nolo-cli 0.154.0-alpha.1 → 0.154.1

package/{chunk-SW4S4XYB.js → chunk-2AB2HA4M.js}

@@ -296,21 +296,49 @@ var STRINGS = {
     en: "Usage: /altscreen <on|off>",
     zh: "\u7528\u6CD5\uFF1A/altscreen <on|off>"
   },
-  autoCurrent: {
-    en: "Permission auto-approve: {0}",
-    zh: "\u6743\u9650\u81EA\u52A8\u5316\uFF1A{0}"
-  },
   autoUsage: {
-    en: "Usage: /auto <on|off>",
-    zh: "\u7528\u6CD5\uFF1A/auto <on|off>"
+    en: "Usage: /auto [local|remote] <on|off> \xB7 /auto reset (clear both)",
+    zh: "\u7528\u6CD5\uFF1A/auto [local|remote] <on|off> \xB7 /auto reset\uFF08\u4E24\u6876\u6E05\u96F6\uFF09"
+  },
+  autoStateLine: {
+    en: "Local-run grant: {0} \xB7 Remote-origin shell grant: {1}",
+    zh: "\u672C\u673A run \u6388\u6743\uFF1A{0} \xB7 \u8FDC\u7A0B\u6765\u6E90\u5728\u672C\u673A\u6267\u884C shell \u6388\u6743\uFF1A{1}"
+  },
+  autoStateOnPersisted: {
+    en: "granted (saved)",
+    zh: "\u5DF2\u6388\u6743\uFF08\u5DF2\u4FDD\u5B58\uFF09"
+  },
+  autoStateOff: {
+    en: "ask every time",
+    zh: "\u9010\u6B21\u8BE2\u95EE"
+  },
+  autoKindLocal: {
+    en: "local-run confirmations (destructive shell / outside-workspace files / file writes)",
+    zh: "\u672C\u673A run \u7684\u786E\u8BA4\uFF08\u7834\u574F\u6027\u547D\u4EE4 / \u5DE5\u4F5C\u533A\u5916\u6587\u4EF6 / \u5199\u6587\u4EF6\uFF09"
+  },
+  autoKindRemote: {
+    en: "a remote origin running shell on this machine",
+    zh: "\u8FDC\u7A0B\u6765\u6E90\u5728\u672C\u673A\u6267\u884C shell"
+  },
+  autoGrantOn: {
+    en: "Approved and saved: {0}. That class no longer asks (this session and future starts). Undo with {1}.",
+    zh: "\u5DF2\u6279\u51C6\u5E76\u4FDD\u5B58\uFF1A{0}\u3002\u8BE5\u7C7B\u786E\u8BA4\u4E0D\u518D\u8BE2\u95EE\uFF08\u672C\u6B21\u4E0E\u540E\u7EED\u542F\u52A8\u90FD\u751F\u6548\uFF09\u3002\u64A4\u9500\u7528 {1}\u3002"
   },
-  autoOn: {
-    en: "Permission auto-approve ON \u2014 destructive shell and external-file confirmations will be skipped for this session.",
-    zh: "\u6743\u9650\u81EA\u52A8\u5316\u5DF2\u5F00\u542F\uFF1A\u672C\u4F1A\u8BDD\u5185\u7834\u574F\u6027 shell \u4E0E\u5916\u90E8\u6587\u4EF6\u8BBF\u95EE\u786E\u8BA4\u5C06\u81EA\u52A8\u653E\u884C\u3002"
+  autoGrantOff: {
+    en: "Revoked and saved: {0}. Those confirmations ask again (this session and future starts). Re-enable with {1}.",
+    zh: "\u5DF2\u64A4\u9500\u5E76\u4FDD\u5B58\uFF1A{0}\u3002\u8BE5\u7C7B\u786E\u8BA4\u6062\u590D\u9010\u6B21\u8BE2\u95EE\uFF08\u672C\u4F1A\u8BDD\u4E0E\u540E\u7EED\u542F\u52A8\u90FD\u751F\u6548\uFF09\u3002\u91CD\u65B0\u5F00\u542F\u7528 {1}\u3002"
   },
-  autoOff: {
-    en: "Permission auto-approve OFF \u2014 confirmations will ask again.",
-    zh: "\u6743\u9650\u81EA\u52A8\u5316\u5DF2\u5173\u95ED\uFF1A\u6062\u590D\u9010\u6B21\u786E\u8BA4\u3002"
+  autoReset: {
+    en: "Cleared and saved: both permission buckets are reset \u2014 every confirmation asks again.",
+    zh: "\u5DF2\u6E05\u7A7A\u5E76\u4FDD\u5B58\uFF1A\u672C\u673A\u4E0E\u8FDC\u7A0B\u4E24\u6876\u6388\u6743\u90FD\u6E05\u96F6\uFF0C\u6240\u6709\u786E\u8BA4\u6062\u590D\u9010\u6B21\u8BE2\u95EE\u3002"
+  },
+  autoPersistFailed: {
+    en: "This grant applies to this session only \u2014 it could not be saved to your config (no profile?).",
+    zh: "\u8BE5\u6388\u6743\u4EC5\u672C\u6B21\u4F1A\u8BDD\u6709\u6548\uFF1A\u672A\u80FD\u4FDD\u5B58\u5230\u914D\u7F6E\uFF08\u53EF\u80FD\u8FD8\u6CA1\u6709 profile\uFF09\u3002"
+  },
+  autoPersistedStartup: {
+    en: "Approved from your saved config: {0}. Those confirmations are skipped; undo with /auto reset.",
+    zh: "\u5DF2\u4ECE\u4FDD\u5B58\u7684\u914D\u7F6E\u751F\u6548\u7684\u6388\u6743\uFF1A{0}\u3002\u8FD9\u4E9B\u786E\u8BA4\u5DF2\u88AB\u8DF3\u8FC7\uFF1B\u64A4\u9500\u7528 /auto reset\u3002"
   },
   langSwitched: {
     en: "Language switched to English.",
@@ -580,40 +608,52 @@ var STRINGS = {
     zh: "\uFF08\u2191\u2193 \u79FB\u52A8 \xB7 Enter \u9009\u62E9 \xB7 Esc \u53D6\u6D88\uFF09"
   },
   dialogConfirmTitle: {
-    en: "Confirm destructive shell command",
-    zh: "\u786E\u8BA4\u6267\u884C\u7834\u574F\u6027 shell \u547D\u4EE4"
+    en: "Allow destructive shell commands from local runs?",
+    zh: "\u5141\u8BB8\u672C\u673A run \u6267\u884C\u7834\u574F\u6027 shell \u547D\u4EE4\u5417\uFF1F"
   },
   dialogConfirmBody: {
-    en: "This command may delete or reset user content and needs explicit confirmation before it runs.",
-    zh: "\u8BE5\u547D\u4EE4\u53EF\u80FD\u5220\u9664\u6216\u91CD\u7F6E\u7528\u6237\u5185\u5BB9\uFF0C\u9700\u8981\u7528\u6237\u660E\u786E\u786E\u8BA4\u540E\u624D\u80FD\u6267\u884C\u3002"
+    en: "This command may delete or reset user content \u2014 a local-run destructive shell command.",
+    zh: "\u8BE5\u547D\u4EE4\u53EF\u80FD\u5220\u9664\u6216\u91CD\u7F6E\u7528\u6237\u5185\u5BB9\uFF0C\u5C5E\u4E8E\u672C\u673A run \u7684\u7834\u574F\u6027 shell \u547D\u4EE4\u3002"
   },
   dialogConfirmExternalFileTitle: {
-    en: "Confirm reading a file outside the workspace",
-    zh: "\u786E\u8BA4\u8BFB\u53D6\u5DE5\u4F5C\u533A\u5916\u90E8\u6587\u4EF6"
+    en: "Allow reading files outside the workspace?",
+    zh: "\u5141\u8BB8\u8BFB\u53D6\u5DE5\u4F5C\u533A\u5916\u90E8\u6587\u4EF6\u5417\uFF1F"
   },
   dialogConfirmExternalFileBody: {
-    en: "This path is outside the current workspace. Allow this one-time access, or deny it.",
-    zh: "\u8BE5\u8DEF\u5F84\u4F4D\u4E8E\u5F53\u524D\u5DE5\u4F5C\u533A\u4E4B\u5916\u3002\u786E\u8BA4\u540E\u672C\u6B21\u8BBF\u95EE\u653E\u884C\uFF0C\u5426\u5219\u62D2\u7EDD\u3002"
+    en: "This path is outside the current workspace \u2014 a local-run outside-workspace file access.",
+    zh: "\u8BE5\u8DEF\u5F84\u4F4D\u4E8E\u5F53\u524D\u5DE5\u4F5C\u533A\u4E4B\u5916\uFF0C\u5C5E\u4E8E\u672C\u673A run \u7684\u5DE5\u4F5C\u533A\u5916\u6587\u4EF6\u8BBF\u95EE\u3002"
+  },
+  dialogConfirmFileWriteTitle: {
+    en: "Allow writing files from local runs?",
+    zh: "\u5141\u8BB8\u672C\u673A run \u5199\u5165\u6587\u4EF6\u5417\uFF1F"
+  },
+  dialogConfirmFileWriteBody: {
+    en: "This action writes into the workspace \u2014 a local-run file-write confirmation.",
+    zh: "\u8BE5\u64CD\u4F5C\u4F1A\u5199\u5165\u5DE5\u4F5C\u533A\u6587\u4EF6\uFF0C\u5C5E\u4E8E\u672C\u673A run \u7684\u5199\u6587\u4EF6\u786E\u8BA4\u3002"
+  },
+  dialogConfirmRememberLocal: {
+    en: "Approving covers all three local-run classes (destructive shell / outside-workspace files / file writes) and is saved, so they stop asking \u2014 this session and future starts. Undo with /auto local off or /auto reset.",
+    zh: "\u6279\u51C6\u540E\u672C\u673A run \u7684\u4E09\u7C7B\u786E\u8BA4\uFF08\u7834\u574F\u6027\u547D\u4EE4 / \u5DE5\u4F5C\u533A\u5916\u6587\u4EF6 / \u5199\u6587\u4EF6\uFF09\u90FD\u4E0D\u518D\u8BE2\u95EE\uFF0C\u5E76\u4FDD\u5B58\u5230\u914D\u7F6E\uFF08\u672C\u6B21\u4E0E\u540E\u7EED\u542F\u52A8\u90FD\u751F\u6548\uFF09\u3002\u64A4\u9500\u7528 /auto local off \u6216 /auto reset\u3002"
   },
   dialogConfirmCommandTruncated: {
     en: "(truncated)",
     zh: "\uFF08\u5DF2\u622A\u65AD\uFF09"
   },
   dialogConfirmAllowLabel: {
-    en: "Allow",
-    zh: "\u5141\u8BB8"
+    en: "Approve & remember",
+    zh: "\u6279\u51C6\u5E76\u8BB0\u4F4F"
   },
   dialogConfirmAllowDetail: {
-    en: "execute this time",
-    zh: "\u672C\u6B21\u6267\u884C"
+    en: "stop asking for this class (saved)",
+    zh: "\u540C\u7C7B\u786E\u8BA4\u4E0D\u518D\u8BE2\u95EE\uFF08\u5DF2\u4FDD\u5B58\uFF09"
   },
   dialogConfirmCancelLabel: {
-    en: "Cancel",
-    zh: "\u53D6\u6D88"
+    en: "Reject",
+    zh: "\u62D2\u7EDD"
   },
   dialogConfirmCancelDetail: {
-    en: "abort the operation",
-    zh: "\u4E2D\u6B62\u64CD\u4F5C"
+    en: "do not run it; ask again next time",
+    zh: "\u4E0D\u6267\u884C\uFF0C\u4E0B\u6B21\u4ECD\u4F1A\u8BE2\u95EE"
   },
   // --- Ask choice (ask_user) ------------------------------------------
   askChoiceTitle: {
@@ -859,7 +899,7 @@ var STRINGS = {
       "  Drag a file in        Drop an image file on the terminal to attach it; audio/video transcribes; other files stay paths",
       "  Shift+Enter / Ctrl+J  Insert a newline in the draft",
       "  /mouse <on|off>       Toggle mouse mode (off = drag to select text)",
-      "  /auto <on|off>        Toggle permission auto-approve (skip destructive-shell, external-file & file-write confirms)",
+      "  /auto [local|remote] <on|off>  Approve one permission bucket (local-run confirms / remote-origin shell) so it stops asking; saved to your config. /auto reset clears both",
       "  /shell-revoke         Revoke this session's shell grant; the next shell call re-asks (works while a reply runs; does not interrupt a running command)",
       "  /math <on|off>        Toggle math formula rendering (Unicode transcription)",
       "  /altscreen <on|off>   Toggle the terminal alternate screen (default on; off shares shell scrollback)",
@@ -905,7 +945,7 @@ var STRINGS = {
       "  \u62D6\u5165\u6587\u4EF6              \u628A\u56FE\u7247\u6587\u4EF6\u62D6\u8FDB\u7EC8\u7AEF\u5373\u6210\u4E3A\u9644\u4EF6\uFF1B\u97F3\u89C6\u9891\u81EA\u52A8\u8F6C\u5199\uFF1B\u5176\u4ED6\u6587\u4EF6\u53EA\u7559\u8DEF\u5F84",
       "  Shift+Enter / Ctrl+J  \u5728\u8349\u7A3F\u91CC\u6362\u884C",
       "  /mouse <on|off>       \u5207\u6362\u9F20\u6807\u6A21\u5F0F\uFF08off \u540E\u53EF\u76F4\u63A5\u62D6\u9009\u6587\u672C\uFF09",
-      "  /auto <on|off>        \u5207\u6362\u6743\u9650\u81EA\u52A8\u5316\uFF08\u81EA\u52A8\u653E\u884C\u7834\u574F\u6027 shell\u3001\u5916\u90E8\u6587\u4EF6\u4E0E\u5199\u6587\u4EF6\u786E\u8BA4\uFF09",
+      "  /auto [local|remote] <on|off>  \u6388\u6743\u67D0\u4E00\u6876\uFF08\u672C\u673A run \u786E\u8BA4 / \u8FDC\u7A0B\u6765\u6E90 shell\uFF09\u4E0D\u518D\u9010\u6B21\u8BE2\u95EE\uFF0C\u5E76\u4FDD\u5B58\u5230\u914D\u7F6E\uFF1B/auto reset \u4E24\u6876\u6E05\u96F6",
       "  /shell-revoke         \u64A4\u9500\u672C\u4F1A\u8BDD\u7684 shell \u6267\u884C\u6388\u6743\uFF0C\u4E0B\u4E00\u6B21 shell \u8C03\u7528\u91CD\u65B0\u786E\u8BA4\uFF08\u56DE\u590D\u8FDB\u884C\u4E2D\u4E5F\u53EF\u7528\uFF1B\u4E0D\u4E2D\u65AD\u5DF2\u653E\u884C\u7684\u547D\u4EE4\uFF09",
       "  /math <on|off>        \u5207\u6362\u6570\u5B66\u516C\u5F0F\u6E32\u67D3\uFF08Unicode \u8F6C\u5199\uFF09",
       "  /altscreen <on|off>   \u5207\u6362\u7EC8\u7AEF\u5907\u7528\u5C4F\uFF08\u9ED8\u8BA4 on\uFF1Boff \u6539\u4E3A\u4E0E shell \u5171\u7528\u56DE\u6EDA\uFF09",
@@ -1567,13 +1607,23 @@ Use /switch, /switch list, /switch minimax-m3, or a full agent key.`,
   // 分享 OAuth agent 的 shell 会话授权确认（块 D）：首次 execShell/
   // launchProcess 前弹。必须把三件事说清——这是谁的 agent / 命令在哪台
   // 设备哪个工作区跑 / 任意 shell 可读写该用户可访问的资源。
+  // 子 run 的 per-call shell 确认（远程来源在本机跑一条命令）：与会话授权同一套
+  // 语义，参数为 runId / agentKey / owner / device / workspace / 权限提示。
+  "shellPerCall.title": {
+    en: "Allow a remote origin to run this command on this machine?",
+    zh: "\u5141\u8BB8\u8FDC\u7A0B\u6765\u6E90\u5728\u672C\u673A\u6267\u884C\u8FD9\u6761\u547D\u4EE4\u5417\uFF1F"
+  },
+  "shellPerCall.body": {
+    en: "A remote origin asked to run one shell command on this device.\nRun: {0}\nAgent: {1}\nOwner: {2}\nDevice: {3}\nWorkspace: {4}\n{5}\n\nShell commands can read/write anything this user can access. Approving covers this whole class: remote-origin shell confirmations stop asking one by one (this session and future starts). Undo with /shell-revoke or /auto remote off.",
+    zh: "\u8FDC\u7A0B\u6765\u6E90\u8BF7\u6C42\u5728\u672C\u673A\u6267\u884C\u4E00\u6761 shell \u547D\u4EE4\u3002\nRun\uFF1A{0}\nAgent\uFF1A{1}\n\u4E3B\u4EBA\uFF1A{2}\n\u8BBE\u5907\uFF1A{3}\n\u5DE5\u4F5C\u533A\uFF1A{4}\n{5}\n\n\u4EFB\u610F shell \u547D\u4EE4\u53EF\u8BFB\u5199\u672C\u673A\u8BE5\u7528\u6237\u80FD\u8BBF\u95EE\u7684\u8D44\u6E90\u3002\u6279\u51C6\u540E\u300C\u8FDC\u7A0B\u6765\u6E90\u5728\u672C\u673A\u6267\u884C shell\u300D\u8FD9\u4E00\u7C7B\u786E\u8BA4\u4E0D\u518D\u9010\u6761\u8BE2\u95EE\uFF08\u672C\u6B21\u4E0E\u540E\u7EED\u542F\u52A8\u90FD\u751F\u6548\uFF09\u3002\u64A4\u9500\uFF1A/shell-revoke \u6216 /auto remote off\u3002"
+  },
   "shellGrant.confirmTitle": {
-    en: "Allow shell commands for shared agent {0}?",
-    zh: "\u5141\u8BB8\u5206\u4EAB agent {0} \u6267\u884C shell \u547D\u4EE4\u5417\uFF1F"
+    en: "Allow remote agent {0} to run shell commands on this machine?",
+    zh: "\u5141\u8BB8\u8FDC\u7A0B agent {0} \u5728\u672C\u673A\u6267\u884C shell \u547D\u4EE4\u5417\uFF1F"
   },
   "shellGrant.confirmBody": {
-    en: "Agent {0} (owner {1}) asked to run shell commands on this device.\nDevice: {2} ({3})\nWorkspace: {4}\n\nShell commands can read/write anything this user can access. Allowed for the rest of this session; revoke any time with /shell-revoke.",
-    zh: "\u5206\u4EAB agent {0}\uFF08\u4E3B\u4EBA {1}\uFF09\u8BF7\u6C42\u5728\u672C\u673A\u6267\u884C shell \u547D\u4EE4\u3002\n\u8BBE\u5907\uFF1A{2}\uFF08{3}\uFF09\n\u5DE5\u4F5C\u533A\uFF1A{4}\n\n\u4EFB\u610F shell \u547D\u4EE4\u53EF\u8BFB\u5199\u672C\u673A\u8BE5\u7528\u6237\u80FD\u8BBF\u95EE\u7684\u5168\u90E8\u8D44\u6E90\u3002\u5141\u8BB8\u540E\u5728\u672C\u4F1A\u8BDD\u6301\u7EED\u6709\u6548\uFF1B\u968F\u65F6\u53EF\u7528 /shell-revoke \u64A4\u9500\u3002"
+    en: "Remote agent {0} (owner {1}) requested to run a shell command on this machine.\nDevice: {2} ({3})\nWorkspace: {4}\nCommand: {5}\n\nShell commands can read/write anything this user can access. Approving covers this whole class: remote-origin shell confirmations stop asking one by one (this session and future starts). Undo with /shell-revoke (this session) or /auto remote off (also clears the saved grant).",
+    zh: "\u8FDC\u7A0B agent {0}\uFF08\u4E3B\u4EBA {1}\uFF09\u8BF7\u6C42\u5728\u672C\u673A\u6267\u884C shell \u547D\u4EE4\u3002\n\u8BBE\u5907\uFF1A{2}\uFF08{3}\uFF09\n\u5DE5\u4F5C\u533A\uFF1A{4}\n\u547D\u4EE4\uFF1A{5}\n\n\u4EFB\u610F shell \u547D\u4EE4\u53EF\u8BFB\u5199\u672C\u673A\u8BE5\u7528\u6237\u80FD\u8BBF\u95EE\u7684\u8D44\u6E90\u3002\u6279\u51C6\u540E\u300C\u8FDC\u7A0B\u6765\u6E90\u5728\u672C\u673A\u6267\u884C shell\u300D\u8FD9\u4E00\u7C7B\u786E\u8BA4\u4E0D\u518D\u9010\u6761\u8BE2\u95EE\uFF08\u672C\u6B21\u4E0E\u540E\u7EED\u542F\u52A8\u90FD\u751F\u6548\uFF09\u3002\u64A4\u9500\uFF1A/shell-revoke\uFF08\u672C\u4F1A\u8BDD\uFF09\u6216 /auto remote off\uFF08\u540C\u65F6\u6E05\u9664\u6301\u4E45\u6388\u6743\uFF09\u3002"
   },
   "shellGrant.revoked": {
     en: "[nolo] Shell permission revoked for shared agents in this session.",

package/{chunk-FDT27L7S.js → chunk-2XDQAWBM.js}

@@ -7,15 +7,17 @@ import {
   listUserRecordsFromServers,
   readDbRecordFromServers,
   readLiveDbRecordAfterTombstoneMerge
-} from "./chunk-G47IPDOK.js";
+} from "./chunk-O2IWR23M.js";
+import {
+  parsePositiveFiniteNumberOrFallback
+} from "./chunk-Y5GCAMGP.js";
 import {
   fetchWithTransientRetry
-} from "./chunk-I2ZMGXXF.js";
+} from "./chunk-KFHREHUQ.js";
 import {
   DRAIN_EXHAUSTED_USER_MESSAGE,
-  isDrainExhaustedResponse,
-  parsePositiveFiniteNumberOrFallback
-} from "./chunk-XPWGOTBQ.js";
+  isDrainExhaustedResponse
+} from "./chunk-3L2WKC3W.js";
 import {
   buildDialogAttachmentPlan,
   extractFileContentIds
@@ -40,22 +42,13 @@ import {
 } from "./chunk-I42VC5KR.js";
 import {
   resolveRunsDir
-} from "./chunk-MM3662RS.js";
-import {
-  isRecord
-} from "./chunk-KUG52IAP.js";
-import {
-  asTrimmedString
-} from "./chunk-3EUW3WEO.js";
+} from "./chunk-SNAWGDXT.js";
 import {
   getDefaultCliLocalRuntimeDb
-} from "./chunk-2IXDJNZI.js";
+} from "./chunk-GAGGEA7D.js";
 import {
   isLevelLockError
 } from "./chunk-AWVFQMOV.js";
-import {
-  toErrorMessage
-} from "./chunk-HNMXYYJR.js";
 import {
   resolveLocalDialogDbCandidates,
   resolveNoloHome,
@@ -69,6 +62,15 @@ import {
   resolveServerCandidates,
   resolveServerUrl
 } from "./chunk-A7GB5UGH.js";
+import {
+  isRecord
+} from "./chunk-KUG52IAP.js";
+import {
+  asTrimmedString
+} from "./chunk-3EUW3WEO.js";
+import {
+  toErrorMessage
+} from "./chunk-HNMXYYJR.js";
 import {
   DEFAULT_LOCAL_API_ORIGIN
 } from "./chunk-4SN6J65J.js";