@songsid/agend 2.3.0-beta.22 → 2.3.0-beta.24

package/dist/instance-config-impact.js

@@ -82,6 +82,7 @@ const CLASSIC_FIELDS = [
  * fleet process or the channel binding rather than to an instance's config.
  */
 const FLEET_FIELD_IMPACTS = {
+    "web.experimental.canvas_worker": "now",
     "web.echo_to_channel": "now",
     "web.log_tab": "now",
     "web.usage_report_on_public_link": "now",
@@ -99,15 +100,21 @@ const FLEET_FIELD_IMPACTS = {
         "instance_quota.files", "instance_quota.mib"].map((k) => [`web.appearance.${k}`, "now"])),
     "web_terminal.enabled": "now",
     "web_terminal.ttl_minutes": "now",
-    "defaults.locale": "now",
+    // #2346: guests and web authority are read at each sign-in, message and check (`web` is read at the point of use);
+    // the page asked for nothing and wrote "now" itself.
+    "web.guests": "now",
+    "web.verified_authority": "now",
+    // #2346: read once at startup (fleet-level-config.ts STARTUP_ONLY_FLEET_KEYS: setLocale(detectLocale(fleet))).
+    "defaults.locale": "fleet",
     "fleet.channels": "fleet",
     "fleet.channel.access.mode": "fleet",
     "fleet.channel.access.allowed_users": "fleet",
     // #1056: each stamp resolves the connection's status emojis from the live config (an agent's "avoid these" list
     // follows at its next start), so this applies now; the rest of a connection still needs the fleet restart.
     "fleet.channel.options.status_emojis": "now",
-    "fleet.spawn_concurrency": "fleet",
-    "fleet.spawn_stagger_ms": "fleet",
+    // #2346: read at each spawn by the SpawnGate (fleet-level-config.ts RUNTIME_READ_FLEET_KEYS): the next start uses it.
+    "fleet.spawn_concurrency": "now",
+    "fleet.spawn_stagger_ms": "now",
     "classic.admin_users": "fleet",
     "classic.allowed_guilds": "fleet",
     // #2168: a confirmed delete stops and removes the agent at once (removeInstance) — no AgEnD restart.

package/dist/instance-config-impact.js.map

@@ -1 +1 @@
-{"version":3,"file":"instance-config-impact.js","sourceRoot":"","sources":["../src/instance-config-impact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAM9C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,YAAY,GAA4B,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AAElF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAsC,IAAI,GAAG,CAAuB;IACvG,eAAe;IACf,wBAAwB;IACxB,iBAAiB;IACjB,kBAAkB;IAClB,UAAU;IACV,cAAc;IACd,aAAa;IACb,MAAM;IACN,WAAW;IACX,sFAAsF;IACtF,2BAA2B;IAC3B,wFAAwF;IACxF,qBAAqB;CACtB,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAChE,CAAC,eAAe,EAAE,wBAAwB,CAAW;KACnD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CACpD,CAAC;AAEF;;;GAGG;AACH,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC;IAC9D,UAAU;IACV,YAAY;IACZ,eAAe;CAChB,CAAC,CAAC;AAEH,wDAAwD;AACxD,MAAM,eAAe,GAAG;IACtB,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,mBAAmB;IACtE,kBAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe;IACzE,eAAe,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,WAAW;IACzE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU;IACjE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,kBAAkB;IAC7D,0EAA0E;IAC1E,kEAAkE;IAClE,eAAe;IACf,2BAA2B;IAC3B,qDAAqD;IACrD,qBAAqB;CACb,CAAC;AAEX,2DAA2D;AAC3D,MAAM,cAAc,GAAG;IACrB,SAAS,EAAE,OAAO,EAAE,kBAAkB,EAAE,eAAe;IACvD,wBAAwB,EAAE,QAAQ,EAAE,eAAe,EAAE,kBAAkB;IACvE,UAAU;CACF,CAAC;AAEX;;;GAGG;AACH,MAAM,mBAAmB,GAA2C;IAClE,qBAAqB,EAAE,KAAK;IAC5B,aAAa,EAAE,KAAK;IACpB,iCAAiC,EAAE,KAAK;IACxC,8BAA8B,EAAE,KAAK;IACrC,6BAA6B,EAAE,KAAK;IACpC,0BAA0B,EAAE,KAAK;IACjC,0BAA0B,EAAE,KAAK;IACjC,kCAAkC,EAAE,KAAK;IACzC,6BAA6B,EAAE,KAAK;IACpC,+EAA+E;IAC/E,kCAAkC,EAAE,KAAK;IACzC,8BAA8B,EAAE,KAAK;IACrC,oGAAoG;IACpG,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,gBAAgB;QAC/I,sBAAsB,EAAE,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,KAAc,CAAC,CAAC,CAAC;IACpG,sBAAsB,EAAE,KAAK;IAC7B,0BAA0B,EAAE,KAAK;IACjC,iBAAiB,EAAE,KAAK;IACxB,gBAAgB,EAAE,OAAO;IACzB,2BAA2B,EAAE,OAAO;IACpC,oCAAoC,EAAE,OAAO;IAC7C,gHAAgH;IAChH,2GAA2G;IAC3G,qCAAqC,EAAE,KAAK;IAC5C,yBAAyB,EAAE,OAAO;IAClC,wBAAwB,EAAE,OAAO;IACjC,qBAAqB,EAAE,OAAO;IAC9B,wBAAwB,EAAE,OAAO;IACjC,qGAAqG;IACrG,iBAAiB,EAAE,KAAK;CACzB,CAAC;AAEF,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,MAAsB;IAIvD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAwE,EAAE,CAAC;QACzH,CAAC,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,KAAc,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACvB,CAAC;AAED;mEACmE;AACnE,MAAM,UAAU,eAAe,CAAC,MAAsB;IACpD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,wBAAwB;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC9E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAuB,EACvB,IAAoB;IAEpB,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACvC,gEAAgE;IAChE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACxD,OAAO,wBAAwB,CAAC,GAAG,CAAC,GAA2B,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,OAAO,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAuB,EAAE,QAAuC;IAC1F,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrF,OAAO,YAAY,CAAC,KAAK,CAAE,CAAC;AAC9B,CAAC;AASD,qDAAqD;AACrD,MAAM,UAAU,yBAAyB;IACvC,MAAM,OAAO,GAAiC,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACzE,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,OAAO,CAAC,YAAY,GAAG,EAAE,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACtD,wEAAwE;QACxE,sEAAsE;QACtE,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,YAAY,GAAG,EAAE,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAClG,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,OAAO,CAAC,WAAW,GAAG,EAAE,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACpD,OAAO,CAAC,oBAAoB,GAAG,EAAE,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"instance-config-impact.js","sourceRoot":"","sources":["../src/instance-config-impact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAM9C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,YAAY,GAA4B,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AAElF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAsC,IAAI,GAAG,CAAuB;IACvG,eAAe;IACf,wBAAwB;IACxB,iBAAiB;IACjB,kBAAkB;IAClB,UAAU;IACV,cAAc;IACd,aAAa;IACb,MAAM;IACN,WAAW;IACX,sFAAsF;IACtF,2BAA2B;IAC3B,wFAAwF;IACxF,qBAAqB;CACtB,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAChE,CAAC,eAAe,EAAE,wBAAwB,CAAW;KACnD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CACpD,CAAC;AAEF;;;GAGG;AACH,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC;IAC9D,UAAU;IACV,YAAY;IACZ,eAAe;CAChB,CAAC,CAAC;AAEH,wDAAwD;AACxD,MAAM,eAAe,GAAG;IACtB,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,mBAAmB;IACtE,kBAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe;IACzE,eAAe,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,WAAW;IACzE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU;IACjE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,kBAAkB;IAC7D,0EAA0E;IAC1E,kEAAkE;IAClE,eAAe;IACf,2BAA2B;IAC3B,qDAAqD;IACrD,qBAAqB;CACb,CAAC;AAEX,2DAA2D;AAC3D,MAAM,cAAc,GAAG;IACrB,SAAS,EAAE,OAAO,EAAE,kBAAkB,EAAE,eAAe;IACvD,wBAAwB,EAAE,QAAQ,EAAE,eAAe,EAAE,kBAAkB;IACvE,UAAU;CACF,CAAC;AAEX;;;GAGG;AACH,MAAM,mBAAmB,GAA2C;IAClE,gCAAgC,EAAE,KAAK;IACvC,qBAAqB,EAAE,KAAK;IAC5B,aAAa,EAAE,KAAK;IACpB,iCAAiC,EAAE,KAAK;IACxC,8BAA8B,EAAE,KAAK;IACrC,6BAA6B,EAAE,KAAK;IACpC,0BAA0B,EAAE,KAAK;IACjC,0BAA0B,EAAE,KAAK;IACjC,kCAAkC,EAAE,KAAK;IACzC,6BAA6B,EAAE,KAAK;IACpC,+EAA+E;IAC/E,kCAAkC,EAAE,KAAK;IACzC,8BAA8B,EAAE,KAAK;IACrC,oGAAoG;IACpG,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,gBAAgB;QAC/I,sBAAsB,EAAE,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,KAAc,CAAC,CAAC,CAAC;IACpG,sBAAsB,EAAE,KAAK;IAC7B,0BAA0B,EAAE,KAAK;IACjC,mHAAmH;IACnH,qDAAqD;IACrD,YAAY,EAAE,KAAK;IACnB,wBAAwB,EAAE,KAAK;IAC/B,+GAA+G;IAC/G,iBAAiB,EAAE,OAAO;IAC1B,gBAAgB,EAAE,OAAO;IACzB,2BAA2B,EAAE,OAAO;IACpC,oCAAoC,EAAE,OAAO;IAC7C,gHAAgH;IAChH,2GAA2G;IAC3G,qCAAqC,EAAE,KAAK;IAC5C,sHAAsH;IACtH,yBAAyB,EAAE,KAAK;IAChC,wBAAwB,EAAE,KAAK;IAC/B,qBAAqB,EAAE,OAAO;IAC9B,wBAAwB,EAAE,OAAO;IACjC,qGAAqG;IACrG,iBAAiB,EAAE,KAAK;CACzB,CAAC;AAEF,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,MAAsB;IAIvD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAwE,EAAE,CAAC;QACzH,CAAC,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,KAAc,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACvB,CAAC;AAED;mEACmE;AACnE,MAAM,UAAU,eAAe,CAAC,MAAsB;IACpD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,wBAAwB;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC9E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAuB,EACvB,IAAoB;IAEpB,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACvC,gEAAgE;IAChE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACxD,OAAO,wBAAwB,CAAC,GAAG,CAAC,GAA2B,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,OAAO,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAuB,EAAE,QAAuC;IAC1F,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrF,OAAO,YAAY,CAAC,KAAK,CAAE,CAAC;AAC9B,CAAC;AASD,qDAAqD;AACrD,MAAM,UAAU,yBAAyB;IACvC,MAAM,OAAO,GAAiC,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACzE,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,OAAO,CAAC,YAAY,GAAG,EAAE,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACtD,wEAAwE;QACxE,sEAAsE;QACtE,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,YAAY,GAAG,EAAE,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAClG,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,OAAO,CAAC,WAAW,GAAG,EAAE,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACpD,OAAO,CAAC,oBAAoB,GAAG,EAAE,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;AAC1C,CAAC"}

package/dist/instance-lifecycle.js

@@ -1747,7 +1747,7 @@ export class InstanceLifecycle {
             }
             else {
                 try {
-                    const { execFile: execFileCb } = await import("node:child_process");
+                    const { execFile: execFileCb } = await import("./child-process.js");
                     const { promisify } = await import("node:util");
                     check();
                     const execFileAsync = promisify(execFileCb);
@@ -1776,7 +1776,7 @@ export class InstanceLifecycle {
             }
             // Prune stale worktree records (e.g. if directory was manually deleted)
             try {
-                const { execFile: execFileCb } = await import("node:child_process");
+                const { execFile: execFileCb } = await import("./child-process.js");
                 const { promisify } = await import("node:util");
                 check();
                 const execFileAsync = promisify(execFileCb);
@@ -1906,7 +1906,7 @@ export class InstanceLifecycle {
                 }
             };
             if (acquiredWorktree) {
-                const { execFile } = await import("node:child_process");
+                const { execFile } = await import("./child-process.js");
                 const { promisify } = await import("node:util");
                 if (!ownsPath())
                     return;
@@ -1924,7 +1924,7 @@ export class InstanceLifecycle {
         }
         if (branch) {
             try {
-                const { execFile: execFileCb } = await import("node:child_process");
+                const { execFile: execFileCb } = await import("./child-process.js");
                 const { promisify } = await import("node:util");
                 const nativeExec = promisify(execFileCb);
                 const execFileAsync = async (file, args, options, acquired) => {

package/dist/locale.js

@@ -145,6 +145,12 @@ const enMessages = {
     "dashboard.progress.fail.no-address": "Cloudflare gave no public address in time",
     "dashboard.progress.fail.rate-limited": "Cloudflare is limiting new temporary links from this machine — try again in a while; the dashboard on this machine still works",
     "dashboard.progress.fail.provisioning-failed": "Cloudflare refused to create a temporary link right now — try again later; the dashboard on this machine still works",
+    "dashboard.progress.fail.named-auth-failed": "the named tunnel token was refused — copy only the connector token in Cloudflare and set it again",
+    "dashboard.progress.fail.named-route-missing": "the named hostname did not reach a published application — check this tunnel’s hostname, DNS and published application route",
+    "dashboard.progress.fail.named-hostname-mismatch": "the named hostname served a different page — point its published application to AgEnD’s origin URL",
+    "dashboard.progress.fail.named-origin-unreachable": "Cloudflare could not reach the local origin — check the published application’s origin URL and port",
+    "dashboard.progress.fail.named-connection-failed": "the named tunnel could not connect to Cloudflare — check network, DNS and firewall access, then retry",
+    "dashboard.progress.fail.origin-port-in-use": "the named tunnel’s local origin port is already in use — close the conflicting program or choose another origin port and update the Cloudflare route",
     "dashboard.progress.fail.process-exited": "cloudflared stopped before it gave a public address",
     "dashboard.progress.fail.bad-address": "Cloudflare gave an address AgEnD could not use",
     "dashboard.progress.fail.unreachable": "the public address never reached this fleet",
@@ -170,6 +176,7 @@ const enMessages = {
     "dashboard.code": "• Code:     {0}  (works once, valid {1} min)",
     "dashboard.menu_instruction": "Press a sign-in button to get your private link and code.",
     "dashboard.code_help": "Keep your sign-in code private. Use /web revoke to sign out all browsers and close the public link.",
+    "dashboard.deprecated": "`/dashboard` is deprecated. Use `/web`.",
     "dashboard.revoked": "🔒 Signed out {0} web session(s) and withdrew any unused code.",
     "dashboard.revoked_not_durable": "⚠️ Signed out {0} web session(s) for now, but the change could NOT be saved: ~/.agend/web-sessions.json could not be updated or removed, so a fleet restart may bring those sessions back. Fix that file's permissions and run /web revoke again, or rotate the token with agend web-token rotate.",
     "web.login_notice": "🔐 New web sign-in: {0} ({1}, session {2}). If this was not you, send /web revoke.",
@@ -196,6 +203,9 @@ const enMessages = {
     "update.available_stable": "🆕 AgEnD {0} (stable) is available (current: {1}, a prerelease). /update stays on its prerelease channel; to switch to the stable release run: agend update --stable",
     "update.highlights": "Highlights: {0}",
     "needs.live_header": "📥 Needs you — {0}",
+    "needs.live_header_lane": "📥 Needs you here — {0}",
+    "needs.live_moved": "This list moved: these cards now wait elsewhere (the project's lead or the instance that handed them out changed).",
+    "needs.task_moved": "This card's buttons are in another channel now.",
     "needs.live_more": "… and {0} more: open /ui",
     "needs.live_empty": "✅ Nothing needs you right now.",
     "needs.live_stopped": "⏹ Fleet stopped. This list resumes when it starts.",
@@ -219,6 +229,45 @@ const enMessages = {
     "needs.reason.crashed": "Crashed",
     "needs.reason.delivery_uncertain": "Could not confirm delivery",
     "needs.reason.delivery_failed": "Delivery failed",
+    "needs.reason.task_review": "Waiting for your confirmation",
+    "needs.reason.task_blocked": "Blocked: asks you",
+    "needs.task_gap": "not wrapped up: {0}",
+    "needs.task_gap_unchecked": "{0} checklist item(s) unchecked",
+    "needs.task_gap_no_result": "no result",
+    "needs.task_gap_join": ", ",
+    "needs.task_confirm_button": "✅ Confirm {0}",
+    "needs.task_back_button": "↩️ Send back {0}",
+    "needs.task_answer_button": "💬 Answer {0}",
+    "needs.task_reply_asked": "Reply to the message I just posted.",
+    "needs.task_reply_already": "You were already asked about {0}: reply to that message.",
+    "needs.task_reply_busy": "Too many prompts are waiting for replies: try again in a few minutes.",
+    "needs.task_back_prompt": "↩️ Send back {0}{1}: reply to this message with what needs to change (within {2} minutes).",
+    "needs.task_answer_prompt": "💬 Answer {0}{1}: reply to this message with your answer (within {2} minutes); the card goes back in progress.",
+    "needs.task_reply_empty": "Nothing was written: {0} is unchanged.",
+    "needs.task_board_closed": "The task board is not open.",
+    "needs.task_confirmed": "✅ {0} confirmed.",
+    "needs.task_sent_back": "↩️ {0} sent back: its assignee reads why.",
+    "needs.task_answered": "💬 Answered {0}: it is in progress again.",
+    "needs.task_changed": "{0} changed meanwhile: the list will update — use the new one.",
+    "needs.task_refused": "{0}: {1}",
+    // #2246 step 3: the task board's daily summary (task-board-summary.ts)
+    "board_summary.title": "📋 Task board — daily summary, {0} – {1}",
+    "board_summary.card": "{0} \"{1}\"",
+    "board_summary.review": "Waiting for your confirmation ({0})",
+    "board_summary.blocked": "Blocked ({0})",
+    "board_summary.done": "Done ({0})",
+    "board_summary.created": "New ({0})",
+    "board_summary.projects": "Projects",
+    "board_summary.more": "…and {0} more",
+    "board_summary.subs": "{0} sub task(s): {1}",
+    "board_summary.subs_more": "{0} sub tasks: {1} and more",
+    "board_summary.reason": ": {0}",
+    "board_summary.join": ", ",
+    "board_summary.project": "{0} {1}% ({2}/{3})",
+    "board_summary.project_extra": ", {0}",
+    "board_summary.project_waiting": "{0} waiting for you",
+    "board_summary.project_blocked": "{0} blocked",
+    "board_summary.footer": "The board: Fleet › Tasks on the dashboard.",
     "upgrade.web_chat": "🆕 AgEnD 2.2 adds web chat. You can keep chatting here.\nAdmins: send /web in General, then press a sign-in button to get a code.",
     "dashboard.remote_hint": "📱 These links open on the fleet's own machine only. To use web chat from a phone or another computer: {0}",
     "fleet.ready": "Fleet ready. {0}/{1} instances running. v{2}",
@@ -256,6 +305,8 @@ const enMessages = {
     "inst.backend_launch_warning": "⚠️ {0}: {1}",
     "codex.status_line_unverifiable": "AgEnD could not add a Context item to this Codex instance's status_line ({0}). Readiness then depends on the configured-footer and 10-second stable-screen checks, which are slower and fail safe. Add \"context-remaining\" to [tui] status_line in {1} to restore the normal check.",
     "codex.resume_db_unreadable_fresh": "Codex's session database could not be read ({0}). Another Codex instance works in the same git repository, so this launch started a NEW conversation instead of `codex resume --last`, which could have taken that instance's session. Earlier conversations are kept; resume one by hand with `codex resume <id>` if needed.",
+    "codex.package_companion_missing": "Codex install incomplete — `{0}` is missing next to the codex binary ({1}/bin); reinstall Codex with the full official package",
+    "codex.package_companion_not_executable": "Codex install incomplete — `{0}` next to the codex binary ({1}/bin) is not executable; reinstall Codex with the full official package",
     "codex.resume_db_unreadable_last": "Codex's session database could not be read ({0}). No other Codex instance shares this repository, so this launch fell back to `codex resume --last`.",
     "codex.resume_none_but_history": "No resumable Codex conversation was found for {0}, so this launch started a NEW one. This workspace does have an earlier conversation ({1}); it is kept, and `codex resume {1}` continues it.",
     "inst.dialog_parked_hold": "⚠️ {0} is parked on a CLI dialog ({1}) that AgEnD does NOT recognise well enough to answer. Open its pane and LOOK before pressing anything: the cursor may already be on a different option than usual. For Claude's session-resume prompt, move the cursor onto \"Resume full session as-is\" and confirm that one — never confirm \"Resume from summary\" unless you want to drop the full context. Deliveries to this instance are held until the dialog is gone.",
@@ -454,7 +505,7 @@ const enMessages = {
     "slash.chat": "Send a message to the agent",
     "slash.ctx": "Show context usage",
     "slash.cancel": "Interrupt the agent's current operation (sends Escape)",
-    "slash.dashboard": "Alias of /web: sign in to the web dashboard and web chat (admin only)",
+    "slash.dashboard": "Deprecated — use /web",
     "slash.web": "Sign in to the web dashboard and web chat (admin only)",
     "slash.compact": "Compact agent context window",
     "slash.compact_arg": "[optional summary focus — Claude Code only]",
@@ -475,7 +526,7 @@ const enMessages = {
     "login.profile_host_only": "A {0} profile is signed in on the host for now — run this there:\n`{2}`\n(`/login {0} {1}` from chat is not available for {0} yet.)",
     "login.profile_unsupported": "{0} has no credential profiles: use `/login {0}` for its login.",
     "login.profile_needs_backend": "A profile needs its backend too: `/login backend:claude-code profile:<name>`.",
-    "login.install_cli_moved": "ℹ️ `/install-cli` is now part of `/login`: `/login <backend>` installs a missing CLI, then signs in.",
+    "login.install_cli_moved": "`/install-cli` was removed. Use `/login`.",
     "login.install_by_name": "not installed, and not offered here — `/login {0}` installs it.",
     "login.choose_backend": "Which backend should sign in again?",
     "fleet.label_line": "🖥 Fleet: {0}",
@@ -680,6 +731,8 @@ const enMessages = {
     "doctor.backend_unknown": "unknown backend",
     "doctor.binary_available": "{0} available",
     "doctor.binary_missing": "{0} not found",
+    "doctor.codex_package": "Codex package",
+    "doctor.codex_package_ok": "complete ({0})",
     "doctor.not_found": "not found",
     "doctor.term_unset": "not set — TUI rendering may fail",
     "doctor.network_family": "network family",
@@ -698,6 +751,10 @@ const enMessages = {
     "doctor.inactive_start": "inactive — run: agend start",
     "doctor.dbus_set": "DBUS_SESSION_BUS_ADDRESS is set",
     "doctor.dbus_unset": "DBUS_SESSION_BUS_ADDRESS is not set — systemd --user may not work",
+    "doctor.loaded_unit": "Loaded unit",
+    "doctor.notify_refused": "systemd refuses the fleet's ready signal and restarts it every time the start times out (15 minutes); `agend restart` repairs it (#2331)",
+    "doctor.unit_files": "Unit files",
+    "doctor.leftover": "Leftover",
     "doctor.fleet_process": "fleet process",
     "doctor.pid_missing": "fleet.pid not found — fleet is not running",
     "doctor.pid_invalid": "fleet.pid is invalid",
@@ -1104,6 +1161,95 @@ const enMessages = {
     "shortcuts.kept": "Nothing changed: the shortcuts still open {0} (user {1}).",
     "shortcuts.changed_meanwhile": "Nothing changed: while you answered, the shortcuts were pointed at {0} (user {1}) instead. Run agend shortcuts again to decide.",
     "shortcuts.kept_no_tty": "Nothing changed: the shortcuts open {0} (user {1}), and switching them needs a yes. Run agend shortcuts in a terminal to answer.",
+    "settings_confirm.prompt_title": "🔒 Settings change awaiting fleet-admin confirmation",
+    "settings_confirm.web_confirmed": "✅ Settings change confirmed from the web by {0} (web-verified)",
+    "settings_confirm.source": "Source: {0}",
+    "settings_confirm.requester": "Requester: {0}",
+    "settings_confirm.outcome": "Outcome: {0}",
+    "settings_confirm.source.web_session": "web dashboard",
+    "settings_confirm.source.public_link": "public link",
+    "settings_confirm.source.setup_session": "setup",
+    "settings_confirm.confirm_button": "Confirm",
+    "settings_confirm.reject_button": "Reject",
+    "settings_confirm.no_longer_pending": "Settings confirmation is no longer pending.",
+    "settings_confirm.delivery_expired": "Settings confirmation delivery expired.",
+    "settings_confirm.applying": "Settings change is applying.",
+    "settings_confirm.rejected_or_expired": "Settings confirmation rejected or expired.",
+    "settings_confirm.admin_label": "fleet admin {0}",
+    "settings_confirm.result.applied": "Change applied.",
+    "settings_confirm.result.apply_failed": "Change could not be applied. Review the configuration and try again.",
+    "settings_confirm.result.fleet_stopped": "Fleet stopped. Review and apply again.",
+    "settings_confirm.result.expired": "Confirmation expired. Review and apply again.",
+    "settings_confirm.result.withdrawn": "Change withdrawn.",
+    "settings_confirm.result.rejected": "Change rejected.",
+    "settings_confirm.result.request_no_longer_current": "The requesting session or fleet changed. Review and apply again.",
+    "settings_confirm.result.settings_changed": "Settings changed since this request. Review and apply again.",
+    "settings_confirm.summary.in_effect": "{0} (in effect)",
+    "settings_confirm.summary.default": "default",
+    "settings_confirm.summary.inherit": " — {0} agent(s) inherit it: {1}",
+    "settings_confirm.summary.more": " +{0} more",
+    "settings_confirm.summary.fingerprint": "fingerprint",
+    "service.notify_no_unit": "its unit file is not known here",
+    "service.notify_write_failed": "AgEnD could not write {0} ({1})",
+    "service.notify_still_set": "it is still set after AgEnD's own drop-in (a later one wins)",
+    "service.notify_from": " (from {0})",
+    "service.notify_dropins": " (drop-ins: {0})",
+    "service.notify_repaired": "  ✓ {0}: NotifyAccess=all — systemd had NotifyAccess={1} loaded{2}, which refuses the fleet's ready signal and restarts it every 15 minutes (#2331)",
+    "service.notify_refused": "  ⚠ systemd loads NotifyAccess={0} for {1}{2}: the fleet's ready signal is refused, and systemd restarts it every time TimeoutStartSec runs out (15 minutes). {3}. Remove the line that sets NotifyAccess, run `{4}`, then `agend restart` (#2331).",
+    "service.leftover_dropin": "a drop-in sets {0} (AgEnD writes none but its own {1}); keep it only if you added it on purpose",
+    "service.leftover_user_unit": "a user unit beside the system unit {0}, which runs the fleet; this one is not used — `systemctl --user disable {1}`, then remove it",
+    "service.leftover_old_label": "a service from before AgEnD's rename (a source build); it does not run this fleet — disable it and remove it",
+    "qs.service_install_failed": "Could not install the service automatically ({0}).",
+    "qs.start_direct": "Start the fleet without the service: {0} (or retry the service later: {1})",
+    "qs.start_fleet": "Start the fleet: {0}",
+    "import.missing_paths": "⚠️  The following paths in fleet.yaml do not exist on this device:",
+    "import.fix_paths": "Edit {0} to fix these before running 'agend start'.",
+    "import.paths_ok": "All paths in fleet.yaml verified.",
+    "bugreport.since_format": "--since must be a duration such as 30m, 2h or 1d (maximum 7d)",
+    "bugreport.since_range": "--since must be between 1m and 7d",
+    "bugreport.not_log_file": "Not a regular log file",
+    "bugreport.input_file": "Report input must be a regular file of at most 4 MiB.",
+    "bugreport.digest_mismatch": "Draft changed or approval digest does not match; review and approve the exact draft again.",
+    "bugreport.invalid_draft": "Invalid draft; collect a new report.",
+    "bugreport.invalid_format": "Invalid draft format.",
+    "bugreport.unredacted": "Draft contains unredacted data; collect and review again.",
+    "bugreport.link_too_long": "Issue text exceeds the safe link limit; collect a new report.",
+    "bugreport.review_delivery": "Delivery: {0}",
+    "bugreport.review_title": "Issue title:",
+    "bugreport.review_body": "Exact issue body:",
+    "bugreport.review_file": "Exact report file (attach manually):",
+    "bugreport.review_file_required": "Exact report file (attach manually; required for overflow):",
+    "bugreport.submit_unclear": "Issue submission result was unclear; check GitHub before trying again.",
+    "bugreport.approve_needs_both": "Approval requires both --draft and --approve SHA256.",
+    "bugreport.approve_no_options": "Approval cannot change collection options; collect and review a new draft.",
+    "bugreport.needs_attachment": "This report needs a manual attachment. Collect a link-mode draft and approve it instead.",
+    "bugreport.inline_or_file": "Choose inline text or a text file, not both.",
+    "bugreport.too_long": "Description/steps exceed 64 KiB; shorten them before collection.",
+    "bugreport.requires_attachment": "Report requires a manual attachment. Collect without --submit.",
+    "bugreport.failed": "Diagnostic collection/submission failed; no automatic retry. Check GitHub before retrying an uncertain submission.",
+    "bugreport.next_link": "Local review snapshot: {0}\nShareable redacted report file: {1}\nNo report sent. Review the exact text above, then approve SHA256 {2}.\nTo generate the prefilled link: agend bug-report --draft <draft-file> --approve {2}\nIf you do not use GitHub, share the report Markdown file yourself. No upload is performed.",
+    "bugreport.next_submit": "Local review snapshot: {0}\nShareable redacted report file: {1}\nNo report sent. Review the exact text above, then approve SHA256 {2}.\nTo submit with existing host gh login: agend bug-report --draft <draft-file> --approve {2} --submit\nIf you do not use GitHub, share the report Markdown file yourself. No upload is performed.",
+    "cli.direct_refused": "  ✗ --direct is for an operator's own shell, not a fleet agent session or the fleet's own commands. Nothing was started.",
+    "cli.fleet_restart_deprecated": "⚠ `agend fleet restart` is deprecated and goes away in 2.4 — running `agend {0}`.",
+    "cli.fleet_logs_removed": "`agend fleet logs` was removed. Use `agend logs`.",
+    "cli.system_install_kept": "  Note: the system install (v{0}) is kept; only a 2.1-era copy is retired after a move to nvm.",
+    "cli.no_own_installer": "  ℹ {0} has no installer of its own (a release from before #2264); this updater installs it.",
+    "cli.install_activate_removed": "`agend install --activate` was removed; service activation is the default.",
+    "cli.system_service_stopped": "Service stopped (system).",
+    "cli.system_service_stop_failed": "Failed to stop the system service: systemctl stop agend (run it as root).",
+    "cli.service_retry": "Check your service manager, then retry: {0}",
+    "cli.service_direct_hint": "If the service cannot run on this host, start the fleet without it: agend fleet start --direct",
+    "cli.service_redirect": "ℹ An AgEnD service is installed here ({0}): running `agend {1}` so the service manager owns the fleet.",
+    "cli.instance_restarted": "Instance \"{0}\" restarted (immediate)",
+    "cli.restart_failed": "Restart failed: {0}",
+    "cli.fleet_unreachable": "Cannot connect to fleet (port {0}). Is the fleet running?",
+    "cli.force_whole_service": "--force applies to the whole service, not one instance.",
+    "cli.unit_updated": "  ✓ {0}: updated {1} (#908/#1071/#1113/#2331: graceful stop, small crash dumps, bounded start, start limit, the fleet's ready signal)",
+    "cli.schedule_trigger_removed": "`agend schedule trigger` was removed. There is no Telegram trigger; use `agend schedule enable` or the Task Board.",
+    "settings_confirm.cli_question": "Apply this exact change? [y/N] ",
+    "settings_confirm.cli_interactive": "Interactive confirmation required; --yes explicitly confirms the printed diff.",
+    "settings_confirm.web_verified_label": "{0} (web-verified)",
+    "settings_confirm.host_operator": "host operator",
 };
 const zhTWMessages = {
     "setup.admin.cancelled": "設定已取消，未選取管理員。",
@@ -1237,6 +1383,12 @@ const zhTWMessages = {
     "dashboard.progress.fail.no-address": "Cloudflare 沒有及時給出公開網址",
     "dashboard.progress.fail.rate-limited": "Cloudflare 正在限制這台機器建立新的臨時連結 — 請過一陣子再試；這台機器上的 dashboard 仍可使用",
     "dashboard.progress.fail.provisioning-failed": "Cloudflare 目前拒絕建立臨時連結 — 請稍後再試；這台機器上的 dashboard 仍可使用",
+    "dashboard.progress.fail.named-auth-failed": "固定 tunnel 的 token 被拒絕 — 請在 Cloudflare 只複製 connector token，重新設定",
+    "dashboard.progress.fail.named-route-missing": "固定網域沒有連到公開應用程式 — 請檢查這個 tunnel 的網域、DNS 與公開應用程式路由",
+    "dashboard.progress.fail.named-hostname-mismatch": "固定網域傳回了其他頁面 — 請把公開應用程式指向 AgEnD 的來源網址",
+    "dashboard.progress.fail.named-origin-unreachable": "Cloudflare 無法連到本機來源 — 請檢查公開應用程式的來源網址與連接埠",
+    "dashboard.progress.fail.named-connection-failed": "固定 tunnel 無法連上 Cloudflare — 請檢查網路、DNS 與防火牆後重試",
+    "dashboard.progress.fail.origin-port-in-use": "固定 tunnel 的本機來源連接埠已被占用 — 請關閉衝突的程式，或選擇其他來源連接埠並更新 Cloudflare 路由",
     "dashboard.progress.fail.process-exited": "cloudflared 在給出公開網址前就停止了",
     "dashboard.progress.fail.bad-address": "Cloudflare 給出的網址 AgEnD 無法使用",
     "dashboard.progress.fail.unreachable": "公開網址一直連不到這個 fleet",
@@ -1262,6 +1414,7 @@ const zhTWMessages = {
     "dashboard.code": "• 登入碼：  {0}（只能用一次，{1} 分鐘內有效）",
     "dashboard.menu_instruction": "按登入按鈕，取得僅傳給你的連結和登入碼。",
     "dashboard.code_help": "請勿轉傳登入碼。/web revoke 可登出所有瀏覽器並關閉公開連結。",
+    "dashboard.deprecated": "`/dashboard` 已棄用。請用 `/web`。",
     "dashboard.revoked": "🔒 已登出 {0} 個網頁 session，並作廢尚未使用的登入碼。",
     "dashboard.revoked_not_durable": "⚠️ 目前已登出 {0} 個網頁 session，但這個變更「無法保存」：~/.agend/web-sessions.json 無法更新也無法刪除，fleet 重啟後這些 session 可能會復活。請修正該檔權限後再執行一次 /web revoke，或用 agend web-token rotate 換掉 token。",
     "web.login_notice": "🔐 有新的網頁登入：{0}（{1}，session {2}）。如果不是你，請傳 /web revoke。",
@@ -1288,6 +1441,9 @@ const zhTWMessages = {
     "update.available_stable": "🆕 AgEnD {0}（穩定版）已推出（目前：{1}，預覽版）。/update 會留在目前的預覽版線；要切換到穩定版請執行：agend update --stable",
     "update.highlights": "更新重點：{0}",
     "needs.live_header": "📥 等你處理 — {0}",
+    "needs.live_header_lane": "📥 這裡等你處理 — {0}",
+    "needs.live_moved": "這份清單已移走：這些卡片改在別的頻道等你處理（專案負責人或派出卡片的 instance 有變動）。",
+    "needs.task_moved": "這張卡片的按鈕已移到另一個頻道。",
     "needs.live_more": "…還有 {0} 項：請開 /ui",
     "needs.live_empty": "✅ 目前沒有需要你處理的事。",
     "needs.live_stopped": "⏹ Fleet 已停止。啟動後這份清單會繼續更新。",
@@ -1311,6 +1467,45 @@ const zhTWMessages = {
     "needs.reason.crashed": "已崩潰",
     "needs.reason.delivery_uncertain": "無法確認是否送達",
     "needs.reason.delivery_failed": "傳送失敗",
+    "needs.reason.task_review": "等你確認",
+    "needs.reason.task_blocked": "卡住，在問你",
+    "needs.task_gap": "還沒補齊：{0}",
+    "needs.task_gap_unchecked": "還有 {0} 項沒勾",
+    "needs.task_gap_no_result": "沒有產出總結",
+    "needs.task_gap_join": "、",
+    "needs.task_confirm_button": "✅ 確認 {0}",
+    "needs.task_back_button": "↩️ 退回 {0}",
+    "needs.task_answer_button": "💬 回覆 {0}",
+    "needs.task_reply_asked": "請回覆我剛發的那則訊息。",
+    "needs.task_reply_already": "已經在等你回覆 {0} 的那則提示了：回覆那一則就好。",
+    "needs.task_reply_busy": "等回覆的提示太多了，請過幾分鐘再試。",
+    "needs.task_back_prompt": "↩️ 退回 {0}{1}：請回覆這則訊息，寫下要改什麼（{2} 分鐘內）。",
+    "needs.task_answer_prompt": "💬 回覆 {0}{1}：請回覆這則訊息，寫下你的答案（{2} 分鐘內），卡片會改回進行中。",
+    "needs.task_reply_empty": "沒有寫內容：{0} 沒有變動。",
+    "needs.task_board_closed": "任務看板沒有開啟。",
+    "needs.task_confirmed": "✅ 已確認 {0}。",
+    "needs.task_sent_back": "↩️ 已退回 {0}，負責人會看到原因。",
+    "needs.task_answered": "💬 已回覆 {0}，卡片改回進行中。",
+    "needs.task_changed": "{0} 在這之間被改過了：清單會更新，請用新的那則。",
+    "needs.task_refused": "{0}：{1}",
+    // #2246 step 3：任務看板的每日摘要（task-board-summary.ts）
+    "board_summary.title": "📋 任務看板每日摘要 {0} – {1}",
+    "board_summary.card": "{0}「{1}」",
+    "board_summary.review": "等你確認（{0}）",
+    "board_summary.blocked": "卡住（{0}）",
+    "board_summary.done": "完成（{0}）",
+    "board_summary.created": "新開（{0}）",
+    "board_summary.projects": "專案進度",
+    "board_summary.more": "…還有 {0} 張",
+    "board_summary.subs": "子任務 {0} 張：{1}",
+    "board_summary.subs_more": "子任務 {0} 張：{1} 等",
+    "board_summary.reason": "：{0}",
+    "board_summary.join": "、",
+    "board_summary.project": "{0} {1}%（{2}/{3}）",
+    "board_summary.project_extra": "，{0}",
+    "board_summary.project_waiting": "等你確認 {0}",
+    "board_summary.project_blocked": "卡住 {0}",
+    "board_summary.footer": "看板：網頁的 Fleet › Tasks。",
     "upgrade.web_chat": "🆕 AgEnD 2.2：新增網頁聊天，這裡也照常使用。\n管理員：在 General 傳 /web，再按登入按鈕取碼。",
     "dashboard.remote_hint": "📱 這些連結只能在 Fleet 所在的那台電腦上開。要用手機或其他電腦開網頁聊天：{0}",
     "fleet.ready": "Fleet 就緒。{0}/{1} 個 Agent 運行中。v{2}",
@@ -1348,6 +1543,8 @@ const zhTWMessages = {
     "inst.backend_launch_warning": "⚠️ {0}：{1}",
     "codex.status_line_unverifiable": "AgEnD 無法替這個 Codex instance 的 status_line 加上 Context 項目（{0}）。就緒判斷會改依設定的 footer 與 10 秒畫面穩定檢查，較慢但會往安全方向判斷。請在 {1} 的 [tui] status_line 加上 \"context-remaining\"，以恢復一般的判斷。",
     "codex.resume_db_unreadable_fresh": "讀不到 Codex 的 session 資料庫（{0}）。同一個 git repo 裡還有其他 Codex instance，所以這次啟動改開**新對話**，不用 `codex resume --last`（它可能會拿到那個 instance 的 session）。舊對話都還在，需要的話可以用 `codex resume <id>` 手動接回。",
+    "codex.package_companion_missing": "Codex 安裝不完整 — codex 執行檔旁（{1}/bin）缺少 `{0}`；請用完整的官方套件重新安裝 Codex",
+    "codex.package_companion_not_executable": "Codex 安裝不完整 — codex 執行檔旁（{1}/bin）的 `{0}` 無法執行；請用完整的官方套件重新安裝 Codex",
     "codex.resume_db_unreadable_last": "讀不到 Codex 的 session 資料庫（{0}）。這個 repo 裡沒有其他 Codex instance，所以這次啟動退回用 `codex resume --last`。",
     "codex.resume_none_but_history": "找不到 {0} 可自動接續的 Codex 對話，所以這次啟動開了**新對話**。這個工作目錄其實有之前的對話（{1}），它還在，可用 `codex resume {1}` 接回。",
     "inst.dialog_parked_hold": "⚠️ {0} 停在一個 AgEnD 認不準、因此**不會**自動回答的 CLI 對話框上（{1}）。請到它的 pane **先看清楚再按鍵**：游標可能已經在不同的選項上。若是 Claude 的 session-resume 提示，請把游標移到「Resume full session as-is」再確認；除非你要丟掉完整 context，否則絕不要確認「Resume from summary」。對話框消失前，送給這個 instance 的訊息會先保留。",
@@ -1546,7 +1743,7 @@ const zhTWMessages = {
     "slash.chat": "傳送訊息給 Agent",
     "slash.ctx": "顯示 Context 使用量",
     "slash.cancel": "中斷 Agent 目前的動作（送出 Escape）",
-    "slash.dashboard": "/web 的別名：登入網頁儀表板與網頁聊天（管理員）",
+    "slash.dashboard": "已棄用 — 請用 /web",
     "slash.web": "登入網頁儀表板與網頁聊天（管理員）",
     "slash.compact": "壓縮 Agent 的 Context",
     "slash.compact_arg": "[選填：摘要重點，僅 Claude Code]",
@@ -1567,7 +1764,7 @@ const zhTWMessages = {
     "login.profile_host_only": "{0} 的 profile 目前要在主機上登入，請在主機執行：\n`{2}`\n（{0} 暫時還不能從聊天室用 `/login {0} {1}` 登入。）",
     "login.profile_unsupported": "{0} 沒有 credential profile：請用 `/login {0}` 登入它的帳號。",
     "login.profile_needs_backend": "指定 profile 時也要指定 backend：`/login backend:claude-code profile:<名稱>`。",
-    "login.install_cli_moved": "ℹ️ `/install-cli` 已併入 `/login`：`/login <backend>` 會先安裝缺少的 CLI，再接著登入。",
+    "login.install_cli_moved": "`/install-cli` 已移除。請用 `/login`。",
     "login.install_by_name": "尚未安裝，選單也不提供——`/login {0}` 可以安裝它。",
     "login.choose_backend": "要重新登入哪個 Backend？",
     "fleet.label_line": "🖥 Fleet：{0}",
@@ -1772,6 +1969,8 @@ const zhTWMessages = {
     "doctor.backend_unknown": "未知 Backend",
     "doctor.binary_available": "可使用 {0}",
     "doctor.binary_missing": "找不到 {0}",
+    "doctor.codex_package": "Codex 套件",
+    "doctor.codex_package_ok": "完整（{0}）",
     "doctor.not_found": "找不到",
     "doctor.term_unset": "未設定 — TUI 顯示可能失敗",
     "doctor.network_family": "網路位址族群",
@@ -1790,6 +1989,10 @@ const zhTWMessages = {
     "doctor.inactive_start": "未執行 — 請執行：agend start",
     "doctor.dbus_set": "已設定 DBUS_SESSION_BUS_ADDRESS",
     "doctor.dbus_unset": "未設定 DBUS_SESSION_BUS_ADDRESS — systemd --user 可能無法運作",
+    "doctor.loaded_unit": "已載入的 unit",
+    "doctor.notify_refused": "systemd 會拒收 fleet 的就緒訊號，每次啟動逾時（15 分鐘）就重啟它；執行 `agend restart` 會修好（#2331）",
+    "doctor.unit_files": "Unit 檔案",
+    "doctor.leftover": "殘留設定",
     "doctor.fleet_process": "Fleet process",
     "doctor.pid_missing": "找不到 fleet.pid — Fleet 未在執行",
     "doctor.pid_invalid": "fleet.pid 無效",
@@ -2194,6 +2397,95 @@ const zhTWMessages = {
     "shortcuts.kept": "沒有改動：捷徑仍然打開 {0}（使用者 {1}）。",
     "shortcuts.changed_meanwhile": "沒有改動：你回答的時候，捷徑已經被改成打開 {0}（使用者 {1}）。請再執行一次 agend shortcuts 重新決定。",
     "shortcuts.kept_no_tty": "沒有改動：捷徑打開的是 {0}（使用者 {1}），要切換必須先回答「是」。請在終端機裡執行 agend shortcuts 來回答。",
+    "settings_confirm.prompt_title": "🔒 設定變更等待 fleet 管理員確認",
+    "settings_confirm.web_confirmed": "✅ {0} 已在網頁確認設定變更（網頁驗證）",
+    "settings_confirm.source": "來源：{0}",
+    "settings_confirm.requester": "提出者：{0}",
+    "settings_confirm.outcome": "結果：{0}",
+    "settings_confirm.source.web_session": "網頁儀表板",
+    "settings_confirm.source.public_link": "公開連結",
+    "settings_confirm.source.setup_session": "設定精靈",
+    "settings_confirm.confirm_button": "確認",
+    "settings_confirm.reject_button": "拒絕",
+    "settings_confirm.no_longer_pending": "這個設定確認已不在等待中。",
+    "settings_confirm.delivery_expired": "設定確認的傳送已逾時。",
+    "settings_confirm.applying": "設定變更正在套用。",
+    "settings_confirm.rejected_or_expired": "設定確認已被拒絕或已過期。",
+    "settings_confirm.admin_label": "fleet 管理員 {0}",
+    "settings_confirm.result.applied": "變更已套用。",
+    "settings_confirm.result.apply_failed": "變更無法套用。請檢查設定後再試一次。",
+    "settings_confirm.result.fleet_stopped": "Fleet 已停止。請重新檢查後再套用。",
+    "settings_confirm.result.expired": "確認已過期。請重新檢查後再套用。",
+    "settings_confirm.result.withdrawn": "變更已撤回。",
+    "settings_confirm.result.rejected": "變更已被拒絕。",
+    "settings_confirm.result.request_no_longer_current": "提出請求的工作階段或 fleet 已改變。請重新檢查後再套用。",
+    "settings_confirm.result.settings_changed": "提出請求後設定已被修改。請重新檢查後再套用。",
+    "settings_confirm.summary.in_effect": "{0}（實際生效）",
+    "settings_confirm.summary.default": "預設",
+    "settings_confirm.summary.inherit": " — {0} 個 agent 繼承此設定：{1}",
+    "settings_confirm.summary.more": " 等另外 {0} 個",
+    "settings_confirm.summary.fingerprint": "指紋",
+    "service.notify_no_unit": "這裡不知道它的 unit 檔在哪裡",
+    "service.notify_write_failed": "AgEnD 無法寫入 {0}（{1}）",
+    "service.notify_still_set": "AgEnD 自己的 drop-in 之後它仍然被設定（較後面的設定優先）",
+    "service.notify_from": "（來自 {0}）",
+    "service.notify_dropins": "（drop-in：{0}）",
+    "service.notify_repaired": "  ✓ {0}：NotifyAccess=all —— systemd 先前載入的是 NotifyAccess={1}{2}，它會拒絕 fleet 的就緒訊號，每 15 分鐘重新啟動一次（#2331）",
+    "service.notify_refused": "  ⚠ systemd 為 {1} 載入了 NotifyAccess={0}{2}：fleet 的就緒訊號會被拒絕，每次 TimeoutStartSec 用完（15 分鐘）systemd 就會重新啟動它。{3}。請刪除設定 NotifyAccess 的那一行，執行 `{4}`，再執行 `agend restart`（#2331）。",
+    "service.leftover_dropin": "有個 drop-in 設定了 {0}（AgEnD 只會寫入它自己的 {1}）；只有在你是刻意加上的時候才保留",
+    "service.leftover_user_unit": "系統 unit {0} 旁邊還有一個使用者 unit；fleet 由系統 unit 執行，這個沒有使用 —— 請執行 `systemctl --user disable {1}` 後刪除它",
+    "service.leftover_old_label": "這是 AgEnD 改名前的服務（從原始碼建置的）；它不會執行這個 fleet —— 請停用並刪除它",
+    "qs.service_install_failed": "無法自動安裝服務（{0}）。",
+    "qs.start_direct": "不透過服務啟動 fleet：{0}（或稍後再試一次服務：{1}）",
+    "qs.start_fleet": "啟動 fleet：{0}",
+    "import.missing_paths": "⚠️  fleet.yaml 中的下列路徑在這台裝置上不存在：",
+    "import.fix_paths": "執行 'agend start' 之前，請先編輯 {0} 修正這些路徑。",
+    "import.paths_ok": "fleet.yaml 中的所有路徑都已確認。",
+    "bugreport.since_format": "--since 必須是像 30m、2h 或 1d 這樣的時間長度（最多 7d）",
+    "bugreport.since_range": "--since 必須介於 1m 到 7d 之間",
+    "bugreport.not_log_file": "不是一般的記錄檔",
+    "bugreport.input_file": "回報內容必須是一般檔案，最多 4 MiB。",
+    "bugreport.digest_mismatch": "草稿已變更，或核准的摘要值不相符；請重新檢查並核准完全相同的草稿。",
+    "bugreport.invalid_draft": "草稿無效；請重新收集一份回報。",
+    "bugreport.invalid_format": "草稿格式無效。",
+    "bugreport.unredacted": "草稿含有未遮蔽的資料；請重新收集並檢查。",
+    "bugreport.link_too_long": "Issue 內容超過連結的安全長度上限；請重新收集一份回報。",
+    "bugreport.review_delivery": "傳送方式：{0}",
+    "bugreport.review_title": "Issue 標題：",
+    "bugreport.review_body": "Issue 內文（原文）：",
+    "bugreport.review_file": "回報檔案（原文，請手動附加）：",
+    "bugreport.review_file_required": "回報檔案（原文，請手動附加；內容過長時必須附加）：",
+    "bugreport.submit_unclear": "Issue 提交的結果不明確；再試之前請先到 GitHub 確認。",
+    "bugreport.approve_needs_both": "核准需要同時提供 --draft 與 --approve SHA256。",
+    "bugreport.approve_no_options": "核准時不能變更收集選項；請重新收集並檢查新的草稿。",
+    "bugreport.needs_attachment": "這份回報需要手動附加檔案。請改為收集連結模式的草稿再核准。",
+    "bugreport.inline_or_file": "請擇一使用直接輸入的文字或文字檔，不要兩者都用。",
+    "bugreport.too_long": "描述／步驟超過 64 KiB；請先縮短再收集。",
+    "bugreport.requires_attachment": "這份回報需要手動附加檔案。請不要加 --submit 再收集一次。",
+    "bugreport.failed": "診斷資料的收集／提交失敗，不會自動重試。結果不確定時，再試之前請先到 GitHub 確認。",
+    "bugreport.next_link": "本機檢查快照：{0}\n可分享的已遮蔽回報檔：{1}\n沒有送出任何回報。請檢查上面的完整內容，再核准 SHA256 {2}。\n要產生預填連結：agend bug-report --draft <draft-file> --approve {2}\n如果你不使用 GitHub，請自行分享這份回報的 Markdown 檔。不會上傳任何東西。",
+    "bugreport.next_submit": "本機檢查快照：{0}\n可分享的已遮蔽回報檔：{1}\n沒有送出任何回報。請檢查上面的完整內容，再核准 SHA256 {2}。\n要用主機上現有的 gh 登入提交：agend bug-report --draft <draft-file> --approve {2} --submit\n如果你不使用 GitHub，請自行分享這份回報的 Markdown 檔。不會上傳任何東西。",
+    "cli.direct_refused": "  ✗ --direct 只能在操作者自己的 shell 使用，不能在 fleet 的 agent 工作階段或 fleet 自己的指令中使用。沒有啟動任何東西。",
+    "cli.fleet_restart_deprecated": "⚠ `agend fleet restart` 已棄用，將在 2.4 移除 —— 改為執行 `agend {0}`。",
+    "cli.fleet_logs_removed": "`agend fleet logs` 已移除，請改用 `agend logs`。",
+    "cli.system_install_kept": "  注意：系統安裝的版本（v{0}）會保留；只有改用 nvm 後的 2.1 時期副本會被移除。",
+    "cli.no_own_installer": "  ℹ {0} 沒有自己的安裝程式（#2264 之前的版本）；由這個更新程式安裝。",
+    "cli.install_activate_removed": "`agend install --activate` 已移除；現在預設就會啟用服務。",
+    "cli.system_service_stopped": "服務已停止（系統）。",
+    "cli.system_service_stop_failed": "無法停止系統服務：請以 root 執行 systemctl stop agend。",
+    "cli.service_retry": "請檢查服務管理員後再試：{0}",
+    "cli.service_direct_hint": "如果這台主機無法執行服務，可以不透過服務啟動 fleet：agend fleet start --direct",
+    "cli.service_redirect": "ℹ 這台主機已安裝 AgEnD 服務（{0}）：改為執行 `agend {1}`，讓服務管理員管理 fleet。",
+    "cli.instance_restarted": "Instance「{0}」已重新啟動（立即）",
+    "cli.restart_failed": "重新啟動失敗：{0}",
+    "cli.fleet_unreachable": "無法連線到 fleet（port {0}）。fleet 有在執行嗎？",
+    "cli.force_whole_service": "--force 只適用於整個服務，不能用於單一 instance。",
+    "cli.unit_updated": "  ✓ {0}：已更新 {1}（#908/#1071/#1113/#2331：平順停止、小型 crash dump、有上限的啟動、啟動次數限制、fleet 的就緒訊號）",
+    "cli.schedule_trigger_removed": "`agend schedule trigger` 已移除。沒有 Telegram 觸發方式；請改用 `agend schedule enable` 或看板（Task Board）。",
+    "settings_confirm.cli_question": "要套用這個變更嗎？[y/N] ",
+    "settings_confirm.cli_interactive": "需要互動確認；--yes 表示明確確認上面列出的差異。",
+    "settings_confirm.web_verified_label": "{0}（網頁驗證）",
+    "settings_confirm.host_operator": "主機操作者",
 };
 const messages = {
     en: enMessages,