新增: 信任所有目录扩展至敏感目录放行

开关语义升级为完全放行,含 .ssh/.aws 等黑名单目录(产品拍板体验优先,用户知情选择)
validate_path 与 is_authorized 双拦截点经进程级标志同源放行,audit 层每轮工具执行前刷新
设置页开启时二次确认,正文明示敏感凭据可进对话上下文风险自担;对话区常驻放行横幅既有
测试以串行闸防并行互踩进程级标志

src/i18n/en/settings.ts

@@ -199,7 +199,9 @@ export default {
     allowedDirsRemoveFail: 'Failed to remove authorized directory',
     // "Trust all directories" master switch (Settings - Security - AI Tool Allowed Dirs panel)
     labelPathAuthBypass: 'Trust all directories',
-    descPathAuthBypass: 'When enabled, AI can directly access any unprotected directory without per-access prompts; protected (blacklisted) directories such as credential folders are still denied.',
+    descPathAuthBypass: 'When enabled, AI can directly access any directory, including sensitive system and credential folders, without per-access prompts. Only enable in trusted environments; exposing sensitive directories risks credential leakage.',
+    pathAuthBypassConfirmTitle: 'Enable "Trust all directories"?',
+    pathAuthBypassConfirmBody: 'Once enabled, AI tools will no longer ask for per-access authorization and can directly reach any path, including sensitive directories such as .ssh and .aws. Sensitive credentials may end up in the conversation context; proceed at your own risk. Are you sure you want to enable it?',
 
     // ===== ScriptNode command execution safety =====
     panelScriptSafety: '🛡️ Command Execution Safety',