@epoch-agent/infra 0.2.0 → 0.3.1

package/dist/locales/en.yaml

@@ -249,6 +249,10 @@ web:
   mkdir_parent_not_absolute: 'the location to create in must be an absolute path: {parent}'
   mkdir_bad_name: 'the directory name must be a single segment with no path separators, and cannot be . or ..: {name}'
   mkdir_failed: 'could not create that directory: {path}'
+  pick_prompt: Choose a workspace directory
+  pick_unavailable: 'this machine cannot open a system directory dialog: it is only enabled when the server and the browser are on the same machine (loopback bind, not started over ssh, macOS or Windows) — use the built-in browser instead'
+  pick_busy: a directory dialog is already open — go answer it (this window may be covering it)
+  pick_failed: 'the system directory dialog could not be opened: {detail}'
   plan_mode_unavailable: this process has no plan mode (the permission layer did not start)
   plan_mode_bad_action: action must be one of {actions}
   permission_unavailable: this process has no permission layer, so the level cannot be changed (what you see is the value from the config file)
@@ -260,7 +264,7 @@ web:
   rewind_bad_overwrite: overwrite must be a list of file paths (the ones the user confirmed one by one); omit the field entirely if there is nothing to overwrite
   rewind_no_checkpoint: no checkpoint for turn {turn}
   settings_write_bad_request: the body needs key (the dotted path of the setting), layer (one of {layers}) and value (string / number / boolean)
-  settings_write_unknown_key: that key cannot be edited here. This path writes model and maxTurns only — every other setting has just the built-in and user layers, and putting it in a settings file does nothing
+  settings_write_unknown_key: 'that key cannot be written this way: either it is not on the writable list at all (the fallback chain, for one — it is an ordered chain, not a scalar), or the key only writes to the user layer while the request asked for project-local. The project layers accept permissions / model / maxTurns only; anything else lands as an "unknown setting" in the startup diagnostics'
   settings_write_bad_value: that value is outside this setting's domain (maxTurns must be a positive integer, for one), so nothing was written
   settings_write_unwritable: this layer does not recognise how {path} is written (or the file is already broken), so it was left alone — please edit that file yourself
   settings_write_io: 'writing {path} failed: possibly no write permission, or the directory could not be created'
@@ -268,6 +272,8 @@ web:
   mcp_unknown_server: This process has no MCP server named "{name}" — connections are built from mcp.json at startup, so the list you are holding may be stale. Refresh and look again.
   skill_unknown: No skill named "{name}" — the capability page list may be stale. Refresh and look again.
   provider_unknown: No provider named "{name}" is supported — the selectable set is a fixed list, so the one you are holding may be stale. Refresh and look again.
+  provider_key_not_applicable: '{name} does not use an API key — one stored here would never be read, and that provider already works as is'
+  provider_key_empty: No key received — paste it into the box and save. (There is no way to revoke an already-stored key from here yet; delete it from ~/.epoch or your keychain.)
   mcp_add_lan_exposed: 'MCP servers cannot be added in this mode — the server was bound outside the loopback interface with --host, so we cannot tell whether the browser sending this request is on this machine. Adding one writes "which executable to launch" into mcp.json; that server is started right away, and every future epoch run on this machine (including the CLI and the TUI) starts it too. Two ways forward: edit that file directly on the machine running the server, or drop --host and restart.'
   mcp_add_bad_transport: Transport must be one of stdio / sse / http
   mcp_add_bad_name: The server name "{name}" cannot be used — it becomes part of the tool name verbatim, so only names starting with a letter or digit and made of letters, digits, _ and - are accepted (48 max). A hand-written mcp.json is not subject to this; only names added from the UI are.
@@ -301,6 +307,17 @@ web:
   reference_store_unavailable: This machine has no session database (SQLite did not come up), so no historical session can be referenced
   file_candidates_no_workspace: This session has no workspace bound, so no file list can be offered — pick a directory from the bar under the input box first
   file_list_unavailable: The workspace file list could not be produced (no .git and not a readable directory), so completion is unavailable — typing the path still attaches the file
+  file_view_no_workspace: This session has no workspace bound, so no file can be shown — pick a directory from the bar under the input box first
+  file_view_missing_path: No file was named (path is missing)
+  file_view_denied: That file is outside the workspace, or a permission rule blocks it — what the model cannot read is not readable here either
+  file_view_missing: That file is no longer there
+  file_view_not_a_file: That is a directory, not a file
+  file_view_unreadable: That file could not be read (permission bits, a write in progress, or a disk problem)
+  file_view_too_large: That file is too large to view in place (limit {max} bytes) — open it with the default app, or download it
+  file_view_not_text: That is not a text file, so there is no body to fetch — images, PDFs and media go through the bytes route
+  file_open_extension_not_allowed: That kind of file is not handed to a system app — code and text are viewable in place, and "opening" an archive would extract it
+  file_open_not_same_machine: This browser is not on the machine running the server, so any window would open on someone else screen
+  file_open_launch_failed: The system app did not start
   ui:
     conn:
       connecting: Connecting
@@ -327,10 +344,14 @@ web:
       cav_no_tools: switched, but {model} does not support tool calls — it can only chat, and cannot read or write files
       pick_provider: Provider
       pick_provider_none: Pick one…
+      pick_model: Model name
+      suggest_open: See which models were found
       provider_no_key: '{label} (no key configured)'
       probe_probing: Asking {provider} which models it has… no need to wait — you can just type one above.
       probe_no_key: No key configured for {provider}, so its model list cannot be fetched. Set {env}, or run epoch model.
       probe_no_key_bare: No key configured for {provider}, so its model list cannot be fetched. Run epoch model to set one up.
+      probe_no_key_here: No key configured for {provider}, so its model list cannot be fetched — fill in the API Key box above.
+      key_goto: Configure it in settings
       probe_failed_cache: Could not reach {provider} (network / bad key / that base URL has no /models). Below is what was fetched last time, which may be stale — you can also just type a name.
       probe_failed_static: Could not reach {provider} (network / bad key / that base URL has no /models). Below is the built-in list, which may be stale — you can also just type a name.
       probe_empty: '{provider} returned no model names at all, and the built-in list is empty too — just type one.'
@@ -338,11 +359,22 @@ web:
       suggest_note: These are fetched suggestions, not the full set — new or self-hosted models will not be here. You can still just type one.
       refresh: Re-fetch
       refresh_hint: Bypass the cache and ask this provider again
+      key_label: API Key
+      key_placeholder: Paste a key here
+      key_save: Save key
+      key_saving: Saving key…
+      key_show: Show
+      key_hide: Hide
+      key_has: 'Configured: {hint} ({env}). Saving a new one overwrites it.'
+      key_none: This key goes into the system keychain when one is available, otherwise into ~/.epoch/.env (mode 0600). It is stored as {env}.
+      key_saved_secure: Stored in {backend} (encrypted). The model list has been re-fetched with the new key.
+      key_saved_plain: ⚠️ The system keychain was unavailable, so this key was stored in plaintext at {path} (mode 0600). Anyone who can read that file on this machine has the key.
     newsession:
       open: New session
     dirpick:
       back: Back
       anchors: Common places
+      anchors_detail: Home, the server process directory, and workspaces you have visited
       up: Up one level
       loading: Loading…
       empty: No subdirectories here — pick this one, or type a path below
@@ -350,7 +382,10 @@ web:
       show_hidden: Show hidden directories (starting with .)
       show_hidden_count: Show hidden directories (starting with ., {count} here)
       unreadable: 'no permission to enter this directory: {path}'
-      into: Enter {name}
+      into_of: Enter {name} ({path})
+      use: Use {name}
+      use_here: Use this folder
+      use_here_of: 'Use this folder: {path}'
       known: visited
       manual_label: Or type an absolute path
       manual_hint: e.g. /Users/you/work/repo
@@ -363,14 +398,10 @@ web:
       title: What would you like to do?
     sidebar:
       search: Search sessions
-      capability: Identities · Skills · Connectors
-      plugins: Plugins
       automation: Automation
       automation_pending: '{count} scheduled tasks are missing a grant; they will stall again on the next run'
       settings: Settings
-      session: Session
-      usage_session: Session usage
-      usage_run: Last run usage
+      host_menu: Host menu
       cost: Spend
       cost_of: ~${spent} / ${limit}
       cost_est: Estimate
@@ -386,6 +417,7 @@ web:
       running: Running
       updated_at: Last active
       count: '{count} sessions'
+      new_in_space: New session in “{name}”
       empty: No sessions yet
       no_match: No matching sessions
       acts: Actions for “{title}”
@@ -457,6 +489,18 @@ web:
       clip_lines: Only the first {shown} lines are shown; this file has {total} lines.
       clip_chars: Cut off on line {line} — that line is too long. This file has {total} lines.
       binary_note: These files cannot be viewed here — open them with the program your system uses.
+    file:
+      loading: Opening…
+      denied: That file is outside the workspace, or a permission rule blocks it — what the model cannot read is not viewable here either.
+      missing: That file is no longer there.
+      not_a_file: That is a directory, not a file.
+      too_large: That file is too large to view here.
+      unreadable: That file could not be read.
+      no_answer: The server gave no answer for that path.
+      no_session: No session yet, so no file can be shown.
+      opaque: The browser cannot render this kind of file. Open it with the default app on your machine, or download it.
+      open_with_app: Open with default app
+      download: Download
     plan:
       empty: No approved plan in this session yet
       empty_hint: A plan the model hands in has to be approved once on the panel above the composer; only the approved one stays here.
@@ -506,7 +550,7 @@ web:
       dismiss: Got it
       session_gone: This conversation is gone on the server — most likely it restarted, and a restart starts a fresh session. This one is not coming back, but you can pick up in the new one.
       session_gone_open: Go to the current session
-      session_gone_stuck: This conversation is gone on the server, and right now it cannot even tell us which session is still usable — the server process has most likely stopped. Check on it in your terminal.
+      session_gone_stuck: This conversation is gone on the server.
     thread:
       thinking_label: Reasoning
       head_estimate: expected {tokens} tokens
@@ -539,6 +583,8 @@ web:
       art_no_file: Not spooled to disk — this artifact cannot be opened.
       art_download: Download {name}
       art_download_any: Download this artifact
+      user_image_alt: Image attached to this message ({mediaType})
+      user_image_alt_any: Image attached to this message
       expand: Expand {count} more lines
       collapse: Collapse
       todo_title: Delivery checklist
@@ -662,6 +708,7 @@ web:
       stalled: “{title}” was going in circles and stopped
       aborted: “{title}” was stopped mid-run
       filtered: “{title}” was refused by the model
+      compliance: “{title}” ran into a content compliance limit
       budget: “{title}” hit the budget cap and stopped early
       failed: “{title}” hit an error
       go: View
@@ -686,6 +733,9 @@ web:
       placeholder_gone: This conversation is gone on the server; there is nothing to send to
       hint_queue: to queue
       send: Send
+      usage_session: Session
+      usage_run: Last run
+      usage_detail: '{scope} usage: {up}↑ {down}↓'
       commands_label: Slash commands
       command_warnings: 'A few things to know about how /{name} expanded:'
       builtin_notice: /{name}
@@ -705,7 +755,8 @@ web:
       workspace_pick_note: The list is the directories recently used on this machine. To start a session somewhere new, run epoch there once first.
       workspace_browse: Open a local folder…
       workspace_browse_detail: Walk down to a directory, or type an absolute path (lists directories on the machine running epoch)
-      permission: '{level} permissions'
+      workspace_browse_native: Opens a system dialog (on the machine running epoch)
+      permission: 'Permissions: {level}'
       plan_mode: Plan mode
       plan_on_hint: 'Enter plan mode: the model researches read-only and hands you a plan to approve; it touches no files meanwhile'
       plan_off_hint: Leave plan mode and go back to the permission level you were on
@@ -757,6 +808,10 @@ web:
       lvl_bypass: Skip every check
       lvl_bypass_detail: Nothing is ever asked, and the whole rail turns red
       blocked_managed: This machine has enterprise managed settings, and they turn off the "Skip every check" level. See Settings › Security centre for details
+      keep_env_pinned: 'This level applies to the current run only: EPOCH_PERMISSION overrides it, so the next start will use that instead'
+      keep_unwritable: 'This level applies to the current run only: your config file''s layout isn''t one this path recognises, so it was left alone'
+      keep_io: 'This level applies to the current run only: the config file could not be written (read-only disk, or no permission)'
+      keep_no_config: 'This level applies to the current run only: this process cannot tell where your user config file is'
     fatal:
       unauthorized: No access credential
       unauthorized_hint: Go back to the terminal running epoch web and reopen the tokenised URL it printed.
@@ -768,6 +823,7 @@ web:
       pane_model: Model & provider
       pane_memory: Memory & context
       pane_spend: Usage & spend
+      history_only: 'This session is history only — no engine is running it yet. Opening an old session just replays the conversation; the engine is built when you send your next message. This pane asks that engine for its current state, so there is nothing to show yet: go back to the session, send a message, and it will be picked back up.'
       pane_budget: Budget
       pane_tools: Tools
       pane_about: About
@@ -793,8 +849,6 @@ web:
       none_recorded: This conversation has run, but the per-turn records were never written down (the session predates the change that records them). The numbers will not come back.
       g_total: Totals
       g_turns: Per turn
-      total: Across {turns} turns, {tokens} tokens in total, about {cost}.
-      total_tokens: Across {turns} turns, {tokens} tokens in total.
       total_unmeasured: This session ran {turns} turns, but no usage was ever reported, so there is not even a token total.
       partial: The amount above only covers {priced} of those turns — the other {unpriced} reported usage, but the model they ran on has no pricing data. In the table below they are the rows with an empty cost cell.
       unknown: 'The amount is unknown, not zero: the models used in these turns have no pricing data on this machine, so only the provider knows how much was really spent.'
@@ -805,7 +859,7 @@ web:
       tok_output: Output
       tok_reasoning: 'Of which reasoning: {n}. It is already included in the number above.'
       tok_cache_note: Cache hits are priced separately, usually far below the full rate — the more hits, the cheaper the same amount of context.
-      col_turn: Turn
+      col_turn: Turns
       col_model: Model
       col_tokens: Tokens
       col_cost: Cost
@@ -820,6 +874,7 @@ web:
       why: Why this value
       chain_win: wins
       g_other: Other
+      overridable_sum: Which keys upper layers can override
       overridable: 'Only these keys can be overridden by the project, project-local, command-line or managed layers: {keys}. Every other setting has just two layers, built-in and user — putting one in .epoch/settings.json does nothing, and startup diagnostics will report it as an unknown config key.'
       overridable_perm: The permissions entry on that list is three lists (allow / ask / deny) merged as a union rather than an override, so its provenance is per rule — see Security › Permission rules.
       managed_locked: This one is set by the managed settings on this machine; changing it at the user or project level has no effect. That file is not writable by an ordinary user — ask an administrator.
@@ -828,12 +883,13 @@ web:
       save: Save
       new_value: New value
       write_layer: Write to
+      write_file: Into file
       dirty: Unsaved
       futile_shadowed: 'Writing to {layer} will have no effect: {by} sets this too, and it ranks higher, so on load it overrides what you write here. To make it take effect, write to {by} or above.'
       futile_untrusted: 'This workspace is not trusted yet, so settings in {layer} are dropped wholesale on load (deny rules are the one exception) — writing there does nothing. Trust the directory under Security › Workspace & trust first, or write to the user layer instead: it does not go through the trust gate.'
       wrote: 'Written to {layer}: {value}'
       wrote_stale: This process read the config once at startup and never re-reads it, so it is still using {value} — restarting epoch web is what switches it to the value you just wrote. Starting a new session will not do it either; the config is one per process.
-      lede_model: 'The model and provider this process is using right now. To change: edit ~/.epoch/config.yaml, or run epoch model.'
+      lede_model: The model this process is using right now. Changing a row here writes to ~/.epoch/config.yaml. The provider and API key are not on this screen — run epoch model for those.
       k_model: Main model
       k_models_utility: Utility model
       h_models_utility: Used for chores like compacting context and titling sessions. Unset means everything goes to the main model.
@@ -841,7 +897,7 @@ web:
       k_fallback_providers: Fallback chain
       h_fallback_providers: Tried in this order when the main provider is unreachable.
       lede_memory: The first two decide how much fits in a turn and how many steps it may take; the last two decide what happens when it no longer fits. Setting a context window larger than the model really has buys you a 400.
-      k_context_length: Context window
+      k_context_length: Context window (tokens)
       h_context_length: Only used as a fallback when the model metadata cannot be read; when it can, metadata wins and a configured value has no effect. The compression line below uses the window the engine actually runs on.
       k_max_turns: Max steps per turn
       h_max_turns: How many tool calls the model may make in one turn. On reaching the cap it stops and finishes its answer.
@@ -852,8 +908,7 @@ web:
       ctx_line: With this configuration, compaction starts once the prompt reaches {tokens} tokens — {percent}% of the {window}-token context window.
       ctx_line_caveat: That is the line itself. Just after a compaction, or once several compactions in a row have failed, crossing it will not compact yet.
       ctx_off: Auto-compaction is off. When a long session hits the context window there is no automatic rescue — that turn simply fails, and the context does not shrink on its own. Manual /compact is unaffected by this switch and still works.
-      ctx_no_switch: 'These two rows cannot be changed here, same as the two above: only three keys can be overridden by project-level config (the list below), and compaction is not one of them — otherwise a repository could quietly let long sessions opened inside it run into the window. Change it by editing ~/.epoch/config.yaml yourself:'
-      ctx_restart: Restart the epoch web process for this to take effect — it reads the config once at startup and never re-reads it.
+      ctx_not_overridable: 'These two rows can only be written to the user level: only three keys can be overridden by project-level config (the list below), and compaction is not one of them — otherwise a repository could quietly let long sessions opened inside it run into the window.'
       budget_title: Where it is going right now
       budget_used: '{used} used — {percent}% of the {limit} window.'
       budget_used_only: '{used} used. This model has no known context window, so there is no percentage to report.'
@@ -863,13 +918,21 @@ web:
       budget_compacting: Compacting…
       budget_compact_hint: Rewrites earlier messages into a summary to free up window for what comes next. It sends one model request (so it costs money), but not a single line of this conversation is removed — only what gets sent to the model next turn changes.
       lede_budget: Amounts only appear in the UI once a cap is configured. With no cap these rows read "Not set", which is also the default.
-      k_budget_max_cost: Spend cap
+      k_budget_max_cost: Spend cap (USD)
+      h_budget_max_cost: 'Accumulates per session — not a per-request cap — and --resume picks the count back up. The turn that crosses the line is not charged first and reported after: the gate stops it before the next request goes out.'
       k_budget_max_tokens: Token cap
       h_budget_max_tokens: With both rulers configured, the gate reports whichever is tighter.
       k_budget_warn_at: Warn at
       h_budget_warn_at: Percent. Warns once, on crossing — not every turn.
       k_budget_unknown_pricing: When the model has no pricing data
       h_budget_unknown_pricing: block stops the call, warn lets it through with a warning. With no pricing data the cost is "unknown", not 0, and the two must be handled separately.
+      ex_budget_max_cost: e.g. 5
+      ex_budget_max_tokens: e.g. 1000000
+      ex_budget_warn_at: e.g. 80
+      blocked_empty: This cannot be empty. Clearing it is not the same as removing the setting — this path has no delete-key at all; to get the default back, delete that line in the file named above.
+      blocked_pick: Pick one from the row above.
+      blocked_number: This takes a number, and "{text}" does not read as one. No unit, no thousands separators.
+      blocked_boolean: This takes exactly true or false — those are the two literals that go into the yaml.
     sec:
       lede: What this agent can touch right now, and what is holding it back.
       no_session: 'No session yet. Three things here are bound per session: the workspace, its trust verdict, and the project-level policy directory that follows that trust — with no session there is no "which one" to answer.'
@@ -993,7 +1056,7 @@ web:
       audit_code_headless_unauthorized: Non-interactive, not pre-authorized
       audit_code_user_approved: You approved it
       audit_code_user_denied: You denied it
-      perm_where: 'Change the top one from the row under the composer — it takes effect immediately. The bottom one is where new sessions start: edit ~/.epoch/config.yaml and restart.'
+      perm_where: 'Both come from the row under the composer: picking a level takes effect immediately and is recorded as the starting point below (written to ~/.epoch/config.yaml), which new sessions and the next start begin from.'
       perm_now: Now
       perm_default: Default
       perm_now_changed: (changed in this session)
@@ -1065,7 +1128,7 @@ web:
       skill_unindexed: not in the index
       skills_capped_note: '{count} skills are held out of the index by `skills.maxIndexed`: they cost nothing per turn, and the model cannot list them either. Raise or remove that setting to get them back.'
       skills_role_note: '{count} skills are outside this session identity''s skill allowlist, so they are not indexed. ⚠️ That is not a lock: the bodies stay readable — narrowing is a context budget, not reachability.'
-      no_toggle: 'There is no "turn this skill off" switch: as long as the file is in the directory, it gets picked up. To drop one, move its directory away; to just save context, `skills.maxIndexed` caps the index.'
+      no_toggle: 'There is no "turn this skill off" switch: as long as the file is in the directory, it gets picked up. To drop one, use Delete on its row — that removes its directory for good; to just save context, `skills.maxIndexed` caps the index.'
       import_entry: Import a skill
       import_title: Import a skill
       import_lede: Import from the machine running the server. Accepts a folder containing SKILL.md, a two-level category/name skill tree, a .zip of either, or a single .md with frontmatter.
@@ -1096,6 +1159,11 @@ web:
       skill_view_no_count: Looking at this will not affect its score — that tally only counts times the model actually used it.
       skill_truncated: This SKILL.md is large ({bytes} bytes in total); below is only the first stretch of it. Open the file directly to read the whole thing.
       skill_bytes: '{bytes} bytes in total'
+      skill_remove: Delete
+      skill_remove_ask: Delete {name}? Its whole directory goes with it, and this cannot be undone.
+      skill_remove_yes: Delete
+      skill_cancel: Cancel
+      skill_removed: 'Deleted {name}. This is the directory that was just removed:'
       plugins: Plugins
       plug_lede: 'A plugin is a bundle of extensions: slash commands, identities, skills, hooks, deny rules, MCP servers. Pick one from a marketplace already added on this machine — this page can only pick from that list; it cannot take a path and cannot upload a file.'
       plug_installed_head: Installed ({count})
@@ -1297,6 +1365,9 @@ web:
       how_to_block: To block a tool, add a deny rule to the permission table. Rules only count once they are in a config file, and this interface never writes config — the security centre shows which rules exist today and which layer each came from.
       goto_rules: Open the rule table
       mcp_note: Tools from MCP servers are in this table too, named mcp__<server>__<tool>. The Source column says which server each one came from.
+    tip:
+      what: What this is
+      about: About {name}
     about:
       loading: Reading…
       lede: When something goes wrong, paste a screenshot of this into the issue — it beats describing the symptoms.
@@ -1422,15 +1493,26 @@ web:
       remove_confirm: Delete "{name}"? Its registration in the OS scheduler goes with it. Run recordings are kept.
       form_new: New scheduled task
       form_edit: Edit scheduled task
+      g_what: What it does
+      g_what_note: The thing it runs when the time comes
+      g_where: Where it runs
+      g_where_note: Both optional — each has a definite default
+      g_when: When it runs
+      g_may: What it may do
+      g_may_note: This group decides which confirmations it presses for you at night
+      g_cost: How much it may spend
+      g_cost_note: Three limits; hitting any one stops the run
+      required: Required
       f_name: Name
       f_prompt: Prompt
       f_prompt_hint: What the agent should do when it fires. Say what it should leave behind — nobody will be there to ask.
       f_workdir: Workspace (optional)
-      f_workdir_hint: Absolute path on the server
-      f_workdir_note: Left empty, it runs in ~/.epoch/automation/<task id>/. It does **not** inherit any terminal's current directory.
+      f_workdir_note: Left empty, it runs in ~/.epoch/automation/<task id>/. It never inherits any terminal's current directory.
       f_workdir_default: ~/.epoch/automation/<task id>/
+      f_workdir_none: No specific workspace
       f_model: Model (optional)
       f_model_hint: Empty uses the configured one
+      f_model_provider_note: Whichever provider you pick is saved with the task and used when it fires. If that provider has no key on this machine at fire time, the run falls back to the default model and records a line about it.
       f_kind: Frequency
       k_daily: Daily
       k_weekly: Weekly
@@ -1446,11 +1528,14 @@ web:
       f_days_note: The 31st does not fire in short months — that is the native behaviour on both platforms.
       f_start: Active from (optional)
       f_end: Active until (optional)
+      f_window_note: Both ends are inclusive. Leave an end blank and that end is unbounded. Firings that fall outside the range are recorded as "skipped (outside active range)" and are not made up later.
+      f_window_once: A run-once task cannot carry an active range — it already is a single date, so these two cannot be filled in on this kind.
       f_permission: Permission level
       f_bypass_ack: 'I understand: this task will do anything without asking inside {workDir}, including deleting files and running arbitrary commands.'
       f_turns: Max turns
+      f_turns_hint: How many times the model may call a tool in one turn, 1 to 1000. On hitting the cap it stops and finishes its answer.
       f_timeout: Timeout (minutes)
-      f_timeout_note: The only ruler that catches "a command hung" — turns and spend both stop growing there.
+      f_timeout_note: The only ruler that catches "a command hung" — turns and spend both stop growing there. 24 hours at most.
       f_budget: Max spend per run (USD)
       f_budget_why: 'Required, and we give no default: nobody is watching this task, and a fake default would make "woke up to $40" our fault.'
       save_and_run: Save and run once
@@ -1800,6 +1885,8 @@ skill:
   import_bad_name_dots: A skill name cannot be . or ..
   import_bad_name_char: 'The skill name "{name}" contains characters that cannot be used in a directory name (< > : " / \ | ? * and control characters). The colon in particular separates the plugin/host prefix — a user-level skill taking it would masquerade as a plugin skill'
   import_bad_name_trailing: The skill name "{name}" ends with a dot or a space — on Windows such a directory can be created but not opened
+  remove_no_system: The skill system did not start this run — no skills are loaded in this process, so there is nothing to delete. Check the Skill entries in the startup diagnostics
+  remove_unknown: There is no skill named "{name}" — the list you are looking at may be stale; refresh it
 host_capabilities:
   loaded: '{namespace}: {roles} identity/identities, {skillDirs} skill directory/directories, {mcpServers} MCP server(s), {tools} tool(s) (the first two get the {namespace}: prefix, the last two get {namespace}__ — both end up inside a tool name, and tool names cannot contain a colon)'
   bad_role_name: Identity "{name}" has an invalid name (lowercase letters, digits and hyphens only, and it may not start with a hyphen); that one was skipped, the rest were injected as usual
@@ -1934,6 +2021,7 @@ mcp_write:
   invalid: the configuration is not valid
 mcp_config:
   invalid_json: 'Nothing was written — this content is not valid JSON: {why}'
+  stale_disk: nothing was written — ~/.epoch/mcp.json changed while this edit was being computed; read it again and redo the change
 role_write:
   bad_name: The identity name "{name}" cannot be used — lowercase letters, digits and hyphens only, and it may not start with a hyphen. This name is both the file name and the word used to delegate work (the `role` argument of delegate_task, the value of --agent), which is why it is validated strictly.
   taken: 'There is already an identity named "{name}" — pick another name. Nothing is overwritten and nothing is auto-renamed here: overwriting would delete the prose you wrote in that file, and renaming would make the word used to delegate work disagree with what you typed.'
@@ -2073,6 +2161,7 @@ provider:
   label_openai_compatible: OpenAI Compatible (generic adapter)
   response_format_with_tools: 'A single request cannot ask for both tools and responseFormat: the model either calls tools or emits one JSON document, pick one'
   response_format_dropped: '{model} did not honour this round''s forced-JSON constraint (the request was still sent), so this round''s output may not be JSON'
+  key_not_applicable: '{provider} does not use an API key — one stored here would never be read'
 utility:
   aborted: This one-shot completion was aborted before it was sent (not sent, not billed)
 terminal_setup:
@@ -3125,6 +3214,7 @@ untrusted:
   skipped: The workspace is not trusted, so project {what} were not loaded (epoch trust can trust this directory)
   what_commands: commands
   what_policy: policy rules
+  what_compliance: compliance lexicons
   what_skills: skills
   what_roles: roles
   hooks_tail: The workspace is not trusted, so project hooks were not loaded (epoch trust can trust this directory) — hooks run commands, and there is no "the narrowing part still applies" exception here
@@ -3181,6 +3271,40 @@ policy_load:
   not_kv: 'Neither [[rule]] nor key = "value"; ignored: {preview}'
   before_first_rule: '{key} appears before the first [[rule]]; ignored'
   rule_skipped: '{message}; this rule was skipped'
+compliance_cmd:
+  cmd_root: Self-check for the content compliance gate
+  cmd_check: Check whether a piece of text would be blocked, and which characters matched
+  cmd_status: Show the current state on this machine (switches, rule counts, per-category action)
+  arg_text: the text to check
+  opt_stdin: read from standard input (useful for checking a whole file)
+  need_text: Check what? Pass some text, or add --stdin to read from standard input
+  disabled: 'Content compliance is not enabled (compliance.enabled: false), so nothing is checked'
+  clean: 'Clean: nothing matched'
+  verdict: 'Verdict: {action}, {count} matches'
+  hit: '  [{category}] {action} <- {excerpt} (rule {rule})'
+  blocked: 'This is the block tier: on the input side the request is never sent (and never billed); with the output side enabled, the sentence that matched never reaches the screen'
+  released: 'After filtering: {text}'
+  status_enabled: 'Enabled: {enabled}'
+  status_rules: 'Rules: {active} active ({builtin} built-in + {user} from your lexicons)'
+  status_dir: 'User lexicon directory: {dir}'
+  status_scope: 'Channels: output {output} / input {input} / skip code {code}'
+  status_action: '  {category} -> {action}'
+  status_project_note: 'Note: project-level lexicons (<project root>/.epoch/compliance/) go through the workspace trust gate, and this command does not read them — a real session does'
+compliance:
+  category_sep: ', '
+  category:
+    sexual: sexual content
+    political: political / national security
+    hate: ethnic or racial discrimination
+    violence: violence and terrorism
+    illegal: illegal activity
+    self_harm: self-harm
+    privacy: personal sensitive data
+compliance_load:
+  dir_read_failed: 'Could not read the compliance lexicon directory: {reason}'
+  file_read_failed: 'Could not read it, so the whole file was skipped: {reason}'
+  unknown_file: 'The file name is not a category name, so the whole file was skipped. Known categories: {categories} (regexes go in <category>.regex.txt, exemptions in exempt.txt)'
+  bad_regex: 'The regex did not compile, so this entry was skipped: {reason}'
 skill_load:
   degraded: '{message}; loaded as if it had no frontmatter'
   not_a_map: The frontmatter is not key/value pairs (the top level has to be a YAML object); loaded as if it had no frontmatter
@@ -3283,7 +3407,12 @@ context_breakdown:
 agent_run:
   error: 'Error: {message}'
   images_unsupported: The current model does not support image input, so this request was cancelled (not sent, not billed). Switch to a vision-capable model (gpt-4o / claude-sonnet-4-6 / gemini-2.5-flash), or drop the {count} images and retry.
+  images_dropped: '{provider} dropped the {count} images in this turn (its own words: {feature}), so the model never saw them — do not trust this turn''s answer. The request was sent and billed. Most likely this provider''s SDK version cannot carry images yet, or this model does not actually accept them.'
+  images_dropped_provider_unknown: The current provider
   content_filter: The model refused to respond for safety reasons; try asking a different way.
+  compliance_output: This reply ran into a content compliance limit ({categories}), so output stopped.
+  compliance_input: Your message ran into a content compliance limit ({categories}); the request was not sent and nothing was billed.
+  compliance_input_masked: Your message contained wording that runs into a content compliance limit ({categories}), so it was masked before being sent — the model did not see the text exactly as it appears on your screen.
   stalled: 'Detected a loop: {info}. The task was terminated.'
   stall_info: '{tool}({args}) was called {count} turns in a row, which looks like a loop'
   max_turns: Reached the maximum of {max} turns; the task was terminated unfinished.
@@ -3472,6 +3601,7 @@ secret:
 infra_misc:
   shell_not_on_path: 'shell: the configured {kind} ({exe}) is not on PATH; fell back to cmd.exe'
   ripgrep_install_windows: winget install BurntSushi.ripgrep.MSVC (or scoop install ripgrep)
+  ripgrep_chmod_hint: chmod +x "{path}" — prefix with sudo if that directory is root-owned
   schema_failed: '{path} failed validation ({count} problems):\n{detail}'
   schema_more: '{count} more problems not listed'
   schema_unknown_key: Unknown setting, ignored (other settings still apply)
@@ -3517,6 +3647,9 @@ boot:
   managed_hooks_only: Managed enterprise settings turned on allowManagedHooksOnly, so neither user-level nor project-level hooks load ({path})
   policy_load_failed: loading failed (skipped)
   perm_rules: '{total} permission rules (allow {allow} / ask {ask} / deny {deny})'
+  compliance_ready: '{active} rules active ({builtin} built-in + {external} from lexicon files)'
+  compliance_off: 'not enabled (compliance.enabled: false)'
+  compliance_load_failed: the external lexicons could not be loaded, so only the built-in seed list is in use
   commands_all_failed: None of the {count} files could be loaded, so there are no usable custom commands
   command_allowed_tools: '{tools} in the allowed-tools of {name} do not exist and were ignored'
   tools_cost: '{count} tools ({split}) ≈ {tokens}k tokens/turn'
@@ -3526,6 +3659,7 @@ boot:
   shell_kind: '{kind} (terminal tool commands are handed to it)'
   plugin_register_failed: registration failed ({reason})
   ripgrep_missing: not installed, so file_search is unavailable ({hint})
+  ripgrep_not_executable: shipped but not executable, so file_search is unavailable for now ({hint})
   ripgrep_system: using the system rg
   ripgrep_builtin: using the bundled rg{version}
   mcp_none: not configured (~/.epoch/mcp.json is missing or empty)