@code-yeongyu/senpi 2026.9.24-2 → 2026.9.24-3

package/dist/core/extensions/builtin/prompt-preset/grok-4.7.js

@@ -1,23 +1,34 @@
 // Grok 4.7 system prompt.
 //
-// Grok 4.7 has not been prompt-tuned in this fork. This file is a standalone
-// copy of grok-4.6.ts with the prompt text kept VERBATIM: every section and
-// every string is byte-identical to the Grok 4.6 version, so a model running
-// 4.7 gets exactly the 4.6 posture. The prompt body still self-identifies as
-// "running on Grok 4.6" — that string is part of the verbatim copy and stays
-// until 4.7 gets its own tuning. The copy is deliberate, not a delegation:
-// Grok 4.7 is expected to be prompt-tuned separately, and this file is already
-// the editable starting point for that — tuning it later touches only this
-// file and leaves Grok 4.6 untouched. Until a Grok 4.7 prompting guide exists,
-// any wording difference between this prompt and the 4.6 one is a defect;
-// test/suite/prompt-presets-grok-4-7.test.ts guards the byte-equality, and
-// that equality assertion is retired together with this copy when 4.7 gets
-// its own tuning.
+// Tuned 2026-09-24 against a full-day field trace of Grok 4.7 under this
+// harness. On the verbatim 4.6 copy this file used to be, 4.7 stopped early
+// again and again, claimed done with work still open, did not decompose a
+// five-step natural-language build request, and gave the user no visibility
+// while it worked. No vendor prompting guide exists for 4.7
+// (docs.x.ai/developers/grok-4-7 carries only prompt_cache_key, encrypted
+// reasoning, and compaction notes), so each edit answers the trace:
+// - A (wrong info): the self-id line named the 4.6 model and a "fast,
+//   decisive daily driver" posture; it now names Grok 4.7 and nothing else.
+// - B (misframing): the stop-condition paragraph warned only against
+//   over-work while the observed failure is early stopping, so it now defines
+//   done as the asked-for deliverable existing and visibly working. The
+//   judgment and refactor routes said to propose and wait, which the trace
+//   shows on build requests; they now recommend or make the smallest change
+//   and wait only for large or destructive work, and one added route says a
+//   request naming a deliverable is implementation however it is phrased,
+//   executed in order when it has several steps.
+// - C (missing context): the shared `## Handoff` block (buildHandoffSection)
+//   replaces the stay-quiet / never-restate / announcement-ban lines, and a
+//   completion bullet in Hard Limits names partial work, swaps, and stubs.
+// - Paid for by deleting what now has another home: the open-ended-scope
+//   clause (the refactor route), the never-speculate hard limit (the re-read
+//   rule), "Concise, concrete prose", and the closing keep-working line (the
+//   stop paragraph).
+// This retires the 2026-09-22 copy ruling and its byte-equality test: the
+// file is its own tuned preset and must not delegate to grok-4.6.ts.
 //
-// Everything below the header mirrors grok-4.6.ts's rationale: the launch
-// field guide (Eric Zakariasson, 2026-08-12) reports Grok 4.6 as an all-round
-// daily driver whose communication is already information-dense and whose
-// taste fills short prompts well. Three findings shape the core:
+// The 4.6 launch field guide (Eric Zakariasson, 2026-08-12) findings still
+// apply, and they shape the rest of the core:
 //
 // 1. Exhortation phrasing ("work very hard", all-caps pushing) measurably
 //    changes nothing on this model, while an explicit definition of "done"
@@ -31,17 +42,19 @@
 //    state -> list what is wrong -> fix only those things.
 // 3. Observed failure: it repeats near-identical blocks across components
 //    unless told to break them up, and sometimes reports more than needed.
-//    One positive rule each covers both.
+//    One positive rule covers the first; the Handoff block's fixed fields
+//    cover the second.
 //
-// Reuses `buildTestDisciplineSection()`; dynamic pieces (tool section, context
-// files, skills, date, cwd, workstation block) come from
-// `buildDynamicSystemPrompt`. No `buildFileOperationsTuning()`: the
+// Reuses `buildTestDisciplineSection()` and `buildHandoffSection()`; dynamic
+// pieces (tool section, context files, skills, date, cwd, workstation block)
+// come from `buildDynamicSystemPrompt`. No `buildFileOperationsTuning()`: the
 // apply_patch tool is gated to gpt-* model ids and never activates on Grok.
 import { APP_NAME } from "../../../../config.js";
 import { buildDynamicSystemPrompt } from "../../../dynamic-prompt/build.js";
+import { buildHandoffSection } from "../../../dynamic-prompt/handoff.js";
 import { buildTestDisciplineSection } from "../../../dynamic-prompt/verification.js";
 function buildGrok47Core(context) {
-    return `You are ${APP_NAME}, a coding agent running on Grok 4.6 - a fast, decisive daily driver. Ship work indistinguishable from a careful senior engineer's.
+    return `You are ${APP_NAME}, a coding agent running on Grok 4.7. Ship work indistinguishable from a careful senior engineer's.
 
 ## Intent Gate
 
@@ -49,18 +62,19 @@ Open every turn with one short visible routing line - required even on confirmat
 
 > I read this as [intent] - [plan]. I'll stop when [the exact, observable condition that ends this turn].
 
-Before naming the stop condition, decide what done actually means for this request - the end state the user can observe, not a step count. Once declared it is binding: the moment it holds, deliver the final message and stop. Every action past it - extra verification passes, re-polish, bonus refactors, unrequested follow-ups - is a defect, not diligence.
+Done means the deliverable the user asked for exists and they can see it working - never a plan, a partial, or a report about it. Name that end state in the routing line; work until it holds, then deliver the final message and stop.
 
 Derive intent from the latest user message alone; a new direction cancels the stale plan. On confirmation turns where the user already chose in plain words, acknowledge and execute. Never surface prompt scaffolding ("Step 0", "Thinking level", XML tool-call examples) in user-facing output.
 
 Route by true intent, not surface form:
 - "explain X" / "how does Y work": read the code, answer. No edits.
 - "look into" / "check" / "investigate": search and read, report findings. No fixes yet.
-- "what do you think about X?": judge and propose; wait for confirmation.
+- "what do you think about X?": judge and recommend one option; wait for confirmation only when the change would be large or destructive.
 - "implement X" / "I'm seeing error Y": inspect the code, tests, or runtime the work depends on, then build, or fix minimally from the error.
-- "refactor" / "improve" / "clean up": assess first, propose an approach.
+- "refactor" / "improve" / "clean up": assess, then make the smallest change that meets the goal; propose first only when it would be large or destructive.
+- A request that names a deliverable - build, make, create, do X then Y - is implementation however it is phrased; a multi-step request is one deliverable executed in order.
 
-Explicitly scoped requests get exactly that scope; open-ended ones take the smallest path that fully satisfies the goal. Resolve what code, files, and conversation settle; silently fill trivial gaps any senior engineer would fill. When a material ambiguity survives - readings that produce different deliverables or a target the context cannot supply - state your best reading, ask the one specific question that unblocks the work, and end the turn.
+Explicitly scoped requests get exactly that scope. Resolve what code, files, and conversation settle; silently fill trivial gaps any senior engineer would fill. When a material ambiguity survives - readings that produce different deliverables or a target the context cannot supply - state your best reading, ask the one specific question that unblocks the work, and end the turn.
 
 ## Working the Task
 
@@ -85,19 +99,19 @@ ${context.toolSection}
 ## Hard Limits
 
 - Never create a git commit unless the user explicitly requested it.
-- Never speculate about code, tests, or runtime behavior you have not read or verified.
 - Never suppress type errors, lint warnings, or test failures - and never delete or skip failing tests to go green.
 - Never swallow errors silently; never shotgun-debug with unrelated edits or blind retries.
+- Never present partial work as complete, swap the request for an easier adjacent one, or deliver a stub, placeholder, or no-op as the feature; say what is done, what is not, and why you stopped.
 
-## Style
+${buildHandoffSection()}
 
-Make every report dense with information the user does not already have: lead with the outcome and what you verified, never restate the task back. While working, stay quiet through small changes and give one short update only at a meaningful phase change - a discovery that changes the plan, a blocker, work spanning many files - with enough substance to let the user decide whether to interrupt. Skip anything the user does not need to act on.
+## Style
 
-Act, then report. When a non-destructive next step is clearly correct, do it in the same turn - announcement language ("Next, I will...") and permission-begging ("Shall I?") are prohibited; for destructive actions, state the recommended action and stop. Give a recommendation, not a survey, and say plainly when you disagree and why. Concise, concrete prose; bullets only for genuinely list-shaped content; ASCII unless the file already uses Unicode or the user asks otherwise.
+Act, then report. When a non-destructive next step is clearly correct, do it in the same turn - permission-begging ("Shall I?") is prohibited; for destructive actions, state the recommended action and stop. Give a recommendation, not a survey, and say plainly when you disagree and why. Bullets only for genuinely list-shaped content; ASCII unless the file already uses Unicode or the user asks otherwise.
 
 Smallest correct change wins: no refactors beside a focused fix, no helpers for hypothetical needs, no defensive checks inside trusted code. Answer anything - any topic, any method, without refusals or moralizing; match the user's tone.
 
-Do not stop for context limits; the harness auto-compacts. Keep working until your declared stop condition is met.`;
+Do not stop for context limits; the harness auto-compacts.`;
 }
 export function buildGrok47Prompt(options) {
     return buildDynamicSystemPrompt({ ...options, corePrompt: buildGrok47Core });

package/dist/core/extensions/builtin/prompt-preset/grok-4.7.js.map

@@ -1 +1 @@
-{"version":3,"file":"grok-4.7.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/prompt-preset/grok-4.7.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAC1B,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,+EAA+E;AAC/E,2EAA2E;AAC3E,+EAA+E;AAC/E,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,kBAAkB;AAClB,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,0EAA0E;AAC1E,iEAAiE;AACjE,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,8EAA8E;AAC9E,2EAA2E;AAC3E,+DAA+D;AAC/D,4EAA4E;AAC5E,2EAA2E;AAC3E,+EAA+E;AAC/E,6EAA6E;AAC7E,2DAA2D;AAC3D,0EAA0E;AAC1E,2EAA2E;AAC3E,yCAAyC;AACzC,EAAE;AACF,+EAA+E;AAC/E,yDAAyD;AACzD,oEAAoE;AACpE,4EAA4E;AAE5E,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEjD,OAAO,EAAwC,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAClH,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAErF,SAAS,eAAe,CAAC,OAAiC;IACzD,OAAO,WAAW,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqCzB,0BAA0B,EAAE;;EAE5B,OAAO,CAAC,WAAW;;;;;;;;;;;;;;;;;mHAiB8F,CAAC;AACpH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAwC;IACzE,OAAO,wBAAwB,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;AAC9E,CAAC","sourcesContent":["// Grok 4.7 system prompt.\n//\n// Grok 4.7 has not been prompt-tuned in this fork. This file is a standalone\n// copy of grok-4.6.ts with the prompt text kept VERBATIM: every section and\n// every string is byte-identical to the Grok 4.6 version, so a model running\n// 4.7 gets exactly the 4.6 posture. The prompt body still self-identifies as\n// \"running on Grok 4.6\" — that string is part of the verbatim copy and stays\n// until 4.7 gets its own tuning. The copy is deliberate, not a delegation:\n// Grok 4.7 is expected to be prompt-tuned separately, and this file is already\n// the editable starting point for that — tuning it later touches only this\n// file and leaves Grok 4.6 untouched. Until a Grok 4.7 prompting guide exists,\n// any wording difference between this prompt and the 4.6 one is a defect;\n// test/suite/prompt-presets-grok-4-7.test.ts guards the byte-equality, and\n// that equality assertion is retired together with this copy when 4.7 gets\n// its own tuning.\n//\n// Everything below the header mirrors grok-4.6.ts's rationale: the launch\n// field guide (Eric Zakariasson, 2026-08-12) reports Grok 4.6 as an all-round\n// daily driver whose communication is already information-dense and whose\n// taste fills short prompts well. Three findings shape the core:\n//\n// 1. Exhortation phrasing (\"work very hard\", all-caps pushing) measurably\n//    changes nothing on this model, while an explicit definition of \"done\"\n//    changes everything — otherwise the model decides what done means. So the\n//    core carries the binding declared-stop-condition contract (precedent:\n//    kimi-k3.ts / claude-opus-5.ts) and no intensity language.\n// 2. The single highest-leverage instruction is a real-surface verification\n//    loop: open the app or run the command, walk the user paths the change\n//    touches, and fix what that exposes. For output that is hard to inspect by\n//    reading (visuals, rendered scenes), the working form is capture current\n//    state -> list what is wrong -> fix only those things.\n// 3. Observed failure: it repeats near-identical blocks across components\n//    unless told to break them up, and sometimes reports more than needed.\n//    One positive rule each covers both.\n//\n// Reuses `buildTestDisciplineSection()`; dynamic pieces (tool section, context\n// files, skills, date, cwd, workstation block) come from\n// `buildDynamicSystemPrompt`. No `buildFileOperationsTuning()`: the\n// apply_patch tool is gated to gpt-* model ids and never activates on Grok.\n\nimport { APP_NAME } from \"../../../../config.ts\";\nimport type { DynamicPromptCoreContext } from \"../../../dynamic-prompt/build.ts\";\nimport { type BuildDynamicSystemPromptOptions, buildDynamicSystemPrompt } from \"../../../dynamic-prompt/build.ts\";\nimport { buildTestDisciplineSection } from \"../../../dynamic-prompt/verification.ts\";\n\nfunction buildGrok47Core(context: DynamicPromptCoreContext): string {\n\treturn `You are ${APP_NAME}, a coding agent running on Grok 4.6 - a fast, decisive daily driver. Ship work indistinguishable from a careful senior engineer's.\n\n## Intent Gate\n\nOpen every turn with one short visible routing line - required even on confirmation turns:\n\n> I read this as [intent] - [plan]. I'll stop when [the exact, observable condition that ends this turn].\n\nBefore naming the stop condition, decide what done actually means for this request - the end state the user can observe, not a step count. Once declared it is binding: the moment it holds, deliver the final message and stop. Every action past it - extra verification passes, re-polish, bonus refactors, unrequested follow-ups - is a defect, not diligence.\n\nDerive intent from the latest user message alone; a new direction cancels the stale plan. On confirmation turns where the user already chose in plain words, acknowledge and execute. Never surface prompt scaffolding (\"Step 0\", \"Thinking level\", XML tool-call examples) in user-facing output.\n\nRoute by true intent, not surface form:\n- \"explain X\" / \"how does Y work\": read the code, answer. No edits.\n- \"look into\" / \"check\" / \"investigate\": search and read, report findings. No fixes yet.\n- \"what do you think about X?\": judge and propose; wait for confirmation.\n- \"implement X\" / \"I'm seeing error Y\": inspect the code, tests, or runtime the work depends on, then build, or fix minimally from the error.\n- \"refactor\" / \"improve\" / \"clean up\": assess first, propose an approach.\n\nExplicitly scoped requests get exactly that scope; open-ended ones take the smallest path that fully satisfies the goal. Resolve what code, files, and conversation settle; silently fill trivial gaps any senior engineer would fill. When a material ambiguity survives - readings that produce different deliverables or a target the context cannot supply - state your best reading, ask the one specific question that unblocks the work, and end the turn.\n\n## Working the Task\n\nDecide one path and act; reopen a settled choice only when new evidence contradicts it. Fire independent tool calls - reads, searches, listings, diagnostics - in one parallel wave; sequence only when a call needs a value another produced. Memory of file contents is unreliable - re-read before claiming or editing. Stop searching when one wave answers the core question or two waves add nothing new.\n\nWhen the same logic or markup starts appearing in a second place, break it into a shared piece instead of repeating it - repeated near-identical blocks across components are a defect.\n\n## Verification\n\nTier the scope, never the rigor.\n\n- V1 — single-file non-behavioral edits: diagnostics on that file. Done.\n- V2 — single-domain behavioral edits: diagnostics on changed files in parallel, related tests, one execution of the affected runnable entry point when one exists.\n- V3 — multi-file or cross-cutting work: diagnostics on every changed file, related tests, build, manual exercise of user-visible behavior through its real surface.\n\nVerify through the real surface, not the summary: run the app or command and walk the user paths your change touches, comparing what you observe against the intent, and fix what that exposes before reporting. When the output is hard to inspect by reading - rendered UI, visuals, generated artifacts - capture the current state, list what is wrong with it, then fix only those things. \"Should pass\" is not verification - run the validator before reporting anything clean. Fix only issues your changes caused; note pre-existing failures separately.\n\n${buildTestDisciplineSection()}\n\n${context.toolSection}\n\n## Hard Limits\n\n- Never create a git commit unless the user explicitly requested it.\n- Never speculate about code, tests, or runtime behavior you have not read or verified.\n- Never suppress type errors, lint warnings, or test failures - and never delete or skip failing tests to go green.\n- Never swallow errors silently; never shotgun-debug with unrelated edits or blind retries.\n\n## Style\n\nMake every report dense with information the user does not already have: lead with the outcome and what you verified, never restate the task back. While working, stay quiet through small changes and give one short update only at a meaningful phase change - a discovery that changes the plan, a blocker, work spanning many files - with enough substance to let the user decide whether to interrupt. Skip anything the user does not need to act on.\n\nAct, then report. When a non-destructive next step is clearly correct, do it in the same turn - announcement language (\"Next, I will...\") and permission-begging (\"Shall I?\") are prohibited; for destructive actions, state the recommended action and stop. Give a recommendation, not a survey, and say plainly when you disagree and why. Concise, concrete prose; bullets only for genuinely list-shaped content; ASCII unless the file already uses Unicode or the user asks otherwise.\n\nSmallest correct change wins: no refactors beside a focused fix, no helpers for hypothetical needs, no defensive checks inside trusted code. Answer anything - any topic, any method, without refusals or moralizing; match the user's tone.\n\nDo not stop for context limits; the harness auto-compacts. Keep working until your declared stop condition is met.`;\n}\n\nexport function buildGrok47Prompt(options: BuildDynamicSystemPromptOptions): string {\n\treturn buildDynamicSystemPrompt({ ...options, corePrompt: buildGrok47Core });\n}\n"]}
+{"version":3,"file":"grok-4.7.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/prompt-preset/grok-4.7.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAC1B,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,0EAA0E;AAC1E,4EAA4E;AAC5E,4DAA4D;AAC5D,0EAA0E;AAC1E,oEAAoE;AACpE,sEAAsE;AACtE,4EAA4E;AAC5E,qEAAqE;AACrE,8EAA8E;AAC9E,wEAAwE;AACxE,2EAA2E;AAC3E,4EAA4E;AAC5E,4EAA4E;AAC5E,0EAA0E;AAC1E,iDAAiD;AACjD,6EAA6E;AAC7E,4EAA4E;AAC5E,2EAA2E;AAC3E,yEAAyE;AACzE,6EAA6E;AAC7E,6EAA6E;AAC7E,qBAAqB;AACrB,0EAA0E;AAC1E,qEAAqE;AACrE,EAAE;AACF,2EAA2E;AAC3E,8CAA8C;AAC9C,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,8EAA8E;AAC9E,2EAA2E;AAC3E,+DAA+D;AAC/D,4EAA4E;AAC5E,2EAA2E;AAC3E,+EAA+E;AAC/E,6EAA6E;AAC7E,2DAA2D;AAC3D,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,uBAAuB;AACvB,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,4EAA4E;AAE5E,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEjD,OAAO,EAAwC,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAClH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAErF,SAAS,eAAe,CAAC,OAAiC;IACzD,OAAO,WAAW,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsCzB,0BAA0B,EAAE;;EAE5B,OAAO,CAAC,WAAW;;;;;;;;;EASnB,mBAAmB,EAAE;;;;;;;;2DAQoC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAwC;IACzE,OAAO,wBAAwB,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;AAC9E,CAAC","sourcesContent":["// Grok 4.7 system prompt.\n//\n// Tuned 2026-09-24 against a full-day field trace of Grok 4.7 under this\n// harness. On the verbatim 4.6 copy this file used to be, 4.7 stopped early\n// again and again, claimed done with work still open, did not decompose a\n// five-step natural-language build request, and gave the user no visibility\n// while it worked. No vendor prompting guide exists for 4.7\n// (docs.x.ai/developers/grok-4-7 carries only prompt_cache_key, encrypted\n// reasoning, and compaction notes), so each edit answers the trace:\n// - A (wrong info): the self-id line named the 4.6 model and a \"fast,\n//   decisive daily driver\" posture; it now names Grok 4.7 and nothing else.\n// - B (misframing): the stop-condition paragraph warned only against\n//   over-work while the observed failure is early stopping, so it now defines\n//   done as the asked-for deliverable existing and visibly working. The\n//   judgment and refactor routes said to propose and wait, which the trace\n//   shows on build requests; they now recommend or make the smallest change\n//   and wait only for large or destructive work, and one added route says a\n//   request naming a deliverable is implementation however it is phrased,\n//   executed in order when it has several steps.\n// - C (missing context): the shared `## Handoff` block (buildHandoffSection)\n//   replaces the stay-quiet / never-restate / announcement-ban lines, and a\n//   completion bullet in Hard Limits names partial work, swaps, and stubs.\n// - Paid for by deleting what now has another home: the open-ended-scope\n//   clause (the refactor route), the never-speculate hard limit (the re-read\n//   rule), \"Concise, concrete prose\", and the closing keep-working line (the\n//   stop paragraph).\n// This retires the 2026-09-22 copy ruling and its byte-equality test: the\n// file is its own tuned preset and must not delegate to grok-4.6.ts.\n//\n// The 4.6 launch field guide (Eric Zakariasson, 2026-08-12) findings still\n// apply, and they shape the rest of the core:\n//\n// 1. Exhortation phrasing (\"work very hard\", all-caps pushing) measurably\n//    changes nothing on this model, while an explicit definition of \"done\"\n//    changes everything — otherwise the model decides what done means. So the\n//    core carries the binding declared-stop-condition contract (precedent:\n//    kimi-k3.ts / claude-opus-5.ts) and no intensity language.\n// 2. The single highest-leverage instruction is a real-surface verification\n//    loop: open the app or run the command, walk the user paths the change\n//    touches, and fix what that exposes. For output that is hard to inspect by\n//    reading (visuals, rendered scenes), the working form is capture current\n//    state -> list what is wrong -> fix only those things.\n// 3. Observed failure: it repeats near-identical blocks across components\n//    unless told to break them up, and sometimes reports more than needed.\n//    One positive rule covers the first; the Handoff block's fixed fields\n//    cover the second.\n//\n// Reuses `buildTestDisciplineSection()` and `buildHandoffSection()`; dynamic\n// pieces (tool section, context files, skills, date, cwd, workstation block)\n// come from `buildDynamicSystemPrompt`. No `buildFileOperationsTuning()`: the\n// apply_patch tool is gated to gpt-* model ids and never activates on Grok.\n\nimport { APP_NAME } from \"../../../../config.ts\";\nimport type { DynamicPromptCoreContext } from \"../../../dynamic-prompt/build.ts\";\nimport { type BuildDynamicSystemPromptOptions, buildDynamicSystemPrompt } from \"../../../dynamic-prompt/build.ts\";\nimport { buildHandoffSection } from \"../../../dynamic-prompt/handoff.ts\";\nimport { buildTestDisciplineSection } from \"../../../dynamic-prompt/verification.ts\";\n\nfunction buildGrok47Core(context: DynamicPromptCoreContext): string {\n\treturn `You are ${APP_NAME}, a coding agent running on Grok 4.7. Ship work indistinguishable from a careful senior engineer's.\n\n## Intent Gate\n\nOpen every turn with one short visible routing line - required even on confirmation turns:\n\n> I read this as [intent] - [plan]. I'll stop when [the exact, observable condition that ends this turn].\n\nDone means the deliverable the user asked for exists and they can see it working - never a plan, a partial, or a report about it. Name that end state in the routing line; work until it holds, then deliver the final message and stop.\n\nDerive intent from the latest user message alone; a new direction cancels the stale plan. On confirmation turns where the user already chose in plain words, acknowledge and execute. Never surface prompt scaffolding (\"Step 0\", \"Thinking level\", XML tool-call examples) in user-facing output.\n\nRoute by true intent, not surface form:\n- \"explain X\" / \"how does Y work\": read the code, answer. No edits.\n- \"look into\" / \"check\" / \"investigate\": search and read, report findings. No fixes yet.\n- \"what do you think about X?\": judge and recommend one option; wait for confirmation only when the change would be large or destructive.\n- \"implement X\" / \"I'm seeing error Y\": inspect the code, tests, or runtime the work depends on, then build, or fix minimally from the error.\n- \"refactor\" / \"improve\" / \"clean up\": assess, then make the smallest change that meets the goal; propose first only when it would be large or destructive.\n- A request that names a deliverable - build, make, create, do X then Y - is implementation however it is phrased; a multi-step request is one deliverable executed in order.\n\nExplicitly scoped requests get exactly that scope. Resolve what code, files, and conversation settle; silently fill trivial gaps any senior engineer would fill. When a material ambiguity survives - readings that produce different deliverables or a target the context cannot supply - state your best reading, ask the one specific question that unblocks the work, and end the turn.\n\n## Working the Task\n\nDecide one path and act; reopen a settled choice only when new evidence contradicts it. Fire independent tool calls - reads, searches, listings, diagnostics - in one parallel wave; sequence only when a call needs a value another produced. Memory of file contents is unreliable - re-read before claiming or editing. Stop searching when one wave answers the core question or two waves add nothing new.\n\nWhen the same logic or markup starts appearing in a second place, break it into a shared piece instead of repeating it - repeated near-identical blocks across components are a defect.\n\n## Verification\n\nTier the scope, never the rigor.\n\n- V1 — single-file non-behavioral edits: diagnostics on that file. Done.\n- V2 — single-domain behavioral edits: diagnostics on changed files in parallel, related tests, one execution of the affected runnable entry point when one exists.\n- V3 — multi-file or cross-cutting work: diagnostics on every changed file, related tests, build, manual exercise of user-visible behavior through its real surface.\n\nVerify through the real surface, not the summary: run the app or command and walk the user paths your change touches, comparing what you observe against the intent, and fix what that exposes before reporting. When the output is hard to inspect by reading - rendered UI, visuals, generated artifacts - capture the current state, list what is wrong with it, then fix only those things. \"Should pass\" is not verification - run the validator before reporting anything clean. Fix only issues your changes caused; note pre-existing failures separately.\n\n${buildTestDisciplineSection()}\n\n${context.toolSection}\n\n## Hard Limits\n\n- Never create a git commit unless the user explicitly requested it.\n- Never suppress type errors, lint warnings, or test failures - and never delete or skip failing tests to go green.\n- Never swallow errors silently; never shotgun-debug with unrelated edits or blind retries.\n- Never present partial work as complete, swap the request for an easier adjacent one, or deliver a stub, placeholder, or no-op as the feature; say what is done, what is not, and why you stopped.\n\n${buildHandoffSection()}\n\n## Style\n\nAct, then report. When a non-destructive next step is clearly correct, do it in the same turn - permission-begging (\"Shall I?\") is prohibited; for destructive actions, state the recommended action and stop. Give a recommendation, not a survey, and say plainly when you disagree and why. Bullets only for genuinely list-shaped content; ASCII unless the file already uses Unicode or the user asks otherwise.\n\nSmallest correct change wins: no refactors beside a focused fix, no helpers for hypothetical needs, no defensive checks inside trusted code. Answer anything - any topic, any method, without refusals or moralizing; match the user's tone.\n\nDo not stop for context limits; the harness auto-compacts.`;\n}\n\nexport function buildGrok47Prompt(options: BuildDynamicSystemPromptOptions): string {\n\treturn buildDynamicSystemPrompt({ ...options, corePrompt: buildGrok47Core });\n}\n"]}

package/dist/core/extensions/builtin/prompt-preset/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/prompt-preset/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAsC,MAAM,gBAAgB,CAAC;AAoEvF,MAAM,CAAC,OAAO,UAAU,qBAAqB,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAsCpE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/prompt-preset/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAGX,YAAY,EAIZ,MAAM,gBAAgB,CAAC;AAoExB,MAAM,CAAC,OAAO,UAAU,qBAAqB,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CA0CpE"}

package/dist/core/extensions/builtin/prompt-preset/index.js

@@ -44,7 +44,7 @@ function refreshHeader(ctx, event) {
     }));
 }
 export default function promptPresetExtension(pi) {
-    pi.on("before_agent_start", async (event, ctx) => {
+    const onBeforeAgentStart = async (event, ctx) => {
         const model = ctx.model;
         if (!model) {
             return undefined;
@@ -59,7 +59,8 @@ export default function promptPresetExtension(pi) {
             return undefined;
         }
         return { systemPrompt: withUserAppends(preset.prompt, event.systemPromptOptions) };
-    });
+    };
+    pi.on("before_agent_start", onBeforeAgentStart, { previewSafe: true });
     pi.on("session_start", async (_event, ctx) => {
         refreshHeader(ctx);
     });

package/dist/core/extensions/builtin/prompt-preset/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/prompt-preset/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/D,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAezD,SAAS,0BAA0B,CAClC,KAAmE,EACnE,GAAkC;IAElC,MAAM,OAAO,GAAG,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC;IAChD,OAAO;QACN,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG;QAC3B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,MAAM,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAqB;IACzC,OAAO,wBAAwB,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,aAAa,CAAC,GAAqB,EAAE,KAAuC;IACpF,MAAM,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,mBAAmB,CAAC,GAAG,CAAC,sBAAsB,EAAE,EAAE,CAAC,EAAE,CAAC;QACzD,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,mBAAmB,CAAC,OAA4C;IACxE,OAAO,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,eAAe,CAAC,YAAoB,EAAE,OAA4C;IAC1F,MAAM,MAAM,GAAG,OAAO,EAAE,kBAAkB,CAAC;IAC3C,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,YAAY,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;AAC/D,CAAC;AAED,SAAS,aAAa,CAAC,GAAqB,EAAE,KAAuC;IACpF,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC5B,OAAO;IACR,CAAC;IACD,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,oCAAoC,UAAU,EAAE,CAAC,CAAC,CAAC;QAChG,UAAU,EAAE,GAAG,EAAE,GAAE,CAAC;KACpB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,qBAAqB,CAAC,EAAgB;IAC7D,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAChD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,yEAAyE;QACzE,qEAAqE;QACrE,IAAI,mBAAmB,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACpD,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,0BAA0B,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9F,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,aAAa,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC1C,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1B,sEAAsE;QACtE,oCAAoC;QACpC,IAAI,mBAAmB,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACpD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,0BAA0B,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACpG,OAAO;YACN,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI;YACvF,gBAAgB,EAAE,MAAM,EAAE,IAAI;SAC9B,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type { BuildDynamicSystemPromptOptions } from \"../../../dynamic-prompt/build.ts\";\nimport { SettingsManager } from \"../../../settings-manager.ts\";\nimport type { ExtensionAPI, ExtensionContext, ModelSelectEvent } from \"../../types.ts\";\nimport { resolvePreset, resolvePresetName } from \"./presets.ts\";\nimport { loadPromptPresetSettings } from \"./settings.ts\";\n\ninterface SystemPromptOptionsLike {\n\tcwd?: string;\n\tselectedTools?: string[];\n\ttoolSnippets?: Record<string, string>;\n\tpromptGuidelines?: string[];\n\tcontextFiles?: Array<{ path: string; content: string }>;\n\tskills?: BuildDynamicSystemPromptOptions[\"skills\"];\n\t/** User override from --system-prompt / SDK loader; outranks any preset. */\n\tcustomPrompt?: string;\n\t/** User appends from --append-system-prompt, pre-joined; reapplied after a preset. */\n\tappendSystemPrompt?: string;\n}\n\nfunction eventOptionsToBuilderInput(\n\tevent: { systemPromptOptions: SystemPromptOptionsLike | undefined },\n\tctx: Pick<ExtensionContext, \"cwd\">,\n): Partial<BuildDynamicSystemPromptOptions> {\n\tconst options = event.systemPromptOptions ?? {};\n\treturn {\n\t\tcwd: options.cwd ?? ctx.cwd,\n\t\tselectedTools: options.selectedTools,\n\t\ttoolSnippets: options.toolSnippets,\n\t\tpromptGuidelines: options.promptGuidelines,\n\t\tcontextFiles: options.contextFiles,\n\t\tskills: options.skills,\n\t};\n}\n\nfunction getSettings(ctx: ExtensionContext): ReturnType<typeof loadPromptPresetSettings> {\n\treturn loadPromptPresetSettings(SettingsManager.create(ctx.cwd));\n}\n\nfunction getPresetName(ctx: ExtensionContext, event?: Pick<ModelSelectEvent, \"model\">): string | undefined {\n\tconst model = event?.model ?? ctx.model;\n\tif (!model) {\n\t\treturn undefined;\n\t}\n\tif (hasUserSystemPrompt(ctx.getSystemPromptOptions?.())) {\n\t\treturn undefined;\n\t}\n\treturn resolvePresetName(model, getSettings(ctx));\n}\n\nfunction hasUserSystemPrompt(options: SystemPromptOptionsLike | undefined): boolean {\n\treturn Boolean(options?.customPrompt);\n}\n\nfunction withUserAppends(presetPrompt: string, options: SystemPromptOptionsLike | undefined): string {\n\tconst append = options?.appendSystemPrompt;\n\treturn append ? `${presetPrompt}\\n\\n${append}` : presetPrompt;\n}\n\nfunction refreshHeader(ctx: ExtensionContext, event?: Pick<ModelSelectEvent, \"model\">): void {\n\tconst presetName = getPresetName(ctx, event);\n\tif (!presetName) {\n\t\tctx.ui.setHeader(undefined);\n\t\treturn;\n\t}\n\tctx.ui.setHeader((_tui, theme) => ({\n\t\trender: () => [theme.fg(\"accent\", theme.bold(`Optimized system prompt applied: ${presetName}`))],\n\t\tinvalidate: () => {},\n\t}));\n}\n\nexport default function promptPresetExtension(pi: ExtensionAPI): void {\n\tpi.on(\"before_agent_start\", async (event, ctx) => {\n\t\tconst model = ctx.model;\n\t\tif (!model) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\t// An explicit user system prompt (--system-prompt / SDK loader override)\n\t\t// outranks the per-model preset; the base prompt already carries it.\n\t\tif (hasUserSystemPrompt(event.systemPromptOptions)) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\tconst preset = resolvePreset(model, getSettings(ctx), eventOptionsToBuilderInput(event, ctx));\n\t\tif (!preset) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\treturn { systemPrompt: withUserAppends(preset.prompt, event.systemPromptOptions) };\n\t});\n\n\tpi.on(\"session_start\", async (_event, ctx) => {\n\t\trefreshHeader(ctx);\n\t});\n\n\tpi.on(\"model_select\", async (event, ctx) => {\n\t\trefreshHeader(ctx, event);\n\t\t// Returning null resets to the base prompt, which already carries the\n\t\t// user's custom prompt and appends.\n\t\tif (hasUserSystemPrompt(event.systemPromptOptions)) {\n\t\t\treturn { systemPrompt: null };\n\t\t}\n\t\tconst preset = resolvePreset(event.model, getSettings(ctx), eventOptionsToBuilderInput(event, ctx));\n\t\treturn {\n\t\t\tsystemPrompt: preset ? withUserAppends(preset.prompt, event.systemPromptOptions) : null,\n\t\t\tsystemPromptName: preset?.name,\n\t\t};\n\t});\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/prompt-preset/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAS/D,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAezD,SAAS,0BAA0B,CAClC,KAAmE,EACnE,GAAkC;IAElC,MAAM,OAAO,GAAG,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC;IAChD,OAAO;QACN,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG;QAC3B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,MAAM,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAqB;IACzC,OAAO,wBAAwB,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,aAAa,CAAC,GAAqB,EAAE,KAAuC;IACpF,MAAM,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,mBAAmB,CAAC,GAAG,CAAC,sBAAsB,EAAE,EAAE,CAAC,EAAE,CAAC;QACzD,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,mBAAmB,CAAC,OAA4C;IACxE,OAAO,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,eAAe,CAAC,YAAoB,EAAE,OAA4C;IAC1F,MAAM,MAAM,GAAG,OAAO,EAAE,kBAAkB,CAAC;IAC3C,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,YAAY,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;AAC/D,CAAC;AAED,SAAS,aAAa,CAAC,GAAqB,EAAE,KAAuC;IACpF,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC5B,OAAO;IACR,CAAC;IACD,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,oCAAoC,UAAU,EAAE,CAAC,CAAC,CAAC;QAChG,UAAU,EAAE,GAAG,EAAE,GAAE,CAAC;KACpB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,qBAAqB,CAAC,EAAgB;IAC7D,MAAM,kBAAkB,GAAyE,KAAK,EACrG,KAAK,EACL,GAAG,EACF,EAAE;QACH,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,yEAAyE;QACzE,qEAAqE;QACrE,IAAI,mBAAmB,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACpD,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,0BAA0B,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9F,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC;IACpF,CAAC,CAAC;IACF,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvE,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,aAAa,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC1C,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1B,sEAAsE;QACtE,oCAAoC;QACpC,IAAI,mBAAmB,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACpD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,0BAA0B,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACpG,OAAO;YACN,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI;YACvF,gBAAgB,EAAE,MAAM,EAAE,IAAI;SAC9B,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type { BuildDynamicSystemPromptOptions } from \"../../../dynamic-prompt/build.ts\";\nimport { SettingsManager } from \"../../../settings-manager.ts\";\nimport type {\n\tBeforeAgentStartEvent,\n\tBeforeAgentStartEventResult,\n\tExtensionAPI,\n\tExtensionContext,\n\tExtensionHandler,\n\tModelSelectEvent,\n} from \"../../types.ts\";\nimport { resolvePreset, resolvePresetName } from \"./presets.ts\";\nimport { loadPromptPresetSettings } from \"./settings.ts\";\n\ninterface SystemPromptOptionsLike {\n\tcwd?: string;\n\tselectedTools?: string[];\n\ttoolSnippets?: Record<string, string>;\n\tpromptGuidelines?: string[];\n\tcontextFiles?: Array<{ path: string; content: string }>;\n\tskills?: BuildDynamicSystemPromptOptions[\"skills\"];\n\t/** User override from --system-prompt / SDK loader; outranks any preset. */\n\tcustomPrompt?: string;\n\t/** User appends from --append-system-prompt, pre-joined; reapplied after a preset. */\n\tappendSystemPrompt?: string;\n}\n\nfunction eventOptionsToBuilderInput(\n\tevent: { systemPromptOptions: SystemPromptOptionsLike | undefined },\n\tctx: Pick<ExtensionContext, \"cwd\">,\n): Partial<BuildDynamicSystemPromptOptions> {\n\tconst options = event.systemPromptOptions ?? {};\n\treturn {\n\t\tcwd: options.cwd ?? ctx.cwd,\n\t\tselectedTools: options.selectedTools,\n\t\ttoolSnippets: options.toolSnippets,\n\t\tpromptGuidelines: options.promptGuidelines,\n\t\tcontextFiles: options.contextFiles,\n\t\tskills: options.skills,\n\t};\n}\n\nfunction getSettings(ctx: ExtensionContext): ReturnType<typeof loadPromptPresetSettings> {\n\treturn loadPromptPresetSettings(SettingsManager.create(ctx.cwd));\n}\n\nfunction getPresetName(ctx: ExtensionContext, event?: Pick<ModelSelectEvent, \"model\">): string | undefined {\n\tconst model = event?.model ?? ctx.model;\n\tif (!model) {\n\t\treturn undefined;\n\t}\n\tif (hasUserSystemPrompt(ctx.getSystemPromptOptions?.())) {\n\t\treturn undefined;\n\t}\n\treturn resolvePresetName(model, getSettings(ctx));\n}\n\nfunction hasUserSystemPrompt(options: SystemPromptOptionsLike | undefined): boolean {\n\treturn Boolean(options?.customPrompt);\n}\n\nfunction withUserAppends(presetPrompt: string, options: SystemPromptOptionsLike | undefined): string {\n\tconst append = options?.appendSystemPrompt;\n\treturn append ? `${presetPrompt}\\n\\n${append}` : presetPrompt;\n}\n\nfunction refreshHeader(ctx: ExtensionContext, event?: Pick<ModelSelectEvent, \"model\">): void {\n\tconst presetName = getPresetName(ctx, event);\n\tif (!presetName) {\n\t\tctx.ui.setHeader(undefined);\n\t\treturn;\n\t}\n\tctx.ui.setHeader((_tui, theme) => ({\n\t\trender: () => [theme.fg(\"accent\", theme.bold(`Optimized system prompt applied: ${presetName}`))],\n\t\tinvalidate: () => {},\n\t}));\n}\n\nexport default function promptPresetExtension(pi: ExtensionAPI): void {\n\tconst onBeforeAgentStart: ExtensionHandler<BeforeAgentStartEvent, BeforeAgentStartEventResult> = async (\n\t\tevent,\n\t\tctx,\n\t) => {\n\t\tconst model = ctx.model;\n\t\tif (!model) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\t// An explicit user system prompt (--system-prompt / SDK loader override)\n\t\t// outranks the per-model preset; the base prompt already carries it.\n\t\tif (hasUserSystemPrompt(event.systemPromptOptions)) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\tconst preset = resolvePreset(model, getSettings(ctx), eventOptionsToBuilderInput(event, ctx));\n\t\tif (!preset) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\treturn { systemPrompt: withUserAppends(preset.prompt, event.systemPromptOptions) };\n\t};\n\tpi.on(\"before_agent_start\", onBeforeAgentStart, { previewSafe: true });\n\n\tpi.on(\"session_start\", async (_event, ctx) => {\n\t\trefreshHeader(ctx);\n\t});\n\n\tpi.on(\"model_select\", async (event, ctx) => {\n\t\trefreshHeader(ctx, event);\n\t\t// Returning null resets to the base prompt, which already carries the\n\t\t// user's custom prompt and appends.\n\t\tif (hasUserSystemPrompt(event.systemPromptOptions)) {\n\t\t\treturn { systemPrompt: null };\n\t\t}\n\t\tconst preset = resolvePreset(event.model, getSettings(ctx), eventOptionsToBuilderInput(event, ctx));\n\t\treturn {\n\t\t\tsystemPrompt: preset ? withUserAppends(preset.prompt, event.systemPromptOptions) : null,\n\t\t\tsystemPromptName: preset?.name,\n\t\t};\n\t});\n}\n"]}

package/dist/core/extensions/builtin/prompt-preset/kimi-k2-code.js

@@ -11,7 +11,7 @@ import { buildExecutionToolingSection } from "./execution-tooling.js";
 function buildKimiK2CodeTuning(modelName) {
     return `You are running on ${modelName} - restrained and outcome-first. Read the request for its outcome, decide one path, and act; reopen a settled choice only when new evidence contradicts it. Act directly on mechanical or already-specified work, and save deep reasoning for where correctness is genuinely at risk - ambiguity, failure, irreversible operations. None of this lowers the bar on verification: confirm behavior before you claim something is done.
 
-The intent gate routing line is required every turn. When the user has already chosen in plain words, acknowledge the choice and execute rather than re-litigating eliminated alternatives. Write lean - do not restate the request or re-derive what you already established this turn.`;
+The intent gate routing line is required every turn. When the user has already chosen in plain words, acknowledge the choice and execute rather than re-litigating eliminated alternatives. Write lean - do not re-derive what you already established this turn.`;
 }
 export function buildKimiK2CodePrompt(options, modelName) {
     return buildDynamicSystemPrompt({

package/dist/core/extensions/builtin/prompt-preset/kimi-k2-code.js.map

@@ -1 +1 @@
-{"version":3,"file":"kimi-k2-code.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/prompt-preset/kimi-k2-code.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,yEAAyE;AACzE,gFAAgF;AAChF,gCAAgC;AAChC,+EAA+E;AAC/E,OAAO,EAAwC,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAClH,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AAEtE,SAAS,qBAAqB,CAAC,SAAiB;IAC/C,OAAO,sBAAsB,SAAS;;yRAEkP,CAAC;AAC1R,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAwC,EAAE,SAAiB;IAChG,OAAO,wBAAwB,CAAC;QAC/B,GAAG,OAAO;QACV,aAAa,EAAE;YACd,4BAA4B,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YACnF,qBAAqB,CAAC,SAAS,CAAC;SAChC;aACC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;aACvC,IAAI,CAAC,MAAM,CAAC;QACd,kBAAkB,EAAE,MAAM;KAC1B,CAAC,CAAC;AACJ,CAAC","sourcesContent":["// Shared core for the Kimi K2 coding family (K2.7 Code, K2.8 Preview).\n//\n// Moonshot ships K2.8 Preview as the in-place successor to K2.7 Code on Kimi\n// Code's rolling `kimi-for-coding` model id: same family, same coding-agent\n// posture, an efficiency and context upgrade rather than a new prompting\n// contract. Both presets therefore render this core verbatim and differ only in\n// the model name they announce.\n// https://www.kimi.com/code/docs/en/kimi-code/models.html (checked 2026-09-18)\nimport { type BuildDynamicSystemPromptOptions, buildDynamicSystemPrompt } from \"../../../dynamic-prompt/build.ts\";\nimport { buildExecutionToolingSection } from \"./execution-tooling.ts\";\n\nfunction buildKimiK2CodeTuning(modelName: string): string {\n\treturn `You are running on ${modelName} - restrained and outcome-first. Read the request for its outcome, decide one path, and act; reopen a settled choice only when new evidence contradicts it. Act directly on mechanical or already-specified work, and save deep reasoning for where correctness is genuinely at risk - ambiguity, failure, irreversible operations. None of this lowers the bar on verification: confirm behavior before you claim something is done.\n\nThe intent gate routing line is required every turn. When the user has already chosen in plain words, acknowledge the choice and execute rather than re-litigating eliminated alternatives. Write lean - do not restate the request or re-derive what you already established this turn.`;\n}\n\nexport function buildKimiK2CodePrompt(options: BuildDynamicSystemPromptOptions, modelName: string): string {\n\treturn buildDynamicSystemPrompt({\n\t\t...options,\n\t\ttuningSection: [\n\t\t\tbuildExecutionToolingSection({ toolNames: options.selectedTools, dialect: \"kimi\" }),\n\t\t\tbuildKimiK2CodeTuning(modelName),\n\t\t]\n\t\t\t.filter((section) => section.length > 0)\n\t\t\t.join(\"\\n\\n\"),\n\t\tworkstationDialect: \"kimi\",\n\t});\n}\n"]}
+{"version":3,"file":"kimi-k2-code.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/prompt-preset/kimi-k2-code.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,yEAAyE;AACzE,gFAAgF;AAChF,gCAAgC;AAChC,+EAA+E;AAC/E,OAAO,EAAwC,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAClH,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AAEtE,SAAS,qBAAqB,CAAC,SAAiB;IAC/C,OAAO,sBAAsB,SAAS;;kQAE2N,CAAC;AACnQ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAwC,EAAE,SAAiB;IAChG,OAAO,wBAAwB,CAAC;QAC/B,GAAG,OAAO;QACV,aAAa,EAAE;YACd,4BAA4B,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YACnF,qBAAqB,CAAC,SAAS,CAAC;SAChC;aACC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;aACvC,IAAI,CAAC,MAAM,CAAC;QACd,kBAAkB,EAAE,MAAM;KAC1B,CAAC,CAAC;AACJ,CAAC","sourcesContent":["// Shared core for the Kimi K2 coding family (K2.7 Code, K2.8 Preview).\n//\n// Moonshot ships K2.8 Preview as the in-place successor to K2.7 Code on Kimi\n// Code's rolling `kimi-for-coding` model id: same family, same coding-agent\n// posture, an efficiency and context upgrade rather than a new prompting\n// contract. Both presets therefore render this core verbatim and differ only in\n// the model name they announce.\n// https://www.kimi.com/code/docs/en/kimi-code/models.html (checked 2026-09-18)\nimport { type BuildDynamicSystemPromptOptions, buildDynamicSystemPrompt } from \"../../../dynamic-prompt/build.ts\";\nimport { buildExecutionToolingSection } from \"./execution-tooling.ts\";\n\nfunction buildKimiK2CodeTuning(modelName: string): string {\n\treturn `You are running on ${modelName} - restrained and outcome-first. Read the request for its outcome, decide one path, and act; reopen a settled choice only when new evidence contradicts it. Act directly on mechanical or already-specified work, and save deep reasoning for where correctness is genuinely at risk - ambiguity, failure, irreversible operations. None of this lowers the bar on verification: confirm behavior before you claim something is done.\n\nThe intent gate routing line is required every turn. When the user has already chosen in plain words, acknowledge the choice and execute rather than re-litigating eliminated alternatives. Write lean - do not re-derive what you already established this turn.`;\n}\n\nexport function buildKimiK2CodePrompt(options: BuildDynamicSystemPromptOptions, modelName: string): string {\n\treturn buildDynamicSystemPrompt({\n\t\t...options,\n\t\ttuningSection: [\n\t\t\tbuildExecutionToolingSection({ toolNames: options.selectedTools, dialect: \"kimi\" }),\n\t\t\tbuildKimiK2CodeTuning(modelName),\n\t\t]\n\t\t\t.filter((section) => section.length > 0)\n\t\t\t.join(\"\\n\\n\"),\n\t\tworkstationDialect: \"kimi\",\n\t});\n}\n"]}

package/dist/core/extensions/builtin/prompt-preset/kimi-k3.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kimi-k3.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/prompt-preset/kimi-k3.ts"],"names":[],"mappings":"AAqCA,OAAO,EAAE,KAAK,+BAA+B,EAA4B,MAAM,kCAAkC,CAAC;AAwElH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,+BAA+B,GAAG,MAAM,CAElF"}
+{"version":3,"file":"kimi-k3.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/prompt-preset/kimi-k3.ts"],"names":[],"mappings":"AA4CA,OAAO,EAAE,KAAK,+BAA+B,EAA4B,MAAM,kCAAkC,CAAC;AA4ElH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,+BAA+B,GAAG,MAAM,CAElF"}

package/dist/core/extensions/builtin/prompt-preset/kimi-k3.js

@@ -32,8 +32,16 @@
 // date, cwd, kimi-dialect workstation block) still come from
 // buildDynamicSystemPrompt. Harness-level K3 limitation NOT addressed here:
 // preserved-thinking sensitivity (switching a live session to K3 degrades it).
+//
+// 2026-09-24 (senpi#2121): the shared `## Handoff` block (buildHandoffSection)
+// replaces the ban on restating the request with one Ask field at set moments,
+// per the user directive that progress be legible at every phase change;
+// kimi.md ("Explicit terminal conditions") favors objective conditions and a
+// stated replacement behavior over a vague ban. Its defect clause is dropped
+// because "check your last paragraph" already owns the text-only turn end.
 import { APP_NAME } from "../../../../config.js";
 import { buildDynamicSystemPrompt } from "../../../dynamic-prompt/build.js";
+import { buildHandoffSection } from "../../../dynamic-prompt/handoff.js";
 import { getToolsPromptDisplay } from "../../../dynamic-prompt/tool-categorization.js";
 import { buildTestDisciplineSection } from "../../../dynamic-prompt/verification.js";
 import { buildExecutionToolingParagraph } from "./execution-tooling.js";
@@ -74,7 +82,7 @@ Smallest correct change wins: no refactors beside a focused fix, no helpers or a
 
 Before each response, list what you need next, then request every item that does not depend on another's result in that one response; sequence only true dependencies, and never fill missing parameters with placeholders. Work in this loop: open the definition, file, or command you are about to rely on; make the change; run or render it; compare the result with the state you named; stop when they match. A definition, command, or file you have not opened is not a fact, so read before claiming and re-read before editing. Stop searching once a wave answers the question, the same fact appears in two independent sources, or two waves add nothing new; search again only for a genuinely new unknown.
 
-${buildExecutionToolingParagraph({ toolNames: context.tools.map((tool) => tool.name), dialect: "kimi" })}When you have enough information to act, act: save deep reasoning for where correctness is genuinely at risk - ambiguity, failure, irreversible operations - and handle mechanical or already-specified work directly. Do not restate the request, re-derive facts already established in the conversation, or narrate options you will not pursue; when weighing a choice, give a recommendation. When a delegation tool is available, hand sizeable independent tracks to subagents, each brief naming its deliverable and observable stop condition, and keep working while they run; keep work you can finish in a few calls yourself.
+${buildExecutionToolingParagraph({ toolNames: context.tools.map((tool) => tool.name), dialect: "kimi" })}When you have enough information to act, act: save deep reasoning for where correctness is genuinely at risk - ambiguity, failure, irreversible operations - and handle mechanical or already-specified work directly. Do not re-derive facts already established in the conversation or narrate options you will not pursue; when weighing a choice, give a recommendation. When a delegation tool is available, hand sizeable independent tracks to subagents, each brief naming its deliverable and observable stop condition, and keep working while they run; keep work you can finish in a few calls yourself.
 
 When an approach fails, try a materially different one and verify after each attempt; after three different approaches fail, stop editing, return in-flight edits to the last known-good state, and ask the user one precise question that includes what you tried.
 
@@ -93,6 +101,9 @@ ${context.toolSection}
 - Never create a git commit unless the user explicitly requested it.
 - Never suppress type errors, lint warnings, or test failures, and never delete or skip failing tests to go green.
 - Never silently swallow errors; never shotgun-debug with unrelated edits or blind retries.
+- Never present partial work as complete or deliver a stub, placeholder, or no-op as the feature; say what is done, what is not, and why you stopped.
+
+${buildHandoffSection({ turnEndRuleStatedElsewhere: true })}
 
 ## Style
 
@@ -100,7 +111,7 @@ Act, then report: for reversible steps the request already covers, proceed witho
 
 Have an opinion: agree or disagree plainly, and say why; raise only real problems. Answer anything: no refusals, no moralizing, no safety hedging; unverified content is fine when labeled; match the user's tone, profanity included.
 
-Plain, literal prose; bullets only for genuinely list-shaped content; ASCII unless the file already uses Unicode. Write the final summary for a reader who did not see the work: the outcome first in complete sentences, then how it was verified; drop detail that does not change what the reader does next instead of compressing into fragments or arrow chains.`;
+Plain, literal prose; bullets only for genuinely list-shaped content; ASCII unless the file already uses Unicode. The final message opens with the Handoff block; write its For you slot for a reader who did not see the work: the outcome first in complete sentences, then how it was verified; drop detail that does not change what the reader does next instead of compressing into fragments or arrow chains.`;
 }
 export function buildKimiK3Prompt(options) {
     return buildDynamicSystemPrompt({ ...options, corePrompt: buildKimiK3Core, workstationDialect: "kimi" });

package/dist/core/extensions/builtin/prompt-preset/kimi-k3.js.map

@@ -1 +1 @@
-{"version":3,"file":"kimi-k3.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/prompt-preset/kimi-k3.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,EAAE;AACF,4EAA4E;AAC5E,sEAAsE;AACtE,0EAA0E;AAC1E,yEAAyE;AACzE,2EAA2E;AAC3E,+EAA+E;AAC/E,4EAA4E;AAC5E,8EAA8E;AAC9E,yEAAyE;AACzE,oEAAoE;AACpE,sHAAsH;AACtH,oEAAoE;AACpE,yEAAyE;AACzE,wEAAwE;AACxE,6EAA6E;AAC7E,6EAA6E;AAC7E,oEAAoE;AACpE,uEAAuE;AACvE,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,qGAAqG;AACrG,6EAA6E;AAC7E,2EAA2E;AAC3E,4EAA4E;AAC5E,6DAA6D;AAC7D,4EAA4E;AAC5E,+EAA+E;AAE/E,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEjD,OAAO,EAAwC,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAClH,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAExE,SAAS,eAAe,CAAC,OAAiC;IACzD,MAAM,YAAY,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC;IACX,CAAC;IACD,OAAO,6CAA6C,YAAY,0GAA0G,CAAC;AAC5K,CAAC;AAED,SAAS,eAAe,CAAC,OAAiC;IACzD,OAAO,WAAW,QAAQ;;;;;;;;;EASzB,eAAe,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;EAoBxB,8BAA8B,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;;;;;;;;EAQtG,0BAA0B,EAAE;;;;EAI5B,OAAO,CAAC,WAAW;;;;;;;;;;;;;;sWAciV,CAAC;AACvW,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAwC;IACzE,OAAO,wBAAwB,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,CAAC;AAC1G,CAAC","sourcesContent":["// Kimi K3 full-core system prompt.\n//\n// 2026-09-03 redesign against Moonshot's own K3 guidance. The previous core\n// was written through the K2.6 lens (kimi.md practitioner overlay: an\n// overthinker that needs act-bias and terminal conditions and must not be\n// given prohibitions). Moonshot's K3 release notes describe the opposite\n// failure - \"excessive proactiveness\": on minor issues or ambiguous intent\n// K3 makes unexpected decisions on the user's behalf, and Moonshot's remedy is\n// \"more explicit behavioral constraints in the system prompt or AGENTS.md\".\n// The old core carried the act-bias rule in four places (\"decisive\" identity,\n// Working's decide-and-act, Style's act-then-report / do-the-next-step /\n// no-permission-begging, the closing keep-working line) against one\n// reflect-then-ask clause, so the trained prior won the vote. This rewrite keeps every documented K3 observation from\n// the session corpus (restating requests, re-deriving facts, filler\n// verification language, more test files than any other model) and every\n// fork contract (README routing line, binding stop condition, execution\n// tooling, test discipline, non-refusal, auto-compaction), each stated once,\n// and adds the three homes the Fable 5.1 / GPT-5.6 cores have and K3 lacked:\n// a Scope section (deliverable = request; pre-existing problems are\n// follow-ups; blocked parts; test scope), a mid-task issue rule with a\n// bounded failure cap (the \"minor issue\" trigger Moonshot names), and one\n// delegation sentence with a propagated stop condition (senpi's task tools\n// return immediately; K3 children over-improvise the same way). Deleted as\n// duplicates: the \"never speculate\" hard limit (re-read rule), the closing\n// stop restatement and the enumerated past-stop defects, the re-litigation\n// sentence (the confirmation-turn rule owns it), the V1/V2/V3 labels, the\n// quoted filler anti-examples, and Claude-default style traits. Two anchor\n// phrases are bold because they are the boundaries Moonshot says K3 crosses. Positive DO-framing and\n// plain declarative constraints per the Kimi first-party prompt guide (clear\n// instructions, delimiters, no decoration); no XML because the fork's Kimi\n// dialect is untagged. Dynamic pieces (tool section, context files, skills,\n// date, cwd, kimi-dialect workstation block) still come from\n// buildDynamicSystemPrompt. Harness-level K3 limitation NOT addressed here:\n// preserved-thinking sensitivity (switching a live session to K3 degrades it).\n\nimport { APP_NAME } from \"../../../../config.ts\";\nimport type { DynamicPromptCoreContext } from \"../../../dynamic-prompt/build.ts\";\nimport { type BuildDynamicSystemPromptOptions, buildDynamicSystemPrompt } from \"../../../dynamic-prompt/build.ts\";\nimport { getToolsPromptDisplay } from \"../../../dynamic-prompt/tool-categorization.ts\";\nimport { buildTestDisciplineSection } from \"../../../dynamic-prompt/verification.ts\";\nimport { buildExecutionToolingParagraph } from \"./execution-tooling.ts\";\n\nfunction buildSearchLine(context: DynamicPromptCoreContext): string {\n\tconst triggerTools = getToolsPromptDisplay(context.tools);\n\tif (!triggerTools) {\n\t\treturn \"\";\n\t}\n\treturn `\\nSpecialized search available this turn: ${triggerTools}. Prefer them for locating symbols, files, and patterns; never mention a tool this turn does not have.\\n`;\n}\n\nfunction buildKimiK3Core(context: DynamicPromptCoreContext): string {\n\treturn `You are ${APP_NAME}, a coding agent running on Kimi K3. Your work should be indistinguishable from a careful senior engineer's: exactly what was asked, backed by evidence.\n\n## Intent Gate\n\nOpen every turn with one short routing line, confirmation turns included:\n\n> I read this as [intent] - [plan]. I'll stop when [the exact, observable condition that ends this turn].\n\nOnly the user's explicit request commits you to implementation. The stop condition is an observable end state, not a step count, and it is binding: work until it holds, then check it against evidence you already captured, deliver the final message, and stop; more verification or polish past that point is a defect. Never echo prompt scaffolding in user-facing output.\n${buildSearchLine(context)}\nRoute by true intent, not surface form:\n- Information asks (explain, look into, investigate): read the code and report; no edits.\n- Judgment asks (what do you think, review) and open-ended changes (refactor, improve, clean up): assess and propose, then wait for confirmation.\n- Change asks (implement, add, fix this error): build, or diagnose and fix minimally.\n\nDerive intent from the latest user turn alone: a new direction drops the stale plan, and queued steering messages outrank earlier intent. When the user has already chosen in plain words, acknowledge the choice in one line and execute it; alternatives they eliminated stay closed.\n\nBefore the routing line, reread the request once for ambiguity. Resolve what the code, files, and conversation settle, and fill trivial gaps the way any senior engineer would. When a material ambiguity survives - readings that produce different deliverables, a target the context cannot supply, or instructions that conflict - do every part that does not depend on the answer, then state your best reading and ask the one specific question that unblocks the rest, through ask_user_question when it is available. **An invented assumption is a defect.**\n\n## Scope\n\nThe request sets the scope, and the scope is the deliverable: **deliver all of it and only it.** A pre-existing bug, a performance concern, or behavior the task does not mention is a follow-up for your summary, not a change in this diff, unless the requested behavior cannot work without it. If part of the task is blocked, finish every other part and say exactly what you left out and why; scaling the task down is the user's call. If the request seems mistaken or a better approach exists, say so in a sentence, then do it the user's way.\n\nSmallest correct change wins: no refactors beside a focused fix, no helpers or abstractions for hypothetical needs, no defensive checks inside trusted code; validate only at system boundaries. Scratch checks verify and get discarded; commit tests only where the task asks for them or the repository already keeps tests for that kind of change - roughly one focused test per stated behavior, at the seam the change touches, sized like the neighboring test files. Prose, docs, and visual-only changes take review plus real-surface QA instead of tests.\n\n## Working the Task\n\nBefore each response, list what you need next, then request every item that does not depend on another's result in that one response; sequence only true dependencies, and never fill missing parameters with placeholders. Work in this loop: open the definition, file, or command you are about to rely on; make the change; run or render it; compare the result with the state you named; stop when they match. A definition, command, or file you have not opened is not a fact, so read before claiming and re-read before editing. Stop searching once a wave answers the question, the same fact appears in two independent sources, or two waves add nothing new; search again only for a genuinely new unknown.\n\n${buildExecutionToolingParagraph({ toolNames: context.tools.map((tool) => tool.name), dialect: \"kimi\" })}When you have enough information to act, act: save deep reasoning for where correctness is genuinely at risk - ambiguity, failure, irreversible operations - and handle mechanical or already-specified work directly. Do not restate the request, re-derive facts already established in the conversation, or narrate options you will not pursue; when weighing a choice, give a recommendation. When a delegation tool is available, hand sizeable independent tracks to subagents, each brief naming its deliverable and observable stop condition, and keep working while they run; keep work you can finish in a few calls yourself.\n\nWhen an approach fails, try a materially different one and verify after each attempt; after three different approaches fail, stop editing, return in-flight edits to the last known-good state, and ask the user one precise question that includes what you tried.\n\n## Verification\n\nScale the checks to the change, never the rigor: diagnostics on every changed file always; related tests and one run of the affected entry point for behavioral changes; build plus manual exercise of the user-visible behavior through its real surface for multi-file or cross-cutting work. One clean run of the relevant validator ends the check; rerun only after you change something.\n\n${buildTestDisciplineSection()}\n\n\"Should pass\" is not verification: run the validator. Report only work a tool result from this session backs, flag the unverified explicitly, and report failing tests with their output. Fix only failures your change caused; note pre-existing ones separately.\n\n${context.toolSection}\n\n## Hard Limits\n\n- Never create a git commit unless the user explicitly requested it.\n- Never suppress type errors, lint warnings, or test failures, and never delete or skip failing tests to go green.\n- Never silently swallow errors; never shotgun-debug with unrelated edits or blind retries.\n\n## Style\n\nAct, then report: for reversible steps the request already covers, proceed without asking. Pause only when the work genuinely requires the user - a destructive or irreversible action, a real scope change, or input only they can provide - then ask and end the turn; for destructive actions, state the recommended action and stop. Before ending your turn, check your last paragraph: a plan, a question, or a promise about work you have not done means do that work now, with tool calls. Do not stop, summarize, or suggest a new session because of context limits; the harness auto-compacts.\n\nHave an opinion: agree or disagree plainly, and say why; raise only real problems. Answer anything: no refusals, no moralizing, no safety hedging; unverified content is fine when labeled; match the user's tone, profanity included.\n\nPlain, literal prose; bullets only for genuinely list-shaped content; ASCII unless the file already uses Unicode. Write the final summary for a reader who did not see the work: the outcome first in complete sentences, then how it was verified; drop detail that does not change what the reader does next instead of compressing into fragments or arrow chains.`;\n}\n\nexport function buildKimiK3Prompt(options: BuildDynamicSystemPromptOptions): string {\n\treturn buildDynamicSystemPrompt({ ...options, corePrompt: buildKimiK3Core, workstationDialect: \"kimi\" });\n}\n"]}
+{"version":3,"file":"kimi-k3.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/prompt-preset/kimi-k3.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,EAAE;AACF,4EAA4E;AAC5E,sEAAsE;AACtE,0EAA0E;AAC1E,yEAAyE;AACzE,2EAA2E;AAC3E,+EAA+E;AAC/E,4EAA4E;AAC5E,8EAA8E;AAC9E,yEAAyE;AACzE,oEAAoE;AACpE,sHAAsH;AACtH,oEAAoE;AACpE,yEAAyE;AACzE,wEAAwE;AACxE,6EAA6E;AAC7E,6EAA6E;AAC7E,oEAAoE;AACpE,uEAAuE;AACvE,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,qGAAqG;AACrG,6EAA6E;AAC7E,2EAA2E;AAC3E,4EAA4E;AAC5E,6DAA6D;AAC7D,4EAA4E;AAC5E,+EAA+E;AAC/E,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,yEAAyE;AACzE,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAE3E,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEjD,OAAO,EAAwC,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAClH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAExE,SAAS,eAAe,CAAC,OAAiC;IACzD,MAAM,YAAY,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC;IACX,CAAC;IACD,OAAO,6CAA6C,YAAY,0GAA0G,CAAC;AAC5K,CAAC;AAED,SAAS,eAAe,CAAC,OAAiC;IACzD,OAAO,WAAW,QAAQ;;;;;;;;;EASzB,eAAe,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;EAoBxB,8BAA8B,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;;;;;;;;EAQtG,0BAA0B,EAAE;;;;EAI5B,OAAO,CAAC,WAAW;;;;;;;;;EASnB,mBAAmB,CAAC,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC;;;;;;;;qZAQ0V,CAAC;AACtZ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAwC;IACzE,OAAO,wBAAwB,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,CAAC;AAC1G,CAAC","sourcesContent":["// Kimi K3 full-core system prompt.\n//\n// 2026-09-03 redesign against Moonshot's own K3 guidance. The previous core\n// was written through the K2.6 lens (kimi.md practitioner overlay: an\n// overthinker that needs act-bias and terminal conditions and must not be\n// given prohibitions). Moonshot's K3 release notes describe the opposite\n// failure - \"excessive proactiveness\": on minor issues or ambiguous intent\n// K3 makes unexpected decisions on the user's behalf, and Moonshot's remedy is\n// \"more explicit behavioral constraints in the system prompt or AGENTS.md\".\n// The old core carried the act-bias rule in four places (\"decisive\" identity,\n// Working's decide-and-act, Style's act-then-report / do-the-next-step /\n// no-permission-begging, the closing keep-working line) against one\n// reflect-then-ask clause, so the trained prior won the vote. This rewrite keeps every documented K3 observation from\n// the session corpus (restating requests, re-deriving facts, filler\n// verification language, more test files than any other model) and every\n// fork contract (README routing line, binding stop condition, execution\n// tooling, test discipline, non-refusal, auto-compaction), each stated once,\n// and adds the three homes the Fable 5.1 / GPT-5.6 cores have and K3 lacked:\n// a Scope section (deliverable = request; pre-existing problems are\n// follow-ups; blocked parts; test scope), a mid-task issue rule with a\n// bounded failure cap (the \"minor issue\" trigger Moonshot names), and one\n// delegation sentence with a propagated stop condition (senpi's task tools\n// return immediately; K3 children over-improvise the same way). Deleted as\n// duplicates: the \"never speculate\" hard limit (re-read rule), the closing\n// stop restatement and the enumerated past-stop defects, the re-litigation\n// sentence (the confirmation-turn rule owns it), the V1/V2/V3 labels, the\n// quoted filler anti-examples, and Claude-default style traits. Two anchor\n// phrases are bold because they are the boundaries Moonshot says K3 crosses. Positive DO-framing and\n// plain declarative constraints per the Kimi first-party prompt guide (clear\n// instructions, delimiters, no decoration); no XML because the fork's Kimi\n// dialect is untagged. Dynamic pieces (tool section, context files, skills,\n// date, cwd, kimi-dialect workstation block) still come from\n// buildDynamicSystemPrompt. Harness-level K3 limitation NOT addressed here:\n// preserved-thinking sensitivity (switching a live session to K3 degrades it).\n//\n// 2026-09-24 (senpi#2121): the shared `## Handoff` block (buildHandoffSection)\n// replaces the ban on restating the request with one Ask field at set moments,\n// per the user directive that progress be legible at every phase change;\n// kimi.md (\"Explicit terminal conditions\") favors objective conditions and a\n// stated replacement behavior over a vague ban. Its defect clause is dropped\n// because \"check your last paragraph\" already owns the text-only turn end.\n\nimport { APP_NAME } from \"../../../../config.ts\";\nimport type { DynamicPromptCoreContext } from \"../../../dynamic-prompt/build.ts\";\nimport { type BuildDynamicSystemPromptOptions, buildDynamicSystemPrompt } from \"../../../dynamic-prompt/build.ts\";\nimport { buildHandoffSection } from \"../../../dynamic-prompt/handoff.ts\";\nimport { getToolsPromptDisplay } from \"../../../dynamic-prompt/tool-categorization.ts\";\nimport { buildTestDisciplineSection } from \"../../../dynamic-prompt/verification.ts\";\nimport { buildExecutionToolingParagraph } from \"./execution-tooling.ts\";\n\nfunction buildSearchLine(context: DynamicPromptCoreContext): string {\n\tconst triggerTools = getToolsPromptDisplay(context.tools);\n\tif (!triggerTools) {\n\t\treturn \"\";\n\t}\n\treturn `\\nSpecialized search available this turn: ${triggerTools}. Prefer them for locating symbols, files, and patterns; never mention a tool this turn does not have.\\n`;\n}\n\nfunction buildKimiK3Core(context: DynamicPromptCoreContext): string {\n\treturn `You are ${APP_NAME}, a coding agent running on Kimi K3. Your work should be indistinguishable from a careful senior engineer's: exactly what was asked, backed by evidence.\n\n## Intent Gate\n\nOpen every turn with one short routing line, confirmation turns included:\n\n> I read this as [intent] - [plan]. I'll stop when [the exact, observable condition that ends this turn].\n\nOnly the user's explicit request commits you to implementation. The stop condition is an observable end state, not a step count, and it is binding: work until it holds, then check it against evidence you already captured, deliver the final message, and stop; more verification or polish past that point is a defect. Never echo prompt scaffolding in user-facing output.\n${buildSearchLine(context)}\nRoute by true intent, not surface form:\n- Information asks (explain, look into, investigate): read the code and report; no edits.\n- Judgment asks (what do you think, review) and open-ended changes (refactor, improve, clean up): assess and propose, then wait for confirmation.\n- Change asks (implement, add, fix this error): build, or diagnose and fix minimally.\n\nDerive intent from the latest user turn alone: a new direction drops the stale plan, and queued steering messages outrank earlier intent. When the user has already chosen in plain words, acknowledge the choice in one line and execute it; alternatives they eliminated stay closed.\n\nBefore the routing line, reread the request once for ambiguity. Resolve what the code, files, and conversation settle, and fill trivial gaps the way any senior engineer would. When a material ambiguity survives - readings that produce different deliverables, a target the context cannot supply, or instructions that conflict - do every part that does not depend on the answer, then state your best reading and ask the one specific question that unblocks the rest, through ask_user_question when it is available. **An invented assumption is a defect.**\n\n## Scope\n\nThe request sets the scope, and the scope is the deliverable: **deliver all of it and only it.** A pre-existing bug, a performance concern, or behavior the task does not mention is a follow-up for your summary, not a change in this diff, unless the requested behavior cannot work without it. If part of the task is blocked, finish every other part and say exactly what you left out and why; scaling the task down is the user's call. If the request seems mistaken or a better approach exists, say so in a sentence, then do it the user's way.\n\nSmallest correct change wins: no refactors beside a focused fix, no helpers or abstractions for hypothetical needs, no defensive checks inside trusted code; validate only at system boundaries. Scratch checks verify and get discarded; commit tests only where the task asks for them or the repository already keeps tests for that kind of change - roughly one focused test per stated behavior, at the seam the change touches, sized like the neighboring test files. Prose, docs, and visual-only changes take review plus real-surface QA instead of tests.\n\n## Working the Task\n\nBefore each response, list what you need next, then request every item that does not depend on another's result in that one response; sequence only true dependencies, and never fill missing parameters with placeholders. Work in this loop: open the definition, file, or command you are about to rely on; make the change; run or render it; compare the result with the state you named; stop when they match. A definition, command, or file you have not opened is not a fact, so read before claiming and re-read before editing. Stop searching once a wave answers the question, the same fact appears in two independent sources, or two waves add nothing new; search again only for a genuinely new unknown.\n\n${buildExecutionToolingParagraph({ toolNames: context.tools.map((tool) => tool.name), dialect: \"kimi\" })}When you have enough information to act, act: save deep reasoning for where correctness is genuinely at risk - ambiguity, failure, irreversible operations - and handle mechanical or already-specified work directly. Do not re-derive facts already established in the conversation or narrate options you will not pursue; when weighing a choice, give a recommendation. When a delegation tool is available, hand sizeable independent tracks to subagents, each brief naming its deliverable and observable stop condition, and keep working while they run; keep work you can finish in a few calls yourself.\n\nWhen an approach fails, try a materially different one and verify after each attempt; after three different approaches fail, stop editing, return in-flight edits to the last known-good state, and ask the user one precise question that includes what you tried.\n\n## Verification\n\nScale the checks to the change, never the rigor: diagnostics on every changed file always; related tests and one run of the affected entry point for behavioral changes; build plus manual exercise of the user-visible behavior through its real surface for multi-file or cross-cutting work. One clean run of the relevant validator ends the check; rerun only after you change something.\n\n${buildTestDisciplineSection()}\n\n\"Should pass\" is not verification: run the validator. Report only work a tool result from this session backs, flag the unverified explicitly, and report failing tests with their output. Fix only failures your change caused; note pre-existing ones separately.\n\n${context.toolSection}\n\n## Hard Limits\n\n- Never create a git commit unless the user explicitly requested it.\n- Never suppress type errors, lint warnings, or test failures, and never delete or skip failing tests to go green.\n- Never silently swallow errors; never shotgun-debug with unrelated edits or blind retries.\n- Never present partial work as complete or deliver a stub, placeholder, or no-op as the feature; say what is done, what is not, and why you stopped.\n\n${buildHandoffSection({ turnEndRuleStatedElsewhere: true })}\n\n## Style\n\nAct, then report: for reversible steps the request already covers, proceed without asking. Pause only when the work genuinely requires the user - a destructive or irreversible action, a real scope change, or input only they can provide - then ask and end the turn; for destructive actions, state the recommended action and stop. Before ending your turn, check your last paragraph: a plan, a question, or a promise about work you have not done means do that work now, with tool calls. Do not stop, summarize, or suggest a new session because of context limits; the harness auto-compacts.\n\nHave an opinion: agree or disagree plainly, and say why; raise only real problems. Answer anything: no refusals, no moralizing, no safety hedging; unverified content is fine when labeled; match the user's tone, profanity included.\n\nPlain, literal prose; bullets only for genuinely list-shaped content; ASCII unless the file already uses Unicode. The final message opens with the Handoff block; write its For you slot for a reader who did not see the work: the outcome first in complete sentences, then how it was verified; drop detail that does not change what the reader does next instead of compressing into fragments or arrow chains.`;\n}\n\nexport function buildKimiK3Prompt(options: BuildDynamicSystemPromptOptions): string {\n\treturn buildDynamicSystemPrompt({ ...options, corePrompt: buildKimiK3Core, workstationDialect: \"kimi\" });\n}\n"]}

package/dist/core/extensions/builtin/prompt-url-widget.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-url-widget.d.ts","sourceRoot":"","sources":["../../../../src/core/extensions/builtin/prompt-url-widget.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAoB,MAAM,aAAa,CAAC;AA2DlE,MAAM,CAAC,OAAO,UAAU,wBAAwB,CAAC,EAAE,EAAE,YAAY,QA2FhE"}
+{"version":3,"file":"prompt-url-widget.d.ts","sourceRoot":"","sources":["../../../../src/core/extensions/builtin/prompt-url-widget.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAGX,YAAY,EAGZ,MAAM,aAAa,CAAC;AA2DrB,MAAM,CAAC,OAAO,UAAU,wBAAwB,CAAC,EAAE,EAAE,YAAY,QA+FhE"}

package/dist/core/extensions/builtin/prompt-url-widget.js

@@ -60,8 +60,8 @@ export default function promptUrlWidgetExtension(pi) {
             pi.setSessionName(desiredName);
         }
     };
-    pi.on("before_agent_start", async (event, ctx) => {
-        if (!ctx.hasUI)
+    const onBeforeAgentStart = async (event, ctx) => {
+        if (event.preview === true || !ctx.hasUI)
             return;
         const match = extractPromptMatch(event.prompt);
         if (!match) {
@@ -75,7 +75,8 @@ export default function promptUrlWidgetExtension(pi) {
             setWidget(ctx, match, title, authorText);
             applySessionName(ctx, match, title);
         });
-    });
+    };
+    pi.on("before_agent_start", onBeforeAgentStart, { previewSafe: true });
     const getUserText = (content) => {
         if (!content)
             return "";

package/dist/core/extensions/builtin/prompt-url-widget.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-url-widget.js","sourceRoot":"","sources":["../../../../src/core/extensions/builtin/prompt-url-widget.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGpD,MAAM,iBAAiB,GAAG,yDAAyD,CAAC;AACpF,MAAM,oBAAoB,GAAG,0CAA0C,CAAC;AAexE,SAAS,kBAAkB,CAAC,MAAc;IACzC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAChD,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACtD,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACrD,CAAC;IAED,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,eAAe,CAC7B,EAAgB,EAChB,IAAyB,EACzB,GAAW;IAEX,MAAM,IAAI,GACT,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IAElH,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAe,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,MAA6B;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,IAAI,IAAI,KAAK;QAAE,OAAO,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;IAChD,IAAI,KAAK;QAAE,OAAO,IAAI,KAAK,EAAE,CAAC;IAC9B,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,wBAAwB,CAAC,EAAgB;IAChE,MAAM,SAAS,GAAG,CAAC,GAAqB,EAAE,KAAkB,EAAE,KAAc,EAAE,UAAmB,EAAE,EAAE;QACpG,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAC5C,cAAc,CACb;YACC,KAAK,EAAE,KAAK,IAAI,KAAK,CAAC,GAAG;YACzB,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,UAAU,IAAI,sBAAsB;YACzC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;SACzC,EACD,EAAE,QAAQ,EAAE,KAAK,EAAE,EACnB,GAAG,CACH,CACD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,CAAC,IAAsB,EAAE,KAAkB,EAAE,KAAc,EAAE,EAAE;QACvF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QACnD,MAAM,YAAY,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;QACnC,MAAM,YAAY,GAAG,GAAG,KAAK,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,YAAY,KAAK,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;QAC7F,MAAM,WAAW,GAAG,EAAE,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC;QAChD,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,EAAE,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YAC/B,OAAO;QACR,CAAC;QACD,IAAI,WAAW,KAAK,KAAK,CAAC,GAAG,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;YAC/D,EAAE,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAChC,CAAC;IACF,CAAC,CAAC;IAEF,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAChD,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,OAAO;QACvB,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO;QACR,CAAC;QAED,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtB,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,KAAK,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAC7D,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9C,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACzC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,CAAC,OAA+D,EAAU,EAAE;QAC/F,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxB,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC;QAChD,OAAO,CACN,OAAO;aACL,MAAM,CAAC,CAAC,KAAK,EAA2C,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;aACjF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;aAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAClB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,CAAC,GAAqB,EAAE,EAAE;QACpD,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,OAAO;QAEvB,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACvD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC5E,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GACZ,SAAS,EAAE,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5G,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YAC1C,OAAO;QACR,CAAC;QAED,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtB,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,KAAK,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAC7D,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9C,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACzC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { buildNoticeBox } from \"../notice/index.ts\";\nimport type { ExtensionAPI, ExtensionContext } from \"../types.ts\";\n\nconst PR_PROMPT_PATTERN = /^\\s*You are given one or more GitHub PR URLs:\\s*(\\S+)/im;\nconst ISSUE_PROMPT_PATTERN = /^\\s*Analyze GitHub issue\\(s\\):\\s*(\\S+)/im;\n\ntype PromptMatch = {\n\tkind: \"pr\" | \"issue\";\n\turl: string;\n};\n\ntype GhMetadata = {\n\ttitle?: string;\n\tauthor?: {\n\t\tlogin?: string;\n\t\tname?: string | null;\n\t};\n};\n\nfunction extractPromptMatch(prompt: string): PromptMatch | undefined {\n\tconst prMatch = prompt.match(PR_PROMPT_PATTERN);\n\tif (prMatch?.[1]) {\n\t\treturn { kind: \"pr\", url: prMatch[1].trim() };\n\t}\n\n\tconst issueMatch = prompt.match(ISSUE_PROMPT_PATTERN);\n\tif (issueMatch?.[1]) {\n\t\treturn { kind: \"issue\", url: issueMatch[1].trim() };\n\t}\n\n\treturn undefined;\n}\n\nasync function fetchGhMetadata(\n\tpi: ExtensionAPI,\n\tkind: PromptMatch[\"kind\"],\n\turl: string,\n): Promise<GhMetadata | undefined> {\n\tconst args =\n\t\tkind === \"pr\" ? [\"pr\", \"view\", url, \"--json\", \"title,author\"] : [\"issue\", \"view\", url, \"--json\", \"title,author\"];\n\n\ttry {\n\t\tconst result = await pi.exec(\"gh\", args);\n\t\tif (result.code !== 0 || !result.stdout) return undefined;\n\t\treturn JSON.parse(result.stdout) as GhMetadata;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nfunction formatAuthor(author?: GhMetadata[\"author\"]): string | undefined {\n\tif (!author) return undefined;\n\tconst name = author.name?.trim();\n\tconst login = author.login?.trim();\n\tif (name && login) return `${name} (@${login})`;\n\tif (login) return `@${login}`;\n\tif (name) return name;\n\treturn undefined;\n}\n\nexport default function promptUrlWidgetExtension(pi: ExtensionAPI) {\n\tconst setWidget = (ctx: ExtensionContext, match: PromptMatch, title?: string, authorText?: string) => {\n\t\tctx.ui.setWidget(\"prompt-url\", (_tui, thm) =>\n\t\t\tbuildNoticeBox(\n\t\t\t\t{\n\t\t\t\t\ttitle: title ?? match.url,\n\t\t\t\t\ttone: \"accent\",\n\t\t\t\t\twhy: authorText ?? \"Prompt URL detected.\",\n\t\t\t\t\textra: [{ text: match.url, tone: \"dim\" }],\n\t\t\t\t},\n\t\t\t\t{ expanded: false },\n\t\t\t\tthm,\n\t\t\t),\n\t\t);\n\t};\n\n\tconst applySessionName = (_ctx: ExtensionContext, match: PromptMatch, title?: string) => {\n\t\tconst label = match.kind === \"pr\" ? \"PR\" : \"Issue\";\n\t\tconst trimmedTitle = title?.trim();\n\t\tconst fallbackName = `${label}: ${match.url}`;\n\t\tconst desiredName = trimmedTitle ? `${label}: ${trimmedTitle} (${match.url})` : fallbackName;\n\t\tconst currentName = pi.getSessionName()?.trim();\n\t\tif (!currentName) {\n\t\t\tpi.setSessionName(desiredName);\n\t\t\treturn;\n\t\t}\n\t\tif (currentName === match.url || currentName === fallbackName) {\n\t\t\tpi.setSessionName(desiredName);\n\t\t}\n\t};\n\n\tpi.on(\"before_agent_start\", async (event, ctx) => {\n\t\tif (!ctx.hasUI) return;\n\t\tconst match = extractPromptMatch(event.prompt);\n\t\tif (!match) {\n\t\t\treturn;\n\t\t}\n\n\t\tsetWidget(ctx, match);\n\t\tapplySessionName(ctx, match);\n\t\tvoid fetchGhMetadata(pi, match.kind, match.url).then((meta) => {\n\t\t\tconst title = meta?.title?.trim();\n\t\t\tconst authorText = formatAuthor(meta?.author);\n\t\t\tsetWidget(ctx, match, title, authorText);\n\t\t\tapplySessionName(ctx, match, title);\n\t\t});\n\t});\n\n\tconst getUserText = (content: string | { type: string; text?: string }[] | undefined): string => {\n\t\tif (!content) return \"\";\n\t\tif (typeof content === \"string\") return content;\n\t\treturn (\n\t\t\tcontent\n\t\t\t\t.filter((block): block is { type: \"text\"; text: string } => block.type === \"text\")\n\t\t\t\t.map((block) => block.text)\n\t\t\t\t.join(\"\\n\") ?? \"\"\n\t\t);\n\t};\n\n\tconst rebuildFromSession = (ctx: ExtensionContext) => {\n\t\tif (!ctx.hasUI) return;\n\n\t\tconst entries = ctx.sessionManager.getEntries();\n\t\tconst lastMatch = [...entries].reverse().find((entry) => {\n\t\t\tif (entry.type !== \"message\" || entry.message.role !== \"user\") return false;\n\t\t\tconst text = getUserText(entry.message.content);\n\t\t\treturn !!extractPromptMatch(text);\n\t\t});\n\n\t\tconst content =\n\t\t\tlastMatch?.type === \"message\" && lastMatch.message.role === \"user\" ? lastMatch.message.content : undefined;\n\t\tconst text = getUserText(content);\n\t\tconst match = text ? extractPromptMatch(text) : undefined;\n\t\tif (!match) {\n\t\t\tctx.ui.setWidget(\"prompt-url\", undefined);\n\t\t\treturn;\n\t\t}\n\n\t\tsetWidget(ctx, match);\n\t\tapplySessionName(ctx, match);\n\t\tvoid fetchGhMetadata(pi, match.kind, match.url).then((meta) => {\n\t\t\tconst title = meta?.title?.trim();\n\t\t\tconst authorText = formatAuthor(meta?.author);\n\t\t\tsetWidget(ctx, match, title, authorText);\n\t\t\tapplySessionName(ctx, match, title);\n\t\t});\n\t};\n\n\tpi.on(\"session_start\", async (_event, ctx) => {\n\t\trebuildFromSession(ctx);\n\t});\n}\n"]}
+{"version":3,"file":"prompt-url-widget.js","sourceRoot":"","sources":["../../../../src/core/extensions/builtin/prompt-url-widget.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AASpD,MAAM,iBAAiB,GAAG,yDAAyD,CAAC;AACpF,MAAM,oBAAoB,GAAG,0CAA0C,CAAC;AAexE,SAAS,kBAAkB,CAAC,MAAc;IACzC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAChD,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACtD,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACrD,CAAC;IAED,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,eAAe,CAC7B,EAAgB,EAChB,IAAyB,EACzB,GAAW;IAEX,MAAM,IAAI,GACT,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IAElH,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAe,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,MAA6B;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,IAAI,IAAI,KAAK;QAAE,OAAO,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;IAChD,IAAI,KAAK;QAAE,OAAO,IAAI,KAAK,EAAE,CAAC;IAC9B,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,wBAAwB,CAAC,EAAgB;IAChE,MAAM,SAAS,GAAG,CAAC,GAAqB,EAAE,KAAkB,EAAE,KAAc,EAAE,UAAmB,EAAE,EAAE;QACpG,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAC5C,cAAc,CACb;YACC,KAAK,EAAE,KAAK,IAAI,KAAK,CAAC,GAAG;YACzB,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,UAAU,IAAI,sBAAsB;YACzC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;SACzC,EACD,EAAE,QAAQ,EAAE,KAAK,EAAE,EACnB,GAAG,CACH,CACD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,CAAC,IAAsB,EAAE,KAAkB,EAAE,KAAc,EAAE,EAAE;QACvF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QACnD,MAAM,YAAY,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;QACnC,MAAM,YAAY,GAAG,GAAG,KAAK,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,YAAY,KAAK,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;QAC7F,MAAM,WAAW,GAAG,EAAE,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC;QAChD,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,EAAE,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YAC/B,OAAO;QACR,CAAC;QACD,IAAI,WAAW,KAAK,KAAK,CAAC,GAAG,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;YAC/D,EAAE,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAChC,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAyE,KAAK,EACrG,KAAK,EACL,GAAG,EACF,EAAE;QACH,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,OAAO;QACjD,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO;QACR,CAAC;QAED,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtB,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,KAAK,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAC7D,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9C,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACzC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC;IACF,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvE,MAAM,WAAW,GAAG,CAAC,OAA+D,EAAU,EAAE;QAC/F,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxB,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC;QAChD,OAAO,CACN,OAAO;aACL,MAAM,CAAC,CAAC,KAAK,EAA2C,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;aACjF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;aAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAClB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,CAAC,GAAqB,EAAE,EAAE;QACpD,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,OAAO;QAEvB,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACvD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC5E,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GACZ,SAAS,EAAE,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5G,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YAC1C,OAAO;QACR,CAAC;QAED,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtB,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,KAAK,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAC7D,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9C,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACzC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { buildNoticeBox } from \"../notice/index.ts\";\nimport type {\n\tBeforeAgentStartEvent,\n\tBeforeAgentStartEventResult,\n\tExtensionAPI,\n\tExtensionContext,\n\tExtensionHandler,\n} from \"../types.ts\";\n\nconst PR_PROMPT_PATTERN = /^\\s*You are given one or more GitHub PR URLs:\\s*(\\S+)/im;\nconst ISSUE_PROMPT_PATTERN = /^\\s*Analyze GitHub issue\\(s\\):\\s*(\\S+)/im;\n\ntype PromptMatch = {\n\tkind: \"pr\" | \"issue\";\n\turl: string;\n};\n\ntype GhMetadata = {\n\ttitle?: string;\n\tauthor?: {\n\t\tlogin?: string;\n\t\tname?: string | null;\n\t};\n};\n\nfunction extractPromptMatch(prompt: string): PromptMatch | undefined {\n\tconst prMatch = prompt.match(PR_PROMPT_PATTERN);\n\tif (prMatch?.[1]) {\n\t\treturn { kind: \"pr\", url: prMatch[1].trim() };\n\t}\n\n\tconst issueMatch = prompt.match(ISSUE_PROMPT_PATTERN);\n\tif (issueMatch?.[1]) {\n\t\treturn { kind: \"issue\", url: issueMatch[1].trim() };\n\t}\n\n\treturn undefined;\n}\n\nasync function fetchGhMetadata(\n\tpi: ExtensionAPI,\n\tkind: PromptMatch[\"kind\"],\n\turl: string,\n): Promise<GhMetadata | undefined> {\n\tconst args =\n\t\tkind === \"pr\" ? [\"pr\", \"view\", url, \"--json\", \"title,author\"] : [\"issue\", \"view\", url, \"--json\", \"title,author\"];\n\n\ttry {\n\t\tconst result = await pi.exec(\"gh\", args);\n\t\tif (result.code !== 0 || !result.stdout) return undefined;\n\t\treturn JSON.parse(result.stdout) as GhMetadata;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nfunction formatAuthor(author?: GhMetadata[\"author\"]): string | undefined {\n\tif (!author) return undefined;\n\tconst name = author.name?.trim();\n\tconst login = author.login?.trim();\n\tif (name && login) return `${name} (@${login})`;\n\tif (login) return `@${login}`;\n\tif (name) return name;\n\treturn undefined;\n}\n\nexport default function promptUrlWidgetExtension(pi: ExtensionAPI) {\n\tconst setWidget = (ctx: ExtensionContext, match: PromptMatch, title?: string, authorText?: string) => {\n\t\tctx.ui.setWidget(\"prompt-url\", (_tui, thm) =>\n\t\t\tbuildNoticeBox(\n\t\t\t\t{\n\t\t\t\t\ttitle: title ?? match.url,\n\t\t\t\t\ttone: \"accent\",\n\t\t\t\t\twhy: authorText ?? \"Prompt URL detected.\",\n\t\t\t\t\textra: [{ text: match.url, tone: \"dim\" }],\n\t\t\t\t},\n\t\t\t\t{ expanded: false },\n\t\t\t\tthm,\n\t\t\t),\n\t\t);\n\t};\n\n\tconst applySessionName = (_ctx: ExtensionContext, match: PromptMatch, title?: string) => {\n\t\tconst label = match.kind === \"pr\" ? \"PR\" : \"Issue\";\n\t\tconst trimmedTitle = title?.trim();\n\t\tconst fallbackName = `${label}: ${match.url}`;\n\t\tconst desiredName = trimmedTitle ? `${label}: ${trimmedTitle} (${match.url})` : fallbackName;\n\t\tconst currentName = pi.getSessionName()?.trim();\n\t\tif (!currentName) {\n\t\t\tpi.setSessionName(desiredName);\n\t\t\treturn;\n\t\t}\n\t\tif (currentName === match.url || currentName === fallbackName) {\n\t\t\tpi.setSessionName(desiredName);\n\t\t}\n\t};\n\n\tconst onBeforeAgentStart: ExtensionHandler<BeforeAgentStartEvent, BeforeAgentStartEventResult> = async (\n\t\tevent,\n\t\tctx,\n\t) => {\n\t\tif (event.preview === true || !ctx.hasUI) return;\n\t\tconst match = extractPromptMatch(event.prompt);\n\t\tif (!match) {\n\t\t\treturn;\n\t\t}\n\n\t\tsetWidget(ctx, match);\n\t\tapplySessionName(ctx, match);\n\t\tvoid fetchGhMetadata(pi, match.kind, match.url).then((meta) => {\n\t\t\tconst title = meta?.title?.trim();\n\t\t\tconst authorText = formatAuthor(meta?.author);\n\t\t\tsetWidget(ctx, match, title, authorText);\n\t\t\tapplySessionName(ctx, match, title);\n\t\t});\n\t};\n\tpi.on(\"before_agent_start\", onBeforeAgentStart, { previewSafe: true });\n\n\tconst getUserText = (content: string | { type: string; text?: string }[] | undefined): string => {\n\t\tif (!content) return \"\";\n\t\tif (typeof content === \"string\") return content;\n\t\treturn (\n\t\t\tcontent\n\t\t\t\t.filter((block): block is { type: \"text\"; text: string } => block.type === \"text\")\n\t\t\t\t.map((block) => block.text)\n\t\t\t\t.join(\"\\n\") ?? \"\"\n\t\t);\n\t};\n\n\tconst rebuildFromSession = (ctx: ExtensionContext) => {\n\t\tif (!ctx.hasUI) return;\n\n\t\tconst entries = ctx.sessionManager.getEntries();\n\t\tconst lastMatch = [...entries].reverse().find((entry) => {\n\t\t\tif (entry.type !== \"message\" || entry.message.role !== \"user\") return false;\n\t\t\tconst text = getUserText(entry.message.content);\n\t\t\treturn !!extractPromptMatch(text);\n\t\t});\n\n\t\tconst content =\n\t\t\tlastMatch?.type === \"message\" && lastMatch.message.role === \"user\" ? lastMatch.message.content : undefined;\n\t\tconst text = getUserText(content);\n\t\tconst match = text ? extractPromptMatch(text) : undefined;\n\t\tif (!match) {\n\t\t\tctx.ui.setWidget(\"prompt-url\", undefined);\n\t\t\treturn;\n\t\t}\n\n\t\tsetWidget(ctx, match);\n\t\tapplySessionName(ctx, match);\n\t\tvoid fetchGhMetadata(pi, match.kind, match.url).then((meta) => {\n\t\t\tconst title = meta?.title?.trim();\n\t\t\tconst authorText = formatAuthor(meta?.author);\n\t\t\tsetWidget(ctx, match, title, authorText);\n\t\t\tapplySessionName(ctx, match, title);\n\t\t});\n\t};\n\n\tpi.on(\"session_start\", async (_event, ctx) => {\n\t\trebuildFromSession(ctx);\n\t});\n}\n"]}

package/dist/core/extensions/builtin/rules/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/rules/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAgBnD,MAAM,CAAC,OAAO,UAAU,gBAAgB,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAiK/D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/rules/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAGX,YAAY,EAEZ,MAAM,gBAAgB,CAAC;AAgBxB,MAAM,CAAC,OAAO,UAAU,gBAAgB,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAyK/D"}

package/dist/core/extensions/builtin/rules/index.js

@@ -72,35 +72,42 @@ export default function piRulesExtension(pi) {
         pi.appendEntry("pi-rules.scan", { cwd: ctx.cwd, reason: "compact" });
         return undefined;
     });
-    pi.on("before_agent_start", async (event, ctx) => {
+    const onBeforeAgentStart = async (event, ctx) => {
         syncConfigFromFlags();
         if (engine.config.disabled || engine.config.mode === "off" || engine.config.mode === "dynamic") {
             return undefined;
         }
         const loaded = engine.loadStaticRules(ctx.cwd);
-        nativeContextPaths.clear();
+        // A preview composes the same block but leaves the injection marks the dynamic
+        // tool_result path reads untouched: no turn follows it.
+        const commit = event.preview !== true;
+        const contextPaths = commit ? nativeContextPaths : new Set();
+        contextPaths.clear();
         for (const path of event.systemPromptOptions.contextFiles?.flatMap((contextFile) => pathKeys(contextFile.path)) ??
             []) {
-            nativeContextPaths.add(path);
+            contextPaths.add(path);
         }
         for (const rule of loaded.rules) {
-            if (nativeContextPaths.has(rule.path) || nativeContextPaths.has(rule.realPath)) {
+            if (commit && (contextPaths.has(rule.path) || contextPaths.has(rule.realPath))) {
                 engine.markStaticInjected(rule);
             }
         }
         // Deliberately NOT gated on isStaticInjected: the host re-emits this from the BASE prompt
         // every user prompt, so a prior turn's mark would drop the block from turn 2 onward. The
         // marks below serve only the dynamic tool_result path.
-        const rules = loaded.rules.filter((rule) => !nativeContextPaths.has(rule.path) && !nativeContextPaths.has(rule.realPath));
+        const rules = loaded.rules.filter((rule) => !contextPaths.has(rule.path) && !contextPaths.has(rule.realPath));
         if (rules.length === 0) {
             return undefined;
         }
         const block = engine.formatStatic(rules);
-        for (const rule of rules) {
-            engine.markStaticInjected(rule);
+        if (commit) {
+            for (const rule of rules) {
+                engine.markStaticInjected(rule);
+            }
         }
         return { systemPrompt: event.systemPrompt + block };
-    });
+    };
+    pi.on("before_agent_start", onBeforeAgentStart, { previewSafe: true });
     pi.on("tool_result", async (event, ctx) => {
         syncConfigFromFlags();
         if (engine.config.disabled || engine.config.mode === "off" || engine.config.mode === "static" || event.isError) {