feat: show what trusting a workspace would activate

The trust prompt and SDK trust info now disclose gated MCP servers with
their config origins, additional directory grants, and the project
instruction sources (AGENTS.md, skills, agent profiles) that load on
trust.

Author: elkaix

apps/pythinker-code/src/tui/components/dialogs/trust-prompt.ts

@@ -6,44 +6,32 @@ import {
   type Component,
   type Focusable,
 } from '@pymodel/pi-tui';
-
-import type { WorkspaceTrustMcpServerInfo } from '@pymodel/pythinker-code-sdk';
+import type { WorkspaceTrustInfo } from '@pymodel/pythinker-code-sdk';
 
 import { SELECT_POINTER } from '#/tui/constant/symbols';
-import { currentTheme } from '#/tui/theme';
+import { currentTheme, type ColorToken } from '#/tui/theme';
+import { pageView } from '#/tui/utils/paging';
 
 export type TrustPromptChoice = 'trust' | 'distrust';
 
 export interface TrustPromptOptions {
   readonly workDir: string;
-  /** Project-level MCP servers that trusting would enable; may be empty. */
-  readonly gatedMcpServers: readonly WorkspaceTrustMcpServerInfo[];
-  /** Esc resolves to 'distrust' as well. */
+  readonly info: WorkspaceTrustInfo;
+  readonly getAvailableRows?: () => number;
   readonly onSelect: (choice: TrustPromptChoice) => void;
 }
 
-interface TrustPromptOption {
-  readonly value: TrustPromptChoice;
-  readonly label: string;
-  readonly description: string;
-}
-
-const OPTIONS: readonly TrustPromptOption[] = [
-  {
-    value: 'trust',
-    label: 'Trust this folder',
-    description: 'Enable project MCP servers. Remembered for this folder.',
-  },
-  {
-    value: 'distrust',
-    label: "Don't trust",
-    description: 'Exit Pythinker Code. Asked again next launch.',
-  },
+const OPTIONS: readonly { value: TrustPromptChoice; label: string }[] = [
+  { value: 'trust', label: 'Trust and continue' },
+  { value: 'distrust', label: 'Exit' },
 ];
 
 export class TrustPromptComponent implements Component, Focusable {
   focused = false;
   private selectedIndex = 0;
+  private disclosureIndex = 0;
+  private disclosurePageSize = 1;
+  private canConfirm = true;
 
   constructor(private readonly opts: TrustPromptOptions) {}
 
@@ -62,73 +50,171 @@ export class TrustPromptComponent implements Component, Focusable {
       this.selectedIndex = Math.min(OPTIONS.length - 1, this.selectedIndex + 1);
       return;
     }
-    if (matchesKey(data, Key.enter)) {
+    const previousPage = matchesKey(data, Key.left) || matchesKey(data, Key.pageUp);
+    const nextPage = matchesKey(data, Key.right) || matchesKey(data, Key.pageDown);
+    if (previousPage || nextPage) {
+      this.disclosureIndex = Math.max(
+        0,
+        this.disclosureIndex + (previousPage ? -1 : 1) * this.disclosurePageSize,
+      );
+      return;
+    }
+    if (this.canConfirm && (matchesKey(data, Key.enter) || matchesKey(data, Key.space))) {
       this.opts.onSelect(OPTIONS[this.selectedIndex]!.value);
     }
   }
 
   render(width: number): string[] {
     const rule = currentTheme.fg('primary', '─'.repeat(width));
-    const lines = [
+    const availableRows = Math.max(0, Math.floor(this.opts.getAvailableRows?.() ?? Infinity));
+    const header = [
       rule,
       currentTheme.boldFg('primary', ' Trust this folder?'),
       currentTheme.fg('textMuted', ' ↑↓ navigate · Enter select · Esc exit'),
       '',
-      ...wrapTextWithAnsi(this.opts.workDir, Math.max(20, width - 2)).map(
-        (line) => ` ${currentTheme.fg('textStrong', line)}`,
+    ];
+    const body = [
+      ...wrap(this.opts.workDir, 1, width, 'textStrong'),
+      '',
+      ...this.renderDisclosure(width),
+    ];
+    const footer = [
+      ...wrap(
+        'Trust is remembered for this folder, including future project config changes.',
+        1,
+        width,
+        'textMuted',
       ),
+      ...wrap('Tool approvals follow your permission settings.', 1, width, 'textMuted'),
       '',
+      ...OPTIONS.map((option, i) => {
+        const selected = i === this.selectedIndex;
+        const pointer = selected ? SELECT_POINTER : ' ';
+        const label = selected
+          ? currentTheme.boldFg('primary', option.label)
+          : currentTheme.fg('text', option.label);
+        return currentTheme.fg(selected ? 'primary' : 'textDim', `  ${pointer} `) + label;
+      }),
+      rule,
     ];
-
-    const notice =
-      'Project-level MCP servers are disabled until you explicitly choose Trust. Trust starts the listed project MCP targets and remembers this folder.';
-    for (const line of wrapTextWithAnsi(notice, Math.max(20, width - 2))) {
-      lines.push(` ${currentTheme.fg('textMuted', line)}`);
+    this.canConfirm = header.length + footer.length + 2 <= availableRows;
+    if (!this.canConfirm) {
+      return [header[1]!, ' Enlarge terminal to review sources. Esc exit.']
+        .slice(0, availableRows)
+        .map((line) => truncateToWidth(line, width));
     }
-    if (this.opts.gatedMcpServers.length > 0) {
-      lines.push(` ${currentTheme.fg('warning', 'Project MCP targets:')}`);
-      for (const server of this.opts.gatedMcpServers) {
-        const details = formatMcpTarget(server);
-        for (const line of wrapTextWithAnsi(details, Math.max(20, width - 4))) {
-          lines.push(`   ${currentTheme.fg('warning', line)}`);
-        }
-      }
-    }
-    lines.push('');
+    const needsPaging = header.length + body.length + footer.length > availableRows;
+    this.disclosurePageSize = needsPaging
+      ? availableRows - header.length - footer.length - 1
+      : body.length;
+    const page = pageView(body.length, this.disclosureIndex, this.disclosurePageSize);
+    this.disclosureIndex = page.start;
+    const lines = [...header, ...body.slice(page.start, page.end)];
+    while (lines.length < header.length + this.disclosurePageSize) lines.push('');
+    if (page.pageCount > 1)
+      lines.push(currentTheme.fg('textMuted', ` ←→ page · ${page.page + 1} / ${page.pageCount}`));
+    lines.push(...footer);
+    return lines.map((line) => truncateToWidth(line, width));
+  }
 
-    for (let i = 0; i < OPTIONS.length; i += 1) {
-      const option = OPTIONS[i]!;
-      const selected = i === this.selectedIndex;
-      const pointer = selected ? SELECT_POINTER : ' ';
-      const label = selected
-        ? currentTheme.boldFg('primary', option.label)
-        : currentTheme.fg('text', option.label);
-      lines.push(currentTheme.fg(selected ? 'primary' : 'textDim', `  ${pointer} `) + label);
-      for (const line of wrapTextWithAnsi(option.description, Math.max(20, width - 4))) {
-        lines.push(`    ${currentTheme.fg('textMuted', line)}`);
+  private renderDisclosure(width: number): string[] {
+    const {
+      gatedMcpServers,
+      gatedAdditionalDirs,
+      additionalDirSources,
+      instructionSources,
+      warnings,
+    } = this.opts.info;
+    const lines: string[] = [];
+    if (gatedMcpServers.length > 0) {
+      lines.push(
+        ...wrap(
+          `Start ${gatedMcpServers.length} MCP ${
+            gatedMcpServers.length === 1 ? 'server' : 'servers'
+          } automatically`,
+          1,
+          width,
+          'warning',
+        ),
+      );
+      const origins = [...new Set(gatedMcpServers.map((server) => server.origin))];
+      lines.push(
+        ...wrap(
+          `Config: ${origins.map((path) => relativize(this.opts.workDir, path)).join(', ')}`,
+          3,
+          width,
+          'textMuted',
+        ),
+        '',
+      );
+    }
+    if (gatedAdditionalDirs.length > 0) {
+      lines.push(
+        ...wrap(
+          `Access ${gatedAdditionalDirs.length} ${
+            gatedAdditionalDirs.length === 1 ? 'folder' : 'folders'
+          } outside this project`,
+          1,
+          width,
+          'warning',
+        ),
+      );
+      if (additionalDirSources.length > 0) {
+        lines.push(
+          ...wrap(
+            `Config: ${additionalDirSources
+              .map((path) => relativize(this.opts.workDir, path))
+              .join(', ')}`,
+            3,
+            width,
+            'textMuted',
+          ),
+        );
       }
       lines.push('');
     }
-
-    lines.push(rule);
-    return lines.map((line) => truncateToWidth(line, width));
+    if (instructionSources.paths.length > 0) {
+      const hasInstructions =
+        instructionSources.agentsMdPaths.length > 0 || instructionSources.skills.length > 0;
+      const subject = hasInstructions
+        ? instructionSources.agentProfiles.length > 0
+          ? 'instructions and agent profiles'
+          : 'instructions'
+        : 'agent profiles';
+      lines.push(...wrap(`Load project ${subject}`, 1, width, 'text'));
+      lines.push(
+        ...wrap(
+          `Check: ${instructionSources.paths.map((path) => relativize(this.opts.workDir, path)).join(' · ')}`,
+          3,
+          width,
+          'textMuted',
+        ),
+        '',
+      );
+    }
+    for (const warning of warnings) lines.push(...wrap(warning, 1, width, 'warning'));
+    if (lines.length === 0)
+      lines.push(
+        ...wrap('No project integrations or instructions to activate.', 1, width, 'textMuted'),
+        '',
+      );
+    return lines;
   }
 }
 
-function formatMcpTarget(server: WorkspaceTrustMcpServerInfo): string {
-  if (server.transport === 'stdio') {
-    const args = server.args === undefined ? '' : ` args=${JSON.stringify(server.args)}`;
-    const cwd = server.cwd === undefined ? '' : ` cwd=${server.cwd}`;
-    return sanitizeForDisplay(`${server.name} (stdio): command=${server.command ?? ''}${args}${cwd}`);
-  }
-  return sanitizeForDisplay(`${server.name} (${server.transport}): url=${server.url ?? ''}`);
+function wrap(text: string, indent: number, width: number, color: ColorToken): string[] {
+  return wrapTextWithAnsi(sanitizeForDisplay(text), Math.max(1, width - indent)).map(
+    (line) => `${' '.repeat(indent)}${currentTheme.fg(color, line)}`,
+  );
+}
+
+function relativize(workDir: string, path: string): string {
+  const normalizedDir = workDir.replaceAll('\\', '/');
+  const normalizedPath = path.replaceAll('\\', '/');
+  const prefix = normalizedDir.endsWith('/') ? normalizedDir : `${normalizedDir}/`;
+  return normalizedPath.startsWith(prefix) ? normalizedPath.slice(prefix.length) : normalizedPath;
 }
 
-/**
- * Drops C0/C1 control characters (including ESC) from workspace-supplied text:
- * the trust prompt renders before the workspace is trusted, so a planted
- * `.mcp.json` must not inject terminal control sequences into it.
- */
 function sanitizeForDisplay(value: string): string {
   let result = '';
   for (const char of value) {

apps/pythinker-code/src/tui/pythinker-tui.ts

@@ -3878,7 +3878,14 @@ export class PythinkerTUI {
     try {
       info = await this.harness.getWorkspaceTrustInfo(workDir);
     } catch {
-      info = { trusted: false, gatedMcpServers: [] };
+      info = {
+        trusted: false,
+        gatedMcpServers: [],
+        gatedAdditionalDirs: [],
+        additionalDirSources: [],
+        warnings: ['Could not inspect project settings.'],
+        instructionSources: { agentsMdPaths: [], skills: [], agentProfiles: [], paths: [] },
+      };
     }
     if (info.trusted) {
       return false;
@@ -3889,7 +3896,9 @@ export class PythinkerTUI {
       this.mountEditorReplacement(
         new TrustPromptComponent({
           workDir,
-          gatedMcpServers: info.gatedMcpServers,
+          info,
+          getAvailableRows: () =>
+            this.state.terminal.rows - (this.state.ui instanceof TuiAltScreen ? 1 : 0),
           onSelect: (c) => {
             resolve(c);
           },