@@ -0,0 +1,5 @@
+---
+"@moonshot-ai/kimi-code": patch
+---
+
+Replace inline MCP commands in the workspace trust prompt with activation summaries and configuration paths for manual inspection.
@@ -6,44 +6,32 @@ import {
   type Component,
   type Focusable,
 } from '@moonshot-ai/pi-tui';
-
-import type { WorkspaceTrustMcpServerInfo } from '@moonshot-ai/kimi-code-sdk';
+import type { WorkspaceTrustInfo } from '@moonshot-ai/kimi-code-sdk';
 
 import { SELECT_POINTER } from '#/tui/constant/symbols';
-import { currentTheme } from '#/tui/theme';
+import { currentTheme, type ColorToken } from '#/tui/theme';
+import { pageView } from '#/tui/utils/paging';
 
 export type TrustPromptChoice = 'trust' | 'distrust';
 
 export interface TrustPromptOptions {
   readonly workDir: string;
-  /** Project-level MCP servers that trusting would enable; may be empty. */
-  readonly gatedMcpServers: readonly WorkspaceTrustMcpServerInfo[];
-  /** Esc resolves to 'distrust' as well. */
+  readonly info: WorkspaceTrustInfo;
+  readonly getAvailableRows?: () => number;
   readonly onSelect: (choice: TrustPromptChoice) => void;
 }
 
-interface TrustPromptOption {
-  readonly value: TrustPromptChoice;
-  readonly label: string;
-  readonly description: string;
-}
-
-const OPTIONS: readonly TrustPromptOption[] = [
-  {
-    value: 'trust',
-    label: 'Trust this folder',
-    description: 'Enable project MCP servers. Remembered for this folder.',
-  },
-  {
-    value: 'distrust',
-    label: "Don't trust",
-    description: 'Exit Kimi Code. Asked again next launch.',
-  },
+const OPTIONS: readonly { value: TrustPromptChoice; label: string }[] = [
+  { value: 'trust', label: 'Trust and continue' },
+  { value: 'distrust', label: 'Exit' },
 ];
 
 export class TrustPromptComponent implements Component, Focusable {
   focused = false;
   private selectedIndex = 0;
+  private disclosureIndex = 0;
+  private disclosurePageSize = 1;
+  private canConfirm = true;
 
   constructor(private readonly opts: TrustPromptOptions) {}
 
@@ -62,73 +50,171 @@ export class TrustPromptComponent implements Component, Focusable {
       this.selectedIndex = Math.min(OPTIONS.length - 1, this.selectedIndex + 1);
       return;
     }
-    if (matchesKey(data, Key.enter) || matchesKey(data, Key.space)) {
+    const previousPage = matchesKey(data, Key.left) || matchesKey(data, Key.pageUp);
+    const nextPage = matchesKey(data, Key.right) || matchesKey(data, Key.pageDown);
+    if (previousPage || nextPage) {
+      this.disclosureIndex = Math.max(
+        0,
+        this.disclosureIndex + (previousPage ? -1 : 1) * this.disclosurePageSize,
+      );
+      return;
+    }
+    if (this.canConfirm && (matchesKey(data, Key.enter) || matchesKey(data, Key.space))) {
       this.opts.onSelect(OPTIONS[this.selectedIndex]!.value);
     }
   }
 
   render(width: number): string[] {
     const rule = currentTheme.fg('primary', '─'.repeat(width));
-    const lines = [
+    const availableRows = Math.max(0, Math.floor(this.opts.getAvailableRows?.() ?? Infinity));
+    const header = [
       rule,
       currentTheme.boldFg('primary', ' Trust this folder?'),
       currentTheme.fg('textMuted', ' ↑↓ navigate · Enter select · Esc exit'),
       '',
-      ...wrapTextWithAnsi(this.opts.workDir, Math.max(20, width - 2)).map(
-        (line) => ` ${currentTheme.fg('textStrong', line)}`,
+    ];
+    const body = [
+      ...wrap(this.opts.workDir, 1, width, 'textStrong'),
+      '',
+      ...this.renderDisclosure(width),
+    ];
+    const footer = [
+      ...wrap(
+        'Trust is remembered for this folder, including future project config changes.',
+        1,
+        width,
+        'textMuted',
       ),
+      ...wrap('Tool approvals follow your permission settings.', 1, width, 'textMuted'),
       '',
+      ...OPTIONS.map((option, i) => {
+        const selected = i === this.selectedIndex;
+        const pointer = selected ? SELECT_POINTER : ' ';
+        const label = selected
+          ? currentTheme.boldFg('primary', option.label)
+          : currentTheme.fg('text', option.label);
+        return currentTheme.fg(selected ? 'primary' : 'textDim', `  ${pointer} `) + label;
+      }),
+      rule,
     ];
-
-    const notice =
-      'Project-level MCP servers are disabled until you explicitly choose Trust. Trust starts the listed project MCP targets and remembers this folder.';
-    for (const line of wrapTextWithAnsi(notice, Math.max(20, width - 2))) {
-      lines.push(` ${currentTheme.fg('textMuted', line)}`);
+    this.canConfirm = header.length + footer.length + 2 <= availableRows;
+    if (!this.canConfirm) {
+      return [header[1]!, ' Enlarge terminal to review sources. Esc exit.']
+        .slice(0, availableRows)
+        .map((line) => truncateToWidth(line, width));
     }
-    if (this.opts.gatedMcpServers.length > 0) {
-      lines.push(` ${currentTheme.fg('warning', 'Project MCP targets:')}`);
-      for (const server of this.opts.gatedMcpServers) {
-        const details = formatMcpTarget(server);
-        for (const line of wrapTextWithAnsi(details, Math.max(20, width - 4))) {
-          lines.push(`   ${currentTheme.fg('warning', line)}`);
-        }
-      }
-    }
-    lines.push('');
+    const needsPaging = header.length + body.length + footer.length > availableRows;
+    this.disclosurePageSize = needsPaging
+      ? availableRows - header.length - footer.length - 1
+      : body.length;
+    const page = pageView(body.length, this.disclosureIndex, this.disclosurePageSize);
+    this.disclosureIndex = page.start;
+    const lines = [...header, ...body.slice(page.start, page.end)];
+    while (lines.length < header.length + this.disclosurePageSize) lines.push('');
+    if (page.pageCount > 1)
+      lines.push(currentTheme.fg('textMuted', ` ←→ page · ${page.page + 1} / ${page.pageCount}`));
+    lines.push(...footer);
+    return lines.map((line) => truncateToWidth(line, width));
+  }
 
-    for (let i = 0; i < OPTIONS.length; i += 1) {
-      const option = OPTIONS[i]!;
-      const selected = i === this.selectedIndex;
-      const pointer = selected ? SELECT_POINTER : ' ';
-      const label = selected
-        ? currentTheme.boldFg('primary', option.label)
-        : currentTheme.fg('text', option.label);
-      lines.push(currentTheme.fg(selected ? 'primary' : 'textDim', `  ${pointer} `) + label);
-      for (const line of wrapTextWithAnsi(option.description, Math.max(20, width - 4))) {
-        lines.push(`    ${currentTheme.fg('textMuted', line)}`);
+  private renderDisclosure(width: number): string[] {
+    const {
+      gatedMcpServers,
+      gatedAdditionalDirs,
+      additionalDirSources,
+      instructionSources,
+      warnings,
+    } = this.opts.info;
+    const lines: string[] = [];
+    if (gatedMcpServers.length > 0) {
+      lines.push(
+        ...wrap(
+          `Start ${gatedMcpServers.length} MCP ${
+            gatedMcpServers.length === 1 ? 'server' : 'servers'
+          } automatically`,
+          1,
+          width,
+          'warning',
+        ),
+      );
+      const origins = [...new Set(gatedMcpServers.map((server) => server.origin))];
+      lines.push(
+        ...wrap(
+          `Config: ${origins.map((path) => relativize(this.opts.workDir, path)).join(', ')}`,
+          3,
+          width,
+          'textMuted',
+        ),
+        '',
+      );
+    }
+    if (gatedAdditionalDirs.length > 0) {
+      lines.push(
+        ...wrap(
+          `Access ${gatedAdditionalDirs.length} ${
+            gatedAdditionalDirs.length === 1 ? 'folder' : 'folders'
+          } outside this project`,
+          1,
+          width,
+          'warning',
+        ),
+      );
+      if (additionalDirSources.length > 0) {
+        lines.push(
+          ...wrap(
+            `Config: ${additionalDirSources
+              .map((path) => relativize(this.opts.workDir, path))
+              .join(', ')}`,
+            3,
+            width,
+            'textMuted',
+          ),
+        );
       }
       lines.push('');
     }
-
-    lines.push(rule);
-    return lines.map((line) => truncateToWidth(line, width));
+    if (instructionSources.paths.length > 0) {
+      const hasInstructions =
+        instructionSources.agentsMdPaths.length > 0 || instructionSources.skills.length > 0;
+      const subject = hasInstructions
+        ? instructionSources.agentProfiles.length > 0
+          ? 'instructions and agent profiles'
+          : 'instructions'
+        : 'agent profiles';
+      lines.push(...wrap(`Load project ${subject}`, 1, width, 'text'));
+      lines.push(
+        ...wrap(
+          `Check: ${instructionSources.paths.map((path) => relativize(this.opts.workDir, path)).join(' · ')}`,
+          3,
+          width,
+          'textMuted',
+        ),
+        '',
+      );
+    }
+    for (const warning of warnings) lines.push(...wrap(warning, 1, width, 'warning'));
+    if (lines.length === 0)
+      lines.push(
+        ...wrap('No project integrations or instructions to activate.', 1, width, 'textMuted'),
+        '',
+      );
+    return lines;
   }
 }
 
-function formatMcpTarget(server: WorkspaceTrustMcpServerInfo): string {
-  if (server.transport === 'stdio') {
-    const args = server.args === undefined ? '' : ` args=${JSON.stringify(server.args)}`;
-    const cwd = server.cwd === undefined ? '' : ` cwd=${server.cwd}`;
-    return sanitizeForDisplay(`${server.name} (stdio): command=${server.command ?? ''}${args}${cwd}`);
-  }
-  return sanitizeForDisplay(`${server.name} (${server.transport}): url=${server.url ?? ''}`);
+function wrap(text: string, indent: number, width: number, color: ColorToken): string[] {
+  return wrapTextWithAnsi(sanitizeForDisplay(text), Math.max(1, width - indent)).map(
+    (line) => `${' '.repeat(indent)}${currentTheme.fg(color, line)}`,
+  );
+}
+
+function relativize(workDir: string, path: string): string {
+  const normalizedDir = workDir.replaceAll('\\', '/');
+  const normalizedPath = path.replaceAll('\\', '/');
+  const prefix = normalizedDir.endsWith('/') ? normalizedDir : `${normalizedDir}/`;
+  return normalizedPath.startsWith(prefix) ? normalizedPath.slice(prefix.length) : normalizedPath;
 }
 
-/**
- * Drops C0/C1 control characters (including ESC) from workspace-supplied text:
- * the trust prompt renders before the workspace is trusted, so a planted
- * `.mcp.json` must not inject terminal control sequences into it.
- */
 function sanitizeForDisplay(value: string): string {
   let result = '';
   for (const char of value) {
 
@@ -3888,7 +3888,14 @@ export class KimiTUI {
     try {
       info = await this.harness.getWorkspaceTrustInfo(workDir);
     } catch {
-      info = { trusted: false, gatedMcpServers: [] };
+      info = {
+        trusted: false,
+        gatedMcpServers: [],
+        gatedAdditionalDirs: [],
+        additionalDirSources: [],
+        warnings: ['Could not inspect project settings.'],
+        instructionSources: { agentsMdPaths: [], skills: [], agentProfiles: [], paths: [] },
+      };
     }
     if (info.trusted) {
       return false;
@@ -3899,7 +3906,9 @@ export class KimiTUI {
       this.mountEditorReplacement(
         new TrustPromptComponent({
           workDir,
-          gatedMcpServers: info.gatedMcpServers,
+          info,
+          getAvailableRows: () =>
+            this.state.terminal.rows - (this.state.ui instanceof TuiAltScreen ? 1 : 0),
           onSelect: (c) => {
             resolve(c);
           },
-Original file line number
+Diff line change
@@ @@ -0,0 +1,5 @@ @@
 +---
 +"@moonshot-ai/kimi-code": patch
 +---
++
 +Replace inline MCP commands in the workspace trust prompt with activation summaries and configuration paths for manual inspection.