@sema-agent/cli 1.0.80 → 1.0.82

package/sema-main.js

@@ -39600,8 +39600,8 @@ var require_get_proto = __commonJS({
 var require_hasown = __commonJS({
   "node_modules/hasown/index.js"(exports2, module2) {
     "use strict";
-    var call77 = Function.prototype.call, $hasOwn = Object.prototype.hasOwnProperty, bind2 = require_function_bind();
-    module2.exports = bind2.call(call77, $hasOwn);
+    var call78 = Function.prototype.call, $hasOwn = Object.prototype.hasOwnProperty, bind2 = require_function_bind();
+    module2.exports = bind2.call(call78, $hasOwn);
   }
 });
 
@@ -40775,9 +40775,9 @@ var require_ms = __commonJS({
     }
     function fmtLong(ms) {
       var msAbs = Math.abs(ms);
-      return msAbs >= d4 ? plural5(ms, msAbs, d4, "day") : msAbs >= h ? plural5(ms, msAbs, h, "hour") : msAbs >= m2 ? plural5(ms, msAbs, m2, "minute") : msAbs >= s ? plural5(ms, msAbs, s, "second") : ms + " ms";
+      return msAbs >= d4 ? plural6(ms, msAbs, d4, "day") : msAbs >= h ? plural6(ms, msAbs, h, "hour") : msAbs >= m2 ? plural6(ms, msAbs, m2, "minute") : msAbs >= s ? plural6(ms, msAbs, s, "second") : ms + " ms";
     }
-    function plural5(ms, msAbs, n2, name) {
+    function plural6(ms, msAbs, n2, name) {
       var isPlural = msAbs >= n2 * 1.5;
       return Math.round(ms / n2) + " " + name + (isPlural ? "s" : "");
     }
@@ -46920,6 +46920,13 @@ var EnvironmentVariablesSchema, PermissionsSchema, KILL_SWITCH_KEYS, ExtraKnownM
         semaAutoModeModels: external_exports.array(external_exports.string()).optional().catch(void 0).describe(
           "sema: model allowlist force-enabling auto mode for the listed models (tengu_auto_mode_config.allowModels; exact model IDs or canonical family names). Default (absent/empty) keeps the built-in allowlist. Applies on next shell start."
         ),
+        // agent-teams(具名持久队友族)的 settings 面 opt-in。门本体 = utils/agentSwarmsEnabled.ts
+        // (grep semaAgentTeamsEnabled),三源析取:本键 / env SEMA_CODE_EXPERIMENTAL_AGENT_TEAMS /
+        // --agent-teams flag,任一为真即开,默认关。读的是**用户级** settings.json(不吃
+        // projectSettings —— 起子进程队友的能力不该由 clone 来的仓库替用户打开),boot-only 快照。
+        semaAgentTeamsEnabled: external_exports.boolean().optional().catch(void 0).describe(
+          "sema: opt in to the experimental agent teams feature (named persistent teammates with a shared task list). Default (absent/false) keeps it off. Equivalent to the SEMA_CODE_EXPERIMENTAL_AGENT_TEAMS env var or the --agent-teams flag; any one of the three turns it on. Applies on next shell start."
+        ),
         sshConfigs: external_exports.array(
           external_exports.object({
             id: external_exports.string().describe(
@@ -61404,12 +61411,17 @@ function createFleetLedger(hooks2 = {}, opts = {}) {
       droppedMalformed++, debug4("[fleet-frame] MALFORMED bg_notification dropped(taskId \u6216 status \u7F3A\u5E2D/\u975E\u4E32)");
       return;
     }
+    if (n2.parentTaskId !== void 0 && typeof n2.parentTaskId != "string") {
+      droppedMalformed++, debug4(`[fleet-frame] MALFORMED bg_notification dropped(parentTaskId \u952E\u5728\u573A\u4F46\u975E\u4E32:${typeof n2.parentTaskId} \u2014\u2014 \u9694\u79BB\u5224\u636E\u7684\u951A\u4E0D\u8BB8\u88AB\u574F\u503C\u65C1\u8DEF;taskId=${n2.taskId})`);
+      return;
+    }
     let serverFailClosed = bgNotifyFailClosedMeta && sessionScopedMeta === !0, ownByRoot = typeof n2.rootSessionId == "string" && n2.rootSessionId.length > 0 && n2.rootSessionId === engineSessionParam();
     if (!serverFailClosed && !ownByRoot && typeof n2.parentTaskId == "string" && n2.parentTaskId.length > 0 && !isOwnEngineRun(n2.parentTaskId)) {
       droppedForeignBgNotification++, debug4(`[fleet-frame] bg_notification DROPPED foreign/unowned parentRun(taskId=${n2.taskId} parentRun=${n2.parentTaskId})`);
       return;
     }
-    debug4(`[fleet-frame] bg_notification taskId=${n2.taskId} status=${n2.status} seq=${n2.seq ?? "-"}`);
+    let evidence = serverFailClosed || ownByRoot ? sessionKey === DEFAULT_SESSION_KEY ? serverFailClosed ? "server_fail_closed" : "own_root" : "session_anchor_untrusted" : typeof n2.parentTaskId == "string" && n2.parentTaskId.length > 0 ? "own_parent" : "absent_parent";
+    debug4(`[fleet-frame] bg_notification taskId=${n2.taskId} status=${n2.status} seq=${n2.seq ?? "-"} accept=${evidence}`);
     let rowIds = [];
     for (let id of taskMap.keys())
       (id === n2.taskId || rowIdTail(id) === n2.taskId) && rowIds.push(id);
@@ -61426,7 +61438,11 @@ function createFleetLedger(hooks2 = {}, opts = {}) {
             washBlocked = !0, debug4(`[fleet-frame] bg_notification WASH-GREEN blocked(row=${id} row-status=${rowStatus} notif=${n2.status})`);
             continue;
           }
-          rowStatus !== n2.status && retained.set(id, { row: { ...known, status: coerced }, expireAt: nowMs + TERMINAL_RETAIN_MS }), writtenIds.add(id), applied = !0;
+          if (rowStatus !== n2.status) {
+            let upgraded = { ...known, status: coerced };
+            retained.set(id, { row: upgraded, expireAt: nowMs + TERMINAL_RETAIN_MS }), taskMap.set(id, upgraded);
+          }
+          writtenIds.add(id), applied = !0;
         } else {
           let started2 = known.startedAt, meta3 = rowMeta.get(id), frozenElapsed = typeof started2 == "number" && started2 > 0 && started2 <= nowMs ? nowMs - started2 : meta3 !== void 0 ? (known.elapsedMs ?? 0) + Math.max(0, nowMs - meta3.receivedAtMs) : known.elapsedMs;
           taskMap.delete(id), rowMeta.delete(id), retained.set(id, {
@@ -61480,7 +61496,7 @@ function createFleetLedger(hooks2 = {}, opts = {}) {
       }) : debug4(`[fleet-frame] bg_notification state-plane rejected as wash-green echo(taskId=${n2.taskId} notif=${n2.status})\u2014\u2014 \u901A\u77E5\u9762\u7167\u5E38\u5165\u961F`);
     }
     try {
-      let out6 = hooks2.onBgNotificationAccepted?.(n2, rowIds);
+      let out6 = hooks2.onBgNotificationAccepted?.(n2, rowIds, evidence);
       out6 && typeof out6.then == "function" && Promise.resolve(out6).catch((e) => {
         hostLog("debug", `[fleet-frame] onBgNotificationAccepted hook rejected: ${String(e).slice(0, 160)}`);
       });
@@ -61686,42 +61702,6 @@ var capByBase, CAP_FALSE_RETRY_TTL_MS, init_engineSubagentOutput = __esm({
   }
 });
 
-// node_modules/@sema-agent/client-core/dist/subagent/engineSubagentSteer.js
-async function steerEngineSubagent(target, text2) {
-  let cfg = engineWireTarget();
-  if (!cfg)
-    return { ok: !1, reason: "no-wire" };
-  let runId = activeEngineRunId();
-  if (!runId)
-    return { ok: !1, reason: "no-run" };
-  let client3 = makeEngineWireClient({
-    baseUrl: cfg.baseUrl,
-    ...cfg.token ? { token: cfg.token } : {},
-    principal: cfg.principal
-  });
-  if (!client3)
-    return { ok: !1, reason: "no-wire" };
-  try {
-    let body = await client3.runs.steerSubagent(runId, target, { content: text2 }, engineSessionParamSpread()), receipt = "Message queued for delivery at the next tool round.", copy2 = body?.note ?? body?.message;
-    return typeof copy2 == "string" && copy2.length > 0 && (receipt = copy2), { ok: !0, receipt };
-  } catch (e) {
-    let status3 = e?.status;
-    if (typeof status3 == "number") {
-      let detail = e instanceof Error ? e.message : String(e);
-      return hostLog("debug", `engineSubagentSteer: ${status3} ${detail.slice(0, 200)}`), status3 === 409 || status3 === 404 ? { ok: !1, reason: "not-running", detail } : { ok: !1, reason: "error", detail: `${status3}` };
-    }
-    return hostLog("debug", `engineSubagentSteer: fetch failed ${String(e)}`), { ok: !1, reason: "error", detail: String(e) };
-  }
-}
-var init_engineSubagentSteer = __esm({
-  "node_modules/@sema-agent/client-core/dist/subagent/engineSubagentSteer.js"() {
-    init_host();
-    init_engineWireSdk();
-    init_engineWireTarget();
-    init_engineSessionParam();
-  }
-});
-
 // node_modules/@sema-agent/client-core/dist/subagent/engineSubagentResume.js
 function subagentResumeAvailable(baseUrl = engineWireTarget()?.baseUrl) {
   return engineCapTrue(baseUrl, SUBAGENT_RESUME_CAP);
@@ -61816,6 +61796,46 @@ var SUBAGENT_RESUME_CAP, RETENTION_LAPSED_CODES, warnedRetainWithoutWake, init_e
   }
 });
 
+// node_modules/@sema-agent/client-core/dist/subagent/engineSubagentSteer.js
+async function steerEngineSubagent(target, text2, childTaskId) {
+  let cfg = engineWireTarget();
+  if (!cfg)
+    return { ok: !1, reason: "no-wire" };
+  let named = typeof childTaskId == "string" && childTaskId !== "" ? childTaskId : void 0, runId = resolveOwnerRunId(named);
+  if (!runId)
+    return named !== void 0 && noteBgOwnerAbsence("subagent-steer", named), { ok: !1, reason: "no-run" };
+  let client3 = makeEngineWireClient({
+    baseUrl: cfg.baseUrl,
+    ...cfg.token ? { token: cfg.token } : {},
+    principal: cfg.principal
+  });
+  if (!client3)
+    return { ok: !1, reason: "no-wire" };
+  let rowSession = named !== void 0 ? getBgParentRunOwner(named)?.sessionId : void 0, session2 = rowSession !== void 0 ? { session: rowSession } : engineSessionParamSpread();
+  try {
+    let body = await client3.runs.steerSubagent(runId, target, { content: text2 }, session2), receipt = "Message queued for delivery at the next tool round.", copy2 = body?.note ?? body?.message;
+    return typeof copy2 == "string" && copy2.length > 0 && (receipt = copy2), { ok: !0, receipt };
+  } catch (e) {
+    let status3 = e?.status;
+    if (typeof status3 == "number") {
+      let detail = e instanceof Error ? e.message : String(e);
+      return hostLog("debug", `engineSubagentSteer: ${status3} ${detail.slice(0, 200)}`), status3 === 409 || status3 === 404 ? { ok: !1, reason: "not-running", detail } : { ok: !1, reason: "error", detail: `${status3}` };
+    }
+    return hostLog("debug", `engineSubagentSteer: fetch failed ${String(e)}`), { ok: !1, reason: "error", detail: String(e) };
+  }
+}
+var init_engineSubagentSteer = __esm({
+  "node_modules/@sema-agent/client-core/dist/subagent/engineSubagentSteer.js"() {
+    init_host();
+    init_engineWireSdk();
+    init_engineWireTarget();
+    init_engineSessionParam();
+    init_subagentContentStore();
+    init_engineSubagentResume();
+    init_subagentOwnerAbsence();
+  }
+});
+
 // node_modules/@sema-agent/client-core/dist/subagent/engineTaskHandleWire.js
 import { TaskStopConflictError } from "@sema-agent/sdk";
 function resolveHostRun(handle2) {
@@ -62378,8 +62398,8 @@ function projectActivity(beats) {
       continue;
     let key = typeof b3.toolCallId == "string" && b3.toolCallId ? b3.toolCallId : `#${anon++}`;
     byCall.has(key) || order2.push(key);
-    let prev = byCall.get(key), arg = typeof b3.arg == "string" && b3.arg.trim() ? oneLineSummary(b3.arg.trim()) : prev?.summary, call77 = { name };
-    arg && (call77.summary = arg), byCall.set(key, { ...prev, ...call77 });
+    let prev = byCall.get(key), arg = typeof b3.arg == "string" && b3.arg.trim() ? oneLineSummary(b3.arg.trim()) : prev?.summary, call78 = { name };
+    arg && (call78.summary = arg), byCall.set(key, { ...prev, ...call78 });
   }
   return order2.map((k2) => byCall.get(k2)).filter((c2) => !!c2);
 }
@@ -117283,6 +117303,18 @@ var init_probePlan = __esm({
   }
 });
 
+// build-src/src/utils/dispatcherTimeouts.ts
+var LONG_POLL_DISPATCHER_TIMEOUTS, init_dispatcherTimeouts = __esm({
+  "build-src/src/utils/dispatcherTimeouts.ts"() {
+    LONG_POLL_DISPATCHER_TIMEOUTS = {
+      /** 等响应头的上限(HITL 审批挂在这一段:请求发出去了,人还没点)。 */
+      headersTimeout: 216e5,
+      /** 两个 body 分片之间的上限(SSE / 流式响应的静默段)。 */
+      bodyTimeout: 216e5
+    };
+  }
+});
+
 // build-src/src/utils/caCerts.ts
 var caCerts_exports = {};
 __export(caCerts_exports, {
@@ -121087,7 +121119,7 @@ var require_webidl = __commonJS({
       return new TypeError(`${message.header}: ${message.message}`);
     };
     webidl.errors.conversionFailed = function(opts) {
-      let plural5 = opts.types.length === 1 ? "" : " one of", message = `${opts.argument} could not be converted to${plural5}: ${opts.types.join(", ")}.`;
+      let plural6 = opts.types.length === 1 ? "" : " one of", message = `${opts.argument} could not be converted to${plural6}: ${opts.types.join(", ")}.`;
       return webidl.errors.exception({
         header: opts.prefix,
         message
@@ -136143,7 +136175,10 @@ function getTLSFetchOptions() {
       passphrase: tlsConfig.passphrase,
       ...tlsConfig.ca && { ca: tlsConfig.ca }
     },
-    pipelining: 1
+    pipelining: 1,
+    // #270:长挂豁免。缺省 300s 会把 plan_review 这类「挂着等人做决定」的请求单方面掐断
+    // (引擎侧记 499),用户观感 = 审批完没反应。取值理由见 dispatcherTimeouts.ts 头注。
+    ...LONG_POLL_DISPATCHER_TIMEOUTS
   }) };
 }
 function clearMTLSCache() {
@@ -136159,6 +136194,7 @@ var getMTLSConfig, getMTLSAgent, init_mtls = __esm({
     init_memoize();
     init_caCerts();
     init_debug();
+    init_dispatcherTimeouts();
     init_fsOperations();
     getMTLSConfig = memoize_default(() => {
       let config4 = {};
@@ -136379,11 +136415,15 @@ var import_https_proxy_agent2, keepAliveDisabled, getProxyAgent, proxyIntercepto
     init_memoize();
     init_caCerts();
     init_debug();
+    init_dispatcherTimeouts();
     init_envUtils();
     init_mtls();
     keepAliveDisabled = !1;
     getProxyAgent = memoize_default((uri) => {
       let undiciMod = require_undici(), mtlsConfig = getMTLSConfig(), caCerts = getCACertificates(), proxyOptions = {
+        // #270:长挂豁免。EnvHttpProxyAgent 把这两个键透传给它内部的 no-proxy/http/https 三个
+        // 子 agent(缺一条真实路径就等于没修)。取值理由见 dispatcherTimeouts.ts 头注。
+        ...LONG_POLL_DISPATCHER_TIMEOUTS,
         // Override both HTTP and HTTPS proxy with the provided URI
         httpProxy: uri,
         httpsProxy: uri,
@@ -136466,10 +136506,16 @@ async function injectDispatcher(extra) {
       noProxy: process.env.NO_PROXY || process.env.no_proxy,
       connect: { ca }
     };
-    opts.requestTls = { ca }, undici.setGlobalDispatcher(new undici.EnvHttpProxyAgent(opts));
+    opts.requestTls = { ca }, Object.assign(opts, LONG_POLL_DISPATCHER_TIMEOUTS), undici.setGlobalDispatcher(new undici.EnvHttpProxyAgent(opts));
     return;
   }
-  undici.setGlobalDispatcher(new undici.Agent({ connect: { ca: [...tls.rootCertificates, ...extra] } }));
+  undici.setGlobalDispatcher(
+    new undici.Agent({
+      connect: { ca: [...tls.rootCertificates, ...extra] },
+      // #270 同上:无代理臂也是一个真的全局出口,同样不许留在 300s 缺省。
+      ...LONG_POLL_DISPATCHER_TIMEOUTS
+    })
+  );
 }
 async function applyPersistedTlsTrust() {
   try {
@@ -136510,6 +136556,7 @@ async function applySystemTlsTrust() {
 var caPath, builtinRootBodies, init_tlsTrust = __esm({
   "build-src/src/sema/tlsTrust.ts"() {
     init_failOpen();
+    init_dispatcherTimeouts();
     init_envUtils();
     caPath = () => join32(getClaudeConfigHomeDir(), "extra-ca.pem");
   }
@@ -136845,6 +136892,17 @@ var g, gDirs, init_appStateRef = __esm({
 });
 
 // build-src/src/sema/fleetDurableTerminalOverlay.ts
+function evidenceTier(e) {
+  switch (e) {
+    case "server_fail_closed":
+    case "own_root":
+      return "trusted";
+    case "own_parent":
+      return "process";
+    default:
+      return "unproven";
+  }
+}
 function trimFifo(map2) {
   for (; map2.size > MAX_FACTS; ) {
     let oldest = map2.keys().next().value;
@@ -136860,20 +136918,24 @@ function normalizeSeq(rawSeq) {
   if (typeof rawSeq == "number" && Number.isFinite(rawSeq)) return rawSeq;
   if (typeof rawSeq == "string" && rawSeq.trim() !== "" && Number.isFinite(Number(rawSeq))) return Number(rawSeq);
 }
-function recordTerminalFact(taskId, rawStatus, rawSeq, src) {
+function recordTerminalFact(taskId, rawStatus, rawSeq, src, evidence) {
   let status3 = typeof rawStatus == "string" && TERMINAL.has(rawStatus) ? rawStatus : void 0;
   if (taskId === void 0 || taskId.length === 0 || status3 === void 0) return;
   let seq = normalizeSeq(rawSeq), dead = tombstones.get(taskId);
-  dead !== void 0 && seq !== void 0 && seq <= dead || (facts.delete(taskId), facts.set(taskId, { status: status3, seq, at: ++tick, wallAt: Date.now(), src }), trimFifo(facts));
+  if (dead !== void 0 && seq !== void 0 && seq <= dead) return;
+  let tier = evidenceTier(evidence);
+  src === "bg_notification" && tier !== "trusted" && logForDebugging(
+    `[fleet-overlay] bg fact for ${taskId} recorded on NON-SESSION evidence (evidence=${evidence ?? "absent"} tier=${tier}) \u2014 presentation-only; not an ownership proof`
+  ), facts.delete(taskId), facts.set(taskId, { status: status3, seq, at: ++tick, wallAt: Date.now(), src, evidence, tier }), trimFifo(facts);
 }
 function recordDurableTerminalNotification(n2) {
   if (n2.task_type === "external") return;
   let taskId = typeof n2.task_id == "string" ? n2.task_id : void 0;
   recordTerminalFact(taskId, n2.status, n2.seq, "task_notification");
 }
-function observeFleetBgNotification(n2) {
+function observeFleetBgNotification(n2, evidence) {
   let taskId = typeof n2.taskId == "string" ? n2.taskId : void 0;
-  recordTerminalFact(taskId, n2.status, n2.seq, "bg_notification");
+  recordTerminalFact(taskId, n2.status, n2.seq, "bg_notification", evidence);
 }
 function observeFleetTaskFrame(rowFrame) {
   let rowId = typeof rowFrame.id == "string" && rowFrame.id.length > 0 ? rowFrame.id : void 0;
@@ -136923,7 +136985,8 @@ var TERMINAL, MAX_FACTS, tick, FACT_GRACE_MS, facts, lastFrameAt, tombstones, ap
   "build-src/src/sema/fleetDurableTerminalOverlay.ts"() {
     init_debug();
     init_appStateRef();
-    TERMINAL = /* @__PURE__ */ new Set(["completed", "failed", "killed"]), MAX_FACTS = 200, tick = 0, FACT_GRACE_MS = 3e3, facts = /* @__PURE__ */ new Map(), lastFrameAt = /* @__PURE__ */ new Map(), tombstones = /* @__PURE__ */ new Map(), appliedOverlay = /* @__PURE__ */ new Map(), missLogged = /* @__PURE__ */ new Set();
+    TERMINAL = /* @__PURE__ */ new Set(["completed", "failed", "killed"]), MAX_FACTS = 200, tick = 0, FACT_GRACE_MS = 3e3;
+    facts = /* @__PURE__ */ new Map(), lastFrameAt = /* @__PURE__ */ new Map(), tombstones = /* @__PURE__ */ new Map(), appliedOverlay = /* @__PURE__ */ new Map(), missLogged = /* @__PURE__ */ new Set();
   }
 });
 
@@ -171556,16 +171619,37 @@ var officialUrls, init_officialRegistry = __esm({
 });
 
 // build-src/src/utils/agentSwarmsEnabled.ts
-function isAgentTeamsFlagSet() {
-  return process.argv.includes("--agent-teams");
+function readAgentTeamsSetting() {
+  if (!isSettingSourceEnabled("userSettings")) return !1;
+  try {
+    return getSettingsForSource("userSettings")?.semaAgentTeamsEnabled === !0;
+  } catch {
+    return !1;
+  }
+}
+function argvHasFlagBeforeTerminator(argv, flag) {
+  let terminator = argv.indexOf("--");
+  return (terminator === -1 ? argv : argv.slice(0, terminator)).includes(flag);
+}
+function agentTeamsEnabledFrom(settingEnabled, env5, argv) {
+  return settingEnabled || isEnvTruthy(env5[AGENT_TEAMS_ENV_VAR]) ? !0 : argvHasFlagBeforeTerminator(argv, AGENT_TEAMS_FLAG);
+}
+function agentTeamsSettingCached() {
+  return settingCache === void 0 && (settingCache = readAgentTeamsSetting()), settingCache;
 }
 function isAgentSwarmsEnabled() {
-  return process.env.USER_TYPE === "ant" ? !0 : !(!isEnvTruthy(process.env.SEMA_CODE_EXPERIMENTAL_AGENT_TEAMS) && !isAgentTeamsFlagSet() || !getFeatureValue_CACHED_MAY_BE_STALE2("tengu_amber_flint", !0));
+  return agentTeamsEnabledFrom(
+    agentTeamsSettingCached(),
+    process.env,
+    process.argv
+  );
 }
-var init_agentSwarmsEnabled = __esm({
+var AGENT_TEAMS_ENV_VAR, AGENT_TEAMS_SETTING_KEY, AGENT_TEAMS_FLAG, settingCache, init_agentSwarmsEnabled = __esm({
   "build-src/src/utils/agentSwarmsEnabled.ts"() {
-    init_growthbook_advisor_flag();
     init_envUtils();
+    init_constants2();
+    init_settings2();
+    AGENT_TEAMS_ENV_VAR = "SEMA_CODE_EXPERIMENTAL_AGENT_TEAMS", AGENT_TEAMS_SETTING_KEY = "semaAgentTeamsEnabled", AGENT_TEAMS_FLAG = "--agent-teams";
   }
 });
 
@@ -181192,7 +181276,11 @@ function createLiveFleetSource(config4, now2 = Date.now()) {
     // 台账(parentTaskId 缺席=absent-放行);旧壳门是「两位不全一律不记」。⇒ 老 server/偏斜象限上
     // 无 parentTaskId 的通知现在会入 overlay 事实账 —— 与包自己的状态面(retained/bgFacts)对同一
     // 帧的处置**同口径**,不再一边收一边拒。
-    onBgNotificationAccepted: (n2) => observeFleetBgNotification(n2)
+    // 🔴 0.32.0 #284:第三参 `evidence` = **凭哪一条臂放行的**(不是归属结论)。本端一律入账、
+    // 按档留痕 —— 处置边界与论证见 fleetDurableTerminalOverlay.ts 的 `evidenceTier` 头注
+    // (要点:本模块是进程内**呈现**面,不落库/不跨会话搬运/翻行另有一道正交归属门,
+    //  故不属包文档划的「有副作用的归属动作」射程)。`rowIds` 本端暂无消费面,显式具名弃用。
+    onBgNotificationAccepted: (n2, _rowIds, evidence) => observeFleetBgNotification(n2, evidence)
   }), lastError = null, disposed4 = !1, client3 = new AgentClient2({
     baseUrl: config4.baseUrl,
     authToken: config4.authToken,
@@ -182273,10 +182361,10 @@ function lockedTokenProvider(profileName) {
       }), lastIssuedRefreshToken = tokens.refreshToken, foreignRotationObserved = !1;
     },
     async clear() {
-      let attempted = lastIssuedRefreshToken, foreign = foreignRotationObserved;
+      let attempted2 = lastIssuedRefreshToken, foreign = foreignRotationObserved;
       await mutateCredentials((creds) => {
         let current5 = creds[profileName];
-        if (!current5 || attempted === void 0 || current5.refreshToken !== attempted || foreign) return !1;
+        if (!current5 || attempted2 === void 0 || current5.refreshToken !== attempted2 || foreign) return !1;
         delete creds[profileName];
       });
     }
@@ -189693,14 +189781,22 @@ var PROMPT_PREFIX, init_bashClassifier = __esm({
 // build-src/src/utils/permissions/permissionsLoader.ts
 var permissionsLoader_exports = {};
 __export(permissionsLoader_exports, {
+  _resetPermissionsLoaderNoticesForTest: () => _resetPermissionsLoaderNoticesForTest,
   addPermissionRulesToSettings: () => addPermissionRulesToSettings,
   deletePermissionRuleFromSettings: () => deletePermissionRuleFromSettings,
   getPermissionRulesForSource: () => getPermissionRulesForSource,
   loadAllPermissionRulesFromDisk: () => loadAllPermissionRulesFromDisk,
+  permissionsLoaderLoudNoticesActive: () => permissionsLoaderLoudNoticesActive,
   resolveManagedPermissionRuleScope: () => resolveManagedPermissionRuleScope,
   shouldAllowManagedPermissionRulesOnly: () => shouldAllowManagedPermissionRulesOnly,
   shouldShowAlwaysAllowOptions: () => shouldShowAlwaysAllowOptions
 });
+function permissionsLoaderLoudNoticesActive() {
+  return [...loudPermissionsLoaderNotices];
+}
+function _resetPermissionsLoaderNoticesForTest() {
+  loudManagedPolicyDegradationEmitted = !1, loudPermissionsLoaderNotices.length = 0;
+}
 function shouldAllowManagedPermissionRulesOnly() {
   return resolveManagedPermissionRuleScope() !== "all-sources";
 }
@@ -189708,10 +189804,16 @@ function resolveManagedPermissionRuleScope() {
   let health = resolveManagedPolicyLayerHealth(
     () => filterManagedPolicyErrors(getSettingsWithErrors().errors)
   );
-  return health.healthy ? getSettingsForSource("policySettings")?.allowManagedPermissionRulesOnly === !0 ? "managed-only" : "all-sources" : (loudManagedPolicyDegradationEmitted || (loudManagedPolicyDegradationEmitted = !0, process.stderr.write(
-    `[sema] permission rules degraded to policy deny/ask only (fail-closed): ${health.loudReason} \u2014 allow rules from every source (including the user-writable HKCU policy slot) are NOT applied until the managed policy layer reads cleanly
-`
-  )), "degraded");
+  if (!health.healthy) {
+    if (!loudManagedPolicyDegradationEmitted) {
+      loudManagedPolicyDegradationEmitted = !0;
+      let msg = `permission rules degraded to policy deny/ask only (fail-closed): ${health.loudReason} \u2014 allow rules from every source (including the user-writable HKCU policy slot) are NOT applied until the managed policy layer reads cleanly`;
+      process.stderr.write(`[sema] ${msg}
+`), loudPermissionsLoaderNotices.push(msg);
+    }
+    return "degraded";
+  }
+  return getSettingsForSource("policySettings")?.allowManagedPermissionRulesOnly === !0 ? "managed-only" : "all-sources";
 }
 function shouldShowAlwaysAllowOptions() {
   return !shouldAllowManagedPermissionRulesOnly();
@@ -189822,7 +189924,7 @@ function addPermissionRulesToSettings({
     return logError(error51), !1;
   }
 }
-var loudManagedPolicyDegradationEmitted, SUPPORTED_RULE_BEHAVIORS, EDITABLE_SOURCES, init_permissionsLoader = __esm({
+var loudManagedPolicyDegradationEmitted, loudPermissionsLoaderNotices, SUPPORTED_RULE_BEHAVIORS, EDITABLE_SOURCES, init_permissionsLoader = __esm({
   "build-src/src/utils/permissions/permissionsLoader.ts"() {
     init_fileRead();
     init_fsOperations();
@@ -189832,7 +189934,7 @@ var loudManagedPolicyDegradationEmitted, SUPPORTED_RULE_BEHAVIORS, EDITABLE_SOUR
     init_settings2();
     init_settings();
     init_permissionRuleParser();
-    loudManagedPolicyDegradationEmitted = !1;
+    loudManagedPolicyDegradationEmitted = !1, loudPermissionsLoaderNotices = [];
     SUPPORTED_RULE_BEHAVIORS = [
       "allow",
       "deny",
@@ -301312,9 +301414,9 @@ function streamingTailWrap(unstableSuffix) {
 }
 var import_compiler_runtime53, import_react48, import_jsx_runtime65, TOKEN_CACHE_MAX, tokenCache, MD_SYNTAX_RE, init_Markdown = __esm({
   "build-src/src/components/Markdown.tsx"() {
-    import_compiler_runtime53 = __toESM(require_compiler_runtime());
+    import_compiler_runtime53 = __toESM(require_compiler_runtime(), 1);
     init_marked_esm();
-    import_react48 = __toESM(require_react());
+    import_react48 = __toESM(require_react(), 1);
     init_useSettings();
     init_ink2();
     init_cliHighlight();
@@ -301322,7 +301424,7 @@ var import_compiler_runtime53, import_react48, import_jsx_runtime65, TOKEN_CACHE
     init_markdown();
     init_messages4();
     init_MarkdownTable();
-    import_jsx_runtime65 = __toESM(require_jsx_runtime()), TOKEN_CACHE_MAX = 500, tokenCache = /* @__PURE__ */ new Map(), MD_SYNTAX_RE = /[#*`|[>\-_~]|\n\n|^\d+\. |\n\d+\. /;
+    import_jsx_runtime65 = __toESM(require_jsx_runtime(), 1), TOKEN_CACHE_MAX = 500, tokenCache = /* @__PURE__ */ new Map(), MD_SYNTAX_RE = /[#*`|[>\-_~]|\n\n|^\d+\. |\n\d+\. /;
   }
 });
 
@@ -304268,7 +304370,17 @@ var PROVIDER_MANAGED_ENV_VARS, PROVIDER_MANAGED_ENV_PREFIXES, DANGEROUS_SHELL_SE
       "SEMA_CODE_DISABLE_NONESSENTIAL_TRAFFIC",
       "SEMA_CODE_DISABLE_TERMINAL_TITLE",
       "SEMA_CODE_ENABLE_TELEMETRY",
-      "SEMA_CODE_EXPERIMENTAL_AGENT_TEAMS",
+      // 🔴 sema 分歧(安全收紧类,cc-divergences 已登记;#287 / C-R13,对抗复审 finding):CC 把
+      // agent-teams 的 opt-in env 放在这张**项目可写**的允许表里,于是 clone 来的仓库只要在
+      // `.sema/settings.json` 的 `env` 块写一行,就能替用户挂上具名队友族(TeamCreate/TeamDelete/
+      // SendMessage + 起子进程/worktree 的队友任务)—— 把 agentSwarmsEnabled 那道「只认用户级 settings
+      // 且服从 --setting-sources」的隔离整条绕过去。这类「能起进程、能改状态」的能力位不属于
+      // 「项目可安全设置」的语义,故移出本表。
+      // 影响面两条,都朝更紧的方向:①applySafeConfigEnvironmentVariables 的合并层不再从
+      // project/local 注入它(受信源 user/flag/policy 走 TRUSTED 循环灌全部键,不受影响 ⇒ 用户级
+      // `env` 块照常生效);②bashPermissions 的前缀跳过表同源 —— 带该前缀的命令不再被当成
+      // 「可忽略的安全赋值」去匹配 allow 规则,退回询问。
+      // 'SEMA_CODE_EXPERIMENTAL_AGENT_TEAMS' —— 见上,刻意不在册。
       "SEMA_CODE_IDE_SKIP_AUTO_INSTALL",
       "SEMA_CODE_MAX_OUTPUT_TOKENS",
       "SEMA_CODE_SKIP_BEDROCK_AUTH",
@@ -348128,26 +348240,26 @@ function formatIncomingCallsResult(result, cwd5) {
   let lines = [
     `Found ${result.length} incoming ${plural(result.length, "call")}:`
   ], byFile = /* @__PURE__ */ new Map();
-  for (let call77 of result) {
-    if (!call77.from) {
+  for (let call78 of result) {
+    if (!call78.from) {
       logForDebugging(
         "formatIncomingCallsResult: CallHierarchyIncomingCall has undefined from field",
         { level: "warn" }
       );
       continue;
     }
-    let filePath = formatUri2(call77.from.uri, cwd5), existing = byFile.get(filePath);
-    existing ? existing.push(call77) : byFile.set(filePath, [call77]);
+    let filePath = formatUri2(call78.from.uri, cwd5), existing = byFile.get(filePath);
+    existing ? existing.push(call78) : byFile.set(filePath, [call78]);
   }
   for (let [filePath, calls] of byFile) {
     lines.push(`
 ${filePath}:`);
-    for (let call77 of calls) {
-      if (!call77.from)
+    for (let call78 of calls) {
+      if (!call78.from)
         continue;
-      let kind = symbolKindToString(call77.from.kind), line = call77.from.range.start.line + 1, callLine = `  ${call77.from.name} (${kind}) - Line ${line}`;
-      if (call77.fromRanges && call77.fromRanges.length > 0) {
-        let callSites = call77.fromRanges.map((r) => `${r.start.line + 1}:${r.start.character + 1}`).join(", ");
+      let kind = symbolKindToString(call78.from.kind), line = call78.from.range.start.line + 1, callLine = `  ${call78.from.name} (${kind}) - Line ${line}`;
+      if (call78.fromRanges && call78.fromRanges.length > 0) {
+        let callSites = call78.fromRanges.map((r) => `${r.start.line + 1}:${r.start.character + 1}`).join(", ");
         callLine += ` [calls at: ${callSites}]`;
       }
       lines.push(callLine);
@@ -348162,26 +348274,26 @@ function formatOutgoingCallsResult(result, cwd5) {
   let lines = [
     `Found ${result.length} outgoing ${plural(result.length, "call")}:`
   ], byFile = /* @__PURE__ */ new Map();
-  for (let call77 of result) {
-    if (!call77.to) {
+  for (let call78 of result) {
+    if (!call78.to) {
       logForDebugging(
         "formatOutgoingCallsResult: CallHierarchyOutgoingCall has undefined to field",
         { level: "warn" }
       );
       continue;
     }
-    let filePath = formatUri2(call77.to.uri, cwd5), existing = byFile.get(filePath);
-    existing ? existing.push(call77) : byFile.set(filePath, [call77]);
+    let filePath = formatUri2(call78.to.uri, cwd5), existing = byFile.get(filePath);
+    existing ? existing.push(call78) : byFile.set(filePath, [call78]);
   }
   for (let [filePath, calls] of byFile) {
     lines.push(`
 ${filePath}:`);
-    for (let call77 of calls) {
-      if (!call77.to)
+    for (let call78 of calls) {
+      if (!call78.to)
         continue;
-      let kind = symbolKindToString(call77.to.kind), line = call77.to.range.start.line + 1, callLine = `  ${call77.to.name} (${kind}) - Line ${line}`;
-      if (call77.fromRanges && call77.fromRanges.length > 0) {
-        let callSites = call77.fromRanges.map((r) => `${r.start.line + 1}:${r.start.character + 1}`).join(", ");
+      let kind = symbolKindToString(call78.to.kind), line = call78.to.range.start.line + 1, callLine = `  ${call78.to.name} (${kind}) - Line ${line}`;
+      if (call78.fromRanges && call78.fromRanges.length > 0) {
+        let callSites = call78.fromRanges.map((r) => `${r.start.line + 1}:${r.start.character + 1}`).join(", ");
         callLine += ` [called from: ${callSites}]`;
       }
       lines.push(callLine);
@@ -348744,11 +348856,11 @@ function countUniqueFilesFromCallItems(items) {
   return new Set(validUris).size;
 }
 function countUniqueFilesFromIncomingCalls(calls) {
-  let validUris = calls.map((call77) => call77.from?.uri).filter((uri) => uri);
+  let validUris = calls.map((call78) => call78.from?.uri).filter((uri) => uri);
   return new Set(validUris).size;
 }
 function countUniqueFilesFromOutgoingCalls(calls) {
-  let validUris = calls.map((call77) => call77.to?.uri).filter((uri) => uri);
+  let validUris = calls.map((call78) => call78.to?.uri).filter((uri) => uri);
   return new Set(validUris).size;
 }
 var MAX_LSP_FILE_SIZE_BYTES, inputSchema25, outputSchema21, LSPTool, init_LSPTool = __esm({
@@ -401280,15 +401392,14 @@ var sema_brand_default, init_sema_brand = __esm({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.79",
+        version: "1.0.82",
         notes: [
-          "Permissions fail-closed hardening: when the managed policy layer is unreadable (broken managed-settings JSON, EACCES, MDM read failure) your own deny/ask rules and --disallowedTools stay in force \u2014 degraded mode only tightens, never widens",
-          "Approval cards carry org-rule evidence notes end-to-end and sanitize untrusted display fields (subagent identity, rule text) against bidi/control-character spoofing",
-          "Engine 7.24.0 (from 7.22.0)"
+          "Claude Code permission rules are imported automatically on first launch when detected \u2014 no confirmation step, and a one-line notice tells you what was imported; review or roll back anytime in /permissions",
+          "Engine 7.28.0 (from 7.26.0)"
         ]
       },
-      productVersion: "1.0.80",
-      announcement: "sema 1.0.80 \u2014 Engine 7.26.0 (from 7.24.0). Background-agent bookkeeping overhaul: when a background agent's completion notice arrives, its panel row now truly settles (no more rows stuck at 'running' with a climbing timer), and reading a background task's output fails honestly instead of ever wiring you to the wrong host run (client-core 0.31.0, BREAKING for integrators relying on the old fallback). Engine-side reconciliation retires orphaned rows when their publisher dies. Engine warm-swap no longer waits up to 30min on already-finished tasks, and never sends 'killed by engine restart' notices for tasks that had already completed. Memory write instructions now arm automatically on bare host installs \u2014 the MEMORY_PERSISTENCE_CAPABLE workaround from 1.0.79 is no longer needed (explicit settings still win)."
+      productVersion: "1.0.82",
+      announcement: "sema 1.0.82 \u2014 Claude Code permission rules are now imported automatically on first launch when detected, with a one-line notice and full visibility in /permissions afterward (no confirmation step, no silent surprises). Under the hood: the agent-teams gate was hardened against config-source bypass, and a queue-processing edge case around injected background prompts was tightened."
     };
   }
 });
@@ -405491,15 +405602,14 @@ var require_sema_brand = __commonJS({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.79",
+        version: "1.0.82",
         notes: [
-          "Permissions fail-closed hardening: when the managed policy layer is unreadable (broken managed-settings JSON, EACCES, MDM read failure) your own deny/ask rules and --disallowedTools stay in force \u2014 degraded mode only tightens, never widens",
-          "Approval cards carry org-rule evidence notes end-to-end and sanitize untrusted display fields (subagent identity, rule text) against bidi/control-character spoofing",
-          "Engine 7.24.0 (from 7.22.0)"
+          "Claude Code permission rules are imported automatically on first launch when detected \u2014 no confirmation step, and a one-line notice tells you what was imported; review or roll back anytime in /permissions",
+          "Engine 7.28.0 (from 7.26.0)"
         ]
       },
-      productVersion: "1.0.80",
-      announcement: "sema 1.0.80 \u2014 Engine 7.26.0 (from 7.24.0). Background-agent bookkeeping overhaul: when a background agent's completion notice arrives, its panel row now truly settles (no more rows stuck at 'running' with a climbing timer), and reading a background task's output fails honestly instead of ever wiring you to the wrong host run (client-core 0.31.0, BREAKING for integrators relying on the old fallback). Engine-side reconciliation retires orphaned rows when their publisher dies. Engine warm-swap no longer waits up to 30min on already-finished tasks, and never sends 'killed by engine restart' notices for tasks that had already completed. Memory write instructions now arm automatically on bare host installs \u2014 the MEMORY_PERSISTENCE_CAPABLE workaround from 1.0.79 is no longer needed (explicit settings still win)."
+      productVersion: "1.0.82",
+      announcement: "sema 1.0.82 \u2014 Claude Code permission rules are now imported automatically on first launch when detected, with a one-line notice and full visibility in /permissions afterward (no confirmation step, no silent surprises). Under the hood: the agent-teams gate was hardened against config-source bypass, and a queue-processing edge case around injected background prompts was tightened."
     };
   }
 });
@@ -412867,27 +412977,27 @@ var collab, collab_default, init_collab2 = __esm({
   }
 });
 
-// build-src/src/commands/team.ts
-var USAGE, WORKFLOW_NAME, TRAMPOLINE, team, team_default, init_team = __esm({
-  "build-src/src/commands/team.ts"() {
+// build-src/src/commands/discuss.ts
+var USAGE, WORKFLOW_NAME, TRAMPOLINE, discuss, discuss_default, init_discuss = __esm({
+  "build-src/src/commands/discuss.ts"() {
     init_dist();
     USAGE = [
-      "Usage: /team <topic> \u2014 start a multi-agent team discussion on the topic.",
-      "Example: /team should we introduce write-through caching for the session store",
+      "Usage: /discuss <topic> \u2014 start a multi-agent discussion on the topic.",
+      "Example: /discuss should we introduce write-through caching for the session store",
       "To browse collaboration-mode templates instead, use /collab."
     ].join(`
-`), WORKFLOW_NAME = "team-discussion", TRAMPOLINE = (topic) => `The user ran /team to start a team discussion. Do this now:
+`), WORKFLOW_NAME = "team-discussion", TRAMPOLINE = (topic) => `The user ran /discuss to start a team discussion. Do this now:
 
 1. Call the Workflow tool with exactly: {"name": "${WORKFLOW_NAME}", "args": {"topic": ${JSON.stringify(topic)}}}. The user explicitly requested this discussion, which authorizes the workflow invocation.
 2. When the workflow finishes, present its final synthesis to the user as your answer.
 
-If the Workflow tool is not available, or the name "${WORKFLOW_NAME}" does not resolve, do NOT pretend a discussion happened: tell the user plainly that team discussions are unavailable in this deployment, then answer the topic yourself as a single agent.`, team = {
+If the Workflow tool is not available, or the name "${WORKFLOW_NAME}" does not resolve, do NOT pretend a discussion happened: tell the user plainly that team discussions are unavailable in this deployment, then answer the topic yourself as a single agent.`, discuss = {
       type: "prompt",
-      name: "team",
+      name: "discuss",
       // 裁项 #5 默认:壳 author 一句入口标签(成本提示,与 whenToUse 语义对齐但不逐字复制)。
-      description: "Start a team discussion (multi-agent, multi-round; cost \u2248 members \xD7 rounds \u2014 not for single factual questions)",
+      description: "Start a multi-agent discussion (multi-round; cost \u2248 members \xD7 rounds \u2014 not for single factual questions)",
       argNames: ["topic"],
-      progressMessage: "starting team discussion",
+      progressMessage: "starting discussion",
       contentLength: 0,
       // dynamic (built per-invocation from the topic)
       source: "builtin",
@@ -412897,10 +413007,201 @@ If the Workflow tool is not available, or the name "${WORKFLOW_NAME}" does not r
           throw new Error(USAGE);
         if (selfOrchestrationFromEnv() === void 0)
           throw new Error(
-            `Team discussions need the workflow engine, but it is disabled (${SELF_ORCHESTRATION_ENV}=${process.env[SELF_ORCHESTRATION_ENV]}). Unset ${SELF_ORCHESTRATION_ENV} (or set it to 1) and restart to enable /team.`
+            `Multi-agent discussions need the workflow engine, but it is disabled (${SELF_ORCHESTRATION_ENV}=${process.env[SELF_ORCHESTRATION_ENV]}). Unset ${SELF_ORCHESTRATION_ENV} (or set it to 1) and restart to enable /discuss.`
           );
         return [{ type: "text", text: TRAMPOLINE(topic) }];
       }
+    }, discuss_default = discuss;
+  }
+});
+
+// build-src/src/utils/teamDiscovery.ts
+import { readdirSync as readdirSync11 } from "fs";
+function discoverTeams(sessionId = getSessionId()) {
+  let entries;
+  try {
+    entries = readdirSync11(getTeamsDir(), { withFileTypes: !0 }).filter((d4) => d4.isDirectory()).map((d4) => d4.name);
+  } catch (e) {
+    let code2 = getErrnoCode(e);
+    return { teams: [], skipped: 0, dirError: code2 === "ENOENT" ? void 0 : code2 ?? "EUNKNOWN" };
+  }
+  let teams = [], skipped = 0;
+  for (let dirName of entries)
+    try {
+      let teamFile = readTeamFile(dirName);
+      if (!teamFile) {
+        skipped++;
+        continue;
+      }
+      let rawMembers = teamFile.members;
+      if (!Array.isArray(rawMembers)) {
+        skipped++;
+        continue;
+      }
+      if (!rawMembers.every(
+        (m2) => m2 !== null && typeof m2 == "object" && typeof m2.name == "string" && (m2.isActive === void 0 || typeof m2.isActive == "boolean")
+      )) {
+        skipped++;
+        continue;
+      }
+      let members = rawMembers.filter((m2) => m2.name !== TEAM_LEAD_NAME), runningCount = members.filter((m2) => m2.isActive !== !1).length, name = typeof teamFile.name == "string" && teamFile.name.length > 0 ? teamFile.name : dirName;
+      teams.push({
+        name,
+        memberCount: members.length,
+        runningCount,
+        idleCount: members.length - runningCount,
+        ledByThisSession: typeof teamFile.leadSessionId == "string" && teamFile.leadSessionId === sessionId
+      });
+    } catch {
+      skipped++;
+      continue;
+    }
+  return teams.sort((a, b3) => a.name.localeCompare(b3.name)), { teams, skipped };
+}
+function getTeammateStatuses(teamName) {
+  let teamFile = readTeamFile(teamName);
+  if (!teamFile)
+    return [];
+  let hiddenPaneIds = new Set(teamFile.hiddenPaneIds ?? []), statuses = [];
+  for (let member of teamFile.members) {
+    if (member.name === "team-lead")
+      continue;
+    let status3 = member.isActive !== !1 ? "running" : "idle";
+    statuses.push({
+      name: member.name,
+      agentId: member.agentId,
+      agentType: member.agentType,
+      model: member.model,
+      prompt: member.prompt,
+      status: status3,
+      color: member.color,
+      tmuxPaneId: member.tmuxPaneId,
+      cwd: member.cwd,
+      worktreePath: member.worktreePath,
+      isHidden: hiddenPaneIds.has(member.tmuxPaneId),
+      backendType: member.backendType && isPaneBackend(member.backendType) ? member.backendType : void 0,
+      mode: member.mode
+    });
+  }
+  return statuses;
+}
+var init_teamDiscovery = __esm({
+  "build-src/src/utils/teamDiscovery.ts"() {
+    init_errors2();
+    init_state();
+    init_types18();
+    init_constants10();
+    init_envUtils();
+    init_teamHelpers();
+  }
+});
+
+// build-src/src/commands/team.ts
+var team_exports = {};
+__export(team_exports, {
+  default: () => team_default,
+  renderTeamPanel: () => renderTeamPanel,
+  runTeamCommand: () => runTeamCommand,
+  userSettingsPathForGuidance: () => userSettingsPathForGuidance
+});
+function sanitizeDiskText(raw2) {
+  let cleaned = raw2.replace(/[\u0000-\u001f\u007f-\u009f]/g, "").replace(/[<>]/g, "").trim();
+  return cleaned.length === 0 ? "(unnamed)" : cleaned.length > 64 ? `${cleaned.slice(0, 64)}\u2026` : cleaned;
+}
+function plural4(n2, word) {
+  return `${n2} ${word}${n2 === 1 ? "" : "s"}`;
+}
+function renderTeamPanel(input) {
+  let { gateOpen, discovery, settingsPath, teamsDir } = input, { teams, skipped, dirError } = discovery;
+  if (!gateOpen)
+    return [
+      "Agent teams: off (experimental, off by default).",
+      "",
+      "Named persistent teammates that share a task list. Turn it on with any one of",
+      "these, then restart sema:",
+      `  \xB7 settings \u2014 add "${AGENT_TEAMS_SETTING_KEY}": true to ${settingsPath}`,
+      `  \xB7 env      \u2014 ${AGENT_TEAMS_ENV_VAR}=1`,
+      `  \xB7 flag     \u2014 sema ${AGENT_TEAMS_FLAG}`,
+      "",
+      "Once it is on, /team lists your teams."
+    ].join(`
+`);
+  let skippedNotice = skipped > 0 ? `${plural4(skipped, "team file")} could not be read and ${skipped === 1 ? "is" : "are"} not listed above \u2014 that is not the same as not having them.` : null;
+  if (dirError !== void 0)
+    return [
+      `Agent teams: on (experimental). Could not read the team directory (${dirError}).`,
+      "",
+      `${teamsDir} is unreadable, so this list may be incomplete \u2014 it does NOT mean you`,
+      "have no teams. Fix the path/permissions and run /team again."
+    ].join(`
+`);
+  if (teams.length === 0)
+    return skippedNotice ? [
+      "Agent teams: on (experimental). No teams could be listed.",
+      "",
+      skippedNotice,
+      `Team files live in ${teamsDir}.`
+    ].join(`
+`) : [
+      "Agent teams: on (experimental). No teams yet.",
+      "",
+      'Ask Claude to create one \u2014 for example: "create a team of two reviewers to go',
+      'over this diff". Claude builds it with the TeamCreate tool.',
+      `Team files live in ${teamsDir}.`
+    ].join(`
+`);
+  let rows2 = teams.map((t2) => {
+    let counts2 = `${plural4(t2.memberCount, "teammate")} (${t2.runningCount} running, ${t2.idleCount} idle)`;
+    return `  \xB7 ${sanitizeDiskText(t2.name)} \u2014 ${counts2}${t2.ledByThisSession ? " \u2014 led by this session" : ""}`;
+  });
+  return [
+    `Agent teams: on (experimental). ${plural4(teams.length, "team")}:`,
+    "",
+    ...rows2,
+    "",
+    ...skippedNotice ? [skippedNotice] : [],
+    // 诚实边界:running/idle 读的是团队台账里的 isActive 心跳位,不是进程存活探测。
+    "Counts come from each team file, not from a live process probe.",
+    `Team files live in ${teamsDir}.`
+  ].join(`
+`);
+}
+function userSettingsPathForGuidance() {
+  return getSettingsFilePathForSource("userSettings") ?? "your user settings.json";
+}
+async function runTeamCommand(args) {
+  if ((args ?? "").trim().length > 0)
+    return { type: "text", value: USAGE2, level: "error" };
+  let gateOpen = isAgentSwarmsEnabled();
+  return {
+    type: "text",
+    value: renderTeamPanel({
+      gateOpen,
+      // 门关时不去扫磁盘:功能没开,列表既无意义也只会让指路文案被噪音淹掉。
+      discovery: gateOpen ? discoverTeams() : { teams: [], skipped: 0 },
+      settingsPath: userSettingsPathForGuidance(),
+      teamsDir: getTeamsDir()
+    })
+  };
+}
+var USAGE2, call44, team, team_default, init_team = __esm({
+  "build-src/src/commands/team.ts"() {
+    init_agentSwarmsEnabled();
+    init_envUtils();
+    init_settings2();
+    init_teamDiscovery();
+    USAGE2 = [
+      "Usage: /team \u2014 show agent-teams status (named persistent teammates).",
+      "It takes no arguments.",
+      "To start a one-off multi-agent discussion instead, use /discuss <topic>."
+    ].join(`
+`);
+    call44 = (args) => runTeamCommand(args), team = {
+      type: "local",
+      name: "team",
+      description: "Show agent-teams status: named persistent teammates and how to enable them (experimental)",
+      supportsNonInteractive: !0,
+      load: () => Promise.resolve({ call: call44 })
     }, team_default = team;
   }
 });
@@ -412908,7 +413209,7 @@ If the Workflow tool is not available, or the name "${WORKFLOW_NAME}" does not r
 // build-src/src/commands/think-back/thinkback.tsx
 var thinkback_exports = {};
 __export(thinkback_exports, {
-  call: () => call44,
+  call: () => call45,
   playAnimation: () => playAnimation
 });
 import { readFile as readFile46 } from "fs/promises";
@@ -413181,7 +413482,7 @@ function ThinkbackFlow(t0) {
   let t8;
   return $3[22] !== handleAction || $3[23] !== hasGenerated || $3[24] !== onDone || $3[25] !== skillDir ? (t8 = /* @__PURE__ */ (0, import_jsx_runtime302.jsx)(ThinkbackMenu, { onDone, onAction: handleAction, skillDir, hasGenerated }), $3[22] = handleAction, $3[23] = hasGenerated, $3[24] = onDone, $3[25] = skillDir, $3[26] = t8) : t8 = $3[26], t8;
 }
-async function call44(onDone) {
+async function call45(onDone) {
   return /* @__PURE__ */ (0, import_jsx_runtime302.jsx)(ThinkbackFlow, { onDone });
 }
 var import_compiler_runtime210, import_react176, import_jsx_runtime302, OFFICIAL_MARKETPLACE_REPO, SKILL_NAME, EDIT_PROMPT, FIX_PROMPT, REGENERATE_PROMPT, init_thinkback = __esm({
@@ -413230,13 +413531,13 @@ var thinkback, think_back_default, init_think_back = __esm({
 // build-src/src/commands/thinkback-play/thinkback-play.ts
 var thinkback_play_exports = {};
 __export(thinkback_play_exports, {
-  call: () => call45
+  call: () => call46
 });
 import { join as join155 } from "path";
 function getPluginId2() {
   return `thinkback@${process.env.USER_TYPE === "ant" ? INTERNAL_MARKETPLACE_NAME : OFFICIAL_MARKETPLACE_NAME}`;
 }
-async function call45() {
+async function call46() {
   let v2Data = loadInstalledPluginsV2(), pluginId = getPluginId2(), installations = v2Data.plugins[pluginId];
   if (!installations || installations.length === 0)
     return {
@@ -413770,6 +414071,16 @@ function collectCcSettingsLayers(cwd5 = process.cwd()) {
   }
   return out6;
 }
+function collectCcUserLayerAt(settingsPath) {
+  let root2;
+  try {
+    root2 = realpathSync9(homedir41());
+  } catch {
+    root2 = homedir41();
+  }
+  let out6 = { layers: [], missing: [] }, res = readOneLayer("userSettings", settingsPath, root2, { refuseSymlinks: !1 });
+  return "layer" in res ? out6.layers.push(res.layer) : out6.missing.push(res.missing), out6;
+}
 function buildToolApprovalRespondBody(input) {
   let wantsPersist = typeof input.persistRule == "string" && input.persistRule !== "" && input.decision !== "deny";
   return {
@@ -413875,6 +414186,10 @@ var init_ccRulesImport = __esm({
 // build-src/src/sema/rules/ccImportMarker.ts
 import { existsSync as existsSync25, readFileSync as readFileSync35, writeFileSync as writeFileSync19, mkdirSync as mkdirSync20 } from "node:fs";
 import { join as join157, dirname as dirname73 } from "node:path";
+import { homedir as homedir42 } from "node:os";
+function ruleStoreWireAvailable() {
+  return persistedRulesLaneAvailable2();
+}
 function markerPath() {
   return join157(getClaudeConfigHomeDir(), "cc-import.json");
 }
@@ -413888,7 +414203,8 @@ function readCcImportMarker() {
     return typeof raw2.importedAt != "string" || typeof raw2.importedCount != "number" ? null : {
       importedAt: raw2.importedAt,
       sourcePath: typeof raw2.sourcePath == "string" ? raw2.sourcePath : "",
-      importedCount: raw2.importedCount
+      importedCount: raw2.importedCount,
+      declined: raw2.declined === !0
     };
   } catch {
     return null;
@@ -413899,6 +414215,31 @@ function writeCcImportMarker(marker) {
   mkdirSync20(dirname73(p), { recursive: !0 }), writeFileSync19(p, JSON.stringify(marker, null, 2) + `
 `, "utf8");
 }
+function writeCcImportDeclinedMarker() {
+  writeCcImportMarker({ importedAt: (/* @__PURE__ */ new Date()).toISOString(), sourcePath: "", importedCount: 0, declined: !0 });
+}
+function detectCcAllowRulesSource() {
+  let ccEnvKey = "CLAUDE_CONFIG_DIR", ccLegacyDir = join157(homedir42(), ".claude"), roots = [process.env[ccEnvKey], ccLegacyDir].filter(
+    (r) => typeof r == "string" && r.length > 0
+  );
+  for (let root2 of roots) {
+    let p = join157(root2, "settings.json");
+    if (existsSync25(p))
+      try {
+        let parsed = JSON.parse(readFileSync35(p, "utf8"));
+        if (typeof parsed != "object" || parsed === null) continue;
+        let perms = parsed.permissions;
+        if (typeof perms != "object" || perms === null) continue;
+        let allow = perms.allow;
+        if (Array.isArray(allow) && allow.length > 0) return p;
+      } catch {
+      }
+  }
+  return null;
+}
+function ccImportBootGate() {
+  return !ruleStoreWireAvailable() || readCcImportMarker() !== null ? null : detectCcAllowRulesSource();
+}
 var init_ccImportMarker = __esm({
   "build-src/src/sema/rules/ccImportMarker.ts"() {
     init_envUtils();
@@ -415209,13 +415550,13 @@ var import_compiler_runtime217, React107, import_react180, import_jsx_runtime312
 // build-src/src/commands/permissions/permissions.tsx
 var permissions_exports3 = {};
 __export(permissions_exports3, {
-  call: () => call46
+  call: () => call47
 });
-var import_jsx_runtime313, call46, init_permissions3 = __esm({
+var import_jsx_runtime313, call47, init_permissions3 = __esm({
   "build-src/src/commands/permissions/permissions.tsx"() {
     init_PermissionRuleList();
     init_messages4();
-    import_jsx_runtime313 = __toESM(require_jsx_runtime(), 1), call46 = async (onDone, context3) => /* @__PURE__ */ (0, import_jsx_runtime313.jsx)(PermissionRuleList, { onExit: onDone, onRetryDenials: (commands) => {
+    import_jsx_runtime313 = __toESM(require_jsx_runtime(), 1), call47 = async (onDone, context3) => /* @__PURE__ */ (0, import_jsx_runtime313.jsx)(PermissionRuleList, { onExit: onDone, onRetryDenials: (commands) => {
       context3.setMessages((prev) => [...prev, createPermissionRetryMessage(commands)]);
     } });
   }
@@ -415238,7 +415579,7 @@ var permissions, permissions_default, init_permissions4 = __esm({
 // build-src/src/commands/plan/plan.tsx
 var plan_exports = {};
 __export(plan_exports, {
-  call: () => call47
+  call: () => call48
 });
 function PlanDisplay(t0) {
   let $3 = (0, import_compiler_runtime218.c)(11), {
@@ -415265,7 +415606,7 @@ function PlanDisplay(t0) {
     t4
   ] }), $3[7] = t2, $3[8] = t3, $3[9] = t4, $3[10] = t5) : t5 = $3[10], t5;
 }
-async function call47(onDone, context3, args) {
+async function call48(onDone, context3, args) {
   let {
     getAppState,
     setAppState
@@ -415368,7 +415709,7 @@ var import_compiler_runtime219, import_jsx_runtime315, init_FastIcon = __esm({
 var fast_exports = {};
 __export(fast_exports, {
   FastModePicker: () => FastModePicker,
-  call: () => call48
+  call: () => call49
 });
 function applyFastMode(enable, setAppState) {
   clearFastModeCooldown(), updateSettingsForSource("userSettings", {
@@ -415501,7 +415842,7 @@ async function handleFastModeShortcut(enable, getAppState, setAppState) {
   } else
     return "Fast mode OFF";
 }
-async function call48(onDone, context3, args) {
+async function call49(onDone, context3, args) {
   if (!isFastModeEnabled())
     return null;
   await prefetchFastModeStatus();
@@ -415672,9 +416013,9 @@ var import_react182, import_jsx_runtime317, init_Passes = __esm({
 // build-src/src/commands/passes/passes.tsx
 var passes_exports = {};
 __export(passes_exports, {
-  call: () => call49
+  call: () => call50
 });
-async function call49(onDone) {
+async function call50(onDone) {
   let isFirstVisit = !getGlobalConfig().hasVisitedPasses;
   if (isFirstVisit) {
     let remaining = getCachedRemainingPasses();
@@ -415992,9 +416333,9 @@ var import_compiler_runtime221, import_react183, import_jsx_runtime319, NEW_TERM
 // build-src/src/commands/privacy-settings/privacy-settings.tsx
 var privacy_settings_exports = {};
 __export(privacy_settings_exports, {
-  call: () => call50
+  call: () => call51
 });
-async function call50(onDone) {
+async function call51(onDone) {
   if (!await isQualifiedForGrove())
     return onDone(FALLBACK_MESSAGE), null;
   let [settingsResult, configResult] = await Promise.all([getGroveSettings(), getGroveNoticeConfig()]);
@@ -417029,14 +417370,14 @@ var import_compiler_runtime225, import_react184, import_jsx_runtime325, init_Hoo
 // build-src/src/commands/hooks/hooks.tsx
 var hooks_exports = {};
 __export(hooks_exports, {
-  call: () => call51
+  call: () => call52
 });
-var import_jsx_runtime326, call51, init_hooks3 = __esm({
+var import_jsx_runtime326, call52, init_hooks3 = __esm({
   "build-src/src/commands/hooks/hooks.tsx"() {
     init_HooksConfigMenu();
     init_analytics_index();
     init_tools2();
-    import_jsx_runtime326 = __toESM(require_jsx_runtime(), 1), call51 = async (onDone, context3) => {
+    import_jsx_runtime326 = __toESM(require_jsx_runtime(), 1), call52 = async (onDone, context3) => {
       let permissionContext = context3.getAppState().toolPermissionContext, toolNames = getTools(permissionContext).map((tool) => tool.name);
       return /* @__PURE__ */ (0, import_jsx_runtime326.jsx)(HooksConfigMenu, { toolNames, onExit: onDone });
     };
@@ -417059,10 +417400,10 @@ var hooks, hooks_default, init_hooks4 = __esm({
 // build-src/src/commands/files/files.ts
 var files_exports2 = {};
 __export(files_exports2, {
-  call: () => call52
+  call: () => call53
 });
 import { relative as relative26 } from "path";
-async function call52(_args, context3) {
+async function call53(_args, context3) {
   let files2 = context3.readFileState ? cacheKeys(context3.readFileState) : [];
   return files2.length === 0 ? { type: "text", value: "No files in context" } : { type: "text", value: `Files in context:
 ${files2.map((file2) => relative26(getCwd(), file2)).join(`
@@ -417200,7 +417541,7 @@ async function getUniqueForkName(baseName) {
     nextNumber++;
   return `${baseName} (Branch ${nextNumber})`;
 }
-async function call53(onDone, context3, args) {
+async function call54(onDone, context3, args) {
   let customTitle = args?.trim() || void 0, originalSessionId = getSessionId();
   try {
     let {
@@ -417270,7 +417611,7 @@ function resolveDurable() {
 function makeLiveBranchDeps() {
   return {
     resolveDurable,
-    localBranch: call53
+    localBranch: call54
   };
 }
 var init_branchDurableLive = __esm({
@@ -417309,14 +417650,14 @@ var agents_exports2 = {};
 __export(agents_exports2, {
   default: () => agents_default
 });
-var WIZARD_REMOVED_TEXT, call54, agents, agents_default, init_agents2 = __esm({
+var WIZARD_REMOVED_TEXT, call55, agents, agents_default, init_agents2 = __esm({
   "build-src/src/commands/agents/index.ts"() {
     WIZARD_REMOVED_TEXT = `The /agents wizard has been removed.
 
 Ask sema to create or update subagents for you (e.g. "create a code-reviewer subagent that ..."),
 or edit the files directly:
   \u2022 .sema/agents/       (this project)
-  \u2022 ~/.sema/agents/     (all projects)`, call54 = async () => ({
+  \u2022 ~/.sema/agents/     (all projects)`, call55 = async () => ({
       type: "text",
       value: WIZARD_REMOVED_TEXT
     }), agents = {
@@ -417324,7 +417665,7 @@ or edit the files directly:
       name: "agents",
       description: "(removed) Ask sema to create/manage subagents, or edit .sema/agents/",
       supportsNonInteractive: !0,
-      load: () => Promise.resolve({ call: call54 })
+      load: () => Promise.resolve({ call: call55 })
     }, agents_default = agents;
   }
 });
@@ -418418,9 +418759,9 @@ For -m/--message and --remote, use the CLI: sema plugin tag --help`;
 // build-src/src/commands/plugin/plugin.tsx
 var plugin_exports = {};
 __export(plugin_exports, {
-  call: () => call55
+  call: () => call56
 });
-async function call55(onDone, context3, args) {
+async function call56(onDone, context3, args) {
   let getSessionContext = () => ({
     readFileState: context3.readFileState,
     bashTools: extractBashToolsFromMessages(context3.messages ?? []),
@@ -418601,12 +418942,12 @@ var init_refresh = __esm({
 // build-src/src/commands/reload-plugins/reload-plugins.ts
 var reload_plugins_exports = {};
 __export(reload_plugins_exports, {
-  call: () => call56
+  call: () => call57
 });
 function n(count3, noun) {
   return `${count3} ${plural(count3, noun)}`;
 }
-var call56, init_reload_plugins = __esm({
+var call57, init_reload_plugins = __esm({
   "build-src/src/commands/reload-plugins/reload-plugins.ts"() {
     init_state();
     init_settingsSync();
@@ -418614,7 +418955,7 @@ var call56, init_reload_plugins = __esm({
     init_refresh();
     init_changeDetector();
     init_stringUtils();
-    call56 = async (_args, context3) => {
+    call57 = async (_args, context3) => {
       let r = await refreshActivePlugins(context3.setAppState), msg = `Reloaded: ${[
         n(r.enabled_count, "plugin"),
         n(r.command_count, "skill"),
@@ -418651,9 +418992,9 @@ var reloadPlugins, reload_plugins_default, init_reload_plugins2 = __esm({
 // build-src/src/commands/rewind/rewind.ts
 var rewind_exports = {};
 __export(rewind_exports, {
-  call: () => call57
+  call: () => call58
 });
-async function call57(_args, context3) {
+async function call58(_args, context3) {
   return context3.openMessageSelector && context3.openMessageSelector(), { type: "skip" };
 }
 var init_rewind = __esm({
@@ -418807,9 +419148,9 @@ var init_heapDumpService = __esm({
 // build-src/src/commands/heapdump/heapdump.ts
 var heapdump_exports = {};
 __export(heapdump_exports, {
-  call: () => call58
+  call: () => call59
 });
-async function call58() {
+async function call59() {
   let result = await performHeapDump();
   return result.success ? {
     type: "text",
@@ -419205,10 +419546,10 @@ var debugHandle, faultQueue, init_bridgeDebug = __esm({
 });
 
 // build-src/src/commands/bridge-kick.ts
-var USAGE2, call59, bridgeKick, bridge_kick_default, init_bridge_kick = __esm({
+var USAGE3, call60, bridgeKick, bridge_kick_default, init_bridge_kick = __esm({
   "build-src/src/commands/bridge-kick.ts"() {
     init_bridgeDebug();
-    USAGE2 = `/bridge-kick <subcommand>
+    USAGE3 = `/bridge-kick <subcommand>
   close <code>              fire ws_closed with the given code (e.g. 1002)
   poll <status> [type]      next poll throws BridgeFatalError(status, type)
   poll transient            next poll throws axios-style rejection (5xx/net)
@@ -419217,7 +419558,7 @@ var USAGE2, call59, bridgeKick, bridge_kick_default, init_bridge_kick = __esm({
   reconnect-session fail    next POST /bridge/reconnect fails
   heartbeat <status>        next heartbeat throws BridgeFatalError(status)
   reconnect                 call reconnectEnvironmentWithSession directly
-  status                    print bridge state`, call59 = async (args) => {
+  status                    print bridge state`, call60 = async (args) => {
       let h = getBridgeDebugHandle();
       if (!h)
         return {
@@ -419232,7 +419573,7 @@ var USAGE2, call59, bridgeKick, bridge_kick_default, init_bridge_kick = __esm({
             type: "text",
             value: `Fired transport close(${code2}). Watch debug.log for [bridge:repl] recovery.`
           }) : { type: "text", value: `close: need a numeric code
-${USAGE2}` };
+${USAGE3}` };
         }
         case "poll": {
           if (a === "transient")
@@ -419250,7 +419591,7 @@ ${USAGE2}` };
             return {
               type: "text",
               value: `poll: need 'transient' or a status code
-${USAGE2}`
+${USAGE3}`
             };
           let errorType = b3 ?? (status3 === 404 ? "not_found_error" : "authentication_error");
           return h.injectFault({
@@ -419319,7 +419660,7 @@ ${USAGE2}`
         case "status":
           return { type: "text", value: h.describe() };
         default:
-          return { type: "text", value: USAGE2 };
+          return { type: "text", value: USAGE3 };
       }
     }, bridgeKick = {
       type: "local",
@@ -419327,16 +419668,16 @@ ${USAGE2}`
       description: "Inject bridge failure states for manual recovery testing",
       isEnabled: () => process.env.USER_TYPE === "ant",
       supportsNonInteractive: !1,
-      load: () => Promise.resolve({ call: call59 })
+      load: () => Promise.resolve({ call: call60 })
     }, bridge_kick_default = bridgeKick;
   }
 });
 
 // build-src/src/commands/version.ts
-var SEMA_PRODUCT_VERSION, call60, version3, version_default, init_version2 = __esm({
+var SEMA_PRODUCT_VERSION, call61, version3, version_default, init_version2 = __esm({
   "build-src/src/commands/version.ts"() {
     init_sema_brand();
-    SEMA_PRODUCT_VERSION = sema_brand_default.productVersion ?? "0.0.0", call60 = async () => ({
+    SEMA_PRODUCT_VERSION = sema_brand_default.productVersion ?? "0.0.0", call61 = async () => ({
       type: "text",
       value: `sema ${SEMA_PRODUCT_VERSION} (CC-compatible base 2.1.187)`
     }), version3 = {
@@ -419345,7 +419686,7 @@ var SEMA_PRODUCT_VERSION, call60, version3, version_default, init_version2 = __e
       description: "Print the version this session is running (not what autoupdate downloaded)",
       isEnabled: () => process.env.USER_TYPE === "ant",
       supportsNonInteractive: !0,
-      load: () => Promise.resolve({ call: call60 })
+      load: () => Promise.resolve({ call: call61 })
     }, version_default = version3;
   }
 });
@@ -419822,10 +420163,10 @@ var import_compiler_runtime228, import_jsx_runtime331, init_SandboxSettings = __
 // build-src/src/commands/sandbox/sandbox-toggle.tsx
 var sandbox_toggle_exports = {};
 __export(sandbox_toggle_exports, {
-  call: () => call61
+  call: () => call62
 });
 import { relative as relative28 } from "path";
-async function call61(onDone, _context, args) {
+async function call62(onDone, _context, args) {
   let themeName = getSettings_DEPRECATED().theme || "light", platform4 = getPlatform();
   if (!SandboxManager2.isSupportedPlatform()) {
     let errorMessage4 = platform4 === "wsl" ? "Error: Sandboxing requires WSL2. WSL1 is not supported." : "Error: Sandboxing is currently only supported on macOS, Linux, and WSL2.", message = color("error", themeName)(errorMessage4);
@@ -419954,7 +420295,7 @@ var PROD_EXTENSION_ID, DEV_EXTENSION_ID, ANT_EXTENSION_ID, init_setupPortable =
 
 // build-src/src/utils/claudeInChrome/setup.ts
 import { chmod as chmod12, mkdir as mkdir40, readFile as readFile50, writeFile as writeFile43 } from "fs/promises";
-import { homedir as homedir42 } from "os";
+import { homedir as homedir43 } from "os";
 import { join as join161 } from "path";
 import { fileURLToPath as fileURLToPath8 } from "url";
 function shouldEnableClaudeInChrome(chromeFlag) {
@@ -420030,7 +420371,7 @@ function setupClaudeInChrome() {
 }
 function getNativeMessagingHostsDirs() {
   if (getPlatform() === "windows") {
-    let home = homedir42(), appData = process.env.APPDATA || join161(home, "AppData", "Local");
+    let home = homedir43(), appData = process.env.APPDATA || join161(home, "AppData", "Local");
     return [join161(appData, "Sema", "ChromeNativeHost")];
   }
   return getAllNativeMessagingHostsDirs().map(({ path: path28 }) => path28);
@@ -420158,7 +420499,7 @@ var CHROME_EXTENSION_RECONNECT_URL, NATIVE_HOST_IDENTIFIER, NATIVE_HOST_MANIFEST
 // build-src/src/commands/chrome/chrome.tsx
 var chrome_exports = {};
 __export(chrome_exports, {
-  call: () => call62
+  call: () => call63
 });
 async function callChromeTool(chromeClient, tool, args) {
   let result = await chromeClient.client.callTool({ name: tool, arguments: args }), content = Array.isArray(result.content) ? result.content[0] : void 0;
@@ -420375,7 +420716,7 @@ function ClaudeInChromeMenu(t0) {
     }
   );
 }
-var import_react186, import_jsx_runtime333, CHROME_EXTENSION_URL, CHROME_PERMISSIONS_URL, CHROME_RECONNECT_URL, ConnectedBrowserSchema, call62, init_chrome = __esm({
+var import_react186, import_jsx_runtime333, CHROME_EXTENSION_URL, CHROME_PERMISSIONS_URL, CHROME_RECONNECT_URL, ConnectedBrowserSchema, call63, init_chrome = __esm({
   "build-src/src/commands/chrome/chrome.tsx"() {
     import_react186 = __toESM(require_react(), 1);
     init_v4();
@@ -420399,7 +420740,7 @@ var import_react186, import_jsx_runtime333, CHROME_EXTENSION_URL, CHROME_PERMISS
       name: external_exports.string().default("Browser"),
       osPlatform: external_exports.string().optional()
     });
-    call62 = async function(onDone) {
+    call63 = async function(onDone) {
       let isExtensionInstalled = await isChromeExtensionInstalled().catch((error51) => (logError(
         new Error(
           `[Claude in Chrome] Extension detection failed: ${error51 instanceof Error ? error51.message : String(error51)}`
@@ -420437,9 +420778,9 @@ var command7, chrome_default, init_chrome2 = __esm({
 // build-src/src/commands/stickers/stickers.ts
 var stickers_exports = {};
 __export(stickers_exports, {
-  call: () => call63
+  call: () => call64
 });
-async function call63() {
+async function call64() {
   let url3 = "https://www.stickermule.com/claudecode";
   return await openBrowser(url3) ? { type: "text", value: "Opening sticker page in browser\u2026" } : {
     type: "text",
@@ -420614,7 +420955,7 @@ function AdvisorDialog({
     ] })
   ] }) });
 }
-var import_react187, import_jsx_runtime334, ADVISOR_BLOG_URL, ADVISOR_REMOTE_REFUSAL, ADVISOR_MODEL_ALIASES, MODEL_CAPABILITY_RANK, call64, advisor, advisor_default, init_advisor2 = __esm({
+var import_react187, import_jsx_runtime334, ADVISOR_BLOG_URL, ADVISOR_REMOTE_REFUSAL, ADVISOR_MODEL_ALIASES, MODEL_CAPABILITY_RANK, call65, advisor, advisor_default, init_advisor2 = __esm({
   "build-src/src/commands/advisor.tsx"() {
     import_react187 = __toESM(require_react(), 1);
     init_select();
@@ -420636,7 +420977,7 @@ var import_react187, import_jsx_runtime334, ADVISOR_BLOG_URL, ADVISOR_REMOTE_REF
       "claude-mythos-5": 5,
       "claude-fable-5": 5
     };
-    call64 = async (onDone, _context, args) => {
+    call65 = async (onDone, _context, args) => {
       let arg = (args ?? "").trim().toLowerCase();
       if (!arg)
         return /* @__PURE__ */ (0, import_jsx_runtime334.jsx)(AdvisorDialog, { onDone });
@@ -420661,7 +421002,7 @@ var import_react187, import_jsx_runtime334, ADVISOR_BLOG_URL, ADVISOR_REMOTE_REF
       get isHidden() {
         return !canUserConfigureAdvisor();
       },
-      load: () => Promise.resolve({ call: call64 })
+      load: () => Promise.resolve({ call: call65 })
     }, advisor_default = advisor;
   }
 });
@@ -420934,13 +421275,13 @@ var import_compiler_runtime229, import_jsx_runtime336, GOODBYE_MESSAGES, init_Ex
 // build-src/src/commands/exit/exit.tsx
 var exit_exports = {};
 __export(exit_exports, {
-  call: () => call65
+  call: () => call66
 });
 import { spawnSync as spawnSync10 } from "child_process";
 function getRandomGoodbyeMessage2() {
   return sample_default(GOODBYE_MESSAGES2) ?? "Goodbye!";
 }
-async function call65(onDone) {
+async function call66(onDone) {
   if (isBgSession())
     return onDone(), spawnSync10("tmux", ["detach-client"], {
       stdio: "ignore"
@@ -421117,7 +421458,7 @@ var import_react190, import_jsx_runtime339, init_exportRenderer = __esm({
 // build-src/src/commands/export/export.tsx
 var export_exports = {};
 __export(export_exports, {
-  call: () => call66,
+  call: () => call67,
   extractFirstPrompt: () => extractFirstPrompt,
   sanitizeFilename: () => sanitizeFilename
 });
@@ -421147,7 +421488,7 @@ async function exportWithReactRenderer(context3) {
   let tools = context3.options.tools || [];
   return renderMessagesToPlainText(context3.messages, tools);
 }
-async function call66(onDone, context3, args) {
+async function call67(onDone, context3, args) {
   let content = await exportWithReactRenderer(context3), filename = args.trim();
   if (filename) {
     let finalFilename = filename.endsWith(".txt") ? filename : filename.replace(/\.[^.]+$/, "") + ".txt", filepath = join164(getCwd(), finalFilename);
@@ -421547,7 +421888,7 @@ var import_react191, import_jsx_runtime341, NO_PREFERENCE2, HEADER_TEXT, MAX_EFF
 // build-src/src/commands/model/model.tsx
 var model_exports2 = {};
 __export(model_exports2, {
-  call: () => call67,
+  call: () => call68,
   renderModelLabel: () => renderModelLabel
 });
 function ModelPickerWrapper(t0) {
@@ -421697,7 +422038,7 @@ function renderModelLabel(model) {
   let rendered = renderDefaultModelSetting(model ?? getDefaultMainLoopModelSetting());
   return model === null ? `${rendered} (default)` : rendered;
 }
-var import_compiler_runtime230, React113, import_jsx_runtime342, call67, init_model2 = __esm({
+var import_compiler_runtime230, React113, import_jsx_runtime342, call68, init_model2 = __esm({
   "build-src/src/commands/model/model.tsx"() {
     import_compiler_runtime230 = __toESM(require_compiler_runtime(), 1);
     init_source2();
@@ -421718,7 +422059,7 @@ var import_compiler_runtime230, React113, import_jsx_runtime342, call67, init_mo
     init_modelAllowlist();
     init_validateModel();
     import_jsx_runtime342 = __toESM(require_jsx_runtime(), 1);
-    call67 = async (onDone, _context, args) => {
+    call68 = async (onDone, _context, args) => {
       if (args = args?.trim() || "", COMMON_INFO_ARGS.includes(args))
         return /* @__PURE__ */ (0, import_jsx_runtime342.jsx)(ShowModelAndClose, { onDone });
       if (COMMON_HELP_ARGS.includes(args)) {
@@ -421757,7 +422098,7 @@ var model_default, init_model3 = __esm({
 // build-src/src/commands/tag/tag.tsx
 var tag_exports = {};
 __export(tag_exports, {
-  call: () => call68
+  call: () => call69
 });
 function ConfirmRemoveTag(t0) {
   let $3 = (0, import_compiler_runtime231.c)(11), {
@@ -421852,7 +422193,7 @@ Examples:
     });
   }, t2 = [onDone], $3[0] = onDone, $3[1] = t1, $3[2] = t2) : (t1 = $3[1], t2 = $3[2]), React114.useEffect(t1, t2), null;
 }
-async function call68(onDone, _context, args) {
+async function call69(onDone, _context, args) {
   return args = args?.trim() || "", COMMON_INFO_ARGS.includes(args) || COMMON_HELP_ARGS.includes(args) ? /* @__PURE__ */ (0, import_jsx_runtime343.jsx)(ShowHelp, { onDone }) : args ? /* @__PURE__ */ (0, import_jsx_runtime343.jsx)(ToggleTagAndClose, { tagName: args, onDone }) : /* @__PURE__ */ (0, import_jsx_runtime343.jsx)(ShowHelp, { onDone });
 }
 var import_compiler_runtime231, React114, import_jsx_runtime343, init_tag = __esm({
@@ -421889,9 +422230,9 @@ var tag, tag_default, init_tag2 = __esm({
 // build-src/src/commands/output-style/output-style.tsx
 var output_style_exports = {};
 __export(output_style_exports, {
-  call: () => call69
+  call: () => call70
 });
-async function call69(onDone) {
+async function call70(onDone) {
   onDone("/output-style has been deprecated. Use /config to change your output style, or set it in your settings file. Changes take effect on the next session.", {
     display: "system"
   });
@@ -422135,9 +422476,9 @@ var import_compiler_runtime232, import_react192, import_jsx_runtime344, DIALOG_T
 // build-src/src/commands/remote-env/remote-env.tsx
 var remote_env_exports = {};
 __export(remote_env_exports, {
-  call: () => call70
+  call: () => call71
 });
-async function call70(onDone) {
+async function call71(onDone) {
   return /* @__PURE__ */ (0, import_jsx_runtime345.jsx)(RemoteEnvironmentDialog, { onDone });
 }
 var import_jsx_runtime345, init_remote_env = __esm({
@@ -422168,9 +422509,9 @@ var remote_env_default, init_remote_env2 = __esm({
 // build-src/src/commands/upgrade/upgrade.tsx
 var upgrade_exports = {};
 __export(upgrade_exports, {
-  call: () => call71
+  call: () => call72
 });
-async function call71(onDone, context3) {
+async function call72(onDone, context3) {
   try {
     if (isClaudeAISubscriber()) {
       let tokens = getClaudeAIOAuthTokens(), isMax20x = !1;
@@ -422221,7 +422562,7 @@ var upgrade, upgrade_default, init_upgrade2 = __esm({
 // build-src/src/commands/rate-limit-options/rate-limit-options.tsx
 var rate_limit_options_exports = {};
 __export(rate_limit_options_exports, {
-  call: () => call72
+  call: () => call73
 });
 function RateLimitOptionsMenu(t0) {
   let $3 = (0, import_compiler_runtime233.c)(25), {
@@ -422279,7 +422620,7 @@ function RateLimitOptionsMenu(t0) {
   }, $3[13] = onDone, $3[14] = t4) : t4 = $3[14];
   let handleCancel = t4, t5;
   $3[15] !== context3 || $3[16] !== handleCancel || $3[17] !== onDone ? (t5 = function(value) {
-    value === "upgrade" ? call71(onDone, context3).then((jsx526) => {
+    value === "upgrade" ? call72(onDone, context3).then((jsx526) => {
       jsx526 && setSubCommandJSX(jsx526);
     }) : value === "extra-usage" ? call2(onDone, context3).then((jsx_0) => {
       jsx_0 && setSubCommandJSX(jsx_0);
@@ -422293,7 +422634,7 @@ function RateLimitOptionsMenu(t0) {
   let t7;
   return $3[22] !== handleCancel || $3[23] !== t6 ? (t7 = /* @__PURE__ */ (0, import_jsx_runtime347.jsx)(Dialog, { title: "What do you want to do?", onCancel: handleCancel, color: "suggestion", children: t6 }), $3[22] = handleCancel, $3[23] = t6, $3[24] = t7) : t7 = $3[24], t7;
 }
-async function call72(onDone, context3) {
+async function call73(onDone, context3) {
   return /* @__PURE__ */ (0, import_jsx_runtime347.jsx)(RateLimitOptionsMenu, { onDone, context: context3 });
 }
 var import_compiler_runtime233, import_react193, import_jsx_runtime347, init_rate_limit_options = __esm({
@@ -422470,7 +422811,7 @@ var import_compiler_runtime234, React116, import_jsx_runtime348, init_effort2 =
 // build-src/src/sema/overrides/effort.tsx
 var effort_exports = {};
 __export(effort_exports, {
-  call: () => call73,
+  call: () => call74,
   executeEffort: () => executeEffort,
   showCurrentEffort: () => showCurrentEffort
 });
@@ -422621,7 +422962,7 @@ function EffortSlider({ onDone }) {
     footer
   ] });
 }
-async function call73(onDone, _context, args) {
+async function call74(onDone, _context, args) {
   if (args = args?.trim() || "", COMMON_HELP_ARGS2.includes(args)) {
     onDone(HELP_TEXT);
     return;
@@ -422702,12 +423043,12 @@ var effort_default, init_effort4 = __esm({
 // build-src/src/commands/stats/stats.tsx
 var stats_exports = {};
 __export(stats_exports, {
-  call: () => call74
+  call: () => call75
 });
-var import_jsx_runtime350, call74, init_stats2 = __esm({
+var import_jsx_runtime350, call75, init_stats2 = __esm({
   "build-src/src/commands/stats/stats.tsx"() {
     init_Stats();
-    import_jsx_runtime350 = __toESM(require_jsx_runtime(), 1), call74 = async (onDone) => /* @__PURE__ */ (0, import_jsx_runtime350.jsx)(Stats2, { onClose: onDone });
+    import_jsx_runtime350 = __toESM(require_jsx_runtime(), 1), call75 = async (onDone) => /* @__PURE__ */ (0, import_jsx_runtime350.jsx)(Stats2, { onClose: onDone });
   }
 });
 
@@ -422944,7 +423285,7 @@ var import_react195, import_jsx_runtime351, init_RemoteCallout = __esm({
 // build-src/src/commands/remote-control/bridge.tsx
 var bridge_exports = {};
 __export(bridge_exports, {
-  call: () => call75
+  call: () => call76
 });
 function BridgeToggle(t0) {
   let $3 = (0, import_compiler_runtime235.c)(10), {
@@ -423141,7 +423482,7 @@ async function checkBridgePrerequisites() {
   let versionError = isEnvLessBridgeEnabled() ? await checkEnvLessBridgeMinVersion() : checkBridgeMinVersion();
   return versionError || (getBridgeAccessToken() ? (logForDebugging("[bridge] Prerequisites passed, enabling bridge"), null) : BRIDGE_LOGIN_INSTRUCTION);
 }
-async function call75(onDone, _context, args) {
+async function call76(onDone, _context, args) {
   let name = args.trim() || void 0;
   return /* @__PURE__ */ (0, import_jsx_runtime352.jsx)(BridgeToggle, { onDone, name });
 }
@@ -423340,7 +423681,7 @@ var CCR_BYOC_BETA_HEADER, RedactedGithubToken, init_api4 = __esm({
 // build-src/src/commands/web-setup/remote-setup.tsx
 var remote_setup_exports = {};
 __export(remote_setup_exports, {
-  call: () => call76
+  call: () => call77
 });
 async function checkLoginState() {
   if (!await isSignedIn())
@@ -423445,7 +423786,7 @@ function Web({
     }, onCancel: handleCancel })
   ] });
 }
-async function call76(onDone) {
+async function call77(onDone) {
   return /* @__PURE__ */ (0, import_jsx_runtime353.jsx)(Web, { onDone });
 }
 var import_react197, import_jsx_runtime353, init_remote_setup = __esm({
@@ -425584,6 +425925,7 @@ var agentsPlatform, proactive, briefCommand, assistantCommand, bridge2, remoteCo
     init_vim2();
     init_websearch2();
     init_collab2();
+    init_discuss();
     init_team();
     init_think_back();
     init_thinkback_play2();
@@ -425744,6 +426086,7 @@ var agentsPlatform, proactive, briefCommand, assistantCommand, bridge2, remoteCo
       stickers_default,
       tag_default,
       collab_default,
+      discuss_default,
       team_default,
       theme_default,
       websearch_default,
@@ -428819,7 +429162,7 @@ __export(filesystem_exports, {
   toPosixPath: () => toPosixPath
 });
 import { randomBytes as randomBytes21 } from "crypto";
-import { homedir as homedir43, tmpdir as tmpdir14 } from "os";
+import { homedir as homedir44, tmpdir as tmpdir14 } from "os";
 import { join as join168, normalize as normalize17, posix as posix8, sep as sep37 } from "path";
 function normalizeCaseForComparison2(path28) {
   return path28.toLowerCase();
@@ -428831,7 +429174,7 @@ function getClaudeSkillScope(filePath) {
       prefix: "/.sema/skills/"
     },
     {
-      dir: expandPath(join168(homedir43(), ".sema", "skills")),
+      dir: expandPath(join168(homedir44(), ".sema", "skills")),
       prefix: "~/.sema/skills/"
     }
   ];
@@ -429070,7 +429413,7 @@ function patternWithRoot(pattern, source) {
     if (pattern.startsWith(`~${DIR_SEP}`))
       return {
         relativePattern: pattern.slice(1),
-        root: homedir43().normalize("NFC")
+        root: homedir44().normalize("NFC")
       };
     if (pattern.startsWith(DIR_SEP))
       return {
@@ -450268,7 +450611,7 @@ var WORKTREE_PARENT, init_git_worktree_env = __esm({
 });
 
 // node_modules/@sema-agent/core/dist/core/memory-engine/layout.js
-import { closeSync as closeSync13, constants as fsConstants8, copyFileSync as copyFileSync6, existsSync as existsSync27, fstatSync as fstatSync3, fsyncSync as fsyncSync10, lstatSync as lstatSync4, mkdirSync as mkdirSync22, openSync as openSync14, readFileSync as readFileSync37, readdirSync as readdirSync11, realpathSync as realpathSync10, renameSync as renameSync13, rmSync as rmSync7, rmdirSync as rmdirSync3, statSync as statSync14, unlinkSync as unlinkSync11, writeFileSync as writeFileSync21, writeSync as writeSync7 } from "node:fs";
+import { closeSync as closeSync13, constants as fsConstants8, copyFileSync as copyFileSync6, existsSync as existsSync27, fstatSync as fstatSync3, fsyncSync as fsyncSync10, lstatSync as lstatSync4, mkdirSync as mkdirSync22, openSync as openSync14, readFileSync as readFileSync37, readdirSync as readdirSync12, realpathSync as realpathSync10, renameSync as renameSync13, rmSync as rmSync7, rmdirSync as rmdirSync3, statSync as statSync14, unlinkSync as unlinkSync11, writeFileSync as writeFileSync21, writeSync as writeSync7 } from "node:fs";
 var O_WRONLY, O_CREAT, O_TRUNC, O_NOFOLLOW3, O_EXCL, init_layout = __esm({
   "node_modules/@sema-agent/core/dist/core/memory-engine/layout.js"() {
     ({ O_WRONLY, O_CREAT, O_TRUNC, O_NOFOLLOW: O_NOFOLLOW3, O_EXCL } = fsConstants8);
@@ -458786,8 +459129,11 @@ var init_caCertsConfig = __esm({
 // build-src/src/utils/managedEnv.ts
 var managedEnv_exports = {};
 __export(managedEnv_exports, {
+  PROJECT_FORBIDDEN_ENV_VARS: () => PROJECT_FORBIDDEN_ENV_VARS,
   applyConfigEnvironmentVariables: () => applyConfigEnvironmentVariables,
-  applySafeConfigEnvironmentVariables: () => applySafeConfigEnvironmentVariables
+  applySafeConfigEnvironmentVariables: () => applySafeConfigEnvironmentVariables,
+  stripUntrustedCapabilityEnv: () => stripUntrustedCapabilityEnv,
+  trustedCapabilityEnv: () => trustedCapabilityEnv
 });
 function withoutSSHTunnelVars(env5) {
   if (!env5 || !process.env.ANTHROPIC_UNIX_SOCKET) return env5 || {};
@@ -458833,14 +459179,48 @@ function applySafeConfigEnvironmentVariables() {
     process.env,
     filterSettingsEnv(getSettingsForSource("policySettings")?.env)
   );
-  let settingsEnv4 = filterSettingsEnv(getSettings_DEPRECATED()?.env);
+  let settingsEnv4 = stripUntrustedCapabilityEnv(
+    filterSettingsEnv(getSettings_DEPRECATED()?.env),
+    (source) => isSettingSourceEnabled(source) ? filterSettingsEnv(getSettingsForSource(source)?.env) : void 0
+  );
   for (let [key, value] of Object.entries(settingsEnv4))
     SAFE_ENV_VARS3.has(key.toUpperCase()) && (process.env[key] = value);
+  Object.assign(
+    process.env,
+    trustedCapabilityEnv(
+      (source) => isSettingSourceEnabled(source) ? filterSettingsEnv(getSettingsForSource(source)?.env) : void 0
+    )
+  );
+}
+function stripUntrustedCapabilityEnv(merged, readSourceEnv) {
+  let out6 = { ...merged };
+  for (let key of Object.keys(out6))
+    PROJECT_FORBIDDEN_ENV_VARS.has(key.toUpperCase()) && delete out6[key];
+  return Object.assign(out6, trustedCapabilityEnv(readSourceEnv));
+}
+function trustedCapabilityEnv(readSourceEnv) {
+  let out6 = {};
+  for (let canonical2 of PROJECT_FORBIDDEN_ENV_VARS)
+    for (let source of TRUSTED_SETTING_SOURCES) {
+      let sourceEnv = readSourceEnv(source);
+      if (sourceEnv)
+        for (let [key, value] of Object.entries(sourceEnv))
+          key.toUpperCase() === canonical2 && (out6[canonical2] = value);
+    }
+  return out6;
 }
 function applyConfigEnvironmentVariables() {
-  Object.assign(process.env, filterSettingsEnv(getGlobalConfig().env)), Object.assign(process.env, filterSettingsEnv(getSettings_DEPRECATED()?.env)), clearCACertsCache(), clearMTLSCache(), clearProxyCache(), configureGlobalAgents();
+  Object.assign(process.env, filterSettingsEnv(getGlobalConfig().env)), Object.assign(
+    process.env,
+    stripUntrustedCapabilityEnv(
+      filterSettingsEnv(getSettings_DEPRECATED()?.env),
+      // 🔴 取回也要服从 `--setting-sources`:该 flag 排除 userSettings 时,那份文件里的
+      // 能力位不该还能透过(getSettingsForSource 自身不查源开关)。
+      (source) => isSettingSourceEnabled(source) ? filterSettingsEnv(getSettingsForSource(source)?.env) : void 0
+    )
+  ), clearCACertsCache(), clearMTLSCache(), clearProxyCache(), configureGlobalAgents();
 }
-var ccdSpawnEnvKeys, TRUSTED_SETTING_SOURCES, init_managedEnv = __esm({
+var ccdSpawnEnvKeys, TRUSTED_SETTING_SOURCES, PROJECT_FORBIDDEN_ENV_VARS, init_managedEnv = __esm({
   "build-src/src/utils/managedEnv.ts"() {
     init_syncCache();
     init_caCerts();
@@ -458856,6 +459236,24 @@ var ccdSpawnEnvKeys, TRUSTED_SETTING_SOURCES, init_managedEnv = __esm({
       "flagSettings",
       "policySettings"
     ];
+    PROJECT_FORBIDDEN_ENV_VARS = /* @__PURE__ */ new Set([
+      // agent-teams 的 opt-in:开门 = 挂上 TeamCreate/TeamDelete/SendMessage + 起队友进程的能力面。
+      // 🔴 品牌名 + CC 名两形都要登记(1.0.82 扫码修,真病 S3):裸字面量 'SEMA_CODE_...' 会被
+      // branding codemod 逐字改写成 'SEMA_CODE_...'(dist 直证:产物里恒 0 处 CLAUDE_ 形、6 处
+      // SEMA_ 形),于是构建后的禁表**只剩品牌名一形**。而 `ccEnvCompatBoot.ts` 的 `applyCcEnvCompat()`
+      // 只在进程边界跑一次、只读**真实 shell env**——它不会回头翻译「后来才从 settings.json 合并
+      // 进 process.env」的值。项目 `.sema/settings.json` 写 `{"env":{"SEMA_CODE_EXPERIMENTAL_
+      // AGENT_TEAMS":"1"}}` 时,合并层按品牌名做的剥离扫不到这个 CC 原名键,它原样滲进
+      // `process.env`——本进程的门读不到(读的是品牌名),但**继承该 env 的子 sema 进程**
+      // (main.tsx spawnSync/worktree.ts/Bash 工具再跑 sema)在自己 boot 期重新跑 compat,会把这个
+      // 继承来的 CC 原名值回翻成品牌名,子进程的门就开了。
+      // 拼接规避同一条 codemod(仓内 envUtils.ts/ccImportMarker.ts 同款纪律):裸写会被连带改掉,
+      // 拼接后的字符串在源码文本层面不含 `\bCLAUDE_\b`,codemod 认不出,构建后仍保持 CC 原形——
+      // 于是禁表在**构建产物**里真同时含两个不同字符串(品牌名+CC 原名);raw src 下两条字面量相同,
+      // Set 天然去重成一条,对 raw src 测试无害(此时两形本就同形)。
+      "SEMA_CODE_EXPERIMENTAL_AGENT_TEAMS",
+      "CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS".toUpperCase()
+    ]);
   }
 });
 
@@ -459080,7 +459478,7 @@ __export(upstreamproxy_exports, {
   resetUpstreamProxyForTests: () => resetUpstreamProxyForTests
 });
 import { mkdir as mkdir45, readFile as readFile53, unlink as unlink26, writeFile as writeFile46 } from "fs/promises";
-import { homedir as homedir44 } from "os";
+import { homedir as homedir45 } from "os";
 import { join as join177 } from "path";
 async function initUpstreamProxy(opts) {
   if (!isEnvTruthy(process.env.SEMA_CODE_REMOTE) || !isEnvTruthy(process.env.CCR_UPSTREAM_PROXY_ENABLED))
@@ -459095,7 +459493,7 @@ async function initUpstreamProxy(opts) {
   if (!token)
     return logForDebugging("[upstreamproxy] no session token file; proxy disabled"), state3;
   setNonDumpable();
-  let baseUrl = opts?.ccrBaseUrl ?? process.env.ANTHROPIC_BASE_URL ?? "https://api.anthropic.com", caBundlePath = opts?.caBundlePath ?? join177(homedir44(), ".ccr", "ca-bundle.crt");
+  let baseUrl = opts?.ccrBaseUrl ?? process.env.ANTHROPIC_BASE_URL ?? "https://api.anthropic.com", caBundlePath = opts?.caBundlePath ?? join177(homedir45(), ".ccr", "ca-bundle.crt");
   if (!await downloadCaBundle(
     baseUrl,
     opts?.systemCaPath ?? SYSTEM_CA_BUNDLE,
@@ -462574,6 +462972,66 @@ var import_compiler_runtime243, import_jsx_runtime365, init_WorkerPendingPermiss
   }
 });
 
+// build-src/src/sema/rules/ccImportBootRun.ts
+var ccImportBootRun_exports = {};
+__export(ccImportBootRun_exports, {
+  __resetCcImportBootLatchForTests: () => __resetCcImportBootLatchForTests,
+  __resetCcImportBootPendingNoticeForTests: () => __resetCcImportBootPendingNoticeForTests,
+  drainPendingCcImportBootNotice: () => drainPendingCcImportBootNotice,
+  runCcImportBootAuto: () => runCcImportBootAuto,
+  runCcImportBootAutoWith: () => runCcImportBootAutoWith
+});
+async function runCcImportBootAutoWith(deps2) {
+  try {
+    let sourcePath = deps2.gate();
+    if (sourcePath === null) return "gate-closed";
+    let { layers: layers2 } = deps2.collect(sourcePath);
+    if (layers2.length === 0) return "no-layers";
+    let facade = await deps2.facade(), prep = await prepareCcRuleImport(facade, layers2);
+    if (!prep.ok) return "prepare-failed";
+    if ((Array.isArray(prep.prepared?.preview?.candidates) ? prep.prepared.preview.candidates : []).length === 0)
+      return deps2.writeMarker({ importedAt: (/* @__PURE__ */ new Date()).toISOString(), sourcePath, importedCount: 0 }), "nothing-to-import";
+    let red = await redeemCcRuleImport(facade, prep.prepared.ticket);
+    if (!red.ok) return "redeem-failed";
+    let persisted = Array.isArray(red.redeemed?.persisted) ? red.redeemed.persisted.length : 0, deduped = Array.isArray(red.redeemed?.deduped) ? red.redeemed.deduped.length : 0;
+    if (deps2.writeMarker({ importedAt: (/* @__PURE__ */ new Date()).toISOString(), sourcePath, importedCount: persisted }), persisted > 0) {
+      let noun = persisted === 1 ? "rule" : "rules", dedupTail = deduped > 0 ? ` (${deduped} already present)` : "", text2 = `Imported ${persisted} permission ${noun} from Sema settings${dedupTail} \u2014 review in /permissions`;
+      deps2.notice(text2) || (pendingNotice = text2);
+    }
+    return "imported";
+  } catch {
+    return "prepare-failed";
+  }
+}
+function __resetCcImportBootLatchForTests() {
+  attempted = !1;
+}
+function drainPendingCcImportBootNotice() {
+  let n2 = pendingNotice;
+  return pendingNotice = null, n2;
+}
+function __resetCcImportBootPendingNoticeForTests() {
+  pendingNotice = null;
+}
+function runCcImportBootAuto() {
+  return attempted ? Promise.resolve("already-attempted") : (attempted = !0, runCcImportBootAutoWith({
+    gate: ccImportBootGate,
+    collect: collectCcUserLayerAt,
+    facade: resolveRulesFacade,
+    writeMarker: writeCcImportMarker,
+    notice: surfaceTranscriptSystemNotice
+  }));
+}
+var attempted, pendingNotice, init_ccImportBootRun = __esm({
+  "build-src/src/sema/rules/ccImportBootRun.ts"() {
+    init_persistedRulesWire2();
+    init_transcriptSystemNotice();
+    init_ccImportMarker();
+    attempted = !1;
+    pendingNotice = null;
+  }
+});
+
 // build-src/src/hooks/useLogMessages.ts
 function useLogMessages(messages, ignore6 = !1) {
   let teamContext = useAppState((s) => s.teamContext), lastRecordedLengthRef = (0, import_react205.useRef)(0), lastParentUuidRef = (0, import_react205.useRef)(void 0), firstMessageUuidRef = (0, import_react205.useRef)(void 0), callSeqRef = (0, import_react205.useRef)(0);
@@ -472560,7 +473018,7 @@ var import_compiler_runtime255, import_jsx_runtime383, init_ShowInIDEPrompt = __
 });
 
 // build-src/src/components/permissions/FilePermissionDialog/permissionOptions.tsx
-import { homedir as homedir45 } from "os";
+import { homedir as homedir46 } from "os";
 import { basename as basename56, join as join181, sep as sep39 } from "path";
 function isInClaudeFolder(filePath) {
   let absolutePath = expandPath(filePath), claudeFolderPath = expandPath(`${getOriginalCwd()}/.claude`), normalizedAbsolutePath = normalizeCaseForComparison2(absolutePath), normalizedClaudeFolderPath = normalizeCaseForComparison2(claudeFolderPath);
@@ -472568,7 +473026,7 @@ function isInClaudeFolder(filePath) {
   normalizedAbsolutePath.startsWith(normalizedClaudeFolderPath + "/");
 }
 function isInGlobalClaudeFolder(filePath) {
-  let absolutePath = expandPath(filePath), globalClaudeFolderPath = join181(homedir45(), ".sema"), normalizedAbsolutePath = normalizeCaseForComparison2(absolutePath), normalizedGlobalClaudeFolderPath = normalizeCaseForComparison2(globalClaudeFolderPath);
+  let absolutePath = expandPath(filePath), globalClaudeFolderPath = join181(homedir46(), ".sema"), normalizedAbsolutePath = normalizeCaseForComparison2(absolutePath), normalizedGlobalClaudeFolderPath = normalizeCaseForComparison2(globalClaudeFolderPath);
   return normalizedAbsolutePath.startsWith(normalizedGlobalClaudeFolderPath + sep39.toLowerCase()) || normalizedAbsolutePath.startsWith(normalizedGlobalClaudeFolderPath + "/");
 }
 function getFilePermissionOptions({
@@ -481768,41 +482226,6 @@ var import_compiler_runtime284, import_react256, import_jsx_runtime427, init_Thi
   }
 });
 
-// build-src/src/utils/teamDiscovery.ts
-function getTeammateStatuses(teamName) {
-  let teamFile = readTeamFile(teamName);
-  if (!teamFile)
-    return [];
-  let hiddenPaneIds = new Set(teamFile.hiddenPaneIds ?? []), statuses = [];
-  for (let member of teamFile.members) {
-    if (member.name === "team-lead")
-      continue;
-    let status3 = member.isActive !== !1 ? "running" : "idle";
-    statuses.push({
-      name: member.name,
-      agentId: member.agentId,
-      agentType: member.agentType,
-      model: member.model,
-      prompt: member.prompt,
-      status: status3,
-      color: member.color,
-      tmuxPaneId: member.tmuxPaneId,
-      cwd: member.cwd,
-      worktreePath: member.worktreePath,
-      isHidden: hiddenPaneIds.has(member.tmuxPaneId),
-      backendType: member.backendType && isPaneBackend(member.backendType) ? member.backendType : void 0,
-      mode: member.mode
-    });
-  }
-  return statuses;
-}
-var init_teamDiscovery = __esm({
-  "build-src/src/utils/teamDiscovery.ts"() {
-    init_types18();
-    init_teamHelpers();
-  }
-});
-
 // build-src/src/components/teams/TeamsDialog.tsx
 import { randomUUID as randomUUID43 } from "crypto";
 function TeamsDialog({
@@ -488525,7 +488948,7 @@ var SESSION_SCAN_INTERVAL_MS, DEFAULTS, runner, init_autoDream = __esm({
 
 // build-src/src/utils/cleanup.ts
 import * as fs14 from "fs/promises";
-import { homedir as homedir46 } from "os";
+import { homedir as homedir47 } from "os";
 import { join as join183 } from "path";
 function getCleanupPeriodDays() {
   return (getSettings_DEPRECATED() || {}).cleanupPeriodDays ?? DEFAULT_CLEANUP_PERIOD_DAYS;
@@ -488840,7 +489263,7 @@ async function cleanupNpmCacheForAnthropicPackages() {
     return;
   }
   logForDebugging("npm cache cleanup: starting");
-  let npmCachePath = join183(homedir46(), ".npm", "_cacache"), NPM_CACHE_RETENTION_COUNT = 5, startTime = Date.now();
+  let npmCachePath = join183(homedir47(), ".npm", "_cacache"), NPM_CACHE_RETENTION_COUNT = 5, startTime = Date.now();
   try {
     let cacache = await import("cacache"), cutoff = startTime - ONE_DAY_MS2, stream5 = cacache.ls.stream(npmCachePath), anthropicEntries = [];
     for await (let entry of stream5)
@@ -491203,8 +491626,8 @@ function processQueueIfReady({
     let cmd = dequeue(isMainThread);
     return executeInput([cmd]), { processed: !0 };
   }
-  let targetMode = next.mode, commands = dequeueAllMatching(
-    (cmd) => isMainThread(cmd) && !isSlashCommand(cmd) && cmd.mode === targetMode
+  let targetMode = next.mode, targetInjected = next.isMeta === !0, commands = dequeueAllMatching(
+    (cmd) => isMainThread(cmd) && !isSlashCommand(cmd) && cmd.mode === targetMode && cmd.isMeta === !0 === targetInjected
   );
   return commands.length === 0 ? { processed: !1 } : (executeInput(commands), { processed: !0 });
 }
@@ -493102,6 +493525,52 @@ var import_react295, INBOX_POLL_INTERVAL_MS, init_useInboxPoller = __esm({
   }
 });
 
+// build-src/src/sema/planReviewModeExit.ts
+function isPlanReviewQuestionId(questionId) {
+  return typeof questionId == "string" && questionId.startsWith(PLAN_REVIEW_QUESTION_ID_PREFIX);
+}
+function shouldExitPlanModeForAnswer(questionId, answer) {
+  return isPlanReviewQuestionId(questionId) ? planReviewDecisionFromAnswer(answer) === "approve" : !1;
+}
+function reevaluateRestoreMode(ctx) {
+  let wanted = ctx.prePlanMode ?? "default";
+  if (wanted !== "auto" && wanted !== "bypassPermissions") return wanted;
+  try {
+    return wanted === "auto" ? isAutoModeGateEnabled() ? "auto" : "default" : ctx.isBypassPermissionsModeAvailable === !1 || isBypassPermissionsModeDisabled() ? "default" : "bypassPermissions";
+  } catch (e) {
+    return process.env.SEMA_DEBUG && console.error(
+      `[sema][planReviewModeExit] ${wanted} availability probe threw \u2014 falling back to default (fail-closed): ${String(e)}`
+    ), "default";
+  }
+}
+function applyPlanModeExit(prev) {
+  let ctx = prev.toolPermissionContext;
+  if (ctx.mode !== "plan") return prev;
+  let restoreMode = reevaluateRestoreMode(ctx), nextCtx;
+  try {
+    nextCtx = transitionPermissionMode("plan", restoreMode, ctx);
+  } catch (e) {
+    return process.env.SEMA_DEBUG && console.error(`[sema][planReviewModeExit] transition to ${restoreMode} threw: ${String(e)}`), { ...prev, toolPermissionContext: { ...ctx, mode: "default", prePlanMode: void 0 } };
+  }
+  return {
+    ...prev,
+    toolPermissionContext: { ...nextCtx, mode: restoreMode }
+  };
+}
+function exitPlanModeIfApproved(questionId, answer, setAppState) {
+  try {
+    return shouldExitPlanModeForAnswer(questionId, answer) ? (setAppState(applyPlanModeExit), !0) : !1;
+  } catch (e) {
+    return process.env.SEMA_DEBUG && console.error(`[sema][planReviewModeExit] exit failed for ${String(questionId)}: ${String(e)}`), !1;
+  }
+}
+var init_planReviewModeExit = __esm({
+  "build-src/src/sema/planReviewModeExit.ts"() {
+    init_dist();
+    init_permissionSetup();
+  }
+});
+
 // build-src/src/sema/resumePendingReconcile.ts
 var resumePendingReconcile_exports = {};
 __export(resumePendingReconcile_exports, {
@@ -493401,10 +493870,10 @@ async function runQuestionPermissionRequestHooks(frame, getHookToolUseContext) {
   }
   return null;
 }
-function buildQuestionToolUseConfirm(frame, getHookToolUseContext) {
+function buildQuestionToolUseConfirm(frame, getHookToolUseContext, setAppState) {
   let questionId = frame.questionId, questions = frame.questions ?? [], answerAndRelease = (answer) => {
     respondToQuestion(questionId, answer).then(() => {
-      notePlanReviewAnsweredIfDecisive(questionId, answer);
+      notePlanReviewAnsweredIfDecisive(questionId, answer), setAppState && exitPlanModeIfApproved(questionId, answer, setAppState);
     }).catch(() => {
     });
   };
@@ -493439,21 +493908,22 @@ function buildQuestionToolUseConfirm(frame, getHookToolUseContext) {
 }
 function useLiveQuestionOverlay({
   setToolUseConfirmQueue,
-  getHookToolUseContext
+  getHookToolUseContext,
+  setAppState
 }) {
   (0, import_react296.useEffect)(() => {
     let completedBeforeDialog = /* @__PURE__ */ new Set(), seenQuestionIds = /* @__PURE__ */ new Set(), alive = !0, unsubscribe = onQuestionFrame((frame) => {
       if (frame.type === "question") {
         if (!frame.questions || frame.questions.length === 0 || seenQuestionIds.has(frame.questionId)) return;
         seenQuestionIds.add(frame.questionId);
-        let entry = buildQuestionToolUseConfirm(frame, getHookToolUseContext);
+        let entry = buildQuestionToolUseConfirm(frame, getHookToolUseContext, setAppState);
         (async () => {
           let decision = await runQuestionPermissionRequestHooks(frame, getHookToolUseContext);
           if (!completedBeforeDialog.has(frame.questionId)) {
             if (decision?.behavior === "allow") {
               let updated = decision.updatedInput, wireAnswer = questionAnswersToWire(frame.questions ?? [], updated?.answers, updated?.annotations);
               respondToQuestion(frame.questionId, wireAnswer).then(() => {
-                notePlanReviewAnsweredIfDecisive(frame.questionId, wireAnswer);
+                notePlanReviewAnsweredIfDecisive(frame.questionId, wireAnswer), setAppState && exitPlanModeIfApproved(frame.questionId, wireAnswer, setAppState);
               }).catch(() => {
               });
               return;
@@ -493487,6 +493957,7 @@ var import_react296, init_useLiveQuestionOverlay = __esm({
     init_messages4();
     init_dist();
     init_armedGateRegistry2();
+    init_planReviewModeExit();
     init_resumePendingReconcile();
   }
 });
@@ -499565,9 +500036,12 @@ function REPL({
     }
     rawSetMessages(next);
   }, []);
-  (0, import_react332.useEffect)(() => registerTranscriptSystemNoticeSink((text2) => {
-    setMessages((prev) => [...prev, createSystemMessage(text2, "warning")]);
-  }), [setMessages]);
+  (0, import_react332.useEffect)(() => {
+    let unregister = registerTranscriptSystemNoticeSink((text2) => {
+      setMessages((prev) => [...prev, createSystemMessage(text2, "warning")]);
+    }), pending2 = drainPendingCcImportBootNotice();
+    return pending2 !== null && setMessages((prev) => [...prev, createSystemMessage(pending2, "info")]), unregister;
+  }, [setMessages]);
   let setUserInputOnProcessing = (0, import_react332.useCallback)((input) => {
     input !== void 0 ? (userInputBaselineRef.current = messagesRef.current.length, userMessagePendingRef.current = !0) : userMessagePendingRef.current = !1, setUserInputOnProcessingRaw(input);
   }, []), {
@@ -500644,7 +501118,7 @@ Error: sandbox required but unavailable: ${reason}
     if (logForDebugging(`onAgentSubmit: task=${task.id} type=${task.type} status=${task.status} engineRow=${isEngineViewRow(task.id)}`), isLocalAgentTask2(task) && isEngineViewRow(task.id)) {
       if (pushSubagentLocalEcho(task.id, input), task.status === "running") {
         let target = parentToolCallIdOf(task.id) || task.id;
-        logForDebugging(`onAgentSubmit: steering engine subagent target=${target}`), steerEngineSubagent(target, input).then((outcome) => {
+        logForDebugging(`onAgentSubmit: steering engine subagent target=${target} row=${task.id}`), steerEngineSubagent(target, input, task.id).then((outcome) => {
           logForDebugging(`onAgentSubmit: steer outcome=${JSON.stringify(outcome)}`);
           let steerReason = "reason" in outcome ? outcome.reason : void 0, steerDetail = "detail" in outcome ? outcome.detail : void 0;
           addNotification({
@@ -500965,7 +501439,9 @@ ${fileList}`);
   let getHookToolUseContext = (0, import_react332.useCallback)(() => getToolUseContext(messagesRef.current, [], new AbortController(), mainLoopModel), [getToolUseContext, mainLoopModel]);
   useLiveQuestionOverlay({
     setToolUseConfirmQueue,
-    getHookToolUseContext
+    getHookToolUseContext,
+    // #266:plan 卡 approve 后退出壳本地 plan 模式(rc.47 挂账的 app-state seam 只有这一层有)。
+    setAppState
   }), useMailboxBridge({
     isLoading,
     onSubmitMessage: handleIncomingPrompt
@@ -501498,6 +501974,7 @@ var import_compiler_runtime325, React175, import_react332, import_jsx_runtime478
     init_LocalAgentTask();
     init_leaderPermissionBridge();
     init_transcriptSystemNotice();
+    init_ccImportBootRun();
     init_sessionTracing();
     init_useLogMessages();
     init_useReplBridge();
@@ -509625,7 +510102,7 @@ var lastMemoryMessageUuid, initSessionMemoryConfigIfNeeded, hasLoggedGateFailure
 
 // build-src/src/utils/iTermBackup.ts
 import { copyFile as copyFile11, stat as stat50 } from "fs/promises";
-import { homedir as homedir47 } from "os";
+import { homedir as homedir48 } from "os";
 import { join as join193 } from "path";
 function markITerm2SetupComplete() {
   saveGlobalConfig((current5) => ({
@@ -509642,7 +510119,7 @@ function getIterm2RecoveryInfo() {
 }
 function getITerm2PlistPath() {
   return join193(
-    homedir47(),
+    homedir48(),
     "Library",
     "Preferences",
     "com.googlecode.iterm2.plist"
@@ -510081,7 +510558,7 @@ var STDOUT_GUARD_MARKER, installed2, buffer4, originalWrite, init_streamJsonStdo
 
 // build-src/src/sema/config/mcpChannels.ts
 import { readFileSync as readFileSync49 } from "node:fs";
-import { homedir as homedir48 } from "node:os";
+import { homedir as homedir49 } from "node:os";
 import { join as join194 } from "node:path";
 function mcpTransportOf(config4) {
   let c2 = config4;
@@ -510127,9 +510604,9 @@ function externalEntryToConfig(e) {
   };
 }
 function detectMcpChannels() {
-  let out6 = [], ccRoot2 = process.env.SEMA_CC_ROOT || join194(homedir48(), CC_DIR5), merged = {}, settingsServers = readJsoncSafe(join194(ccRoot2, "settings.json"))?.mcpServers;
+  let out6 = [], ccRoot2 = process.env.SEMA_CC_ROOT || join194(homedir49(), CC_DIR5), merged = {}, settingsServers = readJsoncSafe(join194(ccRoot2, "settings.json"))?.mcpServers;
   settingsServers && typeof settingsServers == "object" && Object.assign(merged, settingsServers);
-  let globalServers = readJsoncSafe(join194(homedir48(), CC_GLOBAL_FILE2))?.mcpServers;
+  let globalServers = readJsoncSafe(join194(homedir49(), CC_GLOBAL_FILE2))?.mcpServers;
   globalServers && typeof globalServers == "object" && Object.assign(merged, globalServers), Object.keys(merged).length > 0 && out6.push({ channel: "claude-code", label: CC_BRAND, servers: merged });
   for (let [channel, detected] of [
     ["openclaw", detectOpenclawMcp()],
@@ -510215,23 +510692,23 @@ var CC_DIR5, CC_GLOBAL_FILE2, MCP_SCOPE_LABELS, init_mcpChannels = __esm({
 });
 
 // build-src/src/sema/importSources.ts
-import { existsSync as existsSync33, mkdirSync as mkdirSync26, readdirSync as readdirSync12, readFileSync as readFileSync50, writeFileSync as writeFileSync26 } from "node:fs";
+import { existsSync as existsSync33, mkdirSync as mkdirSync26, readdirSync as readdirSync13, readFileSync as readFileSync50, writeFileSync as writeFileSync26 } from "node:fs";
 import { createHash as createHash29 } from "node:crypto";
-import { homedir as homedir49 } from "node:os";
+import { homedir as homedir50 } from "node:os";
 import { dirname as dirname89, join as join195, resolve as resolve49, sep as sep42 } from "node:path";
 function toSafeName(raw2) {
   return raw2.toLowerCase().replace(/[^a-z0-9_-]+/g, "-").replace(/^-+|-+$/g, "") || "item";
 }
 function safeReaddirFiles(dir, ext) {
   try {
-    return readdirSync12(dir, { withFileTypes: !0 }).filter((e) => e.isFile() && e.name.endsWith(ext)).map((e) => e.name);
+    return readdirSync13(dir, { withFileTypes: !0 }).filter((e) => e.isFile() && e.name.endsWith(ext)).map((e) => e.name);
   } catch {
     return [];
   }
 }
 function hasNamespacedSubdirs(dir) {
   try {
-    return readdirSync12(dir, { withFileTypes: !0 }).filter((e) => e.isDirectory()).map((e) => e.name);
+    return readdirSync13(dir, { withFileTypes: !0 }).filter((e) => e.isDirectory()).map((e) => e.name);
   } catch {
     return [];
   }
@@ -510411,7 +510888,7 @@ function hasShellExecMarker(body) {
   return /!\{[^}]+\}/.test(body) || /!`[^`]*`/.test(body);
 }
 function codexRoot() {
-  return process.env.SEMA_CODEX_ROOT || join195(homedir49(), ".codex");
+  return process.env.SEMA_CODEX_ROOT || join195(homedir50(), ".codex");
 }
 function codexDetect() {
   let root2 = codexRoot();
@@ -510486,7 +510963,7 @@ async function codexScan() {
   return { items, unmappable };
 }
 function geminiRoot() {
-  return process.env.SEMA_GEMINI_ROOT || join195(homedir49(), ".gemini");
+  return process.env.SEMA_GEMINI_ROOT || join195(homedir50(), ".gemini");
 }
 function geminiDetect() {
   let root2 = geminiRoot();
@@ -510599,7 +511076,7 @@ async function geminiScan() {
   return { items, unmappable };
 }
 function claudeRoot() {
-  return process.env.SEMA_CC_ROOT || join195(homedir49(), SEMA_SOURCE_DIR);
+  return process.env.SEMA_CC_ROOT || join195(homedir50(), SEMA_SOURCE_DIR);
 }
 function claudeDetect() {
   let root2 = claudeRoot();
@@ -510722,7 +511199,7 @@ __export(cmd_import_exports, {
   default: () => cmd_import_default,
   runImportNonInteractive: () => runImportNonInteractive
 });
-function plural4(n2, word) {
+function plural5(n2, word) {
   return n2 === 1 ? word : `${word}s`;
 }
 function allItems(scans) {
@@ -510733,13 +511210,13 @@ function allUnmappable(scans) {
 }
 function formatPreview(scans, from, digest, warnings) {
   let items = allItems(scans), unmappable = allUnmappable(scans), sourceNames = scans.map((s) => s.displayName).join(" and "), lines = [
-    `Found ${items.length} importable ${plural4(items.length, "item")} from ${sourceNames} (scan digest: ${digest}).`,
+    `Found ${items.length} importable ${plural5(items.length, "item")} from ${sourceNames} (scan digest: ${digest}).`,
     ...warnings
   ];
   for (let item of items)
     lines.push(`  [${item.source}] ${item.label} (${item.kind})`);
   if (unmappable.length > 0) {
-    lines.push("", `${unmappable.length} ${plural4(unmappable.length, "item")} could not be mapped automatically:`);
+    lines.push("", `${unmappable.length} ${plural5(unmappable.length, "item")} could not be mapped automatically:`);
     for (let u of unmappable)
       lines.push(`  \u26A0 [${u.source}] ${u.label}: ${u.reason}`);
   }
@@ -510759,8 +511236,8 @@ async function applyScans(scans, dryRun, warnings) {
     } catch (e) {
       resultLines.push(`  \u2717 ${item.label}: ${e instanceof Error ? e.message : String(e)}`);
     }
-  let header = dryRun ? `Dry run \u2014 would import ${imported} ${plural4(imported, "item")}:` : `Imported ${imported} ${plural4(imported, "item")}:`, footer = [...warnings];
-  return unmappable.length > 0 && footer.push("", `${unmappable.length} ${plural4(unmappable.length, "item")} could not be mapped automatically \u2014 re-run \`/import\` to review.`), [header, ...resultLines, ...footer].join(`
+  let header = dryRun ? `Dry run \u2014 would import ${imported} ${plural5(imported, "item")}:` : `Imported ${imported} ${plural5(imported, "item")}:`, footer = [...warnings];
+  return unmappable.length > 0 && footer.push("", `${unmappable.length} ${plural5(unmappable.length, "item")} could not be mapped automatically \u2014 re-run \`/import\` to review.`), [header, ...resultLines, ...footer].join(`
 `);
 }
 async function handleImport(argsRaw) {
@@ -510856,6 +511333,10 @@ async function tryPrintLocalCommand(objective, deps2 = {}) {
     let result = await (await (await Promise.resolve().then(() => (init_agents2(), agents_exports2))).default.load()).call();
     return result.type === "text" ? result.value : null;
   }
+  if (name === "team") {
+    let { runTeamCommand: runTeamCommand2 } = await Promise.resolve().then(() => (init_team(), team_exports)), result = await runTeamCommand2(args);
+    return result.type === "text" ? result.value : null;
+  }
   return null;
 }
 var MCP_USAGE, MCP_NONE, MCP_CONTROLS_UNAVAILABLE, MODEL_HELP_TOKENS, init_printLocalCommands = __esm({
@@ -511915,8 +512396,8 @@ function resolveAgentModel(opts = {}) {
   let deps2 = { ...defaultDeps, ...opts.deps }, env5 = opts.env ?? process.env, envRaw = normalize19(env5.SEMA_SUBAGENT_MODEL) ?? normalize19(env5.SEMA_CODE_SUBAGENT_MODEL);
   if (envRaw && envRaw.toLowerCase() !== "inherit")
     return resolveWord(envRaw, "env", deps2);
-  let call77 = normalize19(opts.callParam);
-  if (call77) return resolveWord(call77, "call", deps2);
+  let call78 = normalize19(opts.callParam);
+  if (call78) return resolveWord(call78, "call", deps2);
   let fm = normalize19(opts.frontmatterModel);
   return fm ? resolveWord(fm, "frontmatter", deps2) : { model: "inherit", source: "main", kind: "inherit" };
 }
@@ -517266,7 +517747,7 @@ __export(claudeDesktop_exports, {
   readClaudeDesktopMcpServers: () => readClaudeDesktopMcpServers
 });
 import { readdir as readdir33, readFile as readFile58, stat as stat52 } from "fs/promises";
-import { homedir as homedir50 } from "os";
+import { homedir as homedir51 } from "os";
 import { join as join198 } from "path";
 async function getClaudeDesktopConfigPath() {
   let platform4 = getPlatform();
@@ -517276,7 +517757,7 @@ async function getClaudeDesktopConfigPath() {
     );
   if (platform4 === "macos")
     return join198(
-      homedir50(),
+      homedir51(),
       "Library",
       "Application Support",
       "Claude",
@@ -517761,18 +518242,18 @@ __export(adoptionGuard_exports, {
   countLocalSessionArtifacts: () => countLocalSessionArtifacts,
   remoteSwitchSessionNotice: () => remoteSwitchSessionNotice
 });
-import { readdirSync as readdirSync13, existsSync as existsSync34 } from "node:fs";
+import { readdirSync as readdirSync14, existsSync as existsSync34 } from "node:fs";
 import { join as join199 } from "node:path";
 function countLocalSessionArtifacts() {
   let census = { projects: 0, sessions: 0 };
   try {
     let root2 = getProjectsDir();
     if (!existsSync34(root2)) return census;
-    for (let entry of readdirSync13(root2, { withFileTypes: !0 })) {
+    for (let entry of readdirSync14(root2, { withFileTypes: !0 })) {
       if (!entry.isDirectory()) continue;
       let n2 = 0;
       try {
-        n2 = readdirSync13(join199(root2, entry.name)).filter((f) => f.endsWith(".jsonl")).length;
+        n2 = readdirSync14(join199(root2, entry.name)).filter((f) => f.endsWith(".jsonl")).length;
       } catch {
         continue;
       }
@@ -519671,7 +520152,7 @@ __export(cloudResources_exports, {
   cloudResourceSync: () => cloudResourceSync
 });
 import { createHash as createHash30 } from "node:crypto";
-import { existsSync as existsSync36, readdirSync as readdirSync14, readFileSync as readFileSync54, statSync as statSync16 } from "node:fs";
+import { existsSync as existsSync36, readdirSync as readdirSync15, readFileSync as readFileSync54, statSync as statSync16 } from "node:fs";
 import { basename as basename69, dirname as dirname91, isAbsolute as isAbsolute34, join as join202, resolve as resolve50 } from "node:path";
 import { getEffective as getEffective2, getMeConfig, getScopeConfigDraft as getScopeConfigDraft2, OAuthFlowError as OAuthFlowError3, RegistryApiError as RegistryApiError3 } from "@sema-agent/sdk/registry";
 function fail4(e) {
@@ -520170,7 +520651,7 @@ async function loadLocalSkillEntries() {
   for (let root2 of roots) {
     let dirs = [];
     try {
-      dirs = readdirSync14(root2).filter((d4) => {
+      dirs = readdirSync15(root2).filter((d4) => {
         try {
           return statSync16(join202(root2, d4)).isDirectory() && existsSync36(join202(root2, d4, "SKILL.md"));
         } catch {
@@ -524576,9 +525057,9 @@ var install_exports = {};
 __export(install_exports, {
   install: () => install
 });
-import { homedir as homedir51 } from "node:os";
+import { homedir as homedir52 } from "node:os";
 function getInstallationPath2(realPath) {
-  let isWindows2 = env2.platform === "win32", homeDir = homedir51();
+  let isWindows2 = env2.platform === "win32", homeDir = homedir52();
   return isWindows2 ? realPath.replace(/\//g, "\\") : realPath.startsWith(homeDir) ? `~${realPath.slice(homeDir.length)}` : realPath;
 }
 function SetupNotes(t0) {
@@ -525304,18 +525785,18 @@ var configSync_exports = {};
 __export(configSync_exports, {
   configSyncHandler: () => configSyncHandler
 });
-import { homedir as homedir52 } from "node:os";
+import { homedir as homedir53 } from "node:os";
 import {
   copyFileSync as copyFileSync8,
   existsSync as existsSync38,
   mkdirSync as mkdirSync28,
-  readdirSync as readdirSync15,
+  readdirSync as readdirSync16,
   readFileSync as readFileSync55,
   statSync as statSync18
 } from "node:fs";
 import { dirname as dirname95, join as join207, relative as relative37 } from "node:path";
 function display(p) {
-  let home = homedir52();
+  let home = homedir53();
   return p.startsWith(home) ? "~" + p.slice(home.length) : p;
 }
 function filesEqual(a, b3) {
@@ -525430,7 +525911,7 @@ function syncTree(srcDir, destDir, labelBase, opts, report) {
     syncPlainFile(srcDir, destDir, labelBase, opts, report);
     return;
   }
-  for (let name of readdirSync15(srcDir)) {
+  for (let name of readdirSync16(srcDir)) {
     let srcChild = join207(srcDir, name), destChild = join207(destDir, name), childStat;
     try {
       childStat = statSync18(srcChild);
@@ -525510,7 +525991,7 @@ async function configSyncHandler(opts) {
   }, dryTag = opts.dryRun ? source_default.yellow(" [dry-run]") : "";
   process.stdout.write(source_default.bold(`sema config sync${dryTag}
 `));
-  let userSrc = join207(homedir52(), LEGACY_DIR3), userDest = getClaudeConfigHomeDir();
+  let userSrc = join207(homedir53(), LEGACY_DIR3), userDest = getClaudeConfigHomeDir();
   process.stdout.write(
     source_default.bold(`
 user: ${display(userSrc)} \u2192 ${display(userDest)}
@@ -525529,7 +526010,7 @@ user: ${display(userSrc)} \u2192 ${display(userDest)}
     opts,
     report
   );
-  let globalSrc = join207(homedir52(), LEGACY_GLOBAL_FILE), globalDest = getGlobalClaudeFile();
+  let globalSrc = join207(homedir53(), LEGACY_GLOBAL_FILE), globalDest = getGlobalClaudeFile();
   if (existsSync38(globalSrc) && globalSrc !== globalDest && syncJsonFile(globalSrc, globalDest, display(globalDest), opts, report), flushEntries(report, userStart, opts), opts.project) {
     let projSrc = join207(process.cwd(), LEGACY_DIR3), projDest = join207(process.cwd(), ".sema");
     process.stdout.write(
@@ -525625,7 +526106,7 @@ __export(importCredentials_exports, {
 });
 import { execFileSync as execFileSync7 } from "node:child_process";
 import { readFileSync as readFileSync56 } from "node:fs";
-import { homedir as homedir53, userInfo as userInfo4 } from "node:os";
+import { homedir as homedir54, userInfo as userInfo4 } from "node:os";
 import { join as join208 } from "node:path";
 function readCcKeychain() {
   if (process.platform !== "darwin") return null;
@@ -525648,7 +526129,7 @@ function readCcFile(ccRoot2) {
   }
 }
 async function importCredentialsHandler(opts) {
-  let ccRoot2 = opts.from ?? join208(homedir53(), LEGACY_DIR4), fromKeychain = readCcKeychain(), fromFile = readCcFile(ccRoot2);
+  let ccRoot2 = opts.from ?? join208(homedir54(), LEGACY_DIR4), fromKeychain = readCcKeychain(), fromFile = readCcFile(ccRoot2);
   if (!fromKeychain && !fromFile) {
     console.log(`No ${SOURCE_BRAND2} credentials found (checked keychain and ${ccRoot2}/.credentials.json).`), process.exitCode = 1;
     return;
@@ -527643,7 +528124,7 @@ var React192, import_jsx_runtime504, init_navStack = __esm({
 
 // build-src/src/sema/config/PluginsHub.tsx
 import { readFileSync as readFileSync57 } from "node:fs";
-import { homedir as homedir54 } from "node:os";
+import { homedir as homedir55 } from "node:os";
 import { join as join209 } from "node:path";
 function listInstalledPluginRows() {
   let plugins = {};
@@ -527677,7 +528158,7 @@ function readJsonSafe(path28) {
   }
 }
 function detectCcPlugins() {
-  let ccRoot2 = process.env.SEMA_CC_ROOT || join209(homedir54(), CC_DIR6), byId = /* @__PURE__ */ new Map(), pluginsField = readJsonSafe(join209(ccRoot2, "plugins", "installed_plugins.json"))?.plugins;
+  let ccRoot2 = process.env.SEMA_CC_ROOT || join209(homedir55(), CC_DIR6), byId = /* @__PURE__ */ new Map(), pluginsField = readJsonSafe(join209(ccRoot2, "plugins", "installed_plugins.json"))?.plugins;
   if (pluginsField && typeof pluginsField == "object")
     for (let [id, v2] of Object.entries(pluginsField)) {
       let entry = Array.isArray(v2) ? v2[0] : v2;
@@ -528312,7 +528793,7 @@ var React194, import_jsx_runtime506, lastTierEditError, init_TiersHub = __esm({
 });
 
 // build-src/src/sema/config/skillsChannels.ts
-import { existsSync as existsSync39, mkdirSync as mkdirSync29, readdirSync as readdirSync16, readFileSync as readFileSync58, realpathSync as realpathSync15, renameSync as renameSync17, statSync as statSync19 } from "node:fs";
+import { existsSync as existsSync39, mkdirSync as mkdirSync29, readdirSync as readdirSync17, readFileSync as readFileSync58, realpathSync as realpathSync15, renameSync as renameSync17, statSync as statSync19 } from "node:fs";
 import { basename as basename72, dirname as dirname96, join as join210 } from "node:path";
 function skillsDirFor(source) {
   return source === "user" ? join210(getClaudeConfigHomeDir(), "skills") : join210(getCwd(), ".sema", "skills");
@@ -528359,7 +528840,7 @@ function listInstalledSkills() {
   for (let source of sources) {
     let dir = skillsDirFor(source), entries;
     try {
-      entries = readdirSync16(dir).filter((n2) => !n2.startsWith("."));
+      entries = readdirSync17(dir).filter((n2) => !n2.startsWith("."));
     } catch {
       continue;
     }
@@ -529221,7 +529702,7 @@ function OnboardWizardBody({
             {
               layers: detected.layers,
               onDone: (summary) => {
-                summary !== null && flow.summary.push(summary), advance(i, nav);
+                summary !== null ? flow.summary.push(summary) : writeCcImportDeclinedMarker(), advance(i, nav);
               }
             }
           )
@@ -530659,7 +531140,7 @@ Usage: sema --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("sema 1.0.80", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
+  }).version("sema 1.0.82", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).psHandler([]), process.exit(process.exitCode ?? 0);
   }), program2.command("logs [id]").description("Print a background session's recent terminal output").action(async (id) => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).logsHandler(id, []), process.exit(process.exitCode ?? 0);
@@ -530667,7 +531148,7 @@ Usage: sema --remote "your task description"`, () => gracefulShutdown(1));
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).attachHandler(id, []), process.exit(process.exitCode ?? 0);
   }), program2.command("kill [id]").description("Terminate a background session").action(async (id) => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).killHandler(id, []), process.exit(process.exitCode ?? 0);
-  }), program2.addOption(new Option("--brief", "Enable SendUserMessage tool for agent-to-user communication")), program2.addOption(new Option("--ax-screen-reader", "Render screen-reader friendly output (flat text, no decorative borders or animations).")), program2.addOption(new Option("--enable-auto-mode", "Opt in to auto mode").hideHelp()), program2.addOption(new Option("--agent-id <id>", "Teammate agent ID").hideHelp()), program2.addOption(new Option("--agent-name <name>", "Teammate display name").hideHelp()), program2.addOption(new Option("--team-name <name>", "Team name for swarm coordination").hideHelp()), program2.addOption(new Option("--agent-color <color>", "Teammate UI color").hideHelp()), program2.addOption(new Option("--plan-mode-required", "Require plan mode before implementation").hideHelp()), program2.addOption(new Option("--parent-session-id <id>", "Parent session ID for analytics correlation").hideHelp()), program2.addOption(new Option("--teammate-mode <mode>", 'How to spawn teammates: "tmux", "iterm2", "in-process", or "auto"').choices(["auto", "tmux", "iterm2", "in-process"]).hideHelp()), program2.addOption(new Option("--agent-type <type>", "Custom agent type for this teammate").hideHelp()), program2.addOption(new Option("--sdk-url <url>", "Use remote WebSocket endpoint for SDK I/O streaming (only with -p and stream-json format)").hideHelp()), program2.addOption(new Option("--teleport [session]", "Resume a teleport session, optionally specify session ID").hideHelp()), program2.addOption(new Option("--cloud [description|session_id|url]", "Create a cloud session with the given description, or attach to an existing one by session ID or claude.ai/code URL").hideHelp()), program2.addOption(new Option("--remote [description|session_id|url]", "Deprecated alias for --cloud").hideHelp()), program2.addOption(new Option("--remote-control [name]", "Start an interactive session with Remote Control enabled (optionally named)").argParser((value) => value || !0)), program2.addOption(new Option("--rc [name]", "Alias for --remote-control").argParser((value) => value || !0).hideHelp()), program2.option("--remote-control-session-name-prefix <prefix>", "Prefix for auto-generated Remote Control session names (default: hostname)"), profileCheckpoint("run_main_options_built");
+  }), program2.addOption(new Option("--brief", "Enable SendUserMessage tool for agent-to-user communication")), program2.addOption(new Option("--ax-screen-reader", "Render screen-reader friendly output (flat text, no decorative borders or animations).")), program2.option("--agent-teams", "Enable agent teams: named persistent teammates with a shared task list (experimental, off by default)", () => !0), program2.addOption(new Option("--enable-auto-mode", "Opt in to auto mode").hideHelp()), program2.addOption(new Option("--agent-id <id>", "Teammate agent ID").hideHelp()), program2.addOption(new Option("--agent-name <name>", "Teammate display name").hideHelp()), program2.addOption(new Option("--team-name <name>", "Team name for swarm coordination").hideHelp()), program2.addOption(new Option("--agent-color <color>", "Teammate UI color").hideHelp()), program2.addOption(new Option("--plan-mode-required", "Require plan mode before implementation").hideHelp()), program2.addOption(new Option("--parent-session-id <id>", "Parent session ID for analytics correlation").hideHelp()), program2.addOption(new Option("--teammate-mode <mode>", 'How to spawn teammates: "tmux", "iterm2", "in-process", or "auto"').choices(["auto", "tmux", "iterm2", "in-process"]).hideHelp()), program2.addOption(new Option("--agent-type <type>", "Custom agent type for this teammate").hideHelp()), program2.addOption(new Option("--sdk-url <url>", "Use remote WebSocket endpoint for SDK I/O streaming (only with -p and stream-json format)").hideHelp()), program2.addOption(new Option("--teleport [session]", "Resume a teleport session, optionally specify session ID").hideHelp()), program2.addOption(new Option("--cloud [description|session_id|url]", "Create a cloud session with the given description, or attach to an existing one by session ID or claude.ai/code URL").hideHelp()), program2.addOption(new Option("--remote [description|session_id|url]", "Deprecated alias for --cloud").hideHelp()), program2.addOption(new Option("--remote-control [name]", "Start an interactive session with Remote Control enabled (optionally named)").argParser((value) => value || !0)), program2.addOption(new Option("--rc [name]", "Alias for --remote-control").argParser((value) => value || !0).hideHelp()), program2.option("--remote-control-session-name-prefix <prefix>", "Prefix for auto-generated Remote Control session names (default: hostname)"), profileCheckpoint("run_main_options_built");
   let isPrintMode = process.argv.includes("-p") || process.argv.includes("--print"), isCcUrl = process.argv.some((a) => a.startsWith("cc://") || a.startsWith("cc+unix://"));
   if (isPrintMode && !isCcUrl)
     return profileCheckpoint("run_before_parse"), await program2.parseAsync(process.argv), profileCheckpoint("run_after_parse"), program2;
@@ -531178,7 +531659,7 @@ Usage: sema --remote "your task description"`, () => gracefulShutdown(1));
         let after = installedVersion2();
         console.log(`sema ${cur ?? "unknown"} \u2192 ${after ?? "unknown"}${cur === after ? " (forced reinstall, same version)" : ""}`);
         let { finalizeEngineSwapAfterUpdate: finalizeEngineSwapAfterUpdate2 } = await Promise.resolve().then(() => (init_semaUpdater(), semaUpdater_exports));
-        await finalizeEngineSwapAfterUpdate2(after ?? latest), process.exit(0);
+        await finalizeEngineSwapAfterUpdate2(after ?? latest), console.log("Run 'sema doctor' to verify your configuration on the new version."), process.exit(0);
       }
     }
     let {
@@ -532272,7 +532753,7 @@ var TrustDialog_exports = {};
 __export(TrustDialog_exports, {
   TrustDialog: () => TrustDialog
 });
-import { homedir as homedir55 } from "os";
+import { homedir as homedir56 } from "os";
 function TrustDialog(t0) {
   let $3 = (0, import_compiler_runtime350.c)(33), {
     onDone,
@@ -532303,7 +532784,7 @@ function TrustDialog(t0) {
   $3[11] !== commands ? (t11 = commands?.some(_temp437) ?? !1, $3[11] = commands, $3[12] = t11) : t11 = $3[12];
   let hasSkillsBash = t11, hasAnyBashExecution = bashSettingSources.length > 0 || hasSlashCommandBash || hasSkillsBash, hasTrustDialogAccepted = checkHasTrustDialogAccepted(), t12, t13;
   $3[13] !== hasAnyBashExecution ? (t12 = () => {
-    let isHomeDir = homedir55() === getCwd();
+    let isHomeDir = homedir56() === getCwd();
   }, t13 = [hasMcpServers, hasHooks2, hasAnyBashExecution, hasApiKeyHelper2, hasAwsCommands2, hasGcpCommands2, hasOtelHeadersHelper2, hasDangerousEnvVars2], $3[13] = hasAnyBashExecution, $3[14] = t12, $3[15] = t13) : (t12 = $3[14], t13 = $3[15]), import_react350.default.useEffect(t12, t13);
   let t14;
   $3[16] !== hasAnyBashExecution || $3[17] !== onDone ? (t14 = function(value) {
@@ -532311,7 +532792,7 @@ function TrustDialog(t0) {
       gracefulShutdownSync(1);
       return;
     }
-    let isHomeDir_0 = homedir55() === getCwd();
+    let isHomeDir_0 = homedir56() === getCwd();
     isHomeDir_0 ? setSessionTrustAccepted(!0) : saveCurrentProjectConfig(_temp523), onDone();
   }, $3[16] = hasAnyBashExecution, $3[17] = onDone, $3[18] = t14) : t14 = $3[18];
   let onChange = t14, exitState = useExitOnCtrlCDWithKeybindings(_temp619), t15;
@@ -533256,13 +533737,13 @@ __export(claudeImportHint_exports, {
   maybeEmitClaudeImportHint: () => maybeEmitClaudeImportHint
 });
 import { existsSync as existsSync40 } from "node:fs";
-import { homedir as homedir56 } from "node:os";
+import { homedir as homedir57 } from "node:os";
 import { join as join212 } from "node:path";
 function shouldShowClaudeImportHint() {
   try {
     if (process.env.SEMA_CONFIG_DIR || process.env["CLAUDE_CONFIG_DIR"]) return !1;
-    let legacyDir = join212(homedir56(), ".claude");
-    return !(!existsSync40(legacyDir) || existsSync40(join212(homedir56(), ".sema")) || getGlobalConfig().hasSeenClaudeImportHint);
+    let legacyDir = join212(homedir57(), ".claude");
+    return !(!existsSync40(legacyDir) || existsSync40(join212(homedir57(), ".sema")) || getGlobalConfig().hasSeenClaudeImportHint);
   } catch {
     return !1;
   }
@@ -533656,7 +534137,7 @@ var init_schedulerDaemonWire = __esm({
 });
 
 // build-src/src/sema/scheduler/sessionReap.ts
-import { mkdirSync as mkdirSync32, readdirSync as readdirSync17, readFileSync as readFileSync63, unlinkSync as unlinkSync15, writeFileSync as writeFileSync30 } from "node:fs";
+import { mkdirSync as mkdirSync32, readdirSync as readdirSync18, readFileSync as readFileSync63, unlinkSync as unlinkSync15, writeFileSync as writeFileSync30 } from "node:fs";
 import { dirname as dirname99, join as join215 } from "node:path";
 function isSessionLifetimeRecord(r) {
   return r.lifetime === "session";
@@ -533710,7 +534191,7 @@ function removeSchedulerClaim(storePath, pid = process.pid) {
 function readAliveClaimedSessionIds(storePath, opts = {}) {
   let alive = opts.isPidAlive ?? pidAlive3, dir = schedulerClaimsDir(storePath), out6 = /* @__PURE__ */ new Set(), files2;
   try {
-    files2 = readdirSync17(dir);
+    files2 = readdirSync18(dir);
   } catch {
     return out6;
   }
@@ -534194,11 +534675,11 @@ var init_skillsFill = __esm({
 });
 
 // build-src/src/sema/teamOnboarding.ts
-import { existsSync as existsSync42, readdirSync as readdirSync18 } from "fs";
+import { existsSync as existsSync42, readdirSync as readdirSync19 } from "fs";
 function hasWorkspaceData() {
   try {
     let dir = getProjectsDir2();
-    return existsSync42(dir) ? readdirSync18(dir).length > 0 : !1;
+    return existsSync42(dir) ? readdirSync19(dir).length > 0 : !1;
   } catch {
     return !1;
   }
@@ -535283,7 +535764,7 @@ __export(mcpFill_exports, {
   default: () => mcpFill_default,
   loadCanonicalMcpClients: () => loadCanonicalMcpClients
 });
-import { homedir as homedir57 } from "os";
+import { homedir as homedir58 } from "os";
 import { readFileSync as readFileSync64 } from "fs";
 function builtinDynamicConfig(command8) {
   return { type: "stdio", command: command8, args: [], scope: "dynamic" };
@@ -535296,7 +535777,7 @@ function builtinDynamicClients() {
   }));
 }
 function canonicalGlobalConfigFile() {
-  return `${process.env.HOME ?? process.env.USERPROFILE ?? homedir57()}/.claude.json`;
+  return `${process.env.HOME ?? process.env.USERPROFILE ?? homedir58()}/.claude.json`;
 }
 async function loadCanonicalMcpClients() {
   try {
@@ -537940,7 +538421,7 @@ async function launchReplProduction() {
     let offlineFallback = process.env.SEMA_LIVE_BASEURL ? "unknown" : "opus[1m]";
     initialState.mainLoopModel = resolved ?? offlineFallback;
   }
-  let bypassModeLaunch = !1, settingsRejectionNotices = [];
+  let bypassModeLaunch = !1, settingsRejectionNotices = [], bootFailClosedNotices = [];
   try {
     let argv = process.argv.slice(2), allowDangerouslySkipPermissions = argv.includes("--dangerously-skip-permissions"), pmIdx = argv.indexOf("--permission-mode"), cliPermissionMode = pmIdx >= 0 ? argv[pmIdx + 1] : void 0, { PERMISSION_MODES: PERMISSION_MODES3 } = await Promise.resolve().then(() => (init_PermissionMode(), PermissionMode_exports)), launchMode = ((m2) => !!m2 && PERMISSION_MODES3.includes(m2))(cliPermissionMode) ? cliPermissionMode : allowDangerouslySkipPermissions ? "bypassPermissions" : void 0, settingsDisableBypass = !0;
     try {
@@ -537952,15 +538433,16 @@ async function launchReplProduction() {
         () => getInitialSettings2()?.permissions?.disableBypassPermissionsMode,
         () => mdmMod.filterManagedPolicyErrors(getSettingsWithErrors2().errors)
       );
-      settingsDisableBypass = verdict.disable, verdict.loudReason && process.stderr.write(
-        `[sema] bypassPermissions kept unavailable (fail-closed): ${verdict.loudReason}
-`
-      );
+      if (settingsDisableBypass = verdict.disable, verdict.loudReason) {
+        let msg = `bypassPermissions kept unavailable (fail-closed): ${verdict.loudReason}`;
+        process.stderr.write(`[sema] ${msg}
+`), bootFailClosedNotices.push(msg);
+      }
     } catch (e) {
-      settingsDisableBypass = !0, process.stderr.write(
-        `[sema] settings read failed \u2014 bypassPermissions kept unavailable (fail-closed): ${e instanceof Error ? e.message : String(e)}
-`
-      );
+      settingsDisableBypass = !0;
+      let msg = `settings read failed \u2014 bypassPermissions kept unavailable (fail-closed): ${e instanceof Error ? e.message : String(e)}`;
+      process.stderr.write(`[sema] ${msg}
+`), bootFailClosedNotices.push(msg);
     }
     let isBypassPermissionsModeAvailable = (launchMode === "bypassPermissions" || allowDangerouslySkipPermissions) && !settingsDisableBypass, tpc = initialState.toolPermissionContext;
     launchMode && (tpc.mode = launchMode), tpc.isBypassPermissionsModeAvailable = isBypassPermissionsModeAvailable, bypassModeLaunch = isBypassPermissionsModeAvailable;
@@ -537976,11 +538458,9 @@ async function launchReplProduction() {
         try {
           let deadRules = unenforceableSettingsRules(fullWire);
           if (deadRules.length > 0) {
-            let shown = deadRules.slice(0, 5).map((r) => JSON.stringify(r)).join(", "), more = deadRules.length > 5 ? ` (+${deadRules.length - 5} more)` : "";
-            process.stderr.write(
-              `[sema] permissions: ${deadRules.length} rule(s) use tool names this engine does not recognize and will not be enforced: ${shown}${more} \u2014 update these entries in your settings permissions lists
-`
-            );
+            let shown = deadRules.slice(0, 5).map((r) => JSON.stringify(r)).join(", "), more = deadRules.length > 5 ? ` (+${deadRules.length - 5} more)` : "", msg = `permissions: ${deadRules.length} rule(s) use tool names this engine does not recognize and will not be enforced: ${shown}${more} \u2014 update these entries in your settings permissions lists`;
+            process.stderr.write(`[sema] ${msg}
+`), bootFailClosedNotices.push(msg);
           }
         } catch {
         }
@@ -538274,15 +538754,25 @@ async function launchReplProduction() {
   }
   let { launchRepl: launchRepl2 } = await Promise.resolve().then(() => (init_replLauncher(), replLauncher_exports)), { createSystemMessage: createSystemMessage3 } = await Promise.resolve().then(() => (init_messages4(), messages_exports2));
   try {
-    let { settingsLoudNoticesActive: settingsLoudNoticesActive2 } = await Promise.resolve().then(() => (init_settings2(), settings_exports2)), { resolverLoudNoticesActive: resolverLoudNoticesActive2 } = await Promise.resolve().then(() => (init_resolver2(), resolver_exports));
+    let { settingsLoudNoticesActive: settingsLoudNoticesActive2 } = await Promise.resolve().then(() => (init_settings2(), settings_exports2)), { resolverLoudNoticesActive: resolverLoudNoticesActive2 } = await Promise.resolve().then(() => (init_resolver2(), resolver_exports)), { permissionsLoaderLoudNoticesActive: permissionsLoaderLoudNoticesActive2 } = await Promise.resolve().then(() => (init_permissionsLoader(), permissionsLoader_exports));
     settingsRejectionNotices = [
       ...settingsRejectionNotices,
       ...settingsLoudNoticesActive2(),
-      ...resolverLoudNoticesActive2()
+      ...resolverLoudNoticesActive2(),
+      ...bootFailClosedNotices,
+      ...permissionsLoaderLoudNoticesActive2()
     ];
   } catch (eN) {
     process.env.SEMA_DEBUG && console.error("[sema] settings notices merge soft-failed:", eN);
   }
+  try {
+    let { runCcImportBootAuto: runCcImportBootAuto2 } = await Promise.resolve().then(() => (init_ccImportBootRun(), ccImportBootRun_exports));
+    runCcImportBootAuto2().then((outcome) => {
+      process.env.SEMA_DEBUG && console.error(`[sema] cc-import boot arm: ${outcome}`);
+    });
+  } catch (eI) {
+    process.env.SEMA_DEBUG && console.error("[sema] cc-import boot arm load soft-failed:", eI);
+  }
   await launchRepl2(
     root2,
     {