@garuda-agent/garuda 0.17.0 → 0.18.1

package/dist/chunk-NH72AELP.js

@@ -0,0 +1,48 @@
+#!/usr/bin/env node
+
+// src/tools/atomicWrite.ts
+import { randomBytes } from "crypto";
+import { chmod, link, realpath, rename, stat, unlink, writeFile } from "fs/promises";
+import { basename, dirname, join } from "path";
+async function writeFileAtomic(path, content, { createOnly }) {
+  const target = createOnly ? path : await realpath(path);
+  const temp = join(
+    dirname(target),
+    `.${basename(target)}.garuda-${randomBytes(4).toString("hex")}.tmp`
+  );
+  const mode = createOnly ? void 0 : (await stat(target)).mode & 4095;
+  await writeFile(temp, content, { flag: "wx", ...mode === void 0 ? {} : { mode } });
+  try {
+    if (createOnly) {
+      try {
+        await link(temp, target);
+      } catch (error) {
+        const code = error.code;
+        if (code !== "EPERM" && code !== "ENOTSUP" && code !== "EXDEV") throw error;
+        if (await exists(target)) throw Object.assign(new Error("EEXIST"), { code: "EEXIST" });
+        await rename(temp, target);
+        return;
+      }
+    } else {
+      await chmod(temp, mode ?? 420);
+      await rename(temp, target);
+      return;
+    }
+  } finally {
+    await unlink(temp).catch(() => {
+    });
+  }
+}
+async function exists(path) {
+  try {
+    await stat(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+export {
+  writeFileAtomic
+};
+//# sourceMappingURL=chunk-NH72AELP.js.map

package/dist/{chunk-735BKABA.js → chunk-NLS7GMF7.js}

@@ -3,18 +3,12 @@ import {
   Redactor,
   contextSize,
   totalTokens
-} from "./chunk-J4346IDH.js";
-import {
-  cleanLine
-} from "./chunk-PZS3V6P3.js";
+} from "./chunk-7KBOIPUT.js";
 import {
   ZERO_USAGE,
   addUsage,
   reportedUsage
 } from "./chunk-BHZ6G65V.js";
-import {
-  formatRule
-} from "./chunk-3NJNVZTK.js";
 
 // src/session/store.ts
 import { randomBytes } from "crypto";
@@ -227,7 +221,15 @@ function addSnapshot(session, tree, prompt, durationMs) {
   const messages = session.messages.length;
   pushPoint(session.undo, tree, messages, prompt);
   const point = session.undo.points.at(-1);
-  session.journal?.write({ type: "snapshot", tree, messages, prompt: point.prompt, durationMs });
+  point.at = Date.now();
+  session.journal?.write({
+    type: "snapshot",
+    tree,
+    messages,
+    prompt: point.prompt,
+    durationMs,
+    at: point.at
+  });
 }
 function undoTurn(session, after) {
   const point = popPoint(session.undo, session.messages, after);
@@ -343,101 +345,6 @@ function addSideUsage(session, purpose, response, costUsd) {
   });
 }
 
-// src/permissions/projectSettings.ts
-import { createHash as createHash2 } from "crypto";
-function settingsRisk(settings) {
-  const risk = {
-    executorHost: settings.executor === "host",
-    allow: settings.allow.map(formatRule),
-    writePaths: [...settings.sandbox?.writePaths ?? []],
-    envAllow: [...settings.envAllow],
-    allowLocalhost: settings.web?.allowLocalhost === true
-  };
-  const formatterCommands = Object.entries(settings.formatters?.commands ?? {}).flatMap(
-    ([name, f]) => f === false ? [] : [`${name}: ${f.command.join(" ")}`]
-  );
-  if (formatterCommands.length > 0) risk.formatterCommands = formatterCommands;
-  const none = !risk.executorHost && risk.allow.length === 0 && risk.writePaths.length === 0 && risk.envAllow.length === 0 && !risk.allowLocalhost && risk.formatterCommands === void 0;
-  return none ? void 0 : risk;
-}
-function settingsRiskHash(risk) {
-  return createHash2("sha256").update(JSON.stringify(risk)).digest("hex");
-}
-function settingsRiskLines(risk) {
-  const lines = [];
-  if (risk.executorHost) lines.push('executor: "host" (commands run with no OS sandbox)');
-  if (risk.allow.length > 0) {
-    lines.push(`permissions.allow (no question for these): ${risk.allow.join(", ")}`);
-  }
-  if (risk.writePaths.length > 0) {
-    lines.push(`sandbox.writePaths (commands may write there): ${risk.writePaths.join(", ")}`);
-  }
-  if (risk.envAllow.length > 0) {
-    lines.push(`env.allow (commands see these variables): ${risk.envAllow.join(", ")}`);
-  }
-  if (risk.allowLocalhost) lines.push("web.allowLocalhost (web_fetch may reach this machine)");
-  if (risk.formatterCommands !== void 0) {
-    lines.push(
-      `formatters.commands (run after each edit): ${risk.formatterCommands.map(cleanLine).join("; ")}`
-    );
-  }
-  return lines;
-}
-function withoutRisk(settings) {
-  const { sandbox, web, formatters, ...rest } = settings;
-  const { writePaths: _writePaths, ...sandboxRest } = sandbox ?? {};
-  const keptCommands = Object.fromEntries(
-    Object.entries(formatters?.commands ?? {}).filter(([, f]) => f === false)
-  );
-  return {
-    ...rest,
-    ...formatters === void 0 ? {} : { formatters: { ...formatters, commands: keptCommands } },
-    executor: settings.executor === "host" ? "auto" : settings.executor,
-    allow: [],
-    envAllow: [],
-    ...sandbox === void 0 ? {} : { sandbox: sandboxRest },
-    ...web === void 0 ? {} : { web: { ...web, allowLocalhost: false } }
-  };
-}
-async function gateProjectSettings(options) {
-  const risk = settingsRisk(options.settings);
-  if (risk === void 0) return { settings: options.settings };
-  const hash2 = settingsRiskHash(risk);
-  const known = options.trust?.settingsHash(options.root);
-  if (known === hash2) return { settings: options.settings };
-  const lines = settingsRiskLines(risk);
-  if (options.ask !== void 0) {
-    const choice = await options.ask({
-      tool: "settings",
-      target: { kind: "input", json: "" },
-      title: "Project settings that loosen safety",
-      preview: [
-        `This project's .garuda/settings.json ${known === void 0 ? "asks for" : "changed and now asks for"}:`,
-        ...lines.map((line) => `  - ${line}`),
-        "A cloned repository can ship this file. Without your yes, Garuda uses safe defaults for these",
-        "parts; the rest of the file applies."
-      ].join("\n"),
-      isolation: options.isolation ?? "os",
-      question: "Use these project settings?",
-      choices: ["once", "session", "deny"],
-      labels: {
-        once: "Yes, for this run",
-        session: "Yes, and remember (asks again when they change)",
-        deny: "No, use safe defaults"
-      }
-    });
-    if (choice === "session") await options.trust?.setSettingsHash(options.root, hash2);
-    if (choice !== "deny") return { settings: options.settings };
-  }
-  return {
-    settings: withoutRisk(options.settings),
-    notice: [
-      `Project settings not applied (not approved): ${lines.join("; ")}.`,
-      "Start the chat in a terminal and answer yes to use them."
-    ].join(" ")
-  };
-}
-
 export {
   FileTracker,
   FileSessionStore,
@@ -466,7 +373,6 @@ export {
   addChildDebit,
   addChildReport,
   settleChildDebits,
-  addSideUsage,
-  gateProjectSettings
+  addSideUsage
 };
-//# sourceMappingURL=chunk-735BKABA.js.map
+//# sourceMappingURL=chunk-NLS7GMF7.js.map

package/dist/{chunk-ZAE25JM2.js → chunk-QANRZW7W.js}

@@ -57,6 +57,12 @@ async function loadMcpConfig({ home, root } = { home: homedir(), root: process.c
       problems.push(`${file}: invalid JSON: ${error.message}`);
       return [];
     }
+    if (Array.isArray(json?.servers)) {
+      problems.push(
+        `${file}: "servers" must be an object of name \u2192 server, not a list: { "servers": { "graphify": { "command": "\u2026" }, "linear": { "url": "\u2026" } } }`
+      );
+      return [];
+    }
     const parsed = fileSchema.safeParse(json);
     if (!parsed.success) {
       problems.push(`${file}: ${z.prettifyError(parsed.error)}`);
@@ -147,6 +153,7 @@ function commandLine(def) {
 }
 
 export {
+  MCP_FILE,
   SERVER_NAME,
   isHttp,
   loadMcpConfig,
@@ -155,4 +162,4 @@ export {
   expandEnv,
   commandLine
 };
-//# sourceMappingURL=chunk-ZAE25JM2.js.map
+//# sourceMappingURL=chunk-QANRZW7W.js.map

package/dist/{chunk-JRVWH27M.js → chunk-QLBCM2YQ.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   writeFileAtomic
-} from "./chunk-U65DQZDB.js";
+} from "./chunk-NH72AELP.js";
 import {
   keepSecretForRedaction,
   lookupModel
-} from "./chunk-J4346IDH.js";
+} from "./chunk-7KBOIPUT.js";
 import {
   isLoopbackHost
 } from "./chunk-ATW7BNIG.js";
@@ -228,6 +228,9 @@ async function keepProviderKeys(names, home) {
   }
   return stored.warning;
 }
+function providerKeyValue(name) {
+  return providerKey(process.env, name);
+}
 function providerKey(env, name) {
   if (name === void 0) return void 0;
   return keptKeys.get(name)?.value ?? env[name];
@@ -326,6 +329,7 @@ export {
   setDefaultModel,
   providerKeySource,
   keepProviderKeys,
+  providerKeyValue,
   resolveModel
 };
-//# sourceMappingURL=chunk-JRVWH27M.js.map
+//# sourceMappingURL=chunk-QLBCM2YQ.js.map

package/dist/{chunk-6XHON3Q6.js → chunk-QXTHEFKP.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   DEFAULT_ENV_ALLOWLIST
-} from "./chunk-B4SJY7KT.js";
+} from "./chunk-LMKGSYJC.js";
 
 // src/jobs/git.ts
 var GIT_TIMEOUT_MS = 12e4;
@@ -28,7 +28,7 @@ async function hostCommand(executor, cwd, argv, options = {}) {
   const command = argv.map(shellWord).join(" ");
   const result = await executor.run(command, policy, {
     ...options.signal === void 0 ? {} : { signal: options.signal },
-    env: { GIT_TERMINAL_PROMPT: "0" }
+    env: { ...options.env, GIT_TERMINAL_PROMPT: "0" }
   });
   if (result.aborted) throw options.signal?.reason ?? new Error("stopped");
   const out = { exitCode: result.exitCode, stdout: result.stdout.text, stderr: result.stderr.text };
@@ -46,4 +46,4 @@ export {
   git,
   hostCommand
 };
-//# sourceMappingURL=chunk-6XHON3Q6.js.map
+//# sourceMappingURL=chunk-QXTHEFKP.js.map

package/dist/{chunk-TJIWD7R7.js → chunk-R7RCW4BQ.js}

@@ -4,12 +4,14 @@ import {
   pickChannel
 } from "./chunk-N4I6YS3E.js";
 import {
-  gateProjectSettings,
+  gateProjectSettings
+} from "./chunk-ULAJPMY7.js";
+import {
   isCostIncomplete
-} from "./chunk-735BKABA.js";
+} from "./chunk-NLS7GMF7.js";
 import {
   totalTokens
-} from "./chunk-J4346IDH.js";
+} from "./chunk-7KBOIPUT.js";
 import {
   TrustStore
 } from "./chunk-5DEWP3YX.js";
@@ -19,11 +21,11 @@ import {
   jobChanges,
   outsideScope,
   prepareWorktree
-} from "./chunk-55CFEEIN.js";
+} from "./chunk-WK5NE6RY.js";
 import {
   defaultAgentEnv,
   removeAgent
-} from "./chunk-5B5HDTUR.js";
+} from "./chunk-TWQ7V2L6.js";
 import {
   jobReport
 } from "./chunk-3MRQJKUO.js";
@@ -40,11 +42,11 @@ import {
   JobGitError,
   git,
   hostCommand
-} from "./chunk-6XHON3Q6.js";
+} from "./chunk-QXTHEFKP.js";
 import {
   createExecutor,
   loadSettings
-} from "./chunk-B4SJY7KT.js";
+} from "./chunk-LMKGSYJC.js";
 import {
   JOBS_DIR,
   loadJob,
@@ -350,4 +352,4 @@ export {
   msUntil,
   finishJob
 };
-//# sourceMappingURL=chunk-TJIWD7R7.js.map
+//# sourceMappingURL=chunk-R7RCW4BQ.js.map

package/dist/chunk-TLA2PDGM.js

@@ -0,0 +1,156 @@
+#!/usr/bin/env node
+import {
+  summariseCall,
+  summariseResult
+} from "./chunk-DQSCCE77.js";
+import {
+  hasReceipt
+} from "./chunk-4QRTTRVK.js";
+import {
+  serverCallText,
+  serverResultSummary
+} from "./chunk-A2QAIRQL.js";
+import {
+  receiptText
+} from "./chunk-2OYTNNUJ.js";
+
+// src/cli/exportHtml.ts
+function escapeHtml(text) {
+  return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+var OUTPUT_CHARS = 4e3;
+var cutOutput = (text) => text.length <= OUTPUT_CHARS ? text : `${text.slice(0, OUTPUT_CHARS)}
+\u2026 ${text.length - OUTPUT_CHARS} more characters in the session file.`;
+function callChange(call) {
+  const input = call.input ?? {};
+  const lines = (text, sign) => typeof text === "string" ? text.split("\n").map((l) => `${sign}${l}`) : [];
+  if (call.name === "edit_file") {
+    return [...lines(input.old_string, "-"), ...lines(input.new_string, "+")].join("\n");
+  }
+  if (call.name === "write_file") return lines(input.content, "+").join("\n");
+  return void 0;
+}
+function diffHtml(text) {
+  return text.split("\n").map((line) => {
+    const cls = line.startsWith("+") ? "add" : line.startsWith("-") ? "del" : "ctx";
+    return `<span class="${cls}">${escapeHtml(line)}</span>`;
+  }).join("\n");
+}
+var STYLE = `
+:root { --bg: #fbf7ef; --fg: #222; --dim: #6b6b6b; --line: #e4dccb; --accent: #d97706;
+  --add: #e6f4e6; --addfg: #17602a; --del: #fbe7e7; --delfg: #8f1d1d; --you: #0e7490; }
+@media (prefers-color-scheme: dark) { :root { --bg: #1d1d1b; --fg: #e8e4dc; --dim: #a19c92;
+  --line: #3a3833; --add: #183522; --addfg: #9ee2ad; --del: #3b1d1d; --delfg: #f4a9a9; } }
+body { background: var(--bg); color: var(--fg); font: 15px/1.55 system-ui, sans-serif;
+  max-width: 920px; margin: 32px auto; padding: 0 16px; }
+h1 { font-size: 20px; } .meta { color: var(--dim); font-size: 13px; }
+.you { border-left: 4px solid var(--you); padding: 4px 12px; margin: 24px 0 8px; font-weight: 600;
+  white-space: pre-wrap; }
+.answer { white-space: pre-wrap; margin: 8px 0; }
+.answer::before { content: "\u2726 "; color: var(--accent); }
+details { border: 1px solid var(--line); border-radius: 6px; margin: 6px 0; padding: 4px 10px; }
+summary { cursor: pointer; font-family: ui-monospace, monospace; font-size: 13px; }
+pre { font: 12.5px/1.45 ui-monospace, monospace; white-space: pre-wrap; overflow-wrap: anywhere;
+  margin: 6px 0; }
+.add { background: var(--add); color: var(--addfg); display: inline-block; width: 100%; }
+.del { background: var(--del); color: var(--delfg); display: inline-block; width: 100%; }
+.receipt { border: 1px solid var(--accent); border-radius: 6px; padding: 6px 10px; }
+.note { color: var(--dim); font-style: italic; }
+.failed summary { color: var(--delfg); }
+`;
+function sessionHtml(records, sessionId) {
+  const body = [];
+  const start = records.find((r) => r.type === "start");
+  body.push(`<h1>Garuda session ${escapeHtml(sessionId)}</h1>`);
+  if (start?.type === "start") {
+    body.push(
+      `<p class="meta">${escapeHtml(start.root)} \xB7 ${escapeHtml(start.model)} \xB7 ${escapeHtml(start.t)}</p>`
+    );
+  }
+  const calls = /* @__PURE__ */ new Map();
+  for (const record of records) {
+    switch (record.type) {
+      case "user": {
+        const prompt = record.message.content[0];
+        body.push(
+          `<div class="you">${escapeHtml(prompt?.type === "text" ? prompt.text : "")}</div>`
+        );
+        break;
+      }
+      case "assistant":
+        for (const block of record.response.content) {
+          if (block.type === "text" && block.text.trim() !== "") {
+            body.push(`<div class="answer">${escapeHtml(block.text.trim())}</div>`);
+          }
+          if (block.type === "tool_use") calls.set(block.id, block);
+          if (block.type === "server_tool_result") {
+            const call = record.response.content.find(
+              (b) => b.type === "server_tool_use" && b.id === block.toolUseId
+            );
+            const query = call?.type === "server_tool_use" ? ` ${serverCallText(call)}` : "";
+            const pages = block.results.map((r) => `${r.title}
+  ${r.url}`).join("\n");
+            body.push(
+              `<details><summary>${escapeHtml(`\u25CF ${block.name} (Claude)${query} \u2192 ${serverResultSummary(block)}`)}</summary><pre>${escapeHtml(pages)}</pre></details>`
+            );
+          }
+        }
+        break;
+      case "tool_results":
+        for (const block of record.message.content) {
+          if (block.type !== "tool_result") continue;
+          const call = calls.get(block.toolUseId);
+          if (call === void 0) continue;
+          const summary = summariseResult(call, { content: block.content, isError: block.isError });
+          const head = `\u25CF ${[call.name, summariseCall(call)].filter((p) => p !== "").join(" ")} \u2192 ${block.isError ? `failed: ${summary}` : summary}`;
+          const change = callChange(call);
+          const inner = change === void 0 ? `<pre>${escapeHtml(cutOutput(block.content))}</pre>` : `<pre>${diffHtml(cutOutput(change))}</pre>`;
+          body.push(
+            `<details${block.isError ? ' class="failed"' : ""}><summary>${escapeHtml(head)}</summary>${inner}</details>`
+          );
+        }
+        break;
+      case "receipt":
+        if (hasReceipt(record.receipt)) {
+          body.push(`<pre class="receipt">${escapeHtml(receiptText(record.receipt))}</pre>`);
+        }
+        break;
+      case "undo":
+        body.push('<p class="note">/undo: the last turn was taken back.</p>');
+        break;
+      case "redo":
+        body.push('<p class="note">/redo: the turn came back.</p>');
+        break;
+      case "compaction":
+        body.push('<p class="note">The conversation was compacted here.</p>');
+        break;
+      case "fork":
+        body.push(
+          `<p class="note">This session starts as a fork of session ${escapeHtml(record.from.sessionId)}, at turn ${record.from.turn}.</p>`
+        );
+        break;
+      default:
+        break;
+    }
+  }
+  return [
+    "<!doctype html>",
+    '<html lang="en"><head><meta charset="utf-8">',
+    '<meta name="viewport" content="width=device-width, initial-scale=1">',
+    // No script may run, and nothing loads from outside: the page's own policy says so too.
+    `<meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'">`,
+    `<title>Garuda session ${escapeHtml(sessionId)}</title>`,
+    `<style>${STYLE}</style></head><body>`,
+    ...body,
+    "</body></html>",
+    ""
+  ].join("\n");
+}
+
+export {
+  escapeHtml,
+  OUTPUT_CHARS,
+  callChange,
+  sessionHtml
+};
+//# sourceMappingURL=chunk-TLA2PDGM.js.map

package/dist/{chunk-5B5HDTUR.js → chunk-TWQ7V2L6.js}

@@ -2,7 +2,7 @@
 import {
   hostCommand,
   shellWord
-} from "./chunk-6XHON3Q6.js";
+} from "./chunk-QXTHEFKP.js";
 import {
   JOBS_DIR
 } from "./chunk-VTMD5IHD.js";
@@ -154,4 +154,4 @@ export {
   nightAgentTime,
   removeAgent
 };
-//# sourceMappingURL=chunk-5B5HDTUR.js.map
+//# sourceMappingURL=chunk-TWQ7V2L6.js.map

package/dist/chunk-ULAJPMY7.js

@@ -0,0 +1,107 @@
+#!/usr/bin/env node
+import {
+  cleanLine
+} from "./chunk-PZS3V6P3.js";
+import {
+  formatRule
+} from "./chunk-3NJNVZTK.js";
+
+// src/permissions/projectSettings.ts
+import { createHash } from "crypto";
+function settingsRisk(settings) {
+  const risk = {
+    executorHost: settings.executor === "host",
+    allow: settings.allow.map(formatRule),
+    writePaths: [...settings.sandbox?.writePaths ?? []],
+    envAllow: [...settings.envAllow],
+    allowLocalhost: settings.web?.allowLocalhost === true
+  };
+  const formatterCommands = Object.entries(settings.formatters?.commands ?? {}).flatMap(
+    ([name, f]) => f === false ? [] : [`${name}: ${f.command.join(" ")}`]
+  );
+  if (formatterCommands.length > 0) risk.formatterCommands = formatterCommands;
+  const none = !risk.executorHost && risk.allow.length === 0 && risk.writePaths.length === 0 && risk.envAllow.length === 0 && !risk.allowLocalhost && risk.formatterCommands === void 0;
+  return none ? void 0 : risk;
+}
+function settingsRiskHash(risk) {
+  return createHash("sha256").update(JSON.stringify(risk)).digest("hex");
+}
+function settingsRiskLines(risk) {
+  const lines = [];
+  if (risk.executorHost) lines.push('executor: "host" (commands run with no OS sandbox)');
+  if (risk.allow.length > 0) {
+    lines.push(`permissions.allow (no question for these): ${risk.allow.join(", ")}`);
+  }
+  if (risk.writePaths.length > 0) {
+    lines.push(`sandbox.writePaths (commands may write there): ${risk.writePaths.join(", ")}`);
+  }
+  if (risk.envAllow.length > 0) {
+    lines.push(`env.allow (commands see these variables): ${risk.envAllow.join(", ")}`);
+  }
+  if (risk.allowLocalhost) lines.push("web.allowLocalhost (web_fetch may reach this machine)");
+  if (risk.formatterCommands !== void 0) {
+    lines.push(
+      `formatters.commands (run after each edit): ${risk.formatterCommands.map(cleanLine).join("; ")}`
+    );
+  }
+  return lines;
+}
+function withoutRisk(settings) {
+  const { sandbox, web, formatters, ...rest } = settings;
+  const { writePaths: _writePaths, ...sandboxRest } = sandbox ?? {};
+  const keptCommands = Object.fromEntries(
+    Object.entries(formatters?.commands ?? {}).filter(([, f]) => f === false)
+  );
+  return {
+    ...rest,
+    ...formatters === void 0 ? {} : { formatters: { ...formatters, commands: keptCommands } },
+    executor: settings.executor === "host" ? "auto" : settings.executor,
+    allow: [],
+    envAllow: [],
+    ...sandbox === void 0 ? {} : { sandbox: sandboxRest },
+    ...web === void 0 ? {} : { web: { ...web, allowLocalhost: false } }
+  };
+}
+async function gateProjectSettings(options) {
+  const risk = settingsRisk(options.settings);
+  if (risk === void 0) return { settings: options.settings };
+  const hash = settingsRiskHash(risk);
+  const known = options.trust?.settingsHash(options.root);
+  if (known === hash) return { settings: options.settings };
+  const lines = settingsRiskLines(risk);
+  if (options.ask !== void 0) {
+    const choice = await options.ask({
+      tool: "settings",
+      target: { kind: "input", json: "" },
+      title: "Project settings that loosen safety",
+      preview: [
+        `This project's .garuda/settings.json ${known === void 0 ? "asks for" : "changed and now asks for"}:`,
+        ...lines.map((line) => `  - ${line}`),
+        "A cloned repository can ship this file. Without your yes, Garuda uses safe defaults for these",
+        "parts; the rest of the file applies."
+      ].join("\n"),
+      isolation: options.isolation ?? "os",
+      question: "Use these project settings?",
+      choices: ["once", "session", "deny"],
+      labels: {
+        once: "Yes, for this run",
+        session: "Yes, and remember (asks again when they change)",
+        deny: "No, use safe defaults"
+      }
+    });
+    if (choice === "session") await options.trust?.setSettingsHash(options.root, hash);
+    if (choice !== "deny") return { settings: options.settings };
+  }
+  return {
+    settings: withoutRisk(options.settings),
+    notice: [
+      `Project settings not applied (not approved): ${lines.join("; ")}.`,
+      "Start the chat in a terminal and answer yes to use them."
+    ].join(" ")
+  };
+}
+
+export {
+  gateProjectSettings
+};
+//# sourceMappingURL=chunk-ULAJPMY7.js.map