@cat-factory/app 0.314.0 → 0.315.1

package/app/utils/notificationRoutes.ts

@@ -0,0 +1,179 @@
+import type { ExecutionInstance, Notification, PipelineStep } from '~/types/domain'
+
+/**
+ * Where each notification takes a person, and the verb that names it (issue #2258, finding F4).
+ *
+ * ONE row per type holds both, so the button's word and the place it opens cannot drift apart:
+ * the inbox's title link and its primary button both dispatch through {@link notificationTarget},
+ * and the verb is decided from the SAME resolution. A route that can only fall back to selecting
+ * the task (its run is not loaded, or not parked) is named "Open", because that is what happens.
+ *
+ * Exhaustive over the notification types, so a new type has to decide. A `null` verb means the
+ * card's own act button already IS the action (Merge, Retry run, Acknowledge), or there is nowhere
+ * to go beyond the card itself.
+ */
+
+/** The store reads and window openers a route needs, injected so this stays testable. */
+export interface NotificationRouteDeps {
+  getInstance: (id: string) => ExecutionInstance | undefined
+  select: (blockId: string) => void
+  openStepDetail: (instanceId: string, stepIndex: number) => void
+  openDecision: (instanceId: string, decisionId: string) => void
+  openFollowUps: (instanceId: string) => void
+  openForkDecision: (instanceId: string) => void
+  openPrReview: (instanceId: string) => void
+  openBugFishing: (instanceId: string) => void
+  openRequirementReview: (blockId: string) => void
+  openClarityReview: (blockId: string) => void
+  openInitiativeTracker: (blockId: string) => void
+  openOperatorDashboard: () => void
+}
+
+/**
+ * Where a click lands. `surface` opens the window that answers the card; `task` only selects the
+ * task on the board, which is the fallback when that window cannot open.
+ */
+export interface NotificationTarget {
+  readonly kind: 'surface' | 'task'
+  readonly open: () => void
+}
+
+interface NotificationRoute {
+  /** The verb for a `surface` target, or null when the card's act button is already the verb. */
+  readonly verbKey: string | null
+  readonly resolve: (n: Notification, deps: NotificationRouteDeps) => NotificationTarget | null
+}
+
+/** The verb for a route that can only select the task. */
+export const OPEN_TASK_VERB_KEY = 'layout.notifications.goTo.open'
+
+const surface = (open: () => void): NotificationTarget => ({ kind: 'surface', open })
+
+/** Select the card's task: the fallback every block-bound route shares. */
+function selectTask(n: Notification, deps: NotificationRouteDeps): NotificationTarget | null {
+  const blockId = n.blockId
+  return blockId ? { kind: 'task', open: () => deps.select(blockId) } : null
+}
+
+/** A window keyed by the card's run, when that run is loaded; else the task. */
+function byRun(open: (deps: NotificationRouteDeps, instanceId: string) => void) {
+  return (n: Notification, deps: NotificationRouteDeps): NotificationTarget | null => {
+    const id = n.executionId
+    if (id && deps.getInstance(id)) return surface(() => open(deps, id))
+    return selectTask(n, deps)
+  }
+}
+
+/** The run's step matching `find`, opened through the universal step dispatch; else the task. */
+function byStep(find: (step: PipelineStep) => boolean) {
+  return (n: Notification, deps: NotificationRouteDeps): NotificationTarget | null => {
+    const instance = n.executionId ? deps.getInstance(n.executionId) : undefined
+    const index = instance?.steps.findIndex(find) ?? -1
+    if (instance && index >= 0) return surface(() => deps.openStepDetail(instance.id, index))
+    return selectTask(n, deps)
+  }
+}
+
+/** A window keyed by the card's block. */
+function byBlock(open: (deps: NotificationRouteDeps, blockId: string) => void) {
+  return (n: Notification, deps: NotificationRouteDeps): NotificationTarget | null => {
+    const blockId = n.blockId
+    return blockId ? surface(() => open(deps, blockId)) : null
+  }
+}
+
+/**
+ * A parked step: an agent's question opens the decision window, where it is answered (as from the
+ * task card and the toolbar); any other park (an approval gate, an iteration cap) opens the step.
+ * A card whose run is not parked, which a Ralph loop or an exhausted gate also raises, opens the
+ * task.
+ */
+function parkedStep(n: Notification, deps: NotificationRouteDeps): NotificationTarget | null {
+  const instance = n.executionId ? deps.getInstance(n.executionId) : undefined
+  const index = instance?.steps.findIndex((s) => s.state === 'waiting_decision') ?? -1
+  const step = instance?.steps[index]
+  if (!instance || !step) return selectTask(n, deps)
+  const decision = step.decision
+  if (decision && !decision.chosen) {
+    return surface(() => deps.openDecision(instance.id, decision.id))
+  }
+  return surface(() => deps.openStepDetail(instance.id, index))
+}
+
+const verb = (leaf: string) => `layout.notifications.goTo.${leaf}`
+
+export const NOTIFICATION_ROUTES: Record<Notification['type'], NotificationRoute> = {
+  merge_review: { verbKey: null, resolve: selectTask },
+  pipeline_complete: { verbKey: null, resolve: selectTask },
+  merge_tag_request: { verbKey: null, resolve: selectTask },
+  ci_failed: { verbKey: null, resolve: selectTask },
+  test_failed: { verbKey: null, resolve: selectTask },
+  deploy_blocked: { verbKey: null, resolve: selectTask },
+  release_regression: { verbKey: null, resolve: selectTask },
+  infra_unreachable: { verbKey: null, resolve: selectTask },
+  key_drift: { verbKey: null, resolve: selectTask },
+  // Raised with no block, so neither has anywhere to go beyond the card.
+  budget_threshold: { verbKey: null, resolve: selectTask },
+  budget_paused: { verbKey: null, resolve: selectTask },
+  // Deployment-scoped: the dashboard holds the live numbers behind the alert.
+  platform_health: { verbKey: null, resolve: (_n, deps) => surface(deps.openOperatorDashboard) },
+  requirement_review: {
+    verbKey: verb('review'),
+    resolve: byBlock((deps, id) => deps.openRequirementReview(id)),
+  },
+  clarity_review: {
+    verbKey: verb('review'),
+    resolve: byBlock((deps, id) => deps.openClarityReview(id)),
+  },
+  decision_required: { verbKey: verb('answer'), resolve: parkedStep },
+  human_test_ready: {
+    verbKey: verb('test'),
+    resolve: byStep((s) => s.agentKind === 'human-test' && s.state === 'waiting_decision'),
+  },
+  visual_confirmation_ready: {
+    verbKey: verb('confirm'),
+    resolve: byStep((s) => s.agentKind === 'visual-confirmation' && s.state === 'waiting_decision'),
+  },
+  human_review: { verbKey: verb('review'), resolve: byStep((s) => s.agentKind === 'human-review') },
+  judge_review: {
+    verbKey: verb('review'),
+    resolve: byStep((s) => s.judge?.status === 'awaiting_decision'),
+  },
+  followup_pending: {
+    verbKey: verb('triage'),
+    resolve: byRun((deps, id) => deps.openFollowUps(id)),
+  },
+  fork_decision_pending: {
+    verbKey: verb('choose'),
+    resolve: byRun((deps, id) => deps.openForkDecision(id)),
+  },
+  pr_review_ready: { verbKey: verb('review'), resolve: byRun((deps, id) => deps.openPrReview(id)) },
+  bug_fishing_triage: {
+    verbKey: verb('triage'),
+    resolve: byRun((deps, id) => deps.openBugFishing(id)),
+  },
+  initiative: {
+    verbKey: verb('open'),
+    resolve: byBlock((deps, id) => deps.openInitiativeTracker(id)),
+  },
+}
+
+/** Where a click on this card lands, or null when it has nowhere to go. */
+export function notificationTarget(
+  n: Notification,
+  deps: NotificationRouteDeps,
+): NotificationTarget | null {
+  return NOTIFICATION_ROUTES[n.type].resolve(n, deps)
+}
+
+/**
+ * The primary button's verb, from the same resolution the click takes: the route's verb when its
+ * window can open, "Open" when only the task can, null when the card has no verb or nowhere to go.
+ */
+export function notificationVerbKey(n: Notification, deps: NotificationRouteDeps): string | null {
+  const route = NOTIFICATION_ROUTES[n.type]
+  if (!route.verbKey) return null
+  const target = route.resolve(n, deps)
+  if (!target) return null
+  return target.kind === 'surface' ? route.verbKey : OPEN_TASK_VERB_KEY
+}

package/i18n/locales/de.json

@@ -842,7 +842,9 @@
         "createdByKey": "API-Schlüssel {id}",
         "revoke": "Token widerrufen",
         "boundToYou": "Ihr Abonnement",
-        "boundToOther": "Abonnement von {user}"
+        "boundToOther": "Abonnement von {user}",
+        "reachAll": "Alle Arbeitsbereiche",
+        "reachCount": "{count} Arbeitsbereiche"
       },
       "add": {
         "heading": "Token erstellen",
@@ -856,7 +858,13 @@
         "identitySystem": "Dieser Arbeitsbereich (System-Token)",
         "identitySelf": "Ich (persönliches Token)",
         "identitySystemHelp": "Mit diesem Token gestartete Läufe gehören dem Arbeitsbereich und werden keiner Person zugeordnet. Es kann kein persönliches Claude-/Codex-/GLM-Abonnement nutzen: Eine Aufgabe mit einem solchen Modell wird abgelehnt, statt jemandem in Abwesenheit berechnet zu werden. Für CI und gemeinsam genutzte Integrationen.",
-        "identitySelfHelp": "Mit diesem Token gestartete Läufe gelten als Ihre und können Ihr persönliches Claude-/Codex-/GLM-Abonnement nutzen. Jeder solche Aufruf muss zusätzlich Ihr persönliches Passwort im Header X-Personal-Password senden; es wird nie gespeichert. Für Ihre eigenen Headless-Läufe."
+        "identitySelfHelp": "Mit diesem Token gestartete Läufe gelten als Ihre und können Ihr persönliches Claude-/Codex-/GLM-Abonnement nutzen. Jeder solche Aufruf muss zusätzlich Ihr persönliches Passwort im Header X-Personal-Password senden; es wird nie gespeichert. Für Ihre eigenen Headless-Läufe.",
+        "reach": "Arbeitsbereiche",
+        "reachHelp": "Auf welchen Arbeitsbereichen dieses Token handeln darf. Ein Token für mehr als einen Arbeitsbereich nennt den Arbeitsbereich bei jedem Aufruf im Header x-cat-factory-workspace.",
+        "reachThis": "Nur dieser Arbeitsbereich",
+        "reachAll": "Alle Arbeitsbereiche des Kontos",
+        "reachSelected": "Ausgewählte Arbeitsbereiche",
+        "reachPick": "Arbeitsbereiche auswählen"
       },
       "scopes": {
         "read": "Nur Lesen",
@@ -2603,7 +2611,16 @@
       },
       "failingRun": "{kind} · {at}",
       "failingRunsMore": "{count} weitere nicht angezeigt",
-      "failingRunGone": "Dieser Lauf ist nicht mehr geladen und hat keine Aufgabe zum Öffnen."
+      "failingRunGone": "Dieser Lauf ist nicht mehr geladen und hat keine Aufgabe zum Öffnen.",
+      "goTo": {
+        "review": "Prüfen",
+        "answer": "Antworten",
+        "test": "Testen",
+        "confirm": "Bestätigen",
+        "triage": "Sichten",
+        "choose": "Auswählen",
+        "open": "Öffnen"
+      }
     },
     "aiProvidersBanner": {
       "setup": {
@@ -6425,7 +6442,8 @@
         "delegated_claim_missing": "Für diesen Schritt gibt es keine externe Arbeit zu prüfen",
         "thread_busy": "Dieser Thread antwortet noch",
         "draft_conflict": "Dieser Entwurf hat sich geändert",
-        "session_stale": "Der Pull Request hat sich weiterentwickelt"
+        "session_stale": "Der Pull Request hat sich weiterentwickelt",
+        "cursor_expired": "Der Änderungsfeed ist über diesen Cursor hinaus"
       },
       "description": {
         "dependencies_unmet": "Diese Aufgabe hängt von anderen ab, die noch nicht abgeschlossen sind. Schließe sie ab oder gib sie frei und starte dann erneut.",
@@ -6485,7 +6503,8 @@
         "delegated_claim_missing": "Der Eintrag des Laufs darüber, was an den externen Executor geschickt wurde, fehlt, also gibt es nichts abzufragen. Am Executor selbst ist nichts falsch. Lade den Lauf neu und starte den Schritt erneut, falls er weiterhin hängt.",
         "thread_busy": "Die vorherige Frage in diesem Thread ist noch nicht beantwortet. Warte auf die Antwort oder frag in einem anderen Thread.",
         "draft_conflict": "Dieser Kommentarentwurf wurde seit dem Laden bearbeitet, gepostet oder verworfen. Lade die Entwürfe neu und nimm deine Änderung erneut vor.",
-        "session_stale": "Nach der Vorbereitung dieser Review kamen neue Commits hinzu, daher zeigen die Entwürfe möglicherweise auf falsche Zeilen. Aktualisiere die Review, prüfe die Entwürfe und poste dann."
+        "session_stale": "Nach der Vorbereitung dieser Review kamen neue Commits hinzu, daher zeigen die Entwürfe möglicherweise auf falsche Zeilen. Aktualisiere die Review, prüfe die Entwürfe und poste dann.",
+        "cursor_expired": "Die Änderungen nach diesem Cursor werden nicht mehr aufbewahrt. Erstelle einen neuen Snapshot des Verzeichnisses und folge dem Feed ab der Position, die er meldet."
       },
       "action": {
         "connectGitHub": "GitHub verbinden",

package/i18n/locales/en.json

@@ -810,7 +810,8 @@
         "delegated_claim_missing": "This step has no external work to check",
         "thread_busy": "This thread is still answering",
         "draft_conflict": "This draft changed",
-        "session_stale": "The pull request has moved on"
+        "session_stale": "The pull request has moved on",
+        "cursor_expired": "The change feed moved past this cursor"
       },
       "description": {
         "dependencies_unmet": "This task depends on others that aren't finished yet. Complete or unblock them, then start it again.",
@@ -873,7 +874,8 @@
         "delegated_claim_missing": "The run’s record of what it sent to the external executor is missing, so there is nothing to poll. Nothing is wrong with the executor itself. Reload the run, and re-run the step if it is still stuck.",
         "thread_busy": "The previous question in this thread has not been answered yet. Wait for that answer, or ask in another thread.",
         "draft_conflict": "Someone edited, posted or discarded this comment draft since you loaded it. Reload the drafts and make your change again.",
-        "session_stale": "New commits landed after this review was prepared, so its drafts may point at the wrong lines. Refresh the review, check the drafts, then post."
+        "session_stale": "New commits landed after this review was prepared, so its drafts may point at the wrong lines. Refresh the review, check the drafts, then post.",
+        "cursor_expired": "The changes after this cursor are no longer kept. Take a fresh snapshot of the directory, then follow the feed from the position it reports."
       },
       "action": {
         "connectGitHub": "Connect GitHub",
@@ -2613,7 +2615,16 @@
       },
       "failingRun": "{kind} · {at}",
       "failingRunsMore": "{count} more not shown",
-      "failingRunGone": "This run is no longer loaded and has no task to open."
+      "failingRunGone": "This run is no longer loaded and has no task to open.",
+      "goTo": {
+        "review": "Review",
+        "answer": "Answer",
+        "test": "Test",
+        "confirm": "Confirm",
+        "triage": "Triage",
+        "choose": "Choose",
+        "open": "Open"
+      }
     },
     "aiProvidersBanner": {
       "setup": {
@@ -3899,7 +3910,9 @@
         "createdByKey": "API key {id}",
         "revoke": "Revoke token",
         "boundToYou": "Your subscription",
-        "boundToOther": "{user}'s subscription"
+        "boundToOther": "{user}'s subscription",
+        "reachAll": "All workspaces",
+        "reachCount": "{count} workspaces"
       },
       "add": {
         "heading": "Create a token",
@@ -3913,7 +3926,13 @@
         "identitySystem": "This workspace (system token)",
         "identitySelf": "Me (personal token)",
         "identitySystemHelp": "Runs started with this token belong to the workspace and are attributed to no person. It cannot use anyone’s personal Claude / Codex / GLM subscription, so a task pinned to one of those models is refused rather than charged to someone who is not there. Use this for CI and shared integrations.",
-        "identitySelfHelp": "Runs started with this token count as yours and can use your personal Claude / Codex / GLM subscription. Every such call must also send your personal password in the X-Personal-Password header; it is never stored. Use this to drive your own headless runs."
+        "identitySelfHelp": "Runs started with this token count as yours and can use your personal Claude / Codex / GLM subscription. Every such call must also send your personal password in the X-Personal-Password header; it is never stored. Use this to drive your own headless runs.",
+        "reach": "Workspaces",
+        "reachHelp": "Which workspaces this token can act on. A token reaching more than one names the workspace on each call in the x-cat-factory-workspace header.",
+        "reachThis": "This workspace only",
+        "reachAll": "Every workspace in the account",
+        "reachSelected": "Selected workspaces",
+        "reachPick": "Choose workspaces"
       },
       "scopes": {
         "read": "Read only",

package/i18n/locales/es.json

@@ -732,7 +732,8 @@
         "delegated_claim_missing": "Este paso no tiene trabajo externo que consultar",
         "thread_busy": "Este hilo todavía está respondiendo",
         "draft_conflict": "Este borrador ha cambiado",
-        "session_stale": "La pull request ha avanzado"
+        "session_stale": "La pull request ha avanzado",
+        "cursor_expired": "El registro de cambios ya superó este cursor"
       },
       "description": {
         "dependencies_unmet": "Esta tarea depende de otras que aún no están terminadas. Complétalas o desbloquéalas y vuelve a iniciarla.",
@@ -792,7 +793,8 @@
         "delegated_claim_missing": "Falta el registro de lo que la ejecución envió al ejecutor externo, así que no hay nada que consultar. El ejecutor en sí no tiene ningún problema. Recarga la ejecución y vuelve a lanzar el paso si sigue atascado.",
         "thread_busy": "La pregunta anterior de este hilo aún no tiene respuesta. Espera esa respuesta o pregunta en otro hilo.",
         "draft_conflict": "Este borrador de comentario se ha editado, publicado o descartado desde que lo cargaste. Vuelve a cargar los borradores y repite tu cambio.",
-        "session_stale": "Llegaron commits nuevos después de preparar esta revisión, así que sus borradores pueden apuntar a líneas equivocadas. Actualiza la revisión, revisa los borradores y luego publica."
+        "session_stale": "Llegaron commits nuevos después de preparar esta revisión, así que sus borradores pueden apuntar a líneas equivocadas. Actualiza la revisión, revisa los borradores y luego publica.",
+        "cursor_expired": "Los cambios posteriores a este cursor ya no se conservan. Toma una instantánea nueva del directorio y sigue el registro desde la posición que indique."
       },
       "action": {
         "connectGitHub": "Conectar GitHub",
@@ -2476,7 +2478,16 @@
       },
       "failingRun": "{kind} · {at}",
       "failingRunsMore": "{count} más sin mostrar",
-      "failingRunGone": "Esta ejecución ya no está cargada y no tiene ninguna tarea que abrir."
+      "failingRunGone": "Esta ejecución ya no está cargada y no tiene ninguna tarea que abrir.",
+      "goTo": {
+        "review": "Revisar",
+        "answer": "Responder",
+        "test": "Probar",
+        "confirm": "Confirmar",
+        "triage": "Clasificar",
+        "choose": "Elegir",
+        "open": "Abrir"
+      }
     },
     "aiProvidersBanner": {
       "setup": {
@@ -3591,7 +3602,9 @@
         "createdByKey": "la clave de API {id}",
         "revoke": "Revocar token",
         "boundToYou": "Tu suscripción",
-        "boundToOther": "Suscripción de {user}"
+        "boundToOther": "Suscripción de {user}",
+        "reachAll": "Todos los espacios de trabajo",
+        "reachCount": "{count} espacios de trabajo"
       },
       "add": {
         "heading": "Crear un token",
@@ -3605,7 +3618,13 @@
         "identitySystem": "Este espacio de trabajo (token de sistema)",
         "identitySelf": "Yo (token personal)",
         "identitySystemHelp": "Las ejecuciones iniciadas con este token pertenecen al espacio de trabajo y no se atribuyen a ninguna persona. No puede usar la suscripción personal de Claude / Codex / GLM de nadie, así que una tarea fijada a uno de esos modelos se rechaza en lugar de cargarse a alguien ausente. Úsalo para CI e integraciones compartidas.",
-        "identitySelfHelp": "Las ejecuciones iniciadas con este token se te atribuyen y pueden usar tu suscripción personal de Claude / Codex / GLM. Cada llamada debe enviar además tu contraseña personal en la cabecera X-Personal-Password; nunca se almacena. Úsalo para tus propias ejecuciones headless."
+        "identitySelfHelp": "Las ejecuciones iniciadas con este token se te atribuyen y pueden usar tu suscripción personal de Claude / Codex / GLM. Cada llamada debe enviar además tu contraseña personal en la cabecera X-Personal-Password; nunca se almacena. Úsalo para tus propias ejecuciones headless.",
+        "reach": "Espacios de trabajo",
+        "reachHelp": "En qué espacios de trabajo puede actuar este token. Un token con acceso a más de uno indica el espacio de trabajo en cada llamada con la cabecera x-cat-factory-workspace.",
+        "reachThis": "Solo este espacio de trabajo",
+        "reachAll": "Todos los espacios de trabajo de la cuenta",
+        "reachSelected": "Espacios de trabajo seleccionados",
+        "reachPick": "Elige espacios de trabajo"
       },
       "scopes": {
         "read": "Solo lectura",

package/i18n/locales/fr.json

@@ -732,7 +732,8 @@
         "delegated_claim_missing": "Cette étape n’a aucun travail externe à interroger",
         "thread_busy": "Ce fil répond encore",
         "draft_conflict": "Ce brouillon a changé",
-        "session_stale": "La pull request a évolué"
+        "session_stale": "La pull request a évolué",
+        "cursor_expired": "Le flux de modifications a dépassé ce curseur"
       },
       "description": {
         "dependencies_unmet": "Cette tâche dépend d'autres qui ne sont pas encore terminées. Terminez-les ou débloquez-les, puis relancez-la.",
@@ -792,7 +793,8 @@
         "delegated_claim_missing": "L’enregistrement de ce que l’exécution a envoyé à l’exécuteur externe est absent : il n’y a donc rien à interroger. L’exécuteur lui-même n’a aucun problème. Rechargez l’exécution et relancez l’étape si elle reste bloquée.",
         "thread_busy": "La question précédente de ce fil n'a pas encore reçu de réponse. Attends cette réponse ou pose ta question dans un autre fil.",
         "draft_conflict": "Ce brouillon de commentaire a été modifié, publié ou abandonné depuis que tu l'as chargé. Recharge les brouillons et refais ta modification.",
-        "session_stale": "De nouveaux commits sont arrivés après la préparation de cette revue, donc ses brouillons peuvent viser les mauvaises lignes. Actualise la revue, vérifie les brouillons, puis publie."
+        "session_stale": "De nouveaux commits sont arrivés après la préparation de cette revue, donc ses brouillons peuvent viser les mauvaises lignes. Actualise la revue, vérifie les brouillons, puis publie.",
+        "cursor_expired": "Les modifications après ce curseur ne sont plus conservées. Prenez un nouvel instantané de l’annuaire, puis suivez le flux à partir de la position qu’il indique."
       },
       "action": {
         "connectGitHub": "Connecter GitHub",
@@ -2476,7 +2478,16 @@
       },
       "failingRun": "{kind} · {at}",
       "failingRunsMore": "{count} de plus non affichées",
-      "failingRunGone": "Cette exécution n'est plus chargée et n'a aucune tâche à ouvrir."
+      "failingRunGone": "Cette exécution n'est plus chargée et n'a aucune tâche à ouvrir.",
+      "goTo": {
+        "review": "Relire",
+        "answer": "Répondre",
+        "test": "Tester",
+        "confirm": "Confirmer",
+        "triage": "Trier",
+        "choose": "Choisir",
+        "open": "Ouvrir"
+      }
     },
     "aiProvidersBanner": {
       "setup": {
@@ -3591,7 +3602,9 @@
         "createdByKey": "la clé d’API {id}",
         "revoke": "Révoquer le jeton",
         "boundToYou": "Votre abonnement",
-        "boundToOther": "Abonnement de {user}"
+        "boundToOther": "Abonnement de {user}",
+        "reachAll": "Tous les espaces de travail",
+        "reachCount": "{count} espaces de travail"
       },
       "add": {
         "heading": "Créer un jeton",
@@ -3605,7 +3618,13 @@
         "identitySystem": "Cet espace de travail (jeton système)",
         "identitySelf": "Moi (jeton personnel)",
         "identitySystemHelp": "Les exécutions lancées avec ce jeton appartiennent à l'espace de travail et ne sont attribuées à personne. Il ne peut utiliser l'abonnement personnel Claude / Codex / GLM de qui que ce soit : une tâche fixée sur un tel modèle est refusée plutôt que facturée à quelqu'un d'absent. À utiliser pour la CI et les intégrations partagées.",
-        "identitySelfHelp": "Les exécutions lancées avec ce jeton vous sont attribuées et peuvent utiliser votre abonnement personnel Claude / Codex / GLM. Chaque appel doit aussi envoyer votre mot de passe personnel dans l'en-tête X-Personal-Password ; il n'est jamais conservé. À utiliser pour vos propres exécutions headless."
+        "identitySelfHelp": "Les exécutions lancées avec ce jeton vous sont attribuées et peuvent utiliser votre abonnement personnel Claude / Codex / GLM. Chaque appel doit aussi envoyer votre mot de passe personnel dans l'en-tête X-Personal-Password ; il n'est jamais conservé. À utiliser pour vos propres exécutions headless.",
+        "reach": "Espaces de travail",
+        "reachHelp": "Les espaces de travail sur lesquels ce jeton peut agir. Un jeton qui en couvre plusieurs indique l’espace de travail à chaque appel dans l’en-tête x-cat-factory-workspace.",
+        "reachThis": "Cet espace de travail uniquement",
+        "reachAll": "Tous les espaces de travail du compte",
+        "reachSelected": "Espaces de travail sélectionnés",
+        "reachPick": "Choisir des espaces de travail"
       },
       "scopes": {
         "read": "Lecture seule",

package/i18n/locales/he.json

@@ -732,7 +732,8 @@
         "delegated_claim_missing": "לשלב זה אין עבודה חיצונית לבדיקה",
         "thread_busy": "השרשור הזה עדיין עונה",
         "draft_conflict": "הטיוטה הזו השתנתה",
-        "session_stale": "בקשת המיזוג התקדמה"
+        "session_stale": "בקשת המיזוג התקדמה",
+        "cursor_expired": "פיד השינויים התקדם מעבר לסמן הזה"
       },
       "description": {
         "dependencies_unmet": "משימה זו תלויה במשימות אחרות שטרם הושלמו. השלם או שחרר אותן, ולאחר מכן הפעל אותה שוב.",
@@ -792,7 +793,8 @@
         "delegated_claim_missing": "הרישום של מה שההרצה שלחה למבצע החיצוני חסר, ולכן אין מה לבדוק. אין שום בעיה במבצע עצמו. טענו מחדש את ההרצה, והריצו את השלב שוב אם הוא עדיין תקוע.",
         "thread_busy": "השאלה הקודמת בשרשור הזה עדיין לא נענתה. המתינו לתשובה או שאלו בשרשור אחר.",
         "draft_conflict": "טיוטת התגובה נערכה, פורסמה או נמחקה מאז שנטענה. טענו מחדש את הטיוטות ובצעו את השינוי שוב.",
-        "session_stale": "נוספו קומיטים חדשים אחרי שהסקירה הוכנה, ולכן הטיוטות עלולות להצביע על שורות שגויות. רעננו את הסקירה, בדקו את הטיוטות ואז פרסמו."
+        "session_stale": "נוספו קומיטים חדשים אחרי שהסקירה הוכנה, ולכן הטיוטות עלולות להצביע על שורות שגויות. רעננו את הסקירה, בדקו את הטיוטות ואז פרסמו.",
+        "cursor_expired": "השינויים שאחרי הסמן הזה כבר לא נשמרים. צרו תמונת מצב חדשה של הספרייה ואז המשיכו לעקוב אחרי הפיד מהמיקום שהיא מדווחת."
       },
       "action": {
         "connectGitHub": "חבר את GitHub",
@@ -2476,7 +2478,16 @@
       },
       "failingRun": "{kind} · {at}",
       "failingRunsMore": "עוד {count} שאינן מוצגות",
-      "failingRunGone": "ההרצה הזו כבר לא טעונה ואין לה משימה לפתוח."
+      "failingRunGone": "ההרצה הזו כבר לא טעונה ואין לה משימה לפתוח.",
+      "goTo": {
+        "review": "סקירה",
+        "answer": "מענה",
+        "test": "בדיקה",
+        "confirm": "אישור",
+        "triage": "מיון",
+        "choose": "בחירה",
+        "open": "פתיחה"
+      }
     },
     "aiProvidersBanner": {
       "setup": {
@@ -3732,7 +3743,9 @@
         "createdByKey": "מפתח API {id}",
         "revoke": "בטל אסימון",
         "boundToYou": "המנוי שלך",
-        "boundToOther": "המנוי של {user}"
+        "boundToOther": "המנוי של {user}",
+        "reachAll": "כל סביבות העבודה",
+        "reachCount": "{count} סביבות עבודה"
       },
       "add": {
         "heading": "צור אסימון",
@@ -3746,7 +3759,13 @@
         "identitySystem": "סביבת העבודה הזו (אסימון מערכת)",
         "identitySelf": "אני (אסימון אישי)",
         "identitySystemHelp": "הרצות שמתחילות עם האסימון הזה שייכות לסביבת העבודה ואינן משויכות לאף אדם. הוא אינו יכול להשתמש במנוי האישי של אף אחד ל-Claude / Codex / GLM, ולכן משימה שמוצמדת למודל כזה תידחה במקום להיזקף לחובת מי שאינו נוכח. השתמשו בו ל-CI ולאינטגרציות משותפות.",
-        "identitySelfHelp": "הרצות שמתחילות עם האסימון הזה נחשבות שלך ויכולות להשתמש במנוי האישי שלך ל-Claude / Codex / GLM. כל קריאה כזו חייבת לשלוח גם את הסיסמה האישית שלך בכותרת X-Personal-Password; היא לעולם אינה נשמרת. השתמשו בו להרצות headless משלכם."
+        "identitySelfHelp": "הרצות שמתחילות עם האסימון הזה נחשבות שלך ויכולות להשתמש במנוי האישי שלך ל-Claude / Codex / GLM. כל קריאה כזו חייבת לשלוח גם את הסיסמה האישית שלך בכותרת X-Personal-Password; היא לעולם אינה נשמרת. השתמשו בו להרצות headless משלכם.",
+        "reach": "סביבות עבודה",
+        "reachHelp": "באילו סביבות עבודה האסימון הזה יכול לפעול. אסימון שמגיע ליותר מסביבה אחת מציין את סביבת העבודה בכל קריאה בכותרת x-cat-factory-workspace.",
+        "reachThis": "סביבת העבודה הזו בלבד",
+        "reachAll": "כל סביבות העבודה בחשבון",
+        "reachSelected": "סביבות עבודה נבחרות",
+        "reachPick": "בחירת סביבות עבודה"
       },
       "scopes": {
         "read": "קריאה בלבד",

package/i18n/locales/it.json

@@ -842,7 +842,9 @@
         "createdByKey": "la chiave API {id}",
         "revoke": "Revoca token",
         "boundToYou": "Il tuo abbonamento",
-        "boundToOther": "Abbonamento di {user}"
+        "boundToOther": "Abbonamento di {user}",
+        "reachAll": "Tutti gli spazi di lavoro",
+        "reachCount": "{count} spazi di lavoro"
       },
       "add": {
         "heading": "Crea un token",
@@ -856,7 +858,13 @@
         "identitySystem": "Questo spazio di lavoro (token di sistema)",
         "identitySelf": "Io (token personale)",
         "identitySystemHelp": "Le esecuzioni avviate con questo token appartengono allo spazio di lavoro e non sono attribuite a nessuna persona. Non può usare l'abbonamento personale Claude / Codex / GLM di nessuno: un'attività fissata su uno di quei modelli viene rifiutata anziché addebitata a chi non c'è. Usalo per la CI e le integrazioni condivise.",
-        "identitySelfHelp": "Le esecuzioni avviate con questo token sono attribuite a te e possono usare il tuo abbonamento personale Claude / Codex / GLM. Ogni chiamata deve inviare anche la tua password personale nell'intestazione X-Personal-Password; non viene mai memorizzata. Usalo per le tue esecuzioni headless."
+        "identitySelfHelp": "Le esecuzioni avviate con questo token sono attribuite a te e possono usare il tuo abbonamento personale Claude / Codex / GLM. Ogni chiamata deve inviare anche la tua password personale nell'intestazione X-Personal-Password; non viene mai memorizzata. Usalo per le tue esecuzioni headless.",
+        "reach": "Spazi di lavoro",
+        "reachHelp": "Su quali spazi di lavoro questo token può agire. Un token che ne raggiunge più di uno indica lo spazio di lavoro a ogni chiamata nell’header x-cat-factory-workspace.",
+        "reachThis": "Solo questo spazio di lavoro",
+        "reachAll": "Tutti gli spazi di lavoro dell’account",
+        "reachSelected": "Spazi di lavoro selezionati",
+        "reachPick": "Scegli gli spazi di lavoro"
       },
       "scopes": {
         "read": "Sola lettura",
@@ -2603,7 +2611,16 @@
       },
       "failingRun": "{kind} · {at}",
       "failingRunsMore": "altre {count} non mostrate",
-      "failingRunGone": "Questa esecuzione non è più caricata e non ha alcuna attività da aprire."
+      "failingRunGone": "Questa esecuzione non è più caricata e non ha alcuna attività da aprire.",
+      "goTo": {
+        "review": "Rivedi",
+        "answer": "Rispondi",
+        "test": "Testa",
+        "confirm": "Conferma",
+        "triage": "Smista",
+        "choose": "Scegli",
+        "open": "Apri"
+      }
     },
     "aiProvidersBanner": {
       "setup": {
@@ -6425,7 +6442,8 @@
         "delegated_claim_missing": "Questo passo non ha lavoro esterno da controllare",
         "thread_busy": "Questa discussione sta ancora rispondendo",
         "draft_conflict": "Questa bozza è cambiata",
-        "session_stale": "La pull request è andata avanti"
+        "session_stale": "La pull request è andata avanti",
+        "cursor_expired": "Il feed delle modifiche ha superato questo cursore"
       },
       "description": {
         "dependencies_unmet": "Questa attività dipende da altre non ancora completate. Completale o sbloccale, poi avviala di nuovo.",
@@ -6485,7 +6503,8 @@
         "delegated_claim_missing": "Manca la registrazione di ciò che l’esecuzione ha inviato all’esecutore esterno, quindi non c’è nulla da interrogare. L’esecutore in sé non ha alcun problema. Ricarica l’esecuzione e rilancia il passo se resta bloccato.",
         "thread_busy": "La domanda precedente in questa discussione non ha ancora una risposta. Attendi la risposta o chiedi in un'altra discussione.",
         "draft_conflict": "Questa bozza di commento è stata modificata, pubblicata o scartata da quando l'hai caricata. Ricarica le bozze e ripeti la modifica.",
-        "session_stale": "Sono arrivati nuovi commit dopo la preparazione di questa revisione, quindi le bozze potrebbero puntare alle righe sbagliate. Aggiorna la revisione, controlla le bozze e poi pubblica."
+        "session_stale": "Sono arrivati nuovi commit dopo la preparazione di questa revisione, quindi le bozze potrebbero puntare alle righe sbagliate. Aggiorna la revisione, controlla le bozze e poi pubblica.",
+        "cursor_expired": "Le modifiche successive a questo cursore non sono più conservate. Acquisisci una nuova istantanea della directory, poi segui il feed dalla posizione che riporta."
       },
       "action": {
         "connectGitHub": "Collega GitHub",

package/i18n/locales/ja.json

@@ -732,7 +732,8 @@
         "delegated_claim_missing": "このステップには確認できる外部の処理がありません",
         "thread_busy": "このスレッドはまだ回答中です",
         "draft_conflict": "この下書きは変更されています",
-        "session_stale": "プルリクエストが更新されています"
+        "session_stale": "プルリクエストが更新されています",
+        "cursor_expired": "変更フィードがこのカーソルを過ぎました"
       },
       "description": {
         "dependencies_unmet": "このタスクは、まだ完了していない他のタスクに依存しています。それらを完了または解除してから、もう一度開始してください。",
@@ -792,7 +793,8 @@
         "delegated_claim_missing": "外部エグゼキューターに何を送ったかという実行の記録が失われているため、ポーリングする対象がありません。エグゼキューター自体に問題はありません。実行を再読み込みし、まだ止まったままならステップを再実行してください。",
         "thread_busy": "このスレッドの前の質問にまだ回答がありません。回答を待つか、別のスレッドで質問してください。",
         "draft_conflict": "読み込んだ後に、このコメントの下書きが編集、投稿、または破棄されました。下書きを再読み込みして、もう一度変更してください。",
-        "session_stale": "このレビューの準備後に新しいコミットが追加されたため、下書きが誤った行を指している可能性があります。レビューを更新し、下書きを確認してから投稿してください。"
+        "session_stale": "このレビューの準備後に新しいコミットが追加されたため、下書きが誤った行を指している可能性があります。レビューを更新し、下書きを確認してから投稿してください。",
+        "cursor_expired": "このカーソル以降の変更はもう保持されていません。ディレクトリの新しいスナップショットを取得し、その位置からフィードを追ってください。"
       },
       "action": {
         "connectGitHub": "GitHub に接続",
@@ -2476,7 +2478,16 @@
       },
       "failingRun": "{kind} · {at}",
       "failingRunsMore": "他に {count} 件（非表示）",
-      "failingRunGone": "この実行はすでに読み込まれておらず、開けるタスクもありません。"
+      "failingRunGone": "この実行はすでに読み込まれておらず、開けるタスクもありません。",
+      "goTo": {
+        "review": "レビュー",
+        "answer": "回答",
+        "test": "テスト",
+        "confirm": "確認",
+        "triage": "仕分け",
+        "choose": "選択",
+        "open": "開く"
+      }
     },
     "aiProvidersBanner": {
       "setup": {
@@ -3732,7 +3743,9 @@
         "createdByKey": "APIキー {id}",
         "revoke": "トークンを取り消す",
         "boundToYou": "あなたのサブスクリプション",
-        "boundToOther": "{user} のサブスクリプション"
+        "boundToOther": "{user} のサブスクリプション",
+        "reachAll": "すべてのワークスペース",
+        "reachCount": "{count} 個のワークスペース"
       },
       "add": {
         "heading": "トークンを作成",
@@ -3746,7 +3759,13 @@
         "identitySystem": "このワークスペース（システムトークン）",
         "identitySelf": "自分（個人トークン）",
         "identitySystemHelp": "このトークンで開始した実行はワークスペースに属し、個人には紐づきません。誰の個人 Claude / Codex / GLM サブスクリプションも利用できないため、それらのモデルを指定したタスクは、不在の相手に課金される代わりに拒否されます。CI や共有連携にはこちらを使ってください。",
-        "identitySelfHelp": "このトークンで開始した実行はあなたのものとして扱われ、あなたの個人 Claude / Codex / GLM サブスクリプションを利用できます。その際は毎回のリクエストで X-Personal-Password ヘッダーに個人パスワードを送る必要があります。パスワードは保存されません。自分のヘッドレス実行にはこちらを使ってください。"
+        "identitySelfHelp": "このトークンで開始した実行はあなたのものとして扱われ、あなたの個人 Claude / Codex / GLM サブスクリプションを利用できます。その際は毎回のリクエストで X-Personal-Password ヘッダーに個人パスワードを送る必要があります。パスワードは保存されません。自分のヘッドレス実行にはこちらを使ってください。",
+        "reach": "ワークスペース",
+        "reachHelp": "このトークンが操作できるワークスペース。複数のワークスペースに届くトークンは、各呼び出しで x-cat-factory-workspace ヘッダーにワークスペースを指定します。",
+        "reachThis": "このワークスペースのみ",
+        "reachAll": "アカウント内のすべてのワークスペース",
+        "reachSelected": "選択したワークスペース",
+        "reachPick": "ワークスペースを選択"
       },
       "scopes": {
         "read": "読み取り専用",