@sema-agent/cli 1.0.87 → 1.0.88

package/sema-main.js

@@ -55614,6 +55614,12 @@ function isLimitsExceededCode(code2) {
 function isDelegationCapCode(code2) {
   return typeof code2 == "string" && code2.startsWith("delegation.");
 }
+function delegationCapDispositionOf(code2) {
+  if (code2 === DELEGATION_CONCURRENCY_CAP)
+    return "wait-for-slot";
+  if (code2 === DELEGATION_SESSION_CAP)
+    return "reuse-existing-or-await-reap";
+}
 function isConfigRefusalCode(code2) {
   return typeof code2 == "string" && code2.startsWith("config.");
 }
@@ -55626,7 +55632,7 @@ function isRewindFamilyCode(code2) {
 function asModelFallbackReason(v2) {
   return v2 === MODEL_FALLBACK_INHERIT_NO_TIER_BINDING ? MODEL_FALLBACK_INHERIT_NO_TIER_BINDING : void 0;
 }
-var LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, LIMITS_ERROR_CODE_PREFIX, USAGE_WINDOW_EXHAUSTED, ENV_LIFETIME_EXPIRED, CONFIG_LIMIT_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_REFUSAL_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, DELEGATION_CAP_CODES, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, TOOL_END_INTERRUPTED_CODES, ACTIVE_RUN_BUSY_ERROR_CODE, STOP_PARK_ARBITER_UNREACHABLE, STOP_PARK_RESUME_WON, STOP_NOT_LANDED, STOP_NOT_LOCAL, STOP_PARKED, STOP_CONFLICT_CODES, OUTPUT_INVALID, RESUME_AT_ERROR_CODE_PREFIX, REWIND_ERROR_CODE_PREFIXES, DRAINING_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STREAM_MAX_DURATION, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, init_engineErrorCodes = __esm({
+var LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, LIMITS_ERROR_CODE_PREFIX, USAGE_WINDOW_EXHAUSTED, ENV_LIFETIME_EXPIRED, CONFIG_LIMIT_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_REFUSAL_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, DELEGATION_CAP_CODES, MCP_SERVER_REVOKED, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, TOOL_END_INTERRUPTED_CODES, ACTIVE_RUN_BUSY_ERROR_CODE, STOP_PARK_ARBITER_UNREACHABLE, STOP_PARK_RESUME_WON, STOP_NOT_LANDED, STOP_NOT_LOCAL, STOP_PARKED, STOP_CONFLICT_CODES, OUTPUT_INVALID, RESUME_AT_ERROR_CODE_PREFIX, REWIND_ERROR_CODE_PREFIXES, DRAINING_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STREAM_MAX_DURATION, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, init_engineErrorCodes = __esm({
   "node_modules/@sema-agent/client-core/dist/engineErrorCodes.js"() {
     LIMITS_MAX_TOKENS_EXCEEDED = "limits.max_tokens_exceeded", LIMITS_MAX_COST_EXCEEDED = "limits.max_cost_exceeded", LIMITS_MAX_TURNS_EXCEEDED = "limits.max_turns_exceeded", LIMITS_MAX_WALLTIME_EXCEEDED = "limits.max_walltime_exceeded", LIMITS_ERROR_CODE_PREFIX = "limits.";
     USAGE_WINDOW_EXHAUSTED = "usage.window_exhausted", ENV_LIFETIME_EXPIRED = "env.lifetime_expired", CONFIG_LIMIT_INVALID = "config.limit_invalid", CONFIG_STRATEGY_FIND_LIMIT_INVALID = "config.strategy_find_limit_invalid", CONFIG_STRATEGY_MAX_SIZE_INVALID = "config.strategy_max_size_invalid", CONFIG_LIMIT_UNKNOWN_KEY = "config.limit_unknown_key", CONFIG_DELEGATION_ENTRY_CAPS = "config.delegation_entry_caps", CONFIG_REFUSAL_CODES = /* @__PURE__ */ new Set([
@@ -55639,6 +55645,7 @@ var LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TURNS_EXCEE
       DELEGATION_CONCURRENCY_CAP,
       DELEGATION_SESSION_CAP
     ]);
+    MCP_SERVER_REVOKED = "mcp.server_revoked";
     TOOL_END_INTERRUPTED_NEVER_STARTED = "interrupted_never_started", TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN = "interrupted_outcome_unknown", TOOL_END_INTERRUPTED_CODES = /* @__PURE__ */ new Set([
       TOOL_END_INTERRUPTED_NEVER_STARTED,
       TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN
@@ -63077,8 +63084,8 @@ function ensureWorkflowActivityLedger(cfg) {
     let evicted = activityLedgers.get(victim);
     evicted && (evicted.closed = !0, evicted.closedReason = "stopped", evicted.abort.abort(), emitActivityTick(evicted)), activityLedgers.delete(victim);
   }
-  let ledger = newActivityLedger(cfg.workflowId, scope);
-  activityLedgers.set(cfg.workflowId, ledger), consumeWorkflowActivity(ledger, cfg);
+  let ledger2 = newActivityLedger(cfg.workflowId, scope);
+  activityLedgers.set(cfg.workflowId, ledger2), consumeWorkflowActivity(ledger2, cfg);
 }
 function stopWorkflowActivityLedger(workflowId) {
   let l3 = activityLedgers.get(workflowId);
@@ -63160,21 +63167,21 @@ function createLiveWorkflowSource(config4) {
             ...config4.fetchImpl ? { fetchImpl: config4.fetchImpl } : {}
           });
         }
-        let ledger = activityDisabled ? void 0 : activityLedgers.get(id);
-        if (ledger) {
-          ledger.consumers += 1;
+        let ledger2 = activityDisabled ? void 0 : activityLedgers.get(id);
+        if (ledger2) {
+          ledger2.consumers += 1;
           try {
             for (; ; ) {
-              let beat = await waitActivityTick(ledger, abort.signal);
+              let beat = await waitActivityTick(ledger2, abort.signal);
               if (beat === "abort" || disposed4)
                 return;
               if (beat === "tick" && (connected = !0), Date.now() - lastGetAt >= REFRESH_THROTTLE_MS && await refresh(id, abort.signal), degraded || beat === "closed")
                 break;
             }
           } finally {
-            ledger.consumers -= 1;
+            ledger2.consumers -= 1;
           }
-          ledger.displaced && (activityDisabled = !0, engineWireDebugEnabled() && hostLog("debug", `[sema][workflow] activity ledger for ${id} was taken over by another engine target/principal \u2014 this source stops re-opening it (GET polling only)`));
+          ledger2.displaced && (activityDisabled = !0, engineWireDebugEnabled() && hostLog("debug", `[sema][workflow] activity ledger for ${id} was taken over by another engine target/principal \u2014 this source stops re-opening it (GET polling only)`));
         }
         !disposed4 && !abort.signal.aborted && await abortableSleep(STREAM_DROP_BACKOFF_MS, abort.signal);
       } catch (err8) {
@@ -65444,6 +65451,9 @@ function pathFromGateMessage(message) {
   if (typeof message == "string")
     return FS_WRITE_GATE_ASK_PATTERN.exec(message)?.[1];
 }
+function isNonNegativeFinite(v2) {
+  return typeof v2 == "number" && Number.isFinite(v2) && v2 >= 0;
+}
 function isWireRecordCarrier(v2) {
   return typeof v2 == "object" && v2 !== null && !Array.isArray(v2);
 }
@@ -65487,6 +65497,22 @@ async function surfaceToolApprovalFrameAndRespond(frame, respond, streamArgs, si
     ...isFromSubagent(frame) ? { workerBadge: subagentBadgeFor(frame) } : {},
     ...wireNote !== void 0 ? { wireNote } : {},
     ...frame.governanceForced === !0 ? { governanceForced: !0 } : {},
+    // [4851]:窗三键透传,三闸合取(异源对抗复审 P1/P2 收编):
+    //   ① `lane.windowIsCurrent === true` —— durable 账本重放的历史帧带的是铸帧时刻的旧余量,
+    //      给它续窗 = 过期 ask 渲出精确假倒计时(壳孪生族同名闸的本包席位,见 LaneOpts 注);
+    //   ② **非负有限数**才 stamp —— `Number.isFinite` 单独放行负数,而三键定义域按 SDK 契约
+    //      本就非负(`expiresInMs = max(0, …)`;0 合法 = 窗恰好到点)。负数/NaN/Infinity =
+    //      坏形降缺席,绝不折 0 或猜(同文件 delegation.depth 曾同款教训);
+    //   ③ 三键各自独立 stamp:server 承诺同门在场,但包边界不替上游把「半套在场」湮灭成全缺席
+    //      —— 读器自己按「expiresAtMs 优先、expiresInMs 兜底」消化半套。
+    // 任一键 stamp 时同步盖 `receivedAtMs`(本地收帧锚):卡口串行阻塞下,排队靠后的卡若按
+    // 「呈现那一刻」起算余量,窗被整段还回去 —— 壳读器明文优先这枚锚。
+    ...lane?.windowIsCurrent === !0 ? {
+      ...isNonNegativeFinite(frame.expiresInMs) ? { expiresInMs: frame.expiresInMs } : {},
+      ...isNonNegativeFinite(frame.expiresAtMs) ? { expiresAtMs: frame.expiresAtMs } : {},
+      ...isNonNegativeFinite(frame.serverNowMs) ? { serverNowMs: frame.serverNowMs } : {},
+      ...isNonNegativeFinite(frame.expiresInMs) || isNonNegativeFinite(frame.expiresAtMs) ? { receivedAtMs: Date.now() } : {}
+    } : {},
     // 🔴 跨字段不变量(对抗复审命中):`delegation` 只在**子代 ask** 的门上在场(SDK 头注:
     //    "Present on the same door as fromSubagent (child asks only)")。只校对象形不校这一条 ⇒
     //    一个**宿主自己**的破坏性工具审批也能带着 delegation 到卡口,被呈成「某层子代发起的」——
@@ -65581,6 +65607,14 @@ var cardPortByKey, cardPortMissesByKey, TOOL_APPROVAL_FRAME_KEYS_MIRROR, RESPOND
       // sdk 7.1.0 的运行期锚**尚无**本键(node 直读实证:锚 17 项)⇒ 这是一次**领先**,进对账门的
       // AHEAD_OF_ANCHOR 带退出条件登记(SDK 追平当天那条登记自红逼删,回到逐元素相等)。
       "requiresRealApproval",
+      // [4851] 头号请托(client-core 0.38.2):server 7.34.0 起真发窗三键(#288/[4429]② cli 自己请托,
+      // server src/tool-approval.ts 三键声明+条件 stamp)。⚠️ 与 requiresRealApproval 同形=**领先** SDK
+      // 运行期锚(sdk 7.2.0 锚 17 项,node 直读实证无三键)⇒ 进对账门 AHEAD_OF_ANCHOR 带退出条件登记
+      // (SDK 追平当天登记自红逼删)。0.38.1 把三键丢在包边界外 = [4845]「卡到期屏幕零反应」的直接成因
+      // (壳读器 readAskDeadlineMs 早已预埋,缺的一直是包边界这一格——#283 逐字同形第四例)。
+      "expiresInMs",
+      "expiresAtMs",
+      "serverNowMs",
       "delegation",
       "outcome"
     ];
@@ -68747,6 +68781,7 @@ __export(dist_exports, {
   MAX_TURNS_MAX: () => MAX_TURNS_MAX,
   MAX_TURNS_MIN: () => MAX_TURNS_MIN,
   MCP_CAPS: () => MCP_CAPS,
+  MCP_SERVER_REVOKED: () => MCP_SERVER_REVOKED,
   MIGRATED_COMPENSATIONS: () => MIGRATED_COMPENSATIONS,
   MODEL_FALLBACK_INHERIT_NO_TIER_BINDING: () => MODEL_FALLBACK_INHERIT_NO_TIER_BINDING,
   MODEL_FAMILIES: () => MODEL_FAMILIES,
@@ -68968,6 +69003,7 @@ __export(dist_exports, {
   deferToolsForRequest: () => deferToolsForRequest,
   degradedToolResultBody: () => degradedToolResultBody,
   delegatedPromptText: () => delegatedPromptText,
+  delegationCapDispositionOf: () => delegationCapDispositionOf,
   denyReasonForWire: () => denyReasonForWire,
   deriveAgentLabel: () => deriveAgentLabel,
   deriveNotificationResidualLines: () => deriveNotificationResidualLines,
@@ -78844,7 +78880,7 @@ function extraBodyUnsafe(v2) {
 function workerRouteKey(w2) {
   return w2.routePrefix ?? w2.name;
 }
-var SECRET_LITERAL_RE, ENV_NAME, hasNul, NON_SECRET_URL, K8S_QUANTITY, TCP_PORT, ModelCost, SEALED_BOX_ALG, BASE64_SHAPE, SealedApiKey, ModelEntry, ModelRole, RoleTarget, TierBindings, TierGroup, ModelsConfig, RosterEntry, RostersConfig, ScenarioEntry, ScenarioConfig, DELIVER_DENYLIST, SystemEntry, SystemsConfig, SystemStatusEntry, RuntimeConfig, GovernanceConfig, EntitlementBudget, TokenQuota, BudgetGroupMember, BudgetGroup, ScenarioAssignments, EntitlementRuntimeCaps, EntitlementTier, EntitlementOverride, EntitlementSubject, EntitlementGroupBinding, EntitlementConfig, PrincipalOrgMemoryWire, PrincipalCapsWire, ActorAssertionWire, SESSION_MIRROR_ENGINE_URL, SessionMirrorPolicy, ExecutionPublicKey, ExecutionPolicy, PROJECT_ID_REGEX, ProjectRegistration, ProjectsConfig, CollabTopology, CollabFinalizerType, CollabEarlyStop, CollabPersistence, CollabMember, CollabSlot, CollabTemplate, CollabConfig, DURATION, WorkerLifecycle, WorkerSecretRefs, RESERVED_WORKER_ENV, RESERVED_ENV_FIELD, WorkerSpec, WorkersConfig, WorkerCondition, WorkerStatus, HOST_NAME_MAX, HOSTS_ARRAY_MAX, HostEntry, HostsConfig, PROBE_CPU_CORES_MAX, PROBE_MEM_BYTES_MAX, HostProbes, HostStatus, SkillSpec, SkillsConfig, SkillsManifestSchema, McpEnvRefs, HTTP_HEADER_NAME, McpHeaderRefs, McpTransport, McpServerSpec, McpConfig, PLUGIN_ORIGIN, GIT_COMMIT_SHA, PluginSource, PluginSpec, PluginsConfig, PromptTextDeclaration, PromptBinding, PROMPT_ARTIFACT_LIMITS, PromptArtifactSection, PromptCatalogSnapshot, PromptEpochArtifactPayload, PublishedPromptArtifactEnvelope, PromptsConfig, EffectivePrompts, EffectivePromptsWire, DOMAIN_SCHEMAS, SettingSource, EffectiveKey, DOMAINS, init_types6 = __esm({
+var SECRET_LITERAL_RE, ENV_NAME, hasNul, NON_SECRET_URL, K8S_QUANTITY, TCP_PORT, ModelCost, SEALED_BOX_ALG, BASE64_SHAPE, SealedApiKey, ModelEntry, ModelRole, RoleTarget, TierBindings, TierGroup, ModelsConfig, RosterEntry, RostersConfig, ScenarioEntry, ScenarioConfig, DELIVER_DENYLIST, SystemEntry, SystemsConfig, SystemStatusEntry, RuntimeConfig, InfraCostRates, LimitsConfig, GovernanceConfig, EntitlementBudget, TokenQuota, BudgetGroupMember, BudgetGroup, ScenarioAssignments, EntitlementRuntimeCaps, EntitlementTier, EntitlementOverride, EntitlementSubject, EntitlementGroupBinding, EntitlementConfig, PrincipalOrgMemoryWire, PrincipalCapsWire, ActorAssertionWire, SESSION_MIRROR_ENGINE_URL, SessionMirrorPolicy, ExecutionPublicKey, ExecutionPolicy, PROJECT_ID_REGEX, ProjectRegistration, ProjectsConfig, CollabTopology, CollabFinalizerType, CollabEarlyStop, CollabPersistence, CollabMember, CollabSlot, CollabTemplate, CollabConfig, DURATION, WorkerLifecycle, WorkerSecretRefs, RESERVED_WORKER_ENV, RESERVED_ENV_FIELD, WorkerSpec, WorkersConfig, WorkerCondition, WorkerStatus, HOST_NAME_MAX, HOSTS_ARRAY_MAX, HostEntry, HostsConfig, PROBE_CPU_CORES_MAX, PROBE_MEM_BYTES_MAX, HostProbes, HostStatus, SkillSpec, SkillsConfig, SkillsManifestSchema, McpEnvRefs, HTTP_HEADER_NAME, McpHeaderRefs, McpTransport, McpServerSpec, McpConfig, PLUGIN_ORIGIN, GIT_COMMIT_SHA, PluginSource, PluginSpec, PluginsConfig, PromptTextDeclaration, PromptBinding, PROMPT_ARTIFACT_LIMITS, PromptArtifactSection, PromptCatalogSnapshot, PromptEpochArtifactPayload, PublishedPromptArtifactEnvelope, PromptsConfig, EffectivePrompts, EffectivePromptsWire, DOMAIN_SCHEMAS, SettingSource, EffectiveKey, DOMAINS, init_types6 = __esm({
   "node_modules/@sema-agent/registry-core/dist/types.js"() {
     init_zod();
     init_hash2();
@@ -79114,7 +79150,43 @@ var SECRET_LITERAL_RE, ENV_NAME, hasNul, NON_SECRET_URL, K8S_QUANTITY, TCP_PORT,
       maxTaskTokens: external_exports2.number().int().nonnegative().optional(),
       maxPrincipalCostUsd: external_exports2.number().finite().nonnegative().optional(),
       costQuotaWindowSec: external_exports2.number().int().positive().optional()
-    }), GovernanceConfig = external_exports2.object({
+    }), InfraCostRates = external_exports2.object({
+      toolCallMicroUsd: external_exports2.number().finite().optional(),
+      sandboxSecMicroUsd: external_exports2.number().finite().optional(),
+      egressGbMicroUsd: external_exports2.number().finite().optional()
+    }).passthrough(), LimitsConfig = external_exports2.object({
+      // `.optional()` 无默认,与 RuntimeConfig 同纪律:ABSENT = 「center 不管这一键」⇒ 消费方回自己的 env 底;
+      // 显式值(**包括 0**)= 发布了一个真值(0 多半是「关断哨兵」,语义归消费方)。给默认值 = 静默覆盖部署。
+      /** 每 principal 每分钟请求上限。 */
+      rateLimitPerMin: external_exports2.number().finite().optional(),
+      /** 每 principal 滚动窗累计花费上限(USD)。 */
+      maxPrincipalCostUsd: external_exports2.number().finite().optional(),
+      /** 上面那条配额的窗长(秒)。 */
+      costQuotaWindowSec: external_exports2.number().finite().optional(),
+      /** 单任务成本天花板(USD)。 */
+      maxTaskCostUsd: external_exports2.number().finite().optional(),
+      /** 单任务 token 天花板。 */
+      maxTaskTokens: external_exports2.number().finite().optional(),
+      /** 基建计价(micro-USD/单位)。见 {@link InfraCostRates}。 */
+      infraCostRates: InfraCostRates.optional(),
+      /** 附件孤儿对象 GC 宽限(ms)。 */
+      attachmentOrphanGraceMs: external_exports2.number().finite().optional(),
+      /** workspace 单文件读上限(字节)。 */
+      workspaceFileMaxBytes: external_exports2.number().finite().optional(),
+      /** 附件单文件上限(字节)。 */
+      attachmentMaxBytes: external_exports2.number().finite().optional(),
+      /** 附件 mime 白名单。**空数组 = 显式「一个都不许」**,与缺席(本键不管)不是一回事——元素只判
+       *  「是字符串」,空串/大小写/别名归消费方(它会响亮拒,见域头注的判据分工)。 */
+      attachmentMimeAllowlist: external_exports2.array(external_exports2.string()).optional(),
+      /** 未绑定附件 TTL(ms)。 */
+      attachmentUnboundTtlMs: external_exports2.number().finite().optional(),
+      /** SIGTERM drain 窗(ms)。 */
+      drainGraceMs: external_exports2.number().finite().optional(),
+      /** run 心跳陈旧窗(秒)。 */
+      runStaleSec: external_exports2.number().finite().optional(),
+      /** 卸载工具结果的 TTL(秒)。 */
+      toolResultTtlSec: external_exports2.number().finite().optional()
+    }).passthrough(), GovernanceConfig = external_exports2.object({
       // autonomy:一个跨 knob 的安全总开关 / 放权梯度(普通用户敢用 + 专业用户放权)。
       //   read-only(只读规划,不落改)| ask(每个放权动作问)| plan(plan-review 门)| auto(放开)。
       // ⚠️ 消费侧(service)把它**展开**到 core 已有三原语(handsReadOnly / shellGate+onAsk / plan_review),
@@ -79959,8 +80031,10 @@ var SECRET_LITERAL_RE, ENV_NAME, hasNul, NON_SECRET_URL, K8S_QUANTITY, TCP_PORT,
       // 0.8.0: S3 execution-lane policy (scope 级; client-advisory until service gate)
       projects: ProjectsConfig,
       // 0.10.0: 142-S3 project identity ledger + 无仓铸造权威 (scope=tenant 轴; NOT portable — 租户身份数据)
-      prompts: PromptsConfig
+      prompts: PromptsConfig,
       // 0.10.18: center prompts 战役 v1(board [1050]/[1051]/[1057];写门/store 携带解锁=[1064]②)
+      limits: LimitsConfig
+      // 0.19.0: cost/限流族热更新发布位(sema-server #322 批1;本地腿闭集缺口的源头修复)
       // integrations + access: DELETED in 0.6.0 (EXPERT-REDESIGN §9) — parseDomain/effective/路由随之 404。
     }, SettingSource = external_exports2.discriminatedUnion("axis", [
       external_exports2.object({ axis: external_exports2.literal("layer"), layer: external_exports2.enum(["MANAGED", "PROJECT", "LOCAL"]), applied: external_exports2.boolean().optional(), reason: external_exports2.string().optional() }),
@@ -80095,10 +80169,13 @@ function parseDomain(domain2, raw2) {
     return r.data;
   throw sanitizeZodError(r.error);
 }
-var USER_ROLES, init_config_fns = __esm({
+var USER_ROLES, OPEN_WORLD_KNOWN_KEYS, init_config_fns = __esm({
   "node_modules/@sema-agent/registry-core/dist/config-fns.js"() {
     init_types6();
     USER_ROLES = ["viewer", "editor", "publisher", "admin"];
+    OPEN_WORLD_KNOWN_KEYS = {
+      limits: { "": Object.keys(LimitsConfig.shape), infraCostRates: Object.keys(InfraCostRates.shape) }
+    };
   }
 });
 
@@ -116685,6 +116762,24 @@ var init_types8 = __esm({
   }
 });
 
+// build-src/src/sema/untrustedDisplayText.ts
+function cleanUntrustedForDisplay(v2, max2) {
+  return String(v2 ?? "").replace(CONTROL_CHARS, ".").replace(BIDI_AND_SEPARATORS, ".").replace(LONE_SURROGATE, ".").slice(0, max2).replace(LONE_SURROGATE, ".");
+}
+function cleanUntrustedKeepLayout(v2) {
+  return String(v2 ?? "").replace(CONTROL_CHARS_KEEP_LAYOUT, ".").replace(BIDI_AND_SEPARATORS, ".").replace(LONE_SURROGATE, ".");
+}
+function cleanUntrustedScalar(v2) {
+  return String(v2 ?? "").replace(SCALAR_UNSAFE, (ch2) => "\\u" + (ch2.codePointAt(0) ?? 0).toString(16).toUpperCase().padStart(4, "0"));
+}
+var CONTROL_CHARS, BIDI_AND_SEPARATORS, LONE_SURROGATE, CONTROL_CHARS_KEEP_LAYOUT, SCALAR_UNSAFE, init_untrustedDisplayText = __esm({
+  "build-src/src/sema/untrustedDisplayText.ts"() {
+    CONTROL_CHARS = /[\u0000-\u001f\u007f-\u009f]/g, BIDI_AND_SEPARATORS = /[\u061c\u200e\u200f\u2028\u2029\u202a-\u202e\u2066-\u2069]/g, LONE_SURROGATE = /[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/g;
+    CONTROL_CHARS_KEEP_LAYOUT = /[\u0000-\u0008\u000b-\u001f\u007f-\u009f]/g;
+    SCALAR_UNSAFE = /[\u0000-\u001F\u007F-\u009F\u061C\u200E\u200F\u2028\u2029\u202A-\u202E\u2066-\u2069]|[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/g;
+  }
+});
+
 // build-src/src/sema/sessionIdMapping.ts
 var sessionIdMapping_exports = {};
 __export(sessionIdMapping_exports, {
@@ -117102,10 +117197,7 @@ function hostSink(e, billTurnCosts = !0) {
     return;
   }
   if (e.kind === "human_input") {
-    let clean8 = (v2) => (
-      // eslint-disable-next-line no-control-regex
-      String(v2 ?? "").replace(/[\x00-\x1f\x7f]/g, ".").slice(0, 120)
-    ), who = e.actor?.id ? `${clean8(e.actor.id)}${e.actor.hostAsserted === !0 ? "" : " (unverified)"}` : "unattributed";
+    let clean8 = (v2) => cleanUntrustedForDisplay(v2, 120), who = e.actor?.id ? `${clean8(e.actor.id)}${e.actor.hostAsserted === !0 ? "" : " (unverified)"}` : "unattributed";
     Promise.resolve().then(() => (init_debug(), debug_exports)).then(
       (m2) => m2.logForDebugging(
         `[sema][wire] human_input ledger: carrier=${clean8(e.carrier)} source=${clean8(e.source)} delivery=${clean8(e.delivery)} actor=${who}${e.eventId ? ` eventId=${clean8(e.eventId)}` : ""}`
@@ -117153,6 +117245,7 @@ function runStream2(events3, ctx, handle2 = {}, o = {}) {
 var reportedDroppedTypes2, DROPPED_TYPE_MEMO_CAP2, init_runStream2 = __esm({
   "build-src/src/seam/adapter/runStream.ts"() {
     init_dist();
+    init_untrustedDisplayText();
     init_activeRunSelfHeal2();
     init_dist();
     reportedDroppedTypes2 = /* @__PURE__ */ new Set(), DROPPED_TYPE_MEMO_CAP2 = 64;
@@ -254620,24 +254713,6 @@ var MCP_TOKEN_COUNT_THRESHOLD_FACTOR, IMAGE_TOKEN_ESTIMATE, DEFAULT_MAX_MCP_OUTP
   }
 });
 
-// build-src/src/sema/untrustedDisplayText.ts
-function cleanUntrustedForDisplay(v2, max2) {
-  return String(v2 ?? "").replace(CONTROL_CHARS, ".").replace(BIDI_AND_SEPARATORS, ".").replace(LONE_SURROGATE, ".").slice(0, max2).replace(LONE_SURROGATE, ".");
-}
-function cleanUntrustedKeepLayout(v2) {
-  return String(v2 ?? "").replace(CONTROL_CHARS_KEEP_LAYOUT, ".").replace(BIDI_AND_SEPARATORS, ".").replace(LONE_SURROGATE, ".");
-}
-function cleanUntrustedScalar(v2) {
-  return String(v2 ?? "").replace(SCALAR_UNSAFE, (ch2) => "\\u" + (ch2.codePointAt(0) ?? 0).toString(16).toUpperCase().padStart(4, "0"));
-}
-var CONTROL_CHARS, BIDI_AND_SEPARATORS, LONE_SURROGATE, CONTROL_CHARS_KEEP_LAYOUT, SCALAR_UNSAFE, init_untrustedDisplayText = __esm({
-  "build-src/src/sema/untrustedDisplayText.ts"() {
-    CONTROL_CHARS = /[\u0000-\u001f\u007f-\u009f]/g, BIDI_AND_SEPARATORS = /[\u061c\u200e\u200f\u2028\u2029\u202a-\u202e\u2066-\u2069]/g, LONE_SURROGATE = /[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/g;
-    CONTROL_CHARS_KEEP_LAYOUT = /[\u0000-\u0008\u000b-\u001f\u007f-\u009f]/g;
-    SCALAR_UNSAFE = /[\u0000-\u001F\u007F-\u009F\u061C\u200E\u200F\u2028\u2029\u202A-\u202E\u2066-\u2069]|[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/g;
-  }
-});
-
 // build-src/src/tools/MCPTool/UI.tsx
 function renderToolUseMessage2(input, {
   verbose
@@ -280942,7 +281017,7 @@ function FileEditToolUseRejectedMessage(t0) {
 }
 var import_compiler_runtime43, import_jsx_runtime52, MAX_LINES_TO_RENDER, init_FileEditToolUseRejectedMessage = __esm({
   "build-src/src/components/FileEditToolUseRejectedMessage.tsx"() {
-    import_compiler_runtime43 = __toESM(require_compiler_runtime(), 1);
+    import_compiler_runtime43 = __toESM(require_compiler_runtime());
     init_useTerminalSize();
     init_cwd();
     init_ink2();
@@ -280950,7 +281025,7 @@ var import_compiler_runtime43, import_jsx_runtime52, MAX_LINES_TO_RENDER, init_F
     init_MessageResponse();
     init_StructuredDiffList();
     init_stringUtils();
-    import_jsx_runtime52 = __toESM(require_jsx_runtime(), 1), MAX_LINES_TO_RENDER = 10;
+    import_jsx_runtime52 = __toESM(require_jsx_runtime()), MAX_LINES_TO_RENDER = 10;
   }
 });
 
@@ -292672,21 +292747,21 @@ function createMissLedger() {
     }
   };
 }
-function interpolate(template, key, params, ledger) {
+function interpolate(template, key, params, ledger2) {
   return template.includes("{") ? template.replace(PLACEHOLDER, (token, name) => {
     let v2 = params?.[name];
-    return v2 === void 0 ? (ledger.record(`${key}#${name}`), token) : String(v2);
+    return v2 === void 0 ? (ledger2.record(`${key}#${name}`), token) : String(v2);
   }) : template;
 }
-function translate(lang, key, params, ledger = uiMissLedger) {
+function translate(lang, key, params, ledger2 = uiMissLedger) {
   let hit = CATALOGS[lang][key];
-  if (hit !== void 0) return interpolate(hit, key, params, ledger);
-  ledger.record(key);
+  if (hit !== void 0) return interpolate(hit, key, params, ledger2);
+  ledger2.record(key);
   let fallback = CATALOGS.en[key];
-  return fallback === void 0 ? "" : interpolate(fallback, key, params, ledger);
+  return fallback === void 0 ? "" : interpolate(fallback, key, params, ledger2);
 }
-function createTranslator(lang, ledger = uiMissLedger) {
-  return (key, params) => translate(lang, key, params, ledger);
+function createTranslator(lang, ledger2 = uiMissLedger) {
+  return (key, params) => translate(lang, key, params, ledger2);
 }
 var uiMissLedger, CATALOGS, PLACEHOLDER, init_translate = __esm({
   "build-src/src/sema/i18n/core/translate.ts"() {
@@ -356411,25 +356486,25 @@ function getSessionMcpConfigLedger(slot) {
   let created = createMcpConfigLedger();
   return sessionConfigLedgers.set(slot, created), created;
 }
-function pinSessionMcpConfigs(fresh, ledger) {
+function pinSessionMcpConfigs(fresh, ledger2) {
   let configs = {}, changed = [], deferred = [];
   for (let [name, config4] of Object.entries(fresh)) {
-    let pinned = ledger.entries.get(name);
+    let pinned = ledger2.entries.get(name);
     if (pinned === void 0) {
-      if (ledger.sealed) {
+      if (ledger2.sealed) {
         deferred.push(name);
         continue;
       }
-      ledger.entries.set(name, config4), configs[name] = config4;
+      ledger2.entries.set(name, config4), configs[name] = config4;
       continue;
     }
     configs[name] = pinned, hashMcpConfig(pinned) !== hashMcpConfig(config4) && changed.push(name);
   }
-  return ledger.sealed = !0, { configs, changed, deferred };
+  return ledger2.sealed = !0, { configs, changed, deferred };
 }
-function syncSessionMcpRevocations(ledger, active2, isDisabled = () => !1) {
+function syncSessionMcpRevocations(ledger2, active2, isDisabled = () => !1) {
   let revoked = [];
-  for (let [name, pinned] of ledger.entries) {
+  for (let [name, pinned] of ledger2.entries) {
     let reason;
     if (active2[name] === void 0 ? reason = "removed-from-config" : isDisabled(name) && (reason = "disabled"), reason === void 0) {
       sessionRevokedServers.delete(name);
@@ -356480,10 +356555,10 @@ function noteEngineSwapWindowStart() {
 function noteEngineSwapWindowEnd() {
   swapInFlightCount = Math.max(0, swapInFlightCount - 1);
 }
-function summarizeEngineRestartInflight(inflight4) {
-  let live = (inflight4.bg?.tasks ?? []).filter((t2) => t2.retiredByNotification !== !0), wf = Math.max(0, inflight4.workflows ?? 0), others = Math.max(0, inflight4.otherSessionsMidTurn ?? 0), parts = [];
-  if (live.length > 0 && parts.push(`${live.length} background task${live.length === 1 ? "" : "s"} / subagent${live.length === 1 ? "" : "s"}`), wf > 0 && parts.push(`${wf} workflow run${wf === 1 ? "" : "s"}`), inflight4.leaderStreaming === !0 && parts.push("this turn (still streaming)"), others > 0 && parts.push(`${others} other session${others === 1 ? "" : "s"} mid-turn`), parts.length === 0) return null;
-  let stale = inflight4.bg && inflight4.bg.fresh === !1 && live.length > 0 ? " (stale fleet view)" : "";
+function summarizeEngineRestartInflight(inflight3) {
+  let live = (inflight3.bg?.tasks ?? []).filter((t2) => t2.retiredByNotification !== !0), wf = Math.max(0, inflight3.workflows ?? 0), others = Math.max(0, inflight3.otherSessionsMidTurn ?? 0), parts = [];
+  if (live.length > 0 && parts.push(`${live.length} background task${live.length === 1 ? "" : "s"} / subagent${live.length === 1 ? "" : "s"}`), wf > 0 && parts.push(`${wf} workflow run${wf === 1 ? "" : "s"}`), inflight3.leaderStreaming === !0 && parts.push("this turn (still streaming)"), others > 0 && parts.push(`${others} other session${others === 1 ? "" : "s"} mid-turn`), parts.length === 0) return null;
+  let stale = inflight3.bg && inflight3.bg.fresh === !1 && live.length > 0 ? " (stale fleet view)" : "";
   return `\u26A0 ${parts.join(" + ")} in flight will be interrupted${stale}`;
 }
 var swapInFlightCount, init_engineSwapGate = __esm({
@@ -358590,7 +358665,7 @@ function scopeSessionId() {
   return engineSessionParam();
 }
 function createLiveFleetSource(config4, now2 = Date.now()) {
-  let t0 = now2, mainName = config4.mainName ?? "main", ledger = createFleetLedger({
+  let t0 = now2, mainName = config4.mainName ?? "main", ledger2 = createFleetLedger({
     onHookNotice: (frame, sessionScoped) => maybeIngestFleetFrame(frame, sessionScoped),
     // #242 批 3:终态兜底腿的 bg 事实源改接包的 accepted 钩子(归属判别通过之后才回调)。
     // 此前壳在 consume 环里自设一道「meta 两位(sessionScoped+bgNotifyFailClosed)都真才记账」的
@@ -358617,7 +358692,7 @@ function createLiveFleetSource(config4, now2 = Date.now()) {
     viewed: !0
   };
   function project2(nowMs = Date.now()) {
-    let viewingTaskId = getAppStateStoreRef()?.getState().viewingAgentTaskId, { tasks: tasks3, workflows } = ledger.project(nowMs, {
+    let viewingTaskId = getAppStateStoreRef()?.getState().viewingAgentTaskId, { tasks: tasks3, workflows } = ledger2.project(nowMs, {
       rowFilter: ROW_FILTER,
       ...viewingTaskId !== void 0 ? { viewingTaskId } : {}
     });
@@ -358644,7 +358719,7 @@ function createLiveFleetSource(config4, now2 = Date.now()) {
         let stream5 = client3.fleet.stream({ ...fleetStreamOptions(), signal: conn.signal });
         for await (let frame of stream5) {
           if (disposed4) return;
-          if (ledger.setConnected(!0), lastError = null, process.env.SEMA_DEBUG) {
+          if (ledger2.setConnected(!0), lastError = null, process.env.SEMA_DEBUG) {
             if (process.env.SEMA_DEBUG_FILE && frame.type === "task" && frame.row) {
               let r = frame.row;
               try {
@@ -358677,12 +358752,12 @@ function createLiveFleetSource(config4, now2 = Date.now()) {
           }
           if (observeWorkflowFrame(frame), frame.type === "task" && frame.row && observeFleetTaskFrame(frame.row), frame.type === "snapshot" && Array.isArray(frame.tasks))
             for (let snapRow of frame.tasks) observeFleetTaskFrame(snapRow);
-          ledger.applyFrame(frame);
+          ledger2.applyFrame(frame);
         }
-        ledger.setConnected(!1), lastError = "stream ended (EOF)";
+        ledger2.setConnected(!1), lastError = "stream ended (EOF)";
       } catch (err8) {
         if (disposed4 || abort.signal.aborted) return;
-        scopeSessionId() === sessionAtOpen && (ledger.setConnected(!1), lastError = err8 instanceof Error ? err8.message : String(err8), process.env.SEMA_DEBUG && console.error("[sema][fleet] stream error (will reconnect):", lastError));
+        scopeSessionId() === sessionAtOpen && (ledger2.setConnected(!1), lastError = err8 instanceof Error ? err8.message : String(err8), process.env.SEMA_DEBUG && console.error("[sema][fleet] stream error (will reconnect):", lastError));
       } finally {
         clearInterval(watch4), abort.signal.removeEventListener("abort", onGlobalAbort);
       }
@@ -358704,10 +358779,10 @@ function createLiveFleetSource(config4, now2 = Date.now()) {
       return Math.max(0, nowMs - t0);
     },
     dispose() {
-      disposed4 = !0, ledger.dispose(), abort.abort();
+      disposed4 = !0, ledger2.dispose(), abort.abort();
     },
     status() {
-      let s = ledger.status();
+      let s = ledger2.status();
       return {
         connected: s.connected,
         version: s.version,
@@ -358806,7 +358881,9 @@ __export(engineUpgradeCoordinator_exports, {
   notePendingEngineRestart: () => notePendingEngineRestart,
   pendingEngineRestartKind: () => pendingEngineRestartKind,
   pendingRestartBannerCopy: () => pendingRestartBannerCopy,
+  pendingRestartLaneAvailable: () => pendingRestartLaneAvailable,
   resetUserConfirmedRestartWindowForTests: () => resetUserConfirmedRestartWindowForTests,
+  retractHeartbeatConfigPending: () => retractHeartbeatConfigPending,
   subscribeUpgradeState: () => subscribeUpgradeState
 });
 import { readFileSync as readFileSync28, statSync as statSync9 } from "fs";
@@ -358828,8 +358905,13 @@ function engineSpawnSettingsFingerprint() {
     return "";
   }
 }
+function mergedPendingKind() {
+  if (pendingCauses.size === 0) return null;
+  for (let k2 of pendingCauses.values()) if (k2 === "config") return "config";
+  return "update";
+}
 function setPhase(phase, opts) {
-  state2 = {
+  phase !== "ready" && pendingCauses.clear(), state2 = {
     phase,
     ...phase === "ready" && opts?.kind ? { kind: opts.kind } : {},
     ...phase === "done" ? { appliedAt: Date.now(), ...opts?.version ? { version: opts.version } : {} } : {}
@@ -358891,8 +358973,36 @@ function noteEngineTurnBoundary() {
   }
   detectPendingFromDisk();
 }
-function notePendingEngineRestart(kind) {
-  applying || state2.phase === "ready" && state2.kind === "config" && kind === "update" || state2.phase === "ready" && state2.kind === kind || setPhase("ready", { kind });
+function notePendingEngineRestart(kind, cause = "disk") {
+  if (restartLedgerTxn) {
+    let q2 = applyQueuedNotes.get(cause);
+    applyQueuedNotes.set(cause, q2 === "config" && kind === "update" ? "config" : kind), applyQueuedRetractions.delete(cause);
+    return;
+  }
+  let prev = pendingCauses.get(cause), effective = prev === "config" && kind === "update" ? "config" : kind, hadSameEntry = prev === effective;
+  pendingCauses.set(cause, effective);
+  let merged = mergedPendingKind() ?? effective;
+  state2.phase === "ready" && state2.kind === merged && hadSameEntry || setPhase("ready", { kind: merged });
+}
+function pendingRestartLaneAvailable() {
+  return deps !== null;
+}
+function retractHeartbeatConfigPending() {
+  if (restartLedgerTxn) {
+    applyQueuedRetractions.add("heartbeat-config"), applyQueuedNotes.delete("heartbeat-config");
+    return;
+  }
+  if (!pendingCauses.delete("heartbeat-config")) return;
+  let remaining = mergedPendingKind();
+  if (remaining !== null) {
+    logForDebugging(
+      `[engine-upgrade] heartbeat config drift resolved, but other pending causes remain (${[...pendingCauses.keys()].join(", ")}) \u2014 keeping the banner`
+    ), state2.phase === "ready" && state2.kind !== remaining && setPhase("ready", { kind: remaining });
+    return;
+  }
+  state2.phase === "ready" && (logForDebugging(
+    "[engine-upgrade] the engine finished hot-applying the config change that raised this banner \u2014 retracting the pending restart (nothing left to apply)"
+  ), setPhase("idle"));
 }
 function pendingEngineRestartKind() {
   return state2.phase === "ready" ? state2.kind ?? "update" : null;
@@ -358901,6 +359011,8 @@ async function applyPendingEngineRestart() {
   if (!deps || applying) return "unchanged";
   let d4 = deps, kindBefore = pendingEngineRestartKind();
   if (kindBefore === null) return "unchanged";
+  let causesBefore = new Map(pendingCauses);
+  applyQueuedNotes.clear(), applyQueuedRetractions.clear(), restartLedgerTxn = !0;
   let killedSnapshot = [];
   try {
     killedSnapshot = (d4.readBgTasks ?? (await Promise.resolve().then(() => (init_fleetClient(), fleetClient_exports))).readEngineActiveBgTasks)().tasks.filter((t2) => t2.retiredByNotification !== !0);
@@ -358924,7 +359036,12 @@ async function applyPendingEngineRestart() {
     `[engine-upgrade] user-confirmed restart moved the engine endpoint (${baseUrlBefore} -> ${baseUrlAfter}) \u2014 fixed-port expectation broken; other attached shells still point at the old one`
   ), !ok2) {
     let stillAlive = await engineStillAlive(instanceBefore);
-    if (setPhase("ready", { kind: kindBefore }), stillAlive) return "unchanged";
+    for (let [cause, kind] of causesBefore) pendingCauses.has(cause) || pendingCauses.set(cause, kind);
+    for (let [cause, kind] of applyQueuedNotes) pendingCauses.set(cause, kind);
+    for (let cause of applyQueuedRetractions) pendingCauses.delete(cause);
+    if (applyQueuedNotes.clear(), applyQueuedRetractions.clear(), restartLedgerTxn = !1, mergedPendingKind() === null ? (logForDebugging(
+      "[engine-upgrade] the confirmed restart did not go through, but every pending cause resolved while it ran \u2014 no banner to restore"
+    ), setPhase("idle")) : setPhase("ready", { kind: mergedPendingKind() ?? kindBefore }), stillAlive) return "unchanged";
     if (killedSnapshot.length > 0) {
       let notify5 = d4.notifyKilled ?? synthesizeKilledNotifications;
       try {
@@ -358956,6 +359073,10 @@ async function applyPendingEngineRestart() {
     } catch {
     }
   }
+  let carryCatalog = applyQueuedNotes.get("catalog");
+  restartLedgerTxn = !1, applyQueuedNotes.clear(), applyQueuedRetractions.clear(), carryCatalog !== void 0 && (logForDebugging(
+    "[engine-upgrade] a model-catalog change landed while the confirmed restart was running \u2014 re-arming the banner (models.json is outside the fingerprint, so we cannot prove the new engine picked it up)"
+  ), notePendingEngineRestart(carryCatalog, "catalog"));
   let nowFingerprint = fingerprint(d4.entryPath);
   return nowFingerprint !== null && appliedFingerprint !== null && nowFingerprint !== appliedFingerprint && (logForDebugging(
     "[engine-upgrade] configuration changed again while the confirmed restart was running \u2014 re-arming the pending banner (the new engine does not have it)"
@@ -359028,7 +359149,7 @@ async function classifyStreamTear() {
   let r = await sdkProbeHealth3(base, 2e3);
   return r.alive ? typeof r.health.instanceId == "string" && r.health.instanceId !== before ? "restarted" : "not-restart" : "engine-down";
 }
-var deps, baseline, turnRefs, state2, applying, listeners7, doneFadeTimer, swapOpSeq, activeSwapOp, USER_RESTART_GRACE_MS, userRestartDepth, userRestartUntil, USER_RESTART_TRANSCRIPT_LINE, init_engineUpgradeCoordinator = __esm({
+var deps, baseline, turnRefs, state2, applying, listeners7, pendingCauses, applyQueuedNotes, applyQueuedRetractions, restartLedgerTxn, doneFadeTimer, swapOpSeq, activeSwapOp, USER_RESTART_GRACE_MS, userRestartDepth, userRestartUntil, USER_RESTART_TRANSCRIPT_LINE, init_engineUpgradeCoordinator = __esm({
   "build-src/src/sema/engineUpgradeCoordinator.ts"() {
     init_envUtils();
     init_engineReadFace();
@@ -359037,6 +359158,7 @@ var deps, baseline, turnRefs, state2, applying, listeners7, doneFadeTimer, swapO
     init_dist();
     init_engineSwapGate();
     deps = null, baseline = null, turnRefs = 0, state2 = { phase: "idle" }, applying = !1, listeners7 = /* @__PURE__ */ new Set();
+    pendingCauses = /* @__PURE__ */ new Map(), applyQueuedNotes = /* @__PURE__ */ new Map(), applyQueuedRetractions = /* @__PURE__ */ new Set(), restartLedgerTxn = !1;
     doneFadeTimer = null, swapOpSeq = 0, activeSwapOp = null;
     USER_RESTART_GRACE_MS = 2e4, userRestartDepth = 0, userRestartUntil = 0;
     USER_RESTART_TRANSCRIPT_LINE = "Engine restarted (user-confirmed) \u2014 press \u2191 to resend an interrupted prompt.";
@@ -359530,6 +359652,128 @@ var nextTurnId, activeTurnId, heldTurnIds, lostTurnIds, MAX_HELD_TURNS, init_inj
   }
 });
 
+// build-src/src/sema/terminationIntentLedger.ts
+function ttlMs() {
+  return ttlOverrideMs ?? DEFAULT_TTL_MS;
+}
+function purgeExpired(now2) {
+  let window2 = ttlMs();
+  for (let [taskId, row2] of ledger)
+    now2 - row2.at >= window2 && ledger.delete(taskId);
+}
+function recordTerminationIntent(taskId, source) {
+  if (typeof taskId != "string" || taskId.length === 0) return;
+  let now2 = Date.now();
+  purgeExpired(now2), ledger.set(taskId, { at: now2, source });
+}
+function wasRecentlyTerminatedByUs(taskId) {
+  if (typeof taskId != "string" || taskId.length === 0) return !1;
+  let now2 = Date.now();
+  return purgeExpired(now2), ledger.has(taskId);
+}
+function terminationIntentSource(taskId) {
+  return typeof taskId != "string" || taskId.length === 0 ? null : (purgeExpired(Date.now()), ledger.get(taskId)?.source ?? null);
+}
+function armTerminationIntentOnAbort(signal, taskId) {
+  if (signal === void 0 || typeof taskId != "string" || taskId.length === 0) return;
+  let record2 = () => {
+    signal.reason !== "background" && recordTerminationIntent(taskId, "esc-abort");
+  };
+  if (signal.aborted) {
+    record2();
+    return;
+  }
+  signal.addEventListener("abort", record2, { once: !0 });
+}
+function forgetTerminationIntent(taskId) {
+  typeof taskId != "string" || taskId.length === 0 || ledger.delete(taskId);
+}
+function readStatus2(row2) {
+  let s = row2?.status;
+  return typeof s == "string" && s.length > 0 ? s : null;
+}
+function defaultSleep(ms, signal) {
+  return new Promise((resolve57) => {
+    if (signal?.aborted === !0) {
+      resolve57();
+      return;
+    }
+    let timer3 = setTimeout(() => {
+      signal?.removeEventListener("abort", onAbort), resolve57();
+    }, ms);
+    function onAbort() {
+      clearTimeout(timer3), resolve57();
+    }
+    signal?.addEventListener("abort", onAbort, { once: !0 });
+  });
+}
+function anySignal(a, b3) {
+  if (a === void 0) return b3;
+  if (typeof AbortSignal.any == "function") return AbortSignal.any([a, b3]);
+  let ac = new AbortController(), forward = (s) => ac.abort(s.reason);
+  return a.aborted ? forward(a) : a.addEventListener("abort", () => forward(a), { once: !0 }), b3.aborted ? forward(b3) : b3.addEventListener("abort", () => forward(b3), { once: !0 }), ac.signal;
+}
+async function awaitInterruptedRunSettle(taskId, deps2) {
+  let getRun = deps2.getRun;
+  if (typeof getRun != "function") return { kind: "unknown" };
+  if (typeof taskId != "string" || taskId.length === 0) return { kind: "unknown" };
+  let budgetMs = deps2.budgetMs ?? settleBudgetOverrideMs ?? SETTLE_BUDGET_MS, intervalMs = deps2.intervalMs ?? settlePollOverrideMs ?? SETTLE_POLL_INTERVAL_MS, started2 = Date.now(), sawRunning = !1, isAborted3 = () => deps2.signal?.aborted === !0, budgetAc = new AbortController(), budgetSpent = !1, markStopped = () => {
+  }, stopped = new Promise((resolve57) => {
+    markStopped = () => resolve57(PROBE_STOPPED);
+  }), onCallerAbort = () => markStopped(), budgetTimer = setTimeout(() => {
+    budgetSpent = !0, budgetAc.abort(), markStopped();
+  }, budgetMs);
+  deps2.signal?.addEventListener("abort", onCallerAbort, { once: !0 }), isAborted3() && markStopped();
+  let probeSignal = anySignal(deps2.signal, budgetAc.signal);
+  try {
+    for (; ; ) {
+      if (isAborted3()) return { kind: "unknown" };
+      if (budgetSpent) break;
+      let probe3 = getRun(taskId, {
+        signal: probeSignal
+      }).then(
+        (row2) => row2,
+        () => PROBE_FAILED
+      ), outcome = await Promise.race([probe3, stopped]);
+      if (isAborted3()) return { kind: "unknown" };
+      let status3 = outcome === PROBE_STOPPED || outcome === PROBE_FAILED ? null : readStatus2(outcome);
+      if (status3 !== null) {
+        if (CLAIM_RELEASED_STATES.includes(status3)) return { kind: "settled", status: status3 };
+        if (PARK_STATES.includes(status3)) return { kind: "parked", status: status3 };
+        status3 === "running" && (sawRunning = !0);
+      }
+      if (budgetSpent) break;
+      let left = started2 + budgetMs - Date.now();
+      if (left <= 0) break;
+      if (await defaultSleep(Math.min(intervalMs, left), probeSignal), isAborted3()) return { kind: "unknown" };
+    }
+    return isAborted3() ? { kind: "unknown" } : sawRunning ? { kind: "still-running", waitedMs: Math.max(0, Date.now() - started2) } : { kind: "unknown" };
+  } finally {
+    clearTimeout(budgetTimer);
+    try {
+      deps2.signal?.removeEventListener("abort", onCallerAbort);
+    } catch {
+    }
+  }
+}
+function interruptedRunSettleRow(taskId, verdict) {
+  if (verdict.kind === "settled")
+    return `The turn you interrupted has finished stopping on the engine (run ${taskId}), so sema is sending your message now as a new turn.`;
+  if (verdict.kind === "still-running") {
+    let secs = Math.max(1, Math.round(verdict.waitedMs / 1e3));
+    return `The turn you interrupted is still finishing up on the engine (run ${taskId}), so your message was NOT sent \u2014 a session runs one turn at a time. sema waited ${String(secs)}s for that run to stop and does not send your message automatically after that: send it again in a moment.`;
+  }
+  return null;
+}
+var DEFAULT_TTL_MS, ledger, ttlOverrideMs, SETTLE_BUDGET_MS, SETTLE_POLL_INTERVAL_MS, settleBudgetOverrideMs, settlePollOverrideMs, PARK_STATES, PROBE_STOPPED, PROBE_FAILED, init_terminationIntentLedger = __esm({
+  "build-src/src/sema/terminationIntentLedger.ts"() {
+    init_dist();
+    DEFAULT_TTL_MS = 6e4, ledger = /* @__PURE__ */ new Map(), ttlOverrideMs = null;
+    SETTLE_BUDGET_MS = 1e4, SETTLE_POLL_INTERVAL_MS = 1e3, settleBudgetOverrideMs = null, settlePollOverrideMs = null, PARK_STATES = ["suspended", "needs_review"];
+    PROBE_STOPPED = /* @__PURE__ */ Symbol("sema.interruptedSettleProbeStopped"), PROBE_FAILED = /* @__PURE__ */ Symbol("sema.interruptedSettleProbeFailed");
+  }
+});
+
 // build-src/src/sema/engineAttachCapabilityGate.ts
 var engineAttachCapabilityGate_exports = {};
 __export(engineAttachCapabilityGate_exports, {
@@ -359627,6 +359871,25 @@ var lastRecord, init_engineAttachCapabilityGate = __esm({
   }
 });
 
+// build-src/src/sema/engineConfigDriftGate.ts
+function readOrdinal(v2) {
+  return typeof v2 == "number" && Number.isFinite(v2) && v2 >= 0 ? v2 : void 0;
+}
+function decideConfigDriftVerdict(input) {
+  let { baselineConfigHash, baselineInstanceId, health } = input, nowHash = typeof health?.configHash == "string" ? health.configHash : void 0;
+  if (!baselineConfigHash || !nowHash) return "skip";
+  if (nowHash === baselineConfigHash) return "in-sync";
+  if (health?.restartRequired === !0) return "ask";
+  let nowInstance = typeof health?.instanceId == "string" ? health.instanceId : void 0;
+  if (!baselineInstanceId || !nowInstance || nowInstance !== baselineInstanceId) return "ask";
+  let target = readOrdinal(health?.configTargetOrdinal), applied = readOrdinal(health?.configAppliedOrdinal);
+  return target === void 0 || applied === void 0 ? "ask" : target === applied ? "advance-baseline" : "ask";
+}
+var init_engineConfigDriftGate = __esm({
+  "build-src/src/sema/engineConfigDriftGate.ts"() {
+  }
+});
+
 // build-src/src/sema/engineLogSweep.ts
 import { readdirSync as readdirSync8, rmSync as rmSync5, statSync as statSync10 } from "node:fs";
 import { basename as basename36, join as join119 } from "node:path";
@@ -361000,8 +361263,8 @@ async function reapStaleEngine(portFile, opts) {
 async function reapAnchoredEngineForUpdate() {
   let existing = readPortFile(getEnginePortFilePath());
   if (!existing || !isProcessAlive(existing.pid)) return { status: "none", midTurn: 0 };
-  let midTurn = otherSessionsMidTurn(), inflight4 = activeTurnInflight();
-  return midTurn > 0 || inflight4 !== null ? { status: "busy", midTurn: midTurn > 0 ? midTurn : 1 } : (await reapStaleEngine(existing, { killPid: !0 }), { status: "reaped", midTurn: 0 });
+  let midTurn = otherSessionsMidTurn(), inflight3 = activeTurnInflight();
+  return midTurn > 0 || inflight3 !== null ? { status: "busy", midTurn: midTurn > 0 ? midTurn : 1 } : (await reapStaleEngine(existing, { killPid: !0 }), { status: "reaped", midTurn: 0 });
 }
 function pinnedEnginePort() {
   let override = process.env.SEMA_ENGINE_PORT;
@@ -361094,16 +361357,16 @@ async function initEngineLifecycleInner(opts) {
         );
         let sourceStale = (existing.configSource ?? "local") !== engineConfigSource, desiredPort = pinnedEnginePort(), portStale = desiredPort !== null && existing.port !== desiredPort, pidStale = health2 !== null && typeof health2.pid == "number" && health2.pid !== existing.pid, identityOk = health2 !== null && !pidStale && healthIdentityMatches(health2, expectedDataRoot), upgradeDeferred = !1;
         if (identityOk && (versionStale || sourceStale)) {
-          let midTurn = otherSessionsMidTurn(), inflight4 = activeTurnInflight();
-          (midTurn > 0 || inflight4 !== null) && (upgradeDeferred = !0, logForDebugging(
-            `[engine-lifecycle] engine is ${versionStale ? "version-stale" : "config-source-stale"} but ${midTurn} local session(s) are mid-turn${inflight4 ? ` (turn-inflight marker pid=${inflight4.pid})` : ""} \u2014 deferring the reap, reusing the running engine (the upgrade applies on a later launch when no turn is in flight)`
+          let midTurn = otherSessionsMidTurn(), inflight3 = activeTurnInflight();
+          (midTurn > 0 || inflight3 !== null) && (upgradeDeferred = !0, logForDebugging(
+            `[engine-lifecycle] engine is ${versionStale ? "version-stale" : "config-source-stale"} but ${midTurn} local session(s) are mid-turn${inflight3 ? ` (turn-inflight marker pid=${inflight3.pid})` : ""} \u2014 deferring the reap, reusing the running engine (the upgrade applies on a later launch when no turn is in flight)`
           ));
         }
         let forceFresh = opts?.forceFreshEngine === !0, engineCompatible = !forceFresh && identityOk && (!versionStale && !sourceStale || upgradeDeferred), portMoveDeferred = !1;
         if (engineCompatible && portStale) {
-          let midTurn = otherSessionsMidTurn(), inflight4 = midTurn > 0 ? null : activeTurnInflight();
-          (midTurn > 0 || inflight4 !== null) && (portMoveDeferred = !0, logForDebugging(
-            `[engine-lifecycle] port-config mismatch (anchor port=${existing.port} != configured ${desiredPort}) but ${midTurn} local session(s) are mid-turn${inflight4 ? ` (turn-inflight marker pid=${inflight4.pid})` : ""} \u2014 deferring the restart, reusing the engine on port ${existing.port} (the port moves on a later launch when no turn is in flight)`
+          let midTurn = otherSessionsMidTurn(), inflight3 = midTurn > 0 ? null : activeTurnInflight();
+          (midTurn > 0 || inflight3 !== null) && (portMoveDeferred = !0, logForDebugging(
+            `[engine-lifecycle] port-config mismatch (anchor port=${existing.port} != configured ${desiredPort}) but ${midTurn} local session(s) are mid-turn${inflight3 ? ` (turn-inflight marker pid=${inflight3.pid})` : ""} \u2014 deferring the restart, reusing the engine on port ${existing.port} (the port moves on a later launch when no turn is in flight)`
           ));
         }
         if (engineCompatible && (!portStale || portMoveDeferred)) {
@@ -361343,7 +361606,7 @@ function sleep7(ms) {
   return new Promise((resolve57) => setTimeout(resolve57, ms));
 }
 function startHealthCheckLoop(instance2, onSignal) {
-  let misses = 0, fired2 = !1, versionDriftBeats = 0, newerEngineLogged = !1, configDriftReported = !1, versionDriftReported = !1, baselineConfigHash = instance2.configHash, timer3 = setInterval(() => {
+  let misses = 0, fired2 = !1, versionDriftBeats = 0, newerEngineLogged = !1, configDriftReported = !1, versionDriftReported = !1, baselineConfigHash = instance2.configHash, baselineInstanceId = instance2.instanceId, timer3 = setInterval(() => {
     (async () => {
       if (fired2) return;
       let health = await probeHealth(instance2.port);
@@ -361353,12 +361616,13 @@ function startHealthCheckLoop(instance2, onSignal) {
         ), onSignal("engineDead"));
         return;
       }
-      if (misses = 0, baselineConfigHash && health.configHash) {
-        let drifted = health.configHash !== baselineConfigHash;
-        drifted && !configDriftReported ? (configDriftReported = !0, logForDebugging(
-          `[engine-lifecycle] heartbeat: configHash drift (${baselineConfigHash} \u2192 ${health.configHash}) \u2192 configDrift (pending user confirmation; heartbeat keeps running)`
-        ), onSignal("configDrift")) : !drifted && configDriftReported && (configDriftReported = !1);
-      }
+      misses = 0;
+      let verdict = decideConfigDriftVerdict({ baselineConfigHash, baselineInstanceId, health });
+      verdict === "ask" && !configDriftReported ? (configDriftReported = !0, logForDebugging(
+        `[engine-lifecycle] heartbeat: configHash drift (${String(baselineConfigHash)} \u2192 ${String(health.configHash)}) with an UNAPPLIED change (config apply ordinals not converged, or the endpoint is answered by a different instance) \u2192 configDrift (pending user confirmation; heartbeat keeps running)`
+      ), onSignal("configDrift")) : verdict === "advance-baseline" ? (logForDebugging(
+        `[engine-lifecycle] heartbeat: configHash drift (${String(baselineConfigHash)} \u2192 ${String(health.configHash)}) is already HOT-APPLIED (same instance, config apply ordinals converged) \u2014 advancing the baseline, no restart prompt`
+      ), baselineConfigHash = health.configHash, configDriftReported && (configDriftReported = !1, onSignal("configDriftResolved"))) : verdict === "in-sync" && configDriftReported && (configDriftReported = !1, onSignal("configDriftResolved"));
       let want = localEngineVersion();
       if (want !== void 0 && health.version && health.version === want && versionDriftReported && (versionDriftReported = !1), want !== void 0 && health.version && health.version !== want && !fired2) {
         if (!localDistNewerThanEngine(want, health.version)) {
@@ -361692,6 +361956,7 @@ var PORT_FILE_VERSION, HEALTH_POLL_INTERVAL_MS, HEALTH_POLL_MAX_ATTEMPTS, HEALTH
     init_engineRuntimeStatus();
     init_engineAttachCapabilityGate();
     init_engineReadFace();
+    init_engineConfigDriftGate();
     init_engineLogSweep();
     init_lockfile();
     init_debug();
@@ -362347,27 +362612,6 @@ var init_defaultModelWriter = __esm({
   }
 });
 
-// build-src/src/sema/engineEndpointSwap.ts
-var engineEndpointSwap_exports = {};
-__export(engineEndpointSwap_exports, {
-  registerEngineConfigRespawn: () => registerEngineConfigRespawn,
-  requestEngineConfigRespawn: () => requestEngineConfigRespawn
-});
-function registerEngineConfigRespawn(fn2) {
-  respawnFn = fn2;
-}
-async function requestEngineConfigRespawn() {
-  return respawnFn ? (inflight2 || (inflight2 = respawnFn().finally(() => {
-    inflight2 = null;
-  })), inflight2) : !1;
-}
-var respawnFn, inflight2, init_engineEndpointSwap = __esm({
-  "build-src/src/sema/engineEndpointSwap.ts"() {
-    respawnFn = null;
-    inflight2 = null;
-  }
-});
-
 // build-src/src/sema/modelEndpointSwitch.ts
 var modelEndpointSwitch_exports = {};
 __export(modelEndpointSwitch_exports, {
@@ -362375,6 +362619,15 @@ __export(modelEndpointSwitch_exports, {
   ensureEngineServesModel: () => ensureEngineServesModel,
   poolEntryForModelRef: () => poolEntryForModelRef
 });
+function warnCrossEndpointResidual(entry, instanceId, extra) {
+  if (instanceId !== void 0) {
+    let key = JSON.stringify([instanceId, entry.id, servedEndpointFor(entry)]);
+    if (warnedCrossEndpointEntries.has(key)) return;
+    warnedCrossEndpointEntries.add(key);
+  }
+  let line = `Model "${entry.id}" lives on a different upstream endpoint (${entry.baseUrl}) and this engine cannot route it per-model. ${extra ?? "It is saved as the default, but the running engine still serves the previous endpoint"} \u2014 ${pendingRestartLaneAvailable() ? "press ctrl+u to restart the engine and apply it" : "it takes effect the next time a local engine is spawned"}. Until then this session's turns keep going to the previously configured provider.`;
+  surfaceTranscriptSystemNotice(line) || console.error(`[sema] ${line}`);
+}
 function engineBootEnv() {
   let out6 = {};
   for (let k2 of Object.keys(process.env)) {
@@ -362386,10 +362639,13 @@ function engineBootEnv() {
 function poolEntryForModelRef(ref, pool = readModelPool()) {
   return pool.find((e) => e.id === ref) ?? pool.find((e) => e.modelId === ref);
 }
+function servedEndpointFor(entry, env6 = engineBootEnv()) {
+  return entry.api === "anthropic-messages" ? norm(env6.ANTHROPIC_BASE_URL ?? env6.ANTHROPIC_BASEURL) : norm(env6.MODEL_GATEWAY_BASEURL);
+}
 function endpointSwitchNeeded(entry, env6 = engineBootEnv()) {
   if (entry.baseUrl.replace(/\/+$/, "") === "") return !1;
   let want = buildModelEnv({ defaultModel: toCatalogEntry(entry) });
-  return entry.api === "anthropic-messages" ? norm(want.ANTHROPIC_BASE_URL) !== norm(env6.ANTHROPIC_BASE_URL ?? env6.ANTHROPIC_BASEURL) : norm(want.MODEL_GATEWAY_BASEURL) !== norm(env6.MODEL_GATEWAY_BASEURL);
+  return (entry.api === "anthropic-messages" ? norm(want.ANTHROPIC_BASE_URL) : norm(want.MODEL_GATEWAY_BASEURL)) !== servedEndpointFor(entry, env6);
 }
 function versionGte(v2, min) {
   let m2 = v2 ? /^(\d+)\.(\d+)\.(\d+)/.exec(v2) : null;
@@ -362400,16 +362656,20 @@ function versionGte(v2, min) {
 async function engineRoutesEntryItself(entry) {
   try {
     let u = new URL(entry.baseUrl);
-    if (u.protocol !== "http:" && u.protocol !== "https:") return !1;
+    if (u.protocol !== "http:" && u.protocol !== "https:") return { instant: !1 };
   } catch {
-    return !1;
+    return { instant: !1 };
   }
-  let { probeLocalEngineHealth: probeLocalEngineHealth2 } = await Promise.resolve().then(() => (init_engineLifecycleManager(), engineLifecycleManager_exports)), health = await probeLocalEngineHealth2();
-  if (!versionGte(health?.version, PER_MODEL_BASEURL_MIN)) return !1;
+  let { probeLocalEngineHealth: probeLocalEngineHealth2 } = await Promise.resolve().then(() => (init_engineLifecycleManager(), engineLifecycleManager_exports)), health = await probeLocalEngineHealth2(), instanceId = typeof health?.instanceId == "string" ? health.instanceId : void 0;
+  if (!versionGte(health?.version, PER_MODEL_BASEURL_MIN)) return { instant: !1, instanceId };
   let models = getLiveModelCatalog()?.models;
-  return models ? models.some((m2) => m2.name === entry.id || entry.modelId !== "" && m2.id === entry.modelId) : !1;
+  return models ? {
+    instant: models.some((m2) => m2.name === entry.id || entry.modelId !== "" && m2.id === entry.modelId),
+    instanceId
+  } : { instant: !1, instanceId };
 }
 async function ensureEngineServesModel(ref) {
+  let crossEndpointRisk = null, engineInstanceId;
   try {
     let { hasManageableLocalEngine: hasManageableLocalEngine2 } = await Promise.resolve().then(() => (init_engineLifecycleManager(), engineLifecycleManager_exports));
     if (!hasManageableLocalEngine2()) return { switched: !1 };
@@ -362424,7 +362684,8 @@ async function ensureEngineServesModel(ref) {
           `[sema][model-endpoint] boot-readback echo of catalog default ${entry.id} \u2014 no persist, no respawn (S3 discipline)`
         ), { switched: !1 };
     }
-    let instant = await engineRoutesEntryItself(entry);
+    let routed = await engineRoutesEntryItself(entry), instant = routed.instant;
+    engineInstanceId = routed.instanceId, needsEndpoint && !instant && (crossEndpointRisk = entry);
     {
       let session2 = getSessionModelLatch();
       if (typeof session2 == "string" && session2.length > 0 && (session2 === ref || entry.id === session2 || entry.modelId !== "" && entry.modelId === session2) && (instant || !needsEndpoint))
@@ -362433,28 +362694,31 @@ async function ensureEngineServesModel(ref) {
         ), { switched: !1 };
     }
     let w2 = persistDefaultModelSelection(entry.id);
-    if (w2.error) return { switched: !1, error: w2.error };
-    if (instant || !needsEndpoint)
-      return process.env.SEMA_DEBUG && console.error(
-        `[sema][model-endpoint] ${instant ? "engine routes it per-model" : "same endpoint"}: ${entry.id} (${entry.api} @ ${entry.baseUrl}) \u2014 default persisted (env + top-level model), respawn skipped`
-      ), { switched: !1 };
-    let ok2 = await requestEngineConfigRespawn();
-    return process.env.SEMA_DEBUG && console.error(
-      `[sema][model-endpoint] switched main \u2192 ${entry.id} (${entry.api} @ ${entry.baseUrl}) \xB7 engine respawn ${ok2 ? "ok" : "unavailable"}`
-    ), { switched: ok2 };
+    return w2.error ? (needsEndpoint && !instant && warnCrossEndpointResidual(
+      entry,
+      engineInstanceId,
+      "Saving it as the default FAILED, and the running engine serves the previous endpoint"
+    ), { switched: !1, error: w2.error }) : instant || !needsEndpoint ? (process.env.SEMA_DEBUG && console.error(
+      `[sema][model-endpoint] ${instant ? "engine routes it per-model" : "same endpoint"}: ${entry.id} (${entry.api} @ ${entry.baseUrl}) \u2014 default persisted (env + top-level model), respawn skipped`
+    ), { switched: !1 }) : (pendingRestartLaneAvailable() && notePendingEngineRestart("config", "catalog"), warnCrossEndpointResidual(entry, engineInstanceId), { switched: !1 });
   } catch (e) {
+    try {
+      crossEndpointRisk !== null && warnCrossEndpointResidual(crossEndpointRisk, engineInstanceId, "Switching the default FAILED");
+    } catch {
+    }
     return { switched: !1, error: e };
   }
 }
-var norm, PER_MODEL_BASEURL_MIN, init_modelEndpointSwitch = __esm({
+var norm, warnedCrossEndpointEntries, PER_MODEL_BASEURL_MIN, init_modelEndpointSwitch = __esm({
   "build-src/src/sema/modelEndpointSwitch.ts"() {
     init_modelChannels();
     init_rosterStore();
     init_defaultModelWriter();
     init_dist();
-    init_engineEndpointSwap();
+    init_engineUpgradeCoordinator();
+    init_transcriptSystemNotice();
     init_applyOnboard();
-    norm = (u) => (u ?? "").replace(/\/+$/, "");
+    norm = (u) => (u ?? "").replace(/\/+$/, ""), warnedCrossEndpointEntries = /* @__PURE__ */ new Set();
     PER_MODEL_BASEURL_MIN = [1, 128, 0];
   }
 });
@@ -362966,18 +363230,21 @@ Fix: run \`sema doctor\` to diagnose, or restart sema to retry.`
             }
         }
       }
-    }, bgTearResends = 0, drainingRetries = 0, resumeAtRetried = !1, busySignal = null, readBusySignal = () => busySignal, runningChoiceOffered = !1, runningChoiceSilentWaitTaskId = null, engineFrameSeen = !1, retryStream = !0;
+    }, bgTearResends = 0, drainingRetries = 0, resumeAtRetried = !1, busySignal = null, readBusySignal = () => busySignal, runningChoiceOffered = !1, runningChoiceSilentWaitTaskId = null, engineFrameSeen = !1, boundRunId, retryStream = !0, interruptedResendDone = !1, pendingInterruptedSettledRow = null;
     for (; retryStream; ) {
-      retryStream = !1, engineFrameSeen = !1, busySignal = null;
+      retryStream = !1, engineFrameSeen = !1, busySignal = null, boundRunId = void 0;
       try {
-        let reattachArmed = typeof client.runs.get == "function" && !isBgHeadlessWorker(), boundRunId, rawLive = client.tasks.stream(req, {
+        let reattachArmed = typeof client.runs.get == "function" && !isBgHeadlessWorker(), rawLive = client.tasks.stream(req, {
           signal,
-          ...reattachArmed ? {
-            onRunBound: (id) => {
-              boundRunId = id;
-            }
-          } : {}
-        }), liveEvents = reattachArmed ? withInteractiveReattach(rawLive, {
+          onRunBound: (id) => {
+            boundRunId = id, armTerminationIntentOnAbort(signal, id);
+          }
+        });
+        if (pendingInterruptedSettledRow !== null) {
+          let settledRowNow = pendingInterruptedSettledRow;
+          pendingInterruptedSettledRow = null, yield apiErrorRow(settledRowNow);
+        }
+        let liveEvents = reattachArmed ? withInteractiveReattach(rawLive, {
           getTaskId: () => boundRunId,
           ...signal ? { signal } : {},
           // 状态行只归**前台主车道**:后台 session(startBackgroundSession 的 ALS 链)与非主车道
@@ -363016,8 +363283,26 @@ Fix: run \`sema doctor\` to diagnose, or restart sema to retry.`
         for await (let ccEvent of sdkMessagesToCcEvents(sdk, { sessionId, uuid: uuid5, signal }))
           yield* flushChromeRows(), trackToolLifecycle(ccEvent), yield ccEvent;
         yield* flushChromeRows();
-        let detectedBusy = readBusySignal();
-        if (detectedBusy && !signal?.aborted) {
+        let detectedBusy = readBusySignal(), interruptedTaskId = detectedBusy?.activeTaskId ?? null, interruptedShortCircuitSettled = !1;
+        if (detectedBusy && !signal?.aborted && interruptedTaskId !== null && !interruptedResendDone && wasRecentlyTerminatedByUs(interruptedTaskId)) {
+          let verdict = await awaitInterruptedRunSettle(interruptedTaskId, {
+            getRun: durableRunVerbs(client).get,
+            ...signal ? { signal } : {}
+          });
+          if (process.env.SEMA_DEBUG && console.error(
+            `[sema][seamQuery] 409 running on ${interruptedTaskId} \u2014 we terminated it (${String(
+              terminationIntentSource(interruptedTaskId)
+            )}); settle verdict=${verdict.kind}`
+          ), verdict.kind === "settled" && !signal?.aborted) {
+            forgetTerminationIntent(interruptedTaskId), interruptedResendDone = !0, retryStream = !0, pendingInterruptedSettledRow = interruptedRunSettleRow(interruptedTaskId, verdict);
+            continue;
+          }
+          if (verdict.kind === "still-running" && !signal?.aborted) {
+            let row2 = interruptedRunSettleRow(interruptedTaskId, verdict);
+            row2 !== null && (yield apiErrorRow(row2)), interruptedShortCircuitSettled = !0, isMainLaneQuerySource(params.querySource) && trailingStandaloneMetaUserMessages(params.messages).length > 0 && noteInjectionLostWhileHeld();
+          }
+        }
+        if (detectedBusy && !signal?.aborted && !interruptedShortCircuitSettled) {
           let outcome = await attemptActiveRunSelfHeal2(detectedBusy, durableRunVerbs(client), {
             // `hasPendingDecision`(车L 12,原「故意不接」记账销案):真读面 = REPL
             // toolUseConfirmQueue 的模块级长度镜像(leaderPermissionBridge,队列变更 effect
@@ -363187,8 +363472,15 @@ function makeControlRouter(sessionId) {
 async function bestEffortDurableCancel() {
   try {
     let router = getControlRouter();
-    if (!router || router.activeTaskId() === null) return;
-    await router.cancel();
+    if (!router) return;
+    let taskId = router.activeTaskId();
+    if (taskId === null) return;
+    recordTerminationIntent(taskId, "durable-cancel");
+    try {
+      await router.cancel();
+    } catch (e) {
+      throw forgetTerminationIntent(taskId), e;
+    }
   } catch {
   }
 }
@@ -363221,7 +363513,7 @@ async function cancelEngineRun(taskId) {
   try {
     if (typeof taskId != "string" || taskId.length === 0) return "failed";
     let o = client;
-    return typeof o.runs?.cancel != "function" ? "failed" : (await o.runs.cancel(taskId), "cancelled");
+    return typeof o.runs?.cancel != "function" ? "failed" : (await o.runs.cancel(taskId), recordTerminationIntent(taskId, "command-cancel"), "cancelled");
   } catch (e) {
     return e?.errorCode === "conflict.approval_settled" ? "approval_settled" : "failed";
   }
@@ -363370,6 +363662,7 @@ var BG_TEAR_MAX_RESENDS, BG_RECOVERY_WAIT_MS, DRAINING_MAX_RETRIES, drainingBack
     init_engineRuntimeStatus();
     init_activeRunSelfHeal2();
     init_injectionRequeueLatch();
+    init_terminationIntentLedger();
     BG_TEAR_MAX_RESENDS = 2, BG_RECOVERY_WAIT_MS = 12e4, DRAINING_MAX_RETRIES = 3;
     client = makeMockClient(), clientExplicitlySet = !1;
     seamRewindCapture = !0;
@@ -381928,15 +382221,15 @@ function useManageMCPConnections(dynamicMcpConfig, isStrictMcpConfig = !1) {
     [addNotification]
   );
   (0, import_react129.useEffect)(() => {
-    let ledger = getSessionMcpConfigLedger("session"), cancelled = !1;
+    let ledger2 = getSessionMcpConfigLedger("session"), cancelled = !1;
     async function initializeServersAsPending() {
       let { servers: existingConfigs, errors: mcpErrors } = isStrictMcpConfig ? { servers: {}, errors: [] } : await getClaudeCodeMcpConfigs(dynamicMcpConfig);
       if (cancelled) return;
       let pinned = pinSessionMcpConfigs(
         { ...existingConfigs, ...dynamicMcpConfig },
-        ledger
+        ledger2
       ), configs = pinned.configs;
-      noticeConfigPinned(pinned), syncSessionMcpRevocations(ledger, configs, isMcpServerDisabled), addErrorsToAppState(setAppState, mcpErrors), setAppState((prevState) => {
+      noticeConfigPinned(pinned), syncSessionMcpRevocations(ledger2, configs, isMcpServerDisabled), addErrorsToAppState(setAppState, mcpErrors), setAppState((prevState) => {
         let { stale, ...mcpWithoutStale } = excludeStalePluginClients(
           prevState.mcp,
           configs,
@@ -381983,7 +382276,7 @@ function useManageMCPConnections(dynamicMcpConfig, isStrictMcpConfig = !1) {
     noticeConfigPinned,
     bumpAttemptEpoch
   ]), (0, import_react129.useEffect)(() => {
-    let cancelled = !1, ledger = getSessionMcpConfigLedger("session"), claudeaiLedger = getSessionMcpConfigLedger("claudeai");
+    let cancelled = !1, ledger2 = getSessionMcpConfigLedger("session"), claudeaiLedger = getSessionMcpConfigLedger("claudeai");
     async function loadAndConnectMcpConfigs() {
       let claudeaiPromise;
       isStrictMcpConfig || doesEnterpriseMcpConfigExist() ? claudeaiPromise = Promise.resolve({}) : (clearClaudeAIMcpConfigsCache(), claudeaiPromise = fetchClaudeAIMcpConfigsIfEligible());
@@ -381992,9 +382285,9 @@ function useManageMCPConnections(dynamicMcpConfig, isStrictMcpConfig = !1) {
       addErrorsToAppState(setAppState, mcpErrors);
       let pinned = pinSessionMcpConfigs(
         { ...claudeCodeConfigs, ...dynamicMcpConfig },
-        ledger
+        ledger2
       ), configs = pinned.configs;
-      noticeConfigPinned(pinned), syncSessionMcpRevocations(ledger, configs, isMcpServerDisabled);
+      noticeConfigPinned(pinned), syncSessionMcpRevocations(ledger2, configs, isMcpServerDisabled);
       let enabledConfigs = Object.fromEntries(
         Object.entries(configs).filter(([name]) => !isMcpServerDisabled(name))
       );
@@ -392664,19 +392957,18 @@ var sema_brand_default, init_sema_brand = __esm({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.87",
+        version: "1.0.88",
         notes: [
-          "Engine restarts now ask first: pressing ctrl+u (or any flow that needs an engine restart) shows a confirmation card before anything stops \u2014 and the card appears in every screen, including transcript, fleet and plugin panels",
-          'Restart messages tell the truth: a crash, a user-requested restart and a config-driven restart each get their own wording instead of one vague "may have crashed" line',
-          'Reasoning effort "xhigh" now persists: it survives restarts and resume instead of silently dropping to a lower level, and JSON-defined agents accept all five effort levels',
-          "Model Hub: models you added yourself can now be deleted from the UI, a vision toggle lets self-configured models accept images, and the effort row shows both the requested and the effective value when they differ",
-          "MCP panel no longer re-greets servers it already knows after reopening \u2014 approved servers stay approved, removed ones stay gone",
-          "Background shell completions show up as they happen instead of waiting for your next message",
-          "Saving engine port/bind/read-face settings while attached to an external engine no longer shows a restart banner that could never apply \u2014 the notice now says the setting takes effect on the next local engine start"
+          "Approval cards now show a live countdown to their decision window, with the card turning urgent in the last 60 seconds and withdrawing itself when the window closes \u2014 so a pending approval never silently looks alive after it expired.",
+          "Countdowns only appear on live approvals: when a session re-attaches or resumes, replayed history never fakes a timer (those cards simply show without a countdown, exactly as before).",
+          "When a delegation is refused because all concurrent seats are busy, the transcript now says so and tells you a seat frees up as soon as a sibling agent finishes \u2014 nothing to reconfigure.",
+          "When the retained-window delegation quota is reached, the transcript now points to the actual way forward: continue an existing agent with SendMessage, or wait for old rows to be reaped \u2014 no need to switch sessions.",
+          "Calls to an MCP server that an operator revoked mid-session now explain that the request was never sent and stays refused until the server is approved again.",
+          "Engine updated to server 7.39.0 (core 5.53, including the prompt-cache fix that stops MCP tool refreshes from silently breaking cache reuse every turn)."
         ]
       },
-      productVersion: "1.0.87",
-      announcement: "sema 1.0.87 \u2014 engine restarts now ask first (ctrl+u confirmation card in every screen), restart messages tell the truth per cause, reasoning effort xhigh persists across restart/resume, and Model Hub gains model delete + vision toggle"
+      productVersion: "1.0.88",
+      announcement: "sema 1.0.88 \u2014 approval cards now show a live countdown to their decision window (live streams only; replayed history never fakes a timer), and delegation/MCP refusals explain the actual next step (wait for a seat, reuse via SendMessage, or re-approve a revoked server)"
     };
   }
 });
@@ -397020,19 +397312,18 @@ var require_sema_brand = __commonJS({
         _doc: "displayName/email \u7559 null = \u8FD0\u884C\u65F6\u56DE\u9000(\u540D\u5B57\u53D6\u672C\u673A OS \u7528\u6237\u540D,\u90AE\u7BB1\u4E0D\u663E\u793A)\u3002\u522B\u70E7\u4E2A\u4EBA\u4FE1\u606F\u8FDB\u54C1\u724C\u6587\u4EF6(F-S1-1:\u65B0\u7528\u6237\u66FE\u770B\u5230 Welcome back Clay!)\u3002"
       },
       whatsNew: {
-        version: "1.0.87",
+        version: "1.0.88",
         notes: [
-          "Engine restarts now ask first: pressing ctrl+u (or any flow that needs an engine restart) shows a confirmation card before anything stops \u2014 and the card appears in every screen, including transcript, fleet and plugin panels",
-          'Restart messages tell the truth: a crash, a user-requested restart and a config-driven restart each get their own wording instead of one vague "may have crashed" line',
-          'Reasoning effort "xhigh" now persists: it survives restarts and resume instead of silently dropping to a lower level, and JSON-defined agents accept all five effort levels',
-          "Model Hub: models you added yourself can now be deleted from the UI, a vision toggle lets self-configured models accept images, and the effort row shows both the requested and the effective value when they differ",
-          "MCP panel no longer re-greets servers it already knows after reopening \u2014 approved servers stay approved, removed ones stay gone",
-          "Background shell completions show up as they happen instead of waiting for your next message",
-          "Saving engine port/bind/read-face settings while attached to an external engine no longer shows a restart banner that could never apply \u2014 the notice now says the setting takes effect on the next local engine start"
+          "Approval cards now show a live countdown to their decision window, with the card turning urgent in the last 60 seconds and withdrawing itself when the window closes \u2014 so a pending approval never silently looks alive after it expired.",
+          "Countdowns only appear on live approvals: when a session re-attaches or resumes, replayed history never fakes a timer (those cards simply show without a countdown, exactly as before).",
+          "When a delegation is refused because all concurrent seats are busy, the transcript now says so and tells you a seat frees up as soon as a sibling agent finishes \u2014 nothing to reconfigure.",
+          "When the retained-window delegation quota is reached, the transcript now points to the actual way forward: continue an existing agent with SendMessage, or wait for old rows to be reaped \u2014 no need to switch sessions.",
+          "Calls to an MCP server that an operator revoked mid-session now explain that the request was never sent and stays refused until the server is approved again.",
+          "Engine updated to server 7.39.0 (core 5.53, including the prompt-cache fix that stops MCP tool refreshes from silently breaking cache reuse every turn)."
         ]
       },
-      productVersion: "1.0.87",
-      announcement: "sema 1.0.87 \u2014 engine restarts now ask first (ctrl+u confirmation card in every screen), restart messages tell the truth per cause, reasoning effort xhigh persists across restart/resume, and Model Hub gains model delete + vision toggle"
+      productVersion: "1.0.88",
+      announcement: "sema 1.0.88 \u2014 approval cards now show a live countdown to their decision window (live streams only; replayed history never fakes a timer), and delegation/MCP refusals explain the actual next step (wait for a seat, reuse via SendMessage, or re-approve a revoked server)"
     };
   }
 });
@@ -434044,18 +434335,18 @@ function maybeQueueAutoSyncPushAfterTurn() {
     backoffTurnsRemaining--;
     return;
   }
-  if (inflight3) {
+  if (inflight2) {
     dirty = !0;
     return;
   }
-  inflight3 = runOnce().catch((err8) => {
+  inflight2 = runOnce().catch((err8) => {
     logForDebugging(`sessionAutoSync: unexpected failure: ${err8}`);
   }).finally(() => {
-    inflight3 = null, dirty && (dirty = !1, maybeQueueAutoSyncPushAfterTurn());
+    inflight2 = null, dirty && (dirty = !1, maybeQueueAutoSyncPushAfterTurn());
   });
 }
 async function flushAutoSyncQueue() {
-  for (; inflight3; ) await inflight3;
+  for (; inflight2; ) await inflight2;
 }
 async function projectAutoSyncEnabled() {
   try {
@@ -434155,16 +434446,16 @@ async function runOnce() {
   }
 }
 function _resetAutoSyncForTests() {
-  inflight3 = null, dirty = !1, capsCache.clear(), degradedTargets.clear(), orgMirrorNotified.clear(), consecutiveFailures = 0, latchCount = 0, backoffTurnsRemaining = 0, listener3 = null, pendingEvents2 = [], transportOverride = null;
+  inflight2 = null, dirty = !1, capsCache.clear(), degradedTargets.clear(), orgMirrorNotified.clear(), consecutiveFailures = 0, latchCount = 0, backoffTurnsRemaining = 0, listener3 = null, pendingEvents2 = [], transportOverride = null;
 }
-var AUTO_SYNC_SETTINGS_KEY, TRANSIENT_FAILURE_LATCH, MAX_BACKOFF_TURNS, listener3, pendingEvents2, inflight3, dirty, capsCache, degradedTargets, orgMirrorNotified, consecutiveFailures, latchCount, backoffTurnsRemaining, transportOverride, init_sessionAutoSync = __esm({
+var AUTO_SYNC_SETTINGS_KEY, TRANSIENT_FAILURE_LATCH, MAX_BACKOFF_TURNS, listener3, pendingEvents2, inflight2, dirty, capsCache, degradedTargets, orgMirrorNotified, consecutiveFailures, latchCount, backoffTurnsRemaining, transportOverride, init_sessionAutoSync = __esm({
   "build-src/src/sema/sessionAutoSync.ts"() {
     init_livePrincipal();
     init_debug();
     init_liveSessionStore();
     init_sessionIdMapping();
     AUTO_SYNC_SETTINGS_KEY = "cloudSessionAutoSync", TRANSIENT_FAILURE_LATCH = 5, MAX_BACKOFF_TURNS = 64, listener3 = null, pendingEvents2 = [];
-    inflight3 = null, dirty = !1, capsCache = /* @__PURE__ */ new Map(), degradedTargets = /* @__PURE__ */ new Set(), orgMirrorNotified = /* @__PURE__ */ new Set(), consecutiveFailures = 0, latchCount = 0, backoffTurnsRemaining = 0;
+    inflight2 = null, dirty = !1, capsCache = /* @__PURE__ */ new Map(), degradedTargets = /* @__PURE__ */ new Set(), orgMirrorNotified = /* @__PURE__ */ new Set(), consecutiveFailures = 0, latchCount = 0, backoffTurnsRemaining = 0;
     transportOverride = null;
   }
 });
@@ -434958,6 +435249,57 @@ var ENGINE_BG_SHELL_WATCH_INTERVAL_MS, watchIntervalMs, WATCH_TTL_MS2, outstandi
   }
 });
 
+// build-src/src/sema/engineToolEndGuidance.ts
+function toolEndGuidanceRow(errorCode) {
+  if (!(typeof errorCode != "string" || errorCode === "")) {
+    if (errorCode === MCP_SERVER_REVOKED)
+      return "this MCP server was revoked by an operator \u2014 the request was NOT sent, and calls to it keep being refused until it is approved again";
+    switch (delegationCapDispositionOf(errorCode)) {
+      case "wait-for-slot":
+        return "delegation concurrency cap reached \u2014 a seat frees up as soon as a sibling agent finishes; re-sending the same call later will go through (nothing to reconfigure)";
+      case "reuse-existing-or-await-reap":
+        return "delegation seat cap reached for the retained window \u2014 continue an existing agent with SendMessage, or wait for its row to be reaped and the quota comes back (no need to switch sessions or change any setting)";
+      default:
+        break;
+    }
+    if (isDelegationCapCode(errorCode))
+      return `the engine refused this delegation with code "${cleanUntrustedForDisplay(errorCode, MAX_CODE_CHARS)}" \u2014 this build has no guidance for that code yet`;
+  }
+}
+function createToolEndGuidanceLane() {
+  let byFrame = /* @__PURE__ */ new Map(), total = 0;
+  return {
+    note(frameNo, frame) {
+      let f = frame;
+      if (f === null || typeof f != "object" || f.type !== "tool_end_result" || typeof f.parentToolCallId == "string" || typeof f.toolCallId != "string" || f.toolCallId === "") return;
+      let row2 = toolEndGuidanceRow(f.errorCode);
+      if (row2 === void 0 || total >= MAX_PENDING_ROWS) return;
+      total++;
+      let bucket = byFrame.get(frameNo);
+      bucket === void 0 ? byFrame.set(frameNo, [row2]) : bucket.push(row2);
+    },
+    flushFrame(frameNo) {
+      let rows2 = byFrame.get(frameNo);
+      if (rows2 !== void 0) {
+        byFrame.delete(frameNo), total -= rows2.length;
+        for (let row2 of rows2) surfaceTranscriptSystemNotice(row2);
+      }
+    },
+    discard() {
+      byFrame.clear(), total = 0;
+    }
+  };
+}
+var MAX_CODE_CHARS, MAX_PENDING_ROWS, init_engineToolEndGuidance = __esm({
+  "build-src/src/sema/engineToolEndGuidance.ts"() {
+    init_dist();
+    init_transcriptSystemNotice();
+    init_untrustedDisplayText();
+    MAX_CODE_CHARS = 80;
+    MAX_PENDING_ROWS = 32;
+  }
+});
+
 // build-src/src/sema/enginePromptSuggestionsStore.ts
 function getEnginePromptSuggestions() {
   return current3;
@@ -435217,10 +435559,7 @@ async function* sdkMessagesToCcEvents(sdk, meta3) {
       // 绝不铸 transcript 行(帧不带正文,替引擎编话=谎),落 debug 审计留痕(「这条 run 被谁插过话」
       // 可查);wire 值 UNTRUSTED,白名单键+控制字符消毒。
       case "human_input": {
-        let clean8 = (v2) => (
-          // eslint-disable-next-line no-control-regex
-          String(v2 ?? "").replace(/[\x00-\x1f\x7f]/g, ".").slice(0, 120)
-        ), who = e.actor?.id ? `${clean8(e.actor.id)}${e.actor.hostAsserted === !0 ? "" : " (unverified)"}` : "unattributed";
+        let clean8 = (v2) => cleanUntrustedForDisplay(v2, 120), who = e.actor?.id ? `${clean8(e.actor.id)}${e.actor.hostAsserted === !0 ? "" : " (unverified)"}` : "unattributed";
         return logForDebugging(
           `[sema][bridge] human_input ledger frame (audit): carrier=${clean8(e.carrier)} eventId=${clean8(e.eventId)} by=${who}`
         ), [];
@@ -435255,17 +435594,17 @@ async function* sdkMessagesToCcEvents(sdk, meta3) {
       rowYielded: !1
     });
   }
-  let macrotask = () => new Promise((resolve57) => setTimeout(resolve57, 0)), curFrame = null, curFrameType = null, curFrameNo = 0, teed = (async function* () {
+  let macrotask = () => new Promise((resolve57) => setTimeout(resolve57, 0)), curFrame = null, curFrameType = null, curFrameNo = 0, guidanceLane = createToolEndGuidanceLane(), teed = (async function* () {
     for await (let raw2 of sdk) {
       let m2 = raw2;
-      curFrame = m2, curFrameType = typeof m2.type == "string" ? m2.type : null, curFrameNo++, observeFrame(m2), recordAgentToolStatsFromFrame(m2), yield raw2;
+      curFrame = m2, curFrameType = typeof m2.type == "string" ? m2.type : null, curFrameNo++, observeFrame(m2), recordAgentToolStatsFromFrame(m2), guidanceLane.note(curFrameNo, m2), yield raw2;
     }
     curFrame = null, curFrameType = null, curFrameNo++;
   })(), seenFrameNo = -1, prevFrameWasStreamEvent = !1, lastOutWasDelta = !1, macrotaskPending = !1;
   noteBridgeDriveStart(), abortInFlightBgShellReads();
   try {
     for await (let out6 of bridgeAdapter().adapt(teed, ctx)) {
-      curFrameNo !== seenFrameNo && (seenFrameNo >= 0 && notifEpilogue(seenFrameNo), prevFrameWasStreamEvent && lastOutWasDelta && await macrotask(), seenFrameNo = curFrameNo, prevFrameWasStreamEvent = curFrameType === "stream_event", macrotaskPending = curFrame !== null && curFrameType !== "stream_event", lastOutWasDelta = !1);
+      curFrameNo !== seenFrameNo && (seenFrameNo >= 0 && guidanceLane.flushFrame(seenFrameNo), seenFrameNo >= 0 && notifEpilogue(seenFrameNo), prevFrameWasStreamEvent && lastOutWasDelta && await macrotask(), seenFrameNo = curFrameNo, prevFrameWasStreamEvent = curFrameType === "stream_event", macrotaskPending = curFrame !== null && curFrameType !== "stream_event", lastOutWasDelta = !1);
       let isDelta = out6.plane === "chrome" && out6.event.kind === "stream_delta";
       if (!isDelta && macrotaskPending && (await macrotask(), macrotaskPending = !1), out6.plane === "transcript") {
         let msg = reduceApiErrorEnvelope(out6.message);
@@ -435276,9 +435615,9 @@ async function* sdkMessagesToCcEvents(sdk, meta3) {
         for (let ev of consumeChrome(out6.event)) yield ev;
       lastOutWasDelta = isDelta;
     }
-    notifEpilogue(Number.MAX_SAFE_INTEGER);
+    seenFrameNo >= 0 && guidanceLane.flushFrame(seenFrameNo), notifEpilogue(Number.MAX_SAFE_INTEGER);
   } finally {
-    noteBridgeDriveEnd();
+    guidanceLane.discard(), noteBridgeDriveEnd();
   }
 }
 var BRIDGE_PROBE_ENV, init_upstreamBridge = __esm({
@@ -435292,6 +435631,7 @@ var BRIDGE_PROBE_ENV, init_upstreamBridge = __esm({
     init_modelVerificationStore();
     init_retryStatusStore();
     init_debug();
+    init_untrustedDisplayText();
     init_thinkingActivityStore();
     init_dist();
     init_engineBgShellPanelStore();
@@ -435306,6 +435646,7 @@ var BRIDGE_PROBE_ENV, init_upstreamBridge = __esm({
     init_xml();
     init_engineTaskListSync();
     init_engineAgentToolStatsStore();
+    init_engineToolEndGuidance();
     init_enginePromptSuggestionsStore();
     init_dist();
     BRIDGE_PROBE_ENV = {
@@ -448415,6 +448756,7 @@ __export(background_agent_store_exports, {
   InMemoryBackgroundAgentStore: () => InMemoryBackgroundAgentStore,
   REVIVED_ROW_CLEARED_FIELDS: () => REVIVED_ROW_CLEARED_FIELDS,
   STALE_RUNNING_REAP_ATTRIBUTION: () => STALE_RUNNING_REAP_ATTRIBUTION,
+  announceTranscriptIntegrityGapOnce: () => announceTranscriptIntegrityGapOnce,
   assertBackgroundAgentReapOptions: () => assertBackgroundAgentReapOptions,
   canAccessAgentRecord: () => canAccessAgentRecord,
   clearRevivedRowTerminalPayload: () => clearRevivedRowTerminalPayload,
@@ -448425,6 +448767,18 @@ function clearRevivedRowTerminalPayload(record2) {
   for (let field of REVIVED_ROW_CLEARED_FIELDS)
     delete record2[field];
 }
+function announceTranscriptIntegrityGapOnce(handle2, scope, sink2) {
+  if (sink2 === void 0)
+    return;
+  let key = `${scope ?? ""}\0${handle2}`;
+  if (!transcriptIntegrityAnnounced.has(key)) {
+    transcriptIntegrityAnnounced.add(key);
+    try {
+      sink2(handle2, scope);
+    } catch {
+    }
+  }
+}
 function canAccessAgentRecord(record2, access7) {
   if (access7.scope === void 0 || record2.scope !== access7.scope)
     return !1;
@@ -448516,7 +448870,7 @@ function queryBackgroundAgents(rows2, query2) {
     r.scope === query2.scope && (query2.sessionId !== void 0 && (r.sessionScoped ? r.owner : r.parentSessionId) !== query2.sessionId && r.rootSessionId !== query2.sessionId || query2.status !== void 0 && r.status !== query2.status || out6.push(toSummary(r)));
   return out6.sort((a, b3) => b3.spawnedAt - a.spawnedAt), query2.limit !== void 0 ? out6.slice(0, Math.max(0, query2.limit)) : out6;
 }
-var REVIVED_ROW_CLEARED_FIELDS, BackgroundAgentStoreError, STALE_RUNNING_REAP_ATTRIBUTION, InMemoryBackgroundAgentStore, init_background_agent_store = __esm({
+var REVIVED_ROW_CLEARED_FIELDS, transcriptIntegrityAnnounced, BackgroundAgentStoreError, STALE_RUNNING_REAP_ATTRIBUTION, InMemoryBackgroundAgentStore, init_background_agent_store = __esm({
   "node_modules/@sema-agent/core/dist/core/background-agent-store.js"() {
     init_harness();
     init_retention_policy();
@@ -448537,6 +448891,7 @@ var REVIVED_ROW_CLEARED_FIELDS, BackgroundAgentStoreError, STALE_RUNNING_REAP_AT
       "editedFiles",
       "usage"
     ];
+    transcriptIntegrityAnnounced = /* @__PURE__ */ new Set();
     BackgroundAgentStoreError = class extends Error {
       code;
       constructor(code2, message) {
@@ -449272,6 +449627,16 @@ var TASK_STOP_PARAMS, init_task_tool_shape = __esm({
 
 // node_modules/@sema-agent/core/dist/core/task-registry-agent.js
 import { randomBytes as randomBytes23 } from "node:crypto";
+function activeDelegationHandlesLane(core, scope, rootSessionId) {
+  let out6 = [];
+  for (let h of core.handles.values()) {
+    if (h.type !== "background_agent" || h.status !== "running" && h.status !== "pending" || h.scope !== scope)
+      continue;
+    let bh = h;
+    (bh.rootSessionId ?? bh.parentSessionId ?? (bh.sessionScoped ? bh.owner : void 0)) === rootSessionId && out6.push(h.id);
+  }
+  return out6;
+}
 function ensureDurableHeartbeatLane(core) {
   if (core.durableHeartbeatTimer !== void 0)
     return;
@@ -449386,7 +449751,7 @@ async function reapDurableAgentsLane(core, scope, deps2, policy2) {
   assertRetentionPolicy("reapDurableAgents", policy2);
   let now2 = policy2.now ?? Date.now();
   if (policy2.staleRunningMaxAgeMs !== void 0 && await deps2.store.reap(scope, now2, { staleRunningMaxAgeMs: policy2.staleRunningMaxAgeMs }), policy2.maxAgeMs === void 0 && policy2.keep === void 0)
-    return { rowsReaped: 0, sessionsReleased: 0, skippedNoSessions: 0 };
+    return { rowsReaped: 0, sessionsReleased: 0, skippedNoSessions: 0, orphanPlacedReleased: 0 };
   let terminal = (await deps2.store.listByScope(scope)).filter((r) => r.status !== "running" && r.status !== "parked");
   terminal.sort((a, b3) => b3.spawnedAt - a.spawnedAt);
   let doomed = /* @__PURE__ */ new Map();
@@ -449422,7 +449787,12 @@ async function reapDurableAgentsLane(core, scope, deps2, policy2) {
         } catch {
           continue;
         }
-        if (rowsReaped++, core.reapedHandles.add(r.handle), deps2.mailbox !== void 0)
+        rowsReaped++;
+        {
+          let staleInProc = core.handles.get(r.handle);
+          staleInProc !== void 0 && staleInProc.status !== "running" && staleInProc.status !== "pending" && staleInProc.status !== "parked" && core.handles.delete(r.handle);
+        }
+        if (core.reapedHandles.add(r.handle), deps2.mailbox !== void 0)
           try {
             await deps2.mailbox.drop(scope, r.handle);
           } catch {
@@ -449436,7 +449806,40 @@ async function reapDurableAgentsLane(core, scope, deps2, policy2) {
         core.reapingHandles.delete(r.handle), core.reapedHandles.delete(r.handle);
       }
     }
-  return { rowsReaped, sessionsReleased, skippedNoSessions };
+  let orphanPlacedReleased = 0;
+  if (policy2.maxAgeMs !== void 0 && deps2.sessions !== void 0 && typeof deps2.sessions.listPlaced == "function") {
+    let placed = [];
+    try {
+      placed = await deps2.sessions.listPlaced("subagent", { olderThanMs: policy2.maxAgeMs, scope });
+    } catch {
+      placed = [];
+    }
+    for (let p of placed) {
+      if ("tupleIncomplete" in p || p.scope !== scope || core.claimingHandles.has(p.handle) || core.reapingHandles.has(p.handle))
+        continue;
+      let row2;
+      try {
+        row2 = await deps2.store.get(p.handle, scope);
+      } catch {
+        continue;
+      }
+      if (row2 !== null)
+        continue;
+      let inProc = core.handles.get(p.handle);
+      if (!(inProc !== void 0 && (inProc.status === "running" || inProc.status === "pending" || inProc.status === "parked"))) {
+        try {
+          await deps2.sessions.unpin?.(p.sessionId), await deps2.sessions.release(p.sessionId), orphanPlacedReleased++;
+        } catch {
+        }
+        if (deps2.mailbox !== void 0)
+          try {
+            await deps2.mailbox.drop(scope, p.handle);
+          } catch {
+          }
+      }
+    }
+  }
+  return { rowsReaped, sessionsReleased, skippedNoSessions, orphanPlacedReleased };
 }
 function releaseDurableTranscriptAnchorLane(core, id) {
   let handle2 = core.handles.get(id);
@@ -450019,10 +450422,10 @@ async function deliverToRunningAgentLane(core, id, access7, notification, opts)
   }
   let detachOnTimeout;
   return await bounded(new Promise((resolve57) => {
-    let inflight4 = handle2.inFlightDirect ??= /* @__PURE__ */ new Set(), settleOnce = (r) => {
-      inflight4.has(settleOnce) && (inflight4.delete(settleOnce), resolve57(r));
+    let inflight3 = handle2.inFlightDirect ??= /* @__PURE__ */ new Set(), settleOnce = (r) => {
+      inflight3.has(settleOnce) && (inflight3.delete(settleOnce), resolve57(r));
     };
-    inflight4.add(settleOnce), detachOnTimeout = () => inflight4.delete(settleOnce), (async () => {
+    inflight3.add(settleOnce), detachOnTimeout = () => inflight3.delete(settleOnce), (async () => {
       let result;
       try {
         await handle2.notify?.(notification, opts) === "parked" ? result = handle2.retainedContinuation === !0 ? { ok: !0, disposition: "parked" } : { ok: !1, reason: "not_running" } : result = { ok: !0, disposition: "queued" };
@@ -450190,7 +450593,7 @@ async function stopBackgroundAgentLane(core, handle2) {
     if (arbiter === void 0)
       return {
         content: `${handle2.id} is parked on a pending approval \u2014 stop it by deciding (deny/expire) the pending approval in the durable approval inbox.`,
-        details: { task_id: handle2.id, type: "background_agent", status: "parked", retrieval_status: "not_ready", error: "parked_pending_approval" }
+        details: { task_id: handle2.id, type: "background_agent", status: "parked", retrieval_status: "not_ready", error: "parked_pending_approval", code: "parked_pending_approval" }
       };
     let stopWon = !1, arbiterUnreachable = !1;
     try {
@@ -450232,11 +450635,11 @@ async function stopBackgroundAgentLane(core, handle2) {
     }
     return arbiterUnreachable ? {
       content: `${handle2.id} was not stopped: the approval arbitration store was unreachable \u2014 the row stays parked; retry the stop.`,
-      details: { task_id: handle2.id, type: "background_agent", status: handle2.status, retrieval_status: "not_ready", error: "park_arbiter_unreachable" },
+      details: { task_id: handle2.id, type: "background_agent", status: handle2.status, retrieval_status: "not_ready", error: "park_arbiter_unreachable", code: "park_arbiter_unreachable" },
       isError: !0
     } : {
       content: `${handle2.id} was not stopped: its pending approval was already consumed (a resume won the arbitration).`,
-      details: { task_id: handle2.id, type: "background_agent", status: handle2.status, retrieval_status: "not_ready", error: "park_resume_won" },
+      details: { task_id: handle2.id, type: "background_agent", status: handle2.status, retrieval_status: "not_ready", error: "park_resume_won", code: "park_resume_won" },
       isError: !0
     };
   }
@@ -450474,6 +450877,9 @@ var BLOCK_DEFAULT_TIMEOUT_MS, BLOCK_MAX_TIMEOUT_MS, TASK_PREFIX, TaskRegistry, d
       backgroundAgentCycleSeq(id) {
         return backgroundAgentCycleSeqLane(this.core, id);
       }
+      activeDelegationHandles(scope, rootSessionId) {
+        return activeDelegationHandlesLane(this.core, scope, rootSessionId);
+      }
       reviveBackgroundAgent(id, access7, abort) {
         return reviveBackgroundAgentLane(this.core, id, access7, abort);
       }
@@ -450916,7 +451322,8 @@ The durable record is still marked running (last update ${new Date(row2.updatedA
                   type: "background_agent",
                   status: "running",
                   retrieval_status: "not_ready",
-                  error: "not_local"
+                  error: "not_local",
+                  code: "not_local"
                 }
               };
             }
@@ -450944,7 +451351,8 @@ The durable record is still marked running (last update ${new Date(row2.updatedA
                 type: "workflow",
                 status: run2.status,
                 retrieval_status: "success",
-                error: "not_local"
+                error: "not_local",
+                code: "not_local"
               }
             };
         }
@@ -450963,8 +451371,8 @@ The durable record is still marked running (last update ${new Date(row2.updatedA
                 type: "background_agent",
                 status: row2.status,
                 retrieval_status: row2.status === "parked" ? "not_ready" : "success",
-                ...row2.status === "running" ? { error: "not_local" } : {},
-                ...row2.status === "parked" ? { error: "parked_pending_approval" } : {}
+                ...row2.status === "running" ? { error: "not_local", code: "not_local" } : {},
+                ...row2.status === "parked" ? { error: "parked_pending_approval", code: "parked_pending_approval" } : {}
               }
             };
         }
@@ -451264,6 +451672,14 @@ var init_image_downsample = __esm({
   }
 });
 
+// node_modules/@sema-agent/core/dist/core/reminder-disclosure.js
+var init_reminder_disclosure = __esm({
+  "node_modules/@sema-agent/core/dist/core/reminder-disclosure.js"() {
+    init_reminder_mint();
+    init_untrusted_text();
+  }
+});
+
 // node_modules/@sema-agent/core/dist/core/memory-engine/content-origin.js
 var init_content_origin = __esm({
   "node_modules/@sema-agent/core/dist/core/memory-engine/content-origin.js"() {
@@ -451291,6 +451707,7 @@ var MCP_PREFIX, MCP_IDLE_TIMEOUT_STDIO_DEFAULT_MS, MCP_IDLE_TIMEOUT_HTTP_DEFAULT
     init_surrogate_safe_slice();
     init_tool_errors();
     init_untrusted_text();
+    init_reminder_disclosure();
     init_content_origin();
     init_strict_output_schema();
     init_protocol_naming();
@@ -451331,6 +451748,7 @@ var init_fs_pdf = __esm({
     init_mcp4();
     init_pdf2();
     init_fs_shared();
+    init_reminder_disclosure();
     init_pdf2();
   }
 });
@@ -451348,6 +451766,7 @@ var init_fs_read = __esm({
     init_fs_shared();
     init_fs_pdf();
     init_reminder_mint();
+    init_reminder_disclosure();
   }
 });
 
@@ -451637,8 +452056,13 @@ function combinePolicies(...policies) {
       let asked, current5 = req, rewrite, settled, ruleAskText;
       for (let p of policies) {
         let d4 = refuseOutOfContractDecision(await p.check(current5, signal));
-        if (d4.action === "deny")
-          return rewrite?.updatedInput !== void 0 ? { ...d4, updatedInput: rewrite.updatedInput } : d4;
+        if (d4.action === "deny") {
+          if (rewrite?.updatedInput !== void 0) {
+            let out6 = { ...d4, updatedInput: rewrite.updatedInput }, attested = coreMintedResolutions.get(d4);
+            return attested !== void 0 && coreMintedResolutions.set(out6, attested), out6;
+          }
+          return d4;
+        }
         if (d4.updatedInput !== void 0 && (current5 = { ...current5, args: d4.updatedInput }, rewrite = d4), d4.action === "allow") {
           let supplied = d4.settledBy;
           supplied !== void 0 && (settled = supplied);
@@ -451654,7 +452078,7 @@ function combinePolicies(...policies) {
     }
   };
 }
-var DECISION_REASONS, DECISION_REASON_SET, ALLOW, RETIRED_TEXT_FIELD, RETIRED_TEXT_FIELD_DENY_MESSAGE, COARSE_SHELL_TOOLS, CASE_INSENSITIVE_FS, init_tool_policy = __esm({
+var DECISION_REASONS, DECISION_REASON_SET, ALLOW, RETIRED_TEXT_FIELD, RETIRED_TEXT_FIELD_DENY_MESSAGE, COARSE_SHELL_TOOLS, CASE_INSENSITIVE_FS, ASK_DENY_RESOLUTION_VALUES, ASK_DENY_RESOLUTION_SET, coreMintedResolutions, init_tool_policy = __esm({
   "node_modules/@sema-agent/core/dist/core/tool-policy.js"() {
     init_ask_class();
     init_fs();
@@ -451663,7 +452087,17 @@ var DECISION_REASONS, DECISION_REASON_SET, ALLOW, RETIRED_TEXT_FIELD, RETIRED_TE
     init_permission_rules();
     init_safety();
     DECISION_REASONS = ["rule", "mode", "hook", "safety", "classifier", "persisted_rule", "sandbox", "org_rule", "org_unavailable"], DECISION_REASON_SET = new Set(DECISION_REASONS), ALLOW = { action: "allow" }, RETIRED_TEXT_FIELD = "reason", RETIRED_TEXT_FIELD_DENY_MESSAGE = `a permission decision carries the retired "${RETIRED_TEXT_FIELD}" field \u2014 rename it to "message" (the one text field a decision carries); denied fail-closed rather than executing a decision whose text this layer cannot read`;
-    COARSE_SHELL_TOOLS = ["Bash", "Monitor"], CASE_INSENSITIVE_FS = process.platform === "darwin" || process.platform === "win32";
+    COARSE_SHELL_TOOLS = ["Bash", "Monitor"], CASE_INSENSITIVE_FS = process.platform === "darwin" || process.platform === "win32", ASK_DENY_RESOLUTION_VALUES = [
+      "human_refused",
+      "window_expired",
+      "no_approver",
+      "blanket_allow_refused",
+      "approver_unavailable",
+      "task_aborted",
+      "presentation_failed",
+      "approver_error",
+      "approver_contract"
+    ], ASK_DENY_RESOLUTION_SET = new Set(ASK_DENY_RESOLUTION_VALUES), coreMintedResolutions = /* @__PURE__ */ new WeakMap();
   }
 });
 
@@ -451699,6 +452133,28 @@ var init_delegation_provenance = __esm({
   }
 });
 
+// node_modules/@sema-agent/core/dist/core/memory-engine/types.js
+var init_types27 = __esm({
+  "node_modules/@sema-agent/core/dist/core/memory-engine/types.js"() {
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/memory-engine/layout.js
+import { closeSync as closeSync13, constants as fsConstants7, copyFileSync as copyFileSync6, existsSync as existsSync28, fstatSync as fstatSync3, fsyncSync as fsyncSync10, lstatSync as lstatSync4, mkdirSync as mkdirSync22, openSync as openSync14, readFileSync as readFileSync39, readdirSync as readdirSync12, realpathSync as realpathSync11, renameSync as renameSync13, rmSync as rmSync7, rmdirSync as rmdirSync3, statSync as statSync14, unlinkSync as unlinkSync11, writeFileSync as writeFileSync21, writeSync as writeSync7 } from "node:fs";
+var O_WRONLY, O_CREAT, O_TRUNC, O_NOFOLLOW3, O_EXCL, init_layout = __esm({
+  "node_modules/@sema-agent/core/dist/core/memory-engine/layout.js"() {
+    init_types27();
+    ({ O_WRONLY, O_CREAT, O_TRUNC, O_NOFOLLOW: O_NOFOLLOW3, O_EXCL } = fsConstants7);
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/memory-engine/delegation-settlement.js
+var init_delegation_settlement = __esm({
+  "node_modules/@sema-agent/core/dist/core/memory-engine/delegation-settlement.js"() {
+    init_layout();
+  }
+});
+
 // node_modules/@sema-agent/core/dist/core/runner/synthetic-tools.js
 var OUTPUT_TOOL_NAME, REPORT_FINDING_SCHEMA, SKILL_CONTENT_MAX_CHARS, init_synthetic_tools = __esm({
   "node_modules/@sema-agent/core/dist/core/runner/synthetic-tools.js"() {
@@ -451753,21 +452209,6 @@ var WORKTREE_PARENT, init_git_worktree_env = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/memory-engine/types.js
-var init_types27 = __esm({
-  "node_modules/@sema-agent/core/dist/core/memory-engine/types.js"() {
-  }
-});
-
-// node_modules/@sema-agent/core/dist/core/memory-engine/layout.js
-import { closeSync as closeSync13, constants as fsConstants7, copyFileSync as copyFileSync6, existsSync as existsSync28, fstatSync as fstatSync3, fsyncSync as fsyncSync10, lstatSync as lstatSync4, mkdirSync as mkdirSync22, openSync as openSync14, readFileSync as readFileSync39, readdirSync as readdirSync12, realpathSync as realpathSync11, renameSync as renameSync13, rmSync as rmSync7, rmdirSync as rmdirSync3, statSync as statSync14, unlinkSync as unlinkSync11, writeFileSync as writeFileSync21, writeSync as writeSync7 } from "node:fs";
-var O_WRONLY, O_CREAT, O_TRUNC, O_NOFOLLOW3, O_EXCL, init_layout = __esm({
-  "node_modules/@sema-agent/core/dist/core/memory-engine/layout.js"() {
-    init_types27();
-    ({ O_WRONLY, O_CREAT, O_TRUNC, O_NOFOLLOW: O_NOFOLLOW3, O_EXCL } = fsConstants7);
-  }
-});
-
 // node_modules/@sema-agent/core/dist/core/memory-engine/scope-contract.js
 var CASE_INSENSITIVE_FS2, FATAL_UTF8, init_scope_contract = __esm({
   "node_modules/@sema-agent/core/dist/core/memory-engine/scope-contract.js"() {
@@ -452044,8 +452485,11 @@ var EXTRA_TOOLS_MAX_FACTORY_CALLS_PER_TREE, EXTRA_TOOLS_BUDGET_NOTE, FAILED_SESS
   "node_modules/@sema-agent/core/dist/agents/subagent.js"() {
     init_build3();
     init_tool_policy();
+    init_tools3();
     init_surrogate_safe_slice();
     init_delegation_provenance();
+    init_delegation_settlement();
+    init_layout();
     init_roles();
     init_synthetic_tools();
     init_tool_disclosure();
@@ -453343,9 +453787,9 @@ var init_reasoning = __esm({
 
 // node_modules/@sema-agent/core/dist/brain/status-sink.js
 import { AsyncLocalStorage as AsyncLocalStorage8 } from "node:async_hooks";
-var statusSinkStore, telemetrySinkStore, init_status_sink = __esm({
+var statusSinkStore, telemetrySinkStore, reasoningFactsSinkStore, init_status_sink = __esm({
   "node_modules/@sema-agent/core/dist/brain/status-sink.js"() {
-    statusSinkStore = new AsyncLocalStorage8(), telemetrySinkStore = new AsyncLocalStorage8();
+    statusSinkStore = new AsyncLocalStorage8(), telemetrySinkStore = new AsyncLocalStorage8(), reasoningFactsSinkStore = new AsyncLocalStorage8();
   }
 });
 
@@ -453538,6 +453982,7 @@ var init_agent_transcript_tool = __esm({
     init_build3();
     init_tools3();
     init_background_agent_store();
+    init_task_registry();
     init_untrusted_text();
     init_subagent_steps();
     init_subagent();
@@ -453559,6 +454004,7 @@ var uplinkSeqGlobal, REVIVE_LEASE_TTL_MS, init_send_message_tool = __esm({
     init_tools3();
     init_task_registry();
     init_background_agent_store();
+    init_harness();
     init_mailbox_store();
     init_observer();
     init_retain_ledger();
@@ -453814,6 +454260,20 @@ var ONE_DAY_MS, ONE_WEEK_MS, ONE_MONTH_MS, init_memory_recall = __esm({
   }
 });
 
+// node_modules/@sema-agent/core/dist/core/memory-engine/frontmatter.js
+var init_frontmatter = __esm({
+  "node_modules/@sema-agent/core/dist/core/memory-engine/frontmatter.js"() {
+    init_types27();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/core/memory-engine/provenance-wording.js
+var MEMORY_EXPOSURE_HANDLE_TAG, MEMORY_SEARCH_BAND_ORDER_HEADER, init_provenance_wording = __esm({
+  "node_modules/@sema-agent/core/dist/core/memory-engine/provenance-wording.js"() {
+    MEMORY_EXPOSURE_HANDLE_TAG = "[external-origin]", MEMORY_SEARCH_BAND_ORDER_HEADER = `entries without the ${MEMORY_EXPOSURE_HANDLE_TAG} tag first, best match first within each group`;
+  }
+});
+
 // node_modules/@sema-agent/core/dist/core/memory-engine/tools.js
 var MEMORY_SEARCH_TOOL_NAME2, MEMORY_GET_TOOL_NAME2, MEMORY_GET_PAGE_CAP_BYTES, SEARCH_HINT, SEARCH_DESCRIPTION, GET_HINT, GET_DESCRIPTION, init_tools5 = __esm({
   "node_modules/@sema-agent/core/dist/core/memory-engine/tools.js"() {
@@ -453821,6 +454281,8 @@ var MEMORY_SEARCH_TOOL_NAME2, MEMORY_GET_TOOL_NAME2, MEMORY_GET_PAGE_CAP_BYTES,
     init_tools3();
     init_untrusted_text();
     init_memory_recall();
+    init_frontmatter();
+    init_provenance_wording();
     MEMORY_SEARCH_TOOL_NAME2 = "memory_search", MEMORY_GET_TOOL_NAME2 = "memory_get", MEMORY_GET_PAGE_CAP_BYTES = 24 * 1024, SEARCH_HINT = "Search this session's long-term memory entries by keyword \u2014 check memory before saying you do not have or do not know something.", SEARCH_DESCRIPTION = [
       SEARCH_HINT,
       "",
@@ -453858,19 +454320,20 @@ var MAX_MEMORY_BYTES, init_memory4 = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/core/memory-engine/frontmatter.js
-var init_frontmatter = __esm({
-  "node_modules/@sema-agent/core/dist/core/memory-engine/frontmatter.js"() {
-    init_types27();
-  }
-});
-
 // node_modules/@sema-agent/core/dist/core/memory-engine/header-hints.js
 var init_header_hints = __esm({
   "node_modules/@sema-agent/core/dist/core/memory-engine/header-hints.js"() {
   }
 });
 
+// node_modules/@sema-agent/core/dist/core/memory-engine/origin-clearance.js
+var init_origin_clearance = __esm({
+  "node_modules/@sema-agent/core/dist/core/memory-engine/origin-clearance.js"() {
+    init_layout();
+    init_types27();
+  }
+});
+
 // node_modules/@sema-agent/core/dist/core/memory-engine/scan.js
 var init_scan = __esm({
   "node_modules/@sema-agent/core/dist/core/memory-engine/scan.js"() {
@@ -453916,7 +454379,7 @@ var init_export_bundle = __esm({
 });
 
 // node_modules/@sema-agent/core/dist/core/memory-engine/engine.js
-var MEMORY_INDEX_MAX_BYTES, init_engine4 = __esm({
+var MEMORY_INDEX_MAX_BYTES, DEFAULT_HOLD_SETTLE_TIMEOUT_MS, init_engine4 = __esm({
   "node_modules/@sema-agent/core/dist/core/memory-engine/engine.js"() {
     init_harness();
     init_memory4();
@@ -453924,12 +454387,16 @@ var MEMORY_INDEX_MAX_BYTES, init_engine4 = __esm({
     init_reminder_mint();
     init_memory_recall();
     init_frontmatter();
+    init_provenance_wording();
     init_header_hints();
+    init_delegation_settlement();
+    init_delegation_settlement();
+    init_origin_clearance();
     init_file_backend();
     init_export_bundle();
     init_layout();
     init_scan();
-    MEMORY_INDEX_MAX_BYTES = 25 * 1024;
+    MEMORY_INDEX_MAX_BYTES = 25 * 1024, DEFAULT_HOLD_SETTLE_TIMEOUT_MS = 4320 * 60 * 1e3;
   }
 });
 
@@ -454323,6 +454790,7 @@ var PROMPT_HASH_SALT, DEFAULT_RESOURCE_TTL_MS, USAGE_WINDOW_REAP_MARGIN_MS, DEFA
     init_engine4();
     init_content_origin();
     init_delegation_provenance();
+    init_delegation_settlement();
     init_memory4();
     init_compliance();
     init_memory_admission();
@@ -454513,6 +454981,7 @@ var DEFAULT_MAX_BYTES, GROUNDING_RATIO_MAX_TEXT_CHARS, GROUNDING_ECHO_MAX_CHARS,
     init_build3();
     init_tools3();
     init_untrusted_text();
+    init_reminder_disclosure();
     init_untrusted_egress();
     init_image();
     init_safety();
@@ -454595,8 +455064,10 @@ var init_repetition = __esm({
 });
 
 // node_modules/@sema-agent/core/dist/core/strategy-store.js
-var init_strategy_store = __esm({
+var MAX_STRATEGY_TS_FUTURE_MS, init_strategy_store = __esm({
   "node_modules/@sema-agent/core/dist/core/strategy-store.js"() {
+    init_memory_vector();
+    MAX_STRATEGY_TS_FUTURE_MS = 1440 * 60 * 1e3;
   }
 });
 
@@ -454616,6 +455087,8 @@ var init_cumulative_stats = __esm({
 // node_modules/@sema-agent/core/dist/agents/teacher.js
 var init_teacher = __esm({
   "node_modules/@sema-agent/core/dist/agents/teacher.js"() {
+    init_strategy_store();
+    init_safe_notify();
     init_suspend_guard();
     init_tools3();
     init_untrusted_text();
@@ -455104,6 +455577,162 @@ var RESUME_CLAIM_TTL_MS, RESUME_CLAIM_REAP_GRACE_MS, init_workflow_journal_store
   }
 });
 
+// node_modules/@sema-agent/core/dist/stores/file/background-agent-store.js
+import { join as join173 } from "node:path";
+var agentLedgers, FileBackgroundAgentStore, init_background_agent_store2 = __esm({
+  "node_modules/@sema-agent/core/dist/stores/file/background-agent-store.js"() {
+    init_background_agent_store();
+    init_shared_ledger();
+    init_marker();
+    agentLedgers = new SharedLedgerTable({
+      keyOf: (r) => FileBackgroundAgentStore.key(r.handle, r.scope),
+      apply: (rows2, ev) => {
+        if (ev.t === "delete") {
+          rows2.delete(ev.k);
+          return;
+        }
+        rows2.set(ev.k, ev.r);
+      }
+    }), FileBackgroundAgentStore = class _FileBackgroundAgentStore {
+      fsyncEnabled;
+      compactEvery;
+      ledger;
+      closed = !1;
+      get rows() {
+        return this.ledger.rows;
+      }
+      constructor(root2, opts = {}) {
+        assertAdoptionBootGate(root2, "FileBackgroundAgentStore"), this.fsyncEnabled = opts.fsync !== !1, this.compactEvery = opts.compactEvery ?? 1e3;
+        let dir = join173(root2, "background-agents");
+        this.ledger = agentLedgers.acquire({
+          dir,
+          tmpDir: join173(root2, "tmp"),
+          ledgerPath: join173(dir, "agents.jsonl"),
+          snapshotPath: join173(dir, "agents.snapshot.jsonl")
+        });
+      }
+      static key(handle2, scope) {
+        return `${scope}\0${handle2}`;
+      }
+      withLock(key, fn2) {
+        return this.ledger.withLock(key, fn2);
+      }
+      commit(ev) {
+        this.ledger.commit(ev, this.fsyncEnabled, this.compactEvery);
+      }
+      async put(record2) {
+        if (record2.scope === void 0 || record2.scope === "")
+          throw new Error("BackgroundAgentStore.put: refusing a row without a scope (world-readable through the fallback)");
+        let k2 = _FileBackgroundAgentStore.key(record2.handle, record2.scope);
+        return this.withLock(k2, () => {
+          if (this.rows.has(k2))
+            throw new BackgroundAgentStoreError("agent_record.already_exists", "agent record already exists");
+          let stored = structuredClone(record2);
+          stored.rev = record2.rev ?? 0, this.commit({ t: "put", k: k2, r: stored });
+        });
+      }
+      async get(handle2, scope) {
+        let row2 = this.rows.get(_FileBackgroundAgentStore.key(handle2, scope));
+        return row2 ? structuredClone(row2) : null;
+      }
+      async update(handle2, scope, record2, expect) {
+        let k2 = _FileBackgroundAgentStore.key(handle2, scope);
+        return this.withLock(k2, () => {
+          let live = this.rows.get(k2);
+          if (!live || live.scope !== scope || live.rev !== expect.rev)
+            return !1;
+          let stored = structuredClone(record2);
+          return stored.handle = handle2, stored.scope = scope, stored.rev = live.rev + 1, this.commit({ t: "update", k: k2, r: stored }), !0;
+        });
+      }
+      async updateIf(handle2, scope, record2, expect) {
+        let k2 = _FileBackgroundAgentStore.key(handle2, scope);
+        return this.withLock(k2, async () => {
+          let live = this.rows.get(k2);
+          if (!live || live.scope !== scope || live.rev !== expect.rev || expect.status !== void 0 && live.status !== expect.status || expect.parkedCheckpointToken !== void 0 && (expect.parkedCheckpointToken === null ? live.parkedCheckpointToken !== void 0 : live.parkedCheckpointToken !== expect.parkedCheckpointToken) || expect.parkClaimId !== void 0 && (expect.parkClaimId === null ? live.parkClaimId !== void 0 : live.parkClaimId !== expect.parkClaimId))
+            return !1;
+          let stored = structuredClone(record2);
+          return stored.handle = handle2, stored.scope = scope, stored.rev = live.rev + 1, this.commit({ t: "update", k: k2, r: stored }), !0;
+        });
+      }
+      async listBySession(scope, sessionId, opts) {
+        return queryBackgroundAgents(this.rows.values(), { scope, sessionId, status: opts?.status, limit: opts?.limit });
+      }
+      async listByScope(scope, opts) {
+        return queryBackgroundAgents(this.rows.values(), { scope, status: opts?.status, limit: opts?.limit });
+      }
+      async listScopes() {
+        return [...new Set([...this.rows.values()].map((r) => r.scope))].sort();
+      }
+      async delete(handle2, scope, expect) {
+        let k2 = _FileBackgroundAgentStore.key(handle2, scope);
+        return this.withLock(k2, () => {
+          let live = this.rows.get(k2);
+          return !live || expect !== void 0 && live.rev !== expect.rev ? !1 : (this.commit({ t: "delete", k: k2 }), !0);
+        });
+      }
+      async reap(scope, now2, opts) {
+        if (assertBackgroundAgentReapOptions(opts), !opts || opts.maxAgeMs === void 0 && opts.keep === void 0 && opts.staleRunningMaxAgeMs === void 0)
+          return 0;
+        let changed = /* @__PURE__ */ new Set();
+        if (opts.staleRunningMaxAgeMs !== void 0) {
+          let staleCandidates = [...this.rows.entries()].filter(([, r]) => r.scope === scope && r.status === "running" && now2 - r.updatedAt > opts.staleRunningMaxAgeMs).map(([k2]) => k2);
+          for (let k2 of staleCandidates)
+            await this.withLock(k2, () => {
+              let live = this.rows.get(k2);
+              if (!live || live.status !== "running" || now2 - live.updatedAt <= opts.staleRunningMaxAgeMs)
+                return !1;
+              let next = structuredClone(live);
+              return next.status = "failed", next.stoppedBy = "system", next.summary = next.summary ?? STALE_RUNNING_REAP_ATTRIBUTION, next.error = next.error ?? STALE_RUNNING_REAP_ATTRIBUTION, next.settledAt = now2, next.updatedAt = now2, next.rev = live.rev + 1, this.commit({ t: "update", k: k2, r: next }), !0;
+            }) && changed.add(k2);
+        }
+        let terminal = [...this.rows.entries()].filter(([, r]) => r.scope === scope && r.status !== "running" && r.status !== "parked").sort(([, a], [, b3]) => b3.spawnedAt - a.spawnedAt), doomed = /* @__PURE__ */ new Map();
+        if (opts.maxAgeMs !== void 0)
+          for (let [k2, r] of terminal)
+            (r.settledAt ?? r.spawnedAt) < now2 - opts.maxAgeMs && doomed.set(k2, { byAge: !0 });
+        if (opts.keep !== void 0)
+          for (let [k2] of terminal.slice(Math.max(0, opts.keep)))
+            doomed.has(k2) || doomed.set(k2, { byAge: !1 });
+        for (let [k2, why] of doomed)
+          await this.withLock(k2, () => {
+            let live = this.rows.get(k2);
+            return !live || live.scope !== scope || live.status === "running" || live.status === "parked" || why.byAge && opts.maxAgeMs !== void 0 && (live.settledAt ?? live.spawnedAt) >= now2 - opts.maxAgeMs ? !1 : (this.commit({ t: "delete", k: k2 }), !0);
+          }) && changed.add(k2);
+        return changed.size;
+      }
+      compactNow() {
+        this.ledger.compact();
+      }
+      get size() {
+        return this.rows.size;
+      }
+      close() {
+        this.closed || (this.closed = !0, this.ledger.release());
+      }
+    };
+  }
+});
+
+// node_modules/@sema-agent/core/dist/stores/file/mailbox-store.js
+var init_mailbox_store2 = __esm({
+  "node_modules/@sema-agent/core/dist/stores/file/mailbox-store.js"() {
+    init_retention_policy();
+    init_mailbox_store();
+    init_fs_atomic();
+    init_marker();
+  }
+});
+
+// node_modules/@sema-agent/core/dist/stores/file/strategy-store.js
+var STALE_TEMP_MS, init_strategy_store2 = __esm({
+  "node_modules/@sema-agent/core/dist/stores/file/strategy-store.js"() {
+    init_fs_atomic();
+    init_safe_notify();
+    init_strategy_store();
+    STALE_TEMP_MS = 3600 * 1e3;
+  }
+});
+
 // node_modules/@sema-agent/core/dist/core/permission-rule-sync.js
 var init_permission_rule_sync = __esm({
   "node_modules/@sema-agent/core/dist/core/permission-rule-sync.js"() {
@@ -455115,10 +455744,10 @@ var init_permission_rule_sync = __esm({
 
 // node_modules/@sema-agent/core/dist/stores/file/permission-rule-store.js
 import { closeSync as closeSync15, constants as FS2, existsSync as existsSync30, fsyncSync as fsyncSync12, lstatSync as lstatSync5, mkdirSync as mkdirSync24, openSync as openSync16, readFileSync as readFileSync42, renameSync as renameSync15, unlinkSync as unlinkSync13, writeFileSync as writeFileSync23 } from "node:fs";
-import { join as join173 } from "node:path";
+import { join as join174 } from "node:path";
 import { createHash as createHash27, randomBytes as randomBytes28 } from "node:crypto";
 function atomicPublish(dir, file2, payload2) {
-  let tmp = join173(dir, `.${randomBytes28(8).toString("hex")}.tmp`), fd2;
+  let tmp = join174(dir, `.${randomBytes28(8).toString("hex")}.tmp`), fd2;
   try {
     fd2 = openSync16(tmp, FS2.O_WRONLY | FS2.O_CREAT | FS2.O_EXCL | (FS2.O_NOFOLLOW ?? 0), 384), writeFileSync23(fd2, payload2), fsyncSync12(fd2), closeSync15(fd2), fd2 = void 0, renameSync15(tmp, file2);
     let dfd;
@@ -455365,6 +455994,10 @@ var init_file2 = __esm({
     init_file_snapshot_store2();
     init_workflow_journal_store2();
     init_usage_window_store2();
+    init_background_agent_store2();
+    init_mailbox_store2();
+    init_roster_store();
+    init_strategy_store2();
     init_checkpoint_store2();
     init_memory_store();
     init_session_store2();
@@ -455373,6 +456006,7 @@ var init_file2 = __esm({
     init_file_snapshot_store2();
     init_workflow_journal_store2();
     init_usage_window_store2();
+    init_strategy_store2();
     init_fs_atomic();
     init_fs_atomic();
     init_marker();
@@ -455397,16 +456031,6 @@ var init_fs_write_gate_policy = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/stores/file/mailbox-store.js
-var init_mailbox_store2 = __esm({
-  "node_modules/@sema-agent/core/dist/stores/file/mailbox-store.js"() {
-    init_retention_policy();
-    init_mailbox_store();
-    init_fs_atomic();
-    init_marker();
-  }
-});
-
 // node_modules/@sema-agent/core/dist/stores/file/task-list-store.js
 var init_task_list_store = __esm({
   "node_modules/@sema-agent/core/dist/stores/file/task-list-store.js"() {
@@ -455583,6 +456207,7 @@ var init_memory_engine = __esm({
   "node_modules/@sema-agent/core/dist/core/memory-engine/index.js"() {
     init_engine4();
     init_tools5();
+    init_provenance_wording();
     init_scan();
     init_file_backend();
     init_export_bundle();
@@ -455852,142 +456477,6 @@ var init_background_agent_store_contract = __esm({
   }
 });
 
-// node_modules/@sema-agent/core/dist/stores/file/background-agent-store.js
-import { join as join174 } from "node:path";
-var agentLedgers, FileBackgroundAgentStore, init_background_agent_store2 = __esm({
-  "node_modules/@sema-agent/core/dist/stores/file/background-agent-store.js"() {
-    init_background_agent_store();
-    init_shared_ledger();
-    init_marker();
-    agentLedgers = new SharedLedgerTable({
-      keyOf: (r) => FileBackgroundAgentStore.key(r.handle, r.scope),
-      apply: (rows2, ev) => {
-        if (ev.t === "delete") {
-          rows2.delete(ev.k);
-          return;
-        }
-        rows2.set(ev.k, ev.r);
-      }
-    }), FileBackgroundAgentStore = class _FileBackgroundAgentStore {
-      fsyncEnabled;
-      compactEvery;
-      ledger;
-      closed = !1;
-      get rows() {
-        return this.ledger.rows;
-      }
-      constructor(root2, opts = {}) {
-        assertAdoptionBootGate(root2, "FileBackgroundAgentStore"), this.fsyncEnabled = opts.fsync !== !1, this.compactEvery = opts.compactEvery ?? 1e3;
-        let dir = join174(root2, "background-agents");
-        this.ledger = agentLedgers.acquire({
-          dir,
-          tmpDir: join174(root2, "tmp"),
-          ledgerPath: join174(dir, "agents.jsonl"),
-          snapshotPath: join174(dir, "agents.snapshot.jsonl")
-        });
-      }
-      static key(handle2, scope) {
-        return `${scope}\0${handle2}`;
-      }
-      withLock(key, fn2) {
-        return this.ledger.withLock(key, fn2);
-      }
-      commit(ev) {
-        this.ledger.commit(ev, this.fsyncEnabled, this.compactEvery);
-      }
-      async put(record2) {
-        if (record2.scope === void 0 || record2.scope === "")
-          throw new Error("BackgroundAgentStore.put: refusing a row without a scope (world-readable through the fallback)");
-        let k2 = _FileBackgroundAgentStore.key(record2.handle, record2.scope);
-        return this.withLock(k2, () => {
-          if (this.rows.has(k2))
-            throw new BackgroundAgentStoreError("agent_record.already_exists", "agent record already exists");
-          let stored = structuredClone(record2);
-          stored.rev = record2.rev ?? 0, this.commit({ t: "put", k: k2, r: stored });
-        });
-      }
-      async get(handle2, scope) {
-        let row2 = this.rows.get(_FileBackgroundAgentStore.key(handle2, scope));
-        return row2 ? structuredClone(row2) : null;
-      }
-      async update(handle2, scope, record2, expect) {
-        let k2 = _FileBackgroundAgentStore.key(handle2, scope);
-        return this.withLock(k2, () => {
-          let live = this.rows.get(k2);
-          if (!live || live.scope !== scope || live.rev !== expect.rev)
-            return !1;
-          let stored = structuredClone(record2);
-          return stored.handle = handle2, stored.scope = scope, stored.rev = live.rev + 1, this.commit({ t: "update", k: k2, r: stored }), !0;
-        });
-      }
-      async updateIf(handle2, scope, record2, expect) {
-        let k2 = _FileBackgroundAgentStore.key(handle2, scope);
-        return this.withLock(k2, async () => {
-          let live = this.rows.get(k2);
-          if (!live || live.scope !== scope || live.rev !== expect.rev || expect.status !== void 0 && live.status !== expect.status || expect.parkedCheckpointToken !== void 0 && (expect.parkedCheckpointToken === null ? live.parkedCheckpointToken !== void 0 : live.parkedCheckpointToken !== expect.parkedCheckpointToken) || expect.parkClaimId !== void 0 && (expect.parkClaimId === null ? live.parkClaimId !== void 0 : live.parkClaimId !== expect.parkClaimId))
-            return !1;
-          let stored = structuredClone(record2);
-          return stored.handle = handle2, stored.scope = scope, stored.rev = live.rev + 1, this.commit({ t: "update", k: k2, r: stored }), !0;
-        });
-      }
-      async listBySession(scope, sessionId, opts) {
-        return queryBackgroundAgents(this.rows.values(), { scope, sessionId, status: opts?.status, limit: opts?.limit });
-      }
-      async listByScope(scope, opts) {
-        return queryBackgroundAgents(this.rows.values(), { scope, status: opts?.status, limit: opts?.limit });
-      }
-      async listScopes() {
-        return [...new Set([...this.rows.values()].map((r) => r.scope))].sort();
-      }
-      async delete(handle2, scope, expect) {
-        let k2 = _FileBackgroundAgentStore.key(handle2, scope);
-        return this.withLock(k2, () => {
-          let live = this.rows.get(k2);
-          return !live || expect !== void 0 && live.rev !== expect.rev ? !1 : (this.commit({ t: "delete", k: k2 }), !0);
-        });
-      }
-      async reap(scope, now2, opts) {
-        if (assertBackgroundAgentReapOptions(opts), !opts || opts.maxAgeMs === void 0 && opts.keep === void 0 && opts.staleRunningMaxAgeMs === void 0)
-          return 0;
-        let changed = /* @__PURE__ */ new Set();
-        if (opts.staleRunningMaxAgeMs !== void 0) {
-          let staleCandidates = [...this.rows.entries()].filter(([, r]) => r.scope === scope && r.status === "running" && now2 - r.updatedAt > opts.staleRunningMaxAgeMs).map(([k2]) => k2);
-          for (let k2 of staleCandidates)
-            await this.withLock(k2, () => {
-              let live = this.rows.get(k2);
-              if (!live || live.status !== "running" || now2 - live.updatedAt <= opts.staleRunningMaxAgeMs)
-                return !1;
-              let next = structuredClone(live);
-              return next.status = "failed", next.stoppedBy = "system", next.summary = next.summary ?? STALE_RUNNING_REAP_ATTRIBUTION, next.error = next.error ?? STALE_RUNNING_REAP_ATTRIBUTION, next.settledAt = now2, next.updatedAt = now2, next.rev = live.rev + 1, this.commit({ t: "update", k: k2, r: next }), !0;
-            }) && changed.add(k2);
-        }
-        let terminal = [...this.rows.entries()].filter(([, r]) => r.scope === scope && r.status !== "running" && r.status !== "parked").sort(([, a], [, b3]) => b3.spawnedAt - a.spawnedAt), doomed = /* @__PURE__ */ new Map();
-        if (opts.maxAgeMs !== void 0)
-          for (let [k2, r] of terminal)
-            (r.settledAt ?? r.spawnedAt) < now2 - opts.maxAgeMs && doomed.set(k2, { byAge: !0 });
-        if (opts.keep !== void 0)
-          for (let [k2] of terminal.slice(Math.max(0, opts.keep)))
-            doomed.has(k2) || doomed.set(k2, { byAge: !1 });
-        for (let [k2, why] of doomed)
-          await this.withLock(k2, () => {
-            let live = this.rows.get(k2);
-            return !live || live.scope !== scope || live.status === "running" || live.status === "parked" || why.byAge && opts.maxAgeMs !== void 0 && (live.settledAt ?? live.spawnedAt) >= now2 - opts.maxAgeMs ? !1 : (this.commit({ t: "delete", k: k2 }), !0);
-          }) && changed.add(k2);
-        return changed.size;
-      }
-      compactNow() {
-        this.ledger.compact();
-      }
-      get size() {
-        return this.rows.size;
-      }
-      close() {
-        this.closed || (this.closed = !0, this.ledger.release());
-      }
-    };
-  }
-});
-
 // node_modules/@sema-agent/core/dist/agents/agent-definition.js
 var init_agent_definition = __esm({
   "node_modules/@sema-agent/core/dist/agents/agent-definition.js"() {
@@ -456187,6 +456676,7 @@ var init_dist10 = __esm({
     init_memory_admission();
     init_retention();
     init_governance_codes();
+    init_governance_codes();
     init_session_store();
     init_session_reconcile();
     init_session4();
@@ -456330,6 +456820,7 @@ var init_dist10 = __esm({
     init_roster_store();
     init_catalog2();
     init_task_registry();
+    init_defaults2();
     init_coordinator();
     init_subagent();
     init_retain_ledger();
@@ -471022,7 +471513,7 @@ function readRestartInflightLine() {
 ${caveat}`, key };
 }
 function EngineRestartConfirm({ onDone }) {
-  let upgrade2 = React131.useSyncExternalStore(subscribeUpgradeState, getUpgradeState), kind = upgrade2.phase === "ready" ? upgrade2.kind ?? "update" : "update", [inflight4, setInflight] = React131.useState(() => readRestartInflightLine());
+  let upgrade2 = React131.useSyncExternalStore(subscribeUpgradeState, getUpgradeState), kind = upgrade2.phase === "ready" ? upgrade2.kind ?? "update" : "update", [inflight3, setInflight] = React131.useState(() => readRestartInflightLine());
   React131.useEffect(() => {
     let t2 = setInterval(() => setInflight(readRestartInflightLine()), 1e3);
     return () => clearInterval(t2);
@@ -471036,7 +471527,7 @@ function EngineRestartConfirm({ onDone }) {
         return;
       }
       let atConfirm = readRestartInflightLine();
-      if (atConfirm.key !== inflight4.key) {
+      if (atConfirm.key !== inflight3.key) {
         setInflight(atConfirm), setNeedsReconfirm(!0);
         return;
       }
@@ -471053,7 +471544,7 @@ function EngineRestartConfirm({ onDone }) {
         }
       );
     },
-    [inflight4.key]
+    [inflight3.key]
   ), options = [
     {
       label: needsReconfirm ? "Yes, restart anyway" : "Yes, restart the engine now",
@@ -471069,9 +471560,9 @@ function EngineRestartConfirm({ onDone }) {
   return /* @__PURE__ */ (0, import_jsx_runtime372.jsx)(PermissionDialog, { title: "Restart engine to apply?", children: /* @__PURE__ */ (0, import_jsx_runtime372.jsxs)(ThemedBox_default, { flexDirection: "column", paddingX: 2, paddingY: 1, children: [
     /* @__PURE__ */ (0, import_jsx_runtime372.jsxs)(ThemedBox_default, { marginBottom: 1, flexDirection: "column", children: [
       /* @__PURE__ */ (0, import_jsx_runtime372.jsx)(ThemedText, { children: restartConfirmSubtitle(kind) }),
-      inflight4.line !== null ? /* @__PURE__ */ (0, import_jsx_runtime372.jsxs)(import_jsx_runtime372.Fragment, { children: [
+      inflight3.line !== null ? /* @__PURE__ */ (0, import_jsx_runtime372.jsxs)(import_jsx_runtime372.Fragment, { children: [
         /* @__PURE__ */ (0, import_jsx_runtime372.jsx)(ThemedText, { children: " " }),
-        /* @__PURE__ */ (0, import_jsx_runtime372.jsx)(ThemedText, { color: "warning", children: inflight4.line })
+        /* @__PURE__ */ (0, import_jsx_runtime372.jsx)(ThemedText, { color: "warning", children: inflight3.line })
       ] }) : null,
       needsReconfirm ? /* @__PURE__ */ (0, import_jsx_runtime372.jsxs)(import_jsx_runtime372.Fragment, { children: [
         /* @__PURE__ */ (0, import_jsx_runtime372.jsx)(ThemedText, { children: " " }),
@@ -478006,6 +478497,9 @@ function askCountdownRow(remainingMs) {
   let total = Math.ceil(remainingMs / 1e3), m2 = Math.floor(total / 60), s = total % 60;
   return `This approval window closes in ${m2 > 0 ? `${String(m2)}m ${String(s).padStart(2, "0")}s` : `${String(s)}s`} \u2014 after that the engine's own policy takes over`;
 }
+function askCountdownIsUrgent(remainingMs) {
+  return !Number.isFinite(remainingMs) || remainingMs <= 0 ? !1 : remainingMs <= ASK_COUNTDOWN_URGENT_MS;
+}
 function askRetractionRow(cause, toolName2) {
   let what = `the approval request for "${toolName2}"`;
   switch (cause) {
@@ -478019,9 +478513,10 @@ function askRetractionRow(cause, toolName2) {
       return `sema: ${what} was taken down (${cause}). Nothing was decided on your behalf here.`;
   }
 }
-var ABSOLUTE_KEYS, RECEIVED_AT_KEYS, SERVER_NOW_KEYS, RELATIVE_MS_KEYS, RELATIVE_SEC_KEYS, init_askWindowCountdown = __esm({
+var ABSOLUTE_KEYS, RECEIVED_AT_KEYS, SERVER_NOW_KEYS, RELATIVE_MS_KEYS, RELATIVE_SEC_KEYS, ASK_COUNTDOWN_URGENT_MS, init_askWindowCountdown = __esm({
   "build-src/src/sema/askWindowCountdown.ts"() {
     ABSOLUTE_KEYS = ["expiresAtMs", "expiresAt", "askExpiresAt", "deadlineAt", "windowEndsAt"], RECEIVED_AT_KEYS = ["receivedAtMs"], SERVER_NOW_KEYS = ["serverNowMs", "serverTimeMs"], RELATIVE_MS_KEYS = ["expiresInMs", "askWindowMs", "windowMs", "ttlMs"], RELATIVE_SEC_KEYS = ["expiresInSec", "askWindowSec", "windowSec", "ttlSec", "ttlSeconds"];
+    ASK_COUNTDOWN_URGENT_MS = 6e4;
   }
 });
 
@@ -478039,8 +478534,10 @@ function AskWindowCountdownRow({
       alive = !1, t2 !== void 0 && clearTimeout(t2);
     };
   }, [expiresAtMs]), expiresAtMs === void 0) return null;
-  let row2 = askCountdownRow(expiresAtMs - now2);
-  return row2 === void 0 ? null : /* @__PURE__ */ (0, import_jsx_runtime404.jsx)(ThemedBox_default, { paddingX: 1, children: /* @__PURE__ */ (0, import_jsx_runtime404.jsx)(ThemedText, { dimColor: !0, children: row2 }) });
+  let remainingMs = expiresAtMs - now2, row2 = askCountdownRow(remainingMs);
+  if (row2 === void 0) return null;
+  let urgent = askCountdownIsUrgent(remainingMs);
+  return /* @__PURE__ */ (0, import_jsx_runtime404.jsx)(ThemedBox_default, { paddingX: 1, children: /* @__PURE__ */ (0, import_jsx_runtime404.jsx)(ThemedText, { dimColor: !urgent, color: urgent ? "warning" : void 0, children: row2 }) });
 }
 var React143, import_jsx_runtime404, init_AskWindowCountdownRow = __esm({
   "build-src/src/components/permissions/AskWindowCountdownRow.tsx"() {
@@ -498361,7 +498858,7 @@ function _temp158() {
 }
 var import_compiler_runtime308, import_react313, SETTINGS_ERRORS_NOTIFICATION_KEY, init_useSettingsErrors = __esm({
   "build-src/src/hooks/notifs/useSettingsErrors.tsx"() {
-    import_compiler_runtime308 = __toESM(require_compiler_runtime(), 1), import_react313 = __toESM(require_react(), 1);
+    import_compiler_runtime308 = __toESM(require_compiler_runtime()), import_react313 = __toESM(require_react());
     init_notifications2();
     init_state();
     init_allErrors();
@@ -512086,11 +512583,15 @@ function shellApprovalCardPort(req) {
       //    ⇒ 整键缺席 ⇒ 卡形与修前逐字节相同。绝不拿 #175 那个 300s 硬编码上去 —— 那是 server
       //    侧随部署可改的旋钮,壳抄一份等于渲一个看起来精确、实际与引擎无关的数字(见
       //    askWindowCountdown.ts 的缺席纪律段)。
-      // ✅ 供给按车道分:design/172 v1 呈卡帧的 **live `tasks/stream` 腿**窗三键端到端在场 ⇒
-      //    这条腿上 `askDeadlineMs` 真解出来、倒计时行与到点撤卡 timer 真起来(见下方 `askDeadlineMs
-      //    !== undefined` 分支);durable 重放腿 / 旧族 `tool_approval` 帧腿 / durable park 腿三处
-      //    仍无窗位供给 ⇒ 那三条腿上这一位仍恒缺席、卡形逐字节不变(逐腿点名见
-      //    askWindowCountdown.ts 头注「车道覆盖」段)。
+      // ✅ 供给按车道分(1.0.88 更新:旧族帧腿由「整腿无窗」改为「按装配点分」):
+      //    · design/172 v1 呈卡帧的 **live `tasks/stream` 腿**窗三键端到端在场 ⇒ 这条腿上
+      //      `askDeadlineMs` 真解出来、倒计时行与到点撤卡 timer 真起来(见下方
+      //      `askDeadlineMs !== undefined` 分支);
+      //    · **旧族 `tool_approval` 帧腿**自 client-core 0.39.0 + 壳 `liveClient.makeHitlDeps` 接线起
+      //      **同样按腿有窗**:live 装配点声明 `windowIsCurrent: true` ⇒ 有窗;durable 装配点与
+      //      park→decide 续流 ⇒ 闸落 ⇒ 无窗;
+      //    · durable 重放腿 / durable park 腿仍无窗位供给 ⇒ 那两条腿上这一位仍恒缺席、卡形逐字节不变。
+      //    逐腿点名与证据见 askWindowCountdown.ts 头注「车道覆盖」段(唯一台账,别在这里抄第二份)。
       ...askDeadlineMs !== void 0 ? { askExpiresAtMs: askDeadlineMs } : {},
       permissionPromptStartTimeMs: Date.now(),
       onUserInteraction() {
@@ -512302,9 +512803,30 @@ function frameSaysExpired(frame) {
   let at = frame.expiresAtMs, srvNow = frame.serverNowMs;
   return typeof at == "number" && Number.isFinite(at) && typeof srvNow == "number" && Number.isFinite(srvNow) ? at <= srvNow : !1;
 }
+function readCoherentEnvelopeWindow(env6) {
+  let inMs = env6.expiresInMs, at = env6.expiresAtMs, srvNow = env6.serverNowMs;
+  if (typeof inMs != "number" || !Number.isFinite(inMs) || typeof at != "number" || !Number.isFinite(at) || typeof srvNow != "number" || !Number.isFinite(srvNow) || at <= 0 || srvNow <= 0) return;
+  let expected = Math.max(0, at - srvNow);
+  if (!(Math.abs(inMs - expected) > ENVELOPE_WINDOW_COHERENCE_TOLERANCE_MS))
+    return { expiresInMs: inMs, expiresAtMs: at, serverNowMs: srvNow };
+}
+function envelopeWindowSaysExpired(w2) {
+  return w2.expiresInMs <= 0 && w2.expiresAtMs <= w2.serverNowMs;
+}
 function askCallKey(askId) {
   return askGateQuestionId(askId);
 }
+function windowKeysFrom(frame, opts) {
+  return opts.windowIsCurrent !== !0 ? {} : {
+    // 🔴 帧**到手**的本地时刻(调用点在任何 await 之前盖的)。读口拿它当本地锚点,
+    //    否则能力位探测(≤1.5s)与 legacy 收尾宽限(750ms)会被**还回**服务端的窗里,
+    //    卡在真实 deadline 之后仍可点(复审)。
+    ...typeof opts.receivedAtMs == "number" && Number.isFinite(opts.receivedAtMs) ? { receivedAtMs: opts.receivedAtMs } : {},
+    ...typeof frame.expiresInMs == "number" && Number.isFinite(frame.expiresInMs) ? { expiresInMs: frame.expiresInMs } : {},
+    ...typeof frame.expiresAtMs == "number" && Number.isFinite(frame.expiresAtMs) ? { expiresAtMs: frame.expiresAtMs } : {},
+    ...typeof frame.serverNowMs == "number" && Number.isFinite(frame.serverNowMs) ? { serverNowMs: frame.serverNowMs } : {}
+  };
+}
 function approvalCardRequestFrom(frame, opts) {
   let card = frame.card, notes = [riskNoteFor(card.risk)];
   card.argsOmitted === !0 && notes.push("arguments omitted by the engine (over the 16 KiB cap) \u2014 this does NOT mean the call has no arguments");
@@ -512328,23 +512850,9 @@ function approvalCardRequestFrom(frame, opts) {
     ...card.delegation !== void 0 ? { delegation: card.delegation } : {},
     ...card.ruleSuggestions !== void 0 && card.ruleSuggestions.length > 0 ? { ruleSuggestions: card.ruleSuggestions } : {},
     ...card.fromSubagent === !0 && typeof card.sourceAgentName == "string" && card.sourceAgentName !== "" ? { workerBadge: { name: cleanForDisplay(card.sourceAgentName, 60), color: "suggestion" } } : {},
-    // 窗三键原样转出([4297] Q2,见函数头注)。
-    // 🔴 逐键**在场才 stamp**:类型面写的是必填,但 wire 是开集、老 worker 可能不发,而
-    //    「缺席 ⇒ 不渲倒计时」正是这一批的成文降级路径 —— 照必填读法合成一个 0 出来会让每张卡
-    //    当场自撤。
-    // 🔴 `windowIsCurrent !== true` ⇒ 三键**整族不转**(复审实撞):账本重放的历史帧
-    //    带的是铸帧时刻的旧余量,拿它算「本地 now + 余量」等于给一只早就过期的 ask 续一个新窗
-    //    (卡复活、倒计时从头走、到点撤卡被推迟)。新旧在帧里读不出来 —— 只有装配点知道自己接的
-    //    是哪条腿,所以判据在那里,而这里的缺省选「不渲」那一边。
-    ...opts.windowIsCurrent === !0 ? {
-      // 🔴 帧**到手**的本地时刻(调用点在任何 await 之前盖的)。读口拿它当本地锚点,
-      //    否则能力位探测(≤1.5s)与 legacy 收尾宽限(750ms)会被**还回**服务端的窗里,
-      //    卡在真实 deadline 之后仍可点(复审)。
-      ...typeof opts.receivedAtMs == "number" && Number.isFinite(opts.receivedAtMs) ? { receivedAtMs: opts.receivedAtMs } : {},
-      ...typeof frame.expiresInMs == "number" && Number.isFinite(frame.expiresInMs) ? { expiresInMs: frame.expiresInMs } : {},
-      ...typeof frame.expiresAtMs == "number" && Number.isFinite(frame.expiresAtMs) ? { expiresAtMs: frame.expiresAtMs } : {},
-      ...typeof frame.serverNowMs == "number" && Number.isFinite(frame.serverNowMs) ? { serverNowMs: frame.serverNowMs } : {}
-    } : {}
+    // 窗三键原样转出([4297] Q2,见函数头注)——投影判据单源在 `windowKeysFrom`(通用卡腿共用
+    // 同一口;两腿各抄一份就是同形存量)。
+    ...windowKeysFrom(frame, opts)
   };
 }
 function genericCardRequestFrom(env6, askId, opts) {
@@ -512356,7 +512864,14 @@ function genericCardRequestFrom(env6, askId, opts) {
     args: typeof card.args == "object" && card.args !== null ? card.args : {},
     callKey: askCallKey(askId),
     ...opts.signal !== void 0 ? { signal: opts.signal } : {},
-    wireNote: notes.join(" \xB7 ")
+    wireNote: notes.join(" \xB7 "),
+    // 窗三键(见函数头注)——**先验自洽再投影**;验不过 ⇒ 整族不转(连本地锚点 `receivedAtMs` 都不盖:
+    // 一个没有窗的卡上留个孤零零的锚点只会让下一棒以为这里有窗)⇒ 卡形与修前逐字节相同。
+    // 投影口本身与 v1 腿同源(`windowKeysFrom`:新鲜度门 / 逐键在场 / 本地锚点三条纪律不重写一遍)。
+    ...(() => {
+      let w2 = readCoherentEnvelopeWindow(env6);
+      return w2 === void 0 ? {} : windowKeysFrom(w2, opts);
+    })()
   };
 }
 function defaultNotify(text2) {
@@ -512396,10 +512911,10 @@ async function* consumeStreamApprovalFrames(events3, deps2, opts = {}) {
       "a stream-approval frame arrived while this worker reports streamApproval=false (stale read / failed probe / genuine disagreement \u2014 indistinguishable here). Servicing it anyway: forwarding it downstream would DROP it, and this frame may be the only carrier of a pending card."
     ), !0;
   }
-  let card = deps2.surfaceCard ?? surfaceApprovalCard, notify5 = deps2.notify ?? defaultNotify, surfaceNote = deps2.surfaceDecisionNote ?? defaultSurfaceDecisionNote, legacyClaimed = /* @__PURE__ */ new Set(), legacySettled = /* @__PURE__ */ new Set(), handled = /* @__PURE__ */ new Set(), live = /* @__PURE__ */ new Map(), inflight4 = /* @__PURE__ */ new Set(), torn = !1, track2 = (p) => {
+  let card = deps2.surfaceCard ?? surfaceApprovalCard, notify5 = deps2.notify ?? defaultNotify, surfaceNote = deps2.surfaceDecisionNote ?? defaultSurfaceDecisionNote, legacyClaimed = /* @__PURE__ */ new Set(), legacySettled = /* @__PURE__ */ new Set(), handled = /* @__PURE__ */ new Set(), live = /* @__PURE__ */ new Map(), inflight3 = /* @__PURE__ */ new Set(), torn = !1, track2 = (p) => {
     let guarded = p.catch(() => {
     });
-    inflight4.add(guarded), guarded.finally(() => inflight4.delete(guarded));
+    inflight3.add(guarded), guarded.finally(() => inflight3.delete(guarded));
   };
   try {
     for await (let ev of events3) {
@@ -512430,8 +512945,8 @@ async function* consumeStreamApprovalFrames(events3, deps2, opts = {}) {
   } finally {
     torn = !0;
     for (let c2 of live.values()) c2.abort.abort();
-    live.clear(), inflight4.size > 0 && await Promise.race([
-      Promise.allSettled([...inflight4]),
+    live.clear(), inflight3.size > 0 && await Promise.race([
+      Promise.allSettled([...inflight3]),
       new Promise((r) => setTimeout(r, TEARDOWN_BUDGET_MS))
     ]);
   }
@@ -512463,7 +512978,8 @@ async function* consumeStreamApprovalFrames(events3, deps2, opts = {}) {
         `approval_request ask=${cleanForDisplay(askId, 64)}: the legacy leg saw approvalId=${cleanForDisplay(approvalId, 64)} but never settled it (wrong replica / dropped connection is exactly this path) \u2014 running the durable CAS route`
       );
     }
-    if (v1 !== void 0 && frameSaysExpired(v1)) {
+    let envWindow = v1 === void 0 ? readCoherentEnvelopeWindow(raw2) : void 0;
+    if (v1 !== void 0 ? frameSaysExpired(v1) : envWindow !== void 0 && envelopeWindowSaysExpired(envWindow)) {
       release2(), logging(
         `approval_request ask=${cleanForDisplay(askId, 64)} arrived already expired per its own window (expiresInMs=0 / expiresAtMs<=serverNowMs) \u2014 no card is raised (a card that can only ever return 404 is worse than no card)`
       );
@@ -512484,7 +513000,14 @@ async function* consumeStreamApprovalFrames(events3, deps2, opts = {}) {
             // 复审:本地锚点取**帧到手**那一刻(下面 await 掉的时间不还给窗)。
             receivedAtMs
           })
-        ) : await card(genericCardRequestFrom(raw2, askId, { signal: abort.signal }));
+        ) : await card(
+          genericCardRequestFrom(raw2, askId, {
+            signal: abort.signal,
+            // #324 件①:窗三键是信封级的 ⇒ 未知 card 形照样有窗。判据与 v1 腿逐字同源。
+            windowIsCurrent: opts.windowIsCurrent === !0,
+            receivedAtMs
+          })
+        );
       } catch (e) {
         logForDebugging(`[sema][wire] stream-approval card raise failed (fail-soft, engine window still governs): ${String(e)}`);
         return;
@@ -512642,7 +513165,7 @@ async function* consumeStreamApprovalFrames(events3, deps2, opts = {}) {
     logForDebugging(`[sema][wire] ${line}`);
   }
 }
-var STREAM_APPROVAL_CAP, ASK_DECISION_DISABLED_CODE, IDEMPOTENCY_KEY_MAX, PARKING_POLL_MAX, PARKING_POLL_DELAY_MS, CAPS_SETTLE_BUDGET_MS, LEGACY_SETTLE_GRACE_MS, MAX_DECISION_NOTE_CHARS, TEARDOWN_BUDGET_MS, TYPED_NAME_TO_KIND, NOTICE_KEY2, init_approvalStreamWire = __esm({
+var STREAM_APPROVAL_CAP, ASK_DECISION_DISABLED_CODE, IDEMPOTENCY_KEY_MAX, PARKING_POLL_MAX, PARKING_POLL_DELAY_MS, CAPS_SETTLE_BUDGET_MS, LEGACY_SETTLE_GRACE_MS, MAX_DECISION_NOTE_CHARS, TEARDOWN_BUDGET_MS, TYPED_NAME_TO_KIND, ENVELOPE_WINDOW_COHERENCE_TOLERANCE_MS, NOTICE_KEY2, init_approvalStreamWire = __esm({
   "build-src/src/sema/approvalStreamWire.ts"() {
     init_dist();
     init_debug();
@@ -512660,6 +513183,7 @@ var STREAM_APPROVAL_CAP, ASK_DECISION_DISABLED_CODE, IDEMPOTENCY_KEY_MAX, PARKIN
       ["AskParkingError", "parking"],
       ["FeatureDisabledError", "ask-lane-disabled"]
     ]);
+    ENVELOPE_WINDOW_COHERENCE_TOLERANCE_MS = 1e3;
     NOTICE_KEY2 = "stream-approval";
   }
 });
@@ -513298,33 +513822,40 @@ function createLiveConversationClient(config4) {
       }
     );
     return body.persistRule !== void 0 && surfaceRulePersistOutcome(ack), ack;
-  }, baseUrlTrimmed = config4.baseUrl.replace(/\/+$/, ""), hitlDeps = {
-    client: client3,
-    // 🔴 续流也要经登记级(对抗复审轮4 H3 实撞)**与流内审批级**(1.0.74 终扫 P2-2/P2-3):
-    //    HITL 桥在 park→decide 之后把内部流**换成**这条 `runsEvents` 的返回值 —— 只包住最初的
-    //    source 等于漏掉整条续流。台账级漏 = 子代若在批准之后才起、或首个 tick 落在续流里,
-    //    详情面的「继续」入口被永久藏起来;审批级漏 = park 之后续流上到达的 approval_request /
-    //    approval_revoke 帧无人消费(投影器只有 dropped 一条路)。两层组合收在
-    //    composeHitlContinuationEvents(与主管道同序同参数形,台账取舍见其头注)。
-    //    这里的 run id 是**本次 attach 的 taskId**,天然流局部。
-    runsEvents: (taskId, opts) => (
-      // session 与**这次 attach 实际发出去的那个值**同源(下面 spread 的同一次求值),不是逐帧现读。
-      ((sessionSpread) => composeHitlContinuationEvents(client3.runs.events(taskId, { ...opts, ...sessionSpread }), {
+  }, baseUrlTrimmed = config4.baseUrl.replace(/\/+$/, ""), makeHitlDeps = (lane) => {
+    let windowIsCurrent = lane.windowIsCurrent;
+    return {
+      client: client3,
+      // 🔴 续流也要经登记级(对抗复审轮4 H3 实撞)**与流内审批级**(1.0.74 终扫 P2-2/P2-3):
+      //    HITL 桥在 park→decide 之后把内部流**换成**这条 `runsEvents` 的返回值 —— 只包住最初的
+      //    source 等于漏掉整条续流。台账级漏 = 子代若在批准之后才起、或首个 tick 落在续流里,
+      //    详情面的「继续」入口被永久藏起来;审批级漏 = park 之后续流上到达的 approval_request /
+      //    approval_revoke 帧无人消费(投影器只有 dropped 一条路)。两层组合收在
+      //    composeHitlContinuationEvents(与主管道同序同参数形,台账取舍见其头注)。
+      //    这里的 run id 是**本次 attach 的 taskId**,天然流局部。
+      runsEvents: (taskId, opts) => (windowIsCurrent = !1, ((sessionSpread) => composeHitlContinuationEvents(client3.runs.events(taskId, { ...opts, ...sessionSpread }), {
         taskId,
         ownerSessionId: sessionSpread.session,
         approvalDeps: approvalStreamDeps,
         ...opts?.signal ? { signal: opts.signal } : {}
-      }))(engineSessionParamSpread())
-    ),
-    respondToolApproval,
-    // #229 respond-note 供给链(A-029.12 件3):帧腿车道参数 —— 包编排层的 note 门读
-    // `approvalDecisionNoteCapable`,缺席 = fail-closed 到「不发」侧,note 在 cli 恒死件。
-    // 供给 = caps 缓存的 `approvalDecisionNote` 位(server ≥7.15.0 硬编码 true 的版本探测位;
-    // per-call 真值归 ack.noteRecorded,A-029.9 消费面另批)。getter 按**读取时刻**取值:
-    // caps 探测是 boot 期 fire-and-forget 的,构造时 stamp 布尔会把「探测在飞」冻成永久 false。
-    get approvalLane() {
-      return { approvalDecisionNoteCapable: engineCapTrue(config4.baseUrl, "approvalDecisionNote") };
-    }
+      }))(engineSessionParamSpread())),
+      respondToolApproval,
+      // #229 respond-note 供给链(A-029.12 件3):帧腿车道参数 —— 包编排层的 note 门读
+      // `approvalDecisionNoteCapable`,缺席 = fail-closed 到「不发」侧,note 在 cli 恒死件。
+      // 供给 = caps 缓存的 `approvalDecisionNote` 位(server ≥7.15.0 硬编码 true 的版本探测位;
+      // per-call 真值归 ack.noteRecorded,A-029.9 消费面另批)。getter 按**读取时刻**取值:
+      // caps 探测是 boot 期 fire-and-forget 的,构造时 stamp 布尔会把「探测在飞」冻成永久 false。
+      // 🔴 `windowIsCurrent` 同理必须走 getter:闩是在 `runsEvents` 里落的,构造时 stamp 布尔
+      //    等于把开流那一刻的值冻死,续流之后照旧过境三键(= 没修)。
+      get approvalLane() {
+        return {
+          approvalDecisionNoteCapable: engineCapTrue(config4.baseUrl, "approvalDecisionNote"),
+          // 🔴 只在真为 live 时**显式**声明;false 也如实写出去(包侧 `!== true` 读法两者等价,
+          //    但显式 false 让「这条腿判过了」在 diff 与 census 上可见,不与「忘了传」同形)。
+          windowIsCurrent
+        };
+      }
+    };
   }, approvalStreamDeps = {
     decide: {
       // C4([3777] 第 5 层):传输层失败退避重试。**幂等键复用是这条腿的全部前提** —— `body`
@@ -513437,7 +513968,10 @@ function createLiveConversationClient(config4) {
                       }
                     )
                   ),
-                  hitlDeps,
+                  // legacy `tool_approval` 帧腿的车道:**live 装配点** ⇒ 窗三键过境(归属判据与上面
+                  // 孪生族那一位同源,逐条见 makeHitlDeps 头注)。park→decide 续流上的重放帧由工厂
+                  // 内那枚每流闩自动降位,不靠这里第二次判断。
+                  makeHitlDeps({ windowIsCurrent: !0 }),
                   {
                     ...opts?.signal ? { signal: opts.signal } : {}
                   }
@@ -513486,7 +514020,10 @@ function createLiveConversationClient(config4) {
                     { ...opts?.signal ? { signal: opts.signal } : {} }
                   )
                 ),
-                hitlDeps,
+                // legacy `tool_approval` 帧腿的车道:**durable 重放装配点** ⇒ 窗三键**不**过境。
+                // 与上面 `consumeStreamApprovalFrames` 在本腿刻意不传同名 opt 是同一条判据的两半
+                // (孪生族与包腿同口径);这里写显式 `false` 而不是省略,好让「判过了」可见。
+                makeHitlDeps({ windowIsCurrent: !1 }),
                 {
                   taskId,
                   ...opts?.signal ? { signal: opts.signal } : {}
@@ -514284,6 +514821,7 @@ async function* ask(params) {
   }), finalResultText, lastAssistantUuid = "", markedInflight = !!process.env.SEMA_LIVE_BASEURL;
   markedInflight && markTurnInflight();
   try {
+    let emittedNoticeKeys = /* @__PURE__ */ new Set();
     for await (let msg of sdk) {
       if (signal?.aborted) break;
       let t2 = msg.type;
@@ -514294,16 +514832,32 @@ async function* ask(params) {
       }
       if (!(t2 === "retry_status" || t2 === "turn_usage" || t2 === "task_progress" || t2 === "steering_injected")) {
         if (t2 === "human_input") {
-          let hi = msg, clean8 = (v2) => (
-            // eslint-disable-next-line no-control-regex
-            String(v2 ?? "").replace(/[\x00-\x1f\x7f]/g, ".").slice(0, 120)
-          ), who = hi.actor?.id ? `${clean8(hi.actor.id)}${hi.actor.hostAsserted === !0 ? "" : " (unverified)"}` : "unattributed";
+          let hi = msg, clean8 = (v2) => cleanUntrustedForDisplay(v2, 120), who = hi.actor?.id ? `${clean8(hi.actor.id)}${hi.actor.hostAsserted === !0 ? "" : " (unverified)"}` : "unattributed";
           logForDebugging(
             `[sema][print] human_input ledger frame (audit): carrier=${clean8(hi.carrier)} eventId=${clean8(hi.eventId)} by=${who}`
           );
           continue;
         }
         if (!(t2 === "diagnostics" || t2 === "workspace_changed")) {
+          if (t2 === "engine_notice") {
+            let en2 = msg, clean8 = (v2) => cleanUntrustedForDisplay(v2, 160), detailText = "";
+            try {
+              detailText = en2.detail === void 0 ? "" : cleanUntrustedForDisplay(JSON.stringify(en2.detail), 400);
+            } catch {
+              detailText = "(unserializable)";
+            }
+            logForDebugging(
+              `[sema][print] engine_notice swallowed (audit; no stdout parity frame \u2014 see [4429]/#302): code=${clean8(en2.code)} eventId=${clean8(en2.eventId)} eventSeq=${clean8(en2.eventSeq)} ts=${clean8(en2.ts)} sessionId=${clean8(en2.sessionId)} message=${clean8(en2.message)} detail=${detailText}`
+            );
+            let noticeKey = `${clean8(en2.eventId)}|${clean8(en2.eventSeq)}|${clean8(en2.code)}`;
+            if (!emittedNoticeKeys.has(noticeKey)) {
+              emittedNoticeKeys.add(noticeKey);
+              let msgPart = en2.message === void 0 ? "" : ` \u2014 ${clean8(en2.message)}`;
+              process.stderr.write(`[sema] engine notice: ${clean8(en2.code)}${msgPart}
+`);
+            }
+            continue;
+          }
           if (t2 === "prompt_suggestions") {
             let list = msg.suggestions;
             if (Array.isArray(list)) {
@@ -514490,6 +515044,7 @@ var client2, clientExplicitlySet2, printNotifiedKeys, init_seamQueryEngine = __e
     init_dist();
     init_deferSessionExemption();
     init_debug();
+    init_untrustedDisplayText();
     init_dist();
     init_dist();
     init_dist();
@@ -528176,8 +528731,7 @@ function ModelHubBody({
                   }
                   rr.renamedTo && (renamed = rr.renamedTo);
                 }
-                renamed && requestEngineConfigRespawn().catch(() => {
-                }), nav2.pop();
+                renamed && pendingRestartLaneAvailable() && notePendingEngineRestart("config", "catalog"), nav2.pop();
               }
             }),
             () => readEdit?.() ?? null,
@@ -528320,7 +528874,7 @@ var React192, import_jsx_runtime504, clampShown, hostOf5, SUPPORTED_CHANNELS, AD
     init_modelCtxOverride();
     init_modelChannels();
     init_rosterStore();
-    init_engineEndpointSwap();
+    init_engineUpgradeCoordinator();
     init_tierStore();
     init_KeybindingContext();
     init_catalogScreens();
@@ -531749,7 +532303,7 @@ Usage: sema --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("sema 1.0.87", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
+  }).version("sema 1.0.88", "-v, --version", "Output the version number"), program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)"), program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux."), canUserConfigureAdvisor() && program2.addOption(new Option("--advisor <model>", "Enable the server-side advisor tool with the specified model (alias or full ID).").hideHelp()), program2.addOption(new Option("--bg, --background", "Start the session as a background agent and return immediately (manage with `sema agents`)")), program2.command("ps").description("List background sessions").action(async () => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).psHandler([]), process.exit(process.exitCode ?? 0);
   }), program2.command("logs [id]").description("Print a background session's recent terminal output").action(async (id) => {
     await (await Promise.resolve().then(() => (init_bg2(), bg_exports))).logsHandler(id, []), process.exit(process.exitCode ?? 0);
@@ -532825,9 +533379,6 @@ var React202, import_jsx_runtime517, ALL_INTERFACES_BIND_HOST, init_BindHostFiel
 // build-src/src/sema/config/EngineScreen.tsx
 import { readFileSync as readFileSync61 } from "node:fs";
 import { join as join211 } from "node:path";
-function localEngineLane() {
-  return !process.env.SEMA_LIVE_BASEURL && process.env.SEMA_TOC_ENGINE !== "0";
-}
 function settingsEnv2() {
   try {
     let sj = JSON.parse(
@@ -532873,7 +533424,7 @@ function portEditScreen() {
         return;
       }
       let err8 = applyEnginePort(p);
-      !err8 && localEngineLane() && notePendingEngineRestart("config"), saveNotice = err8 ? `failed to save port: ${err8.message}` : localEngineLane() ? `port ${p} saved to settings.json \u2014 the open session shows an engine-restart banner \u2014 press ctrl+u there to apply` : `port ${p} saved to settings.json \u2014 takes effect the next time a local engine is spawned (this session is attached to an external engine or engine autostart is off)`;
+      !err8 && pendingRestartLaneAvailable() && notePendingEngineRestart("config"), saveNotice = err8 ? `failed to save port: ${err8.message}` : pendingRestartLaneAvailable() ? `port ${p} saved to settings.json \u2014 the open session shows an engine-restart banner \u2014 press ctrl+u there to apply` : `port ${p} saved to settings.json \u2014 takes effect the next time a local engine is spawned (this session is not managing a local engine \u2014 attached to an external one, autostart off, or run as a standalone config command)`;
     }
   });
 }
@@ -532888,7 +533439,7 @@ function bindHostEditScreen() {
           current: configuredBindHost().host,
           onSubmit: (host) => {
             let err8 = applyEngineBindHost(host);
-            !err8 && localEngineLane() && notePendingEngineRestart("config"), saveNotice = err8 ? `failed to save bind address: ${err8.message}` : host === null ? localEngineLane() ? `bind address back to default ${DEFAULT_BIND_HOST} (key removed from settings.json) \u2014 the open session shows an engine-restart banner \u2014 press ctrl+u there to apply` : `bind address back to default ${DEFAULT_BIND_HOST} (key removed from settings.json) \u2014 takes effect the next time a local engine is spawned (this session is attached to an external engine or engine autostart is off)` : localEngineLane() ? `bind address ${host} saved to settings.json \u2014 the open session shows an engine-restart banner \u2014 press ctrl+u there to apply` : `bind address ${host} saved to settings.json \u2014 takes effect the next time a local engine is spawned (this session is attached to an external engine or engine autostart is off)`, nav.pop();
+            !err8 && pendingRestartLaneAvailable() && notePendingEngineRestart("config"), saveNotice = err8 ? `failed to save bind address: ${err8.message}` : host === null ? pendingRestartLaneAvailable() ? `bind address back to default ${DEFAULT_BIND_HOST} (key removed from settings.json) \u2014 the open session shows an engine-restart banner \u2014 press ctrl+u there to apply` : `bind address back to default ${DEFAULT_BIND_HOST} (key removed from settings.json) \u2014 takes effect the next time a local engine is spawned (this session is not managing a local engine \u2014 attached to an external one, autostart off, or run as a standalone config command)` : pendingRestartLaneAvailable() ? `bind address ${host} saved to settings.json \u2014 the open session shows an engine-restart banner \u2014 press ctrl+u there to apply` : `bind address ${host} saved to settings.json \u2014 takes effect the next time a local engine is spawned (this session is not managing a local engine \u2014 attached to an external one, autostart off, or run as a standalone config command)`, nav.pop();
           }
         }
       )
@@ -532933,7 +533484,7 @@ function readFaceEditScreen() {
               return;
             }
             let effective = configuredEngineReadFace(getClaudeConfigHomeDir());
-            effective.face === face && localEngineLane() && notePendingEngineRestart("config"), saveNotice = effective.face !== face ? `read face ${face} saved to settings.json \u2014 but the READ_FACE environment variable (${effective.face}) overrides it, so the engine stays "${effective.face}". Unset READ_FACE and relaunch sema to let this setting take effect.` : face === "open" ? localEngineLane() ? "read face back to default open \u2014 the whole filesystem is readable (key removed from settings.json); the open session shows an engine-restart banner \u2014 press ctrl+u there to apply" : "read face back to default open (key removed from settings.json) \u2014 takes effect the next time a local engine is spawned (this session is attached to an external engine or engine autostart is off)" : localEngineLane() ? "read face roots saved to settings.json \u2014 the engine reads only the workspace root plus declared read-only roots; the open session shows an engine-restart banner \u2014 press ctrl+u there to apply" : "read face roots saved to settings.json \u2014 takes effect the next time a local engine is spawned (this session is attached to an external engine or engine autostart is off)", nav.pop();
+            effective.face === face && pendingRestartLaneAvailable() && notePendingEngineRestart("config"), saveNotice = effective.face !== face ? `read face ${face} saved to settings.json \u2014 but the READ_FACE environment variable (${effective.face}) overrides it, so the engine stays "${effective.face}". Unset READ_FACE and relaunch sema to let this setting take effect.` : face === "open" ? pendingRestartLaneAvailable() ? "read face back to default open \u2014 the whole filesystem is readable (key removed from settings.json); the open session shows an engine-restart banner \u2014 press ctrl+u there to apply" : "read face back to default open (key removed from settings.json) \u2014 takes effect the next time a local engine is spawned (this session is not managing a local engine \u2014 attached to an external one, autostart off, or run as a standalone config command)" : pendingRestartLaneAvailable() ? "read face roots saved to settings.json \u2014 the engine reads only the workspace root plus declared read-only roots; the open session shows an engine-restart banner \u2014 press ctrl+u there to apply" : "read face roots saved to settings.json \u2014 takes effect the next time a local engine is spawned (this session is not managing a local engine \u2014 attached to an external one, autostart off, or run as a standalone config command)", nav.pop();
           }
         }
       )
@@ -534054,11 +534605,11 @@ function wrapWorkflowDetailWithLiveActivity(base, opts) {
   ensureWorkflowActivityLedger(opts);
   let baseSubscribe = base.subscribe?.bind(base);
   function mergeSnapshot(snap) {
-    let ledger = readWorkflowActivityLedger(opts.workflowId);
-    if (!snap || !ledger || ledger.byCallKey.size === 0 && ledger.byLabel.size === 0) return snap;
+    let ledger2 = readWorkflowActivityLedger(opts.workflowId);
+    if (!snap || !ledger2 || ledger2.byCallKey.size === 0 && ledger2.byLabel.size === 0) return snap;
     let touched = !1, phases = snap.phases.map((ph) => {
       let agents3 = ph.agents.map((a) => {
-        let acc = a.callKey !== void 0 ? ledger.byCallKey.get(a.callKey) : a.label ? ledger.byLabel.get(a.label) : void 0;
+        let acc = a.callKey !== void 0 ? ledger2.byCallKey.get(a.callKey) : a.label ? ledger2.byLabel.get(a.label) : void 0;
         if (!acc) return a;
         let patch2 = {};
         return a.toolCalls == null && acc.toolCalls > 0 && (patch2.toolCalls = acc.toolCalls), (a.activity == null || a.activity.length === 0) && acc.activity.length > 0 && (patch2.activity = acc.activity, acc.lastToolName !== void 0 && a.lastToolName == null && (patch2.lastToolName = acc.lastToolName, acc.lastToolSummary !== void 0 && (patch2.lastToolSummary = acc.lastToolSummary))), a.model == null && acc.requestedModel !== void 0 && (patch2.model = acc.requestedModel), a.fallbackModel == null && acc.resolvedModel !== void 0 && (patch2.fallbackModel = acc.resolvedModel), acc.lastProgressAt !== void 0 && (a.lastProgressAt == null || acc.lastProgressAt > a.lastProgressAt) && (patch2.lastProgressAt = acc.lastProgressAt), Object.keys(patch2).length === 0 ? a : (touched = !0, { ...a, ...patch2 });
@@ -536664,9 +537215,9 @@ var IDLE_EXIT_MS, DISPATCH_SCAN_MS, DAEMON_LOG_ROTATE_BYTES, ADOPTED_SWEEP_MS, C
           let seen2 = this.seenNonces.get(nonce);
           if (seen2) return seen2;
         }
-        let keys2 = [`short:${job.short}`, ...nonce ? [`nonce:${nonce}`] : []], inflight4 = keys2.map((k2) => this.inflightDispatches.get(k2)).find(Boolean);
-        if (inflight4) {
-          let outcome = await inflight4;
+        let keys2 = [`short:${job.short}`, ...nonce ? [`nonce:${nonce}`] : []], inflight3 = keys2.map((k2) => this.inflightDispatches.get(k2)).find(Boolean);
+        if (inflight3) {
+          let outcome = await inflight3;
           return nonce && this.seenNonces.set(nonce, outcome), outcome;
         }
         let flight = (async () => {
@@ -537800,6 +538351,16 @@ async function launchReplProduction() {
           } catch {
           }
         })(), engineHealthLoop = startHealthCheckLoop2(instance2, (reason) => {
+          if (reason === "configDriftResolved") {
+            (async () => {
+              try {
+                let { retractHeartbeatConfigPending: retractHeartbeatConfigPending2 } = await Promise.resolve().then(() => (init_engineUpgradeCoordinator(), engineUpgradeCoordinator_exports));
+                retractHeartbeatConfigPending2();
+              } catch {
+              }
+            })();
+            return;
+          }
           if (reason !== "configDrift" && reason !== "versionDrift") {
             console.error(`[sema] local engine ${reason} \u2014 auto-restarting (limited retries), session preserved`), (async () => {
               try {
@@ -537814,7 +538375,10 @@ async function launchReplProduction() {
           (async () => {
             try {
               let { notePendingEngineRestart: notePendingEngineRestart2 } = await Promise.resolve().then(() => (init_engineUpgradeCoordinator(), engineUpgradeCoordinator_exports));
-              notePendingEngineRestart2(reason === "configDrift" ? "config" : "update");
+              notePendingEngineRestart2(
+                reason === "configDrift" ? "config" : "update",
+                reason === "configDrift" ? "heartbeat-config" : "heartbeat-version"
+              );
             } catch {
             }
           })();
@@ -537855,31 +538419,6 @@ async function launchReplProduction() {
             });
           } catch {
           }
-          try {
-            let { registerEngineConfigRespawn: registerEngineConfigRespawn2 } = await Promise.resolve().then(() => (init_engineEndpointSwap(), engineEndpointSwap_exports));
-            registerEngineConfigRespawn2(async () => {
-              engineHealthLoop?.stop();
-              let rr = await respawnOnConfigDrift2(currentEngineInstance);
-              if (!(rr.baseUrl && rr.instance))
-                return console.error(`[sema] /model endpoint respawn failed (${rr.reason ?? "unknown"}) \u2014 REPL stays up`), !1;
-              let { createLiveConversationClient: createLiveConversationClient2 } = await Promise.resolve().then(() => (init_liveClient(), liveClient_exports)), { setSeamClient: setSeamClient2 } = await Promise.resolve().then(() => (init_seamQuery(), seamQuery_exports)), { setQueryEngineClient: setQueryEngineClient2 } = await Promise.resolve().then(() => (init_seamQueryEngine(), seamQueryEngine_exports)), { resolveLiveAuthToken: resolveLiveAuthToken2 } = await Promise.resolve().then(() => (init_engineTarget(), engineTarget_exports)), swapClient = createLiveConversationClient2({
-                baseUrl: rr.baseUrl,
-                authToken: resolveLiveAuthToken2(rr.baseUrl),
-                // #118:同上,零 'anon' 占位符
-                principal: resolveLivePrincipal(),
-                afterEngineRespawn: !0
-                // 同上:换端点的温切也是换进程,caps 必须对新引擎重探
-              });
-              setSeamClient2(swapClient), setQueryEngineClient2(swapClient), installEngineHealthLoop(rr.instance);
-              try {
-                let { noteEngineReplacedExternally: noteEngineReplacedExternally2 } = await Promise.resolve().then(() => (init_engineUpgradeCoordinator(), engineUpgradeCoordinator_exports));
-                noteEngineReplacedExternally2();
-              } catch {
-              }
-              return console.error(`[sema] engine respawned onto the picked model's endpoint at ${rr.baseUrl} \u2014 session intact`), !0;
-            });
-          } catch {
-          }
           try {
             let { initEngineUpgradeCoordinator: initEngineUpgradeCoordinator2 } = await Promise.resolve().then(() => (init_engineUpgradeCoordinator(), engineUpgradeCoordinator_exports)), { resolveEngineEntry: resolveEngineEntry2, respawnOnConfigDrift: warmRespawn, getServiceAuthToken: tokenAfterRespawn } = await Promise.resolve().then(() => (init_engineLifecycleManager(), engineLifecycleManager_exports)), entry = resolveEngineEntry2(), entryFile = entry?.args[entry.args.length - 1];
             entryFile && initEngineUpgradeCoordinator2({