spacecode 2.8.1 → 2.10.0

package/dist/repl.mjs

@@ -3825,50 +3825,193 @@ var init_bash = __esm({
   }
 });
 
-// ../agent/src/prompt.ts
-function buildSystemPrompt(options) {
-  const workingDir = options.localCwd ? `Working directory: ${options.localCwd}` : options.repoName ? `Working directory: /home/user/${options.repoName}` : "Working directory: empty workspace";
-  const where = options.localCwd ? "on the user's machine" : "in the cloud";
-  const toolLines = [
-    "- read_file / write_file / edit_file / list_directory \u2014 instant file operations",
-    "- search \u2014 semantic code search by concept or keyword",
-    "- bash \u2014 shell commands (tests, builds, git, installs)"
-  ];
-  if (options.hasPreviewTool) {
-    toolLines.push("- preview \u2014 start or check a live preview of the app (front-end projects only)");
-  }
-  if (options.hasGitHubTools) {
-    toolLines.push("- create_pull_request \u2014 create a GitHub PR from the current branch");
-  }
-  if (options.hasSentryTools) {
-    toolLines.push("- sentry_list_issues / sentry_get_issue \u2014 view production errors (when connected)");
-  }
-  if (options.hasCodegenTools) {
-    toolLines.push("- build_feature \u2014 generate a complete feature with tests using the platform codegen service. Use for multi-file features or new modules. Files are written to workspace; run tests afterwards.");
+// ../shared/src/prompts/defaults-core.ts
+var DEFAULT_PROMPT_LIST;
+var init_defaults_core = __esm({
+  "../shared/src/prompts/defaults-core.ts"() {
+    "use strict";
+    DEFAULT_PROMPT_LIST = [
+      {
+        key: "pipeline.decompose.system",
+        description: "Splits a request into sub-tasks and enhances each (pipeline decomposer).",
+        vars: [],
+        body: `You are a task decomposition and prompt enhancement engine.
+
+## Decomposition Rules
+Analyze user requests and determine if they contain multiple independent tasks.
+- Numbered lists, bullet points, or requests joined by "and"/"also" are decomposable
+- Each sub-task should be independently executable
+
+## Prompt Enhancement Principles (MiniMax Best Practices)
+
+1. **Be Specific and Detailed**
+   - Transform vague requests into rich, detailed specifications
+   - Less: "Create a visualization website"
+   - More: "Create an enterprise-grade data visualization website with interactive charts, filtering capabilities, export functionality, and responsive design"
+
+2. **Explain Intent ("Why")**
+   - Add context about why this task matters
+   - Example: "Your code will be reviewed for security vulnerabilities, so validate all inputs"
+   - This helps the agent understand the purpose and provide more accurate results
+
+3. **Provide Examples**
+   - Show good patterns to follow and bad patterns to avoid
+   - Example: "Good: Handle errors with specific messages like 'User not found'. Bad: Use generic try/catch with no message."
+
+4. **Define Success Criteria**
+   - What does "done" look like?
+   - Example: "Complete when: tests pass, no linting errors, and manual verification in browser"
+
+5. **Specify Constraints**
+   - What to avoid, what not to do
+   - Example: "Do not use external dependencies beyond the existing package.json"
+
+For each sub-task, enhance the description following these principles. Call the decompose_tasks function with your analysis.`
+      },
+      {
+        key: "pipeline.enhance.system",
+        description: "Rewrites a coding request into a richer prompt (pipeline optimizer).",
+        vars: [],
+        body: `You are a prompt enhancement engine. Transform coding requests into rich, detailed prompts following these principles:
+
+## Enhancement Principles (MiniMax Best Practices)
+
+1. **Be Specific and Detailed**
+   - Transform vague requests into rich specifications
+   - Less: "Create a visualization website"
+   - More: "Create an enterprise-grade data visualization website with interactive charts, filtering capabilities, export functionality, and responsive design"
+
+2. **Explain Intent ("Why")**
+   - Add context about why this task matters
+   - Example: "Your code will be reviewed for security vulnerabilities, so validate all inputs"
+
+3. **Provide Examples**
+   - Show good patterns to follow and bad patterns to avoid
+   - Example: "Good: Handle errors with specific messages. Bad: Use generic try/catch"
+
+4. **Define Success Criteria**
+   - What does "done" look like?
+   - Example: "Complete when: tests pass, no linting errors"
+
+5. **Specify Constraints**
+   - What to avoid
+   - Example: "Do not use external dependencies beyond existing packages"
+
+Call the enhance_prompt function with your analysis.`
+      },
+      {
+        key: "context.summary",
+        description: "Short conversation summary stored for context reuse.",
+        vars: [],
+        body: `Summarize this conversation concisely in 2-4 sentences. Focus on:
+- What the user asked for
+- Key decisions made
+- Current state of the work
+- Any important context (file names, technologies, error messages)
+
+Do NOT include greetings or meta-commentary. Just the facts.`
+      },
+      {
+        key: "context.reasoning_summary",
+        description: "Detailed summary of the earlier conversation for the reasoning tier.",
+        vars: [],
+        body: `Summarize the earlier part of this conversation for a senior AI assistant that will continue the work. Be detailed and preserve:
+- Specific file paths, function names, and code snippets mentioned
+- Decisions made and their rationale
+- Error messages, stack traces, or debugging steps taken
+- Current state of the task (what's done, what remains)
+- User preferences or constraints expressed
+
+Write 3-8 sentences. Be concrete and technical, not vague.`
+      },
+      {
+        key: "profile.adapter.system",
+        description: "Classifies imported instruction sections as keep / on_demand / drop.",
+        vars: [],
+        body: `You prepare a user's personal instruction file (written for the Claude Code CLI) to be used by SpaceCode, a different coding agent that runs locally with these tools: read_file, write_file, edit_file, list_directory, search, bash, todo_write, memory_read, instructions_read. SpaceCode does NOT have: Claude Code hooks, ToolSearch/deferred tools, subagents (Task/Agent), skills or slash commands (/ship etc.), MCP tools (mcp__*), plan mode or worktrees.
+
+For EACH section decide:
+- "keep": a short, general standing rule that applies to nearly every task (always loaded). Keep this set small: the total of all kept sections must stay under about 5000 characters.
+- "on_demand": useful only when working in a specific area (a tool, vendor, workflow). Give a one-line "summary" saying when to read it.
+- "drop": (the text is kept and stored on demand anyway; this only flags it) only meaningful inside Claude Code (describes its hooks, skills, subagents, ToolSearch, MCP tool names or its own settings) or is obsolete for SpaceCode. Give a short "reason".
+
+You never rewrite or shorten text; you only classify. When unsure between drop and on_demand choose on_demand. When unsure between keep and on_demand choose on_demand.
+
+Reply with ONLY a JSON array, one object per input section, in the same order: {"slug": string, "decision": "keep"|"on_demand"|"drop", "reason"?: string, "summary"?: string}. No prose, no code fences.`
+      },
+      {
+        key: "route.code.system",
+        description: 'System prompt of the "code" dynamic route (pipeline helper calls).',
+        vars: [],
+        body: `You are an expert software engineer. Write clean, correct, well-structured code with proper error handling.`
+      },
+      {
+        key: "route.code-review.system",
+        description: 'System prompt of the "code-review" dynamic route (pipeline helper calls).',
+        vars: [],
+        body: `You are a senior code reviewer. Analyze code for bugs, security issues, performance problems, and maintainability. Be specific and actionable.`
+      },
+      {
+        key: "route.debugging.system",
+        description: 'System prompt of the "debugging" dynamic route (pipeline helper calls).',
+        vars: [],
+        body: `You are an expert debugger. Diagnose issues methodically: identify symptoms, trace root causes, and provide concrete fixes. Explain your reasoning step by step.`
+      },
+      {
+        key: "route.architecture.system",
+        description: 'System prompt of the "architecture" dynamic route (pipeline helper calls).',
+        vars: [],
+        body: `You are a software architect. Focus on system design, scalability, trade-offs, and infrastructure decisions. Be concrete and practical.`
+      },
+      {
+        key: "route.planning.system",
+        description: 'System prompt of the "planning" dynamic route (pipeline helper calls).',
+        vars: [],
+        body: `You are a technical project manager. Create structured plans, roadmaps, and specifications. Use clear headings and actionable items.`
+      },
+      {
+        key: "agent.summarizer.system",
+        description: "Extracts decisions and work items from a session transcript (resume summary, /compact).",
+        vars: [],
+        body: `You are extracting structured information from a coding-agent conversation transcript. Identify (a) concrete DECISIONS made during the conversation (architectural choices, approach selections, explicit tradeoffs accepted) and (b) WORK ITEMS \u2014 discrete pieces of work mentioned as done, in-progress, or still needed, each classified as "open" or "done" based on the transcript. Respond with ONLY a JSON object matching exactly this shape, no prose before or after, no markdown code fences: {"decisions": [{"description": string}], "workItems": [{"description": string, "status": "open"|"done"}]}`
+      },
+      {
+        key: "agent.summarizer.user_suffix",
+        description: "Reminder appended after the transcript for the summarizer.",
+        vars: [],
+        body: `Respond with ONLY the JSON object described above \u2014 no prose, no markdown code fences.`
+      }
+    ];
   }
-  return `You are SpaceCode Agent, a coding assistant running ${where}.
+});
+
+// ../shared/src/prompts/defaults-agent.ts
+var AGENT_PROMPT_LIST;
+var init_defaults_agent = __esm({
+  "../shared/src/prompts/defaults-agent.ts"() {
+    "use strict";
+    AGENT_PROMPT_LIST = [
+      {
+        key: "agent.system.core",
+        description: "Core system prompt of the SpaceCode agent (REPL and cloud).",
+        vars: ["where", "tool_lines", "orient_line", "finish_line", "codegen_section", "commit_section", "working_dir", "project_card_section", "resume_section"],
+        body: `You are SpaceCode Agent, a coding assistant running {{where}}.
 
 ## Tools
-${toolLines.join("\n")}
+{{tool_lines}}
 
 ## Tool usage
-${options.projectCard ? "- A project card below already holds the layout, commands, doc titles and excerpts, recent commits, branch and uncommitted changes. Do not re-list directories, re-run git status/log/diff, or re-read a doc just to see what the card shows; open a file only to go beyond its excerpt." : "- Use list_directory to orient yourself in the codebase before diving in."}
+{{orient_line}}
 - Use search to find files by concept ("auth middleware", "billing webhook").
 - Use bash for running commands, not for reading files. Use read_file instead.
 - Prefer read_file + edit_file over write_file for existing files.
-${options.hasGitHubTools ? "- After completing work, create a PR with create_pull_request. Commit and push changes first." : "- After completing work, commit your changes with bash (git add + git commit)."}
+{{finish_line}}
 
 ## Editing
 - Always read_file before edit_file \u2014 you need the current content.
 - old_string must match exactly once. Include surrounding lines for uniqueness.
 - Make small, targeted edits. Avoid rewriting entire files with write_file.
-${options.hasCodegenTools ? `
-## Feature generation
-- For multi-file features (3+ new files), prefer build_feature over writing files manually.
-- build_feature leverages a component library \u2014 it reuses existing implementations when possible.
-- After build_feature, always run tests and review the generated code before committing.
-- For single-file changes, bug fixes, or config edits, use edit_file directly.
-` : ""}
+{{codegen_section}}
 ## Error recovery
 - If edit_file fails (old_string not found), re-read the file \u2014 it may have changed \u2014 then retry with corrected old_string.
 - If bash fails, read the error output and try a different approach. Never repeat the same failing command.
@@ -3879,24 +4022,125 @@ ${options.hasCodegenTools ? `
 - For an audit or plan request, finish with the audit or plan itself (findings, then ordered next steps). Do not end by asking what to work on next.
 - After changes, run relevant tests (bash: npm test, pytest, etc.) to verify.
 - Commit logical units of work with descriptive messages.
-${options.commitGuidance ? `
-## Committing
+{{commit_section}}
+{{working_dir}}
+{{project_card_section}}{{resume_section}}
+Complete the user's task, then stop. Be concise in responses.`
+      },
+      {
+        key: "agent.fragment.orient_card",
+        description: "Tool-usage line when a project card is present.",
+        vars: [],
+        body: `- A project card below already holds the layout, commands, doc titles and excerpts, recent commits, branch and uncommitted changes. Do not re-list directories, re-run git status/log/diff, or re-read a doc just to see what the card shows; open a file only to go beyond its excerpt.`
+      },
+      {
+        key: "agent.fragment.orient_default",
+        description: "Tool-usage line when there is no project card.",
+        vars: [],
+        body: `- Use list_directory to orient yourself in the codebase before diving in.`
+      },
+      {
+        key: "agent.fragment.finish_github",
+        description: "Closing instruction when GitHub tools are available.",
+        vars: [],
+        body: `- After completing work, create a PR with create_pull_request. Commit and push changes first.`
+      },
+      {
+        key: "agent.fragment.finish_commit",
+        description: "Closing instruction without GitHub tools.",
+        vars: [],
+        body: `- After completing work, commit your changes with bash (git add + git commit).`
+      },
+      {
+        key: "agent.fragment.codegen",
+        description: "Feature-generation section (only when build_feature is registered).",
+        vars: [],
+        body: `## Feature generation
+- For multi-file features (3+ new files), prefer build_feature over writing files manually.
+- build_feature leverages a component library \u2014 it reuses existing implementations when possible.
+- After build_feature, always run tests and review the generated code before committing.
+- For single-file changes, bug fixes, or config edits, use edit_file directly.`
+      },
+      {
+        key: "agent.fragment.commit",
+        description: "Committing section (only when commit guidance is on).",
+        vars: [],
+        body: `## Committing
 - After completing a logical unit of work, commit changes with a descriptive message using bash (git add + git commit).
 - Use conventional commit format: feat:, fix:, refactor:, test:, docs:
-- Don't commit after every single file change \u2014 group related changes.
-` : ""}
-${workingDir}
-${options.projectCard ? `
-${options.projectCard}
-` : ""}${options.resumeSummary ? `
-## Previously in this session
-${options.resumeSummary}
-` : ""}
-Complete the user's task, then stop. Be concise in responses.`;
+- Don't commit after every single file change \u2014 group related changes.`
+      },
+      {
+        key: "agent.fragment.resume",
+        description: "Prior-turn summary injected on resume.",
+        vars: ["summary"],
+        body: `## Previously in this session
+{{summary}}`
+      }
+    ];
+  }
+});
+
+// ../shared/src/prompts/index.ts
+function renderPrompt(body, vars = {}) {
+  return body.replace(VAR, (_m, name) => {
+    if (!(name in vars)) throw new Error(`prompt variable {{${name}}} was not provided`);
+    return vars[name];
+  });
+}
+var DEFAULT_PROMPTS, VAR;
+var init_prompts = __esm({
+  "../shared/src/prompts/index.ts"() {
+    init_defaults_core();
+    init_defaults_agent();
+    DEFAULT_PROMPTS = Object.freeze(
+      Object.fromEntries([...DEFAULT_PROMPT_LIST, ...AGENT_PROMPT_LIST].map((p) => [p.key, p]))
+    );
+    VAR = /\{\{\s*([a-zA-Z_][a-zA-Z0-9_]*)\s*\}\}/g;
+  }
+});
+
+// ../agent/src/prompt.ts
+function buildSystemPrompt(options) {
+  const workingDir = options.localCwd ? `Working directory: ${options.localCwd}` : options.repoName ? `Working directory: /home/user/${options.repoName}` : "Working directory: empty workspace";
+  const where = options.localCwd ? "on the user's machine" : "in the cloud";
+  const toolLines = [
+    "- read_file / write_file / edit_file / list_directory \u2014 instant file operations",
+    "- search \u2014 semantic code search by concept or keyword",
+    "- bash \u2014 shell commands (tests, builds, git, installs)"
+  ];
+  if (options.hasPreviewTool) {
+    toolLines.push("- preview \u2014 start or check a live preview of the app (front-end projects only)");
+  }
+  if (options.hasGitHubTools) {
+    toolLines.push("- create_pull_request \u2014 create a GitHub PR from the current branch");
+  }
+  if (options.hasSentryTools) {
+    toolLines.push("- sentry_list_issues / sentry_get_issue \u2014 view production errors (when connected)");
+  }
+  if (options.hasCodegenTools) {
+    toolLines.push("- build_feature \u2014 generate a complete feature with tests using the platform codegen service. Use for multi-file features or new modules. Files are written to workspace; run tests afterwards.");
+  }
+  const t = (key) => options.templates?.[key] ?? DEFAULT_PROMPTS[key].body;
+  const wrap = (body) => `
+${body}
+`;
+  return renderPrompt(t("agent.system.core"), {
+    where,
+    tool_lines: toolLines.join("\n"),
+    orient_line: options.projectCard ? t("agent.fragment.orient_card") : t("agent.fragment.orient_default"),
+    finish_line: options.hasGitHubTools ? t("agent.fragment.finish_github") : t("agent.fragment.finish_commit"),
+    codegen_section: options.hasCodegenTools ? wrap(t("agent.fragment.codegen")) : "",
+    commit_section: options.commitGuidance ? wrap(t("agent.fragment.commit")) : "",
+    working_dir: workingDir,
+    project_card_section: options.projectCard ? wrap(options.projectCard) : "",
+    resume_section: options.resumeSummary ? wrap(renderPrompt(t("agent.fragment.resume"), { summary: options.resumeSummary })) : ""
+  });
 }
 var init_prompt = __esm({
   "../agent/src/prompt.ts"() {
     "use strict";
+    init_prompts();
   }
 });
 
@@ -4096,9 +4340,9 @@ function createFileTools(store) {
   const handlers = {
     read_file: async (input) => {
       const path12 = input.path;
-      const cached2 = readCache.get(path12);
-      if (cached2 !== void 0) {
-        return { output: cached2 };
+      const cached3 = readCache.get(path12);
+      if (cached3 !== void 0) {
+        return { output: cached3 };
       }
       const content = await store.readFile(path12);
       if (content === null) {
@@ -4158,12 +4402,12 @@ Include more surrounding context to make old_string unique.`,
     },
     list_directory: async (input) => {
       const path12 = input.path;
-      const cached2 = listCache.get(path12);
-      if (cached2 !== void 0) {
-        if (cached2.length === 0) {
+      const cached3 = listCache.get(path12);
+      if (cached3 !== void 0) {
+        if (cached3.length === 0) {
           return { output: `Empty or not found: ${path12}` };
         }
-        return { output: cached2.join("\n") };
+        return { output: cached3.join("\n") };
       }
       const entries = await store.listDirectory(path12);
       listCache.set(path12, entries);
@@ -5877,10 +6121,10 @@ async function summarizeConversation(messages, config) {
     return { decisions: [], workItems: [], summaryText: "", inputTokens: 0, outputTokens: 0 };
   }
   const transcript = buildTranscriptForSummarization(messages, MAX_TRANSCRIPT_CHARS);
-  const systemPrompt = 'You are extracting structured information from a coding-agent conversation transcript. Identify (a) concrete DECISIONS made during the conversation (architectural choices, approach selections, explicit tradeoffs accepted) and (b) WORK ITEMS \u2014 discrete pieces of work mentioned as done, in-progress, or still needed, each classified as "open" or "done" based on the transcript. Respond with ONLY a JSON object matching exactly this shape, no prose before or after, no markdown code fences: {"decisions": [{"description": string}], "workItems": [{"description": string, "status": "open"|"done"}]}';
+  const systemPrompt = config.templates?.["agent.summarizer.system"] ?? DEFAULT_PROMPTS["agent.summarizer.system"].body;
   const userContent = `${transcript}
 
-Respond with ONLY the JSON object described above \u2014 no prose, no markdown code fences.`;
+${config.templates?.["agent.summarizer.user_suffix"] ?? DEFAULT_PROMPTS["agent.summarizer.user_suffix"].body}`;
   const response = await fetch(`${config.apiUrl}/v1/messages`, {
     method: "POST",
     headers: {
@@ -5974,6 +6218,7 @@ var DEFAULT_SUMMARIZER_MODEL, MAX_TRANSCRIPT_CHARS, MAX_TOKENS2;
 var init_summarizer = __esm({
   "../agent/src/summarizer.ts"() {
     "use strict";
+    init_prompts();
     DEFAULT_SUMMARIZER_MODEL = "claude-haiku-4-5";
     MAX_TRANSCRIPT_CHARS = 4e4;
     MAX_TOKENS2 = 4096;
@@ -6650,17 +6895,17 @@ var init_memory_tool = __esm({
 // ../agent/src/import/profile-loader.ts
 async function loadProfile(opts) {
   const { client, cache: cache4, projectKeys } = opts;
-  let cached2 = null;
+  let cached3 = null;
   let cacheError;
   try {
-    cached2 = await cache4.read();
+    cached3 = await cache4.read();
   } catch (err) {
     cacheError = `profile cache unreadable: ${err instanceof Error ? err.message : String(err)}`;
   }
-  const sameProject = cached2 !== null && cached2.projectKey !== null && projectKeys.includes(cached2.projectKey);
+  const sameProject = cached3 !== null && cached3.projectKey !== null && projectKeys.includes(cached3.projectKey);
   try {
-    const index = await client.index(sameProject ? cached2.version : void 0);
-    if (index === null && sameProject) return { profile: cached2, source: "live" };
+    const index = await client.index(sameProject ? cached3.version : void 0);
+    if (index === null && sameProject) return { profile: cached3, source: "live" };
     if (index === null) throw new Error("profile API answered 304 with no usable cached copy");
     const has2 = (kind, name) => index.assets.some((a) => a.kind === kind && a.name === name);
     const chosen = projectKeys.find((k2) => has2("memory", `${k2}.index`)) ?? null;
@@ -6682,8 +6927,8 @@ async function loadProfile(opts) {
     return { profile, source: "live", ...cacheError ? { error: cacheError } : {} };
   } catch (err) {
     const error = `${err instanceof Error ? err.message : String(err)}${cacheError ? `; ${cacheError}` : ""}`;
-    if (!cached2) return { profile: null, source: "none", error };
-    return { profile: sameProject ? cached2 : { ...cached2, memoryIndex: null, projectKey: null }, source: "cache", error };
+    if (!cached3) return { profile: null, source: "none", error };
+    return { profile: sameProject ? cached3 : { ...cached3, memoryIndex: null, projectKey: null }, source: "cache", error };
   }
 }
 var init_profile_loader = __esm({
@@ -7007,6 +7252,28 @@ var init_trust = __esm({
   }
 });
 
+// ../agent/src/import/source-changes.ts
+function fingerprintSources(files, hash) {
+  const fingerprint = {};
+  for (const [path12, content] of Object.entries(files)) fingerprint[path12] = hash(content);
+  return fingerprint;
+}
+function diffSources(before, after) {
+  const has2 = (o, k2) => Object.hasOwn(o, k2);
+  const added = Object.keys(after).filter((k2) => !has2(before, k2)).sort();
+  const removed = Object.keys(before).filter((k2) => !has2(after, k2)).sort();
+  const modified = Object.keys(after).filter((k2) => has2(before, k2) && before[k2] !== after[k2]).sort();
+  return { added, modified, removed, changed: added.length + modified.length + removed.length > 0 };
+}
+function formatSourceChanges(c) {
+  return [...c.added.map((p) => `added: ${p}`), ...c.modified.map((p) => `modified: ${p}`), ...c.removed.map((p) => `removed: ${p}`)];
+}
+var init_source_changes = __esm({
+  "../agent/src/import/source-changes.ts"() {
+    "use strict";
+  }
+});
+
 // ../agent/src/import/imports-config.ts
 function allOffConfig() {
   return {
@@ -7741,6 +8008,7 @@ __export(src_exports, {
   createSkillTool: () => createSkillTool,
   createTodoTool: () => createTodoTool,
   defaultModeFor: () => defaultModeFor,
+  diffSources: () => diffSources,
   estimateTokens: () => estimateTokens,
   estimateTotalTokens: () => estimateTotalTokens,
   expandCommand: () => expandCommand,
@@ -7748,8 +8016,10 @@ __export(src_exports, {
   expandServerEnv: () => expandServerEnv,
   extractRuleLines: () => extractRuleLines,
   findUnsupported: () => findUnsupported,
+  fingerprintSources: () => fingerprintSources,
   flattenMessageText: () => flattenMessageText,
   formatSkillBody: () => formatSkillBody,
+  formatSourceChanges: () => formatSourceChanges,
   formatToolResult: () => formatToolResult,
   guardHost: () => guardHost,
   isReadOnlyCommand: () => isReadOnlyCommand,
@@ -7815,6 +8085,7 @@ var init_src = __esm({
     init_adapt_plan();
     init_instructions_tool();
     init_trust();
+    init_source_changes();
     init_imports_config();
     init_permission_rules();
     init_command_args();
@@ -9386,7 +9657,7 @@ var require_signal_exit = __commonJS({
         }
         assert.equal(typeof cb, "function", "a callback must be provided for exit handler");
         if (loaded === false) {
-          load();
+          load2();
         }
         var ev = "exit";
         if (opts && opts.alwaysLast) {
@@ -9446,7 +9717,7 @@ var require_signal_exit = __commonJS({
         return signals;
       };
       loaded = false;
-      load = function load2() {
+      load2 = function load3() {
         if (loaded || !processOk(global.process)) {
           return;
         }
@@ -9463,7 +9734,7 @@ var require_signal_exit = __commonJS({
         process13.emit = processEmit;
         process13.reallyExit = processReallyExit;
       };
-      module.exports.load = load;
+      module.exports.load = load2;
       originalProcessReallyExit = process13.reallyExit;
       processReallyExit = function processReallyExit2(code) {
         if (!processOk(global.process)) {
@@ -9499,7 +9770,7 @@ var require_signal_exit = __commonJS({
     var emit;
     var sigListeners;
     var loaded;
-    var load;
+    var load2;
     var originalProcessReallyExit;
     var processReallyExit;
     var originalProcessEmit;
@@ -44082,7 +44353,7 @@ var require_core = __commonJS({
       return match && match.index === 0;
     }
     var BACKREF_RE = /\[(?:[^\\\]]|\\.)*\]|\(\??|\\([1-9][0-9]*)|\\./;
-    function join13(regexps, separator = "|") {
+    function join14(regexps, separator = "|") {
       let numCaptures = 0;
       return regexps.map((regex2) => {
         numCaptures += 1;
@@ -44386,7 +44657,7 @@ var require_core = __commonJS({
             this.exec = () => null;
           }
           const terminators = this.regexes.map((el) => el[1]);
-          this.matcherRe = langRe(join13(terminators), true);
+          this.matcherRe = langRe(join14(terminators), true);
           this.lastIndex = 0;
         }
         /** @param {string} s */
@@ -48163,7 +48434,7 @@ var require_bash = __commonJS({
       return joined;
     }
     function bash(hljs) {
-      const VAR = {};
+      const VAR2 = {};
       const BRACED_VAR = {
         begin: /\$\{/,
         end: /\}/,
@@ -48171,12 +48442,12 @@ var require_bash = __commonJS({
           "self",
           {
             begin: /:-/,
-            contains: [VAR]
+            contains: [VAR2]
           }
           // default values
         ]
       };
-      Object.assign(VAR, {
+      Object.assign(VAR2, {
         className: "variable",
         variants: [
           { begin: concat(
@@ -48212,7 +48483,7 @@ var require_bash = __commonJS({
         end: /"/,
         contains: [
           hljs.BACKSLASH_ESCAPE,
-          VAR,
+          VAR2,
           SUBST
         ]
       };
@@ -48232,7 +48503,7 @@ var require_bash = __commonJS({
         contains: [
           { begin: /\d+#[0-9a-f]+/, className: "number" },
           hljs.NUMBER_MODE,
-          VAR
+          VAR2
         ]
       };
       const SH_LIKE_SHELLS = [
@@ -48282,7 +48553,7 @@ var require_bash = __commonJS({
           QUOTE_STRING,
           ESCAPED_QUOTE,
           APOS_STRING,
-          VAR
+          VAR2
         ]
       };
     }
@@ -67905,7 +68176,7 @@ var require_perl = __commonJS({
         end: /\}/
         // contains defined later
       };
-      const VAR = {
+      const VAR2 = {
         variants: [
           {
             begin: /\$\d/
@@ -67927,7 +68198,7 @@ var require_perl = __commonJS({
       const STRING_CONTAINS = [
         hljs.BACKSLASH_ESCAPE,
         SUBST,
-        VAR
+        VAR2
       ];
       const REGEX_DELIMS = [
         /!/,
@@ -67962,7 +68233,7 @@ var require_perl = __commonJS({
         );
       };
       const PERL_DEFAULT_CONTAINS = [
-        VAR,
+        VAR2,
         hljs.HASH_COMMENT_MODE,
         hljs.COMMENT(
           /^=\w/,
@@ -68429,7 +68700,7 @@ var require_n1ql = __commonJS({
 var require_nginx = __commonJS({
   "../../node_modules/highlight.js/lib/languages/nginx.js"(exports, module) {
     function nginx(hljs) {
-      const VAR = {
+      const VAR2 = {
         className: "variable",
         variants: [
           {
@@ -68458,7 +68729,7 @@ var require_nginx = __commonJS({
             className: "string",
             contains: [
               hljs.BACKSLASH_ESCAPE,
-              VAR
+              VAR2
             ],
             variants: [
               {
@@ -68477,13 +68748,13 @@ var require_nginx = __commonJS({
             end: "\\s",
             endsWithParent: true,
             excludeEnd: true,
-            contains: [VAR]
+            contains: [VAR2]
           },
           {
             className: "regexp",
             contains: [
               hljs.BACKSLASH_ESCAPE,
-              VAR
+              VAR2
             ],
             variants: [
               {
@@ -68518,7 +68789,7 @@ var require_nginx = __commonJS({
             begin: "\\b\\d+[kKmMgGdshdwy]*\\b",
             relevance: 0
           },
-          VAR
+          VAR2
         ]
       };
       return {
@@ -69984,7 +70255,7 @@ var require_powershell = __commonJS({
         begin: "`[\\s\\S]",
         relevance: 0
       };
-      const VAR = {
+      const VAR2 = {
         className: "variable",
         variants: [
           {
@@ -70017,7 +70288,7 @@ var require_powershell = __commonJS({
         ],
         contains: [
           BACKTICK_ESCAPE,
-          VAR,
+          VAR2,
           {
             className: "variable",
             begin: /\$[A-z]/,
@@ -70108,7 +70379,7 @@ var require_powershell = __commonJS({
             end: /\)/,
             className: "params",
             relevance: 0,
-            contains: [VAR]
+            contains: [VAR2]
           }
           // CMDLETS
         ]
@@ -70179,7 +70450,7 @@ var require_powershell = __commonJS({
         APOS_STRING,
         // PS_NEW_OBJECT_TYPE,
         CMDLETS,
-        VAR,
+        VAR2,
         LITERAL,
         HASH_SIGNS
       ];
@@ -70301,7 +70572,7 @@ var require_prolog = __commonJS({
         begin: /[a-z][A-Za-z0-9_]*/,
         relevance: 0
       };
-      const VAR = {
+      const VAR2 = {
         className: "symbol",
         variants: [
           {
@@ -70350,7 +70621,7 @@ var require_prolog = __commonJS({
       };
       const inner = [
         ATOM,
-        VAR,
+        VAR2,
         PARENTED,
         PRED_OP,
         LIST,
@@ -71895,7 +72166,7 @@ var require_routeros = __commonJS({
       const COMMON_COMMANDS = "add remove enable disable set get print export edit find run debug error info warning";
       const LITERALS = "true false yes no nothing nil null";
       const OBJECTS = "traffic-flow traffic-generator firewall scheduler aaa accounting address-list address align area bandwidth-server bfd bgp bridge client clock community config connection console customer default dhcp-client dhcp-server discovery dns e-mail ethernet filter firmware gps graphing group hardware health hotspot identity igmp-proxy incoming instance interface ip ipsec ipv6 irq l2tp-server lcd ldp logging mac-server mac-winbox mangle manual mirror mme mpls nat nd neighbor network note ntp ospf ospf-v3 ovpn-server page peer pim ping policy pool port ppp pppoe-client pptp-server prefix profile proposal proxy queue radius resource rip ripng route routing screen script security-profiles server service service-port settings shares smb sms sniffer snmp snooper socks sstp-server system tool tracking type upgrade upnp user-manager users user vlan secret vrrp watchdog web-access wireless pptp pppoe lan wan layer7-protocol lease simple raw";
-      const VAR = {
+      const VAR2 = {
         className: "variable",
         variants: [
           {
@@ -71912,7 +72183,7 @@ var require_routeros = __commonJS({
         end: /"/,
         contains: [
           hljs.BACKSLASH_ESCAPE,
-          VAR,
+          VAR2,
           {
             className: "variable",
             begin: /\$\(/,
@@ -71962,7 +72233,7 @@ var require_routeros = __commonJS({
           hljs.COMMENT("^#", "$"),
           QUOTE_STRING,
           APOS_STRING,
-          VAR,
+          VAR2,
           // attribute=value
           {
             // > is to avoid matches with => in other grammars
@@ -71981,7 +72252,7 @@ var require_routeros = __commonJS({
                 contains: [
                   QUOTE_STRING,
                   APOS_STRING,
-                  VAR,
+                  VAR2,
                   {
                     className: "literal",
                     begin: "\\b(" + LITERALS.split(" ").join("|") + ")\\b"
@@ -78263,7 +78534,7 @@ var require_xquery = __commonJS({
         begin: /\bxquery version "[13]\.[01]"\s?(?:encoding ".+")?/,
         end: /;/
       };
-      const VAR = {
+      const VAR2 = {
         className: "variable",
         begin: /[$][\w\-:]+/
       };
@@ -78332,7 +78603,7 @@ var require_xquery = __commonJS({
         ]
       };
       const CONTAINS = [
-        VAR,
+        VAR2,
         BUILT_IN,
         STRING,
         NUMBER,
@@ -103199,6 +103470,7 @@ var init_slash_commands = __esm({
       { name: "turns", description: "Browse earlier turns and open their steps (shortcut: ctrl+o)" },
       { name: "commands", description: "List the slash commands imported from Claude Code" },
       { name: "skills", description: "List imported skills; /skills show <name> [file], /skills delete <name>" },
+      { name: "import", description: "Re-check imported Claude Code sources: /import reload shows changes; /import reload trust applies them" },
       { name: "tools", description: "List the tools available to the agent" },
       { name: "exit", description: "Quit the REPL (alias: /quit)" },
       { name: "quit", description: "Quit the REPL" }
@@ -103855,6 +104127,65 @@ var init_project_card_runtime = __esm({
   }
 });
 
+// src/prompt-runtime.ts
+import { join as join8 } from "node:path";
+async function load(deps) {
+  if (deps.env.SPACECODE_PROMPTS === "off") return { templates: {}, statusLine: "prompts: built-in defaults (SPACECODE_PROMPTS=off)" };
+  const dir = deps.env.SPACECODE_CONFIG_DIR?.trim() || join8(deps.homedir(), ".spacecode");
+  const file = join8(dir, "prompts-cache.json");
+  const fromDisk = async (why) => {
+    try {
+      const raw = JSON.parse(await deps.readFile(file));
+      const templates = raw.templates ?? {};
+      return { templates, statusLine: `prompts: ${Object.keys(templates).length} tuned (STALE: served from cache; ${why})` };
+    } catch {
+      return { templates: {}, statusLine: `prompts: built-in defaults (${why})` };
+    }
+  };
+  let apiKey;
+  try {
+    apiKey = await resolveApiKey({ env: deps.env, readFile: deps.readFile, homedir: deps.homedir });
+  } catch (err) {
+    return fromDisk(err instanceof Error ? err.message : String(err));
+  }
+  if (!apiKey) return fromDisk("not signed in");
+  try {
+    const res = await deps.fetch(`${backendUrl(deps.env)}/api/prompts`, {
+      headers: { Authorization: `Bearer ${apiKey}`, "x-api-key": apiKey },
+      signal: AbortSignal.timeout(3e3)
+    });
+    if (!res.ok) return fromDisk(`prompt API returned ${res.status}`);
+    const { prompts } = await res.json();
+    const templates = Object.fromEntries(prompts.filter((p) => p.source === "db").map((p) => [p.key, p.body]));
+    try {
+      await deps.mkdir(dir);
+      await deps.writeFile(file, JSON.stringify({ fetchedAt: new Date((deps.now ?? Date.now)()).toISOString(), templates }));
+    } catch (err) {
+      console.error("[prompts] could not write the prompt cache", err instanceof Error ? err.message : String(err));
+    }
+    const n = Object.keys(templates).length;
+    return { templates, statusLine: n ? `prompts: ${n} tuned override(s): ${Object.keys(templates).join(", ")}` : "prompts: built-in defaults (none tuned)" };
+  } catch (err) {
+    return fromDisk(`fetch failed: ${err instanceof Error ? err.message : String(err)}`);
+  }
+}
+function loadPromptTemplates(deps) {
+  const now = (deps.now ?? Date.now)();
+  if (cached2 && now - cached2.at < TTL_MS2) return cached2.pending;
+  const pending = load(deps);
+  cached2 = { at: now, pending };
+  return pending;
+}
+var TTL_MS2, cached2;
+var init_prompt_runtime = __esm({
+  "src/prompt-runtime.ts"() {
+    "use strict";
+    init_api_key();
+    init_profile_runtime();
+    TTL_MS2 = 10 * 6e4;
+  }
+});
+
 // src/shell-turn.ts
 function shellCommandOf(prompt) {
   return prompt.startsWith("!") ? prompt.slice(1).trim() : null;
@@ -104279,7 +104610,7 @@ var init_recording_chunks = __esm({
 // src/recording/recorder.ts
 import { createHash as createHash4 } from "node:crypto";
 import { mkdir as mkdir4, readFile as readFile6, rename as rename4, rm as rm2, writeFile as writeFile4, readdir as readdir5, stat as stat3 } from "node:fs/promises";
-import { join as join8 } from "node:path";
+import { join as join9 } from "node:path";
 function projectHash(root) {
   return createHash4("sha256").update(root).digest("hex");
 }
@@ -104290,24 +104621,24 @@ function createRecorder(deps) {
   let inflight = null;
   let retryAttempt = 0;
   let timerArmed = false;
-  const stateFile = (sessionId) => join8(deps.dir, `${sessionId}.json`);
+  const stateFile = (sessionId) => join9(deps.dir, `${sessionId}.json`);
   async function save(sessionId, st) {
     await mkdir4(deps.dir, { recursive: true, mode: 448 });
     const tmp = `${stateFile(sessionId)}.${deps.randomId()}.tmp`;
     await writeFile4(tmp, JSON.stringify(st), { mode: 384 });
     await rename4(tmp, stateFile(sessionId));
   }
-  async function load(sessionId) {
-    const cached2 = states.get(sessionId);
-    if (cached2) return cached2;
+  async function load2(sessionId) {
+    const cached3 = states.get(sessionId);
+    if (cached3) return cached3;
     let st;
     try {
       st = JSON.parse(await readFile6(stateFile(sessionId), "utf8"));
     } catch (e) {
       if (e.code !== "ENOENT") {
-        const bad = join8(deps.dir, "bad");
+        const bad = join9(deps.dir, "bad");
         await mkdir4(bad, { recursive: true, mode: 448 });
-        await rename4(stateFile(sessionId), join8(bad, `${sessionId}.${deps.now()}.json`)).catch((err) => deps.log(`recording: could not quarantine ${sessionId}: ${String(err)}`));
+        await rename4(stateFile(sessionId), join9(bad, `${sessionId}.${deps.now()}.json`)).catch((err) => deps.log(`recording: could not quarantine ${sessionId}: ${String(err)}`));
         lastError = `recording state for ${sessionId} was unreadable and was quarantined`;
         deps.log(`recording: ${lastError}`);
       }
@@ -104324,7 +104655,7 @@ function createRecorder(deps) {
   async function record(sessionId, messages, meta) {
     try {
       if (off2) return;
-      const st = await load(sessionId);
+      const st = await load2(sessionId);
       if (st.stopped) return;
       if (st.hashes.length === 0 && st.nextSeq === 1 && meta.parentRecordingId) st.parentRecordingId = meta.parentRecordingId;
       st.meta = meta;
@@ -104477,7 +104808,7 @@ function createRecorder(deps) {
     for (const n of names) {
       if (!n.endsWith(".json")) continue;
       const id = n.slice(0, -5);
-      const st = await load(id);
+      const st = await load2(id);
       if (st.queue.length === 0) states.delete(id);
     }
     if ([...states.values()].some((s) => s.queue.length > 0)) void flush();
@@ -104498,7 +104829,7 @@ var init_recorder = __esm({
 
 // src/recording/recording-runtime.ts
 import { mkdir as mkdir5, readFile as readFile7, writeFile as writeFile5, stat as stat4 } from "node:fs/promises";
-import { join as join9, sep as sep2 } from "node:path";
+import { join as join10, sep as sep2 } from "node:path";
 function matchesExclude(pattern, root) {
   const re3 = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*\*/g, "\0").replace(/\*/g, `[^${sep2 === "\\" ? "\\\\" : "/"}]*`).replace(/\u0000/g, ".*");
   return new RegExp(`^${re3}(?:[/\\\\].*)?$`).test(root);
@@ -104513,8 +104844,8 @@ async function exists(path12) {
   }
 }
 function createRecordingRuntime(deps) {
-  const dir = join9(deps.configDir, "recordings");
-  const noticeFile = join9(dir, ".notice");
+  const dir = join10(deps.configDir, "recordings");
+  const noticeFile = join10(dir, ".notice");
   let recorder = null;
   let standingOff;
   let sessionOff = false;
@@ -104522,7 +104853,7 @@ function createRecordingRuntime(deps) {
     if (deps.env.SPACECODE_RECORD?.trim().toLowerCase() === "off") return "SPACECODE_RECORD=off";
     let cfg = {};
     try {
-      cfg = JSON.parse(await readFile7(join9(deps.configDir, "config.json"), "utf8"));
+      cfg = JSON.parse(await readFile7(join10(deps.configDir, "config.json"), "utf8"));
     } catch (e) {
       if (e.code !== "ENOENT") return `~/.spacecode/config.json is unreadable (${e instanceof Error ? e.message : String(e)}); fix it to record`;
     }
@@ -104530,7 +104861,7 @@ function createRecordingRuntime(deps) {
     const excludes = Array.isArray(cfg.recording?.exclude) ? cfg.recording.exclude.filter((x2) => typeof x2 === "string") : [];
     const hit = excludes.find((p) => matchesExclude(p, deps.projectRoot));
     if (hit) return `this folder matches recording.exclude (${hit})`;
-    if (await exists(join9(deps.projectRoot, ".spacecode", "norecord"))) return "this repo has .spacecode/norecord";
+    if (await exists(join10(deps.projectRoot, ".spacecode", "norecord"))) return "this repo has .spacecode/norecord";
     return null;
   }
   async function noticeShown() {
@@ -104672,7 +105003,7 @@ var init_skills_command = __esm({
 
 // src/permission-rules-loader.ts
 import { readFile as readFile8 } from "node:fs/promises";
-import { join as join10 } from "node:path";
+import { join as join11 } from "node:path";
 async function readOrNull2(path12) {
   try {
     return await readFile8(path12, "utf8");
@@ -104683,7 +105014,7 @@ async function readOrNull2(path12) {
 }
 async function loadPermissionRules(deps) {
   const none = (line) => ({ rules: void 0, defaultMode: void 0, statusLines: [line] });
-  const configPath = join10(deps.configDir, "imports.json");
+  const configPath = join11(deps.configDir, "imports.json");
   try {
     const loaded = parseImportsConfig(await readOrNull2(configPath), configPath);
     if (loaded.error) return none("permission rules: off (imports.json unreadable)");
@@ -104692,13 +105023,13 @@ async function loadPermissionRules(deps) {
     return none(`permission rules: off (imports.json not read: ${err instanceof Error ? err.message : String(err)})`);
   }
   const lines2 = [];
-  const files = [{ scope: "user", path: join10(deps.homeDir, ".claude", "settings.json") }];
+  const files = [{ scope: "user", path: join11(deps.homeDir, ".claude", "settings.json") }];
   try {
     const sources2 = await readRepoSources(deps.cwd);
     if (sources2[".claude/settings.json"] !== void 0 || sources2[".claude/settings.local.json"] !== void 0) {
       const status = await createNodeTrustStore(deps.configDir).repoStatus(deps.cwd, sources2);
       if (status === "trusted" || status === "session") {
-        files.push({ scope: "repo", path: join10(deps.cwd, ".claude", "settings.json") }, { scope: "local", path: join10(deps.cwd, ".claude", "settings.local.json") });
+        files.push({ scope: "repo", path: join11(deps.cwd, ".claude", "settings.json") }, { scope: "local", path: join11(deps.cwd, ".claude", "settings.local.json") });
       } else lines2.push(`permission rules: repo settings NOT loaded (${status === "never" ? "marked never trust" : "untrusted repo"})`);
     }
   } catch (err) {
@@ -104739,8 +105070,43 @@ var init_permission_rules_loader = __esm({
   }
 });
 
+// src/import-reload.ts
+async function checkRepoSources(deps, loaded) {
+  const files = await readRepoSources(deps.cwd);
+  const current = fingerprintSources(files, sha2562);
+  const status = Object.keys(files).length === 0 ? "untrusted" : await createNodeTrustStore(deps.configDir).repoStatus(deps.cwd, files);
+  return { current, changes: diffSources(loaded, current), trusted: status === "trusted" || status === "session" };
+}
+async function describeReload(deps, loaded) {
+  const check = await checkRepoSources(deps, loaded);
+  if (!check.changes.changed) return ["No change in the repo import sources since they were loaded."];
+  const files = await readRepoSources(deps.cwd);
+  return [
+    "Repo import sources changed since they were loaded:",
+    ...formatSourceChanges(check.changes).map((l) => `  ${l}`),
+    "",
+    "Trusting the new state would load:",
+    ...describeRepoSources(files).length ? describeRepoSources(files) : ["  (nothing)"],
+    "",
+    "Run /import reload trust to trust it and apply the rules and commands. MCP servers and skills apply on the next start."
+  ];
+}
+async function trustCurrentSources(deps) {
+  const files = await readRepoSources(deps.cwd);
+  await createNodeTrustStore(deps.configDir).setRepo(deps.cwd, files, "trusted");
+  return fingerprintSources(files, sha2562);
+}
+var init_import_reload = __esm({
+  "src/import-reload.ts"() {
+    "use strict";
+    init_src();
+    init_import_gate();
+    init_repo_trust_prompt();
+  }
+});
+
 // src/command-loader.ts
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 async function userCommands(deps, lines2) {
   try {
     const apiKey = await resolveApiKey({ env: deps.env, readFile: deps.readFile, homedir: deps.homedir });
@@ -104795,7 +105161,7 @@ async function repoCommands(deps, lines2) {
   }
 }
 async function loadCommands(deps) {
-  const configPath = join11(deps.configDir, "imports.json");
+  const configPath = join12(deps.configDir, "imports.json");
   try {
     const loaded = parseImportsConfig(await deps.readFile(configPath).catch((err) => {
       if (err.code === "ENOENT") return null;
@@ -104830,7 +105196,7 @@ var init_command_loader = __esm({
 // src/useReplController.ts
 import { readFile as readFile9, writeFile as writeFile6, mkdir as mkdir6 } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
-import { join as join12 } from "node:path";
+import { join as join13 } from "node:path";
 import { execFile as execFile4 } from "node:child_process";
 function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mentionsOpt, sessions, resumeLatest: resumeLatest2, onViewTurns, onViewResume, isEscOwned }) {
   const { exit } = use_app_default();
@@ -104852,8 +105218,13 @@ function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mention
     return () => clearInterval(timer);
   }, [turnStartedAt]);
   const projectRoot = (0, import_react30.useMemo)(() => process.cwd(), []);
+  const promptTemplates = (0, import_react30.useCallback)(
+    () => loadPromptTemplates({ env: process.env, readFile: (p) => readFile9(p, "utf-8"), writeFile: (p, d) => writeFile6(p, d, "utf-8"), mkdir: (p) => mkdir6(p, { recursive: true }).then(() => void 0), homedir: homedir2, fetch }),
+    []
+  );
   (0, import_react30.useEffect)(() => {
     void loadProjectCard(projectRoot);
+    void promptTemplates();
   }, [projectRoot]);
   const sessionIdRef = (0, import_react30.useRef)(null);
   const sessionCreatedAtRef = (0, import_react30.useRef)(null);
@@ -104864,7 +105235,7 @@ function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mention
   const recordingRef = (0, import_react30.useRef)(null);
   const recording = () => recordingRef.current ??= createRecordingRuntime({
     env: process.env,
-    configDir: process.env.SPACECODE_CONFIG_DIR?.trim() || join12(homedir2(), ".spacecode"),
+    configDir: process.env.SPACECODE_CONFIG_DIR?.trim() || join13(homedir2(), ".spacecode"),
     projectRoot,
     fetch,
     baseUrl: backendUrl(process.env),
@@ -104887,11 +105258,12 @@ function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mention
   const pendingRef = (0, import_react30.useRef)(null);
   const toolsetRef = (0, import_react30.useRef)(null);
   const rulesRef = (0, import_react30.useRef)(void 0);
+  const loadedSourcesRef = (0, import_react30.useRef)(null);
   const [commandsLoaded, setCommandsLoaded] = (0, import_react30.useState)({ commands: [], statusLines: [] });
   (0, import_react30.useEffect)(() => {
     let live2 = true;
     loadCommands({
-      configDir: process.env.SPACECODE_CONFIG_DIR?.trim() || join12(homedir2(), ".spacecode"),
+      configDir: process.env.SPACECODE_CONFIG_DIR?.trim() || join13(homedir2(), ".spacecode"),
       cwd: process.cwd(),
       env: process.env,
       readFile: (p) => readFile9(p, "utf-8"),
@@ -105111,6 +105483,29 @@ function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mention
         case "context":
           notice(formatContextReport({ contextTokens: estimateTotalTokens("", history), maxContextTokens: DEFAULT_MAX_CONTEXT_TOKENS }));
           return;
+        case "import": {
+          const configDir = process.env.SPACECODE_CONFIG_DIR?.trim() || join13(homedir2(), ".spacecode");
+          const deps = { configDir, cwd: process.cwd() };
+          const [sub, ...rest] = slash.args.split(/\s+/).filter(Boolean);
+          if (sub !== "reload" || rest.length > 1 || rest[0] !== void 0 && rest[0] !== "trust") {
+            notice("Usage: /import reload (show changes to the repo import sources) or /import reload trust (trust the new state and apply it).");
+            return;
+          }
+          try {
+            const baseline = loadedSourcesRef.current ?? fingerprintSources(await readRepoSources(process.cwd()), sha2562);
+            if (rest[0] === "trust") {
+              loadedSourcesRef.current = await trustCurrentSources(deps);
+              const loaded = await loadPermissionRules({ configDir, homeDir: homedir2(), cwd: process.cwd() });
+              rulesRef.current = loaded.rules;
+              const cmds = await loadCommands({ configDir, cwd: process.cwd(), env: process.env, readFile: (p) => readFile9(p, "utf-8"), homedir: homedir2, fetch, builtins: SLASH_COMMANDS.map((c) => c.name) });
+              setCommandsLoaded(cmds);
+              notice(["Trusted the repo import sources as they are now.", ...loaded.statusLines, ...cmds.statusLines, "MCP servers and skills apply on the next start."].join("\n"));
+            } else notice((await describeReload(deps, baseline)).join("\n"));
+          } catch (err) {
+            notice(`/import reload failed (${err instanceof Error ? err.message : String(err)}); nothing was changed.`);
+          }
+          return;
+        }
         case "record":
           notice(await recording().command(slash.args));
           return;
@@ -105188,7 +105583,7 @@ function useReplController({ repoName: repoName2, yolo: yolo2, mentions: mention
               return;
             }
             notice("Compacting conversation\u2026");
-            const summary = await summarizeConversation(history, { apiUrl: apiUrl(), apiKey: apiKey2 });
+            const summary = await summarizeConversation(history, { apiUrl: apiUrl(), apiKey: apiKey2, templates: (await promptTemplates()).templates });
             const compacted = buildCompactedHistory(summary.summaryText);
             const before = estimateTotalTokens("", history);
             const after = estimateTotalTokens("", compacted);
@@ -105296,6 +105691,22 @@ ${list2.map((c) => `  /${c.name}  (${c.scope})${c.description ? `  ${c.descripti
     let failed = false;
     let keepForRetry = false;
     try {
+      if (loadedSourcesRef.current) {
+        const configDir = process.env.SPACECODE_CONFIG_DIR?.trim() || join13(homedir2(), ".spacecode");
+        try {
+          const check = await checkRepoSources({ configDir, cwd: process.cwd() }, loadedSourcesRef.current);
+          if (check.changes.changed) {
+            const loaded = await loadPermissionRules({ configDir, homeDir: homedir2(), cwd: process.cwd() });
+            rulesRef.current = loaded.rules;
+            loadedSourcesRef.current = check.current;
+            const lead = check.trusted ? "Repo import sources changed since they were loaded; the new state is already trusted, so its permission rules now apply:" : "Repo import sources changed since they were loaded; repo permission rules are dropped until you trust the new state:";
+            notice([lead, ...formatSourceChanges(check.changes).map((l) => `  ${l}`), ...check.trusted ? [] : ["Run /import reload to review, /import reload trust to apply."]].join("\n"));
+          }
+        } catch (err) {
+          rulesRef.current = void 0;
+          notice(`Repo import source check failed (${err instanceof Error ? err.message : String(err)}); repo permission rules are dropped.`);
+        }
+      }
       profilePromiseRef.current ??= prepareProfile({
         env: process.env,
         readFile: (p) => readFile9(p, "utf-8"),
@@ -105308,17 +105719,19 @@ ${list2.map((c) => `  /${c.name}  (${c.scope})${c.description ? `  ${c.descripti
         cwd: process.cwd(),
         gitRoot: gitTopLevel,
         importGate: async () => {
-          const configDir = process.env.SPACECODE_CONFIG_DIR?.trim() || join12(homedir2(), ".spacecode");
+          const configDir = process.env.SPACECODE_CONFIG_DIR?.trim() || join13(homedir2(), ".spacecode");
+          const fingerprint = fingerprintSources(await readRepoSources(process.cwd()), sha2562);
           const gate = await importGateStatus({ configDir, cwd: process.cwd(), interactive: Boolean(process.stdin.isTTY) });
           const loaded = await loadPermissionRules({ configDir, homeDir: homedir2(), cwd: process.cwd() });
           rulesRef.current = loaded.rules;
+          loadedSourcesRef.current = fingerprint;
           if (loaded.defaultMode && !yolo2) permissions.set(loaded.defaultMode);
           return [...gate, ...loaded.statusLines];
         }
       });
       profileRef.current = await profilePromiseRef.current;
       if (mcpRef.current === null && (profileRef.current?.mcpDefs?.length ?? 0) > 0) {
-        const configDir = process.env.SPACECODE_CONFIG_DIR?.trim() || join12(homedir2(), ".spacecode");
+        const configDir = process.env.SPACECODE_CONFIG_DIR?.trim() || join13(homedir2(), ".spacecode");
         const trust = createNodeTrustStore(configDir);
         const manager = new McpManager({
           defs: profileRef.current.mcpDefs,
@@ -105328,7 +105741,7 @@ ${list2.map((c) => `  /${c.name}  (${c.scope})${c.description ? `  ${c.descripti
           ...rulesRef.current ? { rules: rulesRef.current } : {},
           permissions,
           confirm: askUser,
-          audit: new FileAuditLog(join12(homedir2(), ".spacecode", "audit.jsonl")),
+          audit: new FileAuditLog(join13(homedir2(), ".spacecode", "audit.jsonl")),
           clientVersion: process.env.SPACECODE_VERSION ?? "0"
         });
         mcpRef.current = manager;
@@ -105337,6 +105750,7 @@ ${list2.map((c) => `  /${c.name}  (${c.scope})${c.description ? `  ${c.descripti
       const toolset = createToolset();
       toolsetRef.current = toolset;
       const projectCard = await loadProjectCard(projectRoot);
+      const prompts = await promptTemplates();
       const config = {
         apiUrl: apiUrl(),
         apiKey,
@@ -105346,7 +105760,8 @@ ${list2.map((c) => `  /${c.name}  (${c.scope})${c.description ? `  ${c.descripti
           localCwd: projectRoot,
           commitGuidance: true,
           hasGitHubTools: toolset.hasGitHubTools,
-          ...projectCard.text ? { projectCard: projectCard.text } : {}
+          ...projectCard.text ? { projectCard: projectCard.text } : {},
+          templates: prompts.templates
         }) + (profileRef.current?.promptSection ?? ""),
         tools: toolset.tools,
         maxTurns: 100,
@@ -105458,6 +105873,7 @@ var init_useReplController = __esm({
     init_session_commands();
     init_local_toolset();
     init_project_card_runtime();
+    init_prompt_runtime();
     init_shell_turn();
     init_node_mentions();
     init_api_key();
@@ -105468,6 +105884,8 @@ var init_useReplController = __esm({
     init_mcp_manager();
     init_import_gate();
     init_permission_rules_loader();
+    init_import_reload();
+    init_src();
     init_command_loader();
     init_slash_commands();
     init_useEventAccumulator();