@songsid/agend 2.2.0-beta.9 → 2.3.0-beta.1

package/dist/ui/settings-strings.js

@@ -10,7 +10,7 @@ register("settings", {
     classicChannels: "ClassicBot Channels",
     noClassic: "No ClassicBot channels — start one with /start in a chat.",
     publicLink: "Offer temporary public web links",
-    publicLinkHint: "Explicit admin consent on every request. Cloudflare handles TLS; link users have full web-admin access. No preview exposure.",
+    publicLinkHint: "Explicit admin consent on every request. Cloudflare handles TLS; link users have full web-admin access. HTML previews get a second temporary tunnel unless web.preview_on_public_link is false.",
     publicTtl: "Public link minutes (1–480)",
     publicProtocol: "Tunnel protocol",
     webEcho: "Web echo",
@@ -164,7 +164,9 @@ register("settings", {
     wizardWaitingStart: "Waiting for a message in the group…",
     wizardNoStartYet: "No group message yet — post one and press Detect again.",
     wizardGeneralChannel: "General channel id",
-    wizardAdminUser: "Your user id (becomes the first allowed user)",
+    wizardAdminUser: "Your user ID (required; becomes the first allowed user)",
+    wizardNeedDiscordAdmin: "Enter your Discord user ID: 17–20 digits, without a leading zero.",
+    wizardNeedTelegramAdmin: "Enter your Telegram user ID: 1–20 positive digits, without a leading zero.",
     wizardNeedVerify: "Verify the token before continuing.",
     wizardPlanLoading: "Building the plan…",
     wizardWillWrite: "This will be written:",
@@ -176,7 +178,7 @@ register("settings", {
     deleteBot: "Delete this bot",
     noAllowedUsers: "no allowed users",
     searchAll: "Search agents, bots, channels…",
-    accessMovedHint: "Who may use the bot is set on the connection itself — open Settings on \"{0}\" under Connections & Bots.",
+    accessMovedHint: "Who may use the bot is set on the connection itself — open Settings on \"{0}\" under Connections.",
     applyRestartNeeded: "Saved — restart AgEnD to apply",
     applyNoChange: "no change needed",
     applyRestartHint: "This change needs AgEnD itself restarted. You can restart it here, or run /restart in your chat channel.",
@@ -219,6 +221,11 @@ register("settings", {
     staggerRange: "Must be between 0 and 30000",
     staggerWarning: "Very low values can cause startup spikes",
     sec_device: "Preferences", syncedTitle: "Synced across your devices", syncedLead: "Changes here apply on every device where you are signed in.",
+    profileTitle: "Your name",
+    profileLeadBound: "Agents see your web messages as the Discord or Telegram account your sign-in code was sent to: its id, and its name unless you choose another here. It follows you to every device you sign in on. It is for recognition only: it grants nothing.",
+    profileLeadUnbound: "This browser was not signed in with a code sent to your Discord or Telegram account, so agents see your web messages as \"web-user\" (or the name you set here). Sign in with a code from /web to be recognised as your account.",
+    profileName: "Name", profileHelp: "Agents see: {0} · id {1}", profileSave: "Save", profileClear: "Use web-user", profileUseAccount: "Use {0}",
+    profileSaved: "Agents now see you as {0}", profileFailed: "Could not save the name",
     syncedPublicLink: "On the public link these are read-only: a change here stays in this browser.",
     deviceTitle: "This device only", deviceLead: "The tour, text size, view fit, the sidebar shown or hidden, panel widths and desktop notifications stay on each device.",
     sec_agents: "Agents",
@@ -281,7 +288,130 @@ register("settings", {
     accessTitle: "Access",
     webChat: "Web chat",
     sec_web: "Web",
-    webLead: "How the web dashboard behaves. A change that loosens access (longer sessions, the browser terminal back on or for longer, the public link) waits for a fleet admin to confirm it in General; one that tightens it applies at once.",
+    // #1629 r4 §3: Settings → Appearance (owner CSS).
+    sec_appearance: "Web appearance",
+    colorTitle: "Identity colours", colorLead: "Each agent's colour in the sidebar: a person's pick, the agent's own, its bot's Discord role colour, or an automatic soft colour. Change one agent's from its ⋯ menu → Colour….",
+    colorPlaces: "Where colours show, unless an agent's own setting says otherwise", colorOff: "Turn off colours",
+    colorOffLead: "Hides every identity colour on this host. The colours people picked are kept, and come back when you turn colours on again.",
+    restoreTitle: "Restore defaults", restoreLead: "Puts this host's appearance settings back to their defaults. It asks first and says what it resets.",
+    restoreConfirm: "This resets, for this host: showing agents' themes and effects, the card size and each card's own size, your sidebar widget, where colours show, and whether colours are off. It also turns your custom CSS off (its versions are kept) and its switch on this device. The colours people picked for agents, installed mods, uploaded effects and the card limits stay as they are.",
+    restoreGo: "Restore defaults", restoreDone: "Appearance settings are back to their defaults.", restoreCssFailed: "The settings are back to their defaults, but your custom CSS could not be turned off: {0}",
+    cardSizeTitle: "Identity cards",
+    cardSizeLead: "How large identity cards are drawn on all your devices. A card's own S / M / L sets that card apart.",
+    cardLimitsTitle: "Identity card upload limits",
+    cardLimitsLead: "The largest portrait and banner anyone may upload, and how many pictures each agent may keep. Empty = the default (shown greyed). A lower limit applies at once; a higher one waits for a fleet admin's confirmation. Pictures already stored stay.",
+    cardLimitsUnavailable: "Only a signed-in admin can see and change these here (or edit web.appearance in fleet.yaml).",
+    cardLimit_portrait_max_width: "Portrait width (px)", cardLimit_portrait_max_height: "Portrait height (px)", cardLimit_portrait_max_kib: "Portrait size (KiB)",
+    cardLimit_banner_max_width: "Banner width (px)", cardLimit_banner_max_height: "Banner height (px)", cardLimit_banner_max_kib: "Banner size (KiB)",
+    cardLimit_instance_quota_files: "Pictures per agent", cardLimit_instance_quota_mib: "Picture space per agent (MiB)",
+    cardLimitInForce: "In force: {0} (allowed {1}–{2})",
+    cardLimitsWhole: "Each limit is a whole number, or empty for the default.",
+    cardLimitsNoChange: "Nothing changed.",
+    cardLimitsSave: "Save limits",
+    cardLimitsSaved: "Saved.",
+    cardLimitsFailed: "Not saved: {0}",
+    themesTitle: "Agents' themes",
+    themesShow: "Show agents' themes, effects and widgets",
+    themesShowLead: "On all your devices. When it's off, every chat looks the same, and agents' pictures and ring colours are their bots' again.",
+    themesSafeMode: "This page was opened with ?safe=1: agents' themes are not shown on it.",
+    widgetTitle: "Your sidebar widget",
+    widgetLead: "A small panel under the instance list, on all your devices: the dashboard draws it from a spec and values you write here as JSON — no HTML, script or CSS. Its live values are your fleet's counts (fleet.working, fleet.needs_you, fleet.idle, fleet.stopped). Agents can't change it.",
+    widgetNotJson: "Not JSON.",
+    widgetSave: "Save widget",
+    widgetSaved: "Sidebar widget saved.",
+    widgetExample: "Start from an example",
+    widgetRemove: "Remove widget",
+    widgetRemoved: "Sidebar widget removed.",
+    modsTitle: "Mods",
+    modsLead: "A mod is one file (.agendmod.json) that carries a look: an agent's theme and pictures, its card text, widgets, effects, and custom CSS. Importing shows everything in it first; only what you tick is applied, all at once. Uninstalling removes the mod from this list; what it applied stays until you reset it.",
+    modsLoadFailed: "Couldn't load the installed mods. Reload the page to try again.",
+    modsNone: "No mods installed.",
+    modChoose: "Import a mod file…",
+    modPlan: "What this mod would change",
+    modAuthor: "By {0} (unverified)",
+    modSizeId: "{0} · id {1}",
+    modAlready: "already installed",
+    modReplace: "Replace the installed version {0}",
+    modPartTheme: "Theme (colours, font, pictures)",
+    modPartIdentity: "Card text (tagline and bio)",
+    modPartWidget_chat_header: "Chat header widget",
+    modPartWidget_details: "Details page widget",
+    modPartWidget_sidebar: "Your sidebar widget",
+    modPartEffect: "Effect: {0}",
+    modPartCss: "Custom CSS (on your screens only)",
+    modCssWarn: "Custom CSS from this file — read it before turning it on.",
+    modCssAssets: "{0} files for it ({1})",
+    modAccent: "Accent", modFont: "Font", modPictures: "{0} pictures ({1})", modPlaces: "places {0} effects",
+    modColorsLight: "Light colours", modColorsDark: "Dark colours", modBubble: "Bubbles", modWorkingLabel: "Working label",
+    modBackground: "Background picture", modBackgroundFit: "Background fit and opacity", modAvatar: "Picture (face)",
+    modPlacesEffect: "Places effect", modAllFields: "Every field, as it will be applied",
+    modStageGone: "That import was replaced or ran out of time. Showing what is staged now.",
+    modRegions: "draws on: {0}", modWants: "hears: {0}",
+    modTarget: "Apply to",
+    modTargetPick: "Choose an agent…",
+    modTargetNeeded: "Choose the agent this look goes to.",
+    modAppliedTo: "applied to {0}",
+    modInstall: "Install",
+    modCancel: "Cancel",
+    modInstalled: "Installed {0}.",
+    modFailed: "Not done: {0}",
+    modDownload: "Download",
+    modUninstall: "Uninstall",
+    modUninstallConfirm: "Uninstall {0}? Its effects leave your library unless something still uses them. What it applied stays.",
+    modUninstalled: "Uninstalled {0}.",
+    modExport: "Export a mod",
+    modExportLead: "Make a mod file from what is in force now: an agent's theme, card text and widgets, your sidebar widget, your custom CSS.",
+    modExportInstance: "Agent",
+    modExportName: "Name (a-z, 0-9, -)",
+    modExportVersion: "Version",
+    modExportTitle: "Title",
+    modExportGo: "Download the file",
+    modExportOmitted: "{0} effect(s) placed there are someone else's and were left out: only your own and shared effects travel.",
+    modProposals: "Proposed by agents",
+    modProposedBy: "{0} proposes",
+    modReview: "Review",
+    modDismiss: "Dismiss",
+    cssTitle: "Custom CSS (yours only)",
+    cssLead: "Your own stylesheet, applied to your screens only: every device where you are signed in, never anyone else's, and never on Settings. It can't load anything from the internet. Put pictures and fonts under Assets below and name them url(\"asset:<id>\").",
+    cssLoadFailed: "Couldn't load your custom CSS. Reload the page to try again.",
+    cssPublicLink: "Custom CSS isn't available on a temporary public link.",
+    cssInForce: "In force: {0}",
+    cssOnTrial: "On trial: {0}. Choose Keep, or it reverts.",
+    cssNone: "No custom CSS in force.",
+    cssSave: "Save and try",
+    cssTrying: "Custom CSS saved. Look around, then choose Keep within 15 seconds.",
+    cssOff: "Turn off (all devices)",
+    cssVersions: "Earlier versions ({0})",
+    cssCurrent: "in force",
+    cssRestore: "Use this",
+    cssAssets: "Assets",
+    cssAssetsLead: "PNG, WebP, JPEG, GIF or WOFF2. {0} of {1} files, {2} in total (at most 1 MiB). Metadata such as GPS is removed.",
+    cssAssetAdd: "Add a picture or font",
+    cssAssetCopy: "Copy reference",
+    cssCopied: "Copied {0}",
+    cssAssetRemove: "Remove",
+    cssDeviceTitle: "On this device",
+    cssDeviceOff: "Turn off custom CSS on this device",
+    cssDeviceOffLead: "Only this browser. Your other devices keep it.",
+    cssSafe: "Is something hidden or broken? Add ?safe=1 to the end of any page's address and it loads without custom CSS.",
+    cssError_at_rule: "Not saved: {0} isn't allowed.",
+    cssError_url: "Not saved: the only url() allowed is url(\"asset:<id>\") for a file in Assets.",
+    cssError_unknown_asset: "Not saved: there's no asset {0}. Add it under Assets first.",
+    cssError_function: "Not saved: {0} isn't allowed.",
+    cssError_property: "Not saved: {0} isn't allowed.",
+    cssError_script_scheme: "Not saved: javascript: and vbscript: aren't allowed.",
+    cssError_too_large: "Not saved: custom CSS can be at most 64 KiB.",
+    cssError_malformed: "Not saved: a string or url() isn't closed.",
+    cssError_nul: "Not saved: the text contains a NUL character.",
+    cssError_unserialisable: "Not saved: the CSS couldn't be read back safely.",
+    cssError_asset_type: "Not added: only PNG, WebP, JPEG, GIF or WOFF2 files are allowed.",
+    cssError_asset_unreadable: "Not added: the file couldn't be read.",
+    cssError_asset_quota: "Not added: Assets hold at most 16 files and 1 MiB in total.",
+    cssError_asset_in_use: "Not removed: a saved version still uses it.",
+    cssError_owner_css_read_only: "This sign-in can view but not change custom CSS.",
+    cssError_owner_css_needs_a_signed_in_person: "Sign in in the browser to change custom CSS.",
+    cssError_other: "Not saved ({0}).",
+    webLead: "How the web dashboard behaves. A change that loosens access (longer sessions, the browser terminal back on or for longer, the public link) waits for a fleet admin to confirm it in chat (General topic) or on the host; one that tightens it applies at once.",
     webPublicRefused: "Web settings can't be changed over a temporary public link. Open the dashboard at its own address to change them.",
     webSessionTitle: "Sign-in sessions",
     webSessionHint: "For sign-ins at the dashboard's own address (this computer, the LAN, a tailnet). A temporary public link always keeps 4 h / 30 min. Shortening ends the sessions it now outlives; lengthening applies to new sign-ins and to an existing one's idle time on its next use. Empty = the default.",
@@ -365,7 +495,7 @@ register("settings", {
     help1: "Agents: each agent's settings, Start/Stop, Pause/Wake, and New agent.",
     help2: "Connections: who may use each bot, its binding, its status emojis, a new token; and provider API keys.",
     help3: "ClassicBot: each room's backend, model and options.",
-    help4: "General: defaults for every agent, ClassicBot defaults and web chat. Review changes stages them.",
+    help4: "General: defaults for every agent and ClassicBot defaults. Web: the dashboard's sign-in sessions, browser terminal, web echo, Log and public link. Review changes stages them.",
     help5: "Changes are staged, then applied together with Apply changes. Each shows what it costs: immediately, an agent restart, or an AgEnD restart.",
     help6: "A change to access, secrets or connections waits for a fleet admin to confirm it in chat before it applies.",
   },
@@ -401,7 +531,7 @@ register("settings", {
     classicChannels: "ClassicBot 頻道",
     noClassic: "沒有 ClassicBot 頻道 — 在聊天中用 /start 建立。",
     publicLink: "提供臨時公開網頁連結",
-    publicLinkHint: "每次都需管理員明確啟用。Cloudflare 終止 TLS；登入者具有完整網頁管理權限，不公開 preview。",
+    publicLinkHint: "每次都需管理員明確啟用。Cloudflare 終止 TLS；登入者具有完整網頁管理權限。HTML 預覽會另開一條臨時通道，除非設定 web.preview_on_public_link: false。",
     publicTtl: "公開連結分鐘數（1–480）",
     publicProtocol: "Tunnel 協定",
     webEcho: "Web 同步",
@@ -530,7 +660,9 @@ register("settings", {
     wizardWaitingStart: "等待群組訊息中…",
     wizardNoStartYet: "還沒收到群組訊息 —— 發一則之後再按一次。",
     wizardGeneralChannel: "General 頻道 id",
-    wizardAdminUser: "你的 user id（會成為第一個允許使用者）",
+    wizardAdminUser: "你的使用者 ID（必填；會成為第一個允許使用者）",
+    wizardNeedDiscordAdmin: "請輸入 Discord 使用者 ID：17–20 位數字，開頭不能是 0。",
+    wizardNeedTelegramAdmin: "請輸入 Telegram 使用者 ID：1–20 位正整數字，開頭不能是 0。",
     wizardNeedVerify: "請先驗證 token 再繼續。",
     wizardPlanLoading: "正在產生方案…",
     wizardWillWrite: "將寫入：",
@@ -542,7 +674,7 @@ register("settings", {
     deleteBot: "刪除這個機器人",
     noAllowedUsers: "沒有允許的使用者",
     searchAll: "搜尋 agent、機器人、頻道…",
-    accessMovedHint: "誰可以使用 bot 是在連線本身設定 —— 請到「連線與機器人」開啟「{0}」的設定。",
+    accessMovedHint: "誰可以使用 bot 是在連線本身設定 —— 請到「連線」開啟「{0}」的設定。",
     applyRestartNeeded: "已儲存 —— 需要重新啟動 AgEnD 才會生效",
     applyNoChange: "無需變更",
     applyRestartHint: "此變更需要重新啟動 AgEnD 本身。可以在這裡重新啟動，或在聊天頻道執行 /restart。",
@@ -585,6 +717,11 @@ register("settings", {
     staggerRange: "必須介於 0 到 30000",
     staggerWarning: "數值太低可能造成啟動尖峰",
     sec_device: "偏好設定", syncedTitle: "在你所有的裝置同步", syncedLead: "這裡的變更會套用到你登入的每一台裝置。",
+    profileTitle: "你的名字",
+    profileLeadBound: "agent 會把你從網頁送出的訊息，認成收到登入驗證碼的那個 Discord 或 Telegram 帳號：用它的 id，名字也用它的，除非你在這裡另外取名。它會跟著你到每一台登入的裝置。這只用來辨認，不代表任何權限。",
+    profileLeadUnbound: "這個瀏覽器不是用私訊到你 Discord 或 Telegram 帳號的驗證碼登入的，所以 agent 會把你的網頁訊息看成「web-user」（或你在這裡設定的名字）。用 /web 的驗證碼登入，就能被認成你的帳號。",
+    profileName: "名字", profileHelp: "agent 看到：{0} · id {1}", profileSave: "儲存", profileClear: "改回 web-user", profileUseAccount: "改用 {0}",
+    profileSaved: "agent 現在會看到你是 {0}", profileFailed: "無法儲存名字",
     syncedPublicLink: "公開連結只能讀取這些設定：在這裡變更只會留在這個瀏覽器。",
     deviceTitle: "只限這台裝置", deviceLead: "導覽、文字大小、視圖寬度、側欄顯示或隱藏、面板寬度與桌面通知，每台裝置各自保留。",
     sec_agents: "Agent",
@@ -647,7 +784,129 @@ register("settings", {
     accessTitle: "存取",
     webChat: "網頁聊天",
     sec_web: "網頁",
-    webLead: "網頁儀表板的行為。放寬存取的變更（延長 session、重新開啟或延長瀏覽器終端機、公開連結）需要 fleet admin 在 General 確認；收緊的變更會立即套用。",
+    sec_appearance: "網頁外觀",
+    colorTitle: "識別色", colorLead: "每個 agent 在側欄的顏色：有人挑選的、agent 自己的、它的 bot 在 Discord 身分組的顏色，或自動配的柔和色。要改某個 agent 的顏色，從它的 ⋯ 選單 → 顏色…。",
+    colorPlaces: "顏色顯示的位置（agent 自己另有設定時除外）", colorOff: "關閉顏色",
+    colorOffLead: "在這台主機隱藏所有識別色。有人挑過的顏色會保留，重新開啟顏色後就會回來。",
+    restoreTitle: "還原預設值", restoreLead: "把這台主機的外觀設定改回預設值。執行前會先詢問，並說明會重設哪些項目。",
+    restoreConfirm: "會重設這台主機的：是否顯示 agent 的主題與效果、卡片大小與各張卡片自己的大小、你的側欄小工具、顏色顯示的位置，以及是否關閉顏色；也會關閉你的自訂 CSS（版本會保留）以及這台裝置上的 CSS 開關。有人替 agent 挑的顏色、已安裝的 mod、上傳的效果與卡片上限都不會變。",
+    restoreGo: "還原預設值", restoreDone: "外觀設定已改回預設值。", restoreCssFailed: "設定已改回預設值，但無法關閉你的自訂 CSS：{0}",
+    cardSizeTitle: "身分卡",
+    cardSizeLead: "身分卡在你所有裝置上的顯示大小。卡片上自己的 小／中／大 可以單獨設定那張卡片。",
+    cardLimitsTitle: "身分卡上傳限制",
+    cardLimitsLead: "任何人可上傳的肖像與橫幅上限，以及每個 agent 可保留的圖片數量。留空＝預設值（以灰字顯示）。調低立即生效；調高需 fleet admin 確認。已存的圖片不受影響。",
+    cardLimitsUnavailable: "只有已登入的管理者能在這裡查看與修改（或在 fleet.yaml 編輯 web.appearance）。",
+    cardLimit_portrait_max_width: "肖像寬度（px）", cardLimit_portrait_max_height: "肖像高度（px）", cardLimit_portrait_max_kib: "肖像大小（KiB）",
+    cardLimit_banner_max_width: "橫幅寬度（px）", cardLimit_banner_max_height: "橫幅高度（px）", cardLimit_banner_max_kib: "橫幅大小（KiB）",
+    cardLimit_instance_quota_files: "每個 agent 的圖片數", cardLimit_instance_quota_mib: "每個 agent 的圖片空間（MiB）",
+    cardLimitInForce: "實際生效：{0}（允許 {1}–{2}）",
+    cardLimitsWhole: "每個限制須為整數，或留空使用預設值。",
+    cardLimitsNoChange: "沒有變更。",
+    cardLimitsSave: "儲存限制",
+    cardLimitsSaved: "已儲存。",
+    cardLimitsFailed: "未儲存：{0}",
+    themesTitle: "Agent 的主題",
+    themesShow: "顯示 agent 的主題、效果與小工具",
+    themesShowLead: "套用到你所有的裝置。關閉時每個聊天看起來都一樣，agent 的圖片與外框顏色也會換回各自 bot 的。",
+    themesSafeMode: "這個頁面是用 ?safe=1 開啟的：不顯示 agent 的主題。",
+    widgetTitle: "你的側邊欄小工具",
+    widgetLead: "實例清單下方的一個小面板，套用到你所有的裝置：儀表板依你在這裡用 JSON 寫的規格與數值繪製——沒有 HTML、腳本或 CSS。即時數值是你 fleet 的計數（fleet.working、fleet.needs_you、fleet.idle、fleet.stopped）。agent 無法變更它。",
+    widgetNotJson: "不是 JSON。",
+    widgetSave: "儲存小工具",
+    widgetSaved: "已儲存側邊欄小工具。",
+    widgetExample: "從範例開始",
+    widgetRemove: "移除小工具",
+    widgetRemoved: "已移除側邊欄小工具。",
+    modsTitle: "Mod",
+    modsLead: "Mod 是一個檔案（.agendmod.json），帶著一套外觀：agent 的主題與圖片、身分卡文字、小工具、效果，以及自訂 CSS。匯入時會先完整列出內容，只有你勾選的部分會一次套用。解除安裝會把 mod 從這個清單移除；它已套用的外觀會保留，直到你重設。",
+    modsLoadFailed: "無法載入已安裝的 mod。請重新載入頁面再試一次。",
+    modsNone: "尚未安裝任何 mod。",
+    modChoose: "匯入 mod 檔案…",
+    modPlan: "這個 mod 會變更的內容",
+    modAuthor: "作者：{0}（未經驗證）",
+    modSizeId: "{0} · id {1}",
+    modAlready: "已安裝",
+    modReplace: "取代已安裝的 {0} 版",
+    modPartTheme: "主題（顏色、字型、圖片）",
+    modPartIdentity: "身分卡文字（標語與簡介）",
+    modPartWidget_chat_header: "聊天標頭小工具",
+    modPartWidget_details: "詳細資料頁小工具",
+    modPartWidget_sidebar: "你的側邊欄小工具",
+    modPartEffect: "效果：{0}",
+    modPartCss: "自訂 CSS（只套用在你的畫面）",
+    modCssWarn: "這是檔案裡的自訂 CSS——開啟前請先讀過。",
+    modCssAssets: "附帶 {0} 個檔案（{1}）",
+    modAccent: "強調色", modFont: "字型", modPictures: "{0} 張圖片（{1}）", modPlaces: "放置 {0} 個效果",
+    modColorsLight: "淺色模式顏色", modColorsDark: "深色模式顏色", modBubble: "對話泡泡", modWorkingLabel: "工作中文字",
+    modBackground: "背景圖片", modBackgroundFit: "背景填滿方式與不透明度", modAvatar: "圖片（頭像）",
+    modPlacesEffect: "放置效果", modAllFields: "所有欄位（套用時的樣子）",
+    modStageGone: "那次匯入已被取代或已逾時。以下顯示目前暫存的內容。",
+    modRegions: "繪製於：{0}", modWants: "接收：{0}",
+    modTarget: "套用到",
+    modTargetPick: "選擇一個 agent…",
+    modTargetNeeded: "請選擇這套外觀要套用到哪個 agent。",
+    modAppliedTo: "套用於 {0}",
+    modInstall: "安裝",
+    modCancel: "取消",
+    modInstalled: "已安裝 {0}。",
+    modFailed: "未完成：{0}",
+    modDownload: "下載",
+    modUninstall: "解除安裝",
+    modUninstallConfirm: "要解除安裝 {0} 嗎？它的效果會離開你的效果庫，除非還有東西在使用。它已套用的外觀會保留。",
+    modUninstalled: "已解除安裝 {0}。",
+    modExport: "匯出 mod",
+    modExportLead: "用目前生效的外觀做成 mod 檔案：某個 agent 的主題、身分卡文字與小工具、你的側邊欄小工具、你的自訂 CSS。",
+    modExportInstance: "Agent",
+    modExportName: "名稱（a-z、0-9、-）",
+    modExportVersion: "版本",
+    modExportTitle: "標題",
+    modExportGo: "下載檔案",
+    modExportOmitted: "有 {0} 個放在那裡的效果屬於別人，已略過：只有你自己的和共用的效果會被帶走。",
+    modProposals: "Agent 提議的 mod",
+    modProposedBy: "{0} 提議",
+    modReview: "檢視",
+    modDismiss: "略過",
+    cssTitle: "自訂 CSS（只套用在你自己）",
+    cssLead: "你自己的樣式表，只套用在你自己的畫面：你登入的每一台裝置都會套用，不會影響別人，也不會套用在設定頁。它無法從網路載入任何東西；圖片和字型請放在下方的「資源」，再用 url(\"asset:<id>\") 引用。",
+    cssLoadFailed: "無法載入你的自訂 CSS。請重新整理頁面再試一次。",
+    cssPublicLink: "臨時公開連結無法使用自訂 CSS。",
+    cssInForce: "使用中：{0}",
+    cssOnTrial: "試用中：{0}。請按「保留」，否則會還原。",
+    cssNone: "目前沒有使用自訂 CSS。",
+    cssSave: "儲存並試用",
+    cssTrying: "已儲存自訂 CSS。請到各頁看看，15 秒內按「保留」。",
+    cssOff: "關閉（所有裝置）",
+    cssVersions: "先前的版本（{0}）",
+    cssCurrent: "使用中",
+    cssRestore: "改用這版",
+    cssAssets: "資源",
+    cssAssetsLead: "PNG、WebP、JPEG、GIF 或 WOFF2。目前 {0} / {1} 個檔案，共 {2}（上限 1 MiB）。會移除 GPS 等中繼資料。",
+    cssAssetAdd: "加入圖片或字型",
+    cssAssetCopy: "複製引用",
+    cssCopied: "已複製 {0}",
+    cssAssetRemove: "移除",
+    cssDeviceTitle: "這台裝置",
+    cssDeviceOff: "在這台裝置關閉自訂 CSS",
+    cssDeviceOffLead: "只影響這個瀏覽器，你的其他裝置照常套用。",
+    cssSafe: "畫面被藏起來或壞掉了嗎？在任何頁面網址的最後加上 ?safe=1，就會不套用自訂 CSS 地載入。",
+    cssError_at_rule: "未儲存：不允許使用 {0}。",
+    cssError_url: "未儲存：url() 只能用 url(\"asset:<id>\") 引用「資源」裡的檔案。",
+    cssError_unknown_asset: "未儲存：找不到資源 {0}。請先在「資源」加入它。",
+    cssError_function: "未儲存：不允許使用 {0}。",
+    cssError_property: "未儲存：不允許使用 {0}。",
+    cssError_script_scheme: "未儲存：不允許使用 javascript: 和 vbscript:。",
+    cssError_too_large: "未儲存：自訂 CSS 最多 64 KiB。",
+    cssError_malformed: "未儲存：有字串或 url() 沒有結束。",
+    cssError_nul: "未儲存：內容含有 NUL 字元。",
+    cssError_unserialisable: "未儲存：這份 CSS 無法安全地重新輸出。",
+    cssError_asset_type: "未加入：只接受 PNG、WebP、JPEG、GIF 或 WOFF2 檔案。",
+    cssError_asset_unreadable: "未加入：無法讀取這個檔案。",
+    cssError_asset_quota: "未加入：資源最多 16 個檔案、合計 1 MiB。",
+    cssError_asset_in_use: "未移除：仍有已儲存的版本在使用它。",
+    cssError_owner_css_read_only: "這個登入只能檢視、不能變更自訂 CSS。",
+    cssError_owner_css_needs_a_signed_in_person: "請在瀏覽器登入後再變更自訂 CSS。",
+    cssError_other: "未儲存（{0}）。",
+    webLead: "網頁儀表板的行為。放寬存取的變更（延長 session、重新開啟或延長瀏覽器終端機、公開連結）需要 fleet admin 在聊天（General topic）或主機上確認；收緊的變更會立即套用。",
     webPublicRefused: "無法透過臨時公開連結變更網頁設定。請從儀表板本身的網址開啟後再變更。",
     webSessionTitle: "登入 session",
     webSessionHint: "適用於從儀表板本身網址登入的 session（本機、區域網路、tailnet）。臨時公開連結固定為 4 小時 / 30 分鐘。縮短會讓已超過新限制的 session 結束；延長會套用到新的登入，以及既有 session 下次使用時的閒置時間。留空 = 預設值。",
@@ -731,7 +990,7 @@ register("settings", {
     help1: "Agent：每個 agent 的設定、啟動/停止、暫停/喚醒，以及新增 agent。",
     help2: "連線：誰可以使用各個 bot、它的綁定、狀態表情、新的 token；以及供應商 API key。",
     help3: "ClassicBot：每個房間的 backend、model 與選項。",
-    help4: "一般：所有 agent 的預設值、ClassicBot 預設值與網頁聊天。「檢查變更」會把它們暫存。",
+    help4: "一般：所有 agent 的預設值與 ClassicBot 預設值。網頁：儀表板的登入 session、瀏覽器終端機、網頁轉發、紀錄與公開連結。「檢查變更」會把它們暫存。",
     help5: "變更會先暫存，再用「套用變更」一起套用。每項都會標示代價：立即生效、重新啟動 agent，或重新啟動 AgEnD。",
     help6: "存取、密鑰或連線的變更，要等 fleet 管理員在聊天中確認後才會套用。",
   },

package/dist/ui/settings-token.js

@@ -10,6 +10,13 @@ import { api } from "./settings-confirm.js";
 
 const tn = (k, ...v) => t(`settings.${k}`, ...v);
 
+// UI feedback only: the plan and commit independently enforce this on the server.
+export const adminUserIdPattern = (platform) => platform === "discord" ? "[1-9][0-9]{16,19}" : "[1-9][0-9]{0,19}";
+export function adminUserIdError(platform, value) {
+  return typeof value === "string" && new RegExp(`^${adminUserIdPattern(platform)}$`).test(value)
+    ? null : tn(platform === "discord" ? "wizardNeedDiscordAdmin" : "wizardNeedTelegramAdmin");
+}
+
 /** Who this token is: { valid, username?, reason? } — one outbound check, the token sent once and not kept. */
 export async function verifyBotToken(platform, token) {
   const res = await api("/api/settings/quickstart/probe", { method: "POST", body: JSON.stringify({ action: "verify", platform, token }) })

package/dist/ui/settings-wizard.js

@@ -10,7 +10,7 @@ import { api } from "./settings-confirm.js";
 import { startOperation } from "./settings-apply.js";
 import { BACKENDS, DEFAULT_SCHEMA, impactOf, toYaml } from "./settings-model.js";
 import { Drawer, Select } from "./settings-dialogs.js";
-import { botHandle, TokenEnvNote, TokenField, verifyBotToken } from "./settings-token.js";
+import { adminUserIdError, adminUserIdPattern, botHandle, TokenEnvNote, TokenField, verifyBotToken } from "./settings-token.js";
 import { DiscordServerPicker } from "./settings-discord.js";
 
 const tn = (k, ...v) => t(`settings.${k}`, ...v);
@@ -90,6 +90,8 @@ export function SetupWizard({ ctx, onClose }) {
     if (w.step === 2) { setW({ ...w, step: 3 }); return; }
     if (w.step === 3) {
       if (!w.identity || !w.identity.valid) { setErr(tn("wizardNeedVerify")); return; }
+      const adminError = adminUserIdError(w.platform, w.admin_user_id);
+      if (adminError) { setErr(adminError); return; }
       const at = rev.current;
       setBusy(tn("wizardPlanLoading"));
       const res = await post("/api/settings/quickstart/plan", input());
@@ -146,12 +148,12 @@ export function SetupWizard({ ctx, onClose }) {
         <${DiscordServerPicker} idPrefix="wz" token=${w.identity && w.identity.valid ? w.token : ""} bot=${w.identity && botHandle(w.identity.username)}
           invite=${w.identity && w.identity.invite} portal=${w.identity && w.identity.portal} guilds=${w.guilds} onGuilds=${(g) => setW((x) => ({ ...x, guilds: g }))}
           guild=${w.guild_id} onGuild=${set("guild_id")} channel=${w.general_channel_id} onChannel=${set("general_channel_id")} />
-        <div class="field"><label for="wz-user">${tn("wizardAdminUser")}</label><input id="wz-user" type="text" placeholder=${tn("discordUserPlaceholder")} value=${w.admin_user_id} onInput=${(e) => set("admin_user_id")(e.target.value.trim())} /></div>`
+        <div class="field"><label for="wz-user">${tn("wizardAdminUser")}</label><input id="wz-user" type="text" required=${true} inputmode="numeric" pattern=${adminUserIdPattern(w.platform)} placeholder=${tn("discordUserPlaceholder")} value=${w.admin_user_id} onInput=${(e) => set("admin_user_id")(e.target.value.trim())} /></div>`
       : html`
         <div class="field"><label for="wz-group">${tn("groupIdField")}</label><input id="wz-group" type="text" placeholder="-1001234567890" value=${w.group_id} onInput=${(e) => set("group_id")(e.target.value.trim())} />
           <p class="note">${tn("wizardDetectHint")}</p></div>
         <div class="dlg-inline-actions"><button type="button" class="btn btn-sm" disabled=${!!busy} onClick=${detect}>${tn("wizardDetect")}</button></div>
-        <div class="field"><label for="wz-user">${tn("wizardAdminUser")}</label><input id="wz-user" type="text" placeholder=${tn("telegramUserPlaceholder")} value=${w.admin_user_id} onInput=${(e) => set("admin_user_id")(e.target.value.trim())} /></div>`}`;
+        <div class="field"><label for="wz-user">${tn("wizardAdminUser")}</label><input id="wz-user" type="text" required=${true} inputmode="numeric" pattern=${adminUserIdPattern(w.platform)} placeholder=${tn("telegramUserPlaceholder")} value=${w.admin_user_id} onInput=${(e) => set("admin_user_id")(e.target.value.trim())} /></div>`}`;
   } else {
     body = !w.plan ? html`<p class="note">${tn("wizardPlanLoading")}</p>` : html`
       <p><strong>${tn("wizardWillWrite")}</strong></p>

package/dist/ui/shared/agend-auth.js

@@ -27,6 +27,20 @@
 
   const nativeFetch = window.fetch.bind(window);
   let sessionPending = null;
+  // Observation only: no server authority, owner/CSRF data or way to restore this page's episode.
+  let ended = null;
+  const endListeners = new Set();
+  function endSession(reason) {
+    if (ended) return;
+    ended = Object.freeze({ reason });
+    const listeners = [...endListeners]; endListeners.clear();
+    for (const fn of listeners) { try { fn(ended); } catch { /* one observer cannot delay another's cleanup */ } }
+  }
+  function onSessionEnd(fn) {
+    if (typeof fn !== "function") return () => {};
+    if (ended) { try { fn(ended); } catch { /* late observers fail closed */ } return () => {}; }
+    endListeners.add(fn); return () => endListeners.delete(fn);
+  }
 
   /**
    * This page's sign-in, read once from GET /auth/session: { csrf, handle } or null (no session, or the read failed —
@@ -36,8 +50,8 @@
   function session() {
     if (!sessionPending) {
       sessionPending = nativeFetch("/auth/session", { credentials: "same-origin", cache: "no-store" })
-        .then((r) => (r.ok ? r.json() : null))
-        .then((j) => (j && typeof j.csrf === "string" ? { csrf: j.csrf, handle: typeof j.handle === "string" ? j.handle : null } : null))
+        .then((r) => { if (r.status === 401) endSession("unauthorized"); return r.ok ? r.json() : null; })
+        .then((j) => (j && typeof j.csrf === "string" ? { csrf: j.csrf, handle: typeof j.handle === "string" ? j.handle : null, canWrite: j.tier === "admin", localAdmin: j.tier === "admin" && j.surface === "local" } : null))
         .catch(() => null)
         .then((value) => { if (!value) sessionPending = null; return value; });
     }
@@ -51,6 +65,8 @@
     bannerShown = true;
     const bar = document.createElement("div");
     bar.setAttribute("role", "alert");
+    bar.setAttribute("data-trust", "session-ended");
+    bar.className = "agend-session-ended";
     bar.style.cssText = "position:fixed;top:0;left:0;right:0;z-index:2147483647;padding:10px 16px;background:#f85149;color:#fff;font:14px system-ui,sans-serif;text-align:center";
     const zh = /^zh/i.test(navigator.language || "");
     bar.append(document.createTextNode(zh ? "登入已結束。" : "Your session has ended. "));
@@ -77,15 +93,23 @@
       }
     }
     const response = await nativeFetch(input, init);
-    if (sameOrigin && response.status === 401 && !target.pathname.startsWith("/auth/")) sessionEndedBanner();
+    if (sameOrigin && response.status === 401 && !target.pathname.startsWith("/auth/")) { endSession("unauthorized"); sessionEndedBanner(); }
     return response;
   };
 
   window.AgendAuth = {
     csrf,
+    /** Host runtimes subscribe before admission. Late subscribers observe the same closed episode immediately. */
+    onSessionEnd,
+    /** Display hint from the existing session read. Every write still requires server authorization. */
+    canWrite() { return session().then(s => !ended && s?.canWrite === true); },
+    /** Display hint from the same server session response; Start still reauthorizes. No CSRF is exposed here. */
+    trialSession() { return session().then(s => !ended && s?.handle && /^[a-f0-9]{16}$/.test(s.handle) ? Object.freeze({ epoch: s.handle, localAdmin: s.localAdmin === true }) : null); },
+    sessionEnded() { return ended !== null; },
     /** #1568: the session handle of this page's sign-in, or null when there is none. */
     sessionHandle() { return session().then((s) => (s && s.handle ? s.handle : null)); },
     async signOut() {
+      endSession("sign_out");
       const value = await csrf();
       const r = await nativeFetch("/auth/logout", { method: "POST", credentials: "same-origin", headers: value ? { "X-Agend-CSRF": value } : {} });
       // A sign-out the server could not make durable is not quietly reported as done: say so before leaving.