@wrongstack/cli 1.1.1 → 1.1.4

package/dist/{auth-ANOVZVHE.js → auth-IHQS6AFW.js}

@@ -20,7 +20,7 @@ import {
   runOAuthLoginKind,
   runOAuthLoginMenu,
   validateFamily
-} from "./chunk-RAWHRRUJ.js";
+} from "./chunk-I5LJLKA3.js";
 import {
   renderAuthLocalHelpToString,
   wantsLocalHelp
@@ -48,18 +48,9 @@ import {
 import "./chunk-W23PY4IJ.js";
 
 // src/subcommands/handlers/auth.ts
-import { color as color6 } from "@wrongstack/core/utils";
+import { color as color5 } from "@wrongstack/core/utils";
 import { authProfileAliasError as authProfileAliasError2 } from "@wrongstack/providers";
-
-// src/auth-menu/anthropic-oauth.ts
-import {
-  FetchError,
-  ParseError
-} from "@wrongstack/core/types";
-import { color } from "@wrongstack/core/utils";
-var REDIRECT_PORT = 53692;
-var REDIRECT_PATH = "/callback";
-var REDIRECT_URI = `http://localhost:${REDIRECT_PORT}${REDIRECT_PATH}`;
+import { retiredProviderAuthLoginHint } from "@wrongstack/providers/oauth";
 
 // src/auth-menu/direct.ts
 import { authProfileAliasError } from "@wrongstack/providers";
@@ -142,16 +133,16 @@ async function runAuthDirect(deps, opts) {
 
 // src/auth-menu/github-copilot-oauth.ts
 import {
-  FetchError as FetchError2,
-  ParseError as ParseError2
+  FetchError,
+  ParseError
 } from "@wrongstack/core/types";
-import { color as color2 } from "@wrongstack/core/utils";
+import { color } from "@wrongstack/core/utils";
 import { copilotBaseUrlFromToken, refreshCopilotToken } from "@wrongstack/providers";
 import { fetchCopilotModels as fetchAccountCopilotModels } from "@wrongstack/providers/oauth";
 import { isUsableCopilotChatModel } from "@wrongstack/providers/oauth";
 
 // src/auth-menu/openai-codex-oauth.ts
-import { color as color3 } from "@wrongstack/core/utils";
+import { color as color2 } from "@wrongstack/core/utils";
 import {
   buildCodexAuthorizeUrl,
   CODEX_BASE_URL,
@@ -187,10 +178,10 @@ import {
 } from "@wrongstack/providers/oauth";
 
 // src/auth-menu/top-menu.ts
-import { color as color5 } from "@wrongstack/core/utils";
+import { color as color4 } from "@wrongstack/core/utils";
 
 // src/auth-menu/provider-menu.ts
-import { color as color4, expectDefined } from "@wrongstack/core/utils";
+import { color as color3, expectDefined } from "@wrongstack/core/utils";
 async function manageProvider(providerId, deps) {
   for (; ; ) {
     const providers = await loadProviders(deps);
@@ -203,7 +194,7 @@ async function manageProvider(providerId, deps) {
     renderProviderHeader(deps.renderer, providerId, cfg);
     renderActions(deps.renderer, keys.length);
     const raw = (await deps.reader.readLine(`
-${color4.amber("?")} ${providerId} > `)).trim();
+${color3.amber("?")} ${providerId} > `)).trim();
     if (!raw || raw === "b" || raw === "back" || raw === "q" || raw === "quit") {
       return;
     }
@@ -234,7 +225,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
         },
         deps.profileConfigPath
       );
-      deps.renderer.write(`  ${color4.green("\u2713")} Removed ${providerId}.
+      deps.renderer.write(`  ${color3.green("\u2713")} Removed ${providerId}.
 `);
       return "exit";
     }
@@ -258,7 +249,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
       },
       deps.profileConfigPath
     );
-    deps.renderer.write(`  ${color4.green("\u2713")} Updated ${providerId}/${target.label}.
+    deps.renderer.write(`  ${color3.green("\u2713")} Updated ${providerId}/${target.label}.
 `);
     return "continue";
   }
@@ -285,7 +276,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
       },
       deps.profileConfigPath
     );
-    deps.renderer.write(`  ${color4.green("\u2713")} Deleted ${providerId}/${target.label}.
+    deps.renderer.write(`  ${color3.green("\u2713")} Deleted ${providerId}/${target.label}.
 `);
     return "continue";
   }
@@ -304,14 +295,14 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
       },
       deps.profileConfigPath
     );
-    deps.renderer.write(`  ${color4.green("\u2713")} Active key \u2192 ${color4.bold(target.label)}.
+    deps.renderer.write(`  ${color3.green("\u2713")} Active key \u2192 ${color3.bold(target.label)}.
 `);
     return "continue";
   }
   if (verb === "f" || verb === "family") {
     const current = cfg.family ?? "";
     const ans = (await deps.reader.readLine(
-      `  ${color4.amber("?")} Family ${color4.dim(`(anthropic | openai | openai-compatible | google, empty = unset, current: ${current || "unset"})`)}: `
+      `  ${color3.amber("?")} Family ${color3.dim(`(anthropic | openai | openai-compatible | google, empty = unset, current: ${current || "unset"})`)}: `
     )).trim();
     if (ans !== "") {
       const validated = validateFamily(ans);
@@ -331,7 +322,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
         },
         deps.profileConfigPath
       );
-      deps.renderer.write(`  ${color4.green("\u2713")} family \u2192 ${validated}
+      deps.renderer.write(`  ${color3.green("\u2713")} family \u2192 ${validated}
 `);
     } else {
       await mutateConfigProviders(
@@ -344,7 +335,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
         },
         deps.profileConfigPath
       );
-      deps.renderer.write(`  ${color4.green("\u2713")} family \u2192 (unset)
+      deps.renderer.write(`  ${color3.green("\u2713")} family \u2192 (unset)
 `);
     }
     return "continue";
@@ -352,7 +343,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
   if (verb === "B" || verb === "baseurl" || verb === "base-url" || verb === "url") {
     const current = cfg.baseUrl ?? "";
     const ans = (await deps.reader.readLine(
-      `  ${color4.amber("?")} Base URL ${color4.dim(`(empty = unset, current: ${current || "unset"})`)}: `
+      `  ${color3.amber("?")} Base URL ${color3.dim(`(empty = unset, current: ${current || "unset"})`)}: `
     )).trim();
     await mutateConfigProviders(
       deps.profileConfigPath,
@@ -365,14 +356,14 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
       },
       deps.profileConfigPath
     );
-    deps.renderer.write(`  ${color4.green("\u2713")} baseUrl \u2192 ${ans || "(unset)"}
+    deps.renderer.write(`  ${color3.green("\u2713")} baseUrl \u2192 ${ans || "(unset)"}
 `);
     return "continue";
   }
   if (verb === "m" || verb === "models") {
     const current = (cfg.models ?? []).join(", ");
     const ans = (await deps.reader.readLine(
-      `  ${color4.amber("?")} Model ids ${color4.dim(`(comma-separated, empty = catalog default, current: ${current || "none"})`)}: `
+      `  ${color3.amber("?")} Model ids ${color3.dim(`(comma-separated, empty = catalog default, current: ${current || "none"})`)}: `
     )).trim();
     const list = ans ? ans.split(",").map((s) => s.trim()).filter(Boolean) : [];
     await mutateConfigProviders(
@@ -387,7 +378,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
       deps.profileConfigPath
     );
     deps.renderer.write(
-      `  ${color4.green("\u2713")} models \u2192 ${list.length === 0 ? "(catalog default)" : list.join(", ")}
+      `  ${color3.green("\u2713")} models \u2192 ${list.length === 0 ? "(catalog default)" : list.join(", ")}
 `
     );
     return "continue";
@@ -410,9 +401,9 @@ async function runTopMenu(deps) {
     renderTopMenu(deps.renderer, providers);
     const ids = Object.keys(providers).sort();
     const choice = (await deps.reader.readLine(`
-${color5.amber("?")} Pick: `)).trim().toLowerCase();
+${color4.amber("?")} Pick: `)).trim().toLowerCase();
     if (!choice || choice === "q" || choice === "quit" || choice === "exit") {
-      deps.renderer.write(color5.dim("Done.\n"));
+      deps.renderer.write(color4.dim("Done.\n"));
       return 0;
     }
     if (choice === "a" || choice === "add") {
@@ -589,17 +580,22 @@ var authCmd = async (args, deps) => {
   if (first === "login") {
     const pid = (flags.positional[1] ?? "").toLowerCase();
     if (!pid) return runOAuthLoginKind(menuDeps, "chatgpt", { providerId: flags.alias });
+    const retiredHint = retiredProviderAuthLoginHint(pid);
+    if (retiredHint) {
+      deps.renderer.writeError(retiredHint);
+      return 1;
+    }
     const kind = resolveOAuthKind(pid, { allowNumeric: false, deps: menuDeps });
     if (kind) return runOAuthLoginKind(menuDeps, kind, { providerId: flags.alias });
     const available = providerAuthStrategiesFor(menuDeps);
     deps.renderer.writeError(`Unknown OAuth login strategy "${pid}".`);
     for (const strategy of available) {
       deps.renderer.write(
-        color6.dim(`  Sign in with ${strategy.label}: `) + color6.bold(`wstack auth login ${strategy.id}`) + "\n"
+        color5.dim(`  Sign in with ${strategy.label}: `) + color5.bold(`wstack auth login ${strategy.id}`) + "\n"
       );
     }
     deps.renderer.write(
-      color6.dim("  For an API key instead: ") + color6.bold(`wstack auth ${pid}`) + "\n"
+      color5.dim("  For an API key instead: ") + color5.bold(`wstack auth ${pid}`) + "\n"
     );
     return 1;
   }
@@ -623,14 +619,14 @@ async function runAuthList(deps) {
   const ids = Object.keys(providers).sort();
   if (ids.length === 0) {
     deps.renderer.write(
-      `${color6.dim("No providers configured.")}
-${color6.dim("Run")} ${color6.bold("wstack auth")} ${color6.dim("to add one.")}
+      `${color5.dim("No providers configured.")}
+${color5.dim("Run")} ${color5.bold("wstack auth")} ${color5.dim("to add one.")}
 `
     );
     return 0;
   }
   deps.renderer.write(`
-${color6.bold("Saved providers")} ${color6.dim(`(${ids.length})`)}
+${color5.bold("Saved providers")} ${color5.dim(`(${ids.length})`)}
 
 `);
   for (const id of ids) {
@@ -638,34 +634,34 @@ ${color6.bold("Saved providers")} ${color6.dim(`(${ids.length})`)}
     if (!cfg) continue;
     const keys = normalizeKeys(cfg);
     const active = cfg.activeKey ?? keys[0]?.label;
-    const famTag = cfg.family ? `${cfg.family}` : color6.amber("no-family");
-    const aliasHint = cfg.type && cfg.type !== id ? color6.dim(` (\u2192 ${cfg.type})`) : "";
-    const modelHint = cfg.models && cfg.models.length > 0 ? color6.dim(` [${cfg.models.length} models]`) : "";
-    deps.renderer.write(`  ${color6.bold(id)}${aliasHint}
+    const famTag = cfg.family ? `${cfg.family}` : color5.amber("no-family");
+    const aliasHint = cfg.type && cfg.type !== id ? color5.dim(` (\u2192 ${cfg.type})`) : "";
+    const modelHint = cfg.models && cfg.models.length > 0 ? color5.dim(` [${cfg.models.length} models]`) : "";
+    deps.renderer.write(`  ${color5.bold(id)}${aliasHint}
 `);
     deps.renderer.write(
-      `    family:  ${famTag}  baseUrl: ${cfg.baseUrl ?? color6.dim("unset")}${modelHint}
+      `    family:  ${famTag}  baseUrl: ${cfg.baseUrl ?? color5.dim("unset")}${modelHint}
 `
     );
     if (keys.length === 0) {
-      deps.renderer.write(`    ${color6.amber("no keys")}
+      deps.renderer.write(`    ${color5.amber("no keys")}
 `);
     } else {
       deps.renderer.write(
-        `    ${color6.dim(`${keys.length} key${keys.length === 1 ? "" : "s"}:`)}
+        `    ${color5.dim(`${keys.length} key${keys.length === 1 ? "" : "s"}:`)}
 `
       );
       for (const k of keys) {
-        const marker = k.label === active ? color6.green("\u25CF") : color6.dim("\u25CB");
+        const marker = k.label === active ? color5.green("\u25CF") : color5.dim("\u25CB");
         deps.renderer.write(
-          `      ${marker} ${k.label.padEnd(18)} ${maskedKey(k.apiKey)}  ${color6.dim(k.createdAt)}
+          `      ${marker} ${k.label.padEnd(18)} ${maskedKey(k.apiKey)}  ${color5.dim(k.createdAt)}
 `
         );
       }
     }
     deps.renderer.write("\n");
   }
-  deps.renderer.write(color6.dim(`Manage: wstack auth   Add key: wstack auth <provider>
+  deps.renderer.write(color5.dim(`Manage: wstack auth   Add key: wstack auth <provider>
 `));
   return 0;
 }
@@ -681,7 +677,7 @@ async function runAuthStatus(deps, providerId) {
   if (!cfg) {
     deps.renderer.writeError(`Provider "${providerId}" not found in config.`);
     deps.renderer.write(
-      color6.dim(`Run ${color6.bold("wstack auth list")} to see saved providers.
+      color5.dim(`Run ${color5.bold("wstack auth list")} to see saved providers.
 `)
     );
     return 1;
@@ -690,32 +686,32 @@ async function runAuthStatus(deps, providerId) {
   const active = cfg.activeKey ?? keys[0]?.label;
   const lines = [
     `
-${color6.bold(providerId)} ${cfg.family ? color6.dim(`[${cfg.family}]`) : color6.amber("[no family]")}`,
+${color5.bold(providerId)} ${cfg.family ? color5.dim(`[${cfg.family}]`) : color5.amber("[no family]")}`,
     "",
-    `  type:    ${color6.cyan(cfg.type ?? providerId)}`,
-    `  family:  ${cfg.family ? color6.cyan(cfg.family) : color6.dim("unset")}`,
-    `  baseUrl: ${cfg.baseUrl ? color6.cyan(cfg.baseUrl) : color6.dim("unset")}`
+    `  type:    ${color5.cyan(cfg.type ?? providerId)}`,
+    `  family:  ${cfg.family ? color5.cyan(cfg.family) : color5.dim("unset")}`,
+    `  baseUrl: ${cfg.baseUrl ? color5.cyan(cfg.baseUrl) : color5.dim("unset")}`
   ];
   if (cfg.models?.length) {
-    lines.push(`  models:  ${color6.cyan(cfg.models.join(", "))}`);
+    lines.push(`  models:  ${color5.cyan(cfg.models.join(", "))}`);
   }
   if (cfg.envVars?.length) {
-    lines.push(`  envVars: ${color6.cyan(cfg.envVars.join(", "))}`);
+    lines.push(`  envVars: ${color5.cyan(cfg.envVars.join(", "))}`);
   }
   lines.push("");
   if (keys.length === 0) {
-    lines.push(color6.amber("  (no keys saved)"));
+    lines.push(color5.amber("  (no keys saved)"));
   } else {
-    lines.push(`  ${color6.dim("Keys:")}`);
+    lines.push(`  ${color5.dim("Keys:")}`);
     for (const k of keys) {
-      const marker = k.label === active ? color6.green("\u25CF") : color6.dim("\u25CB");
+      const marker = k.label === active ? color5.green("\u25CF") : color5.dim("\u25CB");
       lines.push(
-        `    ${marker} ${color6.bold(k.label.padEnd(18))} ${maskedKey(k.apiKey)}  ${color6.dim(k.createdAt)}`
+        `    ${marker} ${color5.bold(k.label.padEnd(18))} ${maskedKey(k.apiKey)}  ${color5.dim(k.createdAt)}`
       );
     }
   }
   lines.push("");
-  lines.push(color6.dim(`Manage: wstack auth \u2192 pick ${providerId}`));
+  lines.push(color5.dim(`Manage: wstack auth \u2192 pick ${providerId}`));
   deps.renderer.write(lines.join("\n") + "\n");
   return 0;
 }
@@ -726,19 +722,19 @@ async function runAuthRemove(deps, providerId) {
     return 1;
   }
   deps.renderer.write(
-    `${color6.amber("!")} This will remove "${providerId}" and all its saved keys.
+    `${color5.amber("!")} This will remove "${providerId}" and all its saved keys.
 `
   );
-  const answer = (await deps.reader.readLine(`  ${color6.amber("?")} Confirm removal? ${color6.dim("[y/N]")} `)).trim().toLowerCase();
+  const answer = (await deps.reader.readLine(`  ${color5.amber("?")} Confirm removal? ${color5.dim("[y/N]")} `)).trim().toLowerCase();
   if (answer !== "y" && answer !== "yes") {
-    deps.renderer.write(color6.dim("Cancelled.\n"));
+    deps.renderer.write(color5.dim("Cancelled.\n"));
     return 0;
   }
   try {
     await mutateConfigProviders(deps.profileConfigPath, deps.vault, (all) => {
       delete all[providerId];
     });
-    deps.renderer.write(`  ${color6.green("\u2713")} Removed ${color6.bold(providerId)}.
+    deps.renderer.write(`  ${color5.green("\u2713")} Removed ${color5.bold(providerId)}.
 `);
     return 0;
   } catch (err) {
@@ -749,4 +745,4 @@ async function runAuthRemove(deps, providerId) {
 export {
   authCmd
 };
-//# sourceMappingURL=auth-ANOVZVHE.js.map
+//# sourceMappingURL=auth-IHQS6AFW.js.map

package/dist/auth-menu/index.d.ts

@@ -1,10 +1,9 @@
-export { CLAUDE_PROVIDER_ID, type ClaudeLoginOptions, type ClaudeTokens, runClaudeOAuthLogin, } from './anthropic-oauth.js';
 export { runAuthDirect } from './direct.js';
-export { providerAuthRegistryFor, providerAuthStrategiesFor, runProviderAuthLogin, } from './provider-auth-login.js';
 export { COPILOT_PROVIDER_ID, type CopilotLoginOptions, runCopilotOAuthLogin, } from './github-copilot-oauth.js';
 export { LOCAL_LLM_PRESETS, type LocalLlmPresetEntry, type ProbeOptions, type ProbeResult, probeLocalLlm, type RunAuthLocalOptions, resolveModelList, runAuthLocal, } from './local.js';
 export { type OAuthMenuKind, resolveOAuthKind, runOAuthLoginChoice, runOAuthLoginKind, runOAuthLoginMenu, } from './oauth-menu.js';
 export { CODEX_BASE_URL, CODEX_CATALOG_FAMILIES, CODEX_PROVIDER_ID, type CodexLoginOptions, type CodexTokens, extractAccountId, FALLBACK_CODEX_MODELS, fallbackCodexModelIds, fallbackCodexProviderModels, fetchCodexModels, filterCurrentCodexModelIds, isCodexCatalogModel, refreshCodexToken, resolveCodexModels, runCodexOAuthLogin, } from './openai-codex-oauth.js';
+export { providerAuthRegistryFor, providerAuthStrategiesFor, runProviderAuthLogin, } from './provider-auth-login.js';
 export { runTopMenu as runAuthMenu } from './top-menu.js';
 export type { AuthMenuDeps } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/boot/dispatch-webui.d.ts

@@ -1,3 +1,19 @@
+/**
+ * WebUI dispatch — extracted from the tail of `execute()`.
+ *
+ * PR 6 of Issue #29 (partial). The TUI-vs-REPL-vs-WebUI fork at the
+ * end of `execute()` is a ~1,600-line `if/else if/else if/else`
+ * chain. The WebUI branch is the most self-contained of the four: it
+ * constructs a `runWebUI` options object from already-available deps,
+ * wires SIGINT handling, and returns an exit code. Extracting it
+ * first lets `execute()` shrink by ~100 lines and isolates the
+ * WebUI-specific wiring (port resolution, browser banner and autonomy
+ * forwarding) in a single named module.
+ *
+ * The TUI branch (~1,388 lines) and the single-shot branch are left
+ * inline — they are too deeply coupled to local mutable state for a
+ * single-PR extraction.
+ */
 import type { Agent } from '@wrongstack/core/agent';
 import type { BrainArbiter } from '@wrongstack/core/coordination';
 import type { JournalEntry } from '@wrongstack/core/goal';

package/dist/{chunk-GRAGMA4B.js → chunk-2LTHDKZX.js}

@@ -3,9 +3,9 @@
 var loaders = {
   automation: async () => (await import("./automation-O7ZRZSFS.js")).automationCmd,
   sandbox: async () => (await import("./sandbox-EZQ76MNY.js")).sandboxCmd,
-  acp: async () => (await import("./acp-HCGUTFNE.js")).acpCmd,
+  acp: async () => (await import("./acp-MZ5MQBFN.js")).acpCmd,
   init: async () => (await import("./init-5PLABNLR.js")).initCmd,
-  auth: async () => (await import("./auth-ANOVZVHE.js")).authCmd,
+  auth: async () => (await import("./auth-IHQS6AFW.js")).authCmd,
   update: async () => (await import("./update-54W7GUS5.js")).updateCmd,
   remote: async () => (await import("./remote-AKKRJEHK.js")).remoteCmd,
   sessions: async () => (await import("./sessions-config-SJVQXCIE.js")).sessionsCmd,
@@ -21,7 +21,7 @@ var loaders = {
   typesafe: async () => (await import("./typesafe-YBEADNAH.js")).typesafeCmd,
   providers: async () => (await import("./providers-models-CDI5GVBX.js")).providersCmd,
   models: async () => (await import("./providers-models-CDI5GVBX.js")).modelsCmd,
-  mcp: async () => (await import("./mcp-2XWBJEQN.js")).mcpCmd,
+  mcp: async () => (await import("./mcp-W7A5HUXV.js")).mcpCmd,
   plugin: async () => (await import("./plugin-usage-TYF5HY4K.js")).pluginCmd,
   plugins: async () => (await import("./plugin-usage-TYF5HY4K.js")).pluginCmd,
   diag: async () => (await import("./diag-doctor-5SVYK2DR.js")).diagCmd,
@@ -58,4 +58,4 @@ export {
   subcommands,
   subcommandNames
 };
-//# sourceMappingURL=chunk-GRAGMA4B.js.map
+//# sourceMappingURL=chunk-2LTHDKZX.js.map

package/dist/chunk-3LEIFO5D.js

@@ -0,0 +1,65 @@
+
+// src/boot/restricted-mode.ts
+import { lockToProjectRoot, lockYoloOff, ToolCapabilities } from "@wrongstack/core/security";
+var RESTRICTED_ENV = "WRONGSTACK_RESTRICTED";
+var RESTRICTED_DENY_CAPABILITIES = [
+  ToolCapabilities.SHELL_ARBITRARY,
+  ToolCapabilities.SHELL_RESTRICTED,
+  ToolCapabilities.SHELL_EXEC,
+  ToolCapabilities.NET_OUTBOUND,
+  ToolCapabilities.PACKAGE_INSTALL,
+  ToolCapabilities.CONFIG_MUTATE,
+  ToolCapabilities.FS_WRITE_OUTSIDE_PROJECT,
+  ToolCapabilities.TOOL_MUTATE_ANY,
+  ToolCapabilities.MCP_PROXY
+];
+var CONFLICTING_FLAGS = [
+  "yolo",
+  "yolo-plus",
+  "yolo-destructive",
+  "full-auto",
+  "mcp-config",
+  // Pre-approving a tool would let writes skip the prompt this mode promises.
+  "allowed-tools"
+];
+function isRestrictedMode(flags) {
+  return flags["restricted"] === true || process.env[RESTRICTED_ENV] === "1";
+}
+function validateRestrictedMode(flags) {
+  if (!isRestrictedMode(flags)) return false;
+  const conflict = CONFLICTING_FLAGS.find(
+    (name) => flags[name] !== void 0 && flags[name] !== false
+  );
+  if (conflict) throw new Error(`--${conflict} cannot be combined with --restricted`);
+  return true;
+}
+function withRestrictedTools(restriction, restricted) {
+  if (!restricted) return restriction;
+  return {
+    ...restriction?.only ? { only: restriction.only } : {},
+    deny: [...restriction?.deny ?? [], "mcp__*"],
+    denyCapabilities: RESTRICTED_DENY_CAPABILITIES,
+    requireDeclaredCapabilities: true
+  };
+}
+var RESTRICTED_NOTICE = "Restricted mode: no shell, network, installs or MCP tools; files stay inside the project; YOLO is off.";
+var announced = false;
+function activateRestrictedMode(flags, write) {
+  if (!validateRestrictedMode(flags)) return false;
+  lockToProjectRoot();
+  lockYoloOff();
+  process.env[RESTRICTED_ENV] = "1";
+  if (!announced) {
+    announced = true;
+    write(`${RESTRICTED_NOTICE}
+`);
+  }
+  return true;
+}
+
+export {
+  isRestrictedMode,
+  withRestrictedTools,
+  activateRestrictedMode
+};
+//# sourceMappingURL=chunk-3LEIFO5D.js.map