@psnext/slingcli 2.5.20260602-4 → 2.5.20260607-2

package/node_modules/@earendil-works/pi-coding-agent/dist/main.js

@@ -27,6 +27,7 @@ import { formatMissingSessionCwdPrompt, getMissingSessionCwdIssue, MissingSessio
 import { assertValidSessionId, SessionManager } from "./core/session-manager.js";
 import { SettingsManager } from "./core/settings-manager.js";
 import { printTimings, resetTimings, time } from "./core/timings.js";
+import { hasProjectTrustInputs, ProjectTrustStore } from "./core/trust-manager.js";
 import { runMigrations, showDeprecationWarnings } from "./migrations.js";
 import { InteractiveMode, runPrintMode, runRpcMode } from "./modes/index.js";
 import { ExtensionSelectorComponent } from "./modes/interactive/components/extension-selector.js";
@@ -339,7 +340,7 @@ function buildSessionOptions(parsed, scopedModels, hasExistingSession, modelRegi
 function resolveCliPaths(cwd, paths) {
     return paths?.map((value) => (isLocalPath(value) ? resolvePath(value, cwd) : value));
 }
-async function promptForMissingSessionCwd(issue, settingsManager) {
+async function showStartupSelector(settingsManager, title, options) {
     initTheme(settingsManager.getTheme());
     setKeybindings(KeybindingsManager.create());
     return new Promise((resolve) => {
@@ -354,12 +355,49 @@ async function promptForMissingSessionCwd(issue, settingsManager) {
             ui.stop();
             resolve(result);
         };
-        const selector = new ExtensionSelectorComponent(formatMissingSessionCwdPrompt(issue), ["Continue", "Cancel"], (option) => finish(option === "Continue" ? issue.fallbackCwd : undefined), () => finish(undefined), { tui: ui });
+        const selector = new ExtensionSelectorComponent(title, options.map((option) => option.label), (option) => finish(options.find((entry) => entry.label === option)?.value), () => finish(undefined), { tui: ui });
         ui.addChild(selector);
         ui.setFocus(selector);
         ui.start();
     });
 }
+async function promptForMissingSessionCwd(issue, settingsManager) {
+    return showStartupSelector(settingsManager, formatMissingSessionCwdPrompt(issue), [
+        { label: "Continue", value: issue.fallbackCwd },
+        { label: "Cancel", value: undefined },
+    ]);
+}
+async function promptForProjectTrust(cwd, settingsManager) {
+    return showStartupSelector(settingsManager, `Trust project folder?\n${cwd}\n\nThis allows sling to read project instructions (AGENTS.md/CLAUDE.md), load .sling settings and resources, install missing project packages, and execute project extensions.`, [
+        { label: "Trust", value: { trusted: true, remember: true } },
+        { label: "Trust (this session only)", value: { trusted: true, remember: false } },
+        { label: "Do not trust", value: { trusted: false, remember: true } },
+        { label: "Do not trust (this session only)", value: { trusted: false, remember: false } },
+    ]);
+}
+async function resolveProjectTrusted(options) {
+    if (options.trustOverride !== undefined) {
+        return options.trustOverride;
+    }
+    if (!hasProjectTrustInputs(options.cwd)) {
+        return true;
+    }
+    const decision = options.trustStore.get(options.cwd);
+    if (decision !== null) {
+        return decision;
+    }
+    if (options.appMode !== "interactive") {
+        return false;
+    }
+    const selected = await promptForProjectTrust(options.cwd, options.settingsManagerForPrompt);
+    if (selected !== undefined) {
+        if (selected.remember) {
+            options.trustStore.set(options.cwd, selected.trusted);
+        }
+        return selected.trusted;
+    }
+    return false;
+}
 export async function main(args, options) {
     resetTimings();
     const offlineMode = args.includes("--offline") || isTruthyEnvFlag(process.env.PI_OFFLINE);
@@ -456,16 +494,30 @@ export async function main(args, options) {
         sessionManager.appendSessionInfo(name);
     }
     time("createSessionManager");
+    const trustStore = new ProjectTrustStore(agentDir);
+    const trustPromptMode = parsed.help || parsed.listModels !== undefined ? "print" : appMode;
+    const projectTrustedForSession = await resolveProjectTrusted({
+        cwd: sessionManager.getCwd(),
+        trustStore,
+        trustOverride: parsed.projectTrustOverride,
+        appMode: trustPromptMode,
+        settingsManagerForPrompt: startupSettingsManager,
+    });
     const resolvedExtensionPaths = resolveCliPaths(cwd, parsed.extensions);
     const resolvedSkillPaths = resolveCliPaths(cwd, parsed.skills);
     const resolvedPromptTemplatePaths = resolveCliPaths(cwd, parsed.promptTemplates);
     const resolvedThemePaths = resolveCliPaths(cwd, parsed.themes);
     const authStorage = AuthStorage.create();
     const createRuntime = async ({ cwd, agentDir, sessionManager, sessionStartEvent, }) => {
+        const projectTrusted = cwd === sessionManager.getCwd()
+            ? projectTrustedForSession
+            : (parsed.projectTrustOverride ?? (!hasProjectTrustInputs(cwd) || trustStore.get(cwd) === true));
+        const runtimeSettingsManager = SettingsManager.create(cwd, agentDir, { projectTrusted });
         const services = await createAgentSessionServices({
             cwd,
             agentDir,
             authStorage,
+            settingsManager: runtimeSettingsManager,
             extensionFlagValues: parsed.unknownFlags,
             resourceLoaderOptions: {
                 additionalExtensionPaths: resolvedExtensionPaths,

package/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/components/bash-execution.js

@@ -137,10 +137,10 @@ export class BashExecutionComponent extends Container {
             // Show how many lines are hidden (collapsed preview)
             if (hiddenLineCount > 0) {
                 if (this.expanded) {
-                    statusParts.push(`(${keyHint("app.tools.expand", "to collapse")})`);
+                    statusParts.push(`${theme.fg("muted", "(")}${keyHint("app.tools.expand", "to collapse")}${theme.fg("muted", ")")}`);
                 }
                 else {
-                    statusParts.push(`${theme.fg("muted", `... ${hiddenLineCount} more lines`)} (${keyHint("app.tools.expand", "to expand")})`);
+                    statusParts.push(`${theme.fg("muted", `... ${hiddenLineCount} more lines (`)}${keyHint("app.tools.expand", "to expand")}${theme.fg("muted", ")")}`);
                 }
             }
             if (this.status === "cancelled") {

package/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/components/config-selector.js

@@ -41,7 +41,7 @@ function getGroupLabel(metadata) {
                 ? `User (${formatBaseDir(metadata.baseDir)})`
                 : `Project (${formatBaseDir(metadata.baseDir)})`;
         }
-        return metadata.scope === "user" ? "User (~/.sling/agent/)" : "Project (.sling/)";
+        return metadata.scope === "user" ? "User (~/.pi/agent/)" : "Project (.pi/)";
     }
     return metadata.scope === "user" ? "User settings" : "Project settings";
 }

package/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/components/footer.js

@@ -78,6 +78,7 @@ export class FooterComponent {
         let totalCacheRead = 0;
         let totalCacheWrite = 0;
         let totalCost = 0;
+        let latestCacheHitRate;
         for (const entry of this.session.sessionManager.getEntries()) {
             if (entry.type === "message" && entry.message.role === "assistant") {
                 totalInput += entry.message.usage.input;
@@ -85,6 +86,9 @@ export class FooterComponent {
                 totalCacheRead += entry.message.usage.cacheRead;
                 totalCacheWrite += entry.message.usage.cacheWrite;
                 totalCost += entry.message.usage.cost.total;
+                const latestPromptTokens = entry.message.usage.input + entry.message.usage.cacheRead + entry.message.usage.cacheWrite;
+                latestCacheHitRate =
+                    latestPromptTokens > 0 ? (entry.message.usage.cacheRead / latestPromptTokens) * 100 : undefined;
             }
         }
         // Calculate context usage from session (handles compaction correctly).
@@ -115,6 +119,9 @@ export class FooterComponent {
             statsParts.push(`R${formatTokens(totalCacheRead)}`);
         if (totalCacheWrite)
             statsParts.push(`W${formatTokens(totalCacheWrite)}`);
+        if ((totalCacheRead > 0 || totalCacheWrite > 0) && latestCacheHitRate !== undefined) {
+            statsParts.push(`CH${latestCacheHitRate.toFixed(1)}%`);
+        }
         // Show cost with "(sub)" indicator if using OAuth subscription
         const usingSubscription = state.model ? this.session.modelRegistry.isUsingOAuth(state.model) : false;
         if (totalCost || usingSubscription) {

package/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/components/index.js

@@ -27,6 +27,7 @@ export { ThemeSelectorComponent } from "./theme-selector.js";
 export { ThinkingSelectorComponent } from "./thinking-selector.js";
 export { ToolExecutionComponent } from "./tool-execution.js";
 export { TreeSelectorComponent } from "./tree-selector.js";
+export { TrustSelectorComponent } from "./trust-selector.js";
 export { UserMessageComponent } from "./user-message.js";
 export { UserMessageSelectorComponent } from "./user-message-selector.js";
 export { truncateToVisualLines } from "./visual-truncate.js";

package/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/components/login-dialog.js

@@ -1,6 +1,6 @@
 import { getOAuthProviders } from "@earendil-works/pi-ai/oauth";
 import { Container, getKeybindings, Input, Spacer, Text } from "@earendil-works/pi-tui";
-import { exec } from "child_process";
+import { openBrowser } from "../../../utils/open-browser.js";
 import { theme } from "../theme/theme.js";
 import { DynamicBorder } from "./dynamic-border.js";
 import { keyHint } from "./keybinding-hints.js";
@@ -80,7 +80,7 @@ export class LoginDialogComponent extends Container {
             this.contentContainer.addChild(new Spacer(1));
             this.contentContainer.addChild(new Text(theme.fg("warning", instructions), 1, 0));
         }
-        this.openUrl(url);
+        openBrowser(url);
         this.tui.requestRender();
     }
     /**
@@ -96,18 +96,9 @@ export class LoginDialogComponent extends Container {
         this.contentContainer.addChild(new Text(theme.fg("dim", hyperlink), 1, 0));
         this.contentContainer.addChild(new Spacer(1));
         this.contentContainer.addChild(new Text(theme.fg("warning", `Enter code: ${info.userCode}`), 1, 0));
-        this.openUrl(info.verificationUri);
+        openBrowser(info.verificationUri);
         this.tui.requestRender();
     }
-    openUrl(url) {
-        const openCmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
-        try {
-            exec(`${openCmd} "${url}"`, () => { });
-        }
-        catch {
-            // Ignore browser launch failures. The URL remains visible for manual opening/copying.
-        }
-    }
     /**
      * Show input for manual code/URL entry (for callback server providers)
      */

package/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/components/tool-execution.js

@@ -178,6 +178,28 @@ export class ToolExecutionComponent extends Container {
         if (this.hideComponent) {
             return [];
         }
+        if (this.hasRendererDefinition() && this.getRenderShell() === "self") {
+            const contentLines = this.selfRenderContainer.render(width);
+            if (contentLines.length === 0 && this.imageComponents.length === 0) {
+                return [];
+            }
+            const lines = [];
+            if (contentLines.length > 0) {
+                lines.push("");
+                lines.push(...contentLines);
+            }
+            for (let i = 0; i < this.imageComponents.length; i++) {
+                const spacer = this.imageSpacers[i];
+                if (spacer) {
+                    lines.push(...spacer.render(width));
+                }
+                const imageComponent = this.imageComponents[i];
+                if (imageComponent) {
+                    lines.push(...imageComponent.render(width));
+                }
+            }
+            return lines;
+        }
         return super.render(width);
     }
     updateDisplay() {

package/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/components/trust-selector.js

@@ -0,0 +1,86 @@
+import { Container, getKeybindings, Spacer, Text } from "@earendil-works/pi-tui";
+import { theme } from "../theme/theme.js";
+import { DynamicBorder } from "./dynamic-border.js";
+import { keyHint, rawKeyHint } from "./keybinding-hints.js";
+const TRUST_OPTIONS = [
+    { label: "Trust", trusted: true },
+    { label: "Do not trust", trusted: false },
+];
+function formatDecision(decision) {
+    if (decision === true) {
+        return "trusted";
+    }
+    if (decision === false) {
+        return "untrusted";
+    }
+    return "none";
+}
+export class TrustSelectorComponent extends Container {
+    selectedIndex;
+    listContainer;
+    savedDecision;
+    onSelectCallback;
+    onCancelCallback;
+    constructor(options) {
+        super();
+        this.savedDecision = options.savedDecision;
+        this.selectedIndex = Math.max(0, TRUST_OPTIONS.findIndex((option) => option.trusted === options.savedDecision));
+        this.onSelectCallback = options.onSelect;
+        this.onCancelCallback = options.onCancel;
+        this.addChild(new DynamicBorder());
+        this.addChild(new Spacer(1));
+        this.addChild(new Text(theme.fg("accent", theme.bold("Project trust")), 1, 0));
+        this.addChild(new Text(theme.fg("muted", options.cwd), 1, 0));
+        this.addChild(new Spacer(1));
+        this.addChild(new Text(theme.fg("muted", `Saved decision: ${formatDecision(options.savedDecision)}`), 1, 0));
+        this.addChild(new Text(theme.fg("muted", `Current session: ${options.projectTrusted ? "trusted" : "untrusted"}`), 1, 0));
+        this.addChild(new Spacer(1));
+        this.listContainer = new Container();
+        this.addChild(this.listContainer);
+        this.addChild(new Spacer(1));
+        this.addChild(new Text(rawKeyHint("↑↓", "navigate") +
+            "  " +
+            keyHint("tui.select.confirm", "save") +
+            "  " +
+            keyHint("tui.select.cancel", "cancel"), 1, 0));
+        this.addChild(new Spacer(1));
+        this.addChild(new DynamicBorder());
+        this.updateList();
+    }
+    updateList() {
+        this.listContainer.clear();
+        for (let i = 0; i < TRUST_OPTIONS.length; i++) {
+            const option = TRUST_OPTIONS[i];
+            if (!option) {
+                continue;
+            }
+            const isSelected = i === this.selectedIndex;
+            const isCurrent = option.trusted === this.savedDecision;
+            const checkmark = isCurrent ? theme.fg("success", " ✓") : "";
+            const prefix = isSelected ? theme.fg("accent", "→ ") : "  ";
+            const label = isSelected ? theme.fg("accent", option.label) : theme.fg("text", option.label);
+            this.listContainer.addChild(new Text(`${prefix}${label}${checkmark}`, 1, 0));
+        }
+    }
+    handleInput(keyData) {
+        const kb = getKeybindings();
+        if (kb.matches(keyData, "tui.select.up") || keyData === "k") {
+            this.selectedIndex = Math.max(0, this.selectedIndex - 1);
+            this.updateList();
+        }
+        else if (kb.matches(keyData, "tui.select.down") || keyData === "j") {
+            this.selectedIndex = Math.min(TRUST_OPTIONS.length - 1, this.selectedIndex + 1);
+            this.updateList();
+        }
+        else if (kb.matches(keyData, "tui.select.confirm") || keyData === "\n") {
+            const selected = TRUST_OPTIONS[this.selectedIndex];
+            if (selected) {
+                this.onSelectCallback(selected.trusted);
+            }
+        }
+        else if (kb.matches(keyData, "tui.select.cancel")) {
+            this.onCancelCallback();
+        }
+    }
+}
+//# sourceMappingURL=trust-selector.js.map

package/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/interactive-mode.js

@@ -24,6 +24,7 @@ import { formatMissingSessionCwdPrompt, MissingSessionCwdError } from "../../cor
 import { SessionManager } from "../../core/session-manager.js";
 import { BUILTIN_SLASH_COMMANDS } from "../../core/slash-commands.js";
 import { isInstallTelemetryEnabled } from "../../core/telemetry.js";
+import { hasProjectTrustInputs, ProjectTrustStore } from "../../core/trust-manager.js";
 import { getChangelogPath, getNewEntries, parseChangelog } from "../../utils/changelog.js";
 import { copyToClipboard } from "../../utils/clipboard.js";
 import { extensionForImageMimeType, readClipboardImage } from "../../utils/clipboard-image.js";
@@ -59,6 +60,7 @@ import { SettingsSelectorComponent } from "./components/settings-selector.js";
 import { SkillInvocationMessageComponent } from "./components/skill-invocation-message.js";
 import { ToolExecutionComponent } from "./components/tool-execution.js";
 import { TreeSelectorComponent } from "./components/tree-selector.js";
+import { TrustSelectorComponent } from "./components/trust-selector.js";
 import { UserMessageComponent } from "./components/user-message.js";
 import { UserMessageSelectorComponent } from "./components/user-message-selector.js";
 import { getAvailableThemes, getAvailableThemesWithPaths, getEditorTheme, getMarkdownTheme, getThemeByName, initTheme, onThemeChange, setRegisteredThemes, setTheme, setThemeInstance, stopThemeWatcher, Theme, theme, } from "./theme/theme.js";
@@ -2059,6 +2061,11 @@ export class InteractiveMode {
                 this.editor.setText("");
                 return;
             }
+            if (text === "/trust") {
+                this.showTrustSelector();
+                this.editor.setText("");
+                return;
+            }
             if (text === "/login") {
                 this.showOAuthSelector("login");
                 this.editor.setText("");
@@ -2528,6 +2535,7 @@ export class InteractiveMode {
                         this.chatContainer.addChild(component);
                         // Render user message separately if present
                         if (skillBlock.userMessage) {
+                            this.chatContainer.addChild(new Spacer(1));
                             const userComponent = new UserMessageComponent(skillBlock.userMessage, this.getMarkdownThemeWithSettings());
                             this.chatContainer.addChild(userComponent);
                         }
@@ -2627,6 +2635,7 @@ export class InteractiveMode {
             updateFooter: true,
             populateHistory: true,
         });
+        this.renderProjectTrustWarningIfNeeded();
         // Show compaction info if session was compacted
         const allEntries = this.sessionManager.getEntries();
         const compactionCount = allEntries.filter((e) => e.type === "compaction").length;
@@ -2635,6 +2644,15 @@ export class InteractiveMode {
             this.showStatus(`Session compacted ${times}`);
         }
     }
+    renderProjectTrustWarningIfNeeded() {
+        if (this.settingsManager.isProjectTrusted() || !hasProjectTrustInputs(this.sessionManager.getCwd())) {
+            return;
+        }
+        if (this.chatContainer.children.length > 0) {
+            this.chatContainer.addChild(new Spacer(1));
+        }
+        this.chatContainer.addChild(new Text(theme.fg("warning", "This project is not trusted. Project instructions (AGENTS.md/CLAUDE.md), .pi resources, and project packages are ignored. Use /trust to save a trust decision, then restart pi."), 1, 0));
+    }
     async getUserInput() {
         const queuedInput = this.pendingUserInputs.shift();
         if (queuedInput !== undefined) {
@@ -3450,6 +3468,28 @@ export class InteractiveMode {
             // Ignore auth lookup failures for warning-only checks.
         }
     }
+    showTrustSelector() {
+        const cwd = this.sessionManager.getCwd();
+        const trustStore = new ProjectTrustStore(this.runtimeHost.services.agentDir);
+        const savedDecision = trustStore.get(cwd);
+        this.showSelector((done) => {
+            const selector = new TrustSelectorComponent({
+                cwd,
+                savedDecision,
+                projectTrusted: this.settingsManager.isProjectTrusted(),
+                onSelect: (trusted) => {
+                    trustStore.set(cwd, trusted);
+                    done();
+                    this.showStatus(`Saved trust decision: ${trusted ? "trusted" : "untrusted"}. Restart pi for this to take effect.`);
+                },
+                onCancel: () => {
+                    done();
+                    this.ui.requestRender();
+                },
+            });
+            return { component: selector, focus: selector };
+        });
+    }
     showModelSelector(initialSearchInput) {
         this.showSelector((done) => {
             const selector = new ModelSelectorComponent(this.ui, this.session.model, this.settingsManager, this.session.modelRegistry, this.session.scopedModels, async (model) => {

package/node_modules/@earendil-works/pi-coding-agent/dist/package-manager-cli.js

@@ -4,6 +4,7 @@ import { selectConfig } from "./cli/config-selector.js";
 import { APP_NAME, detectInstallMethod, getAgentDir, getPackageDir, getSelfUpdateCommand, getSelfUpdateUnavailableInstruction, PACKAGE_NAME, VERSION, } from "./config.js";
 import { DefaultPackageManager } from "./core/package-manager.js";
 import { SettingsManager } from "./core/settings-manager.js";
+import { hasProjectTrustInputs, ProjectTrustStore } from "./core/trust-manager.js";
 import { spawnProcess } from "./utils/child-process.js";
 import { getLatestPiRelease, isNewerPackageVersion } from "./utils/version-check.js";
 import { cleanupWindowsSelfUpdateQuarantine, quarantineWindowsNativeDependencies, } from "./utils/windows-self-update.js";
@@ -35,13 +36,13 @@ function reportSettingsErrors(settingsManager, context) {
 function getPackageCommandUsage(command) {
     switch (command) {
         case "install":
-            return `${APP_NAME} install <source> [-l]`;
+            return `${APP_NAME} install <source> [-l] [--approve|--no-approve]`;
         case "remove":
-            return `${APP_NAME} remove <source> [-l]`;
+            return `${APP_NAME} remove <source> [-l] [--approve|--no-approve]`;
         case "update":
-            return `${APP_NAME} update [source|self|pi] [--self] [--extensions] [--extension <source>] [--force]`;
+            return `${APP_NAME} update [source|self|pi] [--self] [--extensions] [--extension <source>] [--approve|--no-approve] [--force]`;
         case "list":
-            return `${APP_NAME} list`;
+            return `${APP_NAME} list [--approve|--no-approve]`;
     }
 }
 function printPackageCommandHelp(command) {
@@ -53,7 +54,9 @@ function printPackageCommandHelp(command) {
 Install a package and add it to settings.
 
 Options:
-  -l, --local    Install project-locally (.pi/settings.json)
+  -l, --local       Install project-locally (.pi/settings.json)
+  -a, --approve     Trust project-local files for this command
+  -na, --no-approve Ignore project-local files for this command
 
 Examples:
   ${APP_NAME} install npm:@foo/bar
@@ -72,7 +75,9 @@ Remove a package and its source from settings.
 Alias: ${APP_NAME} uninstall <source> [-l]
 
 Options:
-  -l, --local    Remove from project settings (.pi/settings.json)
+  -l, --local       Remove from project settings (.pi/settings.json)
+  -a, --approve     Trust project-local files for this command
+  -na, --no-approve Ignore project-local files for this command
 
 Examples:
   ${APP_NAME} remove npm:@foo/bar
@@ -89,6 +94,8 @@ Options:
   --self                  Update pi only
   --extensions            Update installed packages only
   --extension <source>    Update one package only
+  -a, --approve           Trust project-local files for this command
+  -na, --no-approve       Ignore project-local files for this command
   --force                 Reinstall pi even if the current version is latest
 
 Short forms:
@@ -102,6 +109,10 @@ Short forms:
   ${getPackageCommandUsage("list")}
 
 List installed packages from user and project settings.
+
+Options:
+  -a, --approve      Trust project-local files for this command
+  -na, --no-approve  Ignore project-local files for this command
 `);
             return;
     }
@@ -120,6 +131,7 @@ function parsePackageCommand(args) {
     }
     let local = false;
     let force = false;
+    let projectTrustOverride;
     let help = false;
     let invalidOption;
     let invalidArgument;
@@ -162,6 +174,14 @@ function parsePackageCommand(args) {
             }
             continue;
         }
+        if (arg === "--approve" || arg === "-a") {
+            projectTrustOverride = true;
+            continue;
+        }
+        if (arg === "--no-approve" || arg === "-na") {
+            projectTrustOverride = false;
+            continue;
+        }
         if (arg === "--force") {
             if (command === "update") {
                 force = true;
@@ -244,6 +264,7 @@ function parsePackageCommand(args) {
         updateTarget,
         local,
         force,
+        projectTrustOverride,
         help,
         invalidOption,
         invalidArgument,
@@ -337,13 +358,32 @@ function prepareWindowsNpmSelfUpdate() {
     cleanupWindowsSelfUpdateQuarantine(packageDir);
     quarantineWindowsNativeDependencies(packageDir);
 }
+function parseProjectTrustOverride(args) {
+    let trustOverride;
+    for (const arg of args) {
+        if (arg === "--approve" || arg === "-a") {
+            trustOverride = true;
+        }
+        else if (arg === "--no-approve" || arg === "-na") {
+            trustOverride = false;
+        }
+    }
+    return trustOverride;
+}
+function resolveProjectTrusted(cwd, agentDir, trustOverride) {
+    if (trustOverride !== undefined) {
+        return trustOverride;
+    }
+    return !hasProjectTrustInputs(cwd) || new ProjectTrustStore(agentDir).get(cwd) === true;
+}
 export async function handleConfigCommand(args) {
     if (args[0] !== "config") {
         return false;
     }
     const cwd = process.cwd();
     const agentDir = getAgentDir();
-    const settingsManager = SettingsManager.create(cwd, agentDir);
+    const projectTrusted = parseProjectTrustOverride(args) ?? true;
+    const settingsManager = SettingsManager.create(cwd, agentDir, { projectTrusted });
     reportSettingsErrors(settingsManager, "config command");
     const packageManager = new DefaultPackageManager({ cwd, agentDir, settingsManager });
     const resolvedPaths = await packageManager.resolve();
@@ -397,7 +437,14 @@ export async function handlePackageCommand(args) {
     }
     const cwd = process.cwd();
     const agentDir = getAgentDir();
-    const settingsManager = SettingsManager.create(cwd, agentDir);
+    const writesProjectPackageConfig = (options.command === "install" || options.command === "remove") && options.local;
+    const projectTrusted = resolveProjectTrusted(cwd, agentDir, options.projectTrustOverride);
+    if (!projectTrusted && writesProjectPackageConfig) {
+        console.error(chalk.red("Project is not trusted. Use --approve to modify local package config."));
+        process.exitCode = 1;
+        return true;
+    }
+    const settingsManager = SettingsManager.create(cwd, agentDir, { projectTrusted });
     reportSettingsErrors(settingsManager, "package command");
     const selfUpdateNpmCommand = settingsManager.getGlobalSettings().npmCommand;
     const packageManager = new DefaultPackageManager({ cwd, agentDir, settingsManager });

package/node_modules/@earendil-works/pi-coding-agent/dist/utils/git.js

@@ -56,6 +56,53 @@ function splitRef(url) {
         ref,
     };
 }
+function decodeForValidation(value) {
+    try {
+        return decodeURIComponent(value);
+    }
+    catch {
+        return null;
+    }
+}
+function hasUnsafeGitInstallPart(value, allowSlash) {
+    const decoded = decodeForValidation(value);
+    if (decoded === null) {
+        return true;
+    }
+    const candidates = [value, decoded];
+    for (const candidate of candidates) {
+        if (candidate.includes("\0") || candidate.includes("\\") || candidate.startsWith("/")) {
+            return true;
+        }
+        if (!allowSlash && candidate.includes("/")) {
+            return true;
+        }
+        if (candidate.split("/").includes("..")) {
+            return true;
+        }
+    }
+    return false;
+}
+function buildGitSource(args) {
+    if (args.path.startsWith("/")) {
+        return null;
+    }
+    const normalizedPath = args.path.replace(/\.git$/, "").replace(/^\/+/, "");
+    if (!args.host || !normalizedPath || normalizedPath.split("/").length < 2) {
+        return null;
+    }
+    if (hasUnsafeGitInstallPart(args.host, false) || hasUnsafeGitInstallPart(normalizedPath, true)) {
+        return null;
+    }
+    return {
+        type: "git",
+        repo: args.repo,
+        host: args.host,
+        path: normalizedPath,
+        ref: args.ref,
+        pinned: Boolean(args.ref),
+    };
+}
 function parseGenericGitUrl(url) {
     const { repo: repoWithoutRef, ref } = splitRef(url);
     let repo = repoWithoutRef;
@@ -91,18 +138,7 @@ function parseGenericGitUrl(url) {
         }
         repo = `https://${repoWithoutRef}`;
     }
-    const normalizedPath = path.replace(/\.git$/, "").replace(/^\/+/, "");
-    if (!host || !normalizedPath || normalizedPath.split("/").length < 2) {
-        return null;
-    }
-    return {
-        type: "git",
-        repo,
-        host,
-        path: normalizedPath,
-        ref,
-        pinned: Boolean(ref),
-    };
+    return buildGitSource({ repo, host, path, ref });
 }
 /**
  * Parse git source into a GitSource.
@@ -131,14 +167,12 @@ export function parseGitUrl(source) {
                 !split.repo.startsWith("ssh://") &&
                 !split.repo.startsWith("git://") &&
                 !split.repo.startsWith("git@");
-            return {
-                type: "git",
+            return buildGitSource({
                 repo: useHttpsPrefix ? `https://${split.repo}` : split.repo,
                 host: info.domain || "",
-                path: `${info.user}/${info.project}`.replace(/\.git$/, ""),
+                path: `${info.user}/${info.project}`,
                 ref: info.committish || split.ref || undefined,
-                pinned: Boolean(info.committish || split.ref),
-            };
+            });
         }
     }
     const httpsCandidates = [split.ref ? `https://${split.repo}#${split.ref}` : undefined, `https://${url}`].filter((value) => Boolean(value));
@@ -148,14 +182,12 @@ export function parseGitUrl(source) {
             if (split.ref && info.project?.includes("@")) {
                 continue;
             }
-            return {
-                type: "git",
+            return buildGitSource({
                 repo: `https://${split.repo}`,
                 host: info.domain || "",
-                path: `${info.user}/${info.project}`.replace(/\.git$/, ""),
+                path: `${info.user}/${info.project}`,
                 ref: info.committish || split.ref || undefined,
-                pinned: Boolean(info.committish || split.ref),
-            };
+            });
         }
     }
     return parseGenericGitUrl(url);