pi-provider-kimi-code 0.6.2 → 0.6.3

package/index.ts

@@ -15,34 +15,30 @@
  *                       login/refresh handlers, stream-level auth refresh
  *   src/models.ts     — /v1/models discovery + extras-merging helpers
  *   src/payload.ts    — payload pipeline + file upload + transforms
+ *   src/project-trust.ts — project config approval compatibility helpers
  *   src/stream.ts     — empty-response filter + streamSimpleKimi orchestrator
  */
 
 import {
-  AuthStorage,
   type ExtensionAPI,
   type ExtensionCommandContext,
   type ExtensionFactory,
 } from "@earendil-works/pi-coding-agent";
+import { Input, SettingsList, type SettingItem, truncateToWidth } from "@earendil-works/pi-tui";
 import os from "node:os";
-import { relative } from "node:path";
 
 import {
   type KimiCodeConfig,
   type KimiCodeConfigPatch,
   KIMI_TOOL_NAMES,
-  getProjectKimiCodeConfigPath,
-  getGlobalKimiCodeConfigPath,
   loadHomeKimiCodeConfig,
   loadKimiCodeConfig,
-  loadKimiCodeConfigSources,
   loadProjectKimiCodeConfig,
   saveHomeKimiCodeConfig,
   saveProjectKimiCodeConfig,
   type KimiToolName,
 } from "./src/config.ts";
 import { PROVIDER_ID, PROVIDER_VERSION, getBaseUrl, getKimiApiType } from "./src/constants.ts";
-import { getCommonHeaders } from "./src/device.ts";
 import {
   type KimiOAuthCredentials,
   type KimiOAuthExtras,
@@ -51,30 +47,24 @@ import {
   discoverKimiModelMetadata,
   resolveKimiModelConfig,
 } from "./src/models.ts";
-import { loginKimiCode, refreshKimiAuthToken, refreshKimiCodeToken } from "./src/oauth.ts";
+import { loginKimiCode, refreshKimiCodeToken } from "./src/oauth.ts";
+import { isKimiProjectConfigApproved } from "./src/project-trust.ts";
+import {
+  type KimiConfigScope,
+  buildSettingsTheme,
+  formatByteSize,
+  formatScopeDescription,
+  parseByteSizeInput,
+} from "./src/settings-ui.ts";
 import { setStoreResolvedKimiConfig, streamSimpleKimi } from "./src/stream.ts";
+import { fetchKimiUsageSummary, getKimiUsageToken } from "./src/usage.ts";
 import { buildMoonshotFetchTool, buildMoonshotSearchTool } from "./src/tools/moonshot.ts";
 import { buildKimiDatasourceTool } from "./src/tools/datasource.ts";
-type KimiConfigScope = "project" | "home";
-const MEMBERSHIP_LEVEL_NAMES: Record<string, string> = {
-  LEVEL_FREE: "Free",
-  LEVEL_BASIC: "Adagio",
-  LEVEL_STANDARD: "Moderato",
-  LEVEL_INTERMEDIATE: "Allegretto",
-  LEVEL_ADVANCED: "Allegro",
-  LEVEL_PREMIUM: "Vivace",
-};
-
-interface UsageRow {
-  label: string;
-  used: number;
-  limit: number;
-}
-
 interface KimiRuntimeState {
   cwd: string;
   config: KimiCodeConfig;
   modelExtras: KimiOAuthExtras;
+  projectTrusted: boolean;
   overrides?: KimiCodeConfigPatch;
 }
 
@@ -111,10 +101,18 @@ function registerConfiguredMoonshotTools(
   pi.setActiveTools([...activeTools]);
 }
 
-function reloadEffectiveKimiRuntimeConfig(state: KimiRuntimeState, cwd: string): KimiCodeConfig {
-  const config = loadKimiCodeConfig({ cwd, home: os.homedir() }, state.overrides);
+function reloadEffectiveKimiRuntimeConfig(
+  state: KimiRuntimeState,
+  cwd: string,
+  projectTrusted: boolean,
+): KimiCodeConfig {
+  const config = loadKimiCodeConfig(
+    { cwd, home: os.homedir(), includeProject: projectTrusted },
+    state.overrides,
+  );
   state.cwd = cwd;
   state.config = config;
+  state.projectTrusted = projectTrusted;
   setStoreResolvedKimiConfig({
     model: resolveKimiModelConfig(config.model, state.modelExtras),
     protocol: config.protocol,
@@ -127,171 +125,13 @@ function applyEffectiveKimiRuntimeConfig(
   pi: ExtensionAPI,
   state: KimiRuntimeState,
   cwd: string,
-  options: { updateActiveTools: boolean },
+  options: { updateActiveTools: boolean; projectTrusted: boolean },
 ): KimiCodeConfig {
-  const config = reloadEffectiveKimiRuntimeConfig(state, cwd);
+  const config = reloadEffectiveKimiRuntimeConfig(state, cwd, options.projectTrusted);
   registerConfiguredMoonshotTools(pi, config, options);
   return config;
 }
 
-function getKimiUsageToken(): string | null {
-  const credential = AuthStorage.create().get(PROVIDER_ID);
-  if (credential?.type === "oauth" && credential.access) return credential.access;
-  const apiKey = process.env.KIMI_API_KEY?.trim();
-  return apiKey || null;
-}
-
-function toNumber(value: unknown): number | null {
-  const number = Number(value);
-  return Number.isFinite(number) ? number : null;
-}
-
-function parseUsageRow(value: unknown, fallbackLabel: string): UsageRow | null {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
-  const record = value as Record<string, unknown>;
-  const limit = toNumber(record.limit);
-  const usedValue = toNumber(record.used);
-  const remaining = toNumber(record.remaining);
-  const used = usedValue ?? (limit !== null && remaining !== null ? limit - remaining : null);
-  if (limit === null && used === null) return null;
-  return {
-    label: String(record.name || record.title || fallbackLabel),
-    used: used ?? 0,
-    limit: limit ?? 0,
-  };
-}
-
-function parseUsageSummary(payload: unknown): string {
-  if (typeof payload !== "object" || payload === null || Array.isArray(payload)) {
-    return "Usage: unavailable";
-  }
-
-  const record = payload as Record<string, unknown>;
-  const lines: string[] = [];
-  const membership = parseMembership(record);
-  if (membership) lines.push(membership);
-
-  const rows: UsageRow[] = [];
-  const summary = parseUsageRow(record.usage, "Weekly limit");
-  if (summary) rows.push(summary);
-
-  if (Array.isArray(record.limits)) {
-    for (const [index, item] of record.limits.entries()) {
-      const detail =
-        typeof item === "object" && item !== null && !Array.isArray(item)
-          ? ((item as Record<string, unknown>).detail ?? item)
-          : item;
-      const row = parseUsageRow(detail, index === 0 ? "5h rate limit" : `Limit #${index + 1}`);
-      if (row) rows.push(row);
-    }
-  }
-
-  lines.push(...rows.map(formatUsageRow));
-  return lines.length === 0 ? "Usage: no usage data" : lines.join("\n");
-}
-
-function parseMembership(record: Record<string, unknown>): string | null {
-  const user = record.user;
-  if (typeof user !== "object" || user === null || Array.isArray(user)) return null;
-  const membership = (user as Record<string, unknown>).membership;
-  if (typeof membership !== "object" || membership === null || Array.isArray(membership)) {
-    return null;
-  }
-  const level = (membership as Record<string, unknown>).level;
-  if (typeof level !== "string" || !level) return null;
-  const name = MEMBERSHIP_LEVEL_NAMES[level];
-  return name ? `Membership: ${name} (${level})` : `Membership: ${level}`;
-}
-
-function formatUsageRow(row: UsageRow): string {
-  if (row.limit <= 0) return `${row.label}: ${row.used} used`;
-  const remaining = Math.max(0, Math.min(row.limit - row.used, row.limit));
-  const percent = Math.round((remaining / row.limit) * 100);
-  return `${row.label}: ${quotaBar(remaining, row.limit)} ${percent}% left (${remaining}/${row.limit})`;
-}
-
-function quotaBar(remaining: number, limit: number): string {
-  const width = 20;
-  const filled = Math.max(0, Math.min(width, Math.round((remaining / limit) * width)));
-  return `[${"#".repeat(filled)}${"-".repeat(width - filled)}]`;
-}
-
-function fetchKimiUsage(token: string, signal: AbortSignal): Promise<Response> {
-  return fetch("https://api.kimi.com/coding/v1/usages", {
-    method: "GET",
-    headers: {
-      ...getCommonHeaders(),
-      Authorization: `Bearer ${token}`,
-    },
-    signal,
-  });
-}
-
-async function fetchKimiUsageSummary(): Promise<string> {
-  const token = getKimiUsageToken();
-  if (!token) return "Usage: missing credentials. Run /login kimi-coding.";
-
-  const controller = new AbortController();
-  const timeout = setTimeout(() => controller.abort(), 15_000);
-  try {
-    let response = await fetchKimiUsage(token, controller.signal);
-    if (response.status === 401) {
-      const refreshed = await refreshKimiAuthToken(token);
-      if (refreshed) response = await fetchKimiUsage(refreshed, controller.signal);
-    }
-    if (!response.ok) return `Usage: fetch failed (${response.status})`;
-    return parseUsageSummary(await response.json());
-  } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    return `Usage: fetch failed (${message})`;
-  } finally {
-    clearTimeout(timeout);
-  }
-}
-
-function moonshotStatus(config: KimiCodeConfig): string {
-  return KIMI_TOOL_NAMES.map((toolName) => {
-    const tool = config.tools[toolName];
-    const enabled = tool.enabled ? "enabled" : "disabled";
-    const collapsed = tool.default_collapsed ? "collapsed" : "expanded";
-    return `${toolName}: ${enabled}, default ${collapsed}`;
-  }).join("\n");
-}
-
-function toggleEnabled(config: KimiCodeConfig, toolName: KimiToolName): KimiCodeConfig {
-  return {
-    ...config,
-    tools: {
-      ...config.tools,
-      [toolName]: {
-        ...config.tools[toolName],
-        enabled: !config.tools[toolName].enabled,
-      },
-    },
-  };
-}
-
-function toggleCollapsed(config: KimiCodeConfig, toolName: KimiToolName): KimiCodeConfig {
-  return {
-    ...config,
-    tools: {
-      ...config.tools,
-      [toolName]: {
-        ...config.tools[toolName],
-        default_collapsed: !config.tools[toolName].default_collapsed,
-      },
-    },
-  };
-}
-
-function setProtocol(config: KimiCodeConfig, protocol: KimiCodeConfig["protocol"]): KimiCodeConfig {
-  return { ...config, protocol };
-}
-
-function setUploadThreshold(config: KimiCodeConfig, thresholdBytes: number): KimiCodeConfig {
-  return { ...config, uploads: { ...config.uploads, thresholdBytes } };
-}
-
 async function refreshModelExtras(state: KimiRuntimeState): Promise<void> {
   const token = getKimiUsageToken();
   if (!token) return;
@@ -301,150 +141,205 @@ async function refreshModelExtras(state: KimiRuntimeState): Promise<void> {
   }
 }
 
-async function runKimiCommand(
+async function openSettingsMenu(
   pi: ExtensionAPI,
   ctx: ExtensionCommandContext,
   state: KimiRuntimeState,
 ): Promise<void> {
-  let config = applyEffectiveKimiRuntimeConfig(pi, state, ctx.cwd, { updateActiveTools: true });
-  let [usage] = await Promise.all([fetchKimiUsageSummary(), refreshModelExtras(state)]);
-  ctx.ui.notify(usage);
-
-  while (true) {
-    const choice = await ctx.ui.select(buildKimiMainTitle(config, ctx.cwd, state.modelExtras), [
-      `Edit project config (${relative(ctx.cwd, getProjectKimiCodeConfigPath(ctx.cwd))})`,
-      `Edit home config (${homeRelative(getGlobalKimiCodeConfigPath(os.homedir()))})`,
-      "Refresh usage",
-      "Done",
-    ]);
-
-    if (!choice || choice === "Done") return;
-    if (choice === "Refresh usage") {
-      usage = await fetchKimiUsageSummary();
-      ctx.ui.notify(usage);
-      continue;
-    }
-    if (choice.startsWith("Edit project config")) {
-      config = await editConfigScope(pi, ctx, state, "project");
-    } else if (choice.startsWith("Edit home config")) {
-      config = await editConfigScope(pi, ctx, state, "home");
-    }
-  }
-}
+  const [usage] = await Promise.all([fetchKimiUsageSummary(), refreshModelExtras(state)]);
 
-async function editConfigScope(
-  pi: ExtensionAPI,
-  ctx: ExtensionCommandContext,
-  state: KimiRuntimeState,
-  scope: KimiConfigScope,
-): Promise<KimiCodeConfig> {
-  let current = loadScopeKimiCodeConfig(scope, ctx.cwd);
-  while (true) {
-    const items = KIMI_TOOL_NAMES.map((name) => toolMenuItem(current, name));
-    items.push(protocolMenuItem(current), uploadThresholdMenuItem(current), "Back");
-    const choice = await ctx.ui.select(buildConfigScopeTitle(scope, current, ctx.cwd), items);
-    if (!choice || choice === "Back") {
-      return loadKimiCodeConfig({ cwd: ctx.cwd, home: os.homedir() });
-    }
-    const toolName = KIMI_TOOL_NAMES.find((name) => choice.startsWith(name));
-    if (toolName) {
-      current = await editMoonshotTool(pi, ctx, state, scope, current, toolName);
-    } else if (choice.startsWith("Protocol")) {
-      current = await editProtocol(pi, ctx, state, scope, current);
-    } else if (choice.startsWith("Upload threshold")) {
-      current = await editUploadThreshold(pi, ctx, state, scope, current);
+  const projectTrusted = await isKimiProjectConfigApproved(ctx, ctx.cwd);
+  const homeDraft = loadHomeKimiCodeConfig(os.homedir());
+  const drafts: Record<KimiConfigScope, KimiCodeConfig> = {
+    project: projectTrusted ? loadProjectKimiCodeConfig(ctx.cwd) : homeDraft,
+    home: homeDraft,
+  };
+  let scope: KimiConfigScope = projectTrusted ? "project" : "home";
+  let dirty = false;
+
+  await ctx.ui.custom<void>((tui, theme, _keybindings, done) => {
+    const settingsTheme = buildSettingsTheme(theme);
+
+    let list: SettingsList;
+
+    const toolLabel = (toolName: KimiToolName) => {
+      if (toolName === "moonshot_search") return "Search tool";
+      if (toolName === "moonshot_fetch") return "Fetch tool";
+      return "Real-world data API";
+    };
+
+    const formatToolMenuValue = (toolName: KimiToolName) => {
+      const tool = drafts[scope].tools[toolName];
+      if (!tool.enabled) return "disabled";
+      return tool.default_collapsed ? "enabled without preview" : "enabled with preview";
+    };
+
+    const refreshDisplays = () => {
+      scopeItem.description = formatScopeDescription(scope, ctx.cwd);
+      for (const toolName of KIMI_TOOL_NAMES) {
+        list.updateValue(toolName, formatToolMenuValue(toolName));
+      }
+      list.updateValue("protocol", drafts[scope].protocol);
+      list.updateValue("uploadThreshold", formatByteSize(drafts[scope].uploads.thresholdBytes));
+    };
+
+    const save = () => {
+      if (scope === "project" && !projectTrusted) {
+        ctx.ui.notify("Project config cannot be saved until the project is trusted.", "warning");
+        return;
+      }
+      try {
+        saveScopeKimiCodeConfig(scope, ctx.cwd, drafts[scope]);
+        applyEffectiveKimiRuntimeConfig(pi, state, ctx.cwd, {
+          updateActiveTools: true,
+          projectTrusted: scope === "project" ? true : projectTrusted,
+        });
+        dirty = true;
+      } catch (error: unknown) {
+        ctx.ui.notify((error as Error).message, "error");
+      }
+    };
+
+    const onChange = (id: string, newValue: string) => {
+      if (id === "scope") {
+        scope = newValue as KimiConfigScope;
+        refreshDisplays();
+        return;
+      }
+      if (id === "protocol") {
+        drafts[scope].protocol = newValue as KimiCodeConfig["protocol"];
+        list.updateValue(id, newValue);
+        save();
+        return;
+      }
+      if (id === "uploadThreshold") {
+        const bytes = parseByteSizeInput(newValue);
+        if (bytes === undefined || bytes <= 0) {
+          ctx.ui.notify("Upload threshold must be a positive size, for example 2 MiB", "error");
+          return;
+        }
+        drafts[scope].uploads.thresholdBytes = bytes;
+        list.updateValue(id, formatByteSize(bytes));
+        save();
+        return;
+      }
+      const toolMatch = /^(?<tool>.+):(?<field>enabled|collapsed)$/.exec(id);
+      if (toolMatch?.groups) {
+        const toolName = toolMatch.groups.tool as KimiToolName;
+        const field = toolMatch.groups.field as "enabled" | "collapsed";
+        if (field === "enabled") {
+          drafts[scope].tools[toolName].enabled = newValue === "true";
+        } else {
+          drafts[scope].tools[toolName].default_collapsed = newValue !== "true";
+        }
+        list.updateValue(toolName, formatToolMenuValue(toolName));
+        save();
+      }
+    };
+
+    const scopeItem: SettingItem = {
+      id: "scope",
+      label: "Config scope",
+      description: projectTrusted
+        ? formatScopeDescription(scope, ctx.cwd)
+        : "Project config disabled until the project is trusted; editing home config only",
+      currentValue: scope,
+      values: projectTrusted ? ["project", "home"] : ["home"],
+    };
+
+    const items: SettingItem[] = [scopeItem];
+    for (const toolName of KIMI_TOOL_NAMES) {
+      items.push({
+        id: toolName,
+        label: toolLabel(toolName),
+        description: `Configure ${toolName} registration and preview defaults`,
+        currentValue: formatToolMenuValue(toolName),
+        submenu: (_current, submenuDone) =>
+          new SettingsList(
+            [
+              {
+                id: `${toolName}:enabled`,
+                label: "Enabled",
+                description: `Register ${toolName} at session start`,
+                currentValue: String(drafts[scope].tools[toolName].enabled),
+                values: ["true", "false"],
+              },
+              {
+                id: `${toolName}:collapsed`,
+                label: "Show preview",
+                description: `Show ${toolName} result previews by default`,
+                currentValue: String(!drafts[scope].tools[toolName].default_collapsed),
+                values: ["true", "false"],
+              },
+            ],
+            2,
+            settingsTheme,
+            onChange,
+            () => submenuDone(),
+          ),
+      });
     }
-  }
-}
-
-async function editProtocol(
-  pi: ExtensionAPI,
-  ctx: ExtensionCommandContext,
-  state: KimiRuntimeState,
-  scope: KimiConfigScope,
-  config: KimiCodeConfig,
-): Promise<KimiCodeConfig> {
-  const choice = await ctx.ui.select(`Edit protocol\n\n${formatProtocolStatus(config)}`, [
-    "Use openai protocol",
-    "Use anthropic protocol",
-    "Back",
-  ]);
-  if (!choice || choice === "Back") return config;
-  const protocol = choice.includes("anthropic") ? "anthropic" : "openai";
-  const current = setProtocol(config, protocol);
-  saveAndApplyKimiCodeConfig(pi, ctx, state, scope, current);
-  ctx.ui.notify("Saved protocol config", "info");
-  return current;
-}
-
-async function editUploadThreshold(
-  pi: ExtensionAPI,
-  ctx: ExtensionCommandContext,
-  state: KimiRuntimeState,
-  scope: KimiConfigScope,
-  config: KimiCodeConfig,
-): Promise<KimiCodeConfig> {
-  const input = await ctx.ui.input(
-    "Edit upload threshold\n\nExamples: 512 KiB, 2 MiB, 1.5 MB. Plain numbers are MiB.",
-    formatByteSize(config.uploads.thresholdBytes),
-  );
-  if (input === undefined) return config;
-  const thresholdBytes = parseByteSizeInput(input);
-  if (thresholdBytes === undefined || thresholdBytes <= 0) {
-    ctx.ui.notify("Upload threshold must be a positive size, for example 2 MiB", "error");
-    return config;
-  }
-  const current = setUploadThreshold(config, thresholdBytes);
-  saveAndApplyKimiCodeConfig(pi, ctx, state, scope, current);
-  ctx.ui.notify("Saved upload threshold config", "info");
-  return current;
-}
+    items.push({
+      id: "protocol",
+      label: "Protocol",
+      description: "API protocol for Kimi requests",
+      currentValue: drafts[scope].protocol,
+      values: ["openai", "anthropic"],
+    });
+    items.push({
+      id: "uploadThreshold",
+      label: "Upload threshold",
+      description: "Max size for inline file uploads",
+      currentValue: formatByteSize(drafts[scope].uploads.thresholdBytes),
+      submenu: (_current, submenuDone) => {
+        const input = new Input();
+        input.setValue(formatByteSize(drafts[scope].uploads.thresholdBytes));
+        input.onSubmit = (value) => {
+          const bytes = parseByteSizeInput(value);
+          if (bytes === undefined || bytes <= 0) {
+            ctx.ui.notify("Upload threshold must be a positive size, for example 2 MiB", "error");
+            submenuDone();
+            return;
+          }
+          submenuDone(formatByteSize(bytes));
+        };
+        input.onEscape = () => submenuDone();
+        return input;
+      },
+    });
 
-async function editMoonshotTool(
-  pi: ExtensionAPI,
-  ctx: ExtensionCommandContext,
-  state: KimiRuntimeState,
-  scope: KimiConfigScope,
-  config: KimiCodeConfig,
-  toolName: KimiToolName,
-): Promise<KimiCodeConfig> {
-  let current = config;
-  while (true) {
-    const tool = current.tools[toolName];
-    const choice = await ctx.ui.select(
-      `Edit ${toolName}\n\n${formatToolStatus(current, toolName)}`,
-      [
-        tool.enabled ? `Disable ${toolName}` : `Enable ${toolName}`,
-        tool.default_collapsed ? "Expand previews by default" : "Collapse previews by default",
-        "Back",
-      ],
-    );
-    if (!choice || choice === "Back") return current;
-    if (choice.startsWith("Enable") || choice.startsWith("Disable")) {
-      current = toggleEnabled(current, toolName);
-    } else if (choice.endsWith("previews by default")) {
-      current = toggleCollapsed(current, toolName);
-    }
-    saveAndApplyKimiCodeConfig(pi, ctx, state, scope, current);
-    ctx.ui.notify(`Saved ${toolName} config`, "info");
-    return current;
-  }
-}
+    list = new SettingsList(items, items.length, settingsTheme, onChange, () => done(), {
+      enableSearch: true,
+    });
 
-function saveAndApplyKimiCodeConfig(
-  pi: ExtensionAPI,
-  ctx: ExtensionCommandContext,
-  state: KimiRuntimeState,
-  scope: KimiConfigScope,
-  config: KimiCodeConfig,
-): void {
-  saveScopeKimiCodeConfig(scope, ctx.cwd, config);
-  applyEffectiveKimiRuntimeConfig(pi, state, ctx.cwd, { updateActiveTools: true });
-}
+    return {
+      items,
+      onChange,
+      render(width: number) {
+        const usageLines = usage.split("\n").map((line) => truncateToWidth(`  ${line}`, width));
+        return [
+          truncateToWidth(
+            theme.fg("accent", theme.bold(`Kimi settings (provider v${PROVIDER_VERSION})`)),
+            width,
+          ),
+          "",
+          truncateToWidth(theme.fg("accent", theme.bold("Kimi usage")), width),
+          ...usageLines,
+          "",
+          ...list.render(width),
+        ];
+      },
+      handleInput(data: string) {
+        list.handleInput?.(data);
+        tui.requestRender();
+      },
+      invalidate() {
+        list.invalidate();
+      },
+    };
+  });
 
-function loadScopeKimiCodeConfig(scope: KimiConfigScope, cwd: string): KimiCodeConfig {
-  if (scope === "project") return loadProjectKimiCodeConfig(cwd);
-  return loadHomeKimiCodeConfig(os.homedir());
+  if (dirty) await ctx.reload();
 }
 
 function saveScopeKimiCodeConfig(
@@ -459,167 +354,83 @@ function saveScopeKimiCodeConfig(
   }
 }
 
-function buildKimiMainTitle(config: KimiCodeConfig, cwd: string, extras: KimiOAuthExtras): string {
-  const sources = loadKimiCodeConfigSources({ cwd, home: os.homedir() });
-  const modelName = extras.modelDisplay || "kimi-for-coding";
-  return [
-    `Kimi settings (provider v${PROVIDER_VERSION})`,
-    "",
-    `Model: ${modelName}`,
-    `Protocol: ${config.protocol} (${sources.protocol})`,
-    `Upload threshold: ${formatByteSize(config.uploads.thresholdBytes)} (${sources.uploads.thresholdBytes})`,
-    "",
-    "Effective tools:",
-    ...KIMI_TOOL_NAMES.map((toolName) => {
-      const enabled = config.tools[toolName].enabled ? "enabled" : "disabled";
-      return `- ${toolName}: ${enabled} (${sources.tools[toolName].enabled})`;
-    }),
-  ].join("\n");
-}
-
-function buildConfigScopeTitle(
-  scope: KimiConfigScope,
-  config: KimiCodeConfig,
-  cwd: string,
-): string {
-  const path =
-    scope === "project"
-      ? relative(cwd, getProjectKimiCodeConfigPath(cwd))
-      : homeRelative(getGlobalKimiCodeConfigPath(os.homedir()));
-  return [
-    `Edit ${scope} config`,
-    `File: ${path}`,
-    "",
-    formatProtocolStatus(config),
-    formatUploadThresholdStatus(config),
-    "",
-    moonshotStatus(config),
-  ].join("\n");
-}
-
-function homeRelative(filePath: string): string {
-  const home = os.homedir();
-  return filePath.startsWith(`${home}/`) ? `~/${filePath.slice(home.length + 1)}` : filePath;
-}
-
-function toolMenuItem(config: KimiCodeConfig, toolName: KimiToolName): string {
-  return `${toolName} -> ${formatToolStatus(config, toolName)}`;
-}
-
-function protocolMenuItem(config: KimiCodeConfig): string {
-  return `Protocol -> ${config.protocol}`;
-}
-
-function uploadThresholdMenuItem(config: KimiCodeConfig): string {
-  return `Upload threshold -> ${formatByteSize(config.uploads.thresholdBytes)}`;
-}
-
-function formatByteSize(bytes: number): string {
-  const units = [
-    { suffix: "GiB", size: 1024 ** 3 },
-    { suffix: "MiB", size: 1024 ** 2 },
-    { suffix: "KiB", size: 1024 },
-  ];
-  for (const unit of units) {
-    if (bytes >= unit.size && bytes % unit.size === 0) {
-      return `${bytes / unit.size} ${unit.suffix}`;
-    }
-  }
-  for (const unit of units) {
-    if (bytes >= unit.size) {
-      return `${(bytes / unit.size).toFixed(2).replace(/\.00$/, "")} ${unit.suffix}`;
-    }
-  }
-  return `${bytes} B`;
-}
-
-function parseByteSizeInput(input: string): number | undefined {
-  const match = input.trim().match(/^(\d+(?:\.\d+)?)\s*(b|bytes?|kib|kb|mib|mb|gib|gb)?$/i);
-  if (!match) return undefined;
-  const value = Number(match[1]);
-  if (!Number.isFinite(value) || value <= 0) return undefined;
-  const unit = (match[2] ?? "mib").toLowerCase();
-  const multipliers: Record<string, number> = {
-    b: 1,
-    byte: 1,
-    bytes: 1,
-    kib: 1024,
-    kb: 1000,
-    mib: 1024 ** 2,
-    mb: 1000 ** 2,
-    gib: 1024 ** 3,
-    gb: 1000 ** 3,
-  };
-  const multiplier = multipliers[unit];
-  if (!multiplier) return undefined;
-  const bytes = Math.round(value * multiplier);
-  return Number.isSafeInteger(bytes) && bytes > 0 ? bytes : undefined;
-}
-
-function formatProtocolStatus(config: KimiCodeConfig): string {
-  return `protocol: ${config.protocol}`;
-}
-
-function formatUploadThresholdStatus(config: KimiCodeConfig): string {
-  return `upload threshold: ${formatByteSize(config.uploads.thresholdBytes)}`;
-}
+function registerKimiProvider(pi: ExtensionAPI, state: KimiRuntimeState): void {
+  const model = applyKimiOAuthExtrasToModel(
+    buildKimiModelFromConfig(state.config.model),
+    state.modelExtras,
+  );
 
-function formatToolStatus(config: KimiCodeConfig, toolName: KimiToolName): string {
-  const tool = config.tools[toolName];
-  const enabled = tool.enabled ? "enabled" : "disabled";
-  const collapsed = tool.default_collapsed ? "default collapsed" : "default expanded";
-  return `${enabled}, ${collapsed}`;
+  pi.registerProvider(PROVIDER_ID, {
+    baseUrl: getBaseUrl(state.config.protocol),
+    apiKey: "$KIMI_API_KEY",
+    api: getKimiApiType(state.config.protocol),
+    streamSimple: streamSimpleKimi,
+
+    models: [model],
+
+    oauth: {
+      name: "Kimi Code (OAuth)",
+      login: loginKimiCode,
+      refreshToken: refreshKimiCodeToken,
+      getApiKey: (cred) => cred.access,
+      // Reflect server-side model identity on the registered model after login
+      // / refresh. We never rewrite the model id (pi-side `/model` selections
+      // and persisted sessions reference it); only the human-facing name, the
+      // context window, and an out-of-band `wireModelId` carried into the
+      // request payload by streamSimpleKimi.
+      modifyModels: (models, cred) => {
+        const extras = cred as KimiOAuthCredentials;
+        state.modelExtras = extras;
+        reloadEffectiveKimiRuntimeConfig(state, state.cwd, state.projectTrusted);
+        return models.map((model) => {
+          if (model.id !== "kimi-for-coding") return model;
+          return applyKimiOAuthExtrasToModel(model, extras);
+        });
+      },
+    },
+  });
 }
 
 export function KimiCode(overrides?: KimiCodeConfigPatch): ExtensionFactory {
   return async (pi: ExtensionAPI) => {
     const cwd = process.cwd();
-    const config = loadKimiCodeConfig({ cwd, home: os.homedir() }, overrides);
-    const baseModel = buildKimiModelFromConfig(config.model);
+    const config = loadKimiCodeConfig(
+      { cwd, home: os.homedir(), includeProject: false },
+      overrides,
+    );
     const discoveryToken = getKimiUsageToken();
     const discovered = discoveryToken
       ? await discoverKimiModelMetadata(discoveryToken, config.protocol)
       : {};
-    const state: KimiRuntimeState = { cwd, config, modelExtras: discovered, overrides };
-    reloadEffectiveKimiRuntimeConfig(state, cwd);
-    const model = applyKimiOAuthExtrasToModel(baseModel, discovered);
-
-    pi.registerProvider(PROVIDER_ID, {
-      baseUrl: getBaseUrl(config.protocol),
-      apiKey: "$KIMI_API_KEY",
-      api: getKimiApiType(config.protocol),
-      streamSimple: streamSimpleKimi,
-
-      models: [model],
-
-      oauth: {
-        name: "Kimi Code (OAuth)",
-        login: loginKimiCode,
-        refreshToken: refreshKimiCodeToken,
-        getApiKey: (cred) => cred.access,
-        // Reflect server-side model identity on the registered model after login
-        // / refresh. We never rewrite the model id (pi-side `/model` selections
-        // and persisted sessions reference it); only the human-facing name, the
-        // context window, and an out-of-band `wireModelId` carried into the
-        // request payload by streamSimpleKimi.
-        modifyModels: (models, cred) => {
-          const extras = cred as KimiOAuthCredentials;
-          state.modelExtras = extras;
-          reloadEffectiveKimiRuntimeConfig(state, state.cwd);
-          return models.map((model) => {
-            if (model.id !== "kimi-for-coding") return model;
-            return applyKimiOAuthExtrasToModel(model, extras);
-          });
-        },
-      },
-    });
+    const state: KimiRuntimeState = {
+      cwd,
+      config,
+      modelExtras: discovered,
+      projectTrusted: false,
+      overrides,
+    };
+    reloadEffectiveKimiRuntimeConfig(state, cwd, false);
+    registerKimiProvider(pi, state);
 
     registerConfiguredMoonshotTools(pi, state.config, { updateActiveTools: false });
 
+    pi.on("session_start", async (_event, ctx) => {
+      const projectTrusted = await isKimiProjectConfigApproved(ctx, ctx.cwd);
+      applyEffectiveKimiRuntimeConfig(pi, state, ctx.cwd, {
+        updateActiveTools: true,
+        projectTrusted,
+      });
+      registerKimiProvider(pi, state);
+    });
+
     pi.registerCommand("kimi-settings", {
       description: "Show Kimi usage and configure optional Kimi tools",
       handler: async (_args, ctx) => {
-        await runKimiCommand(pi, ctx, state);
+        if (ctx.mode !== "tui") {
+          ctx.ui.notify("/kimi-settings requires TUI mode", "error");
+          return;
+        }
+        await openSettingsMenu(pi, ctx, state);
       },
     });
   };