@songsid/agend 2.3.2-beta.11 → 2.3.2-beta.13

package/dist/ui/settings-strings.js

@@ -193,7 +193,10 @@ register("settings", {
     wizardAgentNewName: "New agent name",
     wizardTopicNotCarried: "Its topic ({0}) is in the chat of its old connection, so it is not carried over: in the new chat it has no topic until one is bound.",
     wizardTopicGeneral: "It is the General agent: in the new chat it takes that chat's General topic.",
-    wizardNeedDir: "Enter an absolute working directory.",
+    wizardNeedDir: "A working directory must be an absolute path, or leave it empty.",
+    wizardDir: "Working directory (optional)",
+    wizardDirDefault: "Leave it empty and the agent gets its own folder, {0}, which AgEnD creates. A path you enter must be absolute.",
+    wizardDirDefaultName: "Leave it empty and the agent gets its own folder in AgEnD's workspaces, which AgEnD creates. A path you enter must be absolute.",
     wizardTelegramHint: "Create a bot with @BotFather, then add it to a group.",
     wizardDiscordHint: "Create an application in the Discord developer portal and invite the bot to your server.",
     wizardToken: "Bot token",
@@ -843,7 +846,10 @@ register("settings", {
     wizardAgentNewName: "新 agent 名稱",
     wizardTopicNotCarried: "它的 topic（{0}）屬於舊連線的聊天室，不會帶過去：在新的聊天室裡，綁定新的 topic 之前它沒有 topic。",
     wizardTopicGeneral: "它是 General agent：在新的聊天室裡會改用那裡的 General topic。",
-    wizardNeedDir: "請輸入絕對路徑的工作目錄。",
+    wizardNeedDir: "工作目錄必須是絕對路徑，或留空。",
+    wizardDir: "工作目錄（選填）",
+    wizardDirDefault: "留空的話，agent 會有自己的資料夾 {0}，由 AgEnD 建立。若要填寫，必須是絕對路徑。",
+    wizardDirDefaultName: "留空的話，agent 會在 AgEnD 的 workspaces 裡有自己的資料夾，由 AgEnD 建立。若要填寫，必須是絕對路徑。",
     wizardTelegramHint: "用 @BotFather 建立 bot，然後把它加進一個群組。",
     wizardDiscordHint: "在 Discord 開發者後台建立應用程式，並把 bot 邀請到你的伺服器。",
     wizardToken: "Bot token",

package/dist/ui/settings-token.js

@@ -4,7 +4,8 @@
 // lives in this field's state only: never in storage, a URL, a label or the page's other state, and the server never
 // hands it back — afterwards a connection shows "Token set · @bot".
 import { html, useState } from "/assets/app-html.js";
-import { t } from "/assets/app-i18n.js";
+import { t, lang } from "/assets/app-i18n.js";
+import { hostText } from "/assets/setup-host-text.js";
 import { useTypedText } from "/assets/text-undo.js";
 import { Icon } from "/assets/ui-icons.js";
 import { api } from "./settings-confirm.js";
@@ -24,7 +25,7 @@ export async function verifyBotToken(platform, token) {
     .catch(() => ({ ok: false, body: {} }));
   // A Discord bot's invite and portal page come with it (#1519 P3).
   if (res.ok && res.body && res.body.identity) return { ...res.body.identity, invite: res.body.invite_url || null, portal: res.body.portal_url || null };
-  return { valid: false, reason: (res.body && res.body.error) || tn("verifyFailed") };
+  return { valid: false, reason: hostText(res.body && res.body.error, lang()) || tn("verifyFailed") };
 }
 
 /** A bot's name as it is addressed: @name, once. */

package/dist/ui/settings-wizard.js

@@ -3,7 +3,8 @@
 // to the ordinary Apply: the app's runner (settings-apply.js) posts the apply and watches its job, with the same
 // progress, deadline and restart recovery as every other change.
 import { html, useEffect, useRef, useState } from "/assets/app-html.js";
-import { t } from "/assets/app-i18n.js";
+import { t, lang } from "/assets/app-i18n.js";
+import { hostText } from "/assets/setup-host-text.js";
 import { useTypedText } from "/assets/text-undo.js";
 import { useLease } from "/assets/app-ctx.js";
 import { Dialog } from "/assets/ui-dialog.js";
@@ -16,6 +17,8 @@ import { DiscordServerPicker } from "./settings-discord.js";
 
 const tn = (k, ...v) => t(`settings.${k}`, ...v);
 const STEPS = 4;
+// #2726: the host's words (English) or code, in the page's language.
+const said = (text) => hostText(text, lang());
 const post = (path, body) => api(path, { method: "POST", body: JSON.stringify(body) }).catch(() => ({ ok: false, status: 0, body: { error: tn("failed") } }));
 
 export function SetupWizard({ ctx, onClose }) {
@@ -83,14 +86,15 @@ export function SetupWizard({ ctx, onClose }) {
     if (!lease.current()) return;
     if (rev.current !== at) { setBusy(""); return; }
     setBusy("");
-    if (!res.ok) { setErr((res.body && res.body.error) || tn("applyFailed")); return; }
+    if (!res.ok) { setErr(said(res.body && res.body.error) || tn("applyFailed")); return; }
     if (res.body.found) setW((x) => ({ ...x, offset: res.body.offset, group_id: String(res.body.found.groupId), admin_user_id: String(res.body.found.userId) }));
     else { setW((x) => ({ ...x, offset: res.body.offset })); setErr(tn("wizardNoStartYet")); }
   };
   const next = async () => {
     setErr("");
     if (w.step === 1) {
-      if (w.agent !== "existing" && !w.working_directory.startsWith("/")) { setErr(tn("wizardNeedDir")); return; }
+      // #2726: none is the agent's own workspace (the server fills it in); one that is given is absolute.
+      if (w.agent !== "existing" && w.working_directory && !w.working_directory.startsWith("/")) { setErr(tn("wizardNeedDir")); return; }
       setW({ ...w, step: 2 }); return;
     }
     if (w.step === 2) { setW({ ...w, step: 3 }); return; }
@@ -104,7 +108,7 @@ export function SetupWizard({ ctx, onClose }) {
       if (!lease.current()) return;
       setBusy("");
       if (rev.current !== at) return;
-      if (!res.ok) { setErr((res.body && res.body.error) || tn("applyFailed")); return; }
+      if (!res.ok) { setErr(said(res.body && res.body.error) || tn("applyFailed")); return; }
       setW((x) => ({ ...x, plan: res.body, step: 4 }));
       return;
     }
@@ -140,7 +144,8 @@ export function SetupWizard({ ctx, onClose }) {
         <p class="note">${tn("wizardAgentExistingNote")}</p></div>` : html`${which}<div class="field"><label for="wz-be">${tn("wizardBackend")}</label>
         <${Select} id="wz-be" value=${w.backend} onChange=${set("backend")} options=${w.env.backends && w.env.backends.length ? w.env.backends : BACKENDS} />
         <p class="note">${w.env.backends && w.env.backends.length ? tn("wizardBackendFound", w.env.backends.join(", ")) : tn("wizardBackendNone")}</p></div>
-      <div class="field"><label for="wz-wd">${tn("workingDir")}</label><input id="wz-wd" type="text" placeholder="/home/you/projects/app" value=${dirText} onInput=${(e) => set("working_directory")(onDirText(e.target.value))} /></div>
+      <div class="field"><label for="wz-wd">${tn("wizardDir")}</label><input id="wz-wd" type="text" placeholder="/home/you/projects/app" aria-describedby="wz-wd-note" value=${dirText} onInput=${(e) => set("working_directory")(onDirText(e.target.value))} />
+        <p class="note" id="wz-wd-note">${w.env.workspaces_dir && w.instance_name ? tn("wizardDirDefault", `${w.env.workspaces_dir}/${w.instance_name}`) : tn("wizardDirDefaultName")}</p></div>
       <div class="field"><label for="wz-name">${agents.length ? tn("wizardAgentNewName") : tn("wizardAgentName")}</label><input id="wz-name" type="text" value=${nameText} onInput=${(e) => set("instance_name")(onNameText(e.target.value))} /></div>`;
   } else if (w.step === 2) {
     body = html`<div class="seg-inline" role="group" aria-label=${tn("wizardPlatform")}>
@@ -169,7 +174,7 @@ export function SetupWizard({ ctx, onClose }) {
       ${w.plan.instance && w.plan.instance.topic ? html`<p class="feedback warning">${w.plan.instance.topic.to == null
         ? tn("wizardTopicNotCarried", w.plan.instance.topic.from) : tn("wizardTopicGeneral")}</p>` : null}
       <${Drawer} title=${tn("advancedSection")}><${TokenEnvNote} name=${w.plan.token_env} /></${Drawer}>
-      ${(w.plan.warnings || []).map((x, i) => html`<p key=${i} class="feedback warning">${x}</p>`)}`;
+      ${(w.plan.warnings || []).map((x, i) => html`<p key=${i} class="feedback warning">${said(x)}</p>`)}`;
   }
   return html`<${Dialog} title=${tn("wizardTitle")} onClose=${onClose} wide=${true} busy=${busy === tn("wizardCommitting")}
     actions=${html`<button type="button" class="btn" disabled=${w.step === 1 || !!busy} onClick=${() => setW({ ...w, step: w.step - 1 })}>${tn("wizardBack")}</button>

package/dist/ui/shared/setup-host-text.js

@@ -0,0 +1,105 @@
+// #2726: what the setup host and the wizard's routes answer with — English words, or a code — in English and 繁體中文.
+// One table for every page that shows them: the setup pages (src/setup-i18n.ts pastes this module into them, before any
+// fleet, with its `export`s taken out) and the dashboard's Setup wizard and Apply (/assets/setup-host-text.js). Plain
+// script with no imports and no closing script tag, so it can be pasted as it is.
+
+/**
+ * The host's English words → 繁體中文. `{0}`, `{1}` are the parts that vary (a name, a count). Kept to the exact wording
+ * of the host (setup-host.ts, quickstart-api.ts, token-env-name.ts, the provider probes); tests/setup-i18n-2726.test.ts
+ * drives each source and checks it is here.
+ */
+export const HOST_MESSAGES = [
+  // The code page (setup-host.ts redeem / afterFailure / the cookie gate).
+  ["incorrect — {0} attempts left", "代碼不正確 —— 還可以再試 {0} 次"],
+  ["incorrect — {0} attempt left", "代碼不正確 —— 還可以再試 {0} 次"],
+  ["too many failed attempts — run `agend setup` again on the host", "錯誤次數太多 —— 請在主機上再執行一次 `agend setup`"],
+  ["enter the setup code", "請輸入設定代碼"],
+  ["enter the setup code first", "請先輸入設定代碼"],
+  ["cross-site request rejected", "已拒絕跨站請求"],
+  ["not found", "找不到"],
+  // Finishing (setup-host.ts finishSetup / status).
+  ["Setup changed; review and confirm again.", "設定已改變；請重新檢查並再確認一次。"],
+  ["Setup confirmation unavailable.", "無法取得設定確認。"],
+  // The wizard's validation (quickstart-api.ts validateWizardInput, validateWebOnlyInput).
+  ["working_directory must be an absolute path, or empty for the agent's own workspace", "工作目錄必須是絕對路徑，或留空讓 agent 使用自己的資料夾"],
+  ["instance_name must be [A-Za-z0-9._-], and not only dots", "agent 名稱只能用英文字母、數字和 . _ -，而且不能只有句點"],
+  ["backend must be a known backend", "請選擇一個支援的後端"],
+  ["{0} does not apply to a web-only setup", "只用網頁的設定不使用 {0}"],
+  ["platform must be telegram or discord", "平台必須是 Telegram 或 Discord"],
+  ["token_env must be an UPPER_SNAKE env var name", "環境變數名稱只能用大寫英文字母、數字和底線（例如 AGEND_BOT_TOKEN）"],
+  // A specific wording before the general one it would also match (the first that matches is used).
+  ["guild id must be numeric", "伺服器 id 必須是數字"],
+  ["{0} must be numeric", "{0} 必須是數字"],
+  ["Your Discord user ID is required: enter 17–20 digits, without a leading zero.", "Discord 使用者 ID 必填：請輸入 17–20 位數字，開頭不能是 0。"],
+  ["Your Telegram user ID is required: enter 1–20 positive digits, without a leading zero.", "Telegram 使用者 ID 必填：請輸入 1–20 位正整數字，開頭不能是 0。"],
+  // Conflicts (agentConflict, newConnectionConflict, webOnlyConflict, token-env-name.ts).
+  ["an agent called \"{0}\" already exists — connect it as an existing agent, or choose another name", "已經有名為「{0}」的 agent —— 請把它當作既有的 agent 連接，或換一個名稱"],
+  ["there is no agent called \"{0}\"", "沒有名為「{0}」的 agent"],
+  ["a connection called \"{0}\" already exists — a new connection never replaces one", "已經有名為「{0}」的連線 —— 新的連線不會取代既有的連線"],
+  ["this fleet already has a chat connection — add the agent with New agent instead", "這個 fleet 已經有聊天連線 —— 請改用「新增 Agent」加入 agent"],
+  ["{0} is reserved", "{0} 是保留名稱"],
+  ["{0} already holds the token of the \"{1}\" connection — a new connection never replaces one; use Replace token on that connection", "{0} 已經存著「{1}」連線的 token —— 新的連線不會取代它；請在那個連線上用「更換 token」"],
+  ["{0} is no longer free (it was taken after this setup was planned) — plan it again", "{0} 已被使用（在這次設定規劃之後）—— 請重新產生一次"],
+  ["the data dir's .env cannot be read: {0}", "無法讀取資料目錄的 .env：{0}"],
+  // Requests and writes (quickstart-api.ts handlers).
+  ["token required", "請輸入 bot token"],
+  ["invalid JSON", "請求內容不是有效的 JSON"],
+  ["bad request", "請求無效"],
+  ["unknown probe", "不支援的檢查"],
+  ["fleet not loaded", "設定尚未載入"],
+  ["another secret operation is still running", "另一個寫入 token 的操作還在進行中"],
+  ["setup cleanup failed; inspect configuration on the host", "設定的復原失敗；請在主機上檢查設定"],
+  ["setup was not committed", "設定沒有寫入"],
+  ["Token verification is not permitted over a public link", "公開連結不能驗證 token"],
+  ["This bot token is already being polled by the running fleet. Enter the group id by hand, or stop AgEnD first.", "執行中的 fleet 正在使用這個 bot token。請手動輸入群組 id，或先停止 AgEnD。"],
+  ["Another process is already reading this bot's updates. Stop it, or enter the group id by hand.", "另一個程式正在讀取這個 bot 的訊息。請停止它，或手動輸入群組 id。"],
+  ["Discord replied {0}", "Discord 回應 {0}"],
+  ["Telegram replied {0}", "Telegram 回應 {0}"],
+  // The plan's warning (quickstart-api.ts planQuickstart and the web-only plan).
+  ["{0} was not found on this host; the agent will fail to start until it is installed.", "這台主機上找不到 {0}；安裝之前，agent 會無法啟動。"],
+];
+
+/** What the host answers with a code instead of words (the confirmation gate, settings-effect.ts; the finish step). */
+export const HOST_CODES = {
+  en: {
+    invalid_quickstart: "This setup is not valid. Review it and try again.",
+    connection_exists: "That connection already exists — a new connection never replaces one.",
+    agent_conflict: "That agent name is taken, or that agent does not exist.",
+    too_many_pending_changes: "Too many changes are waiting for confirmation. Deal with them on the host first.",
+    idempotency_key_reused: "This request was already sent with different content. Review it and send it again.",
+    settings_confirmation_unavailable: "Host confirmation is not available right now. Try again shortly.",
+    session_required: "This setup session has ended. Reopen setup on the host.",
+    invalid_json: "The request was not valid JSON.",
+    invalid_settings_body: "The request was not valid.",
+    signin_cleanup_failed: "The login process could not be confirmed closed. Close it on the host and restart setup before retrying.",
+  },
+  "zh-TW": {
+    invalid_quickstart: "這份設定無效。請檢查後再試一次。",
+    connection_exists: "這個連線已存在 —— 新的連線不會取代既有的連線。",
+    agent_conflict: "這個 agent 名稱已被使用，或那個 agent 不存在。",
+    too_many_pending_changes: "等待確認的變更太多。請先在主機上處理它們。",
+    idempotency_key_reused: "這個請求已經用不同的內容送出過。請重新檢查後再送出。",
+    settings_confirmation_unavailable: "目前無法要求主機確認。請稍後再試。",
+    session_required: "這個設定工作階段已結束。請在主機上重新開啟設定。",
+    invalid_json: "請求內容不是有效的 JSON。",
+    invalid_settings_body: "請求無效。",
+    signin_cleanup_failed: "無法確認登入程序已關閉。請在主機上關閉它，並重新開始設定後再試。",
+  },
+};
+
+const patterns = HOST_MESSAGES.map(([en, zh]) => ({
+  zh, holes: [...en.matchAll(/\{(\d)\}/g)].map((m) => m[1]),
+  pattern: new RegExp("^" + en.split(/\{\d\}/).map((part) => part.replace(/[.*+?^$|()[\]{}\\]/g, "\\$&")).join("(.+?)") + "$"),
+}));
+
+/** The host's words, or its code, in `lang` ("en" | "zh-TW"); anything it does not know stays as it came. */
+export function hostText(text, lang) {
+  if (typeof text !== "string") return text;
+  if (Object.hasOwn(HOST_CODES.en, text)) return (HOST_CODES[lang] || HOST_CODES.en)[text];
+  if (lang !== "zh-TW") return text;
+  for (const { zh, holes, pattern } of patterns) {
+    const found = pattern.exec(text);
+    if (found) { let out = zh; holes.forEach((hole, i) => { out = out.split("{" + hole + "}").join(found[i + 1]); }); return out; }
+  }
+  return text;
+}

package/dist/ui/structured-signin.js

@@ -1,24 +1,71 @@
 /* Shared browser controls. No terminal relay, provider output or secrets in diagnostics. */
-const NAMES = { "kiro-cli": "Kiro", "claude-code": "Claude Code", codex: "Codex", antigravity: "Antigravity (console fallback)" };
-const CHOICES = { builder_id: "Builder ID", google: "Google", github: "GitHub", organization: "Your organization", subscription: "Claude subscription", console: "Anthropic Console" };
-const ERRORS = {
-  unsupported_prompt: "This CLI screen is not supported. Cancel and use the console fallback.",
-  cleanup_failed: "The login process could not be confirmed closed. Close it on the host and restart setup before retrying.",
-  signin_cleanup_failed: "The login process could not be confirmed closed. Close it on the host and restart setup before retrying.",
-  signin_action_stale: "That prompt changed or was already answered. Refresh its status; do not submit it again.",
-  signin_console_only: "This backend uses the explicit console fallback.",
-  backend_signin_local_only: "Backend sign-in is available only on this computer. Use the local setup page, or sign in later.",
-  signin_session_expired: "This setup session has ended. Reopen setup on the host.",
-  expired: "This login attempt expired. Start a new attempt.",
-  auth_unconfirmed: "The CLI exited, but credentials could not be verified. Retry or sign in later.",
-  provider_rejected: "The provider rejected this sign-in. Retry or sign in later.",
+// #2726: in English and 繁體中文 — served alone to the setup page (no dashboard i18n there), so its words live here.
+export const SIGNIN_STRINGS = {
+  en: {
+    heading: "Sign in your AI backends",
+    lead: "Use the controls here; no terminal typing is needed for Kiro, Claude Code or Codex. You can sign in later from the dashboard.",
+    check: "Check sign-ins", skipped: "Sign in later · remains in Needs you", valid: "Signed in ✓", notInstalled: "Not installed on this host",
+    consoleOnly: "Use the explicit console fallback, or sign in later.", needed: "Sign-in needed", waiting: "Waiting for the CLI…", login: "Login: {0}",
+    openProvider: "Open provider sign-in", deviceCode: "Device code:", answerSent: "Answer sent. Waiting for the next screen; it will not be sent twice.",
+    cancel: "Cancel sign-in", signIn: "Sign in", signInAgain: "Sign in again", later: "Sign in later", submit: "Submit {0}",
+    relogin: "Sign in again? Kiro will sign out its existing account first.", ready: "You can continue setup.",
+    field_code: "Paste the returned code", field_start_url: "Organization Start URL", field_region: "AWS region",
+    phase_method: "method", phase_code: "code", phase_start_url: "start URL", phase_region: "region", phase_authorization: "authorization",
+    choice_organization: "Your organization", choice_subscription: "Claude subscription",
+    antigravity: "Antigravity (console fallback)",
+    error: "Could not complete sign-in. Check status, retry, or sign in later.",
+    error_unsupported_prompt: "This CLI screen is not supported. Cancel and use the console fallback.",
+    error_cleanup_failed: "The login process could not be confirmed closed. Close it on the host and restart setup before retrying.",
+    error_signin_cleanup_failed: "The login process could not be confirmed closed. Close it on the host and restart setup before retrying.",
+    error_signin_action_stale: "That prompt changed or was already answered. Refresh its status; do not submit it again.",
+    error_signin_console_only: "This backend uses the explicit console fallback.",
+    error_backend_signin_local_only: "Backend sign-in is available only on this computer. Use the local setup page, or sign in later.",
+    error_signin_session_expired: "This setup session has ended. Reopen setup on the host.",
+    error_expired: "This login attempt expired. Start a new attempt.",
+    error_auth_unconfirmed: "The CLI exited, but credentials could not be verified. Retry or sign in later.",
+    error_provider_rejected: "The provider rejected this sign-in. Retry or sign in later.",
+  },
+  "zh-TW": {
+    heading: "登入你的 AI 後端",
+    lead: "用這裡的按鈕操作；Kiro、Claude Code 和 Codex 都不需要在終端機輸入。也可以之後再從儀表板登入。",
+    check: "檢查登入狀態", skipped: "稍後登入 · 會留在「等你回應」", valid: "已登入 ✓", notInstalled: "這台主機上沒有安裝",
+    consoleOnly: "請改用主控台備援，或稍後登入。", needed: "需要登入", waiting: "等待 CLI 回應…", login: "登入：{0}",
+    openProvider: "開啟登入頁", deviceCode: "裝置代碼：", answerSent: "已送出。等待下一個畫面；不會重複送出。",
+    cancel: "取消登入", signIn: "登入", signInAgain: "重新登入", later: "稍後登入", submit: "送出{0}",
+    relogin: "要重新登入嗎？Kiro 會先登出目前的帳號。", ready: "可以繼續設定了。",
+    field_code: "貼上取得的代碼", field_start_url: "組織的 Start URL", field_region: "AWS 區域",
+    phase_method: "選擇方式", phase_code: "代碼", phase_start_url: "Start URL", phase_region: "區域", phase_authorization: "授權",
+    choice_organization: "你的組織", choice_subscription: "Claude 訂閱",
+    antigravity: "Antigravity（主控台備援）",
+    error: "無法完成登入。請檢查狀態、重試，或稍後登入。",
+    error_unsupported_prompt: "不支援這個 CLI 畫面。請取消並改用主控台備援。",
+    error_cleanup_failed: "無法確認登入程序已關閉。請在主機上關閉它，並重新開始設定後再試。",
+    error_signin_cleanup_failed: "無法確認登入程序已關閉。請在主機上關閉它，並重新開始設定後再試。",
+    error_signin_action_stale: "這個畫面已改變或已回答過。請重新整理狀態，不要再送一次。",
+    error_signin_console_only: "這個後端使用主控台備援。",
+    error_backend_signin_local_only: "後端登入只能在這台電腦上進行。請使用本機的設定頁，或稍後登入。",
+    error_signin_session_expired: "這個設定工作階段已結束。請在主機上重新開啟設定。",
+    error_expired: "這次登入已過期。請重新開始。",
+    error_auth_unconfirmed: "CLI 已結束，但無法確認憑證。請重試或稍後登入。",
+    error_provider_rejected: "平台拒絕了這次登入。請重試或稍後登入。",
+  },
 };
+const NAMES = { "kiro-cli": "Kiro", "claude-code": "Claude Code", codex: "Codex", antigravity: "Antigravity" };
+const CHOICES = { builder_id: "Builder ID", google: "Google", github: "GitHub", organization: null, subscription: null, console: "Anthropic Console" };
+/** The page's language, as its <html lang> says (the setup page and the dashboard both keep it current). */
+const pageLang = doc => /^zh/i.test(doc?.documentElement?.lang || "") ? "zh-TW" : "en";
 
-export function mountStructuredSignIns(root, { endpoint, fetcher = fetch, changed = () => {} } = {}) {
+export function mountStructuredSignIns(root, { endpoint, fetcher = fetch, changed = () => {}, lang } = {}) {
   const doc = root.ownerDocument;
   let view = null, busy = false, disposed = false, timer = null, generation = 0, message = "", rendered = "";
+  const language = () => (lang ? lang() : pageLang(doc)) === "zh-TW" ? "zh-TW" : "en";
+  const tr = (key, value) => { const text = SIGNIN_STRINGS[language()][key] ?? SIGNIN_STRINGS.en[key] ?? key; return value === undefined ? text : text.split("{0}").join(value); };
   const el = (tag, text, parent = root) => { const node = doc.createElement(tag); if (text) node.textContent = text; parent.append(node); return node; };
-  const errorText = code => ERRORS[code] || "Could not complete sign-in. Check status, retry, or sign in later.";
+  // An error is kept as its code, so it is said again in the other language when that changes.
+  const errorText = code => SIGNIN_STRINGS.en["error_" + code] ? tr("error_" + code) : tr("error");
+  const name = backend => backend === "antigravity" ? tr("antigravity") : NAMES[backend] || backend;
+  const choiceName = choice => CHOICES[choice] ?? tr("choice_" + choice);
+  const phaseName = phase => SIGNIN_STRINGS.en["phase_" + phase] ? tr("phase_" + phase) : phase.replaceAll("_", " ");
   const button = (parent, label, action) => { const b = el("button", label, parent); b.type = "button"; b.disabled = busy; b.onclick = action; return b; };
   const request = async data => {
     const response = await fetcher(endpoint, { method: data ? "POST" : "GET", cache: "no-store", headers: { "Content-Type": "application/json" }, ...(data ? { body: JSON.stringify(data) } : {}) });
@@ -31,64 +78,64 @@ export function mountStructuredSignIns(root, { endpoint, fetcher = fetch, change
     if (busy || disposed) return;
     busy = true; generation++; message = ""; render();
     try { const next = await request(data); if (!disposed) accept(next); }
-    catch (error) { if (!disposed) message = errorText(error?.message); }
+    catch (error) { if (!disposed) message = String(error?.message || "error"); }
     finally { busy = false; if (!disposed) render(); }
   }
   function render() {
-    const signature = JSON.stringify([view, busy, message]);
+    const signature = JSON.stringify([view, busy, message, language()]);
     if (disposed || rendered === signature) return;
     rendered = signature; root.replaceChildren();
-    el("h2", "Sign in your AI backends");
-    el("p", "Use the controls here; no terminal typing is needed for Kiro, Claude Code or Codex. You can sign in later from the dashboard.");
-    if (message) { const alert = el("p", message); alert.setAttribute("role", "alert"); }
-    if (!view) { button(root, "Check sign-ins", () => perform({ operation: "refresh" })); return; }
+    el("h2", tr("heading"));
+    el("p", tr("lead"));
+    if (message) { const alert = el("p", errorText(message)); alert.setAttribute("role", "alert"); }
+    if (!view) { button(root, tr("check"), () => perform({ operation: "refresh" })); return; }
     for (const backend of view.selected) {
       const card = el("section"); card.dataset.backend = backend;
-      el("h3", NAMES[backend] || backend, card);
+      el("h3", name(backend), card);
       const state = view.states[backend], pending = view.pending.includes(backend), skipped = view.skipped.includes(backend);
-      el("p", skipped ? "Sign in later · remains in Needs you" : state === "valid" ? "Signed in ✓" : state === "not_installed" ? "Not installed on this host" : state === "console_only" ? "Use the explicit console fallback, or sign in later." : "Sign-in needed", card);
+      el("p", tr(skipped ? "skipped" : state === "valid" ? "valid" : state === "not_installed" ? "notInstalled" : state === "console_only" ? "consoleOnly" : "needed"), card);
       const login = view.login?.backend === backend ? view.login : null;
       const active = login && login.phase !== "done" && !(login.phase === "failed" && login.reason);
       if (active) {
-        el("p", login.phase === "waiting" || login.phase === "starting" ? "Waiting for the CLI…" : "Login: " + login.phase.replaceAll("_", " "), card);
+        el("p", login.phase === "waiting" || login.phase === "starting" ? tr("waiting") : tr("login", phaseName(login.phase)), card);
         if (login.phase === "method" && login.canAct) for (const choice of login.choices || []) {
-          if (CHOICES[choice]) button(card, CHOICES[choice], () => perform({ operation: "input", id: login.id, revision: login.revision, action: { kind: "method", choice } }));
+          if (Object.hasOwn(CHOICES, choice)) button(card, choiceName(choice), () => perform({ operation: "input", id: login.id, revision: login.revision, action: { kind: "method", choice } }));
         }
         if (login.url) {
           // The host already allowlists these; still never turn a non-HTTPS URL into a link.
           let url; try { url = new URL(login.url); } catch {}
           if (url?.protocol === "https:" && !url.username && !url.password) {
-            const link = el("a", "Open provider sign-in", card); link.href = url.href; link.target = "_blank"; link.rel = "noopener noreferrer";
+            const link = el("a", tr("openProvider"), card); link.href = url.href; link.target = "_blank"; link.rel = "noopener noreferrer";
           }
         }
-        if (login.code) { el("p", "Device code:", card); el("code", login.code, card); }
+        if (login.code) { el("p", tr("deviceCode"), card); el("code", login.code, card); }
         if (login.canAct && ["code", "start_url", "region"].includes(login.phase)) {
-          const label = el("label", { code: "Paste the returned code", start_url: "Organization Start URL", region: "AWS region" }[login.phase], card);
+          const label = el("label", tr("field_" + login.phase), card);
           const input = el("input", null, label); input.type = login.phase === "code" ? "password" : "text"; input.autocomplete = "off"; input.spellcheck = false;
           input.setAttribute("aria-label", label.textContent); input.disabled = busy;
-          button(card, "Submit " + login.phase.replaceAll("_", " "), () => { const value = input.value; input.value = ""; void perform({ operation: "input", id: login.id, revision: login.revision, action: { kind: login.phase, value } }); });
+          button(card, tr("submit", phaseName(login.phase)), () => { const value = input.value; input.value = ""; void perform({ operation: "input", id: login.id, revision: login.revision, action: { kind: login.phase, value } }); });
         }
-        if (["method", "code", "start_url", "region"].includes(login.phase) && !login.canAct) el("p", "Answer sent. Waiting for the next screen; it will not be sent twice.", card);
-        button(card, "Cancel sign-in", () => perform({ operation: "cancel" }));
+        if (["method", "code", "start_url", "region"].includes(login.phase) && !login.canAct) el("p", tr("answerSent"), card);
+        button(card, tr("cancel"), () => perform({ operation: "cancel" }));
       } else {
         if (login?.reason && login.reason !== "cancelled") el("p", errorText(login.reason), card);
         const usable = !["antigravity"].includes(backend) && state !== "not_installed";
-        if (usable) button(card, state === "valid" ? "Sign in again" : "Sign in", () => {
+        if (usable) button(card, tr(state === "valid" ? "signInAgain" : "signIn"), () => {
           const relogin = state === "valid";
-          if (relogin && !globalThis.confirm("Sign in again? Kiro will sign out its existing account first.")) return;
+          if (relogin && !globalThis.confirm(tr("relogin"))) return;
           void perform({ operation: "start", backend, relogin });
         });
       }
-      if (pending && !skipped) button(card, "Sign in later", () => perform({ operation: "skip", backend }));
+      if (pending && !skipped) button(card, tr("later"), () => perform({ operation: "skip", backend }));
     }
-    button(root, "Check sign-ins", () => perform({ operation: "refresh" }));
-    if (view.ready) el("p", "You can continue setup.");
+    button(root, tr("check"), () => perform({ operation: "refresh" }));
+    if (view.ready) el("p", tr("ready"));
   }
   async function poll() {
     if (disposed) return;
     const before = generation;
     if (!busy) try { const next = await request(); if (!disposed && before === generation) { accept(next); render(); } }
-    catch (error) { if (!disposed && before === generation) { message = errorText(error?.message); render(); } }
+    catch (error) { if (!disposed && before === generation) { message = String(error?.message || "error"); render(); } }
     if (!disposed) timer = setTimeout(poll, 1000);
   }
   render(); void poll();
@@ -98,6 +145,8 @@ export function mountStructuredSignIns(root, { endpoint, fetcher = fetch, change
         return perform({ operation: "select", backends: [...new Set([...view.selected, ...backends])] });
     },
     addBackend(backend) { if (view && NAMES[backend] && !view.selected.includes(backend)) return perform({ operation: "select", backends: [...view.selected, backend] }); },
+    /** Draw it again in the page's language now (it also follows on its next poll). */
+    relabel() { render(); },
     dispose() { disposed = true; generation++; clearTimeout(timer); root.replaceChildren(); },
   };
 }
@@ -111,5 +160,7 @@ if (setupRoot) {
   const observer = new MutationObserver(select); if (backend) observer.observe(backend, { childList: true });
   // Initial GET may finish after the environment list, so also observe our readiness result.
   const ready = new MutationObserver(select); ready.observe(setupRoot, { attributes: true, attributeFilter: ["data-ready"] });
-  addEventListener("pagehide", () => { observer.disconnect(); ready.disconnect(); cards.dispose(); }, { once: true });
+  // #2726: the page's language toggle changes <html lang>; the cards follow at once.
+  const language = new MutationObserver(() => cards.relabel()); language.observe(document.documentElement, { attributes: true, attributeFilter: ["lang"] });
+  addEventListener("pagehide", () => { observer.disconnect(); ready.disconnect(); language.disconnect(); cards.dispose(); }, { once: true });
 }

package/dist/web-office-store.d.ts

@@ -58,6 +58,21 @@ export type OfficeWrite = {
 };
 /** A whole list of offices, as a person sends it: every rule, or a refusal naming where it broke. */
 export declare function checkOffices(raw: unknown, packOf?: OverridePack): OfficeCheck;
+/** The overrides parts kept beside the offices on disk, apart from the rest (#2665 night places, #2691 seat reservations). */
+declare const BESIDE: readonly ["furnitureNight", "seatFor"];
+type Beside = (typeof BESIDE)[number];
+type OnDisk = {
+    offices: Office[];
+    overrides?: Record<string, LayoutOverrides>;
+} & {
+    [K in Beside]?: Record<string, NonNullable<LayoutOverrides[K]>>;
+};
+/**
+ * #2665/#2706: what goes on disk — the offices without their overrides; beside them, by office id, each office's
+ * overrides without those parts, and each part on its own (none: no key). The maps have no prototype (#2708 review), so
+ * an id is always an own key; exported for tests.
+ */
+export declare function officesOnDisk(offices: Office[]): OnDisk;
 export declare class OfficeStore {
     private readonly packOf?;
     private state;
@@ -111,3 +126,4 @@ export declare class OfficeWriteLimiter {
     /** Count an accepted save. */
     record(person: string): void;
 }
+export {};

package/dist/web-office-store.js

@@ -32,6 +32,17 @@
  *   { version: 1, rev, offices: [ … ], furnitureNight: { … }, seatFor: { "<office id>": { "<area>": { "<slot>": { for, lend } } } } }
  *
  * — each read back on its own: reservations that no longer check leave the night places (and the office) in.
+ *
+ * #2706: the rest of an office's overrides are kept beside it too, by office id, never in its entry — 2.3.1 refuses an
+ * entry with an `overrides` key, drops that office on read, and its next save deletes it. So 2.3.1 (and a host before
+ * #2513) keeps every office, only without its layout —
+ *
+ *   { version: 1, rev, offices: [ { id, name, skin, members } … ], overrides: { "<office id>": { pack, seats, … } }, furnitureNight: { … }, seatFor: { … } }
+ *
+ * — and a 2.3.2 beta before #2706 reads every office the same way (it looks for overrides in the entry only). Read
+ * here, an office's overrides come from beside it, else (a file a beta before #2706 wrote) from its entry, and the next
+ * write moves them beside it. Overrides that do not check leave the office in, without them (and so without its night
+ * places and reservations, which go on them).
  */
 import { readFileSync } from "node:fs";
 import { join } from "node:path";
@@ -44,6 +55,8 @@ export const OFFICE_LIMITS = {
 /** The page's own office (fleet-office-model.js AUTO_ID): never a stored one's id. */
 export const AUTO_OFFICE_ID = "auto";
 const ID = /^[A-Za-z0-9_-]{1,40}$/;
+/** #2708 review: ids an object already has a meaning for — never an office's (its overrides are kept in maps by office id). */
+const INHERITED_IDS = new Set(["__proto__", "constructor", "prototype"]);
 const POINT_ID = /^[A-Za-z0-9_.:-]{1,64}$/;
 const CONTROL = /[\u0000-\u001f\u007f]/;
 class Refused extends Error {
@@ -145,6 +158,8 @@ function office(v, at, packOf) {
         throw new Refused(`${at}.id`, "1–40 letters, digits, _ or -");
     if (v.id === AUTO_OFFICE_ID)
         throw new Refused(`${at}.id`, `"${AUTO_OFFICE_ID}" is the page's own office`);
+    if (INHERITED_IDS.has(v.id))
+        throw new Refused(`${at}.id`, "not __proto__, constructor or prototype");
     const skin = v.skin === undefined ? "pixel" : typeof v.skin === "string" && ID.test(v.skin) ? v.skin : null;
     if (skin === null)
         throw new Refused(`${at}.skin`, "1–40 letters, digits, _ or -");
@@ -175,28 +190,34 @@ export function checkOffices(raw, packOf) {
         throw err;
     }
 }
-/** The overrides kept beside the offices on disk, never inside them (#2665 night places, #2691 seat reservations). */
+/** The overrides parts kept beside the offices on disk, apart from the rest (#2665 night places, #2691 seat reservations). */
 const BESIDE = ["furnitureNight", "seatFor"];
-/** #2665: what goes on disk — the offices without those overrides, and each beside them by office id (none: no key). */
-function onDisk(offices) {
+/**
+ * #2665/#2706: what goes on disk — the offices without their overrides; beside them, by office id, each office's
+ * overrides without those parts, and each part on its own (none: no key). The maps have no prototype (#2708 review), so
+ * an id is always an own key; exported for tests.
+ */
+export function officesOnDisk(offices) {
     const out = { offices: [] };
     out.offices = offices.map(o => {
-        if (!o.overrides || !BESIDE.some(k => o.overrides[k] !== undefined))
+        if (!o.overrides)
             return o;
-        const rest = { ...o.overrides };
+        const { overrides, ...entry } = o, rest = { ...overrides };
         for (const k of BESIDE) {
             if (rest[k] === undefined)
                 continue;
-            (out[k] ??= {})[o.id] = rest[k];
+            (out[k] ??= Object.create(null))[o.id] = rest[k];
             delete rest[k];
         }
-        return { ...o, overrides: rest };
+        (out.overrides ??= Object.create(null))[o.id] = rest;
+        return entry;
     });
     return out;
 }
+const own = (side, id) => isObj(side) && Object.prototype.hasOwnProperty.call(side, id);
 /** #2665: a stored office with its `key` overrides (kept beside it on disk, in `side`) back on its overrides. */
 function withBeside(raw, key, side) {
-    if (!isObj(raw) || !isObj(side) || typeof raw.id !== "string" || !Object.prototype.hasOwnProperty.call(side, raw.id) || !isObj(raw.overrides))
+    if (!isObj(raw) || typeof raw.id !== "string" || !own(side, raw.id) || !isObj(raw.overrides))
         return raw;
     return { ...raw, overrides: { ...raw.overrides, [key]: side[raw.id] } };
 }
@@ -236,8 +257,21 @@ export class OfficeStore {
                 }
             };
             for (const raw of doc.offices.slice(0, OFFICE_LIMITS.offices)) {
+                // #2706: the office first, without overrides; then its overrides (beside it, else in its entry: a beta before
+                // #2706 wrote them there), left out when they do not check, the office kept.
+                if (!isObj(raw))
+                    continue;
+                const { overrides: inEntry, ...entry } = raw;
+                let cur = entry, o = read(entry);
+                const ov = typeof raw.id === "string" && own(doc.overrides, raw.id) ? doc.overrides[raw.id] : inEntry;
+                if (o && ov !== undefined) {
+                    const next = { ...entry, overrides: ov }, r = read(next);
+                    if (r) {
+                        cur = next;
+                        o = r;
+                    }
+                }
                 // Each kept beside put back in turn: one that does not check is left out, the office and the rest kept.
-                let cur = raw, o = read(raw);
                 for (const k of BESIDE) {
                     const next = o ? withBeside(cur, k, doc[k]) : cur;
                     if (next === cur)
@@ -282,7 +316,7 @@ export class OfficeStore {
             return checked;
         const rev = s.rev + 1;
         try {
-            atomicWriteFileSync(this.path, JSON.stringify({ version: 1, rev, ...onDisk(checked.offices) }, null, 2) + "\n", { mode: 0o600 });
+            atomicWriteFileSync(this.path, JSON.stringify({ version: 1, rev, ...officesOnDisk(checked.offices) }, null, 2) + "\n", { mode: 0o600 });
         }
         catch (err) {
             return { ok: false, status: 503, error: "offices_write_failed", detail: err.message };