@shendeguize/dsh-agent-sidecar 0.1.0

package/src/client/inject-glue.ts

@@ -0,0 +1,171 @@
+/**
+ * Inject integration glue (S5 wiring, T4.9): everything that stands between
+ * the presentational {@link InjectPanel} (T4.5, src/client/inject/) and the
+ * rest of the client half, kept pure/injectable so it unit-tests under
+ * plain node (same posture as controller.ts / settings-glue.ts).
+ *
+ * - {@link prepareEnvelope} / {@link executeEnvelope}: build the M2 action
+ *   wire bodies of the host dispatcher (src/routes.ts `handleAction`:
+ *   `{type:'inject.prepare'|'inject.execute', ...}` with the phase fields
+ *   at the top level). The body types are api.ts's `ActionEnvelope` union
+ *   members — the data layer owns the wire mirror, so `postAction` is
+ *   typed end-to-end and this module casts nothing on the way out.
+ * - {@link createInjectActions}: the panel's `onPrepare`/`onExecute` props.
+ *   Execute posts with {@link EXECUTE_TIMEOUT_MS} (path two's server-side
+ *   budget outlives the 15s data-layer default; prepare keeps the default,
+ *   it has no delivery side effect).
+ *   Per the panel contract, transport failures resolve AS VALUES: the data
+ *   layer's normalized ApiError satisfies the panel's structural
+ *   {@link ApiErrorLike} and is returned, never thrown (anything that is
+ *   not an ApiError is re-thrown and lands in the panel's defensive catch:
+ *   retryable notice for prepare, terminal unknown for execute — S6).
+ *   A delivered execute fires the optional `onDelivered` hook so the owner
+ *   can pull one fresh snapshot; failed/unknown never do.
+ * - {@link findInjectTarget}: board card selection → panel target (the
+ *   design §5.1 view-3 target summary comes from the selected SessionView
+ *   as mapped into the controller's card VMs). A session that has left the
+ *   snapshot resolves to null — the panel then shows its no-target hint
+ *   instead of injecting into a stale target.
+ *
+ * @module
+ */
+
+import { isApiError, postAction } from './api.ts'
+import type { ExecuteActionBody, PrepareActionBody, RequestOptions } from './api.ts'
+import type { SessionCardVM } from './board/logic.ts'
+import type { InjectPanelTarget } from './inject/InjectPanel.tsx'
+import type {
+  ApiErrorLike,
+  InjectResultView,
+  PanelExecuteRequest,
+  PanelPrepareRequest,
+  PrepareSuccess,
+} from './inject/logic.ts'
+
+// ---------------------------------------------------------------------------
+// Wire bodies (canonical mirror lives in api.ts; re-exported for consumers).
+// ---------------------------------------------------------------------------
+
+export type { ExecuteActionBody, PrepareActionBody } from './api.ts'
+
+/**
+ * Execute-path HTTP deadline. Path two's server-side budget is the 30s CLI
+ * timeout + 5s hard-kill buffer (host: send-cli.ts `DEFAULT_SEND_TIMEOUT_MS`
+ * + `HARD_TIMEOUT_BUFFER_MS` = 35s worst case); a client deadline below
+ * that fabricates a terminal 'unknown' out of every slow-but-honest
+ * delivery receipt (M2 review F-3). 45s = server worst case + 10s margin;
+ * the mirror relation is pinned by test against the host constants.
+ */
+export const EXECUTE_TIMEOUT_MS = 45_000
+
+/** Panel prepare request → the host prepare wire body. */
+export function prepareEnvelope(req: PanelPrepareRequest): PrepareActionBody {
+  return {
+    type: 'inject.prepare',
+    target: { agent: req.target.agent, sessionId: req.target.sessionId },
+    mode: req.mode,
+    message: req.message,
+  }
+}
+
+/** Panel execute request → the host execute wire body. */
+export function executeEnvelope(req: PanelExecuteRequest): ExecuteActionBody {
+  return {
+    type: 'inject.execute',
+    requestId: req.requestId,
+    confirmToken: req.confirmToken,
+    message: req.message,
+  }
+}
+
+// ---------------------------------------------------------------------------
+// Action callbacks.
+// ---------------------------------------------------------------------------
+
+/** Transport seam: POST one action body, resolve the parsed JSON reply. */
+export type PostActionFn = (
+  body: PrepareActionBody | ExecuteActionBody,
+  opts?: RequestOptions,
+) => Promise<unknown>
+
+/** Default transport: api.ts postAction (typed directly; the wire bodies
+ * are ActionEnvelope union members, so no cast stands between the panel
+ * and the dispatcher). */
+const defaultPost: PostActionFn = (body, opts) => postAction(body, opts)
+
+/** The two integration callbacks the InjectPanel consumes. */
+export interface InjectActions {
+  onPrepare(req: PanelPrepareRequest): Promise<PrepareSuccess | ApiErrorLike>
+  onExecute(req: PanelExecuteRequest): Promise<InjectResultView | ApiErrorLike>
+}
+
+export interface InjectActionDeps {
+  /** Transport override (tests); defaults to api.ts postAction. */
+  post?: PostActionFn
+  /** Fired once per delivered execute (e.g. a controller snapshot refresh). */
+  onDelivered?: () => void
+}
+
+/**
+ * Build the panel's `onPrepare`/`onExecute` callbacks over the action
+ * transport. Error posture per the panel contract: ApiError resolves as a
+ * value (the panel classifies http-kind as a server vocabulary verdict and
+ * everything else as a transport failure); non-ApiError throws propagate.
+ * @param deps - transport and delivery-hook seams.
+ * @returns the callbacks, ready to spread onto the panel props.
+ */
+export function createInjectActions(deps: InjectActionDeps = {}): InjectActions {
+  const post = deps.post ?? defaultPost
+  return {
+    async onPrepare(req) {
+      try {
+        return (await post(prepareEnvelope(req))) as PrepareSuccess
+      } catch (err) {
+        if (isApiError(err)) return err
+        throw err
+      }
+    },
+    async onExecute(req) {
+      let result: InjectResultView
+      try {
+        // Longer deadline than prepare: the send-cli path legitimately runs
+        // up to 35s server-side before an honest receipt arrives (F-3).
+        result = (await post(executeEnvelope(req), {
+          timeoutMs: EXECUTE_TIMEOUT_MS,
+        })) as InjectResultView
+      } catch (err) {
+        if (isApiError(err)) return err
+        throw err
+      }
+      // Only a positive delivery refreshes; 'unknown' stays terminal and
+      // untouched (S6), 'failed' changes nothing worth re-pulling.
+      if (result.outcome === 'delivered') deps.onDelivered?.()
+      return result
+    },
+  }
+}
+
+// ---------------------------------------------------------------------------
+// Target mapping.
+// ---------------------------------------------------------------------------
+
+/**
+ * Resolve the selected board card into the panel's injection target.
+ * @param sessions - current card VMs from the controller view state.
+ * @param sessionId - the selected session, or null when nothing is selected.
+ * @returns the target, or null when unselected or gone from the snapshot.
+ */
+export function findInjectTarget(
+  sessions: readonly SessionCardVM[],
+  sessionId: string | null,
+): InjectPanelTarget | null {
+  if (sessionId === null) return null
+  const card = sessions.find((session) => session.sessionId === sessionId)
+  if (card === undefined) return null
+  const title = card.title.trim()
+  return {
+    agent: card.agent,
+    sessionId: card.sessionId,
+    ...(title !== '' ? { title } : {}),
+  }
+}

package/src/client/locales/command.ts

@@ -0,0 +1,48 @@
+/**
+ * `command.*` locale segment for the `/sidecar` slash command (T4.6).
+ *
+ * T5.10b unification: the `command.*` copy now LIVES in the main
+ * dictionaries (./zh.ts + ./en.ts, domain `command`) and this module is a
+ * thin derived view kept for its consumers ({@link tCommand} for
+ * commands.ts, {@link commandZh}/{@link commandEn} for tests and for the
+ * `ctx.locale.register(ns, locale, dict)` bridge). Translation goes
+ * through the shared engine and the shared active-locale switch, so
+ * `setLocale` drives every surface consistently and the main-table parity
+ * test covers these keys too.
+ *
+ * @module
+ */
+
+import { t, zh, en } from './index.ts'
+import type { KeysOfDomain } from './index.ts'
+
+/** Key union of the command locale segment (main zh table is the source). */
+export type CommandLocaleKey = KeysOfDomain<'command'>
+
+function commandSlice(dict: Readonly<Record<string, string>>): Record<CommandLocaleKey, string> {
+  const out: Record<string, string> = {}
+  for (const [key, value] of Object.entries(dict)) {
+    if (key.startsWith('command.')) out[key] = value
+  }
+  return out as Record<CommandLocaleKey, string>
+}
+
+/** The `command.*` slice of the main zh dictionary. */
+export const commandZh: Readonly<Record<CommandLocaleKey, string>> = commandSlice(zh)
+
+/** The `command.*` slice of the main en dictionary. */
+export const commandEn: Readonly<Record<CommandLocaleKey, string>> = commandSlice(en)
+
+/** Derived dictionaries of this segment, keyed by locale id. */
+export const commandDictionaries = { zh: commandZh, en: commandEn } as const
+
+/**
+ * Translate a command-segment key in the shared active locale (delegates
+ * to the main-table {@link t}; lookup chain: active locale → zh → key).
+ * @param key - a key of the command segment.
+ * @param params - optional `{name}` template params.
+ * @returns the translated string.
+ */
+export function tCommand(key: CommandLocaleKey, params?: Record<string, unknown>): string {
+  return t(key, params)
+}

package/src/client/locales/en.ts

@@ -0,0 +1,385 @@
+/**
+ * English dictionary, compile-checked complete against the zh key set (a
+ * missing or extra key is a type error; see ./zh.ts for the key-space
+ * convention).
+ */
+
+import type { SidecarLocaleKey } from './zh.ts'
+
+export const en = {
+  // ── card chrome ────────────────────────────────────────────────────────
+  'settings.cardTitle': 'Agent Sidecar',
+  'settings.cardDescription':
+    'Runtime settings for cross-agent session monitoring, injection and bypass analysis.',
+  'settings.docsLink': 'Documentation',
+  'settings.readOnly': 'The settings document is read-only; edits cannot be saved.',
+  'settings.unsaved': 'Unsaved',
+  'settings.save': 'Save',
+  'settings.saving': 'Saving…',
+  'settings.discard': 'Discard',
+  'settings.saveFailed': 'Save failed; please retry.',
+  'settings.expand': 'Expand',
+  'settings.collapse': 'Collapse',
+  'settings.invalidNumber': 'Enter an integer no less than {min}',
+
+  // ── daemon lifecycle ───────────────────────────────────────────────────
+  'settings.sectionDaemon': 'Daemon lifecycle',
+  'settings.daemonPolicyLabel': 'Management policy',
+  'settings.daemonPolicyHint':
+    'adopt-or-host probes and adopts an existing daemon, else spawns one; adopt-only never spawns; off leaves the lifecycle alone (read-only reconcile still runs).',
+  'settings.daemonPolicyAdoptOrHost': 'adopt-or-host (adopt, else spawn)',
+  'settings.daemonPolicyAdoptOnly': 'adopt-only (never spawn)',
+  'settings.daemonPolicyOff': 'off (unmanaged)',
+  'settings.daemonBackoffLimitLabel': 'Backoff limit',
+  'settings.daemonBackoffLimitHint':
+    'After this many consecutive hosting failures the supervisor stops restarting and trips failed.',
+  'settings.daemonStatusLabel': 'Daemon status',
+  'settings.daemonStateProbe': 'Probing',
+  'settings.daemonStateAdopted': 'Adopted an existing daemon',
+  'settings.daemonStateDefer': 'Waiting for the system service',
+  'settings.daemonStateReprobe': 'Re-probing',
+  'settings.daemonStateHosting': 'Spawning',
+  'settings.daemonStateHosted': 'Hosted by the plugin',
+  'settings.daemonStateBackoff': 'Backing off before retry',
+  'settings.daemonStateFailed': 'Tripped (circuit open)',
+  'settings.daemonPidVersion': 'pid {pid} · v{version}',
+  'settings.daemonDeferNote':
+    'The daemon is managed by a system service (LaunchAgent); the plugin only probes and waits — it never spawns a duplicate or terminates it.',
+  'settings.daemonFailedNote':
+    'Consecutive hosting failures reached the backoff limit; the board degraded to the last snapshot. Check the sidecar command, then retry.',
+  'settings.daemonRetry': 'Retry',
+
+  // ── sidecar invocation ─────────────────────────────────────────────────
+  'settings.sectionSidecar': 'Sidecar invocation',
+  'settings.sidecarCommandLabel': 'Executable command',
+  'settings.sidecarCommandHint':
+    'A PATH name, an absolute path, or a space-separated multi-part command (e.g. python3 /path/agent-sidecar.pyz); the plugin never installs the sidecar for you.',
+  'settings.sidecarRuntimeDirLabel': 'Runtime directory',
+  'settings.sidecarRuntimeDirHint':
+    'Empty uses the default ~/.agent_sidecar (honoring AGENT_SIDECAR_RUNTIME_DIR); a non-empty value is passed to spawned daemons via the environment.',
+
+  // ── stream reconciliation ──────────────────────────────────────────────
+  'settings.sectionStream': 'Stream reconciliation',
+  'settings.streamActiveMsLabel': 'Active cadence (ms)',
+  'settings.streamActiveMsHint': 'Status snapshot cadence while any session is working.',
+  'settings.streamIdleMsLabel': 'Idle cadence (ms)',
+  'settings.streamIdleMsHint': 'Status snapshot cadence while no session is working.',
+
+  // ── injection ──────────────────────────────────────────────────────────
+  'settings.sectionInject': 'Message injection',
+  'settings.injectEnabledLabel': 'Enable injection',
+  'settings.injectEnabledHint':
+    'When off, the board hides every inject affordance and the server rejects write actions.',
+  'settings.injectDefaultModeLabel': 'Default injection mode',
+  'settings.injectDefaultModeHint': 'The mode preselected when the inject panel opens.',
+  'settings.injectModeQueue': 'queue (next turn)',
+  'settings.injectModeSteer': 'steer (mid-turn)',
+  'settings.injectSafetyNote':
+    'Safety: injection is off by default; even when enabled, every injection still passes a per-request confirmation dialog — there is no batch or scheduled injection. Not recommended on multi-user hosts.',
+
+  // ── bypass analysis ────────────────────────────────────────────────────
+  'settings.sectionAnalysis': 'Bypass analysis',
+  'settings.analysisEnabledLabel': 'Enable AI bypass analysis',
+  'settings.analysisEnabledHint':
+    'Spins up a dsh analysis session over an observed session on demand (consumes model tokens; off by default).',
+
+  // ── board UI ───────────────────────────────────────────────────────────
+  'settings.sectionUi': 'Board UI',
+  'settings.uiTimeWindowHoursLabel': 'Session time window (hours)',
+  'settings.uiTimeWindowHoursHint': 'The board lists only sessions active within this window.',
+  'settings.uiShowDeadLabel': 'Show dead sessions',
+  'settings.uiShowDeadHint': 'Also list finished (dead) sessions on the board.',
+
+  // ── skill mode ─────────────────────────────────────────────────────────
+  'settings.sectionSkill': 'Skill mode',
+  'settings.skillProvideLabel': 'Provide the skill in-process',
+  'settings.skillProvideHint':
+    'Provide the agent-sidecar skill to dsh via registerProvider (enabled in M4; applies after restart).',
+
+  // ── inject panel: chrome & editor (T4.5, design §5.1 view 3) ───────────
+  'inject.title': 'Inject message',
+  'inject.confirmTitle': 'Confirm injection',
+  'inject.close': 'Close',
+  'inject.done': 'Done',
+  'inject.capabilityOff': 'Injection is not enabled; turn it on in Settings first.',
+  'inject.noTarget':
+    'No injection target selected; start from a board card or a session detail page.',
+  'inject.targetLabel': 'Target',
+  'inject.messageLabel': 'Message',
+  'inject.messagePlaceholder': 'Message to inject (16 KiB max; never paste secrets)',
+  'inject.byteCount': '{bytes} / {limit} bytes',
+  'inject.msgEmpty': 'The message must not be empty.',
+  'inject.msgNul': 'The message contains an illegal NUL character.',
+  'inject.msgTooLarge': 'The message is {bytes} bytes, over the {limit}-byte limit.',
+  'inject.modeLabel': 'Injection mode',
+  'inject.modeQueue': 'queue (next turn)',
+  'inject.modeQueueHint':
+    'The message queues and is handled when the target session starts its next turn.',
+  'inject.modeSteer': 'steer (mid-turn)',
+  'inject.modeSteerHint':
+    'The message is injected mid-turn and steers the target session immediately.',
+  'inject.argvWarning':
+    "cursor-cli target: injection runs through its native subprocess, and the message is visible in this machine's process list while that process lives; never include secrets.",
+  'inject.auditNote':
+    'This injection is recorded in the sidecar audit log (byte size and content fingerprint; never the message plaintext).',
+  'inject.prepare': 'Prepare injection',
+  'inject.preparing': 'Validating…',
+
+  // ── inject panel: confirm phase ──────────────────────────────────────
+  'inject.planTargetLabel': 'Target snapshot',
+  'inject.planStatus': 'Current status: {status}',
+  'inject.statusObservedNote':
+    'Status is an observed value inferred from persisted data and may lag.',
+  'inject.planModeLabel': 'Mode',
+  'inject.planPreviewLabel': 'Message digest ({bytes} bytes)',
+  'inject.countdown': 'The confirm token expires in {seconds}s',
+  'inject.confirmExecute': 'Confirm injection',
+  'inject.executing': 'Injecting…',
+  'inject.cancel': 'Cancel',
+  'inject.tokenExpired':
+    'Confirmation timed out and the token is void; prepare the injection again.',
+
+  // ── inject panel: result phase ───────────────────────────────────────
+  'inject.resultDelivered': 'Delivered: the message was injected into the target session.',
+  'inject.resultFailed': 'Injection failed.',
+  'inject.resultUnknown':
+    'Outcome unknown: the message may have been delivered. Do NOT retry; check the target session before deciding anything.',
+  'inject.resultReplayed':
+    'Idempotent replay: this is the earlier result of the same request — no second injection happened.',
+  'inject.reprepare': 'Prepare again',
+
+  // ── inject panel: error vocabulary (gateway + transport) ─────────────
+  'inject.errInjectDisabled': 'Injection is disabled on the server; enable it in Settings.',
+  'inject.errInvalidMessage': 'The message failed server-side validation.',
+  'inject.errTargetNotFound':
+    'The target session does not exist or left the observation window.',
+  'inject.errTargetDead': 'The target session has ended (dead); it cannot be injected.',
+  'inject.errTooManyPending':
+    'Too many injections are pending confirmation; try again later.',
+  'inject.errTokenMissing': 'The confirm token is missing or was never issued; prepare again.',
+  'inject.errTokenExpired': 'The confirm token expired; prepare again.',
+  'inject.errTokenReused': 'The confirm token was already consumed; prepare again.',
+  'inject.errTokenMismatch':
+    'The confirmation no longer matches what was prepared; prepare again.',
+  'inject.errUnsupportedAgent': 'This agent has no injection path.',
+  'inject.errExecutorError': 'The injection path failed while executing.',
+  'inject.errTimeout': 'The request timed out without a server receipt.',
+  'inject.errAborted': 'The request was cancelled.',
+  'inject.errNetwork': 'Network error; the request could not be sent.',
+  'inject.errParse': 'The server response could not be parsed.',
+  'inject.errGeneric': 'Request failed ({code}).',
+
+  // ── board tab chrome: main-view switcher ───────────────────────────────
+  'board.viewBoard': 'Session board',
+  'board.viewProjects': 'Projects',
+
+  // ── session detail ───────────────────────────────────────────────────
+  'detail.header.close': 'Back to board',
+  'detail.header.listenOn': 'Listening',
+  'detail.header.listenOff': 'Listen',
+  'detail.header.listenHint': 'New events append live and get highlighted while on',
+  'detail.header.untitled': '(untitled)',
+  'detail.header.unknownProject': 'Unknown project',
+  'detail.header.observedDisclaimer':
+    'Status is an observed value inferred from persisted data and may lag',
+  'detail.status.working': 'Working',
+  'detail.status.waiting': 'Waiting',
+  'detail.status.idle': 'Idle',
+  'detail.status.dead': 'Finished',
+  'detail.status.unknown': 'Unknown',
+  'detail.sources.title': 'Data sources',
+  'detail.sources.dshLive': 'dsh live',
+  'detail.sources.dshCold': 'dsh cold read',
+  'detail.sources.sidecarReplay': 'sidecar replay',
+  'detail.sources.sidecarBuffer': 'sidecar buffer',
+  'detail.sources.none': 'Unknown source',
+  'detail.kind.user': 'User message',
+  'detail.kind.assistant': 'Assistant reply',
+  'detail.kind.thinking': 'Thinking',
+  'detail.kind.toolCall': 'Tool call',
+  'detail.kind.toolResult': 'Tool result',
+  'detail.kind.turn': 'Turn',
+  'detail.kind.step': 'Step',
+  'detail.kind.error': 'Error',
+  'detail.kind.other': 'Event',
+  'detail.gap.label':
+    'Gap: about {n} events may be uncaptured (256-slot queue cap or not persisted)',
+  'detail.timeline.loadMore': 'Load older history',
+  'detail.timeline.loadingMore': 'Loading…',
+  'detail.timeline.noMore': 'Start of the timeline',
+  'detail.timeline.expand': 'Expand',
+  'detail.timeline.collapse': 'Collapse',
+  'detail.timeline.newBadge': 'New',
+  'detail.timeline.seq': 'seq {n}',
+  'detail.timeline.hiddenNotice': '{n} earlier entries collapsed to stay smooth',
+  'detail.timeline.showAll': 'Show all',
+  'detail.states.loadingTitle': 'Loading the timeline…',
+  'detail.states.emptyTitle': 'No events yet',
+  'detail.states.emptyHint': 'This session has no normalized events to show yet.',
+  'detail.states.errorTitle': 'Timeline failed to load',
+  'detail.states.errorFallback': 'Error code: {reason}',
+  'detail.states.errors.session_not_found': 'The session does not exist or is no longer visible',
+  'detail.states.errors.invalid_cursor': 'The paging cursor is invalid; reopen the detail view',
+  'detail.states.errors.fusion_not_wired': 'This host has no timeline capability enabled',
+  'detail.states.errors.network_error': 'Network error; the dsh host is unreachable',
+  'detail.states.errors.request_timeout': 'The request timed out',
+  'detail.time.justNow': 'just now',
+  'detail.time.minutesAgo': '{n} min ago',
+  'detail.time.hoursAgo': '{n} h ago',
+  'detail.time.daysAgo': '{n} d ago',
+
+  // ── session detail: integration chrome ─────────────────────────────────
+  'detail.actions.inject': 'Inject',
+  'detail.actions.analyze': 'AI analysis',
+  'detail.actions.analyzeDisabledHint':
+    'Enable "AI bypass analysis" in Settings to use this',
+
+  // ── dsh deep-query tools ────────────────────────────────────────────────
+  'dshtools.lineage.title': 'Session lineage',
+  'dshtools.lineage.loading': 'Loading lineage…',
+  'dshtools.lineage.error': 'Lineage failed to load',
+  'dshtools.lineage.empty': 'No lineage data',
+  'dshtools.lineage.currentBadge': 'Current session',
+  'dshtools.lineage.liveBadge': 'Live',
+  'dshtools.lineage.notPersistedBadge': 'Not persisted',
+  'dshtools.lineage.role.ancestor': 'Ancestor',
+  'dshtools.lineage.role.target': 'Target',
+  'dshtools.lineage.role.descendant': 'Child session',
+  'dshtools.lineage.jumpTitle': 'Jump to this session',
+  'dshtools.lineage.currentTitle': 'Currently viewing this session',
+  'dshtools.lineage.expand': 'Expand',
+  'dshtools.lineage.collapse': 'Collapse',
+  'dshtools.lineage.nodeCount': '{n} sessions',
+  'dshtools.lineage.incompleteWithId':
+    'Lineage incomplete: parent session {id} could not be resolved',
+  'dshtools.lineage.incomplete': 'Lineage incomplete: part of the parent chain is unresolved',
+  'dshtools.lineage.degrade.notDshTitle': 'Lineage/provenance is dsh-session only',
+  'dshtools.lineage.degrade.notDshBody':
+    "This session comes from an external agent; dsh's lineage and provenance do not apply.",
+  'dshtools.lineage.degrade.queryUnavailableTitle': 'dsh lineage service unavailable',
+  'dshtools.lineage.degrade.queryUnavailableBody':
+    'This dsh composition has no sessionQuery mounted; lineage and provenance are unavailable.',
+  'dshtools.lineage.degrade.traceFailedTitle': 'Lineage trace failed',
+  'dshtools.lineage.degrade.traceFailedBody': "dsh could not resolve this session's lineage.",
+  'dshtools.lineage.degrade.unknownTitle': 'Lineage unavailable',
+  'dshtools.lineage.degrade.unknownBody':
+    'The backend reports lineage unavailable (reason: {reason}).',
+  'dshtools.search.title': 'Session search',
+  'dshtools.search.placeholder': 'Search sessions (title / project / full text)',
+  'dshtools.search.submit': 'Search',
+  'dshtools.search.loading': 'Searching…',
+  'dshtools.search.error': 'Search failed',
+  'dshtools.search.empty': 'No matching sessions',
+  'dshtools.search.filterOnlyNotice':
+    'dsh full-text search is unavailable; degraded to title/project filtering',
+  'dshtools.search.projectFilter': 'Project filter: {project}',
+  'dshtools.search.matchedBy.full-text': 'Full text',
+  'dshtools.search.matchedBy.title': 'Title',
+  'dshtools.search.matchedBy.project': 'Project',
+  'dshtools.search.matchedBy.other': 'Other',
+  'dshtools.search.untitled': '(untitled)',
+
+  // ── project correlation view ────────────────────────────────────────────
+  'project.title': 'Project correlation',
+  'project.summary': '{projects} projects · {sessions} sessions',
+  'project.crossAgent': '{n} agent kinds',
+  'project.sessionCount': '{n} sessions',
+  'project.lastActive': 'Last active {time}',
+  'project.liveChip': 'Live',
+  'project.untitled': '(untitled)',
+  'project.empty.title': 'No project correlation yet',
+  'project.empty.hint':
+    'No cross-agent project activity within the time window; projects appear here once an agent works inside a project directory.',
+  'project.loading': 'Loading project correlation…',
+  'project.errorTitle': 'Project correlation failed to load',
+
+  // ── AI bypass analysis panel ────────────────────────────────────────────
+  'analysis.title': 'AI analysis',
+  'analysis.close': 'Close',
+  'analysis.disabledNote':
+    'AI bypass analysis is off; enable "AI bypass analysis" in Settings first.',
+  'analysis.idleHint':
+    'Spin up one dsh bypass-analysis pass over this session on demand (consumes model tokens).',
+  'analysis.start': 'Start analysis',
+  'analysis.requesting': 'Analyzing… (up to ~60 s)',
+  'analysis.exchangeInitial': 'Analysis summary',
+  'analysis.followupLabel': 'Follow-up',
+  'analysis.truncatedNotice':
+    'The input exceeded the budget and was truncated; the analysis covers partial context.',
+  'analysis.emptySummary': '(the analysis session returned no summary)',
+  'analysis.disclaimerFallback':
+    'AI analysis is for reference only; trust the actual session over its conclusions.',
+  'analysis.followupPlaceholder': 'Ask a follow-up about this analysis…',
+  'analysis.followupSubmit': 'Ask',
+  'analysis.answering': 'Answering…',
+  'analysis.stop': 'Stop analysis',
+  'analysis.stopped': 'Analysis stopped; the analysis session was released.',
+  'analysis.restart': 'Analyze again',
+  'analysis.noticeTimeout':
+    'This follow-up timed out; retry later — the analysis session is kept.',
+  'analysis.noticeNetwork':
+    'The request could not be sent; retry — the analysis session is kept.',
+  'analysis.noticeCancelFailed': 'The stop request did not go through; try again.',
+  'analysis.errDisabled': 'AI analysis is disabled on the server; enable it in Settings and retry.',
+  'analysis.errUnavailable':
+    'This host has no AI analysis capability (agents service unavailable).',
+  'analysis.errTargetNotFound': 'The analysis target does not exist or left the observation window.',
+  'analysis.errTooManyActive': 'Too many concurrent analysis sessions; try again later.',
+  'analysis.errTimeout': 'The analysis timed out and its session was released; start again.',
+  'analysis.errCreateFailed': 'Failed to create the analysis session.',
+  'analysis.errCancelled': 'The analysis was cancelled.',
+  'analysis.errNetwork': 'Network error; the analysis request could not complete.',
+  'analysis.errGeneric': 'Analysis failed ({code}).',
+
+  // ── /sidecar slash command (folded from locales/command.ts) ────────────
+  'command.description': 'Sidecar status at a glance (daemon, connection, sessions)',
+  'command.daemon.probe': 'Probing',
+  'command.daemon.adopted': 'Connected · adopted',
+  'command.daemon.defer': 'Waiting for the system service',
+  'command.daemon.reprobe': 'Re-probing',
+  'command.daemon.hosting': 'Starting',
+  'command.daemon.hosted': 'Connected · hosted',
+  'command.daemon.backoff': 'Restart backoff',
+  'command.daemon.failed': 'Offline',
+  'command.daemon.unknown': 'State unknown',
+  'command.connection.ok': 'Connected',
+  'command.connection.degraded': 'Connection unstable',
+  'command.connection.off': 'Offline',
+  'command.status.working': 'Working',
+  'command.status.waiting': 'Waiting',
+  'command.status.idle': 'Idle',
+  'command.status.dead': 'Finished',
+  'command.status.unknown': 'Unknown',
+  'command.daemonRow': 'Sidecar · {state}',
+  'command.countsRow': '{working} working · {waiting} waiting',
+  'command.countsDetail': '{total} sessions total',
+  'command.sessionDetail': '{project} · {status} · {time}',
+  'command.noSessions': 'No observed sessions yet',
+  'command.unknownProject': 'Unknown project',
+  'command.untitled': '(untitled)',
+  'command.truncated': '{n} more active sessions not listed',
+  'command.boardHint': 'Open the "Sidecar" tab in the conversation view for the full board',
+  'command.unreachable': 'sidecar is not connected',
+  'command.unreachableHint':
+    'The state snapshot could not be fetched; check that the agent-sidecar plugin is enabled and the daemon is available, then retry.',
+  'command.offlineFailed': 'sidecar is offline (daemon start failures tripped the breaker)',
+  'command.offlineFailedHint':
+    'Showing the last snapshot. Retry from the settings card, or run agent-sidecar daemon start manually and wait for adoption.',
+  'command.offlineDefer': 'Waiting for the system service to start the daemon',
+  'command.offlineDeferHint':
+    'A LaunchAgent manages the daemon; the plugin only probes and waits. The overview recovers automatically once the service brings it up.',
+  'command.time.justNow': 'just now',
+  'command.time.minutesAgo': '{n} min ago',
+  'command.time.hoursAgo': '{n} h ago',
+  'command.time.daysAgo': '{n} d ago',
+
+  // ── better-sidebar mini tab (T6.3) ─────────────────────────────────────
+  'sidebar.tabTitle': 'Sidecar',
+  'sidebar.countsRow': '{working} working · {waiting} waiting',
+  'sidebar.recentTitle': 'Recently active',
+  'sidebar.connecting': 'Waiting for the sidecar snapshot…',
+  'sidebar.noSessions': 'No active sessions',
+  'sidebar.noEvent': 'No events recorded yet',
+  'sidebar.untitled': '(untitled)',
+  'sidebar.boardHint': 'Full board: the "Sidecar" tab in the conversation view',
+} satisfies Record<SidecarLocaleKey, string>