@opencow-ai/opencow-agent-sdk 0.4.22 → 0.4.24

package/dist/cli.mjs

@@ -33074,7 +33074,10 @@ var init_schemas3 = __esm(() => {
   NO_AUTO_UPDATE_OFFICIAL_MARKETPLACES = new Set(["knowledge-work-plugins"]);
   BLOCKED_OFFICIAL_NAME_PATTERN = /(?:official[^a-z0-9]*(anthropic|claude)|(?:anthropic|claude)[^a-z0-9]*official|^(?:anthropic|claude)[^a-z0-9]*(marketplace|plugins|official))/i;
   NON_ASCII_PATTERN = /[^\u0020-\u007E]/;
-  RelativePath = lazySchema(() => exports_external.string().startsWith("../../utils/plugins"));
+  RelativePath = lazySchema(() => exports_external.string().min(1).refine((path9) => {
+    const normalized = path9.replaceAll("\\", "/");
+    return !normalized.includes("\x00") && !normalized.startsWith("/") && !/^[a-z][a-z0-9+.-]*:/i.test(normalized) && normalized.split("/").every((segment) => segment !== "..");
+  }, "Path must be relative and remain within the plugin root"));
   RelativeJSONPath = lazySchema(() => RelativePath().endsWith(".json"));
   McpbPath = lazySchema(() => exports_external.union([
     RelativePath().refine((path9) => path9.endsWith(".mcpb") || path9.endsWith(".dxt"), {
@@ -88740,7 +88743,11 @@ function buildQueryContextFromSdk(options) {
       agentColorIndex: 0,
       systemPromptSectionCache: new Map,
       cachedClaudeMdContent: null,
-      settingsCache: { session: null, perSource: new Map, parseFile: new Map },
+      settingsCache: {
+        session: null,
+        perSource: new Map,
+        parseFile: new Map
+      },
       memoryExtractionState: {
         config: {
           minimumMessageTokensToInit: 1e4,
@@ -88761,7 +88768,9 @@ function buildQueryContextFromSdk(options) {
         conditional: new Map,
         activatedConditional: new Set,
         loaded: createSignal()
-      }
+      },
+      pluginDataPaths: new Map,
+      lspManager: null
     },
     diagnostics: createFreshDiagnostics(),
     provider: options.provider ?? resolveProviderFromEnv(freezeEnvMap(options.env)),
@@ -89425,6 +89434,25 @@ function resetSdkInitState() {
   r.initJsonSchema = null;
   r.registeredHooks = null;
 }
+function setExplicitPluginRuntimeContext(dataPaths, lspManager) {
+  const registries2 = getQueryContext().registries;
+  registries2.pluginDataPaths = new Map(dataPaths);
+  registries2.lspManager = lspManager;
+}
+function tryGetExplicitPluginDataPath(pluginId) {
+  try {
+    return getQueryContext().registries.pluginDataPaths.get(pluginId);
+  } catch {
+    return;
+  }
+}
+function tryGetSessionLspManager() {
+  try {
+    return getQueryContext().registries.lspManager ?? undefined;
+  } catch {
+    return;
+  }
+}
 function addInvokedSkill(skillName, skillPath, content, agentId = null) {
   const key = `${agentId ?? ""}:${skillName}`;
   getQueryContext().registries.invokedSkills.set(key, {
@@ -89876,6 +89904,7 @@ __export(exports_state, {
   setCwdState: () => setCwdState,
   setDirectConnectServerUrl: () => setDirectConnectServerUrl,
   setEnvVar: () => setEnvVar,
+  setExplicitPluginRuntimeContext: () => setExplicitPluginRuntimeContext,
   setFastModeHeaderLatched: () => setFastModeHeaderLatched,
   setFlagSettingsInline: () => setFlagSettingsInline,
   setHasDevChannels: () => setHasDevChannels,
@@ -89910,7 +89939,9 @@ __export(exports_state, {
   setThinkingClearLatched: () => setThinkingClearLatched,
   snapshotOutputTokensForTurn: () => snapshotOutputTokensForTurn,
   switchSession: () => switchSession,
+  tryGetExplicitPluginDataPath: () => tryGetExplicitPluginDataPath,
   tryGetQueryContext: () => tryGetQueryContext,
+  tryGetSessionLspManager: () => tryGetSessionLspManager,
   unregisterCreatedTeam: () => unregisterCreatedTeam
 });
 var init_state = __esm(() => {
@@ -92241,9 +92272,7 @@ function createBootQueryContext() {
     resolvedCwd = "";
   }
   const sessionId = randomUUID3();
-  const {
-    computeSessionPaths: computeSessionPaths2
-  } = (init_paths(), __toCommonJS(exports_paths));
+  const { computeSessionPaths: computeSessionPaths2 } = (init_paths(), __toCommonJS(exports_paths));
   const { resolveLayoutProfile: resolveLayoutProfile2, DEFAULT_LAYOUT_PROFILE: DEFAULT_LAYOUT_PROFILE2 } = (init_LayoutProfile(), __toCommonJS(exports_LayoutProfile));
   const { getManagedFilePath: getManagedFilePath2 } = (init_managedPath(), __toCommonJS(exports_managedPath));
   const { homedir: homedir11 } = __require("node:os");
@@ -92323,7 +92352,11 @@ function createBootQueryContext() {
       agentColorIndex: 0,
       systemPromptSectionCache: new Map,
       cachedClaudeMdContent: null,
-      settingsCache: { session: null, perSource: new Map, parseFile: new Map },
+      settingsCache: {
+        session: null,
+        perSource: new Map,
+        parseFile: new Map
+      },
       memoryExtractionState: {
         config: {
           minimumMessageTokensToInit: 1e4,
@@ -92344,7 +92377,9 @@ function createBootQueryContext() {
         conditional: new Map,
         activatedConditional: new Set,
         loaded: createSignal()
-      }
+      },
+      pluginDataPaths: new Map,
+      lspManager: null
     },
     diagnostics: createFreshDiagnostics(),
     provider: (() => {
@@ -92414,7 +92449,11 @@ function deriveSubagentRegistries(parent) {
     agentColorIndex: parent.agentColorIndex,
     systemPromptSectionCache: new Map,
     cachedClaudeMdContent: null,
-    settingsCache: { session: null, perSource: new Map, parseFile: new Map },
+    settingsCache: {
+      session: null,
+      perSource: new Map,
+      parseFile: new Map
+    },
     memoryExtractionState: {
       config: {
         minimumMessageTokensToInit: 1e4,
@@ -92429,7 +92468,9 @@ function deriveSubagentRegistries(parent) {
     systemPromptInjection: null,
     sentSkillNames: new Set,
     skillListingSuppressNext: false,
-    dynamicSkills: parent.dynamicSkills
+    dynamicSkills: parent.dynamicSkills,
+    pluginDataPaths: parent.pluginDataPaths,
+    lspManager: parent.lspManager
   };
 }
 function cloneHookRegistry(registry2) {
@@ -94777,7 +94818,7 @@ function printStartupScreen() {
   const sLen = ` ● ${sL}    Ready — type /help to begin`.length;
   out.push(boxRow(sRow, W2, sLen));
   out.push(`${rgb(...BORDER)}╚${"═".repeat(W2 - 2)}╝${RESET}`);
-  out.push(`  ${DIM}${rgb(...DIMCOL)}opencow ${RESET}${rgb(...ACCENT)}v${"0.4.22"}${RESET}`);
+  out.push(`  ${DIM}${rgb(...DIMCOL)}opencow ${RESET}${rgb(...ACCENT)}v${"0.4.24"}${RESET}`);
   out.push("");
   process.stdout.write(out.join(`
 `) + `
@@ -144752,7 +144793,7 @@ function pluginDataDirPath(pluginId) {
   return join46(getPluginsDirectory(), "data", sanitizePluginId(pluginId));
 }
 function getPluginDataDir(pluginId) {
-  const dir = pluginDataDirPath(pluginId);
+  const dir = tryGetExplicitPluginDataPath(pluginId) ?? pluginDataDirPath(pluginId);
   getFsImplementation().mkdirSync(dir, { recursive: true });
   return dir;
 }
@@ -144760,7 +144801,9 @@ async function getPluginDataDirSize(pluginId) {
   const dir = pluginDataDirPath(pluginId);
   let bytes = 0;
   const walk = async (p) => {
-    for (const entry of await getFsImplementation().readdir(p, { withFileTypes: true })) {
+    for (const entry of await getFsImplementation().readdir(p, {
+      withFileTypes: true
+    })) {
       const full = join46(p, entry.name);
       if (entry.isDirectory()) {
         await walk(full);
@@ -144921,7 +144964,7 @@ function substitutePluginVariables(value, plugin) {
   let out = value.replace(/\$\{CLAUDE_PLUGIN_ROOT\}/g, () => normalize10(plugin.path));
   if (plugin.source) {
     const source = plugin.source;
-    out = out.replace(/\$\{CLAUDE_PLUGIN_DATA\}/g, () => normalize10(getPluginDataDir(source)));
+    out = out.replace(/\$\{CLAUDE_PLUGIN_DATA\}/g, () => normalize10(plugin.dataPath ?? getPluginDataDir(source)));
   }
   return out;
 }
@@ -144955,7 +144998,10 @@ var init_pluginOptionsStorage = __esm(() => {
   init_settings2();
   init_mcpbHandler();
   init_pluginDirectories();
+  init_state();
   loadPluginOptions = memoize_default((pluginId) => {
+    if (tryGetExplicitPluginDataPath(pluginId))
+      return {};
     const settings = getSettings_DEPRECATED();
     const nonSensitive = settings.pluginConfigs?.[pluginId]?.options ?? {};
     const storage = getSecureStorage();
@@ -145018,7 +145064,7 @@ async function loadMcpServersFromMcpb(plugin, mcpbPath, errors4) {
 }
 async function loadPluginMcpServers(plugin, errors4 = []) {
   let servers = {};
-  const defaultMcpServers = await loadMcpServersFromFile(plugin.path, PATH_SEGMENTS.settings.mcpProjectConfig);
+  const defaultMcpServers = await loadMcpServersFromFile(plugin.path, PATH_SEGMENTS.settings.mcpProjectConfig, errors4, plugin, false);
   if (defaultMcpServers) {
     servers = { ...servers, ...defaultMcpServers };
   }
@@ -145031,7 +145077,7 @@ async function loadPluginMcpServers(plugin, errors4 = []) {
           servers = { ...servers, ...mcpbServers };
         }
       } else {
-        const mcpServers = await loadMcpServersFromFile(plugin.path, mcpServersSpec);
+        const mcpServers = await loadMcpServersFromFile(plugin.path, mcpServersSpec, errors4, plugin, true);
         if (mcpServers) {
           servers = { ...servers, ...mcpServers };
         }
@@ -145043,11 +145089,18 @@ async function loadPluginMcpServers(plugin, errors4 = []) {
             if (isMcpbSource(spec)) {
               return await loadMcpServersFromMcpb(plugin, spec, errors4);
             }
-            return await loadMcpServersFromFile(plugin.path, spec);
+            return await loadMcpServersFromFile(plugin.path, spec, errors4, plugin, true);
           }
           return spec;
         } catch (e) {
           logForDebugging2(`Failed to load MCP servers from spec for plugin ${plugin.name}: ${e}`, { level: "error" });
+          errors4.push({
+            type: "mcp-config-invalid",
+            source: plugin.source,
+            plugin: plugin.name,
+            serverName: "manifest",
+            validationError: errorMessage(e)
+          });
           return null;
         }
       }));
@@ -145062,19 +145115,26 @@ async function loadPluginMcpServers(plugin, errors4 = []) {
   }
   return Object.keys(servers).length > 0 ? servers : undefined;
 }
-async function loadMcpServersFromFile(pluginPath, relativePath) {
+async function loadMcpServersFromFile(pluginPath, relativePath, errors4, plugin, required2) {
   const fs2 = getFsImplementation();
   const filePath = join47(pluginPath, relativePath);
   let content;
   try {
     content = await fs2.readFile(filePath, { encoding: "utf-8" });
   } catch (e) {
-    if (isENOENT(e)) {
+    if (isENOENT(e) && !required2) {
       return null;
     }
     logForDebugging2(`Failed to load MCP servers from ${filePath}: ${e}`, {
       level: "error"
     });
+    errors4.push({
+      type: "mcp-config-invalid",
+      source: plugin.source,
+      plugin: plugin.name,
+      serverName: relativePath,
+      validationError: errorMessage(e)
+    });
     return null;
   }
   try {
@@ -145087,6 +145147,13 @@ async function loadMcpServersFromFile(pluginPath, relativePath) {
         validatedServers[name] = result.data;
       } else {
         logForDebugging2(`Invalid MCP server config for ${name} in ${filePath}: ${result.error.message}`, { level: "error" });
+        errors4.push({
+          type: "mcp-config-invalid",
+          source: plugin.source,
+          plugin: plugin.name,
+          serverName: name,
+          validationError: result.error.message
+        });
       }
     }
     return validatedServers;
@@ -145094,6 +145161,13 @@ async function loadMcpServersFromFile(pluginPath, relativePath) {
     logForDebugging2(`Failed to load MCP servers from ${filePath}: ${error41}`, {
       level: "error"
     });
+    errors4.push({
+      type: "mcp-config-invalid",
+      source: plugin.source,
+      plugin: plugin.name,
+      serverName: relativePath,
+      validationError: errorMessage(error41)
+    });
     return null;
   }
 }
@@ -145171,7 +145245,7 @@ function resolvePluginMcpEnvironment(config2, plugin, userConfig, errors4, plugi
       }
       const resolvedEnv = {
         CLAUDE_PLUGIN_ROOT: plugin.path,
-        CLAUDE_PLUGIN_DATA: getPluginDataDir(plugin.source),
+        CLAUDE_PLUGIN_DATA: plugin.dataPath ?? getPluginDataDir(plugin.source),
         ...stdioConfig.env || {}
       };
       for (const [key, value] of Object.entries(resolvedEnv)) {
@@ -145633,16 +145707,16 @@ var init_walkPluginMarkdown = __esm(() => {
 
 // src/capabilities/plugins/loadPluginAgents.ts
 import { basename as basename9 } from "path";
-async function loadAgentsFromDirectory(agentsPath, pluginName, sourceName, pluginPath, pluginManifest, loadedPaths) {
+async function loadAgentsFromDirectory(agentsPath, pluginName, sourceName, pluginPath, dataPath, pluginManifest, loadedPaths, strict = false) {
   const agents = [];
   await walkPluginMarkdown(agentsPath, async (fullPath, namespace) => {
-    const agent = await loadAgentFromFile(fullPath, pluginName, namespace, sourceName, pluginPath, pluginManifest, loadedPaths);
+    const agent = await loadAgentFromFile(fullPath, pluginName, namespace, sourceName, pluginPath, dataPath, pluginManifest, loadedPaths, strict);
     if (agent)
       agents.push(agent);
   }, { logLabel: "agents" });
   return agents;
 }
-async function loadAgentFromFile(filePath, pluginName, namespace, sourceName, pluginPath, pluginManifest, loadedPaths) {
+async function loadAgentFromFile(filePath, pluginName, namespace, sourceName, pluginPath, dataPath, pluginManifest, loadedPaths, strict = false) {
   const fs2 = getFsImplementation();
   if (isDuplicatePath(fs2, filePath, loadedPaths)) {
     return null;
@@ -145667,7 +145741,8 @@ async function loadAgentFromFile(filePath, pluginName, namespace, sourceName, pl
     const background = backgroundRaw === "true" || backgroundRaw === true ? true : undefined;
     let systemPrompt = substitutePluginVariables(markdownContent.trim(), {
       path: pluginPath,
-      source: sourceName
+      source: sourceName,
+      dataPath
     });
     if (pluginManifest.userConfig) {
       systemPrompt = substituteUserConfigInContent(systemPrompt, loadPluginOptions(sourceName), pluginManifest.userConfig);
@@ -145730,6 +145805,7 @@ async function loadAgentFromFile(filePath, pluginName, namespace, sourceName, pl
       color,
       model,
       filename: baseAgentName,
+      sourcePath: filePath,
       plugin: sourceName,
       ...background ? { background } : {},
       ...memory ? { memory } : {},
@@ -145738,12 +145814,68 @@ async function loadAgentFromFile(filePath, pluginName, namespace, sourceName, pl
       ...maxTurns !== undefined ? { maxTurns } : {}
     };
   } catch (error41) {
+    if (strict)
+      throw error41;
     logForDebugging2(`Failed to load agent from ${filePath}: ${error41}`, {
       level: "error"
     });
     return null;
   }
 }
+async function loadPluginAgentsFromPlugins(enabled, options2 = {}) {
+  const strict = options2.strict ?? false;
+  const perPluginAgents = await Promise.all(enabled.map(async (plugin) => {
+    const loadedPaths = new Set;
+    const pluginAgents = [];
+    if (plugin.agentsPath) {
+      try {
+        const agents = await loadAgentsFromDirectory(plugin.agentsPath, plugin.name, plugin.source, plugin.path, plugin.dataPath, plugin.manifest, loadedPaths, strict);
+        pluginAgents.push(...agents);
+        if (agents.length > 0) {
+          logForDebugging2(`Loaded ${agents.length} agents from plugin ${plugin.name} default directory`);
+        }
+      } catch (error41) {
+        if (strict)
+          throw error41;
+        logForDebugging2(`Failed to load agents from plugin ${plugin.name} default directory: ${error41}`, { level: "error" });
+      }
+    }
+    if (plugin.agentsPaths) {
+      const pathResults = await Promise.all(plugin.agentsPaths.map(async (agentPath) => {
+        try {
+          const fs2 = getFsImplementation();
+          const stats = await fs2.stat(agentPath);
+          if (stats.isDirectory()) {
+            const agents = await loadAgentsFromDirectory(agentPath, plugin.name, plugin.source, plugin.path, plugin.dataPath, plugin.manifest, loadedPaths, strict);
+            if (agents.length > 0) {
+              logForDebugging2(`Loaded ${agents.length} agents from plugin ${plugin.name} custom path: ${agentPath}`);
+            }
+            return agents;
+          } else if (stats.isFile() && agentPath.endsWith(".md")) {
+            const agent = await loadAgentFromFile(agentPath, plugin.name, [], plugin.source, plugin.path, plugin.dataPath, plugin.manifest, loadedPaths, strict);
+            if (agent) {
+              logForDebugging2(`Loaded agent from plugin ${plugin.name} custom file: ${agentPath}`);
+              return [agent];
+            }
+          }
+          return [];
+        } catch (error41) {
+          if (strict)
+            throw error41;
+          logForDebugging2(`Failed to load agents from plugin ${plugin.name} custom path ${agentPath}: ${error41}`, { level: "error" });
+          return [];
+        }
+      }));
+      for (const agents of pathResults) {
+        pluginAgents.push(...agents);
+      }
+    }
+    return pluginAgents;
+  }));
+  const allAgents = perPluginAgents.flat();
+  logForDebugging2(`Total plugin agents loaded: ${allAgents.length}`);
+  return allAgents;
+}
 function clearPluginAgentCache() {
   loadPluginAgents.cache?.clear?.();
 }
@@ -145766,53 +145898,7 @@ var init_loadPluginAgents = __esm(() => {
     if (errors4.length > 0) {
       logForDebugging2(`Plugin loading errors: ${errors4.map((e) => getPluginErrorMessage(e)).join(", ")}`);
     }
-    const perPluginAgents = await Promise.all(enabled.map(async (plugin) => {
-      const loadedPaths = new Set;
-      const pluginAgents = [];
-      if (plugin.agentsPath) {
-        try {
-          const agents = await loadAgentsFromDirectory(plugin.agentsPath, plugin.name, plugin.source, plugin.path, plugin.manifest, loadedPaths);
-          pluginAgents.push(...agents);
-          if (agents.length > 0) {
-            logForDebugging2(`Loaded ${agents.length} agents from plugin ${plugin.name} default directory`);
-          }
-        } catch (error41) {
-          logForDebugging2(`Failed to load agents from plugin ${plugin.name} default directory: ${error41}`, { level: "error" });
-        }
-      }
-      if (plugin.agentsPaths) {
-        const pathResults = await Promise.all(plugin.agentsPaths.map(async (agentPath) => {
-          try {
-            const fs2 = getFsImplementation();
-            const stats = await fs2.stat(agentPath);
-            if (stats.isDirectory()) {
-              const agents = await loadAgentsFromDirectory(agentPath, plugin.name, plugin.source, plugin.path, plugin.manifest, loadedPaths);
-              if (agents.length > 0) {
-                logForDebugging2(`Loaded ${agents.length} agents from plugin ${plugin.name} custom path: ${agentPath}`);
-              }
-              return agents;
-            } else if (stats.isFile() && agentPath.endsWith(".md")) {
-              const agent = await loadAgentFromFile(agentPath, plugin.name, [], plugin.source, plugin.path, plugin.manifest, loadedPaths);
-              if (agent) {
-                logForDebugging2(`Loaded agent from plugin ${plugin.name} custom file: ${agentPath}`);
-                return [agent];
-              }
-            }
-            return [];
-          } catch (error41) {
-            logForDebugging2(`Failed to load agents from plugin ${plugin.name} custom path ${agentPath}: ${error41}`, { level: "error" });
-            return [];
-          }
-        }));
-        for (const agents of pathResults) {
-          pluginAgents.push(...agents);
-        }
-      }
-      return pluginAgents;
-    }));
-    const allAgents = perPluginAgents.flat();
-    logForDebugging2(`Total plugin agents loaded: ${allAgents.length}`);
-    return allAgents;
+    return loadPluginAgentsFromPlugins(enabled);
   });
 });
 
@@ -146485,6 +146571,12 @@ function mergeAgentsByType(base2, override) {
     byType.set(agent.agentType, agent);
   return [...byType.values()];
 }
+function withDefaultAgentForInvocation(activeAgents, requestedType, defaultAgent) {
+  if (requestedType !== undefined || activeAgents.some((agent) => agent.agentType === defaultAgent.agentType)) {
+    return activeAgents;
+  }
+  return [...activeAgents, defaultAgent];
+}
 
 // src/capabilities/tools/AgentTool/builtInAgents.ts
 var exports_builtInAgents = {};
@@ -240254,10 +240346,23 @@ function deepOmitNullProps(value) {
   }
   return value;
 }
-function safeParseToolInputWithNullCoercion(schema, input) {
+function containsUnrecognizedKeysIssue(value) {
+  if (Array.isArray(value))
+    return value.some(containsUnrecognizedKeysIssue);
+  if (value === null || typeof value !== "object")
+    return false;
+  const issue2 = value;
+  if (issue2.code === "unrecognized_keys")
+    return true;
+  return containsUnrecognizedKeysIssue(issue2.errors);
+}
+function safeParseToolInputWithNullCoercion(schema, input, unknownKeys = "strip") {
   const first = schema.safeParse(input);
   if (first.success)
     return first;
+  if (unknownKeys === "reject" && containsUnrecognizedKeysIssue(first.error.issues)) {
+    return first;
+  }
   if (input === null || typeof input !== "object") {
     return first;
   }
@@ -240743,6 +240848,54 @@ function getRuleBehaviorDescription(permissionResult) {
   }
 }
 
+// src/controller/dispatch/permissionPreDecision.ts
+function startPermissionPreDecisions(blocks, assistantMessages, canUseTool, toolUseContext) {
+  const existing = toolUseContext.permissionPreDecisions;
+  if (existing && existing.size > 0) {
+    return;
+  }
+  const preDecisions = new Map;
+  toolUseContext.permissionPreDecisions = preDecisions;
+  for (const block2 of blocks) {
+    const tool = findToolRuntimeByName(toolUseContext.options.tools, block2.name);
+    if (!tool) {
+      continue;
+    }
+    const parsedInput = safeParseToolInputWithNullCoercion(tool.inputSchema, block2.input, tool.unknownKeys);
+    if (!parsedInput.success) {
+      continue;
+    }
+    const assistantMessage = assistantMessages.find((message) => message.message.content.some((content) => content.type === "tool_use" && content.id === block2.id));
+    if (!assistantMessage) {
+      continue;
+    }
+    let input = parsedInput.data;
+    if (tool.backfillObservableInput && typeof input === "object" && input !== null) {
+      input = { ...input };
+      tool.backfillObservableInput(input);
+    }
+    const promise3 = canUseTool(tool, input, toolUseContext, assistantMessage, block2.id);
+    promise3.catch(() => {});
+    preDecisions.set(block2.id, { input, promise: promise3 });
+  }
+}
+function consumePermissionPreDecision(toolUseContext, toolUseID, input, fallback) {
+  const cache2 = toolUseContext.permissionPreDecisions;
+  const entry = cache2?.get(toolUseID);
+  if (!cache2 || !entry) {
+    return fallback();
+  }
+  cache2.delete(toolUseID);
+  if (jsonStringify(entry.input) !== jsonStringify(input)) {
+    return fallback();
+  }
+  return entry.promise;
+}
+var init_permissionPreDecision = __esm(() => {
+  init_toolRuntime();
+  init_slowOperations();
+});
+
 // src/controller/dispatch/toolHooks.ts
 async function* runPostToolUseHooks(toolUseContext, tool, toolUseID, messageId, toolInput, toolResponse, requestId, mcpServerType, mcpServerBaseUrl) {
   const postToolStartTime = Date.now();
@@ -240930,7 +241083,7 @@ async function resolveHookPermissionDecision(hookPermissionResult, tool, input,
     if (requiresInteraction && !interactionSatisfied || requireCanUseTool) {
       logForDebugging2(`Hook approved tool use for ${tool.name}, but canUseTool is required`);
       return {
-        decision: await canUseTool(tool, hookInput, toolUseContext, assistantMessage, toolUseID),
+        decision: await consumePermissionPreDecision(toolUseContext, toolUseID, hookInput, () => canUseTool(tool, hookInput, toolUseContext, assistantMessage, toolUseID)),
         input: hookInput
       };
     }
@@ -240945,7 +241098,7 @@ async function resolveHookPermissionDecision(hookPermissionResult, tool, input,
     }
     logForDebugging2(`Hook approved tool use for ${tool.name}, but ask rule requires prompt`);
     return {
-      decision: await canUseTool(tool, hookInput, toolUseContext, assistantMessage, toolUseID),
+      decision: await consumePermissionPreDecision(toolUseContext, toolUseID, hookInput, () => canUseTool(tool, hookInput, toolUseContext, assistantMessage, toolUseID)),
       input: hookInput
     };
   }
@@ -240955,8 +241108,9 @@ async function resolveHookPermissionDecision(hookPermissionResult, tool, input,
   }
   const forceDecision = hookPermissionResult?.behavior === "ask" ? hookPermissionResult : undefined;
   const askInput = hookPermissionResult?.behavior === "ask" && hookPermissionResult.updatedInput ? hookPermissionResult.updatedInput : input;
+  const decision = forceDecision ? await canUseTool(tool, askInput, toolUseContext, assistantMessage, toolUseID, forceDecision) : await consumePermissionPreDecision(toolUseContext, toolUseID, askInput, () => canUseTool(tool, askInput, toolUseContext, assistantMessage, toolUseID));
   return {
-    decision: await canUseTool(tool, askInput, toolUseContext, assistantMessage, toolUseID, forceDecision),
+    decision,
     input: askInput
   };
 }
@@ -241117,6 +241271,7 @@ var init_toolHooks = __esm(() => {
   init_permissions2();
   init_toolErrors();
   init_utils5();
+  init_permissionPreDecision();
 });
 
 // src/controller/dispatch/toolExecution.ts
@@ -241372,9 +241527,8 @@ function streamedCheckPermissionsAndCallTool(tool, toolUseID, input, toolUseCont
   return stream4;
 }
 async function checkPermissionsAndCallTool(tool, toolUseID, input, toolUseContext, canUseTool, assistantMessage, messageId, requestId, mcpServerType, mcpServerBaseUrl, onToolProgress) {
-  const parsedInput = safeParseToolInputWithNullCoercion(tool.inputSchema, input);
-  if (!parsedInput.success) {
-    let errorContent = formatZodValidationError(tool.name, parsedInput.error);
+  const inputValidationFailure = (error41) => {
+    let errorContent = formatZodValidationError(tool.name, error41);
     const schemaHint = buildSchemaNotSentHint(tool, toolUseContext.messages, toolUseContext.options.tools);
     if (schemaHint) {
       logEvent("tengu_deferred_tool_schema_not_sent", {
@@ -241414,11 +241568,15 @@ async function checkPermissionsAndCallTool(tool, toolUseID, input, toolUseContex
               tool_use_id: toolUseID
             }
           ],
-          toolUseResult: `InputValidationError: ${parsedInput.error.message}`,
+          toolUseResult: `InputValidationError: ${error41.message}`,
           sourceToolAssistantUUID: assistantMessage.uuid
         })
       }
     ];
+  };
+  const parsedInput = safeParseToolInputWithNullCoercion(tool.inputSchema, input, tool.unknownKeys);
+  if (!parsedInput.success) {
+    return inputValidationFailure(parsedInput.error);
   }
   const isValidCall = await tool.validateInput?.(parsedInput.data, toolUseContext);
   if (isValidCall?.result === false) {
@@ -241654,6 +241812,16 @@ async function checkPermissionsAndCallTool(tool, toolUseID, input, toolUseContex
   if (permissionDecision.updatedInput !== undefined) {
     processedInput = permissionDecision.updatedInput;
   }
+  if (tool.unknownKeys === "reject") {
+    const finalInput = safeParseToolInputWithNullCoercion(tool.inputSchema, processedInput, tool.unknownKeys);
+    if (!finalInput.success) {
+      endToolBlockedOnUserSpan("reject", "input-validation");
+      endToolSpan();
+      resultingMessages.push(...inputValidationFailure(finalInput.error));
+      return resultingMessages;
+    }
+    processedInput = finalInput.data;
+  }
   const telemetryToolInput = extractToolInputForTelemetry(processedInput);
   let toolParameters = {};
   if (isToolDetailsLoggingEnabled()) {
@@ -242616,6 +242784,9 @@ function getMaxToolUseConcurrency() {
   return parseInt(resolveEnvVar("MAX_TOOL_USE_CONCURRENCY") || "", 10) || 10;
 }
 async function* runTools(toolUseMessages, assistantMessages, canUseTool, toolUseContext) {
+  if (toolUseContext.options.preDecidePermissions) {
+    startPermissionPreDecisions(toolUseMessages, assistantMessages, canUseTool, toolUseContext);
+  }
   let currentContext = toolUseContext;
   for (const { isConcurrencySafe, blocks } of partitionToolCalls(toolUseMessages, currentContext)) {
     if (isConcurrencySafe) {
@@ -242709,6 +242880,7 @@ var init_toolOrchestration = __esm(() => {
   init_toolRuntime();
   init_generators();
   init_toolExecution();
+  init_permissionPreDecision();
   init_state();
 });
 
@@ -244805,7 +244977,7 @@ function getAnthropicEnvMetadata() {
 function getBuildAgeMinutes() {
   if (false)
     ;
-  const buildTime = new Date("2026-08-21T04:07:58.719Z").getTime();
+  const buildTime = new Date("2026-09-03T09:12:13.936Z").getTime();
   if (isNaN(buildTime))
     return;
   return Math.floor((Date.now() - buildTime) / 60000);
@@ -245335,6 +245507,7 @@ function createSubagentContext(parentContext, overrides) {
     dynamicSkillDirTriggers: new Set,
     discoveredSkillNames: new Set,
     toolDecisions: undefined,
+    permissionPreDecisions: undefined,
     contentReplacementState: overrides?.contentReplacementState ?? (parentContext.contentReplacementState ? cloneContentReplacementState(parentContext.contentReplacementState) : undefined),
     abortController,
     getAppState,
@@ -248589,6 +248762,31 @@ async function* runAgent({
       level: "warn"
     });
   });
+  let partialBaseMessage = null;
+  const partialTextByIndex = new Map;
+  const PARTIAL_PROGRESS_INTERVAL_MS = 50;
+  let lastPartialAssistantAt = 0;
+  let lastPartialProgressHookAt = 0;
+  let foregroundSkipped = 0;
+  let backgroundSkipped = 0;
+  const logPartialProgress = (reason, chars, foregroundEmitted, backgroundEmitted) => {
+    logForDebugging2(`[StreamThrottle:SubAgent] ${JSON.stringify({
+      reason,
+      agentId,
+      agentType: agentDefinition.agentType,
+      messageId: partialBaseMessage?.id ?? null,
+      intervalMs: PARTIAL_PROGRESS_INTERVAL_MS,
+      chars,
+      foregroundEmitted,
+      foregroundSkipped,
+      backgroundEmitted,
+      backgroundSkipped
+    })}`);
+    if (foregroundEmitted)
+      foregroundSkipped = 0;
+    if (backgroundEmitted)
+      backgroundSkipped = 0;
+  };
   try {
     const additionalContexts = [];
     for await (const hookResult of executeSubagentStartHooks(agentId, agentDefinition.agentType, agentAbortController.signal, undefined, toolUseContext.toolUseId, isAsync2)) {
@@ -248696,10 +248894,6 @@ async function* runAgent({
       ...description && { description }
     }).catch((_err) => logForDebugging2(`Failed to write agent metadata: ${_err}`));
     let lastRecordedUuid = initialMessages.at(-1)?.uuid ?? null;
-    let partialBaseMessage = null;
-    const partialTextByIndex = new Map;
-    const PARTIAL_PROGRESS_HOOK_INTERVAL_MS = 100;
-    let lastPartialProgressHookAt = 0;
     const agentExtraBody = agentDefinition.extraBody;
     const agentQuery = query({
       messages: initialMessages,
@@ -248724,6 +248918,11 @@ async function* runAgent({
       if (message.type === "stream_event") {
         const ev = message.event;
         if (ev.type === "message_start") {
+          if (foregroundSkipped > 0 || backgroundSkipped > 0) {
+            logPartialProgress("message-start", 0, false, false);
+            foregroundSkipped = 0;
+            backgroundSkipped = 0;
+          }
           if (message.ttftMs != null) {
             toolUseContext.pushApiMetricsEntry?.(message.ttftMs);
           }
@@ -248735,22 +248934,36 @@ async function* runAgent({
           const idx = ev.index ?? 0;
           const acc = (partialTextByIndex.get(idx) ?? "") + ev.delta.text;
           partialTextByIndex.set(idx, acc);
-          onPartialAssistant?.({
-            type: "assistant",
-            message: {
-              ...partialBaseMessage,
-              content: [{ type: "text", text: acc, citations: null }]
-            },
-            uuid: randomUUID10(),
-            timestamp: new Date().toISOString()
-          });
+          const now = Date.now();
+          let foregroundEmitted = false;
+          let backgroundEmitted = false;
+          if (onPartialAssistant && now - lastPartialAssistantAt >= PARTIAL_PROGRESS_INTERVAL_MS) {
+            lastPartialAssistantAt = now;
+            foregroundEmitted = true;
+            onPartialAssistant({
+              type: "assistant",
+              message: {
+                ...partialBaseMessage,
+                content: [{ type: "text", text: acc, citations: null }]
+              },
+              uuid: randomUUID10(),
+              timestamp: new Date().toISOString()
+            });
+          } else if (onPartialAssistant) {
+            foregroundSkipped += 1;
+          }
           if (isAsync2) {
-            const now = Date.now();
-            if (now - lastPartialProgressHookAt >= PARTIAL_PROGRESS_HOOK_INTERVAL_MS) {
+            if (now - lastPartialProgressHookAt >= PARTIAL_PROGRESS_INTERVAL_MS) {
               lastPartialProgressHookAt = now;
+              backgroundEmitted = true;
               executeSubagentProgressHooks(agentId, agentDefinition.agentType, partialBaseMessage.id, toolUseContext.toolUseId, [{ type: "text", text: acc }]).catch(() => {});
+            } else {
+              backgroundSkipped += 1;
             }
           }
+          if (foregroundEmitted || backgroundEmitted) {
+            logPartialProgress("emit", acc.length, foregroundEmitted, backgroundEmitted);
+          }
         }
         continue;
       }
@@ -248799,6 +249012,9 @@ async function* runAgent({
     agentRunError = err2;
     throw err2;
   } finally {
+    if (foregroundSkipped > 0 || backgroundSkipped > 0) {
+      logPartialProgress("finalize", 0, false, false);
+    }
     await finalizeLifecycle([
       async () => {
         const naturalStopAlreadyFired = isAsync2 && hasSubagentStopFired(agentId);
@@ -265509,7 +265725,7 @@ var init_AgentTool = __esm(() => {
         }
         selectedAgent = FORK_AGENT;
       } else {
-        const allAgents = toolUseContext.options.agentDefinitions.activeAgents;
+        const allAgents = withDefaultAgentForInvocation(toolUseContext.options.agentDefinitions.activeAgents, subagent_type, GENERAL_PURPOSE_AGENT);
         const {
           allowedAgentTypes
         } = toolUseContext.options.agentDefinitions;
@@ -266822,7 +267038,7 @@ function resolvePluginLspEnvironment(config2, plugin, userConfig, _errors) {
   }
   const resolvedEnv = {
     CLAUDE_PLUGIN_ROOT: plugin.path,
-    CLAUDE_PLUGIN_DATA: getPluginDataDir(plugin.source),
+    CLAUDE_PLUGIN_DATA: plugin.dataPath ?? getPluginDataDir(plugin.source),
     ...resolved.env || {}
   };
   for (const [key, value] of Object.entries(resolvedEnv)) {
@@ -270678,14 +270894,14 @@ var init_LSPServerInstance = __esm(() => {
 // src/capabilities/lsp/LSPServerManager.ts
 import * as path12 from "path";
 import { pathToFileURL as pathToFileURL2 } from "url";
-function createLSPServerManager() {
+function createLSPServerManager(explicitServerConfigs) {
   const servers = new Map;
   const extensionMap = new Map;
   const openedFiles = new Map;
   async function initialize3() {
     let serverConfigs;
     try {
-      const result = await getAllLspServers();
+      const result = explicitServerConfigs ? { servers: { ...explicitServerConfigs } } : await getAllLspServers();
       serverConfigs = result.servers;
       logForDebugging2(`[LSP SERVER MANAGER] getAllLspServers returned ${Object.keys(serverConfigs).length} server(s)`);
     } catch (error41) {
@@ -271050,6 +271266,9 @@ var init_passiveFeedback = __esm(() => {
 
 // src/capabilities/lsp/manager.ts
 function getLspServerManager() {
+  const sessionManager = tryGetSessionLspManager();
+  if (sessionManager)
+    return sessionManager;
   if (initializationState === "failed") {
     return;
   }
@@ -271071,8 +271290,6 @@ function getInitializationStatus() {
   return { status: "success" };
 }
 function isLspConnected() {
-  if (initializationState === "failed")
-    return false;
   const manager = getLspServerManager();
   if (!manager)
     return false;
@@ -271170,6 +271387,7 @@ var init_manager = __esm(() => {
   init_log3();
   init_LSPServerManager();
   init_passiveFeedback();
+  init_registries2();
 });
 
 // src/capabilities/tools/shared/teamMemorySync/teamMemSecretGuard.ts
@@ -284046,20 +284264,20 @@ function transformPluginSkillFiles(files) {
   }
   return result;
 }
-async function loadCommandsFromDirectory(commandsPath, pluginName, sourceName, pluginManifest, pluginPath, config2 = { isSkillMode: false }, loadedPaths = new Set) {
+async function loadCommandsFromDirectory(commandsPath, pluginName, sourceName, pluginManifest, pluginPath, config2 = { isSkillMode: false }, loadedPaths = new Set, pluginDataPath, strict = false) {
   const markdownFiles = await collectMarkdownFiles(commandsPath, commandsPath, loadedPaths);
   const processedFiles = transformPluginSkillFiles(markdownFiles);
   const commands = [];
   for (const file2 of processedFiles) {
     const commandName = getCommandNameFromFile(file2.filePath, file2.baseDir, pluginName);
-    const command = createPluginCommand(commandName, file2, sourceName, pluginManifest, pluginPath, isSkillFile(file2.filePath), config2);
+    const command = createPluginCommand(commandName, file2, sourceName, pluginManifest, pluginPath, isSkillFile(file2.filePath), config2, pluginDataPath, strict);
     if (command) {
       commands.push(command);
     }
   }
   return commands;
 }
-function createPluginCommand(commandName, file2, sourceName, pluginManifest, pluginPath, isSkill, config2 = { isSkillMode: false }) {
+function createPluginCommand(commandName, file2, sourceName, pluginManifest, pluginPath, isSkill, config2 = { isSkillMode: false }, pluginDataPath, strict = false) {
   try {
     const { frontmatter, content } = file2;
     const validatedDescription = coerceDescriptionToString(frontmatter.description, commandName);
@@ -284067,10 +284285,12 @@ function createPluginCommand(commandName, file2, sourceName, pluginManifest, plu
     const rawAllowedTools = frontmatter["allowed-tools"];
     const substitutedAllowedTools = typeof rawAllowedTools === "string" ? substitutePluginVariables(rawAllowedTools, {
       path: pluginPath,
-      source: sourceName
+      source: sourceName,
+      dataPath: pluginDataPath
     }) : Array.isArray(rawAllowedTools) ? rawAllowedTools.map((tool) => typeof tool === "string" ? substitutePluginVariables(tool, {
       path: pluginPath,
-      source: sourceName
+      source: sourceName,
+      dataPath: pluginDataPath
     }) : tool) : rawAllowedTools;
     const allowedTools = parseSlashCommandToolsFromFrontmatter(substitutedAllowedTools);
     const argumentHint = frontmatter["argument-hint"];
@@ -284091,6 +284311,7 @@ function createPluginCommand(commandName, file2, sourceName, pluginManifest, plu
     return {
       type: "prompt",
       name: commandName,
+      sourcePath: file2.filePath,
       description,
       hasUserSpecifiedDescription: validatedDescription !== null,
       allowedTools,
@@ -284115,13 +284336,20 @@ function createPluginCommand(commandName, file2, sourceName, pluginManifest, plu
         return displayName || commandName;
       },
       async getPromptForCommand(args, context4) {
-        let finalContent = config2.isSkillMode ? `Base directory for this skill: ${dirname29(file2.filePath)}
+        const sourceContext = [
+          `Source file: ${file2.filePath}`,
+          `Plugin root: ${pluginPath}`,
+          ...config2.isSkillMode ? [`Base directory for this skill: ${dirname29(file2.filePath)}`] : []
+        ];
+        let finalContent = `${sourceContext.join(`
+`)}
 
-${content}` : content;
+${content}`;
         finalContent = substituteArguments(finalContent, args, true, argumentNames);
         finalContent = substitutePluginVariables(finalContent, {
           path: pluginPath,
-          source: sourceName
+          source: sourceName,
+          dataPath: pluginDataPath
         });
         if (pluginManifest.userConfig) {
           finalContent = substituteUserConfigInContent(finalContent, loadPluginOptions(sourceName), pluginManifest.userConfig);
@@ -284152,16 +284380,161 @@ ${content}` : content;
       }
     };
   } catch (error41) {
+    if (strict)
+      throw error41;
     logForDebugging2(`Failed to create command from ${file2.filePath}: ${error41}`, {
       level: "error"
     });
     return null;
   }
 }
+async function loadPluginCommandsFromPlugins(enabled, options2 = {}) {
+  const strict = options2.strict ?? false;
+  const perPluginCommands = await Promise.all(enabled.map(async (plugin) => {
+    const loadedPaths = new Set;
+    const pluginCommands = [];
+    if (plugin.commandsPath) {
+      try {
+        const commands = await loadCommandsFromDirectory(plugin.commandsPath, plugin.name, plugin.source, plugin.manifest, plugin.path, { isSkillMode: false }, loadedPaths, plugin.dataPath, strict);
+        pluginCommands.push(...commands);
+        if (commands.length > 0) {
+          logForDebugging2(`Loaded ${commands.length} commands from plugin ${plugin.name} default directory`);
+        }
+      } catch (error41) {
+        if (strict)
+          throw error41;
+        logForDebugging2(`Failed to load commands from plugin ${plugin.name} default directory: ${error41}`, { level: "error" });
+      }
+    }
+    if (plugin.commandsPaths) {
+      logForDebugging2(`Plugin ${plugin.name} has commandsPaths: ${plugin.commandsPaths.join(", ")}`);
+      const pathResults = await Promise.all(plugin.commandsPaths.map(async (commandPath) => {
+        try {
+          const fs2 = getFsImplementation();
+          const stats = await fs2.stat(commandPath);
+          logForDebugging2(`Checking commandPath ${commandPath} - isDirectory: ${stats.isDirectory()}, isFile: ${stats.isFile()}`);
+          if (stats.isDirectory()) {
+            const commands = await loadCommandsFromDirectory(commandPath, plugin.name, plugin.source, plugin.manifest, plugin.path, { isSkillMode: false }, loadedPaths, plugin.dataPath, strict);
+            if (commands.length > 0) {
+              logForDebugging2(`Loaded ${commands.length} commands from plugin ${plugin.name} custom path: ${commandPath}`);
+            } else {
+              logForDebugging2(`Warning: No commands found in plugin ${plugin.name} custom directory: ${commandPath}. Expected .md files or SKILL.md in subdirectories.`, { level: "warn" });
+            }
+            return commands;
+          } else if (stats.isFile() && commandPath.endsWith(".md")) {
+            if (isDuplicatePath(fs2, commandPath, loadedPaths)) {
+              return [];
+            }
+            const content = await fs2.readFile(commandPath, {
+              encoding: "utf-8"
+            });
+            const { frontmatter, content: markdownContent } = parseFrontmatter(content, commandPath);
+            let commandName;
+            let metadataOverride;
+            if (plugin.commandsMetadata) {
+              for (const [name, metadata] of Object.entries(plugin.commandsMetadata)) {
+                if (metadata.source) {
+                  const fullMetadataPath = join62(plugin.path, metadata.source);
+                  if (commandPath === fullMetadataPath) {
+                    commandName = `${plugin.name}:${name}`;
+                    metadataOverride = metadata;
+                    break;
+                  }
+                }
+              }
+            }
+            if (!commandName) {
+              commandName = `${plugin.name}:${basename16(commandPath).replace(/\.md$/, "")}`;
+            }
+            const finalFrontmatter = metadataOverride ? {
+              ...frontmatter,
+              ...metadataOverride.description && {
+                description: metadataOverride.description
+              },
+              ...metadataOverride.argumentHint && {
+                "argument-hint": metadataOverride.argumentHint
+              },
+              ...metadataOverride.model && {
+                model: metadataOverride.model
+              },
+              ...metadataOverride.allowedTools && {
+                "allowed-tools": metadataOverride.allowedTools.join(",")
+              }
+            } : frontmatter;
+            const file2 = {
+              filePath: commandPath,
+              baseDir: dirname29(commandPath),
+              frontmatter: finalFrontmatter,
+              content: markdownContent
+            };
+            const command = createPluginCommand(commandName, file2, plugin.source, plugin.manifest, plugin.path, false, { isSkillMode: false }, plugin.dataPath, strict);
+            if (command) {
+              logForDebugging2(`Loaded command from plugin ${plugin.name} custom file: ${commandPath}${metadataOverride ? " (with metadata override)" : ""}`);
+              return [command];
+            }
+          }
+          return [];
+        } catch (error41) {
+          if (strict)
+            throw error41;
+          logForDebugging2(`Failed to load commands from plugin ${plugin.name} custom path ${commandPath}: ${error41}`, { level: "error" });
+          return [];
+        }
+      }));
+      for (const commands of pathResults) {
+        pluginCommands.push(...commands);
+      }
+    }
+    if (plugin.commandsMetadata) {
+      for (const [name, metadata] of Object.entries(plugin.commandsMetadata)) {
+        if (metadata.content && !metadata.source) {
+          try {
+            const { frontmatter, content: markdownContent } = parseFrontmatter(metadata.content, `<inline:${plugin.name}:${name}>`);
+            const finalFrontmatter = {
+              ...frontmatter,
+              ...metadata.description && {
+                description: metadata.description
+              },
+              ...metadata.argumentHint && {
+                "argument-hint": metadata.argumentHint
+              },
+              ...metadata.model && {
+                model: metadata.model
+              },
+              ...metadata.allowedTools && {
+                "allowed-tools": metadata.allowedTools.join(",")
+              }
+            };
+            const commandName = `${plugin.name}:${name}`;
+            const file2 = {
+              filePath: `<inline:${commandName}>`,
+              baseDir: plugin.path,
+              frontmatter: finalFrontmatter,
+              content: markdownContent
+            };
+            const command = createPluginCommand(commandName, file2, plugin.source, plugin.manifest, plugin.path, false, { isSkillMode: false }, plugin.dataPath, strict);
+            if (command) {
+              pluginCommands.push(command);
+              logForDebugging2(`Loaded inline content command from plugin ${plugin.name}: ${commandName}`);
+            }
+          } catch (error41) {
+            if (strict)
+              throw error41;
+            logForDebugging2(`Failed to load inline content command ${name} from plugin ${plugin.name}: ${error41}`, { level: "error" });
+          }
+        }
+      }
+    }
+    return pluginCommands;
+  }));
+  const allCommands = perPluginCommands.flat();
+  logForDebugging2(`Total plugin commands loaded: ${allCommands.length}`);
+  return allCommands;
+}
 function clearPluginCommandCache() {
   getPluginCommands.cache?.clear?.();
 }
-async function loadSkillsFromDirectory(skillsPath, pluginName, sourceName, pluginManifest, pluginPath, loadedPaths) {
+async function loadSkillsFromDirectory(skillsPath, pluginName, sourceName, pluginManifest, pluginPath, loadedPaths, pluginDataPath, strict = false) {
   const fs2 = getFsImplementation();
   const skills = [];
   const directSkillPath = join62(skillsPath, "SKILL.md");
@@ -284172,6 +284545,8 @@ async function loadSkillsFromDirectory(skillsPath, pluginName, sourceName, plugi
     });
   } catch (e) {
     if (!isENOENT(e)) {
+      if (strict)
+        throw e;
       logForDebugging2(`Failed to load skill from ${directSkillPath}: ${e}`, {
         level: "error"
       });
@@ -284191,11 +284566,13 @@ async function loadSkillsFromDirectory(skillsPath, pluginName, sourceName, plugi
         frontmatter,
         content: markdownContent
       };
-      const skill = createPluginCommand(skillName, file2, sourceName, pluginManifest, pluginPath, true, { isSkillMode: true });
+      const skill = createPluginCommand(skillName, file2, sourceName, pluginManifest, pluginPath, true, { isSkillMode: true }, pluginDataPath, strict);
       if (skill) {
         skills.push(skill);
       }
     } catch (error41) {
+      if (strict)
+        throw error41;
       logForDebugging2(`Failed to load skill from ${directSkillPath}: ${error41}`, {
         level: "error"
       });
@@ -284207,6 +284584,8 @@ async function loadSkillsFromDirectory(skillsPath, pluginName, sourceName, plugi
     entries = await fs2.readdir(skillsPath);
   } catch (e) {
     if (!isENOENT(e)) {
+      if (strict)
+        throw e;
       logForDebugging2(`Failed to load skills from directory ${skillsPath}: ${e}`, { level: "error" });
     }
     return skills;
@@ -284222,6 +284601,8 @@ async function loadSkillsFromDirectory(skillsPath, pluginName, sourceName, plugi
       content = await fs2.readFile(skillFilePath, { encoding: "utf-8" });
     } catch (e) {
       if (!isENOENT(e)) {
+        if (strict)
+          throw e;
         logForDebugging2(`Failed to load skill from ${skillFilePath}: ${e}`, {
           level: "error"
         });
@@ -284240,16 +284621,61 @@ async function loadSkillsFromDirectory(skillsPath, pluginName, sourceName, plugi
         frontmatter,
         content: markdownContent
       };
-      const skill = createPluginCommand(skillName, file2, sourceName, pluginManifest, pluginPath, true, { isSkillMode: true });
+      const skill = createPluginCommand(skillName, file2, sourceName, pluginManifest, pluginPath, true, { isSkillMode: true }, pluginDataPath, strict);
       if (skill) {
         skills.push(skill);
       }
     } catch (error41) {
+      if (strict)
+        throw error41;
       logForDebugging2(`Failed to load skill from ${skillFilePath}: ${error41}`, { level: "error" });
     }
   }));
   return skills;
 }
+async function loadPluginSkillsFromPlugins(enabled, options2 = {}) {
+  const strict = options2.strict ?? false;
+  const perPluginSkills = await Promise.all(enabled.map(async (plugin) => {
+    const loadedPaths = new Set;
+    const pluginSkills = [];
+    logForDebugging2(`Checking plugin ${plugin.name}: skillsPath=${plugin.skillsPath ? "exists" : "none"}, skillsPaths=${plugin.skillsPaths ? plugin.skillsPaths.length : 0} paths`);
+    if (plugin.skillsPath) {
+      logForDebugging2(`Attempting to load skills from plugin ${plugin.name} default skillsPath: ${plugin.skillsPath}`);
+      try {
+        const skills = await loadSkillsFromDirectory(plugin.skillsPath, plugin.name, plugin.source, plugin.manifest, plugin.path, loadedPaths, plugin.dataPath, strict);
+        pluginSkills.push(...skills);
+        logForDebugging2(`Loaded ${skills.length} skills from plugin ${plugin.name} default directory`);
+      } catch (error41) {
+        if (strict)
+          throw error41;
+        logForDebugging2(`Failed to load skills from plugin ${plugin.name} default directory: ${error41}`, { level: "error" });
+      }
+    }
+    if (plugin.skillsPaths) {
+      logForDebugging2(`Attempting to load skills from plugin ${plugin.name} skillsPaths: ${plugin.skillsPaths.join(", ")}`);
+      const pathResults = await Promise.all(plugin.skillsPaths.map(async (skillPath) => {
+        try {
+          logForDebugging2(`Loading from skillPath: ${skillPath} for plugin ${plugin.name}`);
+          const skills = await loadSkillsFromDirectory(skillPath, plugin.name, plugin.source, plugin.manifest, plugin.path, loadedPaths, plugin.dataPath, strict);
+          logForDebugging2(`Loaded ${skills.length} skills from plugin ${plugin.name} custom path: ${skillPath}`);
+          return skills;
+        } catch (error41) {
+          if (strict)
+            throw error41;
+          logForDebugging2(`Failed to load skills from plugin ${plugin.name} custom path ${skillPath}: ${error41}`, { level: "error" });
+          return [];
+        }
+      }));
+      for (const skills of pathResults) {
+        pluginSkills.push(...skills);
+      }
+    }
+    return pluginSkills;
+  }));
+  const allSkills = perPluginSkills.flat();
+  logForDebugging2(`Total plugin skills loaded: ${allSkills.length}`);
+  return allSkills;
+}
 function clearPluginSkillsCache() {
   getPluginSkills.cache?.clear?.();
 }
@@ -284278,140 +284704,7 @@ var init_loadPluginCommands = __esm(() => {
     if (errors4.length > 0) {
       logForDebugging2(`Plugin loading errors: ${errors4.map((e) => getPluginErrorMessage(e)).join(", ")}`);
     }
-    const perPluginCommands = await Promise.all(enabled.map(async (plugin) => {
-      const loadedPaths = new Set;
-      const pluginCommands = [];
-      if (plugin.commandsPath) {
-        try {
-          const commands = await loadCommandsFromDirectory(plugin.commandsPath, plugin.name, plugin.source, plugin.manifest, plugin.path, { isSkillMode: false }, loadedPaths);
-          pluginCommands.push(...commands);
-          if (commands.length > 0) {
-            logForDebugging2(`Loaded ${commands.length} commands from plugin ${plugin.name} default directory`);
-          }
-        } catch (error41) {
-          logForDebugging2(`Failed to load commands from plugin ${plugin.name} default directory: ${error41}`, { level: "error" });
-        }
-      }
-      if (plugin.commandsPaths) {
-        logForDebugging2(`Plugin ${plugin.name} has commandsPaths: ${plugin.commandsPaths.join(", ")}`);
-        const pathResults = await Promise.all(plugin.commandsPaths.map(async (commandPath) => {
-          try {
-            const fs2 = getFsImplementation();
-            const stats = await fs2.stat(commandPath);
-            logForDebugging2(`Checking commandPath ${commandPath} - isDirectory: ${stats.isDirectory()}, isFile: ${stats.isFile()}`);
-            if (stats.isDirectory()) {
-              const commands = await loadCommandsFromDirectory(commandPath, plugin.name, plugin.source, plugin.manifest, plugin.path, { isSkillMode: false }, loadedPaths);
-              if (commands.length > 0) {
-                logForDebugging2(`Loaded ${commands.length} commands from plugin ${plugin.name} custom path: ${commandPath}`);
-              } else {
-                logForDebugging2(`Warning: No commands found in plugin ${plugin.name} custom directory: ${commandPath}. Expected .md files or SKILL.md in subdirectories.`, { level: "warn" });
-              }
-              return commands;
-            } else if (stats.isFile() && commandPath.endsWith(".md")) {
-              if (isDuplicatePath(fs2, commandPath, loadedPaths)) {
-                return [];
-              }
-              const content = await fs2.readFile(commandPath, {
-                encoding: "utf-8"
-              });
-              const { frontmatter, content: markdownContent } = parseFrontmatter(content, commandPath);
-              let commandName;
-              let metadataOverride;
-              if (plugin.commandsMetadata) {
-                for (const [name, metadata] of Object.entries(plugin.commandsMetadata)) {
-                  if (metadata.source) {
-                    const fullMetadataPath = join62(plugin.path, metadata.source);
-                    if (commandPath === fullMetadataPath) {
-                      commandName = `${plugin.name}:${name}`;
-                      metadataOverride = metadata;
-                      break;
-                    }
-                  }
-                }
-              }
-              if (!commandName) {
-                commandName = `${plugin.name}:${basename16(commandPath).replace(/\.md$/, "")}`;
-              }
-              const finalFrontmatter = metadataOverride ? {
-                ...frontmatter,
-                ...metadataOverride.description && {
-                  description: metadataOverride.description
-                },
-                ...metadataOverride.argumentHint && {
-                  "argument-hint": metadataOverride.argumentHint
-                },
-                ...metadataOverride.model && {
-                  model: metadataOverride.model
-                },
-                ...metadataOverride.allowedTools && {
-                  "allowed-tools": metadataOverride.allowedTools.join(",")
-                }
-              } : frontmatter;
-              const file2 = {
-                filePath: commandPath,
-                baseDir: dirname29(commandPath),
-                frontmatter: finalFrontmatter,
-                content: markdownContent
-              };
-              const command = createPluginCommand(commandName, file2, plugin.source, plugin.manifest, plugin.path, false);
-              if (command) {
-                logForDebugging2(`Loaded command from plugin ${plugin.name} custom file: ${commandPath}${metadataOverride ? " (with metadata override)" : ""}`);
-                return [command];
-              }
-            }
-            return [];
-          } catch (error41) {
-            logForDebugging2(`Failed to load commands from plugin ${plugin.name} custom path ${commandPath}: ${error41}`, { level: "error" });
-            return [];
-          }
-        }));
-        for (const commands of pathResults) {
-          pluginCommands.push(...commands);
-        }
-      }
-      if (plugin.commandsMetadata) {
-        for (const [name, metadata] of Object.entries(plugin.commandsMetadata)) {
-          if (metadata.content && !metadata.source) {
-            try {
-              const { frontmatter, content: markdownContent } = parseFrontmatter(metadata.content, `<inline:${plugin.name}:${name}>`);
-              const finalFrontmatter = {
-                ...frontmatter,
-                ...metadata.description && {
-                  description: metadata.description
-                },
-                ...metadata.argumentHint && {
-                  "argument-hint": metadata.argumentHint
-                },
-                ...metadata.model && {
-                  model: metadata.model
-                },
-                ...metadata.allowedTools && {
-                  "allowed-tools": metadata.allowedTools.join(",")
-                }
-              };
-              const commandName = `${plugin.name}:${name}`;
-              const file2 = {
-                filePath: `<inline:${commandName}>`,
-                baseDir: plugin.path,
-                frontmatter: finalFrontmatter,
-                content: markdownContent
-              };
-              const command = createPluginCommand(commandName, file2, plugin.source, plugin.manifest, plugin.path, false);
-              if (command) {
-                pluginCommands.push(command);
-                logForDebugging2(`Loaded inline content command from plugin ${plugin.name}: ${commandName}`);
-              }
-            } catch (error41) {
-              logForDebugging2(`Failed to load inline content command ${name} from plugin ${plugin.name}: ${error41}`, { level: "error" });
-            }
-          }
-        }
-      }
-      return pluginCommands;
-    }));
-    const allCommands = perPluginCommands.flat();
-    logForDebugging2(`Total plugin commands loaded: ${allCommands.length}`);
-    return allCommands;
+    return loadPluginCommandsFromPlugins(enabled);
   });
   getPluginSkills = memoize_default(async () => {
     if (isBareMode() && getInlinePlugins().length === 0) {
@@ -284422,48 +284715,14 @@ var init_loadPluginCommands = __esm(() => {
       logForDebugging2(`Plugin loading errors: ${errors4.map((e) => getPluginErrorMessage(e)).join(", ")}`);
     }
     logForDebugging2(`getPluginSkills: Processing ${enabled.length} enabled plugins`);
-    const perPluginSkills = await Promise.all(enabled.map(async (plugin) => {
-      const loadedPaths = new Set;
-      const pluginSkills = [];
-      logForDebugging2(`Checking plugin ${plugin.name}: skillsPath=${plugin.skillsPath ? "exists" : "none"}, skillsPaths=${plugin.skillsPaths ? plugin.skillsPaths.length : 0} paths`);
-      if (plugin.skillsPath) {
-        logForDebugging2(`Attempting to load skills from plugin ${plugin.name} default skillsPath: ${plugin.skillsPath}`);
-        try {
-          const skills = await loadSkillsFromDirectory(plugin.skillsPath, plugin.name, plugin.source, plugin.manifest, plugin.path, loadedPaths);
-          pluginSkills.push(...skills);
-          logForDebugging2(`Loaded ${skills.length} skills from plugin ${plugin.name} default directory`);
-        } catch (error41) {
-          logForDebugging2(`Failed to load skills from plugin ${plugin.name} default directory: ${error41}`, { level: "error" });
-        }
-      }
-      if (plugin.skillsPaths) {
-        logForDebugging2(`Attempting to load skills from plugin ${plugin.name} skillsPaths: ${plugin.skillsPaths.join(", ")}`);
-        const pathResults = await Promise.all(plugin.skillsPaths.map(async (skillPath) => {
-          try {
-            logForDebugging2(`Loading from skillPath: ${skillPath} for plugin ${plugin.name}`);
-            const skills = await loadSkillsFromDirectory(skillPath, plugin.name, plugin.source, plugin.manifest, plugin.path, loadedPaths);
-            logForDebugging2(`Loaded ${skills.length} skills from plugin ${plugin.name} custom path: ${skillPath}`);
-            return skills;
-          } catch (error41) {
-            logForDebugging2(`Failed to load skills from plugin ${plugin.name} custom path ${skillPath}: ${error41}`, { level: "error" });
-            return [];
-          }
-        }));
-        for (const skills of pathResults) {
-          pluginSkills.push(...skills);
-        }
-      }
-      return pluginSkills;
-    }));
-    const allSkills = perPluginSkills.flat();
-    logForDebugging2(`Total plugin skills loaded: ${allSkills.length}`);
-    return allSkills;
+    return loadPluginSkillsFromPlugins(enabled);
   });
 });
 
 // src/capabilities/plugins/loadPluginHooks.ts
 var exports_loadPluginHooks = {};
 __export(exports_loadPluginHooks, {
+  buildExplicitPluginHookMatchers: () => buildExplicitPluginHookMatchers,
   clearPluginHookCache: () => clearPluginHookCache,
   getPluginAffectingSettingsSnapshot: () => getPluginAffectingSettingsSnapshot,
   loadPluginHooks: () => loadPluginHooks,
@@ -284471,6 +284730,33 @@ __export(exports_loadPluginHooks, {
   resetHotReloadState: () => resetHotReloadState,
   setupPluginHookHotReload: () => setupPluginHookHotReload
 });
+function buildExplicitPluginHookMatchers(plugins) {
+  const result = {};
+  for (const event of PLUGIN_HOOK_EVENTS)
+    result[event] = [];
+  for (const plugin of plugins) {
+    if (!plugin.hooksConfig)
+      continue;
+    for (const [event, matchers] of Object.entries(plugin.hooksConfig)) {
+      if (!PLUGIN_HOOK_EVENTS.includes(event))
+        continue;
+      const hookEvent = event;
+      const target = result[hookEvent];
+      for (const matcher of matchers ?? []) {
+        if (matcher.hooks.length === 0)
+          continue;
+        target.push({
+          matcher: matcher.matcher,
+          hooks: matcher.hooks,
+          pluginRoot: plugin.path,
+          pluginName: plugin.name,
+          pluginId: plugin.source
+        });
+      }
+    }
+  }
+  return result;
+}
 function convertPluginHooksToMatchers(plugin) {
   const pluginMatchers = {
     PreToolUse: [],
@@ -284579,7 +284865,7 @@ function setupPluginHookHotReload() {
     }
   });
 }
-var hotReloadSubscribed = false, lastPluginSettingsSnapshot, loadPluginHooks;
+var hotReloadSubscribed = false, lastPluginSettingsSnapshot, PLUGIN_HOOK_EVENTS, loadPluginHooks;
 var init_loadPluginHooks = __esm(() => {
   init_memoize();
   init_state2();
@@ -284588,6 +284874,35 @@ var init_loadPluginHooks = __esm(() => {
   init_settings2();
   init_slowOperations();
   init_pluginLoader();
+  PLUGIN_HOOK_EVENTS = [
+    "PreToolUse",
+    "PostToolUse",
+    "PostToolUseFailure",
+    "PermissionDenied",
+    "Notification",
+    "UserPromptSubmit",
+    "SessionStart",
+    "SessionEnd",
+    "Stop",
+    "StopFailure",
+    "SubagentStart",
+    "SubagentStop",
+    "PreCompact",
+    "PostCompact",
+    "PermissionRequest",
+    "Setup",
+    "TeammateIdle",
+    "TaskCreated",
+    "TaskCompleted",
+    "Elicitation",
+    "ElicitationResult",
+    "ConfigChange",
+    "WorktreeCreate",
+    "WorktreeRemove",
+    "InstructionsLoaded",
+    "CwdChanged",
+    "FileChanged"
+  ];
   loadPluginHooks = memoize_default(async () => {
     const { enabled } = await loadAllPluginsCacheOnly();
     const allPluginHooks = {
@@ -284638,16 +284953,16 @@ var init_loadPluginHooks = __esm(() => {
 
 // src/capabilities/plugins/loadPluginOutputStyles.ts
 import { basename as basename17 } from "path";
-async function loadOutputStylesFromDirectory(outputStylesPath, pluginName, loadedPaths) {
+async function loadOutputStylesFromDirectory(outputStylesPath, pluginName, sourceName, loadedPaths, strict = false) {
   const styles4 = [];
   await walkPluginMarkdown(outputStylesPath, async (fullPath) => {
-    const style = await loadOutputStyleFromFile(fullPath, pluginName, loadedPaths);
+    const style = await loadOutputStyleFromFile(fullPath, pluginName, sourceName, loadedPaths, strict);
     if (style)
       styles4.push(style);
   }, { logLabel: "output-styles" });
   return styles4;
 }
-async function loadOutputStyleFromFile(filePath, pluginName, loadedPaths) {
+async function loadOutputStyleFromFile(filePath, pluginName, sourceName, loadedPaths, strict = false) {
   const fs2 = getFsImplementation();
   if (isDuplicatePath(fs2, filePath, loadedPaths)) {
     return null;
@@ -284666,15 +284981,65 @@ async function loadOutputStyleFromFile(filePath, pluginName, loadedPaths) {
       description,
       prompt: markdownContent.trim(),
       source: "plugin",
+      plugin: sourceName,
       forceForPlugin
     };
   } catch (error41) {
+    if (strict)
+      throw error41;
     logForDebugging2(`Failed to load output style from ${filePath}: ${error41}`, {
       level: "error"
     });
     return null;
   }
 }
+async function loadPluginOutputStylesFromPlugins(enabled, options2 = {}) {
+  const strict = options2.strict ?? false;
+  const allStyles = [];
+  for (const plugin of enabled) {
+    const loadedPaths = new Set;
+    if (plugin.outputStylesPath) {
+      try {
+        const styles4 = await loadOutputStylesFromDirectory(plugin.outputStylesPath, plugin.name, plugin.source, loadedPaths, strict);
+        allStyles.push(...styles4);
+        if (styles4.length > 0) {
+          logForDebugging2(`Loaded ${styles4.length} output styles from plugin ${plugin.name} default directory`);
+        }
+      } catch (error41) {
+        if (strict)
+          throw error41;
+        logForDebugging2(`Failed to load output styles from plugin ${plugin.name} default directory: ${error41}`, { level: "error" });
+      }
+    }
+    if (plugin.outputStylesPaths) {
+      for (const stylePath of plugin.outputStylesPaths) {
+        try {
+          const fs2 = getFsImplementation();
+          const stats = await fs2.stat(stylePath);
+          if (stats.isDirectory()) {
+            const styles4 = await loadOutputStylesFromDirectory(stylePath, plugin.name, plugin.source, loadedPaths, strict);
+            allStyles.push(...styles4);
+            if (styles4.length > 0) {
+              logForDebugging2(`Loaded ${styles4.length} output styles from plugin ${plugin.name} custom path: ${stylePath}`);
+            }
+          } else if (stats.isFile() && stylePath.endsWith(".md")) {
+            const style = await loadOutputStyleFromFile(stylePath, plugin.name, plugin.source, loadedPaths, strict);
+            if (style) {
+              allStyles.push(style);
+              logForDebugging2(`Loaded output style from plugin ${plugin.name} custom file: ${stylePath}`);
+            }
+          }
+        } catch (error41) {
+          if (strict)
+            throw error41;
+          logForDebugging2(`Failed to load output styles from plugin ${plugin.name} custom path ${stylePath}: ${error41}`, { level: "error" });
+        }
+      }
+    }
+  }
+  logForDebugging2(`Total plugin output styles loaded: ${allStyles.length}`);
+  return allStyles;
+}
 function clearPluginOutputStyleCache() {
   loadPluginOutputStyles.cache?.clear?.();
 }
@@ -284689,49 +285054,10 @@ var init_loadPluginOutputStyles = __esm(() => {
   init_walkPluginMarkdown();
   loadPluginOutputStyles = memoize_default(async () => {
     const { enabled, errors: errors4 } = await loadAllPluginsCacheOnly();
-    const allStyles = [];
     if (errors4.length > 0) {
       logForDebugging2(`Plugin loading errors: ${errors4.map((e) => getPluginErrorMessage(e)).join(", ")}`);
     }
-    for (const plugin of enabled) {
-      const loadedPaths = new Set;
-      if (plugin.outputStylesPath) {
-        try {
-          const styles4 = await loadOutputStylesFromDirectory(plugin.outputStylesPath, plugin.name, loadedPaths);
-          allStyles.push(...styles4);
-          if (styles4.length > 0) {
-            logForDebugging2(`Loaded ${styles4.length} output styles from plugin ${plugin.name} default directory`);
-          }
-        } catch (error41) {
-          logForDebugging2(`Failed to load output styles from plugin ${plugin.name} default directory: ${error41}`, { level: "error" });
-        }
-      }
-      if (plugin.outputStylesPaths) {
-        for (const stylePath of plugin.outputStylesPaths) {
-          try {
-            const fs2 = getFsImplementation();
-            const stats = await fs2.stat(stylePath);
-            if (stats.isDirectory()) {
-              const styles4 = await loadOutputStylesFromDirectory(stylePath, plugin.name, loadedPaths);
-              allStyles.push(...styles4);
-              if (styles4.length > 0) {
-                logForDebugging2(`Loaded ${styles4.length} output styles from plugin ${plugin.name} custom path: ${stylePath}`);
-              }
-            } else if (stats.isFile() && stylePath.endsWith(".md")) {
-              const style = await loadOutputStyleFromFile(stylePath, plugin.name, loadedPaths);
-              if (style) {
-                allStyles.push(style);
-                logForDebugging2(`Loaded output style from plugin ${plugin.name} custom file: ${stylePath}`);
-              }
-            }
-          } catch (error41) {
-            logForDebugging2(`Failed to load output styles from plugin ${plugin.name} custom path ${stylePath}: ${error41}`, { level: "error" });
-          }
-        }
-      }
-    }
-    logForDebugging2(`Total plugin output styles loaded: ${allStyles.length}`);
-    return allStyles;
+    return loadPluginOutputStylesFromPlugins(enabled);
   });
 });
 
@@ -287606,7 +287932,7 @@ var init_pluginInstallationHelpers = __esm(() => {
 });
 
 // src/capabilities/plugins/pluginLoader.ts
-import { basename as basename20, dirname as dirname35, join as join69, relative as relative11, resolve as resolve29, sep as sep20 } from "path";
+import { basename as basename20, dirname as dirname35, isAbsolute as isAbsolute21, join as join69, relative as relative11, resolve as resolve29, sep as sep20 } from "path";
 function getPluginCachePath() {
   return join69(getPluginsDirectory(), "cache");
 }
@@ -288103,14 +288429,31 @@ async function loadPluginHooks2(hooksConfigPath, pluginName) {
   return validatedPluginHooks.hooks;
 }
 async function validatePluginPaths(relPaths, pluginPath, pluginName, source, component, componentLabel, contextLabel, errors4) {
+  const fs2 = getFsImplementation();
+  const pluginRoot = await fs2.realpath(pluginPath);
   const checks4 = await Promise.all(relPaths.map(async (relPath) => {
-    const fullPath = join69(pluginPath, relPath);
-    return { relPath, fullPath, exists: await pathExists(fullPath) };
+    const fullPath = resolve29(pluginPath, relPath);
+    if (!await pathExists(fullPath)) {
+      return { relPath, fullPath, exists: false, escaped: false };
+    }
+    const realPath = await fs2.realpath(fullPath);
+    const pathFromRoot = relative11(pluginRoot, realPath);
+    const escaped = pathFromRoot === ".." || pathFromRoot.startsWith(`..${sep20}`) || isAbsolute21(pathFromRoot);
+    return { relPath, fullPath, exists: true, escaped };
   }));
   const validPaths = [];
-  for (const { relPath, fullPath, exists } of checks4) {
-    if (exists) {
+  for (const { relPath, fullPath, exists, escaped } of checks4) {
+    if (exists && !escaped) {
       validPaths.push(fullPath);
+    } else if (escaped) {
+      errors4.push({
+        type: "component-load-failed",
+        source,
+        plugin: pluginName,
+        path: fullPath,
+        component,
+        reason: "Path resolves outside the plugin root"
+      });
     } else {
       logForDebugging2(`${componentLabel} path ${relPath} ${contextLabel} not found at ${fullPath} for ${pluginName}`, { level: "warn" });
       logError2(new Error(`Plugin component file not found: ${fullPath} for ${pluginName}`));
@@ -305546,7 +305889,7 @@ var builders = null;
 import {
   basename as basename22,
   dirname as dirname39,
-  isAbsolute as isAbsolute21,
+  isAbsolute as isAbsolute22,
   join as join78,
   sep as pathSep2,
   relative as relative13
@@ -306029,8 +306372,8 @@ function activateConditionalSkillsForPaths(filePaths, cwd) {
     }
     const skillIgnore = import_ignore2.default().add(skill.paths);
     for (const filePath of filePaths) {
-      const relativePath = isAbsolute21(filePath) ? relative13(cwd, filePath) : filePath;
-      if (!relativePath || relativePath.startsWith("..") || isAbsolute21(relativePath)) {
+      const relativePath = isAbsolute22(filePath) ? relative13(cwd, filePath) : filePath;
+      if (!relativePath || relativePath.startsWith("..") || isAbsolute22(relativePath)) {
         continue;
       }
       if (skillIgnore.ignores(relativePath)) {
@@ -342619,14 +342962,14 @@ var init_measure_text = __esm(() => {
 });
 
 // src/cli/ink/node-cache.ts
-function addPendingClear(parent, rect, isAbsolute22) {
+function addPendingClear(parent, rect, isAbsolute23) {
   const existing = pendingClears.get(parent);
   if (existing) {
     existing.push(rect);
   } else {
     pendingClears.set(parent, [rect]);
   }
-  if (isAbsolute22) {
+  if (isAbsolute23) {
     absoluteNodeRemoved = true;
   }
 }
@@ -343008,17 +343351,17 @@ function collectRemovedRects(parent, removed, underAbsolute = false) {
   if (!removed || removed.nodeName === "#text")
     return;
   const elem = removed;
-  const isAbsolute22 = underAbsolute || elem.style?.position === "absolute";
+  const isAbsolute23 = underAbsolute || elem.style?.position === "absolute";
   const cached3 = nodeCache.get(elem);
   if (cached3) {
-    addPendingClear(parent, cached3, isAbsolute22);
+    addPendingClear(parent, cached3, isAbsolute23);
     nodeCache.delete(elem);
   }
   const childNodes = Array.isArray(elem.childNodes) ? [...elem.childNodes] : [];
   for (const child of childNodes) {
     if (!child)
       continue;
-    collectRemovedRects(parent, child, isAbsolute22);
+    collectRemovedRects(parent, child, isAbsolute23);
   }
 }
 function stylesEqual(a2, b) {
@@ -349480,16 +349823,16 @@ function renderChildren(node, output, offsetX, offsetY, hasRemovedChild, prevScr
     }
     const childElem = childNode;
     const wasDirty = childElem.dirty;
-    const isAbsolute22 = childElem.style.position === "absolute";
+    const isAbsolute23 = childElem.style.position === "absolute";
     renderNodeToOutput(childElem, output, {
       offsetX,
       offsetY,
       prevScreen: hasRemovedChild || seenDirtyChild ? undefined : prevScreen,
-      skipSelfBlit: seenDirtyClipped && isAbsolute22 && !childElem.style.opaque && childElem.style.backgroundColor === undefined,
+      skipSelfBlit: seenDirtyClipped && isAbsolute23 && !childElem.style.opaque && childElem.style.backgroundColor === undefined,
       inheritedBackgroundColor
     });
     if (wasDirty && !seenDirtyChild) {
-      if (!clipsBothAxes(childElem) || isAbsolute22) {
+      if (!clipsBothAxes(childElem) || isAbsolute23) {
         seenDirtyChild = true;
       } else {
         seenDirtyClipped = true;
@@ -353657,7 +354000,7 @@ var init_ink3 = __esm(() => {
 
 // src/capabilities/imagePaste.ts
 import { randomBytes as randomBytes12 } from "crypto";
-import { basename as basename27, extname as extname8, isAbsolute as isAbsolute22, join as join85 } from "path";
+import { basename as basename27, extname as extname8, isAbsolute as isAbsolute23, join as join85 } from "path";
 function buildLinuxClipboardCheckCommand() {
   const mimePattern = LINUX_CLIPBOARD_IMAGE_MIME_TYPES.map((mimeType) => mimeType.replace("/", "\\/")).join("|");
   return `xclip -selection clipboard -t TARGETS -o 2>/dev/null | grep -E "${mimePattern}" || wl-paste -l 2>/dev/null | grep -E "${mimePattern}"`;
@@ -353804,7 +354147,7 @@ async function tryReadImageFromPath(text) {
   const imagePath = cleanedPath;
   let imageBuffer;
   try {
-    if (isAbsolute22(imagePath)) {
+    if (isAbsolute23(imagePath)) {
       imageBuffer = getFsImplementation().readFileBytesSync(imagePath);
     } else {
       const clipboardPath = await getImagePathFromClipboard();
@@ -482433,7 +482776,7 @@ var init_usePluginAutoupdateNotification = __esm(() => {
 });
 
 // src/capabilities/plugins/reconciler.ts
-import { isAbsolute as isAbsolute23, resolve as resolve37 } from "path";
+import { isAbsolute as isAbsolute24, resolve as resolve37 } from "path";
 function diffMarketplaces(declared, materialized, opts) {
   const missing = [];
   const sourceChanged = [];
@@ -482541,7 +482884,7 @@ async function reconcileMarketplaces(opts) {
   return { installed, updated, failed, upToDate: diff2.upToDate, skipped };
 }
 function normalizeSource(source, projectRoot) {
-  if ((source.source === "directory" || source.source === "file") && !isAbsolute23(source.path)) {
+  if ((source.source === "directory" || source.source === "file") && !isAbsolute24(source.path)) {
     const base2 = projectRoot ?? getOriginalCwd();
     const canonicalRoot = findCanonicalGitRoot(base2);
     return {
@@ -492185,7 +492528,7 @@ function buildPrimarySection() {
   }, undefined, false, undefined, this);
   return [{
     label: "Version",
-    value: "0.4.22"
+    value: "0.4.24"
   }, {
     label: "Session name",
     value: nameValue
@@ -540327,7 +540670,7 @@ var init_bridge_kick = __esm(() => {
 var call58 = async () => {
   return {
     type: "text",
-    value: `${"99.0.0"} (built ${"2026-08-21T04:07:58.719Z"})`
+    value: `${"99.0.0"} (built ${"2026-09-03T09:12:13.936Z"})`
   };
 }, version2, version_default;
 var init_version = __esm(() => {
@@ -553010,7 +553353,7 @@ __export(exports_UI12, {
   renderToolUseRejectedMessage: () => renderToolUseRejectedMessage14,
   userFacingName: () => userFacingName11
 });
-import { isAbsolute as isAbsolute24, relative as relative31, resolve as resolve41 } from "path";
+import { isAbsolute as isAbsolute25, relative as relative31, resolve as resolve41 } from "path";
 function countLines(content) {
   const parts = content.split(EOL5);
   return content.endsWith(EOL5) ? parts.length - 1 : parts.length;
@@ -553334,7 +553677,7 @@ function WriteRejectionBody(t0) {
 }
 async function loadRejectionDiff2(filePath, content) {
   try {
-    const fullFilePath = isAbsolute24(filePath) ? filePath : resolve41(getCwd2(), filePath);
+    const fullFilePath = isAbsolute25(filePath) ? filePath : resolve41(getCwd2(), filePath);
     const handle = await openForScan(fullFilePath);
     if (handle === null)
       return {
@@ -558094,7 +558437,7 @@ function WelcomeV2() {
             dimColor: true,
             children: [
               "v",
-              "0.4.22",
+              "0.4.24",
               " "
             ]
           }, undefined, true, undefined, this)
@@ -558294,7 +558637,7 @@ function WelcomeV2() {
           dimColor: true,
           children: [
             "v",
-            "0.4.22",
+            "0.4.24",
             " "
           ]
         }, undefined, true, undefined, this)
@@ -558520,7 +558863,7 @@ function AppleTerminalWelcomeV2(t0) {
         dimColor: true,
         children: [
           "v",
-          "0.4.22",
+          "0.4.24",
           " "
         ]
       }, undefined, true, undefined, this);
@@ -558774,7 +559117,7 @@ function AppleTerminalWelcomeV2(t0) {
       dimColor: true,
       children: [
         "v",
-        "0.4.22",
+        "0.4.24",
         " "
       ]
     }, undefined, true, undefined, this);
@@ -569534,6 +569877,7 @@ class QueryEngine {
       includePartialMessages = false,
       agents: agents2 = [],
       setSDKStatus,
+      preDecidePermissions,
       onToolInvoke,
       uploadMedia,
       orphanedPermission
@@ -569611,7 +569955,8 @@ class QueryEngine {
         maxOutputTokensLimit,
         contextWindow,
         modelProviders: this.config.modelProviders,
-        subagentDisallowedTools: this.config.subagentDisallowedTools
+        subagentDisallowedTools: this.config.subagentDisallowedTools,
+        preDecidePermissions
       },
       getAppState,
       setAppState,
@@ -569709,7 +570054,8 @@ class QueryEngine {
         maxOutputTokensLimit,
         contextWindow,
         modelProviders: this.config.modelProviders,
-        subagentDisallowedTools: this.config.subagentDisallowedTools
+        subagentDisallowedTools: this.config.subagentDisallowedTools,
+        preDecidePermissions
       },
       getAppState,
       setAppState,
@@ -570226,6 +570572,7 @@ async function* ask({
   handleElicitation,
   agents: agents2 = [],
   setSDKStatus,
+  preDecidePermissions,
   onToolInvoke,
   uploadMedia,
   orphanedPermission
@@ -570260,6 +570607,7 @@ async function* ask({
     replayUserMessages,
     includePartialMessages,
     setSDKStatus,
+    preDecidePermissions,
     onToolInvoke,
     uploadMedia,
     abortController,
@@ -579759,7 +580107,7 @@ Usage: claude --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("0.4.22 (OpenCow)", "-v, --version", "Output the version number");
+  }).version("0.4.24 (OpenCow)", "-v, --version", "Output the version number");
   program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)");
   program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux.");
   if (canUserConfigureAdvisor()) {
@@ -580404,7 +580752,7 @@ if (false) {}
 async function main2() {
   const args = process.argv.slice(2);
   if (args.length === 1 && (args[0] === "--version" || args[0] === "-v" || args[0] === "-V")) {
-    console.log(`${"0.4.22"} (OpenCow)`);
+    console.log(`${"0.4.24"} (OpenCow)`);
     return;
   }
   if (args.includes("--provider")) {
@@ -580522,4 +580870,4 @@ async function main2() {
 }
 main2();
 
-//# debugId=42468A73C022880964756E2164756E21
+//# debugId=686B073019ED8C6564756E2164756E21