nolo-cli 0.206.1 → 0.208.0

package/{readlineWorkspace-32IDD2MQ.js → readlineWorkspace-SJY4M4YP.js}

@@ -1,37 +1,48 @@
 import {
   resolveAuthGuidanceState
-} from "./chunk-YZGNKHUM.js";
+} from "./chunk-3V2QMRNN.js";
 import {
   fetchCiStatus,
   summarizeLatest
 } from "./chunk-CKAHAVMK.js";
 import "./chunk-M3JEW6N6.js";
+import {
+  runAnthropicOAuthLogin,
+  runCursorOAuthLogin,
+  runDevinOAuthLogin,
+  runXaiOAuthDeviceCode,
+  runXaiOAuthLogin,
+  syncCredentialToServer
+} from "./chunk-B2WYM23T.js";
+import {
+  runCloudflareOAuthLogin
+} from "./chunk-27E2CBBY.js";
 import {
   isHiddenFromDialogList,
   loadLocalRunChildDialogIds,
   normalizeDialogRecord,
   readDialogSnapshot,
   sortDialogs
-} from "./chunk-DDVXTOFJ.js";
+} from "./chunk-RIALQUSF.js";
 import {
-  formatQuotaSummary,
   listFavoriteAgentIdsAcrossServers,
   listLocalCachedAgents,
   listRemoteAgents,
   listRemoteAgentsAcrossServers,
   normalizeListedAgent
-} from "./chunk-3ZUXGHFS.js";
+} from "./chunk-2UZ22L3V.js";
 import "./chunk-ID4G2MAR.js";
 import {
   listUserRecordsFromServers,
   readLiveDbRecordAfterTombstoneMerge
-} from "./chunk-BAPZCPYU.js";
+} from "./chunk-4LEGTOSR.js";
 import {
   refreshSubscriptionQuotas
 } from "./chunk-YGILMZ7N.js";
 import {
   ANSI_ESCAPE_REGEX,
   COLLAPSED_PASTE_PLACEHOLDER_RE,
+  OWNER_OAUTH_UNAVAILABLE_HINT,
   THEME_PALETTES,
   TUI_TREE_MARKER,
   allocateCollapsedPaste,
@@ -60,6 +71,8 @@ import {
   getActiveThemeMode,
   getActiveThemeName,
   isBalanceExhaustedError,
+  isInvalidGrantError,
+  isOwnerOAuthUnavailableError,
   isRunResultStalledOrTruncated,
   padOrTruncateToWidth,
   platformCreditsFromUsage,
@@ -102,18 +115,18 @@ import {
   wrapTextToLines,
   wrapTranscriptLine,
   wrapTranscriptLineWithLayout
-} from "./chunk-5ZBZHVMF.js";
+} from "./chunk-CAB2CZ5H.js";
 import "./chunk-6QDYSCPW.js";
-import "./chunk-NUAQ3QHF.js";
+import "./chunk-FPCPCTSA.js";
 import "./chunk-Y5GCAMGP.js";
 import {
   getReadableCliDb
-} from "./chunk-7DQSP7JU.js";
+} from "./chunk-J5JTMQIA.js";
 import {
   deleteDbRecord,
   queryUserRecords,
   readDbRecord
-} from "./chunk-2PW2KOII.js";
+} from "./chunk-XDMGY5IU.js";
 import {
   RUN_WAKE_CHANNEL_ENV,
   clearCliLocalRuntimePreparedAgentCache,
@@ -123,24 +136,30 @@ import {
   formatApprovalRemaining,
   readTimestamp,
   registerHostApprovalRenderer
-} from "./chunk-3UCYYSKN.js";
-import "./chunk-LTI5T3A6.js";
+} from "./chunk-35DNCETZ.js";
+import {
+  anthropicGrantRemainingMs,
+  resolveServerSyncConfig,
+  runAntigravityOAuthLogin,
+  runOpenAiCodexBrowserPkce,
+  runOpenAiCodexDeviceCode
+} from "./chunk-SN5XE6GQ.js";
 import "./chunk-VP3BINY7.js";
-import "./chunk-W45PCJHS.js";
-import "./chunk-LKZPX6YH.js";
-import "./chunk-U7HTU2S7.js";
-import "./chunk-WOAZVUSN.js";
+import "./chunk-R56VAYY4.js";
+import "./chunk-7AUQ3WCW.js";
 import {
   NOLO_DEFAULT_AGENT_KEY,
   resolveCliAgentKeyInput
 } from "./chunk-NBTY7YJF.js";
+import "./chunk-LKZPX6YH.js";
+import "./chunk-WOAZVUSN.js";
 import "./chunk-VIWDGTDA.js";
 import "./chunk-HGDKT2D6.js";
 import "./chunk-F7CI2ZC5.js";
 import {
   defaultOpenBrowser,
   saveTokenLogin
-} from "./chunk-UGCQKKXW.js";
+} from "./chunk-XE4Q46FF.js";
 import "./chunk-TY3TIUJK.js";
 import "./chunk-S73EPYNC.js";
 import "./chunk-RQ22OZD7.js";
@@ -157,20 +176,20 @@ import "./chunk-NEZGPBL7.js";
 import "./chunk-JEXVIMYZ.js";
 import {
   prepareTools
-} from "./chunk-LDPZBAQK.js";
+} from "./chunk-YY37MQSS.js";
 import "./chunk-HS7MLR74.js";
-import "./chunk-K7ZZPUNO.js";
+import "./chunk-WWSPE2GG.js";
 import "./chunk-KFHREHUQ.js";
-import "./chunk-L5FZUSB6.js";
+import "./chunk-AD26C3WW.js";
 import "./chunk-OXME3PEE.js";
 import "./chunk-KSTEXKL6.js";
 import "./chunk-Z3MQYKRN.js";
-import "./chunk-QSAUX2Q2.js";
+import "./chunk-YCEA47VH.js";
 import "./chunk-NF64D32W.js";
 import "./chunk-3L2WKC3W.js";
 import "./chunk-I5PBXF7O.js";
 import "./chunk-VF4K2QE6.js";
-import "./chunk-IAYMBPDZ.js";
+import "./chunk-QOI7USOV.js";
 import "./chunk-MYOH447Z.js";
 import "./chunk-RXUKDHS5.js";
 import "./chunk-WYKMOZTW.js";
@@ -178,17 +197,17 @@ import "./chunk-AGIM7IMJ.js";
 import "./chunk-A2ZMIRLN.js";
 import "./chunk-VIDPVFP3.js";
 import "./chunk-63W5N6P3.js";
-import "./chunk-LKV5K7PW.js";
-import "./chunk-SEOM7GLZ.js";
+import "./chunk-MKK2YY5Q.js";
+import "./chunk-COWSUNBH.js";
 import "./chunk-5XBUWM6I.js";
 import {
   estimateMessagesTokens,
   historyTokensBeforeLatestAssistant
-} from "./chunk-ZCKXJTCW.js";
+} from "./chunk-CGQSAFXP.js";
 import "./chunk-TZXPT53C.js";
 import "./chunk-LEC5ALIN.js";
 import "./chunk-523DITKR.js";
-import "./chunk-Y3ASVJWL.js";
+import "./chunk-64D757HH.js";
 import "./chunk-BYXBJQAS.js";
 import "./chunk-QYPE3TS3.js";
 import "./chunk-T3U2KQF4.js";
@@ -200,11 +219,11 @@ import "./chunk-ZRAU6T47.js";
 import "./chunk-4LCOCOR5.js";
 import "./chunk-OWYYDMGJ.js";
 import "./chunk-YDH3FDFQ.js";
-import "./chunk-LEJSZV6V.js";
-import "./chunk-AWVFQMOV.js";
+import "./chunk-P2ZLUIW2.js";
+import "./chunk-ZYKJBRZ3.js";
 import "./chunk-5ZMIIR23.js";
 import "./chunk-CVMMWN6P.js";
-import "./chunk-P64WRQYV.js";
+import "./chunk-AZMYUSVF.js";
 import "./chunk-GLKOYSRU.js";
 import "./chunk-GL7W7TTR.js";
 import "./chunk-HWZT5DKX.js";
@@ -242,23 +261,24 @@ import {
   buildLocalWorkspaceOpenAiTools,
   buildLocalWorkspaceToolset,
   readCommandActionGatePayload
-} from "./chunk-ZRDUMMDG.js";
+} from "./chunk-UTBQCL6N.js";
 import "./chunk-ZNFJWEN4.js";
-import "./chunk-JASKVAYJ.js";
-import "./chunk-7NMNKOW5.js";
+import "./chunk-3QKILTO3.js";
+import "./chunk-3IBHFELR.js";
 import "./chunk-HNUWUO75.js";
 import "./chunk-CHOZJMJS.js";
 import "./chunk-PWTNI4N7.js";
 import "./chunk-Y63ZSOR6.js";
-import "./chunk-MNWKNN6V.js";
+import "./chunk-SZ4ADZFT.js";
 import "./chunk-2WZXXAQD.js";
-import "./chunk-JBWLZ3CB.js";
+import "./chunk-DA7CTWT4.js";
 import "./chunk-4KB6WQUL.js";
 import "./chunk-56GBUMO5.js";
 import {
   CREDENTIAL_HYGIENE_RULE,
   DELETE_SAFETY_RED_LINE,
   DISPATCH_BACKEND_POLICY,
+  DISPATCH_CANDIDATE_POLICY,
   PARALLEL_DISPATCH_DEFAULT_RULE,
   PLATFORM_RISK_CONTROL_RULE,
   buildConsultationModeBlock,
@@ -266,15 +286,16 @@ import {
   buildRuntimeGuidanceBlocks,
   resolveResponseGuidelines,
   resolveToolGuidedSections
-} from "./chunk-6AMR3AE6.js";
+} from "./chunk-UZT65S6D.js";
 import "./chunk-CVCRAO6Q.js";
 import "./chunk-E2BESSAW.js";
-import "./chunk-2Q3LOAFE.js";
+import "./chunk-6HVBI6TI.js";
 import {
+  formatQuotaSummary,
   isQuotaExhaustedError
-} from "./chunk-7LJEJV4F.js";
+} from "./chunk-GMEAELJ6.js";
 import "./chunk-WJZOQR2J.js";
-import "./chunk-XNOILBHV.js";
+import "./chunk-CKOO42G5.js";
 import "./chunk-2MBTWINN.js";
 import {
   extractReferenceKeysFromMessage,
@@ -305,7 +326,10 @@ import {
   compactWhitespace
 } from "./chunk-DWLEOOGR.js";
 import "./chunk-7DPNBQSV.js";
-import "./chunk-G7Y4GXTY.js";
+import {
+  createOAuthTokenStore,
+  isTokenExpired
+} from "./chunk-G7Y4GXTY.js";
 import {
   buildMemoryOverlayLayer,
   buildMemoryUseGuidanceLayer,
@@ -330,7 +354,7 @@ import {
   extractCustomId,
   parsePublicAgentId
 } from "./chunk-M2EJHDJP.js";
-import "./chunk-YF4ZRVP3.js";
+import "./chunk-PLYWH7XM.js";
 import {
   TAIL_LINES_MAX,
   backfillRunRecordParentDialog,
@@ -338,7 +362,7 @@ import {
   isRunRecordClaimed,
   listRunRecords,
   readRunRecord
-} from "./chunk-PK5TD4ST.js";
+} from "./chunk-C2XZM3K4.js";
 import {
   clipText,
   formatDuration,
@@ -359,10 +383,10 @@ import {
 import "./chunk-6UBGXX2W.js";
 import {
   resolvePlatformAuthToken
-} from "./chunk-WPOKOKZA.js";
+} from "./chunk-PV6JJAUB.js";
 import "./chunk-YUA6OAH5.js";
 import "./chunk-SM3NSZJV.js";
-import "./chunk-5BHQICF2.js";
+import "./chunk-JRTNUU5Z.js";
 import {
   toErrorMessage
 } from "./chunk-HNMXYYJR.js";
@@ -377,7 +401,7 @@ import {
 import {
   checkForCliUpdate,
   runSelfUpdateDetailed
-} from "./chunk-EVG6HQQ7.js";
+} from "./chunk-JBOUVTZX.js";
 import {
   parseUserIdFromAuthToken,
   resolveAuthToken,
@@ -410,14 +434,14 @@ import {
   resolveDefaultSpawn,
   spawnProcess
 } from "./chunk-4O22PGNQ.js";
-import "./chunk-7T5TLIY4.js";
+import "./chunk-LKDF3ATR.js";
 import {
   dailyWelcomeTip,
   initCliLocale,
   parseCliLocale,
   setCliLocale,
   t
-} from "./chunk-PPCUXO3E.js";
+} from "./chunk-3RQVYR4B.js";
 import "./chunk-ECX3NKRD.js";
 import "./chunk-XJWWBO34.js";
 import "./chunk-I42VC5KR.js";
@@ -6435,6 +6459,7 @@ var SLASH_COMMANDS = [
   "/skill",
   "/customize",
   "/login",
+  "/auth",
   "/profile",
   "/update",
   "/version",
@@ -8138,6 +8163,7 @@ function buildCliEstimateSystemText(opts = {}) {
     CREDENTIAL_HYGIENE_RULE,
     PARALLEL_DISPATCH_DEFAULT_RULE,
     DISPATCH_BACKEND_POLICY,
+    DISPATCH_CANDIDATE_POLICY,
     PLATFORM_RISK_CONTROL_RULE,
     buildConsultationModeBlock(),
     prompt,
@@ -9241,6 +9267,13 @@ ${t("autoUsage")}` };
         action: { type: "login", args: rest }
       };
     }
+    case "/auth": {
+      return {
+        nextState: state,
+        output: "",
+        action: { type: "auth", args: rest }
+      };
+    }
     case "/profile":
       return {
         nextState: state,
@@ -13008,7 +13041,16 @@ async function runOneAgentTurn(ctx, inputMsg, imageUrls, actionGateHandler, conf
     });
     scheduleTitlePatchSync(runResult);
     if (!wasAborted && runResult.exitCode !== 0) {
-      if (isBalanceExhaustedError(runResult.localError) && runResult.dialogId) {
+      if (isOwnerOAuthUnavailableError(runResult.localError)) {
+        ctx.emitCommandOutput(OWNER_OAUTH_UNAVAILABLE_HINT);
+      } else if (isInvalidGrantError(runResult.localError)) {
+        const provider = "claude";
+        ctx.emitCommandOutput(t("auth.grantExpiredHint", provider));
+        ctx.state = {
+          ...ctx.state,
+          suggestedAuthCommand: `/auth ${provider}`
+        };
+      } else if (isBalanceExhaustedError(runResult.localError) && runResult.dialogId) {
         ctx.emitCommandOutput(t("balanceExhaustedHint"));
       } else if (isQuotaExhaustedError(runResult.localError)) {
         ctx.emitCommandOutput(t("quotaExhaustedHint"));
@@ -13333,8 +13375,8 @@ function openVisibleUrlAtScreen(history, contentWidth, scrollTop, screenRow, scr
 }
 
 // packages/cli/tui/tuiRender.ts
-function createTuiRender(host) {
-  const { output, history, selectionState } = host;
+function createTuiRender(host2) {
+  const { output, history, selectionState } = host2;
   const RENDER_THROTTLE_MS = 33;
   let renderScheduled = false;
   let renderTimer = null;
@@ -13349,15 +13391,15 @@ function createTuiRender(host) {
     paintSyncedFrame();
   };
   const paintSyncedFrame = () => {
-    if (host.fixedInput.isPaused()) {
-      host.imageRenderer?.suspend();
+    if (host2.fixedInput.isPaused()) {
+      host2.imageRenderer?.suspend();
       return;
     }
     output.write("\x1B[?2026h\x1B[?25l");
     try {
       renderHistoryToOutput();
-      if (host.fixedInput.active)
-        host.fixedInput.repaint(host.buffer, host.cursorPos);
+      if (host2.fixedInput.active)
+        host2.fixedInput.repaint(host2.buffer, host2.cursorPos);
     } finally {
       output.write("\x1B[?25h\x1B[?2026l");
     }
@@ -13375,12 +13417,12 @@ function createTuiRender(host) {
     if (syncingLayout) return;
     syncingLayout = true;
     try {
-      const reservedRows = host.getReservedRows?.() ?? 0;
-      const imageRenderer = host.imageRenderer;
+      const reservedRows = host2.getReservedRows?.() ?? 0;
+      const imageRenderer = host2.imageRenderer;
       renderHistory(
         output,
         history,
-        host.fixedInput.getInputLines(),
+        host2.fixedInput.getInputLines(),
         selectionState,
         reservedRows,
         imageRenderer && withImages ? {
@@ -13392,15 +13434,15 @@ function createTuiRender(host) {
     }
   };
   const renderHistoryToOutput = () => {
-    if (host.fixedInput.isPaused()) {
-      host.imageRenderer?.suspend();
+    if (host2.fixedInput.isPaused()) {
+      host2.imageRenderer?.suspend();
       return;
     }
-    host.imageRenderer?.resume();
+    host2.imageRenderer?.resume();
     renderHistoryCore(true);
   };
   const renderHistoryUnderDialog = () => {
-    host.imageRenderer?.suspend();
+    host2.imageRenderer?.suspend();
     renderHistoryCore(false);
   };
   return {
@@ -14369,6 +14411,346 @@ async function runTuiLogin(args, emit, deps = {}) {
   }
 }
 
+// packages/cli/tui/tuiAuth.ts
+var TUI_AUTH_PROVIDERS = [
+  "claude",
+  "chatgpt",
+  "antigravity",
+  "xai",
+  "cursor",
+  "devin"
+];
+var PROVIDER_DISPLAY_NAMES = {
+  claude: "Claude (Anthropic)",
+  chatgpt: "ChatGPT (OpenAI)",
+  antigravity: "Antigravity (Google)",
+  xai: "xAI (Grok)",
+  cursor: "Cursor",
+  devin: "Devin",
+  cloudflare: "Cloudflare"
+};
+function strWidth(str) {
+  let w = 0;
+  for (const ch of str) {
+    w += ch.charCodeAt(0) > 255 ? 2 : 1;
+  }
+  return w;
+}
+function padRight(str, width) {
+  const diff = width - strWidth(str);
+  return diff > 0 ? str + " ".repeat(diff) : str;
+}
+function formatGrantRemaining(provider, credential, now) {
+  if (provider !== "claude" || !credential) return "-";
+  const rem = anthropicGrantRemainingMs(credential, now);
+  if (rem === void 0) return "-";
+  if (rem <= 0) return t("auth.grantExpired");
+  const days = Math.floor(rem / (24 * 3600 * 1e3));
+  const hours = Math.floor(rem % (24 * 3600 * 1e3) / (3600 * 1e3));
+  if (days > 0) return `${days}d ${hours}h`;
+  const minutes = Math.floor(rem / (60 * 1e3));
+  if (minutes > 0) return `${minutes}m`;
+  return "<1m";
+}
+function formatLocalStatus(credential, now) {
+  if (!credential) return t("auth.statusUnauthenticated");
+  if (isTokenExpired(credential, 0, now)) return t("auth.statusExpired");
+  return t("auth.statusAuthenticated");
+}
+function formatServerSyncStatus(credential) {
+  if (!credential) return "-";
+  if (credential.serverManaged) {
+    return t("auth.syncStatusSynced");
+  }
+  return t("auth.syncStatusNotSynced");
+}
+function toAuthProviderPickerItems(tokenStore, now = Date.now()) {
+  return TUI_AUTH_PROVIDERS.map((provider) => {
+    const cred = tokenStore.read(provider);
+    const isAuthed = cred && !isTokenExpired(cred, 0, now);
+    const isExp = cred && isTokenExpired(cred, 0, now);
+    const statusLabel = isAuthed ? `\u2713 ${t("auth.statusAuthenticated")}` : isExp ? `\u26A0 ${t("auth.statusExpired")}` : t("auth.statusUnauthenticated");
+    const brandName = PROVIDER_DISPLAY_NAMES[provider] ?? provider;
+    const label = `${padRight(brandName, 26)} ${statusLabel}`;
+    const grantPart = formatGrantRemaining(provider, cred, now);
+    const syncPart = formatServerSyncStatus(cred);
+    const detailParts = [];
+    if (provider === "claude" && cred && grantPart !== "-") {
+      detailParts.push(`${t("auth.statusColGrantRemaining")}: ${grantPart}`);
+    }
+    if (cred && syncPart !== "-") {
+      detailParts.push(syncPart);
+    }
+    const detail = detailParts.length > 0 ? detailParts.join(" \xB7 ") : void 0;
+    return {
+      label,
+      ...detail ? { detail } : {},
+      provider
+    };
+  });
+}
+async function promptSelectProvider(deps, tokenStore, now = Date.now()) {
+  const items = toAuthProviderPickerItems(tokenStore, now);
+  if (deps.selectProvider) {
+    return deps.selectProvider(items);
+  }
+  if (deps.dialogHost) {
+    const pickResult = await deps.dialogHost.run(
+      (anchor) => runSelectDialog({
+        items,
+        initialIndex: 0,
+        titleLines: [renderDialogTitle(t("auth.pickerTitle"))],
+        input: deps.input ?? process.stdin,
+        output: deps.output ?? process.stdout,
+        ...anchor
+      })
+    );
+    if (pickResult.kind === "selected") {
+      return pickResult.item.provider;
+    }
+    return null;
+  }
+  return null;
+}
+function renderAuthStatusPanel(tokenStore, now = Date.now()) {
+  const headers = [
+    t("auth.statusColProvider"),
+    t("auth.statusColLocalStatus"),
+    t("auth.statusColGrantRemaining"),
+    t("auth.statusColServerSync")
+  ];
+  const rows = TUI_AUTH_PROVIDERS.map((provider) => {
+    const cred = tokenStore.read(provider);
+    return [
+      provider,
+      formatLocalStatus(cred, now),
+      formatGrantRemaining(provider, cred, now),
+      formatServerSyncStatus(cred)
+    ];
+  });
+  const colWidths = headers.map((header, colIndex) => {
+    let max = strWidth(header);
+    for (const row of rows) {
+      const cellWidth = strWidth(row[colIndex] ?? "");
+      if (cellWidth > max) max = cellWidth;
+    }
+    return Math.max(max, 10);
+  });
+  const formatLine = (cells) => cells.map((cell, i) => padRight(cell, colWidths[i] + 2)).join("").trimEnd();
+  const lines = [
+    t("auth.statusTitle"),
+    "",
+    formatLine(headers),
+    formatLine(colWidths.map((w) => "-".repeat(w)))
+  ];
+  for (const row of rows) {
+    lines.push(formatLine(row));
+  }
+  lines.push("");
+  lines.push(t("auth.statusBottomHint"));
+  return lines.join("\n");
+}
+function classifyAuthFlowError(err, provider) {
+  const msg = err instanceof Error ? err.message : String(err);
+  if (/state verification failed|state mismatch|invalid_state/i.test(msg)) {
+    return t("auth.errorStateMismatch", provider);
+  }
+  if (/denied|cancelled|canceled|rejected|access_denied|abort/i.test(msg)) {
+    return t("auth.errorCancelled", provider);
+  }
+  if (/invalid_grant|expired|revoked|refresh[_ ]token.*(expired|invalid)/i.test(msg)) {
+    return t("auth.errorGrantExpired", provider);
+  }
+  if (/fetch failed|econnrefused|enotfound|etimedout|timeout|network|socket|ehostunreach/i.test(
+    msg
+  )) {
+    return t("auth.errorNetwork");
+  }
+  return t("auth.commandFailed", provider, msg);
+}
+async function runTuiAuthLogout(provider, emit, deps = {}) {
+  const tokenStore = deps.tokenStore ?? createOAuthTokenStore();
+  const credential = tokenStore.read(provider);
+  if (!credential) {
+    emit(t("auth.noLocalCredential", provider));
+    return { status: "failed", reason: "no_credential" };
+  }
+  const wasServerManaged = Boolean(credential.serverManaged);
+  tokenStore.remove(provider);
+  if (wasServerManaged) {
+    emit(t("auth.logoutLocalWithServerNotice", provider));
+  } else {
+    emit(t("auth.logoutSuccess", provider));
+  }
+  return { status: "logout-success" };
+}
+async function runTuiAuth(args, emit, deps = {}) {
+  const tokenStore = deps.tokenStore ?? createOAuthTokenStore();
+  const now = deps.now?.() ?? Date.now();
+  if (args.length === 0) {
+    if (deps.selectProvider || deps.dialogHost) {
+      const selected = await promptSelectProvider(deps, tokenStore, now);
+      if (!selected) {
+        return { status: "failed", reason: "cancelled" };
+      }
+      return runTuiAuth([selected], emit, deps);
+    }
+    const panel = renderAuthStatusPanel(tokenStore, now);
+    emit(panel);
+    return { status: "status-rendered" };
+  }
+  const [subCommand, ...rest] = args;
+  if (subCommand === "logout") {
+    const target = rest[0]?.toLowerCase();
+    if (!target || !isValidProvider(target)) {
+      emit(t("auth.unknownProvider", target ?? "", TUI_AUTH_PROVIDERS.join(", ")));
+      return { status: "failed", reason: "unknown_provider" };
+    }
+    return runTuiAuthLogout(target, emit, deps);
+  }
+  const provider = subCommand.toLowerCase();
+  if (!isValidProvider(provider)) {
+    emit(t("auth.unknownProvider", provider, TUI_AUTH_PROVIDERS.join(", ")));
+    return { status: "failed", reason: "unknown_provider" };
+  }
+  const flowDeps = {
+    ...deps.fetchImpl ? { fetchImpl: deps.fetchImpl } : {},
+    ...deps.sleep ? { sleep: deps.sleep } : {},
+    ...deps.now ? { now: deps.now } : {},
+    readLine: async (rawPrompt) => {
+      const prompt = t("auth.pasteCallbackPrompt");
+      if (deps.readLine) {
+        return deps.readLine(prompt);
+      }
+      if (deps.dialogHost) {
+        return deps.dialogHost.withKeyboard(async () => {
+          const readline2 = await import("node:readline/promises");
+          const rl2 = readline2.createInterface({
+            input: deps.input ?? process.stdin,
+            output: deps.output ?? process.stdout
+          });
+          try {
+            return await rl2.question(prompt);
+          } finally {
+            rl2.close();
+          }
+        });
+      }
+      const readline = await import("node:readline/promises");
+      const rl = readline.createInterface({
+        input: deps.input ?? process.stdin,
+        output: deps.output ?? process.stdout
+      });
+      try {
+        return await rl.question(prompt);
+      } finally {
+        rl.close();
+      }
+    },
+    ...deps.manualCode || rest.includes("--manual") || rest.includes("--no-browser") ? { manualCode: true } : {},
+    openBrowser: deps.openBrowser ?? defaultOpenBrowser,
+    output: { log: (msg) => emit(redactSecrets(String(msg))) },
+    error: { error: (msg) => emit(redactSecrets(String(msg))) }
+  };
+  let credential;
+  try {
+    if (provider === "claude") {
+      credential = await runAnthropicOAuthLogin(flowDeps);
+    } else if (provider === "chatgpt") {
+      const useDeviceCode = rest.includes("--device-code");
+      credential = useDeviceCode ? await runOpenAiCodexDeviceCode(flowDeps) : await runOpenAiCodexBrowserPkce(flowDeps);
+    } else if (provider === "xai") {
+      const useDeviceCode = rest.includes("--device-code");
+      credential = useDeviceCode ? await runXaiOAuthDeviceCode(flowDeps) : await runXaiOAuthLogin(flowDeps);
+    } else if (provider === "cursor") {
+      credential = await runCursorOAuthLogin(flowDeps);
+    } else if (provider === "devin") {
+      credential = await runDevinOAuthLogin(flowDeps);
+    } else if (provider === "cloudflare") {
+      credential = await runCloudflareOAuthLogin(flowDeps);
+    } else {
+      credential = await runAntigravityOAuthLogin(flowDeps);
+    }
+  } catch (err) {
+    const errorText = classifyAuthFlowError(err, provider);
+    emit(redactSecrets(errorText));
+    return {
+      status: "failed",
+      reason: err instanceof Error ? err.message : String(err)
+    };
+  }
+  tokenStore.write(provider, credential);
+  const accountLabel = credential.metadata?.email ?? credential.accountId ?? "";
+  emit(
+    t(
+      "auth.authorizationSaved",
+      provider,
+      accountLabel ? t("auth.authorizationSavedForAccount", accountLabel) : ""
+    )
+  );
+  const hasExplicitNoSync = rest.includes("--no-sync-to-server");
+  const hasExplicitSync = rest.includes("--sync-to-server");
+  let shouldSync = false;
+  if (hasExplicitNoSync) {
+    shouldSync = false;
+  } else if (hasExplicitSync) {
+    shouldSync = true;
+  } else {
+    const syncConfig = (deps.resolveServerSyncConfig ?? resolveServerSyncConfig)();
+    if (!syncConfig) {
+      emit(t("auth.noServerConfigured", provider));
+      shouldSync = false;
+    } else {
+      const question = t(
+        "auth.syncPromptQuestion",
+        syncConfig.serverOrigin,
+        provider
+      );
+      if (deps.promptSync) {
+        shouldSync = await deps.promptSync(question);
+      } else if (deps.dialogHost) {
+        const syncResult = await deps.dialogHost.run(
+          (anchor) => runSelectDialog({
+            items: [
+              { label: t("auth.syncOptionNo"), value: false },
+              { label: t("auth.syncOptionYes"), value: true }
+            ],
+            initialIndex: 0,
+            titleLines: [renderDialogTitle(question)],
+            input: deps.input ?? process.stdin,
+            output: deps.output ?? process.stdout,
+            ...anchor
+          })
+        );
+        shouldSync = syncResult.kind === "selected" ? syncResult.item.value : false;
+      } else if (deps.readLine) {
+        const raw = await deps.readLine(question);
+        const trimmed = raw.trim().toLowerCase();
+        shouldSync = trimmed === "y" || trimmed === "yes";
+      } else {
+        shouldSync = false;
+      }
+    }
+  }
+  if (shouldSync) {
+    const syncFn = deps.syncCredentialToServer ?? syncCredentialToServer;
+    const syncResult = await syncFn(provider, credential, {
+      ...deps,
+      output: flowDeps.output,
+      error: flowDeps.error
+    });
+    if (syncResult === "mark_failed") {
+      emit(t("auth.markFailed"));
+    }
+  } else if (!hasExplicitNoSync) {
+    emit(t("auth.notSyncedToServer", provider));
+  }
+  return { status: "success", credential };
+}
+function isValidProvider(provider) {
+  return TUI_AUTH_PROVIDERS.includes(provider) || provider === "cloudflare";
+}
+
 // packages/cli/tui/dialogPicker.ts
 var DEFAULT_PICKER_LIMIT = 20;
 var PICKER_OVERSAMPLE_FACTOR = 5;
@@ -14532,7 +14914,7 @@ ${content}`);
   }
   return parts.join("\n\n");
 };
-async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestructiveAction) {
+async function runSubmittedSlashLine(line, host2, actionGateHandler, confirmDestructiveAction) {
   const {
     history,
     pasteStore,
@@ -14554,21 +14936,21 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
     selfUpdater,
     spawnRunner,
     installAltScreenRestoreHandlers: installAltScreenRestoreHandlers2
-  } = host;
-  const result = handleTuiInput2(line, host.state, collectConversationTurns(host.history));
-  const previousState = host.state;
-  const previousAgentKey = host.state.agentKey;
-  host.state = result.nextState;
-  if (previousState.permissionGrants?.remote === true && host.state.permissionGrants?.remote !== true) {
-    host.revokeRemoteShellGrants?.();
-  }
-  if (!persistPermissionGrantChanges(previousState.permissionGrants, host.state.permissionGrants)) {
+  } = host2;
+  const result = handleTuiInput2(line, host2.state, collectConversationTurns(host2.history));
+  const previousState = host2.state;
+  const previousAgentKey = host2.state.agentKey;
+  host2.state = result.nextState;
+  if (previousState.permissionGrants?.remote === true && host2.state.permissionGrants?.remote !== true) {
+    host2.revokeRemoteShellGrants?.();
+  }
+  if (!persistPermissionGrantChanges(previousState.permissionGrants, host2.state.permissionGrants)) {
     emitCommandOutput(t("autoPersistFailed"));
   }
   const command = line.trim().split(/\s+/)[0];
   if ((command === "/agent" || command === "/switch") && result.nextState !== previousState) {
     clearCliLocalRuntimePreparedAgentCache();
-    persistAgentSelection2(host.state, options.env ?? process.env);
+    persistAgentSelection2(host2.state, options.env ?? process.env);
   }
   const interactive = isInteractiveInput(input);
   const isChatAction = result.action?.type === "chat";
@@ -14578,7 +14960,7 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
       interactive && !isChatAction ? line.trim() : ""
     );
   }
-  if (host.state.agentKey !== previousAgentKey) {
+  if (host2.state.agentKey !== previousAgentKey) {
     persistExplicitAgentSwitch(previousAgentKey);
   }
   if (result.action?.type === "exit") {
@@ -14597,7 +14979,7 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
           deleteOptions: { type: "messages" },
           authToken,
           fetchImpl,
-          serverUrl: host.state.serverUrl
+          serverUrl: host2.state.serverUrl
         });
         emitCommandOutput(t("clearedDialog"));
       } catch (error) {
@@ -14608,8 +14990,8 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
     }
     clearCollapsedPasteStore(pasteStore);
     bumpDraftEpoch();
-    host.state = {
-      ...host.state,
+    host2.state = {
+      ...host2.state,
       turnTokens: void 0,
       lastAuthorityTurnCount: void 0,
       liveTurnEstimatedTokens: void 0,
@@ -14621,13 +15003,13 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
       cachedMemoryOverlay: void 0,
       // 新对话重新加载记忆
       estimatedContextTokens: estimateDefaultCliContextTokens({
-        cwd: host.state.cwd,
-        agentKey: host.state.agentKey,
-        userLanguage: host.state.userLanguage,
+        cwd: host2.state.cwd,
+        agentKey: host2.state.agentKey,
+        userLanguage: host2.state.userLanguage,
         responseViewport: TUI_RESPONSE_VIEWPORT,
         ...resolveAgentModelIdentity({
-          agentKey: host.state.agentKey,
-          agentName: host.state.agentName
+          agentKey: host2.state.agentKey,
+          agentName: host2.state.agentName
         })
       })
     };
@@ -14648,7 +15030,7 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
   if (result.action?.type === "learn-history") {
     const token = resolvePlatformAuthToken(options.env ?? {});
     try {
-      const response = await fetchImpl(new URL("/api/agent/runs/control", host.state.serverUrl), {
+      const response = await fetchImpl(new URL("/api/agent/runs/control", host2.state.serverUrl), {
         method: "POST",
         headers: { "Content-Type": "application/json", ...token ? { Authorization: `Bearer ${token}` } : {} },
         body: JSON.stringify({ action: "learn", limit: result.action.limit }),
@@ -14690,7 +15072,7 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
     const compactStart = Date.now();
     try {
       const compactResult = await runner({
-        serverUrl: host.state.serverUrl,
+        serverUrl: host2.state.serverUrl,
         authToken,
         dialogId: result.action.dialogId,
         summaryLlmCaller: options.summaryLlmCaller,
@@ -14702,12 +15084,12 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
         }
       });
       const elapsedSec = ((Date.now() - compactStart) / 1e3).toFixed(1);
-      host.state = {
-        ...host.state,
+      host2.state = {
+        ...host2.state,
         dialogId: compactResult.dialogId,
         dialogKey: compactResult.dialogKey,
         dialogLabel: compactResult.dialogId,
-        dialogTitle: host.state.dialogTitle,
+        dialogTitle: host2.state.dialogTitle,
         // Compact forks into a fresh dialog that only inherits the summary,
         // not the full message history. Drop usage-derived context so the
         // composer chip falls back to the default CLI surface estimate and
@@ -14723,17 +15105,17 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
         cachedMemoryOverlay: void 0,
         // compact 创建新 dialog，重新加载记忆
         estimatedContextTokens: estimateDefaultCliContextTokens({
-          cwd: host.state.cwd,
-          agentKey: host.state.agentKey,
-          userLanguage: host.state.userLanguage,
+          cwd: host2.state.cwd,
+          agentKey: host2.state.agentKey,
+          userLanguage: host2.state.userLanguage,
           responseViewport: TUI_RESPONSE_VIEWPORT,
           messages: [
             ...compactResult.summary ? [{ role: "system", content: compactResult.summary }] : [],
-            ...compactResult.compactedMessageCount > 0 ? host.history.turns.slice(compactResult.compactedMessageCount) : compactResult.summaryGenerated ? [] : host.history.turns
+            ...compactResult.compactedMessageCount > 0 ? host2.history.turns.slice(compactResult.compactedMessageCount) : compactResult.summaryGenerated ? [] : host2.history.turns
           ],
           ...resolveAgentModelIdentity({
-            agentKey: host.state.agentKey,
-            agentName: host.state.agentName
+            agentKey: host2.state.agentKey,
+            agentName: host2.state.agentName
           })
         })
       };
@@ -14794,8 +15176,8 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
   }
   if (result.action?.type === "cwd-refresh") {
     if ((options.env?.NOLO_CLI_GIT_STATUS ?? process.env.NOLO_CLI_GIT_STATUS) !== "0") {
-      const gitStatus = await detectGitStatusAsync(host.state.cwd);
-      host.state = { ...host.state, gitStatus };
+      const gitStatus = await detectGitStatusAsync(host2.state.cwd);
+      host2.state = { ...host2.state, gitStatus };
     }
     if (result.action.switchMessage) {
       emitCommandOutput(result.action.switchMessage);
@@ -14805,24 +15187,24 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
   if (result.action?.type === "switch-agent") {
     const query = result.action.target;
     try {
-      const entries = await (host.loadAgentCatalog ?? loadAgentCatalog)({
+      const entries = await (host2.loadAgentCatalog ?? loadAgentCatalog)({
         env: options.env ?? process.env,
-        currentKey: host.state.agentKey,
+        currentKey: host2.state.agentKey,
         fetchImpl,
-        fallbackFetchImpl: host.fallbackFetchImpl,
+        fallbackFetchImpl: host2.fallbackFetchImpl,
         fresh: true
       });
       const target = resolveAgentSwitchTarget(query, entries);
       if (!target || !entries.some((entry) => entry.key === target.key)) {
         emitCommandOutput(t("agentUnknown", query));
       } else {
-        const nextState = applyAgentSwitchState(host.state, target, host.history.turns);
-        const oldKey = host.state.agentKey;
-        host.state = nextState;
+        const nextState = applyAgentSwitchState(host2.state, target, host2.history.turns);
+        const oldKey = host2.state.agentKey;
+        host2.state = nextState;
         clearCliLocalRuntimePreparedAgentCache();
-        persistAgentSelection2(host.state, options.env ?? process.env);
-        if (host.state.agentKey !== oldKey) persistExplicitAgentSwitch(oldKey);
-        emitCommandOutput(formatAgentSwitchMessage({ name: target.name, dialogId: host.state.dialogId }));
+        persistAgentSelection2(host2.state, options.env ?? process.env);
+        if (host2.state.agentKey !== oldKey) persistExplicitAgentSwitch(oldKey);
+        emitCommandOutput(formatAgentSwitchMessage({ name: target.name, dialogId: host2.state.dialogId }));
       }
     } catch (error) {
       emitCommandOutput(`[nolo] Agent switch failed: ${toErrorMessage(error)}`);
@@ -14832,7 +15214,7 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
     try {
       const pickResult = await dialogHost.run(
         (anchor) => runAgentPicker({
-          currentKey: host.state.agentKey,
+          currentKey: host2.state.agentKey,
           env: options.env ?? process.env,
           input,
           output,
@@ -14844,8 +15226,8 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
 `);
       } else if (pickResult.kind === "selected") {
         clearCliLocalRuntimePreparedAgentCache();
-        host.state = {
-          ...host.state,
+        host2.state = {
+          ...host2.state,
           agentName: pickResult.name,
           agentKey: pickResult.key,
           contextWindow: resolveAgentContextWindow({
@@ -14854,13 +15236,13 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
             model: pickResult.model
           }),
           estimatedContextTokens: estimateDefaultCliContextTokens({
-            cwd: host.state.cwd,
+            cwd: host2.state.cwd,
             agentKey: pickResult.key,
             agentName: pickResult.name,
             model: pickResult.model,
-            userLanguage: host.state.userLanguage,
+            userLanguage: host2.state.userLanguage,
             responseViewport: TUI_RESPONSE_VIEWPORT,
-            messages: host.history.turns
+            messages: host2.history.turns
           }),
           turnTokens: void 0,
           lastAuthorityTurnCount: void 0,
@@ -14868,11 +15250,11 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
           cachedMemoryOverlay: void 0
           // 切换 agent 后重新加载记忆
         };
-        persistAgentSelection2(host.state, options.env ?? process.env);
+        persistAgentSelection2(host2.state, options.env ?? process.env);
         output.write(
           `${formatAgentSwitchMessage({
             name: pickResult.name,
-            dialogId: host.state.dialogId
+            dialogId: host2.state.dialogId
           })}
 `
         );
@@ -14894,7 +15276,7 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
     }
   }
   if (result.action?.type === "set-mouse") {
-    host.fixedInput.setMouseEnabled(result.action.enabled);
+    host2.fixedInput.setMouseEnabled(result.action.enabled);
   }
   if (result.action?.type === "set-math") {
     setMathRenderingEnabled(result.action.enabled);
@@ -14908,7 +15290,7 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
     }
     resetHistoryFrameDiffCache(output);
     renderHistoryToOutput();
-    host.fixedInput.repaint(host.buffer, host.cursorPos);
+    host2.fixedInput.repaint(host2.buffer, host2.cursorPos);
   }
   if (result.action?.type === "copy-last") {
     const text = readLatestAssistantReply(history) ?? "";
@@ -14977,8 +15359,8 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
         history.currentContent = "";
         history.scrollTop = 0;
         history.followBottom = true;
-        host.state = {
-          ...host.state,
+        host2.state = {
+          ...host2.state,
           dialogId: pickResult.dialog.id,
           dialogKey: pickResult.dialog.dbKey,
           dialogLabel: pickResult.dialog.title || pickResult.dialog.id,
@@ -14994,15 +15376,15 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
           cachedMemoryOverlay: void 0,
           // 切换对话后重新加载记忆
           estimatedContextTokens: estimateDefaultCliContextTokens({
-            cwd: host.state.cwd,
-            agentKey: host.state.agentKey,
-            agentName: host.state.agentName,
-            userLanguage: host.state.userLanguage,
+            cwd: host2.state.cwd,
+            agentKey: host2.state.agentKey,
+            agentName: host2.state.agentName,
+            userLanguage: host2.state.userLanguage,
             responseViewport: TUI_RESPONSE_VIEWPORT,
             messages: history.turns,
             ...resolveAgentModelIdentity({
-              agentKey: host.state.agentKey,
-              agentName: host.state.agentName
+              agentKey: host2.state.agentKey,
+              agentName: host2.state.agentName
             })
           })
         };
@@ -15028,7 +15410,7 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
   if (result.action?.type === "list-agents") {
     try {
       const pickResult = await runAgentPicker({
-        currentKey: host.state.agentKey,
+        currentKey: host2.state.agentKey,
         env: options.env ?? process.env,
         input,
         output,
@@ -15055,7 +15437,7 @@ async function runSubmittedSlashLine(line, host, actionGateHandler, confirmDestr
         const shellInvocation = process.platform === "win32" ? [process.env.ComSpec || "cmd.exe", "/d", "/s", "/c", shellCmd] : ["/bin/sh", "-c", shellCmd];
         const proc = spawnRunner({
           cmd: shellInvocation,
-          cwd: host.state.cwd,
+          cwd: host2.state.cwd,
           env: options.env ?? process.env,
           stdout: "pipe",
           stderr: "pipe"
@@ -15101,13 +15483,13 @@ ${stderrText.trim()}
       emitCommandOutput(t("mediaPreprocessStart", base));
       const transcript = await transcribeMediaFile({
         path: result.action.path,
-        serverUrl: host.state.serverUrl,
+        serverUrl: host2.state.serverUrl,
         authToken,
         language: result.action.lang,
         fromSec: trim.fromSec,
         toSec: trim.toSec,
         denoise: result.action.denoise,
-        dialogId: host.state.dialogId,
+        dialogId: host2.state.dialogId,
         fetchImpl,
         onProgress: (info) => {
           const label = info.message ?? info.stage ?? "";
@@ -15115,10 +15497,10 @@ ${stderrText.trim()}
         }
       });
       const block = formatTranscriptForModel(transcript, result.action.path);
-      host.state = {
-        ...host.state,
+      host2.state = {
+        ...host2.state,
         pendingTranscripts: [
-          ...host.state.pendingTranscripts ?? [],
+          ...host2.state.pendingTranscripts ?? [],
           block
         ]
       };
@@ -15137,16 +15519,28 @@ ${stderrText.trim()}
     }
   }
   if (result.action?.type === "login") {
-    const env = host.options.env ?? process.env;
+    const env = host2.options.env ?? process.env;
     const outcome = await runTuiLogin(
       result.action.args ?? [],
       (text) => emitCommandOutput(text)
     );
     if (outcome.status === "success") {
       env.AUTH_TOKEN = outcome.token;
-      host.state = { ...host.state, showAuthGuidance: false };
+      host2.state = { ...host2.state, showAuthGuidance: false };
     }
   }
+  if (result.action?.type === "auth") {
+    await runTuiAuth(
+      result.action.args ?? [],
+      (text) => emitCommandOutput(text),
+      {
+        fetchImpl: host2.fetchImpl,
+        dialogHost: host2.dialogHost,
+        input: host2.input,
+        output: host2.output
+      }
+    );
+  }
   if (result.action?.type === "chat") {
     let messageForModel = result.action.message;
     const mediaPaths = result.action.mediaPaths ?? [];
@@ -15164,9 +15558,9 @@ ${stderrText.trim()}
           emitCommandOutput(t("mediaPreprocessStart", base));
           const transcript = await transcribeMediaFile({
             path: mediaPath,
-            serverUrl: host.state.serverUrl,
+            serverUrl: host2.state.serverUrl,
             authToken,
-            dialogId: host.state.dialogId,
+            dialogId: host2.state.dialogId,
             fromSec: trim.fromSec,
             toSec: trim.toSec,
             fetchImpl,
@@ -15202,9 +15596,9 @@ ${messageForModel}` : block;
       for (const path3 of unreadable) {
         try {
           const image = await readClipboardImage({ env: options.env ?? process.env });
-          host.state = {
-            ...host.state,
-            attachedImages: mergeAttachedImages(host.state.attachedImages, [image])
+          host2.state = {
+            ...host2.state,
+            attachedImages: mergeAttachedImages(host2.state.attachedImages, [image])
           };
           emitCommandOutput(
             `[nolo] image attached from clipboard (path unreadable: ${path3})`
@@ -15223,17 +15617,17 @@ ${messageForModel}` : block;
     }
     const { imageUrls } = await resolveAttachmentImageUrls({
       actionImagePaths: result.action.imagePaths,
-      attachedImages: host.state.attachedImages,
+      attachedImages: host2.state.attachedImages,
       onFailure: (_path, err) => output.write(`[nolo] image skipped: ${err.message}
 `)
     });
     const localAttachmentPaths = [
       ...result.action.imagePaths ?? [],
-      ...host.state.attachedImages.map((img) => img.sourcePath),
+      ...host2.state.attachedImages.map((img) => img.sourcePath),
       ...result.action.mediaPaths ?? []
     ];
-    host.state = {
-      ...host.state,
+    host2.state = {
+      ...host2.state,
       attachedImages: []
     };
     history.followBottom = true;
@@ -15256,7 +15650,7 @@ ${messageForModel}` : block;
 ${err.message}` : ""}`
       );
     }
-    if (host.fixedInput.active) host.fixedInput.repaint(host.buffer, host.cursorPos);
+    if (host2.fixedInput.active) host2.fixedInput.repaint(host2.buffer, host2.cursorPos);
   }
   return false;
 }
@@ -16615,6 +17009,19 @@ ${err.message}` : ""}`
             env.AUTH_TOKEN = outcome.token;
             state = { ...state, showAuthGuidance: false };
           }
+        } else if (res.action?.type === "auth") {
+          state = res.nextState;
+          await runTuiAuth(res.action.args ?? [], (text) => {
+            output.write(`${text}
+`);
+          }, {
+            fetchImpl: options.fetchImpl ?? fetch,
+            // 与空闲路径一致：选择器/粘贴码交互要接同一套弹窗宿主与输入输出，
+            // 否则 busy 期间 /auth 会拿不到键盘输入，表现为"卡住没反应"。
+            dialogHost,
+            input,
+            output
+          });
         } else if (res.action?.type === "transcribe") {
           output.write(
             `[nolo] ${t("transcribeBusyHint")}
@@ -16896,7 +17303,7 @@ ${merged}` : merged;
           if (busyLock) {
             const trimmedText = submittedText.trim();
             const busySlashCommand = trimmedText.split(/\s+/)[0]?.toLowerCase();
-            const isBusyLocalSlash = busySlashCommand === "/context" || busySlashCommand === "/ctx" || busySlashCommand === "/cd" || busySlashCommand === "/switch" || busySlashCommand === "/theme" || busySlashCommand === "/runtime" || busySlashCommand === "/logs" || busySlashCommand === "/auto" || busySlashCommand === "/tasks" || busySlashCommand === "/jobs" || busySlashCommand === "/procs" || busySlashCommand === "/agents" || busySlashCommand === "/doc" || busySlashCommand === "/skill" || busySlashCommand === "/customize" || busySlashCommand === "/login" || busySlashCommand === "/profile" || busySlashCommand === "/paste" || busySlashCommand === "/version" || busySlashCommand === "/links" || busySlashCommand === "/transcribe" || busySlashCommand === "/shell-revoke";
+            const isBusyLocalSlash = busySlashCommand === "/context" || busySlashCommand === "/ctx" || busySlashCommand === "/cd" || busySlashCommand === "/switch" || busySlashCommand === "/theme" || busySlashCommand === "/runtime" || busySlashCommand === "/logs" || busySlashCommand === "/auto" || busySlashCommand === "/tasks" || busySlashCommand === "/jobs" || busySlashCommand === "/procs" || busySlashCommand === "/agents" || busySlashCommand === "/doc" || busySlashCommand === "/skill" || busySlashCommand === "/customize" || busySlashCommand === "/login" || busySlashCommand === "/auth" || busySlashCommand === "/profile" || busySlashCommand === "/paste" || busySlashCommand === "/version" || busySlashCommand === "/links" || busySlashCommand === "/transcribe" || busySlashCommand === "/shell-revoke";
             if (isBusyLocalSlash) {
               await handleBusyLocalSlash(submittedText, busySlashCommand);
               return;
@@ -16937,6 +17344,18 @@ ${merged}` : merged;
             }
             return;
           }
+          if (!submittedText.trim() && state.suggestedAuthCommand) {
+            const authCmd = state.suggestedAuthCommand;
+            state = { ...state, suggestedAuthCommand: void 0 };
+            buffer = "";
+            cursorPos = 0;
+            bumpDraftEpoch();
+            await runSubmittedLine(authCmd, host, runOneAgentTurn);
+            return;
+          }
+          if (state.suggestedAuthCommand) {
+            state = { ...state, suggestedAuthCommand: void 0 };
+          }
           if (!submittedText.trim() && chatQueueBinding && chatQueueBinding.queueLength() > 0) {
             const { actionGateHandler, confirmDestructiveAction } = buildInteractiveTurnHandlers();
             const manualBinding = ensureChatQueueBinding(turnCtx, actionGateHandler, confirmDestructiveAction);