@songsid/agend 2.3.0-beta.8 → 2.3.0

package/dist/ui/settings-strings.js

@@ -12,7 +12,27 @@ register("settings", {
     publicLink: "Offer temporary public web links",
     publicLinkHint: "Explicit admin consent on every request. Cloudflare handles TLS; link users have full web-admin access. HTML previews get a second temporary tunnel unless web.preview_on_public_link is false.",
     publicTtl: "Public link minutes (1–480)",
+    publicTtlNamed: "Public link minutes (0–10080; 0 = no expiry)",
+    publicTtlNamedHint: "With a fixed hostname the link may stay open up to 7 days (10080 minutes), or 0 = no expiry: it stays open until closed or AgEnD stops. Sign-in still needs a code each time. A changed lifetime applies at the next opening; Close the link to end the current one.",
+    publicTtlQuickRange: "A quick tunnel allows 1–480 minutes. Lower it, or set a fixed hostname for longer.",
+    publicTtlNamedRange: "With a fixed hostname: a whole number from 1 to 10080, or 0 for no expiry.",
+    publicAutoOpen: "Reopen the public link when AgEnD starts",
+    publicAutoOpenHint: "Fixed hostname only. After a restart the link reopens for the admin who last opened it with /web; nothing is posted. Sign-in still needs a code (from /web, or asked for on the sign-in page by a browser that signed in before). Close or /web revoke stops it until the next /web.",
+    publicAutoOpenNeedsHostname: "Needs a fixed hostname — untick it, or keep the hostname.",
     publicProtocol: "Tunnel protocol",
+    namedHostname: "Fixed public hostname (optional)",
+    namedOriginPort: "Named tunnel origin port",
+    namedHostnameInvalid: "Enter a DNS hostname or HTTPS root URL.",
+    namedPortInvalid: "Use an integer port from 1024 to 65535.",
+    namedTunnelHint: "Blank hostname uses a quick tunnel. Named routes point to this loopback port. Opening, expiry and sign-in still apply.",
+    namedTunnelSetup: "How to set this up",
+    namedToken: "Cloudflare connector token",
+    namedTokenHint: "Stored privately, never shown again. Format checked locally; Cloudflare credentials and routing are checked when opening. Saving or clearing closes the current public link.",
+    namedTokenInvalid: "Paste only the long string that starts with eyJ.",
+    namedTokenSet: "Set token",
+    namedTokenClear: "Clear token",
+    awaitingConfirmation: "Waiting for confirmation.",
+    namedTokenSaved: "Token change saved. Reopen the public link.",
     webEcho: "Web echo",
     webEchoHint: "Copies web messages to the bound Telegram or Discord topic. ClassicBot rooms follow it unless a room sets its own.",
     webUsagePublic: "Usage report over the public link", webUsagePublicHint: "Fleet → Usage (up to 400 days of each agent's tokens, requests, messages and API-equivalent amounts) is offered over the temporary public link too. Off by default; guests never see it. Applies at once.",
@@ -73,10 +93,20 @@ register("settings", {
     hangTimeout: "Stuck timeout",
     agentMode: "Agent mode",
     toolSet: "Tool set",
+    toolSetUnset: "Not set ({0}; a General: {1})",
     toolProgress: "Tool progress",
     crossInstanceVisibility: "Bot-to-bot messages in topics",
     crossInstanceVisibilityHint: "full: the whole message · summary: one line · hidden: nothing. Messages are always delivered; the Mirror Topic still shows them.",
     replyCompletionGuard: "Require a delivered reply",
+    dashboardAccess: "Dashboard access",
+    dashboardAccessHint: "What this agent may use on the dashboard, on top of its tool set. Switching a feature off applies at once (its tools are refused and leave its tool list); switching one on is confirmed first.",
+    dashboard_appearance: "Its look (theme, pictures, widgets, effects, mod proposals)",
+    dashboard_task_board: "The task board",
+    dashboard_web_settings: "Your web appearance settings",
+    dashboardInherit: "Fleet default ({0})",
+    dashboardOn: "allowed",
+    dashboardOff: "off",
+    dashboardDefaultsHint: "What every agent may use on the dashboard unless its own setting (its dialog under Agents) says otherwise. Unticking applies at once; ticking is confirmed first.",
     replyGuardSupported: "Available for Claude Code, Codex, Muse and Kiro legacy/TUI in MCP mode.",
     replyGuardUnsupported: "Stored but inactive: {0} in {1} mode does not support reply-drop recovery.",
     logLevel: "Log level",
@@ -131,6 +161,7 @@ register("settings", {
     applyPartial: "Some changes failed",
     applyClose: "Close",
     settingsButton: "Settings",
+    connRetryNow: "Retry now", connRetryQueued: "Connection retry requested.", connRetryFailed: "Could not retry this connection. Check its status and try again.",
     modalDone: "Stage change",
     wizardButton: "Setup wizard",
     wizardTitle: "Set up AgEnD",
@@ -225,7 +256,7 @@ register("settings", {
     staggerWarning: "Very low values can cause startup spikes",
     sec_device: "Preferences", syncedTitle: "Synced across your devices", syncedLead: "Changes here apply on every device where you are signed in.",
     profileTitle: "Your name",
-    profileLeadBound: "Agents see your web messages as the Discord or Telegram account your sign-in code was sent to: its id, and its name unless you choose another here. It follows you to every device you sign in on. It is for recognition only: it grants nothing.",
+    profileLeadBound: "Agents see your web messages as the Discord or Telegram account your sign-in code was sent to: its id, and its name unless you choose another here. It follows you to every device you sign in on. Agents do your ordinary requests as you; a release, anything destructive, spending, secrets or passing your authority on needs this browser authorized, or your confirm in Discord or Telegram.",
     profileLeadUnbound: "This browser was not signed in with a code sent to your Discord or Telegram account, so agents see your web messages as \"web-user\" (or the name you set here). Sign in with a code from /web to be recognised as your account.",
     profileName: "Name", profileHelp: "Agents see: {0} · id {1}", profileSave: "Save", profileClear: "Use web-user", profileUseAccount: "Use {0}",
     profileSaved: "Agents now see you as {0}", profileFailed: "Could not save the name",
@@ -362,6 +393,8 @@ register("settings", {
     modCancel: "Cancel",
     modInstalled: "Installed {0}.",
     modFailed: "Not done: {0}",
+    idLine: "ID: {0}",
+    modCanvasWorkerOff: "Not done: this mod has Canvas Worker effects, an experimental feature. Turn it on in Settings → Web appearance first.",
     modDownload: "Download",
     modUninstall: "Uninstall",
     modUninstallConfirm: "Uninstall {0}? Its effects leave your library unless something still uses them. What it applied stays.",
@@ -378,6 +411,46 @@ register("settings", {
     modProposedBy: "{0} proposes",
     modReview: "Review",
     modDismiss: "Dismiss",
+    appIconTitle: "App icon",
+    appIconLead: "Shown on browser tabs and phone home screens. Square, 512\u00a0px or more.",
+    appIconCurrent: "The app icon now",
+    appIconDefault: "The AgEnD icon (default)",
+    appIconCustom: "Your icon",
+    appIconPreview: "The new icon",
+    appIconChoose: "Choose image…",
+    appIconUse: "Use this icon",
+    appIconCancel: "Cancel",
+    appIconReset: "Restore default",
+    appIconSaved: "App icon changed",
+    appIconResetDone: "App icon back to the default",
+    appIconLow: "Smaller than 512\u00a0px: it is enlarged and may look soft.",
+    appIconNotAnImage: "That file could not be read as an image.",
+    appIconLoadFailed: "The app icon could not be read.",
+    appIconReadOnly: "Only an admin's session can change it.",
+    appIconWho: "Anyone who can open this address sees it: no private pictures.",
+    appIconIos: "On an iPhone, add the home-screen shortcut again to see a change.",
+    appIconError_app_icon_too_large: "The image is too large ({0}).",
+    appIconError_app_icon_not_png: "The host takes a PNG ({0}).",
+    appIconError_app_icon_unreadable: "The image could not be used: {0}.",
+    appIconError_app_icon_admin_only: "Only an admin's session can change the app icon.",
+    appIconError_app_icon_needs_a_signed_in_person: "Sign in to change the app icon.",
+    appIconError_app_icon_busy: "Another icon is being made; try again in a moment.",
+    appIconError_app_icon_superseded: "The icon was reset meanwhile; choose the picture again.",
+    appIconError_app_icon_not_reset: "The default could not be restored ({0}).",
+    appIconError_other: "The app icon was not changed ({0}).",
+    appIconError_app_icon_not_kept: "This fleet does not keep an app icon.",
+    appIconError_app_icon_failed: "The app icon request failed; try again.",
+    appIconDetail_max_size: "at most {0} MiB",
+    appIconDetail_png_only: "a PNG image; the page converts JPG and WebP",
+    appIconDetail_busy: "another icon is being made",
+    appIconDetail_reset_meanwhile: "the icon was reset meanwhile",
+    appIconDetail_too_slow: "it took too long to read",
+    appIconDetail_unreadable: "the image could not be read",
+    appIconDetail_corrupt: "the PNG file could not be read ({0})",
+    appIconDetail_not_square: "it is not square ({0}×{1})",
+    appIconDetail_too_small: "it is smaller than {0}×{0}",
+    appIconDetail_too_big: "it is larger than {0}×{0}",
+    appIconDetail_interlaced: "interlaced PNGs are not supported",
     cssTitle: "Custom CSS (yours only)",
     cssLead: "Applies to your screens only.",
     cssLoadFailed: "Couldn't load your custom CSS. Reload the page to try again.",
@@ -444,11 +517,13 @@ register("settings", {
     guestSignOut: "Sign out", guestSignOutTitle: "Sign out this guest?", guestSignOutConfirm: "{0}'s guest sessions end now, their sign-in code stops working and their browsers are forgotten. They can sign in again with /web while guest sign-in is on.",
     guestSignedOut: "{0} is signed out.", guestSignedOutNotDurable: "{0} is signed out for now, but it could not be saved: a restart may bring their sessions back.", guestSignOutFailed: "That did not work — try again.",
     vaTitle: "Web authority", vaReview: "Review web authority changes",
-    vaHint: "Whether a signed-in fleet admin's web messages carry their own account's authority, recorded in each message's delivery receipt. A session signed in with a code sent privately to that account, on the dashboard reached directly, is authorized once from Discord or Telegram; the public link and guests never are. Agents don't act on it yet: they still treat web messages as recognition only.",
+    vaHint: "Whether a signed-in fleet admin's web messages carry their own account's authority, recorded in each message's delivery receipt. A session signed in with a code sent privately to that account, on the dashboard reached directly, is authorized once from Discord or Telegram; the public link and guests never are. Agents do an admin's ordinary web requests either way; a release, anything destructive, spending, secrets or passing authority on needs this.",
     vaLoadFailed: "Web authority could not be loaded.",
     vaEnabled: "Web messages carry authority", vaEnabledHint: "On by default: a session carries authority only once its account confirms it from Discord or Telegram. Off: no web message carries authority, and any already given reads as none at once; authority given before it was turned off never comes back.",
     vaStuckOff: "Web authority is off for now: its state could not be saved on this computer (see the fleet log). It comes back on by itself once it can be.",
     vaLoopbackOnly: "Only this computer can authorize", vaLoopbackOnlyHint: "On: only a browser on this computer qualifies, not one on your network or tailnet, and authority already given from elsewhere reads as none. Turning it off again doesn't bring that back.",
+    vaNamedLink: "Also over my named link ({0})", vaNamedLinkHint: "On: a browser signed in over your own named-tunnel hostname may be authorized too (the same Confirm in your DM). It is reached from the internet, and Cloudflare sees its traffic: turning this on is confirmed in a General or on this computer. Off applies at once, and every authorization given over it reads as none. A quick tunnel never qualifies.",
+    vaSessionNamed: "over your named link",
     vaLanWarning: "The dashboard also answers to {0} (web.allowed_hosts). Anyone who reaches it there with a stolen sign-in could give authority in your name. Turn on \"Only this computer can authorize\" unless you trust everyone who can reach it.",
     vaHours: "An authorization lasts (hours, {0}–{1})", vaHoursRange: "Must be a number from 1 to 48",
     vaSessionsTitle: "Authorized sessions", vaSessionsNone: "No session is authorized now.", vaSessionUntil: "Authorized {0} · until {1}",
@@ -502,7 +577,19 @@ register("settings", {
     discardOnLeave: "Discard {0} pending changes?",
     applyBusyLocal: "An Apply is still running — wait for it to finish.",
     applyStepFailed: "Stopped at a change: {0}. The changes after it were not applied; they are staged again.",
-    stepWaiting: "Waiting for confirmation in chat",
+    applyError_unsupported_sensitive_effect: "it changes a setting the confirmation cannot show safely, so nothing was changed",
+    applyError_confirmation_diff_too_large: "it is too large to confirm at once; apply fewer changes at a time",
+    applyError_session_required: "your sign-in ended; sign in again and apply",
+    applyError_admin_required: "only a fleet admin can confirm it",
+    applyError_settings_changed: "the settings changed meanwhile; review and apply again",
+    applyError_request_no_longer_current: "the settings changed meanwhile; review and apply again",
+    applyError_too_many_pending_changes: "too many changes are waiting for confirmation; confirm or withdraw some first",
+    applyError_fleet_unavailable: "the fleet is not running",
+    applyError_invalid_settings_effect: "the result would not be a valid configuration",
+    applyError_settings_confirmation_unavailable: "its confirmation could not be set up; try again",
+    applyError_failed: "the server could not apply it",
+    applyErrorOther: "the server refused it ({0})",
+    stepWaiting: "Waiting for confirmation",
     stepSkipped: "Not applied",
     viaRestart: "(restart)",
     format: "Format",
@@ -560,7 +647,27 @@ register("settings", {
     publicLink: "提供臨時公開網頁連結",
     publicLinkHint: "每次都需管理員明確啟用。Cloudflare 終止 TLS；登入者具有完整網頁管理權限。HTML 預覽會另開一條臨時通道，除非設定 web.preview_on_public_link: false。",
     publicTtl: "公開連結分鐘數（1–480）",
+    publicTtlNamed: "公開連結分鐘數（0–10080；0 = 不到期）",
+    publicTtlNamedHint: "設定固定網域時，連結最長可開 7 天（10080 分鐘）；設 0 則不會到期，直到關閉或 AgEnD 停止。每次登入仍需登入碼。修改後的期限從下次開啟起生效；要結束目前的連結，請按「關閉」。",
+    publicTtlQuickRange: "Quick tunnel 只能設 1–480 分鐘。請調低，或設定固定網域以使用更長時間。",
+    publicTtlNamedRange: "設定固定網域時：請輸入 1 到 10080 的整數，或 0 代表不到期。",
+    publicAutoOpen: "AgEnD 啟動時重新開啟公開連結",
+    publicAutoOpenHint: "僅限固定網域。重新啟動後，會替上次用 /web 開啟連結的管理員重新開啟；不會發任何訊息。登入仍需登入碼（用 /web 取得，或由曾登入過的瀏覽器在登入頁索取）。按「關閉」或 /web revoke 後，直到下次 /web 前都不會自動開啟。",
+    publicAutoOpenNeedsHostname: "需要固定網域——請取消勾選，或保留網域。",
     publicProtocol: "Tunnel 協定",
+    namedHostname: "固定公開網域（選用）",
+    namedOriginPort: "Named tunnel 本機連接埠",
+    namedHostnameInvalid: "請輸入 DNS 網域名稱或 HTTPS 根網址。",
+    namedPortInvalid: "請使用 1024 到 65535 的整數連接埠。",
+    namedTunnelHint: "網域留空時使用 quick tunnel。Named 路由需指向此本機連接埠；仍須開啟連結，並遵守到期及登入規則。",
+    namedTunnelSetup: "設定教學",
+    namedToken: "Cloudflare 連接器 token",
+    namedTokenHint: "私密儲存，不會讀回。儲存時只檢查格式，開啟時才確認憑證與路由。設定或清除會關閉目前的公開連結。",
+    namedTokenInvalid: "請只貼上以 eyJ 開頭的長字串。",
+    namedTokenSet: "設定 token",
+    namedTokenClear: "清除 token",
+    awaitingConfirmation: "等待確認中。",
+    namedTokenSaved: "Token 變更已儲存，請重新開啟公開連結。",
     webEcho: "Web 同步",
     webEchoHint: "將網頁訊息複製到綁定的 Telegram 或 Discord 主題。ClassicBot 聊天室也照這個設定，除非該聊天室另外設定。",
     webUsagePublic: "透過公開連結提供用量報告", webUsagePublicHint: "Fleet → 用量（最多 400 天、每個 agent 的 token、請求、訊息與依牌價換算的 API 等值）也會透過臨時公開連結提供。預設關閉；訪客一律看不到。變更立即生效。",
@@ -596,10 +703,20 @@ register("settings", {
     hangTimeout: "卡住逾時",
     agentMode: "Agent 模式",
     toolSet: "工具集",
+    toolSetUnset: "未設定（{0}；General 為 {1}）",
     toolProgress: "工具進度",
     crossInstanceVisibility: "Agent 之間的訊息在主題中",
     crossInstanceVisibilityHint: "full：完整訊息 · summary：一行摘要 · hidden：不顯示。訊息一律照常送達，Mirror Topic 也照常顯示。",
     replyCompletionGuard: "要求送出回覆",
+    dashboardAccess: "Dashboard 權限",
+    dashboardAccessHint: "這個 agent 能在 dashboard 上用哪些功能（在工具組之外再加一層限制）。關掉立即生效（工具會被拒絕，也從它的工具清單拿掉）；打開要先確認。",
+    dashboard_appearance: "它的外觀（主題、圖片、小工具、特效、mod 提案）",
+    dashboard_task_board: "任務看板",
+    dashboard_web_settings: "你的網頁外觀設定",
+    dashboardInherit: "跟 fleet 預設（{0}）",
+    dashboardOn: "允許",
+    dashboardOff: "關閉",
+    dashboardDefaultsHint: "每個 agent 預設能在 dashboard 上用哪些功能；個別 agent 可以在 Agents 裡它的對話框另外設定。取消勾選立即生效；勾選要先確認。",
     replyGuardSupported: "Claude Code、Codex、Muse 與 Kiro legacy/TUI 的 MCP 模式可用。",
     replyGuardUnsupported: "設定會保留，但不會生效：{0} 的 {1} 模式不支援回覆遺失補救。",
     logLevel: "Log 等級",
@@ -654,6 +771,7 @@ register("settings", {
     applyPartial: "有部分變更失敗",
     applyClose: "關閉",
     settingsButton: "設定",
+    connRetryNow: "立即重試", connRetryQueued: "已要求重新連線。", connRetryFailed: "無法重試此連線，請檢查狀態後再試。",
     modalDone: "加入待套用",
     wizardButton: "設定精靈",
     wizardTitle: "設定 AgEnD",
@@ -748,7 +866,7 @@ register("settings", {
     staggerWarning: "數值太低可能造成啟動尖峰",
     sec_device: "偏好設定", syncedTitle: "在你所有的裝置同步", syncedLead: "這裡的變更會套用到你登入的每一台裝置。",
     profileTitle: "你的名字",
-    profileLeadBound: "agent 會把你從網頁送出的訊息，認成收到登入驗證碼的那個 Discord 或 Telegram 帳號：用它的 id，名字也用它的，除非你在這裡另外取名。它會跟著你到每一台登入的裝置。這只用來辨認，不代表任何權限。",
+    profileLeadBound: "agent 會把你從網頁送出的訊息，認成收到登入驗證碼的那個 Discord 或 Telegram 帳號：用它的 id，名字也用它的，除非你在這裡另外取名。它會跟著你到每一台登入的裝置。一般的請求，agent 會當作是你本人提出的；發布、破壞性操作、花費、密鑰，或把你的授權交給別人，則要先授權這個瀏覽器，或在 Discord、Telegram 上確認。",
     profileLeadUnbound: "這個瀏覽器不是用私訊到你 Discord 或 Telegram 帳號的驗證碼登入的，所以 agent 會把你的網頁訊息看成「web-user」（或你在這裡設定的名字）。用 /web 的驗證碼登入，就能被認成你的帳號。",
     profileName: "名字", profileHelp: "agent 看到：{0} · id {1}", profileSave: "儲存", profileClear: "改回 web-user", profileUseAccount: "改用 {0}",
     profileSaved: "agent 現在會看到你是 {0}", profileFailed: "無法儲存名字",
@@ -884,6 +1002,8 @@ register("settings", {
     modCancel: "取消",
     modInstalled: "已安裝 {0}。",
     modFailed: "未完成：{0}",
+    idLine: "ID：{0}",
+    modCanvasWorkerOff: "未完成：這個 mod 含有 Canvas Worker 效果，這是實驗性功能。請先到「設定 → 網頁外觀」開啟。",
     modDownload: "下載",
     modUninstall: "解除安裝",
     modUninstallConfirm: "要解除安裝 {0} 嗎？它的效果會離開你的效果庫，除非還有東西在使用。它已套用的外觀會保留。",
@@ -900,6 +1020,46 @@ register("settings", {
     modProposedBy: "{0} 提議",
     modReview: "檢視",
     modDismiss: "略過",
+    appIconTitle: "App 圖示",
+    appIconLead: "顯示在瀏覽器分頁和手機主畫面。正方形，512\u00a0px 以上。",
+    appIconCurrent: "目前的 App 圖示",
+    appIconDefault: "AgEnD 圖示（預設）",
+    appIconCustom: "你的圖示",
+    appIconPreview: "新的圖示",
+    appIconChoose: "選擇圖片…",
+    appIconUse: "使用這個圖示",
+    appIconCancel: "取消",
+    appIconReset: "恢復預設",
+    appIconSaved: "App 圖示已更換",
+    appIconResetDone: "App 圖示已恢復預設",
+    appIconLow: "小於 512\u00a0px：會被放大，可能不夠清晰。",
+    appIconNotAnImage: "無法把這個檔案讀成圖片。",
+    appIconLoadFailed: "讀不到 App 圖示的設定。",
+    appIconReadOnly: "只有管理者的 session 能更換。",
+    appIconWho: "能打開這個網址的人都看得到：請別用私人照片。",
+    appIconIos: "iPhone 主畫面要刪掉捷徑重新加入才會換。",
+    appIconError_app_icon_too_large: "圖片太大（{0}）。",
+    appIconError_app_icon_not_png: "主機只接受 PNG（{0}）。",
+    appIconError_app_icon_unreadable: "這張圖無法使用：{0}。",
+    appIconError_app_icon_admin_only: "只有管理者的 session 能更換 App 圖示。",
+    appIconError_app_icon_needs_a_signed_in_person: "請先登入再更換 App 圖示。",
+    appIconError_app_icon_busy: "另一張圖示正在處理中，請稍後再試。",
+    appIconError_app_icon_superseded: "圖示剛被恢復成預設，請重新選擇圖片。",
+    appIconError_app_icon_not_reset: "無法恢復預設（{0}）。",
+    appIconError_other: "App 圖示沒有更換（{0}）。",
+    appIconError_app_icon_not_kept: "這個 fleet 沒有保存 App 圖示。",
+    appIconError_app_icon_failed: "App 圖示的請求失敗，請再試一次。",
+    appIconDetail_max_size: "最多 {0} MiB",
+    appIconDetail_png_only: "需要 PNG 圖片；頁面會自動轉換 JPG 與 WebP",
+    appIconDetail_busy: "另一張圖示正在處理中",
+    appIconDetail_reset_meanwhile: "圖示剛被恢復成預設",
+    appIconDetail_too_slow: "讀取時間過長",
+    appIconDetail_unreadable: "無法讀取這張圖片",
+    appIconDetail_corrupt: "無法解讀這個 PNG 檔案（{0}）",
+    appIconDetail_not_square: "不是正方形（{0}×{1}）",
+    appIconDetail_too_small: "小於 {0}×{0}",
+    appIconDetail_too_big: "大於 {0}×{0}",
+    appIconDetail_interlaced: "不支援交錯式（interlaced）PNG",
     cssTitle: "自訂 CSS（只套用在你自己）",
     cssLead: "只套用在你的畫面。",
     cssLoadFailed: "無法載入你的自訂 CSS。請重新整理頁面再試一次。",
@@ -966,11 +1126,13 @@ register("settings", {
     guestSignOut: "登出", guestSignOutTitle: "登出這位訪客？", guestSignOutConfirm: "{0} 的訪客 session 會立即結束，登入碼失效，記住的瀏覽器也會被忘記。訪客登入開啟期間，他可以再傳 /web 登入。",
     guestSignedOut: "已登出 {0}。", guestSignedOutNotDurable: "已暫時登出 {0}，但無法保存：重新啟動後他的 session 可能會恢復。", guestSignOutFailed: "沒有成功，請再試一次。",
     vaTitle: "網頁授權", vaReview: "檢視網頁授權變更",
-    vaHint: "已登入的 fleet 管理者從網頁送出的訊息，是否帶有他本人帳號的授權，記錄在每則訊息的送達收據中。用私下傳給該帳號的登入碼、透過直接連線的 dashboard 登入的 session，要在 Discord 或 Telegram 上授權一次；公開連結與訪客一律不行。目前 agent 還不會依它行動：仍只把網頁訊息當成辨識。",
+    vaHint: "已登入的 fleet 管理者從網頁送出的訊息，是否帶有他本人帳號的授權，記錄在每則訊息的送達收據中。用私下傳給該帳號的登入碼、透過直接連線的 dashboard 登入的 session，要在 Discord 或 Telegram 上授權一次；公開連結與訪客一律不行。一般的網頁請求，agent 本來就會照做；發布、破壞性操作、花費、密鑰，或把授權交給別人，則需要它。",
     vaLoadFailed: "無法載入網頁授權。",
     vaEnabled: "網頁訊息帶有授權", vaEnabledHint: "預設開啟：session 要等它的帳號在 Discord 或 Telegram 上確認後才帶有授權。關閉：網頁訊息都不帶授權，已給出的授權立即視為無；關閉前給出的授權不會恢復。",
     vaStuckOff: "網頁授權目前是關閉的：它的狀態無法存到這台電腦上（請看 fleet 紀錄）。可以存入後會自動恢復。",
     vaLoopbackOnly: "只有這台電腦可以授權", vaLoopbackOnlyHint: "開啟：只有這台電腦上的瀏覽器符合，網路或 tailnet 上的不算，之前從其他地方給出的授權視為無。再關掉也不會讓那些授權恢復。",
+    vaNamedLink: "也允許透過我的固定網域（{0}）", vaNamedLinkHint: "開啟：透過你自己的 named tunnel 固定網域登入的瀏覽器也能被授權（一樣要在私訊按「確認」）。它可從網際網路連到，Cloudflare 也看得到流量：開啟需在 General 或這台電腦上確認。關閉立即生效，透過它給出的授權都視為無。Quick tunnel 一律不行。",
+    vaSessionNamed: "透過你的固定網域",
     vaLanWarning: "dashboard 也接受 {0} 的連線（web.allowed_hosts）。任何人只要從那裡連上、又拿到被盜的登入，就能以你的名義給出授權。除非你信任所有能連到那裡的人，否則請開啟「只有這台電腦可以授權」。",
     vaHours: "一次授權的有效期（小時，{0}–{1}）", vaHoursRange: "必須是 1 到 48 之間的數字",
     vaSessionsTitle: "已授權的 session", vaSessionsNone: "目前沒有已授權的 session。", vaSessionUntil: "{0} 授權 · 到 {1}",
@@ -1024,7 +1186,19 @@ register("settings", {
     discardOnLeave: "要捨棄 {0} 項尚未套用的變更嗎？",
     applyBusyLocal: "還有一次套用在進行中——請等它完成。",
     applyStepFailed: "在某項變更停下：{0}。之後的變更沒有套用，已重新暫存。",
-    stepWaiting: "等待在聊天中確認",
+    applyError_unsupported_sensitive_effect: "它改到的設定無法在確認中安全顯示，所以什麼都沒有改",
+    applyError_confirmation_diff_too_large: "一次要確認的內容太多；請分幾次套用",
+    applyError_session_required: "你的登入已經結束；請重新登入再套用",
+    applyError_admin_required: "只有 fleet 管理者能確認它",
+    applyError_settings_changed: "設定在這期間被改過了；請檢查後再套用一次",
+    applyError_request_no_longer_current: "設定在這期間被改過了；請檢查後再套用一次",
+    applyError_too_many_pending_changes: "等待確認的變更太多；請先確認或撤回一些",
+    applyError_fleet_unavailable: "fleet 沒有在執行",
+    applyError_invalid_settings_effect: "改完的結果不是有效的設定",
+    applyError_settings_confirmation_unavailable: "無法建立它的確認；請再試一次",
+    applyError_failed: "伺服器無法套用它",
+    applyErrorOther: "伺服器拒絕了它（{0}）",
+    stepWaiting: "等待確認",
     stepSkipped: "未套用",
     viaRestart: "（重新啟動）",
     format: "格式",

package/dist/ui/settings-token.js

@@ -5,6 +5,7 @@
 // hands it back — afterwards a connection shows "Token set · @bot".
 import { html, useState } from "/assets/app-html.js";
 import { t } from "/assets/app-i18n.js";
+import { useTypedText } from "/assets/text-undo.js";
 import { Icon } from "/assets/ui-icons.js";
 import { api } from "./settings-confirm.js";
 
@@ -36,10 +37,11 @@ export const botHandle = (username) => (username ? `@${String(username).replace(
  */
 export function TokenField({ id, platform, value, onInput, identity, busy, onVerify, hint }) {
   const [shown, setShown] = useState(false);
+  const [text, onText] = useTypedText(value);            // #2342: the box keeps what was typed; the parent gets it trimmed
   return html`<div class="field token-field"><label for=${id}>${tn("wizardToken")}</label>
     <div class="token-row">
       <input id=${id} type=${shown ? "text" : "password"} autocomplete="off" autocapitalize="off" spellcheck=${false} disabled=${!!busy}
-        placeholder=${platform === "discord" ? "MTA…" : "123456:ABC-DEF…"} value=${value} onInput=${(e) => onInput(e.target.value.trim())} />
+        placeholder=${platform === "discord" ? "MTA…" : "123456:ABC-DEF…"} value=${text} onInput=${(e) => onInput(onText(e.target.value))} />
       <button type="button" class="icon-btn" aria-pressed=${shown ? "true" : "false"} title=${shown ? tn("tokenHide") : tn("tokenShow")}
         aria-label=${shown ? tn("tokenHide") : tn("tokenShow")} onClick=${() => setShown(!shown)}><${Icon} name="eye" size=${16} /></button>
     </div>

package/dist/ui/settings-web-authority.js

@@ -5,10 +5,12 @@
 // them grants anything by itself — a session still needs its account's Confirm in Discord or Telegram).
 import { html, useEffect, useState } from "/assets/app-html.js";
 import { t } from "/assets/app-i18n.js";
+import { useTypedText } from "/assets/text-undo.js";
 import { toast } from "/assets/ui-toast.js";
 import { confirmDialog } from "/assets/ui-confirm.js";
 import { api } from "./settings-confirm.js";
 import { Feedback } from "./settings-dialogs.js";
+import { DEFAULT_SCHEMA, impactOf } from "./settings-model.js";
 import { resetWebAuthorization } from "/assets/web-authorize.js";
 import "./settings-strings.js";
 
@@ -20,12 +22,16 @@ export function verifiedAuthorityBody(original, f) {
   if (f.enabled !== original.enabled) out.enabled = f.enabled ? null : false;                   // §0.1: on is the default
   if (f.loopbackOnly !== original.loopbackOnly) out.loopback_only = f.loopbackOnly ? true : null;
   if (f.hours !== original.hours) out.max_session_hours = f.hours === null ? null : f.hours;
+  // #2453 (§0.2): off by default; turning it on is confirmed in a General or on the host.
+  if (f.namedLink !== original.namedLink) out.named_link = f.namedLink ? true : null;
   return Object.keys(out).length ? out : null;
 }
 
 export function WebAuthorityCard({ ctx, staged, disabled = false }) {
   const [overview, setOverview] = useState(null), [failed, setFailed] = useState(false);
   const [original, setOriginal] = useState(null), [f, setF] = useState(null), [msg, setMsg] = useState(null);
+  // #2342: the hours box keeps what was typed ("01", "1.50"; its undo history); the form gets the number.
+  const [hoursText, onHoursText] = useTypedText(f ? f.hours : null, (v) => (v.trim() === "" ? null : Number(v)));
   const load = async () => {
     // What changes here (a revoke, the switch) changes this browser's own line: the chat reads it again when it shows.
     resetWebAuthorization();
@@ -35,7 +41,8 @@ export function WebAuthorityCard({ ctx, staged, disabled = false }) {
     const o = r && r.ok ? r.body : null;
     if (!o || typeof o !== "object" || !o.state || !o.hours || !Array.isArray(o.lanHosts) || !Array.isArray(o.authorized)) { setFailed(true); return; }
     const c = o.configured || {};
-    const orig = { enabled: c.enabled !== false, loopbackOnly: c.loopback_only === true, hours: typeof c.max_session_hours === "number" ? c.max_session_hours : null };
+    const orig = { enabled: c.enabled !== false, loopbackOnly: c.loopback_only === true, hours: typeof c.max_session_hours === "number" ? c.max_session_hours : null,
+      namedLink: c.named_link === true };
     setOverview(o); setFailed(false);
     setOriginal((prev) => prev || orig);
     setF((prev) => prev || { ...orig });
@@ -46,7 +53,6 @@ export function WebAuthorityCard({ ctx, staged, disabled = false }) {
   if (!overview || !f) return card(html`<p class="note">${t("app.loading")}</p>`);
 
   const set = (patch) => setF((x) => ({ ...x, ...patch }));
-  const hoursText = f.hours === null ? "" : String(f.hours);
   const hoursError = f.hours !== null && (!Number.isFinite(f.hours) || f.hours < overview.hours.min || f.hours > overview.hours.max) ? "vaHoursRange" : "";
   const stuckOff = f.enabled && original.enabled && !overview.state.enabled;
   const warnHosts = !f.loopbackOnly && overview.lanHosts.length > 0;
@@ -55,7 +61,7 @@ export function WebAuthorityCard({ ctx, staged, disabled = false }) {
   const review = () => {
     if (hoursError) return;
     const body = verifiedAuthorityBody(original, f);
-    if (body) ctx.stage("verified_authority", { label: tn("vaTitle"), impact: "now", request: { method: "PUT", url: "/api/settings/fleet/web", body: { verified_authority: body } } });
+    if (body) ctx.stage("verified_authority", { label: tn("vaTitle"), impact: impactOf(ctx.schema || DEFAULT_SCHEMA, "web.verified_authority"), request: { method: "PUT", url: "/api/settings/fleet/web", body: { verified_authority: body } } });
     else if (staged.has("verified_authority")) ctx.unstage("verified_authority");
     setMsg(tn("readyApply"));
   };
@@ -75,14 +81,16 @@ export function WebAuthorityCard({ ctx, staged, disabled = false }) {
       <label class="check"><input id="vaLoopbackOnly" type="checkbox" checked=${f.loopbackOnly} onChange=${(e) => set({ loopbackOnly: e.target.checked })} /><span>${tn("vaLoopbackOnly")}</span></label>
       <p class="note">${tn("vaLoopbackOnlyHint")}</p>
       ${warnHosts ? html`<p class="note s-va-warn" role="status" id="vaLanWarning">${tn("vaLanWarning", overview.lanHosts.join(", "))}</p>` : null}
+      ${overview.namedHost || original.namedLink ? html`<label class="check"><input id="vaNamedLink" type="checkbox" checked=${f.namedLink} onChange=${(e) => set({ namedLink: e.target.checked })} /><span>${tn("vaNamedLink", overview.namedHost || "—")}</span></label>
+      <p class="note">${tn("vaNamedLinkHint")}</p>` : null}
       <div class="field"><label for="vaHours">${tn("vaHours", overview.hours.min, overview.hours.max)}</label>
         <input id="vaHours" type="number" min=${overview.hours.min} max=${overview.hours.max} step="any" placeholder=${tn("defaultHours", overview.hours.default)}
-          class=${hoursError ? "invalid" : ""} value=${hoursText} onInput=${(e) => set({ hours: e.target.value.trim() === "" ? null : Number(e.target.value) })} />
+          class=${hoursError ? "invalid" : ""} value=${hoursText} onInput=${(e) => set({ hours: onHoursText(e.target.value) })} />
         <${Feedback} error=${hoursError} /></div>
       <h4>${tn("vaSessionsTitle")}</h4>
       ${overview.authorized.length
         ? html`<ul class="s-va-sessions" id="vaSessions">${overview.authorized.map((a) => html`<li key=${a.handle} data-handle=${a.handle}>
-            <strong>${a.label}</strong> <span class="note">${a.account}</span><br /><span class="note">${tn("vaSessionUntil", when(a.authorizedAt), when(a.until))}</span></li>`)}</ul>`
+            <strong>${a.label}</strong> <span class="note">${a.account}</span>${a.named ? html` <span class="note s-va-named">${tn("vaSessionNamed")}</span>` : null}<br /><span class="note">${tn("vaSessionUntil", when(a.authorizedAt), when(a.until))}</span></li>`)}</ul>`
         : html`<p class="note" id="vaSessionsNone">${tn("vaSessionsNone")}</p>`}
     </fieldset>
     <div class="save-row"><button type="button" class="btn btn-primary" id="vaReview" disabled=${disabled || !!hoursError} onClick=${review}>${tn("vaReview")}</button>

package/dist/ui/settings-wizard.js

@@ -4,11 +4,12 @@
 // progress, deadline and restart recovery as every other change.
 import { html, useEffect, useRef, useState } from "/assets/app-html.js";
 import { t } from "/assets/app-i18n.js";
+import { useTypedText } from "/assets/text-undo.js";
 import { useLease } from "/assets/app-ctx.js";
 import { Dialog } from "/assets/ui-dialog.js";
 import { api } from "./settings-confirm.js";
 import { startOperation } from "./settings-apply.js";
-import { BACKENDS, DEFAULT_SCHEMA, impactOf, toYaml } from "./settings-model.js";
+import { BACKENDS, newConnectionImpact, toYaml } from "./settings-model.js";
 import { Drawer, Select } from "./settings-dialogs.js";
 import { adminUserIdError, adminUserIdPattern, botHandle, TokenEnvNote, TokenField, verifyBotToken } from "./settings-token.js";
 import { DiscordServerPicker } from "./settings-discord.js";
@@ -26,6 +27,11 @@ export function SetupWizard({ ctx, onClose }) {
   const bump = () => { rev.current++; };
   const [busy, setBusy] = useState("");
   const [err, setErr] = useState("");
+  // #2342: the typed fields keep what was typed (a space in a path, the undo history); the form gets them trimmed.
+  const [dirText, onDirText] = useTypedText(w ? w.working_directory : "");
+  const [nameText, onNameText] = useTypedText(w ? w.instance_name : "");
+  const [userText, onUserText] = useTypedText(w ? w.admin_user_id : "");
+  const [groupText, onGroupText] = useTypedText(w ? w.group_id : "");
   useEffect(() => {
     (async () => {
       const env = await api("/api/settings/quickstart/environment").catch(() => null);
@@ -115,7 +121,7 @@ export function SetupWizard({ ctx, onClose }) {
     // either if it was taken since, instead of quietly picking another.
     const body = { ...input(), channel_id: w.plan.channel_id, token_env: w.plan.token_env, token_env_generated: true, token: w.token };
     // It writes the connection and the first agent: it costs what a connection change does (the server's schema).
-    const handed = startOperation([{ label: tn("wizardTitle"), impact: impactOf((ctx && ctx.schema) || DEFAULT_SCHEMA, "fleet.channels"),
+    const handed = startOperation([{ label: tn("wizardTitle"), impact: newConnectionImpact(ctx && ctx.schema),
       request: { method: "POST", url: "/api/settings/quickstart/commit", body, sensitive: true } }]);
     if (!handed) { setErr(tn("applyBusyLocal")); return; }
     setW((x) => ({ ...x, token: "" }));
@@ -134,8 +140,8 @@ export function SetupWizard({ ctx, onClose }) {
         <p class="note">${tn("wizardAgentExistingNote")}</p></div>` : html`${which}<div class="field"><label for="wz-be">${tn("wizardBackend")}</label>
         <${Select} id="wz-be" value=${w.backend} onChange=${set("backend")} options=${w.env.backends && w.env.backends.length ? w.env.backends : BACKENDS} />
         <p class="note">${w.env.backends && w.env.backends.length ? tn("wizardBackendFound", w.env.backends.join(", ")) : tn("wizardBackendNone")}</p></div>
-      <div class="field"><label for="wz-wd">${tn("workingDir")}</label><input id="wz-wd" type="text" placeholder="/home/you/projects/app" value=${w.working_directory} onInput=${(e) => set("working_directory")(e.target.value.trim())} /></div>
-      <div class="field"><label for="wz-name">${agents.length ? tn("wizardAgentNewName") : tn("wizardAgentName")}</label><input id="wz-name" type="text" value=${w.instance_name} onInput=${(e) => set("instance_name")(e.target.value.trim())} /></div>`;
+      <div class="field"><label for="wz-wd">${tn("workingDir")}</label><input id="wz-wd" type="text" placeholder="/home/you/projects/app" value=${dirText} onInput=${(e) => set("working_directory")(onDirText(e.target.value))} /></div>
+      <div class="field"><label for="wz-name">${agents.length ? tn("wizardAgentNewName") : tn("wizardAgentName")}</label><input id="wz-name" type="text" value=${nameText} onInput=${(e) => set("instance_name")(onNameText(e.target.value))} /></div>`;
   } else if (w.step === 2) {
     body = html`<div class="seg-inline" role="group" aria-label=${tn("wizardPlatform")}>
         ${["telegram", "discord"].map((p) => html`<button key=${p} type="button" class=${`btn${w.platform === p ? " btn-primary" : ""}`} aria-pressed=${w.platform === p ? "true" : "false"}
@@ -148,12 +154,12 @@ export function SetupWizard({ ctx, onClose }) {
         <${DiscordServerPicker} idPrefix="wz" token=${w.identity && w.identity.valid ? w.token : ""} bot=${w.identity && botHandle(w.identity.username)}
           invite=${w.identity && w.identity.invite} portal=${w.identity && w.identity.portal} guilds=${w.guilds} onGuilds=${(g) => setW((x) => ({ ...x, guilds: g }))}
           guild=${w.guild_id} onGuild=${set("guild_id")} channel=${w.general_channel_id} onChannel=${set("general_channel_id")} />
-        <div class="field"><label for="wz-user">${tn("wizardAdminUser")}</label><input id="wz-user" type="text" required=${true} inputmode="numeric" pattern=${adminUserIdPattern(w.platform)} placeholder=${tn("discordUserPlaceholder")} value=${w.admin_user_id} onInput=${(e) => set("admin_user_id")(e.target.value.trim())} /></div>`
+        <div class="field"><label for="wz-user">${tn("wizardAdminUser")}</label><input id="wz-user" type="text" required=${true} inputmode="numeric" pattern=${adminUserIdPattern(w.platform)} placeholder=${tn("discordUserPlaceholder")} value=${userText} onInput=${(e) => set("admin_user_id")(onUserText(e.target.value))} /></div>`
       : html`
-        <div class="field"><label for="wz-group">${tn("groupIdField")}</label><input id="wz-group" type="text" placeholder="-1001234567890" value=${w.group_id} onInput=${(e) => set("group_id")(e.target.value.trim())} />
+        <div class="field"><label for="wz-group">${tn("groupIdField")}</label><input id="wz-group" type="text" placeholder="-1001234567890" value=${groupText} onInput=${(e) => set("group_id")(onGroupText(e.target.value))} />
           <p class="note">${tn("wizardDetectHint")}</p></div>
         <div class="dlg-inline-actions"><button type="button" class="btn btn-sm" disabled=${!!busy} onClick=${detect}>${tn("wizardDetect")}</button></div>
-        <div class="field"><label for="wz-user">${tn("wizardAdminUser")}</label><input id="wz-user" type="text" required=${true} inputmode="numeric" pattern=${adminUserIdPattern(w.platform)} placeholder=${tn("telegramUserPlaceholder")} value=${w.admin_user_id} onInput=${(e) => set("admin_user_id")(e.target.value.trim())} /></div>`}`;
+        <div class="field"><label for="wz-user">${tn("wizardAdminUser")}</label><input id="wz-user" type="text" required=${true} inputmode="numeric" pattern=${adminUserIdPattern(w.platform)} placeholder=${tn("telegramUserPlaceholder")} value=${userText} onInput=${(e) => set("admin_user_id")(onUserText(e.target.value))} /></div>`}`;
   } else {
     body = !w.plan ? html`<p class="note">${tn("wizardPlanLoading")}</p>` : html`
       <p><strong>${tn("wizardWillWrite")}</strong></p>

package/dist/ui/shared/agend-auth.js

@@ -67,7 +67,7 @@
     bar.setAttribute("role", "alert");
     bar.setAttribute("data-trust", "session-ended");
     bar.className = "agend-session-ended";
-    bar.style.cssText = "position:fixed;top:0;left:0;right:0;z-index:2147483647;padding:10px 16px;background:#f85149;color:#fff;font:14px system-ui,sans-serif;text-align:center";
+    bar.style.cssText = "position:fixed;top:0;left:0;right:0;z-index:2147483647;padding:10px 16px;background:#f85149;color:#fff;font:14px system-ui,sans-serif,\"Apple Color Emoji\",\"Segoe UI Emoji\",\"Segoe UI Symbol\",\"Noto Color Emoji\",emoji;text-align:center";
     const zh = /^zh/i.test(navigator.language || "");
     bar.append(document.createTextNode(zh ? "登入已結束。" : "Your session has ended. "));
     const link = document.createElement("a");
@@ -106,6 +106,8 @@
     /** Display hint from the same server session response; Start still reauthorizes. No CSRF is exposed here. */
     trialSession() { return session().then(s => !ended && s?.handle && /^[a-f0-9]{16}$/.test(s.handle) ? Object.freeze({ epoch: s.handle, localAdmin: s.localAdmin === true }) : null); },
     sessionEnded() { return ended !== null; },
+    /** A same-origin request made outside fetch (an upload's XHR, for its progress) was answered 401: the same end. */
+    unauthorized() { endSession("unauthorized"); sessionEndedBanner(); },
     /** #1568: the session handle of this page's sign-in, or null when there is none. */
     sessionHandle() { return session().then((s) => (s && s.handle ? s.handle : null)); },
     async signOut() {

package/dist/ui/shared/app-i18n.js

@@ -60,7 +60,7 @@ export function t(key, ...values) {
 
 register("app", {
   en: {
-    brand: "AgEnD", fleet: "Fleet", fleetOverview: "Fleet overview", view: "View", settings: "Settings", instances: "Instances", newInstance: "New instance", newAgent: "New agent",
+    brand: "AgEnD", fleet: "Fleet", fleetOverview: "Fleet", view: "View", settings: "Settings", instances: "Instances", newInstance: "New instance", newAgent: "New agent",
     collapse: "Hide the sidebar", expand: "Show the sidebar", openMenu: "Open the sidebar", closeMenu: "Close the sidebar",
     resizeSidebar: "Sidebar width", resizeSidebarHint: "Drag to resize · double-click to reset",
     names: "Names", namesNickname: "Nickname first", namesInstance: "Real name first",
@@ -69,7 +69,7 @@ register("app", {
     needsYou: "needs you", approxNote: "Read from the terminal, so approximate", chat: "Chat", details: "Details", log: "Log", instanceViews: "Views of {0}",
     textSize: "Text size: {0}", textSize_s: "S", textSize_m: "M", textSize_l: "L", textSize_fit: "Fit", usage: "Usage", usageHide: "Hide usage",
     ownerCssKeep: "Keep this custom CSS?", ownerCssKeepLeft: "Reverts in {0} s", ownerCssKeepYes: "Keep", ownerCssKeepNo: "Revert",
-    statusRunning: "running", statusStopped: "stopped", statusPaused: "paused", statusCrashed: "crashed", statusWorking: "working", statusStuck: "looks stuck", statusIdle: "idle",
+    statusQueued: "queued", statusStarting: "starting", fleetStarting: "Fleet starting {0}/{1}…", statusRunning: "running", statusStopped: "stopped", statusPaused: "paused", statusCrashed: "crashed", statusWorking: "working", statusStuck: "looks stuck", statusIdle: "idle",
     connReconnecting: "Can't reach AgEnD — it may be restarting. Reconnecting…", connReconnectingIn: "Can't reach AgEnD — it may be restarting. Trying again in {0} s.",
     hydrating: "Loading what is open now…", hydrateFailed: "Could not load what is open now (prompts, ticks).",
     skip: "Skip to the conversation", loadFailed: "This could not be loaded.", retry: "Try again", loading: "Loading…",
@@ -80,6 +80,7 @@ register("app", {
     signOutAll: "Sign out everywhere", devices: "Signed-in devices", expires: "Ends by {0} at the latest, or after {1} unused",
     failed: "That did not work — try again.", close: "Close", more: "More actions", menu: "Menu",
     pendingTitle: "Changes waiting for confirmation", pending_pending: "Waiting for confirmation", pending_applying: "Confirmed — applying…",
+    pendingWeb: "Confirmed by your account (this browser is web-verified). General is told.",
     pending_applied: "Confirmed and applied", pending_rejected: "Not applied", pending_expired: "Expired — nothing was changed",
     pending_stale: "Not applied — settings changed meanwhile", pending_failed: "Confirmed, but applying it failed",
     pendingChat: "A fleet admin confirms this in chat (General topic).", pendingHost: "Confirm it on the host: {0}", pendingLeft: "{0} left", withdraw: "Withdraw",
@@ -87,10 +88,13 @@ register("app", {
     opDone: "Settings applied", opRestart: "Settings saved — AgEnD needs a restart to use them", opPartial: "Some settings were not applied",
     opFailed: "Settings were not applied", openSettings: "Open Settings",
     pendingSent: "Sent for confirmation — a fleet admin confirms it in chat.",
+    pendingSelfSent: "Confirmed by your account (this browser is web-verified) — applying.",
     needsNav: "Needs you", needsTab: "Needs you", needsCount: "{0} waiting",
+    // #2293: global search — chats, cross-instance messages and tasks (not the sidebar's filter of agents).
+    search: "Search", searchTitle: "Search chats, messages between agents and tasks ({0})",
     confirmTitle: "Please confirm", confirmOk: "Continue", cancel: "Cancel",
     // The server's own wording (src/locale.ts needs.reason.*), so the web says what Discord says.
-    needs_reason_hang: "Not responding", needs_reason_exited: "Exited", needs_reason_assist: "Waiting at its terminal", needs_reason_permission: "Permission needed", needs_reason_dangerous_command: "Dangerous command waiting", needs_reason_login: "Sign-in needed", needs_reason_dialog: "Waiting at a dialog", needs_reason_terminal_input: "May be waiting for input", needs_reason_auth_paused: "Paused: sign-in needed", needs_reason_crashed: "Crashed", needs_reason_delivery_uncertain: "Could not confirm delivery", needs_reason_delivery_failed: "Delivery failed",
+    needs_reason_hang: "Not responding", needs_reason_exited: "Exited", needs_reason_assist: "Waiting at its terminal", needs_reason_permission: "Permission needed", needs_reason_dangerous_command: "Dangerous command waiting", needs_reason_login: "Sign-in needed", needs_reason_dialog: "Waiting at a dialog", needs_reason_terminal_input: "May be waiting for input", needs_reason_auth_paused: "Paused: sign-in needed", needs_reason_crashed: "Crashed", needs_reason_delivery_uncertain: "Could not confirm delivery", needs_reason_delivery_failed: "Delivery failed", needs_reason_task_review: "Waiting for your confirmation", needs_reason_task_blocked: "Blocked: asks you",
   },
   "zh-TW": {
     brand: "AgEnD", fleet: "Fleet", fleetOverview: "Fleet 概覽", view: "檢視", settings: "設定", instances: "Instances", newInstance: "新增 instance", newAgent: "新增 Agent",
@@ -102,7 +106,7 @@ register("app", {
     needsYou: "等你回應", approxNote: "從終端畫面判讀，僅供參考", chat: "聊天", details: "詳細資訊", log: "紀錄", instanceViews: "{0} 的檢視",
     textSize: "字級：{0}", textSize_s: "小", textSize_m: "中", textSize_l: "大", textSize_fit: "填滿", usage: "用量", usageHide: "隱藏用量",
     ownerCssKeep: "保留這份自訂 CSS？", ownerCssKeepLeft: "{0} 秒後還原", ownerCssKeepYes: "保留", ownerCssKeepNo: "還原",
-    statusRunning: "執行中", statusStopped: "已停止", statusPaused: "已暫停", statusCrashed: "已當掉", statusWorking: "工作中", statusStuck: "似乎卡住", statusIdle: "閒置",
+    statusQueued: "等待啟動", statusStarting: "啟動中", fleetStarting: "Fleet 啟動中 {0}/{1}…", statusRunning: "執行中", statusStopped: "已停止", statusPaused: "已暫停", statusCrashed: "已當掉", statusWorking: "工作中", statusStuck: "似乎卡住", statusIdle: "閒置",
     connReconnecting: "連不上 AgEnD——可能正在重新啟動。正在重新連線…", connReconnectingIn: "連不上 AgEnD——可能正在重新啟動。{0} 秒後再試。",
     hydrating: "正在載入目前的狀態…", hydrateFailed: "無法載入目前的狀態（提示、送達標記）。",
     skip: "跳到對話", loadFailed: "無法載入。", retry: "再試一次", loading: "載入中…",
@@ -113,6 +117,7 @@ register("app", {
     signOutAll: "全部登出", devices: "已登入的裝置", expires: "最晚 {0} 結束；閒置 {1} 也會結束",
     failed: "沒有成功，請再試一次。", close: "關閉", more: "更多動作", menu: "選單",
     pendingTitle: "等待確認的變更", pending_pending: "等待確認", pending_applying: "已確認——套用中…",
+    pendingWeb: "由你的帳號確認（這個瀏覽器已通過網頁驗證），也會通知 General。",
     pending_applied: "已確認並套用", pending_rejected: "未套用", pending_expired: "已逾時——沒有任何變更",
     pending_stale: "未套用——設定在這期間已變動", pending_failed: "已確認，但套用失敗",
     pendingChat: "由 fleet 管理員在聊天（General topic）中確認。", pendingHost: "請在主機上確認：{0}", pendingLeft: "剩 {0}", withdraw: "撤回",
@@ -120,8 +125,10 @@ register("app", {
     opDone: "設定已套用", opRestart: "設定已儲存——需要重新啟動 AgEnD 才會生效", opPartial: "部分設定沒有套用",
     opFailed: "設定沒有套用", openSettings: "開啟設定",
     pendingSent: "已送出確認——由 fleet 管理員在聊天中確認。",
+    pendingSelfSent: "已由你的帳號確認（這個瀏覽器已通過網頁驗證）——套用中。",
     needsNav: "等你處理", needsTab: "待處理", needsCount: "{0} 件待處理",
+    search: "搜尋", searchTitle: "搜尋聊天、agent 之間的訊息與任務（{0}）",
     confirmTitle: "請確認", confirmOk: "繼續", cancel: "取消",
-    needs_reason_hang: "沒有回應", needs_reason_exited: "已結束", needs_reason_assist: "在終端機上等待", needs_reason_permission: "需要權限", needs_reason_dangerous_command: "危險指令待確認", needs_reason_login: "需要登入", needs_reason_dialog: "停在對話框", needs_reason_terminal_input: "可能在等輸入", needs_reason_auth_paused: "已暫停：需要登入", needs_reason_crashed: "已崩潰", needs_reason_delivery_uncertain: "無法確認是否送達", needs_reason_delivery_failed: "傳送失敗",
+    needs_reason_hang: "沒有回應", needs_reason_exited: "已結束", needs_reason_assist: "在終端機上等待", needs_reason_permission: "需要權限", needs_reason_dangerous_command: "危險指令待確認", needs_reason_login: "需要登入", needs_reason_dialog: "停在對話框", needs_reason_terminal_input: "可能在等輸入", needs_reason_auth_paused: "已暫停：需要登入", needs_reason_crashed: "已崩潰", needs_reason_delivery_uncertain: "無法確認是否送達", needs_reason_delivery_failed: "傳送失敗", needs_reason_task_review: "等你確認", needs_reason_task_blocked: "卡住，在問你",
   },
 });

package/dist/ui/shared/app-needs.js

@@ -77,8 +77,8 @@ export function startNeedsNotifier({ open, env = globalThis } = {}) {
     seen.add(item.id);
     if (!notifyOn(env)) return;
     try {
-      const n = new env.Notification(item.instance, { body: item.detail ? `${reasonText(item)}: ${item.detail}` : reasonText(item), tag: item.id });
-      n.onclick = () => { try { env.focus && env.focus(); } catch { /* ignore */ } if (open) open(item.instance); n.close(); };
+      const n = new env.Notification(item.instance || reasonText(item), { body: item.detail ? `${reasonText(item)}: ${item.detail}` : reasonText(item), tag: item.id });
+      n.onclick = () => { try { env.focus && env.focus(); } catch { /* ignore */ } if (open && item.instance) open(item.instance); n.close(); };
     } catch { /* a browser that refuses at the last moment: the list still shows it */ }
   };
   const consider = (items) => {