@kenhkl/agent-moss 0.12.1 → 0.12.3

package/dist/static/index.html

@@ -279,12 +279,30 @@ body {
 </div>
 
 <script>
+// ===== i18n =====
+// 语言来源优先级：URL ?lang=en > ?lang=zh > 系统/文档语言。默认 zh。
+// en 模式下所有用户可见文案翻译为英文；数据契约 key（deny_write/critical/分类key/风险类型key）
+// 保持原样，它们是接口取值，翻错会破坏与后端对接。
+function detectLang() {
+  const params = new URLSearchParams(window.location.search);
+  const q = params.get('lang');
+  if (q === 'en' || q === 'zh') return q;
+  const docLang = (document.documentElement.lang || '').toLowerCase();
+  return docLang.indexOf('zh') === 0 ? 'zh' : 'zh'; // 默认中文
+}
+const LANG = detectLang();
+const isEn = LANG === 'en';
+/** t(zh, en)：中文为默认回退，en 模式下返回英文翻译。 */
+function t(zh, en) { return isEn ? (en != null && en !== '' ? en : zh) : zh; }
+function applyTitle() { document.title = t('AgentMoss 安全策略管控台', 'AgentMoss Policy Console'); }
+document.documentElement.lang = isEn ? 'en' : 'zh-CN';
+
 // ===== API client =====
 const TOKEN_KEY = 'am_console_token';
 function getToken() { return localStorage.getItem(TOKEN_KEY) || ''; }
 function authHeaders() {
-  const t = getToken();
-  return t ? { 'Authorization': 'Bearer ' + t } : {};
+  const t_ = getToken();
+  return t_ ? { 'Authorization': 'Bearer ' + t_ } : {};
 }
 async function api(path, opts = {}) {
   const res = await fetch('/console/api/' + path, {
@@ -292,9 +310,9 @@ async function api(path, opts = {}) {
     ...opts,
   });
   if (res.status === 401) {
-    const t = prompt('需要 Bearer token 访问安全策略管控台：');
-    if (t) { localStorage.setItem(TOKEN_KEY, t); return api(path, opts); }
-    throw new Error('未授权');
+    const t_ = prompt(t('需要 Bearer token 访问安全策略管控台：', 'Bearer token required to access the policy console: '));
+    if (t_) { localStorage.setItem(TOKEN_KEY, t_); return api(path, opts); }
+    throw new Error(t('未授权', 'Unauthorized'));
   }
   if (!res.ok) {
     const d = await res.json().catch(() => ({}));
@@ -305,53 +323,58 @@ async function api(path, opts = {}) {
 function apiPut(path, body) { return api(path, { method: 'PUT', body: JSON.stringify(body) }); }
 function apiPost(path, body) { return api(path, { method: 'POST', body: JSON.stringify(body) }); }
 function apiDelete(path, body) { return api(path, { method: 'DELETE', body: JSON.stringify(body) }); }
+/** 拉取并解包 env 覆盖映射（/api/env-overrides 返回 {overrides: {...}}，此处解出净映射）。 */
+async function loadEnvOverrides() {
+  const resp = await api('env-overrides');
+  return resp?.overrides || {};
+}
 
 let state = { config: {}, envOverrides: {}, currentPage: 'overview' };
 const expandedCats = new Set();
 let currentModalAction = null;
 
-// ===== 静态文案 =====
+// ===== 静态文案 / i18n 名称字典 =====
 const LAYER_NAMES = {
-  L1_heuristic: { name: 'L1 静态检测', desc: '正则/关键词匹配，仅看下一步动作' },
-  L2_logic_rules: { name: 'L2 逻辑规则', desc: 'read_before_write + 授权检测使用历史动作序列，敏感路径/危险模式仅匹配下一步' },
-  L3_llm_analysis: { name: 'L3 LLM 分析', desc: 'Skill 匹配 + LLM 语义判断' },
+  L1_heuristic: { name: t('L1 静态检测', 'L1 Heuristic Detection'), desc: t('正则/关键词匹配，仅看下一步动作', 'Regex/keyword matching; only inspects the next action') },
+  L2_logic_rules: { name: t('L2 逻辑规则', 'L2 Logic Rules'), desc: t('read_before_write + 授权检测使用历史动作序列，敏感路径/危险模式仅匹配下一步', 'read_before_write + authorization checks use historical action sequences; sensitive paths/dangerous patterns match only the next action') },
+  L3_llm_analysis: { name: t('L3 LLM 分析', 'L3 LLM Analysis'), desc: t('Skill 匹配 + LLM 语义判断', 'Skill matching + LLM semantic judgment') },
 };
 const L1_CATEGORY_NAMES = {
-  dangerous_commands: '⚡ 危险命令检测',
-  injection_detection: '🎯 注入攻击检测',
-  sensitive_path_access: '🛡️ 敏感路径访问',
-  user_custom: '🔧 用户自定义',
+  dangerous_commands: t('⚡ 危险命令检测', '⚡ Dangerous Commands'),
+  injection_detection: t('🎯 注入攻击检测', '🎯 Injection Attack Detection'),
+  sensitive_path_access: t('🛡️ 敏感路径访问', '🛡️ Sensitive Path Access'),
+  user_custom: t('🔧 用户自定义', '🔧 User Custom'),
 };
 const L2_CATEGORY_NAMES = {
-  intent_consistency: '🎯 意图一致性 📋对比原始意图',
-  password_modify_consent: '🔑 密码修改授权 📋涉及历史分析',
-  user_deletion_consent: '👤 用户删除授权 📋涉及历史分析',
-  read_before_write: '📄 读写一致性 📋涉及历史分析',
-  user_custom: '🔧 用户自定义',
+  intent_consistency: t('🎯 意图一致性 📋对比原始意图', '🎯 Intent Consistency 📋vs original intent'),
+  password_modify_consent: t('🔑 密码修改授权 📋涉及历史分析', '🔑 Password Modify Consent 📋uses history'),
+  user_deletion_consent: t('👤 用户删除授权 📋涉及历史分析', '👤 User Deletion Consent 📋uses history'),
+  read_before_write: t('📄 读写一致性 📋涉及历史分析', '📄 Read-before-Write 📋uses history'),
+  user_custom: t('🔧 用户自定义', '🔧 User Custom'),
 };
 const L3_CATEGORY_NAMES = {
-  file_operations: '📁 文件操作',
-  network_security: '🌐 网络安全',
-  persistence_supply_chain: '🔒 持久化/供应链',
-  intent_and_general: '🎯 意图/通用',
-  resource: '💻 资耗',
-  user_custom: '🔧 用户自定义',
+  file_operations: t('📁 文件操作', '📁 File Operations'),
+  network_security: t('🌐 网络安全', '🌐 Network Security'),
+  persistence_supply_chain: t('🔒 持久化/供应链', '🔒 Persistence/Supply Chain'),
+  intent_and_general: t('🎯 意图/通用', '🎯 Intent/General'),
+  resource: t('💻 资耗', '💻 Resource Exhaustion'),
+  user_custom: t('🔧 用户自定义', '🔧 User Custom'),
 };
 const RISK_TYPE_NAMES = {
-  script_execution: '脚本执行', file_access: '文件访问', data_exfiltration: '数据外泄',
-  privilege_escalation: '提权', persistence: '持久化后门', lateral_movement: '横向移动',
-  config_tampering: '配置篡改', supply_chain: '供应链', resource_exhaustion: '资源耗尽',
-  intent_deviation: '意图偏离',
+  script_execution: t('脚本执行', 'Script Execution'), file_access: t('文件访问', 'File Access'), data_exfiltration: t('数据外泄', 'Data Exfiltration'),
+  privilege_escalation: t('提权', 'Privilege Escalation'), persistence: t('持久化后门', 'Persistence Backdoor'), lateral_movement: t('横向移动', 'Lateral Movement'),
+  config_tampering: t('配置篡改', 'Config Tampering'), supply_chain: t('供应链', 'Supply Chain'), resource_exhaustion: t('资源耗尽', 'Resource Exhaustion'),
+  intent_deviation: t('意图偏离', 'Intent Deviation'),
 };
 const RISK_TOOLTIPS = {
-  critical: '严重：必须拒绝，不可逆破坏或提权操作',
-  high: '高危：强烈建议拒绝，需人工审核',
-  medium: '中危：需谨慎评估，结合意图判断',
-  low: '低危：常规操作，可按需放行',
+  critical: t('严重：必须拒绝，不可逆破坏或提权操作', 'Critical: must reject; irreversible damage or privilege escalation'),
+  high: t('高危：强烈建议拒绝，需人工审核', 'High: strongly recommend rejecting; requires human review'),
+  medium: t('中危：需谨慎评估，结合意图判断', 'Medium: evaluate carefully; judge with intent'),
+  low: t('低危：常规操作，可按需放行', 'Low: normal operation; may allow as needed'),
 };
-const DENY_MODE_LABELS = { deny_write: '仅拦截写入', deny_read: '仅拦截读取', deny_both: '读写均拦截' };
+const DENY_MODE_LABELS = { deny_write: t('仅拦截写入', 'Block Write Only'), deny_read: t('仅拦截读取', 'Block Read Only'), deny_both: t('读写均拦截', 'Block Both Read & Write') };
 
-function riskTypeName(t) { if (!t) return ''; return RISK_TYPE_NAMES[t] || t; }
+function riskTypeName(tt) { if (!tt) return ''; return RISK_TYPE_NAMES[tt] || tt; }
 function denyModeLabel(m) { return DENY_MODE_LABELS[m] || m; }
 function denyModeClass(m) { return ({ deny_write: 'deny-write', deny_read: 'deny-read', deny_both: 'deny-both' })[m] || ''; }
 
@@ -363,23 +386,23 @@ function riskBadge(level) {
   const tip = RISK_TOOLTIPS[level] || RISK_TOOLTIPS.low;
   return `<span class="ag-badge ${cls}" title="${tip}">${level || 'low'}</span>`;
 }
-function riskTypeBadge(t) {
-  if (!t) return '';
-  return `<span class="ag-risk-type ag-rt-${escapeHtml(t)}" title="风险类型: ${escapeHtml(t)}">${escapeHtml(riskTypeName(t))}</span>`;
+function riskTypeBadge(tt) {
+  if (!tt) return '';
+  return `<span class="ag-risk-type ag-rt-${escapeHtml(tt)}" title="${t('风险类型: ', 'Risk type: ')}${escapeHtml(tt)}">${escapeHtml(riskTypeName(tt))}</span>`;
 }
 function builtinBadge(builtin) {
-  return builtin !== false ? '<span class="ag-badge ag-badge-builtin">内置</span>' : '<span class="ag-badge ag-badge-custom">自定义</span>';
+  return builtin !== false ? '<span class="ag-badge ag-badge-builtin">' + t('内置', 'Built-in') + '</span>' : '<span class="ag-badge ag-badge-custom">' + t('自定义', 'Custom') + '</span>';
 }
-function removedBadge(r) { return r ? '<span class="ag-badge ag-badge-removed" title="此规则已从当前默认规则集移除，仅作历史保留；如需可手动启用">已移除</span>' : ''; }
+function removedBadge(removed) { return removed ? '<span class="ag-badge ag-badge-removed" title="' + t('此规则已从当前默认规则集移除，仅作历史保留；如需可手动启用', 'This rule has been removed from the current default set and is kept for history; you can enable it manually') + '">' + t('已移除', 'Removed') + '</span>' : ''; }
 function denyModeBadge(mode) {
   const m = mode || 'deny_write';
-  return `<span class="ag-deny-mode ${denyModeClass(m)}" title="拦截模式: ${denyModeLabel(m)}">${denyModeLabel(m)}</span>`;
+  return `<span class="ag-deny-mode ${denyModeClass(m)}" title="${t('拦截模式: ', 'Interception mode: ')}${denyModeLabel(m)}">${denyModeLabel(m)}</span>`;
 }
 function sourceDenyModeBadges(rule) {
   if (rule.builtin !== false && rule.source_deny_mode) {
-    let h = `<span class="ag-source-badge" title="源码出厂的原始拦截模式。当前模式与之不同时表示已被用户覆盖">原始: ${denyModeLabel(rule.source_deny_mode)}</span>`;
+    let h = `<span class="ag-source-badge" title="${t('源码出厂的原始拦截模式。当前模式与之不同时表示已被用户覆盖', 'Source default interception mode. A different current mode means the user has overridden it')}">${t('原始: ', 'Source: ')}${denyModeLabel(rule.source_deny_mode)}</span>`;
     if (rule.deny_mode && rule.deny_mode !== rule.source_deny_mode) {
-      h += '<span class="ag-overridden-hint" title="当前拦截模式已偏离源码默认值">已覆盖</span>';
+      h += '<span class="ag-overridden-hint" title="' + t('当前拦截模式已偏离源码默认值', 'Current mode deviates from the source default') + '">' + t('已覆盖', 'Overridden') + '</span>';
     }
     return h;
   }
@@ -389,18 +412,18 @@ function toggle(on, disabled, onclick) {
   return `<button class="ag-toggle ${on ? 'on' : ''} ${disabled ? 'disabled' : ''}" ${disabled ? 'disabled' : ''} onclick="${disabled ? '' : onclick}"><span class="ag-toggle-knob"></span></button>`;
 }
 function formatTokens(n) {
-  if (n >= 1e8) return (n / 1e8).toFixed(1) + '亿';
-  if (n >= 1e4) return (n / 1e4).toFixed(1) + '万';
+  if (n >= 1e8) return (n / 1e8).toFixed(1) + t('亿', 'B');
+  if (n >= 1e4) return (n / 1e4).toFixed(1) + t('万', 'W');
   if (n >= 1000) return (n / 1000).toFixed(1) + 'K';
   return String(n || 0);
 }
 function showToast(msg, type) {
   if (!type) type = 'success';
-  const t = document.createElement('div');
-  t.className = 'ag-toast ag-toast-' + type;
-  t.textContent = msg;
-  document.body.appendChild(t);
-  setTimeout(() => t.remove(), 3000);
+  const tt = document.createElement('div');
+  tt.className = 'ag-toast ag-toast-' + type;
+  tt.textContent = msg;
+  document.body.appendChild(tt);
+  setTimeout(() => tt.remove(), 3000);
 }
 function openModal(title, bodyHtml, showActions) {
   el('modal-title').textContent = title;
@@ -417,8 +440,27 @@ function closeModal() {
 // ===== Pages =====
 async function refreshConfig() {
   state.config = await api('config');
-  state.envOverrides = await api('env-overrides');
+  state.envOverrides = await loadEnvOverrides();
   state.agentRules = await api('agents');
+  // 探测当前进程的 instance（AGENT_MOSS_INSTANCE，如 opendesk/xiaoo）。
+  // 有 instance 时 Agent Rules 页只显示当前 agent 的定制规则，避免出现别的 agent 的规则造成困惑；
+  // 无 instance（本地独立起服务/非 agent 调用）则显示全部。
+  state.instance = '';
+  try {
+    const h = await fetch('/api/v1/health', { signal: AbortSignal.timeout(2000) });
+    if (h.ok) {
+      const hd = await h.json();
+      state.instance = hd?.instance || '';
+    }
+  } catch { /* health 不可达，instance 保持空（显示全部） */ }
+  // 探测服务端是否开启了 console 访问 token 认证（AGENT_MOSS_CONSOLE_TOKEN）。
+  // 不带 token 裸请求一个 API 端点：返回 401 说明开启了认证 → 设置页显示"访问 Token"卡片；
+  // 返回 200 说明本机免认证 → 隐藏该卡片（单机使用无需配置，避免误导）。
+  state.consoleAuthRequired = false;
+  try {
+    const probe = await fetch('/console/api/env-overrides', { signal: AbortSignal.timeout(2000) });
+    state.consoleAuthRequired = probe.status === 401;
+  } catch { /* 探测失败，默认不显示 token 卡片 */ }
   renderCurrent();
 }
 function renderCurrent() {
@@ -435,14 +477,14 @@ function renderCurrent() {
 function render_overview() {
   const layers = state.config.layers || {};
   const eo = state.envOverrides || {};
-  const envBadge = k => eo[k] && eo[k].overridden ? `<span class="ag-env-badge">⚠ 已被 env 覆盖</span>` : '';
+  const envBadge = k => eo[k] && eo[k].overridden ? `<span class="ag-env-badge">⚠ ${t('已被 env 覆盖', 'Overridden by env')}</span>` : '';
   const envOverrideBox = k => {
     if (!eo[k] || !eo[k].overridden) return '';
-    return `<div class="ag-env-override-badge">⚠️ 环境变量 ${eo[k].env_var || ''}=1 强制禁用</div>`;
+    return `<div class="ag-env-override-badge">⚠️ ${t('环境变量', 'Env var')} ${eo[k].env_var || ''}=1 ${t('强制禁用', 'forced disabled')}</div>`;
   };
   el('page-overview').innerHTML = `
     <div class="ag-card">
-      <div class="ag-section-title">层级全局开关</div>
+      <div class="ag-section-title">${t('层级全局开关', 'Layer Master Switches')}</div>
       ${Object.entries(LAYER_NAMES).map(([key, info]) => {
         const enabled = layers[key] !== false;
         const overridden = eo[key] && eo[key].overridden;
@@ -451,22 +493,23 @@ function render_overview() {
       }).join('')}
     </div>
     <div class="ag-card">
-      <div class="ag-section-title">规则统计</div>
+      <div class="ag-section-title">${t('规则统计', 'Rule Statistics')}</div>
       <div class="ag-stat-grid">
-        <div class="ag-stat-card"><div class="label">L1 规则启用</div><div class="value">${countEnabled(state.config.L1_rules)}/${countRules(state.config.L1_rules)}</div></div>
-        <div class="ag-stat-card"><div class="label">L2 规则启用</div><div class="value">${countEnabled(state.config.L2_rules)}/${countRules(state.config.L2_rules)}</div></div>
-        <div class="ag-stat-card"><div class="label">L3 Skills 启用</div><div class="value">${countEnabledSkills(state.config.L3_skills)}/${countSkills(state.config.L3_skills)}</div></div>
+        <div class="ag-stat-card"><div class="label">${t('L1 规则启用', 'L1 Rules Enabled')}</div><div class="value">${countEnabled(state.config.L1_rules, 'L1_heuristic')}/${countRules(state.config.L1_rules)}</div></div>
+        <div class="ag-stat-card"><div class="label">${t('L2 规则启用', 'L2 Rules Enabled')}</div><div class="value">${countEnabled(state.config.L2_rules, 'L2_logic_rules')}/${countRules(state.config.L2_rules)}</div></div>
+        <div class="ag-stat-card"><div class="label">${t('L3 Skills 启用', 'L3 Skills Enabled')}</div><div class="value">${countEnabledSkills(state.config.L3_skills, 'L3_llm_analysis')}/${countSkills(state.config.L3_skills)}</div></div>
       </div>
     </div>
     <div class="ag-card">
-      <div class="ag-section-title">Token 用量统计
+      <div class="ag-section-title">${t('Token 用量统计', 'Token Usage')
+        }
         <div style="margin-left:auto;display:flex;gap:6px">
-          <button class="ag-btn ag-btn-sm" data-days="1" onclick="loadOverviewToken(1)">今日</button>
-          <button class="ag-btn ag-btn-sm active" data-days="7" onclick="loadOverviewToken(7)">近7天</button>
-          <button class="ag-btn ag-btn-sm" data-days="0" onclick="loadOverviewToken(0)">全部</button>
+          <button class="ag-btn ag-btn-sm" data-days="1" onclick="loadOverviewToken(1)">${t('今日', 'Today')}</button>
+          <button class="ag-btn ag-btn-sm active" data-days="7" onclick="loadOverviewToken(7)">${t('近7天', '7 days')}</button>
+          <button class="ag-btn ag-btn-sm" data-days="0" onclick="loadOverviewToken(0)">${t('全部', 'All')}</button>
         </div>
       </div>
-      <div id="overview-token-summary" class="ag-empty">加载中...</div>
+      <div id="overview-token-summary" class="ag-empty">${t('加载中...', 'Loading...')}</div>
       <div id="overview-token-breakdown" style="margin-top:16px"></div>
     </div>`;
   loadOverviewToken(7);
@@ -477,35 +520,40 @@ async function loadOverviewToken(days) {
     const s = await api('token-stats?days=' + days);
     el('overview-token-summary').innerHTML = `
       <div class="ag-stat-grid">
-        <div class="ag-stat-card"><div class="label">总 Token</div><div class="value">${formatTokens(s.total_tokens)}</div></div>
-        <div class="ag-stat-card"><div class="label">输入 Token</div><div class="value">${formatTokens(s.total_prompt_tokens)}</div></div>
-        <div class="ag-stat-card"><div class="label">输出 Token</div><div class="value">${formatTokens(s.total_completion_tokens)}</div></div>
-        <div class="ag-stat-card"><div class="label">LLM 调用次数</div><div class="value">${s.total_calls}</div></div>
+        <div class="ag-stat-card"><div class="label">${t('总 Token', 'Total Tokens')}</div><div class="value">${formatTokens(s.total_tokens)}</div></div>
+        <div class="ag-stat-card"><div class="label">${t('输入 Token', 'Prompt Tokens')}</div><div class="value">${formatTokens(s.total_prompt_tokens)}</div></div>
+        <div class="ag-stat-card"><div class="label">${t('输出 Token', 'Completion Tokens')}</div><div class="value">${formatTokens(s.total_completion_tokens)}</div></div>
+        <div class="ag-stat-card"><div class="label">${t('LLM 调用次数', 'LLM Calls')}</div><div class="value">${s.total_calls}</div></div>
       </div>`;
     const byStep = s.by_step || {};
-    const known = [{ key: 'L3_security_judge', name: 'L3 安全判断' }, { key: 'step2_policy_gen', name: '策略生成' }];
+    const known = [{ key: 'L3_security_judge', name: t('L3 安全判断', 'L3 Security Judge') }, { key: 'step2_policy_gen', name: t('策略生成', 'Policy Generation') }];
     const rendered = new Set();
     let html = '';
     for (const { key, name } of known) {
       const v = byStep[key] || { total_tokens: 0, prompt_tokens: 0, completion_tokens: 0, calls: 0 };
       rendered.add(key);
-      html += `<div class="ag-progress-row"><span class="ag-progress-label">${name}</span><span class="ag-progress-value">${formatTokens(v.total_tokens)}</span><span class="ag-progress-pct">(${v.calls} 次, 输入 ${formatTokens(v.prompt_tokens)}, 输出 ${formatTokens(v.completion_tokens)})</span></div>`;
+      html += `<div class="ag-progress-row"><span class="ag-progress-label">${name}</span><span class="ag-progress-value">${formatTokens(v.total_tokens)}</span><span class="ag-progress-pct">(${v.calls} ${t('次', 'calls')}, ${t('输入', 'in')} ${formatTokens(v.prompt_tokens)}, ${t('输出', 'out')} ${formatTokens(v.completion_tokens)})</span></div>`;
     }
     for (const [step, v] of Object.entries(byStep)) {
       if (rendered.has(step)) continue;
-      html += `<div class="ag-progress-row"><span class="ag-progress-label">${step}</span><span class="ag-progress-value">${formatTokens(v.total_tokens)}</span><span class="ag-progress-pct">(${v.calls} 次)</span></div>`;
+      html += `<div class="ag-progress-row"><span class="ag-progress-label">${step}</span><span class="ag-progress-value">${formatTokens(v.total_tokens)}</span><span class="ag-progress-pct">(${v.calls} ${t('次', 'calls')})</span></div>`;
     }
-    el('overview-token-breakdown').innerHTML = html || '<div class="ag-empty">无分项数据</div>';
-  } catch { el('overview-token-summary').innerHTML = '<div class="ag-empty">无数据</div>'; }
+    el('overview-token-breakdown').innerHTML = html || `<div class="ag-empty">${t('无分项数据', 'No breakdown data')}</div>`;
+  } catch { el('overview-token-summary').innerHTML = `<div class="ag-empty">${t('无数据', 'No data')}</div>`; }
 }
 function countRules(lr) { if (!lr) return 0; return Object.values(lr).reduce((s, c) => s + (c.rules ? c.rules.length : 0), 0); }
-function countEnabled(lr) {
+// 统计"启用"的规则数，口径与后端执行一致：层级开 && 大类开 && 单条规则开。
+// layerKey 为层级总开关（如 L1_heuristic），关闭时返回 0。
+function countEnabled(lr, layerKey) {
   if (!lr) return 0;
+  if (layerKey && state.config.layers?.[layerKey] === false) return 0;
   return Object.values(lr).reduce((s, c) => s + ((c.rules || []).filter(r => r.enabled && c.category_enabled !== false).length), 0);
 }
 function countSkills(ls) { if (!ls) return 0; return Object.values(ls).reduce((s, c) => s + (c.skills ? c.skills.length : 0), 0); }
-function countEnabledSkills(ls) {
+// 同 countEnabled：层级关闭时 L3 skills 启用数归 0。
+function countEnabledSkills(ls, layerKey) {
   if (!ls) return 0;
+  if (layerKey && state.config.layers?.[layerKey] === false) return 0;
   return Object.values(ls).reduce((s, c) => s + ((c.skills || []).filter(s => s.enabled && c.category_enabled !== false).length), 0);
 }
 
@@ -513,11 +561,13 @@ function countEnabledSkills(ls) {
 async function toggleLayer(key) {
   try {
     const cur = state.config.layers[key] !== false;
-    state.config = await apiPut('layers', { layer_key: key, enabled: !cur });
-    state.envOverrides = await api('env-overrides');
-    renderCurrent();
-    showToast(`${LAYER_NAMES[key]?.name || key} 已${!cur ? '启用' : '禁用'}`);
-  } catch (e) { showToast('操作失败: ' + e.message, 'error'); }
+    // PUT /api/layers 只返回 {layers, env_overrides}（不含规则数据），
+    // 不能用它整体覆盖 state.config，否则 L1/L2/L3 规则会丢失变成 0/0。
+    await apiPut('layers', { layer_key: key, enabled: !cur });
+    // 重新拉取完整 config，保证规则统计/列表不丢
+    await refreshConfig();
+    showToast(`${LAYER_NAMES[key]?.name || key} ${!cur ? t('已启用', 'enabled') : t('已禁用', 'disabled')}`);
+  } catch (e) { showToast(t('操作失败: ', 'Operation failed: ') + e.message, 'error'); }
 }
 
 // ===== 分类开关 =====
@@ -526,16 +576,16 @@ async function toggleCategory(layer, category) {
     const cur = state.config[layer]?.[category]?.category_enabled !== false;
     state.config = await apiPut('categories/enabled', { layer, category, enabled: !cur });
     renderCurrent();
-    showToast('分类已' + (!cur ? '启用' : '禁用'));
-  } catch (e) { showToast('操作失败: ' + e.message, 'error'); }
+    showToast(t('分类已', 'Category ') + (!cur ? t('启用', 'enabled') : t('禁用', 'disabled')));
+  } catch (e) { showToast(t('操作失败: ', 'Operation failed: ') + e.message, 'error'); }
 }
 async function toggleSkillCategory(category) {
   try {
     const cur = state.config.L3_skills?.[category]?.category_enabled !== false;
     state.config = await apiPut('skill-categories/enabled', { category, enabled: !cur });
     renderCurrent();
-    showToast('Skill 分类已' + (!cur ? '启用' : '禁用'));
-  } catch (e) { showToast('操作失败: ' + e.message, 'error'); }
+    showToast(t('Skill 分类已', 'Skill category ') + (!cur ? t('启用', 'enabled') : t('禁用', 'disabled')));
+  } catch (e) { showToast(t('操作失败: ', 'Operation failed: ') + e.message, 'error'); }
 }
 
 // ===== 折叠展开 =====
@@ -550,32 +600,39 @@ function toggleExpand(id) {
 }
 
 // ===== L1/L2 规则页 =====
+// 规则层容器 -> 层级总开关 key 的映射（用于大类开关随层级开关联动）
+const LAYER_SWITCH_KEY = { L1_rules: 'L1_heuristic', L2_rules: 'L2_logic_rules', L3_skills: 'L3_llm_analysis' };
 function renderRuleLayer(layerKey, containerId, categoryNames) {
   const layer = state.config[layerKey] || {};
-  // 按 categoryNames 定义的顺序渲染，保证 user_custom 等固定类目在最末。
-  // 落盘 JSON 的键顺序会被合并/迁移逻辑打乱，不能直接 Object.entries(layer)。
+  // 层级总开关：关闭时整层大类开关随动显示为关（仅 UI 联动，不改后端数据）
+  const layerSwitchKey = LAYER_SWITCH_KEY[layerKey];
+  const layerEnabled = layerSwitchKey ? state.config.layers?.[layerSwitchKey] !== false : true;
   const orderedEntries = [
     ...Object.keys(categoryNames).filter(k => k in layer).map(k => [k, layer[k]]),
     ...Object.entries(layer).filter(([k]) => !(k in categoryNames)),
   ];
-  let html = `<div class="ag-card" style="padding:8px 16px"><button class="ag-btn ag-btn-primary" onclick="showAddRuleModal('${layerKey}')">＋ 新增规则</button></div>`;
+  let html = `<div class="ag-card" style="padding:8px 16px"><button class="ag-btn ag-btn-primary" onclick="showAddRuleModal('${layerKey}')">＋ ${t('新增规则', 'Add Rule')}</button></div>`;
   for (const [catName, catData] of orderedEntries) {
     const displayName = categoryNames[catName] || catName;
     const rules = catData.rules || [];
     const catEnabled = catData.category_enabled !== false;
-    const enabledCount = rules.filter(r => r.enabled).length;
+    // 大类总开关显示状态 = 层级开 && 大类开；层级关时大类开关需禁用（无意义）
+    const catSwitchOn = layerEnabled && catEnabled;
+    const catSwitchDisabled = !layerEnabled;
+    // 大类计数与后端执行口径一致：大类总开关关闭时启用数归 0（分母仍为规则总数）
+    const enabledCount = catSwitchOn ? rules.filter(r => r.enabled).length : 0;
     const expanded = expandedCats.has(`${containerId}-${catName}`);
     html += `<div class="ag-card">
       <div class="ag-cat-header" onclick="toggleExpand('${containerId}-${catName}')">
-        <div class="ag-cat-name">${escapeHtml(displayName)} <span class="ag-cat-count">${enabledCount}/${rules.length} 启用</span></div>
+        <div class="ag-cat-name">${escapeHtml(displayName)} <span class="ag-cat-count">${enabledCount}/${rules.length} ${t('启用', 'enabled')}</span></div>
         <div class="ag-cat-controls">
-          <div onclick="event.stopPropagation();toggleCategory('${layerKey}','${catName}')">${toggle(catEnabled, false, '')}</div>
+          <div onclick="event.stopPropagation();toggleCategory('${layerKey}','${catName}')">${toggle(catSwitchOn, catSwitchDisabled, '')}</div>
           <span class="ag-expand-icon ${expanded ? 'open' : ''}" id="expand-${containerId}-${catName}">▼</span>
         </div>
       </div>
       <div class="ag-rule-list" id="list-${containerId}-${catName}" style="display:${expanded ? '' : 'none'}">`;
     if (!rules.length) {
-      html += '<div class="ag-empty">无规则</div>';
+      html += `<div class="ag-empty">${t('无规则', 'No rules')}</div>`;
     } else {
       for (const r of rules) {
         html += renderRuleItem(layerKey, catName, r);
@@ -590,21 +647,21 @@ function renderRuleItem(layerKey, catName, r) {
   const isL2Sensitive = isL2 && catName === 'sensitive_path_access';
   let patternDisplay = r.pattern || r.keyword || r.path || (r.intent_keywords && r.intent_keywords.join(', ')) || r.reason || r.id || '';
   let reasonDisplay = r.reason || r.desc || '';
-  let patternLabel = '规则';
+  let patternLabel = t('规则', 'Rule');
   if (isL2) {
-    if (r.intent_keywords) patternLabel = '触发关键词';
-    else if (r.path) patternLabel = '敏感路径';
-    else if (r.pattern) patternLabel = '检测模式';
+    if (r.intent_keywords) patternLabel = t('触发关键词', 'Trigger Keywords');
+    else if (r.path) patternLabel = t('敏感路径', 'Sensitive Path');
+    else if (r.pattern) patternLabel = t('检测模式', 'Detection Pattern');
   }
-  const reasonLabel = isL2 ? '规则说明' : '原因';
-  const tooltip = `${patternLabel}: ${patternDisplay}\n${reasonLabel}: ${reasonDisplay || '(无)'}\nID: ${r.id}`;
+  const reasonLabel = isL2 ? t('规则说明', 'Rule Description') : t('原因', 'Reason');
+  const tooltip = `${patternLabel}: ${patternDisplay}\n${reasonLabel}: ${reasonDisplay || t('(无)', '(none)')}\nID: ${r.id}`;
   const denyModeSelect = isL2Sensitive ? `<select class="ag-deny-select" onchange="updateDenyMode('${layerKey}','${catName}','${r.id}',this.value)" ${r.enabled ? '' : 'disabled'}>
-      <option value="deny_write" ${(r.deny_mode || 'deny_write') === 'deny_write' ? 'selected' : ''}>仅拦截写入</option>
-      <option value="deny_read" ${(r.deny_mode || 'deny_write') === 'deny_read' ? 'selected' : ''}>仅拦截读取</option>
-      <option value="deny_both" ${(r.deny_mode || 'deny_write') === 'deny_both' ? 'selected' : ''}>读写均拦截</option>
+      <option value="deny_write" ${(r.deny_mode || 'deny_write') === 'deny_write' ? 'selected' : ''}>${t('仅拦截写入', 'Block Write Only')}</option>
+      <option value="deny_read" ${(r.deny_mode || 'deny_write') === 'deny_read' ? 'selected' : ''}>${t('仅拦截读取', 'Block Read Only')}</option>
+      <option value="deny_both" ${(r.deny_mode || 'deny_write') === 'deny_both' ? 'selected' : ''}>${t('读写均拦截', 'Block Both')}</option>
     </select>` : '';
-  const skipL3 = isL2 ? `<label class="ag-skip-l3" title="禁用该规则时，L3 对相关路径/关键词做豁免放行（但仍分析命令其他部分的安全风险）。关闭则 L3 可能独立拦截"><input type="checkbox" ${r.skip_l3_on_disabled ? 'checked' : ''} onchange="updateSkipL3('${layerKey}','${catName}','${r.id}',this.checked)"> 禁用时豁免L3</label>` : '';
-  const deleteBtn = (r.builtin === false || r.source_removed) ? `<button class="ag-btn ag-btn-danger ag-btn-sm" onclick="deleteRule('${layerKey}','${catName}','${r.id}')" title="${r.source_removed ? '此规则已从默认规则集移除，可删除清理' : '删除自定义规则'}">删除</button>` : '';
+  const skipL3 = isL2 ? `<label class="ag-skip-l3" title="${t('禁用该规则时，L3 对相关路径/关键词做豁免放行（但仍分析命令其他部分的安全风险）。关闭则 L3 可能独立拦截', 'When this rule is disabled, L3 exempts the related path/keyword (but still analyzes other parts of the command). Turning off lets L3 block independently')}"><input type="checkbox" ${r.skip_l3_on_disabled ? 'checked' : ''} onchange="updateSkipL3('${layerKey}','${catName}','${r.id}',this.checked)"> ${t('禁用时豁免L3', 'Exempt L3 when disabled')}</label>` : '';
+  const deleteBtn = (r.builtin === false || r.source_removed) ? `<button class="ag-btn ag-btn-danger ag-btn-sm" onclick="deleteRule('${layerKey}','${catName}','${r.id}')" title="${r.source_removed ? t('此规则已从默认规则集移除，可删除清理', 'This rule was removed from the default set; you may delete it') : t('删除自定义规则', 'Delete custom rule')}">${t('删除', 'Delete')}</button>` : '';
   return `<div class="ag-rule-item" title="${escapeHtml(tooltip)}">
     <div class="ag-rule-body">
       <div class="ag-rule-tags">${builtinBadge(r.builtin)} ${removedBadge(r.source_removed)} ${riskBadge(r.risk_level)} ${riskTypeBadge(r.risk_type)}${isL2Sensitive ? ' ' + denyModeBadge(r.deny_mode) + ' ' + sourceDenyModeBadges(r) : ''}</div>
@@ -621,50 +678,56 @@ async function toggleRule(layer, cat, id, en) {
   try {
     state.config = await apiPut('rules/enabled', { layer, category: cat, rule_id: id, enabled: en });
     renderCurrent(); if (state.currentPage === 'search') searchRules();
-    showToast('规则 ' + id + ' 已' + (en ? '启用' : '禁用'));
-  } catch (e) { showToast('操作失败: ' + e.message, 'error'); }
+    showToast(t('规则 ', 'Rule ') + id + t(' 已', ' ') + (en ? t('启用', 'enabled') : t('禁用', 'disabled')));
+  } catch (e) { showToast(t('操作失败: ', 'Operation failed: ') + e.message, 'error'); }
 }
 async function updateDenyMode(layer, cat, id, mode) {
   try {
     state.config = await apiPut('rules/deny_mode', { layer, category: cat, rule_id: id, deny_mode: mode });
     renderCurrent(); if (state.currentPage === 'search') searchRules();
-    showToast('拦截模式已更新为 ' + denyModeLabel(mode));
-  } catch (e) { showToast('操作失败: ' + e.message, 'error'); }
+    showToast(t('拦截模式已更新为 ', 'Interception mode updated to ') + denyModeLabel(mode));
+  } catch (e) { showToast(t('操作失败: ', 'Operation failed: ') + e.message, 'error'); }
 }
 async function updateSkipL3(layer, cat, id, skip) {
   try {
     state.config = await apiPut('rules/skip_l3', { layer, category: cat, rule_id: id, skip_l3_on_disabled: skip });
     renderCurrent(); if (state.currentPage === 'search') searchRules();
-    showToast('规则 ' + id + ' 禁用时豁免L3 已' + (skip ? '开启' : '关闭'));
-  } catch (e) { showToast('操作失败: ' + e.message, 'error'); }
+    showToast(t('规则 ', 'Rule ') + id + t(' 禁用时豁免L3 已', ' disable-exempt-L3 ') + (skip ? t('开启', 'ON') : t('关闭', 'OFF')));
+  } catch (e) { showToast(t('操作失败: ', 'Operation failed: ') + e.message, 'error'); }
 }
 async function deleteRule(layer, cat, id) {
-  // 找到该规则判断是自定义还是已移除，给不同确认文案
   const layerData = (state.config[layer] || {})[cat] || {};
   const rule = (layerData.rules || []).find(r => r.id === id) || {};
   const msg = rule.source_removed
-    ? '确定删除已移除的规则 "' + id + '"？\n（此规则已从默认规则集移除，删除可清理历史保留。下次升级不会再恢复）'
-    : '确定删除自定义规则 "' + id + '"？';
+    ? t('确定删除已移除的规则 "', 'Delete removed rule "') + id + t('"？\n（此规则已从默认规则集移除，删除可清理历史保留。下次升级不会再恢复）', '"?\n(This rule was removed from the default set. Deleting cleans up the historical entry. It will not be restored on the next upgrade.)')
+    : t('确定删除自定义规则 "', 'Delete custom rule "') + id + t('"？', '"?');
   if (!confirm(msg)) return;
   try {
     state.config = await apiDelete('rules', { layer, category: cat, rule_id: id });
-    renderCurrent(); showToast('规则 ' + id + ' 已删除');
-  } catch (e) { showToast('删除失败: ' + e.message, 'error'); }
+    renderCurrent(); showToast(t('规则 ', 'Rule ') + id + t(' 已删除', ' deleted'));
+  } catch (e) { showToast(t('删除失败: ', 'Delete failed: ') + e.message, 'error'); }
 }
 
 // ===== Agent 定制规则页 =====
 const AGENT_CATEGORY_NAMES = {
-  builtin_safe_action_types: '安全操作白名单（跳 L2+L3）',
-  builtin_safe_skills: '信任内置 Skill（跳 L2+L3）',
-  extra_command_patterns: '专属危险命令正则（L1 追加）',
-  extra_injection_keywords: '专属注入关键词（L1 追加）',
-  extra_sensitive_paths: '专属敏感路径（L1 追加）',
+  builtin_safe_action_types: t('安全操作白名单（跳 L2+L3）', 'Safe Action Whitelist (skip L2+L3)'),
+  builtin_safe_skills: t('信任内置 Skill（跳 L2+L3）', 'Trusted Built-in Skills (skip L2+L3)'),
+  extra_command_patterns: t('专属危险命令正则（L1 追加）', 'Dedicated Dangerous Command Regex (L1 extra)'),
+  extra_injection_keywords: t('专属注入关键词（L1 追加）', 'Dedicated Injection Keywords (L1 extra)'),
+  extra_sensitive_paths: t('专属敏感路径（L1 追加）', 'Dedicated Sensitive Paths (L1 extra)'),
 };
 function render_agents() {
   const agents = (state.agentRules && state.agentRules.agents) || {};
-  const ids = Object.keys(agents);
+  // 有 instance（当前是某 agent 调用）时，只显示该 agent 的定制规则（即使无规则也显示空，
+  // 避免出现别的 agent 的规则造成困惑）；无 instance（本地独立起/非 agent 调用）显示全部。
+  let ids;
+  if (state.instance) {
+    ids = agents[state.instance] ? [state.instance] : [];
+  } else {
+    ids = Object.keys(agents);
+  }
   if (!ids.length) {
-    el('page-agents').innerHTML = '<div class="ag-card"><div class="ag-empty">无 agent 定制规则</div></div>';
+    el('page-agents').innerHTML = `<div class="ag-card"><div class="ag-empty">${t('无 agent 定制规则', 'No agent custom rules')}</div></div>`;
     return;
   }
   let html = '';
@@ -679,18 +742,19 @@ function render_agents() {
       const rules = catData.rules || [];
       const catEnabled = catData.category_enabled !== false;
       const expanded = expandedCats.has(`agents-${agentId}-${catName}`);
-      const enCount = rules.filter(r => r.enabled).length;
+      // 大类计数与后端执行口径一致：大类总开关关闭时启用数归 0
+      const enCount = catEnabled ? rules.filter(r => r.enabled).length : 0;
       html += `<div class="ag-cat-header" onclick="toggleExpand('agents-${agentId}-${catName}')">
-        <div class="ag-cat-name">${escapeHtml(AGENT_CATEGORY_NAMES[catName] || catName)} <span class="ag-cat-count">${enCount}/${rules.length} 启用</span></div>
+        <div class="ag-cat-name">${escapeHtml(AGENT_CATEGORY_NAMES[catName] || catName)} <span class="ag-cat-count">${enCount}/${rules.length} ${t('启用', 'enabled')}</span></div>
         <div class="ag-cat-controls"><div onclick="event.stopPropagation();toggleAgentCategory('${agentId}','${catName}')">${toggle(catEnabled, false, '')}</div><span class="ag-expand-icon ${expanded ? 'open' : ''}">▼</span></div>
       </div>
       <div class="ag-rule-list" id="list-agents-${agentId}-${catName}" style="display:${expanded ? '' : 'none'}">`;
       if (!rules.length) {
-        html += '<div class="ag-empty">无规则</div>';
+        html += `<div class="ag-empty">${t('无规则', 'No rules')}</div>`;
       } else {
         for (const r of rules) html += renderAgentRuleItem(agentId, catName, r);
       }
-      html += `<div style="padding:8px 0"><button class="ag-btn ag-btn-ghost" onclick="showAddAgentRuleModal('${agentId}','${catName}')">＋ 新增</button></div>`;
+      html += `<div style="padding:8px 0"><button class="ag-btn ag-btn-ghost" onclick="showAddAgentRuleModal('${agentId}','${catName}')">＋ ${t('新增', 'Add')}</button></div>`;
       html += '</div>';
     }
     html += '</div>';
@@ -698,21 +762,16 @@ function render_agents() {
   el('page-agents').innerHTML = html;
 }
 function renderAgentRuleItem(agentId, catName, r) {
-  // Agent 定制规则按类别字段不同，分别提取展示维度：
-  //   builtin_safe_action_types / builtin_safe_skills → value（白名单，无 risk）
-  //   extra_command_patterns        → pattern + risk_level + risk_type + reason
-  //   extra_injection_keywords      → keyword + risk_level + lang
-  //   extra_sensitive_paths         → path + risk_level + desc
   const isValue = catName === 'builtin_safe_action_types' || catName === 'builtin_safe_skills';
   const patternDisplay = r.value || r.pattern || r.keyword || r.path || r.id || JSON.stringify(r).slice(0, 60);
   const reasonDisplay = r.reason || r.desc || r.lang || '';
-  const tagLine = (r.builtin !== false ? '<span class="ag-badge ag-badge-builtin" title="源码内置规则">内置</span>' : '<span class="ag-badge ag-badge-custom">自定义</span>')
-    + (r.source_removed ? '<span class="ag-badge ag-badge-removed" title="此规则已从默认规则集移除，仅作历史保留">已移除</span>' : '')
+  const tagLine = (r.builtin !== false ? `<span class="ag-badge ag-badge-builtin" title="${t('源码内置规则', 'Built-in source rule')}">${t('内置', 'Built-in')}</span>` : `<span class="ag-badge ag-badge-custom">${t('自定义', 'Custom')}</span>`)
+    + (r.source_removed ? `<span class="ag-badge ag-badge-removed" title="${t('此规则已从默认规则集移除，仅作历史保留', 'This rule was removed from the default set and is kept as history')}">${t('已移除', 'Removed')}</span>` : '')
     + (isValue ? '' : (riskBadge(r.risk_level) + (r.risk_type ? riskTypeBadge(r.risk_type) : '')));
-  const patternLabel = isValue ? '白名单' : (r.path ? '敏感路径' : (r.keyword ? '触发关键词' : (r.pattern ? '规则' : '规则')));
-  const reasonLabel = r.reason || r.desc ? '原因' : (r.lang ? '语言' : '说明');
-  const tooltip = `${patternLabel}: ${patternDisplay}\n${reasonLabel}: ${reasonDisplay || '(无)'}`;
-  const delBtn = r.builtin ? '' : `<button class="ag-btn ag-btn-ghost ag-btn-sm" onclick="deleteAgentRule('${agentId}','${catName}',${JSON.stringify(r).replace(/"/g,'&quot;')})">删除</button>`;
+  const patternLabel = isValue ? t('白名单', 'Whitelist') : (r.path ? t('敏感路径', 'Sensitive Path') : (r.keyword ? t('触发关键词', 'Trigger Keywords') : t('规则', 'Rule')));
+  const reasonLabel = r.reason || r.desc ? t('原因', 'Reason') : (r.lang ? t('语言', 'Language') : t('说明', 'Description'));
+  const tooltip = `${patternLabel}: ${patternDisplay}\n${reasonLabel}: ${reasonDisplay || t('(无)', '(none)')}`;
+  const delBtn = r.builtin ? '' : `<button class="ag-btn ag-btn-ghost ag-btn-sm" onclick="deleteAgentRule('${agentId}','${catName}',${JSON.stringify(r).replace(/"/g,'&quot;')})">${t('删除', 'Delete')}</button>`;
   return `<div class="ag-rule-item" title="${escapeHtml(tooltip)}">
     <div class="ag-rule-body">
       <div class="ag-rule-tags">${tagLine}</div>
@@ -740,7 +799,7 @@ async function toggleAgentCategory(agentId, cat) {
 }
 async function deleteAgentRule(agentId, cat, r) {
   const fp = { value: r.value, pattern: r.pattern, keyword: r.keyword, path: r.path };
-  if (!confirm(`删除规则 ${r.value || r.pattern || r.keyword || r.path || ''}?`)) return;
+  if (!confirm(t('删除规则 ', 'Delete rule ') + (r.value || r.pattern || r.keyword || r.path || '') + '?')) return;
   try {
     state.agentRules = await apiDelete('agents/rules', { agent_id: agentId, category: cat, ...fp });
     render_agents();
@@ -749,44 +808,50 @@ async function deleteAgentRule(agentId, cat, r) {
 function showAddAgentRuleModal(agentId, cat) {
   const isValueCat = cat === 'builtin_safe_action_types' || cat === 'builtin_safe_skills';
   const body = isValueCat
-    ? `<input class="ag-input" id="ar-value" placeholder="值（前缀尾随 - 或精确工具名）" style="width:100%">`
-    : `<input class="ag-input" id="ar-pattern" placeholder="正则/关键词/路径" style="width:100%;margin-bottom:8px">
+    ? `<input class="ag-input" id="ar-value" placeholder="${t('值（前缀尾随 - 或精确工具名）', 'Value (prefix/suffix - or exact tool name)')}" style="width:100%">`
+    : `<input class="ag-input" id="ar-pattern" placeholder="${t('正则/关键词/路径', 'Regex/keyword/path')}" style="width:100%;margin-bottom:8px">
        <input class="ag-input" id="ar-risk_level" placeholder="risk_level (high/medium/...)" style="width:100%">`;
-  openModal(`新增 ${agentId} / ${cat} 规则`, body, true);
+  openModal(t('新增 ', 'Add ') + agentId + ' / ' + cat + t(' 规则', ' rule'), body, true);
   currentModalAction = { type: 'agent_rule', agentId, cat, isValueCat };
 }
 
 // ===== L3 Skills 页 =====
 function render_l3() {
   const l3 = state.config.L3_skills || {};
-  let html = `<div class="ag-card" style="padding:8px 16px"><button class="ag-btn ag-btn-primary" onclick="showAddSkillModal()">＋ 新增 Skill</button></div>`;
+  // 层级总开关：关闭时 L3 大类开关随动显示为关（仅 UI 联动，不改后端数据）
+  const layerEnabled = state.config.layers?.['L3_llm_analysis'] !== false;
+  let html = `<div class="ag-card" style="padding:8px 16px"><button class="ag-btn ag-btn-primary" onclick="showAddSkillModal()">＋ ${t('新增 Skill', 'Add Skill')}</button></div>`;
   for (const [catName, catData] of Object.entries(l3)) {
     const displayName = L3_CATEGORY_NAMES[catName] || catName;
     const skills = catData.skills || [];
     const catEnabled = catData.category_enabled !== false;
-    const enabledCount = skills.filter(s => s.enabled).length;
+    // 大类总开关显示状态 = 层级开 && 大类开；层级关时大类开关需禁用（无意义）
+    const catSwitchOn = layerEnabled && catEnabled;
+    const catSwitchDisabled = !layerEnabled;
+    // 大类计数与后端执行口径一致：大类总开关关闭时启用数归 0
+    const enabledCount = catSwitchOn ? skills.filter(s => s.enabled).length : 0;
     const expanded = expandedCats.has('page-l3-' + catName);
     html += `<div class="ag-card">
       <div class="ag-cat-header" onclick="toggleExpand('page-l3-${catName}')">
-        <div class="ag-cat-name">${escapeHtml(displayName)} <span class="ag-cat-count">${enabledCount}/${skills.length} 启用</span></div>
+        <div class="ag-cat-name">${escapeHtml(displayName)} <span class="ag-cat-count">${enabledCount}/${skills.length} ${t('启用', 'enabled')}</span></div>
         <div class="ag-cat-controls">
-          <div onclick="event.stopPropagation();toggleSkillCategory('${catName}')">${toggle(catEnabled, false, '')}</div>
+          <div onclick="event.stopPropagation();toggleSkillCategory('${catName}')">${toggle(catSwitchOn, catSwitchDisabled, '')}</div>
           <span class="ag-expand-icon ${expanded ? 'open' : ''}" id="expand-page-l3-${catName}">▼</span>
         </div>
       </div>
       <div class="ag-rule-list" id="list-page-l3-${catName}" style="display:${expanded ? '' : 'none'}">`;
     if (!skills.length) {
-      html += '<div class="ag-empty">无 skill</div>';
+      html += `<div class="ag-empty">${t('无 skill', 'No skill')}</div>`;
     } else {
       for (const s of skills) {
         const kw = (s.keywords || []).join(', ');
-        const deleteBtn = s.builtin === false ? `<button class="ag-btn ag-btn-danger ag-btn-sm" onclick="deleteSkill('${s.id}','${catName}')">删除</button>` : '';
+        const deleteBtn = s.builtin === false ? `<button class="ag-btn ag-btn-danger ag-btn-sm" onclick="deleteSkill('${s.id}','${catName}')">${t('删除', 'Delete')}</button>` : '';
         html += `<div class="ag-rule-item">
           <div class="ag-rule-body">
             <div class="ag-rule-tags">${builtinBadge(s.builtin)} <strong>${escapeHtml(s.id)}</strong></div>
-            <div class="ag-rule-reason"><span class="ag-rule-field-label">触发关键词:</span> ${escapeHtml(kw)}</div>
+            <div class="ag-rule-reason"><span class="ag-rule-field-label">${t('触发关键词:', 'Trigger keywords: ')}</span> ${escapeHtml(kw)}</div>
           </div>
-          <div class="ag-rule-controls">${toggle(s.enabled, false, `toggleSkill('${s.id}',${!s.enabled})`)}<button class="ag-btn ag-btn-ghost ag-btn-sm" onclick="showSkillDetail('${s.id}')">详情</button>${deleteBtn}</div>
+          <div class="ag-rule-controls">${toggle(s.enabled, false, `toggleSkill('${s.id}',${!s.enabled})`)}<button class="ag-btn ag-btn-ghost ag-btn-sm" onclick="showSkillDetail('${s.id}')">${t('详情', 'Details')}</button>${deleteBtn}</div>
         </div>`;
       }
     }
@@ -798,29 +863,29 @@ async function toggleSkill(skillId, en) {
   try {
     state.config = await apiPut('skills/enabled', { skill_id: skillId, enabled: en });
     renderCurrent(); if (state.currentPage === 'search') searchRules();
-    showToast('Skill ' + skillId + ' 已' + (en ? '启用' : '禁用'));
-  } catch (e) { showToast('操作失败: ' + e.message, 'error'); }
+    showToast('Skill ' + skillId + t(' 已', ' ') + (en ? t('启用', 'enabled') : t('禁用', 'disabled')));
+  } catch (e) { showToast(t('操作失败: ', 'Operation failed: ') + e.message, 'error'); }
 }
 async function deleteSkill(skillId, cat) {
-  if (!confirm('确定删除自定义 Skill "' + skillId + '"？')) return;
+  if (!confirm(t('确定删除自定义 Skill "', 'Delete custom Skill "') + skillId + t('"？', '"? '))) return;
   try {
     state.config = await apiDelete('skills', { skill_id: skillId, category: cat });
-    renderCurrent(); showToast('Skill ' + skillId + ' 已删除');
-  } catch (e) { showToast('删除失败: ' + e.message, 'error'); }
+    renderCurrent(); showToast('Skill ' + skillId + t(' 已删除', ' deleted'));
+  } catch (e) { showToast(t('删除失败: ', 'Delete failed: ') + e.message, 'error'); }
 }
 async function showSkillDetail(skillId) {
-  openModal('🤖 Skill 详情', '<p style="color:var(--ag-text-tertiary);padding:8px 0">加载中...</p>', false);
+  openModal(t('🤖 Skill 详情', '🤖 Skill Details'), `<p style="color:var(--ag-text-tertiary);padding:8px 0">${t('加载中...', 'Loading...')}</p>`, false);
   el('modal').classList.add('ag-modal-wide');
   try {
     const data = await api('skills/' + encodeURIComponent(skillId) + '/content');
     el('modal-body').innerHTML = renderSkillContent(data.content || '', skillId, data.path || '');
   } catch (e) {
-    el('modal-body').innerHTML = '<p style="color:var(--ag-red);padding:8px 0">加载失败: ' + escapeHtml(e.message) + '</p>';
+    el('modal-body').innerHTML = `<p style="color:var(--ag-red);padding:8px 0">${t('加载失败: ', 'Load failed: ')}${escapeHtml(e.message)}</p>`;
   }
 }
 function renderSkillContent(md, skillId, filePath) {
   const lines = (md || '').split('\n');
-  let html = '<div class="ag-skill-detail-header"><span class="ag-skill-detail-id">' + escapeHtml(skillId) + '</span></div><div class="ag-skill-meta"><span class="ag-skill-meta-item">📄 <strong>' + escapeHtml(filePath || '(未知)') + '</strong></span><span class="ag-skill-meta-item">📏 <strong>' + lines.length + '</strong> 行</span></div><div class="ag-skill-content">';
+  let html = '<div class="ag-skill-detail-header"><span class="ag-skill-detail-id">' + escapeHtml(skillId) + '</span></div><div class="ag-skill-meta"><span class="ag-skill-meta-item">📄 <strong>' + escapeHtml(filePath || t('(未知)', '(unknown)')) + '</strong></span><span class="ag-skill-meta-item">📏 <strong>' + lines.length + '</strong> ' + t('行', 'lines') + '</span></div><div class="ag-skill-content">';
   let inCode = false, codeBuf = [], textBuf = [];
   const flushText = () => { if (textBuf.length) { html += escapeHtml(textBuf.join('\n')); textBuf = []; } };
   const flushCode = () => { if (codeBuf.length) { html += '<pre><code>' + escapeHtml(codeBuf.join('\n')) + '</code></pre>'; codeBuf = []; } };
@@ -841,16 +906,16 @@ function renderSkillContent(md, skillId, filePath) {
 function render_search() {
   el('page-search').innerHTML = `
     <div class="ag-card">
-      <div class="ag-section-title">全局规则搜索</div>
+      <div class="ag-section-title">${t('全局规则搜索', 'Global Rule Search')}</div>
       <div style="display:flex;gap:8px">
-        <input class="ag-input" id="search-input" placeholder="输入关键词搜索规则，如: sysfs, rm -rf, /etc/shadow, 数据外泄..." oninput="searchRules()" style="flex:1">
-        <button class="ag-btn ag-btn-primary" onclick="searchRules()">搜索</button>
-        <button class="ag-btn ag-btn-ghost" onclick="clearSearch()">清空</button>
+        <input class="ag-input" id="search-input" placeholder="${t('输入关键词搜索规则，如: sysfs, rm -rf, /etc/shadow, 数据外泄...', 'Search rules by keyword, e.g. sysfs, rm -rf, /etc/shadow, data exfiltration...')}" oninput="searchRules()" style="flex:1">
+        <button class="ag-btn ag-btn-primary" onclick="searchRules()">${t('搜索', 'Search')}</button>
+        <button class="ag-btn ag-btn-ghost" onclick="clearSearch()">${t('清空', 'Clear')}</button>
       </div>
-      <div class="ag-form-hint" style="margin-top:8px">搜索范围：L1 规则的正则/原因/风险类型、L2 规则的路径/描述、L3 Skill 的关键词/ID。命中后可直接启用或禁用对应规则。</div>
+      <div class="ag-form-hint" style="margin-top:8px">${t('搜索范围：L1 规则的正则/原因/风险类型、L2 规则的路径/描述、L3 Skill 的关键词/ID。命中后可直接启用或禁用对应规则。', 'Search scope: L1 rule regex/reason/risk type, L2 rule path/description, L3 Skill keyword/ID. You can enable or disable the matching rule directly.')}</div>
     </div>
     <div class="ag-card" id="search-results-card" style="display:none">
-      <div class="ag-section-title">搜索结果 <span class="ag-cat-count" id="search-count">0 条</span></div>
+      <div class="ag-section-title">${t('搜索结果', 'Search Results')} <span class="ag-cat-count" id="search-count">0 ${t('条', 'results')}</span></div>
       <div id="search-results"></div>
     </div>`;
   setTimeout(() => { const inp = el('search-input'); if (inp) inp.focus(); }, 0);
@@ -878,38 +943,38 @@ function searchRules() {
       if (hay.includes(q)) results.push({ layer: 'L3_skills', layerName: 'L3', category: cat, ...s, isSkill: true });
     }
   }
-  cnt.textContent = results.length + ' 条';
+  cnt.textContent = results.length + ' ' + t('条', 'results');
   card.style.display = '';
-  if (!results.length) { list.innerHTML = '<div class="ag-empty">未找到匹配的规则</div>'; return; }
+  if (!results.length) { list.innerHTML = `<div class="ag-empty">${t('未找到匹配的规则', 'No matching rules found')}</div>`; return; }
   list.innerHTML = results.map(renderSearchItem).join('');
 }
 function renderSearchItem(r) {
   const isL2Sensitive = r.layer === 'L2_rules' && r.category === 'sensitive_path_access';
   let ruleText = r.pattern || r.path || r.keyword || (r.keywords && r.keywords.join(', ')) || (r.intent_keywords && r.intent_keywords.join(', ')) || r.reason || r.desc || '';
   const reason = r.reason || r.desc || '';
-  const tooltip = '规则: ' + ruleText + '\n原因: ' + (reason || '(无)') + '\nID: ' + r.id;
+  const tooltip = t('规则: ', 'Rule: ') + ruleText + t('\n原因: ', '\nReason: ') + (reason || t('(无)', '(none)')) + '\nID: ' + r.id;
   const toggleFn = r.isSkill ? "toggleSkill('" + r.id + "'," + (!r.enabled) + ")" : "toggleRule('" + r.layer + "','" + r.category + "','" + r.id + "'," + (!r.enabled) + ")";
   const denyModeSelect = isL2Sensitive ? `<select class="ag-deny-select" onchange="updateDenyMode('${r.layer}','${r.category}','${r.id}',this.value)" ${r.enabled ? '' : 'disabled'}>
-    <option value="deny_write" ${(r.deny_mode || 'deny_write') === 'deny_write' ? 'selected' : ''}>仅拦截写入</option>
-    <option value="deny_read" ${(r.deny_mode || 'deny_write') === 'deny_read' ? 'selected' : ''}>仅拦截读取</option>
-    <option value="deny_both" ${(r.deny_mode || 'deny_write') === 'deny_both' ? 'selected' : ''}>读写均拦截</option>
+    <option value="deny_write" ${(r.deny_mode || 'deny_write') === 'deny_write' ? 'selected' : ''}>${t('仅拦截写入', 'Block Write Only')}</option>
+    <option value="deny_read" ${(r.deny_mode || 'deny_write') === 'deny_read' ? 'selected' : ''}>${t('仅拦截读取', 'Block Read Only')}</option>
+    <option value="deny_both" ${(r.deny_mode || 'deny_write') === 'deny_both' ? 'selected' : ''}>${t('读写均拦截', 'Block Both')}</option>
   </select>` : '';
-  const skipL3 = r.layer === 'L2_rules' ? `<label class="ag-skip-l3"><input type="checkbox" ${r.skip_l3_on_disabled ? 'checked' : ''} onchange="updateSkipL3('${r.layer}','${r.category}','${r.id}',this.checked)"> 禁用时豁免L3</label>` : '';
+  const skipL3 = r.layer === 'L2_rules' ? `<label class="ag-skip-l3"><input type="checkbox" ${r.skip_l3_on_disabled ? 'checked' : ''} onchange="updateSkipL3('${r.layer}','${r.category}','${r.id}',this.checked)"> ${t('禁用时豁免L3', 'Exempt L3 when disabled')}</label>` : '';
   return `<div class="ag-rule-item" title="${escapeHtml(tooltip)}">
     <div class="ag-rule-body">
       <div class="ag-rule-tags">
         <span class="ag-layer-badge ag-layer-${r.layerName.toLowerCase()}">${r.layerName}</span>
         ${builtinBadge(r.builtin)} ${removedBadge(r.source_removed)} ${riskBadge(r.risk_level)} ${riskTypeBadge(r.risk_type)}
         ${isL2Sensitive ? denyModeBadge(r.deny_mode) + ' ' + sourceDenyModeBadges(r) : ''}
-        <span class="ag-search-cat">分类: ${escapeHtml(r.category)}</span>
+        <span class="ag-search-cat">${t('分类: ', 'Category: ')}${escapeHtml(r.category)}</span>
       </div>
-      <div class="ag-rule-pattern"><span class="ag-rule-field-label">规则:</span> ${escapeHtml(ruleText)}</div>
-      ${reason ? '<div class="ag-rule-reason"><span class="ag-rule-field-label">原因:</span> ' + escapeHtml(reason) + '</div>' : ''}
+      <div class="ag-rule-pattern"><span class="ag-rule-field-label">${t('规则:', 'Rule:')}</span> ${escapeHtml(ruleText)}</div>
+      ${reason ? `<div class="ag-rule-reason"><span class="ag-rule-field-label">${t('原因:', 'Reason:')}</span> ${escapeHtml(reason)}</div>` : ''}
       <div class="ag-rule-id">ID: ${escapeHtml(r.id)}</div>
     </div>
     <div class="ag-rule-controls">
       ${denyModeSelect}
-      <span class="ag-status-text ${r.enabled ? 'ag-status-on' : 'ag-status-off'}">${r.enabled ? '已启用' : '已禁用'}</span>
+      <span class="ag-status-text ${r.enabled ? 'ag-status-on' : 'ag-status-off'}">${r.enabled ? t('已启用', 'Enabled') : t('已禁用', 'Disabled')}</span>
       ${toggle(r.enabled, false, toggleFn)}
       ${skipL3}
     </div>
@@ -928,25 +993,26 @@ let trendChartInstance = null;
 function render_token() {
   el('page-token').innerHTML = `
     <div class="ag-card">
-      <div class="ag-section-title">Token 用量详细统计
+      <div class="ag-section-title">${t('Token 用量详细统计', 'Detailed Token Statistics')
+        }
         <div style="margin-left:auto;display:flex;gap:6px;align-items:center;flex-wrap:wrap">
-          <button class="ag-btn ag-btn-sm" data-days="1" onclick="loadTokenStats(1)">今日</button>
-          <button class="ag-btn ag-btn-sm" data-days="7" onclick="loadTokenStats(7)">近7天</button>
-          <button class="ag-btn ag-btn-sm" data-days="30" onclick="loadTokenStats(30)">近30天</button>
-          <button class="ag-btn ag-btn-sm" data-days="0" onclick="loadTokenStats(0)">全部</button>
+          <button class="ag-btn ag-btn-sm" data-days="1" onclick="loadTokenStats(1)">${t('今日', 'Today')}</button>
+          <button class="ag-btn ag-btn-sm" data-days="7" onclick="loadTokenStats(7)">${t('近7天', '7 days')}</button>
+          <button class="ag-btn ag-btn-sm" data-days="30" onclick="loadTokenStats(30)">${t('近30天', '30 days')}</button>
+          <button class="ag-btn ag-btn-sm" data-days="0" onclick="loadTokenStats(0)">${t('全部', 'All')}</button>
           <span style="width:1px;height:20px;background:var(--ag-divider);margin:0 4px"></span>
-          <input type="date" id="token-date-from" class="ag-date-input" title="开始日期">
-          <span class="ag-date-sep">至</span>
-          <input type="date" id="token-date-to" class="ag-date-input" title="结束日期">
-          <button class="ag-btn ag-btn-sm" onclick="loadTokenStatsByRange()">查询</button>
+          <input type="date" id="token-date-from" class="ag-date-input" title="${t('开始日期', 'Start date')}">
+          <span class="ag-date-sep">${t('至', 'to')}</span>
+          <input type="date" id="token-date-to" class="ag-date-input" title="${t('结束日期', 'End date')}">
+          <button class="ag-btn ag-btn-sm" onclick="loadTokenStatsByRange()">${t('查询', 'Query')}</button>
         </div>
       </div>
-      <div id="token-summary" class="ag-empty">加载中...</div>
+      <div id="token-summary" class="ag-empty">${t('加载中...', 'Loading...')}</div>
     </div>
-    <div class="ag-card"><div class="ag-section-title">按步骤分组</div><div id="token-by-step"></div></div>
-    <div class="ag-card"><div class="ag-section-title">按模型分组</div><div id="token-by-model"></div></div>
-    <div class="ag-card"><div class="ag-section-title">Token 消耗趋势（按模型）</div><div id="token-trend-chart"></div></div>
-    <div class="ag-card"><div class="ag-section-title">最近调用记录</div><div id="token-recent" class="ag-empty">加载中...</div></div>`;
+    <div class="ag-card"><div class="ag-section-title">${t('按步骤分组', 'By Step')}</div><div id="token-by-step"></div></div>
+    <div class="ag-card"><div class="ag-section-title">${t('按模型分组', 'By Model')}</div><div id="token-by-model"></div></div>
+    <div class="ag-card"><div class="ag-section-title">${t('Token 消耗趋势（按模型）', 'Token Consumption Trend (by Model)')}</div><div id="token-trend-chart"></div></div>
+    <div class="ag-card"><div class="ag-section-title">${t('最近调用记录', 'Recent Calls')}</div><div id="token-recent" class="ag-empty">${t('加载中...', 'Loading...')}</div></div>`;
   startTokenAutoRefresh();
 }
 function startTokenAutoRefresh() {
@@ -975,8 +1041,8 @@ async function loadTokenStats(days) {
 async function loadTokenStatsByRange() {
   const from = el('token-date-from') ? el('token-date-from').value : '';
   const to = el('token-date-to') ? el('token-date-to').value : '';
-  if (!from || !to) { showToast('请选择开始和结束日期', 'error'); return; }
-  if (from > to) { showToast('开始日期不能晚于结束日期', 'error'); return; }
+  if (!from || !to) { showToast(t('请选择开始和结束日期', 'Please select start and end dates'), 'error'); return; }
+  if (from > to) { showToast(t('开始日期不能晚于结束日期', 'Start date cannot be later than end date'), 'error'); return; }
   document.querySelectorAll('#page-token [data-days]').forEach(b => b.classList.remove('active'));
   stopTokenAutoRefresh();
   try {
@@ -988,18 +1054,18 @@ async function loadTokenStatsByRange() {
     renderTokenByModel(s);
     loadTokenTrend(null, from, to);
     loadTokenRecent();
-  } catch (e) { showToast('查询失败: ' + e.message, 'error'); }
+  } catch (e) { showToast(t('查询失败: ', 'Query failed: ') + e.message, 'error'); }
 }
 function renderTokenSummary(s) {
   el('token-summary').innerHTML = '<div class="ag-stat-grid">' +
-    '<div class="ag-stat-card"><div class="label">总 Token</div><div class="value">' + formatTokens(s.total_tokens) + '</div></div>' +
-    '<div class="ag-stat-card"><div class="label">输入 Token</div><div class="value">' + formatTokens(s.total_prompt_tokens) + '</div></div>' +
-    '<div class="ag-stat-card"><div class="label">输出 Token</div><div class="value">' + formatTokens(s.total_completion_tokens) + '</div></div>' +
-    '<div class="ag-stat-card"><div class="label">调用次数</div><div class="value">' + s.total_calls + '</div></div></div>';
+    '<div class="ag-stat-card"><div class="label">' + t('总 Token', 'Total Tokens') + '</div><div class="value">' + formatTokens(s.total_tokens) + '</div></div>' +
+    '<div class="ag-stat-card"><div class="label">' + t('输入 Token', 'Prompt Tokens') + '</div><div class="value">' + formatTokens(s.total_prompt_tokens) + '</div></div>' +
+    '<div class="ag-stat-card"><div class="label">' + t('输出 Token', 'Completion Tokens') + '</div><div class="value">' + formatTokens(s.total_completion_tokens) + '</div></div>' +
+    '<div class="ag-stat-card"><div class="label">' + t('调用次数', 'Calls') + '</div><div class="value">' + s.total_calls + '</div></div></div>';
 }
 function renderTokenByStep(s) {
   const byStep = s.by_step || {};
-  const known = [{ key: 'L3_security_judge', name: 'L3 安全判断' }, { key: 'step2_policy_gen', name: '策略生成' }];
+  const known = [{ key: 'L3_security_judge', name: t('L3 安全判断', 'L3 Security Judge') }, { key: 'step2_policy_gen', name: t('策略生成', 'Policy Generation') }];
   const rendered = new Set();
   let html = '';
   const total = s.total_tokens || 0;
@@ -1007,14 +1073,14 @@ function renderTokenByStep(s) {
     const v = byStep[key] || { total_tokens: 0, calls: 0 };
     rendered.add(key);
     const pct = total > 0 ? (v.total_tokens / total * 100).toFixed(1) : 0;
-    html += '<div class="ag-progress-row"><span class="ag-progress-label">' + name + '</span><span class="ag-progress-value">' + formatTokens(v.total_tokens) + '</span><span class="ag-progress-pct">' + pct + '% (' + v.calls + ' 次)</span><div class="ag-progress-bar"><div class="ag-progress-fill" style="width:' + pct + '%"></div></div></div>';
+    html += '<div class="ag-progress-row"><span class="ag-progress-label">' + name + '</span><span class="ag-progress-value">' + formatTokens(v.total_tokens) + '</span><span class="ag-progress-pct">' + pct + '% (' + v.calls + ' ' + t('次', 'calls') + ')</span><div class="ag-progress-bar"><div class="ag-progress-fill" style="width:' + pct + '%"></div></div></div>';
   }
   for (const [step, v] of Object.entries(byStep)) {
     if (rendered.has(step)) continue;
     const pct = total > 0 ? (v.total_tokens / total * 100).toFixed(1) : 0;
-    html += '<div class="ag-progress-row"><span class="ag-progress-label">' + step + '</span><span class="ag-progress-value">' + formatTokens(v.total_tokens) + '</span><span class="ag-progress-pct">' + pct + '% (' + v.calls + ' 次)</span><div class="ag-progress-bar"><div class="ag-progress-fill" style="width:' + pct + '%"></div></div></div>';
+    html += '<div class="ag-progress-row"><span class="ag-progress-label">' + step + '</span><span class="ag-progress-value">' + formatTokens(v.total_tokens) + '</span><span class="ag-progress-pct">' + pct + '% (' + v.calls + ' ' + t('次', 'calls') + ')</span><div class="ag-progress-bar"><div class="ag-progress-fill" style="width:' + pct + '%"></div></div></div>';
   }
-  el('token-by-step').innerHTML = html || '<div class="ag-empty">无分项数据</div>';
+  el('token-by-step').innerHTML = html || `<div class="ag-empty">${t('无分项数据', 'No breakdown data')}</div>`;
 }
 function renderTokenByModel(s) {
   const byModel = s.by_model || {};
@@ -1022,9 +1088,9 @@ function renderTokenByModel(s) {
   let html = '';
   for (const [model, v] of Object.entries(byModel)) {
     const pct = total > 0 ? (v.total_tokens / total * 100).toFixed(1) : 0;
-    html += '<div class="ag-progress-row"><span class="ag-progress-label">' + escapeHtml(model) + '</span><span class="ag-progress-value">' + formatTokens(v.total_tokens) + '</span><span class="ag-progress-pct">' + pct + '% (' + v.calls + ' 次)</span><div class="ag-progress-bar"><div class="ag-progress-fill green" style="width:' + pct + '%"></div></div></div>';
+    html += '<div class="ag-progress-row"><span class="ag-progress-label">' + escapeHtml(model) + '</span><span class="ag-progress-value">' + formatTokens(v.total_tokens) + '</span><span class="ag-progress-pct">' + pct + '% (' + v.calls + ' ' + t('次', 'calls') + ')</span><div class="ag-progress-bar"><div class="ag-progress-fill green" style="width:' + pct + '%"></div></div></div>';
   }
-  el('token-by-model').innerHTML = html || '<div class="ag-empty">无分模型数据</div>';
+  el('token-by-model').innerHTML = html || `<div class="ag-empty">${t('无分模型数据', 'No per-model data')}</div>`;
 }
 async function loadTokenTrend(days, fromOverride, toOverride) {
   const trendEl = el('token-trend-chart');
@@ -1046,7 +1112,7 @@ function renderTokenTrend(data) {
   if (!trendChartInstance) trendChartInstance = echarts.init(dom);
   trendChartInstance.resize();
   const dates = data.dates || [], models = data.models || [], series = data.series || {};
-  const fmtTokens = (n) => { if (n >= 1e8) return (n / 1e8).toFixed(1) + '亿'; if (n >= 1e4) return (n / 1e4).toFixed(1) + '万'; return String(n || 0); };
+  const fmtTokens = (n) => { if (n >= 1e8) return (n / 1e8).toFixed(1) + t('亿', 'B'); if (n >= 1e4) return (n / 1e4).toFixed(1) + t('万', 'W'); return String(n || 0); };
   let xMin, xMax;
   if (dates.length > 0) { const d = 86400000; xMin = new Date(dates[0]).getTime() - d; xMax = new Date(dates[dates.length - 1]).getTime() + d; }
   trendChartInstance.setOption({
@@ -1071,21 +1137,21 @@ async function loadTokenRecent() {
   if (!recentEl) return;
   try {
     const records = await api('token-stats/recent?limit=10');
-    if (!records || records.length === 0) { recentEl.innerHTML = '<div class="ag-empty">暂无记录</div>'; return; }
-    let html = '<table class="ag-table"><tr><th>时间</th><th>步骤</th><th>模型</th><th>输入</th><th>输出</th><th>总计</th></tr>';
+    if (!records || records.length === 0) { recentEl.innerHTML = `<div class="ag-empty">${t('暂无记录', 'No records yet')}</div>`; return; }
+    let html = '<table class="ag-table"><tr><th>' + t('时间', 'Time') + '</th><th>' + t('步骤', 'Step') + '</th><th>' + t('模型', 'Model') + '</th><th>' + t('输入', 'Input') + '</th><th>' + t('输出', 'Output') + '</th><th>' + t('总计', 'Total') + '</th></tr>';
     for (const r of records.reverse()) {
-      const stepName = r.step === 'L3_security_judge' ? 'L3 安全判断' : r.step === 'step2_policy_gen' ? '策略生成' : escapeHtml(r.step);
+      const stepName = r.step === 'L3_security_judge' ? t('L3 安全判断', 'L3 Security Judge') : r.step === 'step2_policy_gen' ? t('策略生成', 'Policy Generation') : escapeHtml(r.step);
       const ts = r.timestamp ? escapeHtml(r.timestamp.slice(0, 19)) : '';
       html += '<tr><td>' + ts + '</td><td>' + stepName + '</td><td style="color:var(--ag-text-secondary)">' + escapeHtml(r.model || '') + '</td><td>' + r.prompt_tokens + '</td><td>' + r.completion_tokens + '</td><td><strong>' + r.total_tokens + '</strong></td></tr>';
     }
     html += '</table>';
     recentEl.innerHTML = html;
-  } catch (e) { recentEl.innerHTML = '<div class="ag-empty">加载失败</div>'; }
+  } catch (e) { recentEl.innerHTML = `<div class="ag-empty">${t('加载失败', 'Load failed')}</div>`; }
 }
 async function resetTokenStats() {
-  if (!confirm('确定清除所有 Token 统计数据？')) return;
-  try { await apiPost('token-stats/reset'); showToast('Token 统计已清除'); loadTokenStats(7); }
-  catch (e) { showToast('清除失败: ' + e.message, 'error'); }
+  if (!confirm(t('确定清除所有 Token 统计数据？', 'Clear all Token statistics?'))) return;
+  try { await apiPost('token-stats/reset'); showToast(t('Token 统计已清除', 'Token statistics cleared')); loadTokenStats(7); }
+  catch (e) { showToast(t('清除失败: ', 'Clear failed: ') + e.message, 'error'); }
 }
 
 // ===== 设置页 =====
@@ -1093,37 +1159,38 @@ function render_settings() {
   const eo = state.envOverrides || {};
   let envHtml = '';
   if (Object.keys(eo).length === 0) {
-    envHtml = '<div class="ag-empty">当前没有环境变量覆盖</div>';
+    envHtml = `<div class="ag-empty">${t('当前没有环境变量覆盖', 'No environment variable overrides currently')}</div>`;
   } else {
     for (const [k, v] of Object.entries(eo)) {
       const layerName = LAYER_NAMES[k]?.name || k;
-      envHtml += '<div class="ag-rule-item"><span class="ag-badge ' + (v.overridden ? 'ag-badge-critical' : 'ag-badge-low') + '">' + (v.overridden ? '强制禁用' : '无覆盖') + '</span><span style="font-size:13px">' + layerName + ': ' + escapeHtml(v.env_var || '') + '=' + escapeHtml(v.env_value || '') + '</span></div>';
+      envHtml += '<div class="ag-rule-item"><span class="ag-badge ' + (v.overridden ? 'ag-badge-critical' : 'ag-badge-low') + '">' + (v.overridden ? t('强制禁用', 'Forced disabled') : t('无覆盖', 'No override')) + '</span><span style="font-size:13px">' + layerName + ': ' + escapeHtml(v.env_var || '') + '=' + escapeHtml(v.env_value || '') + '</span></div>';
     }
   }
   el('page-settings').innerHTML = `
+    ${Object.keys(eo).length > 0 ? `
     <div class="ag-card">
-      <div class="ag-section-title">环境变量覆盖</div>
-      <div class="ag-section-desc">环境变量优先级最高，会覆盖 Web UI 的设置。清除环境变量后 Web 设置才能生效。</div>
+      <div class="ag-section-title">${t('环境变量覆盖', 'Environment Variable Overrides')}</div>
+      <div class="ag-section-desc">${t('环境变量优先级最高，会覆盖 Web UI 的设置。清除环境变量后 Web 设置才能生效。', 'Environment variables take highest priority and override Web UI settings. Web settings take effect only after clearing the environment variables.')}</div>
       ${envHtml}
-    </div>
+    </div>` : ''}
     <div class="ag-card">
-      <div class="ag-section-title">配置文件路径</div>
+      <div class="ag-section-title">${t('配置文件', 'Config File')}</div>
+      <div class="ag-section-desc">${t('你在本控制台做的所有修改（层级开关、各类规则、Agent 定制）都会自动保存到下面的配置文件中。它是策略的“存档”，可备份、迁移，或复制到其他机器复用同一套安全策略。', 'All your changes here (layer switches, rules, agent customizations) are saved automatically to the config file below. It is the "source of truth" for your policy — you can back it up, migrate it, or copy it to another machine to reuse the same security policy.')}</div>
       <div style="font-size:13px;line-height:1.8">
-        <p>配置文件: ~/.config/agentmoss/agent_moss_runtime.json</p>
-        <p>环境变量 AGENT_MOSS_RUNTIME_CONFIG_PATH 可指定自定义路径</p>
-        <p>优先级: 环境变量 > runtime JSON > config.json > 源码默认值</p>
+        <code>~/.config/agentmoss/agent_moss_runtime.json</code>
       </div>
     </div>
+    ${state.consoleAuthRequired ? `
     <div class="ag-card">
-      <div class="ag-section-title">访问 Token</div>
-      <div class="ag-section-desc">此处设置的是浏览器本地 token，console 调用 API 时以 Authorization: Bearer &lt;token&gt; 携带。服务端是否要求认证取决于环境变量 AGENT_MOSS_CONSOLE_TOKEN：未设置则本机免认证；已设置则请求须携带相同值才放行。当前本地 token：${getToken() ? '已设置' : '未设置'}</div>
-      <input class="ag-input" id="settings-token" placeholder="输入新 token" value="${getToken()}">
-      <div style="margin-top:8px"><button class="ag-btn ag-btn-primary" onclick="localStorage.setItem('am_console_token',document.getElementById('settings-token').value);showToast('已保存')">保存</button></div>
-    </div>
+      <div class="ag-section-title">${t('访问 Token', 'Access Token')}</div>
+      <div class="ag-section-desc">${t('服务端已开启访问认证（设置了 AGENT_MOSS_CONSOLE_TOKEN）。在此填入服务端配置的 token，浏览器会用它访问控制台；token 不匹配则无法查看或修改规则。', 'The server requires an access token (AGENT_MOSS_CONSOLE_TOKEN is set). Enter the token configured on the server; the browser will send it with every console request. An invalid token blocks viewing or editing rules.')}</div>
+      <input class="ag-input" id="settings-token" placeholder="${t('输入服务端配置的 token', 'Enter the server-configured token')}" value="${getToken()}">
+      <div style="margin-top:8px"><button class="ag-btn ag-btn-primary" onclick="localStorage.setItem('am_console_token',document.getElementById('settings-token').value);showToast(t('已保存','Saved'))">${t('保存', 'Save')}</button></div>
+    </div>` : ''}
     <div class="ag-card">
-      <div class="ag-section-title">危险操作</div>
-      <button class="ag-btn ag-btn-danger" onclick="if(confirm('确定重置所有规则到出厂默认？所有自定义规则和开关设置将丢失。')){apiPost('reset').then(c=>{state.config=c;state.envOverrides=api('env-overrides');renderCurrent();showToast('配置已重置到出厂默认')}).catch(e=>showToast('重置失败: '+e.message,'error'))}">重置规则到出厂默认</button>
-      <button class="ag-btn ag-btn-danger" style="margin-left:8px" onclick="resetTokenStats()">清除 Token 统计</button>
+      <div class="ag-section-title">${t('危险操作', 'Danger Zone')}</div>
+      <button class="ag-btn ag-btn-danger" onclick="if(confirm(t('确定重置所有规则到出厂默认？所有自定义规则和开关设置将丢失。','Reset all rules to factory defaults? All custom rules and switch settings will be lost.'))){apiPost('reset').then(c=>{state.config=c;return loadEnvOverrides().then(o=>{state.envOverrides=o;renderCurrent();showToast(t('配置已重置到出厂默认','Configuration reset to factory defaults'))})}).catch(e=>showToast(t('重置失败: ','Reset failed: ')+e.message,'error'))}">${t('重置规则到出厂默认', 'Reset Rules to Factory Defaults')}</button>
+      <button class="ag-btn ag-btn-danger" style="margin-left:8px" onclick="resetTokenStats()">${t('清除 Token 统计', 'Clear Token Statistics')}</button>
     </div>`;
 }
 
@@ -1131,46 +1198,46 @@ function render_settings() {
 function showAddRuleModal(layer) {
   currentModalAction = { type: 'add_rule', layer };
   const isL1 = layer === 'L1_rules', isL2 = layer === 'L2_rules';
-  const title = isL1 ? '新增 L1 静态规则' : '新增 L2 规则';
+  const title = isL1 ? t('新增 L1 静态规则', 'Add L1 Static Rule') : t('新增 L2 规则', 'Add L2 Rule');
   let formHtml = '';
   if (isL1) {
-    formHtml = `<div class="ag-form-group"><div class="ag-form-label">规则类型<span class="ag-required">*</span></div><select class="ag-select" id="rule-type" onchange="updateRuleForm()"><option value="pattern">正则模式匹配</option><option value="keyword">关键词匹配</option></select><div class="ag-form-hint">正则模式：用正则表达式匹配命令（如 <code>\\brm\\s+-rf</code>）；关键词匹配：命令中包含指定文字即命中。</div></div>
-      <div class="ag-form-group" id="form-pattern"><div class="ag-form-label">正则 Pattern<span class="ag-required">*</span></div><input class="ag-input" id="input-pattern" placeholder="如: \\brm\\s+-rf"><div class="ag-form-hint">Python 正则表达式，命中该正则的命令会触发本规则。</div></div>
-      <div class="ag-form-group" id="form-keyword" style="display:none"><div class="ag-form-label">关键词<span class="ag-required">*</span></div><input class="ag-input" id="input-keyword" placeholder="如: ignore previous instructions"><div class="ag-form-hint">命令文本中包含此关键词即命中（不区分大小写）。</div></div>
-      <div class="ag-form-group"><div class="ag-form-label">风险等级<span class="ag-required">*</span></div><select class="ag-select" id="input-risk-level"><option value="critical">Critical（严重）</option><option value="high">High（高危）</option><option value="medium">Medium（中危）</option><option value="low">Low（低危）</option></select><div class="ag-form-hint"><strong>critical / high</strong>：在 L1 层直接拦截（Deny），命令不会执行；<br><strong>medium / low</strong>：不在 L1 拦截，转交 L3 LLM 深度分析判断。</div></div>
-      <div class="ag-form-group"><div class="ag-form-label">风险类型</div><input class="ag-input" id="input-risk-type" placeholder="如: script_execution, file_access, data_exfiltration"><div class="ag-form-hint">风险分类标签，用于统计与展示。可选值：script_execution（脚本执行）、file_access（文件访问）、data_exfiltration（数据外泄）等，可自定义。</div></div>
-      <div class="ag-form-group"><div class="ag-form-label">拦截原因<span class="ag-required">*</span></div><input class="ag-input" id="input-reason" placeholder="描述为什么这条规则要拦截"><div class="ag-form-hint">命中时展示给用户的说明文字，应写清为什么危险。L3 分析时也会参考此原因。</div></div>
-      <div class="ag-form-group"><div class="ag-form-label">语言（仅关键词类型）</div><select class="ag-select" id="input-lang"><option value="en">English</option><option value="zh">中文</option></select><div class="ag-form-hint">关键词的语言，影响匹配时的分词处理。</div></div>
-      <div class="ag-form-group"><div class="ag-form-label">所属分类</div><select class="ag-select" id="input-category"><option value="user_custom">用户自定义</option><option value="dangerous_commands">危险命令检测</option><option value="injection_detection">注入攻击检测</option></select></div>`;
+    formHtml = `<div class="ag-form-group"><div class="ag-form-label">${t('规则类型', 'Rule Type')}<span class="ag-required">*</span></div><select class="ag-select" id="rule-type" onchange="updateRuleForm()"><option value="pattern">${t('正则模式匹配', 'Regex pattern matching')}</option><option value="keyword">${t('关键词匹配', 'Keyword matching')}</option></select><div class="ag-form-hint">${t('正则模式：用正则表达式匹配命令（如 ', 'Regex mode: match the command with a regex (e.g. ')}<code>\\brm\\s+-rf</code>${t('）；关键词匹配：命令中包含指定文字即命中。', '); keyword mode: command containing the text matches.')}</div></div>
+      <div class="ag-form-group" id="form-pattern"><div class="ag-form-label">${t('正则 Pattern', 'Regex Pattern')}<span class="ag-required">*</span></div><input class="ag-input" id="input-pattern" placeholder="${t('如: ', 'e.g. ')}${'\\brm\\s+-rf'}"><div class="ag-form-hint">${t('Python 正则表达式，命中该正则的命令会触发本规则。', 'Python regex. Commands matching this regex trigger this rule.')}</div></div>
+      <div class="ag-form-group" id="form-keyword" style="display:none"><div class="ag-form-label">${t('关键词', 'Keyword')}<span class="ag-required">*</span></div><input class="ag-input" id="input-keyword" placeholder="${t('如: ignore previous instructions', 'e.g. ignore previous instructions')}"><div class="ag-form-hint">${t('命令文本中包含此关键词即命中（不区分大小写）。', 'Command text containing this keyword matches (case-insensitive).')}</div></div>
+      <div class="ag-form-group"><div class="ag-form-label">${t('风险等级', 'Risk Level')}<span class="ag-required">*</span></div><select class="ag-select" id="input-risk-level"><option value="critical">Critical（${t('严重', 'Critical')}）</option><option value="high">High（${t('高危', 'High')}）</option><option value="medium">Medium（${t('中危', 'Medium')}）</option><option value="low">Low（${t('低危', 'Low')}）</option></select><div class="ag-form-hint"><strong>critical / high</strong>：${t('在 L1 层直接拦截（Deny），命令不会执行；', 'block directly at L1 (Deny), the command will not run;')}<br><strong>medium / low</strong>：${t('不在 L1 拦截，转交 L3 LLM 深度分析判断。', 'not blocked at L1; handed to L3 LLM deep analysis.')}</div></div>
+      <div class="ag-form-group"><div class="ag-form-label">${t('风险类型', 'Risk Type')}</div><input class="ag-input" id="input-risk-type" placeholder="${t('如: script_execution, file_access, data_exfiltration', 'e.g. script_execution, file_access, data_exfiltration')}"><div class="ag-form-hint">${t('风险分类标签，用于统计与展示。可选值：script_execution（脚本执行）、file_access（文件访问）、data_exfiltration（数据外泄）等，可自定义。', 'Risk classification label for stats and display. Options: script_execution, file_access, data_exfiltration, etc. Custom values allowed.')}</div></div>
+      <div class="ag-form-group"><div class="ag-form-label">${t('拦截原因', 'Block Reason')}<span class="ag-required">*</span></div><input class="ag-input" id="input-reason" placeholder="${t('描述为什么这条规则要拦截', 'Describe why this rule blocks')}"><div class="ag-form-hint">${t('命中时展示给用户的说明文字，应写清为什么危险。L3 分析时也会参考此原因。', 'Text shown to the user on match; explain why it is dangerous. L3 analysis also references this reason.')}</div></div>
+      <div class="ag-form-group"><div class="ag-form-label">${t('语言（仅关键词类型）', 'Language (keyword type only)')}</div><select class="ag-select" id="input-lang"><option value="en">English</option><option value="zh">中文</option></select><div class="ag-form-hint">${t('关键词的语言，影响匹配时的分词处理。', 'The language of the keyword affects tokenization during matching.')}</div></div>
+      <div class="ag-form-group"><div class="ag-form-label">${t('所属分类', 'Category')}</div><select class="ag-select" id="input-category"><option value="user_custom">${t('用户自定义', 'User custom')}</option><option value="dangerous_commands">${t('危险命令检测', 'Dangerous commands')}</option><option value="injection_detection">${t('注入攻击检测', 'Injection detection')}</option></select></div>`;
   } else if (isL2) {
-    formHtml = `<div class="ag-form-group"><div class="ag-form-label">规则类型<span class="ag-required">*</span></div><select class="ag-select" id="rule-type-l2" onchange="updateL2RuleForm()"><option value="path">敏感路径</option><option value="pattern">正则模式</option></select><div class="ag-form-hint">敏感路径：匹配文件路径（如 <code>/etc/shadow</code>）；正则模式：用正则匹配命令文本。</div></div>
-      <div class="ag-form-group" id="form-l2-path"><div class="ag-form-label">路径<span class="ag-required">*</span></div><input class="ag-input" id="input-l2-path" placeholder="如: /etc/shadow, .ssh/id_rsa"><div class="ag-form-hint">要拦截的文件路径，多个用英文逗号分隔。命令访问到这些路径即命中。</div></div>
-      <div class="ag-form-group" id="form-l2-pattern" style="display:none"><div class="ag-form-label">正则 Pattern<span class="ag-required">*</span></div><input class="ag-input" id="input-l2-pattern" placeholder="如: \\bpasswd\\s+--stdin"><div class="ag-form-hint">Python 正则表达式，命中即触发。</div></div>
-      <div class="ag-form-group"><div class="ag-form-label">描述<span class="ag-required">*</span></div><input class="ag-input" id="input-l2-desc" placeholder="路径/规则的中文描述"><div class="ag-form-hint">命中时展示给用户的说明。</div></div>
-      <div class="ag-form-group"><div class="ag-form-label">风险等级<span class="ag-required">*</span></div><select class="ag-select" id="input-l2-risk-level"><option value="critical">Critical（严重）</option><option value="high">High（高危）</option><option value="medium">Medium（中危）</option><option value="low">Low（低危）</option></select><div class="ag-form-hint"><strong>critical / high</strong>：在 L2 层直接拦截；<br><strong>medium / low</strong>：不在 L2 拦截，转交 L3 LLM 判断。</div></div>
-      <div class="ag-form-group"><div class="ag-form-label">拦截模式</div><select class="ag-select" id="input-l2-deny-mode"><option value="deny_write">仅拦截写入</option><option value="deny_read">仅拦截读取</option><option value="deny_both">读写均拦截</option></select><div class="ag-form-hint">选择该路径的拦截模式：仅拦截写入（默认）、仅拦截读取（如 /dev/random）、读写均拦截（凭据文件）。</div></div>
-      <div class="ag-form-group"><div class="ag-form-label">所属分类</div><select class="ag-select" id="input-l2-category"><option value="sensitive_path_access">敏感路径访问</option><option value="password_modify_consent">密码修改授权</option><option value="user_deletion_consent">用户删除授权</option><option value="intent_consistency">意图一致性</option></select></div>`;
+    formHtml = `<div class="ag-form-group"><div class="ag-form-label">${t('规则类型', 'Rule Type')}<span class="ag-required">*</span></div><select class="ag-select" id="rule-type-l2" onchange="updateL2RuleForm()"><option value="path">${t('敏感路径', 'Sensitive path')}</option><option value="pattern">${t('正则模式', 'Regex pattern')}</option></select><div class="ag-form-hint">${t('敏感路径：匹配文件路径（如 ', 'Sensitive path: match a file path (e.g. ')}<code>/etc/shadow</code>${t('）；正则模式：用正则匹配命令文本。', '); regex mode: match command text with regex.')}</div></div>
+      <div class="ag-form-group" id="form-l2-path"><div class="ag-form-label">${t('路径', 'Path')}<span class="ag-required">*</span></div><input class="ag-input" id="input-l2-path" placeholder="${t('如: /etc/shadow, .ssh/id_rsa', 'e.g. /etc/shadow, .ssh/id_rsa')}"><div class="ag-form-hint">${t('要拦截的文件路径，多个用英文逗号分隔。命令访问到这些路径即命中。', 'File paths to block; separate multiple with commas. Commands accessing these paths match.')}</div></div>
+      <div class="ag-form-group" id="form-l2-pattern" style="display:none"><div class="ag-form-label">${t('正则 Pattern', 'Regex Pattern')}<span class="ag-required">*</span></div><input class="ag-input" id="input-l2-pattern" placeholder="${t('如: ', 'e.g. ')}${'\\bpasswd\\s+--stdin'}"><div class="ag-form-hint">${t('Python 正则表达式，命中即触发。', 'Python regex; triggers on match.')}</div></div>
+      <div class="ag-form-group"><div class="ag-form-label">${t('描述', 'Description')}<span class="ag-required">*</span></div><input class="ag-input" id="input-l2-desc" placeholder="${t('路径/规则的中文描述', 'Chinese description of the path/rule')}"><div class="ag-form-hint">${t('命中时展示给用户的说明。', 'Description shown to the user on match.')}</div></div>
+      <div class="ag-form-group"><div class="ag-form-label">${t('风险等级', 'Risk Level')}<span class="ag-required">*</span></div><select class="ag-select" id="input-l2-risk-level"><option value="critical">Critical（${t('严重', 'Critical')}）</option><option value="high">High（${t('高危', 'High')}）</option><option value="medium">Medium（${t('中危', 'Medium')}）</option><option value="low">Low（${t('低危', 'Low')}）</option></select><div class="ag-form-hint"><strong>critical / high</strong>：${t('在 L2 层直接拦截；', 'block directly at L2;')}<br><strong>medium / low</strong>：${t('不在 L2 拦截，转交 L3 LLM 判断。', 'not blocked at L2; handed to L3 LLM.')}</div></div>
+      <div class="ag-form-group"><div class="ag-form-label">${t('拦截模式', 'Interception Mode')}</div><select class="ag-select" id="input-l2-deny-mode"><option value="deny_write">${t('仅拦截写入', 'Block Write Only')}</option><option value="deny_read">${t('仅拦截读取', 'Block Read Only')}</option><option value="deny_both">${t('读写均拦截', 'Block Both')}</option></select><div class="ag-form-hint">${t('选择该路径的拦截模式：仅拦截写入（默认）、仅拦截读取（如 /dev/random）、读写均拦截（凭据文件）。', 'Choose interception mode: block write only (default), block read only (e.g. /dev/random), block both (credential files).')}</div></div>
+      <div class="ag-form-group"><div class="ag-form-label">${t('所属分类', 'Category')}</div><select class="ag-select" id="input-l2-category"><option value="sensitive_path_access">${t('敏感路径访问', 'Sensitive path access')}</option><option value="password_modify_consent">${t('密码修改授权', 'Password modify consent')}</option><option value="user_deletion_consent">${t('用户删除授权', 'User deletion consent')}</option><option value="intent_consistency">${t('意图一致性', 'Intent consistency')}</option></select></div>`;
   }
   openModal(title, formHtml);
 }
 function showAddSkillModal() {
   currentModalAction = { type: 'add_skill' };
-  openModal('新增 L3 Skill', `<div class="ag-form-group"><div class="ag-form-label">Skill ID（文件名）</div><input class="ag-input" id="input-skill-id" placeholder="如: my_custom_guard"><div class="ag-form-hint">Skill 文件名（不含扩展名），英文+下划线。会成为该 Skill 的唯一标识。</div></div>
-    <div class="ag-form-group"><div class="ag-form-label">触发关键词<span class="ag-required">*</span></div><input class="ag-input" id="input-skill-keywords" placeholder="逗号分隔, 如: custom, 特殊, special"><div class="ag-form-hint">命令/动作中包含这些关键词时，该 Skill 会被匹配并注入 L3 的 LLM prompt。</div></div>
-    <div class="ag-form-group"><div class="ag-form-label">Skill 内容（Markdown）<span class="ag-required">*</span></div><textarea class="ag-input" id="input-skill-content" rows="4" placeholder="# Skill 规则标题\n\n## 适用场景\n..."></textarea><div class="ag-form-hint">Markdown 格式的规则说明。命中关键词后会作为提示注入 LLM。</div></div>
-    <div class="ag-form-group"><div class="ag-form-label">所属分类</div><select class="ag-select" id="input-skill-category"><option value="user_custom">用户自定义</option><option value="file_operations">文件操作</option><option value="network_security">网络安全</option><option value="intent_and_general">意图/通用</option></select></div>`);
+  openModal(t('新增 L3 Skill', 'Add L3 Skill'), `<div class="ag-form-group"><div class="ag-form-label">${t('Skill ID（文件名）', 'Skill ID (file name)')}</div><input class="ag-input" id="input-skill-id" placeholder="${t('如: my_custom_guard', 'e.g. my_custom_guard')}"><div class="ag-form-hint">${t('Skill 文件名（不含扩展名），英文+下划线。会成为该 Skill 的唯一标识。', 'Skill file name (without extension), letters + underscores. Becomes the Skill’s unique ID.')}</div></div>
+    <div class="ag-form-group"><div class="ag-form-label">${t('触发关键词', 'Trigger Keywords')}<span class="ag-required">*</span></div><input class="ag-input" id="input-skill-keywords" placeholder="${t('逗号分隔, 如: custom, 特殊, special', 'comma-separated, e.g. custom, special')}"><div class="ag-form-hint">${t('命令/动作中包含这些关键词时，该 Skill 会被匹配并注入 L3 的 LLM prompt。', 'When the command/action contains these keywords, the Skill matches and is injected into the L3 LLM prompt.')}</div></div>
+    <div class="ag-form-group"><div class="ag-form-label">${t('Skill 内容（Markdown）', 'Skill Content (Markdown)')}<span class="ag-required">*</span></div><textarea class="ag-input" id="input-skill-content" rows="4" placeholder="# Skill 规则标题\n\n## 适用场景\n..."></textarea><div class="ag-form-hint">${t('Markdown 格式的规则说明。命中关键词后会作为提示注入 LLM。', 'Markdown rule description. Injected into the LLM prompt on keyword match.')}</div></div>
+    <div class="ag-form-group"><div class="ag-form-label">${t('所属分类', 'Category')}</div><select class="ag-select" id="input-skill-category"><option value="user_custom">${t('用户自定义', 'User custom')}</option><option value="file_operations">${t('文件操作', 'File operations')}</option><option value="network_security">${t('网络安全', 'Network security')}</option><option value="intent_and_general">${t('意图/通用', 'Intent/general')}</option></select></div>`);
 }
 function updateRuleForm() {
-  const t = document.getElementById('rule-type')?.value;
+  const tt = document.getElementById('rule-type')?.value;
   const p = document.getElementById('form-pattern'), k = document.getElementById('form-keyword');
-  if (p) p.style.display = t === 'pattern' ? '' : 'none';
-  if (k) k.style.display = t === 'keyword' ? '' : 'none';
+  if (p) p.style.display = tt === 'pattern' ? '' : 'none';
+  if (k) k.style.display = tt === 'keyword' ? '' : 'none';
 }
 function updateL2RuleForm() {
-  const t = document.getElementById('rule-type-l2')?.value;
+  const tt = document.getElementById('rule-type-l2')?.value;
   const p = document.getElementById('form-l2-path'), k = document.getElementById('form-l2-pattern');
-  if (p) p.style.display = t === 'path' ? '' : 'none';
-  if (k) k.style.display = t === 'pattern' ? '' : 'none';
+  if (p) p.style.display = tt === 'path' ? '' : 'none';
+  if (k) k.style.display = tt === 'pattern' ? '' : 'none';
 }
 async function submitModal() {
   if (!currentModalAction) return;
@@ -1198,7 +1265,7 @@ async function submitModal() {
         else { body.pattern = document.getElementById('input-l2-pattern')?.value; body.risk_type = 'script_execution'; }
       }
       state.config = await apiPost('rules', body);
-      showToast('规则已添加');
+      showToast(t('规则已添加', 'Rule added'));
     } else if (currentModalAction.type === 'add_skill') {
       const keywords = (document.getElementById('input-skill-keywords')?.value || '').split(',').map(s => s.trim()).filter(Boolean);
       state.config = await apiPost('skills', {
@@ -1207,45 +1274,70 @@ async function submitModal() {
         keywords,
         content: document.getElementById('input-skill-content')?.value,
       });
-      showToast('Skill 已添加');
+      showToast(t('Skill 已添加', 'Skill added'));
     } else if (currentModalAction.type === 'agent_rule') {
       const { agentId, cat, isValueCat } = currentModalAction;
       const payload = { agent_id: agentId, category: cat };
       if (isValueCat) {
         payload.value = el('ar-value').value.trim();
-        if (!payload.value) { showToast('值不能为空', 'error'); return; }
+        if (!payload.value) { showToast(t('值不能为空', 'Value cannot be empty'), 'error'); return; }
       } else {
         payload.pattern = el('ar-pattern').value.trim();
         payload.risk_level = el('ar-risk_level').value.trim() || undefined;
       }
       state.agentRules = await apiPost('agents/rules', payload);
-      showToast('Agent 规则已添加');
+      showToast(t('Agent 规则已添加', 'Agent rule added'));
     }
     renderCurrent();
     closeModal();
-  } catch (e) { showToast('添加失败: ' + e.message, 'error'); }
+  } catch (e) { showToast(t('添加失败: ', 'Add failed: ') + e.message, 'error'); }
 }
 
 // ===== Tab nav + theme =====
-document.querySelectorAll('.ag-tab[data-page]').forEach(t => {
-  t.onclick = () => {
+document.querySelectorAll('.ag-tab[data-page]').forEach(tab => {
+  tab.onclick = () => {
     stopTokenAutoRefresh();
-    state.currentPage = t.dataset.page;
+    state.currentPage = tab.dataset.page;
     document.querySelectorAll('.ag-tab').forEach(x => x.classList.remove('active'));
-    t.classList.add('active');
+    tab.classList.add('active');
     renderCurrent();
   };
 });
+function applyTabLabels() {
+  const labels = {
+    overview: t('概览', 'Overview'),
+    search: t('搜索规则', 'Search Rules'),
+    l1: t('L1 规则', 'L1 Rules'),
+    l2: t('L2 规则', 'L2 Rules'),
+    l3: t('L3 Skills', 'L3 Skills'),
+    agents: t('Agent 定制', 'Agent Rules'),
+    token: t('Token', 'Token'),
+    settings: t('设置', 'Settings'),
+  };
+  document.querySelectorAll('.ag-tab[data-page]').forEach(tab => {
+    tab.textContent = labels[tab.dataset.page] || tab.textContent;
+  });
+  const themeBtn = el('theme-btn');
+  if (themeBtn) themeBtn.textContent = document.documentElement.getAttribute('data-theme') === 'dark' ? t('☀️ 浅色', '☀️ Light') : t('🌙 暗色', '🌙 Dark');
+  const closeBtn = document.querySelector('.ag-modal-close');
+  if (closeBtn) closeBtn.setAttribute('title', t('关闭', 'Close'));
+  const cancelBtn = el('modal-actions') ? document.querySelector('#modal-actions .ag-btn-ghost') : null;
+  if (cancelBtn) cancelBtn.textContent = t('取消', 'Cancel');
+  const submitBtn = el('modal-submit');
+  if (submitBtn) submitBtn.textContent = t('确认', 'Confirm');
+}
 el('theme-btn').onclick = () => {
   const cur = document.documentElement.getAttribute('data-theme');
   const next = cur === 'dark' ? 'light' : 'dark';
   document.documentElement.setAttribute('data-theme', next);
-  el('theme-btn').textContent = next === 'dark' ? '☀️ 浅色' : '🌙 暗色';
+  el('theme-btn').textContent = next === 'dark' ? t('☀️ 浅色', '☀️ Light') : t('🌙 暗色', '🌙 Dark');
   if (state.currentPage === 'token') render_token();
 };
 
 // ===== Init =====
-refreshConfig().catch(e => { document.body.innerHTML = '<div style="padding:40px;color:#FF3B30">加载失败: ' + e.message + '</div>'; });
+applyTitle();
+applyTabLabels();
+refreshConfig().catch(e => { document.body.innerHTML = '<div style="padding:40px;color:#FF3B30">' + t('加载失败: ', 'Load failed: ') + escapeHtml(e.message) + '</div>'; });
 </script>
 </body>
 </html>