Local folder access

The web app can’t see your computer. The CLI bridges one chat session to one local folder; each terminal window can bridge a different folder to a different session.

From the terminal chat
Headless

Start Nisa in the folder

cd ~/papers/my-project
nisa

Local access must be on (/permissions on if you turned it off).

Get a token from the web session

In the web chat type /connect. Copy the brg_… token — one-shot, valid five minutes.

Paste it

/connect <token>
/connect <token> --allow-writes --workspace ~/project      # with options
/connect <token> --allow-exec
/connect <token> --no-terminal

/status shows the bridge. /disconnect ends it.

nisa bridge --claim <token> --workspace ~/papers/my-project [--allow-writes] [--allow-exec] [--idle-timeout 600]

Or attach to a known session with --session-id <id> instead of --claim. Approvals are auto or deny — there’s no prompt without a TTY.

Permissions

The CLI decides; the web app can only ask. Defaults: read the folder, no writes, no agent shell commands; your own !cmd is on. Settings apply to one connected session at a time.

Goal	Command
Show current settings	`/permissions` (alias `/approvals`) · `/status`
Turn local access off / on	`/permissions off` · `/permissions on`
Read files only (default)	`/permissions read-only`
Let the agent create or edit files	`/permissions workspace-write` (or `allow-writes`; revoke with `deny-writes`)
Let the agent run commands	`/permissions shell-exec` (or `allow-exec`; revoke with `deny-exec`)
Your own `!cmd` on (default) / off	`/permissions terminal on` · `/permissions terminal off`
Change the folder	`/permissions workspace <dir>`

The agent’s tools over the bridge: fs.read_file, fs.list_dir, fs.glob, fs.grep; with writes, fs.write_file, fs.edit_file (an edit needs a prior read of the file, or an expected_hash; concurrent writes to one path are refused); with exec, shell.exec (credential-shaped env vars scrubbed, cwd clamped — not a sandbox). Your own !cmd runs locally and is never an agent tool.

Start

Guides

Reference

Permissions

​Permissions

Permissions