autopilot-ai 2.1.0 → 2.2.0

package/dist/sdk/index.d.ts

@@ -1213,6 +1213,21 @@ declare function createDefaultPermissionHandler(options: {
 
 declare function startRpcServer(input?: Readable, output?: Writable, createSession?: typeof createAgentSession): Promise<void>;
 
+/**
+ * The start of a user prompt, the same in every host (TUI, print, emit,
+ * serve, SDK/RPC): SessionStart (once per session), then the veto-able
+ * UserPromptSubmit hook. Observers such as Agent Beacon see the order
+ * SessionStart → UserPromptSubmit → tool events → Stop, always with the
+ * session id, so hosts must have the id before they call this.
+ */
+
+/** Thrown by non-interactive hosts (SDK, RPC) when a UserPromptSubmit hook blocks the prompt. */
+declare class PromptBlockedError extends Error {
+    readonly reason: string;
+    readonly code = "prompt_blocked";
+    constructor(reason: string);
+}
+
 declare function startAsterCellBridge(port?: number): Promise<ReturnType<typeof createServer>>;
 interface AsterCellControlRequest {
     method: "GET" | "POST";
@@ -1468,4 +1483,4 @@ declare class RunWakeScheduler {
 
 declare function resolveSdkConfig(opts: CreateSessionOptions): Promise<KimiConfig>;
 
-export { type AsterCellControlRequest, type ChatMessage, type CreateSessionOptions, DEFAULT_MODEL, DEFAULT_REASONING_EFFORT, type KimiConfig, type KimiFlareSession, type PermissionDecision, type PermissionHandler, type PermissionRequest, type PromptOptions, type RunEvent, type RunEventType, type RunRecord, type RunStatus, RunStore, type RunTimer, type RunWakeEvent, RunWakeScheduler, type RunWakeSchedulerOptions, type SessionEvent, type SessionStatus, type SessionUsage, type Task, type TimerCondition, type TimerStatus, type ToolSpec, createAgentSession, createDefaultPermissionHandler, executeAsterCellControl, loadConfig, resolveSdkConfig, saveConfig, startAsterCellBridge, startRpcServer };
+export { type AsterCellControlRequest, type ChatMessage, type CreateSessionOptions, DEFAULT_MODEL, DEFAULT_REASONING_EFFORT, type KimiConfig, type KimiFlareSession, type PermissionDecision, type PermissionHandler, type PermissionRequest, PromptBlockedError, type PromptOptions, type RunEvent, type RunEventType, type RunRecord, type RunStatus, RunStore, type RunTimer, type RunWakeEvent, RunWakeScheduler, type RunWakeSchedulerOptions, type SessionEvent, type SessionStatus, type SessionUsage, type Task, type TimerCondition, type TimerStatus, type ToolSpec, createAgentSession, createDefaultPermissionHandler, executeAsterCellControl, loadConfig, resolveSdkConfig, saveConfig, startAsterCellBridge, startRpcServer };

package/dist/sdk/index.js

@@ -3175,6 +3175,146 @@ var init_redact = __esm({
   }
 });
 
+// src/util/line-diff.ts
+function splitLines(text3) {
+  if (text3 === "") return [];
+  const lines = text3.split("\n");
+  if (lines[lines.length - 1] === "") lines.pop();
+  return lines;
+}
+function myers(a, b) {
+  const n = a.length;
+  const m = b.length;
+  const max = n + m;
+  if (max === 0) return [];
+  const offset = max;
+  let v = new Int32Array(2 * max + 2);
+  const trace = [];
+  for (let d = 0; d <= max; d++) {
+    if ((n + m) * d > MAX_MYERS_COST) return null;
+    trace.push(v.slice());
+    const next = v;
+    for (let k = -d; k <= d; k += 2) {
+      let x;
+      if (k === -d || k !== d && next[offset + k - 1] < next[offset + k + 1]) x = next[offset + k + 1];
+      else x = next[offset + k - 1] + 1;
+      let y = x - k;
+      while (x < n && y < m && a[x] === b[y]) {
+        x++;
+        y++;
+      }
+      next[offset + k] = x;
+      if (x >= n && y >= m) {
+        trace.push(next.slice());
+        return backtrack(trace, a, b, offset);
+      }
+    }
+    v = next;
+  }
+  return null;
+}
+function backtrack(trace, a, b, offset) {
+  const ops = [];
+  let x = a.length;
+  let y = b.length;
+  for (let d = trace.length - 2; d >= 0; d--) {
+    const v = trace[d];
+    const k = x - y;
+    let prevK;
+    if (k === -d || k !== d && v[offset + k - 1] < v[offset + k + 1]) prevK = k + 1;
+    else prevK = k - 1;
+    const prevX = d === 0 ? 0 : v[offset + prevK];
+    const prevY = prevX - prevK;
+    while (x > prevX && y > prevY) {
+      ops.push({ kind: " ", text: a[x - 1] });
+      x--;
+      y--;
+    }
+    if (d === 0) break;
+    if (x === prevX) ops.push({ kind: "+", text: b[y - 1] });
+    else ops.push({ kind: "-", text: a[x - 1] });
+    x = prevX;
+    y = prevY;
+  }
+  while (x > 0 && y > 0) {
+    ops.push({ kind: " ", text: a[x - 1] });
+    x--;
+    y--;
+  }
+  return ops.reverse();
+}
+function editScript(a, b) {
+  let pre = 0;
+  while (pre < a.length && pre < b.length && a[pre] === b[pre]) pre++;
+  let suf = 0;
+  while (suf < a.length - pre && suf < b.length - pre && a[a.length - 1 - suf] === b[b.length - 1 - suf]) suf++;
+  const midA = a.slice(pre, a.length - suf);
+  const midB = b.slice(pre, b.length - suf);
+  const mid = myers(midA, midB) ?? [
+    ...midA.map((text3) => ({ kind: "-", text: text3 })),
+    ...midB.map((text3) => ({ kind: "+", text: text3 }))
+  ];
+  return [
+    ...a.slice(0, pre).map((text3) => ({ kind: " ", text: text3 })),
+    ...mid,
+    ...a.slice(a.length - suf).map((text3) => ({ kind: " ", text: text3 }))
+  ];
+}
+function structuredPatch(oldText, newText, context = DEFAULT_CONTEXT) {
+  const ops = editScript(splitLines(oldText), splitLines(newText));
+  const hunks = [];
+  let oldNo = 1;
+  let newNo = 1;
+  const pos = ops.map((op) => {
+    const at = { old: oldNo, new: newNo };
+    if (op.kind !== "+") oldNo++;
+    if (op.kind !== "-") newNo++;
+    return at;
+  });
+  let i = 0;
+  while (i < ops.length) {
+    if (ops[i].kind === " ") {
+      i++;
+      continue;
+    }
+    const start = Math.max(0, i - context);
+    let end = i;
+    for (; ; ) {
+      while (end < ops.length && ops[end].kind !== " ") end++;
+      let gap = end;
+      while (gap < ops.length && ops[gap].kind === " ") gap++;
+      if (gap < ops.length && gap - end <= 2 * context) {
+        end = gap;
+        continue;
+      }
+      end = Math.min(ops.length, end + context);
+      break;
+    }
+    const slice = ops.slice(start, end);
+    const oldLines = slice.filter((o) => o.kind !== "+").length;
+    const newLines = slice.filter((o) => o.kind !== "-").length;
+    const first = pos[start];
+    hunks.push({
+      // jsdiff's convention: a hunk with no old (or new) lines starts one line earlier.
+      oldStart: oldLines === 0 ? first.old - 1 : first.old,
+      oldLines,
+      newStart: newLines === 0 ? first.new - 1 : first.new,
+      newLines,
+      lines: slice.map((o) => o.kind + o.text)
+    });
+    i = end;
+  }
+  return hunks;
+}
+var DEFAULT_CONTEXT, MAX_MYERS_COST;
+var init_line_diff = __esm({
+  "src/util/line-diff.ts"() {
+    "use strict";
+    DEFAULT_CONTEXT = 3;
+    MAX_MYERS_COST = 4e6;
+  }
+});
+
 // src/hooks/claude-compat.ts
 function claudeToolName(tool, args) {
   if (tool === "edit" && Array.isArray(args.edits)) return "MultiEdit";
@@ -3259,9 +3399,35 @@ function claudeToolResponse(tool, args, cwd, result2) {
   }
   if ((tool === "write" || tool === "edit") && isStr(args.path) && !failed) {
     response.filePath = resolvePath(cwd, args.path);
+    if (result2.fileChange) Object.assign(response, claudeFileChangeFields(tool, args, result2.fileChange));
   }
   return response;
 }
+function claudeFileChangeFields(tool, args, change) {
+  const fields = {};
+  if (tool === "write") {
+    fields.type = change.existed ? "update" : "create";
+    if (isStr(args.content)) fields.content = args.content;
+  } else if (Array.isArray(args.edits)) {
+    fields.edits = editPairs(args);
+  } else {
+    fields.oldString = args.old_string;
+    fields.newString = args.new_string;
+    fields.replaceAll = args.replace_all === true;
+  }
+  if (!change.existed) {
+    fields.originalFile = null;
+    fields.structuredPatch = [];
+  } else {
+    if (change.original !== null && Buffer.byteLength(change.original, "utf8") <= ORIGINAL_FILE_CAP_BYTES) {
+      fields.originalFile = change.original;
+    }
+    if (change.original !== null && change.updated !== null) {
+      fields.structuredPatch = structuredPatch(change.original, change.updated);
+    }
+  }
+  return fields;
+}
 function claudeError(result2) {
   if (isNum(result2.exitCode) && result2.exitCode !== 0) {
     const output = [result2.stdout, result2.stderr].filter((s) => s && s.trim()).map((s) => s.trimEnd()).join("\n");
@@ -3294,12 +3460,13 @@ function claudeToolFields(payload) {
   }
   return { tool_name: toolName, ...fields };
 }
-var CLAUDE_TOOL_NAMES, FILE_EDIT_NAMES, isStr, isNum;
+var CLAUDE_TOOL_NAMES, FILE_EDIT_NAMES, isStr, isNum, ORIGINAL_FILE_CAP_BYTES;
 var init_claude_compat = __esm({
   "src/hooks/claude-compat.ts"() {
     "use strict";
     init_edit();
     init_paths();
+    init_line_diff();
     CLAUDE_TOOL_NAMES = {
       bash: "Bash",
       edit: "Edit",
@@ -3314,6 +3481,7 @@ var init_claude_compat = __esm({
     FILE_EDIT_NAMES = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit"]);
     isStr = (v) => typeof v === "string";
     isNum = (v) => typeof v === "number";
+    ORIGINAL_FILE_CAP_BYTES = 256 * 1024;
   }
 });
 
@@ -3920,6 +4088,10 @@ function hookWirePayload(payload) {
   if (payload.session_id) Object.assign(wire, hookTranscriptFields(payload.session_id));
   if (isToolEventPayload(payload)) {
     Object.assign(wire, claudeToolFields(payload));
+    if ((payload.event === "PostToolUse" || payload.event === "PostToolUseFailure") && payload.result.fileChange) {
+      const { fileChange: _fileChange, ...result2 } = payload.result;
+      wire.result = result2;
+    }
     if (payload.tool_call_id) wire.tool_use_id = payload.tool_call_id;
     if (payload.event === "PermissionRequest") wire.permission_mode = claudePermissionMode(payload.mode);
   }
@@ -4742,7 +4914,7 @@ __export(openrouter_catalog_exports, {
   loadOpenRouterCatalog: () => loadOpenRouterCatalog,
   mapOpenRouterModel: () => mapOpenRouterModel
 });
-import { readFile as readFile16, writeFile as writeFile9, mkdir as mkdir10 } from "fs/promises";
+import { readFile as readFile17, writeFile as writeFile9, mkdir as mkdir10 } from "fs/promises";
 import { homedir as homedir17 } from "os";
 import { join as join29, dirname as dirname14 } from "path";
 function catalogCachePath() {
@@ -4798,7 +4970,7 @@ async function fetchOpenRouterCatalog(fetchImpl2 = fetch) {
 }
 async function readCache2() {
   try {
-    const raw = await readFile16(catalogCachePath(), "utf8");
+    const raw = await readFile17(catalogCachePath(), "utf8");
     const parsed = JSON.parse(raw);
     return parsed.version === CACHE_VERSION ? parsed : null;
   } catch {
@@ -4857,7 +5029,7 @@ __export(requesty_catalog_exports, {
   loadRequestyCatalog: () => loadRequestyCatalog,
   mapRequestyModel: () => mapRequestyModel
 });
-import { readFile as readFile17, writeFile as writeFile10, mkdir as mkdir11 } from "fs/promises";
+import { readFile as readFile18, writeFile as writeFile10, mkdir as mkdir11 } from "fs/promises";
 import { homedir as homedir18 } from "os";
 import { join as join30, dirname as dirname15 } from "path";
 function catalogCachePath2() {
@@ -4918,7 +5090,7 @@ async function fetchRequestyCatalog(fetchImpl2 = fetch) {
 }
 async function readCache3() {
   try {
-    const raw = await readFile17(catalogCachePath2(), "utf8");
+    const raw = await readFile18(catalogCachePath2(), "utf8");
     const parsed = JSON.parse(raw);
     if (parsed.version !== CACHE_VERSION2) return null;
     return {
@@ -4996,7 +5168,7 @@ __export(provider_catalog_exports, {
   mapModelsDevModel: () => mapModelsDevModel,
   mapModelsDevProvider: () => mapModelsDevProvider
 });
-import { readFile as readFile18, writeFile as writeFile11, mkdir as mkdir12 } from "fs/promises";
+import { readFile as readFile19, writeFile as writeFile11, mkdir as mkdir12 } from "fs/promises";
 import { homedir as homedir19 } from "os";
 import { join as join31, dirname as dirname16 } from "path";
 function mapModelsDevModel(m) {
@@ -5036,7 +5208,7 @@ function cachePath() {
 }
 async function readCache4() {
   try {
-    const parsed = JSON.parse(await readFile18(cachePath(), "utf8"));
+    const parsed = JSON.parse(await readFile19(cachePath(), "utf8"));
     return parsed.version === CACHE_VERSION3 ? parsed : null;
   } catch {
     return null;
@@ -5412,6 +5584,89 @@ async function endSessions(reason = "exit", timeoutMs = 3e3) {
   await Promise.all([...[...started.keys()].map((id) => endSession(id, reason, timeoutMs)), ...ending]);
 }
 
+// src/intent/classify.ts
+var INTENT_PATTERNS = {
+  qa: /\b(what|how|why|explain|describe|what's|what is)\b/i,
+  diagnose: /\b(broken|failing|error|bug|crash|why.*fail|not working)\b/i,
+  verify: /\b(correct|right|verify|review|check|is this|does this)\b/i,
+  polish: /\b(rename|refactor|extract|move|clean|lint|format)\b/i,
+  small_edit: /\b(add|change|update|fix|remove|delete)\b.+\b(line|here|this|variable|function)\b/i,
+  feature_bounded: /\b(add|implement|create|support)\b.+\b(flag|option|param|arg|field)\b/i,
+  feature_exploratory: /\b(add|implement|migrate|integrate|build)\b.+\b(module|system|auth|oauth|framework|service)\b/i,
+  explore: /\b(how.*work|architecture|structure|where.*used|find.*all|understand)\b/i,
+  meta: /\b(plan|design|strategy|ontology|roadmap|approach)\b/i
+};
+var HEAVY_SIGNAL = /\b(research|investigat\w*|audit|deep[\s-]?(dive|thinking)|explorat\w*|comprehensive|end[\s-]?to[\s-]?end|entire\s+(code\s?base|repo\w*|project|app)|whole\s+(code\s?base|repo\w*|project|app)|across\s+the\s+(code\s?base|repo\w*|project)|security|vulnerab\w*|loophole|exploit\w*|threat\s?model|attack\s+surface|penetration)\b/i;
+function classifyIntent(prompt) {
+  let intentScore = 0;
+  let matchedIntent = "other";
+  for (const [intent, pattern] of Object.entries(INTENT_PATTERNS)) {
+    const matches = (prompt.match(pattern) || []).length;
+    if (matches > intentScore) {
+      intentScore = matches;
+      matchedIntent = intent;
+    }
+  }
+  const hasFileMentions = (prompt.match(/@\w+|\b[\w/-]+\.(ts|tsx|js|jsx|py|go|rs)\b/g) || []).length;
+  const hasMutatingVerb = /\b(add|create|write|edit|delete|remove|rename|migrate|implement)\b/i.test(prompt);
+  const isQuestion = prompt.trim().endsWith("?") || /\b(what|how|why|is|does|can)\b/i.test(prompt.split(" ")[0] || "");
+  const hasHeavySignal = HEAVY_SIGNAL.test(prompt);
+  const rawScore = Math.min(
+    1,
+    intentScore * 0.25 + (hasFileMentions > 2 ? 0.3 : hasFileMentions * 0.1) + (hasMutatingVerb ? 0.25 : 0) + (isQuestion ? 0 : 0.1) + (hasHeavySignal ? 0.6 : 0)
+  );
+  const tier = rawScore < 0.3 ? "light" : rawScore < 0.65 ? "medium" : "heavy";
+  return {
+    intent: hasHeavySignal && matchedIntent === "other" ? "explore" : matchedIntent,
+    rawScore,
+    tier,
+    confidence: 0.5 + (intentScore > 0 || hasHeavySignal ? 0.3 : 0) + (hasFileMentions > 0 ? 0.1 : 0)
+  };
+}
+
+// src/hooks/prompt-submit.ts
+init_llm_auth();
+var PROMPT_BLOCKED_DEFAULT_REASON = "UserPromptSubmit hook blocked the prompt";
+var PromptBlockedError = class extends Error {
+  reason;
+  code = "prompt_blocked";
+  constructor(reason) {
+    super(`prompt blocked by a UserPromptSubmit hook: ${reason}`);
+    this.name = "PromptBlockedError";
+    this.reason = reason;
+  }
+};
+async function submitUserPrompt(info) {
+  let provider;
+  try {
+    provider = info.auth ? providerPresetOf(info.auth).id : void 0;
+  } catch {
+    provider = void 0;
+  }
+  await noteSessionStart({
+    ...info.hooks ? { hooks: info.hooks } : {},
+    sessionId: info.sessionId,
+    cwd: info.cwd,
+    resumed: info.resumed,
+    model: info.model,
+    ...provider ? { provider } : {}
+  });
+  if (!info.hooks?.hasEnabledHooks("UserPromptSubmit")) return { blocked: false };
+  const outcome = await info.hooks.fire(
+    "UserPromptSubmit",
+    {
+      event: "UserPromptSubmit",
+      session_id: info.sessionId,
+      cwd: info.cwd,
+      prompt: info.prompt,
+      tier: info.tier ?? classifyIntent(info.prompt).tier
+    },
+    null
+  );
+  if (!outcome.vetoed) return { blocked: false };
+  return { blocked: true, reason: outcome.vetoReason || PROMPT_BLOCKED_DEFAULT_REASON };
+}
+
 // src/sdk/process-exit.ts
 init_otel_sink();
 init_logger();
@@ -9185,15 +9440,15 @@ async function gitNumstat(cwd, opts = {}) {
   if (opts.includeUntracked) {
     try {
       const { stdout } = await execFileAsync("git", ["ls-files", "--others", "--exclude-standard"], { cwd, timeout: 5e3 });
-      const { readFile: readFile20, stat: stat8 } = await import("fs/promises");
+      const { readFile: readFile21, stat: stat9 } = await import("fs/promises");
       const { join: join36 } = await import("path");
       for (const file of stdout.split("\n").filter(Boolean)) {
         let lines = 0;
         try {
           const path = join36(cwd, file);
-          const size = (await stat8(path)).size;
+          const size = (await stat9(path)).size;
           if (size > 0 && size <= 1024 * 1024) {
-            const text3 = await readFile20(path, "utf8");
+            const text3 = await readFile21(path, "utf8");
             lines = text3.split("\n").length - (text3.endsWith("\n") ? 1 : 0);
           }
         } catch {
@@ -14612,8 +14867,8 @@ function waitForProcessStartTime(pid, jobId, exitPath) {
 function readProcessStartTime(pid) {
   if (process.platform === "linux") {
     try {
-      const stat8 = readFileSync6(`/proc/${pid}/stat`, "utf8");
-      const fieldsAfterCommand = stat8.slice(stat8.lastIndexOf(")") + 1).trim().split(/\s+/);
+      const stat9 = readFileSync6(`/proc/${pid}/stat`, "utf8");
+      const fieldsAfterCommand = stat9.slice(stat9.lastIndexOf(")") + 1).trim().split(/\s+/);
       return fieldsAfterCommand[19] ? `linux:${fieldsAfterCommand[19]}` : null;
     } catch {
       return null;
@@ -15484,7 +15739,8 @@ var waitForTool = {
 };
 
 // src/tools/executor.ts
-import { realpath as realpath4 } from "fs/promises";
+init_paths();
+import { readFile as readFile15, realpath as realpath4, stat as stat6 } from "fs/promises";
 import { isAbsolute as isAbsolute3, relative as relative4, resolve as resolve5, sep as sep3 } from "path";
 var ALL_TOOLS = [
   { ...readTool, isReadOnly: true },
@@ -15537,6 +15793,17 @@ function toPermissionResult(d) {
   return d;
 }
 var HOOK_RESULT_CONTENT_CAP_BYTES = 4 * 1024;
+var HOOK_FILE_SNAPSHOT_MAX_BYTES = 1024 * 1024;
+async function snapshotForHook(abs) {
+  try {
+    const st = await stat6(abs);
+    if (!st.isFile()) return { existed: true, content: null };
+    if (st.size > HOOK_FILE_SNAPSHOT_MAX_BYTES) return { existed: true, content: null };
+    return { existed: true, content: await readFile15(abs, "utf8") };
+  } catch {
+    return { existed: false, content: null };
+  }
+}
 function shellResultForHook(meta) {
   if (!meta || meta.exitCode === void 0) return {};
   return {
@@ -15555,6 +15822,15 @@ function capContentForHook(s) {
   return `${cut}
 [\u2026truncated for hook payload]`;
 }
+async function fileChangeAfter(tool, args, cwd, before) {
+  let updated = null;
+  if (tool === "write" && typeof args.content === "string") {
+    updated = Buffer.byteLength(args.content, "utf8") <= HOOK_FILE_SNAPSHOT_MAX_BYTES ? args.content : null;
+  } else {
+    updated = (await snapshotForHook(resolvePath(cwd, args.path))).content;
+  }
+  return { existed: before.existed, original: before.content, updated };
+}
 var ToolExecutor = class {
   sessionAllowed = /* @__PURE__ */ new Set();
   tools;
@@ -15732,8 +16008,10 @@ var ToolExecutor = class {
         runStore.recordToolIntent(ctx.runId, call.id, call.name, args);
         intentRecorded = true;
       }
+      const before = this.wantsFileChange(call.name, args) ? await snapshotForHook(resolvePath(ctx.cwd, args.path)) : void 0;
       const result2 = await tool.run(args, ctx);
       toolCompleted = true;
+      const fileChange = before ? await fileChangeAfter(call.name, args, ctx.cwd, before) : void 0;
       const normalized = normalizeToolOutput(result2);
       tr?.raw(normalized);
       if (runStore && ctx.runId) {
@@ -15785,7 +16063,7 @@ var ToolExecutor = class {
         artifactId: reduced.artifactId,
         ...normalized.waitRequest ? { waitRequest: normalized.waitRequest } : {}
       };
-      this.firePostToolUse(call, args, success, ctx, normalized.meta);
+      this.firePostToolUse(call, args, success, ctx, normalized.meta, fileChange);
       return success;
     } catch (e) {
       if (e instanceof RunToolBudgetExceededError) ctx.onRunBudgetExceeded?.(e.reason);
@@ -15856,7 +16134,7 @@ var ToolExecutor = class {
    * `content` field is capped via `capContentForHook` to keep large tool
    * outputs from blowing the OS env-var limits on `KIMIFLARE_HOOK_PAYLOAD`.
    */
-  firePostToolUse(call, args, result2, ctx, meta) {
+  firePostToolUse(call, args, result2, ctx, meta, fileChange) {
     const hooks = this.hooks;
     if (!hooks) return;
     const post = hooks.hasEnabledHooks("PostToolUse");
@@ -15866,7 +16144,8 @@ var ToolExecutor = class {
       ok: result2.ok,
       content: capContentForHook(result2.content),
       errorCode: result2.errorCode,
-      ...shellResultForHook(meta)
+      ...shellResultForHook(meta),
+      ...fileChange ? { fileChange } : {}
     };
     const base = {
       session_id: ctx.sessionId ?? null,
@@ -15884,6 +16163,11 @@ var ToolExecutor = class {
       void hooks.fire("PostToolUseFailure", { event: "PostToolUseFailure", ...base, error: claudeError(resultFields) }, call.name, ctx.signal).catch(swallow);
     }
   }
+  /** True when a PostToolUse hook would get this write / edit call's diff. */
+  wantsFileChange(tool, args) {
+    if (tool !== "write" && tool !== "edit" || typeof args.path !== "string" || !args.path) return false;
+    return !!this.hooks && (this.hooks.hasEnabledHooks("PostToolUse") || this.hooks.hasEnabledHooks("PostToolUseFailure"));
+  }
   permissionKey(tool, args) {
     if (tool.name === "bash" && typeof args.command === "string") {
       const firstToken = args.command.trim().split(/\s+/)[0] ?? "";
@@ -17602,7 +17886,7 @@ function makeLspTools(manager) {
 init_sessions();
 
 // src/usage-tracker.ts
-import { readFile as readFile15, rename as rename3 } from "fs/promises";
+import { readFile as readFile16, rename as rename3 } from "fs/promises";
 import { homedir as homedir16 } from "os";
 import { join as join28 } from "path";
 import { EventEmitter as EventEmitter2 } from "events";
@@ -17634,7 +17918,7 @@ init_openrouter();
 init_storage_limits();
 
 // src/util/atomic-file.ts
-import { mkdir as mkdir9, rename as rename2, rm as rm3, stat as stat6, writeFile as writeFile8 } from "fs/promises";
+import { mkdir as mkdir9, rename as rename2, rm as rm3, stat as stat7, writeFile as writeFile8 } from "fs/promises";
 import { dirname as dirname13 } from "path";
 import { randomUUID as randomUUID6 } from "crypto";
 async function writeFileAtomic(path, data) {
@@ -17661,7 +17945,7 @@ async function withFileLock2(lockPath, fn) {
       held = true;
     } catch (err) {
       if (err.code !== "EEXIST") break;
-      const age = await stat6(lockPath).then((s) => Date.now() - s.mtimeMs, () => 0);
+      const age = await stat7(lockPath).then((s) => Date.now() - s.mtimeMs, () => 0);
       if (age > LOCK_STALE_MS) {
         await rm3(lockPath, { recursive: true, force: true }).catch(() => void 0);
         continue;
@@ -17711,7 +17995,7 @@ function cutoffDate(daysBack) {
 async function loadLog() {
   let raw;
   try {
-    raw = await readFile15(usagePath(), "utf8");
+    raw = await readFile16(usagePath(), "utf8");
   } catch {
     return { version: LOG_VERSION2, days: [], sessions: [] };
   }
@@ -17737,7 +18021,7 @@ function withLock(fn) {
 }
 async function loadHistory() {
   try {
-    const raw = await readFile15(historyPath(), "utf8");
+    const raw = await readFile16(historyPath(), "utf8");
     const lines = raw.split("\n").filter((l) => l.trim());
     const entries = [];
     for (const line of lines) {
@@ -17926,48 +18210,6 @@ init_llm_auth();
 
 // src/agent/session-core.ts
 init_llm_auth();
-
-// src/intent/classify.ts
-var INTENT_PATTERNS = {
-  qa: /\b(what|how|why|explain|describe|what's|what is)\b/i,
-  diagnose: /\b(broken|failing|error|bug|crash|why.*fail|not working)\b/i,
-  verify: /\b(correct|right|verify|review|check|is this|does this)\b/i,
-  polish: /\b(rename|refactor|extract|move|clean|lint|format)\b/i,
-  small_edit: /\b(add|change|update|fix|remove|delete)\b.+\b(line|here|this|variable|function)\b/i,
-  feature_bounded: /\b(add|implement|create|support)\b.+\b(flag|option|param|arg|field)\b/i,
-  feature_exploratory: /\b(add|implement|migrate|integrate|build)\b.+\b(module|system|auth|oauth|framework|service)\b/i,
-  explore: /\b(how.*work|architecture|structure|where.*used|find.*all|understand)\b/i,
-  meta: /\b(plan|design|strategy|ontology|roadmap|approach)\b/i
-};
-var HEAVY_SIGNAL = /\b(research|investigat\w*|audit|deep[\s-]?(dive|thinking)|explorat\w*|comprehensive|end[\s-]?to[\s-]?end|entire\s+(code\s?base|repo\w*|project|app)|whole\s+(code\s?base|repo\w*|project|app)|across\s+the\s+(code\s?base|repo\w*|project)|security|vulnerab\w*|loophole|exploit\w*|threat\s?model|attack\s+surface|penetration)\b/i;
-function classifyIntent(prompt) {
-  let intentScore = 0;
-  let matchedIntent = "other";
-  for (const [intent, pattern] of Object.entries(INTENT_PATTERNS)) {
-    const matches = (prompt.match(pattern) || []).length;
-    if (matches > intentScore) {
-      intentScore = matches;
-      matchedIntent = intent;
-    }
-  }
-  const hasFileMentions = (prompt.match(/@\w+|\b[\w/-]+\.(ts|tsx|js|jsx|py|go|rs)\b/g) || []).length;
-  const hasMutatingVerb = /\b(add|create|write|edit|delete|remove|rename|migrate|implement)\b/i.test(prompt);
-  const isQuestion = prompt.trim().endsWith("?") || /\b(what|how|why|is|does|can)\b/i.test(prompt.split(" ")[0] || "");
-  const hasHeavySignal = HEAVY_SIGNAL.test(prompt);
-  const rawScore = Math.min(
-    1,
-    intentScore * 0.25 + (hasFileMentions > 2 ? 0.3 : hasFileMentions * 0.1) + (hasMutatingVerb ? 0.25 : 0) + (isQuestion ? 0 : 0.1) + (hasHeavySignal ? 0.6 : 0)
-  );
-  const tier = rawScore < 0.3 ? "light" : rawScore < 0.65 ? "medium" : "heavy";
-  return {
-    intent: hasHeavySignal && matchedIntent === "other" ? "explore" : matchedIntent,
-    rawScore,
-    tier,
-    confidence: 0.5 + (intentScore > 0 || hasHeavySignal ? 0.3 : 0) + (hasFileMentions > 0 ? 0.1 : 0)
-  };
-}
-
-// src/agent/session-core.ts
 function lastUserText(messages) {
   for (let i = messages.length - 1; i >= 0; i--) {
     const m = messages[i];
@@ -18096,7 +18338,7 @@ init_redact();
 
 // src/trace/retention.ts
 init_storage_limits();
-import { readdir as readdir5, rm as rm4, stat as stat7 } from "fs/promises";
+import { readdir as readdir5, rm as rm4, stat as stat8 } from "fs/promises";
 import { join as join32 } from "path";
 
 // src/trace/session-start.ts
@@ -18411,6 +18653,16 @@ var InternalSession = class {
       return;
     }
     const mode = options?.mode ?? this.currentMode;
+    const gate = await submitUserPrompt({
+      ...this.hooks ? { hooks: this.hooks } : {},
+      sessionId: this.sessionId,
+      cwd: this.cwd,
+      prompt: text3,
+      resumed: this.messages.some((m) => m.role === "assistant"),
+      model: this.model,
+      auth: llmAuthFromConfig(this.config)
+    });
+    if (gate.blocked) throw new PromptBlockedError(gate.reason);
     const messageId = `msg_${this.nextMessageId++}`;
     let userContent2 = text3;
     if (options?.images && options.images.length > 0) {
@@ -18756,7 +19008,7 @@ ${notes.join("\n")}` };
           this.lspManager?.notifyChange(path, content);
         } else {
           void import("fs/promises").then(
-            ({ readFile: readFile20 }) => readFile20(path, "utf8").then((c) => this.lspManager?.notifyChange(path, c)).catch(() => {
+            ({ readFile: readFile21 }) => readFile21(path, "utf8").then((c) => this.lspManager?.notifyChange(path, c)).catch(() => {
             })
           ).catch(() => {
           });
@@ -18963,7 +19215,7 @@ async function startRpcServer(input = process.stdin, output = process.stdout, cr
 }
 
 // src/sdk/aster-cell.ts
-import { appendFile as appendFile3, mkdir as mkdir13, readFile as readFile19, unlink as unlink3, writeFile as writeFile12 } from "fs/promises";
+import { appendFile as appendFile3, mkdir as mkdir13, readFile as readFile20, unlink as unlink3, writeFile as writeFile12 } from "fs/promises";
 import { createServer as createServer2 } from "http";
 import { PassThrough, Writable } from "stream";
 import { join as join35, resolve as resolvePath2 } from "path";
@@ -19162,13 +19414,13 @@ async function readCommand(req) {
 async function readState() {
   let state;
   try {
-    state = JSON.parse(await readFile19(TURN_STATE, "utf8"));
+    state = JSON.parse(await readFile20(TURN_STATE, "utf8"));
   } catch {
     state = { sessionId: null, activeRunId: null, initialized: false, cursor: 0 };
   }
   let last;
   try {
-    const lines = (await readFile19(EVENT_LOG, "utf8")).trim().split("\n").filter(Boolean);
+    const lines = (await readFile20(EVENT_LOG, "utf8")).trim().split("\n").filter(Boolean);
     last = lines.length ? JSON.parse(lines.at(-1)) : void 0;
   } catch {
   }
@@ -19196,7 +19448,7 @@ async function persistState(state) {
 async function readEvents(after) {
   let contents;
   try {
-    contents = await readFile19(EVENT_LOG, "utf8");
+    contents = await readFile20(EVENT_LOG, "utf8");
   } catch {
     return [];
   }
@@ -19217,7 +19469,7 @@ async function executeAsterCellControl(requestId) {
   if (!CONTROL_UUID_RE.test(requestId)) throw new Error("invalid_control_request");
   const requestPath = resolvePath2(REQUEST_DIR, requestId + ".json");
   if (!requestPath.startsWith(REQUEST_DIR + "/")) throw new Error("invalid_control_request");
-  const request = JSON.parse(await readFile19(requestPath, "utf8"));
+  const request = JSON.parse(await readFile20(requestPath, "utf8"));
   await unlink3(requestPath).catch(() => {
   });
   if (request.method === "GET" && request.path.startsWith("/events?after=")) {
@@ -19362,6 +19614,7 @@ var RunWakeScheduler = class {
 export {
   DEFAULT_MODEL,
   DEFAULT_REASONING_EFFORT,
+  PromptBlockedError,
   RunStore,
   RunWakeScheduler,
   createAgentSession,