@azure-id/orc 0.55.0

package/bin/webui/fixtures/settings.js

@@ -0,0 +1,78 @@
+"use strict";
+/* fixtures/settings.js — canned data for `orc ui --fixtures`.
+   The full config list, including a SHADOWED key: you cannot design the lock
+   and its explanation against a config where nothing is shadowed.
+
+   THE RULE FOR EVERY FILE IN HERE: carry ONE OF EVERY STATE, including the
+   ugly ones. You cannot DESIGN a STALE chip on a fresh wiki, and a state
+   with no fixture is a state nobody has ever looked at. A per-state count
+   test asserts this, so a new state cannot ship without one.
+
+   Shapes MUST match what `bin/cli.js --json` really emits — a drifted
+   fixture is worse than no fixture. */
+
+const { PROJECT } = require("./shell.js");
+
+const config = {
+  config_path: PROJECT + "/.claude/orc.config.yaml",
+  exists: true,
+  keys: [
+    { key: "max_wave_tasks", tier: "common", value: 4, default: 3, is_overridden: true, is_shadowed: false, shadow_reason: null, desc: "Max parallel tasks per execution wave (higher = more parallelism, more collision risk).", options: [2, 3, 4, 5], control: { kind: "int", choices: null, min: 1, max: null } },
+    { key: "batch_pause_every", tier: "common", value: 2, default: 2, is_overridden: false, is_shadowed: false, shadow_reason: null, desc: "Waves between stop-and-continue pauses (1 = pause every wave).", options: [1, 2, 3, 4, 5], control: { kind: "int", choices: null, min: 1, max: null } },
+    { key: "rubric_bands", tier: "common", value: 5, default: 5, is_overridden: false, is_shadowed: false, shadow_reason: null, desc: "Scoring granularity (2-5 narrow preset, 6-8 wide preset).", options: [2, 3, 4, 5, 6, 7, 8], control: { kind: "range", choices: null, min: 2, max: 8 } },
+    { key: "pattern_findings", tier: "common", value: "on", default: "ask", is_overridden: true, is_shadowed: false, shadow_reason: null, desc: "Code-pattern gate on an FE/BE cache miss.", options: ["ask", "on", "off"], control: { kind: "enum", choices: ["ask", "on", "off"], min: null, max: null } },
+    { key: "generate_tests", tier: "common", value: false, default: false, is_overridden: false, is_shadowed: false, shadow_reason: null, desc: "Opt-in Phase 6.5: author test cases before ship.", options: ["true", "false"], control: { kind: "enum", choices: ["true", "false"], min: null, max: null } },
+    // ON, so the whole fable5_* block below renders shadowed — the animation
+    // §6.2 calls the single best argument for the project.
+    { key: "opus5_only", tier: "common", value: "true", default: false, is_overridden: true, is_shadowed: false, shadow_reason: null, desc: "EVERY dispatched role uses ONE model — Opus 5 — with EFFORT as the cost dial.", options: ["true", "false"], control: { kind: "enum", choices: ["true", "false"], min: null, max: null } },
+    { key: "fable5_enabled", tier: "fable5", value: "true", default: false, is_overridden: true, is_shadowed: true, shadow_reason: "shadowed by opus5_only — every role dispatches its Opus 5 agent, so the Fable 5 override is inert", desc: "Master gate — route selected roles to Fable 5 agents.", options: ["true", "false"], control: { kind: "enum", choices: ["true", "false"], min: null, max: null } },
+    { key: "fable5_effort", tier: "fable5", value: "medium", default: "medium", is_overridden: false, is_shadowed: true, shadow_reason: "shadowed by opus5_only — every role dispatches its Opus 5 agent, so the Fable 5 override is inert", desc: "Effort for the Fable 5 role agents.", options: ["medium", "high", "xhigh", "max"], control: { kind: "enum", choices: ["medium", "high", "xhigh", "max"], min: null, max: null } },
+    { key: "fable5_roles", tier: "fable5", value: "[analyze, plan]", default: "[]", is_overridden: true, is_shadowed: true, shadow_reason: "shadowed by opus5_only — every role dispatches its Opus 5 agent, so the Fable 5 override is inert", desc: "Which roles use Fable 5 (CSV).", options: ["analyze", "plan", "advisor", "judge", "review"], control: { kind: "subset", choices: ["analyze", "plan", "advisor", "judge", "review"], min: null, max: null } },
+    { key: "wiki_fresh_max", tier: "advanced", value: 10, default: 10, is_overridden: false, is_shadowed: false, shadow_reason: null, desc: "Wiki freshness: commit distance < this → FRESH.", options: null, control: { kind: "int", choices: null, min: 1, max: null } },
+    { key: "wiki_aging_max", tier: "advanced", value: 30, default: 30, is_overridden: false, is_shadowed: false, shadow_reason: null, desc: "Wiki freshness: commit distance <= this → AGING; beyond → STALE.", options: null, control: { kind: "int", choices: null, min: 1, max: null } },
+    { key: "log_dir", tier: "advanced", value: ".claude/orc/logs", default: ".claude/orc/logs", is_overridden: false, is_shadowed: false, shadow_reason: null, desc: "Persistent trace folder (never auto-deleted).", options: null, control: { kind: "path", choices: null, min: null, max: null } },
+    { key: "retro_repo", tier: "advanced", value: "azure-id/orc", default: "azure-id/orc", is_overridden: false, is_shadowed: false, shadow_reason: null, desc: "GitHub owner/repo that receives /orc-retro reports.", options: null, control: { kind: "repo", choices: null, min: null, max: null } },
+    // v0.50.0 — the nine `orc extra` keys, copied from the live registry so the
+    // shapes cannot drift. `extra_enabled` is TRUE here on purpose: an ARMED
+    // subsystem is the state that needs designing.
+    {"key": "extra_enabled", "tier": "common", "value": true, "default": false, "is_overridden": true, "is_shadowed": false, "shadow_reason": null, "desc": "Master gate for `orc extra` — dispatching a scored task to a non-Claude worker (DeepSeek, GLM, Kimi, a local Ollama, any OpenAI-/Anthropic-compatible endpoint you can name). NOTHING changes unless true, the fable5_enabled precedent. The orchestrator always stays Claude; what moves is who executes a slice. Every run that will cross the boundary PRINTS it at Phase 1 — routing work off Claude silently is the failure mode this whole subsystem is shaped around.", "options": ["true", "false"], "control": {"kind": "enum", "choices": ["true", "false"], "min": null, "max": null}},
+    {"key": "extra_roles", "tier": "common", "value": "[executor]", "default": "[executor]", "is_overridden": false, "is_shadowed": false, "shadow_reason": null, "desc": "Which dispatched roles may go foreign (CSV). Executor only by default, deliberately: an executor's output is checked by the smoke gate, the TDD gate, the reviewer and the worktree-delta check, all of which are engine-blind — while a REVIEWER you cannot trust is worse than no reviewer at all, because it launders a finding nobody made.", "options": ["executor", "reviewer", "verifier", "analyst", "planner", "scout", "test-author", "doc-writer", "doc-checker"], "control": {"kind": "subset", "choices": ["executor", "reviewer", "verifier", "analyst", "planner", "scout", "test-author", "doc-writer", "doc-checker"], "min": null, "max": null}},
+    {"key": "extra_risk_tasks", "tier": "common", "value": "off", "default": "off", "is_overridden": false, "is_shadowed": false, "shadow_reason": null, "desc": "Whether a task with a non-empty cited `risk[]` (auth, money, migration, security, concurrency, data-integrity) may leave Claude. OFF holds it on the Claude ladder whatever the route table says, and the preflight NAMES it as held back. ORC already refuses to send a refund-endpoint change to a cheap model; this keeps Extra from becoming the hole in that rule.", "options": ["off", "on"], "control": {"kind": "enum", "choices": ["off", "on"], "min": null, "max": null}},
+    {"key": "extra_on_failure", "tier": "common", "value": "fallback", "default": "fallback", "is_overridden": false, "is_shadowed": false, "shadow_reason": null, "desc": "What an unreachable endpoint, a 401, a 429 past backoff, a timeout or a malformed return does. `fallback` re-dispatches the task to the Claude band it would have had, ANNOUNCED, and the run continues. `stop` is for people who would rather stop than silently start paying Anthropic rates. A failed foreign dispatch is never a dead run either way.", "options": ["fallback", "stop"], "control": {"kind": "enum", "choices": ["fallback", "stop"], "min": null, "max": null}},
+    {"key": "extra_max_concurrent", "tier": "common", "value": 1, "default": 1, "is_overridden": false, "is_shadowed": false, "shadow_reason": null, "desc": "Foreign dispatches in flight at once. Per-provider rate limits are undocumented in aggregate, so 1 is the honest default — a wave of 3 that 429s costs more in repairs than the parallelism saved.", "options": [1, 2, 3], "control": {"kind": "int", "choices": null, "min": 1, "max": null}},
+    {"key": "extra_unlock", "tier": "common", "value": "per-run", "default": "per-run", "is_overridden": false, "is_shadowed": false, "shadow_reason": null, "desc": "When a vault-stored key asks for its passphrase. `per-run` asks ONCE at the Phase-1 stop the lane already has, so an unattended wave can actually run. `per-dispatch` prompts every time and REFUSES to start an unattended wave, naming why — it is interactive-only by design. Irrelevant when the credential source is an environment variable, which is the recommended one.", "options": ["per-run", "per-dispatch"], "control": {"kind": "enum", "choices": ["per-run", "per-dispatch"], "min": null, "max": null}},
+    {"key": "extra_vault_max_attempts", "tier": "advanced", "value": 10, "default": 10, "is_overridden": false, "is_shadowed": false, "shadow_reason": null, "desc": "Wrong passphrases before the encrypted key DELETES ITSELF. It is a key rather than a magic number so the count is inspectable and testable — NOT so it can be switched off; below 3 is refused. The counter stops someone at your keyboard; it does not stop someone who copies the vault file and tries offline, and scrypt's cost is the only defence there.", "options": null, "control": {"kind": "int", "choices": null, "min": 3, "max": null}},
+    {"key": "extra_timeout_s", "tier": "advanced", "value": 900, "default": 900, "is_overridden": false, "is_shadowed": false, "shadow_reason": null, "desc": "Per-dispatch wall clock for a foreign worker. The child's own timeouts are DERIVED from this rather than set independently, so three timeouts cannot disagree about which one fires first.", "options": null, "control": {"kind": "int", "choices": null, "min": 30, "max": null}},
+    {"key": "extra_verify_max_days", "tier": "advanced", "value": 7, "default": 7, "is_overridden": false, "is_shadowed": false, "shadow_reason": null, "desc": "Past this a profile's verification reads STALE and is re-pinged before wave 1. A STALE profile STILL ROUTES — a stale check is not a failed one (the /orc-pact UNCHECKABLE rule) — and freshness is computed on read, never stored.", "options": null, "control": {"kind": "int", "choices": null, "min": 1, "max": null}},
+    { key: "orchestrator_model", tier: "advanced", value: "claude-opus-4-8", tierNote: null, default: "claude-opus-4-8", is_overridden: false, is_shadowed: false, shadow_reason: null, desc: "Main-session model (below Opus breaks the tier ladder).", options: null, control: { kind: "enum", choices: ["claude-opus-5", "claude-opus-4-8", "claude-sonnet-5"], min: null, max: null } },
+  ],
+  // The registry-less, hand-written key — read-only everywhere, and shadowed here.
+  hand_edited: [
+    { key: "rubric_bands_override", value: "[[0,50,'orc-executor-sonnet-5-high'],[50,100,'orc-executor-opus-5-high']]", is_shadowed: true, shadow_reason: "shadowed by opus5_only — executors use the fixed 3-band Opus 5 ladder", editable: false },
+  ],
+  legacy_keys: [{ key: "opus5_executor_only", renamed_to: "opus5_only" }],
+  score_table: {
+    active: "opus5_only",
+    default: [
+      { from: 0, to: 30, inclusive_to: false, agent: "orc-executor-haiku-4-5" },
+      { from: 30, to: 40, inclusive_to: false, agent: "orc-executor-sonnet-4-6-med" },
+      { from: 40, to: 55, inclusive_to: false, agent: "orc-executor-sonnet-4-6-high" },
+      { from: 55, to: 65, inclusive_to: false, agent: "orc-executor-sonnet-5-high" },
+      { from: 65, to: 70, inclusive_to: false, agent: "orc-executor-opus-4-7-med" },
+      { from: 70, to: 80, inclusive_to: false, agent: "orc-executor-opus-4-7-high" },
+      { from: 80, to: 90, inclusive_to: false, agent: "orc-executor-opus-4-8-high" },
+      { from: 90, to: 100, inclusive_to: true, agent: "orc-executor-opus-5-high" },
+    ],
+    opus5_only: [
+      { from: 0, to: 40, inclusive_to: false, agent: "orc-executor-opus-5-low" },
+      { from: 40, to: 80, inclusive_to: false, agent: "orc-executor-opus-5-med" },
+      { from: 80, to: 100, inclusive_to: true, agent: "orc-executor-opus-5-high" },
+    ],
+  },
+  behavior_trace: { always_on: true, configurable_key: "log_dir" },
+};
+
+// Deliberately UNHEALTHY, and with the global-install finding present — the
+// banner §1 requires can only be designed against a doctor that reports it.
+
+module.exports = { config };

package/bin/webui/fixtures/shell.js

@@ -0,0 +1,48 @@
+"use strict";
+/* fixtures/shell.js — canned data for `orc ui --fixtures`.
+   The project root, `orc where` and `orc doctor` — the three every panel reads.
+
+   THE RULE FOR EVERY FILE IN HERE: carry ONE OF EVERY STATE, including the
+   ugly ones. You cannot DESIGN a STALE chip on a fresh wiki, and a state
+   with no fixture is a state nobody has ever looked at. A per-state count
+   test asserts this, so a new state cannot ship without one.
+
+   Shapes MUST match what `bin/cli.js --json` really emits — a drifted
+   fixture is worse than no fixture. */
+
+const PROJECT = "/example/project";
+
+const doctor = {
+  ok: false,
+  claude_dir: PROJECT + "/.claude",
+  installed_version: "0.41.0",
+  package_version: "0.43.0",
+  global_install: { present: true, version: "0.39.0", shadows: true },
+  findings: [
+    { id: "version-skew", severity: "warn", message: "payload version 0.41.0 != CLI 0.43.0 — run `orc update`", fixable: true, installed_version: "0.41.0", package_version: "0.43.0" },
+    { id: "global-skew", severity: "warn", message: "GLOBAL install ~/.claude is 0.39.0 but this project is 0.41.0 — the global copy can win skill resolution; run `orc update --global`", fixable: false, global_version: "0.39.0", local_version: "0.41.0" },
+    { id: "orphan", severity: "warn", message: "2 orphan(s) from a prior payload: agents/orc-executor-opus-4-8-med.md, skills/orc-old/SKILL.md — `orc update`", fixable: true, paths: ["agents/orc-executor-opus-4-8-med.md", "skills/orc-old/SKILL.md"] },
+    { id: "statusline-missing", severity: "warn", message: "no statusLine — the non-Opus/high model warning won't show; run `orc update`", fixable: true },
+  ],
+  fixable: true,
+};
+
+const where = {
+  claude_dir: PROJECT + "/.claude",
+  project_root: PROJECT,
+  package_root: "/usr/lib/node_modules/orc",
+  package_version: "0.43.0",
+  installed_version: "0.41.0",
+  skills: PROJECT + "/.claude/skills",
+  commands: PROJECT + "/.claude/commands",
+  agents: PROJECT + "/.claude/agents",
+  hooks: PROJECT + "/.claude/hooks",
+  settings: PROJECT + "/.claude/settings.json",
+  config: PROJECT + "/.claude/orc.config.yaml",
+  run_dir: PROJECT + "/.claude/orc/run",
+  log_dir: PROJECT + "/.claude/orc/logs",
+};
+
+// STALE on purpose (§9: you cannot design the STALE chip while your wiki is fresh).
+
+module.exports = { PROJECT, doctor, where };

package/bin/webui/fixtures/stats.js

@@ -0,0 +1,104 @@
+"use strict";
+/* fixtures/stats.js — canned data for `orc ui --fixtures`.
+   Usage, the cost forecast and the dated rate table. The forecast is a RANGE
+   with a sample count, and cache-read is its own segment.
+
+   THE RULE FOR EVERY FILE IN HERE: carry ONE OF EVERY STATE, including the
+   ugly ones. You cannot DESIGN a STALE chip on a fresh wiki, and a state
+   with no fixture is a state nobody has ever looked at. A per-state count
+   test asserts this, so a new state cannot ship without one.
+
+   Shapes MUST match what `bin/cli.js --json` really emits — a drifted
+   fixture is worse than no fixture. */
+
+const { PROJECT } = require("./shell.js");
+
+const stats = {
+  log_dir: PROJECT + "/.claude/orc/logs",
+  runs: 61,
+  from: "2026-04-11",
+  to: "2026-08-08",
+  lanes: { orc: 22, quick: 17, mini: 9, wiki: 6, fast: 4, ultra: 2, grill: 1 },
+  agents: { "orc-executor": 88, "orc-system-analyst": 21, "orc-planner": 21, "orc-reviewer": 18, "orc-verifier": 18, "orc-scout": 12, "orc-wiki-scanner": 9, "orc-trace-writer": 61 },
+  dispatches: 248,
+  downgrades: 3,
+  unfinished: 2,
+  unknown_lane: 1,
+};
+
+/* ============================================================ v0.46.0 ====== */
+/* Same rule as everything above: ONE OF EVERY STATE, including the ugly ones.
+   You cannot design a BROKEN promise card on a ledger where everything holds,
+   a REFUSE checklist on a repo with no refusals, or an empty-debt Knowledge
+   panel on a wiki that owes four docs. test/webui.test.js asserts the count per
+   state, so a new state cannot ship without a fixture. */
+
+const budgetForecast = {
+  ok: true,
+  plan: PROJECT + "/.claude/orc/run/store-credit/plan.md",
+  tasks: 14,
+  waves: 5,
+  tokens: {
+    p50: { input: 53400, cache_write: 362800, cache_read: 733800, output: 75100 },
+    p90: { input: 81000, cache_write: 548000, cache_read: 1140000, output: 118000 },
+  },
+  raw: { p50: 1225100, p90: 1887000 },
+  weighted: { p50: 564680, p90: 861000 },
+  usd: { p50: 6.76, p90: 10.5 },
+  price_table: { as_of: "2026-08-01", age_days: 9, stale: false, path: "bin/pricing.json" },
+  quota: { available: true, plan: "max20", label: "Max 20x", window_pct: 18.2, weekly_pct: 4.1 },
+  // A task at CONTEXT RISK — the state that cannot be designed on a small plan.
+  context_risk: [{ task: "T12", agent: "orc-executor-opus-5-high", peak: 189000, window: 200000, pct: 95 }],
+  bands: [
+    { band: "[0,30)", agent: "orc-executor-haiku-4-5", count: 2, tasks: ["T01", "T02"], samples: 9, p50: { input: 1200, cache_write: 6400, cache_read: 11800, output: 900 }, p90: { input: 1800, cache_write: 9200, cache_read: 17000, output: 1400 } },
+    { band: "[40,55)", agent: "orc-executor-sonnet-4-6-high", count: 3, tasks: ["T03", "T05", "T07"], samples: 12, p50: { input: 7800, cache_write: 52100, cache_read: 104000, output: 8400 }, p90: { input: 11000, cache_write: 75000, cache_read: 150000, output: 12000 } },
+    { band: "[70,80)", agent: "orc-executor-opus-4-7-high", count: 1, tasks: ["T04"], samples: 6, p50: { input: 5700, cache_write: 40200, cache_read: 81000, output: 9300 }, p90: { input: 8100, cache_write: 58000, cache_read: 117000, output: 13400 } },
+    // A band with insufficient history — the low-confidence warning is not
+    // optional chrome, so the fixture has to be able to trigger it.
+    { band: "[90,100]", agent: "orc-executor-opus-5-high", count: 1, tasks: ["T12"], samples: 2, p50: { input: 9100, cache_write: 61000, cache_read: 128000, output: 17000 }, p90: { input: 14000, cache_write: 94000, cache_read: 198000, output: 26000 } },
+  ],
+  fixed_roles: [
+    { role: "orc-system-analyst-opus-5-high", samples: 11, p50: { input: 6100, cache_write: 41000, cache_read: 82000, output: 9000 }, p90: { input: 8600, cache_write: 58000, cache_read: 116000, output: 13000 } },
+    { role: "orc-planner-opus-5-med", samples: 11, p50: { input: 5000, cache_write: 33000, cache_read: 68000, output: 7400 }, p90: { input: 7100, cache_write: 47000, cache_read: 96000, output: 10500 } },
+    { role: "orc-trace-writer-haiku-4-5", samples: 41, p50: { input: 900, cache_write: 3000, cache_read: 5400, output: 700 }, p90: { input: 1300, cache_write: 4400, cache_read: 7800, output: 1000 } },
+  ],
+  low_confidence_bands: 1,
+  min_samples: 5,
+  // Non-zero on purpose: `unattributed` is shown whenever it is above 0, and a
+  // fixture where it is always 0 makes that branch undesignable.
+  unattributed: { blocks: 12, tokens: { input: 900, cache_write: 12000, cache_read: 24000, output: 1100 } },
+  transcripts_readable: true,
+  lanes: [
+    { lane: "ultra", cmd: "/orc-ultra", raw: 2410000, weighted: 1090000, usd: 14.2, low_confidence_bands: 1, low_confidence_roles: 0 },
+    { lane: "orc", cmd: "/orc", raw: 1225100, weighted: 564680, usd: 6.76, low_confidence_bands: 1, low_confidence_roles: 0 },
+    { lane: "mini", cmd: "/orc-mini", raw: 410000, weighted: 188000, usd: 2.1, low_confidence_bands: 0, low_confidence_roles: 0 },
+    { lane: "fast", cmd: "/orc-fast", raw: 0, weighted: 0, usd: null, low_confidence_bands: 1, low_confidence_roles: 1 },
+  ],
+  view: "auto",
+};
+
+const budgetRates = {
+  ok: true,
+  version: 1,
+  calibrated_at: "10-08-2026 09:40:11",
+  transcript_dir: "/home/you/.claude/projects/-example-project",
+  transcripts_readable: true,
+  transcript_files: 31,
+  traces_read: 42,
+  dispatches_joined: 96,
+  price_table_as_of: "2026-08-01",
+  bands: {
+    "[0,30)": { samples: 9, p50: { input: 1200, cache_write: 6400, cache_read: 11800, output: 900 }, p90: { input: 1800, cache_write: 9200, cache_read: 17000, output: 1400 }, peak_p50: 24000, peak_p90: 38000 },
+    "[40,55)": { samples: 12, p50: { input: 7800, cache_write: 52100, cache_read: 104000, output: 8400 }, p90: { input: 11000, cache_write: 75000, cache_read: 150000, output: 12000 }, peak_p50: 78000, peak_p90: 121000 },
+    "[70,80)": { samples: 6, p50: { input: 5700, cache_write: 40200, cache_read: 81000, output: 9300 }, p90: { input: 8100, cache_write: 58000, cache_read: 117000, output: 13400 }, peak_p50: 96000, peak_p90: 142000 },
+    "[90,100]": { samples: 2, p50: { input: 9100, cache_write: 61000, cache_read: 128000, output: 17000 }, p90: { input: 14000, cache_write: 94000, cache_read: 198000, output: 26000 }, peak_p50: 151000, peak_p90: 189000 },
+  },
+  roles: {
+    "orc-system-analyst-opus-5-high": { samples: 11, p50: { input: 6100, cache_write: 41000, cache_read: 82000, output: 9000 }, p90: { input: 8600, cache_write: 58000, cache_read: 116000, output: 13000 }, peak_p50: 88000, peak_p90: 131000 },
+    "orc-trace-writer-haiku-4-5": { samples: 41, p50: { input: 900, cache_write: 3000, cache_read: 5400, output: 700 }, p90: { input: 1300, cache_write: 4400, cache_read: 7800, output: 1000 }, peak_p50: 9000, peak_p90: 14000 },
+  },
+  lanes: {},
+  unattributed: { blocks: 12, tokens: { input: 900, cache_write: 12000, cache_read: 24000, output: 1100 } },
+};
+
+module.exports = { stats, budgetForecast, budgetRates };

package/bin/webui/i18n/TERMS.md

@@ -0,0 +1,134 @@
+# Panel wording — the term list
+
+> One page. It exists so the next two hundred strings stay consistent, because
+> without it a wording pass drifts back within two releases.
+
+The panel's **instruction text** is written in Simplified Technical English
+(ASD-STE100 in spirit, not in certification). Instruction text is anything the
+user must **act on**: a button, a field label, a hint, an error, a gate, a
+countdown, an install or connect step.
+
+**Rationale prose keeps its voice** and only gets shorter. Sentences like *"It
+stops someone at your keyboard, not someone who copied the file"* draw a
+distinction STE has no vocabulary for; flattened, they become true and useless.
+
+---
+
+## The rule that is not negotiable
+
+> **NEVER simplify a CLI-computed value.**
+
+A state word, an exit reason, a doctor message, a config key, a model id, a
+provider id, a path, a band or a command is **not prose** and is not the panel's
+to rewrite. A simplified state word is a state that does not exist — the same
+failure as a translated config key.
+
+This applies to `bin/cli.js --json` output in every panel, in every language.
+
+---
+
+## How to write an instruction
+
+- One instruction per sentence.
+- 20 words maximum.
+- Active voice, present tense, "you" as the subject.
+- The condition comes **before** the action: *"If the test is green, save the key."*
+- No phrasal verb where a single verb exists.
+
+---
+
+## One word, one meaning
+
+Pick the left column. Never use the right column for the same idea.
+
+| use | never |
+|---|---|
+| **connect** (make a connection to a provider) | add, link, hook up, set up |
+| **test** (prove a connection answers) | probe, ping, check, try |
+| **delete** (remove permanently) | remove, forget, drop, clear, wipe |
+| **save** (write and keep) | store, persist, remember |
+| **enable** / **disable** | turn on, turn off, switch on, activate |
+| **configure** | set up, sort out |
+| **run** (execute a command) | fire, kick off, trigger, invoke |
+| **open** (a file, a window, a terminal) | bring up, pull up, launch |
+| **install** | get, grab, pull |
+| **refresh** (read again) | reload, re-fetch, sync |
+| **stop** (end before it finishes) | halt, abort, kill, cancel |
+| **wait** | hold, pause, hang on |
+| **choose** | pick, select from |
+| **show** | display, render, surface |
+| **key** (a credential value) | token, secret, api key |
+| **passphrase** (what opens the vault) | password, phrase, secret |
+| **deadline** (when a saved passphrase ends) | expiry, timeout, TTL, lifetime |
+| **connection** (a configured profile) | profile, endpoint, provider link |
+| **document** | doc, file, artefact |
+| **section** | part, chunk, block |
+| **command** | line, invocation |
+
+Two exceptions, both because they are the CLI's own words and the rule above
+outranks this table:
+
+- `profile` where the CLI prints `profile`;
+- `ping`, `probe` and `forget` where they are the **name of a command**
+  (`orc extra ping`, `orc extra session --forget`).
+
+---
+
+## Where each rule applies
+
+| STE, strictly | keep the voice |
+|---|---|
+| button and control labels | the honesty sentences (the passphrase deadline, `tok=none`, "zero reroutes is not evidence") |
+| field labels and hints | the boundary card |
+| error and refusal text | the "why this design" notes |
+| every gate and countdown sentence | trace-format explanations |
+| install and connect steps | |
+| the passphrase modal, **end to end** — it is a procedure and it cannot be dismissed | |
+
+---
+
+## Keys that keep their voice
+
+The default is STE: **a new key is instruction text unless it is listed here.**
+Opting out is a deliberate line in a diff somebody reads, which is the same
+shape as the contract-lint table.
+
+These are the sentences doing the most work in this subsystem, and STE has no
+vocabulary for the distinctions they draw. Flattened, they become true and
+useless. The test parses this fenced list by name.
+
+```prose-keys
+extra.boundary.leaves
+extra.boundary.whom
+extra.boundary.cannot
+extra.boundary.fence
+extra.boundary.probe
+extra.providers.subWhy
+extra.providers.noModels
+extra.providers.stale
+extra.routing.gapWhy
+extra.gate.hiddenWhy
+extra.cost.noRate
+extra.cost.sourcesWhy
+extra.live.noReport
+extra.tools.subWhy
+extra.tools.altNone
+extra.tools.neverElevates
+extra.add.vaultWarn
+extra.session.honesty
+extra.lanes.subWhy
+extra.guard.subWhy
+extra.recovery.noteWhy
+extra.slots.subWhy
+extra.slots.keepsSlotWhy
+```
+
+---
+
+## What is NOT checked automatically
+
+There is no STE checker in this repo and there is not going to be one: a real
+one needs the approved dictionary, which is licensed. A test asserts the cheap
+half — no string in the STE set is over 20 words, and no banned synonym appears
+— and the rest is this page plus review. A checker that half-works would be
+worse than none, because people would trust it.

package/bin/webui/i18n/en/banner.json

@@ -0,0 +1,29 @@
+{
+  "version.unknown.label": "unknown",
+  "version.unknown.note": "Could not read the installed version.",
+  "version.off.label": "check off",
+  "version.off.note": "Update checks are disabled (ORC_NO_UPDATE_CHECK).",
+  "version.offline.label": "offline",
+  "version.offline.note": "Could not reach the install source to compare versions.",
+  "version.available.label": "{latest} available",
+  "version.available.note": "You have {version}. Maintenance → upgrade installs it.",
+  "version.current.label": "up to date",
+  "version.current.note": "{version} is the latest on {source}.",
+  "banner.update.title": "orc {latest} is available — you have {version}.",
+  "banner.update.note": "Click to read what changed, then upgrade from Maintenance.",
+  "banner.update.cta": "Read →",
+  "banner.global.title": "A global ORC install exists at ~/.claude and may win skill resolution.",
+  "banner.global.body": "These project settings may not be the ones your runs read. This panel never edits global config — it reports the conflict.",
+  "banner.global.check": "Check it with: orc doctor",
+  "banner.fixtures": "Fixture mode: every number on this page is canned. Nothing real is read, and nothing can be written.",
+  "banner.noToken": "This page is missing its session token.",
+  "banner.noTokenHint": "Re-run `orc ui` in your project to get a fresh URL.",
+  "changelog.title": "What's new in {version}",
+  "changelog.disabled": "Update checks are disabled (ORC_NO_UPDATE_CHECK), so there is nothing to show.",
+  "changelog.offline": "Could not reach the changelog — you are offline, or the source is unreachable.",
+  "changelog.offlineNote": "The release itself is still real; this panel just could not fetch its notes.",
+  "changelog.empty": "No changelog entries newer than what you have.",
+  "changelog.source": "Source: {src}",
+  "changelog.goUpgrade": "Take me to the upgrade",
+  "changelog.loadFail": "Could not load the changelog: {err}"
+}

package/bin/webui/i18n/en/boundary.json

@@ -0,0 +1,20 @@
+{
+  "boundary.title": "Boundary",
+  "boundary.sub": "Where ORC will act on its own, where it needs a person, and where it will not act at all.",
+  "boundary.none": "No boundary cards yet",
+  "boundary.noneHint": "An area with no card is UNKNOWN - never assumed safe. Cards are written once per area and then consulted instantly.",
+  "boundary.cmdWhy": "Working out a verdict means reading the area and answering four questions about it, so it costs model tokens. This panel reads the cards; it cannot write one.",
+  "boundary.summary": "Areas",
+  "boundary.staleChip": "1 stale",
+  "boundary.staleChipPlural": "{n} stale",
+  "boundary.gatesOrc": "This gates ORC's own dispatch, never you. Ask ORC directly and it will still do the work - the card is shown, not enforced against you.",
+  "boundary.stale": "stale",
+  "boundary.malformedNoChecklist": "This card refuses without saying what would change that. A refusal with no checklist is malformed - re-run the lane for this area.",
+  "boundary.wouldMakeYes": "What would make this a yes",
+  "boundary.escalateTo": "Signed off by: {who}",
+  "boundary.malformedNoWho": "This card escalates without naming anybody. An escalation with no name is malformed - re-run the lane for this area.",
+  "boundary.staleWhy": "1 commit has touched this area since the card was written, so its evidence has moved. That is not a wrong card - just one worth re-checking.",
+  "boundary.staleWhyPlural": "{n} commits have touched this area since the card was written, so its evidence has moved. That is not a wrong card - just one worth re-checking.",
+  "boundary.route.pact": "Open Promises",
+  "boundary.route.knowledge": "Open Knowledge"
+}

package/bin/webui/i18n/en/challenge.json

@@ -0,0 +1,106 @@
+{
+  "challenge.title": "Challenge",
+  "challenge.sub": "Grade a finished artifact against a goal you stated. ORC judges, you fix, ORC re-judges.",
+  "challenge.summary": "Cycles",
+  "challenge.contract": "ORC never fixes what it judged. A session that just wrote the fix would grade its own homework, and it would always pass.",
+  "challenge.none": "No review cycles yet.",
+  "challenge.noneHint": "A cycle starts by stating what the artifact must achieve. ORC asks, and never guesses.",
+  "challenge.cmdWhy": "Opening or continuing a cycle runs a judgement, which costs model tokens.",
+  "challenge.paidWhy": "A judgement costs model tokens, so this is a command to copy, not a button.",
+  "challenge.iterN": "{n} iteration",
+  "challenge.iterNPlural": "{n} iterations",
+  "challenge.blockingN": "{n} blocking",
+  "challenge.blockingNPlural": "{n} blocking",
+  "challenge.noBlocking": "nothing blocking",
+  "challenge.stalledChip": "stalled",
+  "challenge.noTemplateChip": "no template",
+  "challenge.goalTitle": "What this artifact has to achieve",
+  "challenge.goalNote": "Frozen at intake. Every finding must serve one of these, and a finding that cannot is dropped.",
+  "challenge.field.goal": "Goal",
+  "challenge.field.audience": "Audience",
+  "challenge.field.done": "Done means",
+  "challenge.field.outOfScope": "Out of scope",
+  "challenge.field.context": "Context (evidence, not instruction)",
+  "challenge.field.wrong": "What is wrong",
+  "challenge.field.consequence": "Consequence",
+  "challenge.field.fixedWhen": "Fixed when",
+  "challenge.field.serves": "Serves",
+  "challenge.field.supersededBy": "Superseded by",
+  "challenge.field.reason": "Reason",
+  "challenge.timeline": "Iterations",
+  "challenge.timelineAria": "Timeline of {n} iterations",
+  "challenge.convNote": "Blocking findings per iteration, stacked by severity. A dashed break marks a re-frozen goal or template, because a comparison across one is not a comparison.",
+  "challenge.noIterations": "Created, not yet judged.",
+  "challenge.noIterationsHint": "Run /orc-challenge {slug} to open the first iteration.",
+  "challenge.stalledNote": "Stalled: no net reduction across the last iterations. Narrow the rubric, accept the gaps as known, or keep going.",
+  "challenge.readerTitle": "Cold comprehension",
+  "challenge.readerSub": "answered {answered} of {asked} questions from the artifact alone",
+  "challenge.readerNote": "Measured by an agent that could read this one file and nothing else. It is the only honest way to ask whether a reader with no context can follow it.",
+  "challenge.dimensions": "Dimensions",
+  "challenge.dimNote": "NOT-CHECKED keeps its slot and carries its reason. A silently skipped check is indistinguishable from a forgotten one.",
+  "challenge.findings": "Findings",
+  "challenge.dropped": "{n} finding dropped for having no goal element to serve: {ids}",
+  "challenge.events": "Events",
+  "challenge.acceptedBadge": "accepted",
+  "challenge.rebuttedBadge": "rebutted",
+  "challenge.acceptedNote": "Accepted as a known gap: {reason}",
+  "challenge.rebuttedNote": "Rebutted ({status}): {reason}",
+  "challenge.acceptBtn": "Accept as a known gap",
+  "challenge.rebutBtn": "Rebut it",
+  "challenge.acceptTitle": "Accept a known gap",
+  "challenge.rebutTitle": "Rebut a finding",
+  "challenge.acceptBody": "{id} stops blocking, and stays visible in every report with your reason. It is never automatic.",
+  "challenge.rebutBody": "The next judgement must answer {id} explicitly: withdrawn with an admission, or upheld with new evidence.",
+  "challenge.acceptNote": "Good enough, and here is why, is a real ending. Recording it beats quietly lowering the bar.",
+  "challenge.rebutNote": "Without this, one wrong finding loops forever and your only move is to give up.",
+  "challenge.acceptGo": "Accept it",
+  "challenge.rebutGo": "Rebut it",
+  "challenge.acceptOk": "Accepted. It stays visible with your reason.",
+  "challenge.rebutOk": "Rebutted. The next judgement must answer it.",
+  "challenge.needReason": "A reason is required.",
+  "challenge.reasonPlaceholder": "Why?",
+  "challenge.reRender": "Re-render the report",
+  "challenge.reportOk": "Report re-derived from the ledger.",
+  "challenge.missingRevision": "The declared revision is not there: {path}",
+  "challenge.candidatesNote": "These are listed, never adopted. Picking one for you would point the judge at the wrong file, and it would write a page of confident, useless findings.",
+  "challenge.tamperedNote": "A verdict file changed after it was recorded. Reported, never silently re-graded: say what happened before continuing.",
+  "challenge.passedNote": "Passed. Nothing here is staged, so commit it if your team should see the review trail.",
+  "challenge.stalePassNote": "It passed, then the artifact changed. Honest, not a failure: it simply has not been judged since.",
+  "challenge.awaitingFixNote": "Waiting for you to fix it, in a NEW session, not this one.",
+  "challenge.pasteHead": "Paste this into a new Claude Code session",
+  "challenge.copyPrompt": "Copy prompt",
+  "challenge.council": "The council",
+  "challenge.councilRan": "{ran} of {of} ran",
+  "challenge.councilUnset": "No roster on this cycle.",
+  "challenge.councilUnsetHint": "It was opened before the council existed. Who reviews is a decision, not a default, so ORC will not fill it in — it asks, and the next judgement is refused until it is answered.",
+  "challenge.councilUnsetWhy": "Answering it is one question in the lane, and the next iteration costs model tokens.",
+  "challenge.councilNote": "ORC suggests a roster; you pick it. A lens raises a candidate, and only the judge decides what happens to it — so a lens you switch off can never quietly lose an open finding.",
+  "challenge.neverBlocks": "never blocks",
+  "challenge.lensCounts": "raised {raised} · adopted {adopted} · merged {merged} · rejected {rejected} · out of goal {outOfGoal}",
+  "challenge.lensNotRun": "Did not run: {reason}",
+  "challenge.lensNotSelected": "Not on this cycle's roster. To add it:",
+  "challenge.mondayMorning": "What you would actually do first",
+  "challenge.alsoFoundBy": "also found by: {lenses}",
+  "challenge.field.raisedBy": "Raised by",
+  "challenge.raisedAdopted": "{lens}, then adopted by the judge",
+  "challenge.field.disposition": "What the judge did with it",
+  "challenge.premises": "Is this even the right problem?",
+  "challenge.disputes": "disputes the {what}",
+  "challenge.field.reframe": "The problem, restated",
+  "challenge.field.whatChanges": "What this review would attack instead",
+  "challenge.field.cheapestTest": "Cheapest way to settle it",
+  "challenge.dismissPremise": "Dismiss it",
+  "challenge.dismissPremiseNote": "Your reason stays in the report forever. That is the point of asking for one.",
+  "challenge.adoptPremiseWhy": "Agreeing means writing a new goal file, and the panel must not invent one for you.",
+  "challenge.premiseNote": "This disputes the goal every finding above was measured against, so it sits first. Nothing here blocks, and nothing here happens on its own: a person decides.",
+  "challenge.opportunities": "Upside nobody counted",
+  "challenge.opportunityNote": "Not work. Nothing here blocks anything, and nothing here has a severity — one lens looks for what is being undervalued instead of what is wrong.",
+  "challenge.field.what": "What",
+  "challenge.field.upside": "If it works better than expected",
+  "challenge.field.firstStep": "First step",
+  "challenge.field.anchor": "Where",
+  "challenge.field.confidence": "Confidence",
+  "challenge.takeOpportunity": "Keep it",
+  "challenge.dropOpportunity": "Let it go",
+  "challenge.opportunityReasonNote": "Either way it is written down with your reason. An idea that quietly disappears looks the same as one nobody ever had."
+}

package/bin/webui/i18n/en/common.json

@@ -0,0 +1,69 @@
+{
+  "_readme": [
+    "en.json — the English string table for `orc ui`. THE SCOPE RULE, and it is a",
+    "hard one: only the PANEL'S OWN prose lives here. Anything that arrives from",
+    "`bin/cli.js --json` is never translated — config keys, their descriptions and",
+    "values, agent names, model ids, file paths, commands, doctor messages, CLI",
+    "output. Those are identifiers and machine text; a translated config key would",
+    "be a key that does not exist, and a translated command would be a command you",
+    "cannot type. Chrome and explanation are ours; data is the CLI's.",
+    "Placeholders are {name} and are substituted by t()."
+  ],
+  "lang.title": "Switch language",
+  "rail.light": "Light",
+  "rail.dark": "Dark",
+  "rail.shortcuts": "Keyboard shortcuts",
+  "rail.fixtures": "FIXTURE MODE",
+  "common.copy": "Copy",
+  "common.copied": "Copied",
+  "common.cancel": "Cancel",
+  "common.close": "Close",
+  "common.remove": "Remove",
+  "common.later": "Later",
+  "common.next": "Next",
+  "common.done": "Done",
+  "common.skipTour": "Skip tour",
+  "common.waiting": "Waiting for you…",
+  "common.step": "{n} of {total}",
+  "common.loadFail": "Could not load this panel.",
+  "common.clipboardOk": "{label} to clipboard.",
+  "common.clipboardFail": "Could not reach the clipboard — select the text and copy by hand.",
+  "common.none": "none",
+  "common.checking": "checking…",
+  "age.now": "just now",
+  "age.min": "{n} min ago",
+  "age.hours": "{n} hours ago",
+  "age.day": "{n} day ago",
+  "age.dayPlural": "{n} days ago",
+  "edits.none": "No unsaved changes.",
+  "edits.pending": "Not written yet:",
+  "edits.toDefault": "default",
+  "edits.apply": "Apply",
+  "edits.applyN": "Apply {n}",
+  "edits.applying": "Applying…",
+  "edits.applied": "Applied {n} change(s).",
+  "edits.someFailed": "{n} change(s) were refused.",
+  "edits.cancel": "Discard",
+  "edits.reset": "Reset to defaults",
+  "edits.resetAll": "Reset every key",
+  "edits.resetFlow": "Reset every key",
+  "edits.resetAllTitle": "Reset every setting",
+  "edits.resetAllBody": "This removes every key from the config file, so all of them fall back to their shipped defaults. Anything staged but not applied is discarded first.",
+  "edits.resetAllApply": "Reset the file",
+  "shortcuts.title": "Keyboard shortcuts",
+  "shortcuts.panels": "Jump to that panel in the rail",
+  "shortcuts.filter": "Focus the filter box (Settings)",
+  "shortcuts.reload": "Reload the current panel",
+  "shortcuts.theme": "Toggle light / dark",
+  "shortcuts.lang": "Toggle language",
+  "shortcuts.list": "This list",
+  "shortcuts.escape": "Close a dialog, or clear the filter",
+  "shortcuts.note": "Shortcuts are ignored while you are typing in a field.",
+  "shortcuts.replay": "Replay the tour",
+  "setting.resetTo": "reset to {value}",
+  "common.open": "Open",
+  "common.writeFail": "That did not work",
+  "common.runInClaude": "Run this in Claude Code",
+  "shortcuts.panelsLetters": "Promises, Boundary, Self-serve, Extra, Mocked Skill Use",
+  "common.confirm": "Confirm"
+}