@opencow-ai/opencow-agent-sdk 0.4.25 → 0.4.27

package/dist/cli.mjs

@@ -711,21 +711,49 @@ var init_errors = __esm(() => {
 });
 
 // src/session/brandingConfig.ts
+function toProductSlug(value) {
+  const slug = value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+  return slug || PRODUCT_SLUG_FALLBACK;
+}
 function normalizeBrandName(value, fallback) {
   const normalized = value?.replace(/[\u0000-\u001f\u007f]+/g, " ").replace(/\s+/g, " ").trim();
   return normalized ? normalized.slice(0, 80) : fallback;
 }
+function optionalUrl(key, value) {
+  const trimmed = value?.trim();
+  return trimmed ? { [key]: trimmed } : {};
+}
+function validatedProductUrl(value) {
+  const trimmed = value?.trim();
+  if (!trimmed)
+    return {};
+  let protocol;
+  try {
+    protocol = new URL(trimmed).protocol;
+  } catch {
+    throw new TypeError(`branding.productUrl is not a valid URL: ${trimmed}`);
+  }
+  if (protocol !== "https:" && protocol !== "http:" || /[^\x21-\x7e]/.test(trimmed)) {
+    throw new TypeError(`branding.productUrl must be an ASCII http(s) URL: ${trimmed}`);
+  }
+  return { productUrl: trimmed };
+}
 function resolveBranding(options) {
   const productName = normalizeBrandName(options?.productName, DEFAULT_BRANDING.productName);
+  const explicitSlug = options?.productSlug?.trim();
   return Object.freeze({
     productName,
-    assistantName: normalizeBrandName(options?.assistantName, productName)
+    productSlug: toProductSlug(explicitSlug || productName),
+    assistantName: normalizeBrandName(options?.assistantName, productName),
+    ...optionalUrl("mcpOAuthClientMetadataUrl", options?.mcpOAuthClientMetadataUrl),
+    ...validatedProductUrl(options?.productUrl)
   });
 }
-var DEFAULT_BRANDING;
+var DEFAULT_BRANDING, PRODUCT_SLUG_FALLBACK = "app";
 var init_brandingConfig = __esm(() => {
   DEFAULT_BRANDING = Object.freeze({
     productName: "Agentic",
+    productSlug: "agentic",
     assistantName: "Agentic"
   });
 });
@@ -742,12 +770,17 @@ function getAssistantIdentityPrompt() {
   return `You are ${getBranding().assistantName}, an agentic coding assistant.`;
 }
 function getMcpClientInfo() {
-  const { productName } = getBranding();
+  const { productName, productSlug, productUrl } = getBranding();
   return {
+    name: productSlug,
     title: `${productName} Coding Client`,
-    description: `${productName} agentic coding client`
+    description: `${productName} agentic coding client`,
+    ...productUrl ? { websiteUrl: productUrl } : {}
   };
 }
+function getProductUserAgentToken() {
+  return getBranding().productSlug;
+}
 var brandingStorage;
 var init_branding = __esm(() => {
   init_brandingConfig();
@@ -974,6 +1007,11 @@ var init_paths = __esm(() => {
 });
 
 // src/session/layout/LayoutProfile.ts
+var exports_LayoutProfile = {};
+__export(exports_LayoutProfile, {
+  DEFAULT_LAYOUT_PROFILE: () => DEFAULT_LAYOUT_PROFILE,
+  resolveLayoutProfile: () => resolveLayoutProfile
+});
 function resolveBinding(binding) {
   if (typeof binding === "string") {
     return BUILT_IN_BINDINGS[binding];
@@ -6882,7 +6920,7 @@ function getOauthConfig() {
   }
   return config;
 }
-var CLAUDE_AI_INFERENCE_SCOPE = "user:inference", CLAUDE_AI_PROFILE_SCOPE = "user:profile", CONSOLE_SCOPE = "org:create_api_key", OAUTH_BETA_HEADER = "oauth-2025-04-20", CONSOLE_OAUTH_SCOPES, CLAUDE_AI_OAUTH_SCOPES, ALL_OAUTH_SCOPES, PROD_OAUTH_CONFIG, MCP_CLIENT_METADATA_URL = "https://claude.ai/oauth/claude-code-client-metadata", STAGING_OAUTH_CONFIG, ALLOWED_OAUTH_BASE_URLS;
+var CLAUDE_AI_INFERENCE_SCOPE = "user:inference", CLAUDE_AI_PROFILE_SCOPE = "user:profile", CONSOLE_SCOPE = "org:create_api_key", OAUTH_BETA_HEADER = "oauth-2025-04-20", CONSOLE_OAUTH_SCOPES, CLAUDE_AI_OAUTH_SCOPES, ALL_OAUTH_SCOPES, PROD_OAUTH_CONFIG, STAGING_OAUTH_CONFIG, ALLOWED_OAUTH_BASE_URLS;
 var init_oauth = __esm(() => {
   init_envUtils();
   init_envVars();
@@ -22897,7 +22935,7 @@ var GIT_ROOT_NOT_FOUND, findGitRootImpl, findGitRoot, resolveCanonicalRoot, find
   return getWorktreeCountFromFs();
 }, stashToCleanState = async (message) => {
   try {
-    const stashMessage = message || `Claude Code auto-stash - ${new Date().toISOString()}`;
+    const stashMessage = message || `${getBranding().productName} auto-stash - ${new Date().toISOString()}`;
     const { untracked } = await getFileStatus();
     if (untracked.length > 0) {
       const { code: addCode } = await execFileNoThrow(gitExe(), ["add", ...untracked], { preserveOutputOnError: false });
@@ -22924,6 +22962,7 @@ var init_git = __esm(() => {
   init_log3();
   init_memoize2();
   init_which();
+  init_branding();
   GIT_ROOT_NOT_FOUND = Symbol("git-root-not-found");
   findGitRootImpl = memoizeWithLRU((startPath) => {
     const startTime = Date.now();
@@ -25739,7 +25778,8 @@ var init_types2 = __esm(() => {
     type: literal("stdio").optional(),
     command: string2().min(1, "Command cannot be empty"),
     args: array(string2()).default([]),
-    env: record(string2(), string2()).optional()
+    env: record(string2(), string2()).optional(),
+    cwd: string2().optional()
   }));
   McpXaaConfigSchema = lazySchema(() => boolean2());
   McpOAuthConfigSchema = lazySchema(() => object({
@@ -26735,7 +26775,7 @@ var init_types3 = __esm(() => {
     allow: array(PermissionRuleSchema()).optional().describe("List of permission rules for allowed operations"),
     deny: array(PermissionRuleSchema()).optional().describe("List of permission rules for denied operations"),
     ask: array(PermissionRuleSchema()).optional().describe("List of permission rules that should always prompt for confirmation"),
-    defaultMode: _enum(EXTERNAL_PERMISSION_MODES).optional().describe("Default permission mode when Claude Code needs access"),
+    defaultMode: _enum(EXTERNAL_PERMISSION_MODES).optional().describe("Default permission mode when the agent needs access"),
     disableBypassPermissionsMode: _enum(["disable"]).optional().describe("Disable the ability to bypass permission prompts"),
     ...{},
     additionalDirectories: array(string2()).optional().describe("Additional directories to include in the permission scope")
@@ -26780,7 +26820,7 @@ var init_types3 = __esm(() => {
     "mcp"
   ];
   SettingsSchema = lazySchema(() => object({
-    $schema: literal(CLAUDE_CODE_SETTINGS_SCHEMA_URL).optional().describe("JSON Schema reference for Claude Code settings"),
+    $schema: literal(CLAUDE_CODE_SETTINGS_SCHEMA_URL).optional().describe("JSON Schema reference for settings"),
     apiKeyHelper: string2().optional().describe("Path to a script that outputs authentication values"),
     awsCredentialExport: string2().optional().describe("Path to a script that exports AWS credentials"),
     awsAuthRefresh: string2().optional().describe("Path to a script that refreshes AWS authentication"),
@@ -26788,7 +26828,7 @@ var init_types3 = __esm(() => {
     ...isEnvTruthy(resolveEnvVar("ENABLE_XAA")) ? {
       xaaIdp: object({
         issuer: string2().url().describe("IdP issuer URL for OIDC discovery"),
-        clientId: string2().describe("Claude Code's client_id registered at the IdP"),
+        clientId: string2().describe("The client_id registered at the IdP"),
         callbackPort: number2().int().positive().optional().describe("Fixed loopback callback port for the IdP OIDC login. " + "Only needed if the IdP does not honor RFC 8252 port-any matching.")
       }).optional().describe("XAA (SEP-990) IdP connection. Configure once; all XAA-enabled MCP servers reuse this.")
     } : {},
@@ -26798,10 +26838,10 @@ var init_types3 = __esm(() => {
     }).optional().describe("Custom file suggestion configuration for @ mentions"),
     respectGitignore: boolean2().optional().describe("Whether file picker should respect .gitignore files (default: true). " + "Note: .ignore files are always respected."),
     cleanupPeriodDays: number2().nonnegative().int().optional().describe("Number of days to retain chat transcripts (default: 30). Setting to 0 disables session persistence entirely: no transcripts are written and existing transcripts are deleted at startup."),
-    env: EnvironmentVariablesSchema().optional().describe("Environment variables to set for Claude Code sessions"),
+    env: EnvironmentVariablesSchema().optional().describe("Environment variables to set for agent sessions"),
     includeGitInstructions: boolean2().optional().describe("Include built-in commit and PR workflow instructions in Claude's system prompt (default: true)"),
     permissions: PermissionsSchema().optional().describe("Tool usage permissions configuration"),
-    model: string2().optional().describe("Override the default model used by Claude Code"),
+    model: string2().optional().describe("Override the default model used by the agent"),
     availableModels: array(string2()).optional().describe("Allowlist of models that users can select. " + 'Accepts family aliases ("opus" allows any opus version), ' + 'version prefixes ("opus-4-5" allows only that version), ' + "and full model IDs. " + "If undefined, all models are available. If empty array, only the default model is available. " + "Typically set in managed settings by enterprise administrators."),
     modelOverrides: record(string2(), string2()).optional().describe('Override mapping from Anthropic model ID (e.g. "claude-opus-4-6") to provider-specific ' + "model ID (e.g. a Bedrock inference profile ARN). Typically set in managed settings by " + "enterprise administrators."),
     enableAllProjectMcpServers: boolean2().optional().describe("Whether to automatically approve all MCP servers in the project"),
@@ -47761,6 +47801,63 @@ var init_toolSchemaCache = __esm(() => {
 });
 
 // src/providers/shared/auth.ts
+var exports_auth = {};
+__export(exports_auth, {
+  calculateApiKeyHelperTTL: () => calculateApiKeyHelperTTL,
+  checkAndRefreshOAuthTokenIfNeeded: () => checkAndRefreshOAuthTokenIfNeeded,
+  checkGcpCredentialsValid: () => checkGcpCredentialsValid,
+  clearApiKeyHelperCache: () => clearApiKeyHelperCache,
+  clearAwsCredentialsCache: () => clearAwsCredentialsCache,
+  clearGcpCredentialsCache: () => clearGcpCredentialsCache,
+  clearOAuthTokenCache: () => clearOAuthTokenCache,
+  getAccountInformation: () => getAccountInformation,
+  getAnthropicApiKey: () => getAnthropicApiKey,
+  getAnthropicApiKeyWithSource: () => getAnthropicApiKeyWithSource,
+  getApiKeyFromApiKeyHelper: () => getApiKeyFromApiKeyHelper,
+  getApiKeyFromApiKeyHelperCached: () => getApiKeyFromApiKeyHelperCached,
+  getApiKeyFromConfigOrMacOSKeychain: () => getApiKeyFromConfigOrMacOSKeychain,
+  getApiKeyHelperElapsedMs: () => getApiKeyHelperElapsedMs,
+  getAuthTokenSource: () => getAuthTokenSource,
+  getClaudeAIOAuthTokens: () => getClaudeAIOAuthTokens,
+  getClaudeAIOAuthTokensAsync: () => getClaudeAIOAuthTokensAsync,
+  getConfiguredApiKeyHelper: () => getConfiguredApiKeyHelper,
+  getOauthAccountInfo: () => getOauthAccountInfo,
+  getOtelHeadersFromHelper: () => getOtelHeadersFromHelper,
+  getRateLimitTier: () => getRateLimitTier,
+  getSubscriptionName: () => getSubscriptionName,
+  getSubscriptionType: () => getSubscriptionType,
+  handleOAuth401Error: () => handleOAuth401Error,
+  hasAnthropicApiKeyAuth: () => hasAnthropicApiKeyAuth,
+  hasOpusAccess: () => hasOpusAccess,
+  hasProfileScope: () => hasProfileScope,
+  is1PApiCustomer: () => is1PApiCustomer,
+  isAnthropicAuthEnabled: () => isAnthropicAuthEnabled,
+  isAwsAuthRefreshFromProjectSettings: () => isAwsAuthRefreshFromProjectSettings,
+  isAwsCredentialExportFromProjectSettings: () => isAwsCredentialExportFromProjectSettings,
+  isClaudeAISubscriber: () => isClaudeAISubscriber,
+  isConsumerSubscriber: () => isConsumerSubscriber,
+  isCustomApiKeyApproved: () => isCustomApiKeyApproved,
+  isEnterpriseSubscriber: () => isEnterpriseSubscriber,
+  isGcpAuthRefreshFromProjectSettings: () => isGcpAuthRefreshFromProjectSettings,
+  isMaxSubscriber: () => isMaxSubscriber,
+  isOtelHeadersHelperFromProjectOrLocalSettings: () => isOtelHeadersHelperFromProjectOrLocalSettings,
+  isOverageProvisioningAllowed: () => isOverageProvisioningAllowed,
+  isProSubscriber: () => isProSubscriber,
+  isTeamPremiumSubscriber: () => isTeamPremiumSubscriber,
+  isTeamSubscriber: () => isTeamSubscriber,
+  isUsing3PServices: () => isUsing3PServices,
+  prefetchApiKeyFromApiKeyHelperIfSafe: () => prefetchApiKeyFromApiKeyHelperIfSafe,
+  prefetchAwsCredentialsAndBedRockInfoIfSafe: () => prefetchAwsCredentialsAndBedRockInfoIfSafe,
+  prefetchGcpCredentialsIfSafe: () => prefetchGcpCredentialsIfSafe,
+  refreshAndGetAwsCredentials: () => refreshAndGetAwsCredentials,
+  refreshAwsAuth: () => refreshAwsAuth,
+  refreshGcpAuth: () => refreshGcpAuth,
+  refreshGcpCredentialsIfNeeded: () => refreshGcpCredentialsIfNeeded,
+  removeApiKey: () => removeApiKey,
+  saveApiKey: () => saveApiKey,
+  saveOAuthTokensIfNeeded: () => saveOAuthTokensIfNeeded,
+  validateForceLoginOrg: () => validateForceLoginOrg
+});
 import { exec } from "child_process";
 import { join as join18 } from "path";
 function isManagedOAuthContext() {
@@ -48350,6 +48447,11 @@ async function saveApiKey(apiKey) {
   getApiKeyFromConfigOrMacOSKeychain.cache.clear?.();
   clearLegacyApiKeyPrefetch();
 }
+function isCustomApiKeyApproved(apiKey) {
+  const config = getGlobalConfig();
+  const normalizedKey = normalizeApiKeyForConfig(apiKey);
+  return config.customApiKeyResponses?.approved?.includes(normalizedKey) ?? false;
+}
 async function removeApiKey() {
   await maybeRemoveApiKeyFromMacOSKeychain();
   saveGlobalConfig((current) => ({
@@ -48588,6 +48690,10 @@ function isOverageProvisioningAllowed() {
   }
   return true;
 }
+function hasOpusAccess() {
+  const subscriptionType = getSubscriptionType();
+  return subscriptionType === "max" || subscriptionType === "enterprise" || subscriptionType === "team" || subscriptionType === "pro" || subscriptionType === null;
+}
 function getSubscriptionType() {
   if (shouldUseMockSubscription()) {
     return getMockSubscriptionType();
@@ -49569,11 +49675,6 @@ function parseAnthropicStreamChunk(chunk) {
   return [chunk];
 }
 
-// src/providers/shared/userAgent.ts
-function getClaudeCodeUserAgent() {
-  return `claude-code/${"99.0.0"}`;
-}
-
 // src/session/workloadContext.ts
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "async_hooks";
 function getWorkload() {
@@ -49608,11 +49709,12 @@ function getMCPUserAgent() {
     parts.push(`client-app/${process.env.CLAUDE_AGENT_SDK_CLIENT_APP}`);
   }
   const suffix = parts.length > 0 ? ` (${parts.join(", ")})` : "";
-  return `claude-code/${"99.0.0"}${suffix}`;
+  return `${getProductUserAgentToken()}/${"99.0.0"}${suffix}`;
 }
 function getWebFetchUserAgent() {
-  const supportUrl = isFamily(getProvider(), "firstParty") ? "https://support.anthropic.com/" : "https://github.com/Gitlawb/opencow";
-  return `Claude-User (${getClaudeCodeUserAgent()}; +${supportUrl})`;
+  const { productSlug, productUrl } = getBranding();
+  const contact = productUrl ? `; +${productUrl}` : "";
+  return `${productSlug}-User (${productSlug}/${"99.0.0"}${contact})`;
 }
 function getAuthHeaders() {
   if (isClaudeAISubscriber()) {
@@ -49666,6 +49768,7 @@ var init_http2 = __esm(() => {
   init_auth();
   init_state();
   init_workloadContext();
+  init_branding();
 });
 
 // src/providers/shared/model/providers.ts
@@ -80953,7 +81056,7 @@ function buildQueryContextFromSdk(options) {
   const memoryBaseDir = resolveEnvVar("REMOTE_MEMORY_DIR") ?? configHomeDir;
   const autoMemEnvOverride = resolveEnvVar("MEMORY_PATH_OVERRIDE");
   const autoMemSettingsOverride = resolvedFileSystemLayer === "disabled" ? undefined : readAutoMemSettingsOverride();
-  init_managedPath();
+  const { getManagedFilePath } = (init_managedPath(), __toCommonJS(exports_managedPath));
   const paths = computeSessionPaths({
     cwd,
     projectRoot: cwd,
@@ -81056,6 +81159,7 @@ function buildQueryContextFromSdk(options) {
         loaded: createSignal()
       },
       pluginDataPaths: new Map,
+      pluginContentVariables: {},
       lspManager: null
     },
     diagnostics: createFreshDiagnostics(),
@@ -81692,11 +81796,22 @@ function resetSdkInitState() {
   r.initJsonSchema = null;
   r.registeredHooks = null;
 }
-function setExplicitPluginRuntimeContext(dataPaths, lspManager) {
+function setExplicitPluginRuntimeContext(dataPaths, lspManager, contentVariables) {
   const registries = getQueryContext().registries;
   registries.pluginDataPaths = new Map(dataPaths);
+  registries.pluginContentVariables = { ...contentVariables };
   registries.lspManager = lspManager;
 }
+function setExplicitPluginRuntimeBundle(bundle) {
+  setExplicitPluginRuntimeContext(bundle.dataPaths, bundle.lspManager, bundle.contentVariables ?? {});
+}
+function tryGetPluginContentVariables() {
+  try {
+    return getQueryContext().registries.pluginContentVariables;
+  } catch {
+    return {};
+  }
+}
 function tryGetExplicitPluginDataPath(pluginId) {
   try {
     return getQueryContext().registries.pluginDataPaths.get(pluginId);
@@ -82162,6 +82277,7 @@ __export(exports_state, {
   setCwdState: () => setCwdState,
   setDirectConnectServerUrl: () => setDirectConnectServerUrl,
   setEnvVar: () => setEnvVar,
+  setExplicitPluginRuntimeBundle: () => setExplicitPluginRuntimeBundle,
   setExplicitPluginRuntimeContext: () => setExplicitPluginRuntimeContext,
   setFastModeHeaderLatched: () => setFastModeHeaderLatched,
   setFlagSettingsInline: () => setFlagSettingsInline,
@@ -82198,6 +82314,7 @@ __export(exports_state, {
   snapshotOutputTokensForTurn: () => snapshotOutputTokensForTurn,
   switchSession: () => switchSession,
   tryGetExplicitPluginDataPath: () => tryGetExplicitPluginDataPath,
+  tryGetPluginContentVariables: () => tryGetPluginContentVariables,
   tryGetQueryContext: () => tryGetQueryContext,
   tryGetSessionLspManager: () => tryGetSessionLspManager,
   unregisterCreatedTeam: () => unregisterCreatedTeam
@@ -82313,7 +82430,7 @@ function setMeter(meter, createCounter) {
     description: "Number of git commits created"
   });
   STATE.costCounter = createCounter("claude_code.cost.usage", {
-    description: "Cost of the Claude Code session",
+    description: "Cost of the agent session",
     unit: "USD"
   });
   STATE.tokenCounter = createCounter("claude_code.token.usage", {
@@ -83882,6 +83999,11 @@ var init_platform2 = __esm(() => {
 });
 
 // src/session/settings/managedPath.ts
+var exports_managedPath = {};
+__export(exports_managedPath, {
+  getManagedFilePath: () => getManagedFilePath,
+  getManagedSettingsDropInDir: () => getManagedSettingsDropInDir
+});
 import { join as join22 } from "path";
 var getManagedFilePath, getManagedSettingsDropInDir;
 var init_managedPath = __esm(() => {
@@ -84078,8 +84200,8 @@ function createBootQueryContext() {
   }
   const sessionId = randomUUID();
   init_paths();
-  init_LayoutProfile();
-  init_managedPath();
+  const { DEFAULT_LAYOUT_PROFILE } = (init_LayoutProfile(), __toCommonJS(exports_LayoutProfile));
+  const { getManagedFilePath } = (init_managedPath(), __toCommonJS(exports_managedPath));
   const { homedir } = __require("node:os");
   const bootConfigHomeDir = process.env.CLAUDE_CONFIG_DIR ? process.env.CLAUDE_CONFIG_DIR.normalize("NFC") : (homedir() + "/.opencow").normalize("NFC");
   const bootMemoryBaseDir = resolveEnvVar("REMOTE_MEMORY_DIR") ?? bootConfigHomeDir;
@@ -84184,6 +84306,7 @@ function createBootQueryContext() {
         loaded: createSignal()
       },
       pluginDataPaths: new Map,
+      pluginContentVariables: {},
       lspManager: null
     },
     diagnostics: createFreshDiagnostics(),
@@ -84275,6 +84398,7 @@ function deriveSubagentRegistries(parent) {
     skillListingSuppressNext: false,
     dynamicSkills: parent.dynamicSkills,
     pluginDataPaths: parent.pluginDataPaths,
+    pluginContentVariables: parent.pluginContentVariables,
     lspManager: parent.lspManager
   };
 }
@@ -84555,6 +84679,7 @@ var init_envVars = __esm(() => {
     DISABLE_EARLY_INPUT: envVar("OPENCOW_DISABLE_EARLY_INPUT"),
     ENABLE_EXTENDED_KEYS: envVar("OPENCOW_ENABLE_EXTENDED_KEYS"),
     ENABLE_STREAM_WATCHDOG: envVar("OPENCOW_ENABLE_STREAM_WATCHDOG"),
+    SKILL_LISTING: envVar("OPENCOW_SKILL_LISTING"),
     STREAM_IDLE_TIMEOUT_MS: envVar("OPENCOW_STREAM_IDLE_TIMEOUT_MS"),
     UNBOUNDED_CONNECTION_RETRY: envVar("OPENCOW_UNBOUNDED_CONNECTION_RETRY"),
     STREAM_REPLAY_RETRIES: envVar("OPENCOW_STREAM_REPLAY_RETRIES"),
@@ -86601,7 +86726,7 @@ function printStartupScreen() {
   const sLen = ` ● ${sL}    Ready — type /help to begin`.length;
   out.push(boxRow(sRow, W, sLen));
   out.push(`${rgb(...BORDER)}╚${"═".repeat(W - 2)}╝${RESET}`);
-  out.push(`  ${DIM}${rgb(...DIMCOL)}opencow ${RESET}${rgb(...ACCENT)}v${"0.4.25"}${RESET}`);
+  out.push(`  ${DIM}${rgb(...DIMCOL)}opencow ${RESET}${rgb(...ACCENT)}v${"0.4.27"}${RESET}`);
   out.push("");
   process.stdout.write(out.join(`
 `) + `
@@ -87643,7 +87768,7 @@ function getRemoteSessionUrl(sessionId, ingressUrl) {
   const baseUrl = getClaudeAiBaseUrl(compatId, ingressUrl);
   return `${baseUrl}/code/${compatId}`;
 }
-var PRODUCT_URL = "https://claude.com/claude-code", TELEMETRY_SERVICE_NAME = "claude-code", CLAUDE_AI_BASE_URL = "https://claude.ai", CLAUDE_AI_STAGING_BASE_URL = "https://claude-ai.staging.ant.dev", CLAUDE_AI_LOCAL_BASE_URL = "http://localhost:4000";
+var TELEMETRY_SERVICE_NAME = "claude-code", CLAUDE_AI_BASE_URL = "https://claude.ai", CLAUDE_AI_STAGING_BASE_URL = "https://claude-ai.staging.ant.dev", CLAUDE_AI_LOCAL_BASE_URL = "http://localhost:4000";
 
 // src/constants/system.ts
 function isCLISyspromptPrefix(value) {
@@ -106085,6 +106210,7 @@ var init_TaskOutput = __esm(() => {
   init_stringUtils();
   init_diskOutput();
   init_fsOperations();
+  init_branding();
   DEFAULT_MAX_MEMORY = 8 * 1024 * 1024;
   TaskOutput = class TaskOutput {
     taskId;
@@ -106272,7 +106398,7 @@ Output truncated (${sizeKB}KB total). Full output saved to: ${this.path}`;
       } catch (err) {
         const code = err instanceof Error && "code" in err ? String(err.code) : "unknown";
         logForDebugging2(`TaskOutput.#readStdoutFromFile: failed to read ${this.path} (${code}): ${err}`);
-        return `<bash output unavailable: output file ${this.path} could not be read (${code}). This usually means another Claude Code process in the same project deleted it during startup cleanup.>`;
+        return `<bash output unavailable: output file ${this.path} could not be read (${code}). This usually means another ${getBranding().productName} process in the same project deleted it during startup cleanup.>`;
       }
     }
     getStderr() {
@@ -110052,7 +110178,7 @@ var LITERAL_BACKSLASH = "\\", SNAPSHOT_CREATION_TIMEOUT = 1e4, VCS_DIRECTORIES_T
       logForDebugging2(`Looking for shell config file: ${configFile}`);
       const configFileExists = await pathExists(configFile);
       if (!configFileExists) {
-        logForDebugging2(`Shell config file not found: ${configFile}, creating snapshot with Claude Code defaults only`);
+        logForDebugging2(`Shell config file not found: ${configFile}, creating snapshot with ${getBranding().productName} defaults only`);
       }
       const timestamp = Date.now();
       const randomId = Math.random().toString(36).substring(2, 8);
@@ -110165,6 +110291,7 @@ var init_ShellSnapshot = __esm(() => {
   init_subprocessEnv();
   init_shellQuote();
   init_state();
+  init_branding();
   VCS_DIRECTORIES_TO_EXCLUDE = [
     ".git",
     ".svn",
@@ -131694,11 +131821,11 @@ function getPluginErrorMessage(error) {
 }
 
 // src/capabilities/mcp/envExpansion.ts
-function expandEnvVarsInString(value) {
+function expandEnvVarsInString(value, env = process.env) {
   const missingVars = [];
   const expanded = value.replace(/\$\{([^}]+)\}/g, (match, varContent) => {
     const [varName, defaultValue] = varContent.split(":-", 2);
-    const envValue = process.env[varName];
+    const envValue = env[varName];
     if (envValue !== undefined) {
       return envValue;
     }
@@ -131714,6 +131841,61 @@ function expandEnvVarsInString(value) {
   };
 }
 
+// src/capabilities/mcp/codexConfigFields.ts
+function isPlainObject6(value) {
+  return !!value && typeof value === "object" && !Array.isArray(value);
+}
+function setMissing(record, key, value) {
+  if (record[key] !== undefined)
+    return;
+  record[key] = value;
+}
+function recordFor(config, key) {
+  const existing = config[key];
+  if (isPlainObject6(existing))
+    return existing;
+  const created = {};
+  config[key] = created;
+  return created;
+}
+function stringRecordEntries(value) {
+  if (!isPlainObject6(value))
+    return [];
+  return Object.entries(value).filter((entry) => typeof entry[1] === "string");
+}
+function normalizeCodexMcpFields(input) {
+  if (!isPlainObject6(input))
+    return {};
+  const config = structuredClone(input);
+  const envVars = config["env_vars"];
+  if (Array.isArray(envVars)) {
+    for (const name of envVars.filter((item) => typeof item === "string")) {
+      setMissing(recordFor(config, "env"), name, `\${${name}}`);
+    }
+    delete config["env_vars"];
+  }
+  const envHttpHeaders = config["env_http_headers"];
+  if (isPlainObject6(envHttpHeaders)) {
+    for (const [header, varName] of stringRecordEntries(envHttpHeaders)) {
+      setMissing(recordFor(config, "headers"), header, `\${${varName}}`);
+    }
+    delete config["env_http_headers"];
+  }
+  const bearer = config["bearer_token_env_var"];
+  if (typeof bearer === "string" && bearer.trim()) {
+    setMissing(recordFor(config, "headers"), "Authorization", `Bearer \${${bearer.trim()}}`);
+    delete config["bearer_token_env_var"];
+  }
+  const httpHeaders = config["http_headers"];
+  if (isPlainObject6(httpHeaders)) {
+    for (const [header, value] of stringRecordEntries(httpHeaders)) {
+      setMissing(recordFor(config, "headers"), header, value);
+    }
+    delete config["http_headers"];
+  }
+  return config;
+}
+
 // native-stub:@anthropic-ai/mcpb
 var exports_mcpb = {};
 __export(exports_mcpb, {
@@ -135124,6 +135306,11 @@ function substitutePluginVariables(value, plugin) {
   }
   return out;
 }
+function substitutePluginContentVariables(value, variables = tryGetPluginContentVariables()) {
+  if (Object.keys(variables).length === 0)
+    return value;
+  return value.replace(/\$\{([A-Z][A-Z0-9_]*)\}/g, (match, name) => Object.hasOwn(variables, name) ? variables[name] : match);
+}
 function substituteUserConfigVariables(value, userConfig) {
   return value.replace(/\$\{user_config\.([^}]+)\}/g, (_match, key) => {
     const configValue = userConfig[key];
@@ -135167,7 +135354,7 @@ var init_pluginOptionsStorage = __esm(() => {
 });
 
 // src/capabilities/plugins/mcpPluginIntegration.ts
-import { join as join47 } from "path";
+import { join as join47, resolve as resolvePath } from "path";
 async function loadMcpServersFromMcpb(plugin, mcpbPath, errors) {
   try {
     logForDebugging2(`Loading MCP servers from MCPB: ${mcpbPath}`);
@@ -135298,7 +135485,7 @@ async function loadMcpServersFromFile(pluginPath, relativePath, errors, plugin,
     const mcpServers = parsed.mcpServers || parsed;
     const validatedServers = {};
     for (const [name, config] of Object.entries(mcpServers)) {
-      const result = McpServerConfigSchema().safeParse(config);
+      const result = McpServerConfigSchema().safeParse(normalizeCodexMcpFields(config));
       if (result.success) {
         validatedServers[name] = result.data;
       } else {
@@ -135379,12 +135566,13 @@ function buildMcpUserConfig(plugin, serverName) {
 }
 function resolvePluginMcpEnvironment(config, plugin, userConfig, errors, pluginName, serverName) {
   const allMissingVars = [];
+  const envLookup = plugin.env ? { ...process.env, ...plugin.env } : process.env;
   const resolveValue = (value) => {
     let resolved = substitutePluginVariables(value, plugin);
     if (userConfig) {
       resolved = substituteUserConfigVariables(resolved, userConfig);
     }
-    const { expanded, missingVars } = expandEnvVarsInString(resolved);
+    const { expanded, missingVars } = expandEnvVarsInString(resolved, envLookup);
     allMissingVars.push(...missingVars);
     return expanded;
   };
@@ -135399,6 +135587,9 @@ function resolvePluginMcpEnvironment(config, plugin, userConfig, errors, pluginN
       if (stdioConfig.args) {
         stdioConfig.args = stdioConfig.args.map((arg) => resolveValue(arg));
       }
+      if (stdioConfig.cwd) {
+        stdioConfig.cwd = resolvePath(plugin.path, resolveValue(stdioConfig.cwd));
+      }
       const resolvedEnv = {
         CLAUDE_PLUGIN_ROOT: plugin.path,
         CLAUDE_PLUGIN_DATA: plugin.dataPath ?? getPluginDataDir(plugin.source),
@@ -136123,160 +136314,6 @@ var init_agentMemorySnapshot = __esm(() => {
   }));
 });
 
-// src/capabilities/tools/AgentTool/built-in/claudeCodeGuideAgent.ts
-function getClaudeCodeGuideBasePrompt() {
-  const localSearchHint = hasEmbeddedSearchTools() ? `${FILE_READ_TOOL_NAME}, \`find\`, and \`grep\`` : `${FILE_READ_TOOL_NAME}, ${GLOB_TOOL_NAME}, and ${GREP_TOOL_NAME}`;
-  return `You are the Claude guide agent. Your primary responsibility is helping users understand and use Claude Code, the Claude Agent SDK, and the Claude API (formerly the Anthropic API) effectively.
-
-**Your expertise spans three domains:**
-
-1. **Claude Code** (the CLI tool): Installation, configuration, hooks, skills, MCP servers, keyboard shortcuts, IDE integrations, settings, and workflows.
-
-2. **Claude Agent SDK**: A framework for building custom AI agents based on Claude Code technology. Available for Node.js/TypeScript and Python.
-
-3. **Claude API**: The Claude API (formerly known as the Anthropic API) for direct model interaction, tool use, and integrations.
-
-**Documentation sources:**
-
-- **Claude Code docs** (${CLAUDE_CODE_DOCS_MAP_URL}): Fetch this for questions about the Claude Code CLI tool, including:
-  - Installation, setup, and getting started
-  - Hooks (pre/post command execution)
-  - Custom skills
-  - MCP server configuration
-  - IDE integrations (VS Code, JetBrains)
-  - Settings files and configuration
-  - Keyboard shortcuts and hotkeys
-  - Subagents and plugins
-  - Sandboxing and security
-
-- **Claude Agent SDK docs** (${CDP_DOCS_MAP_URL}): Fetch this for questions about building agents with the SDK, including:
-  - SDK overview and getting started (Python and TypeScript)
-  - Agent configuration + custom tools
-  - Session management and permissions
-  - MCP integration in agents
-  - Hosting and deployment
-  - Cost tracking and context management
-  Note: Agent SDK docs are part of the Claude API documentation at the same URL.
-
-- **Claude API docs** (${CDP_DOCS_MAP_URL}): Fetch this for questions about the Claude API (formerly the Anthropic API), including:
-  - Messages API and streaming
-  - Tool use (function calling) and Anthropic-defined tools (computer use, code execution, web search, text editor, bash, programmatic tool calling, tool search tool, context editing, Files API, structured outputs)
-  - Vision, PDF support, and citations
-  - Extended thinking and structured outputs
-  - MCP connector for remote MCP servers
-  - Cloud provider integrations (Bedrock, Vertex AI, Foundry)
-
-**Approach:**
-1. Determine which domain the user's question falls into
-2. Use ${WEB_FETCH_TOOL_NAME} to fetch the appropriate docs map
-3. Identify the most relevant documentation URLs from the map
-4. Fetch the specific documentation pages
-5. Provide clear, actionable guidance based on official documentation
-6. Use ${WEB_SEARCH_TOOL_NAME} if docs don't cover the topic
-7. Reference local project files (CLAUDE.md, .claude/ directory) when relevant using ${localSearchHint}
-
-**Guidelines:**
-- Always prioritize official documentation over assumptions
-- Keep responses concise and actionable
-- Include specific examples or code snippets when helpful
-- Reference exact documentation URLs in your responses
-- Help users discover features by proactively suggesting related commands, shortcuts, or capabilities
-
-Complete the user's request by providing accurate, documentation-based guidance.`;
-}
-function getFeedbackGuideline() {
-  if (isUsing3PServices()) {
-    return `- When you cannot find an answer or the feature doesn't exist, direct the user to ${"report the issue at https://github.com/anthropics/claude-code/issues"}`;
-  }
-  return "- When you cannot find an answer or the feature doesn't exist, direct the user to use /feedback to report a feature request or bug";
-}
-var CLAUDE_CODE_DOCS_MAP_URL = "https://code.claude.com/docs/en/claude_code_docs_map.md", CDP_DOCS_MAP_URL = "https://platform.claude.com/llms.txt", CLAUDE_CODE_GUIDE_AGENT_TYPE = "claude-code-guide", CLAUDE_CODE_GUIDE_AGENT;
-var init_claudeCodeGuideAgent = __esm(() => {
-  init_auth();
-  init_embeddedTools();
-  init_settings2();
-  init_slowOperations();
-  CLAUDE_CODE_GUIDE_AGENT = {
-    agentType: CLAUDE_CODE_GUIDE_AGENT_TYPE,
-    whenToUse: `Use this agent when the user asks questions ("Can Claude...", "Does Claude...", "How do I...") about: (1) Claude Code (the CLI tool) - features, hooks, slash commands, MCP servers, settings, IDE integrations, keyboard shortcuts; (2) Claude Agent SDK - building custom agents; (3) Claude API (formerly Anthropic API) - API usage, tool use, Anthropic SDK usage. **IMPORTANT:** Before spawning a new agent, check if there is already a running or recently completed claude-code-guide agent that you can continue via ${SEND_MESSAGE_TOOL_NAME}.`,
-    tools: hasEmbeddedSearchTools() ? [
-      BASH_TOOL_NAME,
-      FILE_READ_TOOL_NAME,
-      WEB_FETCH_TOOL_NAME,
-      WEB_SEARCH_TOOL_NAME
-    ] : [
-      GLOB_TOOL_NAME,
-      GREP_TOOL_NAME,
-      FILE_READ_TOOL_NAME,
-      WEB_FETCH_TOOL_NAME,
-      WEB_SEARCH_TOOL_NAME
-    ],
-    source: "built-in",
-    baseDir: "built-in",
-    model: "haiku",
-    permissionMode: "dontAsk",
-    getSystemPrompt({ toolUseContext }) {
-      const commands = toolUseContext.options.commands;
-      const contextSections = [];
-      const customCommands = commands.filter((cmd) => cmd.type === "prompt");
-      if (customCommands.length > 0) {
-        const commandList = customCommands.map((cmd) => `- /${cmd.name}: ${cmd.description}`).join(`
-`);
-        contextSections.push(`**Available custom skills in this project:**
-${commandList}`);
-      }
-      const customAgents = toolUseContext.options.agentDefinitions.activeAgents.filter((a) => a.source !== "built-in");
-      if (customAgents.length > 0) {
-        const agentList = customAgents.map((a) => `- ${a.agentType}: ${a.whenToUse}`).join(`
-`);
-        contextSections.push(`**Available custom agents configured:**
-${agentList}`);
-      }
-      const mcpClients = toolUseContext.options.mcpClients;
-      if (mcpClients && mcpClients.length > 0) {
-        const mcpList = mcpClients.map((client) => `- ${client.name}`).join(`
-`);
-        contextSections.push(`**Configured MCP servers:**
-${mcpList}`);
-      }
-      const pluginCommands = commands.filter((cmd) => cmd.type === "prompt" && cmd.source === "plugin");
-      if (pluginCommands.length > 0) {
-        const pluginList = pluginCommands.map((cmd) => `- /${cmd.name}: ${cmd.description}`).join(`
-`);
-        contextSections.push(`**Available plugin skills:**
-${pluginList}`);
-      }
-      const settings = getSettings_DEPRECATED();
-      if (Object.keys(settings).length > 0) {
-        const settingsJson = jsonStringify(settings, null, 2);
-        contextSections.push(`**User's settings.json:**
-\`\`\`json
-${settingsJson}
-\`\`\``);
-      }
-      const feedbackGuideline = getFeedbackGuideline();
-      const basePromptWithFeedback = `${getClaudeCodeGuideBasePrompt()}
-${feedbackGuideline}`;
-      if (contextSections.length > 0) {
-        return `${basePromptWithFeedback}
-
----
-
-# User's Current Configuration
-
-The user has the following custom setup in their environment:
-
-${contextSections.join(`
-
-`)}
-
-When answering questions, consider these configured features and proactively suggest them when relevant.`;
-      }
-      return basePromptWithFeedback;
-    }
-  };
-});
-
 // src/capabilities/tools/AgentTool/built-in/exploreAgent.ts
 function getExploreSystemPrompt() {
   const embedded = hasEmbeddedSearchTools();
@@ -136743,17 +136780,12 @@ function getBuiltInAgents() {
   if (areExplorePlanAgentsEnabled()) {
     agents.push(EXPLORE_AGENT, PLAN_AGENT);
   }
-  const isNonSdkEntrypoint = resolveEnvVar("ENTRYPOINT") !== "sdk-ts" && resolveEnvVar("ENTRYPOINT") !== "sdk-py" && resolveEnvVar("ENTRYPOINT") !== "sdk-cli";
-  if (isNonSdkEntrypoint) {
-    agents.push(CLAUDE_CODE_GUIDE_AGENT);
-  }
   if (false) {}
   return agents;
 }
 var init_builtInAgents = __esm(() => {
   init_state2();
   init_envUtils();
-  init_claudeCodeGuideAgent();
   init_exploreAgent();
   init_generalPurposeAgent();
   init_planAgent();
@@ -138729,7 +138761,7 @@ function getErrorMessageIfRefusal(stopReason, model) {
   }
   logEvent("tengu_refusal_api_response", {});
   const usagePolicyUrl = isFamily(getProvider(), "firstParty") ? "https://www.anthropic.com/legal/aup" : "your provider's acceptable use policy";
-  const baseMessage = getIsNonInteractiveSession() ? `${API_ERROR_MESSAGE_PREFIX}: Claude Code is unable to respond to this request, which appears to violate our Usage Policy (${usagePolicyUrl}). Try rephrasing the request or attempting a different approach.` : `${API_ERROR_MESSAGE_PREFIX}: Claude Code is unable to respond to this request, which appears to violate our Usage Policy (${usagePolicyUrl}). Please double press esc to edit your last message or start a new session for Claude Code to assist with a different task.`;
+  const baseMessage = getIsNonInteractiveSession() ? `${API_ERROR_MESSAGE_PREFIX}: ${getBranding().productName} is unable to respond to this request, which appears to violate our Usage Policy (${usagePolicyUrl}). Try rephrasing the request or attempting a different approach.` : `${API_ERROR_MESSAGE_PREFIX}: ${getBranding().productName} is unable to respond to this request, which appears to violate our Usage Policy (${usagePolicyUrl}). Please double press esc to edit your last message or start a new session for ${getBranding().productName} to assist with a different task.`;
   const modelSuggestion = model !== "claude-sonnet-4-20250514" ? " If you are seeing this refusal repeatedly, try running /model claude-sonnet-4-20250514 to switch models." : "";
   return createAssistantAPIErrorMessage({
     content: baseMessage + modelSuggestion,
@@ -138776,6 +138808,7 @@ var init_errors8 = __esm(() => {
   init_claudeAiLimits();
   init_mocking();
   init_errorUtils();
+  init_branding();
 });
 
 // src/providers/shared/retry.ts
@@ -231233,12 +231266,11 @@ async function* runPostToolUseFailureHooks(toolUseContext, tool, toolUseID, mess
 }
 async function resolveHookPermissionDecision(hookPermissionResult, tool, input, toolUseContext, canUseTool, assistantMessage, toolUseID) {
   const requiresInteraction = tool.requiresUserInteraction?.();
-  const requireCanUseTool = toolUseContext.requireCanUseTool;
   if (hookPermissionResult?.behavior === "allow") {
     const hookInput = hookPermissionResult.updatedInput ?? input;
     const interactionSatisfied = requiresInteraction && hookPermissionResult.updatedInput !== undefined;
-    if (requiresInteraction && !interactionSatisfied || requireCanUseTool) {
-      logForDebugging2(`Hook approved tool use for ${tool.name}, but canUseTool is required`);
+    if (!interactionSatisfied) {
+      logForDebugging2(`Hook approved tool use for ${tool.name}, deferring final decision to canUseTool`);
       return {
         decision: await consumePermissionPreDecision(toolUseContext, toolUseID, hookInput, () => canUseTool(tool, hookInput, toolUseContext, assistantMessage, toolUseID)),
         input: hookInput
@@ -231246,7 +231278,7 @@ async function resolveHookPermissionDecision(hookPermissionResult, tool, input,
     }
     const ruleCheck = await checkRuleBasedPermissions(tool, hookInput, toolUseContext);
     if (ruleCheck === null) {
-      logForDebugging2(interactionSatisfied ? `Hook satisfied user interaction for ${tool.name} via updatedInput` : `Hook approved tool use for ${tool.name}, bypassing permission prompt`);
+      logForDebugging2(`Hook satisfied user interaction for ${tool.name} via updatedInput`);
       return { decision: hookPermissionResult, input: hookInput };
     }
     if (ruleCheck.behavior === "deny") {
@@ -235127,7 +235159,7 @@ function getAnthropicEnvMetadata() {
 function getBuildAgeMinutes() {
   if (false)
     ;
-  const buildTime = new Date("2026-10-09T14:01:34.561Z").getTime();
+  const buildTime = new Date("2026-10-20T14:00:47.620Z").getTime();
   if (isNaN(buildTime))
     return;
   return Math.floor((Date.now() - buildTime) / 60000);
@@ -237447,7 +237479,7 @@ function hookSourceDescriptionDisplayString(source) {
     case "sessionHook":
       return "Session hooks (in-memory, temporary)";
     case "builtinHook":
-      return "Built-in hooks (registered internally by Claude Code)";
+      return "Built-in hooks (registered internally)";
     default:
       return source;
   }
@@ -239714,6 +239746,11 @@ NOTE: You just closed out 3+ tasks and none of them was a verification step. Bef
   });
 });
 
+// src/providers/shared/userAgent.ts
+function getClaudeCodeUserAgent() {
+  return `claude-code/${"99.0.0"}`;
+}
+
 // src/providers/anthropic/policyLimits/types.ts
 var PolicyLimitsResponseSchema;
 var init_types8 = __esm(() => {
@@ -242195,7 +242232,8 @@ var init_coreSchemas = __esm(() => {
     type: literal("stdio").optional(),
     command: string2(),
     args: array(string2()).optional(),
-    env: record(string2(), string2()).optional()
+    env: record(string2(), string2()).optional(),
+    cwd: string2().optional()
   }));
   McpSSEServerConfigSchema2 = lazySchema(() => object({
     type: literal("sse"),
@@ -248610,7 +248648,7 @@ function validateCommandPaths(command, args, cwd, toolPermissionContext, compoun
   if (validator && !validator(args)) {
     return {
       behavior: "ask",
-      message: `${command} with flags requires manual approval to ensure path safety. For security, Claude Code cannot automatically validate ${command} commands that use flags, as some flags like --target-directory=PATH can bypass path validation.`,
+      message: `${command} with flags requires manual approval to ensure path safety. For security, ${getBranding().productName} cannot automatically validate ${command} commands that use flags, as some flags like --target-directory=PATH can bypass path validation.`,
       decisionReason: {
         type: "other",
         reason: `${command} command with flags requires manual approval`
@@ -248620,7 +248658,7 @@ function validateCommandPaths(command, args, cwd, toolPermissionContext, compoun
   if (compoundCommandHasCd && operationType !== "read") {
     return {
       behavior: "ask",
-      message: `Commands that change directories and perform write operations require explicit approval to ensure paths are evaluated correctly. For security, Claude Code cannot automatically determine the final working directory when 'cd' is used in compound commands.`,
+      message: `Commands that change directories and perform write operations require explicit approval to ensure paths are evaluated correctly. For security, ${getBranding().productName} cannot automatically determine the final working directory when 'cd' is used in compound commands.`,
       decisionReason: {
         type: "other",
         reason: "Compound command contains cd with write operation - manual approval required to prevent path resolution bypass"
@@ -248632,7 +248670,7 @@ function validateCommandPaths(command, args, cwd, toolPermissionContext, compoun
     if (!allowed) {
       const workingDirs = Array.from(allWorkingDirectories(toolPermissionContext));
       const dirListStr = formatDirectoryList(workingDirs);
-      const message = decisionReason?.type === "other" || decisionReason?.type === "safetyCheck" ? decisionReason.reason : `${command} in '${resolvedPath}' was blocked. For security, Claude Code may only ${ACTION_VERBS[command]} the allowed working directories for this session: ${dirListStr}.`;
+      const message = decisionReason?.type === "other" || decisionReason?.type === "safetyCheck" ? decisionReason.reason : `${command} in '${resolvedPath}' was blocked. For security, ${getBranding().productName} may only ${ACTION_VERBS[command]} the allowed working directories for this session: ${dirListStr}.`;
       if (decisionReason?.type === "rule") {
         return {
           behavior: "deny",
@@ -248757,7 +248795,7 @@ function validateOutputRedirections(redirections, cwd, toolPermissionContext, co
   if (compoundCommandHasCd && redirections.length > 0) {
     return {
       behavior: "ask",
-      message: `Commands that change directories and write via output redirection require explicit approval to ensure paths are evaluated correctly. For security, Claude Code cannot automatically determine the final working directory when 'cd' is used in compound commands.`,
+      message: `Commands that change directories and write via output redirection require explicit approval to ensure paths are evaluated correctly. For security, ${getBranding().productName} cannot automatically determine the final working directory when 'cd' is used in compound commands.`,
       decisionReason: {
         type: "other",
         reason: "Compound command contains cd with output redirection - manual approval required to prevent path resolution bypass"
@@ -248772,7 +248810,7 @@ function validateOutputRedirections(redirections, cwd, toolPermissionContext, co
     if (!allowed) {
       const workingDirs = Array.from(allWorkingDirectories(toolPermissionContext));
       const dirListStr = formatDirectoryList(workingDirs);
-      const message = decisionReason?.type === "other" || decisionReason?.type === "safetyCheck" ? decisionReason.reason : decisionReason?.type === "rule" ? `Output redirection to '${resolvedPath}' was blocked by a deny rule.` : `Output redirection to '${resolvedPath}' was blocked. For security, Claude Code may only write to files in the allowed working directories for this session: ${dirListStr}.`;
+      const message = decisionReason?.type === "other" || decisionReason?.type === "safetyCheck" ? decisionReason.reason : decisionReason?.type === "rule" ? `Output redirection to '${resolvedPath}' was blocked by a deny rule.` : `Output redirection to '${resolvedPath}' was blocked. For security, ${getBranding().productName} may only write to files in the allowed working directories for this session: ${dirListStr}.`;
       if (decisionReason?.type === "rule") {
         return {
           behavior: "deny",
@@ -248979,6 +249017,7 @@ var init_pathValidation2 = __esm(() => {
   init_pathValidation();
   init_bashPermissions();
   init_sedValidation();
+  init_branding();
   PATH_EXTRACTORS = {
     cd: (args) => args.length === 0 ? [homedir18()] : [args.join(" ")],
     ls: (args) => {
@@ -256556,12 +256595,13 @@ async function loadLspServersFromManifest(declaration, pluginPath, pluginName, e
 }
 function resolvePluginLspEnvironment(config, plugin, userConfig, _errors) {
   const allMissingVars = [];
+  const envLookup = plugin.env ? { ...process.env, ...plugin.env } : process.env;
   const resolveValue = (value) => {
     let resolved = substitutePluginVariables(value, plugin);
     if (userConfig) {
       resolved = substituteUserConfigVariables(resolved, userConfig);
     }
-    const { expanded, missingVars } = expandEnvVarsInString(resolved);
+    const { expanded, missingVars } = expandEnvVarsInString(resolved, envLookup);
     allMissingVars.push(...missingVars);
     return expanded;
   };
@@ -261995,7 +262035,7 @@ function validateInputForSettingsFileEdit(filePath, originalContent, getUpdatedC
   if (!afterValidation.isValid) {
     return {
       result: false,
-      message: `Claude Code settings.json validation failed after edit:
+      message: `settings.json validation failed after edit:
 ${afterValidation.error}
 
 Full schema:
@@ -273865,6 +273905,7 @@ ${content}`;
           source: sourceName,
           dataPath: pluginDataPath
         });
+        finalContent = substitutePluginContentVariables(finalContent);
         if (pluginManifest.userConfig) {
           finalContent = substituteUserConfigInContent(finalContent, loadPluginOptions(sourceName), pluginManifest.userConfig);
         }
@@ -281303,7 +281344,7 @@ async function performMCPOAuthFlow(serverName, serverConfig, onAuthorizationUrl,
           }
           if (code) {
             res.writeHead(200, { "Content-Type": "text/html" });
-            res.end(`<h1>Authentication Successful</h1><p>You can close this window. Return to Claude Code.</p>`);
+            res.end(`<h1>Authentication Successful</h1><p>You can close this window. Return to ${import_xss2.default(getBranding().productName)}.</p>`);
             cleanup();
             resolveOnce(code);
           }
@@ -281469,7 +281510,7 @@ class ClaudeAuthProvider {
   }
   get clientMetadata() {
     const metadata = {
-      client_name: `Claude Code (${this.serverName})`,
+      client_name: `${getBranding().productName} (${this.serverName})`,
       redirect_uris: [this.redirectUri],
       grant_types: ["authorization_code", "refresh_token"],
       response_types: ["code"],
@@ -281488,7 +281529,7 @@ class ClaudeAuthProvider {
       logMCPDebug(this.serverName, `Using CIMD URL from env: ${override}`);
       return override;
     }
-    return MCP_CLIENT_METADATA_URL;
+    return getBranding().mcpOAuthClientMetadataUrl;
   }
   setMetadata(metadata) {
     this._metadata = metadata;
@@ -282114,7 +282155,7 @@ var init_auth6 = __esm(() => {
   init_errors7();
   init_auth4();
   init_axios2();
-  init_oauth();
+  init_branding();
   init_browser();
   init_envUtils();
   init_errors2();
@@ -286910,7 +286951,7 @@ function isIncludedMcpTool(tool) {
   return !tool.name.startsWith("mcp__ide__") || ALLOWED_IDE_TOOLS.includes(tool.name);
 }
 function getServerCacheKey(name, serverRef) {
-  return `${name}-${jsonStringify(serverRef)}`;
+  return `${name}-${jsonStringify(serverRef)}-${jsonStringify(getBranding())}`;
 }
 async function clearServerCache(name, serverRef) {
   const key = getServerCacheKey(name, serverRef);
@@ -287502,10 +287543,8 @@ async function setupSdkMcpClients(sdkMcpConfigs, sendMcpMessage) {
   const results = await Promise.allSettled(Object.entries(sdkMcpConfigs).map(async ([name, config]) => {
     const transport = new SdkControlClientTransport(name, sendMcpMessage);
     const client = new Client({
-      name: TELEMETRY_SERVICE_NAME,
       ...getMcpClientInfo(),
-      version: "99.0.0",
-      websiteUrl: PRODUCT_URL
+      version: "99.0.0"
     }, {
       capabilities: {}
     });
@@ -287634,6 +287673,7 @@ var init_client5 = __esm(() => {
   ALLOWED_IDE_TOOLS = ["mcp__ide__executeCode", "mcp__ide__getDiagnostics"];
   connectToServer = memoize_default(async (name, serverRef, serverStats) => {
     const connectStartTime = Date.now();
+    const cacheKey = getServerCacheKey(name, serverRef);
     let inProcessServer;
     try {
       let transport;
@@ -287832,6 +287872,7 @@ var init_client5 = __esm(() => {
             ...subprocessEnv(),
             ...serverRef.env
           },
+          ...serverRef.cwd ? { cwd: serverRef.cwd } : {},
           stderr: "pipe"
         });
       } else {
@@ -287853,10 +287894,8 @@ var init_client5 = __esm(() => {
         }
       }
       const client = new Client({
-        name: TELEMETRY_SERVICE_NAME,
         ...getMcpClientInfo(),
-        version: "99.0.0",
-        websiteUrl: PRODUCT_URL
+        version: "99.0.0"
       }, {
         capabilities: {
           roots: {},
@@ -288066,12 +288105,11 @@ var init_client5 = __esm(() => {
         const uptime = Date.now() - connectionStartTime;
         const transportType = serverRef.type ?? "unknown";
         logMCPDebug(name, `${transportType.toUpperCase()} connection closed after ${Math.floor(uptime / 1000)}s (${hasErrorOccurred ? "with errors" : "cleanly"})`);
-        const key = getServerCacheKey(name, serverRef);
         fetchToolsForClient.cache.delete(name);
         fetchResourcesForClient.cache.delete(name);
         fetchCommandsForClient.cache.delete(name);
         if (false) {}
-        connectToServer.cache.delete(key);
+        connectToServer.cache.delete(cacheKey);
         logMCPDebug(name, `Cleared connection cache for reconnection`);
         if (originalOnclose) {
           originalOnclose();
@@ -290124,7 +290162,7 @@ async function getAttachments(input, toolUseContext, ideSelection, queuedCommand
     maybe("changed_files", () => getChangedFiles(context)),
     maybe("nested_memory", () => getNestedMemoryAttachments(context)),
     maybe("dynamic_skill", () => getDynamicSkillAttachments(context)),
-    maybe("skill_listing", () => getSkillListingAttachments(context)),
+    ...isSkillListingEnabled() ? [maybe("skill_listing", () => getSkillListingAttachments(context))] : [],
     maybe("plan_mode", () => getPlanModeAttachments(messages, toolUseContext)),
     maybe("plan_mode_exit", () => getPlanModeExitAttachment(toolUseContext)),
     ...[],
@@ -290961,6 +290999,9 @@ function resetSentSkillNames() {
 function suppressNextSkillListing() {
   getQueryContext().registries.skillListingSuppressNext = true;
 }
+function isSkillListingEnabled() {
+  return !isEnvDefinedFalsy(resolveEnvVar("SKILL_LISTING"));
+}
 async function getSkillListingAttachments(toolUseContext) {
   if (false) {}
   if (!toolUseContext.options.tools.some((t) => toolMatchesName2(t, SKILL_TOOL_NAME))) {
@@ -301014,7 +301055,7 @@ function AUTO_REJECT_MESSAGE(toolName) {
   return `Permission to use ${toolName} has been denied. ${DENIAL_WORKAROUND_GUIDANCE}`;
 }
 function DONT_ASK_REJECT_MESSAGE(toolName) {
-  return `Permission to use ${toolName} has been denied because Claude Code is running in don't ask mode. ${DENIAL_WORKAROUND_GUIDANCE}`;
+  return `Permission to use ${toolName} has been denied because ${getBranding().productName} is running in don't ask mode. ${DENIAL_WORKAROUND_GUIDANCE}`;
 }
 function isSyntheticMessage(message) {
   return message.type !== "progress" && message.type !== "attachment" && message.type !== "system" && Array.isArray(message.message.content) && message.message.content[0]?.type === "text" && SYNTHETIC_MESSAGES.has(message.message.content[0].text);
@@ -304206,6 +304247,7 @@ var init_messages4 = __esm(() => {
   init_tasks();
   init_toolSearch();
   init_state();
+  init_branding();
   DENIAL_WORKAROUND_GUIDANCE = `IMPORTANT: You *may* attempt to accomplish this action using other tools that might naturally be used to accomplish this goal, ` + `e.g. using head instead of cat. But you *should not* attempt to work around this denial in malicious ways, ` + `e.g. do not use your ability to run tests to execute non-test actions. ` + `You should only try to work around this restriction in reasonable ways that do not attempt to bypass the intent behind this denial. ` + `If you believe this capability is essential to complete the user's request, STOP and explain to the user ` + `what you were trying to do and why you need this permission. Let the user decide how to proceed.`;
   SYNTHETIC_MESSAGES = new Set([
     INTERRUPT_MESSAGE,
@@ -369304,11 +369346,12 @@ var init_utils8 = __esm(() => {
   init_log3();
   init_state();
   init_mcpOutputStorage();
+  init_branding();
   init_settings2();
   init_preapproved();
   DomainBlockedError = class DomainBlockedError extends Error {
     constructor(domain) {
-      super(`Claude Code is unable to fetch from ${domain}`);
+      super(`${getBranding().productName} is unable to fetch from ${domain}`);
       this.name = "DomainBlockedError";
     }
   };
@@ -389512,7 +389555,7 @@ async function enrollTrustedDevice() {
       logForDebugging2("[trusted-device] CLAUDE_TRUSTED_DEVICE_TOKEN env var is set, skipping enrollment (env var takes precedence)");
       return;
     }
-    init_auth();
+    const { getClaudeAIOAuthTokens } = (init_auth(), __toCommonJS(exports_auth));
     const accessToken = getClaudeAIOAuthTokens()?.accessToken;
     if (!accessToken) {
       logForDebugging2("[trusted-device] No OAuth token, skipping enrollment");
@@ -389526,7 +389569,7 @@ async function enrollTrustedDevice() {
     const baseUrl = getOauthConfig().BASE_API_URL;
     let response;
     try {
-      response = await axios_default.post(`${baseUrl}/api/auth/trusted_devices`, { display_name: `Claude Code on ${hostname2()} · ${process.platform}` }, {
+      response = await axios_default.post(`${baseUrl}/api/auth/trusted_devices`, { display_name: `${getBranding().productName} on ${hostname2()} · ${process.platform}` }, {
         headers: {
           Authorization: `Bearer ${accessToken}`,
           "Content-Type": "application/json"
@@ -389578,6 +389621,7 @@ var init_trustedDevice = __esm(() => {
   init_privacyLevel();
   init_secureStorage();
   init_slowOperations();
+  init_branding();
   readStoredToken = memoize_default(() => {
     const envToken = process.env.CLAUDE_TRUSTED_DEVICE_TOKEN;
     if (envToken) {
@@ -480080,7 +480124,7 @@ function buildPrimarySection() {
   }, undefined, false, undefined, this);
   return [{
     label: "Version",
-    value: "0.4.25"
+    value: "0.4.27"
   }, {
     label: "Session name",
     value: nameValue
@@ -506584,7 +506628,7 @@ async function validatePluginManifest(filePath) {
         delete stripped[key];
         warnings.push({
           path: key,
-          message: `Field '${key}' belongs in the marketplace entry (marketplace.json), ` + `not plugin.json. It's harmless here but unused — Claude Code ` + `ignores it at load time.`
+          message: `Field '${key}' belongs in the marketplace entry (marketplace.json), ` + `not plugin.json. It's harmless here but unused — ${getBranding().productName} ` + `ignores it at load time.`
         });
       }
       toValidate = stripped;
@@ -506599,7 +506643,7 @@ async function validatePluginManifest(filePath) {
     if (!/^[a-z0-9]+(-[a-z0-9]+)*$/.test(manifest.name)) {
       warnings.push({
         path: "name",
-        message: `Plugin name "${manifest.name}" is not kebab-case. Claude Code accepts ` + `it, but the Claude.ai marketplace sync requires kebab-case ` + `(lowercase letters, digits, and hyphens only, e.g., "my-plugin").`
+        message: `Plugin name "${manifest.name}" is not kebab-case. ${getBranding().productName} accepts ` + `it, but the Claude.ai marketplace sync requires kebab-case ` + `(lowercase letters, digits, and hyphens only, e.g., "my-plugin").`
       });
     }
     if (!manifest.version) {
@@ -507035,6 +507079,7 @@ var init_validatePlugin = __esm(() => {
   init_slowOperations();
   init_schemas3();
   init_fsOperations();
+  init_branding();
   MARKETPLACE_ONLY_MANIFEST_FIELDS = new Set([
     "category",
     "source",
@@ -528159,7 +528204,7 @@ var init_bridge_kick = __esm(() => {
 var call58 = async () => {
   return {
     type: "text",
-    value: `${"99.0.0"} (built ${"2026-10-09T14:01:34.561Z"})`
+    value: `${"99.0.0"} (built ${"2026-10-20T14:00:47.620Z"})`
   };
 }, version2, version_default;
 var init_version = __esm(() => {
@@ -545838,7 +545883,7 @@ function WelcomeV2() {
             dimColor: true,
             children: [
               "v",
-              "0.4.25",
+              "0.4.27",
               " "
             ]
           }, undefined, true, undefined, this)
@@ -546038,7 +546083,7 @@ function WelcomeV2() {
           dimColor: true,
           children: [
             "v",
-            "0.4.25",
+            "0.4.27",
             " "
           ]
         }, undefined, true, undefined, this)
@@ -546264,7 +546309,7 @@ function AppleTerminalWelcomeV2(t0) {
         dimColor: true,
         children: [
           "v",
-          "0.4.25",
+          "0.4.27",
           " "
         ]
       }, undefined, true, undefined, this);
@@ -546518,7 +546563,7 @@ function AppleTerminalWelcomeV2(t0) {
       dimColor: true,
       children: [
         "v",
-        "0.4.25",
+        "0.4.27",
         " "
       ]
     }, undefined, true, undefined, this);
@@ -549999,9 +550044,8 @@ Remember that settings are in:
 
 1. Review the user's issue description
 2. The last ${DEFAULT_DEBUG_LINES_READ} lines show the debug file format. Look for [ERROR] and [WARN] entries, stack traces, and failure patterns across the file
-3. Consider launching the ${CLAUDE_CODE_GUIDE_AGENT_TYPE} subagent to understand relevant application features
-4. Explain what you found in plain language
-5. Suggest concrete fixes or next steps
+3. Explain what you found in plain language
+4. Suggest concrete fixes or next steps
 `;
       return [{ type: "text", text: prompt }];
     }
@@ -550009,7 +550053,6 @@ Remember that settings are in:
 }
 var DEFAULT_DEBUG_LINES_READ = 20, TAIL_READ_BYTES;
 var init_debug3 = __esm(() => {
-  init_claudeCodeGuideAgent();
   init_settings2();
   init_debug();
   init_errors2();
@@ -550162,7 +550205,7 @@ var init_schema2 = __esm(() => {
     $schema: string2().optional().describe("JSON Schema URL for editor validation"),
     $docs: string2().optional().describe("Documentation URL"),
     bindings: array(KeybindingBlockSchema()).describe("Array of keybinding blocks by context")
-  }).describe("Claude Code keybindings configuration. Customize keyboard shortcuts by context."));
+  }).describe("Keybindings configuration. Customize keyboard shortcuts by context."));
 });
 
 // src/cli/skills/bundled/keybindings.ts
@@ -567277,7 +567320,7 @@ Usage: claude --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("0.4.25 (OpenCow)", "-v, --version", "Output the version number");
+  }).version("0.4.27 (OpenCow)", "-v, --version", "Output the version number");
   program.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)");
   program.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux.");
   if (canUserConfigureAdvisor()) {
@@ -567872,7 +567915,7 @@ if (false) {}
 async function main2() {
   const args = process.argv.slice(2);
   if (args.length === 1 && (args[0] === "--version" || args[0] === "-v" || args[0] === "-V")) {
-    console.log(`${"0.4.25"} (OpenCow)`);
+    console.log(`${"0.4.27"} (OpenCow)`);
     return;
   }
   if (args.includes("--provider")) {
@@ -567972,4 +568015,4 @@ async function main2() {
 }
 main2();
 
-//# debugId=C78360B14966554964756E2164756E21
+//# debugId=25745C572ABF064464756E2164756E21