@songsid/agend 2.3.5-alpha.3 → 2.3.5-alpha.5

package/dist/ui/settings-outside.js

@@ -5,15 +5,20 @@
 // Every change applies at once (an action, not a staged setting) and is this computer's only: elsewhere the card shows
 // the state, read-only. The server decides who may (GET /ui/outside's `here`) and refuses everything else regardless.
 // The words are the leader's (cid-alpha3-design, strings 1–13 and 17).
+// Refs #3061: "Set up authenticator app" / "Set up again" open the reference page's dialog (the app's own Dialog: the
+// browser traps focus and closes it on Esc; focus goes back to the button that opened it) — the QR code and the key (step 1),
+// the code field (step 2), Cancel and "Verify and turn on". A wrong code is answered inside the dialog.
 import { html, useEffect, useRef, useState } from "/assets/app-html.js";
 import { t, register } from "/assets/app-i18n.js";
 import { toast } from "/assets/ui-toast.js";
 import { confirmDialog } from "/assets/ui-confirm.js";
+import { Dialog } from "/assets/ui-dialog.js";
 import { api } from "./settings-confirm.js";
 
 register("outside", {
   en: {
-    title: "Connections from outside", switch: "Allow connections from outside",
+    title: "Owner verification", lead: "Use your authenticator app's 6-digit code to prove, from outside, that you own this fleet.",
+    stateOn: "Authenticator set up", stateOff: "Not set up", switch: "Allow connections from outside",
     needApp: "Set up an authenticator app first. Signing in from outside will ask for its code.",
     setUp: "Set up authenticator app",
     scan: "Scan this with Authy, Google Authenticator or Microsoft Authenticator, or type the key. Then enter the 6-digit code it shows.",
@@ -21,21 +26,32 @@ register("outside", {
     againConfirm: "Codes from the old app stop working, and everyone signed in from outside is signed out.",
     remove: "Remove", removeConfirm: "Connections from outside are turned off, and everyone signed in from outside is signed out.",
     openAt: "Open at {0}.", quick: "A quick link gets a new address each time it opens.",
-    hereOnly: "Only on the AgEnD computer.", lostPhone: "Lost your phone? On the AgEnD computer, choose “Set up again”.",
+    hereOnly: "Only on the AgEnD computer. Go back to that computer to set up, set up again or remove the app.",
+    lostPhone: "Lost your phone? On the AgEnD computer, choose “Set up again”. There is no email or backup-code recovery.",
+    noRecovery: "If you lose the authenticator, set it up again on the AgEnD computer. There is no email or backup-code recovery.",
+    appsLabel: "Works with these authenticator apps", appOther: "Other TOTP authenticators",
+    step1: "1. Add AgEnD to your authenticator", step2: "2. Enter the authenticator code to finish",
+    activate: "Verify and turn on", removeTitle: "Remove the authenticator app?",
     wrong: "That code didn't work. Check that your phone's clock is right and try the newest code.",
     paused: "Too many wrong codes. Try again in {0}.", code: "Authenticator code", key: "Key",
     minutes: "{0} minutes", minute: "1 minute", hours: "{0} hours", hour: "1 hour",
   },
   "zh-TW": {
-    title: "從外面連線", switch: "允許從外面連線",
+    title: "擁有者驗證", lead: "使用驗證器 App 的 6 位數代碼，從外面證明你是這個 fleet 的擁有者。",
+    stateOn: "驗證器已設定", stateOff: "尚未設定", switch: "允許從外面連線",
     needApp: "請先設定驗證器 App。從外面登入時會要求輸入它的代碼。",
-    setUp: "設定驗證器 App",
+    setUp: "設定驗證器",
     scan: "用 Authy、Google Authenticator 或 Microsoft Authenticator 掃描，或手動輸入金鑰，再輸入 App 顯示的 6 位數代碼。",
-    setUpOn: "驗證器 App 已於 {0} 設定。", again: "重新設定",
+    setUpOn: "驗證器 App 已於 {0} 設定。", again: "重新綁定驗證器",
     againConfirm: "舊 App 的代碼會失效，所有從外面登入的人都會被登出。",
-    remove: "移除", removeConfirm: "從外面連線會關閉，所有從外面登入的人都會被登出。",
+    remove: "停用", removeConfirm: "從外面連線會關閉，所有從外面登入的人都會被登出。",
     openAt: "已開啟：{0}。", quick: "快速連結每次開啟網址都不同。",
-    hereOnly: "只能在 AgEnD 電腦上變更。", lostPhone: "手機遺失？請在 AgEnD 電腦上選「重新設定」。",
+    hereOnly: "只能在 AgEnD 電腦上變更。設定、重新綁定或停用驗證器，請回到那台電腦操作。",
+    lostPhone: "手機遺失？請在 AgEnD 電腦上選「重新綁定驗證器」。沒有電子郵件或備援碼復原。",
+    noRecovery: "遺失驗證器時，請回 AgEnD 主機重新綁定。沒有電子郵件或備援碼復原。",
+    appsLabel: "可使用的驗證器 App", appOther: "其他 TOTP 驗證器",
+    step1: "1. 在驗證器中新增 AgEnD", step2: "2. 輸入驗證器代碼以完成綁定",
+    activate: "驗證並啟用", removeTitle: "停用驗證器？",
     wrong: "代碼不對。請確認手機時間正確，並輸入最新的代碼。",
     paused: "錯誤次數太多，請 {0} 後再試。", code: "驗證器代碼", key: "金鑰",
     minutes: "{0} 分鐘", minute: "1 分鐘", hours: "{0} 小時", hour: "1 小時",
@@ -82,6 +98,25 @@ function Qr({ uri }) {
     <rect width=${shape.size} height=${shape.size} fill="#fff" /><path d=${shape.d} fill="#000" /></svg>`;
 }
 
+/**
+ * Refs #3061 review (P2 2): ONE enrolment request at a time, however often the dialog is closed and opened again. The server
+ * keeps a single pending secret: every POST /ui/outside/enroll replaces it. With the dialog able to close while a request
+ * is still out, "close, open again" used to send a second one; whichever reached the server last then decided which secret
+ * would confirm, and when that was the first (closed) one, the secret on the screen — the second's — was already replaced:
+ * its valid code failed. Dropping the first answer in the page cannot undo what the server did. So while a request is out
+ * the next dialog waits for that same answer and shows it (it is the only secret there is); a new one is asked for only
+ * when none is. Held outside the card: a card that is unmounted and mounted again (the person went to another section and
+ * back) meets the same request.
+ */
+let enrolling = null;
+function askEnrollment() {
+  if (!enrolling) {
+    const asked = (async () => { try { return await api("/ui/outside/enroll", { method: "POST", body: "{}" }); } catch { return null; } })();
+    enrolling = asked.finally(() => { enrolling = null; });
+  }
+  return enrolling;
+}
+
 /**
  * #3035 review: how often the card reads the state again while it is shown — quickly while the link is opening (the
  * switch answers before the link is up), slowly otherwise (its lifetime ending, a wait starting or ending elsewhere).
@@ -89,10 +124,12 @@ function Qr({ uri }) {
 export const outsidePoll = { quickMs: 2000, slowMs: 15000 };
 
 export function OutsideCard() {
-  const [s, setS] = useState(null), [enroll, setEnroll] = useState(null), [code, setCode] = useState(""), [msg, setMsg] = useState(""), [busy, setBusy] = useState(false);
+  // `dlg`: the set-up dialog while it is open — { kind: "setup" | "again", enroll: null (asking the server) | { secret, uri } }.
+  const [s, setS] = useState(null), [dlg, setDlg] = useState(null), [code, setCode] = useState(""), [msg, setMsg] = useState(""), [busy, setBusy] = useState(false);
   // Fences: an answer that arrives after the card is gone, or after a newer read began, is dropped; nor does a read
-  // land while an action is under way (the box shows the click until the action's own read).
-  const live = useRef({ mounted: true, seq: 0, busy: false });
+  // land while an action is under way (the box shows the click until the action's own read). `dlg`: the same for the
+  // dialog's enrolment (closed meanwhile: its answer is dropped); `refocus`: the dialog just closed, focus goes back.
+  const live = useRef({ mounted: true, seq: 0, busy: false, dlg: 0, dlgOpen: false, refocus: false }), card = useRef(null);
   // Every read that ends (answered or not) moves `rev`: the next one is scheduled from there, so a failed read (the
   // network, a 5xx, an unreadable answer) never stops the card reading again (#3035 review r2) — and keeps what it
   // showed meanwhile.
@@ -116,29 +153,50 @@ export function OutsideCard() {
     const timer = setTimeout(() => { if (!live.current.busy) load(); else setRev((n) => n + 1); }, delay);
     return () => clearTimeout(timer);
   }, [rev]);
+  // The dialog closed (Cancel, Esc, ×, or done): focus goes back to the button that opened it — or to the one that took its
+  // place when the set-up finished ("Set up authenticator app" turned into "Set up again"). The Dialog itself returns focus to
+  // whatever was focused when it opened; a browser that does not focus a button on click leaves that as the page, so the card says it.
+  useEffect(() => {
+    if (dlg || busy || !live.current.refocus) return;
+    live.current.refocus = false;
+    const el = card.current && card.current.querySelector(s && s.enrolled ? "#outAgain" : "#outSetUp");
+    if (el && !el.disabled && typeof el.focus === "function") el.focus();
+  }, [dlg, busy]);
   if (!s || !s.webOnly) return null;
   const here = s.here === true;
   const act = async (fn) => {
     setBusy(true); setMsg(""); live.current.busy = true; live.current.seq++;      // a read under way is outdated now
     try { await fn(); } finally { live.current.busy = false; if (live.current.mounted) { setBusy(false); load(); } }
   };
-  const begin = () => act(async () => {
-    const r = await api("/ui/outside/enroll", { method: "POST", body: "{}" });
-    if (r.ok && r.body && r.body.secret) { setEnroll(r.body); setCode(""); } else toast(t("app.failed"), false);
-  });
-  const confirm = () => act(async () => {
-    const r = await api("/ui/outside/enroll/confirm", { method: "POST", body: JSON.stringify({ code }) });
-    if (r.ok) { setEnroll(null); setCode(""); return; }
-    const why = r.body && r.body.error;
-    if (why === "expired") { setEnroll(null); return; }
+  // Open the dialog at once (the button that opened it still has focus) and ask the server for the secret meanwhile; if it
+  // will not give one, the dialog closes with the page's usual "failed". Nothing is changed until the right code is confirmed.
+  const begin = async (kind) => {
+    if (!here || live.current.dlgOpen) return;                                    // not here, or one is open already
+    const id = ++live.current.dlg;
+    live.current.dlgOpen = true;
+    setDlg({ kind, enroll: null }); setCode(""); setMsg("");
+    const r = await askEnrollment();                                              // one at a time: a request still out is this dialog's too
+    if (!live.current.mounted || id !== live.current.dlg) return;                 // closed (or gone) while it was asked
+    if (r && r.ok && r.body && r.body.secret) setDlg({ kind, enroll: r.body });
+    else { closeDlg(); toast(t("app.failed"), false); }
+  };
+  function closeDlg() {
+    live.current.dlg++;                                                           // a late answer to the enrolment is dropped
+    live.current.dlgOpen = false;
+    live.current.refocus = true;
+    setDlg(null); setCode(""); setMsg("");
+  }
+  const submitBind = () => act(async () => {
+    let r;
+    try { r = await api("/ui/outside/enroll/confirm", { method: "POST", body: JSON.stringify({ code }) }); } catch { r = null; }
+    if (r && r.ok) { await load(); closeDlg(); return; }                          // read first: the card behind is the new state when it closes
+    const why = r && r.body && r.body.error;
+    if (why === "expired") { closeDlg(); return; }
     setMsg(why === "wrong" ? to("wrong") : t("app.failed"));
   });
-  const again = async () => {
-    if (!(await confirmDialog({ title: to("again"), message: to("againConfirm"), confirmLabel: to("again"), danger: true }))) return;
-    begin();
-  };
+  const canConfirm = !!(dlg && dlg.enroll) && /^\s*\d{3}\s?\d{3}\s*$/.test(code);
   const remove = async () => {
-    if (!(await confirmDialog({ title: to("remove"), message: to("removeConfirm"), confirmLabel: to("remove"), danger: true }))) return;
+    if (!(await confirmDialog({ title: to("removeTitle"), message: to("removeConfirm"), confirmLabel: to("remove"), danger: true }))) return;
     act(async () => { const r = await api("/ui/outside/remove", { method: "POST", body: "{}" }); if (!r.ok) toast(t("app.failed"), false); });
   };
   // The box follows the click at once (smoke-web-outside-3008: a controlled box that waits for the server reads as a
@@ -148,7 +206,8 @@ export function OutsideCard() {
     if (!r.ok) toast(t("app.failed"), false);
   }); };
   const link = s.link, open = link && link.state === "open";
-  return html`<section class="card s-outside" id="outsideCard"><h3>${to("title")}</h3>
+  return html`<section class="card s-outside" id="outsideCard" ref=${card}><header class="s-auth-section-head"><div><h3>${to("title")}</h3><p id="outLead">${to("lead")}</p></div><span class=${`s-auth-state${s.enrolled ? " is-usable" : ""}`} id="outState">${to(s.enrolled ? "stateOn" : "stateOff")}</span></header>
+    <div class="chips s-out-apps" id="outApps" role="list" aria-label=${to("appsLabel")}><span class="tag" role="listitem">Google Authenticator</span><span class="tag" role="listitem">Microsoft Authenticator</span><span class="tag" role="listitem">${to("appOther")}</span></div>
     ${!here ? html`<p class="note" id="outHereOnly">${to("hereOnly")}</p>` : null}
     <label class="check"><input id="outSwitch" type="checkbox" checked=${s.outside} disabled=${!here || busy || (!s.enrolled && !s.outside)}
       onChange=${(e) => flip(e.target.checked)} /><span>${to("switch")}</span></label>
@@ -156,21 +215,28 @@ export function OutsideCard() {
     ${s.outside && open && link.url ? html`<p class="note" id="outOpenAt">${to("openAt", link.url)}${link.quick ? ` ${to("quick")}` : ""}</p>` : null}
     ${s.outside && link && !open ? html`<p class="note" id="outStarting">${t("app.loading")}</p>` : null}
     ${s.pausedForMs > 0 ? html`<p class="note s-va-warn" role="status" id="outPaused">${to("paused", waitWords(s.pausedForMs))}</p>` : null}
-    ${enroll ? html`<div class="s-out-enroll" id="outEnroll">
+    ${s.enrolled ? html`<p class="note" id="outSetUpOn">${to("setUpOn", new Date(s.enrolledAt).toLocaleDateString())}</p>
+        <p class="note">${to("lostPhone")}</p>
+        ${here ? html`<div class="save-row"><button type="button" class="btn" id="outAgain" disabled=${busy} onClick=${() => begin("again")}>${to("again")}</button>
+          <button type="button" class="btn btn-danger" id="outRemove" disabled=${busy} onClick=${remove}>${to("remove")}</button></div>` : null}`
+      : html`<p class="note" id="outNoRecovery">${to("noRecovery")}</p>${here ? html`<div class="save-row"><button type="button" class="btn btn-primary" id="outSetUp" disabled=${busy} onClick=${() => begin("setup")}>${to("setUp")}</button></div>` : null}`}
+    ${dlg ? html`<${Dialog} title=${to(dlg.kind === "again" ? "again" : "setUp")} onClose=${closeDlg} busy=${busy} actions=${html`
+        <button type="button" class="btn" id="outCancel" disabled=${busy} onClick=${closeDlg}>${t("app.cancel")}</button>
+        <button type="button" class="btn btn-primary" id="outConfirm" disabled=${busy || !canConfirm} onClick=${submitBind}>${to("activate")}</button>`}>
+      <div class="s-out-enroll" id="outEnroll">${dlg.enroll ? html`
+        <p class="s-out-step" id="outStep1"><strong>${to("step1")}</strong></p>
         <p class="note">${to("scan")}</p>
-        <${Qr} uri=${enroll.uri} />
-        <p class="note">${to("key")}: <code id="outKey">${keyGroups(enroll.secret)}</code></p>
+        <${Qr} uri=${dlg.enroll.uri} />
+        <p class="note">${to("key")}: <code id="outKey">${keyGroups(dlg.enroll.secret)}</code></p>
+        <p class="s-out-step" id="outStep2"><strong>${to("step2")}</strong></p>
         <div class="field"><label for="outCode">${to("code")}</label>
           <input id="outCode" type="text" inputmode="numeric" autocomplete="one-time-code" maxlength="7" placeholder="123456" value=${code}
-            onInput=${(e) => setCode(e.target.value)} /></div>
-        ${msg ? html`<p class="feedback error" role="alert" id="outMsg">${msg}</p>` : null}
-        <div class="save-row"><button type="button" class="btn" id="outCancel" disabled=${busy} onClick=${() => { setEnroll(null); setMsg(""); }}>${t("app.cancel")}</button>
-          <button type="button" class="btn btn-primary" id="outConfirm" disabled=${busy || !/^\s*\d{3}\s?\d{3}\s*$/.test(code)} onClick=${confirm}>${t("app.confirmOk")}</button></div>
-      </div>`
-      : s.enrolled ? html`<p class="note" id="outSetUpOn">${to("setUpOn", new Date(s.enrolledAt).toLocaleDateString())}</p>
-        <p class="note">${to("lostPhone")}</p>
-        ${here ? html`<div class="save-row"><button type="button" class="btn" id="outAgain" disabled=${busy} onClick=${again}>${to("again")}</button>
-          <button type="button" class="btn btn-danger" id="outRemove" disabled=${busy} onClick=${remove}>${to("remove")}</button></div>` : null}`
-      : here ? html`<div class="save-row"><button type="button" class="btn btn-primary" id="outSetUp" disabled=${busy} onClick=${begin}>${to("setUp")}</button></div>` : null}
+            onInput=${(e) => setCode(e.target.value)}
+            onKeyDown=${(e) => { if (e.key === "Enter" && canConfirm && !busy) { e.preventDefault(); submitBind(); } }} /></div>
+        ${dlg.kind === "again" ? html`<p class="note" id="outAgainNote">${to("againConfirm")}</p>` : null}
+        <p class="note" id="outEnrollNoRecovery">${to("noRecovery")}</p>
+        ${msg ? html`<p class="feedback error" role="alert" id="outMsg">${msg}</p>` : null}`
+        : html`<p class="note" id="outEnrollLoading">${t("app.loading")}</p>`}</div>
+    </${Dialog}>` : null}
   </section>`;
 }

package/dist/ui/settings-registry.js

@@ -6,7 +6,9 @@ import { lang, tIn } from "/assets/app-i18n.js";
 import { sectionPath } from "/assets/app-route.js";
 import { navigate } from "/assets/app-nav.js";
 import "./settings-strings.js";
-import "./chat-strings.js";
+import "./settings-shared-strings.js";   // search shows these labels from outside Settings (dailyTips, hangEnabled, crossInstanceVisibility)
+import "./settings-access-strings.js";   // …and this one (webLoginQr), added by Access & security (#3061)
+import "/assets/chat-strings.js";
 import { GUESTS_SETTINGS } from "./settings-guests.js";
 
 const L = (en, zh) => ({ en, "zh-TW": zh });
@@ -15,14 +17,16 @@ const ROWS = [
   ["general.location", "agent-defaults", "#general-location", null, null, ["general", "windows", "paired PC", "host", "location"], ["General", "Windows", "電腦", "主機", "執行位置"], L("Run General on", "General 執行位置")],
   // You · Preferences
   ["profile.name", "preferences", "#profile-name", "settings.profileTitle", null, ["name", "display name", "who agents see", "profile"], ["名字", "名稱", "顯示名稱", "個人資料"]],
-  ["prefs.theme", "preferences", "#pref-theme", "app.theme", null, ["theme", "dark", "light", "dark mode", "colour scheme"], ["主題", "深色", "淺色", "外觀"]],
+  ["prefs.theme", "look", "#pref-theme", "app.theme", null, ["theme", "dark", "light", "dark mode", "colour scheme"], ["主題", "深色", "淺色", "外觀"]],
   ["prefs.lang", "preferences", "#pref-lang", "app.language", null, ["language", "dashboard language", "english", "chinese", "locale"], ["語言", "介面語言", "中文", "英文"]],
   ["prefs.names", "preferences", "#pref-names", "app.names", null, ["names", "nickname", "real name", "instance name", "display"], ["名稱", "暱稱", "實名"]],
   ["prefs.previews", "preferences", "#pref-previews", "chat.previews", null, ["html preview", "preview", "iframe"], ["預覽", "HTML 預覽"]],
   ["prefs.tour", "preferences", "#tourBtn", "chat.tour", null, ["tour", "help", "walkthrough", "guide"], ["導覽", "說明", "教學"]],
-  ["device.motion", "preferences", "#fx-follow-reduced-motion", "settings.themesFollowMotion", null, ["reduced motion", "animation", "effects", "accessibility"], ["減少動態", "動畫", "特效", "無障礙"]],
-  ["device.css-off", "preferences", "#css-off-here", "settings.cssDeviceOff", null, ["custom css", "css off", "this device", "safe"], ["自訂 CSS", "關閉 CSS", "這個裝置"]],
+  ["prefs.shortcuts", "preferences", "#keyboardShortcutsBtn", null, null, ["keyboard shortcuts", "hotkeys", "keys", "help", "ctrl", "command"], ["快捷鍵", "快速鍵", "鍵盤", "說明"], L("Keyboard shortcuts", "快捷鍵")],
+  ["device.motion", "look", "#fx-follow-reduced-motion", "settings.themesFollowMotion", null, ["reduced motion", "animation", "effects", "accessibility"], ["減少動態", "動畫", "特效", "無障礙"]],
+  ["device.css-off", "look", "#css-off-here", "settings.cssDeviceOff", null, ["custom css", "css off", "this device", "safe"], ["自訂 CSS", "關閉 CSS", "這個裝置"]],
   // You · Look
+  ["device.settings-width", "look", "#settings-content-width", null, null, ["settings width", "content width", "layout", "wide", "compact", "this device"], ["設定寬度", "內容寬度", "版型", "寬版", "窄版", "此裝置"], L("Settings content width", "設定頁內容寬度")],
   ["look.themes", "look", "#fx-show-themes", "settings.themesShow", "fx.show", ["agent themes", "themes", "effects", "widgets"], ["主題", "agent 的主題", "特效", "小工具"]],
   ["look.colours", "look", ".s-colors", "settings.colorTitle", "color.show", ["identity colour", "color", "colour", "turn off colours"], ["識別色", "顏色", "關閉顏色"]],
   ["look.cards", "look", ".s-card-size", "settings.cardSizeTitle", "card.size", ["identity card", "card size", "portrait", "banner"], ["身分卡", "卡片大小"]],
@@ -40,6 +44,7 @@ const ROWS = [
   ["runtimes.machines", "runtimes", ".runtime-settings", "settings.sec_runtimes", null, ["runtime", "computer", "machine", "pair", "connect", "windows", "linux", "CLI"], ["執行環境", "電腦", "機器", "配對", "連接", "Windows", "CLI"]],
   ["defaults.tips", "agent-defaults", "#g-tips", "settings.dailyTips", "defaults.tips", ["daily tips", "notices"], ["每日提示"]],
   ["web.notify-login", "access", "#webNotifyLogin", "settings.webNotifyLogin", "web.notify_login", ["sign in", "login", "notices"], ["登入通知"]],
+  ["web.login-qr", "access", "#webLoginQr", "settings.webLoginQr", "web.login_qr", ["qr", "qr code", "sign in", "another device", "scan", "device"], ["QR", "QR Code", "登入", "其他裝置", "掃描"]],
   // Fleet · Agent defaults
   ["defaults.locale", "agent-defaults", "#g-locale", "settings.language", "defaults.locale", ["language", "bot language", "reply language", "locale"], ["語言", "回覆語言", "bot 語言"]],
   ["defaults.backend", "agent-defaults", "#g-be", "settings.defaultBackend", "defaults.backend", ["backend", "cli", "claude", "codex", "kiro"], ["後端", "CLI"]],

package/dist/ui/settings-shared-strings.js

@@ -0,0 +1,143 @@
+// #3087 review: the settings.* words that Shared agent settings (the page formerly called "Agent defaults") added or reworded,
+// kept in a file of their own on purpose.
+//
+// Why a file of their own: a tab opened before an upgrade has already run the old settings-strings.js, and the browser hands
+// the same module back when the new Settings page imports that URL again — so a key the page added would read as the raw
+// "settings.…" key in a tab that opened Fleet (or search) first. This file's URL is new, so no tab can hold an old copy of it:
+// every module that draws one of these words imports it, right after settings-strings.js, and register() merges its words over
+// whatever that file said (the later call wins), so a reworded key also reads in its new words.
+//
+// Rules for this file:
+// - A key lives here or in settings-strings.js, never in both. Move a key here when a change to the Shared agent settings page
+//   adds it or rewords it; delete it from settings-strings.js in the same change.
+// - Every module that reads one of these keys imports "./settings-shared-strings.js" after "./settings-strings.js": the
+//   Settings page (panel-settings.js, settings-shared.js), the dialogs it borrows (settings-dialogs.js) and the paths outside
+//   Settings that print one — search (search-dialog.js, settings-registry.js). tests/settings-shared-strings-3087.test.ts
+//   checks that every module that reads a key from here imports this file.
+import { register } from "/assets/app-i18n.js";
+
+register("settings", {
+  en: {
+    // Reworded (settings-strings.js had these keys before; the new words win).
+    dailyTips: "Daily tips (General topic)",
+    dailyTipsHint: "Posts one usage tip a day in the General topic. Off stops them; /tips still posts where you call it.",
+    changeInDefaults: "change in Shared agent settings",
+    hangEnabled: "Hang detector",
+    crossInstanceVisibility: "Bot-to-bot messages in topics",
+    crossInstanceVisibilityHint: "How much of a message from one agent to another is shown in this agent's topic: all of it, one line, or nothing. Messages are always delivered; the Mirror Topic still shows them.",
+    "sec_agent-defaults": "Shared agent settings",
+    updateDefaults: "Update shared agent settings",
+    devFormsUnsaved: "Save or discard the unsaved changes to agents, shared agent settings or connections first: this editor writes the same settings.",
+    help4: "General: shared agent settings and ClassicBot defaults. Web: the dashboard's sign-in sessions, browser terminal, web echo, Log and public link. Review changes stages them.",
+    // Added.
+    defaultMarkTip: "Nobody set this in fleet.yaml, so the built-in value shown is in use. Editing it saves your own value.",
+    // The same five, as one or two words (the hover on the usage pill lists who sets which).
+    dashboardShort_appearance: "Appearance", dashboardShort_task_board: "Task board", dashboardShort_web_settings: "Web settings", dashboardShort_office: "Office", dashboardShort_office_packs: "Office packs",
+    // Shared agent settings (formerly "Agent defaults"): what the page is, what each field does (the ⓘ), what an edit costs.
+    sharedGroupAgents: "Shared agent settings", sharedGroupAgentsSub: "An individual agent can override these",
+    sharedGroupSystem: "System & channels", sharedGroupSystemSub: "One value for the whole fleet — an agent can't change it",
+    sharedGroupSystemAdvancedSub: "One value for the whole fleet — an agent can't change it, except the hang detector, which an agent can also set for itself",
+    advancedCount: "Advanced ({0})",
+    hostTag: "this host", switchOn: "On", switchOff: "Off", hangUnit: "minutes without output → alert", tipLabel: "About \u201c{0}\u201d",
+    usageCount: "{0}/{1} in use", usageOwn: "{0} custom", usagePartly: "{0} partly custom", usageMany: "{0} agents",
+    usageTipAll: "Every agent uses the value on this page.",
+    usageTipOwners: "Set on their own under Agents, so a change here does not reach them: {0}.",
+    usageTipParts: "An agent that sets an item on its own (under Agents) is not reached by a change to that item here; it still follows this page for its other items. Set on their own: {0}.",
+    usageRooms: "{0} ClassicBot room(s) follow this value too (they are not in this count).",
+    backendInfo: "Only this host is checked. For a CLI on a Windows PC, open that agent's settings and choose Change runtime / CLI.", backendInfoLink: "Windows PCs and their CLIs: Runtime",
+    tipBackend: "The coding CLI an agent runs on (claude-code, codex, kiro-cli …). The installed / signed-in status beside each name is read on the machine AgEnD runs on, not on other computers.",
+    tipModel: "The model an agent asks its CLI for. “CLI default” lets the CLI choose. The list follows the default backend and is read on this host.",
+    tipAutoPause: "An agent idle this long is paused to free memory; a new message wakes it. 0 = never pause.",
+    tipToolProgress: "How much of an agent's tool activity shows in the chat while it works. Off: nothing. Standard: short labels (“Reading a file”). Verbose: labels plus command previews.",
+    tipLocale: "The language of bot replies and notices. Read when AgEnD starts. Auto follows the system.",
+    tipReplyGuard: "When a person's message ends without the agent sending a reply, AgEnD nudges it to answer.",
+    tipToolSet: "Which tools an agent may call. Worker is the usual one; Coordinator adds fleet management; Full allows every tool.",
+    tipAgentMode: "How an agent talks to AgEnD. MCP is the default and recommended; CLI (HTTP commands) is for a CLI without MCP.",
+    tipLogLevel: "How much detail an agent writes to its log. Info is normal; Debug and Trace are for troubleshooting and write a lot.",
+    tipHang: "Raise an alert when an agent produces no output at all for this long. An individual agent can set its own minutes under Agents.",
+    tipConcurrency: "How many agents AgEnD starts at the same time when it boots. Empty picks 2–10 from free memory and CPU cores.",
+    tipStagger: "The least AgEnD waits between starting one agent and the next, in milliseconds. Default: 500.",
+    seg_tool_progress_off: "Off", seg_tool_progress_standard: "Standard", seg_tool_progress_verbose: "Verbose",
+    seg_visibility_full: "Full", seg_visibility_summary: "Summary", seg_visibility_hidden: "Hidden",
+    seg_agent_mode_mcp: "MCP (recommended)", seg_agent_mode_cli: "CLI",
+    opt_tool_set_worker: "Worker — talk, read, do the work", opt_tool_set_coordinator: "Coordinator — worker plus fleet management",
+    opt_tool_set_standard: "Standard — a mid-sized set", opt_tool_set_minimal: "Minimal — only the basics", opt_tool_set_full: "Full — every tool",
+    opt_log_level_trace: "Trace — everything", opt_log_level_debug: "Debug — for troubleshooting", opt_log_level_info: "Info — normal",
+    opt_log_level_warn: "Warn — problems only", opt_log_level_error: "Error — failures only",
+    noteRestartAgents: "↻ After saving, {0} agent(s) restart", noteSkip: " ({0} set their own — not affected)",
+    noteApplyAgents: "↻ After saving, {0} agent(s) use the new value; the {1} running restart",
+    noteApplyIdle: "After saving, {0} agent(s) use the new value; none is running, so none restarts",
+    noteRestartRooms: "↻ After saving, {0} ClassicBot room(s) that follow this value restart",
+    noteApplyRooms: "↻ After saving, {0} ClassicBot room(s) use the new value; the {1} running restart",
+    noteIdleRooms: "After saving, {0} ClassicBot room(s) use the new value; none is running, so none restarts",
+    noteAllOverride: "Every agent sets this on its own, so none is affected.", noteNoAgents: "No agents yet — agents you create later start with this value.",
+    noteRestartFleet: "↻ AgEnD has to restart for this to take effect", noteConfirmAdmin: "A fleet admin has to confirm when you save",
+    noteConfirmTick: "Newly ticked items are confirmed first",
+    barRestartAgents: "↻ {0} agent(s) restart after saving", barRestartFleet: "↻ AgEnD restarts",
+    barApplyAgents: "↻ {0} agent(s) use the new value; the {1} running restart", barApplyIdle: "{0} agent(s) use the new value; none is running",
+    barRestartRooms: "↻ {0} ClassicBot room(s) restart after saving", barApplyRooms: "↻ {0} ClassicBot room(s) use the new value; the {1} running restart",
+    barIdleRooms: "{0} ClassicBot room(s) use the new value; none is running",
+    backendNotInstalledHost: "not installed on this host",
+  },
+  "zh-TW": {
+    // 改過字句的 key（settings-strings.js 原本就有；以這裡的新字句為準）。
+    dailyTips: "每日提示（General 頻道）",
+    dailyTipsHint: "每天在 General 頻道發一則使用小提示。關閉就不再發；/tips 仍會發到你呼叫的聊天室。",
+    changeInDefaults: "到 Agent 共用設定變更",
+    hangEnabled: "卡住偵測",
+    crossInstanceVisibility: "Agent 之間的訊息",
+    crossInstanceVisibilityHint: "Agent 傳給 Agent 的訊息，要在這個 Agent 的主題裡顯示多少：完整、一行摘要，或不顯示。訊息一律照常送達，Mirror Topic 也照常顯示。",
+    "sec_agent-defaults": "Agent 共用設定",
+    updateDefaults: "更新 Agent 共用設定",
+    devFormsUnsaved: "請先儲存或捨棄 Agent、Agent 共用設定或連線中未儲存的變更：這個編輯器會寫入相同的設定。",
+    help4: "一般：Agent 共用設定與 ClassicBot 預設值。網頁：儀表板的登入 session、瀏覽器終端機、網頁轉發、紀錄與公開連結。「檢查變更」會把它們暫存。",
+    // 新增的 key。
+    defaultMarkTip: "fleet.yaml 沒有設定這一項，目前使用的是內建值。修改後會存成你自己的值。",
+    dashboardShort_appearance: "外觀", dashboardShort_task_board: "任務看板", dashboardShort_web_settings: "網頁外觀設定", dashboardShort_office: "辦公室", dashboardShort_office_packs: "辦公室外觀包",
+    // Agent 共用設定（原「Agent 預設值」）：這一頁是什麼、每個欄位做什麼（ⓘ）、改了會怎樣。
+    sharedGroupAgents: "Agent 共用設定", sharedGroupAgentsSub: "個別 Agent 可以自己改掉",
+    sharedGroupSystem: "系統與頻道", sharedGroupSystemSub: "整個 Fleet 一起，不能個別改",
+    sharedGroupSystemAdvancedSub: "整個 Fleet 一起，不能個別改；只有卡住偵測可以另外在個別 Agent 設定",
+    advancedCount: "進階設定（{0} 項）",
+    hostTag: "此主機", switchOn: "開", switchOff: "關", hangUnit: "分鐘沒輸出就提醒", tipLabel: "「{0}」的說明",
+    usageCount: "{0}/{1} 套用中", usageOwn: "{0} 自訂", usagePartly: "{0} 部分自訂", usageMany: "{0} 個 Agent",
+    usageTipAll: "所有 Agent 都用這裡的值。",
+    usageTipOwners: "在 Agents 頁自己設定了這一項，這裡改了不影響它們：{0}。",
+    usageTipParts: "Agent 在 Agents 頁自己設定了某一項，這裡改那一項就不會影響它；其他項目仍然跟著這裡。自己設定的：{0}。",
+    usageRooms: "另有 {0} 個 ClassicBot 房間也沿用這個值（不在上面的數字裡）。",
+    backendInfo: "只檢查這台主機。Windows 電腦上的 CLI，請在個別 Agent 的設定裡按「切換 Runtime／CLI」。", backendInfoLink: "查看 Windows 電腦與 CLI：Runtime",
+    tipBackend: "Agent 用哪一種 coding CLI 執行（claude-code、codex、kiro-cli…）。每個名稱旁的「已安裝／已登入」狀態，是在 AgEnD 所在的這台主機上檢查的，不包含其他電腦。",
+    tipModel: "Agent 向 CLI 要求使用的模型。「CLI 自己的預設」就是讓 CLI 自己決定。清單跟著預設後端換，內容是這台主機上讀到的。",
+    tipAutoPause: "Agent 閒置這麼久就暫停、釋放記憶體，有新訊息會自動喚醒。0＝不自動暫停。",
+    tipToolProgress: "Agent 工作時，聊天室顯示多少工具活動。關：不顯示。標準：簡短說明（例如「正在讀取檔案」）。詳細：說明加上指令預覽。",
+    tipLocale: "Bot 回覆與通知使用的語言。AgEnD 啟動時讀取。「自動」會跟隨系統。",
+    tipReplyGuard: "使用者的訊息處理完卻沒有回覆時，AgEnD 會提醒 Agent 補上回覆。",
+    tipToolSet: "Agent 可以呼叫哪些工具。Worker 最常用；Coordinator 多了管理 Fleet 的工具；Full 全部開放。",
+    tipAgentMode: "Agent 跟 AgEnD 溝通的方式。MCP 是預設、建議；CLI（HTTP 指令）給不支援 MCP 的 CLI 用。",
+    tipLogLevel: "Agent 的 log 寫多詳細。Info 是一般；Debug、Trace 用來除錯，會寫很多。",
+    tipHang: "Agent 超過這段時間完全沒有輸出，就發出提醒。個別 Agent 可以在 Agents 頁自己設定分鐘數。",
+    tipConcurrency: "AgEnD 開機時同時啟動幾個 Agent。留空會依可用記憶體與 CPU 核心數在 2–10 之間自動決定。",
+    tipStagger: "啟動一個 Agent 到下一個之間至少等多久（毫秒）。預設：500。",
+    seg_tool_progress_off: "關", seg_tool_progress_standard: "標準", seg_tool_progress_verbose: "詳細",
+    seg_visibility_full: "完整", seg_visibility_summary: "摘要", seg_visibility_hidden: "隱藏",
+    seg_agent_mode_mcp: "MCP（建議）", seg_agent_mode_cli: "CLI",
+    opt_tool_set_worker: "Worker — 溝通、讀取、做事", opt_tool_set_coordinator: "Coordinator — Worker 加上管理 Fleet",
+    opt_tool_set_standard: "Standard — 中等規模", opt_tool_set_minimal: "Minimal — 只有最基本的", opt_tool_set_full: "Full — 全部工具",
+    opt_log_level_trace: "Trace — 全部", opt_log_level_debug: "Debug — 除錯用", opt_log_level_info: "Info — 一般",
+    opt_log_level_warn: "Warn — 只記問題", opt_log_level_error: "Error — 只記失敗",
+    noteRestartAgents: "↻ 儲存後，{0} 個 Agent 會重新啟動", noteSkip: "（{0} 自訂，不受影響）",
+    noteApplyAgents: "↻ 儲存後，{0} 個 Agent 會套用新值，其中執行中的 {1} 個會重新啟動",
+    noteApplyIdle: "儲存後，{0} 個 Agent 會套用新值；目前都沒有執行中，所以不會重新啟動",
+    noteRestartRooms: "↻ 儲存後，沿用這個值的 {0} 個 ClassicBot 房間會重新啟動",
+    noteApplyRooms: "↻ 儲存後，{0} 個 ClassicBot 房間會套用新值，其中執行中的 {1} 個會重新啟動",
+    noteIdleRooms: "儲存後，{0} 個 ClassicBot 房間會套用新值；目前都沒有執行中，所以不會重新啟動",
+    noteAllOverride: "每個 Agent 都自己設定了這一項，所以都不受影響。", noteNoAgents: "目前還沒有 Agent；之後新建的會使用這個值。",
+    noteRestartFleet: "↻ 需要重新啟動 AgEnD 才生效", noteConfirmAdmin: "儲存時需要 Fleet 管理員確認",
+    noteConfirmTick: "勾選的項目要先確認才生效",
+    barRestartAgents: "↻ 儲存後 {0} 個 Agent 會重新啟動", barRestartFleet: "↻ 需要重新啟動 AgEnD",
+    barApplyAgents: "↻ {0} 個 Agent 會套用新值，其中執行中的 {1} 個會重新啟動", barApplyIdle: "{0} 個 Agent 會套用新值，目前都沒有執行中",
+    barRestartRooms: "↻ 儲存後 {0} 個 ClassicBot 房間會重新啟動", barApplyRooms: "↻ {0} 個 ClassicBot 房間會套用新值，其中執行中的 {1} 個會重新啟動",
+    barIdleRooms: "{0} 個 ClassicBot 房間會套用新值，目前都沒有執行中",
+    backendNotInstalledHost: "此主機未安裝",
+  },
+});