@buildautomaton/cli 0.1.16 → 0.1.18

package/dist/index.js

@@ -28776,6 +28776,498 @@ async function collectTurnGitDiffFromPreTurnSnapshot(options) {
   }
 }
 
+// ../types/dist/index.js
+init_zod();
+init_zod();
+init_zod();
+init_zod();
+init_zod();
+init_zod();
+init_zod();
+init_zod();
+init_zod();
+init_zod();
+init_zod();
+init_zod();
+var WorkItemStatusSchema = external_exports.enum(["backlog", "in-progress", "completed"]);
+var WorkItemProgressSchema = external_exports.object({
+  remainingCriteria: external_exports.array(external_exports.string()).default([]),
+  openQuestions: external_exports.array(external_exports.string()).default([]),
+  assignedTo: external_exports.enum(["agent", "human-product", "human-expert"]).optional()
+});
+var ChangeSchema = external_exports.object({
+  id: external_exports.string(),
+  description: external_exports.string(),
+  buildingBlockId: external_exports.string(),
+  buildingBlockType: external_exports.enum(["function", "workflow", "connector", "ui-component", "app-fragment", "application", "project"]),
+  action: external_exports.enum(["create", "update", "split", "combine"])
+});
+var CompletionCriterionSchema = external_exports.object({
+  id: external_exports.string(),
+  description: external_exports.string(),
+  type: external_exports.enum(["write-code", "write-tests", "verify-tests", "other"]),
+  verified: external_exports.boolean().default(false)
+});
+var WorkItemPrioritySchema = external_exports.enum(["low", "medium", "high", "critical"]);
+var IterationPhaseSchema = external_exports.enum(["analysis", "implementation", "verify", "reprioritize", "completed"]);
+var WorkItemDependencySchema = external_exports.object({
+  type: external_exports.enum(["work-item"]),
+  id: external_exports.string()
+});
+var WorkItemSchema = external_exports.object({
+  id: external_exports.string(),
+  sessionId: external_exports.string().optional(),
+  summary: external_exports.string().optional(),
+  description: external_exports.string(),
+  status: WorkItemStatusSchema,
+  buildingBlockId: external_exports.string().optional(),
+  buildingBlockType: external_exports.enum(["function", "workflow", "connector", "ui-component", "app-fragment", "application", "project"]),
+  changes: external_exports.array(ChangeSchema).default([]),
+  completionCriteria: external_exports.array(CompletionCriterionSchema).default([]),
+  priority: WorkItemPrioritySchema.default("medium"),
+  dependencies: external_exports.array(WorkItemDependencySchema).default([]),
+  assignedToUserId: external_exports.string().optional()
+});
+var UserWorkspaceProfileSchema = external_exports.object({
+  id: external_exports.string(),
+  workspaceId: external_exports.string(),
+  userId: external_exports.string(),
+  roleDescription: external_exports.string().optional(),
+  expertiseAreas: external_exports.array(external_exports.string()),
+  preferences: external_exports.record(external_exports.unknown()).optional(),
+  learnings: external_exports.array(external_exports.string())
+});
+var WorkspaceOwnerInfoSchema = external_exports.object({
+  ownerId: external_exports.string(),
+  ownerName: external_exports.string().optional(),
+  ownerEmail: external_exports.string().optional(),
+  ownerProfilePictureUrl: external_exports.string().optional()
+});
+var WorkspaceRuntimeEntrySchema = external_exports.object({
+  workspaceId: external_exports.string(),
+  path: external_exports.string(),
+  name: external_exports.string().optional(),
+  owner: WorkspaceOwnerInfoSchema.optional(),
+  isOwner: external_exports.boolean().optional()
+});
+var ProjectContextSchema = external_exports.object({
+  projectId: external_exports.string(),
+  context: external_exports.record(external_exports.unknown()).default({}),
+  updatedAt: external_exports.string()
+});
+var WebSocketMessageTypeSchema = external_exports.enum([
+  "plan-update",
+  "work-item-update",
+  "work-item-added",
+  "work-item-removed",
+  "project-processing-start",
+  "project-processing-update",
+  "project-processing-complete",
+  "project-processing-error",
+  "file-tool-request",
+  "file-tool-response",
+  "file-generated"
+]);
+var WebSocketMessageSchema = external_exports.object({
+  type: WebSocketMessageTypeSchema,
+  contextId: external_exports.string().optional(),
+  data: external_exports.any().optional(),
+  error: external_exports.string().optional()
+});
+var CheckpointKindSchema = external_exports.enum(["daily", "weekly", "overall"]);
+var CheckpointSummarySchema = external_exports.object({
+  id: external_exports.string(),
+  kind: CheckpointKindSchema,
+  /** ISO date for daily (YYYY-MM-DD), ISO week for weekly, null for overall */
+  periodKey: external_exports.string().nullable(),
+  summary: external_exports.string(),
+  createdAt: external_exports.string(),
+  updatedAt: external_exports.string()
+});
+var ThreadMetaSchema = external_exports.object({
+  threadId: external_exports.string(),
+  workspaceId: external_exports.string(),
+  /** External source (e.g. slack, discord); null if internal-only */
+  externalSource: external_exports.string().nullable(),
+  /** Id in the external system (e.g. channel_id + thread_ts) */
+  externalId: external_exports.string().nullable(),
+  title: external_exports.string().optional(),
+  createdAt: external_exports.string(),
+  updatedAt: external_exports.string()
+});
+var ThreadMessageSchema = external_exports.object({
+  messageId: external_exports.string(),
+  threadId: external_exports.string(),
+  /** Role: user, assistant, system */
+  role: external_exports.enum(["user", "assistant", "system"]),
+  content: external_exports.string(),
+  /** Optional reference to a ContentItem (e.g. doc, Notion page) */
+  contentItemId: external_exports.string().nullable(),
+  /** External message id if synced from external chat */
+  externalId: external_exports.string().nullable(),
+  createdAt: external_exports.string(),
+  updatedAt: external_exports.string()
+});
+var ThreadCheckpointSummarySchema = CheckpointSummarySchema.extend({
+  threadId: external_exports.string()
+});
+var ContentSourceSchema = external_exports.enum(["notion", "doc", "slack_thread", "other"]);
+var ContentItemMetaSchema = external_exports.object({
+  contentId: external_exports.string(),
+  workspaceId: external_exports.string(),
+  source: ContentSourceSchema,
+  /** Id in the external system (e.g. Notion page id, doc url) */
+  externalId: external_exports.string(),
+  /** If source is slack_thread, points to Thread DO id */
+  threadId: external_exports.string().nullable(),
+  title: external_exports.string().optional(),
+  createdAt: external_exports.string(),
+  updatedAt: external_exports.string()
+});
+var ContentStorageRefSchema = external_exports.object({
+  storageKey: external_exports.string(),
+  /** Optional: mime type or format hint */
+  contentType: external_exports.string().optional()
+});
+var ContentCheckpointSummarySchema = CheckpointSummarySchema.extend({
+  contentId: external_exports.string()
+});
+var StoryMetaSchema = external_exports.object({
+  storyId: external_exports.string(),
+  workspaceId: external_exports.string(),
+  title: external_exports.string(),
+  /** feature | bug | epic */
+  kind: external_exports.enum(["feature", "bug", "epic"]).default("feature"),
+  createdAt: external_exports.string(),
+  updatedAt: external_exports.string()
+});
+var StoryContentItemRefSchema = external_exports.object({
+  id: external_exports.string(),
+  storyId: external_exports.string(),
+  contentItemId: external_exports.string(),
+  /** Snapshot summary when added to story (or updated) */
+  summary: external_exports.string(),
+  orderIndex: external_exports.number().default(0),
+  createdAt: external_exports.string(),
+  updatedAt: external_exports.string()
+});
+var StoryCheckpointSummarySchema = CheckpointSummarySchema.extend({
+  storyId: external_exports.string()
+});
+var BUILTIN_SESSION_CHANGE_SUMMARY_FOLLOW_UP_CATALOG_PROMPT_ID = "__builtin_change_summary__";
+var SessionMetaSchema = external_exports.object({
+  sessionId: external_exports.string(),
+  workspaceId: external_exports.string(),
+  title: external_exports.string().optional(),
+  createdAt: external_exports.string(),
+  updatedAt: external_exports.string()
+});
+var SessionPromptSchema = external_exports.object({
+  id: external_exports.string(),
+  sessionId: external_exports.string(),
+  /** text | resource */
+  type: external_exports.enum(["text", "resource"]).default("text"),
+  text: external_exports.string().optional(),
+  resourceUri: external_exports.string().optional(),
+  createdAt: external_exports.string()
+});
+var SessionResponseSchema = external_exports.object({
+  id: external_exports.string(),
+  sessionId: external_exports.string(),
+  promptId: external_exports.string(),
+  /** message | completion */
+  kind: external_exports.enum(["message", "completion"]),
+  content: external_exports.string().optional(),
+  /** For completion: stopReason etc. */
+  stopReason: external_exports.string().optional(),
+  createdAt: external_exports.string()
+});
+var SessionToolCallSchema = external_exports.object({
+  id: external_exports.string(),
+  sessionId: external_exports.string(),
+  promptId: external_exports.string(),
+  name: external_exports.string(),
+  params: external_exports.record(external_exports.unknown()).optional(),
+  result: external_exports.record(external_exports.unknown()).optional(),
+  createdAt: external_exports.string()
+});
+var SessionThreadRefSchema = external_exports.object({
+  sessionId: external_exports.string(),
+  threadId: external_exports.string(),
+  addedAt: external_exports.string()
+});
+function normalizeRepoRelativePath(p) {
+  let t = p.trim().replace(/\\/g, "/");
+  while (t.startsWith("./")) t = t.slice(2);
+  return t.replace(/\/+/g, "/");
+}
+function resolveChangeSummaryPathAgainstAllowed(rawPath, allowed) {
+  const trimmed2 = rawPath.trim();
+  if (!trimmed2) return null;
+  if (allowed.has(trimmed2)) return trimmed2;
+  const n = normalizeRepoRelativePath(trimmed2);
+  if (allowed.has(n)) return n;
+  for (const a of allowed) {
+    if (normalizeRepoRelativePath(a) === n) return a;
+  }
+  return null;
+}
+function clampSummaryToAtMostTwoLines(summary) {
+  const lines = summary.split(/\r?\n/).map((l) => l.trim()).filter((l) => l.length > 0);
+  return lines.slice(0, 2).join("\n");
+}
+function parseChangeSummaryJson(raw, allowedPaths, options) {
+  if (raw == null || raw.trim() === "") return [];
+  let text = raw.trim();
+  const fence = text.match(/```(?:json)?\s*([\s\S]*?)```/i);
+  if (fence?.[1]) text = fence[1].trim();
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    const start = text.indexOf("[");
+    const end = text.lastIndexOf("]");
+    if (start < 0 || end <= start) return [];
+    try {
+      parsed = JSON.parse(text.slice(start, end + 1));
+    } catch {
+      return [];
+    }
+  }
+  const rows = [];
+  let arr = [];
+  if (Array.isArray(parsed)) {
+    arr = parsed;
+  } else if (parsed && typeof parsed === "object" && Array.isArray(parsed.files)) {
+    arr = parsed.files;
+  }
+  const skip = options?.skipPathAllowlist === true;
+  for (const item of arr) {
+    if (!item || typeof item !== "object") continue;
+    const o = item;
+    const rawPath = typeof o.path === "string" ? o.path.trim() : "";
+    const summary = typeof o.summary === "string" ? o.summary.trim() : "";
+    if (!rawPath || !summary) continue;
+    const path32 = skip ? normalizeRepoRelativePath(rawPath) || rawPath : resolveChangeSummaryPathAgainstAllowed(rawPath, allowedPaths);
+    if (!path32) continue;
+    rows.push({ path: path32, summary: clampSummaryToAtMostTwoLines(summary) });
+  }
+  return rows;
+}
+var PATCH_PREVIEW_MAX = 12e3;
+function clip(s, max) {
+  if (s.length <= max) return s;
+  return `${s.slice(0, max)}
+
+\u2026(truncated, ${s.length - max} more characters)`;
+}
+function buildSessionChangeSummaryPrompt(files) {
+  const lines = [
+    "You are the same agent that produced the changes below. Summarize **your own** edits so a reader can scan them quickly.",
+    "",
+    "Write in second person (you / your): what you changed in each path and why it matters.",
+    "",
+    "Each summary must be **very concise**: **one line** of plain text, or **at most two short lines** (use a single line break between the two if needed). No bullets, no paragraphs.",
+    "",
+    "## How to format your reply (machine parsing)",
+    "",
+    "- Put the machine-readable part **only** inside a **markdown fenced code block** whose opening fence is exactly ```json on its own line. Close the block with ``` on its own line after the JSON.",
+    "- Inside that fence: **nothing except** one valid JSON value \u2014 the array described below. No trailing commentary inside the fence.",
+    "- **Do not** attach prose to the JSON on the same line (wrong: `Only one file\u2026page.tsx.[{\u2026}]`). Wrong: any sentence that ends with `.` immediately before `[`. Put a blank line before the ```json line.",
+    "- If you add optional plain English before the fence (e.g. one short sentence), keep it **separate**: end that sentence, blank line, then ```json.",
+    '- In each `"summary"` string, avoid raw double-quote characters, or escape them as `\\"` so the JSON parses.',
+    "",
+    "JSON shape **inside the fence** (array only):",
+    '[{"path":"<file path exactly as given>","summary":"<one line, or two short lines separated by \\n>"}]',
+    "",
+    "Rules:",
+    "- Include **exactly one** object per file path listed below (same path strings).",
+    "- If a path is a removed directory, state briefly what you removed.",
+    "- Do not invent paths; use only the paths provided.",
+    "",
+    "## Files you changed",
+    ""
+  ];
+  for (const f of files) {
+    lines.push(`### ${f.path}`);
+    if (f.directoryRemoved) {
+      lines.push("(directory removed)");
+      lines.push("");
+      continue;
+    }
+    if (f.patchContent && f.patchContent.trim() !== "") {
+      lines.push("```diff");
+      lines.push(clip(f.patchContent.trim(), PATCH_PREVIEW_MAX));
+      lines.push("```");
+    } else if (f.oldText != null || f.newText != null) {
+      const oldT = (f.oldText ?? "").trim();
+      const newT = (f.newText ?? "").trim();
+      lines.push("Previous snippet:", clip(oldT, 6e3));
+      lines.push("New snippet:", clip(newT, 6e3));
+    } else {
+      lines.push("(no diff body stored for this path)");
+    }
+    lines.push("");
+  }
+  return lines.join("\n");
+}
+function defaultRichness(c) {
+  const patch = typeof c.patchContent === "string" ? c.patchContent.length : 0;
+  const nt = typeof c.newText === "string" ? c.newText.length : 0;
+  const ot = typeof c.oldText === "string" ? c.oldText.length : 0;
+  const dir = c.directoryRemoved === true ? 8 : 0;
+  return (patch > 0 ? 4 : 0) + (nt > 0 ? 2 : 0) + (ot > 0 ? 1 : 0) + dir;
+}
+function dedupeSessionFileChangesByPath(items, richness = (item) => defaultRichness(item)) {
+  const byPath = /* @__PURE__ */ new Map();
+  for (const item of items) {
+    const p = typeof item.path === "string" ? item.path.trim() : "";
+    if (!p) continue;
+    const prev = byPath.get(p);
+    if (!prev || richness(item) >= richness(prev)) byPath.set(p, item);
+  }
+  return Array.from(byPath.entries()).sort(([a], [b]) => a.localeCompare(b)).map(([, v]) => v);
+}
+var ArtifactMetaSchema = external_exports.object({
+  artifactId: external_exports.string(),
+  workspaceId: external_exports.string(),
+  /** Slug for permalink: /workspaces/:wid/artifacts/:slug */
+  permalinkSlug: external_exports.string(),
+  title: external_exports.string(),
+  /** e.g. summary_report, build_log */
+  type: external_exports.string().default("report"),
+  /** Optional session that produced this artifact */
+  sessionId: external_exports.string().nullable(),
+  createdAt: external_exports.string(),
+  updatedAt: external_exports.string()
+});
+var TemplateMetaSchema = external_exports.object({
+  templateId: external_exports.string(),
+  workspaceId: external_exports.string(),
+  name: external_exports.string(),
+  /** e.g. summary_report, build_log */
+  artifactType: external_exports.string().optional(),
+  createdAt: external_exports.string(),
+  updatedAt: external_exports.string()
+});
+var GitRepoMetaSchema = external_exports.object({
+  /** Stable id for the repo (e.g. hash of normalized canonical URL). Used for DO idFromName. */
+  repoId: external_exports.string(),
+  /** Canonical external URL (e.g. https://github.com/org/repo). Normalize before storing. */
+  canonicalUrl: external_exports.string().url(),
+  /** Optional workspace this repo was first linked in. */
+  workspaceId: external_exports.string().nullable(),
+  displayName: external_exports.string().optional(),
+  createdAt: external_exports.string(),
+  updatedAt: external_exports.string()
+});
+
+// src/agents/acp/put-summarize-change-summaries.ts
+async function putEncryptedChangeSummaryRows(params) {
+  const base = params.apiBaseUrl.replace(/\/+$/, "");
+  const entries = params.rows.map(({ path: path32, summary }) => {
+    const enc = params.e2ee.encryptFields({ summary }, ["summary"]);
+    return { path: path32, summary: JSON.stringify(enc) };
+  });
+  const res = await fetch(
+    `${base}/api/sessions/${encodeURIComponent(params.sessionId)}/follow-ups/summarize-changes`,
+    {
+      method: "PUT",
+      headers: {
+        Authorization: `Bearer ${params.authToken}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({ entries })
+    }
+  );
+  if (!res.ok) {
+    const t = await res.text();
+    throw new Error(`PUT summarize-changes summaries failed ${res.status}: ${t.slice(0, 500)}`);
+  }
+}
+
+// src/agents/acp/maybe-upload-e2ee-session-change-summaries.ts
+async function maybeUploadE2eeSessionChangeSummariesAfterAgentSuccess(params) {
+  const {
+    sessionId,
+    runId,
+    resultSuccess,
+    output,
+    e2ee,
+    cloudApiBaseUrl,
+    getCloudAccessToken,
+    followUpCatalogPromptId,
+    sessionChangeSummaryFilePaths,
+    log: log2
+  } = params;
+  const outputStr = typeof output === "string" ? output : "";
+  if (!sessionId) {
+    return;
+  }
+  if (!runId) {
+    return;
+  }
+  if (!resultSuccess) {
+    return;
+  }
+  if (!e2ee) {
+    return;
+  }
+  if (!cloudApiBaseUrl) {
+    return;
+  }
+  if (!getCloudAccessToken) {
+    return;
+  }
+  if (followUpCatalogPromptId !== BUILTIN_SESSION_CHANGE_SUMMARY_FOLLOW_UP_CATALOG_PROMPT_ID) {
+    return;
+  }
+  if (!sessionChangeSummaryFilePaths || sessionChangeSummaryFilePaths.length === 0) {
+    return;
+  }
+  if (outputStr.trim() === "") {
+    return;
+  }
+  const allowed = /* @__PURE__ */ new Set();
+  for (const p of sessionChangeSummaryFilePaths) {
+    const t = p.trim();
+    if (!t) continue;
+    allowed.add(t);
+    allowed.add(normalizeRepoRelativePath(t));
+  }
+  const rows = parseChangeSummaryJson(outputStr, allowed);
+  if (rows.length === 0) {
+    return;
+  }
+  const token = getCloudAccessToken();
+  if (!token) {
+    return;
+  }
+  try {
+    await putEncryptedChangeSummaryRows({
+      apiBaseUrl: cloudApiBaseUrl,
+      authToken: token,
+      sessionId,
+      e2ee,
+      rows
+    });
+  } catch (uploadErr) {
+    log2(
+      `[Agent] Encrypted change summary upload failed: ${uploadErr instanceof Error ? uploadErr.message : String(uploadErr)}`
+    );
+  }
+}
+
+// src/agents/acp/send-prompt-result-augment.ts
+function augmentPromptResultAuthFields(agentType, errorText) {
+  const err = errorText ?? "";
+  const at = agentType ?? null;
+  const evaluated = Boolean(at && err.trim());
+  const suggestsAuth = evaluated && at ? localAgentErrorSuggestsAuth(at, err) : false;
+  if (!suggestsAuth || !agentType) return {};
+  return { agentAuthRequired: true, agentType };
+}
+
 // src/agents/acp/send-prompt-to-agent.ts
 async function sendPromptToAgent(options) {
   const {
@@ -28788,16 +29280,13 @@ async function sendPromptToAgent(options) {
     agentCwd,
     sendResult: sendResult2,
     sendSessionUpdate,
-    log: log2
+    log: log2,
+    followUpCatalogPromptId,
+    sessionChangeSummaryFilePaths,
+    cloudApiBaseUrl,
+    getCloudAccessToken,
+    e2ee
   } = options;
-  function augmentAuthFields(errorText) {
-    const err = errorText ?? "";
-    const at = agentType ?? null;
-    const evaluated = Boolean(at && err.trim());
-    const suggestsAuth = evaluated && at ? localAgentErrorSuggestsAuth(at, err) : false;
-    if (!suggestsAuth || !agentType) return {};
-    return { agentAuthRequired: true, agentType };
-  }
   try {
     const result = await handle.sendPrompt(promptText, {});
     if (sessionId && runId && sendSessionUpdate && agentCwd && result.success) {
@@ -28809,6 +29298,18 @@ async function sendPromptToAgent(options) {
         log: log2
       });
     }
+    await maybeUploadE2eeSessionChangeSummariesAfterAgentSuccess({
+      sessionId,
+      runId,
+      resultSuccess: result.success === true,
+      output: result.output,
+      e2ee,
+      cloudApiBaseUrl,
+      getCloudAccessToken,
+      followUpCatalogPromptId,
+      sessionChangeSummaryFilePaths,
+      log: log2
+    });
     const errStr = typeof result.error === "string" ? result.error : void 0;
     sendResult2({
       type: "prompt_result",
@@ -28816,7 +29317,8 @@ async function sendPromptToAgent(options) {
       ...sessionId ? { sessionId } : {},
       ...runId ? { runId } : {},
       ...result,
-      ...augmentAuthFields(errStr)
+      ...followUpCatalogPromptId != null && followUpCatalogPromptId !== "" ? { followUpCatalogPromptId } : {},
+      ...augmentPromptResultAuthFields(agentType, errStr)
     });
     if (!result.success) {
       log2(
@@ -28833,7 +29335,8 @@ async function sendPromptToAgent(options) {
       ...runId ? { runId } : {},
       success: false,
       error: errMsg,
-      ...augmentAuthFields(errMsg)
+      ...followUpCatalogPromptId != null && followUpCatalogPromptId !== "" ? { followUpCatalogPromptId } : {},
+      ...augmentPromptResultAuthFields(agentType, errMsg)
     });
   }
 }
@@ -30141,7 +30644,12 @@ async function createAcpManager(options) {
       agentType,
       cwd,
       sendResult: sendResult2,
-      sendSessionUpdate
+      sendSessionUpdate,
+      followUpCatalogPromptId,
+      sessionChangeSummaryFilePaths,
+      cloudApiBaseUrl,
+      getCloudAccessToken,
+      e2ee
     } = opts;
     const preferredForPrompt = agentType ?? backendFallbackAgentType ?? null;
     pendingCancelRunId = void 0;
@@ -30205,7 +30713,12 @@ async function createAcpManager(options) {
         agentCwd: cwd,
         sendResult: sendResult2,
         sendSessionUpdate,
-        log: log2
+        log: log2,
+        followUpCatalogPromptId,
+        sessionChangeSummaryFilePaths,
+        cloudApiBaseUrl,
+        getCloudAccessToken,
+        e2ee
       });
     }
     void run().finally(() => {
@@ -32864,6 +33377,42 @@ var handleAgentConfigMessage = (msg, deps) => {
 
 // src/agents/acp/from-bridge/handle-bridge-prompt.ts
 import * as path28 from "node:path";
+
+// src/agents/acp/from-bridge/bridge-prompt-wiring.ts
+function createBridgePromptSenders(deps, getWs) {
+  const sendBridgeMessage = (message, encryptedFields = []) => {
+    const s = getWs();
+    if (!s) return false;
+    const wire = deps.e2ee && encryptedFields.length > 0 ? deps.e2ee.encryptFields(message, encryptedFields) : message;
+    sendWsMessage(s, wire);
+    return true;
+  };
+  const sendResult2 = (result) => {
+    const skipEncryptForChangeSummaryFollowUp = result.type === "prompt_result" && result.followUpCatalogPromptId === BUILTIN_SESSION_CHANGE_SUMMARY_FOLLOW_UP_CATALOG_PROMPT_ID;
+    const encryptedFields = result.type === "prompt_result" && !skipEncryptForChangeSummaryFollowUp ? ["output", "error"] : [];
+    sendBridgeMessage(result, encryptedFields);
+  };
+  const sendSessionUpdate = (payload) => {
+    const s = getWs();
+    if (!s) {
+      deps.log("[Bridge service] Session update not sent: not connected to the bridge.");
+      return;
+    }
+    const p = payload;
+    const wire = p.type === "session_update" && deps.e2ee ? deps.e2ee.encryptFields(payload, ["payload"]) : p.type === "session_file_change" && deps.e2ee ? deps.e2ee.encryptFields(payload, [
+      "path",
+      "oldText",
+      "newText",
+      "patchContent",
+      "isDirectory",
+      "directoryRemoved"
+    ]) : payload;
+    sendWsMessage(s, wire);
+  };
+  return { sendBridgeMessage, sendResult: sendResult2, sendSessionUpdate };
+}
+
+// src/agents/acp/from-bridge/bridge-prompt-preamble.ts
 import { execFile as execFile10 } from "node:child_process";
 import { promisify as promisify10 } from "node:util";
 
@@ -32922,7 +33471,7 @@ async function resolveBridgeQueueBindFields(options) {
   return { canonicalQueueKey, repoId, cwdAbs };
 }
 
-// src/agents/acp/from-bridge/handle-bridge-prompt.ts
+// src/agents/acp/from-bridge/bridge-prompt-preamble.ts
 var execFileAsync9 = promisify10(execFile10);
 async function readGitBranch(cwd) {
   try {
@@ -32933,6 +33482,158 @@ async function readGitBranch(cwd) {
     return null;
   }
 }
+async function runBridgePromptPreamble(params) {
+  const { getWs, log: log2, sessionWorktreeManager, sessionId, runId, effectiveCwd } = params;
+  const s = getWs();
+  const worktreePaths = sessionWorktreeManager.getWorktreePathsForSession(sessionId) ?? [];
+  const repoRoots = await resolveSnapshotRepoRoots({
+    worktreePaths,
+    fallbackCwd: effectiveCwd,
+    log: log2
+  });
+  if (s && sessionId) {
+    const bind = await resolveBridgeQueueBindFields({
+      effectiveCwd,
+      worktreePaths,
+      primaryRepoRoots: repoRoots,
+      log: log2
+    });
+    if (bind) {
+      sendWsMessage(s, {
+        type: "bridge_queue_bind",
+        sessionId,
+        canonicalQueueKey: bind.canonicalQueueKey,
+        repoId: bind.repoId,
+        cwdAbs: bind.cwdAbs
+      });
+    }
+  }
+  if (s && sessionId) {
+    const cliGitBranch = await readGitBranch(effectiveCwd);
+    sendWsMessage(s, {
+      type: "session_git_context_report",
+      sessionId,
+      cliGitBranch,
+      agentUsesWorktree: sessionWorktreeManager.usesWorktreeSession(sessionId)
+    });
+  }
+  if (s && sessionId && runId) {
+    const cap = repoRoots.length > 0 ? await capturePreTurnSnapshot({ runId, repoRoots, agentCwd: effectiveCwd, log: log2 }) : { ok: false, error: "No git repos" };
+    sendWsMessage(s, {
+      type: "pre_turn_snapshot_report",
+      sessionId,
+      turnId: runId,
+      captured: cap.ok
+    });
+  }
+}
+function parseChangeSummarySnapshots(raw) {
+  if (!Array.isArray(raw) || raw.length === 0) return void 0;
+  const out = [];
+  for (const item of raw) {
+    if (!item || typeof item !== "object") continue;
+    const o = item;
+    const path32 = typeof o.path === "string" && o.path.trim() !== "" ? o.path.trim() : "";
+    if (!path32) continue;
+    const row = { path: path32 };
+    if (typeof o.patchContent === "string") row.patchContent = o.patchContent;
+    if (typeof o.oldText === "string") row.oldText = o.oldText;
+    if (typeof o.newText === "string") row.newText = o.newText;
+    if (o.directoryRemoved === true) row.directoryRemoved = true;
+    out.push(row);
+  }
+  return out.length > 0 ? out : void 0;
+}
+function parseFollowUpFieldsFromPromptMessage(msg) {
+  const followUpCatalogPromptId = typeof msg.followUpCatalogPromptId === "string" && msg.followUpCatalogPromptId.trim() !== "" ? msg.followUpCatalogPromptId.trim() : null;
+  const rawPaths = msg.sessionChangeSummaryFilePaths;
+  const sessionChangeSummaryFilePaths = Array.isArray(rawPaths) ? rawPaths.filter((p) => typeof p === "string" && p.trim() !== "").map((p) => p.trim()) : void 0;
+  const sessionChangeSummaryFileSnapshots = parseChangeSummarySnapshots(msg.sessionChangeSummaryFileSnapshots);
+  return { followUpCatalogPromptId, sessionChangeSummaryFilePaths, sessionChangeSummaryFileSnapshots };
+}
+
+// ../e2ee/src/constants.ts
+var E2EE_NONCE_BYTES = 12;
+
+// ../e2ee/src/types.ts
+function isE2eeEnvelope(value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
+  const o = value;
+  return typeof o.k === "string" && typeof o.n === "string" && typeof o.c === "string";
+}
+
+// ../e2ee/src/encoding.ts
+function base64UrlEncode(bytes) {
+  let binary = "";
+  for (let i = 0; i < bytes.length; i += 1) binary += String.fromCharCode(bytes[i]);
+  const b64 = btoa(binary);
+  return b64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
+}
+function base64UrlDecode(value) {
+  const b64 = value.replace(/-/g, "+").replace(/_/g, "/");
+  const padded = b64 + "=".repeat((4 - b64.length % 4) % 4);
+  const binary = atob(padded);
+  const out = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i += 1) out[i] = binary.charCodeAt(i);
+  return out;
+}
+
+// src/agents/acp/change-summary/decrypt-change-summary-file-input.ts
+function decryptChangeSummaryFileInput(row, e2ee) {
+  if (!e2ee) return row;
+  for (const field of ["path", "patchContent", "oldText", "newText"]) {
+    const raw = row[field];
+    if (typeof raw !== "string" || raw.trim() === "") continue;
+    let o;
+    try {
+      o = JSON.parse(raw);
+    } catch {
+      continue;
+    }
+    if (!isE2eeEnvelope(o.ee)) continue;
+    try {
+      const d = e2ee.decryptMessage(o);
+      const out = {
+        path: typeof d.path === "string" ? d.path : row.path
+      };
+      if (d.directoryRemoved === true) out.directoryRemoved = true;
+      else if (row.directoryRemoved === true) out.directoryRemoved = true;
+      if (typeof d.patchContent === "string") out.patchContent = d.patchContent;
+      else if (typeof row.patchContent === "string" && row.patchContent !== raw) out.patchContent = row.patchContent;
+      if (typeof d.oldText === "string") out.oldText = d.oldText;
+      else if (typeof row.oldText === "string") out.oldText = row.oldText;
+      if (typeof d.newText === "string") out.newText = d.newText;
+      else if (typeof row.newText === "string") out.newText = row.newText;
+      return out;
+    } catch {
+      return row;
+    }
+  }
+  return row;
+}
+
+// src/agents/acp/change-summary/resolve-change-summary-prompt-for-agent.ts
+function hasSummarizePayload(f) {
+  return f.directoryRemoved === true || f.patchContent != null && f.patchContent.trim() !== "" || f.oldText != null && f.oldText.trim() !== "" || f.newText != null && f.newText.trim() !== "";
+}
+function resolveChangeSummaryPromptForAgent(params) {
+  const isBuiltin = params.followUpCatalogPromptId === BUILTIN_SESSION_CHANGE_SUMMARY_FOLLOW_UP_CATALOG_PROMPT_ID;
+  const snaps = params.sessionChangeSummaryFileSnapshots;
+  if (!isBuiltin || !snaps || snaps.length === 0) {
+    return { promptText: params.bridgePromptText, sessionChangeSummaryFilePaths: void 0 };
+  }
+  const decrypted = dedupeSessionFileChangesByPath(snaps.map((row) => decryptChangeSummaryFileInput(row, params.e2ee)));
+  const withPayload = decrypted.filter(hasSummarizePayload);
+  if (withPayload.length === 0) {
+    return { promptText: params.bridgePromptText, sessionChangeSummaryFilePaths: void 0 };
+  }
+  return {
+    promptText: buildSessionChangeSummaryPrompt(withPayload),
+    sessionChangeSummaryFilePaths: withPayload.map((f) => f.path)
+  };
+}
+
+// src/agents/acp/from-bridge/handle-bridge-prompt.ts
 function handleBridgePrompt(msg, deps) {
   const { getWs, log: log2, acpManager, sessionWorktreeManager } = deps;
   const rawPrompt = msg.prompt;
@@ -32940,13 +33641,7 @@ function handleBridgePrompt(msg, deps) {
   const sessionId = msg.sessionId;
   const runId = typeof msg.runId === "string" ? msg.runId : void 0;
   const promptId = typeof msg.id === "string" ? msg.id : void 0;
-  const sendBridgeMessage = (message, encryptedFields = []) => {
-    const s = getWs();
-    if (!s) return false;
-    const wire = deps.e2ee && encryptedFields.length > 0 ? deps.e2ee.encryptFields(message, encryptedFields) : message;
-    sendWsMessage(s, wire);
-    return true;
-  };
+  const { sendBridgeMessage, sendResult: sendResult2, sendSessionUpdate } = createBridgePromptSenders(deps, getWs);
   if (!promptText.trim()) {
     log2(
       `[Bridge service] Prompt ignored: empty or missing prompt text (session ${typeof msg.sessionId === "string" ? msg.sessionId.slice(0, 8) : "\u2014"}\u2026, run ${typeof msg.runId === "string" ? msg.runId.slice(0, 8) : "\u2014"}\u2026).`
@@ -32969,72 +33664,35 @@ function handleBridgePrompt(msg, deps) {
   const agentType = typeof msg.agentType === "string" && msg.agentType.trim() ? msg.agentType.trim() : void 0;
   const mode = typeof msg.mode === "string" && msg.mode.trim() ? msg.mode.trim() : void 0;
   acpManager.logPromptReceivedFromBridge({ agentType, mode });
-  const sendResult2 = (result) => {
-    sendBridgeMessage(result, result.type === "prompt_result" ? ["output", "error"] : []);
-  };
-  const sendSessionUpdate = (payload) => {
-    const s = getWs();
-    if (!s) {
-      log2("[Bridge service] Session update not sent: not connected to the bridge.");
-      return;
-    }
-    const p = payload;
-    const wire = p.type === "session_update" && deps.e2ee ? deps.e2ee.encryptFields(payload, ["payload"]) : p.type === "session_file_change" && deps.e2ee ? deps.e2ee.encryptFields(payload, [
-      "path",
-      "oldText",
-      "newText",
-      "patchContent",
-      "isDirectory",
-      "directoryRemoved"
-    ]) : payload;
-    sendWsMessage(s, wire);
-  };
   async function preambleAndPrompt(resolvedCwd) {
-    const s = getWs();
     const effectiveCwd = path28.resolve(resolvedCwd ?? getBridgeWorkspaceDirectory());
-    const worktreePaths = sessionWorktreeManager.getWorktreePathsForSession(sessionId) ?? [];
-    const repoRoots = await resolveSnapshotRepoRoots({
-      worktreePaths,
-      fallbackCwd: effectiveCwd,
-      log: log2
+    await runBridgePromptPreamble({
+      getWs,
+      log: log2,
+      sessionWorktreeManager,
+      sessionId,
+      runId,
+      effectiveCwd
     });
-    if (s && sessionId) {
-      const bind = await resolveBridgeQueueBindFields({
-        effectiveCwd,
-        worktreePaths,
-        primaryRepoRoots: repoRoots,
-        log: log2
-      });
-      if (bind) {
-        sendWsMessage(s, {
-          type: "bridge_queue_bind",
-          sessionId,
-          canonicalQueueKey: bind.canonicalQueueKey,
-          repoId: bind.repoId,
-          cwdAbs: bind.cwdAbs
-        });
-      }
-    }
-    if (s && sessionId) {
-      const cliGitBranch = await readGitBranch(effectiveCwd);
-      sendWsMessage(s, {
-        type: "session_git_context_report",
-        sessionId,
-        cliGitBranch,
-        agentUsesWorktree: sessionWorktreeManager.usesWorktreeSession(sessionId)
-      });
-    }
-    if (s && sessionId && runId) {
-      const cap = repoRoots.length > 0 ? await capturePreTurnSnapshot({ runId, repoRoots, agentCwd: effectiveCwd, log: log2 }) : { ok: false, error: "No git repos" };
-      sendWsMessage(s, {
-        type: "pre_turn_snapshot_report",
-        sessionId,
-        turnId: runId,
-        captured: cap.ok
-      });
+    const {
+      followUpCatalogPromptId,
+      sessionChangeSummaryFilePaths: pathsFromBridge,
+      sessionChangeSummaryFileSnapshots
+    } = parseFollowUpFieldsFromPromptMessage(msg);
+    const { promptText: resolvedPromptText, sessionChangeSummaryFilePaths } = resolveChangeSummaryPromptForAgent({
+      followUpCatalogPromptId,
+      sessionChangeSummaryFileSnapshots,
+      bridgePromptText: promptText,
+      e2ee: deps.e2ee
+    });
+    if (sessionChangeSummaryFileSnapshots && sessionChangeSummaryFileSnapshots.length > 0 && resolvedPromptText === promptText) {
+      deps.log(
+        "[Agent] Change-summary snapshots were present but the prompt was not rebuilt (decrypt failed or empty payloads); sending the bridge prompt as-is."
+      );
     }
+    const pathsForUpload = sessionChangeSummaryFilePaths ?? pathsFromBridge;
     acpManager.handlePrompt({
-      promptText,
+      promptText: resolvedPromptText,
       promptId: msg.id,
       sessionId,
       runId,
@@ -33042,7 +33700,12 @@ function handleBridgePrompt(msg, deps) {
       agentType,
       cwd: effectiveCwd,
       sendResult: sendResult2,
-      sendSessionUpdate
+      sendSessionUpdate,
+      followUpCatalogPromptId,
+      sessionChangeSummaryFilePaths: pathsForUpload,
+      cloudApiBaseUrl: deps.cloudApiBaseUrl,
+      getCloudAccessToken: deps.getCloudAccessToken,
+      e2ee: deps.e2ee
     });
   }
   void sessionWorktreeManager.resolveCwdForPrompt(sessionId, { isNewSession, sessionWorktreesEnabled }).then((cwd) => preambleAndPrompt(cwd)).catch((err) => {
@@ -33907,32 +34570,6 @@ function createMainBridgeWebSocketLifecycle(params) {
   return { connect };
 }
 
-// ../e2ee/src/constants.ts
-var E2EE_NONCE_BYTES = 12;
-
-// ../e2ee/src/types.ts
-function isE2eeEnvelope(value) {
-  if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
-  const o = value;
-  return typeof o.k === "string" && typeof o.n === "string" && typeof o.c === "string";
-}
-
-// ../e2ee/src/encoding.ts
-function base64UrlEncode(bytes) {
-  let binary = "";
-  for (let i = 0; i < bytes.length; i += 1) binary += String.fromCharCode(bytes[i]);
-  const b64 = btoa(binary);
-  return b64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
-}
-function base64UrlDecode(value) {
-  const b64 = value.replace(/-/g, "+").replace(/_/g, "/");
-  const padded = b64 + "=".repeat((4 - b64.length % 4) % 4);
-  const binary = atob(padded);
-  const out = new Uint8Array(binary.length);
-  for (let i = 0; i < binary.length; i += 1) out[i] = binary.charCodeAt(i);
-  return out;
-}
-
 // src/lib/e2ee/cli-e2ee-runtime.ts
 import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
 function nonceFromCounter(prefix, counter) {
@@ -34055,7 +34692,9 @@ async function createBridgeConnection(options) {
     sendLocalSkillsReport,
     reportAutoDetectedAgents,
     devServerManager,
-    e2ee
+    e2ee,
+    cloudApiBaseUrl: apiUrl,
+    getCloudAccessToken: () => tokens.accessToken
   };
   const { connect } = createMainBridgeWebSocketLifecycle({
     state,