@sema-agent/cli 1.0.82 → 1.0.83

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@sema-agent/cli",
-  "version": "1.0.82",
+  "version": "1.0.83",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@sema-agent/cli",
-      "version": "1.0.82",
+      "version": "1.0.83",
       "license": "BUSL-1.1",
       "dependencies": {
         "@sema-agent/sdk": "7.1.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/cli",
-  "version": "1.0.82",
+  "version": "1.0.83",
   "description": "Sema — your own Claude Code-grade coding agent, in the terminal.",
   "license": "BUSL-1.1",
   "bin": {

package/sema-main.js

@@ -55612,6 +55612,9 @@ var CONTEXT_LINES, DIFF_TIMEOUT_MS, AMPERSAND_TOKEN, DOLLAR_TOKEN, init_patch =
 });
 
 // node_modules/@sema-agent/client-core/dist/engineErrorCodes.js
+function isLimitsExceededCode(code2) {
+  return typeof code2 == "string" && code2.startsWith(LIMITS_ERROR_CODE_PREFIX);
+}
 function isConfigRefusalCode(code2) {
   return typeof code2 == "string" && code2.startsWith("config.");
 }
@@ -55624,9 +55627,10 @@ function isRewindFamilyCode(code2) {
 function asModelFallbackReason(v2) {
   return v2 === MODEL_FALLBACK_INHERIT_NO_TIER_BINDING ? MODEL_FALLBACK_INHERIT_NO_TIER_BINDING : void 0;
 }
-var LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, USAGE_WINDOW_EXHAUSTED, ENV_LIFETIME_EXPIRED, CONFIG_LIMIT_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_REFUSAL_CODES, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, TOOL_END_INTERRUPTED_CODES, ACTIVE_RUN_BUSY_ERROR_CODE, STOP_PARK_ARBITER_UNREACHABLE, STOP_PARK_RESUME_WON, STOP_NOT_LANDED, STOP_NOT_LOCAL, STOP_PARKED, STOP_CONFLICT_CODES, OUTPUT_INVALID, RESUME_AT_ERROR_CODE_PREFIX, REWIND_ERROR_CODE_PREFIXES, DRAINING_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STREAM_MAX_DURATION, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, init_engineErrorCodes = __esm({
+var LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, LIMITS_ERROR_CODE_PREFIX, USAGE_WINDOW_EXHAUSTED, ENV_LIFETIME_EXPIRED, CONFIG_LIMIT_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_REFUSAL_CODES, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, TOOL_END_INTERRUPTED_CODES, ACTIVE_RUN_BUSY_ERROR_CODE, STOP_PARK_ARBITER_UNREACHABLE, STOP_PARK_RESUME_WON, STOP_NOT_LANDED, STOP_NOT_LOCAL, STOP_PARKED, STOP_CONFLICT_CODES, OUTPUT_INVALID, RESUME_AT_ERROR_CODE_PREFIX, REWIND_ERROR_CODE_PREFIXES, DRAINING_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STREAM_MAX_DURATION, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, init_engineErrorCodes = __esm({
   "node_modules/@sema-agent/client-core/dist/engineErrorCodes.js"() {
-    LIMITS_MAX_TOKENS_EXCEEDED = "limits.max_tokens_exceeded", LIMITS_MAX_COST_EXCEEDED = "limits.max_cost_exceeded", LIMITS_MAX_TURNS_EXCEEDED = "limits.max_turns_exceeded", LIMITS_MAX_WALLTIME_EXCEEDED = "limits.max_walltime_exceeded", USAGE_WINDOW_EXHAUSTED = "usage.window_exhausted", ENV_LIFETIME_EXPIRED = "env.lifetime_expired", CONFIG_LIMIT_INVALID = "config.limit_invalid", CONFIG_STRATEGY_FIND_LIMIT_INVALID = "config.strategy_find_limit_invalid", CONFIG_STRATEGY_MAX_SIZE_INVALID = "config.strategy_max_size_invalid", CONFIG_LIMIT_UNKNOWN_KEY = "config.limit_unknown_key", CONFIG_REFUSAL_CODES = /* @__PURE__ */ new Set([
+    LIMITS_MAX_TOKENS_EXCEEDED = "limits.max_tokens_exceeded", LIMITS_MAX_COST_EXCEEDED = "limits.max_cost_exceeded", LIMITS_MAX_TURNS_EXCEEDED = "limits.max_turns_exceeded", LIMITS_MAX_WALLTIME_EXCEEDED = "limits.max_walltime_exceeded", LIMITS_ERROR_CODE_PREFIX = "limits.";
+    USAGE_WINDOW_EXHAUSTED = "usage.window_exhausted", ENV_LIFETIME_EXPIRED = "env.lifetime_expired", CONFIG_LIMIT_INVALID = "config.limit_invalid", CONFIG_STRATEGY_FIND_LIMIT_INVALID = "config.strategy_find_limit_invalid", CONFIG_STRATEGY_MAX_SIZE_INVALID = "config.strategy_max_size_invalid", CONFIG_LIMIT_UNKNOWN_KEY = "config.limit_unknown_key", CONFIG_REFUSAL_CODES = /* @__PURE__ */ new Set([
       CONFIG_LIMIT_INVALID,
       CONFIG_STRATEGY_FIND_LIMIT_INVALID,
       CONFIG_STRATEGY_MAX_SIZE_INVALID,
@@ -59856,6 +59860,13 @@ function classifyActiveRunBusy(input) {
   let handle2 = typeof input.activeTaskId == "string" && input.activeTaskId.length > 0 ? input.activeTaskId : null;
   return input.errorCode === ACTIVE_RUN_BUSY_ERROR_CODE ? { busy: !0, handle: handle2 } : typeof input.activeTaskId == "string" ? { busy: !0, handle: handle2 } : { busy: !1, handle: handle2 };
 }
+function isGovernanceStopRowText(text2) {
+  let t2 = text2.trimStart();
+  return t2.startsWith(`${RUN_STOPPED_MESSAGE_PREFIX}:`) || t2.startsWith(`${RUN_BLOCKED_MESSAGE_PREFIX}`);
+}
+function isGovernanceTerminal(input) {
+  return input.status === "blocked" || isLimitsExceededCode(input.errorCode) ? !0 : input.errorCode === OUTPUT_INVALID;
+}
 function sanitizeFrameType(type) {
   let flattened = type.replace(/[\u0000-\u001f\u007f-\u009f]/g, "\uFFFD");
   return flattened.length > DROPPED_TYPE_DISPLAY_CAP ? `${flattened.slice(0, DROPPED_TYPE_DISPLAY_CAP)}\u2026` : flattened;
@@ -59949,7 +59960,14 @@ async function* runStreamInner(events3, ctx, handle2 = {}) {
           errorCode: ev.type === "failed" ? ev.errorCode : failedResult?.errorCode,
           activeTaskId
         }), maxTokHint = /max_tokens/i.test(errText3) ? `
-your provider caps max_tokens lower \u2014 lower it in /model (press m, or M to type a value)` : "", busyHandle = busy.handle, rowText = busy.busy ? `This session is locked by an earlier run${busyHandle ? ` (run ${busyHandle})` : ""} that has not been released, so this message was NOT sent. Nothing releases it on its own \u2014 cancel that run (POST /v1/runs/${busyHandle ?? "<id>"}/cancel), or start a new session.` : `API Error: ${errText3}${maxTokHint}`;
+your provider caps max_tokens lower \u2014 lower it in /model (press m, or M to type a value)` : "", governance = isGovernanceTerminal({
+          status: ev.type === "failed" ? void 0 : failedResult?.status,
+          errorCode: ev.type === "failed" ? ev.errorCode : failedResult?.errorCode
+        }), busyHandle = busy.handle, rowText = busy.busy ? `This session is locked by an earlier run${busyHandle ? ` (run ${busyHandle})` : ""} that has not been released, so this message was NOT sent. Nothing releases it on its own \u2014 cancel that run (POST /v1/runs/${busyHandle ?? "<id>"}/cancel), or start a new session.` : governance ? (
+          // blocked 的 errText 自己就以 `Run blocked` 开头(见上方 errText 构造),再套一层
+          // `Run stopped:` 会变成两个前缀叠字;其余治理码用中性前缀 + 引擎原话。
+          `${isGovernanceStopRowText(errText3) ? errText3 : `${RUN_STOPPED_MESSAGE_PREFIX}: ${errText3}`}${maxTokHint}`
+        ) : `API Error: ${errText3}${maxTokHint}`;
         yield {
           session_id: ctx.sessionId ?? "",
           uuid: `err-${Date.now().toString(36)}`,
@@ -59979,7 +59997,7 @@ your provider caps max_tokens lower \u2014 lower it in /model (press m, or M to
     projection.kind === "dropped" && reportDroppedFrame(projection.why, projection.type, ctx);
   }
 }
-var MAIN2, reportedDroppedTypes, DROPPED_TYPE_MEMO_CAP, DROPPED_TYPE_DISPLAY_CAP, inFlightTurns, init_runStream = __esm({
+var MAIN2, RUN_STOPPED_MESSAGE_PREFIX, RUN_BLOCKED_MESSAGE_PREFIX, reportedDroppedTypes, DROPPED_TYPE_MEMO_CAP, DROPPED_TYPE_DISPLAY_CAP, inFlightTurns, init_runStream = __esm({
   "node_modules/@sema-agent/client-core/dist/adapter/runStream.js"() {
     init_types4();
     init_eventToSdkMessage();
@@ -59987,6 +60005,7 @@ var MAIN2, reportedDroppedTypes, DROPPED_TYPE_MEMO_CAP, DROPPED_TYPE_DISPLAY_CAP
     init_subagentContentStore();
     init_engineErrorCodes();
     MAIN2 = { lane: "main" };
+    RUN_STOPPED_MESSAGE_PREFIX = "Run stopped", RUN_BLOCKED_MESSAGE_PREFIX = "Run blocked";
     reportedDroppedTypes = /* @__PURE__ */ new Set(), DROPPED_TYPE_MEMO_CAP = 64, DROPPED_TYPE_DISPLAY_CAP = 60;
     inFlightTurns = 0;
   }
@@ -60013,6 +60032,21 @@ function askParkForeignGateKind(row2) {
   let kind = typeof row2.gateKind == "string" && row2.gateKind.length > 0 ? row2.gateKind : null;
   return kind !== null && !ASK_PARK_GATE_KINDS.includes(kind) ? kind : null;
 }
+function selfHealSubmissionDisposition(outcome) {
+  switch (outcome.kind) {
+    case "decision-pending":
+      return "held-for-decision";
+    case "ask-reopened":
+    case "plan-review-reopened":
+      return "held-for-decision";
+    case "running-cancelled":
+      return "resending";
+    case "running-steered":
+      return "handed-off";
+    default:
+      return "not-delivered";
+  }
+}
 function sessionOpts(deps2) {
   let sessionId = deps2?.sessionId;
   return typeof sessionId == "string" && sessionId.length > 0 ? { session: sessionId } : {};
@@ -60236,10 +60270,12 @@ function decidePathClause(signal) {
 function governanceOriginClause(signal) {
   return signal?.pendingGate?.governanceForced === !0 ? " That gate is enforced by this deployment's governance policy, not by a permission rule you set." : "";
 }
-function activeRunSelfHealRow(outcome, signal, copy2) {
+function activeRunSelfHealRow(outcome, signal, copy2, origin2) {
   let override = copy2?.rowFor?.(outcome, signal);
   if (typeof override == "string")
     return override;
+  if (origin2 === "injected")
+    return injectedSubmissionRow(outcome);
   let base = activeRunSelfHealBaseRow(outcome, signal, copy2?.wayOut ?? DEFAULT_WAY_OUT);
   switch (outcome.kind) {
     // 这两条是「用户此刻卡住了、而且没有别的把手」的结局 —— wire 给的 decide 入口在这里才有用。
@@ -60252,6 +60288,19 @@ function activeRunSelfHealRow(outcome, signal, copy2) {
       return base + governanceOriginClause(signal);
   }
 }
+function injectedSubmissionRow(outcome) {
+  let handle2 = "taskId" in outcome && outcome.taskId ? ` (run ${outcome.taskId})` : "";
+  switch (selfHealSubmissionDisposition(outcome)) {
+    case "held-for-decision":
+      return `A system notification could not be delivered while an earlier turn${handle2} is waiting on a decision \u2014 sema kept it queued and will deliver it after you answer the open card.`;
+    case "resending":
+      return `A system notification was held while the earlier run${handle2} was cancelled; sema is delivering it now.`;
+    case "handed-off":
+      return `A system notification was handed to the run that is already working${handle2} instead of starting a new turn \u2014 watch that run for what it does with it.`;
+    case "not-delivered":
+      return `A system notification was NOT delivered: this session is still held by an earlier run${handle2} and sema could not put a decision for it on screen, so it did not retry. The model was not told about it.`;
+  }
+}
 function activeRunSelfHealBaseRow(outcome, signal, wayOut) {
   switch (outcome.kind) {
     case "decision-pending":
@@ -68200,6 +68249,7 @@ __export(dist_exports, {
   IDLE_FLUSH_MS: () => IDLE_FLUSH_MS,
   INTERACTIVE_WAY_OUT: () => INTERACTIVE_WAY_OUT,
   INTERNAL_SDK_ARM_TYPES: () => INTERNAL_SDK_ARM_TYPES,
+  LIMITS_ERROR_CODE_PREFIX: () => LIMITS_ERROR_CODE_PREFIX,
   LIMITS_MAX_COST_EXCEEDED: () => LIMITS_MAX_COST_EXCEEDED,
   LIMITS_MAX_TOKENS_EXCEEDED: () => LIMITS_MAX_TOKENS_EXCEEDED,
   LIMITS_MAX_TURNS_EXCEEDED: () => LIMITS_MAX_TURNS_EXCEEDED,
@@ -68257,6 +68307,8 @@ __export(dist_exports, {
   RETAIN_BACKGROUND_ENV: () => RETAIN_BACKGROUND_ENV,
   REWIND_ERROR_CODE_PREFIXES: () => REWIND_ERROR_CODE_PREFIXES,
   RUNNING_STATES: () => RUNNING_STATES,
+  RUN_BLOCKED_MESSAGE_PREFIX: () => RUN_BLOCKED_MESSAGE_PREFIX,
+  RUN_STOPPED_MESSAGE_PREFIX: () => RUN_STOPPED_MESSAGE_PREFIX,
   SANDBOX_CASCADE_CONFLICT_400_ANCHOR: () => SANDBOX_CASCADE_CONFLICT_400_ANCHOR,
   SANDBOX_K8S_ONLY_400_ANCHOR: () => SANDBOX_K8S_ONLY_400_ANCHOR,
   SANDBOX_NO_IMAGE_INDEX_400_ANCHOR: () => SANDBOX_NO_IMAGE_INDEX_400_ANCHOR,
@@ -68573,10 +68625,13 @@ __export(dist_exports, {
   isFromSubagent: () => isFromSubagent,
   isFsApprovalGate: () => isFsApprovalGate,
   isGoalStopHookWireArmed: () => isGoalStopHookWireArmed,
+  isGovernanceStopRowText: () => isGovernanceStopRowText,
+  isGovernanceTerminal: () => isGovernanceTerminal,
   isHitlSafetyErrorLike: () => isHitlSafetyErrorLike,
   isHookNoticeFrame: () => isHookNoticeFrame,
   isInterruptedToolEndCode: () => isInterruptedToolEndCode,
   isKnownWorkflowAgentTaskId: () => isKnownWorkflowAgentTaskId,
+  isLimitsExceededCode: () => isLimitsExceededCode,
   isLocalSessionEvent: () => isLocalSessionEvent,
   isLocalSessionRecord: () => isLocalSessionRecord,
   isLoopbackWireUrl: () => isLoopbackWireUrl,
@@ -68780,6 +68835,7 @@ __export(dist_exports, {
   scenarioForPrint: () => scenarioForPrint,
   scratchpadDirField: () => scratchpadDirField,
   searchPresetTableViolations: () => searchPresetTableViolations,
+  selfHealSubmissionDisposition: () => selfHealSubmissionDisposition,
   selfOrchestrationFromEnv: () => selfOrchestrationFromEnv,
   setLiveModelCatalog: () => setLiveModelCatalog,
   setLiveModelCatalogRefresher: () => setLiveModelCatalogRefresher,
@@ -109779,7 +109835,7 @@ var import_stack_utils, import_jsx_runtime6, cleanupPath, stackUtils, init_Error
 // build-src/src/ink/components/TerminalSizeContext.tsx
 var import_react9, TerminalSizeContext, init_TerminalSizeContext = __esm({
   "build-src/src/ink/components/TerminalSizeContext.tsx"() {
-    import_react9 = __toESM(require_react()), TerminalSizeContext = (0, import_react9.createContext)(null);
+    import_react9 = __toESM(require_react(), 1), TerminalSizeContext = (0, import_react9.createContext)(null);
   }
 });
 
@@ -117249,6 +117305,18 @@ ${ctx}` : line;
   }
   return "Execution error";
 }
+function formatTextModeGovernanceStop(errors2, fallbackTemplate) {
+  if (Array.isArray(errors2)) {
+    let first = errors2.find(
+      (e) => typeof e == "string" && e.trim().length > 0
+    );
+    if (first) {
+      let msg = extractProviderErrorMessage(first.trim());
+      return /^(API Error|Error)\b/i.test(msg) ? msg : `Error: ${msg}`;
+    }
+  }
+  return fallbackTemplate;
+}
 var init_textModeError = __esm({
   "build-src/src/cli/textModeError.ts"() {
   }
@@ -177538,6 +177606,7 @@ __export(leaderPermissionBridge_exports, {
   registerLeaderSetToolPermissionContext: () => registerLeaderSetToolPermissionContext,
   registerLeaderToolUseConfirmQueue: () => registerLeaderToolUseConfirmQueue,
   setLeaderPendingDecisionCardCount: () => setLeaderPendingDecisionCardCount,
+  subscribeToLeaderPendingDecisionCards: () => subscribeToLeaderPendingDecisionCards,
   unregisterLeaderSetToolPermissionContext: () => unregisterLeaderSetToolPermissionContext,
   unregisterLeaderToolUseConfirmQueue: () => unregisterLeaderToolUseConfirmQueue
 });
@@ -177551,7 +177620,8 @@ function unregisterLeaderToolUseConfirmQueue() {
   registeredSetter = null;
 }
 function setLeaderPendingDecisionCardCount(count3) {
-  pendingDecisionCardCount = Number.isFinite(count3) && count3 > 0 ? count3 : 0;
+  let next = Number.isFinite(count3) && count3 > 0 ? count3 : 0;
+  next !== pendingDecisionCardCount && (pendingDecisionCardCount = next, pendingDecisionCardsChanged.emit());
 }
 function leaderHasPendingDecisionCard() {
   return pendingDecisionCardCount > 0;
@@ -177568,10 +177638,11 @@ function getLeaderSetToolPermissionContext() {
 function unregisterLeaderSetToolPermissionContext() {
   registeredPermissionContextSetter = null;
 }
-var registeredSetter, registeredPermissionContextSetter, pendingDecisionCardCount, init_leaderPermissionBridge = __esm({
+var registeredSetter, registeredPermissionContextSetter, pendingDecisionCardCount, pendingDecisionCardsChanged, subscribeToLeaderPendingDecisionCards, init_leaderPermissionBridge = __esm({
   "build-src/src/utils/swarm/leaderPermissionBridge.ts"() {
+    init_signal();
     registeredSetter = null, registeredPermissionContextSetter = null;
-    pendingDecisionCardCount = 0;
+    pendingDecisionCardCount = 0, pendingDecisionCardsChanged = createSignal(), subscribeToLeaderPendingDecisionCards = pendingDecisionCardsChanged.subscribe;
   }
 });
 
@@ -178114,11 +178185,29 @@ function enqueue(command8) {
   );
 }
 function enqueuePendingNotification(command8) {
-  commandQueue.push({ ...command8, priority: command8.priority ?? "later" }), notifySubscribers(), logOperation(
+  commandQueue.push({ ...command8, priority: command8.priority ?? "later", isMeta: command8.isMeta ?? !0 }), notifySubscribers(), logOperation(
     "enqueue",
     typeof command8.value == "string" ? command8.value : void 0
   );
 }
+function requeueFailedInjection(command8) {
+  if (command8.isMeta !== !0) return !1;
+  let attempts = (command8.requeueCount ?? 0) + 1;
+  return attempts > MAX_INJECTION_REQUEUES ? !1 : (commandQueue.push({
+    ...command8,
+    priority: command8.priority ?? "later",
+    requeueCount: attempts,
+    // 归零推迟预算(1.0.83 扫码异源复审 F3):不归零则到顶件回灌后下一拍闸恒放行,撞同一张
+    // 未答卡即再回灌,自激三圈秒级烧光 requeue 预算丢通知;归零后回灌件重新静止等卡信号。
+    deferCount: 0
+  }), notifySubscribers(), logOperation(
+    "enqueue",
+    typeof command8.value == "string" ? command8.value : void 0
+  ), !0);
+}
+function noteInjectionDeferred(command8) {
+  command8.deferCount = (command8.deferCount ?? 0) + 1;
+}
 function dequeue(filter2) {
   if (commandQueue.length === 0)
     return;
@@ -178230,7 +178319,7 @@ function getCommandsByMaxPriority(maxPriority) {
     (cmd) => PRIORITY_ORDER[cmd.priority ?? "next"] <= threshold2
   );
 }
-var commandQueue, snapshot2, queueChanged, subscribeToCommandQueue, PRIORITY_ORDER, NON_EDITABLE_MODES, init_messageQueueManager = __esm({
+var commandQueue, snapshot2, queueChanged, subscribeToCommandQueue, MAX_INJECTION_REQUEUES, MAX_INJECTION_DEFERRALS, PRIORITY_ORDER, NON_EDITABLE_MODES, init_messageQueueManager = __esm({
   "build-src/src/utils/messageQueueManager.ts"() {
     init_state();
     init_messages4();
@@ -178239,6 +178328,8 @@ var commandQueue, snapshot2, queueChanged, subscribeToCommandQueue, PRIORITY_ORD
     init_signal();
     commandQueue = [], snapshot2 = Object.freeze([]), queueChanged = createSignal();
     subscribeToCommandQueue = queueChanged.subscribe;
+    MAX_INJECTION_REQUEUES = 3;
+    MAX_INJECTION_DEFERRALS = 2;
     PRIORITY_ORDER = {
       now: 0,
       next: 1,
@@ -181974,6 +182065,29 @@ var status, listeners7, fadeTimer, init_engineRuntimeStatus = __esm({
   }
 });
 
+// build-src/src/utils/injectionRequeueLatch.ts
+function beginSubmissionTurn() {
+  let id = nextTurnId++;
+  return activeTurnId = id, id;
+}
+function noteSubmissionHeldForDecision() {
+  if (activeTurnId !== null)
+    for (heldTurnIds.add(activeTurnId); heldTurnIds.size > MAX_HELD_TURNS; ) {
+      let oldest = heldTurnIds.values().next();
+      if (oldest.done) break;
+      heldTurnIds.delete(oldest.value);
+    }
+}
+function consumeSubmissionHeldForDecision(turnId) {
+  let held = heldTurnIds.delete(turnId);
+  return activeTurnId === turnId && (activeTurnId = null), held;
+}
+var nextTurnId, activeTurnId, heldTurnIds, MAX_HELD_TURNS, init_injectionRequeueLatch = __esm({
+  "build-src/src/utils/injectionRequeueLatch.ts"() {
+    nextTurnId = 1, activeTurnId = null, heldTurnIds = /* @__PURE__ */ new Set(), MAX_HELD_TURNS = 32;
+  }
+});
+
 // build-src/src/sema/engineAttachCapabilityGate.ts
 var engineAttachCapabilityGate_exports = {};
 __export(engineAttachCapabilityGate_exports, {
@@ -185374,8 +185488,8 @@ Fix: run \`sema doctor\` to diagnose, or restart sema to retry.`
             //    —— 一条中止口的在场与否不该取决于「这一轮有没有铸卡」。顶层形是它的严格超集,
             //    车B 的消费面(deps.signal)逐字不变。
             ...signal ? { signal } : {}
-          });
-          if (yield apiErrorRow(activeRunSelfHealRow(outcome, detectedBusy)), outcome.kind === "running-cancelled" && !signal?.aborted) {
+          }), submissionOrigin = trailingStandaloneMetaUserMessages(params.messages).length > 0 ? "injected" : "user";
+          if (submissionOrigin === "injected" && isMainLaneQuerySource(params.querySource) && selfHealSubmissionDisposition(outcome) === "held-for-decision" && noteSubmissionHeldForDecision(), yield apiErrorRow(activeRunSelfHealRow(outcome, detectedBusy, void 0, submissionOrigin)), outcome.kind === "running-cancelled" && !signal?.aborted) {
             retryStream = !0;
             continue;
           }
@@ -185653,6 +185767,7 @@ var BG_TEAR_MAX_RESENDS, BG_RECOVERY_WAIT_MS, DRAINING_MAX_RETRIES, drainingBack
     init_log2();
     init_engineRuntimeStatus();
     init_activeRunSelfHeal2();
+    init_injectionRequeueLatch();
     BG_TEAR_MAX_RESENDS = 2, BG_RECOVERY_WAIT_MS = 12e4, DRAINING_MAX_RETRIES = 3;
     client = makeMockClient(), clientExplicitlySet = !1;
     seamRewindCapture = !0;
@@ -269554,17 +269669,18 @@ var FINGERPRINT_SALT, init_fingerprint = __esm({
 
 // build-src/src/sema/livePrincipal.ts
 function resolveLivePrincipal() {
-  return normalizeWirePrincipal(process.env.SEMA_LIVE_PRINCIPAL);
+  return normalizeWirePrincipal(process.env.SEMA_LIVE_PRINCIPAL) ?? SINGLE_TENANT_DEFAULT;
 }
 function resolveFleetPrincipal() {
   return normalizeWirePrincipal(process.env.SEMA_FLEET_PRINCIPAL) ?? resolveLivePrincipal();
 }
 function describeLivePrincipal() {
-  return resolveLivePrincipal() ?? "absent(owner-null)";
+  return resolveLivePrincipal();
 }
-var init_livePrincipal = __esm({
+var SINGLE_TENANT_DEFAULT, init_livePrincipal = __esm({
   "build-src/src/sema/livePrincipal.ts"() {
     init_dist();
+    SINGLE_TENANT_DEFAULT = "default";
   }
 });
 
@@ -287008,7 +287124,7 @@ function FileEditToolUseRejectedMessage(t0) {
 }
 var import_compiler_runtime43, import_jsx_runtime52, MAX_LINES_TO_RENDER, init_FileEditToolUseRejectedMessage = __esm({
   "build-src/src/components/FileEditToolUseRejectedMessage.tsx"() {
-    import_compiler_runtime43 = __toESM(require_compiler_runtime(), 1);
+    import_compiler_runtime43 = __toESM(require_compiler_runtime());
     init_useTerminalSize();
     init_cwd();
     init_ink2();
@@ -287016,7 +287132,7 @@ var import_compiler_runtime43, import_jsx_runtime52, MAX_LINES_TO_RENDER, init_F
     init_MessageResponse();
     init_StructuredDiffList();
     init_stringUtils();
-    import_jsx_runtime52 = __toESM(require_jsx_runtime(), 1), MAX_LINES_TO_RENDER = 10;
+    import_jsx_runtime52 = __toESM(require_jsx_runtime()), MAX_LINES_TO_RENDER = 10;
   }
 });
 
@@ -295537,6 +295653,10 @@ var init_systemPromptType = __esm({
 });
 
 // build-src/src/stubs/bun-bundle.js
+var bun_bundle_exports = {};
+__export(bun_bundle_exports, {
+  feature: () => feature
+});
 function feature(flag) {
   return ON.has(flag);
 }
@@ -300312,7 +300432,7 @@ async function compactConversation(messages, context3, cacheSafeParams, suppress
       };
     }
     if (summary) {
-      if (startsWithApiErrorPrefix(summary))
+      if (startsWithApiErrorPrefix(summary) || isGovernanceStopRowText(summary))
         throw new Error(summary);
     } else throw logForDebugging(
       `Compact failed: no summary text in response. Response: ${jsonStringify(summaryResponse)}`,
@@ -300496,7 +300616,7 @@ User context: ${userFeedback}` : hookResult.newCustomInstructions ? customInstru
       };
     }
     if (summary) {
-      if (startsWithApiErrorPrefix(summary))
+      if (startsWithApiErrorPrefix(summary) || isGovernanceStopRowText(summary))
         throw {
           ...failureMetadata
         }, new Error(summary);
@@ -300922,6 +301042,7 @@ var POST_COMPACT_MAX_FILES_TO_RESTORE, POST_COMPACT_TOKEN_BUDGET, POST_COMPACT_M
     init_analytics_index();
     init_claude();
     init_errors7();
+    init_dist();
     init_promptCacheBreakDetection();
     init_withRetry();
     init_internalLogging();
@@ -301414,9 +301535,9 @@ function streamingTailWrap(unstableSuffix) {
 }
 var import_compiler_runtime53, import_react48, import_jsx_runtime65, TOKEN_CACHE_MAX, tokenCache, MD_SYNTAX_RE, init_Markdown = __esm({
   "build-src/src/components/Markdown.tsx"() {
-    import_compiler_runtime53 = __toESM(require_compiler_runtime(), 1);
+    import_compiler_runtime53 = __toESM(require_compiler_runtime());
     init_marked_esm();
-    import_react48 = __toESM(require_react(), 1);
+    import_react48 = __toESM(require_react());
     init_useSettings();
     init_ink2();
     init_cliHighlight();
@@ -301424,7 +301545,7 @@ var import_compiler_runtime53, import_react48, import_jsx_runtime65, TOKEN_CACHE
     init_markdown();
     init_messages4();
     init_MarkdownTable();
-    import_jsx_runtime65 = __toESM(require_jsx_runtime(), 1), TOKEN_CACHE_MAX = 500, tokenCache = /* @__PURE__ */ new Map(), MD_SYNTAX_RE = /[#*`|[>\-_~]|\n\n|^\d+\. |\n\d+\. /;
+    import_jsx_runtime65 = __toESM(require_jsx_runtime()), TOKEN_CACHE_MAX = 500, tokenCache = /* @__PURE__ */ new Map(), MD_SYNTAX_RE = /[#*`|[>\-_~]|\n\n|^\d+\. |\n\d+\. /;
   }
 });
 
@@ -305952,14 +306073,12 @@ var EN_MESSAGES, init_messages_en = __esm({
       "onboard.station.mcp": "MCP servers",
       "onboard.station.skills": "Skills",
       "onboard.station.plugins": "Plugins",
-      "onboard.station.rules": "Permission rules",
       // ── onboard: per-station "you can change this anytime" blurbs ─────────────────────────────
       "onboard.blurb.model": "Add the model(s) sema should use \u2014 you can change this anytime with `sema config model`.",
       "onboard.blurb.tiers": "Bind your models to tiers (pro drives everyday work, flash the cheap volume) and pick the default tier \u2014 you can change this anytime with `sema config tiers`.",
       "onboard.blurb.mcp": "Import MCP servers \u2014 you can change this anytime with `sema config mcp`.",
       "onboard.blurb.skills": "Import skills \u2014 you can change this anytime with `sema config skills`.",
       "onboard.blurb.plugins": "Install plugins \u2014 you can change this anytime with `sema config plugins`.",
-      "onboard.blurb.rules": "Import the commands you already allow in Claude Code, so sema stops asking about them \u2014 you can review them anytime with `/permissions`.",
       // ── onboard: the theme station's own copy (the first thing a first-run user reads) ─────────
       "onboard.welcome.title": "\u273B Welcome to Sema",
       "onboard.welcome.tagline": "One shell, your whole fleet \u2014 local engine autostart, multi-agent orchestration, cloud when you want it.",
@@ -306068,14 +306187,12 @@ var ZH_MESSAGES, init_messages_zh = __esm({
       "onboard.station.mcp": "MCP \u670D\u52A1\u5668",
       "onboard.station.skills": "\u6280\u80FD",
       "onboard.station.plugins": "\u63D2\u4EF6",
-      "onboard.station.rules": "\u6743\u9650\u89C4\u5219",
       // ── onboard:各站「随时可改」说明行 ──────────────────────────────────────────────────────
       "onboard.blurb.model": "\u6DFB\u52A0 sema \u8981\u7528\u7684\u6A21\u578B \u2014\u2014 \u4E4B\u540E\u968F\u65F6\u53EF\u7528 `sema config model` \u4FEE\u6539\u3002",
       "onboard.blurb.tiers": "\u628A\u6A21\u578B\u7ED1\u5230\u5404\u4E2A\u6863\u4F4D(pro \u8DD1\u65E5\u5E38\u3001flash \u8DD1\u4FBF\u5B9C\u7684\u91CF),\u5E76\u9009\u4E00\u4E2A\u9ED8\u8BA4\u6863 \u2014\u2014 \u4E4B\u540E\u968F\u65F6\u53EF\u7528 `sema config tiers` \u4FEE\u6539\u3002",
       "onboard.blurb.mcp": "\u5BFC\u5165 MCP \u670D\u52A1\u5668 \u2014\u2014 \u4E4B\u540E\u968F\u65F6\u53EF\u7528 `sema config mcp` \u4FEE\u6539\u3002",
       "onboard.blurb.skills": "\u5BFC\u5165\u6280\u80FD \u2014\u2014 \u4E4B\u540E\u968F\u65F6\u53EF\u7528 `sema config skills` \u4FEE\u6539\u3002",
       "onboard.blurb.plugins": "\u5B89\u88C5\u63D2\u4EF6 \u2014\u2014 \u4E4B\u540E\u968F\u65F6\u53EF\u7528 `sema config plugins` \u4FEE\u6539\u3002",
-      "onboard.blurb.rules": "\u628A\u4F60\u5728 Claude Code \u91CC\u5DF2\u7ECF\u5141\u8BB8\u7684\u547D\u4EE4\u5BFC\u8FDB\u6765,sema \u5C31\u4E0D\u518D\u4E3A\u5B83\u4EEC\u5F39\u7A97\u8BE2\u95EE \u2014\u2014 \u968F\u65F6\u53EF\u7528 `/permissions` \u67E5\u770B\u3002",
       // ── onboard:主题站文案 ─────────────────────────────────────────────────────────────────
       "onboard.welcome.title": "\u273B \u6B22\u8FCE\u4F7F\u7528 Sema",
       "onboard.welcome.tagline": "\u4E00\u4E2A\u58F3,\u7BA1\u4F4F\u4F60\u7684\u6574\u652F\u8230\u961F \u2014\u2014 \u672C\u5730\u5F15\u64CE\u81EA\u542F\u3001\u591A\u667A\u80FD\u4F53\u7F16\u6392,\u60F3\u4E0A\u4E91\u7684\u65F6\u5019\u518D\u4E0A\u4E91\u3002",
@@ -318015,7 +318132,7 @@ function AssistantTextMessage(t0) {
       return $3[14] === /* @__PURE__ */ Symbol.for("react.memo_cache_sentinel") ? (t2 = /* @__PURE__ */ (0, import_jsx_runtime96.jsx)(MessageResponse, { height: 1, children: /* @__PURE__ */ (0, import_jsx_runtime96.jsx)(InterruptedByUser, {}) }), $3[14] = t2) : t2 = $3[14], t2;
     }
     default: {
-      if (startsWithApiErrorPrefix(text2)) {
+      if (startsWithApiErrorPrefix(text2) || isGovernanceStopRowText(text2)) {
         let truncated = !verbose && text2.trim().length > MAX_API_ERROR_CHARS, t22 = text2 === API_ERROR_MESSAGE_PREFIX ? `${API_ERROR_MESSAGE_PREFIX}: Please wait a moment and try again.` : truncated ? text2.trim().slice(0, MAX_API_ERROR_CHARS) + "\u2026" : text2.trim(), t32;
         if ($3[15] !== t22) {
           let apiErrSplit = splitApiErrorSupplement(t22);
@@ -372708,6 +372825,7 @@ var classifierDecisionModule, autoModeStateModule4, CLASSIFIER_FAIL_CLOSED_REFRE
 // build-src/src/utils/permissions/permissionSetup.ts
 var permissionSetup_exports = {};
 __export(permissionSetup_exports, {
+  __resetFactoryDefaultAutoForTests: () => __resetFactoryDefaultAutoForTests,
   checkAndDisableBypassPermissions: () => checkAndDisableBypassPermissions,
   createDisabledBypassPermissionsContext: () => createDisabledBypassPermissionsContext,
   findDangerousClassifierPermissions: () => findDangerousClassifierPermissions,
@@ -372726,8 +372844,10 @@ __export(permissionSetup_exports, {
   isDangerousPowerShellPermission: () => isDangerousPowerShellPermission,
   isDangerousTaskPermission: () => isDangerousTaskPermission,
   isDefaultPermissionModeAuto: () => isDefaultPermissionModeAuto,
+  isFactoryDefaultAutoActive: () => isFactoryDefaultAutoActive,
   isOverlyBroadBashAllowRule: () => isOverlyBroadBashAllowRule,
   isOverlyBroadPowerShellAllowRule: () => isOverlyBroadPowerShellAllowRule,
+  markFactoryDefaultAutoActive: () => markFactoryDefaultAutoActive,
   parseBaseToolsFromCLI: () => parseBaseToolsFromCLI,
   parseToolListFromCLI: () => parseToolListFromCLI,
   prepareContextForPlanMode: () => prepareContextForPlanMode,
@@ -372986,7 +373106,7 @@ function transitionPermissionMode(fromMode, toMode, context3) {
       if (!isAutoModeGateEnabled())
         throw new Error("Cannot transition to auto mode: gate is not enabled");
       autoModeStateModule5?.setAutoModeActive(!0), context3 = stripDangerousPermissionsForAutoMode(context3);
-    } else fromUsesClassifier && !toUsesClassifier && (autoModeStateModule5?.setAutoModeActive(!1), setNeedsAutoModeExitAttachment(!0), context3 = restoreDangerousPermissions(context3));
+    } else fromUsesClassifier && !toUsesClassifier && (autoModeStateModule5?.setAutoModeActive(!1), setNeedsAutoModeExitAttachment(!0), factoryDefaultAutoActive = !1, context3 = restoreDangerousPermissions(context3));
   }
   return fromMode === "plan" && toMode !== "plan" && context3.prePlanMode ? { ...context3, prePlanMode: void 0 } : context3;
 }
@@ -373007,9 +373127,19 @@ function settingsDisableBypassFailClosed() {
     () => filterManagedPolicyErrors(getSettingsWithErrors().errors)
   ).disable;
 }
+function isFactoryDefaultAutoActive() {
+  return factoryDefaultAutoActive;
+}
+function __resetFactoryDefaultAutoForTests() {
+  factoryDefaultAutoActive = !1;
+}
+function markFactoryDefaultAutoActive() {
+  factoryDefaultAutoActive = !0;
+}
 function initialPermissionModeFromCLI({
   permissionModeCli,
-  dangerouslySkipPermissions
+  dangerouslySkipPermissions,
+  factoryDefaultAutoEligible
 }) {
   let settings2 = getSettings_DEPRECATED() || {}, growthBookDisableBypassPermissionsMode = checkStatsigFeatureGate_CACHED_MAY_BE_STALE(
     "tengu_disable_bypass_permissions_mode"
@@ -373031,6 +373161,7 @@ function initialPermissionModeFromCLI({
       { level: "warn" }
     ) : orderedModes.push("auto") : orderedModes.push(settingsMode);
   }
+  factoryDefaultAutoEligible && orderedModes.length === 0 && !autoModeCircuitBrokenSync && !isAutoModeDisabledBySettings() && (orderedModes.push("auto"), factoryDefaultAutoActive = !0);
   let result;
   for (let mode of orderedModes) {
     if (mode === "bypassPermissions" && disableBypassPermissionsMode) {
@@ -373261,7 +373392,7 @@ function isDefaultPermissionModeAuto() {
   return (getSettings_DEPRECATED() || {}).permissions?.defaultMode === "auto";
 }
 function shouldPlanUseAutoMode() {
-  return hasAutoModeOptIn() && isAutoModeGateEnabled() && getUseAutoModeDuringPlan();
+  return (hasAutoModeOptIn() || isFactoryDefaultAutoActive()) && isAutoModeGateEnabled() && getUseAutoModeDuringPlan();
 }
 function prepareContextForPlanMode(context3) {
   let currentMode = context3.mode;
@@ -373290,7 +373421,7 @@ function transitionPlanAutoMode(context3) {
   let want = shouldPlanUseAutoMode(), have = autoModeStateModule5?.isAutoModeActive() ?? !1;
   return want && have ? stripDangerousPermissionsForAutoMode(context3) : !want && !have ? context3 : want ? (autoModeStateModule5?.setAutoModeActive(!0), setNeedsAutoModeExitAttachment(!1), stripDangerousPermissionsForAutoMode(context3)) : (autoModeStateModule5?.setAutoModeActive(!1), setNeedsAutoModeExitAttachment(!0), restoreDangerousPermissions(context3));
 }
-var autoModeStateModule5, AUTO_MODE_ENABLED_DEFAULT, NO_CACHED_AUTO_MODE_CONFIG, init_permissionSetup = __esm({
+var autoModeStateModule5, factoryDefaultAutoActive, AUTO_MODE_ENABLED_DEFAULT, NO_CACHED_AUTO_MODE_CONFIG, init_permissionSetup = __esm({
   "build-src/src/utils/permissions/permissionSetup.ts"() {
     init_state();
     init_cwd();
@@ -373317,6 +373448,7 @@ var autoModeStateModule5, AUTO_MODE_ENABLED_DEFAULT, NO_CACHED_AUTO_MODE_CONFIG,
     init_PermissionUpdate();
     init_permissionRuleParser();
     autoModeStateModule5 = (init_autoModeState(), __toCommonJS(autoModeState_exports));
+    factoryDefaultAutoActive = !1;
     AUTO_MODE_ENABLED_DEFAULT = "disabled";
     NO_CACHED_AUTO_MODE_CONFIG = /* @__PURE__ */ Symbol("no-cached-auto-mode-config");
   }
@@ -401398,8 +401530,8 @@ var sema_brand_default, init_sema_brand = __esm({
           "Engine 7.28.0 (from 7.26.0)"
         ]
       },
-      productVersion: "1.0.82",
-      announcement: "sema 1.0.82 \u2014 Claude Code permission rules are now imported automatically on first launch when detected, with a one-line notice and full visibility in /permissions afterward (no confirmation step, no silent surprises). Under the hood: the agent-teams gate was hardened against config-source bypass, and a queue-processing edge case around injected background prompts was tightened."
+      productVersion: "1.0.83",
+      announcement: "sema 1.0.83 \u2014 Auto mode is now the factory default: a fresh start with no permission configuration boots straight into auto (footer shows \u201Cauto mode on\u201D), while any explicit --permission-mode flag or settings defaultMode still wins, and the managed disableAutoMode kill-switch vetoes it at the source. Also fixed: compaction no longer replaces your history with a governance stop line, leaving auto via Shift+Tab fully retires the factory default for the session, and queued system notifications survive an open decision card instead of being dropped."
     };
   }
 });
@@ -405608,8 +405740,8 @@ var require_sema_brand = __commonJS({
           "Engine 7.28.0 (from 7.26.0)"
         ]
       },
-      productVersion: "1.0.82",
-      announcement: "sema 1.0.82 \u2014 Claude Code permission rules are now imported automatically on first launch when detected, with a one-line notice and full visibility in /permissions afterward (no confirmation step, no silent surprises). Under the hood: the agent-teams gate was hardened against config-source bypass, and a queue-processing edge case around injected background prompts was tightened."
+      productVersion: "1.0.83",
+      announcement: "sema 1.0.83 \u2014 Auto mode is now the factory default: a fresh start with no permission configuration boots straight into auto (footer shows \u201Cauto mode on\u201D), while any explicit --permission-mode flag or settings defaultMode still wins, and the managed disableAutoMode kill-switch vetoes it at the source. Also fixed: compaction no longer replaces your history with a governance stop line, leaving auto via Shift+Tab fully retires the factory default for the session, and queued system notifications survive an open decision card instead of being dropped."
     };
   }
 });
@@ -414187,8 +414319,8 @@ var init_ccRulesImport = __esm({
 import { existsSync as existsSync25, readFileSync as readFileSync35, writeFileSync as writeFileSync19, mkdirSync as mkdirSync20 } from "node:fs";
 import { join as join157, dirname as dirname73 } from "node:path";
 import { homedir as homedir42 } from "node:os";
-function ruleStoreWireAvailable() {
-  return persistedRulesLaneAvailable2();
+function ruleStoreWireAvailable(baseUrl) {
+  return persistedRulesLaneAvailable2(baseUrl);
 }
 function markerPath() {
   return join157(getClaudeConfigHomeDir(), "cc-import.json");
@@ -414215,9 +414347,6 @@ function writeCcImportMarker(marker) {
   mkdirSync20(dirname73(p), { recursive: !0 }), writeFileSync19(p, JSON.stringify(marker, null, 2) + `
 `, "utf8");
 }
-function writeCcImportDeclinedMarker() {
-  writeCcImportMarker({ importedAt: (/* @__PURE__ */ new Date()).toISOString(), sourcePath: "", importedCount: 0, declined: !0 });
-}
 function detectCcAllowRulesSource() {
   let ccEnvKey = "CLAUDE_CONFIG_DIR", ccLegacyDir = join157(homedir42(), ".claude"), roots = [process.env[ccEnvKey], ccLegacyDir].filter(
     (r) => typeof r == "string" && r.length > 0
@@ -414237,8 +414366,8 @@ function detectCcAllowRulesSource() {
   }
   return null;
 }
-function ccImportBootGate() {
-  return !ruleStoreWireAvailable() || readCcImportMarker() !== null ? null : detectCcAllowRulesSource();
+function ccImportBootGate(baseUrl) {
+  return !ruleStoreWireAvailable(baseUrl) || readCcImportMarker() !== null ? null : detectCcAllowRulesSource();
 }
 var init_ccImportMarker = __esm({
   "build-src/src/sema/rules/ccImportMarker.ts"() {
@@ -433956,6 +434085,7 @@ function noteModelEvidenceFrom(msg) {
           b3.text.includes(model) && noteModelRejected(model, "rejected by the provider");
           continue;
         }
+        if (isGovernanceStopRowText(b3.text)) continue;
         b3.text.length > 0 && noteModelServed(model);
         continue;
       }
@@ -455490,8 +455620,8 @@ function policyFromPermissions(perms) {
   return policy2;
 }
 function deriveMode(eff, opts) {
-  let launch = opts?.launchMode, fileMode = eff.permissionMode, mode = launch ?? fileMode ?? "default";
-  return mode === "bypassPermissions" && eff.disableBypassPermissionsMode === !0 && (mode = "default"), mode === "acceptEdits" && eff.disableAutoMode === !0 && (mode = "default"), mode;
+  let launch = opts?.launchMode, fileMode = eff.permissionMode, factory2 = launch === void 0 && fileMode === void 0 && opts?.factoryDefaultAuto === !0, mode = launch ?? fileMode ?? (factory2 ? "auto" : "default");
+  return mode === "bypassPermissions" && eff.disableBypassPermissionsMode === !0 && (mode = "default"), (mode === "acceptEdits" || mode === "auto") && eff.disableAutoMode === !0 && (mode = "default"), { mode, isFactoryDefault: factory2 && mode === "auto" };
 }
 function modeToolPolicy(mode, basePolicy) {
   switch (mode) {
@@ -455518,7 +455648,7 @@ function modeToolPolicy(mode, basePolicy) {
   }
 }
 function toEffectiveConfig(eff, opts) {
-  let basePolicy = policyFromPermissions(eff.permissions), derivedMode = deriveMode(eff, opts), { toolPolicy, handsReadOnly, onAsk } = modeToolPolicy(
+  let basePolicy = policyFromPermissions(eff.permissions), { mode: derivedMode, isFactoryDefault } = deriveMode(eff, opts), { toolPolicy, handsReadOnly, onAsk } = modeToolPolicy(
     derivedMode,
     basePolicy
   ), taskSpecOverrides = { toolPolicy };
@@ -455530,6 +455660,7 @@ function toEffectiveConfig(eff, opts) {
     model: eff.model,
     outputStyle: eff.outputStyle,
     derivedMode,
+    ...isFactoryDefault ? { derivedModeIsFactoryDefault: !0 } : {},
     provenance: eff.provenance
   };
 }
@@ -462977,6 +463108,7 @@ var ccImportBootRun_exports = {};
 __export(ccImportBootRun_exports, {
   __resetCcImportBootLatchForTests: () => __resetCcImportBootLatchForTests,
   __resetCcImportBootPendingNoticeForTests: () => __resetCcImportBootPendingNoticeForTests,
+  __setCcImportCapsWaitCapForTests: () => __setCcImportCapsWaitCapForTests,
   drainPendingCcImportBootNotice: () => drainPendingCcImportBootNotice,
   runCcImportBootAuto: () => runCcImportBootAuto,
   runCcImportBootAutoWith: () => runCcImportBootAutoWith
@@ -462993,7 +463125,7 @@ async function runCcImportBootAutoWith(deps2) {
       return deps2.writeMarker({ importedAt: (/* @__PURE__ */ new Date()).toISOString(), sourcePath, importedCount: 0 }), "nothing-to-import";
     let red = await redeemCcRuleImport(facade, prep.prepared.ticket);
     if (!red.ok) return "redeem-failed";
-    let persisted = Array.isArray(red.redeemed?.persisted) ? red.redeemed.persisted.length : 0, deduped = Array.isArray(red.redeemed?.deduped) ? red.redeemed.deduped.length : 0;
+    let persisted = Array.isArray(red.redeemed?.result?.persisted) ? red.redeemed.result.persisted.length : 0, deduped = Array.isArray(red.redeemed?.result?.deduped) ? red.redeemed.result.deduped.length : 0;
     if (deps2.writeMarker({ importedAt: (/* @__PURE__ */ new Date()).toISOString(), sourcePath, importedCount: persisted }), persisted > 0) {
       let noun = persisted === 1 ? "rule" : "rules", dedupTail = deduped > 0 ? ` (${deduped} already present)` : "", text2 = `Imported ${persisted} permission ${noun} from Sema settings${dedupTail} \u2014 review in /permissions`;
       deps2.notice(text2) || (pendingNotice = text2);
@@ -463013,22 +463145,43 @@ function drainPendingCcImportBootNotice() {
 function __resetCcImportBootPendingNoticeForTests() {
   pendingNotice = null;
 }
-function runCcImportBootAuto() {
-  return attempted ? Promise.resolve("already-attempted") : (attempted = !0, runCcImportBootAutoWith({
-    gate: ccImportBootGate,
+function __setCcImportCapsWaitCapForTests(ms) {
+  capsWaitCapMs = ms ?? CAPS_SETTLE_CAP_MS;
+}
+async function awaitEngineCapsSettled(base) {
+  let timer2;
+  try {
+    return await Promise.race([
+      engineCapsSettled(base).then(() => "settled"),
+      new Promise((r) => {
+        timer2 = setTimeout(() => r("timeout"), capsWaitCapMs);
+      })
+    ]);
+  } finally {
+    timer2 !== void 0 && clearTimeout(timer2);
+  }
+}
+async function runCcImportBootAuto() {
+  if (attempted) return "already-attempted";
+  attempted = !0;
+  let base = process.env.SEMA_LIVE_BASEURL;
+  return typeof base == "string" && base.trim() !== "" && await awaitEngineCapsSettled(base) === "timeout" || process.env.SEMA_LIVE_BASEURL !== base ? (attempted = !1, "caps-unsettled") : runCcImportBootAutoWith({
+    gate: () => ccImportBootGate(typeof base == "string" && base.trim() !== "" ? base : void 0),
     collect: collectCcUserLayerAt,
     facade: resolveRulesFacade,
     writeMarker: writeCcImportMarker,
     notice: surfaceTranscriptSystemNotice
-  }));
+  });
 }
-var attempted, pendingNotice, init_ccImportBootRun = __esm({
+var attempted, pendingNotice, CAPS_SETTLE_CAP_MS, capsWaitCapMs, init_ccImportBootRun = __esm({
   "build-src/src/sema/rules/ccImportBootRun.ts"() {
+    init_dist();
     init_persistedRulesWire2();
     init_transcriptSystemNotice();
     init_ccImportMarker();
     attempted = !1;
     pendingNotice = null;
+    CAPS_SETTLE_CAP_MS = 15e3, capsWaitCapMs = CAPS_SETTLE_CAP_MS;
   }
 });
 
@@ -491504,6 +491657,7 @@ async function executeUserInput(params) {
     queuedCommands
   } = params, abortController = createAbortController();
   setAbortController(abortController);
+  let submissionTurnId = beginSubmissionTurn();
   function makeContext() {
     return getToolUseContext(messages, [], abortController, mainLoopModel);
   }
@@ -491584,6 +491738,14 @@ async function executeUserInput(params) {
       nextInput && (submitNextInput ? enqueue({ value: nextInput, mode: "prompt" }) : params.onInputChange(nextInput));
     });
   } finally {
+    if (consumeSubmissionHeldForDecision(submissionTurnId)) {
+      let injected = (params.queuedCommands ?? []).filter((c2) => c2.isMeta === !0);
+      for (let cmd of injected) {
+        if (requeueFailedInjection(cmd)) continue;
+        let text2 = `A system notification was dropped after ${MAX_INJECTION_REQUEUES} attempts \u2014 this session kept an unanswered decision open, so it never reached the model.`;
+        surfaceTranscriptSystemNotice(text2) || logError(new Error(`[sema] ${text2}`));
+      }
+    }
     queryGuard.cancelReservation(), setUserInputOnProcessing(void 0);
   }
 }
@@ -491599,7 +491761,9 @@ var init_handlePromptSubmit = __esm({
     init_log2();
     init_fileHistory();
     init_gracefulShutdown();
+    init_injectionRequeueLatch();
     init_messageQueueManager();
+    init_transcriptSystemNotice();
     init_model();
     init_processUserInput();
     init_queryProfiler();
@@ -491617,17 +491781,24 @@ function isSlashCommand(cmd) {
   return !1;
 }
 function processQueueIfReady({
-  executeInput
+  executeInput,
+  pendingDecisionCard = !1
 }) {
-  let isMainThread = (cmd) => cmd.agentId === void 0, next = peek(isMainThread);
+  let isMainThread = (cmd) => cmd.agentId === void 0, deferred = /* @__PURE__ */ new Set();
+  if (pendingDecisionCard) {
+    for (let cmd of getCommandQueue())
+      isMainThread(cmd) && cmd.isMeta === !0 && (cmd.deferCount ?? 0) < MAX_INJECTION_DEFERRALS && deferred.add(cmd);
+    for (let cmd of deferred) noteInjectionDeferred(cmd);
+  }
+  let drainable = deferred.size > 0 ? (cmd) => isMainThread(cmd) && !deferred.has(cmd) : isMainThread, next = peek(drainable);
   if (!next)
     return { processed: !1 };
   if (isSlashCommand(next) || next.mode === "bash") {
-    let cmd = dequeue(isMainThread);
+    let cmd = dequeue(drainable);
     return executeInput([cmd]), { processed: !0 };
   }
   let targetMode = next.mode, targetInjected = next.isMeta === !0, commands = dequeueAllMatching(
-    (cmd) => isMainThread(cmd) && !isSlashCommand(cmd) && cmd.mode === targetMode && cmd.isMeta === !0 === targetInjected
+    (cmd) => drainable(cmd) && !isSlashCommand(cmd) && cmd.mode === targetMode && cmd.isMeta === !0 === targetInjected
   );
   return commands.length === 0 ? { processed: !1 } : (executeInput(commands), { processed: !0 });
 }
@@ -491649,23 +491820,37 @@ function useQueueProcessor({
   ), queueSnapshot = (0, import_react287.useSyncExternalStore)(
     subscribeToCommandQueue,
     getCommandQueueSnapshot
+  ), pendingDecisionCards = (0, import_react287.useSyncExternalStore)(
+    subscribeToLeaderPendingDecisionCards,
+    leaderPendingDecisionCardCount
   );
   (0, import_react287.useEffect)(() => {
     process.env.SEMA_DEBUG && queueSnapshot.length > 0 && logForDebugging(
-      `[queue-drain] len=${queueSnapshot.length} queryActive=${isQueryActive} jsxUI=${hasActiveLocalJsxUI} modes=${queueSnapshot.map((c2) => c2.mode).join(",")}`
-    ), !isQueryActive && (hasActiveLocalJsxUI || queueSnapshot.length !== 0 && processQueueIfReady({ executeInput: executeQueuedInput }));
+      `[queue-drain] len=${queueSnapshot.length} queryActive=${isQueryActive} jsxUI=${hasActiveLocalJsxUI} cards=${pendingDecisionCards} modes=${queueSnapshot.map((c2) => c2.mode).join(",")}`
+    ), !isQueryActive && (hasActiveLocalJsxUI || queueSnapshot.length !== 0 && processQueueIfReady({
+      executeInput: executeQueuedInput,
+      // #289 批面①:有**引擎的**卡挂着 ⇒ 注入件这一拍先不出队(人类提交照走)。
+      // 🔴 减掉壳自己合成的 running 三选卡 —— 与自愈腿 `hasPendingDecision` 同一个判据
+      //    (seamQuery 装配处逐字同形)。它们进同一条 REPL 卡队列,但答那张卡**不释放会话**,
+      //    拿总长度当判据 = 用一个答不出问题的量去闸主队列(复审轮 R1 半场)。
+      // 推迟有预算(MAX_INJECTION_DEFERRALS),陈旧镜像下不会永久饿死 —— 见 processQueueIfReady。
+      pendingDecisionCard: pendingDecisionCards > openRunningChoiceCardCount()
+    }));
   }, [
     queueSnapshot,
     isQueryActive,
     executeQueuedInput,
     hasActiveLocalJsxUI,
-    queryGuard
+    queryGuard,
+    pendingDecisionCards
   ]);
 }
 var import_react287, init_useQueueProcessor = __esm({
   "build-src/src/hooks/useQueueProcessor.ts"() {
     import_react287 = __toESM(require_react(), 1);
     init_messageQueueManager();
+    init_leaderPermissionBridge();
+    init_activeRunRunningChoice();
     init_debug();
     init_queueProcessor();
   }
@@ -497196,7 +497381,7 @@ function _temp158() {
 }
 var import_compiler_runtime308, import_react313, SETTINGS_ERRORS_NOTIFICATION_KEY, init_useSettingsErrors = __esm({
   "build-src/src/hooks/notifs/useSettingsErrors.tsx"() {
-    import_compiler_runtime308 = __toESM(require_compiler_runtime()), import_react313 = __toESM(require_react());
+    import_compiler_runtime308 = __toESM(require_compiler_runtime(), 1), import_react313 = __toESM(require_react(), 1);
     init_notifications2();
     init_state();
     init_allErrors();
@@ -514609,17 +514794,19 @@ Error: sandbox required but unavailable: ${sandboxUnavailableReason}
         // 文本形态源之一),(b) 只会渲本地 loop 语义的模板句 —— 引擎终帧(timeout→error_max_turns、
         // budget、output.invalid)带 errors[] 引擎原话时优先如实渲它(--deadline 的 timeout 若渲
         // "Reached max turns (undefined)" 是撒谎)。errors[] 缺席时维持 CC 模板句(补 \n)。
+        // #289 批面③(dogfood 复扫 api C1)—— **错档前缀**。这三个 subtype 全是引擎侧治理限额
+        // 到限(轮数 / USD 预算 / 结构化输出重试),不是 provider 或 HTTP 层故障;此前 errors[]
+        // 臂经 formatTextModeExecutionError 无条件补 `API Error: `,于是 `sema -p --max-turns N`
+        // 的 STDERR 逐字是 `API Error: max turns exceeded`,把用户支去查网络/密钥/额度。而同一臂
+        // 自己的 CC 对齐模板刻意不带 `API` 字样 —— 两条路径对同一类终态说了两种身份,且由于上游
+        // terminalToSdkResult 恒填非空 errors[],真跑到的永远是补前缀那条(模板等同死码)。
+        // 修 = 两条路径合流到一个中性格式化器:有引擎原话就用原话(前缀 `Error: `),没有才落模板。
         case "error_max_turns":
         case "error_max_budget_usd":
         case "error_max_structured_output_retries": {
-          let engineErrors = lastMessage.errors;
-          if (Array.isArray(engineErrors) && engineErrors.length > 0) {
-            process.stderr.write(formatTextModeExecutionError(engineErrors, mergedModelEnv()) + `
-`);
-            break;
-          }
-          let template = lastMessage.subtype === "error_max_turns" ? `Error: Reached max turns (${options.maxTurns})` : lastMessage.subtype === "error_max_budget_usd" ? `Error: Exceeded USD budget (${options.maxBudgetUsd})` : "Error: Failed to provide valid structured output after maximum retries";
-          writeToStdout(template + `
+          let engineErrors = lastMessage.errors, template = lastMessage.subtype === "error_max_turns" ? `Error: Reached max turns (${options.maxTurns})` : lastMessage.subtype === "error_max_budget_usd" ? `Error: Exceeded USD budget (${options.maxBudgetUsd})` : "Error: Failed to provide valid structured output after maximum retries", line = formatTextModeGovernanceStop(engineErrors, template);
+          line === template ? writeToStdout(template + `
+`) : process.stderr.write(line + `
 `);
           break;
         }
@@ -529409,20 +529596,11 @@ function stationSkipped(id) {
     if (id === "mcp") return detectMcpChannels().length === 0;
     if (id === "skills") return detectSkillChannels().length === 0;
     if (id === "plugins") return detectCcPlugins().plugins.length === 0;
-    if (id === "rules")
-      return readCcImportMarker() !== null ? !0 : !detectCcRulesImport().offer;
   } catch {
     return !1;
   }
   return !1;
 }
-function rulesSkipSummary() {
-  try {
-    return readCcImportMarker() !== null ? "already imported once \u2014 re-import anytime from `/permissions`" : detectCcRulesImport().why === "lane-unavailable" ? "skipped \u2014 this engine has no rule store (manage saved rules from `/permissions`)" : "no permission rules found to import (manage saved rules from `/permissions`)";
-  } catch {
-    return "skipped (manage saved rules from `/permissions`)";
-  }
-}
 function finalize2(flow) {
   if (!flow.finalized) {
     flow.finalized = !0;
@@ -529442,15 +529620,10 @@ function finalize2(flow) {
     } catch (e) {
       flow.summary.push(`model      apply failed: ${e instanceof Error ? e.message : String(e)}`);
     }
-    for (let id of flow.skippedIds) {
-      if (id === "rules") {
-        flow.summary.push(`rules      ${rulesSkipSummary()}`);
-        continue;
-      }
+    for (let id of flow.skippedIds)
       flow.summary.push(
         `${id.padEnd(10)} nothing to import \u2014 skipped (run \`sema config ${id}\` anytime)`
       );
-    }
   }
 }
 function StationFrame({ flow, children }) {
@@ -529607,7 +529780,7 @@ function OnboardWizardBody({
     () => ({ summary: [], skippedIds: /* @__PURE__ */ new Set(), finalized: !1, zeroModels: !1, escArmedAt: 0, ctrlCArmedAt: 0, station: null }),
     []
   ), chain = React198.useMemo(
-    () => modelOnly ? ["model"] : ["language", "theme", "model", "tiers", "mcp", "skills", "plugins", "rules"],
+    () => modelOnly ? ["model"] : ["language", "theme", "model", "tiers", "mcp", "skills", "plugins"],
     [modelOnly]
   ), setUiLanguage = useSetUiLanguage(), t2 = useT(), tRef = React198.useRef(t2);
   tRef.current = t2;
@@ -529687,28 +529860,6 @@ function OnboardWizardBody({
           }
         )
       };
-    if (id === "rules") {
-      let rulesNavRef = { current: null }, detected = detectCcRulesImport();
-      return {
-        key: "onboard-rules",
-        wantsEsc: () => {
-          let nav = rulesNavRef.current;
-          return !nav || goBack(i, nav) ? !0 : firstStationEsc();
-        },
-        render: (nav) => (rulesNavRef.current = nav, /* @__PURE__ */ (0, import_jsx_runtime511.jsxs)(ThemedBox_default, { flexDirection: "column", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime511.jsx)(ThemedText, { dimColor: !0, children: tt2("onboard.blurb.rules") }),
-          /* @__PURE__ */ (0, import_jsx_runtime511.jsx)(
-            CcRulesImportFlow,
-            {
-              layers: detected.layers,
-              onDone: (summary) => {
-                summary !== null ? flow.summary.push(summary) : writeCcImportDeclinedMarker(), advance(i, nav);
-              }
-            }
-          )
-        ] }))
-      };
-    }
     let navRef = { current: null }, onboardOpts = {
       blurb: tt2(STATION_BLURB_KEYS[id]),
       continueLabel: "Continue \u2192",
@@ -529749,10 +529900,7 @@ var React198, import_jsx_runtime511, STATION_LABEL_KEYS, STATION_WORDS, STATION_
     init_TiersHub();
     init_skillsChannels();
     init_SkillsHub();
-    init_ccImportMarker();
     init_BigStepTitle();
-    init_CcRulesImportFlow();
-    init_ccRulesImport();
     init_LanguageStation();
     init_onboardVerification();
     init_onboardZeroModel();
@@ -529767,8 +529915,7 @@ var React198, import_jsx_runtime511, STATION_LABEL_KEYS, STATION_WORDS, STATION_
       tiers: "onboard.station.tiers",
       mcp: "onboard.station.mcp",
       skills: "onboard.station.skills",
-      plugins: "onboard.station.plugins",
-      rules: "onboard.station.rules"
+      plugins: "onboard.station.plugins"
     }, STATION_WORDS = {
       language: "LANGUAGE",
       theme: "THEME",
@@ -529776,15 +529923,13 @@ var React198, import_jsx_runtime511, STATION_LABEL_KEYS, STATION_WORDS, STATION_
       tiers: "TIERS",
       mcp: "MCP",
       skills: "SKILLS",
-      plugins: "PLUGINS",
-      rules: "RULES"
+      plugins: "PLUGINS"
     }, STATION_BLURB_KEYS = {
       model: "onboard.blurb.model",
       tiers: "onboard.blurb.tiers",
       mcp: "onboard.blurb.mcp",
       skills: "onboard.blurb.skills",
-      plugins: "onboard.blurb.plugins",
-      rules: "onboard.blurb.rules"
+      plugins: "onboard.blurb.plugins"
     };
     WELCOME_WORDMARK = [
       ["#00E5FF", "\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2557   \u2588\u2588\u2588\u2557  \u2588\u2588\u2588\u2588\u2588\u2557 "],
@@ -530238,7 +530383,12 @@ ${addendum}` : addendum;
       notification: permissionModeNotification
     } = initialPermissionModeFromCLI({
       permissionModeCli,
-      dangerouslySkipPermissions
+      dangerouslySkipPermissions,
+      // sema 出厂默认 auto([4197]⑤)仅真交互车道。判据必须是 isNonInteractive 全开集
+      // (print/--init-only/SDK URL/stdout 非 TTY 四臂,839 行铸位)而非 `!print` 单臂——
+      // 1.0.83 扫码异源复审 F2:stdout 重定向且无 -p 时 print=false 却走 headless,单臂判据
+      // 会让无人值守车道漏进出厂 auto。#164/#165 headless 门链以 default 为前提。
+      factoryDefaultAutoEligible: !getIsNonInteractiveSession()
     });
     setSessionBypassPermissionsMode(permissionMode === "bypassPermissions"), (options.enableAutoMode || permissionModeCli === "auto" || permissionMode === "auto" || !permissionModeCli && isDefaultPermissionModeAuto()) && autoModeStateModule7?.setAutoModeFlagCli(!0);
     let dynamicMcpConfig = {};
@@ -531140,7 +531290,7 @@ Usage: sema --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("sema 1.0.82", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
+  }).version("sema 1.0.83", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).psHandler([]), process.exit(process.exitCode ?? 0);
   }), program2.command("logs [id]").description("Print a background session's recent terminal output").action(async (id) => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).logsHandler(id, []), process.exit(process.exitCode ?? 0);
@@ -533131,7 +533281,7 @@ async function showSetupScreens(root2, permissionMode, allowDangerouslySkipPermi
     } = await Promise.resolve().then(() => (init_BypassPermissionsModeDialog(), BypassPermissionsModeDialog_exports));
     await showSetupDialog(root2, (done) => /* @__PURE__ */ (0, import_jsx_runtime526.jsx)(BypassPermissionsModeDialog2, { onAccept: done }));
   }
-  if (permissionMode === "auto" && !hasAutoModeOptIn()) {
+  if (permissionMode === "auto" && !hasAutoModeOptIn() && !isFactoryDefaultAutoActive()) {
     let {
       AutoModeOptInDialog: AutoModeOptInDialog2
     } = await Promise.resolve().then(() => (init_AutoModeOptInDialog(), AutoModeOptInDialog_exports));
@@ -533198,6 +533348,7 @@ var import_jsx_runtime526, init_interactiveHelpers = __esm({
     init_AppState();
     init_onChangeAppState();
     init_authPortable();
+    init_permissionSetup();
     init_claudemd();
     init_config();
     init_terminalPreference();
@@ -535824,8 +535975,8 @@ var BUILTIN_DYNAMIC, mcpFill_default, init_mcpFill = __esm({
 });
 
 // build-src/stubs/bun-bundle.js
-var bun_bundle_exports = {};
-__export(bun_bundle_exports, {
+var bun_bundle_exports2 = {};
+__export(bun_bundle_exports2, {
   feature: () => feature2
 });
 function feature2(flag) {
@@ -537637,7 +537788,9 @@ async function main2() {
     liveWorkflowBaseUrl ? (liveWorkflowSource = createLiveWorkflowSource({
       baseUrl: liveWorkflowBaseUrl,
       authToken: process.env.SEMA_WORKFLOW_TOKEN || process.env.SEMA_FLEET_TOKEN || "anon",
-      principal: process.env.SEMA_WORKFLOW_PRINCIPAL ?? process.env.SEMA_FLEET_PRINCIPAL ?? "anon:sema",
+      // principal 恒经闸口(F-011/[4189];workflow 专属 env 显式恒赢,回落 fleet→live 解析
+      // 链缺省 'default'——同文件 workflow monitor 臂同形;anon 前缀哨兵残留已清)
+      principal: process.env.SEMA_WORKFLOW_PRINCIPAL ?? resolveFleetPrincipal(),
       ...process.env.SEMA_WORKFLOW_ID ? { workflowId: process.env.SEMA_WORKFLOW_ID } : {}
     }), process.env.SEMA_DEBUG && console.error(
       `[sema] workflow source: LIVE WIRE (${liveWorkflowBaseUrl}) \u2014 createLiveWorkflowSource`
@@ -537685,7 +537838,9 @@ async function main2() {
         let { createLiveFleetSource: createLiveFleetSource2 } = await Promise.resolve().then(() => (init_fleetClient(), fleetClient_exports)), source2 = createLiveFleetSource2({
           baseUrl: liveBaseUrl,
           authToken: process.env.SEMA_FLEET_TOKEN || "anon",
-          principal: process.env.SEMA_FLEET_PRINCIPAL ?? "anon:sema"
+          // principal 恒经闸口(F-011/[4189]:resolveFleetPrincipal 内部先认 SEMA_FLEET_PRINCIPAL
+          // 显式值,缺省 'default' 租户键;anon 前缀哨兵残留已清)
+          principal: resolveFleetPrincipal()
         });
         return process.env.SEMA_DEBUG && console.error(`[sema] fleet source: LIVE WIRE (${liveBaseUrl}) \u2014 createLiveFleetSource`), source2;
       }
@@ -538448,9 +538603,20 @@ async function launchReplProduction() {
     launchMode && (tpc.mode = launchMode), tpc.isBypassPermissionsModeAvailable = isBypassPermissionsModeAvailable, bypassModeLaunch = isBypassPermissionsModeAvailable;
     let effectiveConfig;
     try {
-      effectiveConfig = resolveSemaConfig({ launchMode });
+      let { feature: feature3 } = await Promise.resolve().then(() => (init_bun_bundle(), bun_bundle_exports)), { getAutoModeEnabledStateIfCached: getAutoModeEnabledStateIfCached2 } = await Promise.resolve().then(() => (init_permissionSetup(), permissionSetup_exports)), factoryDefaultAutoEligible = getAutoModeEnabledStateIfCached2() !== "disabled";
+      effectiveConfig = resolveSemaConfig({
+        launchMode,
+        factoryDefaultAuto: factoryDefaultAutoEligible
+      });
       let dm = effectiveConfig.derivedMode;
-      tpc.mode = dm === "bypassPermissions" && !isBypassPermissionsModeAvailable ? "default" : dm, bypassModeLaunch = tpc.mode === "bypassPermissions", settingsRejectionNotices = effectiveConfig.rejections.map(describeRejection), process.env.SEMA_DEBUG && console.error(
+      if (tpc.mode = dm === "bypassPermissions" && !isBypassPermissionsModeAvailable ? "default" : dm, bypassModeLaunch = tpc.mode === "bypassPermissions", tpc.mode === "auto") {
+        let { setAutoModeActive: setAutoModeActive2 } = await Promise.resolve().then(() => (init_autoModeState(), autoModeState_exports));
+        if (setAutoModeActive2(!0), effectiveConfig.derivedModeIsFactoryDefault === !0) {
+          let { markFactoryDefaultAutoActive: markFactoryDefaultAutoActive2 } = await Promise.resolve().then(() => (init_permissionSetup(), permissionSetup_exports));
+          markFactoryDefaultAutoActive2();
+        }
+      }
+      settingsRejectionNotices = effectiveConfig.rejections.map(describeRejection), process.env.SEMA_DEBUG && console.error(
         `[sema] resolver: derivedMode=${dm} \u2192 tpc.mode=${tpc.mode} \xB7 model=${effectiveConfig.model ?? "\u2205"} hooks=${effectiveConfig.hooks ? "set" : "\u2205"} envKeys=${Object.keys(effectiveConfig.env ?? {}).length}`
       );
       try {
@@ -538556,7 +538722,7 @@ async function launchReplProduction() {
       try {
         let modeApi = null;
         try {
-          let { feature: feature3 } = await Promise.resolve().then(() => (init_bun_bundle2(), bun_bundle_exports));
+          let { feature: feature3 } = await Promise.resolve().then(() => (init_bun_bundle2(), bun_bundle_exports2));
         } catch {
         }
         let resumeContext = {
@@ -538947,7 +539113,7 @@ var React215, import_jsx_runtime537, isMain, COMMANDER_SUBCOMMANDS, replEntry_de
     if (isMain) {
       let argv = process.argv.slice(2);
       (async () => {
-        let { feature: feature3 } = await Promise.resolve().then(() => (init_bun_bundle2(), bun_bundle_exports));
+        let { feature: feature3 } = await Promise.resolve().then(() => (init_bun_bundle2(), bun_bundle_exports2));
         if (argv[0] === "--daemon-worker") {
           let { runDaemonWorker: runDaemonWorker2 } = await Promise.resolve().then(() => (init_workerRegistry(), workerRegistry_exports));
           return await runDaemonWorker2(argv[1]), !0;

package/sema.js

@@ -71,7 +71,7 @@ function installBootSignalTailFrame(argv2 = process.argv.slice(2)) {
 installBootSignalTailFrame();
 
 // build-src/src/sema/preludeEntry.ts
-var versionLine = "sema 1.0.82" ? "sema 1.0.82" : "";
+var versionLine = "sema 1.0.83" ? "sema 1.0.83" : "";
 var argv = process.argv.slice(2);
 var wantsVersionFastPath = argv.length === 1 && (argv[0] === "--version" || argv[0] === "-v");
 if (wantsVersionFastPath && versionLine) {