = 2, PARKING_POLL_DELAY_MS = 400, CAPS_SETTLE_BUDGET_MS = 1500, LEGACY_SETTLE_GRACE_MS = 750, MAX_DECISION_NOTE_CHARS = 2048, TEARDOWN_BUDGET_MS = 1e3;
@@ -509810,7 +510443,7 @@ function classifySubmitFailure(e, signal) {
   let status3 = statusOf2(e);
   return status3 !== void 0 ? status3 === 501 ? "server-verdict" : status3 >= 500 ? "server-5xx" : "server-verdict" : isEngineTransportError(e) || isAbortShaped(e) ? "transport" : "local-error";
 }
-function abortableDelay2(ms, signal) {
+function abortableDelay(ms, signal) {
   return signal?.aborted === !0 ? Promise.resolve() : new Promise((resolve57) => {
     let t2 = setTimeout(done, ms);
     function done() {
@@ -509844,7 +510477,7 @@ async function submitWithTransportRetry(send, o) {
       if (retriable && attempt < attempts && !overBudget) {
         if (logForDebugging(
           `[sema][wire] approval submit ${o.label}: attempt ${String(attempt)}/${String(attempts)} failed (${kind}) \u2014 retrying in ${String(delay)}ms with the SAME request`
-        ), retried = !0, await abortableDelay2(delay, o.signal), o.signal?.aborted === !0)
+        ), retried = !0, await abortableDelay(delay, o.signal), o.signal?.aborted === !0)
           throw logForDebugging(`[sema][wire] approval submit ${o.label}: aborted during backoff \u2014 no further attempt`), e;
         continue;
       }
@@ -528763,7 +529396,7 @@ Usage: sema --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("sema 1.0.75", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
+  }).version("sema 1.0.76", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).psHandler([]), process.exit(process.exitCode ?? 0);
   }), program2.command("logs [id]").description("Print a background session's recent terminal output").action(async (id) => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).logsHandler(id, []), process.exit(process.exitCode ?? 0);
@@ -531425,7 +532058,8 @@ function seedSemaSettings() {
   }
   try {
     resetUserSettingCache();
-  } catch {
+  } catch (e) {
+    failOpen("settings-seed-cache-reset", void 0, String(e));
   }
   return { wrote: !0, path: file2, added };
 }
@@ -531433,6 +532067,7 @@ var SEMA_SETTINGS_DEFAULTS, init_semaSettingsSeed = __esm({
   "build-src/src/sema/mock/semaSettingsSeed.ts"() {
     init_envUtils();
     init_userSetting();
+    init_failOpen();
     SEMA_SETTINGS_DEFAULTS = {
       theme: "dark",
       // LOAD-BEARING: dark → RGB-orange logo + white ⏺ bullet (matches real 187 on a dark terminal)