nolo-cli 0.184.0-alpha.1 → 0.185.0-alpha.2

package/{machineCommands-A2NAILV6.js → machineCommands-SQELO6HH.js}

@@ -2,7 +2,7 @@ import {
   buildMachinePermissionPromptBlock,
   handleConnectorRunMessage,
   resolveMachineRunPermissionPolicy
-} from "./chunk-2FY2HA4R.js";
+} from "./chunk-CN6T5QKA.js";
 import {
   MAX_CONNECTOR_TIMER_DELAY_MS,
   clampConnectorTimerDelayMs,
@@ -11,16 +11,16 @@ import {
   resolveConnectorProbeTimeoutMs,
   resolveConnectorWebSocketTarget
 } from "./chunk-BLVSFYQ3.js";
-import "./chunk-GDQ5KO2J.js";
+import "./chunk-JJU5FBYH.js";
 import "./chunk-D2J22QSE.js";
 import "./chunk-R4BMKAR5.js";
-import "./chunk-GKKIZRJ6.js";
+import "./chunk-YXTMZQGX.js";
 import {
   parsePositiveFiniteNumberOrFallback
 } from "./chunk-Y5GCAMGP.js";
 import "./chunk-VP3BINY7.js";
 import "./chunk-LKZPX6YH.js";
-import "./chunk-MPIAKYZ7.js";
+import "./chunk-YYKHIX4X.js";
 import "./chunk-NBTY7YJF.js";
 import "./chunk-VL5KOY2C.js";
 import {
@@ -33,14 +33,14 @@ import "./chunk-HGDKT2D6.js";
 import "./chunk-W6E5IXIP.js";
 import "./chunk-ATNTHIZI.js";
 import "./chunk-INFHX73M.js";
-import "./chunk-5DVM4RIR.js";
+import "./chunk-NCC2SYOD.js";
 import "./chunk-HS7MLR74.js";
-import "./chunk-5ROGGWPM.js";
-import "./chunk-P7JNYLDW.js";
+import "./chunk-D4JCY67U.js";
+import "./chunk-KHMJI7GE.js";
 import "./chunk-KFHREHUQ.js";
 import "./chunk-OXME3PEE.js";
 import "./chunk-BAWAKW7X.js";
-import "./chunk-HWJZEUA6.js";
+import "./chunk-7YW5OUQE.js";
 import "./chunk-NF64D32W.js";
 import {
   CORE_DRAIN_REASON
@@ -55,19 +55,19 @@ import "./chunk-KSTEXKL6.js";
 import "./chunk-AGIM7IMJ.js";
 import "./chunk-63W5N6P3.js";
 import "./chunk-VF4K2QE6.js";
-import "./chunk-C3BYVRTJ.js";
-import "./chunk-3PVH6HJG.js";
+import "./chunk-BJPALUYR.js";
+import "./chunk-YXTQJ2QR.js";
 import "./chunk-FDLDMJTM.js";
 import "./chunk-YPG7TUQD.js";
-import "./chunk-7AVKDSWD.js";
+import "./chunk-HRLKX6YP.js";
 import "./chunk-ZJ7UHBJS.js";
-import "./chunk-WGHIT2HH.js";
+import "./chunk-VXCDYN6M.js";
 import "./chunk-TZXPT53C.js";
 import "./chunk-523DITKR.js";
 import "./chunk-OFFL4DCR.js";
 import "./chunk-BYXBJQAS.js";
 import "./chunk-QYPE3TS3.js";
-import "./chunk-MHC44FKA.js";
+import "./chunk-DBEIHUCJ.js";
 import "./chunk-4JH2UMJR.js";
 import "./chunk-ESMZW5PE.js";
 import "./chunk-5RGU3J7P.js";
@@ -91,8 +91,8 @@ import "./chunk-QQ56R7KS.js";
 import "./chunk-OW765XBU.js";
 import "./chunk-PXYBUFDB.js";
 import "./chunk-D2MDMY2M.js";
-import "./chunk-TXJZ7QXG.js";
-import "./chunk-NRYTWXXV.js";
+import "./chunk-ZZE2IJ5U.js";
+import "./chunk-7XISFN2T.js";
 import "./chunk-EUGTFFO6.js";
 import "./chunk-AETZ7AD6.js";
 import "./chunk-Y6ORVLSS.js";
@@ -102,7 +102,7 @@ import {
   PATH_FIELD_ALIASES,
   createLocalWorkspaceToolExecutors,
   resolveRequestedWorkspacePath
-} from "./chunk-FO2BTDKY.js";
+} from "./chunk-IOQHM7ID.js";
 import "./chunk-KMSMIOOL.js";
 import "./chunk-ZNFJWEN4.js";
 import "./chunk-QNLRCES2.js";
@@ -116,10 +116,10 @@ import "./chunk-P2BGRAW7.js";
 import "./chunk-G6OOUQWJ.js";
 import "./chunk-56GBUMO5.js";
 import "./chunk-WJZOQR2J.js";
-import "./chunk-TQU64H2A.js";
+import "./chunk-QEGPFGKA.js";
 import "./chunk-HEYJFOL6.js";
 import "./chunk-E2BESSAW.js";
-import "./chunk-3FTJG5NU.js";
+import "./chunk-FKOCI2WR.js";
 import "./chunk-JLR5NWP2.js";
 import "./chunk-XAFCJN32.js";
 import "./chunk-2MBTWINN.js";
@@ -137,8 +137,8 @@ import "./chunk-7DPNBQSV.js";
 import "./chunk-ZWQUWF6W.js";
 import "./chunk-VEA7H5FG.js";
 import "./chunk-4VJAC32I.js";
-import "./chunk-NHBJHDVW.js";
-import "./chunk-JX5XVFVW.js";
+import "./chunk-AKE53VMW.js";
+import "./chunk-ZC3CMUKU.js";
 import "./chunk-LOEO7LRC.js";
 import "./chunk-M2EJHDJP.js";
 import "./chunk-5EMSBTQ6.js";
@@ -160,7 +160,7 @@ import "./chunk-R5GO3YZP.js";
 import "./chunk-Y6ROFCZO.js";
 import {
   t
-} from "./chunk-LPV7KKTB.js";
+} from "./chunk-YO3O7H2X.js";
 import "./chunk-HLAL63BZ.js";
 import "./chunk-JOUFPRE4.js";
 import "./chunk-WWC7I6TA.js";

package/{machineWsRunDispatch-AWIGTEF6.js → machineWsRunDispatch-E33LUXWG.js}

@@ -11,14 +11,14 @@ import {
   runtimeWorkspacePermissionPolicy,
   scopePermissionPolicyToRuntimeWorkspace,
   summarizeAgentConfigForLogs
-} from "./chunk-2FY2HA4R.js";
-import "./chunk-GDQ5KO2J.js";
+} from "./chunk-CN6T5QKA.js";
+import "./chunk-JJU5FBYH.js";
 import "./chunk-D2J22QSE.js";
 import "./chunk-R4BMKAR5.js";
-import "./chunk-GKKIZRJ6.js";
+import "./chunk-YXTMZQGX.js";
 import "./chunk-VP3BINY7.js";
 import "./chunk-LKZPX6YH.js";
-import "./chunk-MPIAKYZ7.js";
+import "./chunk-YYKHIX4X.js";
 import "./chunk-NBTY7YJF.js";
 import "./chunk-VL5KOY2C.js";
 import "./chunk-ZEZC7IIM.js";
@@ -27,14 +27,14 @@ import "./chunk-HGDKT2D6.js";
 import "./chunk-W6E5IXIP.js";
 import "./chunk-ATNTHIZI.js";
 import "./chunk-INFHX73M.js";
-import "./chunk-5DVM4RIR.js";
+import "./chunk-NCC2SYOD.js";
 import "./chunk-HS7MLR74.js";
-import "./chunk-5ROGGWPM.js";
-import "./chunk-P7JNYLDW.js";
+import "./chunk-D4JCY67U.js";
+import "./chunk-KHMJI7GE.js";
 import "./chunk-KFHREHUQ.js";
 import "./chunk-OXME3PEE.js";
 import "./chunk-BAWAKW7X.js";
-import "./chunk-HWJZEUA6.js";
+import "./chunk-7YW5OUQE.js";
 import "./chunk-NF64D32W.js";
 import "./chunk-3L2WKC3W.js";
 import "./chunk-VYNMQ6HW.js";
@@ -47,19 +47,19 @@ import "./chunk-KSTEXKL6.js";
 import "./chunk-AGIM7IMJ.js";
 import "./chunk-63W5N6P3.js";
 import "./chunk-VF4K2QE6.js";
-import "./chunk-C3BYVRTJ.js";
-import "./chunk-3PVH6HJG.js";
+import "./chunk-BJPALUYR.js";
+import "./chunk-YXTQJ2QR.js";
 import "./chunk-FDLDMJTM.js";
 import "./chunk-YPG7TUQD.js";
-import "./chunk-7AVKDSWD.js";
+import "./chunk-HRLKX6YP.js";
 import "./chunk-ZJ7UHBJS.js";
-import "./chunk-WGHIT2HH.js";
+import "./chunk-VXCDYN6M.js";
 import "./chunk-TZXPT53C.js";
 import "./chunk-523DITKR.js";
 import "./chunk-OFFL4DCR.js";
 import "./chunk-BYXBJQAS.js";
 import "./chunk-QYPE3TS3.js";
-import "./chunk-MHC44FKA.js";
+import "./chunk-DBEIHUCJ.js";
 import "./chunk-4JH2UMJR.js";
 import "./chunk-ESMZW5PE.js";
 import "./chunk-5RGU3J7P.js";
@@ -83,13 +83,13 @@ import "./chunk-QQ56R7KS.js";
 import "./chunk-OW765XBU.js";
 import "./chunk-PXYBUFDB.js";
 import "./chunk-D2MDMY2M.js";
-import "./chunk-TXJZ7QXG.js";
-import "./chunk-NRYTWXXV.js";
+import "./chunk-ZZE2IJ5U.js";
+import "./chunk-7XISFN2T.js";
 import "./chunk-EUGTFFO6.js";
 import "./chunk-AETZ7AD6.js";
 import "./chunk-Y6ORVLSS.js";
 import "./chunk-KHCLMKZZ.js";
-import "./chunk-FO2BTDKY.js";
+import "./chunk-IOQHM7ID.js";
 import "./chunk-KMSMIOOL.js";
 import "./chunk-ZNFJWEN4.js";
 import "./chunk-QNLRCES2.js";
@@ -103,10 +103,10 @@ import "./chunk-P2BGRAW7.js";
 import "./chunk-G6OOUQWJ.js";
 import "./chunk-56GBUMO5.js";
 import "./chunk-WJZOQR2J.js";
-import "./chunk-TQU64H2A.js";
+import "./chunk-QEGPFGKA.js";
 import "./chunk-HEYJFOL6.js";
 import "./chunk-E2BESSAW.js";
-import "./chunk-3FTJG5NU.js";
+import "./chunk-FKOCI2WR.js";
 import "./chunk-JLR5NWP2.js";
 import "./chunk-XAFCJN32.js";
 import "./chunk-2MBTWINN.js";
@@ -124,8 +124,8 @@ import "./chunk-7DPNBQSV.js";
 import "./chunk-ZWQUWF6W.js";
 import "./chunk-VEA7H5FG.js";
 import "./chunk-4VJAC32I.js";
-import "./chunk-NHBJHDVW.js";
-import "./chunk-JX5XVFVW.js";
+import "./chunk-AKE53VMW.js";
+import "./chunk-ZC3CMUKU.js";
 import "./chunk-LOEO7LRC.js";
 import "./chunk-M2EJHDJP.js";
 import "./chunk-5EMSBTQ6.js";
@@ -141,7 +141,7 @@ import "./chunk-OLZBQWZU.js";
 import "./chunk-LCBAMY2M.js";
 import "./chunk-R5GO3YZP.js";
 import "./chunk-Y6ROFCZO.js";
-import "./chunk-LPV7KKTB.js";
+import "./chunk-YO3O7H2X.js";
 import "./chunk-HLAL63BZ.js";
 import "./chunk-JOUFPRE4.js";
 import "./chunk-WWC7I6TA.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nolo-cli",
-  "version": "0.184.0-alpha.1",
+  "version": "0.185.0-alpha.2",
   "type": "module",
   "description": "Agent-first terminal workspace for Nolo",
   "bin": {

package/{readlineWorkspace-GFKEHEXB.js → readlineWorkspace-V6GVWGIZ.js}

@@ -13,7 +13,7 @@ import {
   listRemoteAgents,
   listRemoteAgentsAcrossServers,
   normalizeListedAgent
-} from "./chunk-AWFDDOVW.js";
+} from "./chunk-YVAERPCH.js";
 import {
   refreshSubscriptionQuotas
 } from "./chunk-YGILMZ7N.js";
@@ -90,9 +90,9 @@ import {
   wrapTextToLines,
   wrapTranscriptLine,
   wrapTranscriptLineWithLayout
-} from "./chunk-IR5IH6LH.js";
+} from "./chunk-WVIBJBDF.js";
 import "./chunk-6QDYSCPW.js";
-import "./chunk-DHMXTEM4.js";
+import "./chunk-ZYI6K46I.js";
 import {
   getReadableCliDb
 } from "./chunk-62TBKWTV.js";
@@ -100,12 +100,15 @@ import {
   RUN_WAKE_CHANNEL_ENV,
   clearCliLocalRuntimePreparedAgentCache,
   createCliLocalRuntimeAdapter,
+  createHostApprovalCardQueue,
   createOriginShellGrant,
-  readTimestamp
-} from "./chunk-GDQ5KO2J.js";
+  formatApprovalRemaining,
+  readTimestamp,
+  registerHostApprovalRenderer
+} from "./chunk-JJU5FBYH.js";
 import "./chunk-D2J22QSE.js";
 import "./chunk-R4BMKAR5.js";
-import "./chunk-GKKIZRJ6.js";
+import "./chunk-YXTMZQGX.js";
 import {
   defaultOpenBrowser,
   saveTokenLogin
@@ -117,21 +120,21 @@ import {
   normalizeDialogRecord,
   readDialogSnapshot,
   sortDialogs
-} from "./chunk-PW5CM76N.js";
+} from "./chunk-KVUMIWLL.js";
 import "./chunk-ID4G2MAR.js";
 import {
   listUserRecordsFromServers,
   readLiveDbRecordAfterTombstoneMerge
-} from "./chunk-F2P6YUHC.js";
+} from "./chunk-K3TVMCV3.js";
 import "./chunk-Y5GCAMGP.js";
 import {
   deleteDbRecord,
   queryUserRecords,
   readDbRecord
-} from "./chunk-GTQKUQGF.js";
+} from "./chunk-IHQ7RMRS.js";
 import "./chunk-VP3BINY7.js";
 import "./chunk-LKZPX6YH.js";
-import "./chunk-MPIAKYZ7.js";
+import "./chunk-YYKHIX4X.js";
 import {
   NOLO_DEFAULT_AGENT_KEY,
   resolveCliAgentKeyInput
@@ -148,14 +151,14 @@ import "./chunk-INFHX73M.js";
 import "./chunk-JEXVIMYZ.js";
 import {
   prepareTools
-} from "./chunk-5DVM4RIR.js";
+} from "./chunk-NCC2SYOD.js";
 import "./chunk-HS7MLR74.js";
-import "./chunk-5ROGGWPM.js";
-import "./chunk-P7JNYLDW.js";
+import "./chunk-D4JCY67U.js";
+import "./chunk-KHMJI7GE.js";
 import "./chunk-KFHREHUQ.js";
 import "./chunk-OXME3PEE.js";
 import "./chunk-BAWAKW7X.js";
-import "./chunk-HWJZEUA6.js";
+import "./chunk-7YW5OUQE.js";
 import "./chunk-NF64D32W.js";
 import "./chunk-3L2WKC3W.js";
 import "./chunk-VYNMQ6HW.js";
@@ -168,22 +171,22 @@ import "./chunk-KSTEXKL6.js";
 import "./chunk-AGIM7IMJ.js";
 import "./chunk-63W5N6P3.js";
 import "./chunk-VF4K2QE6.js";
-import "./chunk-C3BYVRTJ.js";
-import "./chunk-3PVH6HJG.js";
+import "./chunk-BJPALUYR.js";
+import "./chunk-YXTQJ2QR.js";
 import "./chunk-FDLDMJTM.js";
 import "./chunk-YPG7TUQD.js";
-import "./chunk-7AVKDSWD.js";
+import "./chunk-HRLKX6YP.js";
 import "./chunk-ZJ7UHBJS.js";
 import {
   estimateMessagesTokens,
   historyTokensBeforeLatestAssistant
-} from "./chunk-WGHIT2HH.js";
+} from "./chunk-VXCDYN6M.js";
 import "./chunk-TZXPT53C.js";
 import "./chunk-523DITKR.js";
 import "./chunk-OFFL4DCR.js";
 import "./chunk-BYXBJQAS.js";
 import "./chunk-QYPE3TS3.js";
-import "./chunk-MHC44FKA.js";
+import "./chunk-DBEIHUCJ.js";
 import "./chunk-4JH2UMJR.js";
 import "./chunk-ESMZW5PE.js";
 import "./chunk-5RGU3J7P.js";
@@ -211,10 +214,10 @@ import {
   buildSkillDiscoveryContextBlock,
   buildSkillDiscoveryContextLayer
 } from "./chunk-AU7AXHUL.js";
-import "./chunk-TXJZ7QXG.js";
+import "./chunk-ZZE2IJ5U.js";
 import {
   expandEnabledPacks
-} from "./chunk-NRYTWXXV.js";
+} from "./chunk-7XISFN2T.js";
 import "./chunk-EUGTFFO6.js";
 import "./chunk-AETZ7AD6.js";
 import "./chunk-Y6ORVLSS.js";
@@ -225,7 +228,7 @@ import {
   formatToolOverflowMarker,
   getProcessRegistry,
   readCommandActionGatePayload
-} from "./chunk-FO2BTDKY.js";
+} from "./chunk-IOQHM7ID.js";
 import "./chunk-KMSMIOOL.js";
 import "./chunk-ZNFJWEN4.js";
 import "./chunk-QNLRCES2.js";
@@ -250,10 +253,10 @@ import {
   buildRuntimeGuidanceBlocks,
   resolveResponseGuidelines,
   resolveToolGuidedSections
-} from "./chunk-TQU64H2A.js";
+} from "./chunk-QEGPFGKA.js";
 import "./chunk-HEYJFOL6.js";
 import "./chunk-E2BESSAW.js";
-import "./chunk-3FTJG5NU.js";
+import "./chunk-FKOCI2WR.js";
 import {
   isQuotaExhaustedError
 } from "./chunk-JLR5NWP2.js";
@@ -300,8 +303,8 @@ import {
 } from "./chunk-4VJAC32I.js";
 import {
   canonicalizeToolNames
-} from "./chunk-NHBJHDVW.js";
-import "./chunk-JX5XVFVW.js";
+} from "./chunk-AKE53VMW.js";
+import "./chunk-ZC3CMUKU.js";
 import {
   BUILTIN_NOLO_AGENT_KEY,
   BUILTIN_NOLO_AGENT_MODEL,
@@ -349,7 +352,7 @@ import {
 import {
   checkForCliUpdate,
   runSelfUpdateDetailed
-} from "./chunk-PZ7LKLIV.js";
+} from "./chunk-AA5GKA2X.js";
 import {
   parseUserIdFromAuthToken,
   resolveAuthToken,
@@ -378,14 +381,14 @@ import {
   resolveDefaultSpawn,
   spawnProcess
 } from "./chunk-Y6ROFCZO.js";
-import "./chunk-JJWQ737H.js";
+import "./chunk-IIGDVODZ.js";
 import {
   dailyWelcomeTip,
   initCliLocale,
   parseCliLocale,
   setCliLocale,
   t
-} from "./chunk-LPV7KKTB.js";
+} from "./chunk-YO3O7H2X.js";
 import "./chunk-HLAL63BZ.js";
 import "./chunk-JOUFPRE4.js";
 import "./chunk-WWC7I6TA.js";
@@ -3547,10 +3550,10 @@ function truncateCommand(command, maxWidth) {
   let kept = "";
   let width = 0;
   for (const char of command) {
-    const charWidth = WIDE_CHAR.test(char) ? 2 : 1;
-    if (width + charWidth > keep) break;
+    const charWidth2 = WIDE_CHAR.test(char) ? 2 : 1;
+    if (width + charWidth2 > keep) break;
     kept += char;
-    width += charWidth;
+    width += charWidth2;
   }
   return `${kept}${marker}`;
 }
@@ -3636,6 +3639,191 @@ ${t("dialogConfirmRememberLocal")}`;
   return chosen.value;
 }
 
+// packages/cli/tui/hostApprovalCard.ts
+var ALLOW_KEYS = /* @__PURE__ */ new Set(["y", "Y"]);
+var DENY_KEYS = /* @__PURE__ */ new Set(["n", "N"]);
+var ESCAPE_KEYS = /* @__PURE__ */ new Set(["\x1B", "\x1B\x1B", "\x1B[27~"]);
+var FALLBACK_COLUMNS = 80;
+var LABEL_COLUMN = 9;
+var CONTENT_INDENT = LABEL_COLUMN + 1;
+var DETAIL_MAX_ROWS = 15;
+var DETAIL_HEAD_SHARE = 0.4;
+var WIDE_CHAR2 = /[\u1100-\u115F\u2E80-\u303E\u3041-\u33FF\u3400-\u4DBF\u4E00-\u9FFF\uA000-\uA4CF\uAC00-\uD7A3\uF900-\uFAFF\uFE30-\uFE4F\uFF00-\uFF60\uFFE0-\uFFE6]/;
+function charWidth(char) {
+  return WIDE_CHAR2.test(char) ? 2 : 1;
+}
+function displayWidth3(text) {
+  let width = 0;
+  for (const char of text) width += charWidth(char);
+  return width;
+}
+function clipCardLine(text, columns) {
+  const budget = Math.max(8, columns - 1);
+  if (displayWidth3(text) <= budget) return text;
+  let kept = "";
+  let width = 0;
+  for (const char of text) {
+    const charWidth2 = WIDE_CHAR2.test(char) ? 2 : 1;
+    if (width + charWidth2 > budget - 1) break;
+    kept += char;
+    width += charWidth2;
+  }
+  return `${kept}\u2026`;
+}
+function wrapCardLine(text, width) {
+  const budget = Math.max(8, width);
+  if (displayWidth3(text) <= budget) return [text];
+  const rows = [];
+  let row = "";
+  let rowWidth = 0;
+  for (const char of text) {
+    const charCols = charWidth(char);
+    if (row && rowWidth + charCols > budget) {
+      rows.push(row);
+      row = "";
+      rowWidth = 0;
+    }
+    row += char;
+    rowWidth += charCols;
+  }
+  rows.push(row);
+  return rows;
+}
+function fieldRows(label, text, contentWidth) {
+  const first = ` ${label.padEnd(LABEL_COLUMN, " ")}`;
+  const rest = " ".repeat(CONTENT_INDENT);
+  return wrapCardLine(text, contentWidth).map(
+    (row, index) => `\u2502${index === 0 ? first : rest}${row}`
+  );
+}
+function detailRows(summary, contentWidth) {
+  const text = summary && summary.trim() ? summary : "(no summary)";
+  const rows = text.split("\n").flatMap((line) => wrapCardLine(line, contentWidth));
+  const first = ` ${"detail".padEnd(LABEL_COLUMN, " ")}`;
+  const rest = " ".repeat(CONTENT_INDENT);
+  const withPrefix = (row, index) => `\u2502${index === 0 ? first : rest}${row}`;
+  if (rows.length <= DETAIL_MAX_ROWS) return rows.map(withPrefix);
+  const omission = (hidden2) => `\u2026\uFF08\u4E2D\u95F4 ${hidden2} \u884C\u672A\u663E\u793A\uFF0C\u4EE5\u4E0B\u662F\u811A\u672C\u7ED3\u5C3E\uFF09`;
+  const reserved = wrapCardLine(omission(rows.length), contentWidth).length;
+  const budget = Math.max(4, DETAIL_MAX_ROWS - reserved);
+  const headCount = Math.max(2, Math.floor(budget * DETAIL_HEAD_SHARE));
+  const tailCount = Math.max(2, budget - headCount);
+  const hidden = rows.length - headCount - tailCount;
+  return [
+    ...rows.slice(0, headCount),
+    ...wrapCardLine(omission(hidden), contentWidth),
+    ...rows.slice(rows.length - tailCount)
+  ].map(withPrefix);
+}
+function renderHostApprovalCardLines(card, opts) {
+  const columns = Math.max(20, opts.columns ?? FALLBACK_COLUMNS);
+  const contentWidth = Math.max(16, columns - CONTENT_INDENT - 2);
+  const expired = card.expiresAt <= opts.now;
+  const expiryLabel = expired ? "expired \u2014 this action was not run and will not be retried" : `${formatApprovalRemaining(card.expiresAt, opts.now)} left`;
+  const lines = [
+    "\u250C\u2500 Browser action needs your approval \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",
+    ...fieldRows("action", card.actionLabel, contentWidth),
+    ...fieldRows("site", card.origin || "(origin unknown)", contentWidth),
+    ...detailRows(card.summary, contentWidth),
+    ...fieldRows("expires", expiryLabel, contentWidth),
+    // The precondition comes first so it reads before the options: with text in the composer, y/n
+    // are ordinary letters and the card cannot be answered.
+    ...fieldRows(
+      "keys",
+      expired ? "disabled (expired)" : "empty the input line first, then: y = allow once \xB7 n / Esc = deny",
+      contentWidth
+    ),
+    "\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"
+  ];
+  return lines.map((line) => clipCardLine(line, columns));
+}
+function createInlineHostApprovalPrompt(args) {
+  const now = args.now ?? Date.now;
+  const columns = args.columns ?? (() => FALLBACK_COLUMNS);
+  const setTimeoutImpl = args.setTimeoutImpl ?? ((fn, ms) => setTimeout(fn, ms));
+  const clearTimeoutImpl = args.clearTimeoutImpl ?? ((handle) => clearTimeout(handle));
+  const queue = createHostApprovalCardQueue();
+  let active = null;
+  let expiryTimer = null;
+  let disposed = false;
+  const clearExpiryTimer = () => {
+    if (expiryTimer !== null) {
+      clearTimeoutImpl(expiryTimer);
+      expiryTimer = null;
+    }
+  };
+  const settle = (decision, note) => {
+    if (!active) return;
+    const finishing = active;
+    active = null;
+    clearExpiryTimer();
+    try {
+      args.write(`${note}
+`);
+    } catch {
+    } finally {
+      finishing.finish(decision);
+    }
+  };
+  const presentOne = (card) => new Promise((resolve4) => {
+    if (disposed) {
+      resolve4("deny");
+      return;
+    }
+    active = { card, finish: resolve4 };
+    try {
+      const lines = renderHostApprovalCardLines(card, { now: now(), columns: columns() });
+      args.write(`${lines.join("\n")}
+`);
+    } catch {
+      settle("deny", "\u231B approval could not be shown \u2014 the action was not run");
+      return;
+    }
+    const remaining = card.expiresAt - now();
+    if (remaining <= 0) {
+      settle("deny", "\u231B approval expired \u2014 the action was not run");
+      return;
+    }
+    expiryTimer = setTimeoutImpl(() => {
+      expiryTimer = null;
+      settle("deny", "\u231B approval expired \u2014 the action was not run");
+    }, remaining);
+  });
+  return {
+    awaitHostApproval: (card) => queue.present(card, presentOne),
+    handleKey(sequence, context) {
+      if (!active || disposed) return false;
+      const keys = sequence;
+      const isAllow = ALLOW_KEYS.has(keys);
+      const isDeny = DENY_KEYS.has(keys);
+      const isEscape = ESCAPE_KEYS.has(keys);
+      if (!isAllow && !isDeny && !isEscape) return false;
+      if (!context.draftEmpty) return false;
+      if (isEscape && context.busy) return false;
+      if (active.card.expiresAt <= now()) {
+        settle("deny", "\u231B approval expired \u2014 the action was not run");
+        return true;
+      }
+      settle(
+        isAllow ? "allow_once" : "deny",
+        isAllow ? "\u2714 allowed once (this action only)" : "\u2716 denied"
+      );
+      return true;
+    },
+    dispose() {
+      if (disposed) return;
+      disposed = true;
+      clearExpiryTimer();
+      if (active) {
+        const finishing = active;
+        active = null;
+        finishing.finish("deny");
+      }
+    },
+    pendingCount: () => queue.size()
+  };
+}
+
 // packages/cli/tui/terminalNotification.ts
 var TURN_COMPLETION_ATTENTION_THRESHOLD_MS = 5e3;
 function buildWindowsTerminalProgressSequence(state) {
@@ -15404,6 +15592,8 @@ async function runTuiWorkspace(options) {
       state = { ...state, sessionCredits: (state.sessionCredits ?? 0) + credits };
     };
     let composerDecoderDrain = null;
+    let hostApprovalPrompt = null;
+    let unregisterHostApprovalRenderer = null;
     let draftEpoch = 0;
     const bumpDraftEpoch = () => {
       draftEpoch += 1;
@@ -15820,6 +16010,10 @@ async function runTuiWorkspace(options) {
       const finish = () => {
         if (done) return;
         done = true;
+        unregisterHostApprovalRenderer?.();
+        unregisterHostApprovalRenderer = null;
+        hostApprovalPrompt?.dispose();
+        hostApprovalPrompt = null;
         childShellApprovals.close();
         sessionEnded = true;
         scrollAnimator.cancel();
@@ -16260,6 +16454,12 @@ ${hint}` : hint;
           rawActionGateTokenHandler?.(sequence);
           return;
         }
+        if (hostApprovalPrompt?.handleKey(sequence, {
+          draftEmpty: buffer.length === 0,
+          busy
+        })) {
+          return;
+        }
         if (sequence === CTRL_S) {
           if (!chatQueueBinding || chatQueueBinding.queueLength() === 0) {
             return;
@@ -16591,6 +16791,15 @@ ${merged}` : merged;
         }
       });
       composerDecoderDrain = () => onData.destroy();
+      hostApprovalPrompt = createInlineHostApprovalPrompt({
+        write: (text) => {
+          emitCommandOutput(text.replace(/\n$/, ""));
+        },
+        columns: () => output.columns ?? 80
+      });
+      unregisterHostApprovalRenderer = registerHostApprovalRenderer(
+        hostApprovalPrompt.awaitHostApproval
+      );
       try {
         onGraphicsData = (chunk) => {
           const filtered = graphicsRuntime.filterInput(chunk.toString());