@sema-agent/cli 1.0.81 → 1.0.83

package/sema-main.js

@@ -39600,8 +39600,8 @@ var require_get_proto = __commonJS({
 var require_hasown = __commonJS({
   "node_modules/hasown/index.js"(exports2, module2) {
     "use strict";
-    var call77 = Function.prototype.call, $hasOwn = Object.prototype.hasOwnProperty, bind2 = require_function_bind();
-    module2.exports = bind2.call(call77, $hasOwn);
+    var call78 = Function.prototype.call, $hasOwn = Object.prototype.hasOwnProperty, bind2 = require_function_bind();
+    module2.exports = bind2.call(call78, $hasOwn);
   }
 });
 
@@ -40775,9 +40775,9 @@ var require_ms = __commonJS({
     }
     function fmtLong(ms) {
       var msAbs = Math.abs(ms);
-      return msAbs >= d4 ? plural5(ms, msAbs, d4, "day") : msAbs >= h ? plural5(ms, msAbs, h, "hour") : msAbs >= m2 ? plural5(ms, msAbs, m2, "minute") : msAbs >= s ? plural5(ms, msAbs, s, "second") : ms + " ms";
+      return msAbs >= d4 ? plural6(ms, msAbs, d4, "day") : msAbs >= h ? plural6(ms, msAbs, h, "hour") : msAbs >= m2 ? plural6(ms, msAbs, m2, "minute") : msAbs >= s ? plural6(ms, msAbs, s, "second") : ms + " ms";
     }
-    function plural5(ms, msAbs, n2, name) {
+    function plural6(ms, msAbs, n2, name) {
       var isPlural = msAbs >= n2 * 1.5;
       return Math.round(ms / n2) + " " + name + (isPlural ? "s" : "");
     }
@@ -46920,6 +46920,13 @@ var EnvironmentVariablesSchema, PermissionsSchema, KILL_SWITCH_KEYS, ExtraKnownM
         semaAutoModeModels: external_exports.array(external_exports.string()).optional().catch(void 0).describe(
           "sema: model allowlist force-enabling auto mode for the listed models (tengu_auto_mode_config.allowModels; exact model IDs or canonical family names). Default (absent/empty) keeps the built-in allowlist. Applies on next shell start."
         ),
+        // agent-teams(具名持久队友族)的 settings 面 opt-in。门本体 = utils/agentSwarmsEnabled.ts
+        // (grep semaAgentTeamsEnabled),三源析取:本键 / env SEMA_CODE_EXPERIMENTAL_AGENT_TEAMS /
+        // --agent-teams flag,任一为真即开,默认关。读的是**用户级** settings.json(不吃
+        // projectSettings —— 起子进程队友的能力不该由 clone 来的仓库替用户打开),boot-only 快照。
+        semaAgentTeamsEnabled: external_exports.boolean().optional().catch(void 0).describe(
+          "sema: opt in to the experimental agent teams feature (named persistent teammates with a shared task list). Default (absent/false) keeps it off. Equivalent to the SEMA_CODE_EXPERIMENTAL_AGENT_TEAMS env var or the --agent-teams flag; any one of the three turns it on. Applies on next shell start."
+        ),
         sshConfigs: external_exports.array(
           external_exports.object({
             id: external_exports.string().describe(
@@ -55605,6 +55612,9 @@ var CONTEXT_LINES, DIFF_TIMEOUT_MS, AMPERSAND_TOKEN, DOLLAR_TOKEN, init_patch =
 });
 
 // node_modules/@sema-agent/client-core/dist/engineErrorCodes.js
+function isLimitsExceededCode(code2) {
+  return typeof code2 == "string" && code2.startsWith(LIMITS_ERROR_CODE_PREFIX);
+}
 function isConfigRefusalCode(code2) {
   return typeof code2 == "string" && code2.startsWith("config.");
 }
@@ -55617,9 +55627,10 @@ function isRewindFamilyCode(code2) {
 function asModelFallbackReason(v2) {
   return v2 === MODEL_FALLBACK_INHERIT_NO_TIER_BINDING ? MODEL_FALLBACK_INHERIT_NO_TIER_BINDING : void 0;
 }
-var LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, USAGE_WINDOW_EXHAUSTED, ENV_LIFETIME_EXPIRED, CONFIG_LIMIT_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_REFUSAL_CODES, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, TOOL_END_INTERRUPTED_CODES, ACTIVE_RUN_BUSY_ERROR_CODE, STOP_PARK_ARBITER_UNREACHABLE, STOP_PARK_RESUME_WON, STOP_NOT_LANDED, STOP_NOT_LOCAL, STOP_PARKED, STOP_CONFLICT_CODES, OUTPUT_INVALID, RESUME_AT_ERROR_CODE_PREFIX, REWIND_ERROR_CODE_PREFIXES, DRAINING_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STREAM_MAX_DURATION, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, init_engineErrorCodes = __esm({
+var LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, LIMITS_ERROR_CODE_PREFIX, USAGE_WINDOW_EXHAUSTED, ENV_LIFETIME_EXPIRED, CONFIG_LIMIT_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_REFUSAL_CODES, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, TOOL_END_INTERRUPTED_CODES, ACTIVE_RUN_BUSY_ERROR_CODE, STOP_PARK_ARBITER_UNREACHABLE, STOP_PARK_RESUME_WON, STOP_NOT_LANDED, STOP_NOT_LOCAL, STOP_PARKED, STOP_CONFLICT_CODES, OUTPUT_INVALID, RESUME_AT_ERROR_CODE_PREFIX, REWIND_ERROR_CODE_PREFIXES, DRAINING_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STREAM_MAX_DURATION, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, init_engineErrorCodes = __esm({
   "node_modules/@sema-agent/client-core/dist/engineErrorCodes.js"() {
-    LIMITS_MAX_TOKENS_EXCEEDED = "limits.max_tokens_exceeded", LIMITS_MAX_COST_EXCEEDED = "limits.max_cost_exceeded", LIMITS_MAX_TURNS_EXCEEDED = "limits.max_turns_exceeded", LIMITS_MAX_WALLTIME_EXCEEDED = "limits.max_walltime_exceeded", USAGE_WINDOW_EXHAUSTED = "usage.window_exhausted", ENV_LIFETIME_EXPIRED = "env.lifetime_expired", CONFIG_LIMIT_INVALID = "config.limit_invalid", CONFIG_STRATEGY_FIND_LIMIT_INVALID = "config.strategy_find_limit_invalid", CONFIG_STRATEGY_MAX_SIZE_INVALID = "config.strategy_max_size_invalid", CONFIG_LIMIT_UNKNOWN_KEY = "config.limit_unknown_key", CONFIG_REFUSAL_CODES = /* @__PURE__ */ new Set([
+    LIMITS_MAX_TOKENS_EXCEEDED = "limits.max_tokens_exceeded", LIMITS_MAX_COST_EXCEEDED = "limits.max_cost_exceeded", LIMITS_MAX_TURNS_EXCEEDED = "limits.max_turns_exceeded", LIMITS_MAX_WALLTIME_EXCEEDED = "limits.max_walltime_exceeded", LIMITS_ERROR_CODE_PREFIX = "limits.";
+    USAGE_WINDOW_EXHAUSTED = "usage.window_exhausted", ENV_LIFETIME_EXPIRED = "env.lifetime_expired", CONFIG_LIMIT_INVALID = "config.limit_invalid", CONFIG_STRATEGY_FIND_LIMIT_INVALID = "config.strategy_find_limit_invalid", CONFIG_STRATEGY_MAX_SIZE_INVALID = "config.strategy_max_size_invalid", CONFIG_LIMIT_UNKNOWN_KEY = "config.limit_unknown_key", CONFIG_REFUSAL_CODES = /* @__PURE__ */ new Set([
       CONFIG_LIMIT_INVALID,
       CONFIG_STRATEGY_FIND_LIMIT_INVALID,
       CONFIG_STRATEGY_MAX_SIZE_INVALID,
@@ -59849,6 +59860,13 @@ function classifyActiveRunBusy(input) {
   let handle2 = typeof input.activeTaskId == "string" && input.activeTaskId.length > 0 ? input.activeTaskId : null;
   return input.errorCode === ACTIVE_RUN_BUSY_ERROR_CODE ? { busy: !0, handle: handle2 } : typeof input.activeTaskId == "string" ? { busy: !0, handle: handle2 } : { busy: !1, handle: handle2 };
 }
+function isGovernanceStopRowText(text2) {
+  let t2 = text2.trimStart();
+  return t2.startsWith(`${RUN_STOPPED_MESSAGE_PREFIX}:`) || t2.startsWith(`${RUN_BLOCKED_MESSAGE_PREFIX}`);
+}
+function isGovernanceTerminal(input) {
+  return input.status === "blocked" || isLimitsExceededCode(input.errorCode) ? !0 : input.errorCode === OUTPUT_INVALID;
+}
 function sanitizeFrameType(type) {
   let flattened = type.replace(/[\u0000-\u001f\u007f-\u009f]/g, "\uFFFD");
   return flattened.length > DROPPED_TYPE_DISPLAY_CAP ? `${flattened.slice(0, DROPPED_TYPE_DISPLAY_CAP)}\u2026` : flattened;
@@ -59942,7 +59960,14 @@ async function* runStreamInner(events3, ctx, handle2 = {}) {
           errorCode: ev.type === "failed" ? ev.errorCode : failedResult?.errorCode,
           activeTaskId
         }), maxTokHint = /max_tokens/i.test(errText3) ? `
-your provider caps max_tokens lower \u2014 lower it in /model (press m, or M to type a value)` : "", busyHandle = busy.handle, rowText = busy.busy ? `This session is locked by an earlier run${busyHandle ? ` (run ${busyHandle})` : ""} that has not been released, so this message was NOT sent. Nothing releases it on its own \u2014 cancel that run (POST /v1/runs/${busyHandle ?? "<id>"}/cancel), or start a new session.` : `API Error: ${errText3}${maxTokHint}`;
+your provider caps max_tokens lower \u2014 lower it in /model (press m, or M to type a value)` : "", governance = isGovernanceTerminal({
+          status: ev.type === "failed" ? void 0 : failedResult?.status,
+          errorCode: ev.type === "failed" ? ev.errorCode : failedResult?.errorCode
+        }), busyHandle = busy.handle, rowText = busy.busy ? `This session is locked by an earlier run${busyHandle ? ` (run ${busyHandle})` : ""} that has not been released, so this message was NOT sent. Nothing releases it on its own \u2014 cancel that run (POST /v1/runs/${busyHandle ?? "<id>"}/cancel), or start a new session.` : governance ? (
+          // blocked 的 errText 自己就以 `Run blocked` 开头(见上方 errText 构造),再套一层
+          // `Run stopped:` 会变成两个前缀叠字;其余治理码用中性前缀 + 引擎原话。
+          `${isGovernanceStopRowText(errText3) ? errText3 : `${RUN_STOPPED_MESSAGE_PREFIX}: ${errText3}`}${maxTokHint}`
+        ) : `API Error: ${errText3}${maxTokHint}`;
         yield {
           session_id: ctx.sessionId ?? "",
           uuid: `err-${Date.now().toString(36)}`,
@@ -59972,7 +59997,7 @@ your provider caps max_tokens lower \u2014 lower it in /model (press m, or M to
     projection.kind === "dropped" && reportDroppedFrame(projection.why, projection.type, ctx);
   }
 }
-var MAIN2, reportedDroppedTypes, DROPPED_TYPE_MEMO_CAP, DROPPED_TYPE_DISPLAY_CAP, inFlightTurns, init_runStream = __esm({
+var MAIN2, RUN_STOPPED_MESSAGE_PREFIX, RUN_BLOCKED_MESSAGE_PREFIX, reportedDroppedTypes, DROPPED_TYPE_MEMO_CAP, DROPPED_TYPE_DISPLAY_CAP, inFlightTurns, init_runStream = __esm({
   "node_modules/@sema-agent/client-core/dist/adapter/runStream.js"() {
     init_types4();
     init_eventToSdkMessage();
@@ -59980,6 +60005,7 @@ var MAIN2, reportedDroppedTypes, DROPPED_TYPE_MEMO_CAP, DROPPED_TYPE_DISPLAY_CAP
     init_subagentContentStore();
     init_engineErrorCodes();
     MAIN2 = { lane: "main" };
+    RUN_STOPPED_MESSAGE_PREFIX = "Run stopped", RUN_BLOCKED_MESSAGE_PREFIX = "Run blocked";
     reportedDroppedTypes = /* @__PURE__ */ new Set(), DROPPED_TYPE_MEMO_CAP = 64, DROPPED_TYPE_DISPLAY_CAP = 60;
     inFlightTurns = 0;
   }
@@ -60006,6 +60032,21 @@ function askParkForeignGateKind(row2) {
   let kind = typeof row2.gateKind == "string" && row2.gateKind.length > 0 ? row2.gateKind : null;
   return kind !== null && !ASK_PARK_GATE_KINDS.includes(kind) ? kind : null;
 }
+function selfHealSubmissionDisposition(outcome) {
+  switch (outcome.kind) {
+    case "decision-pending":
+      return "held-for-decision";
+    case "ask-reopened":
+    case "plan-review-reopened":
+      return "held-for-decision";
+    case "running-cancelled":
+      return "resending";
+    case "running-steered":
+      return "handed-off";
+    default:
+      return "not-delivered";
+  }
+}
 function sessionOpts(deps2) {
   let sessionId = deps2?.sessionId;
   return typeof sessionId == "string" && sessionId.length > 0 ? { session: sessionId } : {};
@@ -60229,10 +60270,12 @@ function decidePathClause(signal) {
 function governanceOriginClause(signal) {
   return signal?.pendingGate?.governanceForced === !0 ? " That gate is enforced by this deployment's governance policy, not by a permission rule you set." : "";
 }
-function activeRunSelfHealRow(outcome, signal, copy2) {
+function activeRunSelfHealRow(outcome, signal, copy2, origin2) {
   let override = copy2?.rowFor?.(outcome, signal);
   if (typeof override == "string")
     return override;
+  if (origin2 === "injected")
+    return injectedSubmissionRow(outcome);
   let base = activeRunSelfHealBaseRow(outcome, signal, copy2?.wayOut ?? DEFAULT_WAY_OUT);
   switch (outcome.kind) {
     // 这两条是「用户此刻卡住了、而且没有别的把手」的结局 —— wire 给的 decide 入口在这里才有用。
@@ -60245,6 +60288,19 @@ function activeRunSelfHealRow(outcome, signal, copy2) {
       return base + governanceOriginClause(signal);
   }
 }
+function injectedSubmissionRow(outcome) {
+  let handle2 = "taskId" in outcome && outcome.taskId ? ` (run ${outcome.taskId})` : "";
+  switch (selfHealSubmissionDisposition(outcome)) {
+    case "held-for-decision":
+      return `A system notification could not be delivered while an earlier turn${handle2} is waiting on a decision \u2014 sema kept it queued and will deliver it after you answer the open card.`;
+    case "resending":
+      return `A system notification was held while the earlier run${handle2} was cancelled; sema is delivering it now.`;
+    case "handed-off":
+      return `A system notification was handed to the run that is already working${handle2} instead of starting a new turn \u2014 watch that run for what it does with it.`;
+    case "not-delivered":
+      return `A system notification was NOT delivered: this session is still held by an earlier run${handle2} and sema could not put a decision for it on screen, so it did not retry. The model was not told about it.`;
+  }
+}
 function activeRunSelfHealBaseRow(outcome, signal, wayOut) {
   switch (outcome.kind) {
     case "decision-pending":
@@ -62391,8 +62447,8 @@ function projectActivity(beats) {
       continue;
     let key = typeof b3.toolCallId == "string" && b3.toolCallId ? b3.toolCallId : `#${anon++}`;
     byCall.has(key) || order2.push(key);
-    let prev = byCall.get(key), arg = typeof b3.arg == "string" && b3.arg.trim() ? oneLineSummary(b3.arg.trim()) : prev?.summary, call77 = { name };
-    arg && (call77.summary = arg), byCall.set(key, { ...prev, ...call77 });
+    let prev = byCall.get(key), arg = typeof b3.arg == "string" && b3.arg.trim() ? oneLineSummary(b3.arg.trim()) : prev?.summary, call78 = { name };
+    arg && (call78.summary = arg), byCall.set(key, { ...prev, ...call78 });
   }
   return order2.map((k2) => byCall.get(k2)).filter((c2) => !!c2);
 }
@@ -68193,6 +68249,7 @@ __export(dist_exports, {
   IDLE_FLUSH_MS: () => IDLE_FLUSH_MS,
   INTERACTIVE_WAY_OUT: () => INTERACTIVE_WAY_OUT,
   INTERNAL_SDK_ARM_TYPES: () => INTERNAL_SDK_ARM_TYPES,
+  LIMITS_ERROR_CODE_PREFIX: () => LIMITS_ERROR_CODE_PREFIX,
   LIMITS_MAX_COST_EXCEEDED: () => LIMITS_MAX_COST_EXCEEDED,
   LIMITS_MAX_TOKENS_EXCEEDED: () => LIMITS_MAX_TOKENS_EXCEEDED,
   LIMITS_MAX_TURNS_EXCEEDED: () => LIMITS_MAX_TURNS_EXCEEDED,
@@ -68250,6 +68307,8 @@ __export(dist_exports, {
   RETAIN_BACKGROUND_ENV: () => RETAIN_BACKGROUND_ENV,
   REWIND_ERROR_CODE_PREFIXES: () => REWIND_ERROR_CODE_PREFIXES,
   RUNNING_STATES: () => RUNNING_STATES,
+  RUN_BLOCKED_MESSAGE_PREFIX: () => RUN_BLOCKED_MESSAGE_PREFIX,
+  RUN_STOPPED_MESSAGE_PREFIX: () => RUN_STOPPED_MESSAGE_PREFIX,
   SANDBOX_CASCADE_CONFLICT_400_ANCHOR: () => SANDBOX_CASCADE_CONFLICT_400_ANCHOR,
   SANDBOX_K8S_ONLY_400_ANCHOR: () => SANDBOX_K8S_ONLY_400_ANCHOR,
   SANDBOX_NO_IMAGE_INDEX_400_ANCHOR: () => SANDBOX_NO_IMAGE_INDEX_400_ANCHOR,
@@ -68566,10 +68625,13 @@ __export(dist_exports, {
   isFromSubagent: () => isFromSubagent,
   isFsApprovalGate: () => isFsApprovalGate,
   isGoalStopHookWireArmed: () => isGoalStopHookWireArmed,
+  isGovernanceStopRowText: () => isGovernanceStopRowText,
+  isGovernanceTerminal: () => isGovernanceTerminal,
   isHitlSafetyErrorLike: () => isHitlSafetyErrorLike,
   isHookNoticeFrame: () => isHookNoticeFrame,
   isInterruptedToolEndCode: () => isInterruptedToolEndCode,
   isKnownWorkflowAgentTaskId: () => isKnownWorkflowAgentTaskId,
+  isLimitsExceededCode: () => isLimitsExceededCode,
   isLocalSessionEvent: () => isLocalSessionEvent,
   isLocalSessionRecord: () => isLocalSessionRecord,
   isLoopbackWireUrl: () => isLoopbackWireUrl,
@@ -68773,6 +68835,7 @@ __export(dist_exports, {
   scenarioForPrint: () => scenarioForPrint,
   scratchpadDirField: () => scratchpadDirField,
   searchPresetTableViolations: () => searchPresetTableViolations,
+  selfHealSubmissionDisposition: () => selfHealSubmissionDisposition,
   selfOrchestrationFromEnv: () => selfOrchestrationFromEnv,
   setLiveModelCatalog: () => setLiveModelCatalog,
   setLiveModelCatalogRefresher: () => setLiveModelCatalogRefresher,
@@ -109772,7 +109835,7 @@ var import_stack_utils, import_jsx_runtime6, cleanupPath, stackUtils, init_Error
 // build-src/src/ink/components/TerminalSizeContext.tsx
 var import_react9, TerminalSizeContext, init_TerminalSizeContext = __esm({
   "build-src/src/ink/components/TerminalSizeContext.tsx"() {
-    import_react9 = __toESM(require_react()), TerminalSizeContext = (0, import_react9.createContext)(null);
+    import_react9 = __toESM(require_react(), 1), TerminalSizeContext = (0, import_react9.createContext)(null);
   }
 });
 
@@ -117242,6 +117305,18 @@ ${ctx}` : line;
   }
   return "Execution error";
 }
+function formatTextModeGovernanceStop(errors2, fallbackTemplate) {
+  if (Array.isArray(errors2)) {
+    let first = errors2.find(
+      (e) => typeof e == "string" && e.trim().length > 0
+    );
+    if (first) {
+      let msg = extractProviderErrorMessage(first.trim());
+      return /^(API Error|Error)\b/i.test(msg) ? msg : `Error: ${msg}`;
+    }
+  }
+  return fallbackTemplate;
+}
 var init_textModeError = __esm({
   "build-src/src/cli/textModeError.ts"() {
   }
@@ -117296,6 +117371,18 @@ var init_probePlan = __esm({
   }
 });
 
+// build-src/src/utils/dispatcherTimeouts.ts
+var LONG_POLL_DISPATCHER_TIMEOUTS, init_dispatcherTimeouts = __esm({
+  "build-src/src/utils/dispatcherTimeouts.ts"() {
+    LONG_POLL_DISPATCHER_TIMEOUTS = {
+      /** 等响应头的上限(HITL 审批挂在这一段:请求发出去了,人还没点)。 */
+      headersTimeout: 216e5,
+      /** 两个 body 分片之间的上限(SSE / 流式响应的静默段)。 */
+      bodyTimeout: 216e5
+    };
+  }
+});
+
 // build-src/src/utils/caCerts.ts
 var caCerts_exports = {};
 __export(caCerts_exports, {
@@ -121100,7 +121187,7 @@ var require_webidl = __commonJS({
       return new TypeError(`${message.header}: ${message.message}`);
     };
     webidl.errors.conversionFailed = function(opts) {
-      let plural5 = opts.types.length === 1 ? "" : " one of", message = `${opts.argument} could not be converted to${plural5}: ${opts.types.join(", ")}.`;
+      let plural6 = opts.types.length === 1 ? "" : " one of", message = `${opts.argument} could not be converted to${plural6}: ${opts.types.join(", ")}.`;
       return webidl.errors.exception({
         header: opts.prefix,
         message
@@ -136156,7 +136243,10 @@ function getTLSFetchOptions() {
       passphrase: tlsConfig.passphrase,
       ...tlsConfig.ca && { ca: tlsConfig.ca }
     },
-    pipelining: 1
+    pipelining: 1,
+    // #270:长挂豁免。缺省 300s 会把 plan_review 这类「挂着等人做决定」的请求单方面掐断
+    // (引擎侧记 499),用户观感 = 审批完没反应。取值理由见 dispatcherTimeouts.ts 头注。
+    ...LONG_POLL_DISPATCHER_TIMEOUTS
   }) };
 }
 function clearMTLSCache() {
@@ -136172,6 +136262,7 @@ var getMTLSConfig, getMTLSAgent, init_mtls = __esm({
     init_memoize();
     init_caCerts();
     init_debug();
+    init_dispatcherTimeouts();
     init_fsOperations();
     getMTLSConfig = memoize_default(() => {
       let config4 = {};
@@ -136392,11 +136483,15 @@ var import_https_proxy_agent2, keepAliveDisabled, getProxyAgent, proxyIntercepto
     init_memoize();
     init_caCerts();
     init_debug();
+    init_dispatcherTimeouts();
     init_envUtils();
     init_mtls();
     keepAliveDisabled = !1;
     getProxyAgent = memoize_default((uri) => {
       let undiciMod = require_undici(), mtlsConfig = getMTLSConfig(), caCerts = getCACertificates(), proxyOptions = {
+        // #270:长挂豁免。EnvHttpProxyAgent 把这两个键透传给它内部的 no-proxy/http/https 三个
+        // 子 agent(缺一条真实路径就等于没修)。取值理由见 dispatcherTimeouts.ts 头注。
+        ...LONG_POLL_DISPATCHER_TIMEOUTS,
         // Override both HTTP and HTTPS proxy with the provided URI
         httpProxy: uri,
         httpsProxy: uri,
@@ -136479,10 +136574,16 @@ async function injectDispatcher(extra) {
       noProxy: process.env.NO_PROXY || process.env.no_proxy,
       connect: { ca }
     };
-    opts.requestTls = { ca }, undici.setGlobalDispatcher(new undici.EnvHttpProxyAgent(opts));
+    opts.requestTls = { ca }, Object.assign(opts, LONG_POLL_DISPATCHER_TIMEOUTS), undici.setGlobalDispatcher(new undici.EnvHttpProxyAgent(opts));
     return;
   }
-  undici.setGlobalDispatcher(new undici.Agent({ connect: { ca: [...tls.rootCertificates, ...extra] } }));
+  undici.setGlobalDispatcher(
+    new undici.Agent({
+      connect: { ca: [...tls.rootCertificates, ...extra] },
+      // #270 同上:无代理臂也是一个真的全局出口,同样不许留在 300s 缺省。
+      ...LONG_POLL_DISPATCHER_TIMEOUTS
+    })
+  );
 }
 async function applyPersistedTlsTrust() {
   try {
@@ -136523,6 +136624,7 @@ async function applySystemTlsTrust() {
 var caPath, builtinRootBodies, init_tlsTrust = __esm({
   "build-src/src/sema/tlsTrust.ts"() {
     init_failOpen();
+    init_dispatcherTimeouts();
     init_envUtils();
     caPath = () => join32(getClaudeConfigHomeDir(), "extra-ca.pem");
   }
@@ -171585,16 +171687,37 @@ var officialUrls, init_officialRegistry = __esm({
 });
 
 // build-src/src/utils/agentSwarmsEnabled.ts
-function isAgentTeamsFlagSet() {
-  return process.argv.includes("--agent-teams");
+function readAgentTeamsSetting() {
+  if (!isSettingSourceEnabled("userSettings")) return !1;
+  try {
+    return getSettingsForSource("userSettings")?.semaAgentTeamsEnabled === !0;
+  } catch {
+    return !1;
+  }
+}
+function argvHasFlagBeforeTerminator(argv, flag) {
+  let terminator = argv.indexOf("--");
+  return (terminator === -1 ? argv : argv.slice(0, terminator)).includes(flag);
+}
+function agentTeamsEnabledFrom(settingEnabled, env5, argv) {
+  return settingEnabled || isEnvTruthy(env5[AGENT_TEAMS_ENV_VAR]) ? !0 : argvHasFlagBeforeTerminator(argv, AGENT_TEAMS_FLAG);
+}
+function agentTeamsSettingCached() {
+  return settingCache === void 0 && (settingCache = readAgentTeamsSetting()), settingCache;
 }
 function isAgentSwarmsEnabled() {
-  return process.env.USER_TYPE === "ant" ? !0 : !(!isEnvTruthy(process.env.SEMA_CODE_EXPERIMENTAL_AGENT_TEAMS) && !isAgentTeamsFlagSet() || !getFeatureValue_CACHED_MAY_BE_STALE2("tengu_amber_flint", !0));
+  return agentTeamsEnabledFrom(
+    agentTeamsSettingCached(),
+    process.env,
+    process.argv
+  );
 }
-var init_agentSwarmsEnabled = __esm({
+var AGENT_TEAMS_ENV_VAR, AGENT_TEAMS_SETTING_KEY, AGENT_TEAMS_FLAG, settingCache, init_agentSwarmsEnabled = __esm({
   "build-src/src/utils/agentSwarmsEnabled.ts"() {
-    init_growthbook_advisor_flag();
     init_envUtils();
+    init_constants2();
+    init_settings2();
+    AGENT_TEAMS_ENV_VAR = "SEMA_CODE_EXPERIMENTAL_AGENT_TEAMS", AGENT_TEAMS_SETTING_KEY = "semaAgentTeamsEnabled", AGENT_TEAMS_FLAG = "--agent-teams";
   }
 });
 
@@ -177483,6 +177606,7 @@ __export(leaderPermissionBridge_exports, {
   registerLeaderSetToolPermissionContext: () => registerLeaderSetToolPermissionContext,
   registerLeaderToolUseConfirmQueue: () => registerLeaderToolUseConfirmQueue,
   setLeaderPendingDecisionCardCount: () => setLeaderPendingDecisionCardCount,
+  subscribeToLeaderPendingDecisionCards: () => subscribeToLeaderPendingDecisionCards,
   unregisterLeaderSetToolPermissionContext: () => unregisterLeaderSetToolPermissionContext,
   unregisterLeaderToolUseConfirmQueue: () => unregisterLeaderToolUseConfirmQueue
 });
@@ -177496,7 +177620,8 @@ function unregisterLeaderToolUseConfirmQueue() {
   registeredSetter = null;
 }
 function setLeaderPendingDecisionCardCount(count3) {
-  pendingDecisionCardCount = Number.isFinite(count3) && count3 > 0 ? count3 : 0;
+  let next = Number.isFinite(count3) && count3 > 0 ? count3 : 0;
+  next !== pendingDecisionCardCount && (pendingDecisionCardCount = next, pendingDecisionCardsChanged.emit());
 }
 function leaderHasPendingDecisionCard() {
   return pendingDecisionCardCount > 0;
@@ -177513,10 +177638,11 @@ function getLeaderSetToolPermissionContext() {
 function unregisterLeaderSetToolPermissionContext() {
   registeredPermissionContextSetter = null;
 }
-var registeredSetter, registeredPermissionContextSetter, pendingDecisionCardCount, init_leaderPermissionBridge = __esm({
+var registeredSetter, registeredPermissionContextSetter, pendingDecisionCardCount, pendingDecisionCardsChanged, subscribeToLeaderPendingDecisionCards, init_leaderPermissionBridge = __esm({
   "build-src/src/utils/swarm/leaderPermissionBridge.ts"() {
+    init_signal();
     registeredSetter = null, registeredPermissionContextSetter = null;
-    pendingDecisionCardCount = 0;
+    pendingDecisionCardCount = 0, pendingDecisionCardsChanged = createSignal(), subscribeToLeaderPendingDecisionCards = pendingDecisionCardsChanged.subscribe;
   }
 });
 
@@ -178059,11 +178185,29 @@ function enqueue(command8) {
   );
 }
 function enqueuePendingNotification(command8) {
-  commandQueue.push({ ...command8, priority: command8.priority ?? "later" }), notifySubscribers(), logOperation(
+  commandQueue.push({ ...command8, priority: command8.priority ?? "later", isMeta: command8.isMeta ?? !0 }), notifySubscribers(), logOperation(
     "enqueue",
     typeof command8.value == "string" ? command8.value : void 0
   );
 }
+function requeueFailedInjection(command8) {
+  if (command8.isMeta !== !0) return !1;
+  let attempts = (command8.requeueCount ?? 0) + 1;
+  return attempts > MAX_INJECTION_REQUEUES ? !1 : (commandQueue.push({
+    ...command8,
+    priority: command8.priority ?? "later",
+    requeueCount: attempts,
+    // 归零推迟预算(1.0.83 扫码异源复审 F3):不归零则到顶件回灌后下一拍闸恒放行,撞同一张
+    // 未答卡即再回灌,自激三圈秒级烧光 requeue 预算丢通知;归零后回灌件重新静止等卡信号。
+    deferCount: 0
+  }), notifySubscribers(), logOperation(
+    "enqueue",
+    typeof command8.value == "string" ? command8.value : void 0
+  ), !0);
+}
+function noteInjectionDeferred(command8) {
+  command8.deferCount = (command8.deferCount ?? 0) + 1;
+}
 function dequeue(filter2) {
   if (commandQueue.length === 0)
     return;
@@ -178175,7 +178319,7 @@ function getCommandsByMaxPriority(maxPriority) {
     (cmd) => PRIORITY_ORDER[cmd.priority ?? "next"] <= threshold2
   );
 }
-var commandQueue, snapshot2, queueChanged, subscribeToCommandQueue, PRIORITY_ORDER, NON_EDITABLE_MODES, init_messageQueueManager = __esm({
+var commandQueue, snapshot2, queueChanged, subscribeToCommandQueue, MAX_INJECTION_REQUEUES, MAX_INJECTION_DEFERRALS, PRIORITY_ORDER, NON_EDITABLE_MODES, init_messageQueueManager = __esm({
   "build-src/src/utils/messageQueueManager.ts"() {
     init_state();
     init_messages4();
@@ -178184,6 +178328,8 @@ var commandQueue, snapshot2, queueChanged, subscribeToCommandQueue, PRIORITY_ORD
     init_signal();
     commandQueue = [], snapshot2 = Object.freeze([]), queueChanged = createSignal();
     subscribeToCommandQueue = queueChanged.subscribe;
+    MAX_INJECTION_REQUEUES = 3;
+    MAX_INJECTION_DEFERRALS = 2;
     PRIORITY_ORDER = {
       now: 0,
       next: 1,
@@ -181919,6 +182065,29 @@ var status, listeners7, fadeTimer, init_engineRuntimeStatus = __esm({
   }
 });
 
+// build-src/src/utils/injectionRequeueLatch.ts
+function beginSubmissionTurn() {
+  let id = nextTurnId++;
+  return activeTurnId = id, id;
+}
+function noteSubmissionHeldForDecision() {
+  if (activeTurnId !== null)
+    for (heldTurnIds.add(activeTurnId); heldTurnIds.size > MAX_HELD_TURNS; ) {
+      let oldest = heldTurnIds.values().next();
+      if (oldest.done) break;
+      heldTurnIds.delete(oldest.value);
+    }
+}
+function consumeSubmissionHeldForDecision(turnId) {
+  let held = heldTurnIds.delete(turnId);
+  return activeTurnId === turnId && (activeTurnId = null), held;
+}
+var nextTurnId, activeTurnId, heldTurnIds, MAX_HELD_TURNS, init_injectionRequeueLatch = __esm({
+  "build-src/src/utils/injectionRequeueLatch.ts"() {
+    nextTurnId = 1, activeTurnId = null, heldTurnIds = /* @__PURE__ */ new Set(), MAX_HELD_TURNS = 32;
+  }
+});
+
 // build-src/src/sema/engineAttachCapabilityGate.ts
 var engineAttachCapabilityGate_exports = {};
 __export(engineAttachCapabilityGate_exports, {
@@ -182306,10 +182475,10 @@ function lockedTokenProvider(profileName) {
       }), lastIssuedRefreshToken = tokens.refreshToken, foreignRotationObserved = !1;
     },
     async clear() {
-      let attempted = lastIssuedRefreshToken, foreign = foreignRotationObserved;
+      let attempted2 = lastIssuedRefreshToken, foreign = foreignRotationObserved;
       await mutateCredentials((creds) => {
         let current5 = creds[profileName];
-        if (!current5 || attempted === void 0 || current5.refreshToken !== attempted || foreign) return !1;
+        if (!current5 || attempted2 === void 0 || current5.refreshToken !== attempted2 || foreign) return !1;
         delete creds[profileName];
       });
     }
@@ -185319,8 +185488,8 @@ Fix: run \`sema doctor\` to diagnose, or restart sema to retry.`
             //    —— 一条中止口的在场与否不该取决于「这一轮有没有铸卡」。顶层形是它的严格超集,
             //    车B 的消费面(deps.signal)逐字不变。
             ...signal ? { signal } : {}
-          });
-          if (yield apiErrorRow(activeRunSelfHealRow(outcome, detectedBusy)), outcome.kind === "running-cancelled" && !signal?.aborted) {
+          }), submissionOrigin = trailingStandaloneMetaUserMessages(params.messages).length > 0 ? "injected" : "user";
+          if (submissionOrigin === "injected" && isMainLaneQuerySource(params.querySource) && selfHealSubmissionDisposition(outcome) === "held-for-decision" && noteSubmissionHeldForDecision(), yield apiErrorRow(activeRunSelfHealRow(outcome, detectedBusy, void 0, submissionOrigin)), outcome.kind === "running-cancelled" && !signal?.aborted) {
             retryStream = !0;
             continue;
           }
@@ -185598,6 +185767,7 @@ var BG_TEAR_MAX_RESENDS, BG_RECOVERY_WAIT_MS, DRAINING_MAX_RETRIES, drainingBack
     init_log2();
     init_engineRuntimeStatus();
     init_activeRunSelfHeal2();
+    init_injectionRequeueLatch();
     BG_TEAR_MAX_RESENDS = 2, BG_RECOVERY_WAIT_MS = 12e4, DRAINING_MAX_RETRIES = 3;
     client = makeMockClient(), clientExplicitlySet = !1;
     seamRewindCapture = !0;
@@ -189726,14 +189896,22 @@ var PROMPT_PREFIX, init_bashClassifier = __esm({
 // build-src/src/utils/permissions/permissionsLoader.ts
 var permissionsLoader_exports = {};
 __export(permissionsLoader_exports, {
+  _resetPermissionsLoaderNoticesForTest: () => _resetPermissionsLoaderNoticesForTest,
   addPermissionRulesToSettings: () => addPermissionRulesToSettings,
   deletePermissionRuleFromSettings: () => deletePermissionRuleFromSettings,
   getPermissionRulesForSource: () => getPermissionRulesForSource,
   loadAllPermissionRulesFromDisk: () => loadAllPermissionRulesFromDisk,
+  permissionsLoaderLoudNoticesActive: () => permissionsLoaderLoudNoticesActive,
   resolveManagedPermissionRuleScope: () => resolveManagedPermissionRuleScope,
   shouldAllowManagedPermissionRulesOnly: () => shouldAllowManagedPermissionRulesOnly,
   shouldShowAlwaysAllowOptions: () => shouldShowAlwaysAllowOptions
 });
+function permissionsLoaderLoudNoticesActive() {
+  return [...loudPermissionsLoaderNotices];
+}
+function _resetPermissionsLoaderNoticesForTest() {
+  loudManagedPolicyDegradationEmitted = !1, loudPermissionsLoaderNotices.length = 0;
+}
 function shouldAllowManagedPermissionRulesOnly() {
   return resolveManagedPermissionRuleScope() !== "all-sources";
 }
@@ -189741,10 +189919,16 @@ function resolveManagedPermissionRuleScope() {
   let health = resolveManagedPolicyLayerHealth(
     () => filterManagedPolicyErrors(getSettingsWithErrors().errors)
   );
-  return health.healthy ? getSettingsForSource("policySettings")?.allowManagedPermissionRulesOnly === !0 ? "managed-only" : "all-sources" : (loudManagedPolicyDegradationEmitted || (loudManagedPolicyDegradationEmitted = !0, process.stderr.write(
-    `[sema] permission rules degraded to policy deny/ask only (fail-closed): ${health.loudReason} \u2014 allow rules from every source (including the user-writable HKCU policy slot) are NOT applied until the managed policy layer reads cleanly
-`
-  )), "degraded");
+  if (!health.healthy) {
+    if (!loudManagedPolicyDegradationEmitted) {
+      loudManagedPolicyDegradationEmitted = !0;
+      let msg = `permission rules degraded to policy deny/ask only (fail-closed): ${health.loudReason} \u2014 allow rules from every source (including the user-writable HKCU policy slot) are NOT applied until the managed policy layer reads cleanly`;
+      process.stderr.write(`[sema] ${msg}
+`), loudPermissionsLoaderNotices.push(msg);
+    }
+    return "degraded";
+  }
+  return getSettingsForSource("policySettings")?.allowManagedPermissionRulesOnly === !0 ? "managed-only" : "all-sources";
 }
 function shouldShowAlwaysAllowOptions() {
   return !shouldAllowManagedPermissionRulesOnly();
@@ -189855,7 +190039,7 @@ function addPermissionRulesToSettings({
     return logError(error51), !1;
   }
 }
-var loudManagedPolicyDegradationEmitted, SUPPORTED_RULE_BEHAVIORS, EDITABLE_SOURCES, init_permissionsLoader = __esm({
+var loudManagedPolicyDegradationEmitted, loudPermissionsLoaderNotices, SUPPORTED_RULE_BEHAVIORS, EDITABLE_SOURCES, init_permissionsLoader = __esm({
   "build-src/src/utils/permissions/permissionsLoader.ts"() {
     init_fileRead();
     init_fsOperations();
@@ -189865,7 +190049,7 @@ var loudManagedPolicyDegradationEmitted, SUPPORTED_RULE_BEHAVIORS, EDITABLE_SOUR
     init_settings2();
     init_settings();
     init_permissionRuleParser();
-    loudManagedPolicyDegradationEmitted = !1;
+    loudManagedPolicyDegradationEmitted = !1, loudPermissionsLoaderNotices = [];
     SUPPORTED_RULE_BEHAVIORS = [
       "allow",
       "deny",
@@ -269485,17 +269669,18 @@ var FINGERPRINT_SALT, init_fingerprint = __esm({
 
 // build-src/src/sema/livePrincipal.ts
 function resolveLivePrincipal() {
-  return normalizeWirePrincipal(process.env.SEMA_LIVE_PRINCIPAL);
+  return normalizeWirePrincipal(process.env.SEMA_LIVE_PRINCIPAL) ?? SINGLE_TENANT_DEFAULT;
 }
 function resolveFleetPrincipal() {
   return normalizeWirePrincipal(process.env.SEMA_FLEET_PRINCIPAL) ?? resolveLivePrincipal();
 }
 function describeLivePrincipal() {
-  return resolveLivePrincipal() ?? "absent(owner-null)";
+  return resolveLivePrincipal();
 }
-var init_livePrincipal = __esm({
+var SINGLE_TENANT_DEFAULT, init_livePrincipal = __esm({
   "build-src/src/sema/livePrincipal.ts"() {
     init_dist();
+    SINGLE_TENANT_DEFAULT = "default";
   }
 });
 
@@ -295468,6 +295653,10 @@ var init_systemPromptType = __esm({
 });
 
 // build-src/src/stubs/bun-bundle.js
+var bun_bundle_exports = {};
+__export(bun_bundle_exports, {
+  feature: () => feature
+});
 function feature(flag) {
   return ON.has(flag);
 }
@@ -300243,7 +300432,7 @@ async function compactConversation(messages, context3, cacheSafeParams, suppress
       };
     }
     if (summary) {
-      if (startsWithApiErrorPrefix(summary))
+      if (startsWithApiErrorPrefix(summary) || isGovernanceStopRowText(summary))
         throw new Error(summary);
     } else throw logForDebugging(
       `Compact failed: no summary text in response. Response: ${jsonStringify(summaryResponse)}`,
@@ -300427,7 +300616,7 @@ User context: ${userFeedback}` : hookResult.newCustomInstructions ? customInstru
       };
     }
     if (summary) {
-      if (startsWithApiErrorPrefix(summary))
+      if (startsWithApiErrorPrefix(summary) || isGovernanceStopRowText(summary))
         throw {
           ...failureMetadata
         }, new Error(summary);
@@ -300853,6 +301042,7 @@ var POST_COMPACT_MAX_FILES_TO_RESTORE, POST_COMPACT_TOKEN_BUDGET, POST_COMPACT_M
     init_analytics_index();
     init_claude();
     init_errors7();
+    init_dist();
     init_promptCacheBreakDetection();
     init_withRetry();
     init_internalLogging();
@@ -304301,7 +304491,17 @@ var PROVIDER_MANAGED_ENV_VARS, PROVIDER_MANAGED_ENV_PREFIXES, DANGEROUS_SHELL_SE
       "SEMA_CODE_DISABLE_NONESSENTIAL_TRAFFIC",
       "SEMA_CODE_DISABLE_TERMINAL_TITLE",
       "SEMA_CODE_ENABLE_TELEMETRY",
-      "SEMA_CODE_EXPERIMENTAL_AGENT_TEAMS",
+      // 🔴 sema 分歧(安全收紧类,cc-divergences 已登记;#287 / C-R13,对抗复审 finding):CC 把
+      // agent-teams 的 opt-in env 放在这张**项目可写**的允许表里,于是 clone 来的仓库只要在
+      // `.sema/settings.json` 的 `env` 块写一行,就能替用户挂上具名队友族(TeamCreate/TeamDelete/
+      // SendMessage + 起子进程/worktree 的队友任务)—— 把 agentSwarmsEnabled 那道「只认用户级 settings
+      // 且服从 --setting-sources」的隔离整条绕过去。这类「能起进程、能改状态」的能力位不属于
+      // 「项目可安全设置」的语义,故移出本表。
+      // 影响面两条,都朝更紧的方向:①applySafeConfigEnvironmentVariables 的合并层不再从
+      // project/local 注入它(受信源 user/flag/policy 走 TRUSTED 循环灌全部键,不受影响 ⇒ 用户级
+      // `env` 块照常生效);②bashPermissions 的前缀跳过表同源 —— 带该前缀的命令不再被当成
+      // 「可忽略的安全赋值」去匹配 allow 规则,退回询问。
+      // 'SEMA_CODE_EXPERIMENTAL_AGENT_TEAMS' —— 见上,刻意不在册。
       "SEMA_CODE_IDE_SKIP_AUTO_INSTALL",
       "SEMA_CODE_MAX_OUTPUT_TOKENS",
       "SEMA_CODE_SKIP_BEDROCK_AUTH",
@@ -305873,14 +306073,12 @@ var EN_MESSAGES, init_messages_en = __esm({
       "onboard.station.mcp": "MCP servers",
       "onboard.station.skills": "Skills",
       "onboard.station.plugins": "Plugins",
-      "onboard.station.rules": "Permission rules",
       // ── onboard: per-station "you can change this anytime" blurbs ─────────────────────────────
       "onboard.blurb.model": "Add the model(s) sema should use \u2014 you can change this anytime with `sema config model`.",
       "onboard.blurb.tiers": "Bind your models to tiers (pro drives everyday work, flash the cheap volume) and pick the default tier \u2014 you can change this anytime with `sema config tiers`.",
       "onboard.blurb.mcp": "Import MCP servers \u2014 you can change this anytime with `sema config mcp`.",
       "onboard.blurb.skills": "Import skills \u2014 you can change this anytime with `sema config skills`.",
       "onboard.blurb.plugins": "Install plugins \u2014 you can change this anytime with `sema config plugins`.",
-      "onboard.blurb.rules": "Import the commands you already allow in Claude Code, so sema stops asking about them \u2014 you can review them anytime with `/permissions`.",
       // ── onboard: the theme station's own copy (the first thing a first-run user reads) ─────────
       "onboard.welcome.title": "\u273B Welcome to Sema",
       "onboard.welcome.tagline": "One shell, your whole fleet \u2014 local engine autostart, multi-agent orchestration, cloud when you want it.",
@@ -305989,14 +306187,12 @@ var ZH_MESSAGES, init_messages_zh = __esm({
       "onboard.station.mcp": "MCP \u670D\u52A1\u5668",
       "onboard.station.skills": "\u6280\u80FD",
       "onboard.station.plugins": "\u63D2\u4EF6",
-      "onboard.station.rules": "\u6743\u9650\u89C4\u5219",
       // ── onboard:各站「随时可改」说明行 ──────────────────────────────────────────────────────
       "onboard.blurb.model": "\u6DFB\u52A0 sema \u8981\u7528\u7684\u6A21\u578B \u2014\u2014 \u4E4B\u540E\u968F\u65F6\u53EF\u7528 `sema config model` \u4FEE\u6539\u3002",
       "onboard.blurb.tiers": "\u628A\u6A21\u578B\u7ED1\u5230\u5404\u4E2A\u6863\u4F4D(pro \u8DD1\u65E5\u5E38\u3001flash \u8DD1\u4FBF\u5B9C\u7684\u91CF),\u5E76\u9009\u4E00\u4E2A\u9ED8\u8BA4\u6863 \u2014\u2014 \u4E4B\u540E\u968F\u65F6\u53EF\u7528 `sema config tiers` \u4FEE\u6539\u3002",
       "onboard.blurb.mcp": "\u5BFC\u5165 MCP \u670D\u52A1\u5668 \u2014\u2014 \u4E4B\u540E\u968F\u65F6\u53EF\u7528 `sema config mcp` \u4FEE\u6539\u3002",
       "onboard.blurb.skills": "\u5BFC\u5165\u6280\u80FD \u2014\u2014 \u4E4B\u540E\u968F\u65F6\u53EF\u7528 `sema config skills` \u4FEE\u6539\u3002",
       "onboard.blurb.plugins": "\u5B89\u88C5\u63D2\u4EF6 \u2014\u2014 \u4E4B\u540E\u968F\u65F6\u53EF\u7528 `sema config plugins` \u4FEE\u6539\u3002",
-      "onboard.blurb.rules": "\u628A\u4F60\u5728 Claude Code \u91CC\u5DF2\u7ECF\u5141\u8BB8\u7684\u547D\u4EE4\u5BFC\u8FDB\u6765,sema \u5C31\u4E0D\u518D\u4E3A\u5B83\u4EEC\u5F39\u7A97\u8BE2\u95EE \u2014\u2014 \u968F\u65F6\u53EF\u7528 `/permissions` \u67E5\u770B\u3002",
       // ── onboard:主题站文案 ─────────────────────────────────────────────────────────────────
       "onboard.welcome.title": "\u273B \u6B22\u8FCE\u4F7F\u7528 Sema",
       "onboard.welcome.tagline": "\u4E00\u4E2A\u58F3,\u7BA1\u4F4F\u4F60\u7684\u6574\u652F\u8230\u961F \u2014\u2014 \u672C\u5730\u5F15\u64CE\u81EA\u542F\u3001\u591A\u667A\u80FD\u4F53\u7F16\u6392,\u60F3\u4E0A\u4E91\u7684\u65F6\u5019\u518D\u4E0A\u4E91\u3002",
@@ -317775,7 +317971,7 @@ function useClaudeAiLimits() {
 }
 var import_react69, init_claudeAiLimitsHook = __esm({
   "build-src/src/services/claudeAiLimitsHook.ts"() {
-    import_react69 = __toESM(require_react());
+    import_react69 = __toESM(require_react(), 1);
     init_claudeAiLimits();
   }
 });
@@ -317936,7 +318132,7 @@ function AssistantTextMessage(t0) {
       return $3[14] === /* @__PURE__ */ Symbol.for("react.memo_cache_sentinel") ? (t2 = /* @__PURE__ */ (0, import_jsx_runtime96.jsx)(MessageResponse, { height: 1, children: /* @__PURE__ */ (0, import_jsx_runtime96.jsx)(InterruptedByUser, {}) }), $3[14] = t2) : t2 = $3[14], t2;
     }
     default: {
-      if (startsWithApiErrorPrefix(text2)) {
+      if (startsWithApiErrorPrefix(text2) || isGovernanceStopRowText(text2)) {
         let truncated = !verbose && text2.trim().length > MAX_API_ERROR_CHARS, t22 = text2 === API_ERROR_MESSAGE_PREFIX ? `${API_ERROR_MESSAGE_PREFIX}: Please wait a moment and try again.` : truncated ? text2.trim().slice(0, MAX_API_ERROR_CHARS) + "\u2026" : text2.trim(), t32;
         if ($3[15] !== t22) {
           let apiErrSplit = splitApiErrorSupplement(t22);
@@ -348161,26 +348357,26 @@ function formatIncomingCallsResult(result, cwd5) {
   let lines = [
     `Found ${result.length} incoming ${plural(result.length, "call")}:`
   ], byFile = /* @__PURE__ */ new Map();
-  for (let call77 of result) {
-    if (!call77.from) {
+  for (let call78 of result) {
+    if (!call78.from) {
       logForDebugging(
         "formatIncomingCallsResult: CallHierarchyIncomingCall has undefined from field",
         { level: "warn" }
       );
       continue;
     }
-    let filePath = formatUri2(call77.from.uri, cwd5), existing = byFile.get(filePath);
-    existing ? existing.push(call77) : byFile.set(filePath, [call77]);
+    let filePath = formatUri2(call78.from.uri, cwd5), existing = byFile.get(filePath);
+    existing ? existing.push(call78) : byFile.set(filePath, [call78]);
   }
   for (let [filePath, calls] of byFile) {
     lines.push(`
 ${filePath}:`);
-    for (let call77 of calls) {
-      if (!call77.from)
+    for (let call78 of calls) {
+      if (!call78.from)
         continue;
-      let kind = symbolKindToString(call77.from.kind), line = call77.from.range.start.line + 1, callLine = `  ${call77.from.name} (${kind}) - Line ${line}`;
-      if (call77.fromRanges && call77.fromRanges.length > 0) {
-        let callSites = call77.fromRanges.map((r) => `${r.start.line + 1}:${r.start.character + 1}`).join(", ");
+      let kind = symbolKindToString(call78.from.kind), line = call78.from.range.start.line + 1, callLine = `  ${call78.from.name} (${kind}) - Line ${line}`;
+      if (call78.fromRanges && call78.fromRanges.length > 0) {
+        let callSites = call78.fromRanges.map((r) => `${r.start.line + 1}:${r.start.character + 1}`).join(", ");
         callLine += ` [calls at: ${callSites}]`;
       }
       lines.push(callLine);
@@ -348195,26 +348391,26 @@ function formatOutgoingCallsResult(result, cwd5) {
   let lines = [
     `Found ${result.length} outgoing ${plural(result.length, "call")}:`
   ], byFile = /* @__PURE__ */ new Map();
-  for (let call77 of result) {
-    if (!call77.to) {
+  for (let call78 of result) {
+    if (!call78.to) {
       logForDebugging(
         "formatOutgoingCallsResult: CallHierarchyOutgoingCall has undefined to field",
         { level: "warn" }
       );
       continue;
     }
-    let filePath = formatUri2(call77.to.uri, cwd5), existing = byFile.get(filePath);
-    existing ? existing.push(call77) : byFile.set(filePath, [call77]);
+    let filePath = formatUri2(call78.to.uri, cwd5), existing = byFile.get(filePath);
+    existing ? existing.push(call78) : byFile.set(filePath, [call78]);
   }
   for (let [filePath, calls] of byFile) {
     lines.push(`
 ${filePath}:`);
-    for (let call77 of calls) {
-      if (!call77.to)
+    for (let call78 of calls) {
+      if (!call78.to)
         continue;
-      let kind = symbolKindToString(call77.to.kind), line = call77.to.range.start.line + 1, callLine = `  ${call77.to.name} (${kind}) - Line ${line}`;
-      if (call77.fromRanges && call77.fromRanges.length > 0) {
-        let callSites = call77.fromRanges.map((r) => `${r.start.line + 1}:${r.start.character + 1}`).join(", ");
+      let kind = symbolKindToString(call78.to.kind), line = call78.to.range.start.line + 1, callLine = `  ${call78.to.name} (${kind}) - Line ${line}`;
+      if (call78.fromRanges && call78.fromRanges.length > 0) {
+        let callSites = call78.fromRanges.map((r) => `${r.start.line + 1}:${r.start.character + 1}`).join(", ");
         callLine += ` [called from: ${callSites}]`;
       }
       lines.push(callLine);
@@ -348777,11 +348973,11 @@ function countUniqueFilesFromCallItems(items) {
   return new Set(validUris).size;
 }
 function countUniqueFilesFromIncomingCalls(calls) {
-  let validUris = calls.map((call77) => call77.from?.uri).filter((uri) => uri);
+  let validUris = calls.map((call78) => call78.from?.uri).filter((uri) => uri);
   return new Set(validUris).size;
 }
 function countUniqueFilesFromOutgoingCalls(calls) {
-  let validUris = calls.map((call77) => call77.to?.uri).filter((uri) => uri);
+  let validUris = calls.map((call78) => call78.to?.uri).filter((uri) => uri);
   return new Set(validUris).size;
 }
 var MAX_LSP_FILE_SIZE_BYTES, inputSchema25, outputSchema21, LSPTool, init_LSPTool = __esm({
@@ -372629,6 +372825,7 @@ var classifierDecisionModule, autoModeStateModule4, CLASSIFIER_FAIL_CLOSED_REFRE
 // build-src/src/utils/permissions/permissionSetup.ts
 var permissionSetup_exports = {};
 __export(permissionSetup_exports, {
+  __resetFactoryDefaultAutoForTests: () => __resetFactoryDefaultAutoForTests,
   checkAndDisableBypassPermissions: () => checkAndDisableBypassPermissions,
   createDisabledBypassPermissionsContext: () => createDisabledBypassPermissionsContext,
   findDangerousClassifierPermissions: () => findDangerousClassifierPermissions,
@@ -372647,8 +372844,10 @@ __export(permissionSetup_exports, {
   isDangerousPowerShellPermission: () => isDangerousPowerShellPermission,
   isDangerousTaskPermission: () => isDangerousTaskPermission,
   isDefaultPermissionModeAuto: () => isDefaultPermissionModeAuto,
+  isFactoryDefaultAutoActive: () => isFactoryDefaultAutoActive,
   isOverlyBroadBashAllowRule: () => isOverlyBroadBashAllowRule,
   isOverlyBroadPowerShellAllowRule: () => isOverlyBroadPowerShellAllowRule,
+  markFactoryDefaultAutoActive: () => markFactoryDefaultAutoActive,
   parseBaseToolsFromCLI: () => parseBaseToolsFromCLI,
   parseToolListFromCLI: () => parseToolListFromCLI,
   prepareContextForPlanMode: () => prepareContextForPlanMode,
@@ -372907,7 +373106,7 @@ function transitionPermissionMode(fromMode, toMode, context3) {
       if (!isAutoModeGateEnabled())
         throw new Error("Cannot transition to auto mode: gate is not enabled");
       autoModeStateModule5?.setAutoModeActive(!0), context3 = stripDangerousPermissionsForAutoMode(context3);
-    } else fromUsesClassifier && !toUsesClassifier && (autoModeStateModule5?.setAutoModeActive(!1), setNeedsAutoModeExitAttachment(!0), context3 = restoreDangerousPermissions(context3));
+    } else fromUsesClassifier && !toUsesClassifier && (autoModeStateModule5?.setAutoModeActive(!1), setNeedsAutoModeExitAttachment(!0), factoryDefaultAutoActive = !1, context3 = restoreDangerousPermissions(context3));
   }
   return fromMode === "plan" && toMode !== "plan" && context3.prePlanMode ? { ...context3, prePlanMode: void 0 } : context3;
 }
@@ -372928,9 +373127,19 @@ function settingsDisableBypassFailClosed() {
     () => filterManagedPolicyErrors(getSettingsWithErrors().errors)
   ).disable;
 }
+function isFactoryDefaultAutoActive() {
+  return factoryDefaultAutoActive;
+}
+function __resetFactoryDefaultAutoForTests() {
+  factoryDefaultAutoActive = !1;
+}
+function markFactoryDefaultAutoActive() {
+  factoryDefaultAutoActive = !0;
+}
 function initialPermissionModeFromCLI({
   permissionModeCli,
-  dangerouslySkipPermissions
+  dangerouslySkipPermissions,
+  factoryDefaultAutoEligible
 }) {
   let settings2 = getSettings_DEPRECATED() || {}, growthBookDisableBypassPermissionsMode = checkStatsigFeatureGate_CACHED_MAY_BE_STALE(
     "tengu_disable_bypass_permissions_mode"
@@ -372952,6 +373161,7 @@ function initialPermissionModeFromCLI({
       { level: "warn" }
     ) : orderedModes.push("auto") : orderedModes.push(settingsMode);
   }
+  factoryDefaultAutoEligible && orderedModes.length === 0 && !autoModeCircuitBrokenSync && !isAutoModeDisabledBySettings() && (orderedModes.push("auto"), factoryDefaultAutoActive = !0);
   let result;
   for (let mode of orderedModes) {
     if (mode === "bypassPermissions" && disableBypassPermissionsMode) {
@@ -373182,7 +373392,7 @@ function isDefaultPermissionModeAuto() {
   return (getSettings_DEPRECATED() || {}).permissions?.defaultMode === "auto";
 }
 function shouldPlanUseAutoMode() {
-  return hasAutoModeOptIn() && isAutoModeGateEnabled() && getUseAutoModeDuringPlan();
+  return (hasAutoModeOptIn() || isFactoryDefaultAutoActive()) && isAutoModeGateEnabled() && getUseAutoModeDuringPlan();
 }
 function prepareContextForPlanMode(context3) {
   let currentMode = context3.mode;
@@ -373211,7 +373421,7 @@ function transitionPlanAutoMode(context3) {
   let want = shouldPlanUseAutoMode(), have = autoModeStateModule5?.isAutoModeActive() ?? !1;
   return want && have ? stripDangerousPermissionsForAutoMode(context3) : !want && !have ? context3 : want ? (autoModeStateModule5?.setAutoModeActive(!0), setNeedsAutoModeExitAttachment(!1), stripDangerousPermissionsForAutoMode(context3)) : (autoModeStateModule5?.setAutoModeActive(!1), setNeedsAutoModeExitAttachment(!0), restoreDangerousPermissions(context3));
 }
-var autoModeStateModule5, AUTO_MODE_ENABLED_DEFAULT, NO_CACHED_AUTO_MODE_CONFIG, init_permissionSetup = __esm({
+var autoModeStateModule5, factoryDefaultAutoActive, AUTO_MODE_ENABLED_DEFAULT, NO_CACHED_AUTO_MODE_CONFIG, init_permissionSetup = __esm({
   "build-src/src/utils/permissions/permissionSetup.ts"() {
     init_state();
     init_cwd();
@@ -373238,6 +373448,7 @@ var autoModeStateModule5, AUTO_MODE_ENABLED_DEFAULT, NO_CACHED_AUTO_MODE_CONFIG,
     init_PermissionUpdate();
     init_permissionRuleParser();
     autoModeStateModule5 = (init_autoModeState(), __toCommonJS(autoModeState_exports));
+    factoryDefaultAutoActive = !1;
     AUTO_MODE_ENABLED_DEFAULT = "disabled";
     NO_CACHED_AUTO_MODE_CONFIG = /* @__PURE__ */ Symbol("no-cached-auto-mode-config");
   }
@@ -401313,15 +401524,14 @@ var sema_brand_default, init_sema_brand = __esm({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.79",
+        version: "1.0.82",
         notes: [
-          "Permissions fail-closed hardening: when the managed policy layer is unreadable (broken managed-settings JSON, EACCES, MDM read failure) your own deny/ask rules and --disallowedTools stay in force \u2014 degraded mode only tightens, never widens",
-          "Approval cards carry org-rule evidence notes end-to-end and sanitize untrusted display fields (subagent identity, rule text) against bidi/control-character spoofing",
-          "Engine 7.24.0 (from 7.22.0)"
+          "Claude Code permission rules are imported automatically on first launch when detected \u2014 no confirmation step, and a one-line notice tells you what was imported; review or roll back anytime in /permissions",
+          "Engine 7.28.0 (from 7.26.0)"
         ]
       },
-      productVersion: "1.0.81",
-      announcement: "sema 1.0.81 \u2014 Steering a specific background agent row now resolves through that row's own recorded run (no more silently steering whichever run happens to be active; a stale row fails honestly with a no-run notice instead). Background-notification trust is now graded per acceptance path and kept with the row, so panel rows never flip state on unproven evidence. Under the hood: the self-test fleet gained a port registry with hard guards, so test tooling can never touch a production engine port."
+      productVersion: "1.0.83",
+      announcement: "sema 1.0.83 \u2014 Auto mode is now the factory default: a fresh start with no permission configuration boots straight into auto (footer shows \u201Cauto mode on\u201D), while any explicit --permission-mode flag or settings defaultMode still wins, and the managed disableAutoMode kill-switch vetoes it at the source. Also fixed: compaction no longer replaces your history with a governance stop line, leaving auto via Shift+Tab fully retires the factory default for the session, and queued system notifications survive an open decision card instead of being dropped."
     };
   }
 });
@@ -405524,15 +405734,14 @@ var require_sema_brand = __commonJS({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.79",
+        version: "1.0.82",
         notes: [
-          "Permissions fail-closed hardening: when the managed policy layer is unreadable (broken managed-settings JSON, EACCES, MDM read failure) your own deny/ask rules and --disallowedTools stay in force \u2014 degraded mode only tightens, never widens",
-          "Approval cards carry org-rule evidence notes end-to-end and sanitize untrusted display fields (subagent identity, rule text) against bidi/control-character spoofing",
-          "Engine 7.24.0 (from 7.22.0)"
+          "Claude Code permission rules are imported automatically on first launch when detected \u2014 no confirmation step, and a one-line notice tells you what was imported; review or roll back anytime in /permissions",
+          "Engine 7.28.0 (from 7.26.0)"
         ]
       },
-      productVersion: "1.0.81",
-      announcement: "sema 1.0.81 \u2014 Steering a specific background agent row now resolves through that row's own recorded run (no more silently steering whichever run happens to be active; a stale row fails honestly with a no-run notice instead). Background-notification trust is now graded per acceptance path and kept with the row, so panel rows never flip state on unproven evidence. Under the hood: the self-test fleet gained a port registry with hard guards, so test tooling can never touch a production engine port."
+      productVersion: "1.0.83",
+      announcement: "sema 1.0.83 \u2014 Auto mode is now the factory default: a fresh start with no permission configuration boots straight into auto (footer shows \u201Cauto mode on\u201D), while any explicit --permission-mode flag or settings defaultMode still wins, and the managed disableAutoMode kill-switch vetoes it at the source. Also fixed: compaction no longer replaces your history with a governance stop line, leaving auto via Shift+Tab fully retires the factory default for the session, and queued system notifications survive an open decision card instead of being dropped."
     };
   }
 });
@@ -412900,27 +413109,27 @@ var collab, collab_default, init_collab2 = __esm({
   }
 });
 
-// build-src/src/commands/team.ts
-var USAGE, WORKFLOW_NAME, TRAMPOLINE, team, team_default, init_team = __esm({
-  "build-src/src/commands/team.ts"() {
+// build-src/src/commands/discuss.ts
+var USAGE, WORKFLOW_NAME, TRAMPOLINE, discuss, discuss_default, init_discuss = __esm({
+  "build-src/src/commands/discuss.ts"() {
     init_dist();
     USAGE = [
-      "Usage: /team <topic> \u2014 start a multi-agent team discussion on the topic.",
-      "Example: /team should we introduce write-through caching for the session store",
+      "Usage: /discuss <topic> \u2014 start a multi-agent discussion on the topic.",
+      "Example: /discuss should we introduce write-through caching for the session store",
       "To browse collaboration-mode templates instead, use /collab."
     ].join(`
-`), WORKFLOW_NAME = "team-discussion", TRAMPOLINE = (topic) => `The user ran /team to start a team discussion. Do this now:
+`), WORKFLOW_NAME = "team-discussion", TRAMPOLINE = (topic) => `The user ran /discuss to start a team discussion. Do this now:
 
 1. Call the Workflow tool with exactly: {"name": "${WORKFLOW_NAME}", "args": {"topic": ${JSON.stringify(topic)}}}. The user explicitly requested this discussion, which authorizes the workflow invocation.
 2. When the workflow finishes, present its final synthesis to the user as your answer.
 
-If the Workflow tool is not available, or the name "${WORKFLOW_NAME}" does not resolve, do NOT pretend a discussion happened: tell the user plainly that team discussions are unavailable in this deployment, then answer the topic yourself as a single agent.`, team = {
+If the Workflow tool is not available, or the name "${WORKFLOW_NAME}" does not resolve, do NOT pretend a discussion happened: tell the user plainly that team discussions are unavailable in this deployment, then answer the topic yourself as a single agent.`, discuss = {
       type: "prompt",
-      name: "team",
+      name: "discuss",
       // 裁项 #5 默认:壳 author 一句入口标签(成本提示,与 whenToUse 语义对齐但不逐字复制)。
-      description: "Start a team discussion (multi-agent, multi-round; cost \u2248 members \xD7 rounds \u2014 not for single factual questions)",
+      description: "Start a multi-agent discussion (multi-round; cost \u2248 members \xD7 rounds \u2014 not for single factual questions)",
       argNames: ["topic"],
-      progressMessage: "starting team discussion",
+      progressMessage: "starting discussion",
       contentLength: 0,
       // dynamic (built per-invocation from the topic)
       source: "builtin",
@@ -412930,10 +413139,201 @@ If the Workflow tool is not available, or the name "${WORKFLOW_NAME}" does not r
           throw new Error(USAGE);
         if (selfOrchestrationFromEnv() === void 0)
           throw new Error(
-            `Team discussions need the workflow engine, but it is disabled (${SELF_ORCHESTRATION_ENV}=${process.env[SELF_ORCHESTRATION_ENV]}). Unset ${SELF_ORCHESTRATION_ENV} (or set it to 1) and restart to enable /team.`
+            `Multi-agent discussions need the workflow engine, but it is disabled (${SELF_ORCHESTRATION_ENV}=${process.env[SELF_ORCHESTRATION_ENV]}). Unset ${SELF_ORCHESTRATION_ENV} (or set it to 1) and restart to enable /discuss.`
           );
         return [{ type: "text", text: TRAMPOLINE(topic) }];
       }
+    }, discuss_default = discuss;
+  }
+});
+
+// build-src/src/utils/teamDiscovery.ts
+import { readdirSync as readdirSync11 } from "fs";
+function discoverTeams(sessionId = getSessionId()) {
+  let entries;
+  try {
+    entries = readdirSync11(getTeamsDir(), { withFileTypes: !0 }).filter((d4) => d4.isDirectory()).map((d4) => d4.name);
+  } catch (e) {
+    let code2 = getErrnoCode(e);
+    return { teams: [], skipped: 0, dirError: code2 === "ENOENT" ? void 0 : code2 ?? "EUNKNOWN" };
+  }
+  let teams = [], skipped = 0;
+  for (let dirName of entries)
+    try {
+      let teamFile = readTeamFile(dirName);
+      if (!teamFile) {
+        skipped++;
+        continue;
+      }
+      let rawMembers = teamFile.members;
+      if (!Array.isArray(rawMembers)) {
+        skipped++;
+        continue;
+      }
+      if (!rawMembers.every(
+        (m2) => m2 !== null && typeof m2 == "object" && typeof m2.name == "string" && (m2.isActive === void 0 || typeof m2.isActive == "boolean")
+      )) {
+        skipped++;
+        continue;
+      }
+      let members = rawMembers.filter((m2) => m2.name !== TEAM_LEAD_NAME), runningCount = members.filter((m2) => m2.isActive !== !1).length, name = typeof teamFile.name == "string" && teamFile.name.length > 0 ? teamFile.name : dirName;
+      teams.push({
+        name,
+        memberCount: members.length,
+        runningCount,
+        idleCount: members.length - runningCount,
+        ledByThisSession: typeof teamFile.leadSessionId == "string" && teamFile.leadSessionId === sessionId
+      });
+    } catch {
+      skipped++;
+      continue;
+    }
+  return teams.sort((a, b3) => a.name.localeCompare(b3.name)), { teams, skipped };
+}
+function getTeammateStatuses(teamName) {
+  let teamFile = readTeamFile(teamName);
+  if (!teamFile)
+    return [];
+  let hiddenPaneIds = new Set(teamFile.hiddenPaneIds ?? []), statuses = [];
+  for (let member of teamFile.members) {
+    if (member.name === "team-lead")
+      continue;
+    let status3 = member.isActive !== !1 ? "running" : "idle";
+    statuses.push({
+      name: member.name,
+      agentId: member.agentId,
+      agentType: member.agentType,
+      model: member.model,
+      prompt: member.prompt,
+      status: status3,
+      color: member.color,
+      tmuxPaneId: member.tmuxPaneId,
+      cwd: member.cwd,
+      worktreePath: member.worktreePath,
+      isHidden: hiddenPaneIds.has(member.tmuxPaneId),
+      backendType: member.backendType && isPaneBackend(member.backendType) ? member.backendType : void 0,
+      mode: member.mode
+    });
+  }
+  return statuses;
+}
+var init_teamDiscovery = __esm({
+  "build-src/src/utils/teamDiscovery.ts"() {
+    init_errors2();
+    init_state();
+    init_types18();
+    init_constants10();
+    init_envUtils();
+    init_teamHelpers();
+  }
+});
+
+// build-src/src/commands/team.ts
+var team_exports = {};
+__export(team_exports, {
+  default: () => team_default,
+  renderTeamPanel: () => renderTeamPanel,
+  runTeamCommand: () => runTeamCommand,
+  userSettingsPathForGuidance: () => userSettingsPathForGuidance
+});
+function sanitizeDiskText(raw2) {
+  let cleaned = raw2.replace(/[\u0000-\u001f\u007f-\u009f]/g, "").replace(/[<>]/g, "").trim();
+  return cleaned.length === 0 ? "(unnamed)" : cleaned.length > 64 ? `${cleaned.slice(0, 64)}\u2026` : cleaned;
+}
+function plural4(n2, word) {
+  return `${n2} ${word}${n2 === 1 ? "" : "s"}`;
+}
+function renderTeamPanel(input) {
+  let { gateOpen, discovery, settingsPath, teamsDir } = input, { teams, skipped, dirError } = discovery;
+  if (!gateOpen)
+    return [
+      "Agent teams: off (experimental, off by default).",
+      "",
+      "Named persistent teammates that share a task list. Turn it on with any one of",
+      "these, then restart sema:",
+      `  \xB7 settings \u2014 add "${AGENT_TEAMS_SETTING_KEY}": true to ${settingsPath}`,
+      `  \xB7 env      \u2014 ${AGENT_TEAMS_ENV_VAR}=1`,
+      `  \xB7 flag     \u2014 sema ${AGENT_TEAMS_FLAG}`,
+      "",
+      "Once it is on, /team lists your teams."
+    ].join(`
+`);
+  let skippedNotice = skipped > 0 ? `${plural4(skipped, "team file")} could not be read and ${skipped === 1 ? "is" : "are"} not listed above \u2014 that is not the same as not having them.` : null;
+  if (dirError !== void 0)
+    return [
+      `Agent teams: on (experimental). Could not read the team directory (${dirError}).`,
+      "",
+      `${teamsDir} is unreadable, so this list may be incomplete \u2014 it does NOT mean you`,
+      "have no teams. Fix the path/permissions and run /team again."
+    ].join(`
+`);
+  if (teams.length === 0)
+    return skippedNotice ? [
+      "Agent teams: on (experimental). No teams could be listed.",
+      "",
+      skippedNotice,
+      `Team files live in ${teamsDir}.`
+    ].join(`
+`) : [
+      "Agent teams: on (experimental). No teams yet.",
+      "",
+      'Ask Claude to create one \u2014 for example: "create a team of two reviewers to go',
+      'over this diff". Claude builds it with the TeamCreate tool.',
+      `Team files live in ${teamsDir}.`
+    ].join(`
+`);
+  let rows2 = teams.map((t2) => {
+    let counts2 = `${plural4(t2.memberCount, "teammate")} (${t2.runningCount} running, ${t2.idleCount} idle)`;
+    return `  \xB7 ${sanitizeDiskText(t2.name)} \u2014 ${counts2}${t2.ledByThisSession ? " \u2014 led by this session" : ""}`;
+  });
+  return [
+    `Agent teams: on (experimental). ${plural4(teams.length, "team")}:`,
+    "",
+    ...rows2,
+    "",
+    ...skippedNotice ? [skippedNotice] : [],
+    // 诚实边界:running/idle 读的是团队台账里的 isActive 心跳位,不是进程存活探测。
+    "Counts come from each team file, not from a live process probe.",
+    `Team files live in ${teamsDir}.`
+  ].join(`
+`);
+}
+function userSettingsPathForGuidance() {
+  return getSettingsFilePathForSource("userSettings") ?? "your user settings.json";
+}
+async function runTeamCommand(args) {
+  if ((args ?? "").trim().length > 0)
+    return { type: "text", value: USAGE2, level: "error" };
+  let gateOpen = isAgentSwarmsEnabled();
+  return {
+    type: "text",
+    value: renderTeamPanel({
+      gateOpen,
+      // 门关时不去扫磁盘:功能没开,列表既无意义也只会让指路文案被噪音淹掉。
+      discovery: gateOpen ? discoverTeams() : { teams: [], skipped: 0 },
+      settingsPath: userSettingsPathForGuidance(),
+      teamsDir: getTeamsDir()
+    })
+  };
+}
+var USAGE2, call44, team, team_default, init_team = __esm({
+  "build-src/src/commands/team.ts"() {
+    init_agentSwarmsEnabled();
+    init_envUtils();
+    init_settings2();
+    init_teamDiscovery();
+    USAGE2 = [
+      "Usage: /team \u2014 show agent-teams status (named persistent teammates).",
+      "It takes no arguments.",
+      "To start a one-off multi-agent discussion instead, use /discuss <topic>."
+    ].join(`
+`);
+    call44 = (args) => runTeamCommand(args), team = {
+      type: "local",
+      name: "team",
+      description: "Show agent-teams status: named persistent teammates and how to enable them (experimental)",
+      supportsNonInteractive: !0,
+      load: () => Promise.resolve({ call: call44 })
     }, team_default = team;
   }
 });
@@ -412941,7 +413341,7 @@ If the Workflow tool is not available, or the name "${WORKFLOW_NAME}" does not r
 // build-src/src/commands/think-back/thinkback.tsx
 var thinkback_exports = {};
 __export(thinkback_exports, {
-  call: () => call44,
+  call: () => call45,
   playAnimation: () => playAnimation
 });
 import { readFile as readFile46 } from "fs/promises";
@@ -413214,7 +413614,7 @@ function ThinkbackFlow(t0) {
   let t8;
   return $3[22] !== handleAction || $3[23] !== hasGenerated || $3[24] !== onDone || $3[25] !== skillDir ? (t8 = /* @__PURE__ */ (0, import_jsx_runtime302.jsx)(ThinkbackMenu, { onDone, onAction: handleAction, skillDir, hasGenerated }), $3[22] = handleAction, $3[23] = hasGenerated, $3[24] = onDone, $3[25] = skillDir, $3[26] = t8) : t8 = $3[26], t8;
 }
-async function call44(onDone) {
+async function call45(onDone) {
   return /* @__PURE__ */ (0, import_jsx_runtime302.jsx)(ThinkbackFlow, { onDone });
 }
 var import_compiler_runtime210, import_react176, import_jsx_runtime302, OFFICIAL_MARKETPLACE_REPO, SKILL_NAME, EDIT_PROMPT, FIX_PROMPT, REGENERATE_PROMPT, init_thinkback = __esm({
@@ -413263,13 +413663,13 @@ var thinkback, think_back_default, init_think_back = __esm({
 // build-src/src/commands/thinkback-play/thinkback-play.ts
 var thinkback_play_exports = {};
 __export(thinkback_play_exports, {
-  call: () => call45
+  call: () => call46
 });
 import { join as join155 } from "path";
 function getPluginId2() {
   return `thinkback@${process.env.USER_TYPE === "ant" ? INTERNAL_MARKETPLACE_NAME : OFFICIAL_MARKETPLACE_NAME}`;
 }
-async function call45() {
+async function call46() {
   let v2Data = loadInstalledPluginsV2(), pluginId = getPluginId2(), installations = v2Data.plugins[pluginId];
   if (!installations || installations.length === 0)
     return {
@@ -413803,6 +414203,16 @@ function collectCcSettingsLayers(cwd5 = process.cwd()) {
   }
   return out6;
 }
+function collectCcUserLayerAt(settingsPath) {
+  let root2;
+  try {
+    root2 = realpathSync9(homedir41());
+  } catch {
+    root2 = homedir41();
+  }
+  let out6 = { layers: [], missing: [] }, res = readOneLayer("userSettings", settingsPath, root2, { refuseSymlinks: !1 });
+  return "layer" in res ? out6.layers.push(res.layer) : out6.missing.push(res.missing), out6;
+}
 function buildToolApprovalRespondBody(input) {
   let wantsPersist = typeof input.persistRule == "string" && input.persistRule !== "" && input.decision !== "deny";
   return {
@@ -413908,6 +414318,10 @@ var init_ccRulesImport = __esm({
 // build-src/src/sema/rules/ccImportMarker.ts
 import { existsSync as existsSync25, readFileSync as readFileSync35, writeFileSync as writeFileSync19, mkdirSync as mkdirSync20 } from "node:fs";
 import { join as join157, dirname as dirname73 } from "node:path";
+import { homedir as homedir42 } from "node:os";
+function ruleStoreWireAvailable(baseUrl) {
+  return persistedRulesLaneAvailable2(baseUrl);
+}
 function markerPath() {
   return join157(getClaudeConfigHomeDir(), "cc-import.json");
 }
@@ -413921,7 +414335,8 @@ function readCcImportMarker() {
     return typeof raw2.importedAt != "string" || typeof raw2.importedCount != "number" ? null : {
       importedAt: raw2.importedAt,
       sourcePath: typeof raw2.sourcePath == "string" ? raw2.sourcePath : "",
-      importedCount: raw2.importedCount
+      importedCount: raw2.importedCount,
+      declined: raw2.declined === !0
     };
   } catch {
     return null;
@@ -413932,6 +414347,28 @@ function writeCcImportMarker(marker) {
   mkdirSync20(dirname73(p), { recursive: !0 }), writeFileSync19(p, JSON.stringify(marker, null, 2) + `
 `, "utf8");
 }
+function detectCcAllowRulesSource() {
+  let ccEnvKey = "CLAUDE_CONFIG_DIR", ccLegacyDir = join157(homedir42(), ".claude"), roots = [process.env[ccEnvKey], ccLegacyDir].filter(
+    (r) => typeof r == "string" && r.length > 0
+  );
+  for (let root2 of roots) {
+    let p = join157(root2, "settings.json");
+    if (existsSync25(p))
+      try {
+        let parsed = JSON.parse(readFileSync35(p, "utf8"));
+        if (typeof parsed != "object" || parsed === null) continue;
+        let perms = parsed.permissions;
+        if (typeof perms != "object" || perms === null) continue;
+        let allow = perms.allow;
+        if (Array.isArray(allow) && allow.length > 0) return p;
+      } catch {
+      }
+  }
+  return null;
+}
+function ccImportBootGate(baseUrl) {
+  return !ruleStoreWireAvailable(baseUrl) || readCcImportMarker() !== null ? null : detectCcAllowRulesSource();
+}
 var init_ccImportMarker = __esm({
   "build-src/src/sema/rules/ccImportMarker.ts"() {
     init_envUtils();
@@ -415242,13 +415679,13 @@ var import_compiler_runtime217, React107, import_react180, import_jsx_runtime312
 // build-src/src/commands/permissions/permissions.tsx
 var permissions_exports3 = {};
 __export(permissions_exports3, {
-  call: () => call46
+  call: () => call47
 });
-var import_jsx_runtime313, call46, init_permissions3 = __esm({
+var import_jsx_runtime313, call47, init_permissions3 = __esm({
   "build-src/src/commands/permissions/permissions.tsx"() {
     init_PermissionRuleList();
     init_messages4();
-    import_jsx_runtime313 = __toESM(require_jsx_runtime(), 1), call46 = async (onDone, context3) => /* @__PURE__ */ (0, import_jsx_runtime313.jsx)(PermissionRuleList, { onExit: onDone, onRetryDenials: (commands) => {
+    import_jsx_runtime313 = __toESM(require_jsx_runtime(), 1), call47 = async (onDone, context3) => /* @__PURE__ */ (0, import_jsx_runtime313.jsx)(PermissionRuleList, { onExit: onDone, onRetryDenials: (commands) => {
       context3.setMessages((prev) => [...prev, createPermissionRetryMessage(commands)]);
     } });
   }
@@ -415271,7 +415708,7 @@ var permissions, permissions_default, init_permissions4 = __esm({
 // build-src/src/commands/plan/plan.tsx
 var plan_exports = {};
 __export(plan_exports, {
-  call: () => call47
+  call: () => call48
 });
 function PlanDisplay(t0) {
   let $3 = (0, import_compiler_runtime218.c)(11), {
@@ -415298,7 +415735,7 @@ function PlanDisplay(t0) {
     t4
   ] }), $3[7] = t2, $3[8] = t3, $3[9] = t4, $3[10] = t5) : t5 = $3[10], t5;
 }
-async function call47(onDone, context3, args) {
+async function call48(onDone, context3, args) {
   let {
     getAppState,
     setAppState
@@ -415401,7 +415838,7 @@ var import_compiler_runtime219, import_jsx_runtime315, init_FastIcon = __esm({
 var fast_exports = {};
 __export(fast_exports, {
   FastModePicker: () => FastModePicker,
-  call: () => call48
+  call: () => call49
 });
 function applyFastMode(enable, setAppState) {
   clearFastModeCooldown(), updateSettingsForSource("userSettings", {
@@ -415534,7 +415971,7 @@ async function handleFastModeShortcut(enable, getAppState, setAppState) {
   } else
     return "Fast mode OFF";
 }
-async function call48(onDone, context3, args) {
+async function call49(onDone, context3, args) {
   if (!isFastModeEnabled())
     return null;
   await prefetchFastModeStatus();
@@ -415705,9 +416142,9 @@ var import_react182, import_jsx_runtime317, init_Passes = __esm({
 // build-src/src/commands/passes/passes.tsx
 var passes_exports = {};
 __export(passes_exports, {
-  call: () => call49
+  call: () => call50
 });
-async function call49(onDone) {
+async function call50(onDone) {
   let isFirstVisit = !getGlobalConfig().hasVisitedPasses;
   if (isFirstVisit) {
     let remaining = getCachedRemainingPasses();
@@ -416025,9 +416462,9 @@ var import_compiler_runtime221, import_react183, import_jsx_runtime319, NEW_TERM
 // build-src/src/commands/privacy-settings/privacy-settings.tsx
 var privacy_settings_exports = {};
 __export(privacy_settings_exports, {
-  call: () => call50
+  call: () => call51
 });
-async function call50(onDone) {
+async function call51(onDone) {
   if (!await isQualifiedForGrove())
     return onDone(FALLBACK_MESSAGE), null;
   let [settingsResult, configResult] = await Promise.all([getGroveSettings(), getGroveNoticeConfig()]);
@@ -417062,14 +417499,14 @@ var import_compiler_runtime225, import_react184, import_jsx_runtime325, init_Hoo
 // build-src/src/commands/hooks/hooks.tsx
 var hooks_exports = {};
 __export(hooks_exports, {
-  call: () => call51
+  call: () => call52
 });
-var import_jsx_runtime326, call51, init_hooks3 = __esm({
+var import_jsx_runtime326, call52, init_hooks3 = __esm({
   "build-src/src/commands/hooks/hooks.tsx"() {
     init_HooksConfigMenu();
     init_analytics_index();
     init_tools2();
-    import_jsx_runtime326 = __toESM(require_jsx_runtime(), 1), call51 = async (onDone, context3) => {
+    import_jsx_runtime326 = __toESM(require_jsx_runtime(), 1), call52 = async (onDone, context3) => {
       let permissionContext = context3.getAppState().toolPermissionContext, toolNames = getTools(permissionContext).map((tool) => tool.name);
       return /* @__PURE__ */ (0, import_jsx_runtime326.jsx)(HooksConfigMenu, { toolNames, onExit: onDone });
     };
@@ -417092,10 +417529,10 @@ var hooks, hooks_default, init_hooks4 = __esm({
 // build-src/src/commands/files/files.ts
 var files_exports2 = {};
 __export(files_exports2, {
-  call: () => call52
+  call: () => call53
 });
 import { relative as relative26 } from "path";
-async function call52(_args, context3) {
+async function call53(_args, context3) {
   let files2 = context3.readFileState ? cacheKeys(context3.readFileState) : [];
   return files2.length === 0 ? { type: "text", value: "No files in context" } : { type: "text", value: `Files in context:
 ${files2.map((file2) => relative26(getCwd(), file2)).join(`
@@ -417233,7 +417670,7 @@ async function getUniqueForkName(baseName) {
     nextNumber++;
   return `${baseName} (Branch ${nextNumber})`;
 }
-async function call53(onDone, context3, args) {
+async function call54(onDone, context3, args) {
   let customTitle = args?.trim() || void 0, originalSessionId = getSessionId();
   try {
     let {
@@ -417303,7 +417740,7 @@ function resolveDurable() {
 function makeLiveBranchDeps() {
   return {
     resolveDurable,
-    localBranch: call53
+    localBranch: call54
   };
 }
 var init_branchDurableLive = __esm({
@@ -417342,14 +417779,14 @@ var agents_exports2 = {};
 __export(agents_exports2, {
   default: () => agents_default
 });
-var WIZARD_REMOVED_TEXT, call54, agents, agents_default, init_agents2 = __esm({
+var WIZARD_REMOVED_TEXT, call55, agents, agents_default, init_agents2 = __esm({
   "build-src/src/commands/agents/index.ts"() {
     WIZARD_REMOVED_TEXT = `The /agents wizard has been removed.
 
 Ask sema to create or update subagents for you (e.g. "create a code-reviewer subagent that ..."),
 or edit the files directly:
   \u2022 .sema/agents/       (this project)
-  \u2022 ~/.sema/agents/     (all projects)`, call54 = async () => ({
+  \u2022 ~/.sema/agents/     (all projects)`, call55 = async () => ({
       type: "text",
       value: WIZARD_REMOVED_TEXT
     }), agents = {
@@ -417357,7 +417794,7 @@ or edit the files directly:
       name: "agents",
       description: "(removed) Ask sema to create/manage subagents, or edit .sema/agents/",
       supportsNonInteractive: !0,
-      load: () => Promise.resolve({ call: call54 })
+      load: () => Promise.resolve({ call: call55 })
     }, agents_default = agents;
   }
 });
@@ -418451,9 +418888,9 @@ For -m/--message and --remote, use the CLI: sema plugin tag --help`;
 // build-src/src/commands/plugin/plugin.tsx
 var plugin_exports = {};
 __export(plugin_exports, {
-  call: () => call55
+  call: () => call56
 });
-async function call55(onDone, context3, args) {
+async function call56(onDone, context3, args) {
   let getSessionContext = () => ({
     readFileState: context3.readFileState,
     bashTools: extractBashToolsFromMessages(context3.messages ?? []),
@@ -418634,12 +419071,12 @@ var init_refresh = __esm({
 // build-src/src/commands/reload-plugins/reload-plugins.ts
 var reload_plugins_exports = {};
 __export(reload_plugins_exports, {
-  call: () => call56
+  call: () => call57
 });
 function n(count3, noun) {
   return `${count3} ${plural(count3, noun)}`;
 }
-var call56, init_reload_plugins = __esm({
+var call57, init_reload_plugins = __esm({
   "build-src/src/commands/reload-plugins/reload-plugins.ts"() {
     init_state();
     init_settingsSync();
@@ -418647,7 +419084,7 @@ var call56, init_reload_plugins = __esm({
     init_refresh();
     init_changeDetector();
     init_stringUtils();
-    call56 = async (_args, context3) => {
+    call57 = async (_args, context3) => {
       let r = await refreshActivePlugins(context3.setAppState), msg = `Reloaded: ${[
         n(r.enabled_count, "plugin"),
         n(r.command_count, "skill"),
@@ -418684,9 +419121,9 @@ var reloadPlugins, reload_plugins_default, init_reload_plugins2 = __esm({
 // build-src/src/commands/rewind/rewind.ts
 var rewind_exports = {};
 __export(rewind_exports, {
-  call: () => call57
+  call: () => call58
 });
-async function call57(_args, context3) {
+async function call58(_args, context3) {
   return context3.openMessageSelector && context3.openMessageSelector(), { type: "skip" };
 }
 var init_rewind = __esm({
@@ -418840,9 +419277,9 @@ var init_heapDumpService = __esm({
 // build-src/src/commands/heapdump/heapdump.ts
 var heapdump_exports = {};
 __export(heapdump_exports, {
-  call: () => call58
+  call: () => call59
 });
-async function call58() {
+async function call59() {
   let result = await performHeapDump();
   return result.success ? {
     type: "text",
@@ -419238,10 +419675,10 @@ var debugHandle, faultQueue, init_bridgeDebug = __esm({
 });
 
 // build-src/src/commands/bridge-kick.ts
-var USAGE2, call59, bridgeKick, bridge_kick_default, init_bridge_kick = __esm({
+var USAGE3, call60, bridgeKick, bridge_kick_default, init_bridge_kick = __esm({
   "build-src/src/commands/bridge-kick.ts"() {
     init_bridgeDebug();
-    USAGE2 = `/bridge-kick <subcommand>
+    USAGE3 = `/bridge-kick <subcommand>
   close <code>              fire ws_closed with the given code (e.g. 1002)
   poll <status> [type]      next poll throws BridgeFatalError(status, type)
   poll transient            next poll throws axios-style rejection (5xx/net)
@@ -419250,7 +419687,7 @@ var USAGE2, call59, bridgeKick, bridge_kick_default, init_bridge_kick = __esm({
   reconnect-session fail    next POST /bridge/reconnect fails
   heartbeat <status>        next heartbeat throws BridgeFatalError(status)
   reconnect                 call reconnectEnvironmentWithSession directly
-  status                    print bridge state`, call59 = async (args) => {
+  status                    print bridge state`, call60 = async (args) => {
       let h = getBridgeDebugHandle();
       if (!h)
         return {
@@ -419265,7 +419702,7 @@ var USAGE2, call59, bridgeKick, bridge_kick_default, init_bridge_kick = __esm({
             type: "text",
             value: `Fired transport close(${code2}). Watch debug.log for [bridge:repl] recovery.`
           }) : { type: "text", value: `close: need a numeric code
-${USAGE2}` };
+${USAGE3}` };
         }
         case "poll": {
           if (a === "transient")
@@ -419283,7 +419720,7 @@ ${USAGE2}` };
             return {
               type: "text",
               value: `poll: need 'transient' or a status code
-${USAGE2}`
+${USAGE3}`
             };
           let errorType = b3 ?? (status3 === 404 ? "not_found_error" : "authentication_error");
           return h.injectFault({
@@ -419352,7 +419789,7 @@ ${USAGE2}`
         case "status":
           return { type: "text", value: h.describe() };
         default:
-          return { type: "text", value: USAGE2 };
+          return { type: "text", value: USAGE3 };
       }
     }, bridgeKick = {
       type: "local",
@@ -419360,16 +419797,16 @@ ${USAGE2}`
       description: "Inject bridge failure states for manual recovery testing",
       isEnabled: () => process.env.USER_TYPE === "ant",
       supportsNonInteractive: !1,
-      load: () => Promise.resolve({ call: call59 })
+      load: () => Promise.resolve({ call: call60 })
     }, bridge_kick_default = bridgeKick;
   }
 });
 
 // build-src/src/commands/version.ts
-var SEMA_PRODUCT_VERSION, call60, version3, version_default, init_version2 = __esm({
+var SEMA_PRODUCT_VERSION, call61, version3, version_default, init_version2 = __esm({
   "build-src/src/commands/version.ts"() {
     init_sema_brand();
-    SEMA_PRODUCT_VERSION = sema_brand_default.productVersion ?? "0.0.0", call60 = async () => ({
+    SEMA_PRODUCT_VERSION = sema_brand_default.productVersion ?? "0.0.0", call61 = async () => ({
       type: "text",
       value: `sema ${SEMA_PRODUCT_VERSION} (CC-compatible base 2.1.187)`
     }), version3 = {
@@ -419378,7 +419815,7 @@ var SEMA_PRODUCT_VERSION, call60, version3, version_default, init_version2 = __e
       description: "Print the version this session is running (not what autoupdate downloaded)",
       isEnabled: () => process.env.USER_TYPE === "ant",
       supportsNonInteractive: !0,
-      load: () => Promise.resolve({ call: call60 })
+      load: () => Promise.resolve({ call: call61 })
     }, version_default = version3;
   }
 });
@@ -419855,10 +420292,10 @@ var import_compiler_runtime228, import_jsx_runtime331, init_SandboxSettings = __
 // build-src/src/commands/sandbox/sandbox-toggle.tsx
 var sandbox_toggle_exports = {};
 __export(sandbox_toggle_exports, {
-  call: () => call61
+  call: () => call62
 });
 import { relative as relative28 } from "path";
-async function call61(onDone, _context, args) {
+async function call62(onDone, _context, args) {
   let themeName = getSettings_DEPRECATED().theme || "light", platform4 = getPlatform();
   if (!SandboxManager2.isSupportedPlatform()) {
     let errorMessage4 = platform4 === "wsl" ? "Error: Sandboxing requires WSL2. WSL1 is not supported." : "Error: Sandboxing is currently only supported on macOS, Linux, and WSL2.", message = color("error", themeName)(errorMessage4);
@@ -419987,7 +420424,7 @@ var PROD_EXTENSION_ID, DEV_EXTENSION_ID, ANT_EXTENSION_ID, init_setupPortable =
 
 // build-src/src/utils/claudeInChrome/setup.ts
 import { chmod as chmod12, mkdir as mkdir40, readFile as readFile50, writeFile as writeFile43 } from "fs/promises";
-import { homedir as homedir42 } from "os";
+import { homedir as homedir43 } from "os";
 import { join as join161 } from "path";
 import { fileURLToPath as fileURLToPath8 } from "url";
 function shouldEnableClaudeInChrome(chromeFlag) {
@@ -420063,7 +420500,7 @@ function setupClaudeInChrome() {
 }
 function getNativeMessagingHostsDirs() {
   if (getPlatform() === "windows") {
-    let home = homedir42(), appData = process.env.APPDATA || join161(home, "AppData", "Local");
+    let home = homedir43(), appData = process.env.APPDATA || join161(home, "AppData", "Local");
     return [join161(appData, "Sema", "ChromeNativeHost")];
   }
   return getAllNativeMessagingHostsDirs().map(({ path: path28 }) => path28);
@@ -420191,7 +420628,7 @@ var CHROME_EXTENSION_RECONNECT_URL, NATIVE_HOST_IDENTIFIER, NATIVE_HOST_MANIFEST
 // build-src/src/commands/chrome/chrome.tsx
 var chrome_exports = {};
 __export(chrome_exports, {
-  call: () => call62
+  call: () => call63
 });
 async function callChromeTool(chromeClient, tool, args) {
   let result = await chromeClient.client.callTool({ name: tool, arguments: args }), content = Array.isArray(result.content) ? result.content[0] : void 0;
@@ -420408,7 +420845,7 @@ function ClaudeInChromeMenu(t0) {
     }
   );
 }
-var import_react186, import_jsx_runtime333, CHROME_EXTENSION_URL, CHROME_PERMISSIONS_URL, CHROME_RECONNECT_URL, ConnectedBrowserSchema, call62, init_chrome = __esm({
+var import_react186, import_jsx_runtime333, CHROME_EXTENSION_URL, CHROME_PERMISSIONS_URL, CHROME_RECONNECT_URL, ConnectedBrowserSchema, call63, init_chrome = __esm({
   "build-src/src/commands/chrome/chrome.tsx"() {
     import_react186 = __toESM(require_react(), 1);
     init_v4();
@@ -420432,7 +420869,7 @@ var import_react186, import_jsx_runtime333, CHROME_EXTENSION_URL, CHROME_PERMISS
       name: external_exports.string().default("Browser"),
       osPlatform: external_exports.string().optional()
     });
-    call62 = async function(onDone) {
+    call63 = async function(onDone) {
       let isExtensionInstalled = await isChromeExtensionInstalled().catch((error51) => (logError(
         new Error(
           `[Claude in Chrome] Extension detection failed: ${error51 instanceof Error ? error51.message : String(error51)}`
@@ -420470,9 +420907,9 @@ var command7, chrome_default, init_chrome2 = __esm({
 // build-src/src/commands/stickers/stickers.ts
 var stickers_exports = {};
 __export(stickers_exports, {
-  call: () => call63
+  call: () => call64
 });
-async function call63() {
+async function call64() {
   let url3 = "https://www.stickermule.com/claudecode";
   return await openBrowser(url3) ? { type: "text", value: "Opening sticker page in browser\u2026" } : {
     type: "text",
@@ -420647,7 +421084,7 @@ function AdvisorDialog({
     ] })
   ] }) });
 }
-var import_react187, import_jsx_runtime334, ADVISOR_BLOG_URL, ADVISOR_REMOTE_REFUSAL, ADVISOR_MODEL_ALIASES, MODEL_CAPABILITY_RANK, call64, advisor, advisor_default, init_advisor2 = __esm({
+var import_react187, import_jsx_runtime334, ADVISOR_BLOG_URL, ADVISOR_REMOTE_REFUSAL, ADVISOR_MODEL_ALIASES, MODEL_CAPABILITY_RANK, call65, advisor, advisor_default, init_advisor2 = __esm({
   "build-src/src/commands/advisor.tsx"() {
     import_react187 = __toESM(require_react(), 1);
     init_select();
@@ -420669,7 +421106,7 @@ var import_react187, import_jsx_runtime334, ADVISOR_BLOG_URL, ADVISOR_REMOTE_REF
       "claude-mythos-5": 5,
       "claude-fable-5": 5
     };
-    call64 = async (onDone, _context, args) => {
+    call65 = async (onDone, _context, args) => {
       let arg = (args ?? "").trim().toLowerCase();
       if (!arg)
         return /* @__PURE__ */ (0, import_jsx_runtime334.jsx)(AdvisorDialog, { onDone });
@@ -420694,7 +421131,7 @@ var import_react187, import_jsx_runtime334, ADVISOR_BLOG_URL, ADVISOR_REMOTE_REF
       get isHidden() {
         return !canUserConfigureAdvisor();
       },
-      load: () => Promise.resolve({ call: call64 })
+      load: () => Promise.resolve({ call: call65 })
     }, advisor_default = advisor;
   }
 });
@@ -420967,13 +421404,13 @@ var import_compiler_runtime229, import_jsx_runtime336, GOODBYE_MESSAGES, init_Ex
 // build-src/src/commands/exit/exit.tsx
 var exit_exports = {};
 __export(exit_exports, {
-  call: () => call65
+  call: () => call66
 });
 import { spawnSync as spawnSync10 } from "child_process";
 function getRandomGoodbyeMessage2() {
   return sample_default(GOODBYE_MESSAGES2) ?? "Goodbye!";
 }
-async function call65(onDone) {
+async function call66(onDone) {
   if (isBgSession())
     return onDone(), spawnSync10("tmux", ["detach-client"], {
       stdio: "ignore"
@@ -421150,7 +421587,7 @@ var import_react190, import_jsx_runtime339, init_exportRenderer = __esm({
 // build-src/src/commands/export/export.tsx
 var export_exports = {};
 __export(export_exports, {
-  call: () => call66,
+  call: () => call67,
   extractFirstPrompt: () => extractFirstPrompt,
   sanitizeFilename: () => sanitizeFilename
 });
@@ -421180,7 +421617,7 @@ async function exportWithReactRenderer(context3) {
   let tools = context3.options.tools || [];
   return renderMessagesToPlainText(context3.messages, tools);
 }
-async function call66(onDone, context3, args) {
+async function call67(onDone, context3, args) {
   let content = await exportWithReactRenderer(context3), filename = args.trim();
   if (filename) {
     let finalFilename = filename.endsWith(".txt") ? filename : filename.replace(/\.[^.]+$/, "") + ".txt", filepath = join164(getCwd(), finalFilename);
@@ -421580,7 +422017,7 @@ var import_react191, import_jsx_runtime341, NO_PREFERENCE2, HEADER_TEXT, MAX_EFF
 // build-src/src/commands/model/model.tsx
 var model_exports2 = {};
 __export(model_exports2, {
-  call: () => call67,
+  call: () => call68,
   renderModelLabel: () => renderModelLabel
 });
 function ModelPickerWrapper(t0) {
@@ -421730,7 +422167,7 @@ function renderModelLabel(model) {
   let rendered = renderDefaultModelSetting(model ?? getDefaultMainLoopModelSetting());
   return model === null ? `${rendered} (default)` : rendered;
 }
-var import_compiler_runtime230, React113, import_jsx_runtime342, call67, init_model2 = __esm({
+var import_compiler_runtime230, React113, import_jsx_runtime342, call68, init_model2 = __esm({
   "build-src/src/commands/model/model.tsx"() {
     import_compiler_runtime230 = __toESM(require_compiler_runtime(), 1);
     init_source2();
@@ -421751,7 +422188,7 @@ var import_compiler_runtime230, React113, import_jsx_runtime342, call67, init_mo
     init_modelAllowlist();
     init_validateModel();
     import_jsx_runtime342 = __toESM(require_jsx_runtime(), 1);
-    call67 = async (onDone, _context, args) => {
+    call68 = async (onDone, _context, args) => {
       if (args = args?.trim() || "", COMMON_INFO_ARGS.includes(args))
         return /* @__PURE__ */ (0, import_jsx_runtime342.jsx)(ShowModelAndClose, { onDone });
       if (COMMON_HELP_ARGS.includes(args)) {
@@ -421790,7 +422227,7 @@ var model_default, init_model3 = __esm({
 // build-src/src/commands/tag/tag.tsx
 var tag_exports = {};
 __export(tag_exports, {
-  call: () => call68
+  call: () => call69
 });
 function ConfirmRemoveTag(t0) {
   let $3 = (0, import_compiler_runtime231.c)(11), {
@@ -421885,7 +422322,7 @@ Examples:
     });
   }, t2 = [onDone], $3[0] = onDone, $3[1] = t1, $3[2] = t2) : (t1 = $3[1], t2 = $3[2]), React114.useEffect(t1, t2), null;
 }
-async function call68(onDone, _context, args) {
+async function call69(onDone, _context, args) {
   return args = args?.trim() || "", COMMON_INFO_ARGS.includes(args) || COMMON_HELP_ARGS.includes(args) ? /* @__PURE__ */ (0, import_jsx_runtime343.jsx)(ShowHelp, { onDone }) : args ? /* @__PURE__ */ (0, import_jsx_runtime343.jsx)(ToggleTagAndClose, { tagName: args, onDone }) : /* @__PURE__ */ (0, import_jsx_runtime343.jsx)(ShowHelp, { onDone });
 }
 var import_compiler_runtime231, React114, import_jsx_runtime343, init_tag = __esm({
@@ -421922,9 +422359,9 @@ var tag, tag_default, init_tag2 = __esm({
 // build-src/src/commands/output-style/output-style.tsx
 var output_style_exports = {};
 __export(output_style_exports, {
-  call: () => call69
+  call: () => call70
 });
-async function call69(onDone) {
+async function call70(onDone) {
   onDone("/output-style has been deprecated. Use /config to change your output style, or set it in your settings file. Changes take effect on the next session.", {
     display: "system"
   });
@@ -422168,9 +422605,9 @@ var import_compiler_runtime232, import_react192, import_jsx_runtime344, DIALOG_T
 // build-src/src/commands/remote-env/remote-env.tsx
 var remote_env_exports = {};
 __export(remote_env_exports, {
-  call: () => call70
+  call: () => call71
 });
-async function call70(onDone) {
+async function call71(onDone) {
   return /* @__PURE__ */ (0, import_jsx_runtime345.jsx)(RemoteEnvironmentDialog, { onDone });
 }
 var import_jsx_runtime345, init_remote_env = __esm({
@@ -422201,9 +422638,9 @@ var remote_env_default, init_remote_env2 = __esm({
 // build-src/src/commands/upgrade/upgrade.tsx
 var upgrade_exports = {};
 __export(upgrade_exports, {
-  call: () => call71
+  call: () => call72
 });
-async function call71(onDone, context3) {
+async function call72(onDone, context3) {
   try {
     if (isClaudeAISubscriber()) {
       let tokens = getClaudeAIOAuthTokens(), isMax20x = !1;
@@ -422254,7 +422691,7 @@ var upgrade, upgrade_default, init_upgrade2 = __esm({
 // build-src/src/commands/rate-limit-options/rate-limit-options.tsx
 var rate_limit_options_exports = {};
 __export(rate_limit_options_exports, {
-  call: () => call72
+  call: () => call73
 });
 function RateLimitOptionsMenu(t0) {
   let $3 = (0, import_compiler_runtime233.c)(25), {
@@ -422312,7 +422749,7 @@ function RateLimitOptionsMenu(t0) {
   }, $3[13] = onDone, $3[14] = t4) : t4 = $3[14];
   let handleCancel = t4, t5;
   $3[15] !== context3 || $3[16] !== handleCancel || $3[17] !== onDone ? (t5 = function(value) {
-    value === "upgrade" ? call71(onDone, context3).then((jsx526) => {
+    value === "upgrade" ? call72(onDone, context3).then((jsx526) => {
       jsx526 && setSubCommandJSX(jsx526);
     }) : value === "extra-usage" ? call2(onDone, context3).then((jsx_0) => {
       jsx_0 && setSubCommandJSX(jsx_0);
@@ -422326,7 +422763,7 @@ function RateLimitOptionsMenu(t0) {
   let t7;
   return $3[22] !== handleCancel || $3[23] !== t6 ? (t7 = /* @__PURE__ */ (0, import_jsx_runtime347.jsx)(Dialog, { title: "What do you want to do?", onCancel: handleCancel, color: "suggestion", children: t6 }), $3[22] = handleCancel, $3[23] = t6, $3[24] = t7) : t7 = $3[24], t7;
 }
-async function call72(onDone, context3) {
+async function call73(onDone, context3) {
   return /* @__PURE__ */ (0, import_jsx_runtime347.jsx)(RateLimitOptionsMenu, { onDone, context: context3 });
 }
 var import_compiler_runtime233, import_react193, import_jsx_runtime347, init_rate_limit_options = __esm({
@@ -422503,7 +422940,7 @@ var import_compiler_runtime234, React116, import_jsx_runtime348, init_effort2 =
 // build-src/src/sema/overrides/effort.tsx
 var effort_exports = {};
 __export(effort_exports, {
-  call: () => call73,
+  call: () => call74,
   executeEffort: () => executeEffort,
   showCurrentEffort: () => showCurrentEffort
 });
@@ -422654,7 +423091,7 @@ function EffortSlider({ onDone }) {
     footer
   ] });
 }
-async function call73(onDone, _context, args) {
+async function call74(onDone, _context, args) {
   if (args = args?.trim() || "", COMMON_HELP_ARGS2.includes(args)) {
     onDone(HELP_TEXT);
     return;
@@ -422735,12 +423172,12 @@ var effort_default, init_effort4 = __esm({
 // build-src/src/commands/stats/stats.tsx
 var stats_exports = {};
 __export(stats_exports, {
-  call: () => call74
+  call: () => call75
 });
-var import_jsx_runtime350, call74, init_stats2 = __esm({
+var import_jsx_runtime350, call75, init_stats2 = __esm({
   "build-src/src/commands/stats/stats.tsx"() {
     init_Stats();
-    import_jsx_runtime350 = __toESM(require_jsx_runtime(), 1), call74 = async (onDone) => /* @__PURE__ */ (0, import_jsx_runtime350.jsx)(Stats2, { onClose: onDone });
+    import_jsx_runtime350 = __toESM(require_jsx_runtime(), 1), call75 = async (onDone) => /* @__PURE__ */ (0, import_jsx_runtime350.jsx)(Stats2, { onClose: onDone });
   }
 });
 
@@ -422977,7 +423414,7 @@ var import_react195, import_jsx_runtime351, init_RemoteCallout = __esm({
 // build-src/src/commands/remote-control/bridge.tsx
 var bridge_exports = {};
 __export(bridge_exports, {
-  call: () => call75
+  call: () => call76
 });
 function BridgeToggle(t0) {
   let $3 = (0, import_compiler_runtime235.c)(10), {
@@ -423174,7 +423611,7 @@ async function checkBridgePrerequisites() {
   let versionError = isEnvLessBridgeEnabled() ? await checkEnvLessBridgeMinVersion() : checkBridgeMinVersion();
   return versionError || (getBridgeAccessToken() ? (logForDebugging("[bridge] Prerequisites passed, enabling bridge"), null) : BRIDGE_LOGIN_INSTRUCTION);
 }
-async function call75(onDone, _context, args) {
+async function call76(onDone, _context, args) {
   let name = args.trim() || void 0;
   return /* @__PURE__ */ (0, import_jsx_runtime352.jsx)(BridgeToggle, { onDone, name });
 }
@@ -423373,7 +423810,7 @@ var CCR_BYOC_BETA_HEADER, RedactedGithubToken, init_api4 = __esm({
 // build-src/src/commands/web-setup/remote-setup.tsx
 var remote_setup_exports = {};
 __export(remote_setup_exports, {
-  call: () => call76
+  call: () => call77
 });
 async function checkLoginState() {
   if (!await isSignedIn())
@@ -423478,7 +423915,7 @@ function Web({
     }, onCancel: handleCancel })
   ] });
 }
-async function call76(onDone) {
+async function call77(onDone) {
   return /* @__PURE__ */ (0, import_jsx_runtime353.jsx)(Web, { onDone });
 }
 var import_react197, import_jsx_runtime353, init_remote_setup = __esm({
@@ -425617,6 +426054,7 @@ var agentsPlatform, proactive, briefCommand, assistantCommand, bridge2, remoteCo
     init_vim2();
     init_websearch2();
     init_collab2();
+    init_discuss();
     init_team();
     init_think_back();
     init_thinkback_play2();
@@ -425777,6 +426215,7 @@ var agentsPlatform, proactive, briefCommand, assistantCommand, bridge2, remoteCo
       stickers_default,
       tag_default,
       collab_default,
+      discuss_default,
       team_default,
       theme_default,
       websearch_default,
@@ -428852,7 +429291,7 @@ __export(filesystem_exports, {
   toPosixPath: () => toPosixPath
 });
 import { randomBytes as randomBytes21 } from "crypto";
-import { homedir as homedir43, tmpdir as tmpdir14 } from "os";
+import { homedir as homedir44, tmpdir as tmpdir14 } from "os";
 import { join as join168, normalize as normalize17, posix as posix8, sep as sep37 } from "path";
 function normalizeCaseForComparison2(path28) {
   return path28.toLowerCase();
@@ -428864,7 +429303,7 @@ function getClaudeSkillScope(filePath) {
       prefix: "/.sema/skills/"
     },
     {
-      dir: expandPath(join168(homedir43(), ".sema", "skills")),
+      dir: expandPath(join168(homedir44(), ".sema", "skills")),
       prefix: "~/.sema/skills/"
     }
   ];
@@ -429103,7 +429542,7 @@ function patternWithRoot(pattern, source) {
     if (pattern.startsWith(`~${DIR_SEP}`))
       return {
         relativePattern: pattern.slice(1),
-        root: homedir43().normalize("NFC")
+        root: homedir44().normalize("NFC")
       };
     if (pattern.startsWith(DIR_SEP))
       return {
@@ -433646,6 +434085,7 @@ function noteModelEvidenceFrom(msg) {
           b3.text.includes(model) && noteModelRejected(model, "rejected by the provider");
           continue;
         }
+        if (isGovernanceStopRowText(b3.text)) continue;
         b3.text.length > 0 && noteModelServed(model);
         continue;
       }
@@ -450301,7 +450741,7 @@ var WORKTREE_PARENT, init_git_worktree_env = __esm({
 });
 
 // node_modules/@sema-agent/core/dist/core/memory-engine/layout.js
-import { closeSync as closeSync13, constants as fsConstants8, copyFileSync as copyFileSync6, existsSync as existsSync27, fstatSync as fstatSync3, fsyncSync as fsyncSync10, lstatSync as lstatSync4, mkdirSync as mkdirSync22, openSync as openSync14, readFileSync as readFileSync37, readdirSync as readdirSync11, realpathSync as realpathSync10, renameSync as renameSync13, rmSync as rmSync7, rmdirSync as rmdirSync3, statSync as statSync14, unlinkSync as unlinkSync11, writeFileSync as writeFileSync21, writeSync as writeSync7 } from "node:fs";
+import { closeSync as closeSync13, constants as fsConstants8, copyFileSync as copyFileSync6, existsSync as existsSync27, fstatSync as fstatSync3, fsyncSync as fsyncSync10, lstatSync as lstatSync4, mkdirSync as mkdirSync22, openSync as openSync14, readFileSync as readFileSync37, readdirSync as readdirSync12, realpathSync as realpathSync10, renameSync as renameSync13, rmSync as rmSync7, rmdirSync as rmdirSync3, statSync as statSync14, unlinkSync as unlinkSync11, writeFileSync as writeFileSync21, writeSync as writeSync7 } from "node:fs";
 var O_WRONLY, O_CREAT, O_TRUNC, O_NOFOLLOW3, O_EXCL, init_layout = __esm({
   "node_modules/@sema-agent/core/dist/core/memory-engine/layout.js"() {
     ({ O_WRONLY, O_CREAT, O_TRUNC, O_NOFOLLOW: O_NOFOLLOW3, O_EXCL } = fsConstants8);
@@ -455180,8 +455620,8 @@ function policyFromPermissions(perms) {
   return policy2;
 }
 function deriveMode(eff, opts) {
-  let launch = opts?.launchMode, fileMode = eff.permissionMode, mode = launch ?? fileMode ?? "default";
-  return mode === "bypassPermissions" && eff.disableBypassPermissionsMode === !0 && (mode = "default"), mode === "acceptEdits" && eff.disableAutoMode === !0 && (mode = "default"), mode;
+  let launch = opts?.launchMode, fileMode = eff.permissionMode, factory2 = launch === void 0 && fileMode === void 0 && opts?.factoryDefaultAuto === !0, mode = launch ?? fileMode ?? (factory2 ? "auto" : "default");
+  return mode === "bypassPermissions" && eff.disableBypassPermissionsMode === !0 && (mode = "default"), (mode === "acceptEdits" || mode === "auto") && eff.disableAutoMode === !0 && (mode = "default"), { mode, isFactoryDefault: factory2 && mode === "auto" };
 }
 function modeToolPolicy(mode, basePolicy) {
   switch (mode) {
@@ -455208,7 +455648,7 @@ function modeToolPolicy(mode, basePolicy) {
   }
 }
 function toEffectiveConfig(eff, opts) {
-  let basePolicy = policyFromPermissions(eff.permissions), derivedMode = deriveMode(eff, opts), { toolPolicy, handsReadOnly, onAsk } = modeToolPolicy(
+  let basePolicy = policyFromPermissions(eff.permissions), { mode: derivedMode, isFactoryDefault } = deriveMode(eff, opts), { toolPolicy, handsReadOnly, onAsk } = modeToolPolicy(
     derivedMode,
     basePolicy
   ), taskSpecOverrides = { toolPolicy };
@@ -455220,6 +455660,7 @@ function toEffectiveConfig(eff, opts) {
     model: eff.model,
     outputStyle: eff.outputStyle,
     derivedMode,
+    ...isFactoryDefault ? { derivedModeIsFactoryDefault: !0 } : {},
     provenance: eff.provenance
   };
 }
@@ -458819,8 +459260,11 @@ var init_caCertsConfig = __esm({
 // build-src/src/utils/managedEnv.ts
 var managedEnv_exports = {};
 __export(managedEnv_exports, {
+  PROJECT_FORBIDDEN_ENV_VARS: () => PROJECT_FORBIDDEN_ENV_VARS,
   applyConfigEnvironmentVariables: () => applyConfigEnvironmentVariables,
-  applySafeConfigEnvironmentVariables: () => applySafeConfigEnvironmentVariables
+  applySafeConfigEnvironmentVariables: () => applySafeConfigEnvironmentVariables,
+  stripUntrustedCapabilityEnv: () => stripUntrustedCapabilityEnv,
+  trustedCapabilityEnv: () => trustedCapabilityEnv
 });
 function withoutSSHTunnelVars(env5) {
   if (!env5 || !process.env.ANTHROPIC_UNIX_SOCKET) return env5 || {};
@@ -458866,14 +459310,48 @@ function applySafeConfigEnvironmentVariables() {
     process.env,
     filterSettingsEnv(getSettingsForSource("policySettings")?.env)
   );
-  let settingsEnv4 = filterSettingsEnv(getSettings_DEPRECATED()?.env);
+  let settingsEnv4 = stripUntrustedCapabilityEnv(
+    filterSettingsEnv(getSettings_DEPRECATED()?.env),
+    (source) => isSettingSourceEnabled(source) ? filterSettingsEnv(getSettingsForSource(source)?.env) : void 0
+  );
   for (let [key, value] of Object.entries(settingsEnv4))
     SAFE_ENV_VARS3.has(key.toUpperCase()) && (process.env[key] = value);
+  Object.assign(
+    process.env,
+    trustedCapabilityEnv(
+      (source) => isSettingSourceEnabled(source) ? filterSettingsEnv(getSettingsForSource(source)?.env) : void 0
+    )
+  );
+}
+function stripUntrustedCapabilityEnv(merged, readSourceEnv) {
+  let out6 = { ...merged };
+  for (let key of Object.keys(out6))
+    PROJECT_FORBIDDEN_ENV_VARS.has(key.toUpperCase()) && delete out6[key];
+  return Object.assign(out6, trustedCapabilityEnv(readSourceEnv));
+}
+function trustedCapabilityEnv(readSourceEnv) {
+  let out6 = {};
+  for (let canonical2 of PROJECT_FORBIDDEN_ENV_VARS)
+    for (let source of TRUSTED_SETTING_SOURCES) {
+      let sourceEnv = readSourceEnv(source);
+      if (sourceEnv)
+        for (let [key, value] of Object.entries(sourceEnv))
+          key.toUpperCase() === canonical2 && (out6[canonical2] = value);
+    }
+  return out6;
 }
 function applyConfigEnvironmentVariables() {
-  Object.assign(process.env, filterSettingsEnv(getGlobalConfig().env)), Object.assign(process.env, filterSettingsEnv(getSettings_DEPRECATED()?.env)), clearCACertsCache(), clearMTLSCache(), clearProxyCache(), configureGlobalAgents();
+  Object.assign(process.env, filterSettingsEnv(getGlobalConfig().env)), Object.assign(
+    process.env,
+    stripUntrustedCapabilityEnv(
+      filterSettingsEnv(getSettings_DEPRECATED()?.env),
+      // 🔴 取回也要服从 `--setting-sources`:该 flag 排除 userSettings 时,那份文件里的
+      // 能力位不该还能透过(getSettingsForSource 自身不查源开关)。
+      (source) => isSettingSourceEnabled(source) ? filterSettingsEnv(getSettingsForSource(source)?.env) : void 0
+    )
+  ), clearCACertsCache(), clearMTLSCache(), clearProxyCache(), configureGlobalAgents();
 }
-var ccdSpawnEnvKeys, TRUSTED_SETTING_SOURCES, init_managedEnv = __esm({
+var ccdSpawnEnvKeys, TRUSTED_SETTING_SOURCES, PROJECT_FORBIDDEN_ENV_VARS, init_managedEnv = __esm({
   "build-src/src/utils/managedEnv.ts"() {
     init_syncCache();
     init_caCerts();
@@ -458889,6 +459367,24 @@ var ccdSpawnEnvKeys, TRUSTED_SETTING_SOURCES, init_managedEnv = __esm({
       "flagSettings",
       "policySettings"
     ];
+    PROJECT_FORBIDDEN_ENV_VARS = /* @__PURE__ */ new Set([
+      // agent-teams 的 opt-in:开门 = 挂上 TeamCreate/TeamDelete/SendMessage + 起队友进程的能力面。
+      // 🔴 品牌名 + CC 名两形都要登记(1.0.82 扫码修,真病 S3):裸字面量 'SEMA_CODE_...' 会被
+      // branding codemod 逐字改写成 'SEMA_CODE_...'(dist 直证:产物里恒 0 处 CLAUDE_ 形、6 处
+      // SEMA_ 形),于是构建后的禁表**只剩品牌名一形**。而 `ccEnvCompatBoot.ts` 的 `applyCcEnvCompat()`
+      // 只在进程边界跑一次、只读**真实 shell env**——它不会回头翻译「后来才从 settings.json 合并
+      // 进 process.env」的值。项目 `.sema/settings.json` 写 `{"env":{"SEMA_CODE_EXPERIMENTAL_
+      // AGENT_TEAMS":"1"}}` 时,合并层按品牌名做的剥离扫不到这个 CC 原名键,它原样滲进
+      // `process.env`——本进程的门读不到(读的是品牌名),但**继承该 env 的子 sema 进程**
+      // (main.tsx spawnSync/worktree.ts/Bash 工具再跑 sema)在自己 boot 期重新跑 compat,会把这个
+      // 继承来的 CC 原名值回翻成品牌名,子进程的门就开了。
+      // 拼接规避同一条 codemod(仓内 envUtils.ts/ccImportMarker.ts 同款纪律):裸写会被连带改掉,
+      // 拼接后的字符串在源码文本层面不含 `\bCLAUDE_\b`,codemod 认不出,构建后仍保持 CC 原形——
+      // 于是禁表在**构建产物**里真同时含两个不同字符串(品牌名+CC 原名);raw src 下两条字面量相同,
+      // Set 天然去重成一条,对 raw src 测试无害(此时两形本就同形)。
+      "SEMA_CODE_EXPERIMENTAL_AGENT_TEAMS",
+      "CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS".toUpperCase()
+    ]);
   }
 });
 
@@ -459113,7 +459609,7 @@ __export(upstreamproxy_exports, {
   resetUpstreamProxyForTests: () => resetUpstreamProxyForTests
 });
 import { mkdir as mkdir45, readFile as readFile53, unlink as unlink26, writeFile as writeFile46 } from "fs/promises";
-import { homedir as homedir44 } from "os";
+import { homedir as homedir45 } from "os";
 import { join as join177 } from "path";
 async function initUpstreamProxy(opts) {
   if (!isEnvTruthy(process.env.SEMA_CODE_REMOTE) || !isEnvTruthy(process.env.CCR_UPSTREAM_PROXY_ENABLED))
@@ -459128,7 +459624,7 @@ async function initUpstreamProxy(opts) {
   if (!token)
     return logForDebugging("[upstreamproxy] no session token file; proxy disabled"), state3;
   setNonDumpable();
-  let baseUrl = opts?.ccrBaseUrl ?? process.env.ANTHROPIC_BASE_URL ?? "https://api.anthropic.com", caBundlePath = opts?.caBundlePath ?? join177(homedir44(), ".ccr", "ca-bundle.crt");
+  let baseUrl = opts?.ccrBaseUrl ?? process.env.ANTHROPIC_BASE_URL ?? "https://api.anthropic.com", caBundlePath = opts?.caBundlePath ?? join177(homedir45(), ".ccr", "ca-bundle.crt");
   if (!await downloadCaBundle(
     baseUrl,
     opts?.systemCaPath ?? SYSTEM_CA_BUNDLE,
@@ -462607,6 +463103,88 @@ var import_compiler_runtime243, import_jsx_runtime365, init_WorkerPendingPermiss
   }
 });
 
+// build-src/src/sema/rules/ccImportBootRun.ts
+var ccImportBootRun_exports = {};
+__export(ccImportBootRun_exports, {
+  __resetCcImportBootLatchForTests: () => __resetCcImportBootLatchForTests,
+  __resetCcImportBootPendingNoticeForTests: () => __resetCcImportBootPendingNoticeForTests,
+  __setCcImportCapsWaitCapForTests: () => __setCcImportCapsWaitCapForTests,
+  drainPendingCcImportBootNotice: () => drainPendingCcImportBootNotice,
+  runCcImportBootAuto: () => runCcImportBootAuto,
+  runCcImportBootAutoWith: () => runCcImportBootAutoWith
+});
+async function runCcImportBootAutoWith(deps2) {
+  try {
+    let sourcePath = deps2.gate();
+    if (sourcePath === null) return "gate-closed";
+    let { layers: layers2 } = deps2.collect(sourcePath);
+    if (layers2.length === 0) return "no-layers";
+    let facade = await deps2.facade(), prep = await prepareCcRuleImport(facade, layers2);
+    if (!prep.ok) return "prepare-failed";
+    if ((Array.isArray(prep.prepared?.preview?.candidates) ? prep.prepared.preview.candidates : []).length === 0)
+      return deps2.writeMarker({ importedAt: (/* @__PURE__ */ new Date()).toISOString(), sourcePath, importedCount: 0 }), "nothing-to-import";
+    let red = await redeemCcRuleImport(facade, prep.prepared.ticket);
+    if (!red.ok) return "redeem-failed";
+    let persisted = Array.isArray(red.redeemed?.result?.persisted) ? red.redeemed.result.persisted.length : 0, deduped = Array.isArray(red.redeemed?.result?.deduped) ? red.redeemed.result.deduped.length : 0;
+    if (deps2.writeMarker({ importedAt: (/* @__PURE__ */ new Date()).toISOString(), sourcePath, importedCount: persisted }), persisted > 0) {
+      let noun = persisted === 1 ? "rule" : "rules", dedupTail = deduped > 0 ? ` (${deduped} already present)` : "", text2 = `Imported ${persisted} permission ${noun} from Sema settings${dedupTail} \u2014 review in /permissions`;
+      deps2.notice(text2) || (pendingNotice = text2);
+    }
+    return "imported";
+  } catch {
+    return "prepare-failed";
+  }
+}
+function __resetCcImportBootLatchForTests() {
+  attempted = !1;
+}
+function drainPendingCcImportBootNotice() {
+  let n2 = pendingNotice;
+  return pendingNotice = null, n2;
+}
+function __resetCcImportBootPendingNoticeForTests() {
+  pendingNotice = null;
+}
+function __setCcImportCapsWaitCapForTests(ms) {
+  capsWaitCapMs = ms ?? CAPS_SETTLE_CAP_MS;
+}
+async function awaitEngineCapsSettled(base) {
+  let timer2;
+  try {
+    return await Promise.race([
+      engineCapsSettled(base).then(() => "settled"),
+      new Promise((r) => {
+        timer2 = setTimeout(() => r("timeout"), capsWaitCapMs);
+      })
+    ]);
+  } finally {
+    timer2 !== void 0 && clearTimeout(timer2);
+  }
+}
+async function runCcImportBootAuto() {
+  if (attempted) return "already-attempted";
+  attempted = !0;
+  let base = process.env.SEMA_LIVE_BASEURL;
+  return typeof base == "string" && base.trim() !== "" && await awaitEngineCapsSettled(base) === "timeout" || process.env.SEMA_LIVE_BASEURL !== base ? (attempted = !1, "caps-unsettled") : runCcImportBootAutoWith({
+    gate: () => ccImportBootGate(typeof base == "string" && base.trim() !== "" ? base : void 0),
+    collect: collectCcUserLayerAt,
+    facade: resolveRulesFacade,
+    writeMarker: writeCcImportMarker,
+    notice: surfaceTranscriptSystemNotice
+  });
+}
+var attempted, pendingNotice, CAPS_SETTLE_CAP_MS, capsWaitCapMs, init_ccImportBootRun = __esm({
+  "build-src/src/sema/rules/ccImportBootRun.ts"() {
+    init_dist();
+    init_persistedRulesWire2();
+    init_transcriptSystemNotice();
+    init_ccImportMarker();
+    attempted = !1;
+    pendingNotice = null;
+    CAPS_SETTLE_CAP_MS = 15e3, capsWaitCapMs = CAPS_SETTLE_CAP_MS;
+  }
+});
+
 // build-src/src/hooks/useLogMessages.ts
 function useLogMessages(messages, ignore6 = !1) {
   let teamContext = useAppState((s) => s.teamContext), lastRecordedLengthRef = (0, import_react205.useRef)(0), lastParentUuidRef = (0, import_react205.useRef)(void 0), firstMessageUuidRef = (0, import_react205.useRef)(void 0), callSeqRef = (0, import_react205.useRef)(0);
@@ -472593,7 +473171,7 @@ var import_compiler_runtime255, import_jsx_runtime383, init_ShowInIDEPrompt = __
 });
 
 // build-src/src/components/permissions/FilePermissionDialog/permissionOptions.tsx
-import { homedir as homedir45 } from "os";
+import { homedir as homedir46 } from "os";
 import { basename as basename56, join as join181, sep as sep39 } from "path";
 function isInClaudeFolder(filePath) {
   let absolutePath = expandPath(filePath), claudeFolderPath = expandPath(`${getOriginalCwd()}/.claude`), normalizedAbsolutePath = normalizeCaseForComparison2(absolutePath), normalizedClaudeFolderPath = normalizeCaseForComparison2(claudeFolderPath);
@@ -472601,7 +473179,7 @@ function isInClaudeFolder(filePath) {
   normalizedAbsolutePath.startsWith(normalizedClaudeFolderPath + "/");
 }
 function isInGlobalClaudeFolder(filePath) {
-  let absolutePath = expandPath(filePath), globalClaudeFolderPath = join181(homedir45(), ".sema"), normalizedAbsolutePath = normalizeCaseForComparison2(absolutePath), normalizedGlobalClaudeFolderPath = normalizeCaseForComparison2(globalClaudeFolderPath);
+  let absolutePath = expandPath(filePath), globalClaudeFolderPath = join181(homedir46(), ".sema"), normalizedAbsolutePath = normalizeCaseForComparison2(absolutePath), normalizedGlobalClaudeFolderPath = normalizeCaseForComparison2(globalClaudeFolderPath);
   return normalizedAbsolutePath.startsWith(normalizedGlobalClaudeFolderPath + sep39.toLowerCase()) || normalizedAbsolutePath.startsWith(normalizedGlobalClaudeFolderPath + "/");
 }
 function getFilePermissionOptions({
@@ -481801,41 +482379,6 @@ var import_compiler_runtime284, import_react256, import_jsx_runtime427, init_Thi
   }
 });
 
-// build-src/src/utils/teamDiscovery.ts
-function getTeammateStatuses(teamName) {
-  let teamFile = readTeamFile(teamName);
-  if (!teamFile)
-    return [];
-  let hiddenPaneIds = new Set(teamFile.hiddenPaneIds ?? []), statuses = [];
-  for (let member of teamFile.members) {
-    if (member.name === "team-lead")
-      continue;
-    let status3 = member.isActive !== !1 ? "running" : "idle";
-    statuses.push({
-      name: member.name,
-      agentId: member.agentId,
-      agentType: member.agentType,
-      model: member.model,
-      prompt: member.prompt,
-      status: status3,
-      color: member.color,
-      tmuxPaneId: member.tmuxPaneId,
-      cwd: member.cwd,
-      worktreePath: member.worktreePath,
-      isHidden: hiddenPaneIds.has(member.tmuxPaneId),
-      backendType: member.backendType && isPaneBackend(member.backendType) ? member.backendType : void 0,
-      mode: member.mode
-    });
-  }
-  return statuses;
-}
-var init_teamDiscovery = __esm({
-  "build-src/src/utils/teamDiscovery.ts"() {
-    init_types18();
-    init_teamHelpers();
-  }
-});
-
 // build-src/src/components/teams/TeamsDialog.tsx
 import { randomUUID as randomUUID43 } from "crypto";
 function TeamsDialog({
@@ -488558,7 +489101,7 @@ var SESSION_SCAN_INTERVAL_MS, DEFAULTS, runner, init_autoDream = __esm({
 
 // build-src/src/utils/cleanup.ts
 import * as fs14 from "fs/promises";
-import { homedir as homedir46 } from "os";
+import { homedir as homedir47 } from "os";
 import { join as join183 } from "path";
 function getCleanupPeriodDays() {
   return (getSettings_DEPRECATED() || {}).cleanupPeriodDays ?? DEFAULT_CLEANUP_PERIOD_DAYS;
@@ -488873,7 +489416,7 @@ async function cleanupNpmCacheForAnthropicPackages() {
     return;
   }
   logForDebugging("npm cache cleanup: starting");
-  let npmCachePath = join183(homedir46(), ".npm", "_cacache"), NPM_CACHE_RETENTION_COUNT = 5, startTime = Date.now();
+  let npmCachePath = join183(homedir47(), ".npm", "_cacache"), NPM_CACHE_RETENTION_COUNT = 5, startTime = Date.now();
   try {
     let cacache = await import("cacache"), cutoff = startTime - ONE_DAY_MS2, stream5 = cacache.ls.stream(npmCachePath), anthropicEntries = [];
     for await (let entry of stream5)
@@ -491114,6 +491657,7 @@ async function executeUserInput(params) {
     queuedCommands
   } = params, abortController = createAbortController();
   setAbortController(abortController);
+  let submissionTurnId = beginSubmissionTurn();
   function makeContext() {
     return getToolUseContext(messages, [], abortController, mainLoopModel);
   }
@@ -491194,6 +491738,14 @@ async function executeUserInput(params) {
       nextInput && (submitNextInput ? enqueue({ value: nextInput, mode: "prompt" }) : params.onInputChange(nextInput));
     });
   } finally {
+    if (consumeSubmissionHeldForDecision(submissionTurnId)) {
+      let injected = (params.queuedCommands ?? []).filter((c2) => c2.isMeta === !0);
+      for (let cmd of injected) {
+        if (requeueFailedInjection(cmd)) continue;
+        let text2 = `A system notification was dropped after ${MAX_INJECTION_REQUEUES} attempts \u2014 this session kept an unanswered decision open, so it never reached the model.`;
+        surfaceTranscriptSystemNotice(text2) || logError(new Error(`[sema] ${text2}`));
+      }
+    }
     queryGuard.cancelReservation(), setUserInputOnProcessing(void 0);
   }
 }
@@ -491209,7 +491761,9 @@ var init_handlePromptSubmit = __esm({
     init_log2();
     init_fileHistory();
     init_gracefulShutdown();
+    init_injectionRequeueLatch();
     init_messageQueueManager();
+    init_transcriptSystemNotice();
     init_model();
     init_processUserInput();
     init_queryProfiler();
@@ -491227,17 +491781,24 @@ function isSlashCommand(cmd) {
   return !1;
 }
 function processQueueIfReady({
-  executeInput
+  executeInput,
+  pendingDecisionCard = !1
 }) {
-  let isMainThread = (cmd) => cmd.agentId === void 0, next = peek(isMainThread);
+  let isMainThread = (cmd) => cmd.agentId === void 0, deferred = /* @__PURE__ */ new Set();
+  if (pendingDecisionCard) {
+    for (let cmd of getCommandQueue())
+      isMainThread(cmd) && cmd.isMeta === !0 && (cmd.deferCount ?? 0) < MAX_INJECTION_DEFERRALS && deferred.add(cmd);
+    for (let cmd of deferred) noteInjectionDeferred(cmd);
+  }
+  let drainable = deferred.size > 0 ? (cmd) => isMainThread(cmd) && !deferred.has(cmd) : isMainThread, next = peek(drainable);
   if (!next)
     return { processed: !1 };
   if (isSlashCommand(next) || next.mode === "bash") {
-    let cmd = dequeue(isMainThread);
+    let cmd = dequeue(drainable);
     return executeInput([cmd]), { processed: !0 };
   }
-  let targetMode = next.mode, commands = dequeueAllMatching(
-    (cmd) => isMainThread(cmd) && !isSlashCommand(cmd) && cmd.mode === targetMode
+  let targetMode = next.mode, targetInjected = next.isMeta === !0, commands = dequeueAllMatching(
+    (cmd) => drainable(cmd) && !isSlashCommand(cmd) && cmd.mode === targetMode && cmd.isMeta === !0 === targetInjected
   );
   return commands.length === 0 ? { processed: !1 } : (executeInput(commands), { processed: !0 });
 }
@@ -491259,23 +491820,37 @@ function useQueueProcessor({
   ), queueSnapshot = (0, import_react287.useSyncExternalStore)(
     subscribeToCommandQueue,
     getCommandQueueSnapshot
+  ), pendingDecisionCards = (0, import_react287.useSyncExternalStore)(
+    subscribeToLeaderPendingDecisionCards,
+    leaderPendingDecisionCardCount
   );
   (0, import_react287.useEffect)(() => {
     process.env.SEMA_DEBUG && queueSnapshot.length > 0 && logForDebugging(
-      `[queue-drain] len=${queueSnapshot.length} queryActive=${isQueryActive} jsxUI=${hasActiveLocalJsxUI} modes=${queueSnapshot.map((c2) => c2.mode).join(",")}`
-    ), !isQueryActive && (hasActiveLocalJsxUI || queueSnapshot.length !== 0 && processQueueIfReady({ executeInput: executeQueuedInput }));
+      `[queue-drain] len=${queueSnapshot.length} queryActive=${isQueryActive} jsxUI=${hasActiveLocalJsxUI} cards=${pendingDecisionCards} modes=${queueSnapshot.map((c2) => c2.mode).join(",")}`
+    ), !isQueryActive && (hasActiveLocalJsxUI || queueSnapshot.length !== 0 && processQueueIfReady({
+      executeInput: executeQueuedInput,
+      // #289 批面①:有**引擎的**卡挂着 ⇒ 注入件这一拍先不出队(人类提交照走)。
+      // 🔴 减掉壳自己合成的 running 三选卡 —— 与自愈腿 `hasPendingDecision` 同一个判据
+      //    (seamQuery 装配处逐字同形)。它们进同一条 REPL 卡队列,但答那张卡**不释放会话**,
+      //    拿总长度当判据 = 用一个答不出问题的量去闸主队列(复审轮 R1 半场)。
+      // 推迟有预算(MAX_INJECTION_DEFERRALS),陈旧镜像下不会永久饿死 —— 见 processQueueIfReady。
+      pendingDecisionCard: pendingDecisionCards > openRunningChoiceCardCount()
+    }));
   }, [
     queueSnapshot,
     isQueryActive,
     executeQueuedInput,
     hasActiveLocalJsxUI,
-    queryGuard
+    queryGuard,
+    pendingDecisionCards
   ]);
 }
 var import_react287, init_useQueueProcessor = __esm({
   "build-src/src/hooks/useQueueProcessor.ts"() {
     import_react287 = __toESM(require_react(), 1);
     init_messageQueueManager();
+    init_leaderPermissionBridge();
+    init_activeRunRunningChoice();
     init_debug();
     init_queueProcessor();
   }
@@ -493135,6 +493710,52 @@ var import_react295, INBOX_POLL_INTERVAL_MS, init_useInboxPoller = __esm({
   }
 });
 
+// build-src/src/sema/planReviewModeExit.ts
+function isPlanReviewQuestionId(questionId) {
+  return typeof questionId == "string" && questionId.startsWith(PLAN_REVIEW_QUESTION_ID_PREFIX);
+}
+function shouldExitPlanModeForAnswer(questionId, answer) {
+  return isPlanReviewQuestionId(questionId) ? planReviewDecisionFromAnswer(answer) === "approve" : !1;
+}
+function reevaluateRestoreMode(ctx) {
+  let wanted = ctx.prePlanMode ?? "default";
+  if (wanted !== "auto" && wanted !== "bypassPermissions") return wanted;
+  try {
+    return wanted === "auto" ? isAutoModeGateEnabled() ? "auto" : "default" : ctx.isBypassPermissionsModeAvailable === !1 || isBypassPermissionsModeDisabled() ? "default" : "bypassPermissions";
+  } catch (e) {
+    return process.env.SEMA_DEBUG && console.error(
+      `[sema][planReviewModeExit] ${wanted} availability probe threw \u2014 falling back to default (fail-closed): ${String(e)}`
+    ), "default";
+  }
+}
+function applyPlanModeExit(prev) {
+  let ctx = prev.toolPermissionContext;
+  if (ctx.mode !== "plan") return prev;
+  let restoreMode = reevaluateRestoreMode(ctx), nextCtx;
+  try {
+    nextCtx = transitionPermissionMode("plan", restoreMode, ctx);
+  } catch (e) {
+    return process.env.SEMA_DEBUG && console.error(`[sema][planReviewModeExit] transition to ${restoreMode} threw: ${String(e)}`), { ...prev, toolPermissionContext: { ...ctx, mode: "default", prePlanMode: void 0 } };
+  }
+  return {
+    ...prev,
+    toolPermissionContext: { ...nextCtx, mode: restoreMode }
+  };
+}
+function exitPlanModeIfApproved(questionId, answer, setAppState) {
+  try {
+    return shouldExitPlanModeForAnswer(questionId, answer) ? (setAppState(applyPlanModeExit), !0) : !1;
+  } catch (e) {
+    return process.env.SEMA_DEBUG && console.error(`[sema][planReviewModeExit] exit failed for ${String(questionId)}: ${String(e)}`), !1;
+  }
+}
+var init_planReviewModeExit = __esm({
+  "build-src/src/sema/planReviewModeExit.ts"() {
+    init_dist();
+    init_permissionSetup();
+  }
+});
+
 // build-src/src/sema/resumePendingReconcile.ts
 var resumePendingReconcile_exports = {};
 __export(resumePendingReconcile_exports, {
@@ -493434,10 +494055,10 @@ async function runQuestionPermissionRequestHooks(frame, getHookToolUseContext) {
   }
   return null;
 }
-function buildQuestionToolUseConfirm(frame, getHookToolUseContext) {
+function buildQuestionToolUseConfirm(frame, getHookToolUseContext, setAppState) {
   let questionId = frame.questionId, questions = frame.questions ?? [], answerAndRelease = (answer) => {
     respondToQuestion(questionId, answer).then(() => {
-      notePlanReviewAnsweredIfDecisive(questionId, answer);
+      notePlanReviewAnsweredIfDecisive(questionId, answer), setAppState && exitPlanModeIfApproved(questionId, answer, setAppState);
     }).catch(() => {
     });
   };
@@ -493472,21 +494093,22 @@ function buildQuestionToolUseConfirm(frame, getHookToolUseContext) {
 }
 function useLiveQuestionOverlay({
   setToolUseConfirmQueue,
-  getHookToolUseContext
+  getHookToolUseContext,
+  setAppState
 }) {
   (0, import_react296.useEffect)(() => {
     let completedBeforeDialog = /* @__PURE__ */ new Set(), seenQuestionIds = /* @__PURE__ */ new Set(), alive = !0, unsubscribe = onQuestionFrame((frame) => {
       if (frame.type === "question") {
         if (!frame.questions || frame.questions.length === 0 || seenQuestionIds.has(frame.questionId)) return;
         seenQuestionIds.add(frame.questionId);
-        let entry = buildQuestionToolUseConfirm(frame, getHookToolUseContext);
+        let entry = buildQuestionToolUseConfirm(frame, getHookToolUseContext, setAppState);
         (async () => {
           let decision = await runQuestionPermissionRequestHooks(frame, getHookToolUseContext);
           if (!completedBeforeDialog.has(frame.questionId)) {
             if (decision?.behavior === "allow") {
               let updated = decision.updatedInput, wireAnswer = questionAnswersToWire(frame.questions ?? [], updated?.answers, updated?.annotations);
               respondToQuestion(frame.questionId, wireAnswer).then(() => {
-                notePlanReviewAnsweredIfDecisive(frame.questionId, wireAnswer);
+                notePlanReviewAnsweredIfDecisive(frame.questionId, wireAnswer), setAppState && exitPlanModeIfApproved(frame.questionId, wireAnswer, setAppState);
               }).catch(() => {
               });
               return;
@@ -493520,6 +494142,7 @@ var import_react296, init_useLiveQuestionOverlay = __esm({
     init_messages4();
     init_dist();
     init_armedGateRegistry2();
+    init_planReviewModeExit();
     init_resumePendingReconcile();
   }
 });
@@ -499598,9 +500221,12 @@ function REPL({
     }
     rawSetMessages(next);
   }, []);
-  (0, import_react332.useEffect)(() => registerTranscriptSystemNoticeSink((text2) => {
-    setMessages((prev) => [...prev, createSystemMessage(text2, "warning")]);
-  }), [setMessages]);
+  (0, import_react332.useEffect)(() => {
+    let unregister = registerTranscriptSystemNoticeSink((text2) => {
+      setMessages((prev) => [...prev, createSystemMessage(text2, "warning")]);
+    }), pending2 = drainPendingCcImportBootNotice();
+    return pending2 !== null && setMessages((prev) => [...prev, createSystemMessage(pending2, "info")]), unregister;
+  }, [setMessages]);
   let setUserInputOnProcessing = (0, import_react332.useCallback)((input) => {
     input !== void 0 ? (userInputBaselineRef.current = messagesRef.current.length, userMessagePendingRef.current = !0) : userMessagePendingRef.current = !1, setUserInputOnProcessingRaw(input);
   }, []), {
@@ -500998,7 +501624,9 @@ ${fileList}`);
   let getHookToolUseContext = (0, import_react332.useCallback)(() => getToolUseContext(messagesRef.current, [], new AbortController(), mainLoopModel), [getToolUseContext, mainLoopModel]);
   useLiveQuestionOverlay({
     setToolUseConfirmQueue,
-    getHookToolUseContext
+    getHookToolUseContext,
+    // #266:plan 卡 approve 后退出壳本地 plan 模式(rc.47 挂账的 app-state seam 只有这一层有)。
+    setAppState
   }), useMailboxBridge({
     isLoading,
     onSubmitMessage: handleIncomingPrompt
@@ -501531,6 +502159,7 @@ var import_compiler_runtime325, React175, import_react332, import_jsx_runtime478
     init_LocalAgentTask();
     init_leaderPermissionBridge();
     init_transcriptSystemNotice();
+    init_ccImportBootRun();
     init_sessionTracing();
     init_useLogMessages();
     init_useReplBridge();
@@ -509658,7 +510287,7 @@ var lastMemoryMessageUuid, initSessionMemoryConfigIfNeeded, hasLoggedGateFailure
 
 // build-src/src/utils/iTermBackup.ts
 import { copyFile as copyFile11, stat as stat50 } from "fs/promises";
-import { homedir as homedir47 } from "os";
+import { homedir as homedir48 } from "os";
 import { join as join193 } from "path";
 function markITerm2SetupComplete() {
   saveGlobalConfig((current5) => ({
@@ -509675,7 +510304,7 @@ function getIterm2RecoveryInfo() {
 }
 function getITerm2PlistPath() {
   return join193(
-    homedir47(),
+    homedir48(),
     "Library",
     "Preferences",
     "com.googlecode.iterm2.plist"
@@ -510114,7 +510743,7 @@ var STDOUT_GUARD_MARKER, installed2, buffer4, originalWrite, init_streamJsonStdo
 
 // build-src/src/sema/config/mcpChannels.ts
 import { readFileSync as readFileSync49 } from "node:fs";
-import { homedir as homedir48 } from "node:os";
+import { homedir as homedir49 } from "node:os";
 import { join as join194 } from "node:path";
 function mcpTransportOf(config4) {
   let c2 = config4;
@@ -510160,9 +510789,9 @@ function externalEntryToConfig(e) {
   };
 }
 function detectMcpChannels() {
-  let out6 = [], ccRoot2 = process.env.SEMA_CC_ROOT || join194(homedir48(), CC_DIR5), merged = {}, settingsServers = readJsoncSafe(join194(ccRoot2, "settings.json"))?.mcpServers;
+  let out6 = [], ccRoot2 = process.env.SEMA_CC_ROOT || join194(homedir49(), CC_DIR5), merged = {}, settingsServers = readJsoncSafe(join194(ccRoot2, "settings.json"))?.mcpServers;
   settingsServers && typeof settingsServers == "object" && Object.assign(merged, settingsServers);
-  let globalServers = readJsoncSafe(join194(homedir48(), CC_GLOBAL_FILE2))?.mcpServers;
+  let globalServers = readJsoncSafe(join194(homedir49(), CC_GLOBAL_FILE2))?.mcpServers;
   globalServers && typeof globalServers == "object" && Object.assign(merged, globalServers), Object.keys(merged).length > 0 && out6.push({ channel: "claude-code", label: CC_BRAND, servers: merged });
   for (let [channel, detected] of [
     ["openclaw", detectOpenclawMcp()],
@@ -510248,23 +510877,23 @@ var CC_DIR5, CC_GLOBAL_FILE2, MCP_SCOPE_LABELS, init_mcpChannels = __esm({
 });
 
 // build-src/src/sema/importSources.ts
-import { existsSync as existsSync33, mkdirSync as mkdirSync26, readdirSync as readdirSync12, readFileSync as readFileSync50, writeFileSync as writeFileSync26 } from "node:fs";
+import { existsSync as existsSync33, mkdirSync as mkdirSync26, readdirSync as readdirSync13, readFileSync as readFileSync50, writeFileSync as writeFileSync26 } from "node:fs";
 import { createHash as createHash29 } from "node:crypto";
-import { homedir as homedir49 } from "node:os";
+import { homedir as homedir50 } from "node:os";
 import { dirname as dirname89, join as join195, resolve as resolve49, sep as sep42 } from "node:path";
 function toSafeName(raw2) {
   return raw2.toLowerCase().replace(/[^a-z0-9_-]+/g, "-").replace(/^-+|-+$/g, "") || "item";
 }
 function safeReaddirFiles(dir, ext) {
   try {
-    return readdirSync12(dir, { withFileTypes: !0 }).filter((e) => e.isFile() && e.name.endsWith(ext)).map((e) => e.name);
+    return readdirSync13(dir, { withFileTypes: !0 }).filter((e) => e.isFile() && e.name.endsWith(ext)).map((e) => e.name);
   } catch {
     return [];
   }
 }
 function hasNamespacedSubdirs(dir) {
   try {
-    return readdirSync12(dir, { withFileTypes: !0 }).filter((e) => e.isDirectory()).map((e) => e.name);
+    return readdirSync13(dir, { withFileTypes: !0 }).filter((e) => e.isDirectory()).map((e) => e.name);
   } catch {
     return [];
   }
@@ -510444,7 +511073,7 @@ function hasShellExecMarker(body) {
   return /!\{[^}]+\}/.test(body) || /!`[^`]*`/.test(body);
 }
 function codexRoot() {
-  return process.env.SEMA_CODEX_ROOT || join195(homedir49(), ".codex");
+  return process.env.SEMA_CODEX_ROOT || join195(homedir50(), ".codex");
 }
 function codexDetect() {
   let root2 = codexRoot();
@@ -510519,7 +511148,7 @@ async function codexScan() {
   return { items, unmappable };
 }
 function geminiRoot() {
-  return process.env.SEMA_GEMINI_ROOT || join195(homedir49(), ".gemini");
+  return process.env.SEMA_GEMINI_ROOT || join195(homedir50(), ".gemini");
 }
 function geminiDetect() {
   let root2 = geminiRoot();
@@ -510632,7 +511261,7 @@ async function geminiScan() {
   return { items, unmappable };
 }
 function claudeRoot() {
-  return process.env.SEMA_CC_ROOT || join195(homedir49(), SEMA_SOURCE_DIR);
+  return process.env.SEMA_CC_ROOT || join195(homedir50(), SEMA_SOURCE_DIR);
 }
 function claudeDetect() {
   let root2 = claudeRoot();
@@ -510755,7 +511384,7 @@ __export(cmd_import_exports, {
   default: () => cmd_import_default,
   runImportNonInteractive: () => runImportNonInteractive
 });
-function plural4(n2, word) {
+function plural5(n2, word) {
   return n2 === 1 ? word : `${word}s`;
 }
 function allItems(scans) {
@@ -510766,13 +511395,13 @@ function allUnmappable(scans) {
 }
 function formatPreview(scans, from, digest, warnings) {
   let items = allItems(scans), unmappable = allUnmappable(scans), sourceNames = scans.map((s) => s.displayName).join(" and "), lines = [
-    `Found ${items.length} importable ${plural4(items.length, "item")} from ${sourceNames} (scan digest: ${digest}).`,
+    `Found ${items.length} importable ${plural5(items.length, "item")} from ${sourceNames} (scan digest: ${digest}).`,
     ...warnings
   ];
   for (let item of items)
     lines.push(`  [${item.source}] ${item.label} (${item.kind})`);
   if (unmappable.length > 0) {
-    lines.push("", `${unmappable.length} ${plural4(unmappable.length, "item")} could not be mapped automatically:`);
+    lines.push("", `${unmappable.length} ${plural5(unmappable.length, "item")} could not be mapped automatically:`);
     for (let u of unmappable)
       lines.push(`  \u26A0 [${u.source}] ${u.label}: ${u.reason}`);
   }
@@ -510792,8 +511421,8 @@ async function applyScans(scans, dryRun, warnings) {
     } catch (e) {
       resultLines.push(`  \u2717 ${item.label}: ${e instanceof Error ? e.message : String(e)}`);
     }
-  let header = dryRun ? `Dry run \u2014 would import ${imported} ${plural4(imported, "item")}:` : `Imported ${imported} ${plural4(imported, "item")}:`, footer = [...warnings];
-  return unmappable.length > 0 && footer.push("", `${unmappable.length} ${plural4(unmappable.length, "item")} could not be mapped automatically \u2014 re-run \`/import\` to review.`), [header, ...resultLines, ...footer].join(`
+  let header = dryRun ? `Dry run \u2014 would import ${imported} ${plural5(imported, "item")}:` : `Imported ${imported} ${plural5(imported, "item")}:`, footer = [...warnings];
+  return unmappable.length > 0 && footer.push("", `${unmappable.length} ${plural5(unmappable.length, "item")} could not be mapped automatically \u2014 re-run \`/import\` to review.`), [header, ...resultLines, ...footer].join(`
 `);
 }
 async function handleImport(argsRaw) {
@@ -510889,6 +511518,10 @@ async function tryPrintLocalCommand(objective, deps2 = {}) {
     let result = await (await (await Promise.resolve().then(() => (init_agents2(), agents_exports2))).default.load()).call();
     return result.type === "text" ? result.value : null;
   }
+  if (name === "team") {
+    let { runTeamCommand: runTeamCommand2 } = await Promise.resolve().then(() => (init_team(), team_exports)), result = await runTeamCommand2(args);
+    return result.type === "text" ? result.value : null;
+  }
   return null;
 }
 var MCP_USAGE, MCP_NONE, MCP_CONTROLS_UNAVAILABLE, MODEL_HELP_TOKENS, init_printLocalCommands = __esm({
@@ -511948,8 +512581,8 @@ function resolveAgentModel(opts = {}) {
   let deps2 = { ...defaultDeps, ...opts.deps }, env5 = opts.env ?? process.env, envRaw = normalize19(env5.SEMA_SUBAGENT_MODEL) ?? normalize19(env5.SEMA_CODE_SUBAGENT_MODEL);
   if (envRaw && envRaw.toLowerCase() !== "inherit")
     return resolveWord(envRaw, "env", deps2);
-  let call77 = normalize19(opts.callParam);
-  if (call77) return resolveWord(call77, "call", deps2);
+  let call78 = normalize19(opts.callParam);
+  if (call78) return resolveWord(call78, "call", deps2);
   let fm = normalize19(opts.frontmatterModel);
   return fm ? resolveWord(fm, "frontmatter", deps2) : { model: "inherit", source: "main", kind: "inherit" };
 }
@@ -514161,17 +514794,19 @@ Error: sandbox required but unavailable: ${sandboxUnavailableReason}
         // 文本形态源之一),(b) 只会渲本地 loop 语义的模板句 —— 引擎终帧(timeout→error_max_turns、
         // budget、output.invalid)带 errors[] 引擎原话时优先如实渲它(--deadline 的 timeout 若渲
         // "Reached max turns (undefined)" 是撒谎)。errors[] 缺席时维持 CC 模板句(补 \n)。
+        // #289 批面③(dogfood 复扫 api C1)—— **错档前缀**。这三个 subtype 全是引擎侧治理限额
+        // 到限(轮数 / USD 预算 / 结构化输出重试),不是 provider 或 HTTP 层故障;此前 errors[]
+        // 臂经 formatTextModeExecutionError 无条件补 `API Error: `,于是 `sema -p --max-turns N`
+        // 的 STDERR 逐字是 `API Error: max turns exceeded`,把用户支去查网络/密钥/额度。而同一臂
+        // 自己的 CC 对齐模板刻意不带 `API` 字样 —— 两条路径对同一类终态说了两种身份,且由于上游
+        // terminalToSdkResult 恒填非空 errors[],真跑到的永远是补前缀那条(模板等同死码)。
+        // 修 = 两条路径合流到一个中性格式化器:有引擎原话就用原话(前缀 `Error: `),没有才落模板。
         case "error_max_turns":
         case "error_max_budget_usd":
         case "error_max_structured_output_retries": {
-          let engineErrors = lastMessage.errors;
-          if (Array.isArray(engineErrors) && engineErrors.length > 0) {
-            process.stderr.write(formatTextModeExecutionError(engineErrors, mergedModelEnv()) + `
-`);
-            break;
-          }
-          let template = lastMessage.subtype === "error_max_turns" ? `Error: Reached max turns (${options.maxTurns})` : lastMessage.subtype === "error_max_budget_usd" ? `Error: Exceeded USD budget (${options.maxBudgetUsd})` : "Error: Failed to provide valid structured output after maximum retries";
-          writeToStdout(template + `
+          let engineErrors = lastMessage.errors, template = lastMessage.subtype === "error_max_turns" ? `Error: Reached max turns (${options.maxTurns})` : lastMessage.subtype === "error_max_budget_usd" ? `Error: Exceeded USD budget (${options.maxBudgetUsd})` : "Error: Failed to provide valid structured output after maximum retries", line = formatTextModeGovernanceStop(engineErrors, template);
+          line === template ? writeToStdout(template + `
+`) : process.stderr.write(line + `
 `);
           break;
         }
@@ -517299,7 +517934,7 @@ __export(claudeDesktop_exports, {
   readClaudeDesktopMcpServers: () => readClaudeDesktopMcpServers
 });
 import { readdir as readdir33, readFile as readFile58, stat as stat52 } from "fs/promises";
-import { homedir as homedir50 } from "os";
+import { homedir as homedir51 } from "os";
 import { join as join198 } from "path";
 async function getClaudeDesktopConfigPath() {
   let platform4 = getPlatform();
@@ -517309,7 +517944,7 @@ async function getClaudeDesktopConfigPath() {
     );
   if (platform4 === "macos")
     return join198(
-      homedir50(),
+      homedir51(),
       "Library",
       "Application Support",
       "Claude",
@@ -517794,18 +518429,18 @@ __export(adoptionGuard_exports, {
   countLocalSessionArtifacts: () => countLocalSessionArtifacts,
   remoteSwitchSessionNotice: () => remoteSwitchSessionNotice
 });
-import { readdirSync as readdirSync13, existsSync as existsSync34 } from "node:fs";
+import { readdirSync as readdirSync14, existsSync as existsSync34 } from "node:fs";
 import { join as join199 } from "node:path";
 function countLocalSessionArtifacts() {
   let census = { projects: 0, sessions: 0 };
   try {
     let root2 = getProjectsDir();
     if (!existsSync34(root2)) return census;
-    for (let entry of readdirSync13(root2, { withFileTypes: !0 })) {
+    for (let entry of readdirSync14(root2, { withFileTypes: !0 })) {
       if (!entry.isDirectory()) continue;
       let n2 = 0;
       try {
-        n2 = readdirSync13(join199(root2, entry.name)).filter((f) => f.endsWith(".jsonl")).length;
+        n2 = readdirSync14(join199(root2, entry.name)).filter((f) => f.endsWith(".jsonl")).length;
       } catch {
         continue;
       }
@@ -519704,7 +520339,7 @@ __export(cloudResources_exports, {
   cloudResourceSync: () => cloudResourceSync
 });
 import { createHash as createHash30 } from "node:crypto";
-import { existsSync as existsSync36, readdirSync as readdirSync14, readFileSync as readFileSync54, statSync as statSync16 } from "node:fs";
+import { existsSync as existsSync36, readdirSync as readdirSync15, readFileSync as readFileSync54, statSync as statSync16 } from "node:fs";
 import { basename as basename69, dirname as dirname91, isAbsolute as isAbsolute34, join as join202, resolve as resolve50 } from "node:path";
 import { getEffective as getEffective2, getMeConfig, getScopeConfigDraft as getScopeConfigDraft2, OAuthFlowError as OAuthFlowError3, RegistryApiError as RegistryApiError3 } from "@sema-agent/sdk/registry";
 function fail4(e) {
@@ -520203,7 +520838,7 @@ async function loadLocalSkillEntries() {
   for (let root2 of roots) {
     let dirs = [];
     try {
-      dirs = readdirSync14(root2).filter((d4) => {
+      dirs = readdirSync15(root2).filter((d4) => {
         try {
           return statSync16(join202(root2, d4)).isDirectory() && existsSync36(join202(root2, d4, "SKILL.md"));
         } catch {
@@ -524609,9 +525244,9 @@ var install_exports = {};
 __export(install_exports, {
   install: () => install
 });
-import { homedir as homedir51 } from "node:os";
+import { homedir as homedir52 } from "node:os";
 function getInstallationPath2(realPath) {
-  let isWindows2 = env2.platform === "win32", homeDir = homedir51();
+  let isWindows2 = env2.platform === "win32", homeDir = homedir52();
   return isWindows2 ? realPath.replace(/\//g, "\\") : realPath.startsWith(homeDir) ? `~${realPath.slice(homeDir.length)}` : realPath;
 }
 function SetupNotes(t0) {
@@ -525337,18 +525972,18 @@ var configSync_exports = {};
 __export(configSync_exports, {
   configSyncHandler: () => configSyncHandler
 });
-import { homedir as homedir52 } from "node:os";
+import { homedir as homedir53 } from "node:os";
 import {
   copyFileSync as copyFileSync8,
   existsSync as existsSync38,
   mkdirSync as mkdirSync28,
-  readdirSync as readdirSync15,
+  readdirSync as readdirSync16,
   readFileSync as readFileSync55,
   statSync as statSync18
 } from "node:fs";
 import { dirname as dirname95, join as join207, relative as relative37 } from "node:path";
 function display(p) {
-  let home = homedir52();
+  let home = homedir53();
   return p.startsWith(home) ? "~" + p.slice(home.length) : p;
 }
 function filesEqual(a, b3) {
@@ -525463,7 +526098,7 @@ function syncTree(srcDir, destDir, labelBase, opts, report) {
     syncPlainFile(srcDir, destDir, labelBase, opts, report);
     return;
   }
-  for (let name of readdirSync15(srcDir)) {
+  for (let name of readdirSync16(srcDir)) {
     let srcChild = join207(srcDir, name), destChild = join207(destDir, name), childStat;
     try {
       childStat = statSync18(srcChild);
@@ -525543,7 +526178,7 @@ async function configSyncHandler(opts) {
   }, dryTag = opts.dryRun ? source_default.yellow(" [dry-run]") : "";
   process.stdout.write(source_default.bold(`sema config sync${dryTag}
 `));
-  let userSrc = join207(homedir52(), LEGACY_DIR3), userDest = getClaudeConfigHomeDir();
+  let userSrc = join207(homedir53(), LEGACY_DIR3), userDest = getClaudeConfigHomeDir();
   process.stdout.write(
     source_default.bold(`
 user: ${display(userSrc)} \u2192 ${display(userDest)}
@@ -525562,7 +526197,7 @@ user: ${display(userSrc)} \u2192 ${display(userDest)}
     opts,
     report
   );
-  let globalSrc = join207(homedir52(), LEGACY_GLOBAL_FILE), globalDest = getGlobalClaudeFile();
+  let globalSrc = join207(homedir53(), LEGACY_GLOBAL_FILE), globalDest = getGlobalClaudeFile();
   if (existsSync38(globalSrc) && globalSrc !== globalDest && syncJsonFile(globalSrc, globalDest, display(globalDest), opts, report), flushEntries(report, userStart, opts), opts.project) {
     let projSrc = join207(process.cwd(), LEGACY_DIR3), projDest = join207(process.cwd(), ".sema");
     process.stdout.write(
@@ -525658,7 +526293,7 @@ __export(importCredentials_exports, {
 });
 import { execFileSync as execFileSync7 } from "node:child_process";
 import { readFileSync as readFileSync56 } from "node:fs";
-import { homedir as homedir53, userInfo as userInfo4 } from "node:os";
+import { homedir as homedir54, userInfo as userInfo4 } from "node:os";
 import { join as join208 } from "node:path";
 function readCcKeychain() {
   if (process.platform !== "darwin") return null;
@@ -525681,7 +526316,7 @@ function readCcFile(ccRoot2) {
   }
 }
 async function importCredentialsHandler(opts) {
-  let ccRoot2 = opts.from ?? join208(homedir53(), LEGACY_DIR4), fromKeychain = readCcKeychain(), fromFile = readCcFile(ccRoot2);
+  let ccRoot2 = opts.from ?? join208(homedir54(), LEGACY_DIR4), fromKeychain = readCcKeychain(), fromFile = readCcFile(ccRoot2);
   if (!fromKeychain && !fromFile) {
     console.log(`No ${SOURCE_BRAND2} credentials found (checked keychain and ${ccRoot2}/.credentials.json).`), process.exitCode = 1;
     return;
@@ -527676,7 +528311,7 @@ var React192, import_jsx_runtime504, init_navStack = __esm({
 
 // build-src/src/sema/config/PluginsHub.tsx
 import { readFileSync as readFileSync57 } from "node:fs";
-import { homedir as homedir54 } from "node:os";
+import { homedir as homedir55 } from "node:os";
 import { join as join209 } from "node:path";
 function listInstalledPluginRows() {
   let plugins = {};
@@ -527710,7 +528345,7 @@ function readJsonSafe(path28) {
   }
 }
 function detectCcPlugins() {
-  let ccRoot2 = process.env.SEMA_CC_ROOT || join209(homedir54(), CC_DIR6), byId = /* @__PURE__ */ new Map(), pluginsField = readJsonSafe(join209(ccRoot2, "plugins", "installed_plugins.json"))?.plugins;
+  let ccRoot2 = process.env.SEMA_CC_ROOT || join209(homedir55(), CC_DIR6), byId = /* @__PURE__ */ new Map(), pluginsField = readJsonSafe(join209(ccRoot2, "plugins", "installed_plugins.json"))?.plugins;
   if (pluginsField && typeof pluginsField == "object")
     for (let [id, v2] of Object.entries(pluginsField)) {
       let entry = Array.isArray(v2) ? v2[0] : v2;
@@ -528345,7 +528980,7 @@ var React194, import_jsx_runtime506, lastTierEditError, init_TiersHub = __esm({
 });
 
 // build-src/src/sema/config/skillsChannels.ts
-import { existsSync as existsSync39, mkdirSync as mkdirSync29, readdirSync as readdirSync16, readFileSync as readFileSync58, realpathSync as realpathSync15, renameSync as renameSync17, statSync as statSync19 } from "node:fs";
+import { existsSync as existsSync39, mkdirSync as mkdirSync29, readdirSync as readdirSync17, readFileSync as readFileSync58, realpathSync as realpathSync15, renameSync as renameSync17, statSync as statSync19 } from "node:fs";
 import { basename as basename72, dirname as dirname96, join as join210 } from "node:path";
 function skillsDirFor(source) {
   return source === "user" ? join210(getClaudeConfigHomeDir(), "skills") : join210(getCwd(), ".sema", "skills");
@@ -528392,7 +529027,7 @@ function listInstalledSkills() {
   for (let source of sources) {
     let dir = skillsDirFor(source), entries;
     try {
-      entries = readdirSync16(dir).filter((n2) => !n2.startsWith("."));
+      entries = readdirSync17(dir).filter((n2) => !n2.startsWith("."));
     } catch {
       continue;
     }
@@ -528961,20 +529596,11 @@ function stationSkipped(id) {
     if (id === "mcp") return detectMcpChannels().length === 0;
     if (id === "skills") return detectSkillChannels().length === 0;
     if (id === "plugins") return detectCcPlugins().plugins.length === 0;
-    if (id === "rules")
-      return readCcImportMarker() !== null ? !0 : !detectCcRulesImport().offer;
   } catch {
     return !1;
   }
   return !1;
 }
-function rulesSkipSummary() {
-  try {
-    return readCcImportMarker() !== null ? "already imported once \u2014 re-import anytime from `/permissions`" : detectCcRulesImport().why === "lane-unavailable" ? "skipped \u2014 this engine has no rule store (manage saved rules from `/permissions`)" : "no permission rules found to import (manage saved rules from `/permissions`)";
-  } catch {
-    return "skipped (manage saved rules from `/permissions`)";
-  }
-}
 function finalize2(flow) {
   if (!flow.finalized) {
     flow.finalized = !0;
@@ -528994,15 +529620,10 @@ function finalize2(flow) {
     } catch (e) {
       flow.summary.push(`model      apply failed: ${e instanceof Error ? e.message : String(e)}`);
     }
-    for (let id of flow.skippedIds) {
-      if (id === "rules") {
-        flow.summary.push(`rules      ${rulesSkipSummary()}`);
-        continue;
-      }
+    for (let id of flow.skippedIds)
       flow.summary.push(
         `${id.padEnd(10)} nothing to import \u2014 skipped (run \`sema config ${id}\` anytime)`
       );
-    }
   }
 }
 function StationFrame({ flow, children }) {
@@ -529159,7 +529780,7 @@ function OnboardWizardBody({
     () => ({ summary: [], skippedIds: /* @__PURE__ */ new Set(), finalized: !1, zeroModels: !1, escArmedAt: 0, ctrlCArmedAt: 0, station: null }),
     []
   ), chain = React198.useMemo(
-    () => modelOnly ? ["model"] : ["language", "theme", "model", "tiers", "mcp", "skills", "plugins", "rules"],
+    () => modelOnly ? ["model"] : ["language", "theme", "model", "tiers", "mcp", "skills", "plugins"],
     [modelOnly]
   ), setUiLanguage = useSetUiLanguage(), t2 = useT(), tRef = React198.useRef(t2);
   tRef.current = t2;
@@ -529239,28 +529860,6 @@ function OnboardWizardBody({
           }
         )
       };
-    if (id === "rules") {
-      let rulesNavRef = { current: null }, detected = detectCcRulesImport();
-      return {
-        key: "onboard-rules",
-        wantsEsc: () => {
-          let nav = rulesNavRef.current;
-          return !nav || goBack(i, nav) ? !0 : firstStationEsc();
-        },
-        render: (nav) => (rulesNavRef.current = nav, /* @__PURE__ */ (0, import_jsx_runtime511.jsxs)(ThemedBox_default, { flexDirection: "column", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime511.jsx)(ThemedText, { dimColor: !0, children: tt2("onboard.blurb.rules") }),
-          /* @__PURE__ */ (0, import_jsx_runtime511.jsx)(
-            CcRulesImportFlow,
-            {
-              layers: detected.layers,
-              onDone: (summary) => {
-                summary !== null && flow.summary.push(summary), advance(i, nav);
-              }
-            }
-          )
-        ] }))
-      };
-    }
     let navRef = { current: null }, onboardOpts = {
       blurb: tt2(STATION_BLURB_KEYS[id]),
       continueLabel: "Continue \u2192",
@@ -529301,10 +529900,7 @@ var React198, import_jsx_runtime511, STATION_LABEL_KEYS, STATION_WORDS, STATION_
     init_TiersHub();
     init_skillsChannels();
     init_SkillsHub();
-    init_ccImportMarker();
     init_BigStepTitle();
-    init_CcRulesImportFlow();
-    init_ccRulesImport();
     init_LanguageStation();
     init_onboardVerification();
     init_onboardZeroModel();
@@ -529319,8 +529915,7 @@ var React198, import_jsx_runtime511, STATION_LABEL_KEYS, STATION_WORDS, STATION_
       tiers: "onboard.station.tiers",
       mcp: "onboard.station.mcp",
       skills: "onboard.station.skills",
-      plugins: "onboard.station.plugins",
-      rules: "onboard.station.rules"
+      plugins: "onboard.station.plugins"
     }, STATION_WORDS = {
       language: "LANGUAGE",
       theme: "THEME",
@@ -529328,15 +529923,13 @@ var React198, import_jsx_runtime511, STATION_LABEL_KEYS, STATION_WORDS, STATION_
       tiers: "TIERS",
       mcp: "MCP",
       skills: "SKILLS",
-      plugins: "PLUGINS",
-      rules: "RULES"
+      plugins: "PLUGINS"
     }, STATION_BLURB_KEYS = {
       model: "onboard.blurb.model",
       tiers: "onboard.blurb.tiers",
       mcp: "onboard.blurb.mcp",
       skills: "onboard.blurb.skills",
-      plugins: "onboard.blurb.plugins",
-      rules: "onboard.blurb.rules"
+      plugins: "onboard.blurb.plugins"
     };
     WELCOME_WORDMARK = [
       ["#00E5FF", "\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2557   \u2588\u2588\u2588\u2557  \u2588\u2588\u2588\u2588\u2588\u2557 "],
@@ -529790,7 +530383,12 @@ ${addendum}` : addendum;
       notification: permissionModeNotification
     } = initialPermissionModeFromCLI({
       permissionModeCli,
-      dangerouslySkipPermissions
+      dangerouslySkipPermissions,
+      // sema 出厂默认 auto([4197]⑤)仅真交互车道。判据必须是 isNonInteractive 全开集
+      // (print/--init-only/SDK URL/stdout 非 TTY 四臂,839 行铸位)而非 `!print` 单臂——
+      // 1.0.83 扫码异源复审 F2:stdout 重定向且无 -p 时 print=false 却走 headless,单臂判据
+      // 会让无人值守车道漏进出厂 auto。#164/#165 headless 门链以 default 为前提。
+      factoryDefaultAutoEligible: !getIsNonInteractiveSession()
     });
     setSessionBypassPermissionsMode(permissionMode === "bypassPermissions"), (options.enableAutoMode || permissionModeCli === "auto" || permissionMode === "auto" || !permissionModeCli && isDefaultPermissionModeAuto()) && autoModeStateModule7?.setAutoModeFlagCli(!0);
     let dynamicMcpConfig = {};
@@ -530692,7 +531290,7 @@ Usage: sema --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("sema 1.0.81", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
+  }).version("sema 1.0.83", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).psHandler([]), process.exit(process.exitCode ?? 0);
   }), program2.command("logs [id]").description("Print a background session's recent terminal output").action(async (id) => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).logsHandler(id, []), process.exit(process.exitCode ?? 0);
@@ -530700,7 +531298,7 @@ Usage: sema --remote "your task description"`, () => gracefulShutdown(1));
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).attachHandler(id, []), process.exit(process.exitCode ?? 0);
   }), program2.command("kill [id]").description("Terminate a background session").action(async (id) => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).killHandler(id, []), process.exit(process.exitCode ?? 0);
-  }), program2.addOption(new Option("--brief", "Enable SendUserMessage tool for agent-to-user communication")), program2.addOption(new Option("--ax-screen-reader", "Render screen-reader friendly output (flat text, no decorative borders or animations).")), program2.addOption(new Option("--enable-auto-mode", "Opt in to auto mode").hideHelp()), program2.addOption(new Option("--agent-id <id>", "Teammate agent ID").hideHelp()), program2.addOption(new Option("--agent-name <name>", "Teammate display name").hideHelp()), program2.addOption(new Option("--team-name <name>", "Team name for swarm coordination").hideHelp()), program2.addOption(new Option("--agent-color <color>", "Teammate UI color").hideHelp()), program2.addOption(new Option("--plan-mode-required", "Require plan mode before implementation").hideHelp()), program2.addOption(new Option("--parent-session-id <id>", "Parent session ID for analytics correlation").hideHelp()), program2.addOption(new Option("--teammate-mode <mode>", 'How to spawn teammates: "tmux", "iterm2", "in-process", or "auto"').choices(["auto", "tmux", "iterm2", "in-process"]).hideHelp()), program2.addOption(new Option("--agent-type <type>", "Custom agent type for this teammate").hideHelp()), program2.addOption(new Option("--sdk-url <url>", "Use remote WebSocket endpoint for SDK I/O streaming (only with -p and stream-json format)").hideHelp()), program2.addOption(new Option("--teleport [session]", "Resume a teleport session, optionally specify session ID").hideHelp()), program2.addOption(new Option("--cloud [description|session_id|url]", "Create a cloud session with the given description, or attach to an existing one by session ID or claude.ai/code URL").hideHelp()), program2.addOption(new Option("--remote [description|session_id|url]", "Deprecated alias for --cloud").hideHelp()), program2.addOption(new Option("--remote-control [name]", "Start an interactive session with Remote Control enabled (optionally named)").argParser((value) => value || !0)), program2.addOption(new Option("--rc [name]", "Alias for --remote-control").argParser((value) => value || !0).hideHelp()), program2.option("--remote-control-session-name-prefix <prefix>", "Prefix for auto-generated Remote Control session names (default: hostname)"), profileCheckpoint("run_main_options_built");
+  }), program2.addOption(new Option("--brief", "Enable SendUserMessage tool for agent-to-user communication")), program2.addOption(new Option("--ax-screen-reader", "Render screen-reader friendly output (flat text, no decorative borders or animations).")), program2.option("--agent-teams", "Enable agent teams: named persistent teammates with a shared task list (experimental, off by default)", () => !0), program2.addOption(new Option("--enable-auto-mode", "Opt in to auto mode").hideHelp()), program2.addOption(new Option("--agent-id <id>", "Teammate agent ID").hideHelp()), program2.addOption(new Option("--agent-name <name>", "Teammate display name").hideHelp()), program2.addOption(new Option("--team-name <name>", "Team name for swarm coordination").hideHelp()), program2.addOption(new Option("--agent-color <color>", "Teammate UI color").hideHelp()), program2.addOption(new Option("--plan-mode-required", "Require plan mode before implementation").hideHelp()), program2.addOption(new Option("--parent-session-id <id>", "Parent session ID for analytics correlation").hideHelp()), program2.addOption(new Option("--teammate-mode <mode>", 'How to spawn teammates: "tmux", "iterm2", "in-process", or "auto"').choices(["auto", "tmux", "iterm2", "in-process"]).hideHelp()), program2.addOption(new Option("--agent-type <type>", "Custom agent type for this teammate").hideHelp()), program2.addOption(new Option("--sdk-url <url>", "Use remote WebSocket endpoint for SDK I/O streaming (only with -p and stream-json format)").hideHelp()), program2.addOption(new Option("--teleport [session]", "Resume a teleport session, optionally specify session ID").hideHelp()), program2.addOption(new Option("--cloud [description|session_id|url]", "Create a cloud session with the given description, or attach to an existing one by session ID or claude.ai/code URL").hideHelp()), program2.addOption(new Option("--remote [description|session_id|url]", "Deprecated alias for --cloud").hideHelp()), program2.addOption(new Option("--remote-control [name]", "Start an interactive session with Remote Control enabled (optionally named)").argParser((value) => value || !0)), program2.addOption(new Option("--rc [name]", "Alias for --remote-control").argParser((value) => value || !0).hideHelp()), program2.option("--remote-control-session-name-prefix <prefix>", "Prefix for auto-generated Remote Control session names (default: hostname)"), profileCheckpoint("run_main_options_built");
   let isPrintMode = process.argv.includes("-p") || process.argv.includes("--print"), isCcUrl = process.argv.some((a) => a.startsWith("cc://") || a.startsWith("cc+unix://"));
   if (isPrintMode && !isCcUrl)
     return profileCheckpoint("run_before_parse"), await program2.parseAsync(process.argv), profileCheckpoint("run_after_parse"), program2;
@@ -531211,7 +531809,7 @@ Usage: sema --remote "your task description"`, () => gracefulShutdown(1));
         let after = installedVersion2();
         console.log(`sema ${cur ?? "unknown"} \u2192 ${after ?? "unknown"}${cur === after ? " (forced reinstall, same version)" : ""}`);
         let { finalizeEngineSwapAfterUpdate: finalizeEngineSwapAfterUpdate2 } = await Promise.resolve().then(() => (init_semaUpdater(), semaUpdater_exports));
-        await finalizeEngineSwapAfterUpdate2(after ?? latest), process.exit(0);
+        await finalizeEngineSwapAfterUpdate2(after ?? latest), console.log("Run 'sema doctor' to verify your configuration on the new version."), process.exit(0);
       }
     }
     let {
@@ -532305,7 +532903,7 @@ var TrustDialog_exports = {};
 __export(TrustDialog_exports, {
   TrustDialog: () => TrustDialog
 });
-import { homedir as homedir55 } from "os";
+import { homedir as homedir56 } from "os";
 function TrustDialog(t0) {
   let $3 = (0, import_compiler_runtime350.c)(33), {
     onDone,
@@ -532336,7 +532934,7 @@ function TrustDialog(t0) {
   $3[11] !== commands ? (t11 = commands?.some(_temp437) ?? !1, $3[11] = commands, $3[12] = t11) : t11 = $3[12];
   let hasSkillsBash = t11, hasAnyBashExecution = bashSettingSources.length > 0 || hasSlashCommandBash || hasSkillsBash, hasTrustDialogAccepted = checkHasTrustDialogAccepted(), t12, t13;
   $3[13] !== hasAnyBashExecution ? (t12 = () => {
-    let isHomeDir = homedir55() === getCwd();
+    let isHomeDir = homedir56() === getCwd();
   }, t13 = [hasMcpServers, hasHooks2, hasAnyBashExecution, hasApiKeyHelper2, hasAwsCommands2, hasGcpCommands2, hasOtelHeadersHelper2, hasDangerousEnvVars2], $3[13] = hasAnyBashExecution, $3[14] = t12, $3[15] = t13) : (t12 = $3[14], t13 = $3[15]), import_react350.default.useEffect(t12, t13);
   let t14;
   $3[16] !== hasAnyBashExecution || $3[17] !== onDone ? (t14 = function(value) {
@@ -532344,7 +532942,7 @@ function TrustDialog(t0) {
       gracefulShutdownSync(1);
       return;
     }
-    let isHomeDir_0 = homedir55() === getCwd();
+    let isHomeDir_0 = homedir56() === getCwd();
     isHomeDir_0 ? setSessionTrustAccepted(!0) : saveCurrentProjectConfig(_temp523), onDone();
   }, $3[16] = hasAnyBashExecution, $3[17] = onDone, $3[18] = t14) : t14 = $3[18];
   let onChange = t14, exitState = useExitOnCtrlCDWithKeybindings(_temp619), t15;
@@ -532683,7 +533281,7 @@ async function showSetupScreens(root2, permissionMode, allowDangerouslySkipPermi
     } = await Promise.resolve().then(() => (init_BypassPermissionsModeDialog(), BypassPermissionsModeDialog_exports));
     await showSetupDialog(root2, (done) => /* @__PURE__ */ (0, import_jsx_runtime526.jsx)(BypassPermissionsModeDialog2, { onAccept: done }));
   }
-  if (permissionMode === "auto" && !hasAutoModeOptIn()) {
+  if (permissionMode === "auto" && !hasAutoModeOptIn() && !isFactoryDefaultAutoActive()) {
     let {
       AutoModeOptInDialog: AutoModeOptInDialog2
     } = await Promise.resolve().then(() => (init_AutoModeOptInDialog(), AutoModeOptInDialog_exports));
@@ -532750,6 +533348,7 @@ var import_jsx_runtime526, init_interactiveHelpers = __esm({
     init_AppState();
     init_onChangeAppState();
     init_authPortable();
+    init_permissionSetup();
     init_claudemd();
     init_config();
     init_terminalPreference();
@@ -533289,13 +533888,13 @@ __export(claudeImportHint_exports, {
   maybeEmitClaudeImportHint: () => maybeEmitClaudeImportHint
 });
 import { existsSync as existsSync40 } from "node:fs";
-import { homedir as homedir56 } from "node:os";
+import { homedir as homedir57 } from "node:os";
 import { join as join212 } from "node:path";
 function shouldShowClaudeImportHint() {
   try {
     if (process.env.SEMA_CONFIG_DIR || process.env["CLAUDE_CONFIG_DIR"]) return !1;
-    let legacyDir = join212(homedir56(), ".claude");
-    return !(!existsSync40(legacyDir) || existsSync40(join212(homedir56(), ".sema")) || getGlobalConfig().hasSeenClaudeImportHint);
+    let legacyDir = join212(homedir57(), ".claude");
+    return !(!existsSync40(legacyDir) || existsSync40(join212(homedir57(), ".sema")) || getGlobalConfig().hasSeenClaudeImportHint);
   } catch {
     return !1;
   }
@@ -533689,7 +534288,7 @@ var init_schedulerDaemonWire = __esm({
 });
 
 // build-src/src/sema/scheduler/sessionReap.ts
-import { mkdirSync as mkdirSync32, readdirSync as readdirSync17, readFileSync as readFileSync63, unlinkSync as unlinkSync15, writeFileSync as writeFileSync30 } from "node:fs";
+import { mkdirSync as mkdirSync32, readdirSync as readdirSync18, readFileSync as readFileSync63, unlinkSync as unlinkSync15, writeFileSync as writeFileSync30 } from "node:fs";
 import { dirname as dirname99, join as join215 } from "node:path";
 function isSessionLifetimeRecord(r) {
   return r.lifetime === "session";
@@ -533743,7 +534342,7 @@ function removeSchedulerClaim(storePath, pid = process.pid) {
 function readAliveClaimedSessionIds(storePath, opts = {}) {
   let alive = opts.isPidAlive ?? pidAlive3, dir = schedulerClaimsDir(storePath), out6 = /* @__PURE__ */ new Set(), files2;
   try {
-    files2 = readdirSync17(dir);
+    files2 = readdirSync18(dir);
   } catch {
     return out6;
   }
@@ -534227,11 +534826,11 @@ var init_skillsFill = __esm({
 });
 
 // build-src/src/sema/teamOnboarding.ts
-import { existsSync as existsSync42, readdirSync as readdirSync18 } from "fs";
+import { existsSync as existsSync42, readdirSync as readdirSync19 } from "fs";
 function hasWorkspaceData() {
   try {
     let dir = getProjectsDir2();
-    return existsSync42(dir) ? readdirSync18(dir).length > 0 : !1;
+    return existsSync42(dir) ? readdirSync19(dir).length > 0 : !1;
   } catch {
     return !1;
   }
@@ -535316,7 +535915,7 @@ __export(mcpFill_exports, {
   default: () => mcpFill_default,
   loadCanonicalMcpClients: () => loadCanonicalMcpClients
 });
-import { homedir as homedir57 } from "os";
+import { homedir as homedir58 } from "os";
 import { readFileSync as readFileSync64 } from "fs";
 function builtinDynamicConfig(command8) {
   return { type: "stdio", command: command8, args: [], scope: "dynamic" };
@@ -535329,7 +535928,7 @@ function builtinDynamicClients() {
   }));
 }
 function canonicalGlobalConfigFile() {
-  return `${process.env.HOME ?? process.env.USERPROFILE ?? homedir57()}/.claude.json`;
+  return `${process.env.HOME ?? process.env.USERPROFILE ?? homedir58()}/.claude.json`;
 }
 async function loadCanonicalMcpClients() {
   try {
@@ -535376,8 +535975,8 @@ var BUILTIN_DYNAMIC, mcpFill_default, init_mcpFill = __esm({
 });
 
 // build-src/stubs/bun-bundle.js
-var bun_bundle_exports = {};
-__export(bun_bundle_exports, {
+var bun_bundle_exports2 = {};
+__export(bun_bundle_exports2, {
   feature: () => feature2
 });
 function feature2(flag) {
@@ -537189,7 +537788,9 @@ async function main2() {
     liveWorkflowBaseUrl ? (liveWorkflowSource = createLiveWorkflowSource({
       baseUrl: liveWorkflowBaseUrl,
       authToken: process.env.SEMA_WORKFLOW_TOKEN || process.env.SEMA_FLEET_TOKEN || "anon",
-      principal: process.env.SEMA_WORKFLOW_PRINCIPAL ?? process.env.SEMA_FLEET_PRINCIPAL ?? "anon:sema",
+      // principal 恒经闸口(F-011/[4189];workflow 专属 env 显式恒赢,回落 fleet→live 解析
+      // 链缺省 'default'——同文件 workflow monitor 臂同形;anon 前缀哨兵残留已清)
+      principal: process.env.SEMA_WORKFLOW_PRINCIPAL ?? resolveFleetPrincipal(),
       ...process.env.SEMA_WORKFLOW_ID ? { workflowId: process.env.SEMA_WORKFLOW_ID } : {}
     }), process.env.SEMA_DEBUG && console.error(
       `[sema] workflow source: LIVE WIRE (${liveWorkflowBaseUrl}) \u2014 createLiveWorkflowSource`
@@ -537237,7 +537838,9 @@ async function main2() {
         let { createLiveFleetSource: createLiveFleetSource2 } = await Promise.resolve().then(() => (init_fleetClient(), fleetClient_exports)), source2 = createLiveFleetSource2({
           baseUrl: liveBaseUrl,
           authToken: process.env.SEMA_FLEET_TOKEN || "anon",
-          principal: process.env.SEMA_FLEET_PRINCIPAL ?? "anon:sema"
+          // principal 恒经闸口(F-011/[4189]:resolveFleetPrincipal 内部先认 SEMA_FLEET_PRINCIPAL
+          // 显式值,缺省 'default' 租户键;anon 前缀哨兵残留已清)
+          principal: resolveFleetPrincipal()
         });
         return process.env.SEMA_DEBUG && console.error(`[sema] fleet source: LIVE WIRE (${liveBaseUrl}) \u2014 createLiveFleetSource`), source2;
       }
@@ -537973,7 +538576,7 @@ async function launchReplProduction() {
     let offlineFallback = process.env.SEMA_LIVE_BASEURL ? "unknown" : "opus[1m]";
     initialState.mainLoopModel = resolved ?? offlineFallback;
   }
-  let bypassModeLaunch = !1, settingsRejectionNotices = [];
+  let bypassModeLaunch = !1, settingsRejectionNotices = [], bootFailClosedNotices = [];
   try {
     let argv = process.argv.slice(2), allowDangerouslySkipPermissions = argv.includes("--dangerously-skip-permissions"), pmIdx = argv.indexOf("--permission-mode"), cliPermissionMode = pmIdx >= 0 ? argv[pmIdx + 1] : void 0, { PERMISSION_MODES: PERMISSION_MODES3 } = await Promise.resolve().then(() => (init_PermissionMode(), PermissionMode_exports)), launchMode = ((m2) => !!m2 && PERMISSION_MODES3.includes(m2))(cliPermissionMode) ? cliPermissionMode : allowDangerouslySkipPermissions ? "bypassPermissions" : void 0, settingsDisableBypass = !0;
     try {
@@ -537985,23 +538588,35 @@ async function launchReplProduction() {
         () => getInitialSettings2()?.permissions?.disableBypassPermissionsMode,
         () => mdmMod.filterManagedPolicyErrors(getSettingsWithErrors2().errors)
       );
-      settingsDisableBypass = verdict.disable, verdict.loudReason && process.stderr.write(
-        `[sema] bypassPermissions kept unavailable (fail-closed): ${verdict.loudReason}
-`
-      );
+      if (settingsDisableBypass = verdict.disable, verdict.loudReason) {
+        let msg = `bypassPermissions kept unavailable (fail-closed): ${verdict.loudReason}`;
+        process.stderr.write(`[sema] ${msg}
+`), bootFailClosedNotices.push(msg);
+      }
     } catch (e) {
-      settingsDisableBypass = !0, process.stderr.write(
-        `[sema] settings read failed \u2014 bypassPermissions kept unavailable (fail-closed): ${e instanceof Error ? e.message : String(e)}
-`
-      );
+      settingsDisableBypass = !0;
+      let msg = `settings read failed \u2014 bypassPermissions kept unavailable (fail-closed): ${e instanceof Error ? e.message : String(e)}`;
+      process.stderr.write(`[sema] ${msg}
+`), bootFailClosedNotices.push(msg);
     }
     let isBypassPermissionsModeAvailable = (launchMode === "bypassPermissions" || allowDangerouslySkipPermissions) && !settingsDisableBypass, tpc = initialState.toolPermissionContext;
     launchMode && (tpc.mode = launchMode), tpc.isBypassPermissionsModeAvailable = isBypassPermissionsModeAvailable, bypassModeLaunch = isBypassPermissionsModeAvailable;
     let effectiveConfig;
     try {
-      effectiveConfig = resolveSemaConfig({ launchMode });
+      let { feature: feature3 } = await Promise.resolve().then(() => (init_bun_bundle(), bun_bundle_exports)), { getAutoModeEnabledStateIfCached: getAutoModeEnabledStateIfCached2 } = await Promise.resolve().then(() => (init_permissionSetup(), permissionSetup_exports)), factoryDefaultAutoEligible = getAutoModeEnabledStateIfCached2() !== "disabled";
+      effectiveConfig = resolveSemaConfig({
+        launchMode,
+        factoryDefaultAuto: factoryDefaultAutoEligible
+      });
       let dm = effectiveConfig.derivedMode;
-      tpc.mode = dm === "bypassPermissions" && !isBypassPermissionsModeAvailable ? "default" : dm, bypassModeLaunch = tpc.mode === "bypassPermissions", settingsRejectionNotices = effectiveConfig.rejections.map(describeRejection), process.env.SEMA_DEBUG && console.error(
+      if (tpc.mode = dm === "bypassPermissions" && !isBypassPermissionsModeAvailable ? "default" : dm, bypassModeLaunch = tpc.mode === "bypassPermissions", tpc.mode === "auto") {
+        let { setAutoModeActive: setAutoModeActive2 } = await Promise.resolve().then(() => (init_autoModeState(), autoModeState_exports));
+        if (setAutoModeActive2(!0), effectiveConfig.derivedModeIsFactoryDefault === !0) {
+          let { markFactoryDefaultAutoActive: markFactoryDefaultAutoActive2 } = await Promise.resolve().then(() => (init_permissionSetup(), permissionSetup_exports));
+          markFactoryDefaultAutoActive2();
+        }
+      }
+      settingsRejectionNotices = effectiveConfig.rejections.map(describeRejection), process.env.SEMA_DEBUG && console.error(
         `[sema] resolver: derivedMode=${dm} \u2192 tpc.mode=${tpc.mode} \xB7 model=${effectiveConfig.model ?? "\u2205"} hooks=${effectiveConfig.hooks ? "set" : "\u2205"} envKeys=${Object.keys(effectiveConfig.env ?? {}).length}`
       );
       try {
@@ -538009,11 +538624,9 @@ async function launchReplProduction() {
         try {
           let deadRules = unenforceableSettingsRules(fullWire);
           if (deadRules.length > 0) {
-            let shown = deadRules.slice(0, 5).map((r) => JSON.stringify(r)).join(", "), more = deadRules.length > 5 ? ` (+${deadRules.length - 5} more)` : "";
-            process.stderr.write(
-              `[sema] permissions: ${deadRules.length} rule(s) use tool names this engine does not recognize and will not be enforced: ${shown}${more} \u2014 update these entries in your settings permissions lists
-`
-            );
+            let shown = deadRules.slice(0, 5).map((r) => JSON.stringify(r)).join(", "), more = deadRules.length > 5 ? ` (+${deadRules.length - 5} more)` : "", msg = `permissions: ${deadRules.length} rule(s) use tool names this engine does not recognize and will not be enforced: ${shown}${more} \u2014 update these entries in your settings permissions lists`;
+            process.stderr.write(`[sema] ${msg}
+`), bootFailClosedNotices.push(msg);
           }
         } catch {
         }
@@ -538109,7 +538722,7 @@ async function launchReplProduction() {
       try {
         let modeApi = null;
         try {
-          let { feature: feature3 } = await Promise.resolve().then(() => (init_bun_bundle2(), bun_bundle_exports));
+          let { feature: feature3 } = await Promise.resolve().then(() => (init_bun_bundle2(), bun_bundle_exports2));
         } catch {
         }
         let resumeContext = {
@@ -538307,15 +538920,25 @@ async function launchReplProduction() {
   }
   let { launchRepl: launchRepl2 } = await Promise.resolve().then(() => (init_replLauncher(), replLauncher_exports)), { createSystemMessage: createSystemMessage3 } = await Promise.resolve().then(() => (init_messages4(), messages_exports2));
   try {
-    let { settingsLoudNoticesActive: settingsLoudNoticesActive2 } = await Promise.resolve().then(() => (init_settings2(), settings_exports2)), { resolverLoudNoticesActive: resolverLoudNoticesActive2 } = await Promise.resolve().then(() => (init_resolver2(), resolver_exports));
+    let { settingsLoudNoticesActive: settingsLoudNoticesActive2 } = await Promise.resolve().then(() => (init_settings2(), settings_exports2)), { resolverLoudNoticesActive: resolverLoudNoticesActive2 } = await Promise.resolve().then(() => (init_resolver2(), resolver_exports)), { permissionsLoaderLoudNoticesActive: permissionsLoaderLoudNoticesActive2 } = await Promise.resolve().then(() => (init_permissionsLoader(), permissionsLoader_exports));
     settingsRejectionNotices = [
       ...settingsRejectionNotices,
       ...settingsLoudNoticesActive2(),
-      ...resolverLoudNoticesActive2()
+      ...resolverLoudNoticesActive2(),
+      ...bootFailClosedNotices,
+      ...permissionsLoaderLoudNoticesActive2()
     ];
   } catch (eN) {
     process.env.SEMA_DEBUG && console.error("[sema] settings notices merge soft-failed:", eN);
   }
+  try {
+    let { runCcImportBootAuto: runCcImportBootAuto2 } = await Promise.resolve().then(() => (init_ccImportBootRun(), ccImportBootRun_exports));
+    runCcImportBootAuto2().then((outcome) => {
+      process.env.SEMA_DEBUG && console.error(`[sema] cc-import boot arm: ${outcome}`);
+    });
+  } catch (eI) {
+    process.env.SEMA_DEBUG && console.error("[sema] cc-import boot arm load soft-failed:", eI);
+  }
   await launchRepl2(
     root2,
     {
@@ -538490,7 +539113,7 @@ var React215, import_jsx_runtime537, isMain, COMMANDER_SUBCOMMANDS, replEntry_de
     if (isMain) {
       let argv = process.argv.slice(2);
       (async () => {
-        let { feature: feature3 } = await Promise.resolve().then(() => (init_bun_bundle2(), bun_bundle_exports));
+        let { feature: feature3 } = await Promise.resolve().then(() => (init_bun_bundle2(), bun_bundle_exports2));
         if (argv[0] === "--daemon-worker") {
           let { runDaemonWorker: runDaemonWorker2 } = await Promise.resolve().then(() => (init_workerRegistry(), workerRegistry_exports));
           return await runDaemonWorker2(argv[1]), !0;