nolo-cli 0.157.0-alpha.1 → 0.157.0

package/{readlineWorkspace-JHJSU5DS.js → readlineWorkspace-I5MHMEUE.js}

@@ -1,6 +1,6 @@
 import {
   resolveAuthGuidanceState
-} from "./chunk-K43ZF2C3.js";
+} from "./chunk-JPPQ3GUO.js";
 import {
   fetchCiStatus,
   summarizeLatest
@@ -13,7 +13,7 @@ import {
   listRemoteAgents,
   listRemoteAgentsAcrossServers,
   normalizeListedAgent
-} from "./chunk-EM3YOZJ4.js";
+} from "./chunk-L2JMH4I5.js";
 import {
   refreshSubscriptionQuotas
 } from "./chunk-U4STABYN.js";
@@ -34,11 +34,11 @@ import {
   computeBaselineContextTokens,
   countPhysicalLines,
   createCollapsedPasteStore,
+  createIdleHeapReleaser,
   detectSystemBrightnessFromEnv,
   dimCliText,
   displayWidth,
   emitTerminalProgramStatus,
-  estimateMessagesTokens,
   expandRangeToCollapsedPasteChips,
   findCollapsedPasteSpanAt,
   fitAnsiLine,
@@ -47,7 +47,6 @@ import {
   formatTokenCount,
   getActiveThemeMode,
   getActiveThemeName,
-  historyTokensBeforeLatestAssistant,
   isBalanceExhaustedError,
   isRunResultStalledOrTruncated,
   padOrTruncateToWidth,
@@ -91,20 +90,20 @@ import {
   wrapTextToLines,
   wrapTranscriptLine,
   wrapTranscriptLineWithLayout
-} from "./chunk-ZEHTARJA.js";
+} from "./chunk-NLFTBC6S.js";
 import "./chunk-6QDYSCPW.js";
-import "./chunk-KOB75UNU.js";
+import "./chunk-FHG46N5C.js";
 import {
   getReadableCliDb
-} from "./chunk-P5QACQDK.js";
+} from "./chunk-62TBKWTV.js";
 import {
   RUN_WAKE_CHANNEL_ENV,
   clearCliLocalRuntimePreparedAgentCache,
   createCliLocalRuntimeAdapter,
   createOriginShellGrant,
   readTimestamp
-} from "./chunk-EJU23ST5.js";
-import "./chunk-7KYVUFDG.js";
+} from "./chunk-ZKVS36H3.js";
+import "./chunk-G3VYRPTV.js";
 import "./chunk-6MXDOUMH.js";
 import {
   dailyWelcomeTip,
@@ -112,11 +111,11 @@ import {
   parseCliLocale,
   setCliLocale,
   t
-} from "./chunk-SW4S4XYB.js";
+} from "./chunk-2AB2HA4M.js";
 import {
   defaultOpenBrowser,
   saveTokenLogin
-} from "./chunk-36OMEXXR.js";
+} from "./chunk-DLV3H464.js";
 import "./chunk-TY3TIUJK.js";
 import {
   isHiddenFromDialogList,
@@ -124,19 +123,20 @@ import {
   normalizeDialogRecord,
   readDialogSnapshot,
   sortDialogs
-} from "./chunk-FDT27L7S.js";
+} from "./chunk-MLEANT7D.js";
 import "./chunk-ID4G2MAR.js";
 import {
   listUserRecordsFromServers,
   readLiveDbRecordAfterTombstoneMerge
-} from "./chunk-G47IPDOK.js";
+} from "./chunk-W7FGZRLK.js";
+import "./chunk-Y5GCAMGP.js";
 import {
   deleteDbRecord,
   queryUserRecords,
   readDbRecord
-} from "./chunk-HKT6QXP3.js";
+} from "./chunk-5IKRTRRR.js";
 import "./chunk-VP3BINY7.js";
-import "./chunk-UUPR3TD7.js";
+import "./chunk-BL4HFN6L.js";
 import {
   NOLO_DEFAULT_AGENT_KEY,
   resolveCliAgentKeyInput
@@ -145,119 +145,126 @@ import "./chunk-VL5KOY2C.js";
 import "./chunk-S73EPYNC.js";
 import "./chunk-ZEZC7IIM.js";
 import "./chunk-VIWDGTDA.js";
-import "./chunk-6MJNEXUU.js";
+import "./chunk-HGDKT2D6.js";
 import "./chunk-BU2YQBV4.js";
 import "./chunk-BMQ2MJUK.js";
-import "./chunk-IPAW7XLD.js";
+import "./chunk-MFVOJ6KF.js";
 import "./chunk-ATNTHIZI.js";
-import "./chunk-T6CBQ6BN.js";
+import "./chunk-INFHX73M.js";
 import "./chunk-JEXVIMYZ.js";
 import {
   prepareTools
-} from "./chunk-SKPPKHD3.js";
-import {
-  buildResponseGuidelines
-} from "./chunk-W4S6OTSC.js";
+} from "./chunk-OLUKIUX6.js";
 import "./chunk-HS7MLR74.js";
-import "./chunk-XFKZ3MCV.js";
-import "./chunk-KX6LPG7W.js";
-import "./chunk-I2ZMGXXF.js";
+import "./chunk-MR3ITQEV.js";
+import "./chunk-WYJTNSVL.js";
+import "./chunk-KFHREHUQ.js";
 import "./chunk-OXME3PEE.js";
-import "./chunk-RUNKPFM5.js";
+import "./chunk-K6Y5T4GE.js";
 import "./chunk-NF64D32W.js";
-import "./chunk-XPWGOTBQ.js";
-import "./chunk-HXHSTRGH.js";
-import "./chunk-CBHGZRCE.js";
-import "./chunk-3XZKV7QQ.js";
-import "./chunk-YANF2RR4.js";
+import "./chunk-3L2WKC3W.js";
+import "./chunk-VYNMQ6HW.js";
+import "./chunk-MYOH447Z.js";
+import "./chunk-3L5MSPWX.js";
+import "./chunk-ZPKUJROL.js";
 import "./chunk-VIDPVFP3.js";
-import "./chunk-5MM7NNO6.js";
-import "./chunk-IA7TRNNR.js";
+import "./chunk-KSTEXKL6.js";
 import "./chunk-AGIM7IMJ.js";
 import "./chunk-63W5N6P3.js";
 import "./chunk-VF4K2QE6.js";
-import "./chunk-OH2M7WEU.js";
-import "./chunk-WZ6OU4NX.js";
-import "./chunk-7A4LJCDR.js";
-import "./chunk-ROPSATAB.js";
-import "./chunk-SCJD2PNK.js";
-import "./chunk-VAZHH6FO.js";
-import "./chunk-H4KACZMG.js";
-import "./chunk-523DITKR.js";
-import "./chunk-UKZX3NHN.js";
+import "./chunk-6Y3ETA2Y.js";
+import "./chunk-BAWAKW7X.js";
+import "./chunk-B3ZIFOFI.js";
+import "./chunk-IF7V3CBU.js";
+import "./chunk-YPG7TUQD.js";
+import "./chunk-IKOKYBYJ.js";
+import {
+  estimateMessagesTokens,
+  historyTokensBeforeLatestAssistant
+} from "./chunk-XZIW3Q5B.js";
 import "./chunk-OFFL4DCR.js";
+import "./chunk-523DITKR.js";
 import "./chunk-QYPE3TS3.js";
-import "./chunk-X5SUT4CN.js";
+import "./chunk-R7GCGOGZ.js";
 import "./chunk-4JH2UMJR.js";
 import "./chunk-ZJ7UHBJS.js";
 import "./chunk-BYXBJQAS.js";
-import "./chunk-CE7PIHQD.js";
+import "./chunk-ESMZW5PE.js";
 import "./chunk-5RGU3J7P.js";
 import "./chunk-OWYYDMGJ.js";
 import "./chunk-ZRAU6T47.js";
 import "./chunk-4LCOCOR5.js";
 import "./chunk-YDH3FDFQ.js";
-import "./chunk-C5VPAHIU.js";
+import "./chunk-32ZKZET7.js";
 import "./chunk-XI7DGLUK.js";
-import "./chunk-TZTWMGE3.js";
+import "./chunk-JWEXJ573.js";
 import "./chunk-UAD2WT54.js";
-import "./chunk-HP6O6LTV.js";
+import "./chunk-CDLP56BS.js";
 import "./chunk-3PVYUPXK.js";
-import "./chunk-6MPAEODB.js";
-import "./chunk-D4OWHT5Y.js";
-import "./chunk-Z6KQDSZW.js";
+import "./chunk-NHEWV5FD.js";
+import "./chunk-MAYW6V3E.js";
+import "./chunk-43OFVLWJ.js";
 import "./chunk-UEILX4EV.js";
-import "./chunk-7BSQK2UC.js";
+import "./chunk-WRCZXJ4N.js";
 import "./chunk-6Q7UTJKR.js";
 import "./chunk-QQ56R7KS.js";
 import "./chunk-OW765XBU.js";
-import "./chunk-SEJ5OS6F.js";
+import "./chunk-PXYBUFDB.js";
 import "./chunk-D2MDMY2M.js";
-import "./chunk-4Z245KOA.js";
+import {
+  buildSkillDiscoveryContextBlock,
+  buildSkillDiscoveryContextLayer
+} from "./chunk-AU7AXHUL.js";
+import "./chunk-SH3XD4E2.js";
 import {
   expandEnabledPacks
-} from "./chunk-JZX2XLKC.js";
+} from "./chunk-YCRROBDY.js";
 import "./chunk-EUGTFFO6.js";
-import "./chunk-XETG4RIX.js";
+import "./chunk-AETZ7AD6.js";
 import "./chunk-Y6ORVLSS.js";
+import "./chunk-KHCLMKZZ.js";
 import {
   buildLocalWorkspaceOpenAiTools,
   buildLocalWorkspaceToolset,
   formatToolOverflowMarker,
   getProcessRegistry,
   readCommandActionGatePayload
-} from "./chunk-PEO24UB5.js";
-import "./chunk-3C2QLERX.js";
+} from "./chunk-5E5VB7PS.js";
+import "./chunk-KMDDG73K.js";
 import "./chunk-ZNFJWEN4.js";
-import "./chunk-L6EQV5OC.js";
+import "./chunk-QXZH5UDF.js";
 import "./chunk-HNUWUO75.js";
 import "./chunk-CHOZJMJS.js";
 import "./chunk-PWTNI4N7.js";
-import "./chunk-ANJTRG52.js";
-import "./chunk-5ZUL4CUO.js";
-import "./chunk-IYBIRCQV.js";
+import "./chunk-ULQAD7ZY.js";
+import "./chunk-U34KT53V.js";
 import "./chunk-G6OOUQWJ.js";
 import "./chunk-56GBUMO5.js";
 import "./chunk-WJZOQR2J.js";
 import {
+  CREDENTIAL_HYGIENE_RULE,
   DELETE_SAFETY_RED_LINE,
+  DISPATCH_BACKEND_POLICY,
   PARALLEL_DISPATCH_DEFAULT_RULE,
   PLATFORM_RISK_CONTROL_RULE,
   buildConsultationModeBlock,
   buildIdentityBlock,
   buildRuntimeGuidanceBlocks,
+  resolveResponseGuidelines,
   resolveToolGuidedSections
-} from "./chunk-TYND6RDQ.js";
-import "./chunk-6TF64IF2.js";
-import "./chunk-QLQ573SU.js";
+} from "./chunk-ZZDVBZOP.js";
+import "./chunk-4L4K6YR7.js";
+import "./chunk-3M52COK5.js";
 import {
   isQuotaExhaustedError
 } from "./chunk-3MZAGMYY.js";
+import "./chunk-TT644UJD.js";
 import "./chunk-2MBTWINN.js";
 import {
   extractReferenceKeysFromMessage,
   normalizeUsage
-} from "./chunk-ZWG3C7VI.js";
+} from "./chunk-F3SOW2EU.js";
+import "./chunk-5ZUL4CUO.js";
 import {
   DEFAULT_CONTEXT_WINDOW,
   buildCompactionMetricsFromPlan,
@@ -269,7 +276,7 @@ import {
   getModelContextWindow,
   planCompression,
   serializeMessageContent
-} from "./chunk-2MTE2PEH.js";
+} from "./chunk-QA2C5NKI.js";
 import {
   clipCompactText
 } from "./chunk-5MMAK75Q.js";
@@ -280,6 +287,15 @@ import "./chunk-LIQJTQRN.js";
 import "./chunk-UHTDNB5Y.js";
 import "./chunk-KX6YBIHG.js";
 import "./chunk-7DPNBQSV.js";
+import {
+  buildMemoryOverlayLayer,
+  buildMemoryUseGuidanceLayer,
+  partitionScopedBlocks,
+  renderTurnContextBlocksWithScope
+} from "./chunk-VEA7H5FG.js";
+import {
+  buildUserResponseLanguageContext
+} from "./chunk-4VJAC32I.js";
 import {
   canonicalizeToolNames
 } from "./chunk-5EBLANFT.js";
@@ -298,16 +314,13 @@ import {
 import "./chunk-5EMSBTQ6.js";
 import "./chunk-I42VC5KR.js";
 import "./chunk-U6VC4MU4.js";
-import "./chunk-PSJWPSKS.js";
-import "./chunk-JGRPBIZZ.js";
-import "./chunk-WWC7I6TA.js";
 import {
   backfillRunRecordParentDialog,
   checkStaleRun,
   isRunRecordClaimed,
   listRunRecords,
   readRunRecord
-} from "./chunk-MM3662RS.js";
+} from "./chunk-LPO6AMQU.js";
 import {
   clipText,
   formatDuration,
@@ -321,24 +334,11 @@ import {
 import {
   estimateTokenCount
 } from "./chunk-PSCNXBYA.js";
-import {
-  resolvePlatformAuthToken
-} from "./chunk-SUKSWFLP.js";
-import "./chunk-I2RMFLLH.js";
-import "./chunk-TRW43TSC.js";
-import "./chunk-5BHQICF2.js";
-import {
-  isRecord
-} from "./chunk-KUG52IAP.js";
-import "./chunk-3EUW3WEO.js";
-import "./chunk-2IXDJNZI.js";
+import "./chunk-GAGGEA7D.js";
 import "./chunk-NMFV26UG.js";
 import "./chunk-EXAJ6DCR.js";
 import "./chunk-AWVFQMOV.js";
-import {
-  toErrorMessage
-} from "./chunk-HNMXYYJR.js";
-import "./chunk-FY4SDK2E.js";
+import "./chunk-FDLDMJTM.js";
 import "./chunk-GLKOYSRU.js";
 import {
   getDiagnostics,
@@ -348,7 +348,7 @@ import {
 import {
   checkForCliUpdate,
   runSelfUpdateDetailed
-} from "./chunk-YBNHPX4S.js";
+} from "./chunk-IW64YHXL.js";
 import {
   parseUserIdFromAuthToken,
   resolveAuthToken,
@@ -359,48 +359,53 @@ import {
   DEFAULT_NOLO_SERVER_URL
 } from "./chunk-OLZBQWZU.js";
 import "./chunk-LCBAMY2M.js";
-import "./chunk-4SN6J65J.js";
-import {
-  normalizeServerOrigin
-} from "./chunk-CF7PE763.js";
-import {
-  asOptionalTrimmedString
-} from "./chunk-G3SUCT4W.js";
 import {
+  PERMISSION_GRANT_KINDS,
   getAgentSelectionAuditPath,
   getDefaultProfileConfigPath,
   getProfileTokens,
   loadProfileConfig,
+  permissionGrantList,
   readLastAgentSelectionAudit,
   saveProfileAgentSelection,
   saveProfileLocale,
+  saveProfilePermissionGrant,
   saveProfileTokens
-} from "./chunk-TNIX77YM.js";
+} from "./chunk-R5GO3YZP.js";
 import {
   readPipeText,
   resolveDefaultSpawn,
   spawnProcess
 } from "./chunk-Y6ROFCZO.js";
 import "./chunk-FYYSDHVQ.js";
+import "./chunk-EWO77ZGF.js";
+import "./chunk-SQX235S2.js";
+import "./chunk-WWC7I6TA.js";
+import {
+  resolvePlatformAuthToken
+} from "./chunk-PIG2IUVZ.js";
+import "./chunk-V7PCFWX3.js";
+import "./chunk-6EQD4AQL.js";
+import "./chunk-5BHQICF2.js";
+import {
+  isRecord
+} from "./chunk-KUG52IAP.js";
+import "./chunk-3EUW3WEO.js";
+import {
+  toErrorMessage
+} from "./chunk-HNMXYYJR.js";
+import "./chunk-4SN6J65J.js";
+import {
+  normalizeServerOrigin
+} from "./chunk-CF7PE763.js";
+import {
+  asOptionalTrimmedString
+} from "./chunk-G3SUCT4W.js";
 import "./chunk-CGFNDIKK.js";
 import {
   asTrimmedLowercaseString
 } from "./chunk-QSJ3HFEF.js";
 import "./chunk-ZWQUWF6W.js";
-import {
-  buildSkillDiscoveryContextBlock,
-  buildSkillDiscoveryContextLayer
-} from "./chunk-AU7AXHUL.js";
-import "./chunk-KHCLMKZZ.js";
-import {
-  buildMemoryOverlayLayer,
-  buildMemoryUseGuidanceLayer,
-  partitionScopedBlocks,
-  renderTurnContextBlocksWithScope
-} from "./chunk-VEA7H5FG.js";
-import {
-  buildUserResponseLanguageContext
-} from "./chunk-4VJAC32I.js";
 import "./chunk-4VNS5WPM.js";
 
 // packages/cli/tui/shellApprovalSession.ts
@@ -450,6 +455,44 @@ import { createInterface } from "node:readline";
 import { PassThrough } from "node:stream";
 import { stdin as defaultInput, stdout as defaultOutput } from "node:process";
 
+// packages/cli/tui/permissionGrantPersist.ts
+function createPermissionGrantEnabler(kind, deps) {
+  return () => {
+    deps.setGrants({ ...deps.getGrants() ?? {}, [kind]: true });
+    let saved = null;
+    try {
+      saved = saveProfilePermissionGrant(kind, true);
+    } catch {
+      saved = null;
+    }
+    deps.scheduleRender();
+    if (!saved) deps.onPersistFailed();
+  };
+}
+function persistPermissionGrantChanges(before, after) {
+  const changed = PERMISSION_GRANT_KINDS.filter(
+    (kind) => before?.[kind] === true !== (after?.[kind] === true)
+  );
+  let allSaved = true;
+  for (const kind of changed) {
+    let saved = null;
+    try {
+      saved = saveProfilePermissionGrant(kind, after?.[kind] === true);
+    } catch {
+      saved = null;
+    }
+    if (!saved) allSaved = false;
+  }
+  return allSaved;
+}
+function createSnapshotGuardedApproval(kind, getGrants, approve) {
+  const snapshot = getGrants()?.[kind] === true;
+  return () => {
+    if (getGrants()?.[kind] === true !== snapshot) return;
+    approve();
+  };
+}
+
 // packages/core/crypto.ts
 import nacl from "tweetnacl";
 
@@ -672,6 +715,7 @@ var SSR_SNAPSHOT = Object.freeze({
 });
 var AccountSessionCore = class {
   snapshot;
+  sessionGeneration = 0;
   tokenByUserId = /* @__PURE__ */ new Map();
   listeners = /* @__PURE__ */ new Set();
   constructor(initial) {
@@ -681,6 +725,7 @@ var AccountSessionCore = class {
     const parsedActive = rawActiveToken ? parseUserToken(rawActiveToken) : null;
     const hasValidPair = typeof rawActiveId === "string" && rawActiveId.length > 0 && parsedActive !== null && parsedActive.userId === rawActiveId && accounts.some((account) => account.userId === rawActiveId);
     this.snapshot = {
+      sessionGeneration: this.sessionGeneration,
       accounts,
       activeAccountId: hasValidPair ? rawActiveId : null,
       activeToken: hasValidPair ? rawActiveToken : null,
@@ -708,8 +753,11 @@ var AccountSessionCore = class {
       listener();
     }
   }
-  setSnapshot(next) {
-    this.snapshot = next;
+  setSnapshot(next, forceAdvanceSession = false) {
+    if (forceAdvanceSession || next.activeAccountId !== this.snapshot.activeAccountId || next.activeToken !== this.snapshot.activeToken) {
+      this.sessionGeneration += 1;
+    }
+    this.snapshot = { ...next, sessionGeneration: this.sessionGeneration };
     this.emit();
   }
   initializeFromTokens(tokens, preferredActiveAccountId) {
@@ -786,7 +834,7 @@ var AccountSessionCore = class {
       activeToken: token,
       initialized: true,
       transition: "idle"
-    });
+    }, true);
     return true;
   }
   completeTransition() {
@@ -3518,14 +3566,26 @@ async function runConfirmDialog(args) {
       value: false
     }
   ];
+  const rejectIndex = items.length - 1;
   let titleText = args.request.title;
   let bodyText = args.request.body;
+  let localRunClass = false;
   if (args.request.action === "destructive_shell_command") {
     titleText = t("dialogConfirmTitle");
     bodyText = t("dialogConfirmBody");
+    localRunClass = true;
   } else if (args.request.action === "external_file_access") {
     titleText = t("dialogConfirmExternalFileTitle");
     bodyText = t("dialogConfirmExternalFileBody");
+    localRunClass = true;
+  } else if (args.request.action === "file_write") {
+    titleText = t("dialogConfirmFileWriteTitle");
+    bodyText = t("dialogConfirmFileWriteBody");
+    localRunClass = true;
+  }
+  if (localRunClass && bodyText && args.onApprove) {
+    bodyText = `${bodyText}
+${t("dialogConfirmRememberLocal")}`;
   }
   const terminalWidth = typeof output.columns === "number" && output.columns > 0 ? output.columns : FALLBACK_TERMINAL_WIDTH;
   const titleLines = [
@@ -3539,14 +3599,14 @@ async function runConfirmDialog(args) {
   const result = await runSelectDialog({
     items,
     signal: args.signal,
-    initialIndex: 1,
+    initialIndex: rejectIndex,
     titleLines,
     input,
     output,
-    // Fixed by the modal-ownership spec: this two-item gate never owns the
-    // wheel — "transcript" routes wheel/page events to the workspace history,
+    // Fixed by the modal-ownership spec: this gate never owns the wheel —
+    // "transcript" routes wheel/page events to the workspace history,
     // and when no transcript callback exists (standalone runs) the event is
-    // simply dropped. The wheel must never flip Allow/Cancel.
+    // simply dropped. The wheel must never flip Approve/Reject.
     inputPolicy: { wheel: "transcript", pageKeys: "transcript" },
     onTranscriptScroll: args.onTranscriptScroll,
     mouseEnabled: args.mouseEnabled,
@@ -3559,7 +3619,14 @@ async function runConfirmDialog(args) {
   if (result.kind === "cancelled") {
     return false;
   }
-  return result.item.value;
+  const chosen = result.item;
+  if (chosen.value === true && args.onApprove) {
+    try {
+      args.onApprove();
+    } catch {
+    }
+  }
+  return chosen.value;
 }
 
 // packages/cli/tui/terminalNotification.ts
@@ -4856,44 +4923,6 @@ function createRunRegistryPoller(deps) {
   };
 }
 
-// packages/cli/tui/idleHeapRelease.ts
-var IDLE_HEAP_RELEASE_DELAY_MS = 2e3;
-function createIdleHeapReleaser(options = {}) {
-  const env = options.env ?? process.env;
-  const bun = "bun" in options ? options.bun : globalThis.Bun;
-  const disabled = env.NOLO_TUI_IDLE_HEAP_RELEASE === "0" || typeof bun?.gc !== "function" || typeof bun?.shrink !== "function";
-  if (disabled) return { schedule() {
-  }, cancel() {
-  } };
-  const delayMs = options.delayMs ?? IDLE_HEAP_RELEASE_DELAY_MS;
-  const setTimer = options.setTimer ?? ((fn, ms) => {
-    const handle = setTimeout(fn, ms);
-    handle.unref?.();
-    return handle;
-  });
-  const clearTimer = options.clearTimer ?? ((handle) => clearTimeout(handle));
-  let pending = null;
-  const release = () => {
-    pending = null;
-    try {
-      bun.gc(true);
-      bun.shrink();
-    } catch {
-    }
-  };
-  return {
-    schedule() {
-      if (pending !== null) clearTimer(pending);
-      pending = setTimer(release, delayMs);
-    },
-    cancel() {
-      if (pending === null) return;
-      clearTimer(pending);
-      pending = null;
-    }
-  };
-}
-
 // packages/core/chat/internalTurnEvent.ts
 function normalizeRunCompletionShape(record) {
   const runId = String(record.runId ?? record.id ?? "");
@@ -5727,7 +5756,7 @@ async function loadSharp(customLoader) {
     return "default" in loaded && loaded.default ? loaded.default : loaded;
   }
   if (!cachedSharp) {
-    const mod = await import("./dist-NJC2W7I4.js");
+    const mod = await import("./dist-Q2JSMAKA.js");
     cachedSharp = mod.default ?? mod;
   }
   return cachedSharp;
@@ -7786,7 +7815,7 @@ function estimateToolSchemas(toolNames) {
   const platformTools = platformNames.length > 0 ? prepareTools([...platformNames]) : [];
   return estimateTokenCount(JSON.stringify([...workspaceTools, ...platformTools]));
 }
-function estimateDefaultCliContextTokens(opts = {}) {
+function buildCliEstimateSystemText(opts = {}) {
   const cwd = opts.cwd?.trim() || process.cwd();
   const model = opts.model?.trim() || BUILTIN_NOLO_AGENT_MODEL;
   const agentName = opts.agentName?.trim() || BUILTIN_NOLO_AGENT_NAME;
@@ -7801,10 +7830,15 @@ function estimateDefaultCliContextTokens(opts = {}) {
   ]);
   const guidance = buildRuntimeGuidanceBlocks(toolNames);
   const toolSections = resolveToolGuidedSections(toolNames);
+  const responseGuidelines = resolveResponseGuidelines(
+    opts.responseViewport ?? "unknown"
+  );
   const systemParts = [
     // 与实际装配线一致：删除安全红线是系统提示词的最顶层块。
     DELETE_SAFETY_RED_LINE,
+    CREDENTIAL_HYGIENE_RULE,
     PARALLEL_DISPATCH_DEFAULT_RULE,
+    DISPATCH_BACKEND_POLICY,
     PLATFORM_RISK_CONTROL_RULE,
     buildConsultationModeBlock(),
     prompt,
@@ -7818,17 +7852,27 @@ function estimateDefaultCliContextTokens(opts = {}) {
     guidance.contextLayerContract,
     guidance.emailRegistrationWorkflow,
     ...Object.values(toolSections),
+    responseGuidelines.behavior,
+    responseGuidelines.presentation,
     readAgentsMd(cwd),
     buildSkillDiscoveryContextBlock(cwd) ?? ""
   ];
-  const systemTokens = estimateTokenCount(
-    systemParts.filter((part) => part?.trim()).join("\n\n")
-  );
+  return systemParts.filter((part) => part?.trim()).join("\n\n");
+}
+function estimateDefaultCliContextTokens(opts = {}) {
+  const toolNames = canonicalizeToolNames([
+    ...canonicalizeToolNames(expandEnabledPacks([...DEFAULT_CLI_PACKS], [])),
+    ...DEFAULT_CLI_PLATFORM_TOOLS
+  ]);
+  const systemTokens = estimateTokenCount(buildCliEstimateSystemText(opts));
   const toolTokens = estimateToolSchemas(toolNames);
   const historyTokens = opts.messages && opts.messages.length > 0 ? estimateMessagesTokens(opts.messages) : opts.historyText ? estimateTokenCount(opts.historyText) : 0;
   return Math.max(0, systemTokens + toolTokens + historyTokens);
 }
 
+// packages/cli/tui/responseViewport.ts
+var TUI_RESPONSE_VIEWPORT = "narrow";
+
 // packages/cli/tui/sessionDispatch.ts
 import { ulid } from "ulid";
 
@@ -7880,6 +7924,14 @@ function resolveStatusLineCredits(state) {
   }
   return (base ?? 0) + (session ?? 0) + (live ?? 0);
 }
+function renderPermissionGrantChip(state) {
+  const local = state.permissionGrants?.local === true;
+  const remote = state.permissionGrants?.remote === true;
+  if (local && remote) return "\u23F5 auto";
+  if (local) return "\u23F5 local";
+  if (remote) return "\u23F5 remote";
+  return null;
+}
 function renderStatusLine(state, maxWidth) {
   const colorEnabled = resolveCliColorEnabled();
   const sep = themeText(" \xB7 ", "chrome", colorEnabled);
@@ -7907,8 +7959,9 @@ function renderStatusLine(state, maxWidth) {
   if (pendingProcessCount > 0) {
     parts.push(themeText(`\u21AA ${pendingProcessCount} pending`, "info", colorEnabled));
   }
-  if (state.autoConfirm === true) {
-    parts.push(themeText("\u23F5 auto", "warning", colorEnabled));
+  const grantChip = renderPermissionGrantChip(state);
+  if (grantChip) {
+    parts.push(themeText(grantChip, "warning", colorEnabled));
   }
   let surface = colorEnabled ? surfaceBackgroundSequence() : "";
   let padWidth = surface ? 2 : 0;
@@ -7986,7 +8039,7 @@ function renderStatusLine(state, maxWidth) {
     }
     if (widthOf(visibleParts) > maxWidth) {
       const budget = maxWidth - padWidth;
-      const autoMark = state.autoConfirm === true ? themeText("\u23F5", "warning", colorEnabled) : "";
+      const autoMark = renderPermissionGrantChip(state) ? themeText("\u23F5", "warning", colorEnabled) : "";
       const gitCounts = state.gitStatus ? themeText(
         `\u2442${state.gitStatus.modified > 0 ? `*${state.gitStatus.modified}` : ""}${state.gitStatus.untracked > 0 ? `?${state.gitStatus.untracked}` : ""}`,
         "warning",
@@ -8284,15 +8337,27 @@ function createInitialTuiState(env = process.env) {
     userLanguage: asOptionalTrimmedString(env.NOLO_LANG),
     gitStatus: void 0,
     thinkingDisplay: resolveThinkingDisplayMode(env),
+    // 持久化的授权桶落成 NOLO_PERMISSION_GRANTS（如 "local,remote"）；
+    // 缺失即两桶都未授权（逐次询问）。
+    permissionGrants: parsePermissionGrants(env.NOLO_PERMISSION_GRANTS),
     contextWindow: resolveAgentContextWindow({ agentKey, agentName }),
     estimatedContextTokens: estimateDefaultCliContextTokens({
       cwd,
       agentKey,
       userLanguage: asOptionalTrimmedString(env.NOLO_LANG),
+      responseViewport: TUI_RESPONSE_VIEWPORT,
       ...resolveAgentModelIdentity({ agentKey, agentName })
     })
   };
 }
+function parsePermissionGrants(raw) {
+  const grants = {};
+  for (const part of (raw ?? "").split(",")) {
+    const kind = part.trim().toLowerCase();
+    if (kind === "local" || kind === "remote") grants[kind] = true;
+  }
+  return grants;
+}
 function applyAgentSwitch(state, target, historyTurns) {
   const contextWindow = resolveAgentContextWindow({
     agentKey: target.key,
@@ -8311,6 +8376,7 @@ function applyAgentSwitch(state, target, historyTurns) {
         agentName: target.name,
         model: target.model,
         userLanguage: state.userLanguage,
+        responseViewport: TUI_RESPONSE_VIEWPORT,
         messages: historyTurns
       })
     },
@@ -8491,30 +8557,56 @@ ${t("cdUsage")}`
       };
     }
     case "/auto": {
-      const normalizedArg = asTrimmedLowercaseString(argText);
-      if (!normalizedArg) {
+      const words = asTrimmedLowercaseString(argText).split(/\s+/).filter(Boolean);
+      const grants = state.permissionGrants ?? {};
+      const stateLine = () => t(
+        "autoStateLine",
+        grants.local === true ? t("autoStateOnPersisted") : t("autoStateOff"),
+        grants.remote === true ? t("autoStateOnPersisted") : t("autoStateOff")
+      );
+      const applyKinds = (kinds, on) => {
+        const next = { ...grants };
+        for (const kind of kinds) {
+          if (on) next[kind] = true;
+          else delete next[kind];
+        }
+        return { ...state, permissionGrants: next };
+      };
+      if (words.length === 0) {
+        return { nextState: state, output: `${stateLine()}
+${t("autoUsage")}` };
+      }
+      const [scope, action] = words;
+      if (scope === "reset") {
         return {
-          nextState: state,
-          output: `${t("autoCurrent", state.autoConfirm ? "on" : "off")}
-${t("autoUsage")}`
+          nextState: applyKinds(["local", "remote"], false),
+          output: t("autoReset")
         };
       }
-      if (normalizedArg === "on") {
+      if (scope === "on" || scope === "off") {
+        const on = scope === "on";
         return {
-          nextState: { ...state, autoConfirm: true },
-          output: t("autoOn")
+          nextState: applyKinds(["local", "remote"], on),
+          output: t(
+            on ? "autoGrantOn" : "autoGrantOff",
+            `${t("autoKindLocal")} + ${t("autoKindRemote")}`,
+            on ? "/auto off" : "/auto on"
+          )
         };
       }
-      if (normalizedArg === "off") {
+      if ((scope === "local" || scope === "remote") && (action === "on" || action === "off")) {
+        const on = action === "on";
         return {
-          nextState: { ...state, autoConfirm: false },
-          output: t("autoOff")
+          nextState: applyKinds([scope], on),
+          output: t(
+            on ? "autoGrantOn" : "autoGrantOff",
+            scope === "local" ? t("autoKindLocal") : t("autoKindRemote"),
+            `/auto ${scope} ${on ? "off" : "on"}`
+          )
         };
       }
-      return {
-        nextState: state,
-        output: t("autoUsage")
-      };
+      return { nextState: state, output: `${stateLine()}
+${t("autoUsage")}` };
     }
     case "/tasks":
     case "/jobs":
@@ -8683,6 +8775,7 @@ ${t("autoUsage")}`
             cwd: state.cwd,
             agentKey: state.agentKey,
             userLanguage: locale,
+            responseViewport: TUI_RESPONSE_VIEWPORT,
             messages: historyTurns,
             ...resolveAgentModelIdentity({
               agentKey: state.agentKey,
@@ -8957,6 +9050,7 @@ function applyAgentSwitchState(state, target, messages) {
       agentName: target.name,
       model: target.model,
       userLanguage: state.userLanguage,
+      responseViewport: TUI_RESPONSE_VIEWPORT,
       messages
     }),
     turnTokens: void 0,
@@ -11738,10 +11832,6 @@ async function runAgentChat(scriptDir, state, message, env, output, agentRunner
     // 宿主环境层（session-scope 稳定前缀）：快速注入当前系统发行版、架构与桌面环境
     buildHostEnvironmentLayer()
   ];
-  const responseGuidelinesBlock = {
-    content: buildResponseGuidelines(true),
-    cacheScope: "session"
-  };
   let memoryPromptBlock = state.cachedMemoryOverlay;
   if (options.abortSignal?.aborted) {
     throw options.abortSignal.reason ?? new DOMException("Aborted", "AbortError");
@@ -11772,7 +11862,6 @@ async function runAgentChat(scriptDir, state, message, env, output, agentRunner
   }] : [];
   const contextBlockScopes = partitionScopedBlocks([
     ...renderTurnContextBlocksWithScope(layers),
-    responseGuidelinesBlock,
     ...renderTurnContextBlocksWithScope([memoryUseGuidanceLayer]),
     // Attached skill bodies are already self-contained sections built by
     // buildSkillContextBlocks; they stay turn-scope because the user can
@@ -11804,6 +11893,10 @@ async function runAgentChat(scriptDir, state, message, env, output, agentRunner
     ...options.onToolExecutionLocation ? { onToolExecutionLocation: options.onToolExecutionLocation } : {},
     ...state.agentKey === DEFAULT_TUI_AGENT_KEY && env.NOLO_AUTO_ROUTE !== "0" ? { dialogAgentMode: "auto" } : { dialogAgentMode: "fixed" },
     runtimeMode: state.runtimeMode,
+    // TUI 是窄屏终端：只声明展示能力，不自拼准则文本。行为段与窄屏排版段
+    // 都由 localLoop（local 线的最终装配边界）经 resolveResponseGuidelines 注入。
+    // 若该轮走远端 server 线，local 线不参与装配，此字段被忽略（server 线自己注入行为段）。
+    responseViewport: TUI_RESPONSE_VIEWPORT,
     // `/lang` updates the in-memory TUI state immediately. Pass that state
     // explicitly so the next real turn cannot keep using the workspace's
     // launch-time NOLO_LANG value while the estimator already uses the new one.
@@ -12131,6 +12224,7 @@ async function resolveActionGate(gate, deps) {
         request: asConfirmPermissionRequest(gate),
         input: deps.input,
         output: deps.output,
+        onApprove: deps.onApprove,
         ...anchor
       })
     );
@@ -12219,7 +12313,7 @@ async function runOneAgentTurn(ctx, inputMsg, imageUrls, actionGateHandler, conf
   };
   emitStatus({ state: "working" });
   const gateHandlerWithStatus = async (gate) => {
-    if (ctx.state.autoConfirm && isAutoConfirmableFileWriteGate(gate)) {
+    if (ctx.state.permissionGrants?.local === true && isAutoConfirmableFileWriteGate(gate)) {
       return await actionGateHandler(gate);
     }
     emitStatusUnlessForceStopped({
@@ -12233,7 +12327,7 @@ async function runOneAgentTurn(ctx, inputMsg, imageUrls, actionGateHandler, conf
     }
   };
   const confirmDestructiveActionWithStatus = confirmDestructiveAction && ctx.output.isTTY === true ? async (request) => {
-    if (ctx.state.autoConfirm) return await confirmDestructiveAction(request);
+    if (ctx.state.permissionGrants?.local === true) return await confirmDestructiveAction(request);
     emitStatusUnlessForceStopped({ state: "blocked", kind: "permission" });
     try {
       return await confirmDestructiveAction(request);
@@ -12266,6 +12360,7 @@ async function runOneAgentTurn(ctx, inputMsg, imageUrls, actionGateHandler, conf
       agentKey: ctx.state.agentKey,
       agentName: ctx.state.agentName,
       userLanguage: ctx.state.userLanguage,
+      responseViewport: TUI_RESPONSE_VIEWPORT,
       messages: ctx.history.turns,
       ...resolveAgentModelIdentity({
         agentKey: ctx.state.agentKey,
@@ -12488,6 +12583,7 @@ async function runOneAgentTurn(ctx, inputMsg, imageUrls, actionGateHandler, conf
           agentKey: ctx.state.agentKey,
           agentName: ctx.state.agentName,
           userLanguage: ctx.state.userLanguage,
+          responseViewport: TUI_RESPONSE_VIEWPORT,
           messages: ctx.history.turns
         }),
         lastAuthorityTurnCount: void 0,
@@ -14063,6 +14159,12 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
   const previousState = host.state;
   const previousAgentKey = host.state.agentKey;
   host.state = result.nextState;
+  if (previousState.permissionGrants?.remote === true && host.state.permissionGrants?.remote !== true) {
+    host.revokeRemoteShellGrants?.();
+  }
+  if (!persistPermissionGrantChanges(previousState.permissionGrants, host.state.permissionGrants)) {
+    emitCommandOutput(t("autoPersistFailed"));
+  }
   const command = line.trim().split(/\s+/)[0];
   if ((command === "/agent" || command === "/switch") && result.nextState !== previousState) {
     clearCliLocalRuntimePreparedAgentCache();
@@ -14122,6 +14224,7 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
         cwd: host.state.cwd,
         agentKey: host.state.agentKey,
         userLanguage: host.state.userLanguage,
+        responseViewport: TUI_RESPONSE_VIEWPORT,
         ...resolveAgentModelIdentity({
           agentKey: host.state.agentKey,
           agentName: host.state.agentName
@@ -14223,6 +14326,7 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
           cwd: host.state.cwd,
           agentKey: host.state.agentKey,
           userLanguage: host.state.userLanguage,
+          responseViewport: TUI_RESPONSE_VIEWPORT,
           messages: [
             ...compactResult.summary ? [{ role: "system", content: compactResult.summary }] : [],
             ...compactResult.compactedMessageCount > 0 ? host.history.turns.slice(compactResult.compactedMessageCount) : compactResult.summaryGenerated ? [] : host.history.turns
@@ -14355,6 +14459,7 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
             agentName: pickResult.name,
             model: pickResult.model,
             userLanguage: host.state.userLanguage,
+            responseViewport: TUI_RESPONSE_VIEWPORT,
             messages: host.history.turns
           }),
           turnTokens: void 0,
@@ -14493,6 +14598,7 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
             agentKey: host.state.agentKey,
             agentName: host.state.agentName,
             userLanguage: host.state.userLanguage,
+            responseViewport: TUI_RESPONSE_VIEWPORT,
             messages: history.turns,
             ...resolveAgentModelIdentity({
               agentKey: host.state.agentKey,
@@ -14903,7 +15009,7 @@ async function runTuiWorkspace(options) {
       await options.clipboardWriter(text);
     } : (text) => writeClipboard(text, {
       systemWrite: async (t2) => {
-        const { default: clipboard } = await import("./clipboardy-GCO3GT3I.js");
+        const { default: clipboard } = await import("clipboardy");
         await clipboard.write(t2);
       },
       output,
@@ -14915,7 +15021,7 @@ async function runTuiWorkspace(options) {
       transport: isRemoteSession(runtimeEnv) ? isInteractiveInput(input) ? "osc52" : "unavailable" : "system"
     });
     const readClipboardText = options.clipboardReader ?? (async () => {
-      const { default: clipboard } = await import("./clipboardy-GCO3GT3I.js");
+      const { default: clipboard } = await import("clipboardy");
       return await clipboard.read();
     });
     const readImage = options.clipboardImageReader ?? readClipboardImage;
@@ -14973,6 +15079,19 @@ async function runTuiWorkspace(options) {
       output.write(pinnedAgentNotice);
       initialBannerLineCount += pinnedAgentNotice.split("\n").length - 1;
     }
+    const startupGrantKinds = permissionGrantList(state.permissionGrants);
+    if (startupGrantKinds.length > 0) {
+      output.write(
+        `${t(
+          "autoPersistedStartup",
+          startupGrantKinds.map(
+            (kind) => kind === "local" ? t("autoKindLocal") : t("autoKindRemote")
+          ).join(" + ")
+        )}
+
+`
+      );
+    }
     let lastSentTitle = null;
     const syncWindowTitle = () => {
       if (!output.isTTY) return;
@@ -15294,6 +15413,16 @@ async function runTuiWorkspace(options) {
       renderHistoryToOutput();
       if (fixedInput.active) fixedInput.repaint(buffer, cursorPos);
     };
+    const grantEnablerDeps = {
+      getGrants: () => state.permissionGrants,
+      setGrants: (next) => {
+        state = { ...state, permissionGrants: next };
+      },
+      scheduleRender,
+      onPersistFailed: () => emitCommandOutput(t("autoPersistFailed"))
+    };
+    const approveLocalConfirms = createPermissionGrantEnabler("local", grantEnablerDeps);
+    const approveRemoteShell = createPermissionGrantEnabler("remote", grantEnablerDeps);
     const applyClipboardPasteResult = (outcome, source) => {
       const colorEnabled = resolveCliColorEnabled();
       if (outcome.kind === "image") {
@@ -15351,24 +15480,29 @@ async function runTuiWorkspace(options) {
           id: `child-shell-${crypto.randomUUID()}`,
           tool: "execShell",
           action: "shell-per-call",
-          title: "Background shell \u2014 approve this command once?",
-          body: `Run: ${request.runId}
-Agent: ${request.agentKey}
-Owner: ${request.ownerUserId}
-Device: ${request.deviceId}
-Workspace: ${request.workspaceRoot}
-${request.permissionNotice}`,
+          title: t("shellPerCall.title"),
+          body: t(
+            "shellPerCall.body",
+            request.runId,
+            request.agentKey,
+            request.ownerUserId,
+            request.deviceId,
+            request.workspaceRoot,
+            request.permissionNotice
+          ),
           command: request.command
         },
         signal,
         fullCommand: true,
         input,
         output,
+        onApprove: createSnapshotGuardedApproval("remote", () => state.permissionGrants, approveRemoteShell),
         ...anchor
       }));
-    }), () => state.autoConfirm === true);
+    }), () => state.permissionGrants?.remote === true);
     const sessionShellGrant = createOriginShellGrant({
       confirm: async (request) => {
+        if (state.permissionGrants?.remote === true) return true;
         return await runWithInputRequiredAttention(
           { output, env: effectiveEnv },
           () => dialogHost.run(
@@ -15394,12 +15528,18 @@ ${request.permissionNotice}`,
               },
               input,
               output,
+              onApprove: createSnapshotGuardedApproval("remote", () => state.permissionGrants, approveRemoteShell),
               ...anchor
             })
           )
         );
       }
     });
+    const shellGrantForTurns = {
+      isGranted: () => state.permissionGrants?.remote === true || sessionShellGrant.isGranted(),
+      requestGrant: (request) => sessionShellGrant.requestGrant(request),
+      revoke: () => sessionShellGrant.revoke()
+    };
     let turnIdentity = 0;
     const turnCtx = {
       get state() {
@@ -15468,7 +15608,7 @@ ${request.permissionNotice}`,
       },
       // 分享 OAuth agent 的 shell 会话授权（块 D）：会话级单例透传给 turn
       // 执行路径；撤销经 /shell-revoke 或设置面板调 sessionShellGrant.revoke()。
-      shellGrant: sessionShellGrant,
+      shellGrant: shellGrantForTurns,
       shellApprovalSession: childShellApprovals.session,
       // 运行位置展示（块 D）：owner-required 场景 adapter 回调一次；渲染一行
       // 「工具在 <deviceName>(<deviceId>) · workspace <root> · status: <s>」。
@@ -15544,6 +15684,10 @@ ${request.permissionNotice}`,
       get fixedInput() {
         return fixedInput;
       },
+      revokeRemoteShellGrants: () => {
+        sessionShellGrant.revoke();
+        childShellApprovals.revoke();
+      },
       history,
       pasteStore,
       dialogHost,
@@ -15570,6 +15714,14 @@ ${request.permissionNotice}`,
         const wasGranted = sessionShellGrant.isGranted();
         sessionShellGrant.revoke();
         childShellApprovals.revoke();
+        if (state.permissionGrants?.remote === true) {
+          const nextGrants = { ...state.permissionGrants };
+          delete nextGrants.remote;
+          state = { ...state, permissionGrants: nextGrants };
+          if (!persistPermissionGrantChanges({ remote: true }, nextGrants)) {
+            emitCommandOutput(t("autoPersistFailed"));
+          }
+        }
         emitCommandOutput(
           wasGranted ? t("shellGrant.revoked") : t("shellGrant.revokeNone"),
           "/shell-revoke"
@@ -15693,7 +15845,7 @@ ${request.permissionNotice}`,
       };
       const buildInteractiveTurnHandlers = () => {
         const actionGateHandler = async (gate) => {
-          if (state.autoConfirm && isAutoConfirmableFileWriteGate(gate)) {
+          if (state.permissionGrants?.local === true && isAutoConfirmableFileWriteGate(gate)) {
             return buildGateConfirmedResult(gate);
           }
           return await runWithInputRequiredAttention(
@@ -15708,12 +15860,13 @@ ${request.permissionNotice}`,
               },
               pauseComposer: () => fixedInput.pause(),
               resumeComposerFromSubprocess: () => fixedInput.resumeFromSubprocess(),
-              resumeComposerFromDialog: () => fixedInput.resumeFromDialog()
+              resumeComposerFromDialog: () => fixedInput.resumeFromDialog(),
+              onApprove: createSnapshotGuardedApproval("local", () => state.permissionGrants, approveLocalConfirms)
             })
           );
         };
         const confirmDestructiveAction = async (request) => {
-          if (state.autoConfirm) return true;
+          if (state.permissionGrants?.local === true) return true;
           return await runWithInputRequiredAttention(
             { output, env: effectiveEnv },
             () => dialogHost.run(
@@ -15721,6 +15874,7 @@ ${request.permissionNotice}`,
                 request,
                 input,
                 output,
+                onApprove: createSnapshotGuardedApproval("local", () => state.permissionGrants, approveLocalConfirms),
                 ...anchor
               })
             )
@@ -15988,6 +16142,15 @@ ${err.message}` : ""}`
           const wasGranted = sessionShellGrant.isGranted();
           sessionShellGrant.revoke();
           childShellApprovals.revoke();
+          if (state.permissionGrants?.remote === true) {
+            const nextGrants = { ...state.permissionGrants };
+            delete nextGrants.remote;
+            state = { ...state, permissionGrants: nextGrants };
+            if (!persistPermissionGrantChanges({ remote: true }, nextGrants)) {
+              output.write(`[nolo] ${t("autoPersistFailed")}
+`);
+            }
+          }
           emitCommandOutput(
             wasGranted ? t("shellGrant.revoked") : t("shellGrant.revokeNone"),
             "/shell-revoke"
@@ -16056,8 +16219,19 @@ ${err.message}` : ""}`
             "Model picker isn't available while a reply is running. Use `/switch <name>` to switch now (takes effect on the next turn), or wait for the reply to finish.\n"
           );
         } else {
+          const grantsBefore = state.permissionGrants;
           state = res.nextState;
+          if (grantsBefore?.remote === true && state.permissionGrants?.remote !== true) {
+            sessionShellGrant.revoke();
+            childShellApprovals.revoke();
+          }
           let msg = res.output;
+          if (!persistPermissionGrantChanges(grantsBefore, state.permissionGrants)) {
+            output.write(`[nolo] ${t("autoPersistFailed")}
+`);
+          } else if (state.permissionGrants !== grantsBefore) {
+            scheduleRender();
+          }
           if (busySlashCommand === "/switch" && persistExplicitAgentSwitch(beforeAgentKey)) {
             const hint = "Note: the new model takes effect on the next turn. Switching models may consume more tokens because the conversation context is re-sent to the new model.";
             msg = msg ? `${msg}
@@ -16444,10 +16618,10 @@ ${merged}` : merged;
           (gate) => (
             // /auto on 同款短路，见上方交互路径的 actionGateHandler 注释：
             // 只放行 file_write 的 confirm gate，handoff/input 类仍要求真人操作。
-            state.autoConfirm && isAutoConfirmableFileWriteGate(gate) ? Promise.resolve(buildGateConfirmedResult(gate)) : waitForActionGate(rl, input, output, gate, spawnRunner)
+            state.permissionGrants?.local === true && isAutoConfirmableFileWriteGate(gate) ? Promise.resolve(buildGateConfirmedResult(gate)) : waitForActionGate(rl, input, output, gate, spawnRunner)
           ),
           async (request) => {
-            if (state.autoConfirm) return true;
+            if (state.permissionGrants?.local === true) return true;
             if (!isInteractiveInput(input)) {
               return false;
             }
@@ -16458,6 +16632,7 @@ ${merged}` : merged;
                   request,
                   input,
                   output,
+                  onApprove: createSnapshotGuardedApproval("local", () => state.permissionGrants, approveLocalConfirms),
                   ...anchor
                 })
               );