@zq-silk/yui 2.7.1 → 2.8.1

package/dist/storage/maintenanceCaller.js

@@ -0,0 +1,69 @@
+import { join } from "node:path";
+import Database from "../sqlite/driver.js";
+import { hasManagedIdentity } from "../runtime/managedIdentity.js";
+import { ManagedRuntimeDriftError, requireManagedGlobalCaller } from "../runtime/managedCaller.js";
+import { sessionCallerEnvironment } from "../runtime/sessionCaller.js";
+import { validateStoredRecord } from "./recordValidation.js";
+import { inspectSqliteSchema, storageMinorUpgradePlan, validateSqliteSchemaObjects } from "./sqliteSchema.js";
+import { CURRENT_DATABASE_FILENAME } from "./storageSchema.js";
+/**
+ * Maintenance must authenticate before migration, without opening a current-only
+ * business Store. The declared 1.x migrations preserve these Role/Session
+ * envelopes and physical tables. Read only those records in one SQLite snapshot;
+ * this grants no old-format business reads, writes or implicit migration.
+ */
+export function maintenanceCallerEnvironment(home, env, operatorOnly = true) {
+    if (!hasManagedIdentity(env))
+        return env;
+    const db = new Database(join(home, CURRENT_DATABASE_FILENAME), { readonly: true, fileMustExist: true });
+    try {
+        return db.transaction(() => {
+            const schema = inspectSqliteSchema(db);
+            if (storageMinorUpgradePlan(schema.currentVersion) === null) {
+                throw new ManagedRuntimeDriftError("Maintenance cannot authenticate an unsupported Home storage version.");
+            }
+            validateSqliteSchemaObjects(db);
+            const read = (table, where, params) => {
+                const row = db.prepare(`SELECT payload FROM ${table} WHERE ${where}`).get(...params);
+                if (!row)
+                    return null;
+                const value = JSON.parse(row.payload);
+                validateStoredRecord(table, value);
+                return value;
+            };
+            const registry = {
+                getGlobalRole: (name) => read("global_roles", "name=?", [name]),
+                getGlobalRoleSessionSet: (name) => read("global_role_session_sets", "name=?", [name]),
+                getTaskRoleSessionSet: (task, role) => read("role_session_sets", "task_id=? AND role_name=?", [task, role]),
+                listRuntimeSessionCandidates: () => {
+                    // Read canonical sets, not a derived index that could be stale. Only
+                    // active bindings participate, exactly as in normal caller discovery.
+                    const rows = db.prepare(`
+            SELECT 'global_role_session_sets' AS source, payload FROM global_role_session_sets
+            UNION ALL SELECT 'role_session_sets' AS source, payload FROM role_session_sets
+          `).all();
+                    return rows.flatMap(row => {
+                        const set = JSON.parse(row.payload);
+                        validateStoredRecord(row.source, set);
+                        const session = set.sessions[set.activeAgentId];
+                        if (!session || session.status !== "active")
+                            return [];
+                        return [{ owner: set.owner, agentId: session.agentId, adapterId: session.adapterId,
+                                nativeSessionId: session.nativeSessionId, sessionUpdatedAt: set.updatedAt }];
+                    });
+                }
+            };
+            const current = sessionCallerEnvironment(registry, env);
+            if (current.YUI_SESSION_SCOPE !== "global" || current.YUI_ROLE !== "operator") {
+                if (!operatorOnly)
+                    return current; // Doctor keeps normal scoped authorization below.
+                throw new ManagedRuntimeDriftError("Home maintenance requires the user or current Operator, not a Task or custom Role.");
+            }
+            requireManagedGlobalCaller(registry, current);
+            return current;
+        })();
+    }
+    finally {
+        db.close();
+    }
+}

package/dist/storage/sqliteSchema.js

@@ -86,6 +86,16 @@ const MINOR_UPGRADES = Object.freeze([{
         // Additive handling receipts on canonical Messages and wakes. Never invent
         // historical processing or Provider acceptance; existing records stay intact.
         sql: ""
+    }, {
+        fromVersion: "1.7",
+        toVersion: "1.8",
+        name: "model-management-connection",
+        introducedIn: "next",
+        sourceChecksum: CURRENT_SCHEMA_CHECKSUM,
+        targetChecksum: CURRENT_SCHEMA_CHECKSUM,
+        // Optional non-secret connection references. Existing Homes remain unconfigured;
+        // never infer local credentials or adopt an existing external service.
+        sql: ""
     }]);
 export function storageMinorUpgradePlan(from) {
     if (from === CURRENT_STORAGE_VERSION)
@@ -109,7 +119,7 @@ function objects(db) {
     WHERE name NOT GLOB 'sqlite_*' ORDER BY type,name`).all();
 }
 let expectedObjects;
-function validateSchemaObjects(db) {
+export function validateSqliteSchemaObjects(db) {
     if (expectedObjects === undefined) {
         const reference = new Database(":memory:");
         try {
@@ -151,7 +161,7 @@ export function inspectSqliteSchema(db) {
         throw new SqliteSchemaError("baseline checksum does not match its version.");
     }
     if (version === CURRENT_STORAGE_VERSION)
-        validateSchemaObjects(db);
+        validateSqliteSchemaObjects(db);
     return {
         currentVersion: version, currentChecksum: row.checksum,
         targetVersion: CURRENT_STORAGE_VERSION, targetChecksum: CURRENT_SCHEMA_CHECKSUM,

package/dist/storage/sqliteStore.js

@@ -43,7 +43,7 @@ import { consumePendingBatch, mailboxTargetKey, validateWorkMailbox } from "../c
 import { enqueueDurableOperatorFact } from "../scheduler/operatorEvent.js";
 import { validateDurableJob, validDurableJobTransition } from "../job/durableJob.js";
 import { validateGlobalRoleMessage } from "../message/message.js";
-import { assertInboxReceiptPreserved } from "../message/inboxReceipt.js";
+import { assertInboxOriginalPreserved, assertInboxReceiptPreserved } from "../message/inboxReceipt.js";
 import { validatePluginIntent, validatePluginIntentFailure } from "../plugins/pluginIntent.js";
 import { validatePluginValidation } from "../plugins/pluginPackage.js";
 import { generateHomeIdentity, validateHomeIdentity } from "../repository/homeIdentity.js";
@@ -1027,8 +1027,8 @@ export class SqliteTaskStore {
         this.#mutate(() => {
             const existing = this.#db.prepare("SELECT payload FROM global_role_messages WHERE name = ? AND message_id = ?")
                 .get(message.roleName, message.id);
-            assertInboxReceiptPreserved(existing === undefined ? undefined
-                : this.#parse(existing.payload).inbox, message.inbox);
+            assertInboxOriginalPreserved(existing === undefined ? undefined
+                : this.#parse(existing.payload), message);
             const seq = this.#globalMessageSequence(message.id);
             const result = this.#db.prepare(`UPDATE global_role_messages SET seq = ?, payload = ? WHERE name = ? AND message_id = ?`).run(seq, this.#recordJson("global_role_messages", message), message.roleName, message.id);
             if (result.changes === 0) {
@@ -2053,8 +2053,8 @@ export class SqliteTaskStore {
         this.#mutate(() => {
             const existing = this.#db.prepare("SELECT payload FROM messages WHERE task_id = ? AND message_id = ?")
                 .get(taskId, message.id);
-            assertInboxReceiptPreserved(existing === undefined ? undefined
-                : this.#parse(existing.payload).inbox, message.inbox);
+            assertInboxOriginalPreserved(existing === undefined ? undefined
+                : this.#parse(existing.payload), message);
             const result = this.#db.prepare(`UPDATE messages SET payload = ? WHERE task_id = ? AND message_id = ?`).run(this.#recordJson("messages", message), taskId, message.id);
             if (result.changes !== 1) {
                 throw new StorageRecordError(`Message does not exist: ${taskId}/${message.id}`);
@@ -2170,6 +2170,10 @@ export class SqliteTaskStore {
         this.#mutate(() => {
             const existing = this.#db.prepare("SELECT payload FROM task_wakes WHERE task_id = ? AND wake_id = ?")
                 .get(taskId, wake.id);
+            const previous = existing === undefined ? undefined : this.#parse(existing.payload);
+            if (previous !== undefined && !isDeepStrictEqual(previous.refs, wake.refs)) {
+                throw new StorageRecordError("A notification window's original revision references are immutable.");
+            }
             assertInboxReceiptPreserved(existing === undefined ? undefined
                 : this.#parse(existing.payload).inbox, wake.inbox);
             const seq = this.#idSequence(wake.id, "taskWake");

package/dist/storage/storageVersions.js

@@ -1,4 +1,4 @@
-export const CURRENT_STORAGE_VERSION = "1.7";
+export const CURRENT_STORAGE_VERSION = "1.8";
 export const MIN_SUPPORTED_STORAGE_VERSION = "1.0";
 export const STORAGE_FORMAT = "yui-home";
 export function isStorageVersion(value) {

package/dist/storage/taskStore.js

@@ -1,5 +1,6 @@
 import { lstatSync, mkdirSync, realpathSync } from "node:fs";
 import { homedir } from "node:os";
+import { validateModelConnection } from "../models/modelManagementConfig.js";
 import { basename, dirname, join, resolve } from "node:path";
 import { isDeepStrictEqual } from "node:util";
 import { resolveTimeZone } from "../config/timeZone.js";
@@ -117,6 +118,7 @@ export function validateYuiConfig(config) {
     try {
         const optionalFields = [
             "defaultAgent",
+            "modelManagement",
             "defaultWorkspace",
             "timeZone",
             "currentTaskId",
@@ -146,6 +148,8 @@ export function validateYuiConfig(config) {
         }
         reconciliationIntervalMilliseconds(config.reconciliationIntervalSeconds);
         resolveTimeZone(config.timeZone);
+        if (config.modelManagement !== undefined)
+            validateModelConnection(config.modelManagement);
         if (config.review !== undefined)
             validateReviewConfig(config.review);
         resolveResourcesGcMode(config.resourcesGcMode);

package/dist/task/completionReadiness.js

@@ -7,7 +7,7 @@ export function pendingCompletionMessages(store, taskId) {
     const mailbox = store.getWorkMailbox({ kind: "role", taskId, roleName: "leader" });
     const refs = [...(mailbox?.pending?.refs ?? [])];
     for (const wake of store.listTaskWakes(taskId)) {
-        if (wake.inbox !== undefined && wake.inbox.ack === undefined)
+        if (wake.inbox?.ack === undefined)
             refs.push(...(wake.refs ?? []));
     }
     const processing = mailbox?.processing;
@@ -41,8 +41,8 @@ export function projectCompletionReadiness(facts) {
         blockers.push({
             code: "pending-user-input",
             ref: ref("message", message.id),
-            reason: `User message ${message.id} is still awaiting Leader delivery.`,
-            fix: `finish the current native turn, read the next notification and message ${message.id}, then reconsider completion`
+            reason: `User message ${message.id} is still awaiting Leader delivery or explicit handling.`,
+            fix: `read message ${message.id} and its inbox window; claim and acknowledge after handling, or finish this turn if delivery is still pending`
         });
     }
     // A pending/running Task-final Review must be resumed or blocked first.

package/dist/web/assets/assetManifest.js

@@ -3,6 +3,7 @@
 // fonts and xterm from their packages; the shell links them in this order.
 import { readFileSync } from "node:fs";
 import { createRequire } from "node:module";
+import { createHash } from "node:crypto";
 import { APP_SCRIPT, CLIENT_MODULES } from "./client/index.js";
 import { THEME_BOOTSTRAP_SCRIPT } from "./client/lib/theme.js";
 import { FONT_WOFF2_BASE64 } from "./fontData.js";
@@ -22,8 +23,33 @@ export const WEB_ASSETS = Object.freeze({
     "/assets/vendor/xterm.css": vendorAsset("@xterm/xterm/css/xterm.css", CSS)
 });
 export { DASHBOARD_HTML };
-export function findWebAsset(pathname) {
-    return WEB_ASSETS[pathname] ?? null;
+// One content revision covers the complete import graph: changing a dependency
+// invalidates its importers too. Only these static assets may be cached.
+export const WEB_ASSET_VERSION = createHash("sha256")
+    .update(JSON.stringify(WEB_ASSETS)).digest("hex").slice(0, 20);
+function versionReferences(body) {
+    return body.replace(/\/assets\/[\w./-]+/g, path => WEB_ASSETS[path] ? `${path}?v=${WEB_ASSET_VERSION}` : path);
+}
+const VERSIONED_ASSETS = Object.fromEntries(Object.entries(WEB_ASSETS).map(([path, asset]) => [path, asset.encoding === "base64" ? asset :
+        { ...asset, body: versionReferences(asset.body) }]));
+export function findWebAsset(pathname, version) {
+    if (version && version !== WEB_ASSET_VERSION)
+        return null;
+    return (version ? VERSIONED_ASSETS : WEB_ASSETS)[pathname] ?? null;
+}
+export function prepareWebDocument(html, entry) {
+    const modules = new Set();
+    function visit(path) {
+        if (modules.has(path) || !WEB_ASSETS[path])
+            return;
+        modules.add(path);
+        for (const match of WEB_ASSETS[path].body.matchAll(/^import (?:.*? from )?["'](\/assets\/[^"']+)["'];/gm)) {
+            visit(match[1]);
+        }
+    }
+    visit(entry);
+    const preload = [...modules].map(path => `<link rel="modulepreload" href="${path}?v=${WEB_ASSET_VERSION}">`).join("\n");
+    return versionReferences(html).replace("</head>", `${preload}\n</head>`);
 }
 function vendorAsset(specifier, contentType) {
     return {

package/dist/web/assets/client/app/manage.js

@@ -0,0 +1,6 @@
+export const MANAGE_SCRIPT = String.raw `
+import "/assets/js/app/settings.js";
+import "/assets/js/app/models.js";
+import { startManagement } from "/assets/js/layout/manageShell.js";
+startManagement();
+`;

package/dist/web/assets/client/app/models.js

@@ -0,0 +1,20 @@
+export const MODELS_SCRIPT = String.raw `
+import { api } from "/assets/js/lib/api.js";
+import { i18n, createManageShell, registerManagePage, navigateManage, readManageRoute } from "/assets/js/layout/manageShell.js";
+import { mountModels } from "/assets/js/views/models.js";
+const shell = createManageShell({ page: "models", t: i18n.t });
+const initial = readManageRoute(new URL(location.href));
+const page = mountModels(document.querySelector("#models-root"), {
+  t: i18n.t, locale: i18n.getLocale, api, route: initial,
+  navigate: next => navigateManage({ page: "models", ...next }),
+  onChange: flags => shell.setDirty({ providers: !!flags.provider, connection: !!flags.connection })
+});
+registerManagePage("models", { show: next => page.show(next) });
+window.setInterval(() => page.updateFreshness(), 1000);
+document.addEventListener("visibilitychange", () => { if (!document.hidden) page.updateFreshness(); });
+i18n.subscribe(() => page.translate());
+window.addEventListener("beforeunload", event => {
+  if (!page.dirty()) return;
+  event.preventDefault(); event.returnValue = "";
+});
+`;

package/dist/web/assets/client/app/settings.js

@@ -1,15 +1,42 @@
 export const SETTINGS_SCRIPT = String.raw `
+// Settings controller in the shared management document. Sections stay
+// mounted across model/settings navigation. Leaving the document protects
+// unsaved server groups; Skills guard their own bindings.
 import { h } from "/assets/js/lib/dom.js";
 import { requestJson, submitMutation } from "/assets/js/lib/api.js";
-import { createI18n } from "/assets/js/lib/i18n.js";
 import { createThemeController } from "/assets/js/lib/theme.js";
 import { clearPreference, readSessionAccessMode, writeSessionAccessMode } from "/assets/js/lib/prefs.js";
+import { i18n, createManageShell, pageSections, registerManagePage, navigateManage } from "/assets/js/layout/manageShell.js";
 import { mountSkills } from "/assets/js/views/skills.js";
 
 const $ = selector => document.querySelector(selector);
-const i18n = createI18n($("#locale-select"));
 const t = i18n.t;
-mountSkills($("#skill-browser"), t);
+const SECTIONS = pageSections("settings");
+const dirtySections = { skills: false, server: false };
+function readSection() {
+  const section = new URLSearchParams(window.location.search).get("section");
+  return SECTIONS.includes(section) ? section : SECTIONS[0];
+}
+let section = readSection();
+const shell = createManageShell({ page: "settings", t, onNavigate: navigate });
+function showSection(next) {
+  section = next;
+  document.querySelectorAll("#settings-root > .manage-section[data-section]").forEach(panel => { panel.hidden = panel.dataset.section !== next; });
+  shell.set(next);
+}
+function navigate(next) {
+  navigateManage({ page: "settings", section: next });
+}
+function markDirty(name, value) {
+  if (dirtySections[name] === value) return;
+  dirtySections[name] = value;
+  shell.setDirty(dirtySections);
+}
+registerManagePage("settings", { show: next => showSection(next.section) });
+i18n.subscribe(() => shell.render());
+showSection(section);
+const skills = mountSkills($("#skill-browser"), t, { heading: false, onDirty: value => markDirty("skills", value) });
+i18n.subscribe(() => skills?.translate());
 const theme = createThemeController($("#theme-options"), t);
 i18n.subscribe(() => theme.render());
 const access = $("#access-mode");
@@ -48,8 +75,8 @@ function inputValue(field, control) {
 }
 
 function editor(field, group, state) {
-  const labelText = t("settings.field." + field.key, field.label);
-  const label = h("label.field", null, h("span", null, labelText));
+  const fieldLabel = () => h("span", { "data-i18n": "settings.field." + field.key, "data-i18n-fallback": field.label }, t("settings.field." + field.key, field.label));
+  const label = h("label.field", null, fieldLabel());
   let control;
   if (field.kind === "boolean" || field.choices && field.choices.length) {
     const values = field.kind === "boolean" ? ["true", "false"] : field.choices;
@@ -74,6 +101,7 @@ function editor(field, group, state) {
   function mark() {
     control.disabled = reset.checked || unavailable;
     state.dirty = state.editors.some(e => e.changed());
+    markDirty("server", groups.some(g => g.dirty));
     state.save.disabled = !state.dirty || state.pending || state.capabilityPending || state.unknown;
     if (!state.unknown && !state.pending) state.receipt.textContent = state.dirty ? t("settings.unsaved") : "";
   }
@@ -102,7 +130,7 @@ function editor(field, group, state) {
       control.value = value;
       control.disabled = reset.checked || unavailable;
       listen();
-      label.replaceChildren(h("span", null, labelText), control);
+      label.replaceChildren(fieldLabel(), control);
       choiceActions.replaceChildren();
       if (choices.length && options.allowCustom && !unavailable) {
         const custom = h("button.btn", { type: "button" }, t("settings.custom"));
@@ -110,7 +138,7 @@ function editor(field, group, state) {
           const value = control.value;
           control = h("input", { value });
           control.disabled = reset.checked;
-          listen(); label.replaceChildren(h("span", null, labelText), control); choiceActions.replaceChildren();
+          listen(); label.replaceChildren(fieldLabel(), control); choiceActions.replaceChildren();
           control.focus();
         });
         choiceActions.append(custom);
@@ -153,9 +181,10 @@ function renderGroup(state, group) {
   const generation = state.renderGeneration = (state.renderGeneration || 0) + 1;
   state.group = group; state.editors = []; state.dirty = false; state.unknown = false;
   state.capabilityPending = false;
+  markDirty("server", groups.some(g => g.dirty));
   const form = h("form.settings-stack");
   const receipt = h("p.settings-receipt", { role: "status", "aria-live": "polite" });
-  const save = h("button.btn.btn-primary", { type: "submit", disabled: true }, t("settings.save"));
+  const save = h("button.btn.btn-primary", { type: "submit", disabled: true, "data-i18n": "settings.save" }, t("settings.save"));
   state.save = save; state.receipt = receipt;
   form.append(h("p", null, group.notice));
   const isRole = group.id.startsWith("role/");
@@ -172,7 +201,7 @@ function renderGroup(state, group) {
   const acknowledge = h("input", { type: "checkbox" });
   if (group.id.startsWith("role/") || group.id.startsWith("agent/")) form.append(h("label.settings-reset", null,
     acknowledge, t("settings.acknowledge")));
-  const compare = h("button.btn", { type: "button" }, t("settings.compare"));
+  const compare = h("button.btn", { type: "button", "data-i18n": "settings.compare" }, t("settings.compare"));
   compare.addEventListener("click", async () => {
     compare.disabled = true;
     try {
@@ -322,5 +351,8 @@ async function start(cursor) {
   } catch (error) { status.textContent = error.message; }
   finally { if (generation === searchGeneration) more.disabled = false; }
 }
+i18n.subscribe(() => {
+  more.textContent = t("settings.more");
+});
 void start();
 `;

package/dist/web/assets/client/i18n/en.js

@@ -3,6 +3,172 @@
 // domain vocabulary (statuses, owners, actions) keeps the exact product terms.
 // Placeholders such as {count} are filled by fill() in lib/format.
 export const EN = {
+    "models.subscriptionAuth": "Subscription",
+    "models.account": "Account",
+    "models.providerReadOnlyHelp": "Managed by its provider. Edit the configuration in the owning service.",
+    "models.readOnlyService": "Read-only connection. Configuration is managed by the running service.",
+    "models.window.5h": "5 hours",
+    "models.window.weekly": "Weekly",
+    "models.window.monthly": "Monthly",
+    "manage.nav": "Main navigation",
+    "manage.workbench": "Workbench",
+    "settings.section.preferences": "Preferences",
+    "settings.section.skills": "Skills",
+    "settings.section.server": "Agents & server",
+    "settings.hint.preferences": "Theme, language and workspace layout for this browser. Changes apply here immediately and are never sent to the server.",
+    "settings.hint.server": "Desired configuration for Yui, Roles, Agents and Profiles. Saving targets later launches; it is not proof that existing Sessions adopted it.",
+    "models.title": "Models",
+    "models.scope": "Manage the metabridge and CLIProxyAPI connection Yui reads. Saved configuration is not applied until metabridge is reloaded, and nothing here runs inference.",
+    "models.section.providers": "Access",
+    "models.section.catalog": "Model catalog",
+    "models.section.quota": "Quota",
+    "models.section.connection": "Model connection",
+    "models.openConnection": "Open model connection",
+    "models.connectionGroup.bridge": "metabridge",
+    "models.connectionGroup.cpa": "CLIProxyAPI (quota)",
+    "models.unsavedDraft": "Unsaved changes",
+    "models.applicationTitle": "Saving is not applying",
+    "models.column.provider": "Provider",
+    "models.column.baseUrl": "Base URL",
+    "models.column.prefix": "Prefix",
+    "models.column.route": "Route",
+    "models.column.state": "State",
+    "models.column.actions": "Actions",
+    "models.providerCount": "{shown} of {total} providers",
+    "models.noProviderMatches": "No provider matches these filters.",
+    "models.searchProviders": "Search name, ID, URL or prefix",
+    "models.searchCatalog": "Search loaded model IDs",
+    "models.filter.route": "Filter by route",
+    "models.filter.state": "Filter by state",
+    "models.filter.source": "Filter by source",
+    "models.filter.all": "All",
+    "models.filter.enabled": "Enabled",
+    "models.filter.disabled": "Disabled",
+    "models.filter.readonly": "Read-only",
+    "models.catalogMatches": "{count} match",
+    "models.noCatalogMatches": "No loaded model matches. Load more pages to search further.",
+    "models.resetUnknown": "Reset time unknown",
+    "models.accountIdHelp": "Identifier derived by Yui from the upstream account; not an account name.",
+    "models.loading": "Loading…",
+    "models.loadFailed": "Could not read model configuration:",
+    "models.retry": "Retry",
+    "models.unavailable": "Model configuration is unavailable until it can be read.",
+    "models.unknown": "unknown",
+    "models.connected": "Connection configured",
+    "models.disconnected": "Not connected",
+    "models.application.unverified": "Application unverified",
+    "models.applicationHelp": "Saving here changes desired configuration only. Reload metabridge with its existing deployment flow to apply it; this page never restarts services, rewrites Codex configuration, switches Sessions or validates inference.",
+    "models.configurationError": "Bridge configuration problem:",
+    "models.unknownBlocked": "An earlier save has an unknown outcome. It will not be resent. Read current facts before making another change.",
+    "models.readFacts": "Read current facts",
+    "models.reconciledChanged": "Current facts read; configuration has changed since the uncertain save. Review it before saving again.",
+    "models.reconciledUnchanged": "Current facts read; no change is visible yet. The earlier save may still be unresolved — review before saving again.",
+    "models.agentSettings": "Agent and model selection stay in Settings; models are never imported automatically.",
+    "models.openSettings": "Open Settings",
+    "models.connection": "Connection",
+    "models.connectionHelp": "Paths name local files; secrets are read by the server and never shown here. Disconnecting stops nothing and deletes no credentials.",
+    "models.notConnected": "No connection is configured. Enter at least the metabridge URL.",
+    "models.connection.bridgeUrl": "metabridge URL (required)",
+    "models.connection.bridgeUrlHelp": "Base URL of the metabridge management endpoint.",
+    "models.connection.bridgeConfigFile": "metabridge configuration file",
+    "models.connection.bridgeConfigFileHelp": "Optional. Enables provider management through this local file.",
+    "models.connection.cpaUrl": "CLIProxyAPI URL",
+    "models.connection.cpaUrlHelp": "Optional. Needed with the management key file for quota refresh.",
+    "models.connection.managementKeyFile": "CPA management key file",
+    "models.connection.managementKeyFileHelp": "Path to a private file holding the management key. The key itself is never returned.",
+    "models.connection.catalogKeyFile": "Catalog key file",
+    "models.connection.catalogKeyFileHelp": "Optional. Independent from the management key.",
+    "models.saveConnection": "Save connection",
+    "models.disconnect": "Disconnect",
+    "models.disconnectConfirm": "Disconnect Yui from metabridge? Services keep running and credentials are not deleted.",
+    "models.discard": "Discard changes",
+    "models.bridgeUrlRequired": "The metabridge URL is required.",
+    "models.providers": "Providers",
+    "models.providersHelp": "Providers configured in metabridge. Official, subscription and unprefixed shared routes are read-only.",
+    "models.noProviders": "No providers are configured.",
+    "models.addProvider": "Add API-key provider",
+    "models.configFileRequired": "Set the metabridge configuration file in the connection to manage providers.",
+    "models.newProvider": "New provider",
+    "models.editProvider": "Edit",
+    "models.removeProvider": "Remove",
+    "models.removeConfirm": "Remove this provider from metabridge? Its file and credential are retained.",
+    "models.discardProvider": "Discard the provider being edited?",
+    "models.readOnly": "Read-only",
+    "models.noPrefix": "no prefix",
+    "models.enabled": "Enabled",
+    "models.disabled": "Disabled",
+    "models.credentialStored": "Credential stored",
+    "models.credentialMissing": "No credential",
+    "models.via.direct": "Direct",
+    "models.via.cpa": "Through CPA",
+    "models.via.unknown": "Unknown route",
+    "models.provider.name": "Name",
+    "models.provider.via": "Route",
+    "models.provider.viaDirectHelp": "metabridge calls the provider directly with this provider's API key.",
+    "models.provider.viaCpaHelp": "metabridge calls CLIProxyAPI. Use a CPA client inference key — not an upstream account key or the management key.",
+    "models.provider.baseUrl": "Base URL",
+    "models.provider.prefix": "Model prefix",
+    "models.provider.prefixHelp": "Explicit model namespace ending in /, e.g. mine/ for mine/model: 1–64 letters, digits, _ or -, then /.",
+    "models.prefixInvalid": "Prefix must be 1–64 letters, digits, _ or - followed by /, e.g. mine/.",
+    "models.provider.enabled": "Enabled",
+    "models.provider.apiKey": "API key",
+    "models.provider.apiKeyCpa": "CPA client inference key",
+    "models.provider.apiKeyNewHelp": "Required. Sent once on save and cleared; it is never shown again.",
+    "models.provider.apiKeyKeepHelp": "Leave empty to keep the stored credential; a new value replaces it.",
+    "models.provider.apiKeyMissingHelp": "No credential is stored. Enter one to set it.",
+    "models.apiKeyKeep": "Unchanged",
+    "models.createProvider": "Create provider",
+    "models.saveProvider": "Save provider",
+    "models.cancel": "Cancel",
+    "models.providerNewRequired": "Name, base URL, prefix and API key are required for a new provider.",
+    "models.providerRequired": "Name, base URL and a direct or CPA route are required.",
+    "models.saving": "Saving…",
+    "models.saved": "Saved. Not applied until metabridge reloads.",
+    "models.rejected": "Not saved; your draft is kept. If the configuration changed, read current facts and save again.",
+    "models.rereadChanged": "Current facts read; configuration has changed. Your draft is kept — review it against the new facts before saving.",
+    "models.rereadUnchanged": "Current facts read; configuration is unchanged. Your draft is kept.",
+    "models.unknownWrite": "Save outcome unknown; it will not be resent.",
+    "models.catalog": "Model catalog",
+    "models.catalogHelp": "Cached metabridge catalog. Source comes from the model ID namespace; it is not proof of account attribution.",
+    "models.catalogFailed": "Catalog read failed:",
+    "models.catalogNotQueried": "The catalog has not been queried yet. Refresh to read it from metabridge.",
+    "models.catalogEmpty": "The observation contains no models.",
+    "models.catalogItemsUnknown": "No models were observed; the catalog is unknown, not empty.",
+    "models.catalogCount": "Showing {shown} of {total}",
+    "models.catalogChanged": "The catalog changed while paging; showing the newest first page.",
+    "models.moreCatalog": "Load more models",
+    "models.refreshCatalog": "Refresh catalog",
+    "models.quota": "Subscription quota",
+    "models.quotaHelp": "Each source is read separately. Refresh is explicit and may contact the upstream billing service through the CPA extension; it never renews credentials, resets quota or runs inference.",
+    "models.source": "Source",
+    "models.source.factory": "Factory",
+    "models.source.command-code": "Command Code",
+    "models.refreshQuota": "Refresh quota",
+    "models.quotaNeedsCpa": "Quota refresh needs the CPA URL and management key file.",
+    "models.quotaUnavailable": "The quota route is unavailable, so quota is unknown. This does not prove the extension is uninstalled.",
+    "models.quotaFailed": "Quota is unknown:",
+    "models.quotaNotQueried": "Quota has not been queried for this source.",
+    "models.quotaUnsupported": "This source does not report quota; it is unknown, not zero.",
+    "models.quotaEmpty": "The observation contains no accounts.",
+    "models.quotaItemsUnknown": "No accounts were observed; quota is unknown, not empty.",
+    "models.noWindows": "No quota windows reported.",
+    "models.remaining": "Remaining",
+    "models.used": "Used / cap",
+    "models.resets": "Resets",
+    "models.balance": "Balance",
+    "models.balance.extra-usage-usd": "Extra usage balance (USD)",
+    "models.balance.monthly-credits": "Monthly credits",
+    "models.balance.purchased-credits": "Purchased credits",
+    "models.balance.free-credits": "Free credits",
+    "models.periodEnd": "Period ends",
+    "models.status.not-queried": "Not queried",
+    "models.status.success": "Observed",
+    "models.status.partial": "Partial",
+    "models.status.failed": "Failed",
+    "models.status.unsupported": "Unsupported",
+    "models.stale": "Stale",
+    "models.attempted": "Attempted",
+    "models.observed": "observed",
     "preview.title": "Preview",
     "preview.refresh": "Refresh",
     "preview.loading": "Checking registered services…",
@@ -76,7 +242,6 @@ export const EN = {
     "workbench.reviewExecution": "Review execution (not acceptance):",
     "workbench.noEvidence": "No recorded review or integration checks yet. See the Leader summary and original results.",
     "workbench.openEvidence": "View results, reviews, validation and files",
-    "settings.scope": "Browser preferences apply here immediately. Server settings are desired configuration, not proof that existing Sessions adopted them.",
     "settings.browser": "This browser",
     "settings.more": "Load more groups",
     "settings.groups": "configuration groups",
@@ -606,7 +771,7 @@ export const EN = {
     "conversation.linkedOmitted": "More linked inputs are available in the source records.",
     "conversation.stop": "Stop this Turn",
     "conversation.receipt": "Check original receipt",
-    "conversation.older": "Older page",
+    "conversation.older": "Load earlier messages",
     "conversation.latest": "Latest / reconnect",
     "conversation.current": "Current Session",
     "conversation.previous": "Previous Session",
@@ -622,6 +787,19 @@ export const EN = {
     "conversation.empty": "No public items on this page. Older pages may contain messages.",
     "conversation.liveUnavailable": "Live reply observation unavailable; native history only",
     "conversation.truncated": "Long item excerpt; open native access for the full item.",
+    "conversation.placeholder": "Message this Session…",
+    "conversation.more": "More",
+    "conversation.copy": "Copy",
+    "conversation.copied": "Copied",
+    "conversation.jump": "Jump to latest",
+    "conversation.selectModel": "Select model",
+    "conversation.worked": "Worked",
+    "conversation.activity.commandExecution": "Ran",
+    "conversation.activity.fileChange": "Edited files",
+    "conversation.activity.mcpToolCall": "Used tool",
+    "conversation.activity.dynamicToolCall": "Used tool",
+    "conversation.activity.webSearch": "Searched the web",
+    "conversation.activity.collabAgentToolCall": "Asked another agent",
     "dock.swap": "Swap with task details",
     "dock.hide": "Hide session panel",
     "dock.resize": "Resize session panel",