@ziamana/bruine 0.1.2 → 0.1.3

package/README.md

@@ -11,8 +11,8 @@
 
 [![License: MIT](https://img.shields.io/badge/license-MIT-b4a7ff)](LICENSE)
 [![Node 22+](https://img.shields.io/badge/node-22%2B-7dcfff)](https://nodejs.org)
-![Windows · macOS · Linux](https://img.shields.io/badge/Windows%20%C2%B7%20macOS%20%C2%B7%20Linux-supported-8fe3a3)
-[![Changelog](https://img.shields.io/badge/version-0.1.2-ff9ed2)](CHANGELOG.md)
+![Linux tested · macOS and Windows in progress](https://img.shields.io/badge/Linux-tested-8fe3a3) ![macOS · Windows](https://img.shields.io/badge/macOS%20%C2%B7%20Windows-in%20progress-f5c97a)
+[![Changelog](https://img.shields.io/badge/version-0.1.3-ff9ed2)](CHANGELOG.md)
 
 <a href="docs/media/bruine-film.mp4"><img src="docs/media/hero.webp" alt="The bruine film: the word bruine becomes the logo in the rain, then the effort climbs from low to max and the rain turns into a storm" width="100%"></a>
 
@@ -144,7 +144,7 @@ training), and the offer can end without notice, so keep another model in reach.
 | `/model` and `/provider` | Switch model mid-session from the server's own live catalogue |
 | Skills | Reuses the skills you already wrote for Claude Code, OpenCode, pi or `~/.agents/skills` |
 | Context and speed | A footer that shows context used, tok/s, prefill and cache hit rate |
-| Works on | Windows Terminal, PowerShell, macOS Terminal, iTerm2, Konsole, GNOME Terminal |
+| Works on | Linux (Konsole, GNOME Terminal), tested every day. Written for macOS Terminal, iTerm2, Windows Terminal and PowerShell too, not yet checked by hand there |
 | herdr | Works with herdr: shows up as `bruine` in `herdr agent list`. |
 
 ## The weather
@@ -215,8 +215,11 @@ turn it on in the setup. Network discovery of model servers is opt-in and only t
 compatible server) with a context of 32k or more. Small models can chat but tend to lose the thread in
 long agent loops. The setup detects what the server's chat template supports (thinking, effort levels).
 
-**Does it work on Windows?** Yes: Windows Terminal, PowerShell and the classic console; commands run in
-PowerShell there. [docs/PLATFORMS.md](docs/PLATFORMS.md) lists what was checked and what still has limits.
+**Does it work on Windows or macOS?** It is written for them (on Windows, commands run in PowerShell) and
+the unit tests run on both in CI, but nobody has used it by hand on a real Windows or macOS machine yet,
+and the terminal tests on Windows still fail. Linux is the one platform used every day. If it breaks on
+yours, [open an issue](https://github.com/ziamana/bruine/issues). [docs/PLATFORMS.md](docs/PLATFORMS.md)
+lists what was checked and what still has limits.
 
 **How do I make it ask less?** `/auto` lets a fast model judge the routine actions (risky ones still
 ask), the approval's `a` (Always) remembers one exact command for the session and says which, and

package/dist/bin.js

@@ -688,8 +688,8 @@ async function writeEnvVar(envPath, key, value) {
     text = "";
   }
   const line = `${key}=${value}`;
-  const re = new RegExp(`^${key}=.*$`, "m");
-  const next = re.test(text) ? text.replace(re, line) : text === "" || text.endsWith("\n") ? `${text}${line}
+  const re = new RegExp(`^${key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}=.*$`, "m");
+  const next = re.test(text) ? text.replace(re, () => line) : text === "" || text.endsWith("\n") ? `${text}${line}
 ` : `${text}
 ${line}
 `;
@@ -4655,12 +4655,17 @@ function readMcpServers(home, projectDir, env = process.env) {
   return { servers, problems };
 }
 function fingerprint(server) {
-  const what = server.transport === "stdio" ? { t: "stdio", command: server.command, args: server.args ?? [], env: server.env ?? {}, cwd: server.cwd ?? "" } : { t: "http", url: server.url, headers: server.headers ?? {} };
+  const may = { alwaysAllow: [...server.alwaysAllow].sort(), readOnly: server.readOnly };
+  const what = server.transport === "stdio" ? { t: "stdio", command: server.command, args: server.args ?? [], env: server.env ?? {}, cwd: server.cwd ?? "", may } : { t: "http", url: server.url, headers: server.headers ?? {}, may };
   return createHash("sha256").update(JSON.stringify(what)).digest("hex").slice(0, 16);
 }
 function describeServer(server) {
-  if (server.transport === "stdio") return [server.command, ...server.args ?? []].join(" ");
-  return server.url ?? "";
+  const where = server.transport === "stdio" ? [server.command, ...server.args ?? []].join(" ") : server.url ?? "";
+  const may = [
+    ...server.readOnly ? ["marked read-only: usable in Plan mode, never asks"] : [],
+    ...server.alwaysAllow.length > 0 ? [`runs without asking: ${server.alwaysAllow.join(", ")}`] : []
+  ];
+  return may.length === 0 ? where : `${where} (${may.join("; ")})`;
 }
 var PROJECT_MCP_FILE, isRecord;
 var init_config = __esm({

package/dist/plugins/mcp.js

@@ -151,7 +151,8 @@ function readMcpServers(home, projectDir, env = process.env) {
   return { servers, problems };
 }
 function fingerprint(server) {
-  const what = server.transport === "stdio" ? { t: "stdio", command: server.command, args: server.args ?? [], env: server.env ?? {}, cwd: server.cwd ?? "" } : { t: "http", url: server.url, headers: server.headers ?? {} };
+  const may = { alwaysAllow: [...server.alwaysAllow].sort(), readOnly: server.readOnly };
+  const what = server.transport === "stdio" ? { t: "stdio", command: server.command, args: server.args ?? [], env: server.env ?? {}, cwd: server.cwd ?? "", may } : { t: "http", url: server.url, headers: server.headers ?? {}, may };
   return createHash("sha256").update(JSON.stringify(what)).digest("hex").slice(0, 16);
 }
 function toDshConfig(server) {

package/dist/plugins/modes.js

@@ -26,7 +26,8 @@ function configReadPath(home) {
 }
 
 // src/plugins/modes.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync3 } from "fs";
+import { join as join2 } from "path";
 import { createUserMessage } from "@deepseek-ai/dsh-llm";
 import { Text } from "@earendil-works/pi-tui";
 
@@ -190,6 +191,7 @@ var READONLY_COMMANDS = /* @__PURE__ */ new Set([
   "alias",
   "ps"
 ]);
+var PS_ENVIRONMENT = /^ps\s(?:[^\n]*\s)?(?!-)[A-Za-z]*e[A-Za-z]*(?:\s|$)|^ps\b[^\n]*--environment/;
 var NOT_SIMPLE = /[;&|<>`]|\$\(|\n/;
 var EXECUTABLE_OPTION = /--(?:pre|ext-diff|textconv)(?=$|[=\s'"\\])/;
 var FIND_MUTATING = /\s-(exec|ok|fprint|fls|delete)/;
@@ -295,7 +297,13 @@ var SENSITIVE_PATTERNS = [
   /(^|[/\\])\.bashrc\b|(^|[/\\])\.bash_profile\b/,
   /(^|[/\\])\.profile\b/,
   /(^|[/\\])\.zprofile\b/,
-  /(^|[/\\])\.config[/\\]fish[/\\]/
+  /(^|[/\\])\.config[/\\]fish[/\\]/,
+  // Cloud, cluster and registry credentials, and the tool's own config (MCP tokens may sit in it).
+  /(^|[/\\])\.(aws|gnupg|kube|azure)([/\\]|$)/,
+  /(^|[/\\])\.config[/\\](gh|gcloud|glab-cli)([/\\]|$)/,
+  /(^|[/\\])\.docker[/\\]config\.json\b/,
+  /(^|[/\\])\.(netrc|git-credentials)\b|(^|[/\\])_netrc\b/,
+  /(^|[/\\])(bruine|kumo)\.json\b/
 ];
 function parseArgs(raw) {
   if (raw !== null && typeof raw === "object") return Array.isArray(raw) ? {} : raw;
@@ -382,6 +390,7 @@ function isReadonlyBash(command) {
   const words = command.trim().split(/\s+/);
   const first = words[0] ?? "";
   if (first === "find") return !FIND_MUTATING.test(command);
+  if (first === "ps") return !PS_ENVIRONMENT.test(command.trim());
   if (first === "git") return gitReadonly(words, command);
   return READONLY_COMMANDS.has(first);
 }
@@ -463,6 +472,43 @@ function isPathInside(target, projectDir) {
   const rel = mod.relative(root, abs);
   return rel !== "" && !rel.startsWith("..") && !mod.isAbsolute(rel) ? true : rel === "";
 }
+var FILE_LOOKUP_TOOLS = /* @__PURE__ */ new Set(["read", "read_image", "glob", "grep"]);
+function lookupTargets(name2, args) {
+  const out = [];
+  for (const key of ["path", "file_path", "directory"]) if (typeof args[key] === "string") out.push(args[key]);
+  if (name2 === "glob" && typeof args.pattern === "string" && /^(?:[/\\~]|[A-Za-z]:)/.test(args.pattern)) out.push(args.pattern);
+  return out;
+}
+function lookupLeaks(name2, args, projectDir, readRoots = []) {
+  for (const raw of lookupTargets(name2, args)) {
+    const target = expandHome(raw.trim());
+    if (isSensitiveTarget(target, projectDir)) return true;
+    if (!isPathInside(target, projectDir) && !readRoots.some((root) => isPathInside(target, root))) return true;
+  }
+  return false;
+}
+function isPrivateUrl(raw) {
+  let url;
+  try {
+    url = new URL(raw.trim());
+  } catch {
+    return false;
+  }
+  if (url.username !== "" || url.password !== "") return true;
+  const host = url.hostname.toLowerCase().replace(/^\[|\]$/g, "").replace(/\.$/, "");
+  if (host === "" || host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local") || host.endsWith(".internal") || host.endsWith(".lan") || host.endsWith(".home.arpa")) return true;
+  if (!host.includes(".") && !host.includes(":")) return true;
+  const v4 = /^(\d+)\.(\d+)\.(\d+)\.(\d+)$/.exec(host);
+  if (v4 !== null) {
+    const [a, b] = [Number(v4[1]), Number(v4[2])];
+    return a === 0 || a === 10 || a === 127 || a === 100 && b >= 64 && b <= 127 || a === 169 && b === 254 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a >= 224;
+  }
+  if (host.includes(":")) {
+    if (host === "::" || host === "::1" || /^f[cd]/.test(host) || /^fe[89ab]/.test(host)) return true;
+    return host.startsWith("::ffff:");
+  }
+  return false;
+}
 function decide(name2, execArgs, ctx) {
   const isBash = name2 === "bash";
   const isPwsh = name2 === "pwsh";
@@ -482,11 +528,10 @@ function decide(name2, execArgs, ctx) {
   if (WRITE_TOOLS.has(name2)) {
     const target = String(execArgs.path ?? execArgs.file_path ?? "");
     if (isSensitive(target)) return "ask";
+    if (!isPathInside(target, ctx.projectDir)) return "ask";
   }
-  if (name2 === "read" || name2 === "read_image") {
-    const target = String(execArgs.path ?? execArgs.file_path ?? "");
-    if (isSensitiveTarget(target, ctx.projectDir)) return "ask";
-  }
+  if (FILE_LOOKUP_TOOLS.has(name2) && lookupLeaks(name2, execArgs, ctx.projectDir, ctx.readRoots)) return "ask";
+  if (name2 === "web_fetch" && isPrivateUrl(String(execArgs.url ?? ""))) return "ask";
   if (isShell && bashLeaks(command, ctx.projectDir)) return "ask";
   if (ctx.sessionAllowed.has(ruleKey(name2, execArgs))) return "allow";
   if (READ_ONLY_TOOLS.has(name2)) return "allow";
@@ -516,6 +561,83 @@ import path4 from "path";
 // src/plugins/mcp.ts
 var BRUINE_MCP_SERVICE = "bruineMcp";
 
+// src/setup/skills.ts
+import { cp, lstat, mkdir, readFile, readdir, rename, rm, symlink, writeFile } from "fs/promises";
+import { existsSync as existsSync3 } from "fs";
+import { homedir as homedir3 } from "os";
+import path5, { dirname, join } from "path";
+var SAFE_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+function parseSkillFrontmatter(md) {
+  const m = /^---\r?\n([\s\S]*?)\r?\n---/.exec(md);
+  if (m === null || m[1] === void 0) return {};
+  const lines = m[1].split(/\r?\n/);
+  const out = {};
+  const unquote = (v) => v.replaceAll(/^["']|["']$/g, "");
+  for (let i = 0; i < lines.length; i += 1) {
+    const kv = /^([A-Za-z_][\w-]*)\s*:\s*(.*)$/.exec(lines[i].trimEnd());
+    if (kv === null || kv[1] === void 0 || kv[2] === void 0) continue;
+    const key = kv[1];
+    let value = kv[2].trim();
+    const rest = [];
+    let j = i + 1;
+    while (j < lines.length && (lines[j].trim() === "" || /^\s+\S/.test(lines[j]))) {
+      rest.push(lines[j]);
+      j += 1;
+    }
+    while (rest.length > 0 && rest[rest.length - 1].trim() === "") rest.pop();
+    const block = /^([>|])[+-]?\d*$/.exec(value);
+    if (block !== null) {
+      const body = rest.map((l) => l.trim());
+      value = block[1] === "|" ? body.join("\n") : body.join(" ").replaceAll(/\s+/g, " ").trim();
+      i = j - 1;
+    } else if (rest.length > 0 && key !== "name") {
+      value = [value, ...rest.map((l) => l.trim())].filter((l) => l !== "").join(" ");
+      i = j - 1;
+    }
+    if (key === "name") out.name = unquote(value);
+    if (key === "description") out.description = unquote(value);
+  }
+  return out;
+}
+async function readSkillsUnder(root) {
+  const out = [];
+  if (!existsSync3(root)) return out;
+  for (const entry of await readdir(root, { withFileTypes: true })) {
+    if (!entry.isDirectory() && !entry.isSymbolicLink()) continue;
+    const skillPath = join(root, entry.name, "SKILL.md");
+    if (!existsSync3(skillPath)) continue;
+    const fm = parseSkillFrontmatter(await readFile(skillPath, "utf8"));
+    if (fm.name === void 0 || !SAFE_NAME.test(fm.name)) continue;
+    out.push({ name: fm.name, description: fm.description ?? "", dir: join(root, entry.name) });
+  }
+  return out;
+}
+async function scanProjectSkills(cwd, pathMod = path5) {
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const rel of [
+    [".agents", "skills"],
+    [".dsh", "skills"]
+  ]) {
+    for (const skill of await readSkillsUnder(pathMod.join(cwd, ...rel))) {
+      if (seen.has(skill.name)) continue;
+      seen.add(skill.name);
+      out.push(skill);
+    }
+  }
+  return out.sort((a, b) => a.name.localeCompare(b.name));
+}
+async function readAvailableSkills(homeSkillsDir, cwd) {
+  const byName = /* @__PURE__ */ new Map();
+  for (const skill of await readSkillsUnder(homeSkillsDir)) {
+    byName.set(skill.name, { ...skill, scope: "user" });
+  }
+  for (const skill of await scanProjectSkills(cwd)) {
+    byName.set(skill.name, { ...skill, scope: "project" });
+  }
+  return [...byName.values()].sort((a, b) => a.name.localeCompare(b.name));
+}
+
 // src/plugins/modes.ts
 function mcpPolicy(service, tool) {
   const server = service?.serverOf(tool);
@@ -539,9 +661,9 @@ var PERMISSION_ORDER = ["ask", "auto", "full"];
 function readBruineJson(env = process.env) {
   try {
     const home = runtimeHome(env);
-    const path5 = configReadPath(home);
-    if (!existsSync3(path5)) return {};
-    return JSON.parse(readFileSync3(path5, "utf8"));
+    const path6 = configReadPath(home);
+    if (!existsSync4(path6)) return {};
+    return JSON.parse(readFileSync3(path6, "utf8"));
   } catch {
     return {};
   }
@@ -778,6 +900,19 @@ ${line}
 `);
     }
   };
+  let skillRoots;
+  const readRoots = async () => {
+    if (skillRoots !== void 0 && Date.now() - skillRoots.at < 3e4) return skillRoots.roots;
+    let roots = [];
+    try {
+      const home = join2(runtimeHome(), "skills");
+      roots = [home, ...(await readAvailableSkills(home, process.cwd())).map((skill) => skill.dir)];
+    } catch {
+      roots = [];
+    }
+    skillRoots = { at: Date.now(), roots };
+    return roots;
+  };
   ctx.on("tools/pre-execute", async (exec, next) => {
     if (!modes.governs(exec.agent)) return next();
     const canAsk = repl?.ui !== void 0;
@@ -788,6 +923,7 @@ ${line}
       plan: modes.plan,
       sessionAllowed: modes.sessionAllowed,
       projectDir: process.cwd(),
+      readRoots: await readRoots(),
       mcp: (tool) => mcpPolicy(ctx.get(BRUINE_MCP_SERVICE), tool)
     });
     let decision;

package/dist/plugins/render.js

@@ -2284,7 +2284,8 @@ async function turnChanges(opts) {
 }
 
 // src/plugins/modes.ts
-import { existsSync as existsSync3, readFileSync as readFileSync6 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync6 } from "fs";
+import { join as join4 } from "path";
 import { createUserMessage as createUserMessage2 } from "@deepseek-ai/dsh-llm";
 import { Text as Text2 } from "@earendil-works/pi-tui";
 
@@ -2302,6 +2303,12 @@ import path3 from "path";
 import { mkdirSync, readFileSync as readFileSync5, renameSync, writeFileSync } from "fs";
 import path4 from "path";
 
+// src/setup/skills.ts
+import { cp, lstat, mkdir, readFile, readdir, rename, rm, symlink, writeFile } from "fs/promises";
+import { existsSync as existsSync3 } from "fs";
+import { homedir as homedir3 } from "os";
+import path5, { dirname, join as join3 } from "path";
+
 // src/plugins/modes.ts
 var PLAN_ON_TEXT = "Plan mode is on: do not modify files or run modifying commands.";
 var PLAN_OFF_TEXT = "Plan mode is off.";
@@ -2636,22 +2643,16 @@ import {
 // src/ui/footer.ts
 import { truncateToWidth as truncateToWidth2, visibleWidth as visibleWidth5 } from "@earendil-works/pi-tui";
 import { readFileSync as readFileSync7, statSync as statSync2 } from "fs";
-import { homedir as homedir4 } from "os";
-import { isAbsolute as isAbsolute5, join as join3 } from "path";
+import { homedir as homedir5 } from "os";
+import { isAbsolute as isAbsolute5, join as join5 } from "path";
 
 // src/ui/place.ts
-import { homedir as homedir3 } from "os";
+import { homedir as homedir4 } from "os";
 import { posix, win32 } from "path";
 
 // src/ui/jump-latest.ts
 import { stripTerminalSequences, visibleWidth as visibleWidth6 } from "@earendil-works/pi-tui";
 
-// src/setup/skills.ts
-import { cp, lstat, mkdir, readFile, readdir, rename, rm, symlink, writeFile } from "fs/promises";
-import { existsSync as existsSync4 } from "fs";
-import { homedir as homedir5 } from "os";
-import path5, { dirname, join as join4 } from "path";
-
 // src/ui/shell.ts
 import { Container as Container2 } from "@earendil-works/pi-tui";
 
@@ -2706,7 +2707,7 @@ var LOGO_BESIDE_GAP = " ".repeat(LOGO_GAP);
 
 // src/ui/intro.ts
 import { existsSync as existsSync5, readFileSync as readFileSync8, writeFileSync as writeFileSync2 } from "fs";
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 
 // src/ui/intro-effects.ts
 var H = LOGO.length;
@@ -2736,7 +2737,7 @@ import { matchesKey as matchesKey3, visibleWidth as visibleWidth12, wrapTextWith
 // src/ui/file-complete.ts
 import { CombinedAutocompleteProvider } from "@earendil-works/pi-tui";
 import { existsSync as existsSync6, readdirSync } from "fs";
-import { basename, delimiter as delimiter2, join as join6, relative as relative2 } from "path";
+import { basename, delimiter as delimiter2, join as join7, relative as relative2 } from "path";
 
 // src/image/clipboard.ts
 import { readFileSync as readFileSync10 } from "fs";
@@ -2760,7 +2761,7 @@ import { visibleWidth as visibleWidth14 } from "@earendil-works/pi-tui";
 // src/setup/discover.ts
 import { readFileSync as readFileSync11 } from "fs";
 import { networkInterfaces } from "os";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 import { spawnSync } from "child_process";
 import { parse as parseYaml } from "yaml";
 
@@ -2795,7 +2796,7 @@ function settingsEntryAnswer(entry) {
 
 // src/ui/bruine-ui.ts
 import { existsSync as existsSync7, readFileSync as readFileSync12 } from "fs";
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 
 // src/update.ts
 import { spawn } from "child_process";
@@ -2810,7 +2811,7 @@ var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
 function readSettingsRoute(dshHome) {
   try {
     const home = dshHome ?? runtimeHome();
-    const p = join9(home, "settings.yaml");
+    const p = join10(home, "settings.yaml");
     if (!existsSync7(p)) return void 0;
     const doc = parseBruineSettingsYaml(readFileSync12(p, "utf8"));
     if (doc === void 0) return void 0;
@@ -2840,7 +2841,7 @@ function parseBruineSettingsYaml(text) {
 
 // src/ui/errors.ts
 import { appendFile, mkdir as mkdir4 } from "fs/promises";
-import { join as join10 } from "path";
+import { join as join11 } from "path";
 import { truncateToWidth as truncateToWidth7, wrapTextWithAnsi as wrapTextWithAnsi4 } from "@earendil-works/pi-tui";
 function firstLine(text) {
   return (text.split(/\r?\n/)[0] ?? text).trim();
@@ -2932,14 +2933,14 @@ async function fetchAvailableModels(baseUrl) {
 }
 function bruineLogPath(env = process.env) {
   const home = runtimeHome(env);
-  return join10(home, "logs", "bruine.log");
+  return join11(home, "logs", "bruine.log");
 }
 async function appendErrorLog(failure, extra = "") {
   const path7 = bruineLogPath();
   const line = `${(/* @__PURE__ */ new Date()).toISOString()} [llm-error] code=${String(failure.code ?? "UNKNOWN")}${failure.status === void 0 ? "" : ` status=${String(failure.status)}`} ${String(failure.message ?? "").slice(0, 2e3)}${extra === "" ? "" : ` ${extra}`}
 `;
   try {
-    await mkdir4(join10(path7, ".."), { recursive: true });
+    await mkdir4(join11(path7, ".."), { recursive: true });
     await appendFile(path7, line, "utf8");
   } catch {
   }
@@ -2983,7 +2984,7 @@ function retryLine(event) {
 
 // src/plugins/silence.ts
 import { existsSync as existsSync8, readFileSync as readFileSync13, statSync as statSync3 } from "fs";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 import { parse as parseYaml3 } from "yaml";
 var BRUINE_SILENCE_SERVICE = "bruineSilence";
 

package/dist/plugins/repl.js

@@ -7017,6 +7017,7 @@ var BruineUi = class {
 
 // src/plugins/modes.ts
 import { existsSync as existsSync8, readFileSync as readFileSync12 } from "fs";
+import { join as join10 } from "path";
 import { createUserMessage } from "@deepseek-ai/dsh-llm";
 import { Text as Text3 } from "@earendil-works/pi-tui";
 
@@ -7031,12 +7032,17 @@ import { readFileSync as readFileSync10 } from "fs";
 import path6 from "path";
 var PROJECT_MCP_FILE = ".mcp.json";
 function fingerprint(server) {
-  const what = server.transport === "stdio" ? { t: "stdio", command: server.command, args: server.args ?? [], env: server.env ?? {}, cwd: server.cwd ?? "" } : { t: "http", url: server.url, headers: server.headers ?? {} };
+  const may = { alwaysAllow: [...server.alwaysAllow].sort(), readOnly: server.readOnly };
+  const what = server.transport === "stdio" ? { t: "stdio", command: server.command, args: server.args ?? [], env: server.env ?? {}, cwd: server.cwd ?? "", may } : { t: "http", url: server.url, headers: server.headers ?? {}, may };
   return createHash("sha256").update(JSON.stringify(what)).digest("hex").slice(0, 16);
 }
 function describeServer(server) {
-  if (server.transport === "stdio") return [server.command, ...server.args ?? []].join(" ");
-  return server.url ?? "";
+  const where = server.transport === "stdio" ? [server.command, ...server.args ?? []].join(" ") : server.url ?? "";
+  const may = [
+    ...server.readOnly ? ["marked read-only: usable in Plan mode, never asks"] : [],
+    ...server.alwaysAllow.length > 0 ? [`runs without asking: ${server.alwaysAllow.join(", ")}`] : []
+  ];
+  return may.length === 0 ? where : `${where} (${may.join("; ")})`;
 }
 
 // src/mcp/state.ts
@@ -7383,13 +7389,13 @@ var SPACE_BUNNY_NOTICE = [
 
 // src/setup/zen-route.ts
 import { existsSync as existsSync11, readFileSync as readFileSync14 } from "fs";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 import { parseDocument } from "yaml";
 
 // src/setup/simple.ts
 import { chmod as chmod2, mkdir as mkdir4, readFile as readFile5, rename as rename5, writeFile as writeFile5 } from "fs/promises";
 import { existsSync as existsSync10 } from "fs";
-import { dirname as dirname2, join as join10 } from "path";
+import { dirname as dirname2, join as join11 } from "path";
 
 // src/setup/cloud.ts
 var DEEPSEEK_OFFICIAL = {
@@ -7416,7 +7422,7 @@ async function writeAtomic(path8, content, mode) {
 // src/setup/zen-route.ts
 var ROUTE_PATH = ["llm-pi-ai", "providers", SPACE_BUNNY.routeName];
 async function addSpaceBunnyToHome(home) {
-  const file = join11(home, "settings.yaml");
+  const file = join12(home, "settings.yaml");
   const doc = parseDocument(existsSync11(file) ? readFileSync14(file, "utf8") : "");
   if (doc.hasIn([...ROUTE_PATH])) {
     await repairSpaceBunnyRoute(home);
@@ -7427,7 +7433,7 @@ async function addSpaceBunnyToHome(home) {
   return "added";
 }
 async function repairSpaceBunnyRoute(home) {
-  const file = join11(home, "settings.yaml");
+  const file = join12(home, "settings.yaml");
   if (!existsSync11(file)) return false;
   let doc;
   try {
@@ -7475,12 +7481,12 @@ async function repairSpaceBunnyRoute(home) {
 // src/plugins/model.ts
 import { existsSync as existsSync12, readFileSync as readFileSync15 } from "fs";
 import { chmod as chmod3, rename as rename6, writeFile as writeFile6 } from "fs/promises";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 import { matchesKey as matchesKey6 } from "@earendil-works/pi-tui";
 
 // src/ui/errors.ts
 import { appendFile, mkdir as mkdir5 } from "fs/promises";
-import { join as join12 } from "path";
+import { join as join13 } from "path";
 import { truncateToWidth as truncateToWidth7, wrapTextWithAnsi as wrapTextWithAnsi3 } from "@earendil-works/pi-tui";
 function formatK2(n) {
   const k = n / 1e3;
@@ -7630,7 +7636,7 @@ function readEnvKeys(dshHome) {
   const out = /* @__PURE__ */ new Set();
   const home = dshHome ?? runtimeHome();
   try {
-    const path8 = join13(home, ".env");
+    const path8 = join14(home, ".env");
     if (!existsSync12(path8)) return out;
     for (const line of readFileSync15(path8, "utf8").split(/\r?\n/)) {
       const name4 = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=/.exec(line)?.[1];
@@ -8211,7 +8217,7 @@ var QuestionCallComponent = class {
 
 // src/plugins/silence.ts
 import { existsSync as existsSync13, readFileSync as readFileSync16, statSync as statSync3 } from "fs";
-import { join as join14 } from "path";
+import { join as join15 } from "path";
 import { parse as parseYaml3 } from "yaml";
 
 // src/plugins/render.ts
@@ -8435,7 +8441,7 @@ function answersIn(output) {
 // src/plugins/config-edit.ts
 import { spawn as spawn3 } from "child_process";
 import { existsSync as existsSync14, readFileSync as readFileSync18 } from "fs";
-import { delimiter as delimiter3, join as join15 } from "path";
+import { delimiter as delimiter3, join as join16 } from "path";
 var TERMINAL_EDITORS = /* @__PURE__ */ new Set([
   "vi",
   "vim",
@@ -8462,7 +8468,7 @@ var TERMINAL_EDITORS = /* @__PURE__ */ new Set([
 ]);
 var GUI_EDITORS = ["kate", "kwrite", "gedit", "xed", "mousepad", "pluma", "code", "codium", "subl", "zed"];
 function configFiles(home, exists2 = existsSync14) {
-  return [join15(home, "settings.yaml"), configReadPath(home)].filter((p) => exists2(p));
+  return [join16(home, "settings.yaml"), configReadPath(home)].filter((p) => exists2(p));
 }
 function baseName(command) {
   return command.split(/[\\/]/).pop()?.replace(/\.exe$/i, "") ?? command;
@@ -8476,7 +8482,7 @@ function onPath(command, env, exists2) {
   if (/[\\/]/.test(command)) return exists2(command);
   const dirs = (env.PATH ?? "").split(delimiter3).filter((d) => d !== "");
   const names = process.platform === "win32" ? [command, `${command}.exe`, `${command}.cmd`] : [command];
-  return dirs.some((dir) => names.some((name4) => exists2(join15(dir, name4))));
+  return dirs.some((dir) => names.some((name4) => exists2(join16(dir, name4))));
 }
 function editorFromBruineJson(home) {
   try {
@@ -8639,13 +8645,13 @@ async function stopTask(services, agent, sessionId, name4) {
 
 // src/plugins/verify.ts
 import { existsSync as existsSync15, readFileSync as readFileSync19 } from "fs";
-import { join as join16 } from "path";
+import { join as join17 } from "path";
 function verificationPlan(cwd) {
-  const packagePath = join16(cwd, "package.json");
+  const packagePath = join17(cwd, "package.json");
   if (existsSync15(packagePath)) {
     try {
       const doc = JSON.parse(readFileSync19(packagePath, "utf8"));
-      const manager = doc.packageManager?.split("@")[0] ?? (existsSync15(join16(cwd, "pnpm-lock.yaml")) ? "pnpm" : existsSync15(join16(cwd, "yarn.lock")) ? "yarn" : "npm");
+      const manager = doc.packageManager?.split("@")[0] ?? (existsSync15(join17(cwd, "pnpm-lock.yaml")) ? "pnpm" : existsSync15(join17(cwd, "yarn.lock")) ? "yarn" : "npm");
       const cli = ["pnpm", "yarn", "bun", "npm"].includes(manager) ? manager : "npm";
       const checks = [];
       if (typeof doc.scripts?.typecheck === "string") checks.push({ label: "Typecheck", command: `${cli} run typecheck` });
@@ -8655,8 +8661,8 @@ function verificationPlan(cwd) {
       return [];
     }
   }
-  if (existsSync15(join16(cwd, "Cargo.toml"))) return [{ label: "Tests", command: "cargo test" }];
-  if (existsSync15(join16(cwd, "go.mod"))) return [{ label: "Tests", command: "go test ./..." }];
+  if (existsSync15(join17(cwd, "Cargo.toml"))) return [{ label: "Tests", command: "cargo test" }];
+  if (existsSync15(join17(cwd, "go.mod"))) return [{ label: "Tests", command: "go test ./..." }];
   return [];
 }
 async function runVerification(cwd, run = (command, dir) => runShell(command, dir)) {
@@ -8675,7 +8681,7 @@ ${formatShell(check.command, result)}`)
 }
 
 // src/plugins/repl.ts
-import { join as join17 } from "path";
+import { join as join18 } from "path";
 
 // src/image/attach.ts
 function attachFailureNotice(failures) {
@@ -9056,7 +9062,7 @@ async function runRepl(ctx, exit) {
     void sendWithImages(text, images);
   };
   const flush = (session) => sessions.flush(session);
-  const skillsDir = join17(runtimeHome(), "skills");
+  const skillsDir = join18(runtimeHome(), "skills");
   let skillNames = [];
   const refreshSkillNames = () => {
     void availableSkillNames(skillsDir, process.cwd()).then((names) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziamana/bruine",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Interactive terminal coding agent that runs your own models, local or OpenAI-compatible",
   "type": "module",
   "license": "MIT",