@cnwenf/occ 2.1.301 → 2.1.303

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env bun
-globalThis.MACRO={"VERSION":"2.1.301","BINARY_NAME":"occ","BUILD_TIME":"2026-08-14T18:51:25.355Z","FEEDBACK_CHANNEL":"","ISSUES_EXPLAINER":"","NATIVE_PACKAGE_URL":"","PACKAGE_URL":"@cnwenf/occ","VERSION_CHANGELOG":""};
+globalThis.MACRO={"VERSION":"2.1.303","BINARY_NAME":"occ","BUILD_TIME":"2026-08-16T18:17:52.609Z","FEEDBACK_CHANNEL":"","ISSUES_EXPLAINER":"","NATIVE_PACKAGE_URL":"","PACKAGE_URL":"@cnwenf/occ","VERSION_CHANGELOG":""};
 // @bun
 var __create = Object.create;
 var __getProtoOf = Object.getPrototypeOf;
@@ -201253,6 +201253,70 @@ var init_dist8 = __esm(() => {
   init_platform4();
 });
 
+// src/utils/oauthLoginExpiry.ts
+function computeOAuthLoginExpiry(tokens, context4, now2 = Date.now()) {
+  if (!context4.providerIsFirstParty || !context4.isClaudeAISubscriber) {
+    return null;
+  }
+  if (!tokens || typeof tokens.refreshTokenExpiresAt !== "number") {
+    return null;
+  }
+  const refreshTokenExpiresAt = tokens.refreshTokenExpiresAt;
+  if (typeof tokens.expiresAt === "number" && tokens.expiresAt > refreshTokenExpiresAt + LOGIN_EXPIRY_WARN_WINDOW_MS) {
+    return null;
+  }
+  const remaining = refreshTokenExpiresAt - now2;
+  if (remaining > LOGIN_EXPIRY_WARN_WINDOW_MS || remaining <= 0) {
+    return null;
+  }
+  return { daysLeft: Math.ceil(remaining / MS_PER_DAY) };
+}
+function getOAuthLoginExpiryInfo() {
+  return computeOAuthLoginExpiry(getClaudeAIOAuthTokens(), {
+    providerIsFirstParty: getAPIProvider() === "firstParty",
+    isClaudeAISubscriber: isClaudeAISubscriber()
+  });
+}
+function pluralize2(count3, noun) {
+  return count3 === 1 ? noun : `${noun}s`;
+}
+var MS_PER_DAY = 86400000, LOGIN_EXPIRY_WARN_WINDOW_MS;
+var init_oauthLoginExpiry = __esm(() => {
+  init_providers();
+  init_auth6();
+  LOGIN_EXPIRY_WARN_WINDOW_MS = 3 * MS_PER_DAY;
+});
+
+// src/tools/WebFetchTool/cacheTtl.ts
+function getWebFetchCacheTtlMs() {
+  return cachedWebFetchCacheTtlMs ??= (() => {
+    const raw = process.env.CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS;
+    if (raw === undefined) {
+      return DEFAULT_WEBFETCH_CACHE_TTL_MS;
+    }
+    if (!/^[+-]?\d+$/.test(raw.trim())) {
+      return DEFAULT_WEBFETCH_CACHE_TTL_MS;
+    }
+    const parsed = parseEnvInt(raw);
+    if (parsed === undefined || !Number.isFinite(parsed)) {
+      return DEFAULT_WEBFETCH_CACHE_TTL_MS;
+    }
+    if (parsed < 1) {
+      return DEFAULT_WEBFETCH_CACHE_TTL_MS;
+    }
+    return parsed;
+  })();
+}
+function getWebFetchCacheTtlDescription() {
+  const minutes = Math.max(1, Math.round(getWebFetchCacheTtlMs() / 60000));
+  return `${minutes} ${pluralize2(minutes, "minute")}`;
+}
+var DEFAULT_WEBFETCH_CACHE_TTL_MS = 900000, cachedWebFetchCacheTtlMs;
+var init_cacheTtl = __esm(() => {
+  init_envValidation();
+  init_oauthLoginExpiry();
+});
+
 // src/tools/WebFetchTool/prompt.ts
 function makeSecondaryModelPrompt(markdownContent, prompt, isPreapprovedDomain) {
   const guidelines = isPreapprovedDomain ? `Provide a concise response based on the content above. Include relevant details, code examples, and documentation excerpts as needed.` : `Provide a concise response based only on the content above. In your response:
@@ -201271,7 +201335,10 @@ ${prompt}
 ${guidelines}
 `;
 }
-var WEB_FETCH_TOOL_NAME = "WebFetch", DESCRIPTION5 = `
+var WEB_FETCH_TOOL_NAME = "WebFetch", DESCRIPTION5;
+var init_prompt6 = __esm(() => {
+  init_cacheTtl();
+  DESCRIPTION5 = `
 - Fetches content from a specified URL and processes it using an AI model
 - Takes a URL and a prompt as input
 - Fetches the URL content, converts HTML to markdown
@@ -201286,10 +201353,11 @@ Usage notes:
   - The prompt should describe what information you want to extract from the page
   - This tool is read-only and does not modify any files
   - Results may be summarized if the content is very large
-  - Includes a self-cleaning 15-minute cache for faster responses when repeatedly accessing the same URL
+  - Includes a self-cleaning cache (entries expire after ${getWebFetchCacheTtlDescription()}) for faster responses when repeatedly accessing the same URL
   - When a URL redirects to a different host, the tool will inform you and provide the redirect URL in a special format. You should then make a new WebFetch request with the redirect URL to fetch the content.
   - For GitHub URLs, prefer using the gh CLI via Bash instead (e.g., gh pr view, gh issue view, gh api).
 `;
+});
 
 // src/utils/sandbox/sandbox-adapter.ts
 var exports_sandbox_adapter = {};
@@ -201792,6 +201860,7 @@ var init_sandbox_adapter = __esm(() => {
   init_managedPath();
   init_settings2();
   init_prompt3();
+  init_prompt6();
   init_errors();
   init_filesystem();
   init_ripgrep();
@@ -230911,7 +230980,7 @@ function substituteUserConfigVariables(value, userConfig) {
     return String(configValue);
   });
 }
-function substituteUserConfigInContent(content, options, schema) {
+function substituteUserConfigInContent(content, options, schema, valueTransform) {
   return content.replace(/\$\{user_config\.([^}]+)\}/g, (match, key2) => {
     if (schema[key2]?.sensitive === true) {
       return `[sensitive option '${key2}' not available in skill content]`;
@@ -230920,7 +230989,7 @@ function substituteUserConfigInContent(content, options, schema) {
     if (value === undefined) {
       return match;
     }
-    return String(value);
+    return valueTransform ? valueTransform(String(value)) : String(value);
   });
 }
 var loadPluginOptions;
@@ -231338,7 +231407,7 @@ IMPORTANT - Use the correct year in search queries:
 `;
 }
 var WEB_SEARCH_TOOL_NAME = "WebSearch";
-var init_prompt6 = __esm(() => {
+var init_prompt7 = __esm(() => {
   init_common2();
 });
 
@@ -231414,6 +231483,7 @@ var init_claudeCodeGuideAgent = __esm(() => {
   init_prompt3();
   init_prompt2();
   init_prompt6();
+  init_prompt7();
   init_auth6();
   init_embeddedTools();
   init_settings2();
@@ -231824,6 +231894,7 @@ var init_statuslineSetup = __esm(() => {
 var VERIFICATION_SYSTEM_PROMPT, VERIFICATION_WHEN_TO_USE = "Use this agent to verify that implementation work is correct before reporting completion. Invoke after non-trivial tasks (3+ file edits, backend/API changes, infrastructure changes). Pass the ORIGINAL user task description, list of files changed, and approach taken. The agent runs builds, tests, linters, and checks to produce a PASS/FAIL/PARTIAL verdict with evidence.", VERIFICATION_AGENT;
 var init_verificationAgent = __esm(() => {
   init_prompt4();
+  init_prompt6();
   init_constants3();
   VERIFICATION_SYSTEM_PROMPT = `You are a verification specialist. Your job is not to confirm the implementation works \u2014 it's to try to break it.
 
@@ -232504,14 +232575,14 @@ __export(exports_prompt2, {
   SEND_USER_FILE_TOOL_NAME: () => SEND_USER_FILE_TOOL_NAME
 });
 var SEND_USER_FILE_TOOL_NAME = "";
-var init_prompt7 = () => {};
+var init_prompt8 = () => {};
 
 // src/tools/EnterPlanModeTool/constants.ts
 var ENTER_PLAN_MODE_TOOL_NAME = "EnterPlanMode", PLAN_MODE_AUTO_BASH_HANDLING_ENABLED = true;
 
 // src/tools/AskUserQuestionTool/prompt.ts
 var ASK_USER_QUESTION_TOOL_NAME = "AskUserQuestion", ASK_USER_QUESTION_TOOL_CHIP_WIDTH = 12, DESCRIPTION6 = "Asks the user multiple choice questions to gather information, clarify ambiguity, understand preferences, make decisions or offer them choices.", PREVIEW_FEATURE_PROMPT, ASK_USER_QUESTION_TOOL_PROMPT;
-var init_prompt8 = __esm(() => {
+var init_prompt9 = __esm(() => {
   PREVIEW_FEATURE_PROMPT = {
     markdown: `
 Preview feature:
@@ -239664,7 +239735,7 @@ function buildCronListPrompt(durableEnabled) {
   return durableEnabled ? `List all cron jobs scheduled via ${CRON_CREATE_TOOL_NAME}, both durable (.claude/scheduled_tasks.json) and session-only.` : `List all cron jobs scheduled via ${CRON_CREATE_TOOL_NAME} in this session.`;
 }
 var KAIROS_CRON_REFRESH_MS, DEFAULT_MAX_AGE_DAYS, CRON_CREATE_TOOL_NAME = "CronCreate", CRON_DELETE_TOOL_NAME = "CronDelete", CRON_LIST_TOOL_NAME = "CronList", CRON_DELETE_DESCRIPTION = "Cancel a scheduled cron job by ID", CRON_LIST_DESCRIPTION = "List scheduled cron jobs";
-var init_prompt9 = __esm(() => {
+var init_prompt10 = __esm(() => {
   init_featureFlags();
   init_growthbook();
   init_cronTasks();
@@ -239678,15 +239749,16 @@ var ALL_AGENT_DISALLOWED_TOOLS, CUSTOM_AGENT_DISALLOWED_TOOLS, ASYNC_AGENT_ALLOW
 var init_tools = __esm(() => {
   init_featureFlags();
   init_constants3();
-  init_prompt8();
+  init_prompt9();
   init_prompt3();
-  init_prompt6();
+  init_prompt7();
   init_prompt2();
+  init_prompt6();
   init_shellToolUtils();
   init_prompt4();
-  init_prompt10();
+  init_prompt11();
   init_SyntheticOutputTool();
-  init_prompt9();
+  init_prompt10();
   ALL_AGENT_DISALLOWED_TOOLS = new Set([
     TASK_OUTPUT_TOOL_NAME,
     EXIT_PLAN_MODE_V2_TOOL_NAME,
@@ -240241,13 +240313,13 @@ Query forms:
 - "select:Read,Edit,Grep" \u2014 fetch these exact tools by name
 - "notebook jupyter" \u2014 keyword search, up to max_results best matches
 - "+slack send" \u2014 require "slack" in the name, rank by remaining terms`;
-var init_prompt10 = __esm(() => {
+var init_prompt11 = __esm(() => {
   init_featureFlags();
   init_state();
   init_growthbook();
   init_constants3();
   BRIEF_TOOL_NAME3 = feature("KAIROS") || feature("KAIROS_BRIEF") ? (init_prompt(), __toCommonJS(exports_prompt)).BRIEF_TOOL_NAME : null;
-  SEND_USER_FILE_TOOL_NAME2 = feature("KAIROS") ? (init_prompt7(), __toCommonJS(exports_prompt2)).SEND_USER_FILE_TOOL_NAME : null;
+  SEND_USER_FILE_TOOL_NAME2 = feature("KAIROS") ? (init_prompt8(), __toCommonJS(exports_prompt2)).SEND_USER_FILE_TOOL_NAME : null;
 });
 
 // node_modules/.bun/diff@8.0.4/node_modules/diff/libesm/diff/base.js
@@ -241699,6 +241771,7 @@ var init_microCompact = __esm(() => {
   init_prompt4();
   init_prompt2();
   init_prompt6();
+  init_prompt7();
   init_debug();
   init_model();
   init_shellToolUtils();
@@ -260291,7 +260364,7 @@ var init_ToolSearchTool = __esm(() => {
   init_debug();
   init_stringUtils();
   init_toolSearch();
-  init_prompt10();
+  init_prompt11();
   inputSchema3 = lazySchema(() => exports_external.object({
     query: exports_external.string().describe('Query to find deferred tools. Use "select:<tool_name>" for direct selection, or keywords to search.'),
     max_results: exports_external.number().optional().default(5).describe("Maximum number of results to return (default: 5)")
@@ -264247,7 +264320,7 @@ Usage notes:
 
 ${forkEnabled ? forkExamples : currentExamples}`;
 }
-var init_prompt11 = __esm(() => {
+var init_prompt12 = __esm(() => {
   init_growthbook();
   init_auth6();
   init_embeddedTools();
@@ -266484,7 +266557,7 @@ var init_fableCredits = __esm(() => {
 
 // src/tools/SleepTool/prompt.ts
 var SLEEP_TOOL_NAME = "Sleep", SLEEP_TOOL_PROMPT;
-var init_prompt12 = __esm(() => {
+var init_prompt13 = __esm(() => {
   init_xml();
   SLEEP_TOOL_PROMPT = `Wait for a specified duration. The user can interrupt the sleep at any time.
 
@@ -376216,6 +376289,46 @@ function getMaxBashTimeoutMs(env6 = process.env) {
 }
 var DEFAULT_TIMEOUT_MS = 120000, MAX_TIMEOUT_MS = 600000;
 
+// src/utils/todoToolsAvailability.ts
+function isModelAtOrAboveRestrictedThreshold(modelId, restricted) {
+  const match = /^claude-([a-z]+)-(\d+(?:-\d+)*)$/.exec(modelId);
+  const family = match?.[1];
+  const version5 = match?.[2];
+  if (!family || !version5) {
+    return false;
+  }
+  const threshold = restricted.find(([f4]) => f4 === family)?.[1];
+  if (!threshold) {
+    return false;
+  }
+  const segments = version5.split("-").map(Number);
+  for (let i6 = 0;i6 < Math.max(segments.length, threshold.length); i6++) {
+    const diff2 = (segments[i6] ?? 0) - (threshold[i6] ?? 0);
+    if (diff2 !== 0) {
+      return diff2 > 0;
+    }
+  }
+  return true;
+}
+function areTodoToolsAvailable() {
+  const model = getMainLoopModel();
+  if (!isModelAtOrAboveRestrictedThreshold(model, TODO_TOOL_RESTRICTED_MODELS)) {
+    return true;
+  }
+  return isEnvTruthy(process.env.CLAUDE_CODE_ENABLE_TODO_TOOLS);
+}
+var TODO_TOOL_RESTRICTED_MODELS;
+var init_todoToolsAvailability = __esm(() => {
+  init_envUtils();
+  init_model();
+  TODO_TOOL_RESTRICTED_MODELS = [
+    ["opus", [4, 8]],
+    ["sonnet", [5]],
+    ["fable", [5]],
+    ["mythos", [5]]
+  ];
+});
+
 // src/utils/todo/types.ts
 var TodoStatusSchema, TodoItemSchema, TodoListSchema;
 var init_types12 = __esm(() => {
@@ -376231,7 +376344,7 @@ var init_types12 = __esm(() => {
 
 // src/tools/TodoWriteTool/prompt.ts
 var PROMPT2, DESCRIPTION7 = "Update the todo list for the current session. To be used proactively and often to track progress and pending tasks. Make sure that at least one task is in_progress at all times. Always provide both content (imperative) and activeForm (present continuous) for each task.";
-var init_prompt13 = __esm(() => {
+var init_prompt14 = __esm(() => {
   PROMPT2 = `Use this tool to create and manage a structured task list for your current coding session. This helps you track progress, organize complex tasks, and demonstrate thoroughness to the user.
 It also helps the user understand the progress of the task and overall progress of their requests.
 
@@ -376422,9 +376535,10 @@ var init_TodoWriteTool = __esm(() => {
   init_growthbook();
   init_Tool();
   init_tasks();
+  init_todoToolsAvailability();
   init_types12();
   init_constants3();
-  init_prompt13();
+  init_prompt14();
   inputSchema8 = lazySchema(() => exports_external.strictObject({
     todos: TodoListSchema().describe("The updated todo list")
   }));
@@ -376455,7 +376569,7 @@ var init_TodoWriteTool = __esm(() => {
     },
     shouldDefer: true,
     isEnabled() {
-      return !isTodoV2Enabled();
+      return !isTodoV2Enabled() && areTodoToolsAvailable();
     },
     toAutoClassifierInput(input) {
       return `${input.todos.length} items`;
@@ -376796,7 +376910,7 @@ function getSimplePrompt() {
   ].join(`
 `);
 }
-var init_prompt14 = __esm(() => {
+var init_prompt15 = __esm(() => {
   init_featureFlags();
   init_prompts4();
   init_attribution();
@@ -379668,33 +379782,6 @@ function validateOutputRedirections(redirections, cwd2, toolPermissionContext, c
     message: "No unsafe redirections found"
   };
 }
-function validateInputRedirections(astRedirects, cwd2, toolPermissionContext) {
-  for (const r4 of astRedirects) {
-    if (r4.op !== "<" || r4.target === "/dev/null") {
-      continue;
-    }
-    const { allowed, resolvedPath, decisionReason } = validatePath(r4.target, cwd2, toolPermissionContext, "read");
-    if (allowed) {
-      continue;
-    }
-    const message = decisionReason?.type === "other" || decisionReason?.type === "safetyCheck" ? decisionReason.reason : decisionReason?.type === "rule" ? `Input redirection from '${resolvedPath}' was blocked by a deny rule.` : `Input redirection from '${resolvedPath}' was blocked. For security, Claude Code may only read files in the allowed working directories for this session.`;
-    if (decisionReason?.type === "rule") {
-      return { behavior: "deny", message, decisionReason };
-    }
-    const suggestion = decisionReason === undefined ? createReadRuleSuggestion(getDirectoryForPath(resolvedPath), "session") : undefined;
-    return {
-      behavior: "ask",
-      message,
-      blockedPath: resolvedPath,
-      decisionReason,
-      ...suggestion !== undefined && { suggestions: [suggestion] }
-    };
-  }
-  return {
-    behavior: "passthrough",
-    message: "No unsafe input redirections found"
-  };
-}
 function checkPathConstraints(input, cwd2, toolPermissionContext, compoundCommandHasCd, astRedirects, astCommands) {
   if (!astCommands && />>\s*>\s*\(|>\s*>\s*\(|<\s*\(/.test(input.command)) {
     return {
@@ -379721,12 +379808,6 @@ function checkPathConstraints(input, cwd2, toolPermissionContext, compoundComman
   if (redirectionResult.behavior !== "passthrough") {
     return redirectionResult;
   }
-  if (astRedirects) {
-    const inputRedirectResult = validateInputRedirections(astRedirects, cwd2, toolPermissionContext);
-    if (inputRedirectResult.behavior !== "passthrough") {
-      return inputRedirectResult;
-    }
-  }
   if (astCommands) {
     for (const cmd of astCommands) {
       const result = validateSinglePathCommandArgv(cmd, cwd2, toolPermissionContext, compoundCommandHasCd);
@@ -382956,7 +383037,7 @@ var init_BashTool = __esm(() => {
   init_gitOperationTracking();
   init_bashPermissions();
   init_commandSemantics();
-  init_prompt14();
+  init_prompt15();
   init_readOnlyValidation();
   init_sedEditParser();
   init_shouldUseSandbox();
@@ -389536,6 +389617,71 @@ function computeFingerprintFromMessages(messages) {
 var FINGERPRINT_SALT = "59cf53e54c78";
 var init_fingerprint = () => {};
 
+// src/utils/model/unrecognizedModelSignal.ts
+function isModelRecognized(model) {
+  return KNOWN_CANONICAL_MODELS.has(getCanonicalName(model)) || KNOWN_FULL_MODEL_IDS.has(model.toLowerCase());
+}
+function signalUnrecognizedModel(model, querySource) {
+  try {
+    if (model.includes("application-inference-profile")) {
+      return;
+    }
+    const normalized = normalizeModelStringForAPI(model);
+    const claimKey = `unrecognized-model-signal:${normalized}`;
+    if (claimedSignals.has(claimKey)) {
+      return;
+    }
+    claimedSignals.add(claimKey);
+    if (isModelRecognized(model) || isModelRecognized(normalized)) {
+      return;
+    }
+    logEvent2("tengu_api_unrecognized_model", {
+      model,
+      querySource
+    });
+    const line = `${UNRECOGNIZED_MODEL_TAG} ${JSON.stringify({ model, query_source: querySource })}`.replace(CONTROL_CHARS_PATTERN, "");
+    if (getIsNonInteractiveSession() && process.env.CLAUDE_CODE_SESSION_KIND !== "bg") {
+      process.stderr.write(`${line}
+`);
+    } else {
+      logForDebugging(line, { level: "warn" });
+    }
+  } catch {}
+}
+var UNRECOGNIZED_MODEL_TAG = "[claude-code:unrecognized_model]", CONTROL_CHARS_PATTERN, claimedSignals, KNOWN_CANONICAL_MODELS, KNOWN_FULL_MODEL_IDS;
+var init_unrecognizedModelSignal = __esm(() => {
+  init_state();
+  init_analytics();
+  init_debug();
+  init_model();
+  CONTROL_CHARS_PATTERN = /[\x00-\x08\x0e-\x1f\x7f-\x9f]/g;
+  claimedSignals = new Set;
+  KNOWN_CANONICAL_MODELS = new Set([
+    "claude-opus-5",
+    "claude-opus-4-8",
+    "claude-opus-4-7",
+    "claude-opus-4-6",
+    "claude-opus-4-5",
+    "claude-opus-4-1",
+    "claude-opus-4",
+    "claude-sonnet-5",
+    "claude-sonnet-4-6",
+    "claude-sonnet-4-5",
+    "claude-sonnet-4",
+    "claude-haiku-4-5",
+    "claude-fable-5",
+    "claude-3-7-sonnet",
+    "claude-3-5-sonnet",
+    "claude-3-5-haiku",
+    "claude-3-opus",
+    "claude-3-sonnet",
+    "claude-3-haiku"
+  ]);
+  KNOWN_FULL_MODEL_IDS = new Set([
+    "claude-mythos-preview"
+  ]);
+});
+
 // src/utils/sideQuery.ts
 function extractFirstUserMessageText(messages) {
   const firstUserMessage = messages.find((m5) => m5.role === "user");
@@ -389563,6 +389709,7 @@ async function sideQuery(opts) {
     thinking,
     stop_sequences
   } = opts;
+  signalUnrecognizedModel(model, opts.querySource);
   const client8 = await getAnthropicClient({
     maxRetries,
     model,
@@ -389642,6 +389789,7 @@ var init_sideQuery = __esm(() => {
   init_betas2();
   init_fingerprint();
   init_model();
+  init_unrecognizedModelSignal();
 });
 
 // src/utils/permissions/expandWithDefaults.ts
@@ -449298,7 +449446,7 @@ Usage:${getPreReadInstruction2()}
 - The edit will FAIL if \`old_string\` is not unique in the file. Either provide a larger string with more surrounding context to make it unique or use \`replace_all\` to change every instance of \`old_string\`.${minimalUniquenessHint}
 - Use \`replace_all\` for replacing and renaming strings across the file. This parameter is useful if you want to rename a variable for instance.`;
 }
-var init_prompt15 = __esm(() => {
+var init_prompt16 = __esm(() => {
   init_file();
   init_prompt3();
 });
@@ -449358,7 +449506,7 @@ var init_FileEditTool = __esm(() => {
   init_fileStateGuard();
   init_shellRuleMatching();
   init_validateEditTool();
-  init_prompt15();
+  init_prompt16();
   init_types10();
   init_UI2();
   init_utils8();
@@ -450462,7 +450610,7 @@ __export(exports_prompt5, {
   SNIP_TOOL_NAME: () => SNIP_TOOL_NAME
 });
 var SNIP_TOOL_NAME = "";
-var init_prompt16 = () => {};
+var init_prompt17 = () => {};
 
 // src/utils/collapseReadSearch.ts
 function getFirstContentItem(content) {
@@ -451054,12 +451202,12 @@ var init_collapseReadSearch = __esm(() => {
   init_constants9();
   init_primitiveTools();
   init_gitOperationTracking();
-  init_prompt10();
+  init_prompt11();
   init_file();
   init_fullscreen();
   init_memoryFileDetection();
   teamMemOps = feature("TEAMMEM") ? (init_teamMemoryOps(), __toCommonJS(exports_teamMemoryOps)) : null;
-  SNIP_TOOL_NAME2 = feature("HISTORY_SNIP") ? (init_prompt16(), __toCommonJS(exports_prompt5)).SNIP_TOOL_NAME : null;
+  SNIP_TOOL_NAME2 = feature("HISTORY_SNIP") ? (init_prompt17(), __toCommonJS(exports_prompt5)).SNIP_TOOL_NAME : null;
 });
 
 // src/components/TaskListV2.tsx
@@ -474659,7 +474807,7 @@ var init_conversationRecovery = __esm(() => {
   init_sessionStorage();
   BRIEF_TOOL_NAME4 = feature("KAIROS") || feature("KAIROS_BRIEF") ? (init_prompt(), __toCommonJS(exports_prompt)).BRIEF_TOOL_NAME : null;
   LEGACY_BRIEF_TOOL_NAME2 = feature("KAIROS") || feature("KAIROS_BRIEF") ? (init_prompt(), __toCommonJS(exports_prompt)).LEGACY_BRIEF_TOOL_NAME : null;
-  SEND_USER_FILE_TOOL_NAME3 = feature("KAIROS") ? (init_prompt7(), __toCommonJS(exports_prompt2)).SEND_USER_FILE_TOOL_NAME : null;
+  SEND_USER_FILE_TOOL_NAME3 = feature("KAIROS") ? (init_prompt8(), __toCommonJS(exports_prompt2)).SEND_USER_FILE_TOOL_NAME : null;
 });
 
 // src/services/api/filesApi.ts
@@ -477857,7 +478005,7 @@ var init_AgentTool = __esm(() => {
   init_constants3();
   init_forkSubagent();
   init_loadAgentsDir();
-  init_prompt11();
+  init_prompt12();
   init_runAgent();
   init_UI8();
   jsx_runtime135 = __toESM(require_jsx_runtime(), 1);
@@ -479222,7 +479370,7 @@ var init_SkillTool = __esm(() => {
   init_skillUsageTracking();
   init_uuid();
   init_runAgent();
-  init_prompt26();
+  init_prompt27();
   init_skillAttribution();
   init_loadSkillsDir();
   init_UI9();
@@ -496833,7 +496981,7 @@ async function applyPromptToMarkdown(prompt, markdownContent, signal, isNonInter
   }
   return "No response from model";
 }
-var DomainBlockedError, DomainCheckFailedError, EgressBlockedError, CACHE_TTL_MS3, MAX_CACHE_SIZE_BYTES, URL_CACHE, DOMAIN_CHECK_CACHE, turndownServicePromise, MAX_URL_LENGTH = 2000, MAX_HTTP_CONTENT_LENGTH = 10485760, FETCH_TIMEOUT_MS3 = 60000, DOMAIN_CHECK_TIMEOUT_MS = 1e4, MAX_REDIRECTS = 10, MAX_MARKDOWN_LENGTH = 1e5;
+var DomainBlockedError, DomainCheckFailedError, EgressBlockedError, MAX_CACHE_SIZE_BYTES, URL_CACHE, DOMAIN_CHECK_CACHE, turndownServicePromise, MAX_URL_LENGTH = 2000, MAX_HTTP_CONTENT_LENGTH = 10485760, FETCH_TIMEOUT_MS3 = 60000, DOMAIN_CHECK_TIMEOUT_MS = 1e4, MAX_REDIRECTS = 10, MAX_MARKDOWN_LENGTH = 1e5;
 var init_utils12 = __esm(() => {
   init_axios2();
   init_index_min();
@@ -496844,7 +496992,9 @@ var init_utils12 = __esm(() => {
   init_log3();
   init_mcpOutputStorage();
   init_settings2();
+  init_cacheTtl();
   init_preapproved();
+  init_prompt6();
   DomainBlockedError = class DomainBlockedError extends Error {
     constructor(domain2) {
       super(`Claude Code is unable to fetch from ${domain2}`);
@@ -496869,11 +497019,10 @@ var init_utils12 = __esm(() => {
       this.name = "EgressBlockedError";
     }
   };
-  CACHE_TTL_MS3 = 15 * 60 * 1000;
   MAX_CACHE_SIZE_BYTES = 50 * 1024 * 1024;
   URL_CACHE = new L({
     maxSize: MAX_CACHE_SIZE_BYTES,
-    ttl: CACHE_TTL_MS3
+    ttl: getWebFetchCacheTtlMs()
   });
   DOMAIN_CHECK_CACHE = new L({
     max: 128,
@@ -496912,6 +497061,7 @@ var init_WebFetchTool = __esm(() => {
   init_format();
   init_permissions2();
   init_preapproved();
+  init_prompt6();
   init_UI10();
   init_utils12();
   inputSchema14 = lazySchema(() => exports_external.strictObject({
@@ -497196,7 +497346,7 @@ var init_CronCreateTool = __esm(() => {
   init_cronTasks();
   init_semanticBoolean();
   init_teammateContext();
-  init_prompt9();
+  init_prompt10();
   init_UI11();
   inputSchema15 = lazySchema(() => exports_external.strictObject({
     cron: exports_external.string().describe('Standard 5-field cron expression in local time: "M H DoM Mon DoW" (e.g. "*/5 * * * *" = every 5 minutes, "30 14 28 2 *" = Feb 28 at 2:30pm local once).'),
@@ -497301,7 +497451,7 @@ var init_CronDeleteTool = __esm(() => {
   init_Tool();
   init_cronTasks();
   init_teammateContext();
-  init_prompt9();
+  init_prompt10();
   init_UI11();
   inputSchema16 = lazySchema(() => exports_external.strictObject({
     id: exports_external.string().describe("Job ID returned by CronCreate.")
@@ -497380,7 +497530,7 @@ var init_CronListTool = __esm(() => {
   init_cronTasks();
   init_format();
   init_teammateContext();
-  init_prompt9();
+  init_prompt10();
   init_UI11();
   inputSchema17 = lazySchema(() => exports_external.strictObject({}));
   outputSchema16 = lazySchema(() => exports_external.object({
@@ -559657,18 +559807,18 @@ function parseFolderPath(folderPath) {
   }
   return { platform: platform5, buildId };
 }
-var import_debug175, debugCache;
+var import_debug176, debugCache;
 var init_Cache = __esm(() => {
   init_browser_data();
   init_detectPlatform();
-  import_debug175 = __toESM(require_src(), 1);
-  debugCache = import_debug175.default("puppeteer:browsers:cache");
+  import_debug176 = __toESM(require_src(), 1);
+  debugCache = import_debug176.default("puppeteer:browsers:cache");
 });
 
 // node_modules/.bun/@puppeteer+browsers@2.13.2/node_modules/@puppeteer/browsers/lib/esm/debug.js
-var import_debug176;
+var import_debug177;
 var init_debug3 = __esm(() => {
-  import_debug176 = __toESM(require_src(), 1);
+  import_debug177 = __toESM(require_src(), 1);
 });
 
 // node_modules/.bun/@puppeteer+browsers@2.13.2/node_modules/@puppeteer/browsers/lib/esm/launch.js
@@ -559987,7 +560137,7 @@ var init_launch = __esm(() => {
   init_Cache();
   init_debug3();
   init_detectPlatform();
-  debugLaunch = import_debug176.default("puppeteer:browsers:launcher");
+  debugLaunch = import_debug177.default("puppeteer:browsers:launcher");
   CDP_WEBSOCKET_ENDPOINT_REGEX = /^DevTools listening on (ws:\/\/.*)$/;
   WEBDRIVER_BIDI_WEBSOCKET_ENDPOINT_REGEX = /^WebDriver BiDi listening on (ws:\/\/.*)$/;
   processListeners = new Map;
@@ -565071,10 +565221,10 @@ async function installDMG(dmgPath, folderPath) {
     spawnSync4("hdiutil", ["detach", mountPath, "-quiet"]);
   }
 }
-var import_debug178, debugFileUtil, internalConstantsForTesting;
+var import_debug179, debugFileUtil, internalConstantsForTesting;
 var init_fileUtil = __esm(() => {
-  import_debug178 = __toESM(require_src(), 1);
-  debugFileUtil = import_debug178.default("puppeteer:browsers:fileUtil");
+  import_debug179 = __toESM(require_src(), 1);
+  debugFileUtil = import_debug179.default("puppeteer:browsers:fileUtil");
   internalConstantsForTesting = {
     xz: "xz",
     bzip2: "bzip2"
@@ -565367,7 +565517,7 @@ var init_install = __esm(() => {
   init_fileUtil();
   init_httpUtil();
   import_progress = __toESM(require_node_progress(), 1);
-  debugInstall = import_debug176.default("puppeteer:browsers:install");
+  debugInstall = import_debug177.default("puppeteer:browsers:install");
   times = new Map;
 });
 
@@ -571642,7 +571792,7 @@ import fs22 from "fs";
 import os16 from "os";
 import { dirname as dirname45 } from "path";
 import { PassThrough as PassThrough4 } from "stream";
-var import_debug180, __runInitializers23 = function(thisArg, initializers, value) {
+var import_debug181, __runInitializers23 = function(thisArg, initializers, value) {
   var useValue = arguments.length > 2;
   for (var i6 = 0;i6 < initializers.length; i6++) {
     value = useValue ? initializers[i6].call(thisArg, value) : initializers[i6].call(thisArg);
@@ -571702,8 +571852,8 @@ var init_ScreenRecorder = __esm(() => {
   init_util6();
   init_decorators();
   init_disposable();
-  import_debug180 = __toESM(require_src(), 1);
-  debugFfmpeg = import_debug180.default("puppeteer:ffmpeg");
+  import_debug181 = __toESM(require_src(), 1);
+  debugFfmpeg = import_debug181.default("puppeteer:ffmpeg");
   ScreenRecorder = (() => {
     let _classSuper = PassThrough4;
     let _instanceExtraInitializers = [];
@@ -572133,7 +572283,7 @@ var WEB_BROWSER_NAVIGATE_TOOL_NAME = "navigate", WEB_BROWSER_GET_PAGE_TEXT_TOOL_
 - browser_batch cannot be nested (a batch action whose name is browser_batch is rejected).
 - Prefer browser_batch to execute multiple actions in one call \u2014 it is significantly faster. Batch your next sequence of clicks, types, navigations, and screenshots together.
 - Read-only iff every sub-action is read-only. A batch containing navigate (state-mutating) is NOT auto-allowed in plan mode; a batch of only get_page_text/screenshot IS auto-allowed.`;
-var init_prompt17 = __esm(() => {
+var init_prompt18 = __esm(() => {
   READONLY_SUBACTIONS = new Set([
     "get_page_text",
     "screenshot"
@@ -572181,7 +572331,7 @@ var init_WebBrowserTool = __esm(() => {
   init_preapproved();
   init_actions();
   init_browser2();
-  init_prompt17();
+  init_prompt18();
   navigateInputSchema = exports_external.strictObject({
     url: exports_external.string().describe('The URL to navigate to, or "forward"/"back" to traverse browser history. Bare hostnames are upgraded to https://.'),
     tabId: exports_external.number().optional().describe("Ignored in OCC (single shared page).")
@@ -574521,7 +574671,7 @@ var init_WebSearchTool = __esm(() => {
   init_messages3();
   init_model();
   init_slowOperations();
-  init_prompt6();
+  init_prompt7();
   init_UI14();
   inputSchema21 = lazySchema(() => exports_external.strictObject({
     query: exports_external.string().min(2).describe("The search query to use"),
@@ -574808,7 +574958,7 @@ var init_inProcessTeammateHelpers = __esm(() => {
 
 // src/tools/ExitPlanModeTool/prompt.ts
 var ASK_USER_QUESTION_TOOL_NAME2 = "AskUserQuestion", EXIT_PLAN_MODE_V2_TOOL_PROMPT;
-var init_prompt18 = __esm(() => {
+var init_prompt19 = __esm(() => {
   EXIT_PLAN_MODE_V2_TOOL_PROMPT = `Use this tool when you are in plan mode and have finished writing your plan to the plan file and are ready for user approval.
 
 ## How This Tool Works
@@ -575048,7 +575198,7 @@ var init_ExitPlanModeV2Tool = __esm(() => {
   init_teammate();
   init_teammateMailbox();
   init_constants3();
-  init_prompt18();
+  init_prompt19();
   init_UI15();
   autoModeStateModule = feature("TRANSCRIPT_CLASSIFIER") ? __toCommonJS(exports_autoModeState) : null;
   permissionSetupModule = feature("TRANSCRIPT_CLASSIFIER") ? (init_permissionSetup(), __toCommonJS(exports_permissionSetup)) : null;
@@ -575481,7 +575631,7 @@ var init_AskUserQuestionTool = __esm(() => {
   init_v4();
   init_ink2();
   init_Tool();
-  init_prompt8();
+  init_prompt9();
   import_compiler_runtime117 = __toESM(require_compiler_runtime(), 1);
   jsx_runtime144 = __toESM(require_jsx_runtime(), 1);
   questionOptionSchema = lazySchema(() => exports_external.object({
@@ -578537,9 +578687,9 @@ function getEnterPlanModeToolPrompt() {
   return process.env.USER_TYPE === "ant" ? getEnterPlanModeToolPromptAnt() : getEnterPlanModeToolPromptExternal();
 }
 var WHAT_HAPPENS_SECTION;
-var init_prompt19 = __esm(() => {
+var init_prompt20 = __esm(() => {
   init_planModeV2();
-  init_prompt8();
+  init_prompt9();
   WHAT_HAPPENS_SECTION = `## What Happens in Plan Mode
 
 In plan mode, you'll:
@@ -578617,7 +578767,7 @@ var init_EnterPlanModeTool = __esm(() => {
   init_PermissionUpdate();
   init_permissionSetup();
   init_planModeV2();
-  init_prompt19();
+  init_prompt20();
   init_UI20();
   inputSchema29 = lazySchema(() => exports_external.strictObject({}));
   outputSchema26 = lazySchema(() => exports_external.object({
@@ -580283,7 +580433,7 @@ ${lines2.join(`
   }
 }
 var DESCRIPTION13 = "Get or set Claude Code configuration settings.";
-var init_prompt20 = __esm(() => {
+var init_prompt21 = __esm(() => {
   init_featureFlags();
   init_modelOptions();
   init_voiceModeEnabled();
@@ -581106,7 +581256,7 @@ var init_ConfigTool = __esm(() => {
   init_log3();
   init_settings2();
   init_slowOperations();
-  init_prompt20();
+  init_prompt21();
   init_supportedSettings();
   init_UI23();
   inputSchema32 = lazySchema(() => exports_external.strictObject({
@@ -581472,7 +581622,7 @@ ${teammateTips}- Check TaskList first to avoid creating duplicate tasks
 `;
 }
 var DESCRIPTION14 = "Create a new task in the task list";
-var init_prompt21 = __esm(() => {
+var init_prompt22 = __esm(() => {
   init_agentSwarmsEnabled();
 });
 
@@ -581591,8 +581741,9 @@ var init_TaskCreateTool = __esm(() => {
   init_Tool();
   init_hooks5();
   init_tasks();
+  init_todoToolsAvailability();
   init_teammate();
-  init_prompt21();
+  init_prompt22();
   inputSchema33 = lazySchema(() => exports_external.strictObject({
     subject: exports_external.string().describe("A brief title for the task"),
     description: exports_external.string().describe("What needs to be done"),
@@ -581644,7 +581795,7 @@ var init_TaskCreateTool = __esm(() => {
     },
     shouldDefer: true,
     isEnabled() {
-      return isTodoV2Enabled();
+      return isTodoV2Enabled() && areTodoToolsAvailable();
     },
     isConcurrencySafe() {
       return true;
@@ -581739,6 +581890,7 @@ var init_TaskGetTool = __esm(() => {
   init_v4();
   init_Tool();
   init_tasks();
+  init_todoToolsAvailability();
   inputSchema34 = lazySchema(() => exports_external.strictObject({
     taskId: exports_external.string().describe("The ID of the task to retrieve")
   }));
@@ -581773,7 +581925,7 @@ var init_TaskGetTool = __esm(() => {
     },
     shouldDefer: true,
     isEnabled() {
-      return isTodoV2Enabled();
+      return isTodoV2Enabled() && areTodoToolsAvailable();
     },
     isConcurrencySafe() {
       return true;
@@ -581927,6 +582079,7 @@ var init_TaskUpdateTool = __esm(() => {
   init_agentSwarmsEnabled();
   init_hooks5();
   init_tasks();
+  init_todoToolsAvailability();
   init_teammate();
   init_teammateMailbox();
   init_constants3();
@@ -581976,7 +582129,7 @@ var init_TaskUpdateTool = __esm(() => {
     },
     shouldDefer: true,
     isEnabled() {
-      return isTodoV2Enabled();
+      return isTodoV2Enabled() && areTodoToolsAvailable();
     },
     isConcurrencySafe() {
       return true;
@@ -582226,7 +582379,7 @@ Use TaskGet with a specific task ID to view full details including description a
 ${teammateWorkflow}`;
 }
 var DESCRIPTION17 = "List all tasks in the task list";
-var init_prompt22 = __esm(() => {
+var init_prompt23 = __esm(() => {
   init_agentSwarmsEnabled();
 });
 
@@ -582236,7 +582389,8 @@ var init_TaskListTool = __esm(() => {
   init_v4();
   init_Tool();
   init_tasks();
-  init_prompt22();
+  init_todoToolsAvailability();
+  init_prompt23();
   inputSchema36 = lazySchema(() => exports_external.strictObject({}));
   outputSchema33 = lazySchema(() => exports_external.object({
     tasks: exports_external.array(exports_external.object({
@@ -582268,7 +582422,7 @@ var init_TaskListTool = __esm(() => {
     },
     shouldDefer: true,
     isEnabled() {
-      return isTodoV2Enabled();
+      return isTodoV2Enabled() && areTodoToolsAvailable();
     },
     isConcurrencySafe() {
       return true;
@@ -583185,7 +583339,7 @@ Approving shutdown terminates your process. Rejecting plan sends the teammate ba
 `.trim();
 }
 var DESCRIPTION21 = "Send a message to another agent";
-var init_prompt23 = __esm(() => {
+var init_prompt24 = __esm(() => {
   init_featureFlags();
 });
 
@@ -583523,7 +583677,7 @@ var init_SendMessageTool = __esm(() => {
   init_teammate();
   init_teammateMailbox();
   init_resumeAgent();
-  init_prompt23();
+  init_prompt24();
   init_UI25();
   StructuredMessage = lazySchema(() => exports_external.discriminatedUnion("type", [
     exports_external.object({
@@ -591310,7 +591464,7 @@ ${sleepGuidance ? sleepGuidance + `
     - Before running destructive operations (e.g., git reset --hard, git push --force, git checkout --), consider whether there is a safer alternative that achieves the same goal. Only use destructive operations when they are truly the best approach.
     - Never skip hooks (--no-verify) or bypass signing (--no-gpg-sign, -c commit.gpgsign=false) unless the user has explicitly asked for it. If a hook fails, investigate and fix the underlying issue.`;
 }
-var init_prompt24 = __esm(() => {
+var init_prompt25 = __esm(() => {
   init_envUtils();
   init_outputLimits();
   init_powershellDetection();
@@ -591841,7 +591995,7 @@ var init_PowerShellTool = __esm(() => {
   init_gitOperationTracking();
   init_commandSemantics2();
   init_powershellPermissions();
-  init_prompt24();
+  init_prompt25();
   init_readOnlyValidation2();
   init_UI26();
   jsx_runtime158 = __toESM(require_jsx_runtime(), 1);
@@ -594131,7 +594285,7 @@ var init_toolExecution = __esm(() => {
   init_prompt3();
   init_prompt4();
   init_gitOperationTracking();
-  init_prompt10();
+  init_prompt11();
   init_tools2();
   init_attachments2();
   init_debug();
@@ -598110,7 +598264,7 @@ var init_query2 = __esm(() => {
   init_tokens();
   init_context();
   init_growthbook();
-  init_prompt12();
+  init_prompt13();
   init_postSamplingHooks();
   init_hooks5();
   init_dumpPrompts();
@@ -603151,7 +603305,7 @@ var init_attachments2 = __esm(() => {
   init_commands5();
   init_uniqBy();
   init_state();
-  init_prompt26();
+  init_prompt27();
   init_context();
   init_prompt3();
   init_limits();
@@ -603161,7 +603315,7 @@ var init_attachments2 = __esm(() => {
   init_file();
   init_loadAgentsDir();
   init_constants3();
-  init_prompt11();
+  init_prompt12();
   init_permissions2();
   init_auth6();
   init_mcpStringUtils();
@@ -603577,7 +603731,7 @@ var proactiveModule3, NO_TOOLS_PREAMBLE = `CRITICAL: Respond with TEXT ONLY. Do
    - Pay special attention to specific user feedback that you received, especially if the user told you to do something differently.
    - Note any security-relevant instructions or constraints the user stated (e.g., sensitive files or data to avoid, operations that must not be performed, credential or secret handling rules). These MUST be preserved verbatim in the summary so they continue to apply after compaction.
 2. Double-check for technical accuracy and completeness, addressing each required element thoroughly.`, BASE_COMPACT_PROMPT, PARTIAL_COMPACT_PROMPT, PARTIAL_COMPACT_UP_TO_PROMPT, NO_TOOLS_TRAILER;
-var init_prompt25 = __esm(() => {
+var init_prompt26 = __esm(() => {
   init_featureFlags();
   proactiveModule3 = feature("PROACTIVE") || feature("KAIROS") ? (init_proactive(), __toCommonJS(exports_proactive)) : null;
   BASE_COMPACT_PROMPT = `Your task is to create a detailed summary of the conversation so far, paying close attention to the user's explicit requests and your previous actions.
@@ -604695,7 +604849,7 @@ var init_compact = __esm(() => {
   init_withRetry();
   init_internalLogging();
   init_tokenEstimation();
-  init_prompt25();
+  init_prompt26();
   sessionTranscriptModule2 = feature("KAIROS") ? (init_sessionTranscript(), __toCommonJS(exports_sessionTranscript)) : null;
 });
 
@@ -605251,7 +605405,7 @@ var init_sessionMemoryCompact = __esm(() => {
   init_sessionMemoryUtils();
   init_compact();
   init_microCompact();
-  init_prompt25();
+  init_prompt26();
   DEFAULT_SM_COMPACT_CONFIG = {
     minTokens: 1e4,
     minTextBlockMessages: 5,
@@ -605540,7 +605694,7 @@ async function countBuiltInToolTokens(tools, getToolPermissionContext, agentInfo
     };
   }
   const { isToolSearchEnabled: isToolSearchEnabled2 } = await Promise.resolve().then(() => (init_toolSearch(), exports_toolSearch));
-  const { isDeferredTool: isDeferredTool2 } = await Promise.resolve().then(() => (init_prompt10(), exports_prompt4));
+  const { isDeferredTool: isDeferredTool2 } = await Promise.resolve().then(() => (init_prompt11(), exports_prompt4));
   const isDeferred = await isToolSearchEnabled2(model ?? "", tools, getToolPermissionContext, agentInfo?.activeAgents ?? [], "analyzeBuiltIn");
   const alwaysLoadedTools = builtInTools.filter((t4) => !isDeferredTool2(t4));
   const deferredBuiltinTools = builtInTools.filter((t4) => isDeferredTool2(t4));
@@ -605675,7 +605829,7 @@ async function countMcpToolTokens(tools, getToolPermissionContext, agentInfo, mo
   const estimateTotal = estimates.reduce((s4, e4) => s4 + e4, 0) || 1;
   const mcpToolTokensByTool = estimates.map((e4) => Math.round(e4 / estimateTotal * totalTokens));
   const { isToolSearchEnabled: isToolSearchEnabled2 } = await Promise.resolve().then(() => (init_toolSearch(), exports_toolSearch));
-  const { isDeferredTool: isDeferredTool2 } = await Promise.resolve().then(() => (init_prompt10(), exports_prompt4));
+  const { isDeferredTool: isDeferredTool2 } = await Promise.resolve().then(() => (init_prompt11(), exports_prompt4));
   const isDeferred = await isToolSearchEnabled2(model, tools, getToolPermissionContext, agentInfo?.activeAgents ?? [], "analyzeMcp");
   const loadedMcpToolNames = new Set;
   if (isDeferred && messages) {
@@ -606111,7 +606265,7 @@ var init_analyzeContext = __esm(() => {
   init_tokenEstimation();
   init_loadSkillsDir();
   init_Tool();
-  init_prompt26();
+  init_prompt27();
   init_api4();
   init_claudemd();
   init_context();
@@ -606431,7 +606585,7 @@ var init_toolSearch = __esm(() => {
   init_growthbook();
   init_analytics();
   init_Tool();
-  init_prompt10();
+  init_prompt11();
   init_analyzeContext();
   init_betas2();
   init_context();
@@ -607000,48 +607154,74 @@ function generateProgressiveArgumentHint(argNames, typedArgs) {
     return;
   return remaining.map((name3) => `[${name3}]`).join(" ");
 }
-function substituteArguments(content, args, appendIfNoPlaceholder = true, argumentNames = []) {
+function substituteArguments(content, args, appendIfNoPlaceholder = true, argumentNames = [], valueTransform) {
   if (args === undefined || args === null) {
     return content;
   }
+  let work = content.replaceAll(SHIELDED_DOLLAR, SENTINEL_REPLACEMENT).replaceAll(VALUE_BOUNDARY, SENTINEL_REPLACEMENT);
+  const insertValue = (value) => {
+    const sanitized = (value ?? "").replaceAll(SHIELDED_DOLLAR, SENTINEL_REPLACEMENT).replaceAll(VALUE_BOUNDARY, SENTINEL_REPLACEMENT);
+    const transformed = valueTransform ? valueTransform(sanitized) : sanitized;
+    return VALUE_BOUNDARY + transformed.replaceAll("$", SHIELDED_DOLLAR) + VALUE_BOUNDARY;
+  };
   const parsedArgs = parseArguments2(args);
-  const ESCAPED_DOLLAR = "\x00ESCAPED_DOLLAR\x00";
-  let work = content.replace(/\\\$/g, ESCAPED_DOLLAR);
-  const beforeSubst = work;
-  for (let i6 = 0;i6 < argumentNames.length; i6++) {
-    const name3 = argumentNames[i6];
-    if (!name3)
-      continue;
-    work = work.replace(new RegExp(`\\$${name3}(?![\\[\\w])`, "g"), parsedArgs[i6] ?? "");
+  const namedArgs = argumentNames.map((name3, index2) => ({ name: name3, index: index2 })).filter((entry) => Boolean(entry.name)).sort((left2, right2) => right2.name.length - left2.name.length);
+  const markerAlternation = [
+    "\\d",
+    "ARGUMENTS",
+    ...namedArgs.map(({ name: name3 }) => `${escapeRegExp(name3)}(?![\\[\\w])`)
+  ].join("|");
+  work = work.replace(new RegExp(`(?<!\\\\)\\\\\\$(?=${markerAlternation})`, "g"), SHIELDED_DOLLAR);
+  let didSubstitute = false;
+  for (const { name: name3, index: index2 } of namedArgs) {
+    work = work.replace(new RegExp(`\\$${escapeRegExp(name3)}(?![\\[\\w])`, "g"), () => {
+      didSubstitute = true;
+      return insertValue(parsedArgs[index2]);
+    });
   }
   work = work.replace(/\$ARGUMENTS\[(\d+)\]/g, (match, indexStr) => {
     const index2 = parseInt(indexStr, 10);
     if (parsedArgs[index2] === undefined) {
-      return `${ESCAPED_DOLLAR}${match.slice(1)}`;
+      return SHIELDED_DOLLAR + match.slice(1);
     }
-    return parsedArgs[index2];
+    didSubstitute = true;
+    return insertValue(parsedArgs[index2]);
   });
   work = work.replace(/\$(\d+)(?!\w)/g, (match, indexStr) => {
     const index2 = parseInt(indexStr, 10);
     if (parsedArgs[index2] === undefined) {
       return match;
     }
-    return parsedArgs[index2];
+    didSubstitute = true;
+    return insertValue(parsedArgs[index2]);
+  });
+  work = work.replaceAll("$ARGUMENTS", () => {
+    didSubstitute = true;
+    return insertValue(args);
   });
-  work = work.replaceAll("$ARGUMENTS", args);
-  if (work === beforeSubst && appendIfNoPlaceholder && args) {
+  if (!didSubstitute && appendIfNoPlaceholder && args) {
     work = work + `
-
-ARGUMENTS: ${args}`;
+ARGUMENTS: ${insertValue(args)}`;
   }
-  return work.replaceAll(ESCAPED_DOLLAR, "$");
+  return work.replaceAll(SHIELDED_DOLLAR, "$").replaceAll(VALUE_BOUNDARY, "");
 }
+var SHIELDED_DOLLAR = "\uFFFF", VALUE_BOUNDARY = "\uFFFE", SENTINEL_REPLACEMENT = "\uFFFD";
 var init_argumentSubstitution = __esm(() => {
   init_shellQuote();
+  init_stringUtils();
 });
 
 // src/utils/promptShellExecution.ts
 import { randomUUID as randomUUID30 } from "crypto";
+function escapeShellExecutionMarkers(value) {
+  return value.replace(/`!/g, "` !").replace(/!`/g, "! `").replace(/(^|\s)!/gm, "$1\\!");
+}
+function escapeAngleBrackets(value) {
+  return value.replaceAll("<", "&lt;").replaceAll(">", "&gt;");
+}
+function sanitizeUsername(value) {
+  return value.replace(/[^a-zA-Z0-9._-]/g, "");
+}
 function isSkillShellExecutionDisabled() {
   if (getSettingsForSource("policySettings")?.disableSkillShellExecution === true) {
     return true;
@@ -607373,7 +607553,7 @@ function createSkillCommand({
       let finalContent = baseDir ? `Base directory for this skill: ${baseDir}
 
 ${markdownContent}` : markdownContent;
-      finalContent = substituteArguments(finalContent, args, true, argumentNames);
+      finalContent = substituteArguments(finalContent, args, true, argumentNames, loadedFrom === "mcp" ? (value) => escapeAngleBrackets(escapeShellExecutionMarkers(value)) : escapeShellExecutionMarkers);
       if (baseDir) {
         const skillDir = process.platform === "win32" ? baseDir.replace(/\\/g, "/") : baseDir;
         finalContent = finalContent.replace(/\$\{CLAUDE_SKILL_DIR\}/g, skillDir);
@@ -607953,7 +608133,7 @@ async function getSkillInfo(cwd2) {
   }
 }
 var SKILL_BUDGET_CONTEXT_PERCENT = 0.01, CHARS_PER_TOKEN2 = 4, DEFAULT_CONTEXT_CHARS = 200000, DEFAULT_CHAR_BUDGET, MAX_LISTING_DESC_CHARS = 1536, MIN_DESC_LENGTH = 20, getPrompt3;
-var init_prompt26 = __esm(() => {
+var init_prompt27 = __esm(() => {
   init_lodash();
   init_commands5();
   init_loadSkillsDir();
@@ -608129,13 +608309,13 @@ function createPluginCommand(commandName, file2, sourceName, pluginManifest, plu
         let finalContent = config7.isSkillMode ? `Base directory for this skill: ${dirname51(file2.filePath)}
 
 ${content}` : content;
-        finalContent = substituteArguments(finalContent, args, true, argumentNames);
+        finalContent = substituteArguments(finalContent, args, true, argumentNames, escapeShellExecutionMarkers);
         finalContent = substitutePluginVariables(finalContent, {
           path: pluginPath,
           source: sourceName
         });
         if (pluginManifest.userConfig) {
-          finalContent = substituteUserConfigInContent(finalContent, loadPluginOptions(sourceName), pluginManifest.userConfig);
+          finalContent = substituteUserConfigInContent(finalContent, loadPluginOptions(sourceName), pluginManifest.userConfig, escapeShellExecutionMarkers);
         }
         if (config7.isSkillMode) {
           const rawSkillDir = dirname51(file2.filePath);
@@ -608808,7 +608988,7 @@ var init_cacheUtils = __esm(() => {
   init_commands5();
   init_outputStyles();
   init_loadAgentsDir();
-  init_prompt26();
+  init_prompt27();
   init_attachments2();
   init_debug();
   init_errors();
@@ -616555,7 +616735,7 @@ var init_messages3 = __esm(() => {
   init_planAgent();
   init_builtInAgents();
   init_constants3();
-  init_prompt8();
+  init_prompt9();
   init_BashTool();
   init_ExitPlanModeV2Tool();
   init_FileEditTool();
@@ -630768,6 +630948,7 @@ var init_apiMicrocompact = __esm(() => {
   init_prompt4();
   init_prompt2();
   init_prompt6();
+  init_prompt7();
   init_shellToolUtils();
   init_envValidation();
   init_envUtils();
@@ -631269,6 +631450,7 @@ async function* queryModel(messages, systemPrompt, thinkingConfig, tools, signal
   }
   const previousRequestId = getPreviousRequestIdFromMessages(messages);
   const resolvedModel = getAPIProvider() === "bedrock" && options.model.includes("application-inference-profile") ? await getInferenceProfileBackingModel(options.model) ?? options.model : options.model;
+  signalUnrecognizedModel(options.model, options.querySource);
   queryCheckpoint("query_tool_schema_build_start");
   const isAgenticQuery = options.querySource.startsWith("repl_main_thread") || options.querySource.startsWith("agent:") || options.querySource === "sdk" || options.querySource === "hook_agent" || options.querySource === "verification_agent";
   const betas = getMergedBetas(options.model, { isAgenticQuery });
@@ -631492,10 +631674,10 @@ ${deferredToolList}
   let start = Date.now();
   let attemptNumber = 0;
   const attemptStartTimes = [];
-  let stream6 = undefined;
-  let streamRequestId = undefined;
-  let clientRequestId = undefined;
-  let streamResponse = undefined;
+  let stream6;
+  let streamRequestId;
+  let clientRequestId;
+  let streamResponse;
   function releaseStreamResources() {
     cleanupStream(stream6);
     stream6 = undefined;
@@ -631530,7 +631712,7 @@ ${deferredToolList}
     }
     const maxOutputTokens2 = retryContext?.maxTokensOverride || options.maxOutputTokensOverride || getMaxOutputTokensForModel(options.model);
     const hasThinking = thinkingConfig.type !== "disabled" && !isEnvTruthy(process.env.CLAUDE_CODE_DISABLE_THINKING);
-    let thinking = undefined;
+    let thinking;
     if (hasThinking && modelSupportsThinking(options.model)) {
       if (!isEnvTruthy(process.env.CLAUDE_CODE_DISABLE_ADAPTIVE_THINKING) && modelSupportsAdaptiveThinking(options.model)) {
         thinking = {
@@ -631622,7 +631804,7 @@ ${deferredToolList}
   }
   const newMessages = [];
   let ttftMs = 0;
-  let partialMessage = undefined;
+  let partialMessage;
   const contentBlocks = [];
   let usage2 = EMPTY_USAGE;
   let costUSD = 0;
@@ -631630,8 +631812,8 @@ ${deferredToolList}
   let didFallBackToNonStreaming = false;
   let fallbackMessage;
   let maxOutputTokens = 0;
-  let responseHeaders = undefined;
-  let research = undefined;
+  let responseHeaders;
+  let research;
   let isFastModeRequest = isFastMode;
   let isAdvisorInProgress = false;
   try {
@@ -632679,11 +632861,12 @@ var init_claude = __esm(() => {
   init_toolSearch();
   init_apiLimits();
   init_betas();
-  init_prompt10();
+  init_prompt11();
   init_envValidation();
   init_json();
   init_bedrock();
   init_model();
+  init_unrecognizedModelSignal();
   init_sessionActivity();
   init_slowOperations();
   init_sessionTracing();
@@ -633662,7 +633845,7 @@ __export(exports_prompt7, {
   TERMINAL_CAPTURE_TOOL_NAME: () => TERMINAL_CAPTURE_TOOL_NAME
 });
 var TERMINAL_CAPTURE_TOOL_NAME = "";
-var init_prompt27 = () => {};
+var init_prompt28 = () => {};
 
 // src/tools/VerifyPlanExecutionTool/constants.ts
 var exports_constants2 = {};
@@ -633715,13 +633898,13 @@ function isAutoModeAllowlistedTool(toolName) {
 var TERMINAL_CAPTURE_TOOL_NAME2, OVERFLOW_TEST_TOOL_NAME2, VERIFY_PLAN_EXECUTION_TOOL_NAME2, WORKFLOW_TOOL_NAME2, SAFE_YOLO_ALLOWLISTED_TOOLS;
 var init_classifierDecision = __esm(() => {
   init_featureFlags();
-  init_prompt8();
+  init_prompt9();
   init_prompt3();
   init_prompt2();
-  init_prompt12();
-  init_prompt10();
+  init_prompt13();
+  init_prompt11();
   init_yoloClassifier();
-  TERMINAL_CAPTURE_TOOL_NAME2 = feature("TERMINAL_PANEL") ? (init_prompt27(), __toCommonJS(exports_prompt7)).TERMINAL_CAPTURE_TOOL_NAME : null;
+  TERMINAL_CAPTURE_TOOL_NAME2 = feature("TERMINAL_PANEL") ? (init_prompt28(), __toCommonJS(exports_prompt7)).TERMINAL_CAPTURE_TOOL_NAME : null;
   OVERFLOW_TEST_TOOL_NAME2 = feature("OVERFLOW_TEST_TOOL") ? (init_OverflowTestTool(), __toCommonJS(exports_OverflowTestTool)).OVERFLOW_TEST_TOOL_NAME : null;
   VERIFY_PLAN_EXECUTION_TOOL_NAME2 = process.env.USER_TYPE === "ant" ? (init_constants11(), __toCommonJS(exports_constants2)).VERIFY_PLAN_EXECUTION_TOOL_NAME : null;
   WORKFLOW_TOOL_NAME2 = feature("WORKFLOW_SCRIPTS") ? __toCommonJS(exports_constants).WORKFLOW_TOOL_NAME : null;
@@ -644428,7 +644611,7 @@ function clearSessionCaches(preservedAgentIds = new Set) {
   Promise.resolve().then(() => (init_utils12(), exports_utils2)).then(({ clearWebFetchCache: clearWebFetchCache2 }) => clearWebFetchCache2());
   Promise.resolve().then(() => (init_ToolSearchTool(), exports_ToolSearchTool)).then(({ clearToolSearchDescriptionCache: clearToolSearchDescriptionCache2 }) => clearToolSearchDescriptionCache2());
   Promise.resolve().then(() => (init_loadAgentsDir(), exports_loadAgentsDir)).then(({ clearAgentDefinitionsCache: clearAgentDefinitionsCache2 }) => clearAgentDefinitionsCache2());
-  Promise.resolve().then(() => (init_prompt26(), exports_prompt6)).then(({ clearPromptCache: clearPromptCache2 }) => clearPromptCache2());
+  Promise.resolve().then(() => (init_prompt27(), exports_prompt6)).then(({ clearPromptCache: clearPromptCache2 }) => clearPromptCache2());
 }
 var init_caches = __esm(() => {
   init_featureFlags();
@@ -644708,7 +644891,8 @@ var init_color3 = __esm(() => {
 
 // src/commands/commit.ts
 function getPromptContent() {
-  const { commit: commitAttribution } = getAttributionTexts();
+  const { commit: rawCommitAttribution } = getAttributionTexts();
+  const commitAttribution = escapeShellExecutionMarkers(rawCommitAttribution);
   let prefix = "";
   if (process.env.USER_TYPE === "ant" && isUndercover()) {
     prefix = getUndercoverInstructions() + `
@@ -645708,10 +645892,11 @@ var init_desktop2 = __esm(() => {
 
 // src/commands/commit-push-pr.ts
 function getPromptContent2(defaultBranch, prAttribution) {
-  const { commit: commitAttribution, pr: defaultPrAttribution } = getAttributionTexts();
-  const effectivePrAttribution = prAttribution ?? defaultPrAttribution;
-  const safeUser = process.env.SAFEUSER || "";
-  const username = process.env.USER || "";
+  const { commit: rawCommitAttribution, pr: defaultPrAttribution } = getAttributionTexts();
+  const commitAttribution = escapeShellExecutionMarkers(rawCommitAttribution);
+  const effectivePrAttribution = escapeShellExecutionMarkers(prAttribution ?? defaultPrAttribution);
+  const safeUser = sanitizeUsername(process.env.SAFEUSER || "");
+  const username = sanitizeUsername(process.env.USER || "");
   let prefix = "";
   let reviewerArg = " and `--reviewer anthropics/claude-code`";
   let addReviewerArg = " (and add `--add-reviewer anthropics/claude-code`)";
@@ -645829,7 +646014,7 @@ var init_commit_push_pr = __esm(() => {
 
 ## Additional instructions from user
 
-${trimmedArgs}`;
+${escapeShellExecutionMarkers(trimmedArgs)}`;
       }
       const finalContent = await executeShellCommandsInPrompt(promptContent, {
         ...context7,
@@ -652324,6 +652509,7 @@ var LARGE_TOOL_RESULT_PERCENT = 15, LARGE_TOOL_RESULT_TOKENS = 1e4, READ_BLOAT_P
 var init_contextSuggestions = __esm(() => {
   init_prompt3();
   init_prompt2();
+  init_prompt6();
   init_file();
   init_format();
 });
@@ -653587,7 +653773,7 @@ var init_context_noninteractive = __esm(() => {
   init_commands5();
   init_microCompact();
   init_tokenEstimation();
-  init_prompt26();
+  init_prompt27();
   init_analyzeContext();
   init_cwd2();
   init_format();
@@ -669349,7 +669535,7 @@ async function loadInstallCountsCache() {
       return null;
     }
     const now2 = Date.now();
-    if (now2 - fetchedAt > CACHE_TTL_MS4) {
+    if (now2 - fetchedAt > CACHE_TTL_MS3) {
       logForDebugging("Install counts cache is stale (>24h old)");
       return null;
     }
@@ -669446,7 +669632,7 @@ function formatInstallCount(count4) {
   const formatted = m5.toFixed(1);
   return formatted.endsWith(".0") ? `${formatted.slice(0, -2)}M` : `${formatted}M`;
 }
-var INSTALL_COUNTS_CACHE_VERSION = 1, INSTALL_COUNTS_CACHE_FILENAME = "install-counts-cache.json", INSTALL_COUNTS_URL = "https://raw.githubusercontent.com/anthropics/claude-plugins-official/refs/heads/stats/stats/plugin-installs.json", CACHE_TTL_MS4;
+var INSTALL_COUNTS_CACHE_VERSION = 1, INSTALL_COUNTS_CACHE_FILENAME = "install-counts-cache.json", INSTALL_COUNTS_URL = "https://raw.githubusercontent.com/anthropics/claude-plugins-official/refs/heads/stats/stats/plugin-installs.json", CACHE_TTL_MS3;
 var init_installCounts = __esm(() => {
   init_axios2();
   init_debug();
@@ -669456,7 +669642,7 @@ var init_installCounts = __esm(() => {
   init_slowOperations();
   init_fetchTelemetry();
   init_pluginDirectories();
-  CACHE_TTL_MS4 = 24 * 60 * 60 * 1000;
+  CACHE_TTL_MS3 = 24 * 60 * 60 * 1000;
 });
 
 // src/commands/plugin/PluginOptionsDialog.tsx
@@ -690867,7 +691053,7 @@ var init_Messages = __esm(() => {
   });
   proactiveModule4 = feature("PROACTIVE") || feature("KAIROS") ? (init_proactive(), __toCommonJS(exports_proactive)) : null;
   BRIEF_TOOL_NAME6 = feature("KAIROS") || feature("KAIROS_BRIEF") ? (init_prompt(), __toCommonJS(exports_prompt)).BRIEF_TOOL_NAME : null;
-  SEND_USER_FILE_TOOL_NAME4 = feature("KAIROS") ? (init_prompt7(), __toCommonJS(exports_prompt2)).SEND_USER_FILE_TOOL_NAME : null;
+  SEND_USER_FILE_TOOL_NAME4 = feature("KAIROS") ? (init_prompt8(), __toCommonJS(exports_prompt2)).SEND_USER_FILE_TOOL_NAME : null;
   Messages4 = React89.memo(MessagesImpl, (prev, next2) => {
     const keys3 = Object.keys(prev);
     for (const key4 of keys3) {
@@ -699225,7 +699411,7 @@ var init_RemoteSessionDetailDialog = __esm(() => {
   init_ink2();
   init_RemoteAgentTask();
   init_constants3();
-  init_prompt8();
+  init_prompt9();
   init_browser();
   init_errors();
   init_format();
@@ -731726,7 +731912,7 @@ var init_prompts4 = __esm(() => {
   init_betas2();
   init_forkSubagent();
   init_systemPromptSections();
-  init_prompt12();
+  init_prompt13();
   init_xml();
   init_debug();
   init_memdir();
@@ -760461,40 +760647,6 @@ var init_useVoiceEnabled = __esm(() => {
   import_react225 = __toESM(require_react(), 1);
 });
 
-// src/utils/oauthLoginExpiry.ts
-function computeOAuthLoginExpiry(tokens, context8, now2 = Date.now()) {
-  if (!context8.providerIsFirstParty || !context8.isClaudeAISubscriber) {
-    return null;
-  }
-  if (!tokens || typeof tokens.refreshTokenExpiresAt !== "number") {
-    return null;
-  }
-  const refreshTokenExpiresAt = tokens.refreshTokenExpiresAt;
-  if (typeof tokens.expiresAt === "number" && tokens.expiresAt > refreshTokenExpiresAt + LOGIN_EXPIRY_WARN_WINDOW_MS) {
-    return null;
-  }
-  const remaining = refreshTokenExpiresAt - now2;
-  if (remaining > LOGIN_EXPIRY_WARN_WINDOW_MS || remaining <= 0) {
-    return null;
-  }
-  return { daysLeft: Math.ceil(remaining / MS_PER_DAY) };
-}
-function getOAuthLoginExpiryInfo() {
-  return computeOAuthLoginExpiry(getClaudeAIOAuthTokens(), {
-    providerIsFirstParty: getAPIProvider() === "firstParty",
-    isClaudeAISubscriber: isClaudeAISubscriber()
-  });
-}
-function pluralize2(count4, noun) {
-  return count4 === 1 ? noun : `${noun}s`;
-}
-var MS_PER_DAY = 86400000, LOGIN_EXPIRY_WARN_WINDOW_MS;
-var init_oauthLoginExpiry = __esm(() => {
-  init_providers();
-  init_auth6();
-  LOGIN_EXPIRY_WARN_WINDOW_MS = 3 * MS_PER_DAY;
-});
-
 // src/components/PromptInput/OAuthExpiryNotice.tsx
 function OAuthExpiryNotice() {
   const { addNotification } = useNotifications();
@@ -764445,7 +764597,7 @@ var init_commandSuggestions = __esm(() => {
 // src/utils/suggestions/shellHistoryCompletion.ts
 async function getShellHistoryCommands() {
   const now2 = Date.now();
-  if (shellHistoryCache && now2 - shellHistoryCacheTimestamp < CACHE_TTL_MS5) {
+  if (shellHistoryCache && now2 - shellHistoryCacheTimestamp < CACHE_TTL_MS4) {
     return shellHistoryCache;
   }
   const commands7 = [];
@@ -764506,7 +764658,7 @@ function getShellHistoryCompletionSync(input2) {
 async function warmShellHistoryCache() {
   await getShellHistoryCommands();
 }
-var shellHistoryCache = null, shellHistoryCacheTimestamp = 0, CACHE_TTL_MS5 = 60000;
+var shellHistoryCache = null, shellHistoryCacheTimestamp = 0, CACHE_TTL_MS4 = 60000;
 var init_shellHistoryCompletion = __esm(() => {
   init_history();
   init_debug();
@@ -793791,7 +793943,7 @@ var init_tipRegistry = __esm(() => {
   init_color();
   init_OverageCreditUpsell();
   init_shortcutFormat();
-  init_prompt9();
+  init_prompt10();
   init_auth6();
   init_concurrentSessions();
   init_config4();
@@ -794763,6 +794915,28 @@ var init_previewNeutralizer = __esm(() => {
   LOOKALIKE_SINGLE_QUOTES_RE = /[\u2018\u2019\u201A\u201B]/g;
 });
 
+// src/utils/permissionPromptNotify.ts
+function getToolDisplayName(toolName) {
+  return (toolName.split("__").pop() || toolName).replace(/_/g, " ").replace(/\b\w/g, (char) => char.toUpperCase());
+}
+function schedulePermissionPromptNotifyHook(toolDisplayName, delayMs = PERMISSION_PROMPT_NOTIFY_DELAY_MS) {
+  if (process.env.CLAUDE_CODE_DISABLE_PERMISSION_PROMPT_NOTIFY_HOOKS) {
+    return () => {};
+  }
+  const timer2 = setTimeout((displayName) => {
+    executeNotificationHooks({
+      message: `Claude needs your permission to use ${displayName}`,
+      notificationType: "permission_prompt"
+    }).catch(() => {});
+  }, delayMs, toolDisplayName);
+  timer2.unref();
+  return () => clearTimeout(timer2);
+}
+var PERMISSION_PROMPT_NOTIFY_DELAY_MS = 6000;
+var init_permissionPromptNotify = __esm(() => {
+  init_hooks5();
+});
+
 // src/cli/ndjsonSafeStringify.ts
 function escapeJsLineTerminators(json2) {
   return json2.replace(JS_LINE_TERMINATORS, (c9) => c9 === "\u2028" ? "\\u2028" : "\\u2029");
@@ -795103,6 +795277,7 @@ class StructuredIO {
         const requestId = randomUUID62();
         const neutralizedRequestInput = neutralizePreviewInput(input2);
         onPermissionPrompt?.(buildRequiresActionDetails(tool, neutralizedRequestInput, toolUseID, requestId));
+        const cancelPermissionPromptNotify = schedulePermissionPromptNotifyHook(getToolDisplayName(tool.name));
         const sdkPromise = this.sendRequest({
           subtype: "can_use_tool",
           tool_name: tool.name,
@@ -795113,6 +795288,7 @@ class StructuredIO {
           tool_use_id: toolUseID,
           agent_id: toolUseContext.agentId
         }, outputSchema41(), hookAbortController.signal, requestId).then((result) => ({ source: "sdk", result }));
+        sdkPromise.then(cancelPermissionPromptNotify, cancelPermissionPromptNotify);
         const winner = await Promise.race([hookPromise, sdkPromise]);
         if (winner.source === "hook") {
           if (winner.decision) {
@@ -795177,14 +795353,19 @@ class StructuredIO {
   createSandboxAskCallback() {
     return async (hostPattern) => {
       try {
-        const result = await this.sendRequest({
-          subtype: "can_use_tool",
-          tool_name: SANDBOX_NETWORK_ACCESS_TOOL_NAME,
-          input: { host: hostPattern.host },
-          tool_use_id: randomUUID62(),
-          description: `Allow network connection to ${hostPattern.host}?`
-        }, outputSchema41());
-        return result.behavior === "allow";
+        const cancelPermissionPromptNotify = schedulePermissionPromptNotifyHook(getToolDisplayName(SANDBOX_NETWORK_ACCESS_TOOL_NAME));
+        try {
+          const result = await this.sendRequest({
+            subtype: "can_use_tool",
+            tool_name: SANDBOX_NETWORK_ACCESS_TOOL_NAME,
+            input: { host: hostPattern.host },
+            tool_use_id: randomUUID62(),
+            description: `Allow network connection to ${hostPattern.host}?`
+          }, outputSchema41());
+          return result.behavior === "allow";
+        } finally {
+          cancelPermissionPromptNotify();
+        }
       } catch {
         return false;
       }
@@ -795263,6 +795444,7 @@ var init_structuredIO = __esm(() => {
   init_slowOperations();
   init_v4();
   init_hooks5();
+  init_permissionPromptNotify();
   init_PermissionUpdate();
   init_sessionState();
   init_slowOperations();
@@ -800961,7 +801143,7 @@ var init_useScheduledTasks = __esm(() => {
   init_AppState();
   init_Task();
   init_InProcessTeammateTask();
-  init_prompt9();
+  init_prompt10();
   init_cronJitterConfig();
   init_cronScheduler();
   init_cronTasks();
@@ -804710,7 +804892,8 @@ var init_REPL = __esm(() => {
   init_ExitPlanModePermissionRequest();
   init_permissionSetup();
   init_filesystem();
-  init_prompt12();
+  init_prompt6();
+  init_prompt13();
   init_bashPermissions();
   init_config4();
   init_billing();
@@ -810393,7 +810576,7 @@ Examples:
   /batch add type annotations to all untyped function parameters`;
 var init_batch = __esm(() => {
   init_constants3();
-  init_prompt8();
+  init_prompt9();
   init_git();
   init_bundledSkills();
   WORKER_INSTRUCTIONS = `After you finish implementing the change:
@@ -812744,7 +812927,7 @@ function registerLoopSkill() {
 }
 var DEFAULT_INTERVAL = "10m", USAGE_MESSAGE;
 var init_loop = __esm(() => {
-  init_prompt9();
+  init_prompt10();
   init_bundledSkills();
   USAGE_MESSAGE = `Usage: /loop [interval] <prompt>
 
@@ -813110,7 +813293,7 @@ var BASE58 = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz", BASE_
 var init_scheduleRemoteAgents = __esm(() => {
   init_growthbook();
   init_policyLimits();
-  init_prompt8();
+  init_prompt9();
   init_auth6();
   init_preconditions();
   init_debug();
@@ -813723,7 +813906,7 @@ async function logSkillsLoaded(cwd2, contextWindowTokens) {
 var init_skillLoadedEvent = __esm(() => {
   init_commands5();
   init_analytics();
-  init_prompt26();
+  init_prompt27();
 });
 
 // src/cli/exit.ts
@@ -815854,7 +816037,7 @@ var init_streamlinedTransform = __esm(() => {
   init_prompt3();
   init_prompt4();
   init_prompt2();
-  init_prompt6();
+  init_prompt7();
   init_messages3();
   init_shellToolUtils();
   init_stringUtils();
@@ -820412,7 +820595,7 @@ var init_print = __esm(() => {
   proactiveModule9 = feature("PROACTIVE") || feature("KAIROS") ? (init_proactive(), __toCommonJS(exports_proactive)) : null;
   cronSchedulerModule = feature("AGENT_TRIGGERS") ? (init_cronScheduler(), __toCommonJS(exports_cronScheduler)) : null;
   cronJitterConfigModule = feature("AGENT_TRIGGERS") ? (init_cronJitterConfig(), __toCommonJS(exports_cronJitterConfig)) : null;
-  cronGate = feature("AGENT_TRIGGERS") ? (init_prompt9(), __toCommonJS(exports_prompt3)) : null;
+  cronGate = feature("AGENT_TRIGGERS") ? (init_prompt10(), __toCommonJS(exports_prompt3)) : null;
   extractMemoriesModule3 = feature("EXTRACT_MEMORIES") ? (init_extractMemories(), __toCommonJS(exports_extractMemories)) : null;
   receivedMessageUuids = new Set;
   receivedMessageUuidsOrder = [];