@costrict/csc 4.2.28 → 4.2.29

package/dist/cli.js

@@ -2577,8 +2577,8 @@ function getClientVersion() {
   if (cached)
     return cached;
   try {
-    if ("4.2.28") {
-      cached = "4.2.28";
+    if ("4.2.29") {
+      cached = "4.2.29";
       return cached;
     }
   } catch {}
@@ -222655,7 +222655,7 @@ async function fetchCoStrictModels(baseUrl, accessToken) {
       headers: {
         Authorization: `Bearer ${accessToken}`,
         Accept: "application/json",
-        "User-Agent": `csc/${"4.2.28"}`
+        "User-Agent": `csc/${"4.2.29"}`
       },
       signal: controller.signal
     });
@@ -224695,7 +224695,7 @@ var init_auth7 = __esm(() => {
 
 // src/utils/userAgent.ts
 function getClaudeCodeUserAgent() {
-  return `costrict/${"4.2.28"}`;
+  return `costrict/${"4.2.29"}`;
 }
 
 // src/utils/workloadContext.ts
@@ -224717,7 +224717,7 @@ function getUserAgent() {
   const clientApp = process.env.CLAUDE_AGENT_SDK_CLIENT_APP ? `, client-app/${process.env.CLAUDE_AGENT_SDK_CLIENT_APP}` : "";
   const workload = getWorkload();
   const workloadSuffix = workload ? `, workload/${workload}` : "";
-  return `csc/${"4.2.28"}`;
+  return `csc/${"4.2.29"}`;
 }
 function getMCPUserAgent() {
   const parts = [];
@@ -224731,7 +224731,7 @@ function getMCPUserAgent() {
     parts.push(`client-app/${process.env.CLAUDE_AGENT_SDK_CLIENT_APP}`);
   }
   const suffix = parts.length > 0 ? ` (${parts.join(", ")})` : "";
-  return `csc/${"4.2.28"}${suffix}`;
+  return `csc/${"4.2.29"}${suffix}`;
 }
 function getWebFetchUserAgent() {
   return `Claude-User (${getClaudeCodeUserAgent()}; +https://support.anthropic.com/)`;
@@ -224851,7 +224851,7 @@ var init_user = __esm(() => {
       deviceId,
       sessionId: getSessionId(),
       email: getEmail(),
-      appVersion: "4.2.28",
+      appVersion: "4.2.29",
       platform: getHostPlatformForAnalytics(),
       organizationUuid,
       accountUuid,
@@ -235899,7 +235899,7 @@ var init_metadata = __esm(() => {
   COMPOUND_OPERATOR_REGEX = /\s*(?:&&|\|\||[;|])\s*/;
   WHITESPACE_REGEX = /\s+/;
   getVersionBase = memoize_default(() => {
-    const match = "4.2.28".match(/^\d+\.\d+\.\d+(?:-[a-z]+)?/);
+    const match = "4.2.29".match(/^\d+\.\d+\.\d+(?:-[a-z]+)?/);
     return match ? match[0] : undefined;
   });
   buildEnvContext = memoize_default(async () => {
@@ -235939,9 +235939,9 @@ var init_metadata = __esm(() => {
       isGithubAction: isEnvTruthy(process.env.GITHUB_ACTIONS),
       isClaudeCodeAction: isEnvTruthy(process.env.CLAUDE_CODE_ACTION),
       isClaudeAiAuth: isClaudeAISubscriber(),
-      version: "4.2.28",
+      version: "4.2.29",
       versionBase: getVersionBase(),
-      buildTime: "2026-08-18T11:01:08.201Z",
+      buildTime: "2026-08-24T01:42:33.096Z",
       deploymentEnvironment: env4.detectDeploymentEnvironment(),
       ...isEnvTruthy(process.env.GITHUB_ACTIONS) && {
         githubEventName: process.env.GITHUB_EVENT_NAME,
@@ -236612,7 +236612,7 @@ function initialize1PEventLogging() {
   const platform3 = getPlatform();
   const attributes = {
     [import_semantic_conventions2.ATTR_SERVICE_NAME]: "claude-code",
-    [import_semantic_conventions2.ATTR_SERVICE_VERSION]: "4.2.28"
+    [import_semantic_conventions2.ATTR_SERVICE_VERSION]: "4.2.29"
   };
   if (platform3 === "wsl") {
     const wslVersion = getWslVersion();
@@ -236639,7 +236639,7 @@ function initialize1PEventLogging() {
       })
     ]
   });
-  firstPartyEventLogger = firstPartyEventLoggerProvider.getLogger("com.anthropic.claude_code.events", "4.2.28");
+  firstPartyEventLogger = firstPartyEventLoggerProvider.getLogger("com.anthropic.claude_code.events", "4.2.29");
 }
 async function reinitialize1PEventLoggingIfConfigChanged() {
   if (!is1PEventLoggingEnabled() || !firstPartyEventLoggerProvider) {
@@ -318296,6 +318296,7 @@ var init_tools3 = __esm(() => {
     SKILL_TOOL_NAME,
     SYNTHETIC_OUTPUT_TOOL_NAME,
     SEARCH_EXTRA_TOOLS_TOOL_NAME,
+    EXECUTE_TOOL_NAME,
     ENTER_WORKTREE_TOOL_NAME,
     EXIT_WORKTREE_TOOL_NAME
   ]);
@@ -324849,7 +324850,7 @@ function clearSearchExtraToolsDescriptionCache() {
   getToolDescriptionMemoized.cache.clear?.();
   cachedDeferredToolNames = null;
 }
-function buildSearchResult(matches, query3, totalDeferredTools, pendingMcpServers, alreadyLoaded, details) {
+function buildSearchResult(matches, query3, totalDeferredTools, pendingMcpServers, alreadyLoaded, details, executorAvailable) {
   return {
     data: {
       matches,
@@ -324857,7 +324858,8 @@ function buildSearchResult(matches, query3, totalDeferredTools, pendingMcpServer
       total_deferred_tools: totalDeferredTools,
       ...pendingMcpServers && pendingMcpServers.length > 0 ? { pending_mcp_servers: pendingMcpServers } : {},
       ...alreadyLoaded && alreadyLoaded.length > 0 ? { already_loaded: alreadyLoaded } : {},
-      ...details && details.length > 0 ? { details } : {}
+      ...details && details.length > 0 ? { details } : {},
+      ...executorAvailable !== undefined ? { executorAvailable } : {}
     }
   };
 }
@@ -324981,7 +324983,8 @@ var init_SearchExtraToolsTool = __esm(() => {
       description: exports_external.string(),
       score: exports_external.number(),
       inputSchema: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
-    })).optional()
+    })).optional(),
+    executorAvailable: exports_external.boolean().optional()
   }));
   getToolDescriptionMemoized = memoize_default(async (toolName, tools) => {
     const tool = findToolByName(tools, toolName);
@@ -325030,6 +325033,7 @@ var init_SearchExtraToolsTool = __esm(() => {
       const { query: query3, max_results = 5 } = input;
       const deferredTools = tools.filter(isDeferredTool);
       maybeInvalidateCache(deferredTools);
+      const executorAvailable = findToolByName(tools, EXECUTE_TOOL_NAME) !== undefined;
       function getPendingServerNames() {
         const appState = getAppState();
         const pending = appState.mcp.clients.filter((c10) => c10.type === "pending");
@@ -325069,7 +325073,7 @@ var init_SearchExtraToolsTool = __esm(() => {
           logForDebugging(`SearchExtraToolsTool: select failed \u2014 none found: ${missing.join(", ")}`);
           logSearchOutcome([], "select");
           const pendingServers = getPendingServerNames();
-          return buildSearchResult([], query3, deferredTools.length, pendingServers);
+          return buildSearchResult([], query3, deferredTools.length, pendingServers, undefined, undefined, executorAvailable);
         }
         if (missing.length > 0) {
           logForDebugging(`SearchExtraToolsTool: partial select \u2014 found: ${found.join(", ")}, missing: ${missing.join(", ")}`);
@@ -325088,7 +325092,7 @@ var init_SearchExtraToolsTool = __esm(() => {
             } : {}
           };
         }));
-        return buildSearchResult(found, query3, deferredTools.length, undefined, alreadyLoaded2.length > 0 ? alreadyLoaded2 : undefined, details);
+        return buildSearchResult(found, query3, deferredTools.length, undefined, alreadyLoaded2.length > 0 ? alreadyLoaded2 : undefined, details, executorAvailable);
       }
       const discoverMatch = query3.match(/^discover:(.+)$/i);
       if (discoverMatch) {
@@ -325102,7 +325106,7 @@ var init_SearchExtraToolsTool = __esm(() => {
           ...r7.inputSchema ? { inputSchema: r7.inputSchema } : {}
         }));
         logSearchOutcome(tfIdfResults2.map((r7) => r7.name), "keyword");
-        return buildSearchResult(tfIdfResults2.map((r7) => r7.name), query3, deferredTools.length, undefined, undefined, details);
+        return buildSearchResult(tfIdfResults2.map((r7) => r7.name), query3, deferredTools.length, undefined, undefined, details, executorAvailable);
       }
       const deferredToolNames = new Set(deferredTools.map((t2) => t2.name));
       const [keywordMatches, index2] = await Promise.all([
@@ -325136,9 +325140,9 @@ var init_SearchExtraToolsTool = __esm(() => {
       logSearchOutcome(matches, "keyword");
       if (matches.length === 0) {
         const pendingServers = getPendingServerNames();
-        return buildSearchResult(matches, query3, deferredTools.length, pendingServers);
+        return buildSearchResult(matches, query3, deferredTools.length, pendingServers, undefined, undefined, executorAvailable);
       }
-      return buildSearchResult(matches, query3, deferredTools.length, undefined, alreadyLoaded.length > 0 ? alreadyLoaded : undefined, mcpDetails.length > 0 ? mcpDetails : undefined);
+      return buildSearchResult(matches, query3, deferredTools.length, undefined, alreadyLoaded.length > 0 ? alreadyLoaded : undefined, mcpDetails.length > 0 ? mcpDetails : undefined, executorAvailable);
     },
     renderToolUseMessage(input) {
       if (!input.query)
@@ -325178,13 +325182,16 @@ Schema: ${renderSchema(d7.inputSchema)}`;
           return line;
         });
         const title = isDiscover ? `Found ${lines2.length} tool(s) matching your query:` : `Found ${lines2.length} deferred tool(s):`;
+        const tail = content.executorAvailable === false ? `
+
+ExecuteExtraTool is not available in your current tool list, so these deferred tools cannot be invoked here. Do not attempt to call them \u2014 proceed without them.` : `
+
+Use ExecuteExtraTool with {"tool_name": "<name>", "params": {...}} to invoke any of these deferred tools, preserving the parameter types shown in its schema.`;
         const text3 = `${title}
 
 ` + lines2.join(`
 
-`) + `
-
-Use ExecuteExtraTool with {"tool_name": "<name>", "params": {...}} to invoke any of these deferred tools, preserving the parameter types shown in its schema.`;
+`) + tail;
         return {
           type: "tool_result",
           tool_use_id: toolUseID,
@@ -325205,8 +325212,9 @@ Use ExecuteExtraTool with {"tool_name": "<name>", "params": {...}} to invoke any
         parts.push(`Already loaded as core tool(s): ${alreadyLoadedNames.join(", ")}. Call these directly using your normal tool interface \u2014 do NOT use ExecuteExtraTool for them.`);
       }
       if (deferredNames.length > 0) {
+        const deferredTail = content.executorAvailable === false ? `However, ExecuteExtraTool is not available in your current tool list, so they cannot be invoked here. Do not attempt to call them \u2014 proceed without them.` : `Use ExecuteExtraTool with {"tool_name": "<name>", "params": {...}} to invoke any of these deferred tools.`;
         parts.push(`Found ${deferredNames.length} deferred tool(s): ${deferredNames.join(", ")}.` + `
-Use ExecuteExtraTool with {"tool_name": "<name>", "params": {...}} to invoke any of these deferred tools.`);
+${deferredTail}`);
       }
       const text2 = parts.join(`
 `);
@@ -326717,12 +326725,14 @@ async function* adaptOpenAIStreamToAnthropic(stream6, model) {
     const choice = chunk.choices?.[0];
     const delta = choice?.delta;
     if (chunk.usage) {
-      inputTokens = chunk.usage.prompt_tokens ?? inputTokens;
-      outputTokens = chunk.usage.completion_tokens ?? outputTokens;
       const details = chunk.usage.prompt_tokens_details;
       if (details?.cached_tokens != null) {
         cachedReadTokens = details.cached_tokens;
       }
+      if (chunk.usage.prompt_tokens != null) {
+        inputTokens = Math.max(chunk.usage.prompt_tokens - cachedReadTokens, 0);
+      }
+      outputTokens = chunk.usage.completion_tokens ?? outputTokens;
     }
     if (!started) {
       started = true;
@@ -435563,7 +435573,7 @@ function getTelemetryAttributes() {
     attributes["session.id"] = sessionId;
   }
   if (shouldIncludeAttribute("OTEL_METRICS_INCLUDE_VERSION")) {
-    attributes["app.version"] = "4.2.28";
+    attributes["app.version"] = "4.2.29";
   }
   const oauthAccount = getOauthAccountInfo();
   if (oauthAccount) {
@@ -469083,7 +469093,7 @@ function initLangfuse() {
       flushInterval: parseInt(process.env.LANGFUSE_FLUSH_INTERVAL ?? "10", 10),
       mask: maskFn,
       environment: process.env.LANGFUSE_TRACING_ENVIRONMENT ?? "development",
-      release: "4.2.28",
+      release: "4.2.29",
       exportMode: process.env.LANGFUSE_EXPORT_MODE ?? "batched",
       timeout: parseInt(process.env.LANGFUSE_TIMEOUT ?? "5", 10)
     });
@@ -500880,7 +500890,7 @@ function initSentry() {
   }
   init3({
     dsn,
-    release: typeof MACRO !== "undefined" ? "4.2.28" : undefined,
+    release: typeof MACRO !== "undefined" ? "4.2.29" : undefined,
     environment: typeof BUILD_ENV !== "undefined" ? BUILD_ENV : "production",
     maxBreadcrumbs: 20,
     sampleRate: 1,
@@ -528777,7 +528787,7 @@ async function initializeBetaTracing(resource) {
   });
   logs.setGlobalLoggerProvider(loggerProvider);
   setLoggerProvider(loggerProvider);
-  const eventLogger = logs.getLogger("com.anthropic.claude_code.events", "4.2.28");
+  const eventLogger = logs.getLogger("com.anthropic.claude_code.events", "4.2.29");
   setEventLogger(eventLogger);
   process.on("beforeExit", async () => {
     await loggerProvider?.forceFlush();
@@ -528817,7 +528827,7 @@ async function initializeTelemetry() {
   const platform5 = getPlatform();
   const baseAttributes = {
     [import_semantic_conventions29.ATTR_SERVICE_NAME]: "claude-code",
-    [import_semantic_conventions29.ATTR_SERVICE_VERSION]: "4.2.28"
+    [import_semantic_conventions29.ATTR_SERVICE_VERSION]: "4.2.29"
   };
   if (platform5 === "wsl") {
     const wslVersion = getWslVersion();
@@ -528862,7 +528872,7 @@ async function initializeTelemetry() {
       } catch {}
     };
     registerCleanup(shutdownTelemetry2);
-    return meterProvider2.getMeter("com.anthropic.claude_code", "4.2.28");
+    return meterProvider2.getMeter("com.anthropic.claude_code", "4.2.29");
   }
   const meterProvider = new import_sdk_metrics2.MeterProvider({
     resource,
@@ -528882,7 +528892,7 @@ async function initializeTelemetry() {
       });
       logs.setGlobalLoggerProvider(loggerProvider);
       setLoggerProvider(loggerProvider);
-      const eventLogger = logs.getLogger("com.anthropic.claude_code.events", "4.2.28");
+      const eventLogger = logs.getLogger("com.anthropic.claude_code.events", "4.2.29");
       setEventLogger(eventLogger);
       logForDebugging("[3P telemetry] Event logger set successfully");
       process.on("beforeExit", async () => {
@@ -528944,7 +528954,7 @@ Current timeout: ${timeoutMs}ms
     }
   };
   registerCleanup(shutdownTelemetry);
-  return meterProvider.getMeter("com.anthropic.claude_code", "4.2.28");
+  return meterProvider.getMeter("com.anthropic.claude_code", "4.2.29");
 }
 async function flushTelemetry() {
   const meterProvider = getMeterProvider();
@@ -530003,7 +530013,7 @@ async function installGlobalPackage(specificVersion) {
     logError2(new AutoUpdaterError("Another process is currently installing an update"));
     logEvent("tengu_auto_updater_lock_contention", {
       pid: process.pid,
-      currentVersion: "4.2.28"
+      currentVersion: "4.2.29"
     });
     return { status: "in_progress" };
   }
@@ -530012,7 +530022,7 @@ async function installGlobalPackage(specificVersion) {
     if (!env4.isRunningWithBun() && env4.isNpmFromWindowsPath()) {
       logError2(new Error("Windows NPM detected in WSL environment"));
       logEvent("tengu_auto_updater_windows_npm_in_wsl", {
-        currentVersion: "4.2.28"
+        currentVersion: "4.2.29"
       });
       return {
         status: "install_failed",
@@ -530558,7 +530568,7 @@ function detectLinuxGlobPatternWarnings() {
 }
 async function getDoctorDiagnostic() {
   const installationType = await getCurrentInstallationType();
-  const version9 = typeof MACRO !== "undefined" ? "4.2.28" : "unknown";
+  const version9 = typeof MACRO !== "undefined" ? "4.2.29" : "unknown";
   const installationPath = await getInstallationPath();
   const invokedBinary = getInvokedBinary();
   const multipleInstallations = await detectMultipleInstallations();
@@ -568745,7 +568755,7 @@ async function setupSdkMcpClients(sdkMcpConfigs, sendMcpMessage) {
     const client10 = new Client3({
       name: "claude-code",
       title: "CoStrict",
-      version: "4.2.28",
+      version: "4.2.29",
       description: "CoStrict agentic coding tool",
       websiteUrl: PRODUCT_URL
     }, {
@@ -569116,7 +569126,7 @@ var init_client18 = __esm(() => {
       const client10 = new Client3({
         name: "claude-code",
         title: "CoStrict",
-        version: "4.2.28",
+        version: "4.2.29",
         description: "CoStrict agentic coding tool",
         websiteUrl: PRODUCT_URL
       }, {
@@ -570506,7 +570516,7 @@ function getInstallationEnv() {
   return;
 }
 function getClaudeCodeVersion() {
-  return "4.2.28";
+  return "4.2.29";
 }
 async function getInstalledVSCodeExtensionVersion(command4) {
   const { stdout } = await execFileNoThrow(command4, ["--list-extensions", "--show-versions"], {
@@ -571870,8 +571880,8 @@ async function updateLatest(channelOrVersion, forceReinstall = false) {
     const maxVersion = await getMaxVersion();
     if (maxVersion && gt(version10, maxVersion)) {
       logForDebugging(`Native installer: maxVersion ${maxVersion} is set, capping update from ${version10} to ${maxVersion}`);
-      if (gte2("4.2.28", maxVersion)) {
-        logForDebugging(`Native installer: current version ${"4.2.28"} is already at or above maxVersion ${maxVersion}, skipping update`);
+      if (gte2("4.2.29", maxVersion)) {
+        logForDebugging(`Native installer: current version ${"4.2.29"} is already at or above maxVersion ${maxVersion}, skipping update`);
         logEvent("tengu_native_update_skipped_max_version", {
           latency_ms: Date.now() - startTime2,
           max_version: maxVersion,
@@ -571882,7 +571892,7 @@ async function updateLatest(channelOrVersion, forceReinstall = false) {
       version10 = maxVersion;
     }
   }
-  if (!forceReinstall && version10 === "4.2.28" && await versionIsAvailable(version10) && await isPossibleClaudeBinary(executablePath)) {
+  if (!forceReinstall && version10 === "4.2.29" && await versionIsAvailable(version10) && await isPossibleClaudeBinary(executablePath)) {
     logForDebugging(`Found ${version10} at ${executablePath}, skipping install`);
     logEvent("tengu_native_update_complete", {
       latency_ms: Date.now() - startTime2,
@@ -683155,7 +683165,7 @@ async function* queryLoop(params, consumedCommandUuids) {
               }
               let withheld = false;
               if (false) {}
-              if (reactiveCompact?.isWithheldPromptTooLong(message2)) {
+              if (querySource !== "compact" && querySource !== "session_memory" && reactiveCompact?.isWithheldPromptTooLong(message2)) {
                 withheld = true;
               }
               if (mediaRecoveryEnabled && reactiveCompact?.isWithheldMediaSizeError(message2)) {
@@ -683291,7 +683301,7 @@ async function* queryLoop(params, consumedCommandUuids) {
       }
       if (!needsFollowUp) {
         const lastMessage = assistantMessages.at(-1);
-        const isWithheld413 = lastMessage?.type === "assistant" && lastMessage.isApiErrorMessage && isPromptTooLongMessage(lastMessage);
+        const isWithheld413 = querySource !== "compact" && querySource !== "session_memory" && lastMessage?.type === "assistant" && lastMessage.isApiErrorMessage && isPromptTooLongMessage(lastMessage);
         const isWithheldMedia = mediaRecoveryEnabled && reactiveCompact?.isWithheldMediaSizeError(lastMessage);
         if (isWithheld413) {
           if (false) {}
@@ -686144,6 +686154,9 @@ async function autoCompactIfNeeded(messages, toolUseContext, cacheSafeParams, qu
   if (isEnvTruthy(process.env.DISABLE_COMPACT)) {
     return { wasCompacted: false };
   }
+  if (querySource === "compact" || querySource === "session_memory") {
+    return { wasCompacted: false };
+  }
   if (tracking?.consecutiveFailures !== undefined && tracking.consecutiveFailures >= MAX_CONSECUTIVE_AUTOCOMPACT_FAILURES) {
     return { wasCompacted: false };
   }
@@ -700426,16 +700439,25 @@ var init_messages9 = __esm(() => {
   STRIPPED_TAGS_RE = /<(commit_analysis|context|function_analysis|pr_analysis)>.*?<\/\1>\n?/gs;
 });
 
-// src/services/api/errors.ts
-function startsWithApiErrorPrefix(text2) {
-  return text2.startsWith(API_ERROR_MESSAGE_PREFIX) || text2.startsWith(`Please run /login \xB7 ${API_ERROR_MESSAGE_PREFIX}`) || text2.startsWith(`Failed to authenticate. ${API_ERROR_MESSAGE_PREFIX}`) || text2.startsWith("CoStrict API Error") || text2.startsWith("Output truncated") || text2.startsWith("Model response error") || text2.startsWith("Task tool call failed") || text2.startsWith("Task checklist update failed");
-}
+// src/services/api/promptTooLong.ts
 function isPromptTooLongErrorText(message2) {
   const lower = message2.toLowerCase();
   if (lower.includes("prompt is too long"))
     return true;
   return lower.includes("maximum context length") && lower.includes("token") && (lower.includes("requested") || lower.includes("exceeds") || lower.includes("reduce"));
 }
+function normalizePromptTooLongText(text2) {
+  if (text2.startsWith(PROMPT_TOO_LONG_ERROR_MESSAGE)) {
+    return text2;
+  }
+  return isPromptTooLongErrorText(text2) ? PROMPT_TOO_LONG_ERROR_MESSAGE : text2;
+}
+var PROMPT_TOO_LONG_ERROR_MESSAGE = "Prompt is too long";
+
+// src/services/api/errors.ts
+function startsWithApiErrorPrefix(text2) {
+  return text2.startsWith(API_ERROR_MESSAGE_PREFIX) || text2.startsWith(`Please run /login \xB7 ${API_ERROR_MESSAGE_PREFIX}`) || text2.startsWith(`Failed to authenticate. ${API_ERROR_MESSAGE_PREFIX}`) || text2.startsWith("CoStrict API Error") || text2.startsWith("Output truncated") || text2.startsWith("Model response error") || text2.startsWith("Task tool call failed") || text2.startsWith("Task checklist update failed");
+}
 function isPromptTooLongMessage(msg) {
   if (!msg.isApiErrorMessage) {
     return false;
@@ -701059,7 +701081,7 @@ function getErrorMessageIfRefusal(stopReason, model) {
     error: "invalid_request"
   });
 }
-var API_ERROR_MESSAGE_PREFIX = "API Error", PROMPT_TOO_LONG_ERROR_MESSAGE = "Prompt is too long", CREDIT_BALANCE_TOO_LOW_ERROR_MESSAGE = "Credit balance is too low", INVALID_API_KEY_ERROR_MESSAGE = "Not logged in \xB7 Please run /login", INVALID_API_KEY_ERROR_MESSAGE_EXTERNAL = "Invalid API key \xB7 Fix external API key", ORG_DISABLED_ERROR_MESSAGE_ENV_KEY_WITH_OAUTH = "Your COSTRICT_API_KEY belongs to a disabled organization \xB7 Unset the environment variable to use your subscription instead", ORG_DISABLED_ERROR_MESSAGE_ENV_KEY = "Your COSTRICT_API_KEY belongs to a disabled organization \xB7 Update or unset the environment variable", TOKEN_REVOKED_ERROR_MESSAGE = "OAuth token revoked \xB7 Please run /login", CCR_AUTH_ERROR_MESSAGE = "Authentication error \xB7 This may be a temporary network issue, please try again", REPEATED_529_ERROR_MESSAGE = "Repeated 529 Overloaded errors", CUSTOM_OFF_SWITCH_MESSAGE = "Opus is experiencing high load, please use /model to switch to Sonnet", API_TIMEOUT_ERROR_MESSAGE = "Request timed out", OAUTH_ORG_NOT_ALLOWED_ERROR_MESSAGE = "Your account does not have access to CoStrict. Please run /login.";
+var API_ERROR_MESSAGE_PREFIX = "API Error", CREDIT_BALANCE_TOO_LOW_ERROR_MESSAGE = "Credit balance is too low", INVALID_API_KEY_ERROR_MESSAGE = "Not logged in \xB7 Please run /login", INVALID_API_KEY_ERROR_MESSAGE_EXTERNAL = "Invalid API key \xB7 Fix external API key", ORG_DISABLED_ERROR_MESSAGE_ENV_KEY_WITH_OAUTH = "Your COSTRICT_API_KEY belongs to a disabled organization \xB7 Unset the environment variable to use your subscription instead", ORG_DISABLED_ERROR_MESSAGE_ENV_KEY = "Your COSTRICT_API_KEY belongs to a disabled organization \xB7 Update or unset the environment variable", TOKEN_REVOKED_ERROR_MESSAGE = "OAuth token revoked \xB7 Please run /login", CCR_AUTH_ERROR_MESSAGE = "Authentication error \xB7 This may be a temporary network issue, please try again", REPEATED_529_ERROR_MESSAGE = "Repeated 529 Overloaded errors", CUSTOM_OFF_SWITCH_MESSAGE = "Opus is experiencing high load, please use /model to switch to Sonnet", API_TIMEOUT_ERROR_MESSAGE = "Request timed out", OAUTH_ORG_NOT_ALLOWED_ERROR_MESSAGE = "Your account does not have access to CoStrict. Please run /login.";
 var init_errors19 = __esm(() => {
   init_sdk();
   init_betas();
@@ -702217,6 +702239,28 @@ function getDenyRuleForTool(context40, tool) {
 function getAskRuleForTool(context40, tool) {
   return getAskRules(context40).find((rule) => toolMatchesRule(tool, rule)) || null;
 }
+function getProxyTargetRule(context40, tool, input4) {
+  if (tool.name !== EXECUTE_TOOL_NAME) {
+    return null;
+  }
+  const targetName = input4.tool_name;
+  if (typeof targetName !== "string" || targetName === "") {
+    return null;
+  }
+  if (targetName === EXECUTE_TOOL_NAME) {
+    return null;
+  }
+  const target = { name: targetName };
+  const denyRule = getDenyRuleForTool(context40, target);
+  if (denyRule) {
+    return { kind: "deny", rule: denyRule, targetName };
+  }
+  const allowRule = toolAlwaysAllowedRule(context40, target);
+  if (allowRule) {
+    return { kind: "allow", rule: allowRule, targetName };
+  }
+  return null;
+}
 function getDenyRuleForAgent(context40, agentToolName, agentType) {
   return getDenyRules(context40).find((rule) => rule.ruleValue.toolName === agentToolName && rule.ruleValue.ruleContent === agentType) || null;
 }
@@ -702365,6 +702409,17 @@ async function checkRuleBasedPermissions(tool, input4, context40) {
       message: `Permission to use ${tool.name} has been denied.`
     };
   }
+  const proxyRule = getProxyTargetRule(appState.toolPermissionContext, tool, input4);
+  if (proxyRule?.kind === "deny") {
+    return {
+      behavior: "deny",
+      decisionReason: {
+        type: "rule",
+        rule: proxyRule.rule
+      },
+      message: `Permission to use ${proxyRule.targetName} has been denied.`
+    };
+  }
   const askRule = getAskRuleForTool(appState.toolPermissionContext, tool);
   if (askRule) {
     const canSandboxAutoAllow = tool.name === BASH_TOOL_NAME && SandboxManager2.isSandboxingEnabled() && SandboxManager2.isAutoAllowBashIfSandboxedEnabled() && shouldUseSandbox(input4);
@@ -702420,6 +702475,17 @@ async function hasPermissionsToUseToolInner(tool, input4, context40) {
       message: `Permission to use ${tool.name} has been denied.`
     };
   }
+  const proxyTargetRule = getProxyTargetRule(appState.toolPermissionContext, tool, input4);
+  if (proxyTargetRule?.kind === "deny") {
+    return {
+      behavior: "deny",
+      decisionReason: {
+        type: "rule",
+        rule: proxyTargetRule.rule
+      },
+      message: `Permission to use ${proxyTargetRule.targetName} has been denied.`
+    };
+  }
   const askRule = getAskRuleForTool(appState.toolPermissionContext, tool);
   if (askRule) {
     const canSandboxAutoAllow = tool.name === BASH_TOOL_NAME && SandboxManager2.isSandboxingEnabled() && SandboxManager2.isAutoAllowBashIfSandboxedEnabled() && shouldUseSandbox(input4);
@@ -702509,7 +702575,7 @@ async function hasPermissionsToUseToolInner(tool, input4, context40) {
       }
     };
   }
-  const alwaysAllowedRule = toolAlwaysAllowedRule(appState.toolPermissionContext, tool);
+  const alwaysAllowedRule = toolAlwaysAllowedRule(appState.toolPermissionContext, tool) || (proxyTargetRule?.kind === "allow" ? proxyTargetRule.rule : null);
   if (alwaysAllowedRule) {
     return {
       behavior: "allow",
@@ -709985,7 +710051,7 @@ function Feedback({
       platform: env4.platform,
       gitRepo: envInfo.isGit,
       terminal: env4.terminal,
-      version: "4.2.28",
+      version: "4.2.29",
       transcript: normalizeMessagesForAPI(messages),
       errors: sanitizedErrors,
       lastApiRequest: getLastAPIRequest(),
@@ -710168,7 +710234,7 @@ function Feedback({
                       ", ",
                       env4.terminal,
                       ", v",
-                      "4.2.28"
+                      "4.2.29"
                     ]
                   })
                 ]
@@ -710265,7 +710331,7 @@ ${sanitizedDescription}
 ` + `**Environment Info**
 ` + `- Platform: ${env4.platform}
 ` + `- Terminal: ${env4.terminal}
-` + `- Version: ${"4.2.28"}
+` + `- Version: ${"4.2.29"}
 ` + `- Feedback ID: ${feedbackId}
 ` + `
 **Errors**
@@ -712504,7 +712570,7 @@ function buildPrimarySection() {
     children: t("settings.status.renameHint")
   });
   return [
-    { label: t("settings.status.version"), value: "4.2.28" },
+    { label: t("settings.status.version"), value: "4.2.29" },
     { label: t("settings.status.sessionName"), value: nameValue },
     { label: t("settings.status.sessionId"), value: sessionId },
     { label: t("settings.status.cwd"), value: getCwd() },
@@ -715365,7 +715431,7 @@ function Config({
         }
       })
     }) : showSubmenu === "ChannelDowngrade" ? /* @__PURE__ */ jsx_runtime191.jsx(ChannelDowngradeDialog, {
-      currentVersion: "4.2.28",
+      currentVersion: "4.2.29",
       onChoice: (choice) => {
         setShowSubmenu(null);
         setTabsHidden(false);
@@ -715377,7 +715443,7 @@ function Config({
           autoUpdatesChannel: "stable"
         };
         if (choice === "stay") {
-          newSettings.minimumVersion = "4.2.28";
+          newSettings.minimumVersion = "4.2.29";
         }
         updateSettingsForSource("userSettings", newSettings);
         setSettingsData((prev) => ({
@@ -720846,7 +720912,7 @@ function HelpV2({ onClose, commands: commands11 }) {
       color: "professionalBlue",
       children: [
         /* @__PURE__ */ jsx_runtime218.jsx(Tabs, {
-          title: process.env.USER_TYPE === "sf" ? "/help" : `CoStrict v${"4.2.28"}`,
+          title: process.env.USER_TYPE === "sf" ? "/help" : `CoStrict v${"4.2.29"}`,
           color: "professionalBlue",
           defaultTab: "general",
           children: tabs
@@ -743908,7 +743974,7 @@ function getAllReleaseNotes(changelogContent = getStoredChangelogFromMemory()) {
     return [];
   }
 }
-async function checkForReleaseNotes(lastSeenVersion, currentVersion = "4.2.28") {
+async function checkForReleaseNotes(lastSeenVersion, currentVersion = "4.2.29") {
   if (process.env.USER_TYPE === "sf") {
     const changelog = "";
     if (changelog) {
@@ -743935,7 +744001,7 @@ async function checkForReleaseNotes(lastSeenVersion, currentVersion = "4.2.28")
     releaseNotes
   };
 }
-function checkForReleaseNotesSync(lastSeenVersion, currentVersion = "4.2.28") {
+function checkForReleaseNotesSync(lastSeenVersion, currentVersion = "4.2.29") {
   if (process.env.USER_TYPE === "sf") {
     const changelog = "";
     if (changelog) {
@@ -746448,7 +746514,7 @@ function isNotLoggedIn() {
   return true;
 }
 function getLogoDisplayData() {
-  const version10 = process.env.DEMO_VERSION ?? "4.2.28";
+  const version10 = process.env.DEMO_VERSION ?? "4.2.29";
   const serverUrl = getDirectConnectServerUrl();
   const displayPath = process.env.DEMO_VERSION ? "/code/claude" : getDisplayPath(getCwd());
   const cwd2 = serverUrl ? `${displayPath} in ${serverUrl.replace(/^https?:\/\//, "")}` : displayPath;
@@ -747026,7 +747092,7 @@ var init_MatrixMessageLine = __esm(() => {
 // src/components/matrix-tactical/MatrixWelcome.tsx
 import { basename as basename47 } from "path";
 function MatrixWelcome({
-  version: version10 = "4.2.28",
+  version: version10 = "4.2.29",
   projectName,
   cwd: cwd2,
   modelDisplayName,
@@ -747661,13 +747727,13 @@ function LogoV2() {
   const { hasReleaseNotes } = checkForReleaseNotesSync(config13.lastReleaseNotesSeen);
   import_react167.useEffect(() => {
     const currentConfig = getGlobalConfig();
-    if (currentConfig.lastReleaseNotesSeen === "4.2.28") {
+    if (currentConfig.lastReleaseNotesSeen === "4.2.29") {
       return;
     }
     saveGlobalConfig((current2) => {
-      if (current2.lastReleaseNotesSeen === "4.2.28")
+      if (current2.lastReleaseNotesSeen === "4.2.29")
         return current2;
-      return { ...current2, lastReleaseNotesSeen: "4.2.28" };
+      return { ...current2, lastReleaseNotesSeen: "4.2.29" };
     });
     if (showOnboarding) {
       incrementProjectOnboardingSeenCount();
@@ -770197,7 +770263,7 @@ async function captureMemoryDiagnostics(trigger, dumpNumber = 0) {
     smapsRollup,
     platform: process.platform,
     nodeVersion: process.version,
-    ccVersion: "4.2.28"
+    ccVersion: "4.2.29"
   };
 }
 async function performHeapDump(trigger = "manual", dumpNumber = 0) {
@@ -770313,7 +770379,7 @@ var init_mock_limits = __esm(() => {
 var call55 = async () => {
   return {
     type: "text",
-    value: `${"4.2.28"} (built ${"2026-08-18T11:01:08.201Z"})`
+    value: `${"4.2.29"} (built ${"2026-08-24T01:42:33.096Z"})`
   };
 }, version10, version_default;
 var init_version2 = __esm(() => {
@@ -788459,7 +788525,7 @@ function generateHtmlReport(data, insights) {
 </html>`;
 }
 function buildExportData(data, insights, facets, remoteStats) {
-  const version11 = typeof MACRO !== "undefined" ? "4.2.28" : "unknown";
+  const version11 = typeof MACRO !== "undefined" ? "4.2.29" : "unknown";
   const remote_hosts_collected = remoteStats?.hosts.filter((h8) => h8.sessionCount > 0).map((h8) => h8.name);
   const facets_summary = {
     total: facets.size,
@@ -792909,7 +792975,7 @@ var init_sessionStorage = __esm(() => {
   init_settings2();
   init_slowOperations();
   init_uuid();
-  VERSION11 = typeof MACRO !== "undefined" ? "4.2.28" : "unknown";
+  VERSION11 = typeof MACRO !== "undefined" ? "4.2.29" : "unknown";
   MAX_TOMBSTONE_REWRITE_BYTES = 50 * 1024 * 1024;
   SKIP_FIRST_PROMPT_PATTERN2 = /^(?:\s*<[a-z][\w-]*[\s>]|\[Request interrupted by user[^\]]*\])/;
   EPHEMERAL_PROGRESS_TYPES = new Set([
@@ -794250,7 +794316,7 @@ var init_filesystem = __esm(() => {
   });
   getBundledSkillsRoot = memoize_default(function getBundledSkillsRoot2() {
     const nonce = randomBytes24(16).toString("hex");
-    return join204(getCostrictTempDir(), "bundled-skills", "4.2.28", nonce);
+    return join204(getCostrictTempDir(), "bundled-skills", "4.2.29", nonce);
   });
   getResolvedWorkingDirPaths = memoize_default(getPathsForPermissionCheck);
 });
@@ -800520,7 +800586,7 @@ function computeFingerprint(messageText, version11) {
 }
 function computeFingerprintFromMessages(messages) {
   const firstMessageText = extractFirstMessageText(messages);
-  return computeFingerprint(firstMessageText, "4.2.28");
+  return computeFingerprint(firstMessageText, "4.2.29");
 }
 var FINGERPRINT_SALT = "59cf53e54c78";
 var init_fingerprint = () => {};
@@ -800930,7 +800996,7 @@ function getAnthropicEnvMetadata() {
 function getBuildAgeMinutes() {
   if (false)
     ;
-  const buildTime = new Date("2026-08-18T11:01:08.201Z").getTime();
+  const buildTime = new Date("2026-08-24T01:42:33.096Z").getTime();
   if (isNaN(buildTime))
     return;
   return Math.floor((Date.now() - buildTime) / 60000);
@@ -802706,9 +802772,10 @@ async function* queryModelOpenAI(messages, systemPrompt2, tools, signal, options
     const errorMessage2 = error100 instanceof Error ? error100.message : String(error100);
     logForDebugging(`[OpenAI] Error: ${errorMessage2}`, { level: "error" });
     yield createAssistantAPIErrorMessage({
-      content: `API Error: ${errorMessage2}`,
+      content: normalizePromptTooLongText(`API Error: ${errorMessage2}`),
       apiError: "api_error",
-      error: error100 instanceof Error ? error100 : new Error(String(error100))
+      error: error100 instanceof Error ? error100 : new Error(String(error100)),
+      errorDetails: errorMessage2
     });
   }
 }
@@ -804318,9 +804385,10 @@ async function* queryModelCoStrict(messages, systemPrompt2, tools, signal, optio
     const errorMsg = error100 instanceof Error ? error100.message : String(error100);
     logForDebugging(`[CoStrict] Error: ${errorMsg}`, { level: "error" });
     yield createAssistantAPIErrorMessage({
-      content: isNonMultimodalModelError(errorMsg) ? "CoStrict API Error: The current model does not support image input. Switch to a multimodal or vision-capable model and try again." : `CoStrict API Error: ${errorMsg}`,
+      content: isNonMultimodalModelError(errorMsg) ? "CoStrict API Error: The current model does not support image input. Switch to a multimodal or vision-capable model and try again." : normalizePromptTooLongText(`CoStrict API Error: ${errorMsg}`),
       apiError: isNonMultimodalModelError(errorMsg) ? "non_multimodal_model" : "api_error",
-      error: mapErrorToSDKError(error100)
+      error: mapErrorToSDKError(error100),
+      errorDetails: errorMsg
     });
   }
 }
@@ -806498,7 +806566,7 @@ async function sideQuery(opts) {
     betas.push(STRUCTURED_OUTPUTS_BETA_HEADER);
   }
   const messageText = extractFirstUserMessageText(messages);
-  const fingerprint = computeFingerprint(messageText, "4.2.28");
+  const fingerprint = computeFingerprint(messageText, "4.2.29");
   const attributionHeader = getAttributionHeader(fingerprint);
   const systemBlocks = [
     attributionHeader ? { type: "text", text: attributionHeader } : null,
@@ -809894,7 +809962,7 @@ function buildSystemInitMessage(inputs) {
     slash_commands: inputs.commands.filter((c10) => c10.userInvocable !== false).map((c10) => c10.name),
     apiKeySource: getAnthropicApiKeyWithSource().source,
     betas: getSdkBetas(),
-    claude_code_version: "4.2.28",
+    claude_code_version: "4.2.29",
     output_style: outputStyle2,
     agents: inputs.agents.map((agent) => agent.agentType),
     skills: inputs.skills.filter((s) => s.userInvocable !== false).map((skill) => skill.name),
@@ -813438,7 +813506,7 @@ function appendToLog(path58, message2) {
     cwd: getFsImplementation().cwd(),
     userType: process.env.USER_TYPE,
     sessionId: getSessionId(),
-    version: "4.2.28"
+    version: "4.2.29"
   };
   getLogWriter(path58).write(messageWithTimestamp);
 }
@@ -834499,7 +834567,7 @@ function buildStatusLineCommandInput(permissionMode, exceeds200kTokens, settings
       project_dir: getOriginalCwd(),
       added_dirs: addedDirs
     },
-    version: "4.2.28",
+    version: "4.2.29",
     output_style: {
       name: outputStyleName
     },
@@ -853128,7 +853196,7 @@ async function submitTranscriptShare(messages, trigger, appearanceId) {
     } catch {}
     const data = {
       trigger,
-      version: "4.2.28",
+      version: "4.2.29",
       platform: process.platform,
       transcript,
       subagentTranscripts: Object.keys(subagentTranscripts).length > 0 ? subagentTranscripts : undefined,
@@ -854383,7 +854451,7 @@ function getReleaseType(current2, latest) {
   return "patch";
 }
 async function checkNewAutoUpdate(callbacks) {
-  const currentVersion = "4.2.28";
+  const currentVersion = "4.2.29";
   logForDebugging(`[newAutoUpdater] checking, current: ${currentVersion}`);
   if (isNewAutoUpdaterDisabled()) {
     return { action: "skip", currentVersion, latestVersion: null };
@@ -866638,7 +866706,7 @@ function WelcomeV2() {
               dimColor: true,
               children: [
                 "v",
-                "4.2.28",
+                "4.2.29",
                 " "
               ]
             })
@@ -866704,7 +866772,7 @@ function WelcomeV2() {
             dimColor: true,
             children: [
               "v",
-              "4.2.28",
+              "4.2.29",
               " "
             ]
           })
@@ -866806,7 +866874,7 @@ function AppleTerminalWelcomeV2({ theme: theme2, welcomeMessage }) {
               dimColor: true,
               children: [
                 "v",
-                "4.2.28",
+                "4.2.29",
                 " "
               ]
             })
@@ -866872,7 +866940,7 @@ function AppleTerminalWelcomeV2({ theme: theme2, welcomeMessage }) {
             dimColor: true,
             children: [
               "v",
-              "4.2.28",
+              "4.2.29",
               " "
             ]
           })
@@ -867812,7 +867880,7 @@ function completeOnboarding() {
   saveGlobalConfig((current2) => ({
     ...current2,
     hasCompletedOnboarding: true,
-    lastOnboardingVersion: "4.2.28"
+    lastOnboardingVersion: "4.2.29"
   }));
 }
 function showDialog(root9, renderer) {
@@ -882941,7 +883009,7 @@ async function startMCPServer(cwd3, debug5, verbose) {
   setCwd(cwd3);
   const server2 = new Server({
     name: "claude/tengu",
-    version: "4.2.28"
+    version: "4.2.29"
   }, {
     capabilities: {
       tools: {}
@@ -885226,7 +885294,7 @@ function createHealthRoutes(sessionManager) {
     const uptime2 = process.uptime() * 1000;
     return c10.json({
       status: "ok",
-      version: "4.2.28",
+      version: "4.2.29",
       uptime_ms: Math.round(uptime2),
       active_sessions: sessionManager.getActiveCount()
     });
@@ -885498,7 +885566,7 @@ function getMacroDefines() {
     commit = execSync3("git rev-parse --short HEAD", { encoding: "utf-8", cwd: __dirname }).trim();
   } catch {}
   return {
-    "MACRO.VERSION": JSON.stringify("4.2.28"),
+    "MACRO.VERSION": JSON.stringify("4.2.29"),
     "MACRO.BUILD_TIME": JSON.stringify(new Date().toISOString()),
     "MACRO.COMMIT": JSON.stringify(commit),
     "MACRO.FEEDBACK_CHANNEL": JSON.stringify(""),
@@ -892566,7 +892634,7 @@ __export(exports_update, {
 });
 async function update() {
   logEvent("tengu_update_check", {});
-  writeToStdout(`${t("cli.update.currentVersion", "Current version")}: ${"4.2.28"}
+  writeToStdout(`${t("cli.update.currentVersion", "Current version")}: ${"4.2.29"}
 `);
   const channel5 = getInitialSettings()?.autoUpdatesChannel ?? "latest";
   writeToStdout(`${t("cli.update.checkingUpdates", { channel: channel5 }, "Checking for updates to {channel} version...")}
@@ -892641,8 +892709,8 @@ async function update() {
       writeToStdout(`${t("cli.update.managedByHomebrew", "CoStrict is managed by Homebrew.")}
 `);
       const latest = await getLatestVersion(channel5);
-      if (latest && !gte2("4.2.28", latest)) {
-        writeToStdout(`${t("cli.update.updateAvailable", { current: "4.2.28", latest }, "Update available: {current} \u2192 {latest}")}
+      if (latest && !gte2("4.2.29", latest)) {
+        writeToStdout(`${t("cli.update.updateAvailable", { current: "4.2.29", latest }, "Update available: {current} \u2192 {latest}")}
 `);
         writeToStdout(`
 `);
@@ -892658,8 +892726,8 @@ async function update() {
       writeToStdout(`${t("cli.update.managedByWinget", "CoStrict is managed by winget.")}
 `);
       const latest = await getLatestVersion(channel5);
-      if (latest && !gte2("4.2.28", latest)) {
-        writeToStdout(`${t("cli.update.updateAvailable", { current: "4.2.28", latest }, "Update available: {current} \u2192 {latest}")}
+      if (latest && !gte2("4.2.29", latest)) {
+        writeToStdout(`${t("cli.update.updateAvailable", { current: "4.2.29", latest }, "Update available: {current} \u2192 {latest}")}
 `);
         writeToStdout(`
 `);
@@ -892675,8 +892743,8 @@ async function update() {
       writeToStdout(`${t("cli.update.managedByApk", "CoStrict is managed by apk.")}
 `);
       const latest = await getLatestVersion(channel5);
-      if (latest && !gte2("4.2.28", latest)) {
-        writeToStdout(`${t("cli.update.updateAvailable", { current: "4.2.28", latest }, "Update available: {current} \u2192 {latest}")}
+      if (latest && !gte2("4.2.29", latest)) {
+        writeToStdout(`${t("cli.update.updateAvailable", { current: "4.2.29", latest }, "Update available: {current} \u2192 {latest}")}
 `);
         writeToStdout(`
 `);
@@ -892741,11 +892809,11 @@ async function update() {
 `);
         await gracefulShutdown(1);
       }
-      if (result2.latestVersion === "4.2.28") {
-        writeToStdout(source_default.green(t("cli.update.upToDateVersion", { version: "4.2.28" }, "CoStrict is up to date ({version})")) + `
+      if (result2.latestVersion === "4.2.29") {
+        writeToStdout(source_default.green(t("cli.update.upToDateVersion", { version: "4.2.29" }, "CoStrict is up to date ({version})")) + `
 `);
       } else {
-        writeToStdout(source_default.green(t("cli.update.successfullyUpdated", { from: "4.2.28", to: String(result2.latestVersion) }, "Successfully updated from {from} to version {to}")) + `
+        writeToStdout(source_default.green(t("cli.update.successfullyUpdated", { from: "4.2.29", to: String(result2.latestVersion) }, "Successfully updated from {from} to version {to}")) + `
 `);
         regenerateCompletionCache();
       }
@@ -892805,12 +892873,12 @@ async function update() {
 `);
     await gracefulShutdown(1);
   }
-  if (latestVersion === "4.2.28") {
-    writeToStdout(source_default.green(t("cli.update.upToDateVersion", { version: "4.2.28" }, "CoStrict is up to date ({version})")) + `
+  if (latestVersion === "4.2.29") {
+    writeToStdout(source_default.green(t("cli.update.upToDateVersion", { version: "4.2.29" }, "CoStrict is up to date ({version})")) + `
 `);
     await gracefulShutdown(0);
   }
-  writeToStdout(`${t("cli.update.newVersionAvailable", { latest: String(latestVersion), current: "4.2.28" }, "New version available: {latest} (current: {current})")}
+  writeToStdout(`${t("cli.update.newVersionAvailable", { latest: String(latestVersion), current: "4.2.29" }, "New version available: {latest} (current: {current})")}
 `);
   writeToStdout(`${t("cli.update.installing", "Installing update...")}
 `);
@@ -892855,7 +892923,7 @@ async function update() {
   logForDebugging(`update: Installation status: ${result.status}`);
   switch (result.status) {
     case "success":
-      writeToStdout(source_default.green(t("cli.update.successfullyUpdated", { from: "4.2.28", to: String(latestVersion) }, "Successfully updated from {from} to version {to}")) + `
+      writeToStdout(source_default.green(t("cli.update.successfullyUpdated", { from: "4.2.29", to: String(latestVersion) }, "Successfully updated from {from} to version {to}")) + `
 `);
       regenerateCompletionCache();
       break;
@@ -895059,7 +895127,7 @@ ${assistantAddendum}` : assistantAddendum;
       }
     }
     logForDiagnosticsNoPII("info", "started", {
-      version: "4.2.28",
+      version: "4.2.29",
       is_native_binary: isInBundledMode()
     });
     registerCleanup(async () => {
@@ -895550,7 +895618,7 @@ Session: ${directConnectConfig.sessionId}`, "info");
           sshSession = await createSSHSession2({
             host: _pendingSSH.host,
             cwd: _pendingSSH.cwd,
-            localVersion: "4.2.28",
+            localVersion: "4.2.29",
             permissionMode: _pendingSSH.permissionMode,
             dangerouslySkipPermissions: _pendingSSH.dangerouslySkipPermissions,
             extraCliArgs: _pendingSSH.extraCliArgs,
@@ -896019,7 +896087,7 @@ Usage: csc --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("4.2.28 (CoStrict)", "-v, --version", cliDesc("cli.option.version", "Output the version number"));
+  }).version("4.2.29 (CoStrict)", "-v, --version", cliDesc("cli.option.version", "Output the version number"));
   program2.addOption(new Option("-w, --worktree [name]", cliDesc("cli.option.worktree", "Create a new git worktree for this session (optionally specify a name)")).hideHelp());
   program2.addOption(new Option("--tmux", cliDesc("cli.option.tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux.")).hideHelp());
   if (canUserConfigureAdvisor()) {
@@ -896762,10 +896830,10 @@ if (process.env.CLAUDE_CODE_REMOTE === "true") {
 async function main2() {
   const args = process.argv.slice(2);
   if (args.length === 1 && (args[0] === "--version" || args[0] === "-v" || args[0] === "-V")) {
-    const d7 = new Date("2026-08-18T11:01:08.201Z");
+    const d7 = new Date("2026-08-24T01:42:33.096Z");
     const p2 = (n3) => String(n3).padStart(2, "0");
     const buildTime = `${d7.getFullYear()}/${p2(d7.getMonth() + 1)}/${p2(d7.getDate())} ${p2(d7.getHours())}:${p2(d7.getMinutes())}:${p2(d7.getSeconds())}`;
-    console.log(`${"4.2.28"} (commit: ${"b8db0d23a"}, built: ${buildTime})`);
+    console.log(`${"4.2.29"} (commit: ${"47a51c48a"}, built: ${buildTime})`);
     return;
   }
   if (args[0] === "git-credential") {
@@ -896946,5 +897014,5 @@ async function main2() {
 }
 main2();
 
-//# debugId=37B6B1EB0B1A78C264756E2164756E21
+//# debugId=D200B00F02B08BED64756E2164756E21
 

package/dist/services/rawDump/batchWorker.js

@@ -736,8 +736,8 @@ function getClientVersion() {
   if (cached)
     return cached;
   try {
-    if ("4.2.28") {
-      cached = "4.2.28";
+    if ("4.2.29") {
+      cached = "4.2.29";
       return cached;
     }
   } catch {}
@@ -138570,7 +138570,7 @@ var init_user = __esm(() => {
       deviceId,
       sessionId: getSessionId(),
       email: getEmail(),
-      appVersion: "4.2.28",
+      appVersion: "4.2.29",
       platform: getHostPlatformForAnalytics(),
       organizationUuid,
       accountUuid,
@@ -138857,7 +138857,7 @@ var init_metadata = __esm(() => {
     "sed"
   ]);
   getVersionBase = memoize_default(() => {
-    const match = "4.2.28".match(/^\d+\.\d+\.\d+(?:-[a-z]+)?/);
+    const match = "4.2.29".match(/^\d+\.\d+\.\d+(?:-[a-z]+)?/);
     return match ? match[0] : undefined;
   });
   buildEnvContext = memoize_default(async () => {
@@ -138897,9 +138897,9 @@ var init_metadata = __esm(() => {
       isGithubAction: isEnvTruthy(process.env.GITHUB_ACTIONS),
       isClaudeCodeAction: isEnvTruthy(process.env.CLAUDE_CODE_ACTION),
       isClaudeAiAuth: isClaudeAISubscriber(),
-      version: "4.2.28",
+      version: "4.2.29",
       versionBase: getVersionBase(),
-      buildTime: "2026-08-18T11:01:10.342Z",
+      buildTime: "2026-08-24T01:42:34.935Z",
       deploymentEnvironment: env4.detectDeploymentEnvironment(),
       ...isEnvTruthy(process.env.GITHUB_ACTIONS) && {
         githubEventName: process.env.GITHUB_EVENT_NAME,
@@ -143237,5 +143237,5 @@ export {
   isParentHeartbeatValid
 };
 
-//# debugId=06C0F8C85F4ECBE064756E2164756E21
+//# debugId=ADEDB9641343B30B64756E2164756E21
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@costrict/csc",
-  "version": "4.2.28",
+  "version": "4.2.29",
   "description": "costrict",
   "type": "module",
   "author": "costrict",
@@ -36,7 +36,7 @@
     "scripts/postinstall.cjs",
     "scripts/run-parallel.mjs",
     "scripts/setup-chrome-mcp.mjs",
-    "scripts/install-cosknow.mjs"
+    "scripts/cleanup-cosknow.mjs"
   ],
   "scripts": {
     "build": "bun run build.ts",
@@ -74,7 +74,7 @@
     "test": "bun test",
     "check:unused": "knip-bun",
     "health": "bun run scripts/health-check.ts",
-    "postinstall": "node scripts/run-parallel.mjs scripts/postinstall.cjs scripts/setup-chrome-mcp.mjs scripts/install-cosknow.mjs",
+    "postinstall": "node scripts/run-parallel.mjs scripts/postinstall.cjs scripts/setup-chrome-mcp.mjs scripts/cleanup-cosknow.mjs",
     "docs:dev": "npx mintlify dev",
     "typecheck": "tsc --noEmit",
     "rcs": "bun run scripts/rcs.ts",

package/scripts/cleanup-cosknow.mjs

@@ -0,0 +1,150 @@
+import { existsSync, readFileSync } from 'node:fs'
+import { readdir, rm } from 'node:fs/promises'
+import { homedir } from 'node:os'
+import { join } from 'node:path'
+
+// 清理 csc postinstall 时期安装的 CosKnow kb 命令（v1 集成产物）。
+// 现在不再自动安装 cosknow，此脚本负责把历史遗留的文件移除。
+// 清理范围覆盖两个可能的 commands 目录：
+//   - ~/.claude/commands/    （v1 安装器当时的写入位置）
+//   - ~/.costrict/commands/  （品牌合规后的主配置目录）
+// 每个目录内的删除范围：
+//   1. .cosknow-manifest.json 中 files 列出的所有文件（权威依据）
+//   2. 兜底：commands 目录下所有 kb-*.md（manifest 缺失或未列出时）
+//   3. linter/kb-linter.js、prompts/ 子目录（v1 includeResources 复制产物）
+//   4. .cosknow-manifest.json 本身
+// 注意：不清理 ~/.costrict/cosknow/ 下的运行数据目录（statusline 等）。
+// 任何失败都是非致命的：warn 后 exit 0，绝不影响 csc 安装/更新。
+
+const MANIFEST_FILE = '.cosknow-manifest.json'
+const TARGET_DIRS = [
+  join(homedir(), '.claude', 'commands'),
+  join(homedir(), '.costrict', 'commands'),
+]
+
+function log(msg) {
+  console.log(`[cosknow-cleanup] ${msg}`)
+}
+
+function warn(msg) {
+  console.warn(`[cosknow-cleanup] ${msg}`)
+}
+
+// 1. 按 manifest 删除
+async function deleteFromManifest(commandsDir) {
+  const manifestPath = join(commandsDir, MANIFEST_FILE)
+  if (!existsSync(manifestPath)) {
+    return 0
+  }
+
+  let manifest
+  try {
+    manifest = JSON.parse(readFileSync(manifestPath, 'utf8'))
+  } catch (e) {
+    warn(`invalid manifest at ${manifestPath}, skipping manifest-based cleanup: ${e.message}`)
+    return 0
+  }
+
+  let deleted = 0
+  for (const filePath of manifest.files ?? []) {
+    if (existsSync(filePath)) {
+      try {
+        await rm(filePath)
+        deleted++
+      } catch (e) {
+        warn(`failed to remove ${filePath}: ${e.message}`)
+      }
+    }
+  }
+  return deleted
+}
+
+// 2. 兜底：删除 commands 目录下所有 kb-*.md
+async function deleteKbCommands(commandsDir) {
+  let entries
+  try {
+    entries = await readdir(commandsDir)
+  } catch {
+    return 0 // commands 目录不存在，无需清理
+  }
+
+  let deleted = 0
+  for (const entry of entries) {
+    if (!entry.startsWith('kb-') || !entry.endsWith('.md')) {
+      continue
+    }
+    const filePath = join(commandsDir, entry)
+    try {
+      await rm(filePath)
+      deleted++
+    } catch (e) {
+      warn(`failed to remove ${filePath}: ${e.message}`)
+    }
+  }
+  return deleted
+}
+
+// 3. 删除 v1 复制到 commands/ 下的资源文件
+async function deleteResources(commandsDir) {
+  const linterPath = join(commandsDir, 'linter', 'kb-linter.js')
+  if (existsSync(linterPath)) {
+    try {
+      await rm(linterPath)
+      log(`removed ${linterPath}`)
+    } catch (e) {
+      warn(`failed to remove ${linterPath}: ${e.message}`)
+    }
+  }
+
+  // 若 linter/ 目录是 cosknow 创建的（删掉 kb-linter.js 后为空），一并移除
+  const linterDir = join(commandsDir, 'linter')
+  if (existsSync(linterDir)) {
+    try {
+      const remaining = await readdir(linterDir)
+      if (remaining.length === 0) {
+        await rm(linterDir, { recursive: true, force: true })
+        log(`removed empty dir ${linterDir}`)
+      }
+    } catch (e) {
+      warn(`failed to inspect ${linterDir}: ${e.message}`)
+    }
+  }
+
+  const promptsDir = join(commandsDir, 'prompts')
+  if (existsSync(promptsDir)) {
+    try {
+      await rm(promptsDir, { recursive: true, force: true })
+      log(`removed ${promptsDir}`)
+    } catch (e) {
+      warn(`failed to remove ${promptsDir}: ${e.message}`)
+    }
+  }
+}
+
+// 4. 删除 manifest 本身
+async function deleteManifest(commandsDir) {
+  const manifestPath = join(commandsDir, MANIFEST_FILE)
+  if (existsSync(manifestPath)) {
+    try {
+      await rm(manifestPath)
+      log(`removed ${manifestPath}`)
+    } catch (e) {
+      warn(`failed to remove ${manifestPath}: ${e.message}`)
+    }
+  }
+}
+
+let totalRemoved = 0
+
+for (const commandsDir of TARGET_DIRS) {
+  totalRemoved += await deleteFromManifest(commandsDir)
+  totalRemoved += await deleteKbCommands(commandsDir)
+  await deleteResources(commandsDir)
+  await deleteManifest(commandsDir)
+}
+
+if (totalRemoved > 0) {
+  log(`removed ${totalRemoved} CosKnow command file(s)`)
+} else {
+  log('no CosKnow commands found, nothing to clean')
+}

package/scripts/install-cosknow.mjs

@@ -1,34 +0,0 @@
-import { spawnSync, execSync } from 'node:child_process'
-import { join } from 'node:path'
-import { pathToFileURL } from 'node:url'
-
-// 全局安装最新版
-spawnSync('npm', ['install', '-g', '@costrict/cosknow@latest'], {
-  stdio: 'inherit',
-  shell: true,
-})
-
-// 获取全局 node_modules 路径
-let globalPrefix
-try {
-  globalPrefix = execSync('npm root -g', { encoding: 'utf8' }).trim()
-} catch {
-  console.warn('[cosknow] cannot determine global npm root, skipping')
-  process.exit(0)
-}
-
-let install
-try {
-  const mod = await import(pathToFileURL(join(globalPrefix, '@costrict', 'cosknow', 'dist', 'index.js')).href)
-  install = mod.install
-} catch {
-  console.warn('[cosknow] package not available, skipping command installation')
-  process.exit(0)
-}
-
-try {
-  await install({ target: 'claude-commands' })
-  console.log('[cosknow] commands installed to ~/.claude/commands/')
-} catch (e) {
-  console.warn('[cosknow] install failed (non-fatal):', e.message)
-}