@namzu/cli 39.0.0 → 39.1.0

package/dist/chunks/{tui-HA3JIVON.js → tui-GEHRYWRG.js}

@@ -2,21 +2,21 @@ import { createRequire as __namzuCreateRequire } from 'node:module';
 const require = __namzuCreateRequire(import.meta.url);
 import {
   reportCrash
-} from "./chunk-QNF6COCY.js";
+} from "./chunk-YVJTVJN4.js";
 import {
   BYPASS_CONSENT_BODY,
   BYPASS_CONSENT_TITLE,
   acknowledgeBypass,
   hasAcknowledgedBypass
-} from "./chunk-HU35YAIZ.js";
+} from "./chunk-EXL2ALVX.js";
 import {
   settleAnsweredPark
-} from "./chunk-B2357ETN.js";
+} from "./chunk-44JEVSTR.js";
 import {
   DELIVERY_READ_LIMIT,
   readSourceDeliveryPage,
   takeSuppressedCount
-} from "./chunk-XEHLRJXR.js";
+} from "./chunk-A7F56OV6.js";
 import {
   callsCount
 } from "./chunk-E5VLANCO.js";
@@ -38,7 +38,7 @@ import {
   confirmationView,
   describeChanges,
   permissionsChanged
-} from "./chunk-UIDLXA2K.js";
+} from "./chunk-5GVYGWMK.js";
 import {
   visibleScheduleMessage
 } from "./chunk-NADQQMMG.js";
@@ -55,25 +55,25 @@ import {
   runsPerDay,
   scriptShellUnavailableReason,
   verifyScheduledScript
-} from "./chunk-2WQFRVVQ.js";
+} from "./chunk-NXLK7UAG.js";
 import {
   allowsCommands,
   compileJobPolicy,
   compileScriptCheckPolicy,
   isPresetName
-} from "./chunk-EA6SWPO4.js";
-import "./chunk-SIK62TDI.js";
+} from "./chunk-67YTCGFQ.js";
+import "./chunk-VUBQ6IRM.js";
 import {
   formatResumeShellCommand,
   parkedRunWords,
   resumeCommand
-} from "./chunk-P2Y4LUPJ.js";
+} from "./chunk-HZH2LZR3.js";
 import {
   appendHistory,
   nextFireOf,
   readHistory,
   readState
-} from "./chunk-OLOTFDTU.js";
+} from "./chunk-2TEGJRBM.js";
 import {
   TURN_LIMIT_FIELDS,
   baseBranchReviewPrompt,
@@ -90,7 +90,7 @@ import {
   reviewPrompt,
   runSlash,
   turnLimitCommands
-} from "./chunk-3JB5NDB4.js";
+} from "./chunk-JBYO5UWH.js";
 import {
   capChoiceLines,
   choiceDisplayText,
@@ -103,11 +103,11 @@ import {
 } from "./chunk-M3TJHQF7.js";
 import {
   handleTerminationSignals
-} from "./chunk-SBPCN24X.js";
+} from "./chunk-6A5BVWEI.js";
 import "./chunk-TBIX6JRE.js";
 import {
   setUserConfigValue
-} from "./chunk-Z7XA4Y43.js";
+} from "./chunk-NNSCLV6S.js";
 import {
   describeAllCredentialsLogout,
   describeCodexDeviceLoginStart,
@@ -129,14 +129,14 @@ import {
   sectionHeading,
   withAutoChoice,
   writeConversationExport
-} from "./chunk-HI2KXIGA.js";
+} from "./chunk-D7UUTTLG.js";
 import {
   tuiPalDefinition,
   tuiPalEnvironment,
   tuiPalOwner,
   tuiPalPreferences
-} from "./chunk-5CGH647C.js";
-import "./chunk-7EASYULO.js";
+} from "./chunk-H2SFQIVZ.js";
+import "./chunk-VIRFJSX6.js";
 import {
   COMPACTED_HINT,
   COMPACTING_LABEL,
@@ -196,17 +196,17 @@ import {
   webLiveStatus,
   webSettledLine,
   withDebugDetail
-} from "./chunk-OXJEMOBQ.js";
+} from "./chunk-6MRGH7S5.js";
 import {
   describePlainInterruption,
   describeProviderWait,
   describeProviderWaitClock
-} from "./chunk-NLKIBRXJ.js";
+} from "./chunk-L5EE2M32.js";
 import {
   openManagedWorktrees,
   worktreeOpenHint
-} from "./chunk-LFVQSMJG.js";
-import "./chunk-YKEPC6NH.js";
+} from "./chunk-YH7CW765.js";
+import "./chunk-64WCX6UV.js";
 import {
   theme
 } from "./chunk-CDYUGK7F.js";
@@ -230,17 +230,17 @@ import {
   resolveTurnGuards,
   runTokens,
   settledElapsed
-} from "./chunk-HV77F4SF.js";
-import "./chunk-W27ZDC4R.js";
+} from "./chunk-PAJTVGYM.js";
+import "./chunk-GQBSRXFY.js";
 import {
   openInBrowser
-} from "./chunk-EUU4TDTH.js";
+} from "./chunk-IAA2O76K.js";
 import "./chunk-NUGPLXVK.js";
 import {
   beginCodexDeviceLogin,
   beginSubscriptionLogin,
   parsePastedInput
-} from "./chunk-DFA5OB46.js";
+} from "./chunk-QFAZWIVS.js";
 import {
   NO_SKILLS_FOUND,
   composeSkillsPrompt,
@@ -248,13 +248,13 @@ import {
   loadSkillBody,
   renderSkillRoster,
   skillTierLabel
-} from "./chunk-7YXHOSHD.js";
-import "./chunk-T75ITEN6.js";
-import "./chunk-233DQVSC.js";
+} from "./chunk-ECO3KP5U.js";
+import "./chunk-MBGTDQFF.js";
+import "./chunk-XOIV3R6O.js";
 import {
   claimPalConversation,
   listPalConversations
-} from "./chunk-II57E2QW.js";
+} from "./chunk-DCAKHMT4.js";
 import "./chunk-ZWA2JRJV.js";
 import {
   pinTrustedProjectPath,
@@ -275,11 +275,11 @@ import {
   loadConfigWithProvenance,
   readPermissionLayers,
   resolveComposerTriggers
-} from "./chunk-GU5YARBU.js";
+} from "./chunk-RI5G5NS3.js";
 import "./chunk-KONYGNG6.js";
 import {
   formatConfigSource
-} from "./chunk-2KKF45DQ.js";
+} from "./chunk-SYMXDX7F.js";
 import {
   displayPath,
   formatSize,
@@ -308,7 +308,7 @@ import {
   writeJsonAtomic
 } from "./chunk-OEW7CJKK.js";
 import "./chunk-HE7WUOX2.js";
-import "./chunk-N3FI7O4U.js";
+import "./chunk-JDS4SYAJ.js";
 import {
   EXIT_INTERNAL_ERROR
 } from "./chunk-Y7B67G22.js";
@@ -326,7 +326,7 @@ import {
   primaryProvider,
   signedInSubscriptionProviders,
   writePreferences
-} from "./chunk-XJ4IUCH6.js";
+} from "./chunk-SVTNQGLN.js";
 import {
   ALL_PROVIDER_IDS,
   PROVIDER_REGISTRY,
@@ -336,21 +336,21 @@ import {
 } from "./chunk-6LLJQ3KY.js";
 import {
   applyProviderFlags
-} from "./chunk-UUUNXKL3.js";
+} from "./chunk-VMJWG5TF.js";
 import "./chunk-XEUQN4JC.js";
 import {
   PAUSED_TURN_LINES,
   currentTimeLine,
   describeTurnStop,
   handoffContinuationNote
-} from "./chunk-QO5JUKFG.js";
+} from "./chunk-XLPUR46F.js";
 import {
   autoAvailable,
   nextCycleMode,
   permissionModeDescription,
   permissionModeLabel,
   permissionModeName
-} from "./chunk-2VMMTC2V.js";
+} from "./chunk-CI3SKMXQ.js";
 import {
   terminalDisplayText
 } from "./chunk-EEDZOGV4.js";
@@ -376,25 +376,25 @@ import {
   titlesOf,
   typedTextOf,
   unarchiveConversation
-} from "./chunk-UBOPUGDN.js";
+} from "./chunk-WICKQJR4.js";
 import "./chunk-H6B6AROX.js";
-import "./chunk-CL5TCY4F.js";
-import "./chunk-FBNKKDIY.js";
+import "./chunk-CYGNCTMI.js";
+import "./chunk-UB6WVOKM.js";
 import {
   isTrusted,
   trustDir
-} from "./chunk-UTMGJDC3.js";
+} from "./chunk-5CKCYCPL.js";
 import "./chunk-LXB3S4IC.js";
-import "./chunk-CZEU2JYJ.js";
+import "./chunk-ERSRQ6QN.js";
 import "./chunk-WMEZTDLT.js";
 import {
   contextLogging,
   installCliLogging
-} from "./chunk-CUOWARJI.js";
+} from "./chunk-WUBN6DXH.js";
 import "./chunk-OH6TB27S.js";
 import "./chunk-IE5XIE4W.js";
 import "./chunk-B73OIFL6.js";
-import "./chunk-4K2NRXHJ.js";
+import "./chunk-CL475F3V.js";
 import "./chunk-JORONMD3.js";
 import {
   clearAllStoredCredentials,
@@ -408,10 +408,10 @@ import {
   readStoredSubscriptionCredential,
   restrictToOwner,
   writeStoredGeminiApiKey
-} from "./chunk-MCNEFI5Q.js";
+} from "./chunk-2GO7AWHX.js";
 import {
   namzuHomePath
-} from "./chunk-AZ3YHVFA.js";
+} from "./chunk-5BULAR3C.js";
 import {
   ACCEPT_EDITS_TOOLS,
   DECLINED_TOOL_CALL_FEEDBACK,
@@ -470,7 +470,7 @@ import {
   validateTimeZone,
   wrapUntrusted,
   writePeerRecord
-} from "./chunk-RQBT4RVE.js";
+} from "./chunk-FTZT4UAB.js";
 import {
   __commonJS,
   __export,
@@ -35660,47 +35660,135 @@ function buildPeerTools(current) {
 __name(buildPeerTools, "buildPeerTools");
 
 // src/tui/permission-review.ts
-var MAX_PERMISSION_REVIEW_BYTES = 8e3;
+import { createHash as createHash2 } from "node:crypto";
+var MAX_REVIEW_VALUE_CHARS = 2e5;
+var REVIEW_ALLOCATION_BYTES = 1024 * 1024;
 var MAX_WORKFLOW_REVIEW_BYTES = 640 * 1024;
-function permissionReviewLimit(calls) {
-  return calls.length > 0 && calls.every((call) => call.name === "workflow") ? MAX_WORKFLOW_REVIEW_BYTES : MAX_PERMISSION_REVIEW_BYTES;
+function permissionReviewLimits(calls) {
+  return calls.length > 0 && calls.every((call) => call.name === "workflow") ? { valueChars: MAX_WORKFLOW_REVIEW_BYTES, totalBytes: MAX_WORKFLOW_REVIEW_BYTES } : { valueChars: MAX_REVIEW_VALUE_CHARS, totalBytes: REVIEW_ALLOCATION_BYTES };
 }
-__name(permissionReviewLimit, "permissionReviewLimit");
+__name(permissionReviewLimits, "permissionReviewLimits");
 var PERMISSION_REVIEW_PAGE_ROWS = 6;
 function permissionReviewPageRows(terminalRows) {
   const rows = terminalRows ?? 24;
   return Math.min(24, Math.max(PERMISSION_REVIEW_PAGE_ROWS, rows - 18));
 }
 __name(permissionReviewPageRows, "permissionReviewPageRows");
-function permissionReviewRefusal(reason) {
-  return reason === "too_large" ? `Refused: the complete tool batch exceeds the ${MAX_PERMISSION_REVIEW_BYTES}-byte interactive review limit. Split it into smaller calls or add an explicit allow rule after reviewing the operation another way.` : "Refused: this tool batch contains input the interactive permission protocol cannot represent exactly. Use JSON-compatible input or add an explicit allow rule after reviewing the operation another way.";
+function permissionReviewRefusal(_reason) {
+  return "Refused: this tool batch contains input the interactive permission protocol cannot represent exactly. Use JSON-compatible input or add an explicit allow rule after reviewing the operation another way.";
 }
 __name(permissionReviewRefusal, "permissionReviewRefusal");
-var ReviewLimitError = class extends Error {
-  static {
-    __name(this, "ReviewLimitError");
-  }
-};
+var WITHHELD_NOTICE = "Too large to show in full. Approving runs it once and is not remembered.";
+var LONG_INPUT_NOTICE = "Long input. Approving runs it once and is not remembered.";
+var WITHHELD_MARK = "too large to show";
+var LONG_INPUT_MARK = "long input";
+function withheldNotice(withheld, total) {
+  if (total <= 1) return withheld[0]?.omitted === false ? LONG_INPUT_NOTICE : WITHHELD_NOTICE;
+  return `${withheld.length} of ${total} calls ${withheld.length === 1 ? "is" : "are"} marked below. Approving runs the batch once and is not remembered.`;
+}
+__name(withheldNotice, "withheldNotice");
+function roughCount(value) {
+  if (value < 1e3) return String(value);
+  if (value < 1e6) return `${Number((value / 1e3).toFixed(1))}k`;
+  return `${Number((value / 1e6).toFixed(1))}M`;
+}
+__name(roughCount, "roughCount");
+function withheldPlaceholder(characters) {
+  return `[${characters < 1e3 ? "" : "about "}${roughCount(characters)} characters not shown]`;
+}
+__name(withheldPlaceholder, "withheldPlaceholder");
+var LONG_INPUT_UNITS = 2e3;
+var LONG_INPUT_ELEMENTS = 1e4;
+var LONG_INPUT_DEPTH = 64;
+function isLongInput(input) {
+  let units = 0;
+  let elements = 0;
+  const walk = /* @__PURE__ */ __name((value, depth) => {
+    if (units > LONG_INPUT_UNITS || elements > LONG_INPUT_ELEMENTS) return true;
+    if (typeof value === "string") {
+      units += value.length + 2;
+      return units > LONG_INPUT_UNITS;
+    }
+    if (typeof value !== "object" || value === null) {
+      units += String(value).length;
+      return units > LONG_INPUT_UNITS;
+    }
+    if (depth >= LONG_INPUT_DEPTH) return true;
+    const entries = Array.isArray(value) ? value.map((item, index) => [String(index), item]) : Object.entries(value);
+    elements += entries.length;
+    units += 2 + Math.max(0, entries.length - 1);
+    for (const [key, item] of entries) {
+      if (!Array.isArray(value)) units += key.length + 3;
+      if (walk(item, depth + 1)) return true;
+    }
+    return units > LONG_INPUT_UNITS || elements > LONG_INPUT_ELEMENTS;
+  }, "walk");
+  return walk(input, 0);
+}
+__name(isLongInput, "isLongInput");
 var ReviewShapeError = class extends Error {
   static {
     __name(this, "ReviewShapeError");
   }
 };
-function buildPermissionReview(calls, maxBytes = permissionReviewLimit(calls)) {
-  if (!Number.isSafeInteger(maxBytes) || maxBytes < 1) {
+function buildPermissionReview(calls, limits = permissionReviewLimits(
+  calls
+)) {
+  if (!Number.isSafeInteger(limits.valueChars) || limits.valueChars < 1 || !Number.isSafeInteger(limits.totalBytes) || limits.totalBytes < 1) {
     return { ok: false, reason: "unrepresentable" };
   }
   const chunks = [];
   let bytes = 0;
   const active = /* @__PURE__ */ new WeakSet();
+  const hash = createHash2("sha256");
+  const withheldChars = /* @__PURE__ */ new Map();
+  const omittedCalls = /* @__PURE__ */ new Set();
+  let currentCall = 0;
+  let silent = false;
   const append = /* @__PURE__ */ __name((chunk) => {
+    hash.update(chunk);
+    if (silent) return;
     bytes += Buffer.byteLength(chunk, "utf8");
-    if (bytes > maxBytes) throw new ReviewLimitError();
     chunks.push(chunk);
   }, "append");
-  const appendString = /* @__PURE__ */ __name((value) => {
-    if (Buffer.byteLength(value, "utf8") > maxBytes - bytes) throw new ReviewLimitError();
+  const withhold = /* @__PURE__ */ __name((characters, digestOf) => {
+    if (silent) {
+      if (digestOf !== void 0) hash.update(createHash2("sha256").update(digestOf).digest("hex"));
+      return;
+    }
+    withheldChars.set(currentCall, (withheldChars.get(currentCall) ?? 0) + characters);
+    omittedCalls.add(currentCall);
+    const placeholder = JSON.stringify(withheldPlaceholder(characters));
+    bytes += Buffer.byteLength(placeholder, "utf8");
+    chunks.push(placeholder);
+    hash.update(
+      `<withheld ${characters} ${digestOf === void 0 ? "" : createHash2("sha256").update(digestOf).digest("hex")}>`
+    );
+  }, "withhold");
+  const exhausted = /* @__PURE__ */ __name(() => !silent && bytes >= limits.totalBytes, "exhausted");
+  const appendKey = /* @__PURE__ */ __name((value) => {
+    if (value.length > limits.valueChars) throw new ReviewShapeError();
     append(JSON.stringify(value));
+  }, "appendKey");
+  const appendString = /* @__PURE__ */ __name((value) => {
+    if (silent) {
+      withhold(value.length, value);
+      return;
+    }
+    if (value.length > limits.valueChars) {
+      withhold(value.length, value);
+      return;
+    }
+    if (Buffer.byteLength(value, "utf8") > limits.totalBytes - bytes) {
+      withhold(value.length, value);
+      return;
+    }
+    const escaped = JSON.stringify(value);
+    if (Buffer.byteLength(escaped, "utf8") > limits.totalBytes - bytes) {
+      withhold(value.length, value);
+      return;
+    }
+    append(escaped);
   }, "appendString");
   const write = /* @__PURE__ */ __name((value, indent) => {
     if (value === null) {
@@ -35735,14 +35823,26 @@ function buildPermissionReview(calls, maxBytes = permissionReviewLimit(calls)) {
           (name) => name !== "length" && (!/^(0|[1-9]\d*)$/.test(name) || Number(name) >= value.length)
         ))
           throw new ReviewShapeError();
-        append("[");
-        if (value.length > 0) append("\n");
         for (let index = 0; index < value.length; index += 1) {
           const descriptor = descriptors2[String(index)];
           if (!descriptor || !("value" in descriptor) || !descriptor.enumerable)
             throw new ReviewShapeError();
+        }
+        append("[");
+        if (value.length > 0) append("\n");
+        for (let index = 0; index < value.length; index += 1) {
           append(" ".repeat(indent + 2));
-          write(descriptor.value, indent + 2);
+          if (exhausted()) {
+            silent = true;
+            for (let rest = index; rest < value.length; rest += 1) {
+              write(descriptors2[String(rest)].value, indent + 2);
+            }
+            silent = false;
+            withhold(value.length - index);
+            append("\n");
+            break;
+          }
+          write(descriptors2[String(index)].value, indent + 2);
           append(index === value.length - 1 ? "\n" : ",\n");
         }
         if (value.length > 0) append(" ".repeat(indent));
@@ -35766,7 +35866,21 @@ function buildPermissionReview(calls, maxBytes = permissionReviewLimit(calls)) {
         const descriptor = descriptors[key];
         if (!descriptor || !("value" in descriptor)) throw new ReviewShapeError();
         append(" ".repeat(indent + 2));
-        appendString(key);
+        if (exhausted()) {
+          silent = true;
+          for (let rest = index; rest < entries.length; rest += 1) {
+            const restKey = entries[rest];
+            hash.update(restKey);
+            write(descriptors[restKey].value, indent + 2);
+          }
+          silent = false;
+          appendKey("...");
+          append(": ");
+          withhold(entries.length - index);
+          append("\n");
+          break;
+        }
+        appendKey(key);
         append(": ");
         write(descriptor.value, indent + 2);
         append(index === entries.length - 1 ? "\n" : ",\n");
@@ -35796,21 +35910,48 @@ function buildPermissionReview(calls, maxBytes = permissionReviewLimit(calls)) {
         isDestructive: isDestructive.value
       };
     });
-    write(
-      {
-        calls: exactCalls
-      },
-      0
-    );
-    return { ok: true, text: chunks.join(""), bytes };
-  } catch (error) {
+    append("{\n");
+    append('  "calls": [');
+    if (exactCalls.length > 0) append("\n");
+    for (let index = 0; index < exactCalls.length; index += 1) {
+      currentCall = index;
+      append("    ");
+      write(exactCalls[index], 4);
+      append(index === exactCalls.length - 1 ? "\n" : ",\n");
+    }
+    if (exactCalls.length > 0) append("  ");
+    append("]\n");
+    append("}");
+    for (let index = 0; index < exactCalls.length; index += 1) {
+      const call = exactCalls[index];
+      if (!withheldChars.has(index) && !FORMATTED_TOOLS.has(call.name) && isLongInput(call.input)) {
+        withheldChars.set(index, 0);
+      }
+    }
+    const withheld = [...withheldChars.entries()].sort((a, b) => a[0] - b[0]).map(([index, characters]) => ({
+      index,
+      name: exactCalls[index].name,
+      characters,
+      omitted: omittedCalls.has(index)
+    }));
     return {
-      ok: false,
-      reason: error instanceof ReviewLimitError ? "too_large" : "unrepresentable"
+      ok: true,
+      text: chunks.join(""),
+      bytes,
+      withheld,
+      envelopeHash: hash.digest("hex")
     };
+  } catch {
+    return { ok: false, reason: "unrepresentable" };
   }
 }
 __name(buildPermissionReview, "buildPermissionReview");
+function withheldMark(context, index) {
+  const call = context.withheld?.find((item) => item.index === index);
+  if (!call) return "";
+  return ` \xB7 ${call.omitted ? WITHHELD_MARK : LONG_INPUT_MARK}`;
+}
+__name(withheldMark, "withheldMark");
 function buildPermissionSummary(review, context = {}) {
   let parsed;
   try {
@@ -35846,11 +35987,11 @@ function buildPermissionSummary(review, context = {}) {
   const compactText = complete && calls.length > 0 && calls.every((call) => call.name === "Agent" && call.readable.label !== void 0) ? compactAgentPlan(calls) : void 0;
   if (complete && calls.length > 1 && calls.every((call) => call.name === "Agent" && call.readable.label !== void 0)) {
     const overview = calls.map(
-      (call, index) => `${index + 1}. ${call.readable.label}${call.isDestructive ? " \xB7 destructive" : ""}`
+      (call, index) => `${index + 1}. ${call.readable.label}${call.isDestructive ? " \xB7 destructive" : ""}${withheldMark(context, index)}`
     );
     const details = calls.map(
       (call, index) => [
-        `${index + 1}. ${call.readable.label}${call.isDestructive ? " \xB7 destructive" : ""}`,
+        `${index + 1}. ${call.readable.label}${call.isDestructive ? " \xB7 destructive" : ""}${withheldMark(context, index)}`,
         ...call.readable.lines.map((line) => `   ${line}`)
       ].join("\n")
     );
@@ -35865,14 +36006,14 @@ function buildPermissionSummary(review, context = {}) {
     ...compactText !== void 0 ? { compactText } : {},
     text: calls.map(
       (call, index) => [
-        `${index + 1}. ${call.name}${call.isDestructive ? " \xB7 destructive" : ""}`,
+        `${index + 1}. ${call.name}${call.isDestructive ? " \xB7 destructive" : ""}${withheldMark(context, index)}`,
         ...call.readable.lines.map((line) => `   ${line}`)
       ].join("\n")
     ).join("\n\n"),
     ...complete && expanded ? {
       expandedText: calls.map(
         (call, index) => [
-          `${index + 1}. ${call.name}${call.isDestructive ? " \xB7 destructive" : ""}`,
+          `${index + 1}. ${call.name}${call.isDestructive ? " \xB7 destructive" : ""}${withheldMark(context, index)}`,
           ...(call.readable.expandedLines ?? call.readable.lines).map((line) => `   ${line}`)
         ].join("\n")
       ).join("\n\n")
@@ -42841,7 +42982,7 @@ function permissionAnswers(toolCalls, options = {}) {
   const agents = workflow || toolCalls.length > 0 && toolCalls.every((call) => call.name === "Agent");
   const approve = workflow ? "Start this workflow" : agents ? toolCalls.length === 1 ? "Start this agent" : `Start these ${toolCalls.length} agents` : "Yes";
   const reject = agents ? "Do not start" : "No, and tell Namzu what to do differently (esc)";
-  const extra = options.batchOnly ? void 0 : extraAnswer(toolCalls, options);
+  const extra = options.batchOnly || options.withheld ? void 0 : extraAnswer(toolCalls, options);
   return [
     { label: approve, kind: "approve" },
     ...extra ? [extra] : [],
@@ -42898,7 +43039,8 @@ function PermissionOverlay({
   commandArguments,
   rememberWhere,
   siteNotes = [],
-  screenConsent
+  screenConsent,
+  withheld = []
 }) {
   const pageRows = Math.max(1, permissionReviewPageRows(terminalRows) - (sourceLabel2 ? 1 : 0));
   const single2 = toolCalls.length === 1;
@@ -42917,6 +43059,7 @@ function PermissionOverlay({
   const choices2 = permissionChoices(toolCalls, {
     batchOnly,
     screenConsent: sharing,
+    withheld: withheld.length > 0,
     ...mode ? { mode } : {},
     ...commandArguments ? { commandArguments } : {},
     ...rememberWhere ? { rememberWhere } : {}
@@ -42944,6 +43087,7 @@ function PermissionOverlay({
         sourceLabel2 ? /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(Text, { color: theme.text.secondary, wrap: "truncate-end", children: terminalDisplayText(sourceLabel2) }) : null,
         sharingNotes.map((note) => /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(Text, { color: theme.text.primary, children: terminalDisplayText(note) }, note)),
         escalationNotes.map((note) => /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(Text, { color: theme.status.error, children: terminalDisplayText(note) }, note)),
+        withheld.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(Text, { color: theme.text.muted, children: terminalDisplayText(withheldNotice(withheld, toolCalls.length)) }) : null,
         siteNotes.map((note) => /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(Text, { color: theme.text.secondary, children: terminalDisplayText(note) }, note)),
         /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(Box_default, { flexDirection: "column", paddingLeft: 2, children: visibleRows.map((row) => /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(Box_default, { width: "100%", children: /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(Text, { color: rowColor2(row.text, detailsOpen), children: row.continuation ? `\u21B3 ${row.text}` : row.text }) }, row.index)) }),
         paged ? /* @__PURE__ */ (0, import_jsx_runtime16.jsxs)(Text, { color: theme.text.muted, children: [
@@ -42970,7 +43114,9 @@ function PermissionOverlay({
         ] }),
         /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(Box_default, { flexDirection: "column", children: /* @__PURE__ */ (0, import_jsx_runtime16.jsx)(Text, { color: theme.text.muted, children: fitHints(
           [
-            { text: "\u2191\u2193 select", rank: 5 },
+            // The arrow keys are the first of the answer keys to go: enter and y / n
+            // still answer, and the list shows which row is selected.
+            { text: "\u2191\u2193 select", rank: 4 },
             { text: "enter confirm", rank: 5 },
             {
               text: "y / n answer",
@@ -42987,7 +43133,9 @@ function PermissionOverlay({
             {
               text: `d ${scriptView ? detailsOpen ? "collapse" : "script" : detailsOpen ? "readable" : compact ? "instructions" : "view input"}`,
               short: `d ${scriptView ? detailsOpen ? "collapse" : "script" : detailsOpen ? "readable" : compact ? "full" : "input"}`,
-              rank: scriptView ? 5 : 3
+              // The only way to the exact input: it outranks the stop hint,
+              // whose key works without being shown.
+              rank: 5
             }
           ],
           boxedHintWidth(columns)
@@ -53501,6 +53649,7 @@ ${blocks.join("\n\n")}`;
   }, []);
   const permissionResolveRef = (0, import_react52.useRef)(null);
   const permissionQueueRef = (0, import_react52.useRef)([]);
+  const permissionShownRef = (0, import_react52.useRef)(null);
   const [queuedPermissionCount, setQueuedPermissionCount] = (0, import_react52.useState)(0);
   (0, import_react52.useEffect)(
     () => () => {
@@ -56404,6 +56553,7 @@ ${blocks.join("\n\n")}`;
   const permissionAnswerOptions = /* @__PURE__ */ __name((pending) => ({
     batchOnly: pending.batchOnly === true,
     screenConsent: pending.screenConsent === true,
+    withheld: pending.withheld.length > 0,
     mode: permissionModeRef.current,
     ...session?.allowForSession && session.commandArguments ? {
       commandArguments: session.commandArguments,
@@ -56411,8 +56561,19 @@ ${blocks.join("\n\n")}`;
     } : {}
   }), "permissionAnswerOptions");
   const resolvePermission = (0, import_react52.useCallback)(
-    (decision) => {
+    (requested) => {
       const resolve9 = permissionResolveRef.current;
+      const shown = permissionShownRef.current;
+      permissionShownRef.current = null;
+      let decision = requested;
+      if (requested.kind === "approve" && shown) {
+        const again = buildPermissionReview(shown.source.toolCalls);
+        if (!again.ok || again.envelopeHash !== shown.envelopeHash)
+          decision = {
+            kind: "reject",
+            feedback: "Refused: the tool input changed after it was shown for approval."
+          };
+      }
       permissionResolveRef.current = null;
       permissionOpenedAtRef.current = null;
       setPermissionReviewOffset(0);
@@ -56429,6 +56590,7 @@ ${blocks.join("\n\n")}`;
         permissionResolveRef.current = next.resolve;
         permissionOpenedAtRef.current = Date.now();
         setPermissionDetailsOpen(!next.permission.summary.complete);
+        permissionShownRef.current = next.permission;
         setPermission(next.permission);
         setState("awaiting-permission");
       }
@@ -57215,13 +57377,22 @@ ${blocks.join("\n\n")}`;
       const summary2 = buildPermissionSummary(review.text, {
         describeUiRef: /* @__PURE__ */ __name((ref) => reviewSessionRef.current?.describeComputerUseRef?.(ref), "describeUiRef"),
         fileExists: /* @__PURE__ */ __name((path) => existsSync2(resolve7(ctxRef.current.cwd, path)), "fileExists"),
-        workflowLimits: resolveWorkflowLimits(ctxRef.current.workflow)
+        workflowLimits: resolveWorkflowLimits(ctxRef.current.workflow),
+        withheld: review.withheld
       });
       const siteNotes = browserSiteNotes(req.toolCalls, browserControlRef.current?.status());
       return new Promise((resolve9) => {
         if (permissionResolveRef.current) {
           permissionQueueRef.current.push({
-            permission: { ...req, review: review.text, summary: summary2, siteNotes },
+            permission: {
+              ...req,
+              review: review.text,
+              summary: summary2,
+              siteNotes,
+              withheld: review.withheld,
+              source: req,
+              envelopeHash: review.envelopeHash
+            },
             resolve: resolve9
           });
           setQueuedPermissionCount(permissionQueueRef.current.length);
@@ -57231,7 +57402,17 @@ ${blocks.join("\n\n")}`;
         permissionOpenedAtRef.current = Date.now();
         setPermissionReviewOffset(0);
         setPermissionDetailsOpen(!summary2.complete);
-        setPermission({ ...req, review: review.text, summary: summary2, siteNotes });
+        const shown = {
+          ...req,
+          review: review.text,
+          summary: summary2,
+          siteNotes,
+          withheld: review.withheld,
+          source: req,
+          envelopeHash: review.envelopeHash
+        };
+        permissionShownRef.current = shown;
+        setPermission(shown);
         setState("awaiting-permission");
         announceApproval();
       });
@@ -61528,6 +61709,7 @@ ${lines.join("\n")}`);
               rememberWhere: displayPath(ctx.cwd, 28)
             } : {},
             siteNotes: permission.siteNotes,
+            withheld: permission.withheld,
             ...permission.screenConsent === true ? {
               screenConsent: {
                 provider: session?.providerSummary ?? null
@@ -62450,4 +62632,4 @@ react/cjs/react-jsx-runtime.development.js:
    * LICENSE file in the root directory of this source tree.
    *)
 */
-//# sourceMappingURL=tui-HA3JIVON.js.map
+//# sourceMappingURL=tui-GEHRYWRG.js.map