@costrict/csc 4.2.35 → 4.2.37

package/dist/cli.js

@@ -31759,8 +31759,8 @@ function getClientVersion() {
   if (cached)
     return cached;
   try {
-    if ("4.2.35") {
-      cached = "4.2.35";
+    if ("4.2.37") {
+      cached = "4.2.37";
       return cached;
     }
   } catch {}
@@ -31810,7 +31810,8 @@ __export(exports_token, {
   refreshCoStrictToken: () => refreshCoStrictToken,
   parseJWT: () => parseJWT,
   isCoStrictTokenValid: () => isCoStrictTokenValid,
-  extractExpiryFromJWT: () => extractExpiryFromJWT
+  extractExpiryFromJWT: () => extractExpiryFromJWT,
+  CoStrictAuthTerminalError: () => CoStrictAuthTerminalError
 });
 function parseJWT(token) {
   const parts = token.split(".");
@@ -31881,22 +31882,28 @@ async function refreshCoStrictToken(params) {
   try {
     parsed = JSON.parse(raw);
   } catch {
-    throw new Error(formatRefreshError(response.status, null, raw));
+    throw new CoStrictAuthTerminalError(formatRefreshError(response.status, null, raw));
   }
   const tokens = unwrapCoStrictRefreshResponse(parsed);
   if (!tokens) {
     const serverFailed = isRecord(parsed) && parsed.success === false;
-    throw new Error(formatRefreshError(response.status, parsed, raw) + (serverFailed ? "" : ": Token refresh response is missing required fields"));
+    throw new CoStrictAuthTerminalError(formatRefreshError(response.status, parsed, raw) + (serverFailed ? "" : ": Token refresh response is missing required fields"));
   }
   if (!response.ok) {
-    throw new Error(formatRefreshError(response.status, parsed, raw));
+    throw new CoStrictAuthTerminalError(formatRefreshError(response.status, parsed, raw));
   }
   return tokens;
 }
-var ACCESS_TOKEN_REFRESH_BUFFER_MS;
+var ACCESS_TOKEN_REFRESH_BUFFER_MS, CoStrictAuthTerminalError;
 var init_token = __esm(() => {
   init_oauth_params();
   ACCESS_TOKEN_REFRESH_BUFFER_MS = 30 * 60 * 1000;
+  CoStrictAuthTerminalError = class CoStrictAuthTerminalError extends Error {
+    constructor(message) {
+      super(message);
+      this.name = "CoStrictAuthTerminalError";
+    }
+  };
 });
 
 // src/costrict/provider/auth.ts
@@ -224369,7 +224376,7 @@ async function fetchCoStrictModels(baseUrl, accessToken) {
       headers: {
         Authorization: `Bearer ${accessToken}`,
         Accept: "application/json",
-        "User-Agent": `csc/${"4.2.35"}`
+        "User-Agent": `csc/${"4.2.37"}`
       },
       signal: controller.signal
     });
@@ -226409,7 +226416,7 @@ var init_auth7 = __esm(() => {
 
 // src/utils/userAgent.ts
 function getClaudeCodeUserAgent() {
-  return `costrict/${"4.2.35"}`;
+  return `costrict/${"4.2.37"}`;
 }
 
 // src/utils/workloadContext.ts
@@ -226431,7 +226438,7 @@ function getUserAgent() {
   const clientApp = process.env.CLAUDE_AGENT_SDK_CLIENT_APP ? `, client-app/${process.env.CLAUDE_AGENT_SDK_CLIENT_APP}` : "";
   const workload = getWorkload();
   const workloadSuffix = workload ? `, workload/${workload}` : "";
-  return `csc/${"4.2.35"}`;
+  return `csc/${"4.2.37"}`;
 }
 function getMCPUserAgent() {
   const parts = [];
@@ -226445,7 +226452,7 @@ function getMCPUserAgent() {
     parts.push(`client-app/${process.env.CLAUDE_AGENT_SDK_CLIENT_APP}`);
   }
   const suffix = parts.length > 0 ? ` (${parts.join(", ")})` : "";
-  return `csc/${"4.2.35"}${suffix}`;
+  return `csc/${"4.2.37"}${suffix}`;
 }
 function getWebFetchUserAgent() {
   return `Claude-User (${getClaudeCodeUserAgent()}; +https://support.anthropic.com/)`;
@@ -226565,7 +226572,7 @@ var init_user = __esm(() => {
       deviceId,
       sessionId: getSessionId(),
       email: getEmail(),
-      appVersion: "4.2.35",
+      appVersion: "4.2.37",
       platform: getHostPlatformForAnalytics(),
       organizationUuid,
       accountUuid,
@@ -237613,7 +237620,7 @@ var init_metadata = __esm(() => {
   COMPOUND_OPERATOR_REGEX = /\s*(?:&&|\|\||[;|])\s*/;
   WHITESPACE_REGEX = /\s+/;
   getVersionBase = memoize_default(() => {
-    const match = "4.2.35".match(/^\d+\.\d+\.\d+(?:-[a-z]+)?/);
+    const match = "4.2.37".match(/^\d+\.\d+\.\d+(?:-[a-z]+)?/);
     return match ? match[0] : undefined;
   });
   buildEnvContext = memoize_default(async () => {
@@ -237653,9 +237660,9 @@ var init_metadata = __esm(() => {
       isGithubAction: isEnvTruthy(process.env.GITHUB_ACTIONS),
       isClaudeCodeAction: isEnvTruthy(process.env.CLAUDE_CODE_ACTION),
       isClaudeAiAuth: isClaudeAISubscriber(),
-      version: "4.2.35",
+      version: "4.2.37",
       versionBase: getVersionBase(),
-      buildTime: "2026-09-04T09:22:28.856Z",
+      buildTime: "2026-09-09T12:10:12.753Z",
       deploymentEnvironment: env4.detectDeploymentEnvironment(),
       ...isEnvTruthy(process.env.GITHUB_ACTIONS) && {
         githubEventName: process.env.GITHUB_EVENT_NAME,
@@ -238326,7 +238333,7 @@ function initialize1PEventLogging() {
   const platform3 = getPlatform();
   const attributes = {
     [import_semantic_conventions2.ATTR_SERVICE_NAME]: "claude-code",
-    [import_semantic_conventions2.ATTR_SERVICE_VERSION]: "4.2.35"
+    [import_semantic_conventions2.ATTR_SERVICE_VERSION]: "4.2.37"
   };
   if (platform3 === "wsl") {
     const wslVersion = getWslVersion();
@@ -238353,7 +238360,7 @@ function initialize1PEventLogging() {
       })
     ]
   });
-  firstPartyEventLogger = firstPartyEventLoggerProvider.getLogger("com.anthropic.claude_code.events", "4.2.35");
+  firstPartyEventLogger = firstPartyEventLoggerProvider.getLogger("com.anthropic.claude_code.events", "4.2.37");
 }
 async function reinitialize1PEventLoggingIfConfigChanged() {
   if (!is1PEventLoggingEnabled() || !firstPartyEventLoggerProvider) {
@@ -278274,7 +278281,8 @@ var exports_tokenManager = {};
 __export(exports_tokenManager, {
   recoverFrom401: () => recoverFrom401,
   ensureValidCredentials: () => ensureValidCredentials,
-  _resetInflightRefresh: () => _resetInflightRefresh
+  _resetInflightRefresh: () => _resetInflightRefresh,
+  CoStrictAuthTerminalError: () => CoStrictAuthTerminalError
 });
 function resolveBaseUrl(credentialsBaseUrl) {
   const envUrl = process.env.COSTRICT_BASE_URL;
@@ -278300,25 +278308,25 @@ async function ensureValidCredentials(forceRefresh = false) {
 async function doRefresh(forceRefresh = false) {
   const decision = await updateCredentialsAtomically((creds) => {
     if (!creds) {
-      throw new Error(t("errors.costrict.credentialsNotFound"));
+      throw new CoStrictAuthTerminalError(t("errors.costrict.credentialsNotFound"));
     }
     if (!forceRefresh && isCoStrictTokenValid(creds)) {
       return null;
     }
     if (!creds.refresh_token) {
-      throw new Error(t("errors.costrict.noRefreshToken"));
+      throw new CoStrictAuthTerminalError(t("errors.costrict.noRefreshToken"));
     }
     return creds;
   });
   if (!decision) {
     const finalCreds = await loadCoStrictCredentials();
     if (!finalCreds) {
-      throw new Error(t("errors.costrict.refreshFailed"));
+      throw new CoStrictAuthTerminalError(t("errors.costrict.refreshFailed"));
     }
     return { credentials: finalCreds, refreshed: false };
   }
   if (!decision.refresh_token) {
-    throw new Error(t("errors.costrict.noRefreshToken"));
+    throw new CoStrictAuthTerminalError(t("errors.costrict.noRefreshToken"));
   }
   const baseUrl = resolveBaseUrl(decision.base_url);
   const refreshed2 = await refreshCoStrictToken({
@@ -306327,6 +306335,36 @@ async function* adaptOpenAIStreamToAnthropic(stream7, model) {
   const openBlockIndices = new Set;
   let pendingFinishReason = null;
   let pendingHasToolCalls = false;
+  const ARGS_BATCH_SIZE = 32;
+  const ARGS_FLUSH_INTERVAL_MS = 100;
+  let lastArgsFlushAt = performance.now();
+  let pendingArgFrags = [];
+  const flushArgFrags = function* () {
+    if (pendingArgFrags.length === 0)
+      return;
+    if (pendingArgFrags.length >= ARGS_BATCH_SIZE) {
+      const merged = new Map;
+      for (const { contentIndex, frag } of pendingArgFrags) {
+        merged.set(contentIndex, (merged.get(contentIndex) ?? "") + frag);
+      }
+      for (const [contentIndex, joined] of merged) {
+        yield {
+          type: "content_block_delta",
+          index: contentIndex,
+          delta: { type: "input_json_delta", partial_json: joined }
+        };
+      }
+    } else {
+      for (const { contentIndex, frag } of pendingArgFrags) {
+        yield {
+          type: "content_block_delta",
+          index: contentIndex,
+          delta: { type: "input_json_delta", partial_json: frag }
+        };
+      }
+    }
+    pendingArgFrags = [];
+  };
   for await (const chunk of stream7) {
     const choice = chunk.choices?.[0];
     const delta = choice?.delta;
@@ -306436,6 +306474,7 @@ async function* adaptOpenAIStreamToAnthropic(stream7, model) {
         const existingBlock = toolBlocks.get(tcIndex);
         const hasNewToolIdentity = existingBlock && (tc.id && existingBlock.idFromProvider && tc.id !== existingBlock.id || tc.function?.name && existingBlock.name && tc.function.name !== existingBlock.name);
         if (hasNewToolIdentity) {
+          yield* flushArgFrags();
           if (openBlockIndices.has(existingBlock.contentIndex)) {
             yield {
               type: "content_block_stop",
@@ -306496,18 +306535,17 @@ async function* adaptOpenAIStreamToAnthropic(stream7, model) {
           }
           if (!deltaFragment)
             continue;
-          yield {
-            type: "content_block_delta",
-            index: block2.contentIndex,
-            delta: {
-              type: "input_json_delta",
-              partial_json: deltaFragment
-            }
-          };
+          pendingArgFrags.push({ contentIndex: block2.contentIndex, frag: deltaFragment });
+          if (pendingArgFrags.length >= ARGS_BATCH_SIZE || performance.now() - lastArgsFlushAt >= ARGS_FLUSH_INTERVAL_MS) {
+            yield* flushArgFrags();
+            lastArgsFlushAt = performance.now();
+            await new Promise((resolve24) => setImmediate(resolve24));
+          }
         }
       }
     }
     if (choice?.finish_reason) {
+      yield* flushArgFrags();
       if (thinkingBlockOpen) {
         yield {
           type: "content_block_stop",
@@ -306537,6 +306575,7 @@ async function* adaptOpenAIStreamToAnthropic(stream7, model) {
       pendingHasToolCalls = toolBlocks.size > 0;
     }
   }
+  yield* flushArgFrags();
   for (const idx of openBlockIndices) {
     yield {
       type: "content_block_stop",
@@ -354126,7 +354165,7 @@ function getTelemetryAttributes() {
     attributes["session.id"] = sessionId;
   }
   if (shouldIncludeAttribute("OTEL_METRICS_INCLUDE_VERSION")) {
-    attributes["app.version"] = "4.2.35";
+    attributes["app.version"] = "4.2.37";
   }
   const oauthAccount = getOauthAccountInfo();
   if (oauthAccount) {
@@ -469252,7 +469291,7 @@ function getInstallationEnv() {
   return;
 }
 function getClaudeCodeVersion() {
-  return "4.2.35";
+  return "4.2.37";
 }
 async function getInstalledVSCodeExtensionVersion(command4) {
   const { stdout } = await execFileNoThrow(command4, ["--list-extensions", "--show-versions"], {
@@ -470156,6 +470195,83 @@ var init_elicitationHandler = __esm(() => {
   init_analytics();
 });
 
+// src/server/ideCapability.ts
+var IDE_MCP_SERVER = "costrict-jetbrains", IDE_MCP_TOOLS, transport, IdeCapabilitySchema = () => exports_external.object({
+  generation: exports_external.string().uuid(),
+  transport,
+  tools: exports_external.array(exports_external.string()).refine((values4) => new Set(values4).size === values4.length, "duplicate IDE MCP tool").refine((values4) => values4.length <= IDE_MCP_TOOLS.size && values4.every((v2) => IDE_MCP_TOOLS.has(v2)), "invalid IDE MCP tool"),
+  approval: exports_external.object({
+    build_project: exports_external.literal("control_plane"),
+    execute_run_configuration: exports_external.literal("jetbrains_ask")
+  })
+});
+var init_ideCapability = __esm(() => {
+  init_v4();
+  IDE_MCP_TOOLS = new Set([
+    "analyze_calls",
+    "get_file_problems",
+    "lint_files",
+    "get_project_dependencies",
+    "get_project_modules",
+    "get_symbol_info",
+    "search_file",
+    "search_regex",
+    "search_symbol",
+    "search_text",
+    "read_file",
+    "list_directory_tree",
+    "get_all_open_file_paths",
+    "open_file_in_editor",
+    "build_project",
+    "get_run_configurations",
+    "execute_run_configuration"
+  ]);
+  transport = exports_external.object({
+    type: exports_external.literal("streamable_http"),
+    url: exports_external.string().refine((value) => {
+      try {
+        const parsed = new URL(value);
+        return parsed.protocol === "http:" && ["127.0.0.1", "localhost", "[::1]"].includes(parsed.hostname) && parsed.pathname === "/stream" && !parsed.username && !parsed.password && !parsed.search && !parsed.hash;
+      } catch {
+        return false;
+      }
+    }, "transport must be loopback http /stream"),
+    headers: exports_external.record(exports_external.string().min(1), exports_external.string().min(1))
+  });
+});
+
+// src/services/mcp/idePolicy.ts
+function getIdeMcpPolicy() {
+  return { generation, tools: new Set(allowed) };
+}
+function setIdeMcpPolicy(value, tools) {
+  generation = value;
+  allowed = new Set(tools);
+}
+function clearIdeMcpPolicy(value) {
+  if (value !== generation)
+    return false;
+  generation = "";
+  allowed = new Set;
+  return true;
+}
+function filterIdeMcpTools(server, tools) {
+  return server === IDE_MCP_SERVER ? tools.filter((tool) => !!tool.mcpInfo?.toolName && allowed.has(tool.mcpInfo.toolName)) : tools;
+}
+function ideMcpPermission(server, tool) {
+  if (server !== IDE_MCP_SERVER || !IDE_MCP_TOOLS.has(tool) || !allowed.has(tool))
+    return;
+  return tool === "build_project" ? "control_plane" : "allow";
+}
+function mcpCallRetries(server) {
+  return server === IDE_MCP_SERVER ? 0 : 1;
+}
+var generation = "", allowed;
+var init_idePolicy = __esm(() => {
+  init_ideCapability();
+  allowed = new Set;
+});
+
 // node_modules/.bun/zod@3.25.76/node_modules/zod/v4/core/core.js
 function $constructor3(name3, initializer5, params) {
   function init2(inst, def) {
@@ -484506,15 +484622,15 @@ async function handleOpenApplication(adapter2, args, overrides) {
   const app = requireString(args, "app");
   if (app instanceof Error)
     return errorResult(app.message, "bad_args");
-  const allowed = new Set(overrides.allowedApps.map((g8) => g8.bundleId));
+  const allowed2 = new Set(overrides.allowedApps.map((g8) => g8.bundleId));
   let targetBundleId;
-  if (looksLikeBundleId(app) && allowed.has(app)) {
+  if (looksLikeBundleId(app) && allowed2.has(app)) {
     targetBundleId = app;
   } else {
     const match = overrides.allowedApps.find((g8) => g8.displayName.toLowerCase() === app.toLowerCase());
     targetBundleId = match?.bundleId;
   }
-  if (!targetBundleId || !allowed.has(targetBundleId)) {
+  if (!targetBundleId || !allowed2.has(targetBundleId)) {
     return errorResult(`"${app}" is not granted for this session. Call request_access first.`, "app_not_granted");
   }
   await adapter2.executor.openApp(targetBundleId);
@@ -495321,7 +495437,7 @@ function createCliExecutor(opts) {
   const { getMouseAnimationEnabled, getHideBeforeActionEnabled } = opts;
   const terminalBundleId = getTerminalBundleId();
   const surrogateHost = terminalBundleId ?? CLI_HOST_BUNDLE_ID;
-  const withoutTerminal = (allowed) => terminalBundleId === null ? [...allowed] : allowed.filter((id) => id !== terminalBundleId);
+  const withoutTerminal = (allowed2) => terminalBundleId === null ? [...allowed2] : allowed2.filter((id) => id !== terminalBundleId);
   logForDebugging(terminalBundleId ? `[computer-use] terminal ${terminalBundleId} \u2192 surrogate host (hide-exempt, activate-skip, screenshot-excluded)` : "[computer-use] terminal not detected; falling back to sentinel host");
   return {
     capabilities: {
@@ -496787,19 +496903,19 @@ class BridgeClient {
       actionData: message2.action_data
     };
     try {
-      const allowed = await pending2.onPermissionRequest(request2);
-      this.sendPermissionResponse(requestId2, allowed);
+      const allowed2 = await pending2.onPermissionRequest(request2);
+      this.sendPermissionResponse(requestId2, allowed2);
     } catch (error98) {
       logger30.error(`[${serverName}] Error handling permission request:`, error98);
       this.sendPermissionResponse(requestId2, false);
     }
   }
-  sendPermissionResponse(requestId2, allowed) {
+  sendPermissionResponse(requestId2, allowed2) {
     if (this.ws?.readyState === WebSocket2.OPEN) {
       const message2 = {
         type: "permission_response",
         request_id: requestId2,
-        allowed
+        allowed: allowed2
       };
       if (this.selectedDeviceId) {
         message2.target_device_id = this.selectedDeviceId;
@@ -508556,8 +508672,8 @@ var require_otlp_export_delegate = __commonJS((exports) => {
     _responseHandler;
     _promiseQueue;
     _timeout;
-    constructor(transport, serializer, responseHandler, promiseQueue, timeout2) {
-      this._transport = transport;
+    constructor(transport2, serializer, responseHandler, promiseQueue, timeout2) {
+      this._transport = transport2;
       this._serializer = serializer;
       this._responseHandler = responseHandler;
       this._promiseQueue = promiseQueue;
@@ -508639,9 +508755,9 @@ var require_otlp_network_export_delegate = __commonJS((exports) => {
   exports.createOtlpNetworkExportDelegate = undefined;
   var bounded_queue_export_promise_handler_1 = require_bounded_queue_export_promise_handler();
   var otlp_export_delegate_1 = require_otlp_export_delegate();
-  function createOtlpNetworkExportDelegate(options, serializer, transport) {
+  function createOtlpNetworkExportDelegate(options, serializer, transport2) {
     return (0, otlp_export_delegate_1.createOtlpExportDelegate)({
-      transport,
+      transport: transport2,
       serializer,
       promiseHandler: (0, bounded_queue_export_promise_handler_1.createBoundedQueueExportPromiseHandler)(options)
     }, { timeout: options.timeoutMillis });
@@ -521682,8 +521798,8 @@ var require_retrying_transport = __commonJS((exports) => {
 
   class RetryingTransport {
     _transport;
-    constructor(transport) {
-      this._transport = transport;
+    constructor(transport2) {
+      this._transport = transport2;
     }
     retry(data, timeoutMillis, inMillis) {
       return new Promise((resolve31, reject2) => {
@@ -522892,7 +523008,7 @@ function initLangfuse() {
       flushInterval: parseInt(process.env.LANGFUSE_FLUSH_INTERVAL ?? "10", 10),
       mask: maskFn,
       environment: process.env.LANGFUSE_TRACING_ENVIRONMENT ?? "development",
-      release: "4.2.35",
+      release: "4.2.37",
       exportMode: process.env.LANGFUSE_EXPORT_MODE ?? "batched",
       timeout: parseInt(process.env.LANGFUSE_TIMEOUT ?? "5", 10)
     });
@@ -523451,7 +523567,7 @@ function computeFingerprint(messageText2, version11) {
 }
 function computeFingerprintFromMessages(messages) {
   const firstMessageText = extractFirstMessageText(messages);
-  return computeFingerprint(firstMessageText, "4.2.35");
+  return computeFingerprint(firstMessageText, "4.2.37");
 }
 var FINGERPRINT_SALT = "59cf53e54c78";
 var init_fingerprint = () => {};
@@ -523894,7 +524010,27 @@ function toKebabCase(s) {
 function createCoStrictFetch(options) {
   const agentType = toKebabCase(options?.agentType) || "build";
   const costrictFetch = async (input4, init2) => {
-    const { credentials: creds } = await ensureValidCredentials();
+    let creds;
+    try {
+      ({ credentials: creds } = await ensureValidCredentials());
+    } catch (authError) {
+      if (authError instanceof CoStrictAuthTerminalError) {
+        logError2(authError);
+        return new Response(JSON.stringify({
+          error: {
+            message: authError.message,
+            type: "authentication_error"
+          }
+        }), {
+          status: 401,
+          headers: {
+            "content-type": "application/json",
+            "x-should-retry": "false"
+          }
+        });
+      }
+      throw authError;
+    }
     const headers = new Headers(init2?.headers);
     headers.set("Authorization", `Bearer ${creds.access_token}`);
     headers.set("User-Agent", `csc/${VERSION9}`);
@@ -523937,6 +524073,7 @@ function createCoStrictFetch(options) {
 var VERSION9;
 var init_fetch2 = __esm(() => {
   init_tokenManager();
+  init_log3();
   init_uuid();
   init_clientVersion();
   VERSION9 = getClientVersion();
@@ -524003,7 +524140,7 @@ async function sideQuery(opts) {
     betas.push(STRUCTURED_OUTPUTS_BETA_HEADER);
   }
   const messageText2 = extractFirstUserMessageText(messages);
-  const fingerprint = computeFingerprint(messageText2, "4.2.35");
+  const fingerprint = computeFingerprint(messageText2, "4.2.37");
   const attributionHeader = getAttributionHeader(fingerprint);
   const systemBlocks = [
     attributionHeader ? { type: "text", text: attributionHeader } : null,
@@ -524279,7 +524416,7 @@ async function runClaudeInChromeMcpServer() {
   initializeAnalyticsSink();
   const context7 = createChromeContext();
   const server = createClaudeForChromeMcpServer(context7);
-  const transport = new StdioServerTransport;
+  const transport2 = new StdioServerTransport;
   let exiting = false;
   const shutdownAndExit = async () => {
     if (exiting) {
@@ -524293,7 +524430,7 @@ async function runClaudeInChromeMcpServer() {
   process.stdin.on("end", () => void shutdownAndExit());
   process.stdin.on("error", () => void shutdownAndExit());
   logForDebugging("[Chrome MCP] Starting MCP server");
-  await server.connect(transport);
+  await server.connect(transport2);
   logForDebugging("[Chrome MCP] MCP server started");
 }
 
@@ -524531,7 +524668,7 @@ async function runComputerUseMcpServer() {
   enableConfigs();
   initializeAnalyticsSink();
   const server = await createComputerUseMcpServerForCli();
-  const transport = new StdioServerTransport;
+  const transport2 = new StdioServerTransport;
   let exiting = false;
   const shutdownAndExit = async () => {
     if (exiting)
@@ -524543,7 +524680,7 @@ async function runComputerUseMcpServer() {
   process.stdin.on("end", () => void shutdownAndExit());
   process.stdin.on("error", () => void shutdownAndExit());
   logForDebugging("[Computer Use MCP] Starting MCP server");
-  await server.connect(transport);
+  await server.connect(transport2);
   logForDebugging("[Computer Use MCP] MCP server started");
 }
 var APP_ENUM_TIMEOUT_MS = 1000;
@@ -525426,18 +525563,18 @@ async function setupSdkMcpClients(sdkMcpConfigs, sendMcpMessage) {
   const clients = [];
   const tools = [];
   const results = await Promise.allSettled(Object.entries(sdkMcpConfigs).map(async ([name3, config10]) => {
-    const transport = new SdkControlClientTransport(name3, sendMcpMessage);
+    const transport2 = new SdkControlClientTransport(name3, sendMcpMessage);
     const client10 = new Client({
       name: "claude-code",
       title: "CoStrict",
-      version: "4.2.35",
+      version: "4.2.37",
       description: "CoStrict agentic coding tool",
       websiteUrl: PRODUCT_URL
     }, {
       capabilities: {}
     });
     try {
-      await client10.connect(transport);
+      await client10.connect(transport2);
       const capabilities = client10.getServerCapabilities();
       const connectedClient = {
         type: "connected",
@@ -525524,6 +525661,7 @@ var init_client17 = __esm(() => {
   init_mcpStringUtils();
   init_normalization();
   init_utils13();
+  init_idePolicy();
   init_src4();
   init_src4();
   init_auth10();
@@ -525573,7 +525711,7 @@ var init_client17 = __esm(() => {
     const connectStartTime = Date.now();
     let inProcessServer;
     try {
-      let transport;
+      let transport2;
       const sessionIngressToken = getSessionIngressAuthToken();
       if (serverRef.type === "sse") {
         const authProvider = new ClaudeAuthProvider(name3, serverRef);
@@ -525609,7 +525747,7 @@ var init_client17 = __esm(() => {
             });
           }
         };
-        transport = new SSEClientTransport(new URL(serverRef.url), transportOptions);
+        transport2 = new SSEClientTransport(new URL(serverRef.url), transportOptions);
         logMCPDebug(name3, `SSE transport initialized, awaiting connection`);
       } else if (serverRef.type === "sse-ide") {
         logMCPDebug(name3, `Setting up SSE-IDE transport to ${serverRef.url}`);
@@ -525628,7 +525766,7 @@ var init_client17 = __esm(() => {
             }
           }
         } : {};
-        transport = new SSEClientTransport(new URL(serverRef.url), Object.keys(transportOptions).length > 0 ? transportOptions : undefined);
+        transport2 = new SSEClientTransport(new URL(serverRef.url), Object.keys(transportOptions).length > 0 ? transportOptions : undefined);
       } else if (serverRef.type === "ws-ide") {
         const tlsOptions = getWebSocketTLSOptions();
         const wsHeaders = {
@@ -525652,7 +525790,7 @@ var init_client17 = __esm(() => {
             ...tlsOptions || {}
           });
         }
-        transport = new WebSocketTransport(wsClient);
+        transport2 = new WebSocketTransport(wsClient);
       } else if (serverRef.type === "ws") {
         logMCPDebug(name3, `Initializing WebSocket transport to ${serverRef.url}`);
         const combinedHeaders = await getMcpServerHeaders(name3, serverRef);
@@ -525685,7 +525823,7 @@ var init_client17 = __esm(() => {
             ...tlsOptions || {}
           });
         }
-        transport = new WebSocketTransport(wsClient);
+        transport2 = new WebSocketTransport(wsClient);
       } else if (serverRef.type === "http") {
         logMCPDebug(name3, `Initializing HTTP transport to ${serverRef.url}`);
         logMCPDebug(name3, `Node version: ${process.version}, Platform: ${process.platform}`);
@@ -525722,7 +525860,7 @@ var init_client17 = __esm(() => {
           hasAuthProvider: !!authProvider,
           timeoutMs: MCP_REQUEST_TIMEOUT_MS
         })}`);
-        transport = new StreamableHTTPClientTransport(new URL(serverRef.url), transportOptions);
+        transport2 = new StreamableHTTPClientTransport(new URL(serverRef.url), transportOptions);
         logMCPDebug(name3, `HTTP transport created successfully`);
       } else if (serverRef.type === "sdk") {
         throw new Error("SDK servers should be handled in print.ts");
@@ -525747,7 +525885,7 @@ var init_client17 = __esm(() => {
             }
           }
         };
-        transport = new StreamableHTTPClientTransport(new URL(proxyUrl), transportOptions);
+        transport2 = new StreamableHTTPClientTransport(new URL(proxyUrl), transportOptions);
         logMCPDebug(name3, `costrict.ai proxy transport created successfully`);
       } else if ((serverRef.type === "stdio" || !serverRef.type) && isClaudeInChromeMCPServer(name3)) {
         const { createChromeContext: createChromeContext2 } = await Promise.resolve().then(() => (init_mcpServer3(), exports_mcpServer));
@@ -525757,7 +525895,7 @@ var init_client17 = __esm(() => {
         inProcessServer = createClaudeForChromeMcpServer2(context7);
         const [clientTransport, serverTransport] = createLinkedTransportPair3();
         await inProcessServer.connect(serverTransport);
-        transport = clientTransport;
+        transport2 = clientTransport;
         logMCPDebug(name3, `In-process Chrome MCP server started`);
       } else if ((serverRef.type === "stdio" || !serverRef.type) && isComputerUseMCPServer2(name3)) {
         const { createComputerUseMcpServerForCli: createComputerUseMcpServerForCli2 } = await Promise.resolve().then(() => (init_mcpServer4(), exports_mcpServer2));
@@ -525765,13 +525903,13 @@ var init_client17 = __esm(() => {
         inProcessServer = await createComputerUseMcpServerForCli2();
         const [clientTransport, serverTransport] = createLinkedTransportPair3();
         await inProcessServer.connect(serverTransport);
-        transport = clientTransport;
+        transport2 = clientTransport;
         logMCPDebug(name3, `In-process Computer Use MCP server started`);
       } else if (serverRef.type === "stdio" || !serverRef.type) {
         const stdioRef = serverRef;
         const finalCommand = process.env.CLAUDE_CODE_SHELL_PREFIX || stdioRef.command;
         const finalArgs = process.env.CLAUDE_CODE_SHELL_PREFIX ? [[stdioRef.command, ...stdioRef.args].join(" ")] : stdioRef.args;
-        transport = new StdioClientTransport({
+        transport2 = new StdioClientTransport({
           command: finalCommand,
           args: finalArgs,
           env: {
@@ -525786,7 +525924,7 @@ var init_client17 = __esm(() => {
       let stderrHandler;
       let stderrOutput = "";
       if (serverRef.type === "stdio" || !serverRef.type) {
-        const stdioTransport = transport;
+        const stdioTransport = transport2;
         if (stdioTransport.stderr) {
           stderrHandler = (data) => {
             if (stderrOutput.length < 67108864) {
@@ -525801,7 +525939,7 @@ var init_client17 = __esm(() => {
       const client10 = new Client({
         name: "claude-code",
         title: "CoStrict",
-        version: "4.2.35",
+        version: "4.2.37",
         description: "CoStrict agentic coding tool",
         websiteUrl: PRODUCT_URL
       }, {
@@ -525836,7 +525974,7 @@ var init_client17 = __esm(() => {
           logMCPDebug(name3, `Failed to parse URL: ${urlError}`);
         }
       }
-      const connectPromise = client10.connect(transport);
+      const connectPromise = client10.connect(transport2);
       const timeoutPromise = new Promise((_2, reject2) => {
         const timeoutId = setTimeout(() => {
           const elapsed = Date.now() - connectStartTime;
@@ -525844,7 +525982,7 @@ var init_client17 = __esm(() => {
           if (inProcessServer) {
             inProcessServer.close().catch(() => {});
           }
-          transport.close().catch(() => {});
+          transport2.close().catch(() => {});
           reject2(new TelemetrySafeError_I_VERIFIED_THIS_IS_NOT_CODE_OR_FILEPATHS(`MCP server "${name3}" connection timed out after ${getConnectionTimeoutMs()}ms`, "MCP connection timeout"));
         }, getConnectionTimeoutMs());
         connectPromise.then(() => {
@@ -525896,7 +526034,7 @@ var init_client17 = __esm(() => {
         if (inProcessServer) {
           inProcessServer.close().catch(() => {});
         }
-        transport.close().catch(() => {});
+        transport2.close().catch(() => {});
         if (stderrOutput) {
           logMCPError(name3, `Server stderr: ${stderrOutput}`);
         }
@@ -526038,12 +526176,12 @@ var init_client17 = __esm(() => {
           return;
         }
         if (stderrHandler && (serverRef.type === "stdio" || !serverRef.type)) {
-          const stdioTransport = transport;
+          const stdioTransport = transport2;
           stdioTransport.stderr?.off("data", stderrHandler);
         }
         if (serverRef.type === "stdio") {
           try {
-            const stdioTransport = transport;
+            const stdioTransport = transport2;
             const childPid = stdioTransport.pid;
             if (childPid) {
               logMCPDebug(name3, "Sending SIGINT to MCP server process");
@@ -526206,7 +526344,7 @@ var init_client17 = __esm(() => {
       const result = await client10.client.request({ method: "tools/list" }, ListToolsResultSchema);
       const toolsToProcess = recursivelySanitizeUnicode(result.tools);
       const skipPrefix = client10.config.type === "sdk" && isEnvTruthy(process.env.CLAUDE_AGENT_SDK_MCP_NO_PREFIX);
-      return toolsToProcess.map((tool) => {
+      const converted = toolsToProcess.map((tool) => {
         const fullyQualifiedName = buildMcpToolName(client10.name, tool.name);
         return {
           ...MCPTool,
@@ -526228,6 +526366,9 @@ var init_client17 = __esm(() => {
           isReadOnly() {
             return tool.annotations?.readOnlyHint ?? false;
           },
+          requiresUserInteraction() {
+            return ideMcpPermission(client10.name, tool.name) === "control_plane";
+          },
           toAutoClassifierInput(input4) {
             return mcpToolInputToAutoClassifierInput(input4, tool.name);
           },
@@ -526242,6 +526383,9 @@ var init_client17 = __esm(() => {
           },
           inputJSONSchema: tool.inputSchema,
           async checkPermissions() {
+            const policy = ideMcpPermission(client10.name, tool.name);
+            if (policy === "allow")
+              return { behavior: "allow" };
             return {
               behavior: "passthrough",
               message: t("errors.mcp.requiresPermission"),
@@ -526275,7 +526419,7 @@ var init_client17 = __esm(() => {
               });
             }
             const startTime2 = Date.now();
-            const MAX_SESSION_RETRIES = 1;
+            const retries = mcpCallRetries(client10.name);
             for (let attempt = 0;; attempt++) {
               try {
                 const connectedClient = await ensureConnectedClient(client10);
@@ -526321,7 +526465,7 @@ var init_client17 = __esm(() => {
                   }
                 };
               } catch (error98) {
-                if (error98 instanceof McpSessionExpiredError2 && attempt < MAX_SESSION_RETRIES) {
+                if (error98 instanceof McpSessionExpiredError2 && attempt < retries) {
                   logMCPDebug(client10.name, `Retrying tool '${tool.name}' after session recovery`);
                   continue;
                 }
@@ -526357,7 +526501,8 @@ var init_client17 = __esm(() => {
           ...isClaudeInChromeMCPServer(client10.name) && (client10.config.type === "stdio" || !client10.config.type) ? claudeInChromeToolRendering().getClaudeInChromeMCPToolOverrides(tool.name) : {},
           ...(client10.config.type === "stdio" || !client10.config.type) && isComputerUseMCPServer2(client10.name) ? computerUseWrapper().getComputerUseMCPToolOverrides(tool.name) : {}
         };
-      }).filter(isIncludedMcpTool);
+      });
+      return filterIdeMcpTools(client10.name, converted).filter(isIncludedMcpTool);
     } catch (error98) {
       logMCPError(client10.name, `Failed to fetch tools: ${errorMessage(error98)}`);
       return [];
@@ -606625,13 +606770,13 @@ class Client2 {
     return this._transport;
   }
   async flush(timeout2) {
-    const transport = this._transport;
+    const transport2 = this._transport;
     this.emit("flush");
-    if (!transport) {
+    if (!transport2) {
       return true;
     }
     const clientFinished = await this._isClientDoneProcessing(timeout2);
-    const transportFlushed = await transport.flush(timeout2);
+    const transportFlushed = await transport2.flush(timeout2);
     return clientFinished && transportFlushed;
   }
   async close(timeout2) {
@@ -608035,13 +608180,13 @@ function getOutgoingRequestSpanData(request2) {
 }
 function setIncomingResponseSpanData(response3, span) {
   const { statusCode, statusMessage, httpVersion, socket } = response3;
-  const transport = httpVersion?.toUpperCase() !== "QUIC" ? "ip_tcp" : "ip_udp";
+  const transport2 = httpVersion?.toUpperCase() !== "QUIC" ? "ip_tcp" : "ip_udp";
   span.setAttributes({
     "http.response.status_code": statusCode,
     "network.protocol.version": httpVersion,
     "http.flavor": httpVersion,
-    "network.transport": transport,
-    "net.transport": transport,
+    "network.transport": transport2,
+    "net.transport": transport2,
     "http.status_text": statusMessage?.toUpperCase(),
     "http.status_code": statusCode,
     ...getResponseContentLengthAttributes(response3),
@@ -624696,7 +624841,7 @@ function initSentry() {
   }
   init3({
     dsn,
-    release: typeof MACRO !== "undefined" ? "4.2.35" : undefined,
+    release: typeof MACRO !== "undefined" ? "4.2.37" : undefined,
     environment: typeof BUILD_ENV !== "undefined" ? BUILD_ENV : "production",
     maxBreadcrumbs: 20,
     sampleRate: 1,
@@ -642586,13 +642731,13 @@ var require_subchannel = __commonJS((exports) => {
         const adjustedKeepaliveTime = Math.min(this.keepaliveTime, KEEPALIVE_MAX_TIME_MS);
         options = Object.assign(Object.assign({}, options), { "grpc.keepalive_time_ms": adjustedKeepaliveTime });
       }
-      this.connector.connect(this.subchannelAddress, this.secureConnector, options).then((transport) => {
+      this.connector.connect(this.subchannelAddress, this.secureConnector, options).then((transport2) => {
         if (this.transitionToState([connectivity_state_1.ConnectivityState.CONNECTING], connectivity_state_1.ConnectivityState.READY)) {
-          this.transport = transport;
+          this.transport = transport2;
           if (this.channelzEnabled) {
-            this.childrenTracker.refChild(transport.getChannelzRef());
+            this.childrenTracker.refChild(transport2.getChannelzRef());
           }
-          transport.addDisconnectListener((tooManyPings) => {
+          transport2.addDisconnectListener((tooManyPings) => {
             this.transitionToState([connectivity_state_1.ConnectivityState.READY], connectivity_state_1.ConnectivityState.IDLE);
             if (tooManyPings && this.keepaliveTime > 0) {
               this.keepaliveTime *= 2;
@@ -642600,7 +642745,7 @@ var require_subchannel = __commonJS((exports) => {
             }
           });
         } else {
-          transport.shutdown();
+          transport2.shutdown();
         }
       }, (error100) => {
         this.transitionToState([connectivity_state_1.ConnectivityState.CONNECTING], connectivity_state_1.ConnectivityState.TRANSIENT_FAILURE, `${error100}`);
@@ -643400,12 +643545,12 @@ var require_subchannel_call = __commonJS((exports) => {
   }
 
   class Http2SubchannelCall {
-    constructor(http2Stream, callEventTracker, listener2, transport, callId) {
+    constructor(http2Stream, callEventTracker, listener2, transport2, callId) {
       var _a18;
       this.http2Stream = http2Stream;
       this.callEventTracker = callEventTracker;
       this.listener = listener2;
-      this.transport = transport;
+      this.transport = transport2;
       this.callId = callId;
       this.isReadFilterPending = false;
       this.isPushPending = false;
@@ -643417,7 +643562,7 @@ var require_subchannel_call = __commonJS((exports) => {
       this.internalError = null;
       this.serverEndedCall = false;
       this.connectionDropped = false;
-      const maxReceiveMessageLength = (_a18 = transport.getOptions()["grpc.max_receive_message_length"]) !== null && _a18 !== undefined ? _a18 : constants_1.DEFAULT_MAX_RECEIVE_MESSAGE_LENGTH;
+      const maxReceiveMessageLength = (_a18 = transport2.getOptions()["grpc.max_receive_message_length"]) !== null && _a18 !== undefined ? _a18 : constants_1.DEFAULT_MAX_RECEIVE_MESSAGE_LENGTH;
       this.decoder = new stream_decoder_1.StreamDecoder(maxReceiveMessageLength);
       http2Stream.on("response", (headers, flags) => {
         let headersString = "";
@@ -652345,7 +652490,7 @@ async function initializeBetaTracing(resource) {
   });
   logs.setGlobalLoggerProvider(loggerProvider);
   setLoggerProvider(loggerProvider);
-  const eventLogger = logs.getLogger("com.anthropic.claude_code.events", "4.2.35");
+  const eventLogger = logs.getLogger("com.anthropic.claude_code.events", "4.2.37");
   setEventLogger(eventLogger);
   process.on("beforeExit", async () => {
     await loggerProvider?.forceFlush();
@@ -652385,7 +652530,7 @@ async function initializeTelemetry() {
   const platform10 = getPlatform();
   const baseAttributes = {
     [import_semantic_conventions29.ATTR_SERVICE_NAME]: "claude-code",
-    [import_semantic_conventions29.ATTR_SERVICE_VERSION]: "4.2.35"
+    [import_semantic_conventions29.ATTR_SERVICE_VERSION]: "4.2.37"
   };
   if (platform10 === "wsl") {
     const wslVersion = getWslVersion();
@@ -652430,7 +652575,7 @@ async function initializeTelemetry() {
       } catch {}
     };
     registerCleanup(shutdownTelemetry2);
-    return meterProvider2.getMeter("com.anthropic.claude_code", "4.2.35");
+    return meterProvider2.getMeter("com.anthropic.claude_code", "4.2.37");
   }
   const meterProvider = new import_sdk_metrics2.MeterProvider({
     resource,
@@ -652450,7 +652595,7 @@ async function initializeTelemetry() {
       });
       logs.setGlobalLoggerProvider(loggerProvider);
       setLoggerProvider(loggerProvider);
-      const eventLogger = logs.getLogger("com.anthropic.claude_code.events", "4.2.35");
+      const eventLogger = logs.getLogger("com.anthropic.claude_code.events", "4.2.37");
       setEventLogger(eventLogger);
       logForDebugging("[3P telemetry] Event logger set successfully");
       process.on("beforeExit", async () => {
@@ -652512,7 +652657,7 @@ Current timeout: ${timeoutMs}ms
     }
   };
   registerCleanup(shutdownTelemetry);
-  return meterProvider.getMeter("com.anthropic.claude_code", "4.2.35");
+  return meterProvider.getMeter("com.anthropic.claude_code", "4.2.37");
 }
 async function flushTelemetry() {
   const meterProvider = getMeterProvider();
@@ -653482,7 +653627,7 @@ async function installGlobalPackage(specificVersion) {
     logError2(new AutoUpdaterError("Another process is currently installing an update"));
     logEvent("tengu_auto_updater_lock_contention", {
       pid: process.pid,
-      currentVersion: "4.2.35"
+      currentVersion: "4.2.37"
     });
     return { status: "in_progress" };
   }
@@ -653491,7 +653636,7 @@ async function installGlobalPackage(specificVersion) {
     if (!env4.isRunningWithBun() && env4.isNpmFromWindowsPath()) {
       logError2(new Error("Windows NPM detected in WSL environment"));
       logEvent("tengu_auto_updater_windows_npm_in_wsl", {
-        currentVersion: "4.2.35"
+        currentVersion: "4.2.37"
       });
       return {
         status: "install_failed",
@@ -654037,7 +654182,7 @@ function detectLinuxGlobPatternWarnings() {
 }
 async function getDoctorDiagnostic() {
   const installationType = await getCurrentInstallationType();
-  const version11 = typeof MACRO !== "undefined" ? "4.2.35" : "unknown";
+  const version11 = typeof MACRO !== "undefined" ? "4.2.37" : "unknown";
   const installationPath = await getInstallationPath();
   const invokedBinary = getInvokedBinary();
   const multipleInstallations = await detectMultipleInstallations();
@@ -654979,8 +655124,8 @@ async function updateLatest(channelOrVersion, forceReinstall = false) {
     const maxVersion = await getMaxVersion();
     if (maxVersion && gt(version11, maxVersion)) {
       logForDebugging(`Native installer: maxVersion ${maxVersion} is set, capping update from ${version11} to ${maxVersion}`);
-      if (gte2("4.2.35", maxVersion)) {
-        logForDebugging(`Native installer: current version ${"4.2.35"} is already at or above maxVersion ${maxVersion}, skipping update`);
+      if (gte2("4.2.37", maxVersion)) {
+        logForDebugging(`Native installer: current version ${"4.2.37"} is already at or above maxVersion ${maxVersion}, skipping update`);
         logEvent("tengu_native_update_skipped_max_version", {
           latency_ms: Date.now() - startTime2,
           max_version: maxVersion,
@@ -654991,7 +655136,7 @@ async function updateLatest(channelOrVersion, forceReinstall = false) {
       version11 = maxVersion;
     }
   }
-  if (!forceReinstall && version11 === "4.2.35" && await versionIsAvailable(version11) && await isPossibleClaudeBinary(executablePath)) {
+  if (!forceReinstall && version11 === "4.2.37" && await versionIsAvailable(version11) && await isPossibleClaudeBinary(executablePath)) {
     logForDebugging(`Found ${version11} at ${executablePath}, skipping install`);
     logEvent("tengu_native_update_complete", {
       latency_ms: Date.now() - startTime2,
@@ -723451,6 +723596,7 @@ var init_ExecuteTool = __esm(() => {
   init_Tool();
   init_messages9();
   init_prompt5();
+  init_ideCapability();
   DENIED_PROXY_TARGETS = new Set([ASK_USER_QUESTION_TOOL_NAME]);
   inputSchema27 = lazySchema(() => exports_external.object({
     tool_name: exports_external.string().describe('The exact name of the target tool to execute (e.g., "CronCreate", "mcp__server__action")'),
@@ -723579,7 +723725,7 @@ ${exports_external.prettifyError(parsed.error)}`
         }
       };
     },
-    async checkPermissions(input4) {
+    async checkPermissions(input4, context40) {
       if (input4 && DENIED_PROXY_TARGETS.has(input4.tool_name)) {
         return {
           behavior: "deny",
@@ -723590,6 +723736,18 @@ ${exports_external.prettifyError(parsed.error)}`
           }
         };
       }
+      const tools = context40.options.tools ?? [];
+      const target = findToolByName(tools, input4.tool_name);
+      if (target?.mcpInfo?.serverName === IDE_MCP_SERVER && target.checkPermissions) {
+        const result = await target.checkPermissions(input4.params, context40);
+        if ((result.behavior === "allow" || result.behavior === "ask") && result.updatedInput) {
+          return {
+            ...result,
+            updatedInput: input4
+          };
+        }
+        return result;
+      }
       return {
         behavior: "passthrough",
         message: "ExecuteExtraTool delegates permission to the target tool."
@@ -733551,6 +733709,43 @@ function isSkillLearningEnabled() {
   return false;
 }
 
+// src/services/tools/legacyToolUse.ts
+function parse25(value) {
+  try {
+    return JSON.parse(value);
+  } catch {
+    return value;
+  }
+}
+function repairToolUse(block2, tools) {
+  const names = tools.flatMap((tool) => [tool.name, ...tool.aliases ?? []]);
+  const name3 = names.sort((a8, b9) => b9.length - a8.length).find((value) => block2.name.startsWith(`${value} `));
+  if (!name3)
+    return block2;
+  const suffix = block2.name.slice(name3.length + 1);
+  const pattern = /\s*([A-Za-z_][\w.-]*)<\/arg_key><arg_value>([\s\S]*?)<\/arg_value>/gy;
+  const input4 = {};
+  let matched = false;
+  let end = 0;
+  let match;
+  while ((match = pattern.exec(suffix)) !== null) {
+    matched = true;
+    end = pattern.lastIndex;
+    input4[match[1]] = parse25(match[2]);
+  }
+  if (!matched || end !== suffix.length) {
+    return block2;
+  }
+  const original = typeof block2.input === "object" && block2.input !== null && !Array.isArray(block2.input) ? block2.input : {};
+  const source = block2;
+  const { invalidToolCallError: _invalidToolCallError, ...clean } = source;
+  return {
+    ...clean,
+    name: name3,
+    input: { ...original, ...input4 }
+  };
+}
+
 // src/services/skillLearning/observationStore.ts
 import { mkdir as mkdir35, readFile as readFile48, rename as rename5, stat as stat33, writeFile as writeFile37 } from "fs/promises";
 import { dirname as dirname62, join as join136 } from "path";
@@ -736388,10 +736583,11 @@ function getMcpServerBaseUrlFromToolName(toolName, mcpClients) {
   return getLoggingSafeMcpBaseUrl(serverConnection.config);
 }
 async function* runToolUse(toolUse, assistantMessage, canUseTool, toolUseContext) {
-  const toolName = toolUse.name;
-  const invalidToolCallError = getInvalidToolCallError(toolUse);
+  const block2 = repairToolUse(toolUse, toolUseContext.options.tools);
+  const toolName = block2.name;
+  const invalidToolCallError = getInvalidToolCallError(block2);
   if (invalidToolCallError) {
-    logForDebugging(`Invalid tool call ${toolName}: ${toolUse.id}`);
+    logForDebugging(`Invalid tool call ${toolName}: ${block2.id}`);
     yield {
       message: createUserMessage({
         content: [
@@ -736399,7 +736595,7 @@ async function* runToolUse(toolUse, assistantMessage, canUseTool, toolUseContext
             type: "tool_result",
             content: `<tool_use_error>${invalidToolCallError}</tool_use_error>`,
             is_error: true,
-            tool_use_id: toolUse.id
+            tool_use_id: block2.id
           }
         ],
         toolUseResult: invalidToolCallError,
@@ -736421,11 +736617,11 @@ async function* runToolUse(toolUse, assistantMessage, canUseTool, toolUseContext
   const mcpServerBaseUrl = getMcpServerBaseUrlFromToolName(toolName, toolUseContext.options.mcpClients);
   if (!tool) {
     const sanitizedToolName = sanitizeToolNameForAnalytics(toolName);
-    logForDebugging(`Unknown tool ${toolName}: ${toolUse.id}`);
+    logForDebugging(`Unknown tool ${toolName}: ${block2.id}`);
     logEvent("tengu_tool_use_error", {
       error: `No such tool available: ${sanitizedToolName}`,
       toolName: sanitizedToolName,
-      toolUseID: toolUse.id,
+      toolUseID: block2.id,
       isMcp: toolName.startsWith("mcp__"),
       queryChainId: toolUseContext.queryTracking?.chainId,
       queryDepth: toolUseContext.queryTracking?.depth,
@@ -736447,7 +736643,7 @@ async function* runToolUse(toolUse, assistantMessage, canUseTool, toolUseContext
             type: "tool_result",
             content: `<tool_use_error>Error: No such tool available: ${toolName}</tool_use_error>`,
             is_error: true,
-            tool_use_id: toolUse.id
+            tool_use_id: block2.id
           }
         ],
         toolUseResult: `Error: No such tool available: ${toolName}`,
@@ -736456,12 +736652,12 @@ async function* runToolUse(toolUse, assistantMessage, canUseTool, toolUseContext
     };
     return;
   }
-  const toolInput = toolUse.input;
+  const toolInput = block2.input;
   try {
     if (toolUseContext.abortController.signal.aborted) {
       logEvent("tengu_tool_use_cancelled", {
         toolName: sanitizeToolNameForAnalytics(tool.name),
-        toolUseID: toolUse.id,
+        toolUseID: block2.id,
         isMcp: tool.isMcp ?? false,
         queryChainId: toolUseContext.queryTracking?.chainId,
         queryDepth: toolUseContext.queryTracking?.depth,
@@ -736476,7 +736672,7 @@ async function* runToolUse(toolUse, assistantMessage, canUseTool, toolUseContext
         },
         ...mcpToolDetailsForAnalytics(tool.name, mcpServerType, mcpServerBaseUrl)
       });
-      const content = createToolResultStopMessage(toolUse.id);
+      const content = createToolResultStopMessage(block2.id);
       content.content = withMemoryCorrectionHint(CANCEL_MESSAGE);
       yield {
         message: createUserMessage({
@@ -736487,7 +736683,7 @@ async function* runToolUse(toolUse, assistantMessage, canUseTool, toolUseContext
       };
       return;
     }
-    for await (const update of streamedCheckPermissionsAndCallTool(tool, toolUse.id, toolInput, toolUseContext, canUseTool, assistantMessage, messageId, requestId2, mcpServerType, mcpServerBaseUrl)) {
+    for await (const update of streamedCheckPermissionsAndCallTool(tool, block2.id, toolInput, toolUseContext, canUseTool, assistantMessage, messageId, requestId2, mcpServerType, mcpServerBaseUrl)) {
       yield update;
     }
   } catch (error100) {
@@ -736502,7 +736698,7 @@ async function* runToolUse(toolUse, assistantMessage, canUseTool, toolUseContext
             type: "tool_result",
             content: `<tool_use_error>${detailedError}</tool_use_error>`,
             is_error: true,
-            tool_use_id: toolUse.id
+            tool_use_id: block2.id
           }
         ],
         toolUseResult: detailedError,
@@ -737327,6 +737523,7 @@ class StreamingToolExecutor {
     }
   }
   addTool(block2, assistantMessage) {
+    const repaired = repairToolUse(block2, this.toolDefinitions);
     if (this.tools.length === 0 && this.turnSpan === null) {
       this.turnSpan = createToolBatchSpan(this.toolUseContext.langfuseTrace ?? null, { toolNames: [block2.name], batchIndex: 0 });
       if (this.turnSpan) {
@@ -737336,12 +737533,12 @@ class StreamingToolExecutor {
         };
       }
     }
-    const toolDefinition = findToolByName(this.toolDefinitions, block2.name);
-    const invalidToolCallError = getInvalidToolCallError(block2);
+    const toolDefinition = findToolByName(this.toolDefinitions, repaired.name);
+    const invalidToolCallError = getInvalidToolCallError(repaired);
     if (invalidToolCallError) {
       this.tools.push({
-        id: block2.id,
-        block: block2,
+        id: repaired.id,
+        block: repaired,
         assistantMessage,
         status: "completed",
         isConcurrencySafe: true,
@@ -737353,7 +737550,7 @@ class StreamingToolExecutor {
                 type: "tool_result",
                 content: `<tool_use_error>${invalidToolCallError}</tool_use_error>`,
                 is_error: true,
-                tool_use_id: block2.id
+                tool_use_id: repaired.id
               }
             ],
             toolUseResult: invalidToolCallError,
@@ -737365,8 +737562,8 @@ class StreamingToolExecutor {
     }
     if (!toolDefinition) {
       this.tools.push({
-        id: block2.id,
-        block: block2,
+        id: repaired.id,
+        block: repaired,
         assistantMessage,
         status: "completed",
         isConcurrencySafe: true,
@@ -737376,19 +737573,19 @@ class StreamingToolExecutor {
             content: [
               {
                 type: "tool_result",
-                content: `<tool_use_error>Error: No such tool available: ${block2.name}</tool_use_error>`,
+                content: `<tool_use_error>Error: No such tool available: ${repaired.name}</tool_use_error>`,
                 is_error: true,
-                tool_use_id: block2.id
+                tool_use_id: repaired.id
               }
             ],
-            toolUseResult: `Error: No such tool available: ${block2.name}`,
+            toolUseResult: `Error: No such tool available: ${repaired.name}`,
             sourceToolAssistantUUID: assistantMessage.uuid
           })
         ]
       });
       return;
     }
-    const parsedInput = toolDefinition.inputSchema.safeParse(block2.input);
+    const parsedInput = toolDefinition.inputSchema.safeParse(repaired.input);
     const isConcurrencySafe = parsedInput?.success ? (() => {
       try {
         return Boolean(toolDefinition.isConcurrencySafe(parsedInput.data));
@@ -737397,8 +737594,8 @@ class StreamingToolExecutor {
       }
     })() : false;
     this.tools.push({
-      id: block2.id,
-      block: block2,
+      id: repaired.id,
+      block: repaired,
       assistantMessage,
       status: "queued",
       isConcurrencySafe,
@@ -749235,11 +749432,11 @@ function extractTag(html2, tagName) {
     return null;
   }
   const escapedTag = escapeRegExp(tagName);
-  const pattern = new RegExp(`<${escapedTag}(?:\\s+[^>]*)?>` + "([\\s\\S]*?)" + `<\\/${escapedTag}>`, "gi");
+  const pattern = new RegExp(`<${escapedTag}(?:\\s[^>]*)?>` + "([\\s\\S]*?)" + `<\\/${escapedTag}>`, "gi");
   let match;
   let depth = 0;
   let lastIndex = 0;
-  const openingTag = new RegExp(`<${escapedTag}(?:\\s+[^>]*?)?>`, "gi");
+  const openingTag = new RegExp(`<${escapedTag}(?:\\s[^>]*?)?>`, "gi");
   const closingTag = new RegExp(`<\\/${escapedTag}>`, "gi");
   while ((match = pattern.exec(html2)) !== null) {
     const content = match[1];
@@ -755043,7 +755240,7 @@ var init_findRelevantMemories = __esm(() => {
 
 // src/utils/attachments.ts
 import { readdir as readdir25, stat as stat39 } from "fs/promises";
-import { dirname as dirname68, parse as parse25, relative as relative34, resolve as resolve52 } from "path";
+import { dirname as dirname68, parse as parse26, relative as relative34, resolve as resolve52 } from "path";
 import { randomUUID as randomUUID43 } from "crypto";
 async function getAttachments(input4, toolUseContext, ideSelection, queuedCommands, messages, querySource, options) {
   if (isEnvTruthy(process.env.CLAUDE_CODE_DISABLE_ATTACHMENTS) || isEnvTruthy(process.env.CLAUDE_CODE_SIMPLE)) {
@@ -755510,7 +755707,7 @@ function getDirectoriesToProcess(targetPath, originalCwd) {
   const targetDir = dirname68(resolve52(targetPath));
   const nestedDirs = [];
   let currentDir = targetDir;
-  while (currentDir !== originalCwd && currentDir !== parse25(currentDir).root) {
+  while (currentDir !== originalCwd && currentDir !== parse26(currentDir).root) {
     if (currentDir.startsWith(originalCwd)) {
       nestedDirs.push(currentDir);
     }
@@ -755519,7 +755716,7 @@ function getDirectoriesToProcess(targetPath, originalCwd) {
   nestedDirs.reverse();
   const cwdLevelDirs = [];
   currentDir = originalCwd;
-  while (currentDir !== parse25(currentDir).root) {
+  while (currentDir !== parse26(currentDir).root) {
     cwdLevelDirs.push(currentDir);
     currentDir = dirname68(currentDir);
   }
@@ -756166,7 +756363,7 @@ async function* getAttachmentMessages(input4, toolUseContext, ideSelection, queu
   }
 }
 async function tryGetPDFReference(filename) {
-  const ext = parse25(filename).ext.toLowerCase();
+  const ext = parse26(filename).ext.toLowerCase();
   if (!isPDFExtension(ext)) {
     return null;
   }
@@ -756200,7 +756397,7 @@ async function generateFileAttachment(filename, toolUseContext, successEventName
     return null;
   }
   if (mode === "at-mention" && !isFileWithinReadSizeLimit(filename, getDefaultFileReadingLimits().maxSizeBytes)) {
-    const ext = parse25(filename).ext.toLowerCase();
+    const ext = parse26(filename).ext.toLowerCase();
     if (!isPDFExtension(ext)) {
       try {
         const stats3 = await getFsImplementation().stat(filename);
@@ -757894,14 +758091,14 @@ function isSourceAllowedByPolicy(source) {
   if (allowlist === null) {
     return true;
   }
-  return allowlist.some((allowed) => {
-    if (allowed.source === "hostPattern") {
-      return doesSourceMatchHostPattern(source, allowed);
+  return allowlist.some((allowed2) => {
+    if (allowed2.source === "hostPattern") {
+      return doesSourceMatchHostPattern(source, allowed2);
     }
-    if (allowed.source === "pathPattern") {
-      return doesSourceMatchPathPattern(source, allowed);
+    if (allowed2.source === "pathPattern") {
+      return doesSourceMatchPathPattern(source, allowed2);
     }
-    return areSourcesEqual(source, allowed);
+    return areSourcesEqual(source, allowed2);
   });
 }
 function formatSourceForDisplay(source) {
@@ -762849,13 +763046,13 @@ async function toolToAPISchema(tool, options) {
     schema3.cache_control = options.cacheControl;
   }
   if (isEnvTruthy(process.env.CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS)) {
-    const allowed = new Set([
+    const allowed2 = new Set([
       "name",
       "description",
       "input_schema",
       "cache_control"
     ]);
-    const stripped = Object.keys(schema3).filter((k9) => !allowed.has(k9));
+    const stripped = Object.keys(schema3).filter((k9) => !allowed2.has(k9));
     if (stripped.length > 0) {
       logStripOnce(stripped);
       return {
@@ -763744,7 +763941,7 @@ function getAnthropicEnvMetadata() {
 function getBuildAgeMinutes() {
   if (false)
     ;
-  const buildTime = new Date("2026-09-04T09:22:28.856Z").getTime();
+  const buildTime = new Date("2026-09-09T12:10:12.753Z").getTime();
   if (isNaN(buildTime))
     return;
   return Math.floor((Date.now() - buildTime) / 60000);
@@ -766540,8 +766737,8 @@ var require_dist10 = __commonJS((exports) => {
     };
     return parseAny();
   };
-  var parse26 = parseJSON2;
-  exports.parse = parse26;
+  var parse27 = parseJSON2;
+  exports.parse = parse27;
 });
 
 // src/costrict/provider/index.ts
@@ -767058,10 +767255,12 @@ async function* consumeCoStrictStream(adaptedStream, costrictModel, tools, optio
                   const state3 = toolCallStates.get(idx);
                   if (state3) {
                     state3.rawInput += fragment;
-                    const partialInput = tryParsePartialToolInput(state3.rawInput);
-                    if (partialInput) {
-                      state3.partialInput = partialInput;
-                      delta.parsed_tool_input = partialInput;
+                    if (state3.rawInput.length <= PARTIAL_INPUT_PARSE_MAX_CHARS) {
+                      const partialInput = tryParsePartialToolInput(state3.rawInput);
+                      if (partialInput) {
+                        state3.partialInput = partialInput;
+                        delta.parsed_tool_input = partialInput;
+                      }
                     }
                   }
                 } else if (delta.type === "thinking_delta") {
@@ -767405,7 +767604,7 @@ async function* queryModelCoStrict(messages, systemPrompt2, tools, signal, optio
     });
   }
 }
-var import_partial_json, MAX_STREAM_RECONNECT_ATTEMPTS2 = 3, MAX_PREFILL_ROUNDS = 4, MAX_STITCHED_CHARS = 2000000;
+var import_partial_json, MAX_STREAM_RECONNECT_ATTEMPTS2 = 3, MAX_PREFILL_ROUNDS = 4, MAX_STITCHED_CHARS = 2000000, PARTIAL_INPUT_PARSE_MAX_CHARS = 8192;
 var init_provider3 = __esm(() => {
   init_openai();
   init_sdk();
@@ -778240,7 +778439,7 @@ function Feedback({
       platform: env4.platform,
       gitRepo: envInfo.isGit,
       terminal: env4.terminal,
-      version: "4.2.35",
+      version: "4.2.37",
       transcript: normalizeMessagesForAPI(messages),
       errors: sanitizedErrors,
       lastApiRequest: getLastAPIRequest(),
@@ -778423,7 +778622,7 @@ function Feedback({
                       ", ",
                       env4.terminal,
                       ", v",
-                      "4.2.35"
+                      "4.2.37"
                     ]
                   })
                 ]
@@ -778520,7 +778719,7 @@ ${sanitizedDescription}
 ` + `**Environment Info**
 ` + `- Platform: ${env4.platform}
 ` + `- Terminal: ${env4.terminal}
-` + `- Version: ${"4.2.35"}
+` + `- Version: ${"4.2.37"}
 ` + `- Feedback ID: ${feedbackId}
 ` + `
 **Errors**
@@ -779170,12 +779369,12 @@ async function getFilesUsingGit(abortSignal, respectGitignore) {
         "--others",
         "--exclude-standard"
       ] : ["-c", "core.quotepath=false", "ls-files", "--others"];
-      const generation = cacheGeneration;
+      const generation2 = cacheGeneration;
       untrackedFetchPromise = execFileNoThrowWithCwd(gitExe(), untrackedArgs, {
         timeout: 1e4,
         cwd: repoRoot2
       }).then(async (untrackedResult) => {
-        if (generation !== cacheGeneration) {
+        if (generation2 !== cacheGeneration) {
           return;
         }
         if (untrackedResult.code === 0) {
@@ -779345,11 +779544,11 @@ function startBackgroundCacheRefresh() {
       return;
     }
   }
-  const generation = cacheGeneration;
+  const generation2 = cacheGeneration;
   const refreshStart = Date.now();
   getFileIndex();
   fileListRefreshPromise = getPathsForSuggestions().then((result) => {
-    if (generation !== cacheGeneration) {
+    if (generation2 !== cacheGeneration) {
       return result;
     }
     fileListRefreshPromise = null;
@@ -779361,7 +779560,7 @@ function startBackgroundCacheRefresh() {
   }).catch((error100) => {
     logForDebugging(`[FileIndex] Cache refresh failed: ${errorMessage(error100)}`);
     logError2(error100);
-    if (generation === cacheGeneration) {
+    if (generation2 === cacheGeneration) {
       fileListRefreshPromise = null;
     }
     return getFileIndex();
@@ -780759,7 +780958,7 @@ function buildPrimarySection() {
     children: t("settings.status.renameHint")
   });
   return [
-    { label: t("settings.status.version"), value: "4.2.35" },
+    { label: t("settings.status.version"), value: "4.2.37" },
     { label: t("settings.status.sessionName"), value: nameValue },
     { label: t("settings.status.sessionId"), value: sessionId },
     { label: t("settings.status.cwd"), value: getCwd() },
@@ -783637,7 +783836,7 @@ function Config({
         }
       })
     }) : showSubmenu === "ChannelDowngrade" ? /* @__PURE__ */ jsx_runtime192.jsx(ChannelDowngradeDialog, {
-      currentVersion: "4.2.35",
+      currentVersion: "4.2.37",
       onChoice: (choice) => {
         setShowSubmenu(null);
         setTabsHidden(false);
@@ -783649,7 +783848,7 @@ function Config({
           autoUpdatesChannel: "stable"
         };
         if (choice === "stay") {
-          newSettings.minimumVersion = "4.2.35";
+          newSettings.minimumVersion = "4.2.37";
         }
         updateSettingsForSource("userSettings", newSettings);
         setSettingsData((prev) => ({
@@ -789118,7 +789317,7 @@ function HelpV2({ onClose, commands: commands11 }) {
       color: "professionalBlue",
       children: [
         /* @__PURE__ */ jsx_runtime219.jsx(Tabs, {
-          title: process.env.USER_TYPE === "sf" ? "/help" : `CoStrict v${"4.2.35"}`,
+          title: process.env.USER_TYPE === "sf" ? "/help" : `CoStrict v${"4.2.37"}`,
           color: "professionalBlue",
           defaultTab: "general",
           children: tabs
@@ -811833,7 +812032,7 @@ function getAllReleaseNotes(changelogContent = getStoredChangelogFromMemory()) {
     return [];
   }
 }
-async function checkForReleaseNotes(lastSeenVersion, currentVersion = "4.2.35") {
+async function checkForReleaseNotes(lastSeenVersion, currentVersion = "4.2.37") {
   if (process.env.USER_TYPE === "sf") {
     const changelog = "";
     if (changelog) {
@@ -811860,7 +812059,7 @@ async function checkForReleaseNotes(lastSeenVersion, currentVersion = "4.2.35")
     releaseNotes
   };
 }
-function checkForReleaseNotesSync(lastSeenVersion, currentVersion = "4.2.35") {
+function checkForReleaseNotesSync(lastSeenVersion, currentVersion = "4.2.37") {
   if (process.env.USER_TYPE === "sf") {
     const changelog = "";
     if (changelog) {
@@ -812533,7 +812732,7 @@ function createSearcher(pattern, options) {
   }
   return new BitapSearch(pattern, options);
 }
-function parse26(query5, options, { auto = true } = {}) {
+function parse27(query5, options, { auto = true } = {}) {
   const next2 = (query6) => {
     if (isString3(query6)) {
       const obj = {
@@ -813413,7 +813612,7 @@ var INCORRECT_INDEX_TYPE = "Incorrect 'index' type", INVALID_DOC_INDEX = "Invali
     return results;
   }
   _searchLogical(query5) {
-    const expression = parse26(query5, this.options);
+    const expression = parse27(query5, this.options);
     const evaluate = (node2, item, idx) => {
       if (!("children" in node2)) {
         const { keyId, searcher } = node2;
@@ -813810,7 +814009,7 @@ var init_fuse = __esm(() => {
       ...options
     }).searchIn(text2);
   };
-  Fuse.parseQuery = parse26;
+  Fuse.parseQuery = parse27;
   register2(ExtendedSearch);
   register2(TokenSearch);
   Fuse.use = function(...plugins) {
@@ -814373,7 +814572,7 @@ function isNotLoggedIn() {
   return true;
 }
 function getLogoDisplayData() {
-  const version11 = process.env.DEMO_VERSION ?? "4.2.35";
+  const version11 = process.env.DEMO_VERSION ?? "4.2.37";
   const serverUrl = getDirectConnectServerUrl();
   const displayPath2 = process.env.DEMO_VERSION ? "/code/claude" : getDisplayPath(getCwd());
   const cwd2 = serverUrl ? `${displayPath2} in ${serverUrl.replace(/^https?:\/\//, "")}` : displayPath2;
@@ -814951,7 +815150,7 @@ var init_MatrixMessageLine = __esm(() => {
 // src/components/matrix-tactical/MatrixWelcome.tsx
 import { basename as basename48 } from "path";
 function MatrixWelcome({
-  version: version11 = "4.2.35",
+  version: version11 = "4.2.37",
   projectName,
   cwd: cwd2,
   modelDisplayName,
@@ -815586,13 +815785,13 @@ function LogoV2() {
   const { hasReleaseNotes } = checkForReleaseNotesSync(config13.lastReleaseNotesSeen);
   import_react167.useEffect(() => {
     const currentConfig = getGlobalConfig();
-    if (currentConfig.lastReleaseNotesSeen === "4.2.35") {
+    if (currentConfig.lastReleaseNotesSeen === "4.2.37") {
       return;
     }
     saveGlobalConfig((current2) => {
-      if (current2.lastReleaseNotesSeen === "4.2.35")
+      if (current2.lastReleaseNotesSeen === "4.2.37")
         return current2;
-      return { ...current2, lastReleaseNotesSeen: "4.2.35" };
+      return { ...current2, lastReleaseNotesSeen: "4.2.37" };
     });
     if (showOnboarding) {
       incrementProjectOnboardingSeenCount();
@@ -824314,10 +824513,10 @@ var require_packer_sync = __commonJS((exports, module) => {
 
 // node_modules/.bun/pngjs@5.0.0/node_modules/pngjs/lib/png-sync.js
 var require_png_sync = __commonJS((exports) => {
-  var parse27 = require_parser_sync();
+  var parse28 = require_parser_sync();
   var pack2 = require_packer_sync();
   exports.read = function(buffer2, options) {
-    return parse27(buffer2, options || {});
+    return parse28(buffer2, options || {});
   };
   exports.write = function(png2, options) {
     return pack2(png2, options);
@@ -839157,7 +839356,7 @@ async function captureMemoryDiagnostics(trigger, dumpNumber = 0) {
     smapsRollup,
     platform: process.platform,
     nodeVersion: process.version,
-    ccVersion: "4.2.35"
+    ccVersion: "4.2.37"
   };
 }
 async function performHeapDump(trigger = "manual", dumpNumber = 0) {
@@ -839273,7 +839472,7 @@ var init_mock_limits = __esm(() => {
 var call56 = async () => {
   return {
     type: "text",
-    value: `${"4.2.35"} (built ${"2026-09-04T09:22:28.856Z"})`
+    value: `${"4.2.37"} (built ${"2026-09-09T12:10:12.753Z"})`
   };
 }, version11, version_default;
 var init_version2 = __esm(() => {
@@ -855848,7 +856047,7 @@ __export(exports_createWorkflowCommand, {
   getWorkflowCommands: () => getWorkflowCommands
 });
 import { readdir as readdir43 } from "fs/promises";
-import { join as join211, parse as parse27 } from "path";
+import { join as join211, parse as parse28 } from "path";
 async function getWorkflowCommands(cwd2) {
   const workflowDir = join211(cwd2, WORKFLOW_DIR_NAME);
   let files3;
@@ -855858,11 +856057,11 @@ async function getWorkflowCommands(cwd2) {
     return [];
   }
   const workflowFiles = files3.filter((f7) => {
-    const ext = parse27(f7).ext.toLowerCase();
+    const ext = parse28(f7).ext.toLowerCase();
     return WORKFLOW_FILE_EXTENSIONS.includes(ext);
   });
   return workflowFiles.map((file3) => {
-    const name3 = parse27(file3).name;
+    const name3 = parse28(file3).name;
     return {
       type: "prompt",
       name: name3,
@@ -859153,7 +859352,7 @@ function generateHtmlReport(data, insights) {
 </html>`;
 }
 function buildExportData(data, insights, facets, remoteStats) {
-  const version12 = typeof MACRO !== "undefined" ? "4.2.35" : "unknown";
+  const version12 = typeof MACRO !== "undefined" ? "4.2.37" : "unknown";
   const remote_hosts_collected = remoteStats?.hosts.filter((h8) => h8.sessionCount > 0).map((h8) => h8.name);
   const facets_summary = {
     total: facets.size,
@@ -863645,7 +863844,7 @@ var init_sessionStorage = __esm(() => {
   init_settings2();
   init_slowOperations();
   init_uuid();
-  VERSION11 = typeof MACRO !== "undefined" ? "4.2.35" : "unknown";
+  VERSION11 = typeof MACRO !== "undefined" ? "4.2.37" : "unknown";
   MAX_TOMBSTONE_REWRITE_BYTES = 50 * 1024 * 1024;
   SKIP_FIRST_PROMPT_PATTERN2 = /^(?:\s*<[a-z][\w-]*[\s>]|\[Request interrupted by user[^\]]*\])/;
   EPHEMERAL_PROGRESS_TYPES = new Set([
@@ -864986,7 +865185,7 @@ var init_filesystem = __esm(() => {
   });
   getBundledSkillsRoot = memoize_default(function getBundledSkillsRoot2() {
     const nonce = randomBytes24(16).toString("hex");
-    return join219(getCostrictTempDir(), "bundled-skills", "4.2.35", nonce);
+    return join219(getCostrictTempDir(), "bundled-skills", "4.2.37", nonce);
   });
   getResolvedWorkingDirPaths = memoize_default(getPathsForPermissionCheck);
 });
@@ -876484,7 +876683,7 @@ function buildSystemInitMessage(inputs) {
     slash_commands: inputs.commands.filter((c10) => c10.userInvocable !== false).map((c10) => c10.name),
     apiKeySource: getAnthropicApiKeyWithSource().source,
     betas: getSdkBetas(),
-    claude_code_version: "4.2.35",
+    claude_code_version: "4.2.37",
     output_style: outputStyle2,
     agents: inputs.agents.map((agent) => agent.agentType),
     skills: inputs.skills.filter((s) => s.userInvocable !== false).map((skill) => skill.name),
@@ -878361,10 +878560,10 @@ function toolInfoFromToolUse(toolUse, _supportsTerminalOutput = false, cwd2) {
     case "WebSearch": {
       const query5 = input5?.query ?? "Web search";
       let label = `"${query5}"`;
-      const allowed = input5?.allowed_domains;
+      const allowed2 = input5?.allowed_domains;
       const blocked = input5?.blocked_domains;
-      if (allowed && allowed.length > 0)
-        label += ` (allowed: ${allowed.join(", ")})`;
+      if (allowed2 && allowed2.length > 0)
+        label += ` (allowed: ${allowed2.join(", ")})`;
       if (blocked && blocked.length > 0)
         label += ` (blocked: ${blocked.join(", ")})`;
       return {
@@ -880028,7 +880227,7 @@ function appendToLog(path61, message2) {
     cwd: getFsImplementation().cwd(),
     userType: process.env.USER_TYPE,
     sessionId: getSessionId(),
-    version: "4.2.35"
+    version: "4.2.37"
   };
   getLogWriter(path61).write(messageWithTimestamp);
 }
@@ -884247,8 +884446,8 @@ class QueryGuard {
     this._notify();
     return this._generation;
   }
-  end(generation) {
-    if (this._generation !== generation)
+  end(generation2) {
+    if (this._generation !== generation2)
       return false;
     if (this._status !== "running")
       return false;
@@ -901089,7 +901288,7 @@ function buildStatusLineCommandInput(permissionMode, exceeds200kTokens, settings
       project_dir: getOriginalCwd(),
       added_dirs: addedDirs
     },
-    version: "4.2.35",
+    version: "4.2.37",
     output_style: {
       name: outputStyleName
     },
@@ -907876,7 +908075,7 @@ var require_lib16 = __commonJS((exports, module) => {
       this.hashes = this.algorithms.map(crypto8.createHash);
     }
     #getOptions() {
-      this.sri = this.opts?.integrity ? parse28(this.opts?.integrity, this.opts) : null;
+      this.sri = this.opts?.integrity ? parse29(this.opts?.integrity, this.opts) : null;
       this.expectedSize = this.opts?.size;
       if (!this.sri) {
         this.algorithm = null;
@@ -907917,7 +908116,7 @@ var require_lib16 = __commonJS((exports, module) => {
       if (!this.goodSri) {
         this.#getOptions();
       }
-      const newSri = parse28(this.hashes.map((h8, i10) => {
+      const newSri = parse29(this.hashes.map((h8, i10) => {
         return `${this.algorithms[i10]}-${h8.digest("base64")}${this.optString}`;
       }).join(" "), this.opts);
       const match = this.goodSri && newSri.match(this.sri, this.opts);
@@ -907985,7 +908184,7 @@ var require_lib16 = __commonJS((exports, module) => {
       return this.toString();
     }
     match(integrity, opts) {
-      const other = parse28(integrity, opts);
+      const other = parse29(integrity, opts);
       if (!other) {
         return false;
       }
@@ -908064,13 +908263,13 @@ var require_lib16 = __commonJS((exports, module) => {
     }
     concat(integrity, opts) {
       const other = typeof integrity === "string" ? integrity : stringify5(integrity, opts);
-      return parse28(`${this.toString(opts)} ${other}`, opts);
+      return parse29(`${this.toString(opts)} ${other}`, opts);
     }
     hexDigest() {
-      return parse28(this, { single: true }).hexDigest();
+      return parse29(this, { single: true }).hexDigest();
     }
     merge(integrity, opts) {
-      const other = parse28(integrity, opts);
+      const other = parse29(integrity, opts);
       for (const algo in other) {
         if (this[algo]) {
           if (!this[algo].find((hash4) => other[algo].find((otherhash) => hash4.digest === otherhash.digest))) {
@@ -908082,7 +908281,7 @@ var require_lib16 = __commonJS((exports, module) => {
       }
     }
     match(integrity, opts) {
-      const other = parse28(integrity, opts);
+      const other = parse29(integrity, opts);
       if (!other) {
         return false;
       }
@@ -908101,8 +908300,8 @@ var require_lib16 = __commonJS((exports, module) => {
       return null;
     }
   }
-  exports.parse = parse28;
-  function parse28(sri, opts) {
+  exports.parse = parse29;
+  function parse29(sri, opts) {
     if (!sri) {
       return null;
     }
@@ -908138,7 +908337,7 @@ var require_lib16 = __commonJS((exports, module) => {
     if (obj.algorithm && obj.digest) {
       return Hash7.prototype.toString.call(obj, opts);
     } else if (typeof obj === "string") {
-      return stringify5(parse28(obj, opts), opts);
+      return stringify5(parse29(obj, opts), opts);
     } else {
       return Integrity.prototype.toString.call(obj, opts);
     }
@@ -908146,7 +908345,7 @@ var require_lib16 = __commonJS((exports, module) => {
   exports.fromHex = fromHex4;
   function fromHex4(hexDigest, algorithm, opts) {
     const optString = getOptString(opts?.options);
-    return parse28(`${algorithm}-${Buffer.from(hexDigest, "hex").toString("base64")}${optString}`, opts);
+    return parse29(`${algorithm}-${Buffer.from(hexDigest, "hex").toString("base64")}${optString}`, opts);
   }
   exports.fromData = fromData;
   function fromData(data, opts) {
@@ -908182,7 +908381,7 @@ var require_lib16 = __commonJS((exports, module) => {
   }
   exports.checkData = checkData;
   function checkData(data, sri, opts) {
-    sri = parse28(sri, opts);
+    sri = parse29(sri, opts);
     if (!sri || !Object.keys(sri).length) {
       if (opts?.error) {
         throw Object.assign(new Error("No valid integrity hashes to check against"), {
@@ -908194,7 +908393,7 @@ var require_lib16 = __commonJS((exports, module) => {
     }
     const algorithm = sri.pickAlgorithm(opts);
     const digest = crypto8.createHash(algorithm).update(data).digest("base64");
-    const newSri = parse28({ algorithm, digest });
+    const newSri = parse29({ algorithm, digest });
     const match = newSri.match(sri, opts);
     opts = opts || {};
     if (match || !opts.error) {
@@ -908222,7 +908421,7 @@ var require_lib16 = __commonJS((exports, module) => {
   function checkStream(stream8, sri, opts) {
     opts = opts || Object.create(null);
     opts.integrity = sri;
-    sri = parse28(sri, opts);
+    sri = parse29(sri, opts);
     if (!sri || !Object.keys(sri).length) {
       return Promise.reject(Object.assign(new Error("No valid integrity hashes to check against"), {
         code: "EINTEGRITY"
@@ -908458,7 +908657,7 @@ var require_polyfill = __commonJS((exports, module) => {
     dirname: dirname96,
     isAbsolute: isAbsolute42,
     join: join237,
-    parse: parse28,
+    parse: parse29,
     resolve: resolve72,
     sep: sep46,
     toNamespacedPath
@@ -908563,7 +908762,7 @@ var require_polyfill = __commonJS((exports, module) => {
   async function checkParentPaths(src, srcStat, dest) {
     const srcParent = resolve72(dirname96(src));
     const destParent = resolve72(dirname96(dest));
-    if (destParent === srcParent || destParent === parse28(destParent).root) {
+    if (destParent === srcParent || destParent === parse29(destParent).root) {
       return;
     }
     let destStat;
@@ -915295,10 +915494,66 @@ var init_useAfterFirstRender = __esm(() => {
   import_react307 = __toESM(require_react(), 1);
 });
 
+// src/hooks/deferredHookMessagesGate.ts
+class DeferredHookGate {
+  pending;
+  resolved = false;
+  constructor(pending3) {
+    this.pending = pending3 ?? null;
+    if (!pending3)
+      this.resolved = true;
+  }
+  async wait(timeoutMs = HOOK_WAIT_TIMEOUT_MS) {
+    const promise4 = this.pending;
+    if (this.resolved || !promise4)
+      return null;
+    let timer3;
+    const timeout3 = new Promise((resolve72) => {
+      timer3 = setTimeout(() => resolve72("timeout"), timeoutMs);
+    });
+    try {
+      const outcome = await Promise.race([
+        promise4.then(() => "done"),
+        timeout3
+      ]);
+      if (outcome === "timeout") {
+        if (this.resolved)
+          return null;
+        this.resolved = true;
+        this.pending = null;
+        logForDebugging(`SessionStart hooks did not complete within ${timeoutMs}ms; proceeding without hook context`, { level: "warn" });
+        return null;
+      }
+      if (this.resolved)
+        return null;
+      this.resolved = true;
+      this.pending = null;
+      return await promise4;
+    } finally {
+      if (timer3)
+        clearTimeout(timer3);
+    }
+  }
+  takeBackgroundMessages(msgs) {
+    if (this.resolved)
+      return null;
+    this.resolved = true;
+    this.pending = null;
+    return msgs;
+  }
+}
+var HOOK_WAIT_TIMEOUT_MS = 3000;
+var init_deferredHookMessagesGate = __esm(() => {
+  init_debug();
+});
+
 // src/hooks/useDeferredHookMessages.ts
 function useDeferredHookMessages(pendingHookMessages, setMessages) {
   const pendingRef = import_react308.useRef(pendingHookMessages ?? null);
-  const resolvedRef = import_react308.useRef(!pendingHookMessages);
+  const gateRef = import_react308.useRef(null);
+  if (gateRef.current === null) {
+    gateRef.current = new DeferredHookGate(pendingRef.current ?? undefined);
+  }
   import_react308.useEffect(() => {
     const promise4 = pendingRef.current;
     if (!promise4)
@@ -915307,10 +915562,9 @@ function useDeferredHookMessages(pendingHookMessages, setMessages) {
     promise4.then((msgs) => {
       if (cancelled)
         return;
-      resolvedRef.current = true;
-      pendingRef.current = null;
-      if (msgs.length > 0) {
-        setMessages((prev) => [...msgs, ...prev]);
+      const inject = gateRef.current.takeBackgroundMessages(msgs);
+      if (inject && inject.length > 0) {
+        setMessages((prev) => [...inject, ...prev]);
       }
     });
     return () => {
@@ -915318,20 +915572,15 @@ function useDeferredHookMessages(pendingHookMessages, setMessages) {
     };
   }, [setMessages]);
   return import_react308.useCallback(async () => {
-    if (resolvedRef.current || !pendingRef.current)
-      return;
-    const msgs = await pendingRef.current;
-    if (resolvedRef.current)
-      return;
-    resolvedRef.current = true;
-    pendingRef.current = null;
-    if (msgs.length > 0) {
-      setMessages((prev) => [...msgs, ...prev]);
+    const inject = await gateRef.current.wait();
+    if (inject && inject.length > 0) {
+      setMessages((prev) => [...inject, ...prev]);
     }
   }, [setMessages]);
 }
 var import_react308;
 var init_useDeferredHookMessages = __esm(() => {
+  init_deferredHookMessagesGate();
   import_react308 = __toESM(require_react(), 1);
 });
 
@@ -919705,7 +919954,7 @@ async function submitTranscriptShare(messages, trigger, appearanceId) {
     } catch {}
     const data = {
       trigger,
-      version: "4.2.35",
+      version: "4.2.37",
       platform: process.platform,
       transcript,
       subagentTranscripts: Object.keys(subagentTranscripts).length > 0 ? subagentTranscripts : undefined,
@@ -920960,7 +921209,7 @@ function getReleaseType(current2, latest) {
   return "patch";
 }
 async function checkNewAutoUpdate(callbacks) {
-  const currentVersion = "4.2.35";
+  const currentVersion = "4.2.37";
   logForDebugging(`[newAutoUpdater] checking, current: ${currentVersion}`);
   if (isNewAutoUpdaterDisabled()) {
     return { action: "skip", currentVersion, latestVersion: null };
@@ -924009,9 +924258,9 @@ function parseManifest(page) {
     throw new SnapshotInvalid(`unsupported contract version ${contractVersion}, expected ${SNAPSHOT_CONTRACT_VERSION}`);
   }
   const snapshotId = requireNonEmptyString(page, "snapshotId", "snapshot");
-  const generation = requireInteger(page, "generation", "snapshot");
-  if (generation < 1) {
-    throw new SnapshotInvalid(`generation ${generation} must be >= 1`);
+  const generation2 = requireInteger(page, "generation", "snapshot");
+  if (generation2 < 1) {
+    throw new SnapshotInvalid(`generation ${generation2} must be >= 1`);
   }
   const generatedAt = requireString2(page, "generatedAt", "snapshot");
   const pageCount = requireInteger(page, "pageCount", "snapshot");
@@ -924033,7 +924282,7 @@ function parseManifest(page) {
   return {
     contractVersion,
     snapshotId,
-    generation,
+    generation: generation2,
     generatedAt,
     pageCount,
     itemCount,
@@ -924277,15 +924526,15 @@ function parseConsumerMarker(value) {
   if (typeof value !== "object" || value === null)
     return;
   const record5 = value;
-  const generation = record5.generation;
+  const generation2 = record5.generation;
   const snapshotId = record5.snapshotId;
-  if (typeof generation !== "number" || !Number.isSafeInteger(generation)) {
+  if (typeof generation2 !== "number" || !Number.isSafeInteger(generation2)) {
     return;
   }
   if (typeof snapshotId !== "string" || snapshotId.length === 0)
     return;
   return {
-    generation,
+    generation: generation2,
     snapshotId,
     appliedAt: typeof record5.appliedAt === "string" ? record5.appliedAt : "",
     everApplied: record5.everApplied === true
@@ -933217,7 +933466,7 @@ function WelcomeV2() {
               dimColor: true,
               children: [
                 "v",
-                "4.2.35",
+                "4.2.37",
                 " "
               ]
             })
@@ -933283,7 +933532,7 @@ function WelcomeV2() {
             dimColor: true,
             children: [
               "v",
-              "4.2.35",
+              "4.2.37",
               " "
             ]
           })
@@ -933385,7 +933634,7 @@ function AppleTerminalWelcomeV2({ theme: theme2, welcomeMessage }) {
               dimColor: true,
               children: [
                 "v",
-                "4.2.35",
+                "4.2.37",
                 " "
               ]
             })
@@ -933451,7 +933700,7 @@ function AppleTerminalWelcomeV2({ theme: theme2, welcomeMessage }) {
             dimColor: true,
             children: [
               "v",
-              "4.2.35",
+              "4.2.37",
               " "
             ]
           })
@@ -934391,7 +934640,7 @@ function completeOnboarding() {
   saveGlobalConfig((current2) => ({
     ...current2,
     hasCompletedOnboarding: true,
-    lastOnboardingVersion: "4.2.35"
+    lastOnboardingVersion: "4.2.37"
   }));
 }
 function showDialog(root9, renderer) {
@@ -939852,7 +940101,7 @@ function registerMcpAddCommand(mcp2) {
     }
     try {
       const scope = ensureConfigScope(options.scope);
-      const transport = ensureTransport(options.transport);
+      const transport2 = ensureTransport(options.transport);
       if (options.xaa && !isXaaEnabled()) {
         cliError(t("mcp.addErrorXaa"));
       }
@@ -939873,14 +940122,14 @@ function registerMcpAddCommand(mcp2) {
       const transportExplicit = options.transport !== undefined;
       const looksLikeUrl = actualCommand.startsWith("http://") || actualCommand.startsWith("https://") || actualCommand.startsWith("localhost") || actualCommand.endsWith("/sse") || actualCommand.endsWith("/mcp");
       logEvent("tengu_mcp_add", {
-        type: transport,
+        type: transport2,
         scope,
         source: "command",
-        transport,
+        transport: transport2,
         transportExplicit,
         looksLikeUrl
       });
-      if (transport === "sse") {
+      if (transport2 === "sse") {
         if (!actualCommand) {
           cliError(t("mcp.addErrorSseUrlRequired"));
         }
@@ -939908,7 +940157,7 @@ function registerMcpAddCommand(mcp2) {
           process.stdout.write(t("mcp.addLabelHeaders", { json: jsonStringify(headers, null, 2) }) + `
 `);
         }
-      } else if (transport === "http") {
+      } else if (transport2 === "http") {
         if (!actualCommand) {
           cliError(t("mcp.addErrorHttpUrlRequired"));
         }
@@ -941958,7 +942207,7 @@ function peekTable(key6, table, meta6, type) {
   }
   return [k9, t2, state4.c];
 }
-function parse28(toml, { maxDepth = 1000, integersAsBigInt } = {}) {
+function parse29(toml, { maxDepth = 1000, integersAsBigInt } = {}) {
   let res = {};
   let meta6 = {};
   let tbl = res;
@@ -942139,7 +942388,7 @@ async function validateSyntax(absPath, deps = prodDeps2) {
   }
   if (ext === ".toml") {
     try {
-      parse28(readFileSync47(absPath, "utf8"));
+      parse29(readFileSync47(absPath, "utf8"));
     } catch (error100) {
       const { line, column } = error100;
       const position3 = typeof line === "number" && typeof column === "number" ? `line ${line}, col ${column}: ` : "";
@@ -943740,10 +943989,11 @@ var startSdkMemoryMonitor = () => {};
 var init_sdkHeapDumpMonitor = () => {};
 
 // src/entrypoints/sdk/controlSchemas.ts
-var JSONRPCMessagePlaceholder, SDKHookCallbackMatcherSchema, SDKControlInitializeRequestSchema, SDKControlInitializeResponseSchema, SDKControlInterruptRequestSchema, SDKControlPermissionRequestSchema, SDKControlSetPermissionModeRequestSchema, SDKControlSetModelRequestSchema, SDKControlSetAgentRequestSchema, SDKControlSetMaxThinkingTokensRequestSchema, SDKControlMcpStatusRequestSchema, SDKControlMcpStatusResponseSchema, SDKControlGetContextUsageRequestSchema, ContextCategorySchema, ContextGridSquareSchema, SDKControlGetContextUsageResponseSchema, SDKControlRewindFilesRequestSchema, SDKControlRewindFilesResponseSchema, SDKControlCancelAsyncMessageRequestSchema, SDKControlCancelAsyncMessageResponseSchema, SDKControlSeedReadStateRequestSchema, SDKHookCallbackRequestSchema, SDKControlMcpMessageRequestSchema, SDKControlMcpSetServersRequestSchema, SDKControlMcpSetServersResponseSchema, SDKControlReloadPluginsRequestSchema, SDKControlReloadPluginsResponseSchema, SDKControlMcpReconnectRequestSchema, SDKControlMcpToggleRequestSchema, SDKControlStopTaskRequestSchema, SDKControlApplyFlagSettingsRequestSchema, SDKControlGetSettingsRequestSchema, SDKControlGetSettingsResponseSchema, SDKControlElicitationRequestSchema, SDKControlElicitationResponseSchema, SDKControlRequestInnerSchema, SDKControlRequestSchema, ControlResponseSchema, ControlErrorResponseSchema, SDKControlResponseSchema, SDKControlCancelRequestSchema, SDKKeepAliveMessageSchema, SDKUpdateEnvironmentVariablesMessageSchema, StdoutMessageSchema, StdinMessageSchema;
+var JSONRPCMessagePlaceholder, SDKHookCallbackMatcherSchema, SDKControlInitializeRequestSchema, SDKControlInitializeResponseSchema, SDKControlInterruptRequestSchema, SDKControlPermissionRequestSchema, SDKControlSetPermissionModeRequestSchema, SDKControlSetModelRequestSchema, SDKControlSetAgentRequestSchema, SDKControlSetMaxThinkingTokensRequestSchema, SDKControlMcpStatusRequestSchema, SDKControlMcpStatusResponseSchema, SDKControlGetContextUsageRequestSchema, ContextCategorySchema, ContextGridSquareSchema, SDKControlGetContextUsageResponseSchema, SDKControlRewindFilesRequestSchema, SDKControlRewindFilesResponseSchema, SDKControlCancelAsyncMessageRequestSchema, SDKControlCancelAsyncMessageResponseSchema, SDKControlSeedReadStateRequestSchema, SDKHookCallbackRequestSchema, SDKControlMcpMessageRequestSchema, SDKControlMcpSetServersRequestSchema, SDKControlIdeMcpSetRequestSchema, SDKControlIdeMcpClearRequestSchema, SDKControlMcpSetServersResponseSchema, SDKControlReloadPluginsRequestSchema, SDKControlReloadPluginsResponseSchema, SDKControlMcpReconnectRequestSchema, SDKControlMcpToggleRequestSchema, SDKControlStopTaskRequestSchema, SDKControlApplyFlagSettingsRequestSchema, SDKControlGetSettingsRequestSchema, SDKControlGetSettingsResponseSchema, SDKControlElicitationRequestSchema, SDKControlElicitationResponseSchema, SDKControlRequestInnerSchema, SDKControlRequestSchema, ControlResponseSchema, ControlErrorResponseSchema, SDKControlResponseSchema, SDKControlCancelRequestSchema, SDKKeepAliveMessageSchema, SDKUpdateEnvironmentVariablesMessageSchema, StdoutMessageSchema, StdinMessageSchema;
 var init_controlSchemas = __esm(() => {
   init_v4();
   init_coreSchemas();
+  init_ideCapability();
   JSONRPCMessagePlaceholder = lazySchema(() => exports_external.unknown());
   SDKHookCallbackMatcherSchema = lazySchema(() => exports_external.object({
     matcher: exports_external.string().optional(),
@@ -943934,6 +944184,8 @@ var init_controlSchemas = __esm(() => {
     subtype: exports_external.literal("mcp_set_servers"),
     servers: exports_external.record(exports_external.string(), McpServerConfigForProcessTransportSchema())
   }).describe("Replaces the set of dynamically managed MCP servers."));
+  SDKControlIdeMcpSetRequestSchema = lazySchema(() => exports_external.object({ subtype: exports_external.literal("ide_mcp_set"), capability: IdeCapabilitySchema() }));
+  SDKControlIdeMcpClearRequestSchema = lazySchema(() => exports_external.object({ subtype: exports_external.literal("ide_mcp_clear"), generation: exports_external.string().uuid() }));
   SDKControlMcpSetServersResponseSchema = lazySchema(() => exports_external.object({
     added: exports_external.array(exports_external.string()),
     removed: exports_external.array(exports_external.string()),
@@ -944019,6 +944271,8 @@ var init_controlSchemas = __esm(() => {
     SDKControlCancelAsyncMessageRequestSchema(),
     SDKControlSeedReadStateRequestSchema(),
     SDKControlMcpSetServersRequestSchema(),
+    SDKControlIdeMcpSetRequestSchema(),
+    SDKControlIdeMcpClearRequestSchema(),
     SDKControlReloadPluginsRequestSchema(),
     SDKControlMcpReconnectRequestSchema(),
     SDKControlMcpToggleRequestSchema(),
@@ -944988,7 +945242,7 @@ class CCRClient {
   deliveryUploader;
   onEpochMismatch;
   getAuthHeaders;
-  constructor(transport, sessionUrl, opts) {
+  constructor(transport2, sessionUrl, opts) {
     this.onEpochMismatch = opts?.onEpochMismatch ?? (() => {
       process.exit(1);
     });
@@ -945054,7 +945308,7 @@ class CCRClient {
       maxDelayMs: 30000,
       jitterMs: 500
     });
-    transport.setOnEvent((event) => {
+    transport2.setOnEvent((event) => {
       this.reportDelivery(event.event_id, "received");
     });
   }
@@ -947187,10 +947441,11 @@ function runHeadlessStreaming(structuredIO, mcpClients, commands11, tools, initi
     tools: [],
     configs: {}
   };
+  let ideMcpState = { tools: [] };
   let warnedInvalidInitJsonSchema = false;
   const buildAllTools = (appState) => {
     const assembledTools = assembleToolPool(appState.toolPermissionContext, appState.mcp.tools);
-    let allTools = uniqBy_default(mergeAndFilterTools([...tools, ...sdkTools, ...dynamicMcpState.tools], assembledTools, appState.toolPermissionContext.mode), "name");
+    let allTools = uniqBy_default(mergeAndFilterTools([...tools, ...sdkTools, ...dynamicMcpState.tools, ...ideMcpState.tools], assembledTools, appState.toolPermissionContext.mode), "name");
     if (options.permissionPromptToolName) {
       allTools = allTools.filter((tool) => !toolMatchesName(tool, options.permissionPromptToolName));
     }
@@ -948202,6 +948457,38 @@ ${m4.text}
           if (sdkServersChanged) {
             updateSdkMcp();
           }
+        } else if (msg.request.subtype === "ide_mcp_set") {
+          const capability = msg.request.capability;
+          const policy = getIdeMcpPolicy();
+          setIdeMcpPolicy(capability.generation, new Set(capability.tools));
+          const config13 = { type: "http", url: capability.transport.url, headers: capability.transport.headers, scope: "dynamic" };
+          const staged = await prefetchAllMcpResources({ [IDE_MCP_SERVER]: config13 });
+          const client10 = staged.clients.find((value) => value.name === IDE_MCP_SERVER && value.type === "connected");
+          if (!client10) {
+            setIdeMcpPolicy(policy.generation, policy.tools);
+            sendControlResponseSuccess(msg, { generation: capability.generation, accepted: false, tools: [], errors: ["connection_failed"] });
+          } else {
+            const previous = ideMcpState;
+            const accepted = staged.tools.map((tool) => tool.mcpInfo?.toolName).filter((name3) => !!name3);
+            ideMcpState = { generation: capability.generation, config: config13, client: client10, tools: staged.tools };
+            sendControlResponseSuccess(msg, { generation: capability.generation, accepted: true, tools: accepted, errors: [] });
+            if (previous.client?.type === "connected")
+              await previous.client.cleanup();
+            if (previous.config)
+              await clearServerCache(IDE_MCP_SERVER, previous.config);
+          }
+        } else if (msg.request.subtype === "ide_mcp_clear") {
+          const generation2 = msg.request.generation;
+          const cleared = ideMcpState.generation === generation2 && clearIdeMcpPolicy(generation2);
+          if (cleared) {
+            const previous = ideMcpState;
+            ideMcpState = { tools: [] };
+            if (previous.client?.type === "connected")
+              await previous.client.cleanup();
+            if (previous.config)
+              await clearServerCache(IDE_MCP_SERVER, previous.config);
+          }
+          sendControlResponseSuccess(msg, { generation: generation2, cleared });
         } else if (msg.request.subtype === "reload_plugins") {
           try {
             if (false) {}
@@ -949677,6 +949964,8 @@ var init_print = __esm(() => {
   init_hooks5();
   init_types16();
   init_mcpStringUtils();
+  init_idePolicy();
+  init_ideCapability();
   init_utils13();
   init_vscodeSdkMcp();
   init_config5();
@@ -950818,7 +951107,7 @@ async function startMCPServer(cwd3, debug5, verbose) {
   setCwd(cwd3);
   const server2 = new Server({
     name: "claude/tengu",
-    version: "4.2.35"
+    version: "4.2.37"
   }, {
     capabilities: {
       tools: {}
@@ -950915,8 +951204,8 @@ async function startMCPServer(cwd3, debug5, verbose) {
     }
   });
   async function runServer() {
-    const transport = new StdioServerTransport;
-    await server2.connect(transport);
+    const transport2 = new StdioServerTransport;
+    await server2.connect(transport2);
   }
   return await runServer();
 }
@@ -953103,7 +953392,7 @@ function createHealthRoutes(sessionManager) {
     const uptime2 = process.uptime() * 1000;
     return c10.json({
       status: "ok",
-      version: "4.2.35",
+      version: "4.2.37",
       uptime_ms: Math.round(uptime2),
       active_sessions: sessionManager.getActiveCount()
     });
@@ -953375,7 +953664,7 @@ function getMacroDefines() {
     commit = execSync3("git rev-parse --short HEAD", { encoding: "utf-8", cwd: __dirname }).trim();
   } catch {}
   return {
-    "MACRO.VERSION": JSON.stringify("4.2.35"),
+    "MACRO.VERSION": JSON.stringify("4.2.37"),
     "MACRO.BUILD_TIME": JSON.stringify(new Date().toISOString()),
     "MACRO.COMMIT": JSON.stringify(commit),
     "MACRO.FEEDBACK_CHANNEL": JSON.stringify(""),
@@ -954323,6 +954612,7 @@ function createSessionRoutes(sessionManager, eventBus) {
         resumeSessionAt: body.resume_session_at,
         hooks: body.hooks,
         env: env9,
+        client: c10.req.header("x-csc-session-client"),
         execPath: process.execPath,
         scriptArgs: getScriptArgsForChild()
       });
@@ -954349,6 +954639,7 @@ function createSessionRoutes(sessionManager, eventBus) {
     const limit2 = parseInt(url5.searchParams.get("limit") ?? "50", 10);
     const offset = parseInt(url5.searchParams.get("offset") ?? "0", 10);
     const headerDir = c10.req.header("x-csc-directory");
+    const client10 = c10.req.header("x-csc-session-client");
     const dir = (headerDir ? decodeURIComponent(headerDir) : undefined) ?? url5.searchParams.get("dir") ?? undefined;
     const canonicalDir = dir ? await canonicalizePath(dir).catch(() => dir) : undefined;
     let historySessions = [];
@@ -954356,7 +954647,10 @@ function createSessionRoutes(sessionManager, eventBus) {
       historySessions = await listSessionsImpl({ dir, limit: limit2 + offset });
     } catch {}
     const handleMap = new Map(sessionManager.getAllSessions().map((h8) => [h8.sessionId, h8]));
-    const merged = historySessions.map((s) => {
+    const entries = sessionManager.getIndexEntries();
+    const indexMap = new Map(entries.map((entry) => [entry.sessionId, entry]));
+    const owned = (id) => !client10 || handleMap.get(id)?.client === client10 || indexMap.get(id)?.client === client10;
+    const merged = historySessions.filter((s) => owned(s.sessionId)).map((s) => {
       const handle = handleMap.get(s.sessionId);
       const info2 = handle?.getInfo();
       return {
@@ -954388,6 +954682,8 @@ function createSessionRoutes(sessionManager, eventBus) {
     for (const handle of sessionManager.getAllSessions()) {
       if (!handle.prompted)
         continue;
+      if (!owned(handle.sessionId))
+        continue;
       if (!historyIds.has(handle.sessionId)) {
         if (canonicalDir) {
           const handleCwd = await canonicalizePath(handle.cwd).catch(() => handle.cwd);
@@ -954404,9 +954700,11 @@ function createSessionRoutes(sessionManager, eventBus) {
         historyIds.add(handle.sessionId);
       }
     }
-    for (const entry of sessionManager.getIndexEntries()) {
+    for (const entry of entries) {
       if (historyIds.has(entry.sessionId))
         continue;
+      if (!owned(entry.sessionId))
+        continue;
       if (canonicalDir) {
         const entryCwd = await canonicalizePath(entry.cwd).catch(() => entry.cwd);
         if (entryCwd !== canonicalDir)
@@ -954605,7 +954903,9 @@ function createSessionRoutes(sessionManager, eventBus) {
         if (!transcriptPath) {
           for (const projectsDir of getAllProjectsDirs()) {
             try {
-              const dirents = await readdir55(projectsDir, { withFileTypes: true });
+              const dirents = await readdir55(projectsDir, {
+                withFileTypes: true
+              });
               for (const dirent of dirents) {
                 if (!dirent.isDirectory())
                   continue;
@@ -957673,6 +957973,38 @@ var init_config13 = __esm(() => {
   DEFAULT_OUTPUT_STYLE_OPTIONS = ["default", "Explanatory", "Learning"];
 });
 
+// src/server/routes/ideCapability.ts
+function createIdeCapabilityRoutes(manager3) {
+  return new Hono2().put("/session/:sessionID/capabilities/ide", async (c10) => {
+    const handle = manager3.getSession(c10.req.param("sessionID"));
+    if (!handle)
+      return c10.json({ error: "Session not found" }, 404);
+    const parsed = IdeCapabilitySchema().safeParse(await c10.req.json().catch(() => null));
+    if (!parsed.success)
+      return c10.json({ error: parsed.error.message }, 400);
+    try {
+      return c10.json(await handle.setIdeCapability(parsed.data));
+    } catch (error100) {
+      return c10.json({ error: error100 instanceof Error ? error100.message : String(error100) }, 502);
+    }
+  }).delete("/session/:sessionID/capabilities/ide", async (c10) => {
+    const generation2 = c10.req.query("generation");
+    if (!generation2)
+      return c10.json({ error: "generation is required" }, 400);
+    if (!manager3.getSession(c10.req.param("sessionID")))
+      return c10.json({ generation: generation2, cleared: false });
+    try {
+      return c10.json(await manager3.getSession(c10.req.param("sessionID")).clearIdeCapability(generation2));
+    } catch (error100) {
+      return c10.json({ error: error100 instanceof Error ? error100.message : String(error100) }, 502);
+    }
+  });
+}
+var init_ideCapability2 = __esm(() => {
+  init_dist17();
+  init_ideCapability();
+});
+
 // src/server/server.ts
 var exports_server = {};
 __export(exports_server, {
@@ -957706,6 +958038,7 @@ function startServer(config13, sessionManager, eventBus) {
   app.route("/", createFindRoutes());
   app.route("/", createFavoriteRoutes());
   app.route("/", createConfigRoutes({ initDataProvider: sessionManager }));
+  app.route("/", createIdeCapabilityRoutes(sessionManager));
   const server2 = Bun.serve({
     hostname: config13.host,
     port: config13.port,
@@ -957730,6 +958063,7 @@ var init_server5 = __esm(() => {
   init_find();
   init_favorite2();
   init_config13();
+  init_ideCapability2();
 });
 
 // src/server/eventBus.ts
@@ -958104,6 +958438,7 @@ var init_sessionHandle = __esm(() => {
       return this._sessionId;
     }
     cwd;
+    client;
     _silent;
     _prompted = false;
     _spawnCwd;
@@ -958270,6 +958605,7 @@ var init_sessionHandle = __esm(() => {
       this.opts = opts;
       this._sessionId = opts.sessionId;
       this.cwd = opts.cwd;
+      this.client = opts.client;
       this._silent = opts.silent ?? false;
       this.eventBus = opts.eventBus;
       this._model = opts.model;
@@ -958719,6 +959055,25 @@ ${stderrTail}` : baseMessage;
       const response3 = await this.sendControlRequest({ subtype: "mcp_status" });
       return response3.mcpServers ?? [];
     }
+    async setIdeCapability(input5) {
+      const response3 = await this.sendControlRequest({
+        subtype: "ide_mcp_set",
+        capability: input5
+      });
+      return {
+        generation: input5.generation,
+        accepted: response3.accepted === true,
+        tools: Array.isArray(response3.tools) ? response3.tools : [],
+        errors: Array.isArray(response3.errors) ? response3.errors : []
+      };
+    }
+    async clearIdeCapability(generation2) {
+      const response3 = await this.sendControlRequest({
+        subtype: "ide_mcp_clear",
+        generation: generation2
+      });
+      return { generation: generation2, cleared: response3.cleared === true };
+    }
     async prompt(content, opts) {
       if (this._status === "stopped") {
         throw new Error(`Session ${this.sessionId} is stopped`);
@@ -959158,7 +959513,8 @@ class SessionManager {
       permissionMode: info2.permission_mode,
       createdAt: info2.created_at,
       lastActiveAt: info2.last_active_at,
-      customTitle: handle.title
+      customTitle: handle.title,
+      client: handle.client
     };
   }
   reapHandle(handle) {
@@ -959350,6 +959706,7 @@ class SessionManager {
         }
         const realSessionId = warm.sessionId;
         warm.claimFromWarmPool();
+        warm.client = opts.client;
         this.sessions.set(realSessionId, warm);
         this.eventBus.registerSessionCwd(realSessionId, canonicalCwd);
         this.eventBus.publishSessionEvent(realSessionId, "created", {
@@ -959380,6 +959737,7 @@ class SessionManager {
       scriptArgs: opts.scriptArgs,
       silent: opts.silent,
       customTitle: this.loadedIndex.get(sessionId2)?.customTitle,
+      client: opts.client ?? this.loadedIndex.get(sessionId2)?.client,
       onInit: (data) => {
         this._cachedInitData = data;
         this._resolveInitDataReady?.();
@@ -960444,7 +960802,7 @@ __export(exports_update, {
 });
 async function update() {
   logEvent("tengu_update_check", {});
-  writeToStdout(`${t("cli.update.currentVersion", "Current version")}: ${"4.2.35"}
+  writeToStdout(`${t("cli.update.currentVersion", "Current version")}: ${"4.2.37"}
 `);
   const channel5 = getInitialSettings()?.autoUpdatesChannel ?? "latest";
   writeToStdout(`${t("cli.update.checkingUpdates", { channel: channel5 }, "Checking for updates to {channel} version...")}
@@ -960519,8 +960877,8 @@ async function update() {
       writeToStdout(`${t("cli.update.managedByHomebrew", "CoStrict is managed by Homebrew.")}
 `);
       const latest = await getLatestVersion(channel5);
-      if (latest && !gte2("4.2.35", latest)) {
-        writeToStdout(`${t("cli.update.updateAvailable", { current: "4.2.35", latest }, "Update available: {current} \u2192 {latest}")}
+      if (latest && !gte2("4.2.37", latest)) {
+        writeToStdout(`${t("cli.update.updateAvailable", { current: "4.2.37", latest }, "Update available: {current} \u2192 {latest}")}
 `);
         writeToStdout(`
 `);
@@ -960536,8 +960894,8 @@ async function update() {
       writeToStdout(`${t("cli.update.managedByWinget", "CoStrict is managed by winget.")}
 `);
       const latest = await getLatestVersion(channel5);
-      if (latest && !gte2("4.2.35", latest)) {
-        writeToStdout(`${t("cli.update.updateAvailable", { current: "4.2.35", latest }, "Update available: {current} \u2192 {latest}")}
+      if (latest && !gte2("4.2.37", latest)) {
+        writeToStdout(`${t("cli.update.updateAvailable", { current: "4.2.37", latest }, "Update available: {current} \u2192 {latest}")}
 `);
         writeToStdout(`
 `);
@@ -960553,8 +960911,8 @@ async function update() {
       writeToStdout(`${t("cli.update.managedByApk", "CoStrict is managed by apk.")}
 `);
       const latest = await getLatestVersion(channel5);
-      if (latest && !gte2("4.2.35", latest)) {
-        writeToStdout(`${t("cli.update.updateAvailable", { current: "4.2.35", latest }, "Update available: {current} \u2192 {latest}")}
+      if (latest && !gte2("4.2.37", latest)) {
+        writeToStdout(`${t("cli.update.updateAvailable", { current: "4.2.37", latest }, "Update available: {current} \u2192 {latest}")}
 `);
         writeToStdout(`
 `);
@@ -960619,11 +960977,11 @@ async function update() {
 `);
         await gracefulShutdown(1);
       }
-      if (result2.latestVersion === "4.2.35") {
-        writeToStdout(source_default.green(t("cli.update.upToDateVersion", { version: "4.2.35" }, "CoStrict is up to date ({version})")) + `
+      if (result2.latestVersion === "4.2.37") {
+        writeToStdout(source_default.green(t("cli.update.upToDateVersion", { version: "4.2.37" }, "CoStrict is up to date ({version})")) + `
 `);
       } else {
-        writeToStdout(source_default.green(t("cli.update.successfullyUpdated", { from: "4.2.35", to: String(result2.latestVersion) }, "Successfully updated from {from} to version {to}")) + `
+        writeToStdout(source_default.green(t("cli.update.successfullyUpdated", { from: "4.2.37", to: String(result2.latestVersion) }, "Successfully updated from {from} to version {to}")) + `
 `);
         regenerateCompletionCache();
       }
@@ -960683,12 +961041,12 @@ async function update() {
 `);
     await gracefulShutdown(1);
   }
-  if (latestVersion === "4.2.35") {
-    writeToStdout(source_default.green(t("cli.update.upToDateVersion", { version: "4.2.35" }, "CoStrict is up to date ({version})")) + `
+  if (latestVersion === "4.2.37") {
+    writeToStdout(source_default.green(t("cli.update.upToDateVersion", { version: "4.2.37" }, "CoStrict is up to date ({version})")) + `
 `);
     await gracefulShutdown(0);
   }
-  writeToStdout(`${t("cli.update.newVersionAvailable", { latest: String(latestVersion), current: "4.2.35" }, "New version available: {latest} (current: {current})")}
+  writeToStdout(`${t("cli.update.newVersionAvailable", { latest: String(latestVersion), current: "4.2.37" }, "New version available: {latest} (current: {current})")}
 `);
   writeToStdout(`${t("cli.update.installing", "Installing update...")}
 `);
@@ -960733,7 +961091,7 @@ async function update() {
   logForDebugging(`update: Installation status: ${result.status}`);
   switch (result.status) {
     case "success":
-      writeToStdout(source_default.green(t("cli.update.successfullyUpdated", { from: "4.2.35", to: String(latestVersion) }, "Successfully updated from {from} to version {to}")) + `
+      writeToStdout(source_default.green(t("cli.update.successfullyUpdated", { from: "4.2.37", to: String(latestVersion) }, "Successfully updated from {from} to version {to}")) + `
 `);
       regenerateCompletionCache();
       break;
@@ -962028,9 +962386,9 @@ async function run5() {
     return Number.isFinite(n3) ? n3 : undefined;
   }).hideHelp()).addOption(new Option("--from-pr [value]", cliDesc("cli.option.fromPr", "Resume a session linked to a PR by PR number/URL, or open interactive picker with optional search term")).argParser((value) => value || true).hideHelp()).addOption(new Option("--no-session-persistence", cliDesc("cli.option.noSessionPersistence", "Disable session persistence - sessions will not be saved to disk and cannot be resumed (only works with --print)")).hideHelp()).addOption(new Option("--resume-session-at <message id>", cliDesc("cli.option.resumeSessionAt", "When resuming, only messages up to and including the assistant message with <message.id> (use with --resume in print mode)")).argParser(String).hideHelp()).addOption(new Option("--rewind-files <user-message-id>", cliDesc("cli.option.rewindFiles", "Restore files to state at the specified user message and exit (requires --resume)")).hideHelp()).option("--model <model>", cliDesc("cli.option.model", `Model for the current session. Provide a model's full name (e.g. 'GLM-5.1').`)).addOption(new Option("--effort <level>", cliDesc("cli.option.effortArg", "Effort level for the current session (low, medium, high, max)")).argParser((rawValue) => {
     const value = rawValue.toLowerCase();
-    const allowed = ["low", "medium", "high", "max"];
-    if (!allowed.includes(value)) {
-      throw new InvalidArgumentError(`It must be one of: ${allowed.join(", ")}`);
+    const allowed2 = ["low", "medium", "high", "max"];
+    if (!allowed2.includes(value)) {
+      throw new InvalidArgumentError(`It must be one of: ${allowed2.join(", ")}`);
     }
     return value;
   }).hideHelp()).option("--agent <agent>", cliDesc("cli.option.agent", `Agent for the current session. Overrides the 'agent' setting.`)).addOption(new Option("--betas <betas...>", cliDesc("cli.option.betas", "Beta headers to include in API requests (API key users only)")).hideHelp()).addOption(new Option("--fallback-model <model>", cliDesc("cli.option.fallbackModel", "Enable automatic fallback to specified model when default model is overloaded (only works with --print)")).hideHelp()).addOption(new Option("--workload <tag>", cliDesc("cli.option.workload", "Workload tag for billing-header attribution (cc_workload). Process-scoped; set by SDK daemon callers that spawn subprocesses for cron work. (only works with --print)")).hideHelp()).option("--settings <file-or-json>", cliDesc("cli.option.settings", "Path to a settings JSON file or a JSON string to load additional settings from")).option("--add-dir <directories...>", cliDesc("cli.option.addDir", "Additional directories to allow tool access to")).addOption(new Option("--ide", cliDesc("cli.option.ide", "Automatically connect to IDE on startup if exactly one valid IDE is available")).argParser(() => true).hideHelp()).addOption(new Option("--strict-mcp-config", cliDesc("cli.option.strictMcpConfig", "Only use MCP servers from --mcp-config, ignoring all other MCP configurations")).argParser(() => true).hideHelp()).addOption(new Option("--session-id <uuid>", cliDesc("cli.option.sessionIdArg", "Use a specific session ID for the conversation (must be a valid UUID)")).hideHelp()).addOption(new Option("-n, --name <name>", cliDesc("cli.option.name", "Set a display name for this session (shown in /resume and terminal title)")).hideHelp()).addOption(new Option("--agents <json>", cliDesc("cli.option.agents", `JSON object defining custom agents (e.g. '{"reviewer": {"description": "Reviews code", "prompt": "You are a code reviewer"}}')`)).hideHelp()).addOption(new Option("--setting-sources <sources>", cliDesc("cli.option.settingSources", "Comma-separated list of setting sources to load (user, project, local).")).hideHelp()).addOption(new Option("--plugin-dir <path>", cliDesc("cli.option.pluginDir", "Load plugins from a directory for this session only (repeatable: --plugin-dir A --plugin-dir B)")).argParser((val, prev) => [...prev, val]).default([]).hideHelp()).addOption(new Option("-H, --header <header>", cliDesc("cli.option.header", 'Add a custom HTTP header to model API requests, format "Name: Value" (repeatable: -H "X-API-Key: sk-..." -H "X-Task-Id: task-..."). Also configurable via the COSTRICT_CUSTOM_HEADERS env var')).argParser((val, prev) => [...prev, val]).default([])).addOption(new Option("--disable-slash-commands", cliDesc("cli.option.disableSlashCommands", "Disable all skills")).argParser(() => true).hideHelp()).addOption(new Option("--chrome", cliDesc("cli.option.chrome", "Enable Chrome MCP integration")).hideHelp()).addOption(new Option("--no-chrome", cliDesc("cli.option.noChrome", "Disable Chrome MCP integration")).hideHelp()).addOption(new Option("--file <specs...>", cliDesc("cli.option.file", "File resources to download at startup. Format: file_id:relative_path (e.g., --file file_abc:doc.txt file_def:img.png)")).hideHelp()).action(async (prompt, options) => {
@@ -962380,13 +962738,13 @@ ${addendum}` : addendum;
           ...config13,
           scope: "dynamic"
         }));
-        const { allowed, blocked } = filterMcpServersByPolicy(scopedConfigs);
+        const { allowed: allowed2, blocked } = filterMcpServersByPolicy(scopedConfigs);
         if (blocked.length > 0) {
           process.stderr.write(cliDesc("errors.cli.mcpBlockedByPolicy", `Warning: MCP ${plural(blocked.length, "server")} blocked by enterprise policy: ${blocked.join(", ")}
 `).replace("{serverOrServers}", plural(blocked.length, "server")).replace("{servers}", blocked.join(", ")));
         }
-        dynamicMcpConfig = { ...dynamicMcpConfig, ...allowed };
-        const dynamicServerNames = Object.keys(allowed);
+        dynamicMcpConfig = { ...dynamicMcpConfig, ...allowed2 };
+        const dynamicServerNames = Object.keys(allowed2);
         logForDebugging(`[MCP] Loaded ${dynamicServerNames.length} dynamic server(s) from --mcp-config: ${dynamicServerNames.length > 0 ? dynamicServerNames.join(", ") : "(none)"}`, { level: "info" });
       }
     } else {
@@ -962952,7 +963310,7 @@ ${assistantAddendum}` : assistantAddendum;
       }
     }
     logForDiagnosticsNoPII("info", "started", {
-      version: "4.2.35",
+      version: "4.2.37",
       is_native_binary: isInBundledMode()
     });
     registerCleanup(async () => {
@@ -963443,7 +963801,7 @@ Session: ${directConnectConfig.sessionId}`, "info");
           sshSession = await createSSHSession2({
             host: _pendingSSH.host,
             cwd: _pendingSSH.cwd,
-            localVersion: "4.2.35",
+            localVersion: "4.2.37",
             permissionMode: _pendingSSH.permissionMode,
             dangerouslySkipPermissions: _pendingSSH.dangerouslySkipPermissions,
             extraCliArgs: _pendingSSH.extraCliArgs,
@@ -963912,7 +964270,7 @@ Usage: csc --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("4.2.35 (CoStrict)", "-v, --version", cliDesc("cli.option.version", "Output the version number"));
+  }).version("4.2.37 (CoStrict)", "-v, --version", cliDesc("cli.option.version", "Output the version number"));
   program2.addOption(new Option("-w, --worktree [name]", cliDesc("cli.option.worktree", "Create a new git worktree for this session (optionally specify a name)")).hideHelp());
   program2.addOption(new Option("--tmux", cliDesc("cli.option.tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux.")).hideHelp());
   if (canUserConfigureAdvisor()) {
@@ -964681,10 +965039,10 @@ function getCouncilArgs(args) {
 async function main2() {
   const args = process.argv.slice(2);
   if (args.length === 1 && (args[0] === "--version" || args[0] === "-v" || args[0] === "-V")) {
-    const d7 = new Date("2026-09-04T09:22:28.856Z");
+    const d7 = new Date("2026-09-09T12:10:12.753Z");
     const p2 = (n3) => String(n3).padStart(2, "0");
     const buildTime = `${d7.getFullYear()}/${p2(d7.getMonth() + 1)}/${p2(d7.getDate())} ${p2(d7.getHours())}:${p2(d7.getMinutes())}:${p2(d7.getSeconds())}`;
-    console.log(`${"4.2.35"} (commit: ${"11636320f"}, built: ${buildTime})`);
+    console.log(`${"4.2.37"} (commit: ${"f32f6afe3"}, built: ${buildTime})`);
     return;
   }
   if (true) {
@@ -964865,5 +965223,5 @@ async function main2() {
 }
 main2();
 
-//# debugId=50C2294727C10C3464756E2164756E21
+//# debugId=A9AB373C0DE5E63864756E2164756E21