@dreb/coding-agent 2.40.1 → 2.41.0

package/dist/core/agent-session.js

@@ -357,11 +357,15 @@ export class AgentSession {
      * should be injected. Resolves the directory the tool operates in, walks up to a
      * sensible ceiling collecting not-yet-loaded AGENTS.md/CLAUDE.md files, and formats
      * them. Each directory is scanned at most once (negative cache) and each file is
-     * injected at most once per session (realpath dedup). Gated by `context.autoLoadNested`.
+     * injected at most once per session (realpath dedup). Every decision consumes the
+     * refreshed global-only trust policy; absent settings managers fail closed.
      */
     _computeNestedContextBlock(toolName, args) {
-        const enabled = this.settingsManager?.getAutoLoadNestedContext() ?? true;
-        if (!enabled)
+        const policy = this.settingsManager?.getGlobalContextTrustPolicy() ?? {
+            unrestricted: false,
+            trustedFolders: [],
+        };
+        if (!policy.unrestricted && policy.trustedFolders.length === 0)
             return null;
         // Seed the per-session loaded set from the context files loaded at session start so
         // ancestor files are never re-injected.
@@ -377,7 +381,7 @@ export class AgentSession {
             }
         }
         const state = {
-            enabled,
+            policy,
             cwd: this._cwd,
             loaded: this._nestedContextLoaded,
             scannedDirs: this._nestedContextScannedDirs,