@xelauvas/xela-cli 0.1.0

package/src/components/ManagedSettingsSecurityDialog/ManagedSettingsSecurityDialog.tsx

@@ -0,0 +1,149 @@
+import { c as _c } from "react/compiler-runtime";
+import React from 'react';
+import { useExitOnCtrlCDWithKeybindings } from '../../hooks/useExitOnCtrlCDWithKeybindings.js';
+import { Box, Text } from '../../ink.js';
+import { useKeybinding } from '../../keybindings/useKeybinding.js';
+import type { SettingsJson } from '../../utils/settings/types.js';
+import { Select } from '../CustomSelect/index.js';
+import { PermissionDialog } from '../permissions/PermissionDialog.js';
+import { extractDangerousSettings, formatDangerousSettingsList } from './utils.js';
+type Props = {
+  settings: SettingsJson;
+  onAccept: () => void;
+  onReject: () => void;
+};
+export function ManagedSettingsSecurityDialog(t0) {
+  const $ = _c(26);
+  const {
+    settings,
+    onAccept,
+    onReject
+  } = t0;
+  const dangerous = extractDangerousSettings(settings);
+  const settingsList = formatDangerousSettingsList(dangerous);
+  const exitState = useExitOnCtrlCDWithKeybindings();
+  let t1;
+  if ($[0] === Symbol.for("react.memo_cache_sentinel")) {
+    t1 = {
+      context: "Confirmation"
+    };
+    $[0] = t1;
+  } else {
+    t1 = $[0];
+  }
+  useKeybinding("confirm:no", onReject, t1);
+  let t2;
+  if ($[1] !== onAccept || $[2] !== onReject) {
+    t2 = function onChange(value) {
+      if (value === "exit") {
+        onReject();
+        return;
+      }
+      onAccept();
+    };
+    $[1] = onAccept;
+    $[2] = onReject;
+    $[3] = t2;
+  } else {
+    t2 = $[3];
+  }
+  const onChange = t2;
+  const T0 = PermissionDialog;
+  const t3 = "warning";
+  const t4 = "warning";
+  const t5 = "Managed settings require approval";
+  const T1 = Box;
+  const t6 = "column";
+  const t7 = 1;
+  const t8 = 1;
+  let t9;
+  if ($[4] === Symbol.for("react.memo_cache_sentinel")) {
+    t9 = <Text>Your organization has configured managed settings that could allow execution of arbitrary code or interception of your prompts and responses.</Text>;
+    $[4] = t9;
+  } else {
+    t9 = $[4];
+  }
+  const T2 = Box;
+  const t10 = "column";
+  let t11;
+  if ($[5] === Symbol.for("react.memo_cache_sentinel")) {
+    t11 = <Text dimColor={true}>Settings requiring approval:</Text>;
+    $[5] = t11;
+  } else {
+    t11 = $[5];
+  }
+  const t12 = settingsList.map(_temp);
+  let t13;
+  if ($[6] !== T2 || $[7] !== t11 || $[8] !== t12) {
+    t13 = <T2 flexDirection={t10}>{t11}{t12}</T2>;
+    $[6] = T2;
+    $[7] = t11;
+    $[8] = t12;
+    $[9] = t13;
+  } else {
+    t13 = $[9];
+  }
+  let t14;
+  if ($[10] === Symbol.for("react.memo_cache_sentinel")) {
+    t14 = <Text>Only accept if you trust your organization's IT administration and expect these settings to be configured.</Text>;
+    $[10] = t14;
+  } else {
+    t14 = $[10];
+  }
+  let t15;
+  if ($[11] === Symbol.for("react.memo_cache_sentinel")) {
+    t15 = [{
+      label: "Yes, I trust these settings",
+      value: "accept"
+    }, {
+      label: "No, exit Claude Code",
+      value: "exit"
+    }];
+    $[11] = t15;
+  } else {
+    t15 = $[11];
+  }
+  let t16;
+  if ($[12] !== onChange) {
+    t16 = <Select options={t15} onChange={value_0 => onChange(value_0 as 'accept' | 'exit')} onCancel={() => onChange("exit")} />;
+    $[12] = onChange;
+    $[13] = t16;
+  } else {
+    t16 = $[13];
+  }
+  let t17;
+  if ($[14] !== exitState.keyName || $[15] !== exitState.pending) {
+    t17 = <Text dimColor={true}>{exitState.pending ? <>Press {exitState.keyName} again to exit</> : <>Enter to confirm · Esc to exit</>}</Text>;
+    $[14] = exitState.keyName;
+    $[15] = exitState.pending;
+    $[16] = t17;
+  } else {
+    t17 = $[16];
+  }
+  let t18;
+  if ($[17] !== T1 || $[18] !== t13 || $[19] !== t16 || $[20] !== t17 || $[21] !== t9) {
+    t18 = <T1 flexDirection={t6} gap={t7} paddingTop={t8}>{t9}{t13}{t14}{t16}{t17}</T1>;
+    $[17] = T1;
+    $[18] = t13;
+    $[19] = t16;
+    $[20] = t17;
+    $[21] = t9;
+    $[22] = t18;
+  } else {
+    t18 = $[22];
+  }
+  let t19;
+  if ($[23] !== T0 || $[24] !== t18) {
+    t19 = <T0 color={t3} titleColor={t4} title={t5}>{t18}</T0>;
+    $[23] = T0;
+    $[24] = t18;
+    $[25] = t19;
+  } else {
+    t19 = $[25];
+  }
+  return t19;
+}
+function _temp(item, index) {
+  return <Box key={index} paddingLeft={2}><Text><Text dimColor={true}>· </Text><Text>{item}</Text></Text></Box>;
+}
+//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjozLCJuYW1lcyI6WyJSZWFjdCIsInVzZUV4aXRPbkN0cmxDRFdpdGhLZXliaW5kaW5ncyIsIkJveCIsIlRleHQiLCJ1c2VLZXliaW5kaW5nIiwiU2V0dGluZ3NKc29uIiwiU2VsZWN0IiwiUGVybWlzc2lvbkRpYWxvZyIsImV4dHJhY3REYW5nZXJvdXNTZXR0aW5ncyIsImZvcm1hdERhbmdlcm91c1NldHRpbmdzTGlzdCIsIlByb3BzIiwic2V0dGluZ3MiLCJvbkFjY2VwdCIsIm9uUmVqZWN0IiwiTWFuYWdlZFNldHRpbmdzU2VjdXJpdHlEaWFsb2ciLCJ0MCIsIiQiLCJfYyIsImRhbmdlcm91cyIsInNldHRpbmdzTGlzdCIsImV4aXRTdGF0ZSIsInQxIiwiU3ltYm9sIiwiZm9yIiwiY29udGV4dCIsInQyIiwib25DaGFuZ2UiLCJ2YWx1ZSIsIlQwIiwidDMiLCJ0NCIsInQ1IiwiVDEiLCJ0NiIsInQ3IiwidDgiLCJ0OSIsIlQyIiwidDEwIiwidDExIiwidDEyIiwibWFwIiwiX3RlbXAiLCJ0MTMiLCJ0MTQiLCJ0MTUiLCJsYWJlbCIsInQxNiIsInZhbHVlXzAiLCJ0MTciLCJrZXlOYW1lIiwicGVuZGluZyIsInQxOCIsInQxOSIsIml0ZW0iLCJpbmRleCJdLCJzb3VyY2VzIjpbIk1hbmFnZWRTZXR0aW5nc1NlY3VyaXR5RGlhbG9nLnRzeCJdLCJzb3VyY2VzQ29udGVudCI6WyJpbXBvcnQgUmVhY3QgZnJvbSAncmVhY3QnXG5pbXBvcnQgeyB1c2VFeGl0T25DdHJsQ0RXaXRoS2V5YmluZGluZ3MgfSBmcm9tICcuLi8uLi9ob29rcy91c2VFeGl0T25DdHJsQ0RXaXRoS2V5YmluZGluZ3MuanMnXG5pbXBvcnQgeyBCb3gsIFRleHQgfSBmcm9tICcuLi8uLi9pbmsuanMnXG5pbXBvcnQgeyB1c2VLZXliaW5kaW5nIH0gZnJvbSAnLi4vLi4va2V5YmluZGluZ3MvdXNlS2V5YmluZGluZy5qcydcbmltcG9ydCB0eXBlIHsgU2V0dGluZ3NKc29uIH0gZnJvbSAnLi4vLi4vdXRpbHMvc2V0dGluZ3MvdHlwZXMuanMnXG5pbXBvcnQgeyBTZWxlY3QgfSBmcm9tICcuLi9DdXN0b21TZWxlY3QvaW5kZXguanMnXG5pbXBvcnQgeyBQZXJtaXNzaW9uRGlhbG9nIH0gZnJvbSAnLi4vcGVybWlzc2lvbnMvUGVybWlzc2lvbkRpYWxvZy5qcydcbmltcG9ydCB7XG4gIGV4dHJhY3REYW5nZXJvdXNTZXR0aW5ncyxcbiAgZm9ybWF0RGFuZ2Vyb3VzU2V0dGluZ3NMaXN0LFxufSBmcm9tICcuL3V0aWxzLmpzJ1xuXG50eXBlIFByb3BzID0ge1xuICBzZXR0aW5nczogU2V0dGluZ3NKc29uXG4gIG9uQWNjZXB0OiAoKSA9PiB2b2lkXG4gIG9uUmVqZWN0OiAoKSA9PiB2b2lkXG59XG5cbmV4cG9ydCBmdW5jdGlvbiBNYW5hZ2VkU2V0dGluZ3NTZWN1cml0eURpYWxvZyh7XG4gIHNldHRpbmdzLFxuICBvbkFjY2VwdCxcbiAgb25SZWplY3QsXG59OiBQcm9wcyk6IFJlYWN0LlJlYWN0Tm9kZSB7XG4gIGNvbnN0IGRhbmdlcm91cyA9IGV4dHJhY3REYW5nZXJvdXNTZXR0aW5ncyhzZXR0aW5ncylcbiAgY29uc3Qgc2V0dGluZ3NMaXN0ID0gZm9ybWF0RGFuZ2Vyb3VzU2V0dGluZ3NMaXN0KGRhbmdlcm91cylcblxuICBjb25zdCBleGl0U3RhdGUgPSB1c2VFeGl0T25DdHJsQ0RXaXRoS2V5YmluZGluZ3MoKVxuXG4gIHVzZUtleWJpbmRpbmcoJ2NvbmZpcm06bm8nLCBvblJlamVjdCwgeyBjb250ZXh0OiAnQ29uZmlybWF0aW9uJyB9KVxuXG4gIGZ1bmN0aW9uIG9uQ2hhbmdlKHZhbHVlOiAnYWNjZXB0JyB8ICdleGl0Jyk6IHZvaWQge1xuICAgIGlmICh2YWx1ZSA9PT0gJ2V4aXQnKSB7XG4gICAgICBvblJlamVjdCgpXG4gICAgICByZXR1cm5cbiAgICB9XG4gICAgb25BY2NlcHQoKVxuICB9XG5cbiAgcmV0dXJuIChcbiAgICA8UGVybWlzc2lvbkRpYWxvZ1xuICAgICAgY29sb3I9XCJ3YXJuaW5nXCJcbiAgICAgIHRpdGxlQ29sb3I9XCJ3YXJuaW5nXCJcbiAgICAgIHRpdGxlPVwiTWFuYWdlZCBzZXR0aW5ncyByZXF1aXJlIGFwcHJvdmFsXCJcbiAgICA+XG4gICAgICA8Qm94IGZsZXhEaXJlY3Rpb249XCJjb2x1bW5cIiBnYXA9ezF9IHBhZGRpbmdUb3A9ezF9PlxuICAgICAgICA8VGV4dD5cbiAgICAgICAgICBZb3VyIG9yZ2FuaXphdGlvbiBoYXMgY29uZmlndXJlZCBtYW5hZ2VkIHNldHRpbmdzIHRoYXQgY291bGQgYWxsb3dcbiAgICAgICAgICBleGVjdXRpb24gb2YgYXJiaXRyYXJ5IGNvZGUgb3IgaW50ZXJjZXB0aW9uIG9mIHlvdXIgcHJvbXB0cyBhbmRcbiAgICAgICAgICByZXNwb25zZXMuXG4gICAgICAgIDwvVGV4dD5cblxuICAgICAgICA8Qm94IGZsZXhEaXJlY3Rpb249XCJjb2x1bW5cIj5cbiAgICAgICAgICA8VGV4dCBkaW1Db2xvcj5TZXR0aW5ncyByZXF1aXJpbmcgYXBwcm92YWw6PC9UZXh0PlxuICAgICAgICAgIHtzZXR0aW5nc0xpc3QubWFwKChpdGVtLCBpbmRleCkgPT4gKFxuICAgICAgICAgICAgPEJveCBrZXk9e2luZGV4fSBwYWRkaW5nTGVmdD17Mn0+XG4gICAgICAgICAgICAgIDxUZXh0PlxuICAgICAgICAgICAgICAgIDxUZXh0IGRpbUNvbG9yPsK3IDwvVGV4dD5cbiAgICAgICAgICAgICAgICA8VGV4dD57aXRlbX08L1RleHQ+XG4gICAgICAgICAgICAgIDwvVGV4dD5cbiAgICAgICAgICAgIDwvQm94PlxuICAgICAgICAgICkpfVxuICAgICAgICA8L0JveD5cblxuICAgICAgICA8VGV4dD5cbiAgICAgICAgICBPbmx5IGFjY2VwdCBpZiB5b3UgdHJ1c3QgeW91ciBvcmdhbml6YXRpb24mYXBvcztzIElUIGFkbWluaXN0cmF0aW9uXG4gICAgICAgICAgYW5kIGV4cGVjdCB0aGVzZSBzZXR0aW5ncyB0byBiZSBjb25maWd1cmVkLlxuICAgICAgICA8L1RleHQ+XG5cbiAgICAgICAgPFNlbGVjdFxuICAgICAgICAgIG9wdGlvbnM9e1tcbiAgICAgICAgICAgIHsgbGFiZWw6ICdZZXMsIEkgdHJ1c3QgdGhlc2Ugc2V0dGluZ3MnLCB2YWx1ZTogJ2FjY2VwdCcgfSxcbiAgICAgICAgICAgIHsgbGFiZWw6ICdObywgZXhpdCBDbGF1ZGUgQ29kZScsIHZhbHVlOiAnZXhpdCcgfSxcbiAgICAgICAgICBdfVxuICAgICAgICAgIG9uQ2hhbmdlPXt2YWx1ZSA9PiBvbkNoYW5nZSh2YWx1ZSBhcyAnYWNjZXB0JyB8ICdleGl0Jyl9XG4gICAgICAgICAgb25DYW5jZWw9eygpID0+IG9uQ2hhbmdlKCdleGl0Jyl9XG4gICAgICAgIC8+XG5cbiAgICAgICAgPFRleHQgZGltQ29sb3I+XG4gICAgICAgICAge2V4aXRTdGF0ZS5wZW5kaW5nID8gKFxuICAgICAgICAgICAgPD5QcmVzcyB7ZXhpdFN0YXRlLmtleU5hbWV9IGFnYWluIHRvIGV4aXQ8Lz5cbiAgICAgICAgICApIDogKFxuICAgICAgICAgICAgPD5FbnRlciB0byBjb25maXJtIMK3IEVzYyB0byBleGl0PC8+XG4gICAgICAgICAgKX1cbiAgICAgICAgPC9UZXh0PlxuICAgICAgPC9Cb3g+XG4gICAgPC9QZXJtaXNzaW9uRGlhbG9nPlxuICApXG59XG4iXSwibWFwcGluZ3MiOiI7QUFBQSxPQUFPQSxLQUFLLE1BQU0sT0FBTztBQUN6QixTQUFTQyw4QkFBOEIsUUFBUSwrQ0FBK0M7QUFDOUYsU0FBU0MsR0FBRyxFQUFFQyxJQUFJLFFBQVEsY0FBYztBQUN4QyxTQUFTQyxhQUFhLFFBQVEsb0NBQW9DO0FBQ2xFLGNBQWNDLFlBQVksUUFBUSwrQkFBK0I7QUFDakUsU0FBU0MsTUFBTSxRQUFRLDBCQUEwQjtBQUNqRCxTQUFTQyxnQkFBZ0IsUUFBUSxvQ0FBb0M7QUFDckUsU0FDRUMsd0JBQXdCLEVBQ3hCQywyQkFBMkIsUUFDdEIsWUFBWTtBQUVuQixLQUFLQyxLQUFLLEdBQUc7RUFDWEMsUUFBUSxFQUFFTixZQUFZO0VBQ3RCTyxRQUFRLEVBQUUsR0FBRyxHQUFHLElBQUk7RUFDcEJDLFFBQVEsRUFBRSxHQUFHLEdBQUcsSUFBSTtBQUN0QixDQUFDO0FBRUQsT0FBTyxTQUFBQyw4QkFBQUMsRUFBQTtFQUFBLE1BQUFDLENBQUEsR0FBQUMsRUFBQTtFQUF1QztJQUFBTixRQUFBO0lBQUFDLFFBQUE7SUFBQUM7RUFBQSxJQUFBRSxFQUl0QztFQUNOLE1BQUFHLFNBQUEsR0FBa0JWLHdCQUF3QixDQUFDRyxRQUFRLENBQUM7RUFDcEQsTUFBQVEsWUFBQSxHQUFxQlYsMkJBQTJCLENBQUNTLFNBQVMsQ0FBQztFQUUzRCxNQUFBRSxTQUFBLEdBQWtCbkIsOEJBQThCLENBQUMsQ0FBQztFQUFBLElBQUFvQixFQUFBO0VBQUEsSUFBQUwsQ0FBQSxRQUFBTSxNQUFBLENBQUFDLEdBQUE7SUFFWkYsRUFBQTtNQUFBRyxPQUFBLEVBQVc7SUFBZSxDQUFDO0lBQUFSLENBQUEsTUFBQUssRUFBQTtFQUFBO0lBQUFBLEVBQUEsR0FBQUwsQ0FBQTtFQUFBO0VBQWpFWixhQUFhLENBQUMsWUFBWSxFQUFFUyxRQUFRLEVBQUVRLEVBQTJCLENBQUM7RUFBQSxJQUFBSSxFQUFBO0VBQUEsSUFBQVQsQ0FBQSxRQUFBSixRQUFBLElBQUFJLENBQUEsUUFBQUgsUUFBQTtJQUVsRVksRUFBQSxZQUFBQyxTQUFBQyxLQUFBO01BQ0UsSUFBSUEsS0FBSyxLQUFLLE1BQU07UUFDbEJkLFFBQVEsQ0FBQyxDQUFDO1FBQUE7TUFBQTtNQUdaRCxRQUFRLENBQUMsQ0FBQztJQUFBLENBQ1g7SUFBQUksQ0FBQSxNQUFBSixRQUFBO0lBQUFJLENBQUEsTUFBQUgsUUFBQTtJQUFBRyxDQUFBLE1BQUFTLEVBQUE7RUFBQTtJQUFBQSxFQUFBLEdBQUFULENBQUE7RUFBQTtFQU5ELE1BQUFVLFFBQUEsR0FBQUQsRUFNQztFQUdFLE1BQUFHLEVBQUEsR0FBQXJCLGdCQUFnQjtFQUNULE1BQUFzQixFQUFBLFlBQVM7RUFDSixNQUFBQyxFQUFBLFlBQVM7RUFDZCxNQUFBQyxFQUFBLHNDQUFtQztFQUV4QyxNQUFBQyxFQUFBLEdBQUE5QixHQUFHO0VBQWUsTUFBQStCLEVBQUEsV0FBUTtFQUFNLE1BQUFDLEVBQUEsSUFBQztFQUFjLE1BQUFDLEVBQUEsSUFBQztFQUFBLElBQUFDLEVBQUE7RUFBQSxJQUFBcEIsQ0FBQSxRQUFBTSxNQUFBLENBQUFDLEdBQUE7SUFDL0NhLEVBQUEsSUFBQyxJQUFJLENBQUMsNklBSU4sRUFKQyxJQUFJLENBSUU7SUFBQXBCLENBQUEsTUFBQW9CLEVBQUE7RUFBQTtJQUFBQSxFQUFBLEdBQUFwQixDQUFBO0VBQUE7RUFFTixNQUFBcUIsRUFBQSxHQUFBbkMsR0FBRztFQUFlLE1BQUFvQyxHQUFBLFdBQVE7RUFBQSxJQUFBQyxHQUFBO0VBQUEsSUFBQXZCLENBQUEsUUFBQU0sTUFBQSxDQUFBQyxHQUFBO0lBQ3pCZ0IsR0FBQSxJQUFDLElBQUksQ0FBQyxRQUFRLENBQVIsS0FBTyxDQUFDLENBQUMsNEJBQTRCLEVBQTFDLElBQUksQ0FBNkM7SUFBQXZCLENBQUEsTUFBQXVCLEdBQUE7RUFBQTtJQUFBQSxHQUFBLEdBQUF2QixDQUFBO0VBQUE7RUFDakQsTUFBQXdCLEdBQUEsR0FBQXJCLFlBQVksQ0FBQXNCLEdBQUksQ0FBQ0MsS0FPakIsQ0FBQztFQUFBLElBQUFDLEdBQUE7RUFBQSxJQUFBM0IsQ0FBQSxRQUFBcUIsRUFBQSxJQUFBckIsQ0FBQSxRQUFBdUIsR0FBQSxJQUFBdkIsQ0FBQSxRQUFBd0IsR0FBQTtJQVRKRyxHQUFBLElBQUMsRUFBRyxDQUFlLGFBQVEsQ0FBUixDQUFBTCxHQUFPLENBQUMsQ0FDekIsQ0FBQUMsR0FBaUQsQ0FDaEQsQ0FBQUMsR0FPQSxDQUNILEVBVkMsRUFBRyxDQVVFO0lBQUF4QixDQUFBLE1BQUFxQixFQUFBO0lBQUFyQixDQUFBLE1BQUF1QixHQUFBO0lBQUF2QixDQUFBLE1BQUF3QixHQUFBO0lBQUF4QixDQUFBLE1BQUEyQixHQUFBO0VBQUE7SUFBQUEsR0FBQSxHQUFBM0IsQ0FBQTtFQUFBO0VBQUEsSUFBQTRCLEdBQUE7RUFBQSxJQUFBNUIsQ0FBQSxTQUFBTSxNQUFBLENBQUFDLEdBQUE7SUFFTnFCLEdBQUEsSUFBQyxJQUFJLENBQUMsMEdBR04sRUFIQyxJQUFJLENBR0U7SUFBQTVCLENBQUEsT0FBQTRCLEdBQUE7RUFBQTtJQUFBQSxHQUFBLEdBQUE1QixDQUFBO0VBQUE7RUFBQSxJQUFBNkIsR0FBQTtFQUFBLElBQUE3QixDQUFBLFNBQUFNLE1BQUEsQ0FBQUMsR0FBQTtJQUdJc0IsR0FBQSxJQUNQO01BQUFDLEtBQUEsRUFBUyw2QkFBNkI7TUFBQW5CLEtBQUEsRUFBUztJQUFTLENBQUMsRUFDekQ7TUFBQW1CLEtBQUEsRUFBUyxzQkFBc0I7TUFBQW5CLEtBQUEsRUFBUztJQUFPLENBQUMsQ0FDakQ7SUFBQVgsQ0FBQSxPQUFBNkIsR0FBQTtFQUFBO0lBQUFBLEdBQUEsR0FBQTdCLENBQUE7RUFBQTtFQUFBLElBQUErQixHQUFBO0VBQUEsSUFBQS9CLENBQUEsU0FBQVUsUUFBQTtJQUpIcUIsR0FBQSxJQUFDLE1BQU0sQ0FDSSxPQUdSLENBSFEsQ0FBQUYsR0FHVCxDQUFDLENBQ1MsUUFBNkMsQ0FBN0MsQ0FBQUcsT0FBQSxJQUFTdEIsUUFBUSxDQUFDQyxPQUFLLElBQUksUUFBUSxHQUFHLE1BQU0sRUFBQyxDQUM3QyxRQUFzQixDQUF0QixPQUFNRCxRQUFRLENBQUMsTUFBTSxFQUFDLEdBQ2hDO0lBQUFWLENBQUEsT0FBQVUsUUFBQTtJQUFBVixDQUFBLE9BQUErQixHQUFBO0VBQUE7SUFBQUEsR0FBQSxHQUFBL0IsQ0FBQTtFQUFBO0VBQUEsSUFBQWlDLEdBQUE7RUFBQSxJQUFBakMsQ0FBQSxTQUFBSSxTQUFBLENBQUE4QixPQUFBLElBQUFsQyxDQUFBLFNBQUFJLFNBQUEsQ0FBQStCLE9BQUE7SUFFRkYsR0FBQSxJQUFDLElBQUksQ0FBQyxRQUFRLENBQVIsS0FBTyxDQUFDLENBQ1gsQ0FBQTdCLFNBQVMsQ0FBQStCLE9BSVQsR0FKQSxFQUNHLE1BQU8sQ0FBQS9CLFNBQVMsQ0FBQThCLE9BQU8sQ0FBRSxjQUFjLEdBRzFDLEdBSkEsRUFHRyw4QkFBOEIsR0FDbEMsQ0FDRixFQU5DLElBQUksQ0FNRTtJQUFBbEMsQ0FBQSxPQUFBSSxTQUFBLENBQUE4QixPQUFBO0lBQUFsQyxDQUFBLE9BQUFJLFNBQUEsQ0FBQStCLE9BQUE7SUFBQW5DLENBQUEsT0FBQWlDLEdBQUE7RUFBQTtJQUFBQSxHQUFBLEdBQUFqQyxDQUFBO0VBQUE7RUFBQSxJQUFBb0MsR0FBQTtFQUFBLElBQUFwQyxDQUFBLFNBQUFnQixFQUFBLElBQUFoQixDQUFBLFNBQUEyQixHQUFBLElBQUEzQixDQUFBLFNBQUErQixHQUFBLElBQUEvQixDQUFBLFNBQUFpQyxHQUFBLElBQUFqQyxDQUFBLFNBQUFvQixFQUFBO0lBdkNUZ0IsR0FBQSxJQUFDLEVBQUcsQ0FBZSxhQUFRLENBQVIsQ0FBQW5CLEVBQU8sQ0FBQyxDQUFNLEdBQUMsQ0FBRCxDQUFBQyxFQUFBLENBQUMsQ0FBYyxVQUFDLENBQUQsQ0FBQUMsRUFBQSxDQUFDLENBQy9DLENBQUFDLEVBSU0sQ0FFTixDQUFBTyxHQVVLLENBRUwsQ0FBQUMsR0FHTSxDQUVOLENBQUFHLEdBT0MsQ0FFRCxDQUFBRSxHQU1NLENBQ1IsRUF4Q0MsRUFBRyxDQXdDRTtJQUFBakMsQ0FBQSxPQUFBZ0IsRUFBQTtJQUFBaEIsQ0FBQSxPQUFBMkIsR0FBQTtJQUFBM0IsQ0FBQSxPQUFBK0IsR0FBQTtJQUFBL0IsQ0FBQSxPQUFBaUMsR0FBQTtJQUFBakMsQ0FBQSxPQUFBb0IsRUFBQTtJQUFBcEIsQ0FBQSxPQUFBb0MsR0FBQTtFQUFBO0lBQUFBLEdBQUEsR0FBQXBDLENBQUE7RUFBQTtFQUFBLElBQUFxQyxHQUFBO0VBQUEsSUFBQXJDLENBQUEsU0FBQVksRUFBQSxJQUFBWixDQUFBLFNBQUFvQyxHQUFBO0lBN0NSQyxHQUFBLElBQUMsRUFBZ0IsQ0FDVCxLQUFTLENBQVQsQ0FBQXhCLEVBQVEsQ0FBQyxDQUNKLFVBQVMsQ0FBVCxDQUFBQyxFQUFRLENBQUMsQ0FDZCxLQUFtQyxDQUFuQyxDQUFBQyxFQUFrQyxDQUFDLENBRXpDLENBQUFxQixHQXdDSyxDQUNQLEVBOUNDLEVBQWdCLENBOENFO0lBQUFwQyxDQUFBLE9BQUFZLEVBQUE7SUFBQVosQ0FBQSxPQUFBb0MsR0FBQTtJQUFBcEMsQ0FBQSxPQUFBcUMsR0FBQTtFQUFBO0lBQUFBLEdBQUEsR0FBQXJDLENBQUE7RUFBQTtFQUFBLE9BOUNuQnFDLEdBOENtQjtBQUFBO0FBbkVoQixTQUFBWCxNQUFBWSxJQUFBLEVBQUFDLEtBQUE7RUFBQSxPQW9DSyxDQUFDLEdBQUcsQ0FBTUEsR0FBSyxDQUFMQSxNQUFJLENBQUMsQ0FBZSxXQUFDLENBQUQsR0FBQyxDQUM3QixDQUFDLElBQUksQ0FDSCxDQUFDLElBQUksQ0FBQyxRQUFRLENBQVIsS0FBTyxDQUFDLENBQUMsRUFBRSxFQUFoQixJQUFJLENBQ0wsQ0FBQyxJQUFJLENBQUVELEtBQUcsQ0FBRSxFQUFYLElBQUksQ0FDUCxFQUhDLElBQUksQ0FJUCxFQUxDLEdBQUcsQ0FLRTtBQUFBIiwiaWdub3JlTGlzdCI6W119

package/src/components/ManagedSettingsSecurityDialog/utils.ts

@@ -0,0 +1,144 @@
+import {
+  DANGEROUS_SHELL_SETTINGS,
+  SAFE_ENV_VARS,
+} from '../../utils/managedEnvConstants.js'
+import type { SettingsJson } from '../../utils/settings/types.js'
+import { jsonStringify } from '../../utils/slowOperations.js'
+
+type DangerousShellSetting = (typeof DANGEROUS_SHELL_SETTINGS)[number]
+
+export type DangerousSettings = {
+  shellSettings: Partial<Record<DangerousShellSetting, string>>
+  envVars: Record<string, string>
+  hasHooks: boolean
+  hooks?: unknown
+}
+
+/**
+ * Extract dangerous settings from a settings object.
+ *
+ * Dangerous env vars are determined by checking against SAFE_ENV_VARS -
+ * any env var NOT in SAFE_ENV_VARS is considered dangerous.
+ * See managedEnv.ts for the authoritative list and threat categories.
+ */
+export function extractDangerousSettings(
+  settings: SettingsJson | null | undefined,
+): DangerousSettings {
+  if (!settings) {
+    return {
+      shellSettings: {},
+      envVars: {},
+      hasHooks: false,
+    }
+  }
+
+  // Extract dangerous shell settings
+  const shellSettings: Partial<Record<DangerousShellSetting, string>> = {}
+  for (const key of DANGEROUS_SHELL_SETTINGS) {
+    const value = settings[key]
+    if (typeof value === 'string' && value.length > 0) {
+      shellSettings[key] = value
+    }
+  }
+
+  // Extract dangerous env vars - any var NOT in SAFE_ENV_VARS is dangerous
+  const envVars: Record<string, string> = {}
+  if (settings.env && typeof settings.env === 'object') {
+    for (const [key, value] of Object.entries(settings.env)) {
+      if (typeof value === 'string' && value.length > 0) {
+        // Check if this env var is NOT in the safe list
+        if (!SAFE_ENV_VARS.has(key.toUpperCase())) {
+          envVars[key] = value
+        }
+      }
+    }
+  }
+
+  // Check for hooks
+  const hasHooks =
+    settings.hooks !== undefined &&
+    settings.hooks !== null &&
+    typeof settings.hooks === 'object' &&
+    Object.keys(settings.hooks).length > 0
+
+  return {
+    shellSettings,
+    envVars,
+    hasHooks,
+    hooks: hasHooks ? settings.hooks : undefined,
+  }
+}
+
+/**
+ * Check if settings contain any dangerous settings
+ */
+export function hasDangerousSettings(dangerous: DangerousSettings): boolean {
+  return (
+    Object.keys(dangerous.shellSettings).length > 0 ||
+    Object.keys(dangerous.envVars).length > 0 ||
+    dangerous.hasHooks
+  )
+}
+
+/**
+ * Compare two sets of dangerous settings to see if the new settings
+ * have changed or added dangerous settings compared to the old settings
+ */
+export function hasDangerousSettingsChanged(
+  oldSettings: SettingsJson | null | undefined,
+  newSettings: SettingsJson | null | undefined,
+): boolean {
+  const oldDangerous = extractDangerousSettings(oldSettings)
+  const newDangerous = extractDangerousSettings(newSettings)
+
+  // If new settings don't have any dangerous settings, no prompt needed
+  if (!hasDangerousSettings(newDangerous)) {
+    return false
+  }
+
+  // If old settings didn't have dangerous settings but new does, prompt needed
+  if (!hasDangerousSettings(oldDangerous)) {
+    return true
+  }
+
+  // Compare the dangerous settings - any change triggers a prompt
+  const oldJson = jsonStringify({
+    shellSettings: oldDangerous.shellSettings,
+    envVars: oldDangerous.envVars,
+    hooks: oldDangerous.hooks,
+  })
+  const newJson = jsonStringify({
+    shellSettings: newDangerous.shellSettings,
+    envVars: newDangerous.envVars,
+    hooks: newDangerous.hooks,
+  })
+
+  return oldJson !== newJson
+}
+
+/**
+ * Format dangerous settings as a human-readable list for the UI
+ * Only returns setting names, not values
+ */
+export function formatDangerousSettingsList(
+  dangerous: DangerousSettings,
+): string[] {
+  const items: string[] = []
+
+  // Shell settings (names only)
+  for (const key of Object.keys(dangerous.shellSettings)) {
+    items.push(key)
+  }
+
+  // Env vars (names only)
+  for (const key of Object.keys(dangerous.envVars)) {
+    items.push(key)
+  }
+
+  // Hooks
+  if (dangerous.hasHooks) {
+    items.push('hooks')
+  }
+
+  return items
+}

package/src/components/Markdown.tsx

@@ -0,0 +1,236 @@
+import { c as _c } from "react/compiler-runtime";
+import { marked, type Token, type Tokens } from 'marked';
+import React, { Suspense, use, useMemo, useRef } from 'react';
+import { useSettings } from '../hooks/useSettings.js';
+import { Ansi, Box, useTheme } from '../ink.js';
+import { type CliHighlight, getCliHighlightPromise } from '../utils/cliHighlight.js';
+import { hashContent } from '../utils/hash.js';
+import { configureMarked, formatToken } from '../utils/markdown.js';
+import { stripPromptXMLTags } from '../utils/messages.js';
+import { MarkdownTable } from './MarkdownTable.js';
+type Props = {
+  children: string;
+  /** When true, render all text content as dim */
+  dimColor?: boolean;
+};
+
+// Module-level token cache — marked.lexer is the hot cost on virtual-scroll
+// remounts (~3ms per message). useMemo doesn't survive unmount→remount, so
+// scrolling back to a previously-visible message re-parses. Messages are
+// immutable in history; same content → same tokens. Keyed by hash to avoid
+// retaining full content strings (turn50→turn99 RSS regression, #24180).
+const TOKEN_CACHE_MAX = 500;
+const tokenCache = new Map<string, Token[]>();
+
+// Characters that indicate markdown syntax. If none are present, skip the
+// ~3ms marked.lexer call entirely — render as a single paragraph. Covers
+// the majority of short assistant responses and user prompts that are
+// plain sentences. Checked via indexOf (not regex) for speed.
+// Single regex: matches any MD marker or ordered-list start (N. at line start).
+// One pass instead of 10× includes scans.
+const MD_SYNTAX_RE = /[#*`|[>\-_~]|\n\n|^\d+\. |\n\d+\. /;
+function hasMarkdownSyntax(s: string): boolean {
+  // Sample first 500 chars — if markdown exists it's usually early (headers,
+  // code fence, list). Long tool outputs are mostly plain text tails.
+  return MD_SYNTAX_RE.test(s.length > 500 ? s.slice(0, 500) : s);
+}
+function cachedLexer(content: string): Token[] {
+  // Fast path: plain text with no markdown syntax → single paragraph token.
+  // Skips marked.lexer's full GFM parse (~3ms on long content). Not cached —
+  // reconstruction is a single object allocation, and caching would retain
+  // 4× content in raw/text fields plus the hash key for zero benefit.
+  if (!hasMarkdownSyntax(content)) {
+    return [{
+      type: 'paragraph',
+      raw: content,
+      text: content,
+      tokens: [{
+        type: 'text',
+        raw: content,
+        text: content
+      }]
+    } as Token];
+  }
+  const key = hashContent(content);
+  const hit = tokenCache.get(key);
+  if (hit) {
+    // Promote to MRU — without this the eviction is FIFO (scrolling back to
+    // an early message evicts the very item you're looking at).
+    tokenCache.delete(key);
+    tokenCache.set(key, hit);
+    return hit;
+  }
+  const tokens = marked.lexer(content);
+  if (tokenCache.size >= TOKEN_CACHE_MAX) {
+    // LRU-ish: drop oldest. Map preserves insertion order.
+    const first = tokenCache.keys().next().value;
+    if (first !== undefined) tokenCache.delete(first);
+  }
+  tokenCache.set(key, tokens);
+  return tokens;
+}
+
+/**
+ * Renders markdown content using a hybrid approach:
+ * - Tables are rendered as React components with proper flexbox layout
+ * - Other content is rendered as ANSI strings via formatToken
+ */
+export function Markdown(props) {
+  const $ = _c(4);
+  const settings = useSettings();
+  if (settings.syntaxHighlightingDisabled) {
+    let t0;
+    if ($[0] !== props) {
+      t0 = <MarkdownBody {...props} highlight={null} />;
+      $[0] = props;
+      $[1] = t0;
+    } else {
+      t0 = $[1];
+    }
+    return t0;
+  }
+  let t0;
+  if ($[2] !== props) {
+    t0 = <Suspense fallback={<MarkdownBody {...props} highlight={null} />}><MarkdownWithHighlight {...props} /></Suspense>;
+    $[2] = props;
+    $[3] = t0;
+  } else {
+    t0 = $[3];
+  }
+  return t0;
+}
+function MarkdownWithHighlight(props) {
+  const $ = _c(4);
+  let t0;
+  if ($[0] === Symbol.for("react.memo_cache_sentinel")) {
+    t0 = getCliHighlightPromise();
+    $[0] = t0;
+  } else {
+    t0 = $[0];
+  }
+  const highlight = use(t0);
+  let t1;
+  if ($[1] !== highlight || $[2] !== props) {
+    t1 = <MarkdownBody {...props} highlight={highlight} />;
+    $[1] = highlight;
+    $[2] = props;
+    $[3] = t1;
+  } else {
+    t1 = $[3];
+  }
+  return t1;
+}
+function MarkdownBody(t0) {
+  const $ = _c(7);
+  const {
+    children,
+    dimColor,
+    highlight
+  } = t0;
+  const [theme] = useTheme();
+  configureMarked();
+  let elements;
+  if ($[0] !== children || $[1] !== dimColor || $[2] !== highlight || $[3] !== theme) {
+    const tokens = cachedLexer(stripPromptXMLTags(children));
+    elements = [];
+    let nonTableContent = "";
+    const flushNonTableContent = function flushNonTableContent() {
+      if (nonTableContent) {
+        elements.push(<Ansi key={elements.length} dimColor={dimColor}>{nonTableContent.trim()}</Ansi>);
+        nonTableContent = "";
+      }
+    };
+    for (const token of tokens) {
+      if (token.type === "table") {
+        flushNonTableContent();
+        elements.push(<MarkdownTable key={elements.length} token={token as Tokens.Table} highlight={highlight} />);
+      } else {
+        nonTableContent = nonTableContent + formatToken(token, theme, 0, null, null, highlight);
+        nonTableContent;
+      }
+    }
+    flushNonTableContent();
+    $[0] = children;
+    $[1] = dimColor;
+    $[2] = highlight;
+    $[3] = theme;
+    $[4] = elements;
+  } else {
+    elements = $[4];
+  }
+  const elements_0 = elements;
+  let t1;
+  if ($[5] !== elements_0) {
+    t1 = <Box flexDirection="column" gap={1}>{elements_0}</Box>;
+    $[5] = elements_0;
+    $[6] = t1;
+  } else {
+    t1 = $[6];
+  }
+  return t1;
+}
+type StreamingProps = {
+  children: string;
+};
+
+/**
+ * Renders markdown during streaming by splitting at the last top-level block
+ * boundary: everything before is stable (memoized, never re-parsed), only the
+ * final block is re-parsed per delta. marked.lexer() correctly handles
+ * unclosed code fences as a single token, so block boundaries are always safe.
+ *
+ * The stable boundary only advances (monotonic), so ref mutation during render
+ * is idempotent and safe under StrictMode double-rendering. Component unmounts
+ * between turns (streamingText → null), resetting the ref.
+ */
+export function StreamingMarkdown({
+  children
+}: StreamingProps): React.ReactNode {
+  // React Compiler: this component reads and writes stablePrefixRef.current
+  // during render by design. The boundary only advances (monotonic), so
+  // the ref mutation is idempotent under StrictMode double-render — but the
+  // compiler can't prove that, and memoizing around the ref reads would
+  // break the algorithm (stale boundary). Opt out.
+  'use no memo';
+
+  configureMarked();
+
+  // Strip before boundary tracking so it matches <Markdown>'s stripping
+  // (line 29). When a closing tag arrives, stripped(N+1) is not a prefix
+  // of stripped(N), but the startsWith reset below handles that with a
+  // one-time re-lex on the smaller stripped string.
+  const stripped = stripPromptXMLTags(children);
+  const stablePrefixRef = useRef('');
+
+  // Reset if text was replaced (defensive; normally unmount handles this)
+  if (!stripped.startsWith(stablePrefixRef.current)) {
+    stablePrefixRef.current = '';
+  }
+
+  // Lex only from current boundary — O(unstable length), not O(full text)
+  const boundary = stablePrefixRef.current.length;
+  const tokens = marked.lexer(stripped.substring(boundary));
+
+  // Last non-space token is the growing block; everything before is final
+  let lastContentIdx = tokens.length - 1;
+  while (lastContentIdx >= 0 && tokens[lastContentIdx]!.type === 'space') {
+    lastContentIdx--;
+  }
+  let advance = 0;
+  for (let i = 0; i < lastContentIdx; i++) {
+    advance += tokens[i]!.raw.length;
+  }
+  if (advance > 0) {
+    stablePrefixRef.current = stripped.substring(0, boundary + advance);
+  }
+  const stablePrefix = stablePrefixRef.current;
+  const unstableSuffix = stripped.substring(stablePrefix.length);
+
+  // stablePrefix is memoized inside <Markdown> via useMemo([children, ...])
+  // so it never re-parses as the unstable suffix grows
+  return <Box flexDirection="column" gap={1}>
+      {stablePrefix && <Markdown>{stablePrefix}</Markdown>}
+      {unstableSuffix && <Markdown>{unstableSuffix}</Markdown>}
+    </Box>;
+}
+//# sourceMappingURL=data:application/json;charset=utf-8;base64,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