Function _gate_folder_trust

src/cli.py:168–189

Run the folder-trust gate; return ``False`` only when an interactive user declines (the caller then exits 1). Shared by the default interactive entry and the ``clawcodex tui`` subcommand — both hand control to the tool-executing agent-server, which has no trust gate of its own, so t

()

def _gate_folder_trust() -> bool:
    """Run the folder-trust gate; return ``False`` only when an interactive user
    declines (the caller then exits 1).

    Shared by the default interactive entry and the ``clawcodex tui`` subcommand
    — both hand control to the tool-executing agent-server, which has no trust
    gate of its own, so the gate must run before either spawns it.
    """
    from src.services.startup_gates import check_trust_accepted

    if check_trust_accepted():
        return True
    if sys.stdin.isatty():
        return _prompt_folder_trust()
    # Non-TTY (piped) stdin: grant trust implicitly. The Ink TUI needs a real
    # TTY to render, so this path normally proceeds to a clean launch failure
    # rather than an interactive session — but trust is still established so the
    # project env is applied for any diagnostics.
    from src.permissions.trust_boundary import establish_session_trust

    establish_session_trust()
    return True


def _run_tui_subcommand(rest: list[str]) -> int: