@steerable/agent-shell-web 0.6.52 → 0.6.55

package/src/components/settings/PortableSettingsPanel.tsx

@@ -2,6 +2,7 @@ import { useState } from 'react';
 import { LuDownload, LuUpload } from 'react-icons/lu';
 import { hostToolChrome, settingsChrome } from '@/lib/host-tools';
 import { BRAND_NAME } from '@/brand';
+import { t } from '@/i18n';
 import {
   applyClientSections,
   fetchChatDocument,
@@ -20,42 +21,61 @@ import {
 } from '@/lib/portable';
 
 const EXPORT_SECTIONS: Array<{ id: string; label: string; visible: () => boolean }> = [
-  { id: 'appearance', label: '界面', visible: () => settingsChrome('appearance') },
-  { id: 'execPolicy', label: '命令权限', visible: () => hostToolChrome('local-fs') },
-  { id: 'llm', label: '本地模型', visible: () => settingsChrome('llm') },
-  { id: 'webSearch', label: '网络搜索', visible: () => settingsChrome('web-search') },
-  { id: 'insights', label: '帮助改进产品', visible: () => settingsChrome('insights') },
-  { id: 'telemetry', label: '遥测', visible: () => settingsChrome('telemetry') },
-  { id: 'mcp', label: 'MCP 服务', visible: () => settingsChrome('mcp') },
-  { id: 'agents', label: '智能体', visible: () => settingsChrome('agents') },
-  { id: 'skills', label: '技能引用', visible: () => settingsChrome('skills') },
+  { id: 'appearance', label: 'Interface', visible: () => settingsChrome('appearance') },
+  { id: 'execPolicy', label: 'Command permissions', visible: () => hostToolChrome('local-fs') },
+  { id: 'llm', label: 'Local model', visible: () => settingsChrome('llm') },
+  { id: 'webSearch', label: 'Web search', visible: () => settingsChrome('web-search') },
+  { id: 'insights', label: 'Help improve the product', visible: () => settingsChrome('insights') },
+  { id: 'telemetry', label: 'Telemetry', visible: () => settingsChrome('telemetry') },
+  { id: 'mcp', label: 'MCP servers', visible: () => settingsChrome('mcp') },
+  { id: 'agents', label: 'Agents', visible: () => settingsChrome('agents') },
+  { id: 'skills', label: 'Skill references', visible: () => settingsChrome('skills') },
 ];
 
 function projectClause(chat: { projectName?: string; projectCount?: number }): string | null {
   const count = chat.projectCount ?? 0;
   if (count <= 0) return null;
   if (count === 1 && chat.projectName) {
-    return `项目「${chat.projectName}」（不含目录里的文件，同名项目沿用本机已有的）`;
+    return t(
+      'Project "{name}" (files in its directory are not included; a project with the same name reuses the one on this computer)',
+      { name: chat.projectName },
+    );
   }
-  return `${count} 个项目（不含目录里的文件，同名项目沿用本机已有的）`;
+  return t(
+    '{count} projects (files in their directories are not included; projects with the same name reuse the ones on this computer)',
+    { count },
+  );
 }
 
 function describeChat(preview: PortablePreview): string {
   const chat = preview.chat;
-  if (!chat) return '将作为新会话导入，不覆盖现有对话。';
-  const bits = [`${chat.messageCount} 条消息`];
-  if (chat.attachmentCount > 0) bits.push(`${chat.attachmentCount} 个附件`);
-  if (chat.omittedAttachmentCount > 0) bits.push(`${chat.omittedAttachmentCount} 个附件因过大未包含`);
-  if (chat.truncated) bits.push('消息已达到导出上限');
+  if (!chat) return t('Will be imported as a new chat. Existing chats are not overwritten.');
+  const bits = [t('{count} messages', { count: chat.messageCount })];
+  if (chat.attachmentCount > 0) bits.push(t('{count} attachments', { count: chat.attachmentCount }));
+  if (chat.omittedAttachmentCount > 0) {
+    bits.push(t('{count} attachments left out because they are too large', { count: chat.omittedAttachmentCount }));
+  }
+  if (chat.truncated) bits.push(t('Messages reached the export limit'));
   const project = projectClause(chat);
   if (project) bits.push(project);
-  if ((chat.count ?? 1) > 1) return `将新增 ${chat.count} 条对话，共 ${bits.join('，')}。不覆盖现有会话。`;
-  return `将新增对话「${chat.title}」：${bits.join('，')}。不覆盖现有会话。`;
+  const details = bits.join(t(', '));
+  if ((chat.count ?? 1) > 1) {
+    return t('Will add {count} chats with {details} in total. Existing chats are not overwritten.', {
+      count: chat.count ?? 1,
+      details,
+    });
+  }
+  return t('Will add chat "{title}": {details}. Existing chats are not overwritten.', {
+    title: chat.title,
+    details,
+  });
 }
 
 function describeImport(preview: PortablePreview): string {
-  if (preview.includeSecrets) return '这份配置包含 API Key。导入后会写入本机。';
-  return '将按勾选覆盖对应设置。未出现的段保持不动。钥匙默认不在包里，导入后需要自己填写。';
+  if (preview.includeSecrets) return t('This config includes API keys. Importing writes them to this computer.');
+  return t(
+    'Checked settings will be overwritten. Sections not in the file stay unchanged. Keys are not in the package by default, so you need to fill them in after importing.',
+  );
 }
 
 /**
@@ -113,7 +133,7 @@ export function PortableSettingsPanel() {
   const confirmExportChats = async () => {
     const chosen = chatRows.filter((row) => chatIds.has(row.id));
     if (chosen.length === 0) {
-      setError('请至少选择一条对话');
+      setError(t('Select at least one chat'));
       return;
     }
     setBusy(true);
@@ -121,13 +141,13 @@ export function PortableSettingsPanel() {
     try {
       const chats = [];
       for (const row of chosen) chats.push(await fetchChatDocument(row.id));
-      const saved = await saveJsonFile(safeDownloadName(BRAND_NAME, '对话'), {
+      const saved = await saveJsonFile(safeDownloadName(BRAND_NAME, t('Chats')), {
         kind: 'steerable-chats',
         schemaVersion: 1,
         exportedAt: new Date().toISOString(),
         chats,
       });
-      setStatus(saved ? `已保存到 ${saved}` : '已取消');
+      setStatus(saved ? t('Saved to {path}', { path: saved }) : t('Canceled'));
       if (saved) setMode('idle');
     } catch (err) {
       setError(portableErrorMessage(err));
@@ -151,11 +171,11 @@ export function PortableSettingsPanel() {
       const fetched = await fetchConfigDocument(includeSecrets);
       const finished = finishConfigDocument(fetched, selected);
       if (Object.keys(finished.sections).length === 0) {
-        setError('没有可导出的内容');
+        setError(t('Nothing to export'));
         return;
       }
-      const saved = await saveJsonFile(safeDownloadName(BRAND_NAME, '配置'), finished);
-      setStatus(saved ? `已保存到 ${saved}` : '已取消');
+      const saved = await saveJsonFile(safeDownloadName(BRAND_NAME, t('Config')), finished);
+      setStatus(saved ? t('Saved to {path}', { path: saved }) : t('Canceled'));
       if (saved) setMode('idle');
     } catch (err) {
       setError(portableErrorMessage(err));
@@ -182,14 +202,14 @@ export function PortableSettingsPanel() {
         setPreview(null);
         setDocument(null);
         setMode('idle');
-        setError('这是配置包，请用「导入配置」');
+        setError(t('This is a config package. Use "Import config".'));
         return;
       }
       if (target === 'config' && isChat) {
         setPreview(null);
         setDocument(null);
         setMode('idle');
-        setError('这是对话包，请用「导入对话」');
+        setError(t('This is a chat package. Use "Import chats".'));
         return;
       }
       setDocument(parsed.value);
@@ -222,13 +242,17 @@ export function PortableSettingsPanel() {
       const appliedLabels = sections
         .filter((section) => section.clientOnly || result.applied.includes(section.id))
         .map((section) => section.label);
-      const parts = [`已导入${appliedLabels.length > 0 ? `：${appliedLabels.join('、')}` : ''}`];
+      const parts = [
+        appliedLabels.length > 0
+          ? t('Imported: {sections}', { sections: appliedLabels.join(t(', ')) })
+          : t('Imported'),
+      ];
       for (const item of result.skipped) parts.push(item.reason);
       for (const note of result.notes) parts.push(note);
       if (result.missingSkills.length > 0) {
-        parts.push(`本机没有这些技能：${result.missingSkills.join('、')}`);
+        parts.push(t('These skills are not on this computer: {skills}', { skills: result.missingSkills.join(t(', ')) }));
       }
-      setStatus(parts.join('。'));
+      setStatus(parts.join(t('. ')));
       setMode('idle');
       setPreview(null);
       setDocument(null);
@@ -246,7 +270,7 @@ export function PortableSettingsPanel() {
     try {
       const result = await importChatDocument(document);
       const count = preview.chat?.count ?? 1;
-      setStatus(count > 1 ? `已导入 ${count} 条对话` : `已导入对话「${result.title}」`);
+      setStatus(count > 1 ? t('Imported {count} chats', { count }) : t('Imported chat "{title}"', { title: result.title }));
       setMode('idle');
       setPreview(null);
       setDocument(null);
@@ -269,7 +293,9 @@ export function PortableSettingsPanel() {
       data-testid="portable-settings-panel"
     >
       <p className="text-xs leading-relaxed text-agent-muted-foreground">
-        导出配置或对话记录，带到另一台电脑后再导入。对话会连同所属项目一起导出，不包含项目目录里的文件。对话作为新会话导入，不覆盖现有记录。API Key 默认不包含。
+        {t(
+          'Export your config or chat history, take it to another computer, and import it there. Chats are exported with their projects, without the files in project directories. Chats are imported as new chats and do not overwrite existing history. API keys are not included by default.',
+        )}
       </p>
       <div className="flex flex-wrap gap-1.5">
         <button
@@ -279,7 +305,7 @@ export function PortableSettingsPanel() {
           data-testid="portable-export-config"
         >
           <LuDownload className="h-3.5 w-3.5" />
-          导出配置
+          {t('Export config')}
         </button>
         <button
           type="button"
@@ -289,7 +315,7 @@ export function PortableSettingsPanel() {
           data-testid="portable-export-chats"
         >
           <LuDownload className="h-3.5 w-3.5" />
-          导出对话
+          {t('Export chats')}
         </button>
         <button
           type="button"
@@ -299,7 +325,7 @@ export function PortableSettingsPanel() {
           data-testid="portable-import-config"
         >
           <LuUpload className="h-3.5 w-3.5" />
-          导入配置
+          {t('Import config')}
         </button>
         <button
           type="button"
@@ -309,13 +335,13 @@ export function PortableSettingsPanel() {
           data-testid="portable-import-chats"
         >
           <LuUpload className="h-3.5 w-3.5" />
-          导入对话
+          {t('Import chats')}
         </button>
       </div>
 
       {mode === 'export' && (
         <fieldset className="space-y-1.5" data-testid="portable-export-form">
-          <legend className="text-xs font-medium text-agent-foreground">导出哪些段</legend>
+          <legend className="text-xs font-medium text-agent-foreground">{t('Sections to export')}</legend>
           {visible.map((item) => (
             <label key={item.id} className="flex items-center gap-1.5 text-xs text-agent-foreground">
               <input
@@ -324,7 +350,7 @@ export function PortableSettingsPanel() {
                 onChange={() => toggle(item.id)}
                 data-testid={`portable-section-${item.id}`}
               />
-              {item.label}
+              {t(item.label)}
             </label>
           ))}
           <label className="flex items-center gap-1.5 text-xs text-agent-foreground">
@@ -334,10 +360,10 @@ export function PortableSettingsPanel() {
               onChange={(event) => setIncludeSecrets(event.target.checked)}
               data-testid="portable-include-secrets"
             />
-            包含 API Key
+            {t('Include API keys')}
           </label>
           <p className="text-[11px] leading-relaxed text-agent-muted-foreground">
-            勾选后文件等同于钥匙，不要发给别人，也不要提交到仓库。
+            {t('When checked, the file is as sensitive as a key. Do not send it to anyone or commit it to a repository.')}
           </p>
           <div className="flex gap-1.5">
             <button
@@ -347,14 +373,14 @@ export function PortableSettingsPanel() {
               className="h-7 rounded-full bg-agent-foreground px-2.5 text-xs text-agent-canvas disabled:opacity-60"
               data-testid="portable-export-confirm"
             >
-              {busy ? '导出中' : '保存文件'}
+              {busy ? t('Exporting') : t('Save file')}
             </button>
             <button
               type="button"
               onClick={cancel}
               className="h-7 rounded-full px-2.5 text-xs text-agent-muted-foreground hover:bg-agent-foreground/5"
             >
-              取消
+              {t('Cancel')}
             </button>
           </div>
         </fieldset>
@@ -362,14 +388,16 @@ export function PortableSettingsPanel() {
 
       {mode === 'export-chats' && (
         <fieldset className="space-y-1.5" data-testid="portable-export-chats-form">
-          <legend className="text-xs font-medium text-agent-foreground">导出哪些对话</legend>
+          <legend className="text-xs font-medium text-agent-foreground">{t('Chats to export')}</legend>
           <p className="text-[11px] leading-relaxed text-agent-muted-foreground">
-            这些对话所属的项目会一起写进文件，只保留名称和目录位置，不打包目录里的文件。
+            {t(
+              'The projects these chats belong to are written into the file too, keeping only their names and directory locations. Files in the directories are not packaged.',
+            )}
           </p>
           {busy && chatRows.length === 0 ? (
-            <p className="text-xs text-agent-muted-foreground">正在读取对话…</p>
+            <p className="text-xs text-agent-muted-foreground">{t('Loading chats…')}</p>
           ) : chatRows.length === 0 ? (
-            <p className="text-xs text-agent-muted-foreground">还没有对话。</p>
+            <p className="text-xs text-agent-muted-foreground">{t('No chats yet.')}</p>
           ) : (
             <div className="max-h-48 space-y-1 overflow-y-auto">
               <label className="flex items-center gap-1.5 text-xs text-agent-foreground">
@@ -381,7 +409,7 @@ export function PortableSettingsPanel() {
                   }}
                   data-testid="portable-chats-all"
                 />
-                全部（{chatRows.length}）
+                {t('All ({count})', { count: chatRows.length })}
               </label>
               {chatRows.map((row) => (
                 <label key={row.id} className="flex items-center gap-1.5 text-xs text-agent-foreground">
@@ -404,14 +432,14 @@ export function PortableSettingsPanel() {
               className="h-7 rounded-full bg-agent-foreground px-2.5 text-xs text-agent-canvas disabled:opacity-60"
               data-testid="portable-export-chats-confirm"
             >
-              {busy ? '导出中' : '保存文件'}
+              {busy ? t('Exporting') : t('Save file')}
             </button>
             <button
               type="button"
               onClick={cancel}
               className="h-7 rounded-full px-2.5 text-xs text-agent-muted-foreground hover:bg-agent-foreground/5"
             >
-              取消
+              {t('Cancel')}
             </button>
           </div>
         </fieldset>
@@ -428,14 +456,14 @@ export function PortableSettingsPanel() {
               className="h-7 rounded-full bg-agent-foreground px-2.5 text-xs text-agent-canvas disabled:opacity-60"
               data-testid="portable-import-chat-confirm"
             >
-              {busy ? '导入中' : '导入对话'}
+              {busy ? t('Importing') : t('Import chats')}
             </button>
             <button
               type="button"
               onClick={cancel}
               className="h-7 rounded-full px-2.5 text-xs text-agent-muted-foreground hover:bg-agent-foreground/5"
             >
-              取消
+              {t('Cancel')}
             </button>
           </div>
         </div>
@@ -443,7 +471,7 @@ export function PortableSettingsPanel() {
 
       {mode === 'import' && preview && (
         <fieldset className="space-y-1.5" data-testid="portable-import-form">
-          <legend className="text-xs font-medium text-agent-foreground">导入哪些段</legend>
+          <legend className="text-xs font-medium text-agent-foreground">{t('Sections to import')}</legend>
           <p className="text-[11px] leading-relaxed text-agent-muted-foreground">{describeImport(preview)}</p>
           {preview.sections.map((section) => (
             <label key={section.id} className="flex items-center gap-1.5 text-xs text-agent-foreground">
@@ -465,14 +493,14 @@ export function PortableSettingsPanel() {
               className="h-7 rounded-full bg-agent-foreground px-2.5 text-xs text-agent-canvas disabled:opacity-60"
               data-testid="portable-import-confirm"
             >
-              {busy ? '导入中' : '导入配置'}
+              {busy ? t('Importing') : t('Import config')}
             </button>
             <button
               type="button"
               onClick={cancel}
               className="h-7 rounded-full px-2.5 text-xs text-agent-muted-foreground hover:bg-agent-foreground/5"
             >
-              取消
+              {t('Cancel')}
             </button>
           </div>
         </fieldset>

package/src/components/settings/PythonRunnerSettingsPanel.tsx

@@ -1,5 +1,6 @@
 import { useEffect, useState } from 'react';
 import { LuCodeXml } from 'react-icons/lu';
+import { t } from '@/i18n';
 import {
   getElectronBridge,
   type PythonRunnerSnapshot,
@@ -72,33 +73,35 @@ export function PythonRunnerSettingsPanel() {
 
   const actionLabel =
     source === 'local'
-      ? '使用此 Python'
+      ? t('Use this Python')
       : source === 'url'
-        ? '从此地址下载'
-        : '下载默认运行器';
+        ? t('Download from this URL')
+        : t('Download default runner');
   const phaseLabel =
     snapshot.phase === 'verifying'
-      ? '正在校验'
+      ? t('Verifying')
       : snapshot.phase === 'extracting'
-        ? '正在解压'
-        : '正在下载';
+        ? t('Extracting')
+        : t('Downloading');
 
   return (
     <section className="space-y-2" data-testid="settings-section-python-runner">
       <h2 className="flex items-center gap-1.5 text-xs font-semibold text-agent-foreground">
         <LuCodeXml className="h-3.5 w-3.5 text-agent-muted-foreground" />
-        Python 代码运行器
+        {t('Python code runner')}
       </h2>
       <div className="space-y-3 rounded-agent-md border border-agent-border bg-agent-card p-3 text-xs">
         <p className="leading-relaxed text-agent-muted-foreground">
-          run_code 使用独立的 Python 解释器。下载和配置不会阻塞聊天，变更在重启应用后生效。
+          {t(
+            'run_code uses a separate Python interpreter. Downloading and configuring it does not block chat. Changes take effect after you restart the app.',
+          )}
         </p>
 
         <div className="flex flex-wrap gap-3">
           {([
-            ['default', '默认地址'],
-            ['url', '自定义地址'],
-            ['local', '本地 Python'],
+            ['default', 'Default URL'],
+            ['url', 'Custom URL'],
+            ['local', 'Local Python'],
           ] as const).map(([value, label]) => (
             <label key={value} className="flex items-center gap-1.5 text-agent-foreground">
               <input
@@ -109,7 +112,7 @@ export function PythonRunnerSettingsPanel() {
                 disabled={busy}
                 onChange={() => setSource(value)}
               />
-              {label}
+              {t(label)}
             </label>
           ))}
         </div>
@@ -131,7 +134,7 @@ export function PythonRunnerSettingsPanel() {
               onChange={(event) => setUrl(event.target.value)}
             />
             <p className="text-agent-destructive">
-              自定义地址不会校验文件完整性，请仅使用可信来源。
+              {t('Custom URLs are not checked for file integrity. Use only trusted sources.')}
             </p>
           </div>
         ) : null}
@@ -142,7 +145,7 @@ export function PythonRunnerSettingsPanel() {
               type="text"
               value={localPath}
               disabled={busy}
-              placeholder="Python 可执行文件的绝对路径"
+              placeholder={t('Absolute path to the Python executable')}
               className="h-8 min-w-0 flex-1 rounded-agent-sm border border-agent-border bg-agent-canvas px-2 text-agent-foreground outline-none focus:border-agent-foreground/40"
               onChange={(event) => setLocalPath(event.target.value)}
             />
@@ -152,7 +155,7 @@ export function PythonRunnerSettingsPanel() {
               className="h-8 shrink-0 rounded-agent-sm border border-agent-border px-3 text-agent-foreground hover:bg-agent-foreground/5 disabled:opacity-50"
               onClick={chooseLocal}
             >
-              选择…
+              {t('Choose…')}
             </button>
           </div>
         ) : null}
@@ -178,7 +181,7 @@ export function PythonRunnerSettingsPanel() {
                 className="text-agent-foreground hover:underline"
                 onClick={() => runner && update(runner.cancel())}
               >
-                取消
+                {t('Cancel')}
               </button>
             </div>
           </div>
@@ -203,7 +206,7 @@ export function PythonRunnerSettingsPanel() {
                 className="h-8 rounded-agent-sm bg-agent-foreground px-3 font-medium text-agent-canvas hover:opacity-90"
                 onClick={() => void runner?.restart()}
               >
-                重启应用
+                {t('Restart app')}
               </button>
             ) : null}
           </div>
@@ -218,11 +221,11 @@ export function PythonRunnerSettingsPanel() {
           </p>
         ) : null}
         {snapshot.restartRequired ? (
-          <p className="font-medium text-agent-foreground">已保存，重启应用后生效。</p>
+          <p className="font-medium text-agent-foreground">{t('Saved. Takes effect after you restart the app.')}</p>
         ) : null}
         {snapshot.activeRunner ? (
           <p className="break-all text-agent-muted-foreground">
-            当前会话：{snapshot.activeRunner}
+            {t('Current session: {runner}', { runner: snapshot.activeRunner })}
           </p>
         ) : null}
       </div>

package/src/components/settings/SecuritySettingsPanel.tsx

@@ -1,5 +1,6 @@
 import { useCallback, useEffect, useState } from 'react';
 import { LuLoaderCircle, LuShieldCheck } from 'react-icons/lu';
+import { t } from '@/i18n';
 import { isElectron } from '@/lib/electron-bridge';
 import {
   getSidecarSandboxPosture,
@@ -23,44 +24,52 @@ type PostureReason = SidecarSandboxPosture['reason'];
 
 /** 收容失败、已拒绝启动（告警行首句）。 */
 const REFUSED_REASON_TEXT: Partial<Record<PostureReason, string>> = {
-  platform_unsupported: '当前平台没有可用的进程沙箱后端',
-  seatbelt_missing: '未找到 /usr/bin/sandbox-exec',
-  profile_failed: '沙箱配置（Seatbelt profile）生成失败',
-  wrap_failed: 'Linux 进程沙箱（bwrap / Landlock）未能包住 sidecar',
-  helper_missing: '未找到 win-spawn-helper.exe',
+  platform_unsupported: 'No process sandbox backend is available on this platform',
+  seatbelt_missing: '/usr/bin/sandbox-exec not found',
+  profile_failed: 'Failed to generate the sandbox configuration (Seatbelt profile)',
+  wrap_failed: 'The Linux process sandbox (bwrap / Landlock) could not wrap the sidecar',
+  helper_missing: 'win-spawn-helper.exe not found',
 };
 
 /** 手动关闭原因的中文说明（中性行，不告警）。 */
 const OPT_OUT_REASON_TEXT: Partial<Record<PostureReason, string>> = {
-  disabled_by_option: '已通过 sandbox: false 关闭',
-  disabled_by_env: '已通过 STEERABLE_SIDECAR_SANDBOX=0 关闭',
+  disabled_by_option: 'Turned off with sandbox: false',
+  disabled_by_env: 'Turned off with STEERABLE_SIDECAR_SANDBOX=0',
 };
 
 function activeHeadline(backend: SidecarSandboxPosture['backend']): string {
   switch (backend) {
     case 'seatbelt':
-      return 'Seatbelt · 部分强制';
+      return t('Seatbelt · partial enforcement');
     case 'bwrap':
-      return 'bwrap · 部分强制';
+      return t('bwrap · partial enforcement');
     case 'landlock':
-      return 'Landlock · 部分强制';
+      return t('Landlock · partial enforcement');
     case 'windows-restricted-token':
-      return 'Windows 受限令牌 · 部分强制';
+      return t('Windows restricted token · partial enforcement');
     case 'none':
-      return '未沙箱';
+      return t('Not sandboxed');
   }
 }
 
 function activeBody(backend: SidecarSandboxPosture['backend']): string {
   switch (backend) {
     case 'seatbelt':
-      return 'sidecar 进程在 macOS Seatbelt 下运行：写入限制在 ~/.steerable 与临时目录。远程主机的出站网络只能按端口限制（Seatbelt 不识别主机名），故记为「部分」而非「完全」。';
+      return t(
+        'The sidecar process runs under macOS Seatbelt: writes are limited to ~/.steerable and the temp directory. Outbound network to remote hosts can only be limited by port (Seatbelt does not recognize host names), so this is recorded as "partial" rather than "full".',
+      );
     case 'bwrap':
-      return 'sidecar 进程在 bubblewrap 下运行：写入限制在 ~/.steerable 与临时目录。出站网络保持开启（sidecar 要访问 LLM），故记为「部分」。';
+      return t(
+        'The sidecar process runs under bubblewrap: writes are limited to ~/.steerable and the temp directory. Outbound network stays open (the sidecar needs to reach the LLM), so this is recorded as "partial".',
+      );
     case 'landlock':
-      return 'sidecar 进程在 Linux Landlock 下运行：写入限制在 ~/.steerable 与临时目录。出站网络保持开启（sidecar 要访问 LLM），故记为「部分」。';
+      return t(
+        'The sidecar process runs under Linux Landlock: writes are limited to ~/.steerable and the temp directory. Outbound network stays open (the sidecar needs to reach the LLM), so this is recorded as "partial".',
+      );
     case 'windows-restricted-token':
-      return 'sidecar 进程在 Windows 受限令牌 + Job Object 下运行：写入限制在 ~/.steerable。网络策略未由 helper 强制（无 WFP），故记为「部分」。';
+      return t(
+        'The sidecar process runs under a Windows restricted token + Job Object: writes are limited to ~/.steerable. The helper does not enforce network policy (no WFP), so this is recorded as "partial".',
+      );
     case 'none':
       return '';
   }
@@ -71,20 +80,24 @@ function EgressPostureRow({ egress }: { egress: EgressPosture }) {
   if (egress.mode === 'per-host-proxy') {
     return (
       <p className="text-[11px] text-agent-muted-foreground">
-        出网管控：按主机白名单代理生效中；白名单外的请求会请你逐项放行（仅本次会话有效）。
+        {t(
+          'Egress control: the per-host allowlist proxy is active. Requests outside the allowlist ask you to allow them one by one (valid for this session only).',
+        )}
       </p>
     );
   }
   if (egress.mode === 'disabled') {
     return (
       <p className="text-[11px] text-agent-muted-foreground">
-        出网管控：已关闭{egress.reason ? ` — ${egress.reason}` : ''}。
+        {t('Egress control: off{reason}.', { reason: egress.reason ? ` — ${egress.reason}` : '' })}
       </p>
     );
   }
   return (
     <p className="text-[11px] text-amber-600 dark:text-amber-400">
-      出网管控：已退回端口级（较弱的管控粒度）{egress.reason ? ` — ${egress.reason}` : ''}。
+      {t('Egress control: fell back to port level (coarser control){reason}.', {
+        reason: egress.reason ? ` — ${egress.reason}` : '',
+      })}
     </p>
   );
 }
@@ -103,12 +116,12 @@ export function SecuritySettingsPanel() {
       const res = await getSidecarSandboxPosture();
       setPosture(res.posture ?? null);
       setEgress(res.egress ?? null);
-      if (!res.posture) setUnavailable('无法读取沙箱状态');
+      if (!res.posture) setUnavailable(t('Could not read sandbox status'));
     } catch {
       // 503 = sidecar 未就绪且没有收容失败记录。
       setPosture(null);
       setEgress(null);
-      setUnavailable('sidecar 未就绪 — 无法读取沙箱状态');
+      setUnavailable(t('Sidecar not ready — could not read sandbox status'));
     } finally {
       setLoading(false);
     }
@@ -125,35 +138,46 @@ export function SecuritySettingsPanel() {
     <div className="bg-agent-muted/30 border border-agent-border/60 rounded-agent-md p-2.5 space-y-2">
       <h4 className="text-xs font-semibold text-agent-foreground flex items-center gap-1.5">
         <LuShieldCheck className="h-3.5 w-3.5 text-agent-muted-foreground" />
-        Sidecar 进程沙箱
+        {t('Sidecar process sandbox')}
       </h4>
 
       {!isElectron() ? (
-        <p className="text-[11px] text-agent-muted-foreground">需要在桌面客户端中打开</p>
+        <p className="text-[11px] text-agent-muted-foreground">{t('Open this in the desktop app')}</p>
       ) : loading ? (
         <div className="flex items-center gap-2 py-2 text-xs text-agent-muted-foreground">
           <LuLoaderCircle className="h-3.5 w-3.5 animate-spin" />
-          读取沙箱状态...
+          {t('Loading sandbox status...')}
         </div>
       ) : unavailable ? (
         <p className="text-[11px] text-agent-muted-foreground">{unavailable}</p>
       ) : posture && refusedReason ? (
         <div className="rounded-agent-md border border-agent-destructive/20 bg-agent-destructive/10 p-2.5 text-xs text-agent-destructive space-y-1.5">
-          <p className="font-medium">无法收容、已拒绝启动 — {refusedReason}。</p>
+          <p className="font-medium">
+            {t('Cannot contain the process, so startup was refused — {reason}.', {
+              reason: t(refusedReason),
+            })}
+          </p>
           <p>
-            持有服务商 API 密钥的 sidecar 进程没有启动，因此也没有在无隔离状态下运行。
-            唯一裸跑入口是显式设置 STEERABLE_SIDECAR_SANDBOX=0。
+            {t(
+              'The sidecar process that holds the provider API keys did not start, so it is not running without isolation either.',
+            )}{' '}
+            {t('The only way to run it unsandboxed is to set STEERABLE_SIDECAR_SANDBOX=0 explicitly.')}
           </p>
           <p>
-            如需隔离，请安装对应平台的收容后端（macOS Seatbelt、Linux bwrap/Landlock、Windows
-            win-spawn-helper），或将本应用运行在容器内。
+            {t(
+              'For isolation, install the containment backend for your platform (macOS Seatbelt, Linux bwrap/Landlock, Windows win-spawn-helper), or run this app in a container.',
+            )}
           </p>
         </div>
       ) : posture && optOutReason ? (
         <div className="rounded-agent-md border border-agent-border/60 bg-agent-canvas p-2.5 text-xs text-agent-muted-foreground space-y-1.5">
-          <p className="font-medium text-agent-foreground">已手动关闭 — {optOutReason}。</p>
+          <p className="font-medium text-agent-foreground">
+            {t('Turned off manually — {reason}.', { reason: t(optOutReason) })}
+          </p>
           <p>
-            sidecar 进程（持有服务商 API 密钥）无操作系统隔离运行。如需恢复，移除该设置并重启应用。
+            {t(
+              'The sidecar process (which holds the provider API keys) runs without OS isolation. To restore it, remove the setting and restart the app.',
+            )}
           </p>
         </div>
       ) : posture ? (