@bahulam/code 2.6.14 → 2.6.15

package/src/terminal/repl-render.mjs

@@ -279,6 +279,7 @@ export function renderToolResult(data, eventType = 'tool_result') {
   const tool = data.tool || data._tool || '';
   const durationMs = data?.duration_ms ?? (data?.duration_s != null ? data.duration_s * 1000 : null);
   recordReadActivity(tool, data.args || {});
+  recordWriteActivity(tool, data.args || {}, data);
 
   // Update the card buffer so /last and `d` can find it.
   if (callId) recordCard({ id: callId, tool, args: data.args, result: data, durationMs });
@@ -324,7 +325,10 @@ export function renderToolResult(data, eventType = 'tool_result') {
     const combined = `${runtime.pendingHead.head}  ${outcome}`;
     if (stripAnsi(combined).length <= cols) {
       process.stderr.write(`${combined}\n`);
-      if (diffPreview) process.stderr.write(`${diffPreview}\n`);
+      if (diffPreview) {
+        process.stderr.write(`${diffPreview}\n`);
+        rememberFileDiffPreview(data);
+      }
       runtime.lastRenderedBlock = 'tool';
       runtime.pendingHead = null;
       return;
@@ -332,7 +336,10 @@ export function renderToolResult(data, eventType = 'tool_result') {
     if (isInlineOutcomeTool(tool)) {
       const compactHead = compactHeadForOutcome(runtime.pendingHead.head, outcome, cols);
       process.stderr.write(`${compactHead}  ${outcome}\n`);
-      if (diffPreview) process.stderr.write(`${diffPreview}\n`);
+      if (diffPreview) {
+        process.stderr.write(`${diffPreview}\n`);
+        rememberFileDiffPreview(data);
+      }
       runtime.lastRenderedBlock = 'tool';
       runtime.pendingHead = null;
       return;
@@ -347,7 +354,10 @@ export function renderToolResult(data, eventType = 'tool_result') {
 
   // Two-line shape: gutter under the (already-printed or just-flushed) head.
   process.stderr.write(`${gutter}${outcome}\n`);
-  if (diffPreview) process.stderr.write(`${diffPreview}\n`);
+  if (diffPreview) {
+    process.stderr.write(`${diffPreview}\n`);
+    rememberFileDiffPreview(data);
+  }
   runtime.lastRenderedBlock = 'tool';
 
   // Lint warnings stay visible alongside writes.
@@ -356,6 +366,58 @@ export function renderToolResult(data, eventType = 'tool_result') {
   }
 }
 
+function fileDiffKey(data = {}) {
+  return fileDiffKeys(data)[0] || '';
+}
+
+function fileDiffKeys(data = {}) {
+  const keys = [];
+  const callId = data.call_id || data._callId || data.request_id || data.id;
+  if (callId) keys.push(`call:${callId}`);
+  const diff = Array.isArray(data.file_diffs) ? data.file_diffs[0]
+    : data.file_diff ? data.file_diff
+    : data.type === 'file_diff' ? data
+    : null;
+  const file = diff?.relative_path || diff?.path || data.relative_path || data.path || '';
+  if (file) {
+    const added = diff?.lines_added ?? data.lines_added ?? '';
+    const removed = diff?.lines_removed ?? data.lines_removed ?? '';
+    keys.push(`file:${file}:${added}:${removed}`);
+  }
+  return keys;
+}
+
+function rememberFileDiffPreview(data = {}) {
+  for (const key of fileDiffKeys(data)) {
+    runtime.renderedFileDiffPreviews.add(key);
+  }
+}
+
+export function renderFileDiffEvent(data = {}) {
+  const keys = fileDiffKeys(data);
+  if (keys.some(key => runtime.renderedFileDiffPreviews.has(key))) return false;
+
+  const indent = subAgentIndent();
+  const gutter = `${indent}${paint.text.dim('⎿')}  `;
+  const diffPreview = formatCompactFileDiff({
+    file_diff: data,
+    lines_added: data.lines_added,
+    lines_removed: data.lines_removed,
+  }, {
+    indent: gutter,
+    columns: process.stderr.columns || 120,
+    showFileHeader: true,
+  });
+  if (!diffPreview) return false;
+
+  renderBlockBoundary('tool', { compactSame: true });
+  process.stderr.write(`${diffPreview}\n`);
+  for (const key of keys) runtime.renderedFileDiffPreviews.add(key);
+  rememberChangedFile(data.relative_path || data.path);
+  runtime.lastRenderedBlock = 'tool';
+  return true;
+}
+
 function shellResultTool(tool) {
   return [
     'shell', 'run_tests', 'validate_build', 'lint_check',
@@ -415,6 +477,11 @@ export function rememberReadFile(filePath) {
   if (file && !session.filesRead.includes(file)) session.filesRead.push(file);
 }
 
+export function rememberChangedFile(filePath) {
+  const file = shortPath(String(filePath || '').trim());
+  if (file && !session.filesChanged.includes(file)) session.filesChanged.push(file);
+}
+
 export function recordReadActivity(tool, args = {}) {
   const normalized = String(tool || '').toLowerCase();
   if (normalized === 'read_file' || normalized === 'read') {
@@ -429,6 +496,26 @@ export function recordReadActivity(tool, args = {}) {
   }
 }
 
+export function recordWriteActivity(tool, args = {}, result = {}) {
+  const normalized = String(tool || '').toLowerCase();
+  if (!['write_file', 'edit_file', 'delete_file', 'write_project'].includes(normalized)) return;
+
+  if (normalized === 'write_project') {
+    const files = Array.isArray(args.files) ? args.files : [];
+    for (const file of files) {
+      rememberChangedFile(file?.file_path || file?.path);
+    }
+  }
+
+  rememberChangedFile(args.file_path || args.path || result.file_path || result.path);
+  const diffs = Array.isArray(result.file_diffs)
+    ? result.file_diffs
+    : result.file_diff ? [result.file_diff] : [];
+  for (const diff of diffs) {
+    rememberChangedFile(diff.relative_path || diff.path);
+  }
+}
+
 export function thinkingKind(text) {
   return /\b(read|reading|inspect|scan|search|open|trace|look(?:ing)?\s+at)\b/i.test(text)
     ? 'Reading'
@@ -511,6 +598,7 @@ export function startContentStream() {
   runtime.streamBuffer = '';
   runtime.streamedPartialText = '';
   runtime.renderedToolResults.clear();
+  runtime.renderedFileDiffPreviews.clear();
   runtime.exploreRun = { counts: {}, recent: [], lineActive: false, lastPrintedSummary: '', lastPrintedTotal: 0, lastPrintedAt: 0 };
   runtime.renderedContentThisTurn = false;
   runtime.contentHeaderPrinted = false;
@@ -535,27 +623,36 @@ export function flushContent() {
   if (runtime.streamTimer) { clearTimeout(runtime.streamTimer); runtime.streamTimer = null; }
   if (!runtime.streamBuffer) return;
 
+  const rendered = renderMarkdown(runtime.streamBuffer);
+  const lines = transcriptRenderableLines(rendered);
+  runtime.streamBuffer = '';
+  if (!lines.length) return;
+
   if (isInputDockMounted()) moveToContent();
   stopSpinner();
   // Any buffered tool head needs to land BEFORE this content so the order
   // is preserved on screen.
   flushPendingHead();
   flushCompactReadRun();
-  renderBlockBoundary('content');
+  renderBlockBoundary('content', { compactSame: true });
   if (!runtime.contentHeaderPrinted) {
     process.stdout.write(`${transcriptHeader('bahulam', { tone: 'assistant' })}\n`);
     runtime.contentHeaderPrinted = true;
   }
-  const rendered = renderMarkdown(runtime.streamBuffer);
-  for (const line of rendered.split('\n')) {
+  for (const line of lines) {
     process.stdout.write(`${transcriptLine(line, { tone: 'assistant' })}\n`);
   }
-  runtime.streamBuffer = '';
   runtime.renderedContentThisTurn = true;
   runtime.lastRenderedBlock = 'content';
   if (typeof runtime.afterContentFlush === 'function') runtime.afterContentFlush();
 }
 
+export function transcriptRenderableLines(rendered) {
+  const lines = String(rendered ?? '').replace(/\r\n?/g, '\n').split('\n');
+  while (lines.length && lines[lines.length - 1] === '') lines.pop();
+  return lines;
+}
+
 export function renderStagnation(data = {}) {
   const rawMessage = data?.message || '';
   const reason = data?.reason || rawMessage.replace(/^Stagnation:\s*/i, '').trim();

package/src/terminal/repl-state.mjs

@@ -39,6 +39,7 @@ export const runtime = {
   pendingHead: null,          // { callId, head, indent } buffered until result arrives
   lastRenderedBlock: null,    // 'tool' | 'content' | 'thinking' | 'status' | 'plan' | null
   renderedToolResults: new Set(),
+  renderedFileDiffPreviews: new Set(),
 
   // Explore-run collapse (read/list/search/index bursts as concise progress).
   exploreRun: { counts: {}, recent: [], lineActive: false, lastPrintedSummary: '', lastPrintedTotal: 0, lastPrintedAt: 0 },

package/src/terminal/repl.mjs

@@ -84,12 +84,14 @@ import {
   isInlineOutcomeTool,
   renderBlockBoundary,
   renderExploreRun,
+  renderFileDiffEvent,
   renderStagnation,
   renderToolCall,
   renderToolResult,
   startContentStream,
   startSpinner,
   stopSpinner,
+  transcriptRenderableLines,
   thinkingPrefix,
   updateSpinner,
 } from './repl-render.mjs';
@@ -1099,17 +1101,20 @@ function renderEvent(event) {
         }
       }
       if (text) {
-        renderBlockBoundary('content');
-        if (!runtime.contentHeaderPrinted) {
-          process.stdout.write(`${transcriptHeader('bahulam', { tone: 'assistant' })}\n`);
-          runtime.contentHeaderPrinted = true;
-        }
         const rendered = renderMarkdown(text);
-        for (const line of rendered.split('\n')) {
-          process.stdout.write(`${transcriptLine(line, { tone: 'assistant' })}\n`);
+        const lines = transcriptRenderableLines(rendered);
+        if (lines.length) {
+          renderBlockBoundary('content', { compactSame: true });
+          if (!runtime.contentHeaderPrinted) {
+            process.stdout.write(`${transcriptHeader('bahulam', { tone: 'assistant' })}\n`);
+            runtime.contentHeaderPrinted = true;
+          }
+          for (const line of lines) {
+            process.stdout.write(`${transcriptLine(line, { tone: 'assistant' })}\n`);
+          }
+          runtime.renderedContentThisTurn = true;
+          runtime.lastRenderedBlock = 'content';
         }
-        runtime.renderedContentThisTurn = true;
-        runtime.lastRenderedBlock = 'content';
       }
       break;
     }
@@ -1229,6 +1234,14 @@ function renderEvent(event) {
       break;
     }
 
+    case 'file_diff': {
+      stopSpinner();
+      flushContent();
+      flushPendingHead();
+      renderFileDiffEvent(data);
+      break;
+    }
+
     case 'plan': {
       stopSpinner();
       flushContent();
@@ -1474,17 +1487,20 @@ function renderEvent(event) {
 
       const summary = data?.summary || '';
       if (summary && !runtime.renderedContentThisTurn) {
-        renderBlockBoundary('content');
-        if (!runtime.contentHeaderPrinted) {
-          process.stdout.write(`${transcriptHeader('bahulam', { tone: 'assistant' })}\n`);
-          runtime.contentHeaderPrinted = true;
-        }
         const rendered = renderMarkdown(summary);
-        for (const line of rendered.split('\n')) {
-          process.stdout.write(`${transcriptLine(line, { tone: 'assistant' })}\n`);
+        const lines = transcriptRenderableLines(rendered);
+        if (lines.length) {
+          renderBlockBoundary('content', { compactSame: true });
+          if (!runtime.contentHeaderPrinted) {
+            process.stdout.write(`${transcriptHeader('bahulam', { tone: 'assistant' })}\n`);
+            runtime.contentHeaderPrinted = true;
+          }
+          for (const line of lines) {
+            process.stdout.write(`${transcriptLine(line, { tone: 'assistant' })}\n`);
+          }
+          runtime.renderedContentThisTurn = true;
+          runtime.lastRenderedBlock = 'content';
         }
-        runtime.renderedContentThisTurn = true;
-        runtime.lastRenderedBlock = 'content';
       }
 
       // Update session token counts
@@ -2784,6 +2800,54 @@ export async function startTerminalRepl() {
 
   const ctx = { auth, toolExecutor, approval, jsonlWriter, sessionMgr, checkpoints, effectivePolicy, latestProjectContext, latestEnvelope, pendingVisionPaths: [] };
 
+  let startupOutputRow = 1;
+  let startupOutputCol = 1;
+
+  function trackStartupOutput(chunk) {
+    if (!process.stderr.isTTY || term().plain) return;
+    const text = Buffer.isBuffer(chunk) ? chunk.toString('utf8') : String(chunk ?? '');
+    if (!text) return;
+    const clean = text
+      .replace(/\x1b\[[0-9;?]*[ -/]*[@-~]/g, '')
+      .replace(/\x1b[()][A-Za-z0-9]/g, '');
+    const width = Math.max(1, process.stderr.columns || process.stdout.columns || 80);
+    for (const ch of clean) {
+      if (ch === '\r') {
+        startupOutputCol = 1;
+        continue;
+      }
+      if (ch === '\n') {
+        startupOutputRow++;
+        startupOutputCol = 1;
+        continue;
+      }
+      startupOutputCol++;
+      if (startupOutputCol > width) {
+        startupOutputRow++;
+        startupOutputCol = 1;
+      }
+    }
+  }
+
+  function startStartupOutputTracking() {
+    if (!process.stderr.isTTY || term().plain) return () => {};
+    const originalWrite = process.stderr.write;
+    function trackedStartupWrite(chunk, ...args) {
+      trackStartupOutput(chunk);
+      return originalWrite.call(this, chunk, ...args);
+    }
+    process.stderr.write = trackedStartupWrite;
+    return () => {
+      if (process.stderr.write === trackedStartupWrite) {
+        process.stderr.write = originalWrite;
+      }
+    };
+  }
+
+  function startupCursorSeed() {
+    return { row: startupOutputRow, col: startupOutputCol };
+  }
+
   async function startNewSession({ announce = true } = {}) {
     stopSpinner();
     flushContent();
@@ -3103,57 +3167,67 @@ export async function startTerminalRepl() {
   // ── Print banner + preflight + init BEFORE mounting the status bar ──
   // The status bar shrinks the scroll region; if it mounts first, the
   // banner scrolls off-screen before the user ever sees it.
-  printBanner(auth);
-
-  // Preflight diagnostic (PRD-055 §9). Non-blocking; opt-out via
-  // KEPLER_NO_PREFLIGHT=1 (used by tests / scripted runs).
-  if (process.env.KEPLER_NO_PREFLIGHT !== '1' && !cliArgs.freeswim) {
-    try { await runPreflight({ auth, cwd: safeCwd(), version: VERSION }); }
-    catch { /* preflight is best-effort */ }
-  }
-
-  // ── Initialization ──
-  process.stderr.write(`  ${c.brand('⠋')} ${c.dim('Initializing...')}\r`);
-  await fetchUser(ctx);
-
-  // Clear the spinner line
-  process.stderr.write(`\r${' '.repeat(60)}\r`);
-  process.stderr.write(`  ${c.green('✓')} ${c.dim('Ready; projects will be indexed on demand')}\n`);
-  if (session.user) {
-    process.stderr.write(`  ${c.green('✓')} ${c.dim(`Logged in as ${session.user.github_username || session.user.email || 'user'}`)}\n`);
-  }
-  // ── Resume previous session ──
-  if (cliArgs.resume) {
-    const lastSession = cliArgs.resumeSessionId
-        ? { sessionId: cliArgs.resumeSessionId }
-        : sessionMgr.getLastSession();
-
-    if (lastSession) {
-      const resumed = await activateResumedSession(lastSession.sessionId, 'startup');
-      if (resumed.ok) {
-        process.stderr.write(`  ${c.green('↺')} ${c.dim(`Resumed session: ${messageCountLabel(resumed.messages)}`)}`);
-        process.stderr.write(` ${c.dim('· project')} ${c.brand(path.basename(safeCwd()))}`);
-        process.stderr.write(` ${c.dim(`· agent ${resumed.historyMode}`)}`);
-        if (resumed.switchedProject) process.stderr.write(` ${c.dim('(cwd restored)')}`);
-        if (resumed.projectMissing) process.stderr.write(` ${c.yellow('(saved project path unavailable; using current cwd)')}`);
-        if (resumed.instruction) process.stderr.write(` ${c.dim('—')} ${c.dim(resumed.instruction.slice(0, 50))}`);
-        process.stderr.write('\n');
-        renderResumePreview(resumed, { renderEvent });
+  const stopStartupOutputTracking = startStartupOutputTracking();
+  let dockCursor = startupCursorSeed();
+  try {
+    printBanner(auth);
+
+    // Preflight diagnostic (PRD-055 §9). Non-blocking; opt-out via
+    // KEPLER_NO_PREFLIGHT=1 (used by tests / scripted runs).
+    if (process.env.KEPLER_NO_PREFLIGHT !== '1' && !cliArgs.freeswim) {
+      try { await runPreflight({ auth, cwd: safeCwd(), version: VERSION }); }
+      catch { /* preflight is best-effort */ }
+    }
+
+    // ── Initialization ──
+    process.stderr.write(`  ${c.brand('⠋')} ${c.dim('Initializing...')}\r`);
+    await fetchUser(ctx);
+
+    // Clear the spinner line
+    process.stderr.write(`\r${' '.repeat(60)}\r`);
+    process.stderr.write(`  ${c.green('✓')} ${c.dim('Ready; projects will be indexed on demand')}\n`);
+    if (session.user) {
+      process.stderr.write(`  ${c.green('✓')} ${c.dim(`Logged in as ${session.user.github_username || session.user.email || 'user'}`)}\n`);
+    }
+    // ── Resume previous session ──
+    if (cliArgs.resume) {
+      const lastSession = cliArgs.resumeSessionId
+          ? { sessionId: cliArgs.resumeSessionId }
+          : sessionMgr.getLastSession();
+
+      if (lastSession) {
+        const resumed = await activateResumedSession(lastSession.sessionId, 'startup');
+        if (resumed.ok) {
+          process.stderr.write(`  ${c.green('↺')} ${c.dim(`Resumed session: ${messageCountLabel(resumed.messages)}`)}`);
+          process.stderr.write(` ${c.dim('· project')} ${c.brand(path.basename(safeCwd()))}`);
+          process.stderr.write(` ${c.dim(`· agent ${resumed.historyMode}`)}`);
+          if (resumed.switchedProject) process.stderr.write(` ${c.dim('(cwd restored)')}`);
+          if (resumed.projectMissing) process.stderr.write(` ${c.yellow('(saved project path unavailable; using current cwd)')}`);
+          if (resumed.instruction) process.stderr.write(` ${c.dim('—')} ${c.dim(resumed.instruction.slice(0, 50))}`);
+          process.stderr.write('\n');
+          renderResumePreview(resumed, { renderEvent });
+        } else {
+          process.stderr.write(`  ${c.yellow('!')} ${c.dim(resumed.reason || 'No conversation found for session ' + lastSession.sessionId)}\n`);
+        }
       } else {
-        process.stderr.write(`  ${c.yellow('!')} ${c.dim(resumed.reason || 'No conversation found for session ' + lastSession.sessionId)}\n`);
+        process.stderr.write(`  ${c.yellow('!')} ${c.dim('No previous session to resume')}\n`);
       }
-    } else {
-      process.stderr.write(`  ${c.yellow('!')} ${c.dim('No previous session to resume')}\n`);
     }
-  }
 
-  process.stderr.write(`\n  ${c.dim('Press')} ${c.brand('Enter')} ${c.dim('to start, or type a prompt below.')}\n`);
+    process.stderr.write(`\n  ${c.dim('Press')} ${c.brand('Enter')} ${c.dim('to start, or type a prompt below.')}\n`);
+  } finally {
+    dockCursor = startupCursorSeed();
+    stopStartupOutputTracking();
+  }
 
   // Keep one bottom-reserved UI surface: the fixed input dock. The older
   // status bar used the same terminal scroll-region primitive, so mounting
   // both would make prompt placement unpredictable.
   orbitRef.current = createOrbit();
-  const inputDockActive = mountInputDock();
+  const inputDockActive = mountInputDock({
+    initialContentRow: dockCursor.row,
+    initialContentCol: dockCursor.col,
+  });
   if (inputDockActive) {
     process.on('beforeExit', unmountInputDock);
     process.on('exit',       unmountInputDock);
@@ -3851,6 +3925,21 @@ export async function startTerminalRepl() {
     }
     runtime.afterContentFlush = focusExecutionInput;
 
+    function printExecutionInstruction(instruction) {
+      if (isInputDockMounted()) {
+        clearInputPrompt();
+        moveToContent();
+      } else if (executionInputVisible) {
+        process.stderr.write('\n');
+      }
+      renderBlockBoundary('user', { compactSame: true });
+      process.stderr.write(`${transcriptHeader('you', { tone: 'user' })} ${paint.text.dim('follow-up')}\n`);
+      for (const line of String(instruction || '').split('\n')) {
+        process.stderr.write(`${transcriptLine(line, { tone: 'user' })}\n`);
+      }
+      runtime.lastRenderedBlock = 'user';
+    }
+
     async function submitExecutionInstruction() {
       const instruction = executionInputBuffer.trim();
       executionInputBuffer = '';
@@ -3869,18 +3958,14 @@ export async function startTerminalRepl() {
         executionInputVisible = false;
         return;
       }
+      printExecutionInstruction(instruction);
       if (isInputDockMounted()) {
-        clearInputPrompt();
-        moveToContent();
-        process.stderr.write(`${executionInputPrefix()}${instruction}\n`);
         renderDockInput(executionInputPrefix(), '', {
           context: buildContextStrip(),
           meta: buildDockMeta(),
           tips: executionInputTips(),
         });
         moveToContent();
-      } else if (executionInputVisible) {
-        process.stderr.write('\n');
       }
       executionInputVisible = false;
       // Live steering (PRD-081 §5.2): submit through the dedicated
@@ -3906,18 +3991,26 @@ export async function startTerminalRepl() {
       });
 
       if (status === 'accepted') {
+        renderBlockBoundary('status', { compactSame: true });
         process.stderr.write(`  ${c.green('↳')} ${c.dim('sent to running agent')}\n`);
+        runtime.lastRenderedBlock = 'status';
       } else if (status === 'duplicate') {
+        renderBlockBoundary('status', { compactSame: true });
         process.stderr.write(`  ${c.dim('↳ already sent (idempotent)')}\n`);
+        runtime.lastRenderedBlock = 'status';
       } else if (status === 'queued_next_turn') {
         _queuedLines.push(instruction);
+        renderBlockBoundary('status', { compactSame: true });
         process.stderr.write(`  ${c.yellow('↳')} ${c.dim('task ended — queued for next turn')}\n`);
+        runtime.lastRenderedBlock = 'status';
       } else {
         // no_task, error, or unknown — fall back to next-turn queue so the
         // user's text is never silently lost.
         _queuedLines.push(instruction);
         const errBits = result && result.error ? ` ${c.dim(`(${String(result.error).slice(0, 80)})`)}` : '';
+        renderBlockBoundary('status', { compactSame: true });
         process.stderr.write(`  ${c.yellow('↳')} ${c.dim('queued for next turn')}${errBits}\n`);
+        runtime.lastRenderedBlock = 'status';
       }
     }
 
@@ -4147,8 +4240,6 @@ export async function startTerminalRepl() {
         moveToContent();
       }
       startContentStream();
-      process.stderr.write(`\n${transcriptHeader('bahulam', { tone: 'assistant' })}\n`);
-      runtime.contentHeaderPrinted = true;
 
       // Immediate feedback so the screen isn't blank between submit and the
       // first backend event. The first `status`, `thinking`, or `content_*`

package/src/terminal/tool-display.mjs

@@ -1,5 +1,7 @@
 // Present-progressive verbs — read more conversationally than "Read file":
 // "Reading auth.py  — 47 lines" reads like the agent narrating, not a log.
+import { isSensitiveConfigPath } from '../core/safety.mjs';
+
 const TOOL_LABELS = Object.freeze({
   shell: 'Running',
   read_file: 'Reading',
@@ -129,6 +131,7 @@ export function toolDisplaySummary(tool, args = {}, { cwd } = {}) {
         .join(', ') || 'Project files';
     case 'edit_file': {
       const filePath = shortPath(args.file_path || args.path, cwd);
+      if (isSensitiveConfigPath(filePath)) return `${filePath} · match [redacted]`;
       const search = String(args.search || '').trim();
       return search ? `${filePath} · match "${search.slice(0, 40)}${search.length > 40 ? '...' : ''}"` : filePath;
     }
@@ -229,8 +232,12 @@ export function shellCommandProfile(command, {
     || commandLineCount >= compactLines
     || commandByteCount > compactChars;
   const kind = script?.kind || (lineCount > 1 ? 'shell script' : 'shell command');
+  const preview = script?.body ? scriptBodyPreview(script.body) : '';
   const summary = compact
-    ? `${kind} · ${lineCount} line${lineCount === 1 ? '' : 's'} · ${formatBytes(byteCount)}`
+    ? [
+        `${kind} · ${lineCount} line${lineCount === 1 ? '' : 's'} · ${formatBytes(byteCount)}`,
+        preview ? `preview: ${preview}` : '',
+      ].filter(Boolean).join(' · ')
     : body;
 
   return {
@@ -244,6 +251,7 @@ export function shellCommandProfile(command, {
     compact,
     kind,
     summary,
+    preview,
     script,
     detailHint: compact ? 'details: F2 or /last' : '',
   };
@@ -297,6 +305,17 @@ function interpreterKind(value) {
   return 'shell script';
 }
 
+function scriptBodyPreview(body, maxChars = 20) {
+  const line = String(body || '')
+    .replace(/\r\n?/g, '\n')
+    .split('\n')
+    .map(value => value.trim())
+    .find(Boolean) || '';
+  const compact = line.replace(/\s+/g, ' ');
+  if (compact.length <= maxChars) return compact;
+  return `${compact.slice(0, Math.max(0, maxChars - 1))}…`;
+}
+
 function byteLength(value) {
   try {
     return Buffer.byteLength(String(value || ''), 'utf8');

package/src/ui/approval.mjs

@@ -19,6 +19,7 @@ import { paint, width as visibleWidth } from './palette.mjs';
 import { icon } from './icons.mjs';
 import { shellCommandDisplay, shellCommandProfile, toolDisplayLabel, toolDisplaySummary } from '../terminal/tool-display.mjs';
 import { label as tierLabel, requiresExplicitApproval, TIERS } from '../core/risk-tier.mjs';
+import { isSensitiveConfigPath } from '../core/safety.mjs';
 
 /**
  * Default option set per tier. Caller can override via `opts.options`.
@@ -158,6 +159,7 @@ export { TIERS };
 function tierTitle(tier) {
   switch (tier) {
     case TIERS.SENSITIVE_READ: return 'SENSITIVE';
+    case TIERS.PROTECTED_EDIT: return 'PROTECTED';
     case TIERS.SHELL_DANGEROUS: return 'DANGEROUS';
     case TIERS.DESTRUCTIVE: return 'DESTRUCTIVE';
     case TIERS.SHELL_MEDIUM: return 'MEDIUM';
@@ -172,6 +174,7 @@ function tierTitle(tier) {
 function approvalTitle(tier) {
   switch (tier) {
     case TIERS.SENSITIVE_READ:
+    case TIERS.PROTECTED_EDIT:
     case TIERS.SHELL_DANGEROUS:
     case TIERS.DESTRUCTIVE:
       return tierTitle(tier);
@@ -286,6 +289,7 @@ function riskTerms(tool, args = {}, tier) {
     }
   }
   if (tier === TIERS.SENSITIVE_READ) terms.push('sensitive read');
+  if (tier === TIERS.PROTECTED_EDIT) terms.push('protected edit');
   if (tier === TIERS.DESTRUCTIVE) terms.push('destructive');
   return [...new Set(terms)].slice(0, 3);
 }
@@ -315,11 +319,18 @@ function subjectDetails(tool, args = {}, summary = '', available = 72) {
   }
   if (tool === 'write_file') {
     const file = args.file_path || args.path || summary || '';
+    if (isSensitiveConfigPath(file)) return [`${file} · content redacted`];
     const lineCount = typeof args.content === 'string' ? args.content.split('\n').length : null;
     return [`${file}${lineCount ? ` · ${lineCount} lines` : ''}`];
   }
   if (tool === 'edit_file') {
     const file = args.file_path || args.path || '';
+    if (isSensitiveConfigPath(file)) {
+      const details = [`${file || summary}`];
+      if (args.search || args.old_string) details.push('match: [redacted]');
+      if (args.replace || args.new_string) details.push('replace: [redacted]');
+      return details;
+    }
     const search = String(args.search || args.old_string || '').trim();
     const replacement = String(args.replace || args.new_string || '').trim();
     const details = [`${file || summary}`];