autopilot-ai 2.0.0 → 2.2.0

package/dist/sdk/index.js

@@ -2023,7 +2023,6 @@ async function loadConfig() {
     lspServers: persisted.lspServers,
     costAttribution: readBooleanEnv("KIMI_COST_ATTRIBUTION") ?? persisted.costAttribution ?? true,
     filePicker: readBooleanEnv("KIMIFLARE_FILE_PICKER") ?? persisted.filePicker ?? true,
-    theme: persisted.theme,
     shell: process.env.KIMIFLARE_SHELL ?? persisted.shell,
     remoteWorkerUrl: persisted.remoteWorkerUrl,
     remoteAuthSecret: persisted.remoteAuthSecret,
@@ -3176,6 +3175,146 @@ var init_redact = __esm({
   }
 });
 
+// src/util/line-diff.ts
+function splitLines(text3) {
+  if (text3 === "") return [];
+  const lines = text3.split("\n");
+  if (lines[lines.length - 1] === "") lines.pop();
+  return lines;
+}
+function myers(a, b) {
+  const n = a.length;
+  const m = b.length;
+  const max = n + m;
+  if (max === 0) return [];
+  const offset = max;
+  let v = new Int32Array(2 * max + 2);
+  const trace = [];
+  for (let d = 0; d <= max; d++) {
+    if ((n + m) * d > MAX_MYERS_COST) return null;
+    trace.push(v.slice());
+    const next = v;
+    for (let k = -d; k <= d; k += 2) {
+      let x;
+      if (k === -d || k !== d && next[offset + k - 1] < next[offset + k + 1]) x = next[offset + k + 1];
+      else x = next[offset + k - 1] + 1;
+      let y = x - k;
+      while (x < n && y < m && a[x] === b[y]) {
+        x++;
+        y++;
+      }
+      next[offset + k] = x;
+      if (x >= n && y >= m) {
+        trace.push(next.slice());
+        return backtrack(trace, a, b, offset);
+      }
+    }
+    v = next;
+  }
+  return null;
+}
+function backtrack(trace, a, b, offset) {
+  const ops = [];
+  let x = a.length;
+  let y = b.length;
+  for (let d = trace.length - 2; d >= 0; d--) {
+    const v = trace[d];
+    const k = x - y;
+    let prevK;
+    if (k === -d || k !== d && v[offset + k - 1] < v[offset + k + 1]) prevK = k + 1;
+    else prevK = k - 1;
+    const prevX = d === 0 ? 0 : v[offset + prevK];
+    const prevY = prevX - prevK;
+    while (x > prevX && y > prevY) {
+      ops.push({ kind: " ", text: a[x - 1] });
+      x--;
+      y--;
+    }
+    if (d === 0) break;
+    if (x === prevX) ops.push({ kind: "+", text: b[y - 1] });
+    else ops.push({ kind: "-", text: a[x - 1] });
+    x = prevX;
+    y = prevY;
+  }
+  while (x > 0 && y > 0) {
+    ops.push({ kind: " ", text: a[x - 1] });
+    x--;
+    y--;
+  }
+  return ops.reverse();
+}
+function editScript(a, b) {
+  let pre = 0;
+  while (pre < a.length && pre < b.length && a[pre] === b[pre]) pre++;
+  let suf = 0;
+  while (suf < a.length - pre && suf < b.length - pre && a[a.length - 1 - suf] === b[b.length - 1 - suf]) suf++;
+  const midA = a.slice(pre, a.length - suf);
+  const midB = b.slice(pre, b.length - suf);
+  const mid = myers(midA, midB) ?? [
+    ...midA.map((text3) => ({ kind: "-", text: text3 })),
+    ...midB.map((text3) => ({ kind: "+", text: text3 }))
+  ];
+  return [
+    ...a.slice(0, pre).map((text3) => ({ kind: " ", text: text3 })),
+    ...mid,
+    ...a.slice(a.length - suf).map((text3) => ({ kind: " ", text: text3 }))
+  ];
+}
+function structuredPatch(oldText, newText, context = DEFAULT_CONTEXT) {
+  const ops = editScript(splitLines(oldText), splitLines(newText));
+  const hunks = [];
+  let oldNo = 1;
+  let newNo = 1;
+  const pos = ops.map((op) => {
+    const at = { old: oldNo, new: newNo };
+    if (op.kind !== "+") oldNo++;
+    if (op.kind !== "-") newNo++;
+    return at;
+  });
+  let i = 0;
+  while (i < ops.length) {
+    if (ops[i].kind === " ") {
+      i++;
+      continue;
+    }
+    const start = Math.max(0, i - context);
+    let end = i;
+    for (; ; ) {
+      while (end < ops.length && ops[end].kind !== " ") end++;
+      let gap = end;
+      while (gap < ops.length && ops[gap].kind === " ") gap++;
+      if (gap < ops.length && gap - end <= 2 * context) {
+        end = gap;
+        continue;
+      }
+      end = Math.min(ops.length, end + context);
+      break;
+    }
+    const slice = ops.slice(start, end);
+    const oldLines = slice.filter((o) => o.kind !== "+").length;
+    const newLines = slice.filter((o) => o.kind !== "-").length;
+    const first = pos[start];
+    hunks.push({
+      // jsdiff's convention: a hunk with no old (or new) lines starts one line earlier.
+      oldStart: oldLines === 0 ? first.old - 1 : first.old,
+      oldLines,
+      newStart: newLines === 0 ? first.new - 1 : first.new,
+      newLines,
+      lines: slice.map((o) => o.kind + o.text)
+    });
+    i = end;
+  }
+  return hunks;
+}
+var DEFAULT_CONTEXT, MAX_MYERS_COST;
+var init_line_diff = __esm({
+  "src/util/line-diff.ts"() {
+    "use strict";
+    DEFAULT_CONTEXT = 3;
+    MAX_MYERS_COST = 4e6;
+  }
+});
+
 // src/hooks/claude-compat.ts
 function claudeToolName(tool, args) {
   if (tool === "edit" && Array.isArray(args.edits)) return "MultiEdit";
@@ -3260,9 +3399,35 @@ function claudeToolResponse(tool, args, cwd, result2) {
   }
   if ((tool === "write" || tool === "edit") && isStr(args.path) && !failed) {
     response.filePath = resolvePath(cwd, args.path);
+    if (result2.fileChange) Object.assign(response, claudeFileChangeFields(tool, args, result2.fileChange));
   }
   return response;
 }
+function claudeFileChangeFields(tool, args, change) {
+  const fields = {};
+  if (tool === "write") {
+    fields.type = change.existed ? "update" : "create";
+    if (isStr(args.content)) fields.content = args.content;
+  } else if (Array.isArray(args.edits)) {
+    fields.edits = editPairs(args);
+  } else {
+    fields.oldString = args.old_string;
+    fields.newString = args.new_string;
+    fields.replaceAll = args.replace_all === true;
+  }
+  if (!change.existed) {
+    fields.originalFile = null;
+    fields.structuredPatch = [];
+  } else {
+    if (change.original !== null && Buffer.byteLength(change.original, "utf8") <= ORIGINAL_FILE_CAP_BYTES) {
+      fields.originalFile = change.original;
+    }
+    if (change.original !== null && change.updated !== null) {
+      fields.structuredPatch = structuredPatch(change.original, change.updated);
+    }
+  }
+  return fields;
+}
 function claudeError(result2) {
   if (isNum(result2.exitCode) && result2.exitCode !== 0) {
     const output = [result2.stdout, result2.stderr].filter((s) => s && s.trim()).map((s) => s.trimEnd()).join("\n");
@@ -3295,12 +3460,13 @@ function claudeToolFields(payload) {
   }
   return { tool_name: toolName, ...fields };
 }
-var CLAUDE_TOOL_NAMES, FILE_EDIT_NAMES, isStr, isNum;
+var CLAUDE_TOOL_NAMES, FILE_EDIT_NAMES, isStr, isNum, ORIGINAL_FILE_CAP_BYTES;
 var init_claude_compat = __esm({
   "src/hooks/claude-compat.ts"() {
     "use strict";
     init_edit();
     init_paths();
+    init_line_diff();
     CLAUDE_TOOL_NAMES = {
       bash: "Bash",
       edit: "Edit",
@@ -3315,6 +3481,7 @@ var init_claude_compat = __esm({
     FILE_EDIT_NAMES = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit"]);
     isStr = (v) => typeof v === "string";
     isNum = (v) => typeof v === "number";
+    ORIGINAL_FILE_CAP_BYTES = 256 * 1024;
   }
 });
 
@@ -3921,6 +4088,10 @@ function hookWirePayload(payload) {
   if (payload.session_id) Object.assign(wire, hookTranscriptFields(payload.session_id));
   if (isToolEventPayload(payload)) {
     Object.assign(wire, claudeToolFields(payload));
+    if ((payload.event === "PostToolUse" || payload.event === "PostToolUseFailure") && payload.result.fileChange) {
+      const { fileChange: _fileChange, ...result2 } = payload.result;
+      wire.result = result2;
+    }
     if (payload.tool_call_id) wire.tool_use_id = payload.tool_call_id;
     if (payload.event === "PermissionRequest") wire.permission_mode = claudePermissionMode(payload.mode);
   }
@@ -4743,7 +4914,7 @@ __export(openrouter_catalog_exports, {
   loadOpenRouterCatalog: () => loadOpenRouterCatalog,
   mapOpenRouterModel: () => mapOpenRouterModel
 });
-import { readFile as readFile16, writeFile as writeFile9, mkdir as mkdir10 } from "fs/promises";
+import { readFile as readFile17, writeFile as writeFile9, mkdir as mkdir10 } from "fs/promises";
 import { homedir as homedir17 } from "os";
 import { join as join29, dirname as dirname14 } from "path";
 function catalogCachePath() {
@@ -4799,7 +4970,7 @@ async function fetchOpenRouterCatalog(fetchImpl2 = fetch) {
 }
 async function readCache2() {
   try {
-    const raw = await readFile16(catalogCachePath(), "utf8");
+    const raw = await readFile17(catalogCachePath(), "utf8");
     const parsed = JSON.parse(raw);
     return parsed.version === CACHE_VERSION ? parsed : null;
   } catch {
@@ -4858,7 +5029,7 @@ __export(requesty_catalog_exports, {
   loadRequestyCatalog: () => loadRequestyCatalog,
   mapRequestyModel: () => mapRequestyModel
 });
-import { readFile as readFile17, writeFile as writeFile10, mkdir as mkdir11 } from "fs/promises";
+import { readFile as readFile18, writeFile as writeFile10, mkdir as mkdir11 } from "fs/promises";
 import { homedir as homedir18 } from "os";
 import { join as join30, dirname as dirname15 } from "path";
 function catalogCachePath2() {
@@ -4919,7 +5090,7 @@ async function fetchRequestyCatalog(fetchImpl2 = fetch) {
 }
 async function readCache3() {
   try {
-    const raw = await readFile17(catalogCachePath2(), "utf8");
+    const raw = await readFile18(catalogCachePath2(), "utf8");
     const parsed = JSON.parse(raw);
     if (parsed.version !== CACHE_VERSION2) return null;
     return {
@@ -4997,7 +5168,7 @@ __export(provider_catalog_exports, {
   mapModelsDevModel: () => mapModelsDevModel,
   mapModelsDevProvider: () => mapModelsDevProvider
 });
-import { readFile as readFile18, writeFile as writeFile11, mkdir as mkdir12 } from "fs/promises";
+import { readFile as readFile19, writeFile as writeFile11, mkdir as mkdir12 } from "fs/promises";
 import { homedir as homedir19 } from "os";
 import { join as join31, dirname as dirname16 } from "path";
 function mapModelsDevModel(m) {
@@ -5037,7 +5208,7 @@ function cachePath() {
 }
 async function readCache4() {
   try {
-    const parsed = JSON.parse(await readFile18(cachePath(), "utf8"));
+    const parsed = JSON.parse(await readFile19(cachePath(), "utf8"));
     return parsed.version === CACHE_VERSION3 ? parsed : null;
   } catch {
     return null;
@@ -5413,6 +5584,89 @@ async function endSessions(reason = "exit", timeoutMs = 3e3) {
   await Promise.all([...[...started.keys()].map((id) => endSession(id, reason, timeoutMs)), ...ending]);
 }
 
+// src/intent/classify.ts
+var INTENT_PATTERNS = {
+  qa: /\b(what|how|why|explain|describe|what's|what is)\b/i,
+  diagnose: /\b(broken|failing|error|bug|crash|why.*fail|not working)\b/i,
+  verify: /\b(correct|right|verify|review|check|is this|does this)\b/i,
+  polish: /\b(rename|refactor|extract|move|clean|lint|format)\b/i,
+  small_edit: /\b(add|change|update|fix|remove|delete)\b.+\b(line|here|this|variable|function)\b/i,
+  feature_bounded: /\b(add|implement|create|support)\b.+\b(flag|option|param|arg|field)\b/i,
+  feature_exploratory: /\b(add|implement|migrate|integrate|build)\b.+\b(module|system|auth|oauth|framework|service)\b/i,
+  explore: /\b(how.*work|architecture|structure|where.*used|find.*all|understand)\b/i,
+  meta: /\b(plan|design|strategy|ontology|roadmap|approach)\b/i
+};
+var HEAVY_SIGNAL = /\b(research|investigat\w*|audit|deep[\s-]?(dive|thinking)|explorat\w*|comprehensive|end[\s-]?to[\s-]?end|entire\s+(code\s?base|repo\w*|project|app)|whole\s+(code\s?base|repo\w*|project|app)|across\s+the\s+(code\s?base|repo\w*|project)|security|vulnerab\w*|loophole|exploit\w*|threat\s?model|attack\s+surface|penetration)\b/i;
+function classifyIntent(prompt) {
+  let intentScore = 0;
+  let matchedIntent = "other";
+  for (const [intent, pattern] of Object.entries(INTENT_PATTERNS)) {
+    const matches = (prompt.match(pattern) || []).length;
+    if (matches > intentScore) {
+      intentScore = matches;
+      matchedIntent = intent;
+    }
+  }
+  const hasFileMentions = (prompt.match(/@\w+|\b[\w/-]+\.(ts|tsx|js|jsx|py|go|rs)\b/g) || []).length;
+  const hasMutatingVerb = /\b(add|create|write|edit|delete|remove|rename|migrate|implement)\b/i.test(prompt);
+  const isQuestion = prompt.trim().endsWith("?") || /\b(what|how|why|is|does|can)\b/i.test(prompt.split(" ")[0] || "");
+  const hasHeavySignal = HEAVY_SIGNAL.test(prompt);
+  const rawScore = Math.min(
+    1,
+    intentScore * 0.25 + (hasFileMentions > 2 ? 0.3 : hasFileMentions * 0.1) + (hasMutatingVerb ? 0.25 : 0) + (isQuestion ? 0 : 0.1) + (hasHeavySignal ? 0.6 : 0)
+  );
+  const tier = rawScore < 0.3 ? "light" : rawScore < 0.65 ? "medium" : "heavy";
+  return {
+    intent: hasHeavySignal && matchedIntent === "other" ? "explore" : matchedIntent,
+    rawScore,
+    tier,
+    confidence: 0.5 + (intentScore > 0 || hasHeavySignal ? 0.3 : 0) + (hasFileMentions > 0 ? 0.1 : 0)
+  };
+}
+
+// src/hooks/prompt-submit.ts
+init_llm_auth();
+var PROMPT_BLOCKED_DEFAULT_REASON = "UserPromptSubmit hook blocked the prompt";
+var PromptBlockedError = class extends Error {
+  reason;
+  code = "prompt_blocked";
+  constructor(reason) {
+    super(`prompt blocked by a UserPromptSubmit hook: ${reason}`);
+    this.name = "PromptBlockedError";
+    this.reason = reason;
+  }
+};
+async function submitUserPrompt(info) {
+  let provider;
+  try {
+    provider = info.auth ? providerPresetOf(info.auth).id : void 0;
+  } catch {
+    provider = void 0;
+  }
+  await noteSessionStart({
+    ...info.hooks ? { hooks: info.hooks } : {},
+    sessionId: info.sessionId,
+    cwd: info.cwd,
+    resumed: info.resumed,
+    model: info.model,
+    ...provider ? { provider } : {}
+  });
+  if (!info.hooks?.hasEnabledHooks("UserPromptSubmit")) return { blocked: false };
+  const outcome = await info.hooks.fire(
+    "UserPromptSubmit",
+    {
+      event: "UserPromptSubmit",
+      session_id: info.sessionId,
+      cwd: info.cwd,
+      prompt: info.prompt,
+      tier: info.tier ?? classifyIntent(info.prompt).tier
+    },
+    null
+  );
+  if (!outcome.vetoed) return { blocked: false };
+  return { blocked: true, reason: outcome.vetoReason || PROMPT_BLOCKED_DEFAULT_REASON };
+}
+
 // src/sdk/process-exit.ts
 init_otel_sink();
 init_logger();
@@ -9186,15 +9440,15 @@ async function gitNumstat(cwd, opts = {}) {
   if (opts.includeUntracked) {
     try {
       const { stdout } = await execFileAsync("git", ["ls-files", "--others", "--exclude-standard"], { cwd, timeout: 5e3 });
-      const { readFile: readFile20, stat: stat8 } = await import("fs/promises");
+      const { readFile: readFile21, stat: stat9 } = await import("fs/promises");
       const { join: join36 } = await import("path");
       for (const file of stdout.split("\n").filter(Boolean)) {
         let lines = 0;
         try {
           const path = join36(cwd, file);
-          const size = (await stat8(path)).size;
+          const size = (await stat9(path)).size;
           if (size > 0 && size <= 1024 * 1024) {
-            const text3 = await readFile20(path, "utf8");
+            const text3 = await readFile21(path, "utf8");
             lines = text3.split("\n").length - (text3.endsWith("\n") ? 1 : 0);
           }
         } catch {
@@ -14613,8 +14867,8 @@ function waitForProcessStartTime(pid, jobId, exitPath) {
 function readProcessStartTime(pid) {
   if (process.platform === "linux") {
     try {
-      const stat8 = readFileSync6(`/proc/${pid}/stat`, "utf8");
-      const fieldsAfterCommand = stat8.slice(stat8.lastIndexOf(")") + 1).trim().split(/\s+/);
+      const stat9 = readFileSync6(`/proc/${pid}/stat`, "utf8");
+      const fieldsAfterCommand = stat9.slice(stat9.lastIndexOf(")") + 1).trim().split(/\s+/);
       return fieldsAfterCommand[19] ? `linux:${fieldsAfterCommand[19]}` : null;
     } catch {
       return null;
@@ -15485,7 +15739,8 @@ var waitForTool = {
 };
 
 // src/tools/executor.ts
-import { realpath as realpath4 } from "fs/promises";
+init_paths();
+import { readFile as readFile15, realpath as realpath4, stat as stat6 } from "fs/promises";
 import { isAbsolute as isAbsolute3, relative as relative4, resolve as resolve5, sep as sep3 } from "path";
 var ALL_TOOLS = [
   { ...readTool, isReadOnly: true },
@@ -15538,6 +15793,17 @@ function toPermissionResult(d) {
   return d;
 }
 var HOOK_RESULT_CONTENT_CAP_BYTES = 4 * 1024;
+var HOOK_FILE_SNAPSHOT_MAX_BYTES = 1024 * 1024;
+async function snapshotForHook(abs) {
+  try {
+    const st = await stat6(abs);
+    if (!st.isFile()) return { existed: true, content: null };
+    if (st.size > HOOK_FILE_SNAPSHOT_MAX_BYTES) return { existed: true, content: null };
+    return { existed: true, content: await readFile15(abs, "utf8") };
+  } catch {
+    return { existed: false, content: null };
+  }
+}
 function shellResultForHook(meta) {
   if (!meta || meta.exitCode === void 0) return {};
   return {
@@ -15556,6 +15822,15 @@ function capContentForHook(s) {
   return `${cut}
 [\u2026truncated for hook payload]`;
 }
+async function fileChangeAfter(tool, args, cwd, before) {
+  let updated = null;
+  if (tool === "write" && typeof args.content === "string") {
+    updated = Buffer.byteLength(args.content, "utf8") <= HOOK_FILE_SNAPSHOT_MAX_BYTES ? args.content : null;
+  } else {
+    updated = (await snapshotForHook(resolvePath(cwd, args.path))).content;
+  }
+  return { existed: before.existed, original: before.content, updated };
+}
 var ToolExecutor = class {
   sessionAllowed = /* @__PURE__ */ new Set();
   tools;
@@ -15733,8 +16008,10 @@ var ToolExecutor = class {
         runStore.recordToolIntent(ctx.runId, call.id, call.name, args);
         intentRecorded = true;
       }
+      const before = this.wantsFileChange(call.name, args) ? await snapshotForHook(resolvePath(ctx.cwd, args.path)) : void 0;
       const result2 = await tool.run(args, ctx);
       toolCompleted = true;
+      const fileChange = before ? await fileChangeAfter(call.name, args, ctx.cwd, before) : void 0;
       const normalized = normalizeToolOutput(result2);
       tr?.raw(normalized);
       if (runStore && ctx.runId) {
@@ -15786,7 +16063,7 @@ var ToolExecutor = class {
         artifactId: reduced.artifactId,
         ...normalized.waitRequest ? { waitRequest: normalized.waitRequest } : {}
       };
-      this.firePostToolUse(call, args, success, ctx, normalized.meta);
+      this.firePostToolUse(call, args, success, ctx, normalized.meta, fileChange);
       return success;
     } catch (e) {
       if (e instanceof RunToolBudgetExceededError) ctx.onRunBudgetExceeded?.(e.reason);
@@ -15857,7 +16134,7 @@ var ToolExecutor = class {
    * `content` field is capped via `capContentForHook` to keep large tool
    * outputs from blowing the OS env-var limits on `KIMIFLARE_HOOK_PAYLOAD`.
    */
-  firePostToolUse(call, args, result2, ctx, meta) {
+  firePostToolUse(call, args, result2, ctx, meta, fileChange) {
     const hooks = this.hooks;
     if (!hooks) return;
     const post = hooks.hasEnabledHooks("PostToolUse");
@@ -15867,7 +16144,8 @@ var ToolExecutor = class {
       ok: result2.ok,
       content: capContentForHook(result2.content),
       errorCode: result2.errorCode,
-      ...shellResultForHook(meta)
+      ...shellResultForHook(meta),
+      ...fileChange ? { fileChange } : {}
     };
     const base = {
       session_id: ctx.sessionId ?? null,
@@ -15885,6 +16163,11 @@ var ToolExecutor = class {
       void hooks.fire("PostToolUseFailure", { event: "PostToolUseFailure", ...base, error: claudeError(resultFields) }, call.name, ctx.signal).catch(swallow);
     }
   }
+  /** True when a PostToolUse hook would get this write / edit call's diff. */
+  wantsFileChange(tool, args) {
+    if (tool !== "write" && tool !== "edit" || typeof args.path !== "string" || !args.path) return false;
+    return !!this.hooks && (this.hooks.hasEnabledHooks("PostToolUse") || this.hooks.hasEnabledHooks("PostToolUseFailure"));
+  }
   permissionKey(tool, args) {
     if (tool.name === "bash" && typeof args.command === "string") {
       const firstToken = args.command.trim().split(/\s+/)[0] ?? "";
@@ -17603,7 +17886,7 @@ function makeLspTools(manager) {
 init_sessions();
 
 // src/usage-tracker.ts
-import { readFile as readFile15, rename as rename3 } from "fs/promises";
+import { readFile as readFile16, rename as rename3 } from "fs/promises";
 import { homedir as homedir16 } from "os";
 import { join as join28 } from "path";
 import { EventEmitter as EventEmitter2 } from "events";
@@ -17635,7 +17918,7 @@ init_openrouter();
 init_storage_limits();
 
 // src/util/atomic-file.ts
-import { mkdir as mkdir9, rename as rename2, rm as rm3, stat as stat6, writeFile as writeFile8 } from "fs/promises";
+import { mkdir as mkdir9, rename as rename2, rm as rm3, stat as stat7, writeFile as writeFile8 } from "fs/promises";
 import { dirname as dirname13 } from "path";
 import { randomUUID as randomUUID6 } from "crypto";
 async function writeFileAtomic(path, data) {
@@ -17662,7 +17945,7 @@ async function withFileLock2(lockPath, fn) {
       held = true;
     } catch (err) {
       if (err.code !== "EEXIST") break;
-      const age = await stat6(lockPath).then((s) => Date.now() - s.mtimeMs, () => 0);
+      const age = await stat7(lockPath).then((s) => Date.now() - s.mtimeMs, () => 0);
       if (age > LOCK_STALE_MS) {
         await rm3(lockPath, { recursive: true, force: true }).catch(() => void 0);
         continue;
@@ -17712,7 +17995,7 @@ function cutoffDate(daysBack) {
 async function loadLog() {
   let raw;
   try {
-    raw = await readFile15(usagePath(), "utf8");
+    raw = await readFile16(usagePath(), "utf8");
   } catch {
     return { version: LOG_VERSION2, days: [], sessions: [] };
   }
@@ -17738,7 +18021,7 @@ function withLock(fn) {
 }
 async function loadHistory() {
   try {
-    const raw = await readFile15(historyPath(), "utf8");
+    const raw = await readFile16(historyPath(), "utf8");
     const lines = raw.split("\n").filter((l) => l.trim());
     const entries = [];
     for (const line of lines) {
@@ -17927,48 +18210,6 @@ init_llm_auth();
 
 // src/agent/session-core.ts
 init_llm_auth();
-
-// src/intent/classify.ts
-var INTENT_PATTERNS = {
-  qa: /\b(what|how|why|explain|describe|what's|what is)\b/i,
-  diagnose: /\b(broken|failing|error|bug|crash|why.*fail|not working)\b/i,
-  verify: /\b(correct|right|verify|review|check|is this|does this)\b/i,
-  polish: /\b(rename|refactor|extract|move|clean|lint|format)\b/i,
-  small_edit: /\b(add|change|update|fix|remove|delete)\b.+\b(line|here|this|variable|function)\b/i,
-  feature_bounded: /\b(add|implement|create|support)\b.+\b(flag|option|param|arg|field)\b/i,
-  feature_exploratory: /\b(add|implement|migrate|integrate|build)\b.+\b(module|system|auth|oauth|framework|service)\b/i,
-  explore: /\b(how.*work|architecture|structure|where.*used|find.*all|understand)\b/i,
-  meta: /\b(plan|design|strategy|ontology|roadmap|approach)\b/i
-};
-var HEAVY_SIGNAL = /\b(research|investigat\w*|audit|deep[\s-]?(dive|thinking)|explorat\w*|comprehensive|end[\s-]?to[\s-]?end|entire\s+(code\s?base|repo\w*|project|app)|whole\s+(code\s?base|repo\w*|project|app)|across\s+the\s+(code\s?base|repo\w*|project)|security|vulnerab\w*|loophole|exploit\w*|threat\s?model|attack\s+surface|penetration)\b/i;
-function classifyIntent(prompt) {
-  let intentScore = 0;
-  let matchedIntent = "other";
-  for (const [intent, pattern] of Object.entries(INTENT_PATTERNS)) {
-    const matches = (prompt.match(pattern) || []).length;
-    if (matches > intentScore) {
-      intentScore = matches;
-      matchedIntent = intent;
-    }
-  }
-  const hasFileMentions = (prompt.match(/@\w+|\b[\w/-]+\.(ts|tsx|js|jsx|py|go|rs)\b/g) || []).length;
-  const hasMutatingVerb = /\b(add|create|write|edit|delete|remove|rename|migrate|implement)\b/i.test(prompt);
-  const isQuestion = prompt.trim().endsWith("?") || /\b(what|how|why|is|does|can)\b/i.test(prompt.split(" ")[0] || "");
-  const hasHeavySignal = HEAVY_SIGNAL.test(prompt);
-  const rawScore = Math.min(
-    1,
-    intentScore * 0.25 + (hasFileMentions > 2 ? 0.3 : hasFileMentions * 0.1) + (hasMutatingVerb ? 0.25 : 0) + (isQuestion ? 0 : 0.1) + (hasHeavySignal ? 0.6 : 0)
-  );
-  const tier = rawScore < 0.3 ? "light" : rawScore < 0.65 ? "medium" : "heavy";
-  return {
-    intent: hasHeavySignal && matchedIntent === "other" ? "explore" : matchedIntent,
-    rawScore,
-    tier,
-    confidence: 0.5 + (intentScore > 0 || hasHeavySignal ? 0.3 : 0) + (hasFileMentions > 0 ? 0.1 : 0)
-  };
-}
-
-// src/agent/session-core.ts
 function lastUserText(messages) {
   for (let i = messages.length - 1; i >= 0; i--) {
     const m = messages[i];
@@ -18097,7 +18338,7 @@ init_redact();
 
 // src/trace/retention.ts
 init_storage_limits();
-import { readdir as readdir5, rm as rm4, stat as stat7 } from "fs/promises";
+import { readdir as readdir5, rm as rm4, stat as stat8 } from "fs/promises";
 import { join as join32 } from "path";
 
 // src/trace/session-start.ts
@@ -18412,6 +18653,16 @@ var InternalSession = class {
       return;
     }
     const mode = options?.mode ?? this.currentMode;
+    const gate = await submitUserPrompt({
+      ...this.hooks ? { hooks: this.hooks } : {},
+      sessionId: this.sessionId,
+      cwd: this.cwd,
+      prompt: text3,
+      resumed: this.messages.some((m) => m.role === "assistant"),
+      model: this.model,
+      auth: llmAuthFromConfig(this.config)
+    });
+    if (gate.blocked) throw new PromptBlockedError(gate.reason);
     const messageId = `msg_${this.nextMessageId++}`;
     let userContent2 = text3;
     if (options?.images && options.images.length > 0) {
@@ -18757,7 +19008,7 @@ ${notes.join("\n")}` };
           this.lspManager?.notifyChange(path, content);
         } else {
           void import("fs/promises").then(
-            ({ readFile: readFile20 }) => readFile20(path, "utf8").then((c) => this.lspManager?.notifyChange(path, c)).catch(() => {
+            ({ readFile: readFile21 }) => readFile21(path, "utf8").then((c) => this.lspManager?.notifyChange(path, c)).catch(() => {
             })
           ).catch(() => {
           });
@@ -18964,7 +19215,7 @@ async function startRpcServer(input = process.stdin, output = process.stdout, cr
 }
 
 // src/sdk/aster-cell.ts
-import { appendFile as appendFile3, mkdir as mkdir13, readFile as readFile19, unlink as unlink3, writeFile as writeFile12 } from "fs/promises";
+import { appendFile as appendFile3, mkdir as mkdir13, readFile as readFile20, unlink as unlink3, writeFile as writeFile12 } from "fs/promises";
 import { createServer as createServer2 } from "http";
 import { PassThrough, Writable } from "stream";
 import { join as join35, resolve as resolvePath2 } from "path";
@@ -19163,13 +19414,13 @@ async function readCommand(req) {
 async function readState() {
   let state;
   try {
-    state = JSON.parse(await readFile19(TURN_STATE, "utf8"));
+    state = JSON.parse(await readFile20(TURN_STATE, "utf8"));
   } catch {
     state = { sessionId: null, activeRunId: null, initialized: false, cursor: 0 };
   }
   let last;
   try {
-    const lines = (await readFile19(EVENT_LOG, "utf8")).trim().split("\n").filter(Boolean);
+    const lines = (await readFile20(EVENT_LOG, "utf8")).trim().split("\n").filter(Boolean);
     last = lines.length ? JSON.parse(lines.at(-1)) : void 0;
   } catch {
   }
@@ -19197,7 +19448,7 @@ async function persistState(state) {
 async function readEvents(after) {
   let contents;
   try {
-    contents = await readFile19(EVENT_LOG, "utf8");
+    contents = await readFile20(EVENT_LOG, "utf8");
   } catch {
     return [];
   }
@@ -19218,7 +19469,7 @@ async function executeAsterCellControl(requestId) {
   if (!CONTROL_UUID_RE.test(requestId)) throw new Error("invalid_control_request");
   const requestPath = resolvePath2(REQUEST_DIR, requestId + ".json");
   if (!requestPath.startsWith(REQUEST_DIR + "/")) throw new Error("invalid_control_request");
-  const request = JSON.parse(await readFile19(requestPath, "utf8"));
+  const request = JSON.parse(await readFile20(requestPath, "utf8"));
   await unlink3(requestPath).catch(() => {
   });
   if (request.method === "GET" && request.path.startsWith("/events?after=")) {
@@ -19363,6 +19614,7 @@ var RunWakeScheduler = class {
 export {
   DEFAULT_MODEL,
   DEFAULT_REASONING_EFFORT,
+  PromptBlockedError,
   RunStore,
   RunWakeScheduler,
   createAgentSession,