@psnext/slingcli 2.5.20260602-4 → 2.5.20260607-2

package/node_modules/@earendil-works/pi-coding-agent/dist/core/resource-loader.js

@@ -54,23 +54,25 @@ export function loadProjectContextFiles(options) {
         contextFiles.push(globalContext);
         seenPaths.add(globalContext.path);
     }
-    const ancestorContextFiles = [];
-    let currentDir = resolvedCwd;
-    const root = resolve("/");
-    while (true) {
-        const contextFile = loadContextFileFromDir(currentDir);
-        if (contextFile && !seenPaths.has(contextFile.path)) {
-            ancestorContextFiles.unshift(contextFile);
-            seenPaths.add(contextFile.path);
-        }
-        if (currentDir === root)
-            break;
-        const parentDir = resolve(currentDir, "..");
-        if (parentDir === currentDir)
-            break;
-        currentDir = parentDir;
-    }
-    contextFiles.push(...ancestorContextFiles);
+    if (options.projectTrusted !== false) {
+        const ancestorContextFiles = [];
+        let currentDir = resolvedCwd;
+        const root = resolve("/");
+        while (true) {
+            const contextFile = loadContextFileFromDir(currentDir);
+            if (contextFile && !seenPaths.has(contextFile.path)) {
+                ancestorContextFiles.unshift(contextFile);
+                seenPaths.add(contextFile.path);
+            }
+            if (currentDir === root)
+                break;
+            const parentDir = resolve(currentDir, "..");
+            if (parentDir === currentDir)
+                break;
+            currentDir = parentDir;
+        }
+        contextFiles.push(...ancestorContextFiles);
+    }
     return contextFiles;
 }
 export class DefaultResourceLoader {
@@ -333,7 +335,13 @@ export class DefaultResourceLoader {
             }
         }
         const agentsFiles = {
-            agentsFiles: this.noContextFiles ? [] : loadProjectContextFiles({ cwd: this.cwd, agentDir: this.agentDir }),
+            agentsFiles: this.noContextFiles
+                ? []
+                : loadProjectContextFiles({
+                    cwd: this.cwd,
+                    agentDir: this.agentDir,
+                    projectTrusted: this.settingsManager.isProjectTrusted(),
+                }),
         };
         const resolvedAgentsFiles = this.agentsFilesOverride ? this.agentsFilesOverride(agentsFiles) : agentsFiles;
         this.agentsFiles = resolvedAgentsFiles.agentsFiles;
@@ -667,7 +675,7 @@ export class DefaultResourceLoader {
     }
     discoverSystemPromptFile() {
         const projectPath = join(this.cwd, CONFIG_DIR_NAME, "SYSTEM.md");
-        if (existsSync(projectPath)) {
+        if (this.settingsManager.isProjectTrusted() && existsSync(projectPath)) {
             return projectPath;
         }
         const globalPath = join(this.agentDir, "SYSTEM.md");
@@ -678,7 +686,7 @@ export class DefaultResourceLoader {
     }
     discoverAppendSystemPromptFile() {
         const projectPath = join(this.cwd, CONFIG_DIR_NAME, "APPEND_SYSTEM.md");
-        if (existsSync(projectPath)) {
+        if (this.settingsManager.isProjectTrusted() && existsSync(projectPath)) {
             return projectPath;
         }
         const globalPath = join(this.agentDir, "APPEND_SYSTEM.md");

package/node_modules/@earendil-works/pi-coding-agent/dist/core/sdk.js

@@ -10,10 +10,10 @@ import { DEFAULT_THINKING_LEVEL } from "./defaults.js";
 import { convertToLlm } from "./messages.js";
 import { ModelRegistry } from "./model-registry.js";
 import { findInitialModel } from "./model-resolver.js";
+import { mergeProviderAttributionHeaders } from "./provider-attribution.js";
 import { DefaultResourceLoader } from "./resource-loader.js";
 import { getDefaultSessionDir, SessionManager } from "./session-manager.js";
 import { SettingsManager } from "./settings-manager.js";
-import { isInstallTelemetryEnabled } from "./telemetry.js";
 import { time } from "./timings.js";
 import { createBashTool, createCodingTools, createEditTool, createFindTool, createGrepTool, createLsTool, createReadOnlyTools, createReadTool, createWriteTool, withFileMutationQueue, } from "./tools/index.js";
 // Re-exports
@@ -25,31 +25,6 @@ createCodingTools, createReadOnlyTools, createReadTool, createBashTool, createEd
 function getDefaultAgentDir() {
     return getAgentDir();
 }
-function getAttributionHeaders(model, settingsManager, sessionId) {
-    if (sessionId &&
-        (model.provider === "opencode" || model.provider === "opencode-go" || model.baseUrl.includes("opencode.ai"))) {
-        return { "x-opencode-session": sessionId, "x-opencode-client": "pi" };
-    }
-    if (!isInstallTelemetryEnabled(settingsManager)) {
-        return undefined;
-    }
-    if (model.provider === "openrouter" || model.baseUrl.includes("openrouter.ai")) {
-        return {
-            "HTTP-Referer": "https://pi.dev",
-            "X-OpenRouter-Title": "pi",
-            "X-OpenRouter-Categories": "cli-agent",
-        };
-    }
-    if (model.provider === "cloudflare-workers-ai" ||
-        model.provider === "cloudflare-ai-gateway" ||
-        model.baseUrl.includes("api.cloudflare.com") ||
-        model.baseUrl.includes("gateway.ai.cloudflare.com")) {
-        return {
-            "User-Agent": "pi-coding-agent",
-        };
-    }
-    return undefined;
-}
 /**
  * Create an AgentSession with the specified options.
  *
@@ -210,7 +185,6 @@ export async function createAgentSession(options = {}) {
             const effectiveTimeoutMs = httpIdleTimeoutMs === 0 ? 2147483647 : httpIdleTimeoutMs;
             const timeoutMs = options?.timeoutMs ?? providerRetrySettings.timeoutMs ?? effectiveTimeoutMs;
             const websocketConnectTimeoutMs = options?.websocketConnectTimeoutMs ?? settingsManager.getWebSocketConnectTimeoutMs();
-            const attributionHeaders = getAttributionHeaders(model, settingsManager, options?.sessionId);
             return streamSimple(model, context, {
                 ...options,
                 apiKey: auth.apiKey,
@@ -218,9 +192,7 @@ export async function createAgentSession(options = {}) {
                 websocketConnectTimeoutMs,
                 maxRetries: options?.maxRetries ?? providerRetrySettings.maxRetries,
                 maxRetryDelayMs: options?.maxRetryDelayMs ?? providerRetrySettings.maxRetryDelayMs,
-                headers: attributionHeaders || auth.headers || options?.headers
-                    ? { ...attributionHeaders, ...auth.headers, ...options?.headers }
-                    : undefined,
+                headers: mergeProviderAttributionHeaders(model, settingsManager, options?.sessionId, auth.headers, options?.headers),
             });
         },
         onPayload: async (payload, _model) => {

package/node_modules/@earendil-works/pi-coding-agent/dist/core/settings-manager.js

@@ -123,6 +123,7 @@ export class SettingsManager {
     globalSettings;
     projectSettings;
     settings;
+    projectTrusted;
     modifiedFields = new Set(); // Track global fields modified during session
     modifiedNestedFields = new Map(); // Track global nested field modifications
     modifiedProjectFields = new Set(); // Track project fields modified during session
@@ -131,24 +132,26 @@ export class SettingsManager {
     projectSettingsLoadError = null; // Track if project settings file had parse errors
     writeQueue = Promise.resolve();
     errors;
-    constructor(storage, initialGlobal, initialProject, globalLoadError = null, projectLoadError = null, initialErrors = []) {
+    constructor(storage, initialGlobal, initialProject, globalLoadError = null, projectLoadError = null, initialErrors = [], projectTrusted = true) {
         this.storage = storage;
         this.globalSettings = initialGlobal;
         this.projectSettings = initialProject;
+        this.projectTrusted = projectTrusted;
         this.globalSettingsLoadError = globalLoadError;
         this.projectSettingsLoadError = projectLoadError;
         this.errors = [...initialErrors];
         this.settings = deepMergeSettings(this.globalSettings, this.projectSettings);
     }
     /** Create a SettingsManager that loads from files */
-    static create(cwd, agentDir = getAgentDir()) {
+    static create(cwd, agentDir = getAgentDir(), options = {}) {
         const storage = new FileSettingsStorage(cwd, agentDir);
-        return SettingsManager.fromStorage(storage);
+        return SettingsManager.fromStorage(storage, options);
     }
     /** Create a SettingsManager from an arbitrary storage backend */
-    static fromStorage(storage) {
+    static fromStorage(storage, options = {}) {
+        const projectTrusted = options.projectTrusted ?? true;
         const globalLoad = SettingsManager.tryLoadFromStorage(storage, "global");
-        const projectLoad = SettingsManager.tryLoadFromStorage(storage, "project");
+        const projectLoad = SettingsManager.tryLoadFromStorage(storage, "project", projectTrusted);
         const initialErrors = [];
         if (globalLoad.error) {
             initialErrors.push({ scope: "global", error: globalLoad.error });
@@ -156,7 +159,7 @@ export class SettingsManager {
         if (projectLoad.error) {
             initialErrors.push({ scope: "project", error: projectLoad.error });
         }
-        return new SettingsManager(storage, globalLoad.settings, projectLoad.settings, globalLoad.error, projectLoad.error, initialErrors);
+        return new SettingsManager(storage, globalLoad.settings, projectLoad.settings, globalLoad.error, projectLoad.error, initialErrors, projectTrusted);
     }
     /** Create an in-memory SettingsManager (no file I/O) */
     static inMemory(settings = {}) {
@@ -165,7 +168,10 @@ export class SettingsManager {
         storage.withLock("global", () => JSON.stringify(initialSettings, null, 2));
         return SettingsManager.fromStorage(storage);
     }
-    static loadFromStorage(storage, scope) {
+    static loadFromStorage(storage, scope, projectTrusted = true) {
+        if (scope === "project" && !projectTrusted) {
+            return {};
+        }
         let content;
         storage.withLock(scope, (current) => {
             content = current;
@@ -177,9 +183,9 @@ export class SettingsManager {
         const settings = JSON.parse(content);
         return SettingsManager.migrateSettings(settings);
     }
-    static tryLoadFromStorage(storage, scope) {
+    static tryLoadFromStorage(storage, scope, projectTrusted = true) {
         try {
-            return { settings: SettingsManager.loadFromStorage(storage, scope), error: null };
+            return { settings: SettingsManager.loadFromStorage(storage, scope, projectTrusted), error: null };
         }
         catch (error) {
             return { settings: {}, error: error };
@@ -239,6 +245,30 @@ export class SettingsManager {
     getProjectSettings() {
         return structuredClone(this.projectSettings);
     }
+    isProjectTrusted() {
+        return this.projectTrusted;
+    }
+    setProjectTrusted(trusted) {
+        if (this.projectTrusted === trusted) {
+            return;
+        }
+        this.projectTrusted = trusted;
+        this.modifiedProjectFields.clear();
+        this.modifiedProjectNestedFields.clear();
+        if (!trusted) {
+            this.projectSettings = {};
+            this.projectSettingsLoadError = null;
+            this.settings = deepMergeSettings(this.globalSettings, this.projectSettings);
+            return;
+        }
+        const projectLoad = SettingsManager.tryLoadFromStorage(this.storage, "project", trusted);
+        this.projectSettings = projectLoad.settings;
+        this.projectSettingsLoadError = projectLoad.error;
+        if (projectLoad.error) {
+            this.recordError("project", projectLoad.error);
+        }
+        this.settings = deepMergeSettings(this.globalSettings, this.projectSettings);
+    }
     async reload() {
         await this.writeQueue;
         const globalLoad = SettingsManager.tryLoadFromStorage(this.storage, "global");
@@ -254,7 +284,7 @@ export class SettingsManager {
         this.modifiedNestedFields.clear();
         this.modifiedProjectFields.clear();
         this.modifiedProjectNestedFields.clear();
-        const projectLoad = SettingsManager.tryLoadFromStorage(this.storage, "project");
+        const projectLoad = SettingsManager.tryLoadFromStorage(this.storage, "project", this.projectTrusted);
         if (!projectLoad.error) {
             this.projectSettings = projectLoad.settings;
             this.projectSettingsLoadError = null;
@@ -289,6 +319,11 @@ export class SettingsManager {
             this.modifiedProjectNestedFields.get(field).add(nestedKey);
         }
     }
+    assertProjectTrustedForWrite() {
+        if (!this.projectTrusted) {
+            throw new Error("Project is not trusted; refusing to write project settings");
+        }
+    }
     recordError(scope, error) {
         const normalizedError = error instanceof Error ? error : new Error(String(error));
         this.errors.push({ scope, error: normalizedError });
@@ -305,6 +340,9 @@ export class SettingsManager {
     enqueueWrite(scope, task) {
         this.writeQueue = this.writeQueue
             .then(() => {
+            if (scope === "project") {
+                this.assertProjectTrustedForWrite();
+            }
             task();
             this.clearModifiedScope(scope);
         })
@@ -357,6 +395,7 @@ export class SettingsManager {
         });
     }
     saveProjectSettings(settings) {
+        this.assertProjectTrustedForWrite();
         this.projectSettings = structuredClone(settings);
         this.settings = deepMergeSettings(this.globalSettings, this.projectSettings);
         if (this.projectSettingsLoadError) {
@@ -369,6 +408,13 @@ export class SettingsManager {
             this.persistScopedSettings("project", snapshotProjectSettings, modifiedFields, modifiedNestedFields);
         });
     }
+    updateProjectSettings(field, update) {
+        this.assertProjectTrustedForWrite();
+        const projectSettings = structuredClone(this.projectSettings);
+        update(projectSettings);
+        this.markProjectModified(field);
+        this.saveProjectSettings(projectSettings);
+    }
     async flush() {
         await this.writeQueue;
     }
@@ -589,10 +635,9 @@ export class SettingsManager {
         this.save();
     }
     setProjectPackages(packages) {
-        const projectSettings = structuredClone(this.projectSettings);
-        projectSettings.packages = packages;
-        this.markProjectModified("packages");
-        this.saveProjectSettings(projectSettings);
+        this.updateProjectSettings("packages", (settings) => {
+            settings.packages = packages;
+        });
     }
     getExtensionPaths() {
         return [...(this.settings.extensions ?? [])];
@@ -603,10 +648,9 @@ export class SettingsManager {
         this.save();
     }
     setProjectExtensionPaths(paths) {
-        const projectSettings = structuredClone(this.projectSettings);
-        projectSettings.extensions = paths;
-        this.markProjectModified("extensions");
-        this.saveProjectSettings(projectSettings);
+        this.updateProjectSettings("extensions", (settings) => {
+            settings.extensions = paths;
+        });
     }
     getSkillPaths() {
         return [...(this.settings.skills ?? [])];
@@ -617,10 +661,9 @@ export class SettingsManager {
         this.save();
     }
     setProjectSkillPaths(paths) {
-        const projectSettings = structuredClone(this.projectSettings);
-        projectSettings.skills = paths;
-        this.markProjectModified("skills");
-        this.saveProjectSettings(projectSettings);
+        this.updateProjectSettings("skills", (settings) => {
+            settings.skills = paths;
+        });
     }
     getPromptTemplatePaths() {
         return [...(this.settings.prompts ?? [])];
@@ -631,10 +674,9 @@ export class SettingsManager {
         this.save();
     }
     setProjectPromptTemplatePaths(paths) {
-        const projectSettings = structuredClone(this.projectSettings);
-        projectSettings.prompts = paths;
-        this.markProjectModified("prompts");
-        this.saveProjectSettings(projectSettings);
+        this.updateProjectSettings("prompts", (settings) => {
+            settings.prompts = paths;
+        });
     }
     getThemePaths() {
         return [...(this.settings.themes ?? [])];
@@ -645,10 +687,9 @@ export class SettingsManager {
         this.save();
     }
     setProjectThemePaths(paths) {
-        const projectSettings = structuredClone(this.projectSettings);
-        projectSettings.themes = paths;
-        this.markProjectModified("themes");
-        this.saveProjectSettings(projectSettings);
+        this.updateProjectSettings("themes", (settings) => {
+            settings.themes = paths;
+        });
     }
     getEnableSkillCommands() {
         return this.settings.enableSkillCommands ?? true;

package/node_modules/@earendil-works/pi-coding-agent/dist/core/slash-commands.js

@@ -14,6 +14,7 @@ export const BUILTIN_SLASH_COMMANDS = [
     { name: "fork", description: "Create a new fork from a previous user message" },
     { name: "clone", description: "Duplicate the current session at the current position" },
     { name: "tree", description: "Navigate session tree (switch branches)" },
+    { name: "trust", description: "Save project trust decision for future sessions" },
     { name: "login", description: "Configure provider authentication" },
     { name: "logout", description: "Remove provider authentication" },
     { name: "new", description: "Start a new session" },

package/node_modules/@earendil-works/pi-coding-agent/dist/core/tools/bash.js

@@ -145,7 +145,7 @@ function rebuildBashResultRenderComponent(component, result, options, showImages
                     }
                     if (state.cachedSkipped && state.cachedSkipped > 0) {
                         const hint = theme.fg("muted", `... (${state.cachedSkipped} earlier lines,`) +
-                            ` ${keyHint("app.tools.expand", "to expand")})`;
+                            ` ${keyHint("app.tools.expand", "to expand")}${theme.fg("muted", ")")}`;
                         return ["", truncateToWidth(hint, width, "..."), ...(state.cachedLines ?? [])];
                     }
                     return ["", ...(state.cachedLines ?? [])];

package/node_modules/@earendil-works/pi-coding-agent/dist/core/tools/find.js

@@ -50,7 +50,7 @@ function formatFindResult(result, options, theme, showImages) {
         const remaining = lines.length - maxLines;
         text += `\n${displayLines.map((line) => theme.fg("toolOutput", line)).join("\n")}`;
         if (remaining > 0) {
-            text += `${theme.fg("muted", `\n... (${remaining} more lines,`)} ${keyHint("app.tools.expand", "to expand")})`;
+            text += `${theme.fg("muted", `\n... (${remaining} more lines,`)} ${keyHint("app.tools.expand", "to expand")}${theme.fg("muted", ")")}`;
         }
     }
     const resultLimit = result.details?.resultLimitReached;

package/node_modules/@earendil-works/pi-coding-agent/dist/core/tools/grep.js

@@ -51,7 +51,7 @@ function formatGrepResult(result, options, theme, showImages) {
         const remaining = lines.length - maxLines;
         text += `\n${displayLines.map((line) => theme.fg("toolOutput", line)).join("\n")}`;
         if (remaining > 0) {
-            text += `${theme.fg("muted", `\n... (${remaining} more lines,`)} ${keyHint("app.tools.expand", "to expand")})`;
+            text += `${theme.fg("muted", `\n... (${remaining} more lines,`)} ${keyHint("app.tools.expand", "to expand")}${theme.fg("muted", ")")}`;
         }
     }
     const matchLimit = result.details?.matchLimitReached;

package/node_modules/@earendil-works/pi-coding-agent/dist/core/tools/ls.js

@@ -36,7 +36,7 @@ function formatLsResult(result, options, theme, showImages) {
         const remaining = lines.length - maxLines;
         text += `\n${displayLines.map((line) => theme.fg("toolOutput", line)).join("\n")}`;
         if (remaining > 0) {
-            text += `${theme.fg("muted", `\n... (${remaining} more lines,`)} ${keyHint("app.tools.expand", "to expand")})`;
+            text += `${theme.fg("muted", `\n... (${remaining} more lines,`)} ${keyHint("app.tools.expand", "to expand")}${theme.fg("muted", ")")}`;
         }
     }
     const entryLimit = result.details?.entryLimitReached;

package/node_modules/@earendil-works/pi-coding-agent/dist/core/tools/read.js

@@ -111,7 +111,7 @@ function formatReadResult(args, result, options, theme, showImages, _cwd, isErro
     const remaining = lines.length - maxLines;
     let text = `\n${displayLines.map((line) => (lang ? replaceTabs(line) : theme.fg("toolOutput", replaceTabs(line)))).join("\n")}`;
     if (remaining > 0) {
-        text += `${theme.fg("muted", `\n... (${remaining} more lines,`)} ${keyHint("app.tools.expand", "to expand")})`;
+        text += `${theme.fg("muted", `\n... (${remaining} more lines,`)} ${keyHint("app.tools.expand", "to expand")}${theme.fg("muted", ")")}`;
     }
     const truncation = result.details?.truncation;
     if (truncation?.truncated) {

package/node_modules/@earendil-works/pi-coding-agent/dist/core/tools/write.js

@@ -110,7 +110,7 @@ function formatWriteCall(args, options, theme, cache, cwd) {
         const remaining = lines.length - maxLines;
         text += `\n\n${displayLines.map((line) => (lang ? line : theme.fg("toolOutput", replaceTabs(line)))).join("\n")}`;
         if (remaining > 0) {
-            text += `${theme.fg("muted", `\n... (${remaining} more lines, ${totalLines} total,`)} ${keyHint("app.tools.expand", "to expand")})`;
+            text += `${theme.fg("muted", `\n... (${remaining} more lines, ${totalLines} total,`)} ${keyHint("app.tools.expand", "to expand")}${theme.fg("muted", ")")}`;
         }
     }
     return text;

package/node_modules/@earendil-works/pi-coding-agent/dist/core/trust-manager.js

@@ -0,0 +1,130 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import lockfile from "proper-lockfile";
+import { CONFIG_DIR_NAME } from "../config.js";
+import { canonicalizePath, resolvePath } from "../utils/paths.js";
+const CONTEXT_FILE_NAMES = ["AGENTS.md", "AGENTS.MD", "CLAUDE.md", "CLAUDE.MD"];
+function normalizeCwd(cwd) {
+    return canonicalizePath(resolvePath(cwd));
+}
+function readTrustFile(path) {
+    if (!existsSync(path)) {
+        return {};
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(path, "utf-8"));
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`Failed to read trust store ${path}: ${message}`);
+    }
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+        throw new Error(`Invalid trust store ${path}: expected an object`);
+    }
+    const data = {};
+    for (const [key, value] of Object.entries(parsed)) {
+        if (value !== true && value !== false && value !== null) {
+            throw new Error(`Invalid trust store ${path}: value for ${JSON.stringify(key)} must be true, false, or null`);
+        }
+        data[key] = value;
+    }
+    return data;
+}
+function writeTrustFile(path, data) {
+    const sorted = {};
+    for (const key of Object.keys(data).sort()) {
+        const value = data[key];
+        if (value === true || value === false || value === null) {
+            sorted[key] = value;
+        }
+    }
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, `${JSON.stringify(sorted, null, 2)}\n`, "utf-8");
+}
+function acquireTrustLockSync(path) {
+    const trustDir = dirname(path);
+    mkdirSync(trustDir, { recursive: true });
+    const maxAttempts = 10;
+    const delayMs = 20;
+    let lastError;
+    for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+        try {
+            return lockfile.lockSync(trustDir, { realpath: false, lockfilePath: `${path}.lock` });
+        }
+        catch (error) {
+            const code = typeof error === "object" && error !== null && "code" in error
+                ? String(error.code)
+                : undefined;
+            if (code !== "ELOCKED" || attempt === maxAttempts) {
+                throw error;
+            }
+            lastError = error;
+            const start = Date.now();
+            while (Date.now() - start < delayMs) {
+                // Sleep synchronously to avoid changing trust store callers to async.
+            }
+        }
+    }
+    if (lastError instanceof Error) {
+        throw lastError;
+    }
+    throw new Error("Failed to acquire trust store lock");
+}
+function withTrustFileLock(path, fn) {
+    const release = acquireTrustLockSync(path);
+    try {
+        return fn();
+    }
+    finally {
+        release();
+    }
+}
+export function hasProjectTrustInputs(cwd) {
+    let currentDir = canonicalizePath(resolvePath(cwd));
+    if (existsSync(join(currentDir, CONFIG_DIR_NAME))) {
+        return true;
+    }
+    while (true) {
+        for (const filename of CONTEXT_FILE_NAMES) {
+            if (existsSync(join(currentDir, filename))) {
+                return true;
+            }
+        }
+        if (existsSync(join(currentDir, ".agents", "skills"))) {
+            return true;
+        }
+        const parentDir = dirname(currentDir);
+        if (parentDir === currentDir) {
+            return false;
+        }
+        currentDir = parentDir;
+    }
+}
+export class ProjectTrustStore {
+    trustPath;
+    constructor(agentDir) {
+        this.trustPath = join(resolvePath(agentDir), "trust.json");
+    }
+    get(cwd) {
+        return withTrustFileLock(this.trustPath, () => {
+            const data = readTrustFile(this.trustPath);
+            const value = data[normalizeCwd(cwd)];
+            return value === true || value === false ? value : null;
+        });
+    }
+    set(cwd, decision) {
+        withTrustFileLock(this.trustPath, () => {
+            const data = readTrustFile(this.trustPath);
+            const key = normalizeCwd(cwd);
+            if (decision === null) {
+                delete data[key];
+            }
+            else {
+                data[key] = decision;
+            }
+            writeTrustFile(this.trustPath, data);
+        });
+    }
+}
+//# sourceMappingURL=trust-manager.js.map

package/node_modules/@earendil-works/pi-coding-agent/dist/index.js

@@ -26,6 +26,7 @@ export { formatSkillsForPrompt, loadSkills, loadSkillsFromDir, } from "./core/sk
 export { createSyntheticSourceInfo } from "./core/source-info.js";
 // Tools
 export { createBashToolDefinition, createEditToolDefinition, createFindToolDefinition, createGrepToolDefinition, createLocalBashOperations, createLsToolDefinition, createReadToolDefinition, createWriteToolDefinition, DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, formatSize, truncateHead, truncateLine, truncateTail, withFileMutationQueue, } from "./core/tools/index.js";
+export { hasProjectTrustInputs, ProjectTrustStore } from "./core/trust-manager.js";
 // Main entry point
 export { main } from "./main.js";
 // Run modes for programmatic SDK usage