@sema-agent/client-core 0.112.0 → 0.113.0

package/dist/i18n/messages.en.js

@@ -209,14 +209,14 @@ const EN = {
     'onboard.plan.modelsNotList': 'The model catalog has a "models" that is not a list — not rewriting it.',
     'onboard.plan.modelsItemNotObject': 'The model catalog has a models[] item that is not an object — not rewriting it.',
     'onboard.plan.envNotObject': 'The settings file has an "env" that is not an object — not rewriting it.',
-    'onboard.plan.envCatalogPresent': 'The engine is serving "{model}" from environment settings and the catalog has no enabled model; a first catalog model would replace the environment models. Add them to the catalog first.',
+    'onboard.plan.envCatalogPresent': 'The engine is using "{model}" from its environment settings; a model added here would replace it, so nothing was saved. To add models, remove the model items from those settings first; or keep using it.',
     'onboard.input.keyInFields': 'The model ID / base URL contains the API key — check the fields.',
     'model.pool.add.duplicate': '"{model}" is listed twice in this batch with the same address — add it once.',
     'model.pool.add.probeFailed': 'The provider rejected "{model}" (key, model name or reply format) — fix it and check again.',
     'model.pool.add.probeUnverified': '"{model}" hasn\'t been checked against its provider (or the check couldn\'t finish) — check it again, or save it as unverified.',
     'model.pool.add.pinMoved': 'The model list changed while "{name}" was being saved (its name or stored key moved) — nothing was added. Try again.',
     'model.pool.notFound': 'There is no model named "{name}" in the model list.',
-    'model.pool.importEnv.notYet': 'The engine is serving "{model}" from its environment settings. This app can\'t copy environment models into the model list yet — add them by hand (address and key) first, then add more.',
+    'model.pool.importEnv.notYet': 'The engine uses "{model}" from its environment settings. This app can\'t move it into the model list yet — nothing was saved. To add models, remove the model items from those settings first; or keep using it.',
     'model.pool.tier.badGroup': 'A tier group name must start with a letter or digit and use only letters, digits, ".", "_" or "-".',
     'model.pool.tier.noGroup': 'There is no tier group named "{group}".',
     'model.pool.tier.groupExists': 'A tier group named "{group}" already exists.',
@@ -233,7 +233,7 @@ const EN = {
     'onboard.refusal.writeConflict': 'Another program changed the configuration while saving — nothing was saved; try again.',
     'onboard.refusal.writeFailed': 'The model configuration could not be saved.',
     'onboard.refusal.engineIsRemote': "The Cloud engine is in use — local model setup doesn't apply to it. Switch to the local engine first.",
-    'onboard.refusal.envCatalogPresent': 'The engine is serving models from environment settings; adding the first catalog model would replace them, so nothing was saved. Add those models to the catalog first.',
+    'onboard.refusal.envCatalogPresent': 'The engine is using models from its environment settings; a model added here would replace them, so nothing was saved. To add models, remove the model items from those settings first; or keep using them.',
     'config.mcp.nameBlank': 'An MCP server entry{where} has a name that cannot be used ({name}), so it was not started. Give it a name, or remove the entry.',
     'config.mcp.nameEdgeWhitespace': 'MCP server name {name}{where} cannot be used as written, so the server was not started: it would not match the same name in other settings (for example a list of disabled servers). Remove the extra whitespace from the name.',
     'config.mcp.nameCollides': 'MCP server name {name}{where} cannot be used as written, so the server was not started: without its leading or trailing whitespace it would be the same name as another MCP server entry. Remove the extra whitespace from the name, or delete the duplicate entry.',
@@ -317,6 +317,12 @@ const EN = {
     'approval.policyDeny.tail': 'The action was NOT performed. Do not claim it succeeded, and do not retry it in this session — report the limitation to the user, or suggest an alternative.',
     'approval.decision.grantChanged': 'The engine refused this approval because the skill grant it was bound to has changed since the card was shown · Nothing was decided and the request is still waiting, but approving it again will be refused the same way · Deny this request so the model can activate the skill again',
     'approval.decision.answerInvalid': 'The engine rejected the answer itself because it does not fit the question that was asked · Nothing was decided and the question is still waiting · Correct the answer and send it again',
+    'approval.routeMissing.line': 'Your answer was not delivered: the server did not recognise the address this app used to send the answer (not_found.route). Nothing was decided and the request is still waiting; reconnecting may fix it.',
+    'approval.notSent.noVerb': 'No approval card was shown: this server takes approval answers at a newer address than this app uses. Nothing was sent and the request is still waiting; a newer version of this app is needed to answer it.',
+    'approval.notSent.cardUnreadable': 'No approval card was shown: this app could not read this approval request, so it cannot be answered here. Nothing was sent and the request is still waiting; a newer version of this app may be able to answer it.',
+    'approval.notSent.noVerbOldServer': 'No approval card was shown: this app can only answer approvals on servers at version {version} or later, and it could not confirm that this server is one. Nothing was sent and the request is still waiting; reconnecting may fix it, otherwise the server needs to be upgraded.',
+    'approval.decision.notSentOldServer': 'Your answer was not sent: this app can only answer approvals on servers at version {version} or later, and it could not confirm that this server is one. Nothing was decided and the request is still waiting; reconnecting may fix it, otherwise the server needs to be upgraded.',
+    'approval.decision.notSentNewerAddress': 'Your answer was not sent: this server takes approval answers at a newer address than this app uses. Nothing was decided and the request is still waiting; a newer version of this app is needed to answer it.',
     'approval.editRefusal.stem': 'this request does not expose its tool arguments here, so an edited approval cannot be applied',
     'approval.editRefusal.line': 'That approval was NOT sent: {stem}. The request is still waiting — approve or deny it as it is.',
     'approval.editRefusal.parkReason': 'the card returned an edited approval, but {stem} — nothing was sent (the arguments are missing from the pending approval record, or replaced there by a size marker); approve or deny it as it is',
@@ -406,6 +412,8 @@ const EN = {
     'resume.refusal.parentConstraintMissing': "This parked work was suspended under policy constraints inherited from its parent tasks, and this resume did not re-supply them (resuming without them would silently drop the parents' gate) · {safe} · Retry with the parent policy chain re-supplied",
     'resume.refusal.parentConstraintMismatch': 'The parent policy constraints supplied with this resume do not match the ones this work was parked under (a partial or different chain would run it under thinner or different parent rules) · {safe} · Retry with the full original parent chain',
     'resume.refusal.constraintUnprojectable': 'This resume carried an edited approval, but the policy inherited from the parent tasks cannot be re-checked against an edit · {safe} · Decide it again without editing the input — an unedited approval is not affected by this refusal',
+    'resume.refusal.isolationScopeMismatch': 'This resume named a different isolation scope than the one recorded when the work was parked · {safe} · Retry with the recorded isolation scope, or omit it to inherit it',
+    'resume.refusal.agentDefinitionMismatch': "This parked agent's name now resolves to a definition with different tool lists than the one it was parked under, or its record does not say which lists it ran under · {safe} · Resume it where the name resolves to the definition it was parked under, or let it expire",
     'resume.refusal.preflightWaitable': "The deployment's resume preflight refused this attempt · The refusal happened before the commit — your decision was not consumed · The engine supplied a wait, so this token stays redeemable once the obstacle clears",
     'resume.refusal.preflightNoWait': "The deployment's resume preflight refused this attempt · The refusal happened before the commit — your decision was not consumed · The engine supplied no wait, so this refusal does not say whether the token stays redeemable",
     'resume.refusal.policyBlock': "The engine refused to resume this parked work at its admission check (the engine reports that its admission policy changed since the work was first accepted) · {reason} · This refusal does not say whether anything was consumed before it or whether a retry would pass — check the task's current state before deciding again, and ask whoever operates this deployment if it keeps happening",
@@ -455,7 +463,6 @@ const EN = {
     'resume.refusal.park.blockedInteractive': 'sema will not put the card for run {run} back on screen by itself: this engine version refuses to resume it. To free this conversation, send a message — sema then offers to cancel that run (if the card comes back instead, answer it first), after which you can send the work again as a new message.',
     'session.selfHeal.wayOut.interactive': 'run /clear to keep working in a fresh session',
     'session.selfHeal.freshSession.default': 'start a new session (drop --resume/--continue)',
-    'session.selfHeal.freshSession.defaultCapitalized': 'Start a new session (drop --resume/--continue)',
     'session.selfHeal.gate.kind': 'a {kind} decision',
     'session.selfHeal.gate.generic': 'a decision',
     'session.selfHeal.handle.run': ' (run {taskId})',
@@ -474,6 +481,8 @@ const EN = {
     'session.selfHeal.injected.steerRejected': '{lead} was not delivered: passing it to the reply already in progress{id} was refused ({detail}). sema did not retry, so the model has not seen it.',
     'session.selfHeal.injected.decisionInFlight': '{lead} was not delivered: this session is still busy with an earlier reply{id}, and your answer to the decision it is waiting on is still on its way. sema did not retry, so the model has not seen it.',
     'session.selfHeal.injected.dismissedPlan': '{lead} was not delivered: this session is held by an earlier reply{id} whose plan is waiting for your review, and you closed that approval card — {closed}. Send a message when you want the card back; sema did not retry, so the model has not seen it.',
+    'session.selfHeal.injected.planReopenConversationLeft': '{lead} was not delivered: this session is held by an earlier reply{id} whose plan is waiting for your review, but this screen is no longer on the conversation that plan belongs to, so sema did not show the approval card here — it appears again when you go back to that conversation. sema did not retry, so the model has not seen it.',
+    'session.selfHeal.injected.planReopenConversationUnconfirmed': '{lead} was not delivered: this session is held by an earlier reply{id} whose plan is waiting for your review, and sema could not confirm that this screen is still on the conversation that plan belongs to, so it did not show the approval card. sema did not retry, so the model has not seen it.',
     'session.selfHeal.injected.queuedOn': '{lead} is queued on an earlier reply{id} that is paused waiting for a decision',
     'session.selfHeal.injected.queuedShown': '{queuedOn}; sema has shown that decision card, and the message is picked up once you answer it.',
     'session.selfHeal.injected.queuedInFlight': '{queuedOn}; your answer to it is still on its way, and the message is picked up once that answer is applied.',
@@ -512,6 +521,8 @@ const EN = {
     'session.selfHeal.row.planReopenFailed.dismissed': 'The previous turn is parked waiting for a plan review (run {taskId}), and you closed its approval card — {closed}. It did NOT cancel the run — that would have discarded the plan for you. Your message was NOT sent; send it again to bring the card back.',
     'session.selfHeal.row.planReopenFailed.withKeep': 'The previous turn is parked waiting for a plan review (run {taskId}) and sema could not reopen that approval card{noView}. It did NOT cancel the run — that would have discarded the plan for you. Your message was NOT sent. To keep this conversation, {keep}: the card comes back when the session resumes, if it is still waiting. Or {wayOut} if you no longer want that plan.{viaEngine}',
     'session.selfHeal.row.planReopenFailed.noKeep': 'The previous turn is parked waiting for a plan review (run {taskId}) and sema could not reopen that approval card{noView}. It did NOT cancel the run — that would have discarded the plan for you. Your message was NOT sent; {wayOut} if you no longer want that plan.{viaEngine}',
+    'session.selfHeal.row.planReopenFailed.conversationLeft': 'The previous turn is parked waiting for a plan review (run {taskId}), but this screen is no longer on the conversation that review belongs to, so sema did not put the approval card on screen here. It did NOT cancel the run — that would have discarded the plan for you. Your message was NOT sent. Go back to that conversation and the plan card will appear again.',
+    'session.selfHeal.row.planReopenFailed.conversationUnconfirmed': 'The previous turn is parked waiting for a plan review (run {taskId}), but sema could not confirm that this screen is still on the conversation that review belongs to, so it did not reopen the approval card. It did NOT cancel the run — that would have discarded the plan for you. Your message was NOT sent; send it again from that conversation to bring the card back.',
     'session.selfHeal.row.steered.textOnly': 'Only the TEXT of your message was handed over — if that submission also had images or attachments, they were NOT sent.',
     'session.selfHeal.row.steered.tail.following': 'sema is following that run and will surface whatever it asks for next.',
     'session.selfHeal.row.steered.tail.watch': 'watch that run for what it does with it.',
@@ -572,9 +583,12 @@ const EN = {
     'session.selfHeal.endRun.engineInteractive.noId': 'end that run on the engine',
     'session.selfHeal.wakeOn.engine': ' (POST /v1/sessions/:id/wake)',
     'session.selfHeal.wakeOn.host': ' ({where})',
-    'session.selfHeal.headless.decide': 'This session is held by an earlier run{handle}{status} that is parked waiting on {gate}, so this message was NOT sent. Decide it and the session unlocks: POST {decidePath}. Ending that run instead also unlocks it, but it decides that item against you: {endRun}. Or {freshSession}.{governance}',
-    'session.selfHeal.headless.statusOnly': 'This session is held by an earlier run{handle} with status {status}, so this message was NOT sent. The engine reported no decision pending on that run: if it is still working, wait for it to finish; if it will never settle, {endRun} — that discards whatever it was doing. Or {freshSession}.',
-    'session.selfHeal.headless.neverReleased': 'A run is still active on this session{handle} and was never released, so sema did NOT send this message. Nothing here clears on its own. {startOver}, or {endRun}.',
+    'session.busy.running': 'This session is locked by an earlier run{handle} that the engine reports as still running, so this message was NOT sent. If it is still working, wait for it to finish; if it will never finish, {endRun} — that discards whatever it was doing — or {freshSession}.',
+    'session.busy.parked': 'This session is locked by an earlier run{handle} that has not been released, so this message was NOT sent. Nothing releases it on its own — {endRun}, or {freshSession}.',
+    'session.busy.parkedDecide': 'This session is held by an earlier run{handle}{status} that is parked, so this message was NOT sent. The engine reports {gate} waiting in this session: decide it at POST {decidePath}, then send this message again. If the session is still held after that, {endRun} — that may discard what that run was waiting on — or {freshSession}.{governance}',
+    'session.busy.unreadable': 'This session is locked by an earlier run{handle}, so this message was NOT sent. sema cannot read what that run is doing — {endRun}, or {freshSession}.',
+    'session.busy.released': 'The run that was holding this session has just been released, so this message was NOT sent. Send it again.',
+    'session.busy.freshSession.interactive': 'start a new session',
     'approval.deniedBy.policy': "denied by this deployment's permission policy",
     'approval.deniedBy.hook': 'denied by a PreToolUse hook',
     'approval.deniedBy.org': 'denied by an organization rule',
@@ -596,15 +610,26 @@ const EN = {
     'approval.origin.hook': 'a PreToolUse hook asked about this call',
     'approval.origin.askRule': 'a persisted ask rule matches this call',
     'approval.origin.denialLimitFallback': 'the auto-mode classifier hit its denial limit and handed this call back to you',
+    'approval.origin.integrityGuard': 'an always-on engine integrity guard asks about this call (removing a protected location, a recursive delete it cannot verify, shell text it cannot read, or a write to the session transcript; this client cannot tell which from the origin alone)',
     'approval.origin.shellGateTighten': 'the coarse shell check rates this command above the tier it lets through, so it asks',
-    'approval.origin.safetyTighten': 'the gate tightened on this call’s own facts (network egress, irreversibility, or a protected write; this client cannot tell which from the origin alone)',
+    'approval.origin.safetyTighten': 'the gate tightened on this call’s own facts (for example network egress, irreversibility or a protected write, among other cases; this client cannot tell which from the origin alone)',
     'approval.origin.policy': 'this deployment’s permission policy, or the permission mode’s default, asks about this call',
     'approval.origin.unknownWithWord': 'this call asks; its origin {word} is a word newer than this client, so answer it as usual',
     'approval.origin.unknownNoWord': 'this call asks; its origin is a word newer than this client, so answer it as usual',
+    'approval.originHeadline.ancestorMarked': 'The task that started this work set it to wait for a person; it stays paused.',
+    'approval.originHeadline.orgUnavailable': "Your organization's policy couldn't be checked, so this one needs your decision.",
+    'approval.originHeadline.orgRule': 'A rule from your organization says this one needs your decision.',
+    'approval.originHeadline.ruleStoreUnavailable': "It's unclear whether your saved rules forbid this, so it needs your decision.",
+    'approval.originHeadline.hook': 'A hook that checks tool use asked for your OK; this runs only if you allow it.',
+    'approval.originHeadline.denialLimitFallback': 'Auto mode hit its limit on automatic refusals, so this one needs your decision.',
+    'approval.originHeadline.shellGateTighten': 'The built-in check for shell commands wants your OK before this command runs.',
+    'approval.originHeadline.safetyTighten': 'A built-in safety check needs your OK for this action; it runs only if allowed.',
+    'approval.originHeadline.integrityGuard': 'A built-in protection asked about this action; its own words are in the details.',
+    'approval.originHeadline.unknown': 'The reason for asking is newer than this app; answer it as you usually would.',
     'approval.ruleOffer.absence.allowOutranked': 'no "don\'t ask again" option here: an allow rule already matches this call, but this question outranks it — another allow rule would be outranked the same way',
     'approval.ruleOffer.absence.askRuleMatched': 'no "don\'t ask again" option here: an ask rule matches this call and keeps asking — an allow rule changes nothing while it stands; to stop being asked, review your ask rules',
     'approval.ruleOffer.absence.askRuleMatchedDeploymentList': 'no "don\'t ask again" option here: this deployment asks about every call to this tool and your own rules cannot switch that off — the "in this session" option stops it asking again until the session ends',
-    'approval.ruleOffer.absence.laneCannotSpeak': 'no "don\'t ask again" option here: this approval lane cannot persist rules',
+    'approval.ruleOffer.absence.laneCannotSpeak': 'no "don\'t ask again" option here: this card has no rule to offer for this exact command, so it is approved each time; a form of what you trust that a rule can cover can still get one — through a card drawn for that form, or in settings',
     'approval.ruleOffer.absence.unknown': 'no "don\'t ask again" option here (the reason is one this build does not know yet)',
     'approval.ruleOffer.uncovered.redirection': 'always asks (shell redirection)',
     'approval.ruleOffer.uncovered.noRuleForm': 'no coverable rule form',
@@ -862,8 +887,21 @@ const EN = {
     'notice.classifier.denialLimit.tail': 'Review the transcript, then change the step that keeps getting blocked or make an approver available, and run it again.',
     'notice.task.lateApproval': 'Your approval for "{tool}" was not consumed: a run or turn interrupt released that request before your decision landed, so the tool did not run and nothing was settled by your answer. This is a timing fact, not an error; ask again if that step is still needed.',
     'notice.task.haltUnconsumed': "Your stop request did not cut anything: the run was already ending for its own reason when it arrived, so nothing was stopped by it and the run's own ending stands.",
+    'notice.turnInterrupted.extensionAbort': 'An extension ended the running turn — tool calls that had already finished keep their results.',
+    'notice.turnInterrupted.extensionAbortNamed': 'The extension "{extension}" ended the running turn — tool calls that had already finished keep their results.',
     'notice.steering.parkedInputBlocked': "An instruction you sent while this run was paused was blocked when the run resumed: this deployment's input screen withheld it, so it never reached the model. Send it again if it still applies.",
     'notice.model.capabilityDowngraded.image': 'The images in this conversation were not sent to {model}: its catalog entry declares that it does not take image input, so each image reaches it as a one-line placeholder. If it can read images, declare that in the model entry (input: ["text", "image"]); otherwise switch to a model that can.',
+    'notice.rewind.boundaryUnrecorded.notSaved': 'The state of your files at the start of this turn could not be saved, so rewinding the files to this turn will be refused.',
+    'notice.rewind.boundaryUnrecorded.timedOut': 'Saving the state of your files at the start of this turn did not finish in time, so rewinding the files to this turn will be refused.',
+    'notice.rewind.boundaryUnrecorded.tail': 'The turn itself carries on. If you need to get back to how the files were at its start, rely on a copy you keep yourself, such as version control.',
+    'notice.inheritEnv.declaredLate': "Every shell command this execution environment would start is being refused. Its inheritEnv list names {name} (inheritEnv[{index}]), and a declaration made after the environment was built (declareWithheldEnv) now marks that variable as the engine's own service credential, which a child process may not inherit. No retry will succeed until the declaration or the list changes: make the declaration before the environment is built, or take that entry out of inheritEnv.",
+    'notice.mods.stopEnded.point.run': "the run's stop point",
+    'notice.mods.stopEnded.point.agent': "a delegated agent's stop point",
+    'notice.mods.stopEnded.point.other': 'a stop point',
+    'notice.mods.stopEnded.lead.named': 'The extension "{registration}" ended {point}: the run was not sent back to keep working from here, and the model was not told.',
+    'notice.mods.stopEnded.lead.anon': 'A stop handler ended {point}: the run was not sent back to keep working from here, and the model was not told.',
+    'notice.mods.stopEnded.reason': 'Its reason: "{reason}".',
+    'notice.mods.stopEnded.tail': 'This applies to this stop point only; a later stop point asks again. If this is not what you intended, check the stop handlers that apply here.',
     'rules.refusal.sentence.one': 'permissions: 1 rule will not be enforced — {list}',
     'rules.refusal.sentence.other': 'permissions: {count} rules will not be enforced — {list}',
     'rules.refusal.item': '{rule} ({reason})',
@@ -909,6 +947,8 @@ const EN = {
     'config.hooks.httpPolicy.urlListMalformed': 'HTTP hook blocked: allowedHttpHookUrls is not a list of strings ({layer}), so it is read as empty and no HTTP hook runs — the {event} hook for {url} does not run.',
     'config.hooks.httpPolicy.envListMalformed': 'HTTP hook {url} ({event}) runs without environment variables: httpHookAllowedEnvVars is not a list of strings ({layer}), so it is read as empty.',
     'config.hooks.httpPolicy.layerUnreadable': 'HTTP hook blocked: the settings of {layer} could not be read, so its allowedHttpHookUrls cannot be checked and no HTTP hook runs — the {event} hook for {url} does not run.',
+    'config.hooks.layerWithheld.degraded': '{layer}: could not be read in full this turn (the settings were too large to read, or this layer is malformed or not loaded yet), so its hooks and the hooks of the other user-editable settings are not sent — only managed-settings hooks run.',
+    'config.hooks.plan.reason.layerDegraded': 'another settings layer could not be read in full this turn, so only managed-settings hooks are sent',
     'config.hooks.layerWithheld.trust': '{layer}: hooks will not run — this client has no workspace-trust step, and hooks in repository-controlled settings are only allowed once the workspace is trusted. Hooks from user, flag and managed settings are unaffected.',
     'config.taskRequest.memoryOff.settingsSectionNotObject': 'memoryOffDeclared: the memory section of settings must be an object — got {shape}.',
     'config.taskRequest.memoryOff.enabledNotBoolean': 'memoryOffDeclared: memory.enabled in settings must be a boolean when present — got {shape}.',
@@ -1198,6 +1238,12 @@ const EN = {
     'session.humanTurn.degraded.noImageSeat.other': '{count} images were not sent: images cannot be added to a run in progress — send them as a new message when the run ends',
     'session.humanTurn.degraded.noAttachmentIdSeat.one': '1 uploaded file was not attached: files cannot be added to a run in progress — send it as a new message when the run ends',
     'session.humanTurn.degraded.noAttachmentIdSeat.other': '{count} uploaded files were not attached: files cannot be added to a run in progress — send them as a new message when the run ends',
+    'session.humanTurn.degraded.noPathSeat.one': '1 attached file was sent as a reference only: the engine cannot be asked to read files for a run in progress — send it as a new message when the run ends',
+    'session.humanTurn.degraded.noPathSeat.other': '{count} attached files were sent as a reference only: the engine cannot be asked to read files for a run in progress — send them as a new message when the run ends',
+    'session.humanTurn.degraded.pathNotAdmitted.one': '1 attached file was sent as a reference only: it is not confirmed that the engine accepts files to read for this message, so it was not asked to read it',
+    'session.humanTurn.degraded.pathNotAdmitted.other': '{count} attached files were sent as a reference only: it is not confirmed that the engine accepts files to read for this message, so it was not asked to read them',
+    'session.humanTurn.degraded.pathSeatCount.one': '1 attached file was sent as a reference only: one message can ask the engine to read only so many files',
+    'session.humanTurn.degraded.pathSeatCount.other': '{count} attached files were sent as a reference only: one message can ask the engine to read only so many files',
     'session.humanTurn.printVision.no': 'The model{model} cannot read images, so the images in this prompt were not sent',
     'session.humanTurn.printVision.unknown': "The engine's model list does not say whether the model{model} accepts image input — the images in this prompt were sent anyway; if it does not, they may be dropped or the request may be refused",
     'config.scenarioRefusal.source.ruling': ', assigned to you by the configuration center,',
@@ -1272,6 +1318,7 @@ const EN = {
     'notice.wireRefusal.unsupportedRule.stored.other': 'The engine refused to continue this work: the request stored for it has {count} rules in it that are forms the engine does not support — {detail} · It cannot continue as stored. Remove or rewrite those rules (to stop a tool altogether, write its name alone), cancel the work if it is still suspended, then submit it again as a new request',
     'notice.prepareRefusal.draftKept': 'Your draft is kept',
     'notice.prepareRefusal.mcpServerNameCollision': 'The engine refused this run at setup: two MCP servers declared for it cannot be told apart — the same name written twice, or names the engine turns into one tool-name prefix (for example “a.b” and “a_b”), so their tool names would collide · The engine’s own error text names them · Sending the same request again is refused the same way; give one of them another name, or remove one of them, wherever MCP servers are configured for this run (ask whoever operates the engine if the deployment declares them), then send it',
+    'notice.prepareRefusal.userAttachmentPath': 'The engine refused attachment {n} of this message: it names a file in the workspace of this run, and this run has no workspace to read from, or does not accept that path or line range{draft} · Remove that attachment, then send it again',
     'notice.retry.source.unifiedHeader': "Judged from the model service's quota headers",
     'notice.retry.source.providerCode': "Judged from the model service's error code",
     'notice.retry.source.status': 'Judged from the HTTP status alone',
@@ -1322,7 +1369,7 @@ const EN = {
     'doctor.wiring.fleetTranscripts.noPromise': 'background subagent transcripts: {tier} — this deployment does not promise that background subagent handles survive an engine restart',
     'doctor.wiring.fleetTranscripts.unknownTier': 'background subagent transcripts: an unknown level ("{tier}") — read it as no promise that background subagent handles survive an engine restart',
     'config.attachments.refusal.credentialShapedWord': 'looks like a credential rather than an attachments list, so it was not used and is not shown here — a credential does not belong in this setting.',
-    'session.subagent.delegatedPrompt.absence.notOwnedAfterRestart': "This subagent's prompt cannot be shown: this process has no record of where its conversation is stored (the record lives in memory, so it is empty after a restart or when the run was continued from another shell).",
+    'session.subagent.delegatedPrompt.absence.anchorUnreported': "This subagent's prompt cannot be shown: no location for its conversation has been reported to this client.",
     'session.subagent.delegatedPrompt.absence.notInStore': "This subagent's prompt cannot be shown: the engine's session store has no conversation for it.",
     'session.subagent.delegatedPrompt.absence.forbidden': "This subagent's prompt cannot be shown: the engine refused access to its conversation.",
     'session.subagent.delegatedPrompt.absence.promptAbsent': "This subagent's conversation was read, but it holds no delegated prompt to show.",
@@ -1346,6 +1393,7 @@ const EN = {
     'config.hooks.plan.keyNotRead.manyKeys': '{layer}: {hooks} will not run — the connected server does not read the keys {coordinates}. Remove those keys, or use a server that reads them.',
     'config.hooks.plan.keyNotRead.more': '{shown} and {rest} more',
     'config.hooks.plan.keyNotRead.withOnFailure': '{line} The connected server does not read onFailure, so a hook set to block when it fails will not block.',
+    'config.hooks.plan.keyNotRead.readerFieldsUnreadable': "The connected server's list of hook fields could not be read, so hook keys were checked against its version instead; the server may read some of the keys named above.",
     'config.hooks.plan.reason.sourceNotAuthored': 'the matcher group of this hook sets "source", which only this client sets (remove the key)',
     'config.hooks.plan.sourceNotAuthored.oneKey': '{layer}: {hooks} will not run — the key {coordinates} is set only by this client, not in settings. Remove the key.',
     'config.hooks.plan.sourceNotAuthored.manyKeys': '{layer}: {hooks} will not run — the keys {coordinates} are set only by this client, not in settings. Remove those keys.',
@@ -1413,7 +1461,7 @@ const EN = {
     'config.localConfig.refused.skillNameUnstorable': "Settings can't store an entry with this skill's name; rename its folder or file to configure it.",
     'config.localConfig.refused.entryInUse': 'That model is still in use (as the default model, by a role, or in an old tier setting) — point those at another model first. Nothing was saved.',
     'config.localConfig.refused.credentialUnpaired': "That model couldn't be reached with the key or address it has — nothing was saved.",
-    'config.localConfig.refused.envCatalogPresent': 'The engine is using the models set in its environment; adding one here would take those out of use. Import the environment models first — nothing was saved.',
+    'config.localConfig.refused.envCatalogPresent': 'The engine is using the models set in its environment settings; adding one here would take them out of use — nothing was saved. To add models, remove the model items from those settings first; or keep using them.',
     'config.localConfig.refused.probeFailed': 'The provider showed that a model in this change is set up wrong (key, model name or reply format) — nothing was saved.',
     'config.localConfig.refused.probeUnverified': "A model in this change hasn't been checked against its provider (or the check couldn't finish) — nothing was saved. Check it again, or save it as unverified.",
     'config.localConfig.unavailable.engineIsRemote': "The Cloud engine is in use — local configuration doesn't apply to it. Switch to the local engine first.",
@@ -1435,6 +1483,7 @@ const EN = {
     'config.localConfig.disclosure.decidedBy': 'The setting in effect comes from {layer}.',
     'config.localConfig.disclosure.shadowed': 'This setting is overridden by {layer}, so it has no effect for now.',
     'config.localConfig.disclosure.tierGroupOverridden': 'Some tier groups in your old settings share a name with groups already in {layer}; the ones in {layer} were kept and the old ones were not copied over.',
+    'config.localConfig.disclosure.shadowUnknown': 'It could not be told whether this setting is overridden by {layer}: that file could not be read.',
     'config.localConfig.disclosure.tierGroupOverriddenNamed': 'These tier groups in your old settings share a name with groups already in {layer}; the ones in {layer} were kept and the old ones were not copied over: {names}.',
     'config.localConfig.layer.userSettings': 'your user settings',
     'config.localConfig.layer.projectSettings': "this project's shared settings",
@@ -1487,6 +1536,9 @@ const EN = {
     'approval.planReview.note.tooLarge': 'This plan is too large to be shown in full ({length} characters), so it cannot be approved from this card. Reject it, or ask for a shorter plan.',
     'approval.planReview.note.notCarried': "The engine did not bring this plan's text up to this card (it may be too long), so it cannot be approved from this card. Reject it, or ask for the plan to be presented again.",
     'approval.planReview.note.unknown': 'This card cannot show the plan it would approve, so it cannot be approved from this card. Reject it, or ask for the plan to be presented again.',
+    'approval.planReview.heading.plain': 'Plan review',
+    'approval.planReview.heading.gate': 'Plan review — gate {gate}',
+    'approval.planReview.heading.replaces': '{head}. This card replaces an earlier plan card.',
     'approval.planReview.askAgain.shown': 'The user asked for the plan to be presented again.',
     'approval.planReview.askAgain.marked': 'The user could not approve this plan: it contains characters that cannot be shown as written. Present the plan again without those characters.',
     'approval.planReview.askAgain.tooLarge': 'The user could not approve this plan: it is too large to be shown in full. Present a shorter plan.',
@@ -1497,7 +1549,20 @@ const EN = {
     'approval.planReview.decision.refused': 'This {decision} was not applied: the engine refused it and changed nothing.',
     'approval.planReview.decision.cardMissing': 'Approving a plan needs the card that showed it, and none came with this approval.',
     'approval.planReview.decision.gateMoved': 'The plan on this card is no longer the one waiting for approval.',
-    'approval.planReview.decision.gateUntrusted': "The engine could not recognise this review's gate id (the server's record of it looks damaged; an operator should check it). The card still shows the plan that is waiting: answering again sends the answer without the gate id, and that answer is not protected against the plan having changed.",
+    'approval.planReview.decision.gateUntrusted': "The engine could not recognise this review's gate id (the server's record of it looks damaged; an operator should check it). Until it is fixed, approving this plan from here is refused the same way and changes nothing. Cancelling the task always works. Rejecting it or asking for a new plan is sent without the gate id and may be refused the same way; if it goes through, it does not approve anything, but if the plan has changed in the meantime it acts on whichever plan is waiting then, which may be one nobody here has seen.",
+    'approval.planReview.decision.sentWithoutGateId': 'This answer was sent without the gate id. If it took effect, it acted on whichever plan review the engine was waiting on when it arrived, which is not necessarily the plan on this card.',
+    'approval.planReview.bridge.gateIdMissing': 'Approving or editing a plan needs the gate id of the review card the user saw, and this decision did not carry one, so nothing was sent. Decide from the review card, which carries the gate id, or reject the plan or cancel the task instead.',
+    'approval.planReview.notice.what.approve': 'approval of the plan',
+    'approval.planReview.notice.what.reject': 'rejection of the plan',
+    'approval.planReview.notice.what.askAgain': 'request to present the plan again',
+    'approval.planReview.notice.what.unknown': 'decision on the plan',
+    'approval.planReview.notice.notSent': 'Your {what} was not sent; the plan is still waiting for a decision.',
+    'approval.planReview.notice.refused': 'Your {what} did not take effect: the engine refused it.',
+    'approval.planReview.notice.stillParked': 'Your {what} did not take effect; the plan is still waiting at the same review.',
+    'approval.planReview.notice.storedForm': 'Your {what} did not take effect, and deciding again will not take effect either: the engine cannot continue this review in the form it was stored in. Cancel the task, then submit the work again as a new task.',
+    'approval.planReview.notice.unconfirmed': 'Whether your {what} took effect could not be confirmed.',
+    'approval.planReview.notice.wayOut': 'The engine gives this way forward: {wayOut}.',
+    'approval.planReview.notice.cardOnScreen': 'The plan review card is on screen.',
     'approval.planReview.option.askAgain.label': 'No, ask for the plan to be presented again',
     'approval.planReview.option.askAgain.description': 'Do not approve; ask the model to present the plan again',
     'localEngine.behind.cliUpdate': 'The local engine (version {running}) is newer than this Sema ({own}), so this Sema cannot start new work on it. Run `sema update`, then reopen this session.',
@@ -1536,6 +1601,8 @@ const EN = {
     'localEngine.settingsLayer.unspecified': 'a settings file',
     'localEngine.bootRefusal': 'The local engine refused to start: {reason}',
     'localEngine.firstShare': "Sema now shares one local engine with the other Sema apps on this computer. Local sessions from this app's earlier private engine are not shown in the list; their data has been left in place.",
+    'localEngine.bindNotAcknowledged': 'The local engine did not start: Sema runs it on `127.0.0.1` only unless you allow otherwise, and `BIND_HOST` asks for a different address. To allow that, turn on `{switchKey}` and accept the risk; otherwise set `BIND_HOST` back to `127.0.0.1` or remove it, then start again.',
+    'localEngine.bindAcknowledged': 'The local engine is set to listen outside `127.0.0.1`: other machines, or other programs on this computer, may be able to connect to it and run commands as you.',
     'localEngine.phase.starting': 'Starting the local engine…',
     'localEngine.phase.dormant': 'The local engine is not running; it starts when a session needs it.',
     'localEngine.phase.draining': 'The local engine is finishing its work before it stops; Sema reconnects when it is back.',
@@ -1627,6 +1694,7 @@ const EN = {
     'engine.bootRefusal.withWaysOut': 'The local engine refused to start: {reason} {waysOut}',
     'engine.bootRefusal.withFix': 'The local engine refused to start: {reason} {fix}',
     'engine.bootRefusal.waysOut': 'Ways out: (1) {newer} — {separate}; (2) {restore}; (3) {repair}.',
+    'engine.bootRefusal.waysOutFour': 'Ways out: (1) {newer} — {separate}; (2) {restore}; (3) {repair}; (4) {migration}.',
     'engine.bootRefusal.who.sema': 'a newer sema',
     'engine.bootRefusal.who.semaAtLeast': 'a newer sema (its engine is version {version} or later)',
     'engine.bootRefusal.who.app': 'a newer version of this app',
@@ -1647,6 +1715,10 @@ const EN = {
     'engine.bootRefusal.folder.default': 'the engine-data folder in your sema configuration folder',
     'engine.bootRefusal.repair': 'if a file named above could not be read at all (an I/O error such as EACCES), repair access to it (permissions, disk) and {again}',
     'engine.bootRefusal.repairDeployment': 'if a file named above could not be read at all (an I/O error such as EACCES), repair access to it (permissions, mount, disk) and restart',
+    'engine.bootRefusal.release.atLeast': 'a release whose engine is version {version} or later and still carries that migration',
+    'engine.bootRefusal.release.any': 'a release that still carries that migration',
+    'engine.bootRefusal.migration': 'if a line above says this data folder skipped a required one-time migration, start it once with {release}, let that start finish, then {again}',
+    'engine.bootRefusal.migrationDeployment': 'if a line above says the data root skipped a required one-time migration, start the data root once with {release}, let that start finish, then start this build',
     'session.devices.repoint.done': "Done: this machine's device record and sessions now follow the new engine address. The device kept its identity — nothing was enrolled again.",
     'session.devices.repoint.unverified': "Nothing was changed: the new address could not be confirmed to hold this device. If it is the same engine, check that you are signed in as the device's owner and try again. Otherwise enroll this machine again at the engine's own address, then remove the old device from the engine's device list.",
     'session.devices.repoint.undetermined': "Nothing was changed: a check against the new address could not be read, so it is not known whether this device is registered there. Try again. Or enroll this machine again at the engine's own address, then remove the old device from the engine's device list.",
@@ -1660,12 +1732,28 @@ const EN = {
     'session.devices.repoint.refused.targetOccupied': 'Nothing was changed: this machine already has a different device record for the new address.',
     'session.devices.repoint.refused.unarmed': 'Nothing was changed: this app is not set up to move the device record and its sessions.',
     'session.devices.repoint.refused.rosterUnbound': 'Nothing was changed: this app is not set up to read the device list at the new address, so the move cannot be checked. This is a setup problem in the app, and trying again will not fix it.',
+    'attachments.outcome.attached.row': 'attached',
+    'attachments.outcome.partial.row': 'only part of it was attached',
+    'attachments.outcome.notAttached.row': 'not attached',
+    'attachments.outcome.notAttachedDeclined.row': 'not attached — the extension {name} declined it',
+    'attachments.outcome.refused.row': 'not attached — the engine refused the attachments of this message',
+    'attachments.outcome.refusedNamed.row': 'not attached — the engine refused this attachment',
+    'attachments.outcome.unknown.row': 'could not tell whether it was attached',
     'attachments.withheld.toolsElsewhere.row': "the tools in this session do not work on this machine's files",
     'attachments.withheld.toolsLocationUnconfirmed.row': "could not confirm that the tools in this session work on this machine's files",
     'attachments.withheld.toolsElsewhere.model': "the tools in this session do not work on the files of the machine this client runs on, so the client did not attach that machine's copy; it may differ from the file the tools read and change, or the file may exist only where the tools run",
     'attachments.withheld.toolsLocationUnconfirmed.model': "the client could not confirm that the tools in this session work on the files of the machine it runs on, so it did not attach that machine's copy; it may differ from the file the tools read and change, or the file may exist only where the tools run",
     'attachments.localCopy.model': "The user shared this from the machine this client runs on: it is that machine's copy, and any path shown with it is a path on that machine. The tools in this session may not work on that machine's files, so the file they read and change may differ or may not exist.",
+    'attachments.pathOverflow.seatCount.row': 'The engine was not asked to read this attachment itself: this message already names as many files as the engine reads for one message',
+    'attachments.pathOverflow.linesInvalid.row': 'The engine was not asked to read this attachment itself: its line range is not valid (lines are numbered from 1, and a range cannot end before it starts)',
+    'attachments.pathOverflow.pathInvalid.row': 'The engine was not asked to read this attachment itself: its path is empty or longer than the engine accepts',
+    'attachments.pathPointer.model': 'The user attached {path} to this message.',
     'session.compaction.canceled': 'Compaction canceled.',
+    'session.compaction.notRunning.willRetry': 'Compaction did not take effect on this turn; it will be requested again with your next message.',
+    'session.compaction.notRunning.final': 'Compaction did not take effect on this turn either, so nothing was compacted. If you still need it, request compaction again.',
+    'session.subagent.editOutcomes.allApplied.one': 'Applied {count} file edit.',
+    'session.subagent.editOutcomes.allApplied.other': 'Applied {count} file edits.',
+    'session.subagent.editOutcomes.mixed': 'File edits: {attempted} attempted — {succeeded} applied, {refused} not run, {failed} failed.',
     'localEngine.health.answer.unansweredTimeout': 'did not answer in time',
     'localEngine.health.answer.unansweredNetwork': 'could not be reached',
     'localEngine.health.answer.ok': 'answered with status "ok"',