agent-bios 0.10.0 → 0.12.0

package/launch/agent-launch.toml

@@ -1,43 +1,37 @@
 schema_version = 1
 
+# `bare_launch_args` are appended ONLY on a bare launch — no preset, no --custom, no
+# --dry-run — where nothing else decides policy. A configured launch projects the
+# preset's own policy (`claude_permission_mode` / `codex_execution_policy`) and never
+# carries these: with them, a preset that chose `standard` would launch with
+# `--dangerously-skip-permissions` from here. The key was `passthrough_args`, which read
+# as universal and made that omission look like a defect (round 18, #3).
 [backends.codex]
 command = "codex"
-passthrough_args = []
+bare_launch_args = []
 
 [backends.claude]
 command = "claude"
-passthrough_args = ["--dangerously-skip-permissions"]
+bare_launch_args = ["--dangerously-skip-permissions"]
 
 # Optional dependencies. `command` gates the route: unresolvable means the route
 # is unavailable and the review setup degrades without it. `install` is the single
 # source for both the one-line hint shown when it is missing and what
-# `agent-bios install --with <name>` runs.
-[capabilities.onto]
-command = "onto"
-install = "npm i -g onto-mcp"
-# How this tool exposes an operation. The adapter is a protocol codec owned by core,
-# never a method identity, so a second method reusing the tag is data-only.
-# `evidence` names what this tool reports back about the dispatch it performed, and a
-# receipt missing any of it is not credited. These three are what onto's override already
-# returns on its warning channel. They are here because of a measured incident, not a
-# guess: an override that reached no seat resolved to a default provider with a null model
-# and did NOT fail, so a reporter with nothing to check would have called it a success.
-offers = [{ operation = "structured-review", adapter = "mcp-stdio-v1", hosts = ["codex", "claude"], evidence = ["reached_seat", "billing_mode", "auth_defaulted"] }]
-
-# ── dynamic workflow, one concept and two host-bound tools ─────────────────
-# `ultracode` runs ON CLAUDE and `ultracode-for-codex` runs ON CODEX — the names say which,
-# and getting them the wrong way round is the mistake to avoid: the package name is
-# "ultracode, ported for codex", not "the codex one is the real one".
-#
-# What they are FOR, which is what a reader choosing between reviewers actually needs:
-# both drive a dynamic workflow, used here as a flexible many-perspective check on an
-# IMPLEMENTATION — does it function, does it survive an adversary, does the logic hold,
-# does it hold under a real scenario, does it hold under stress. That makes them
-# COMPLEMENTARY to onto rather than competing with it: onto looks hardest at whether
-# authority, gates and harness are consistent with each other. The two are independently
-# selectable, and both single-sided choices are legitimate — a thing whose whole point is
-# that it WORKS can be reviewed by the workflow alone, and a logic-bearing document,
-# ontology, harness or gate can be reviewed by onto alone.
+# `agent-bios install --with <name>` runs. How a tool exposes an operation is its
+# `offers` list: the adapter there is a protocol codec owned by core, never a method
+# identity, so a second method reusing the tag is data-only, and `evidence` names what
+# the tool reports back about the dispatch it performed — a receipt missing any of it
+# is not credited.
+
+# ── deep review, one concept and two host-bound mechanisms ─────────────────
+# Both shipped deep reviewers are the host CLIs themselves — nothing to install beyond
+# the CLI, which is a host rather than a reviewer. `ultracode` runs ON CLAUDE (the
+# Claude Code workflow keyword); `codex-exec` runs ON CODEX (the CLI's non-interactive
+# exec mode). What they are FOR: a deep check on an IMPLEMENTATION — does it function,
+# does it survive an adversary, does the logic hold, does it hold under a real scenario,
+# does it hold under stress. The Claude side fans that across many agents; the Codex
+# side hands the whole packet to one frontier-effort pass. Personal or third-party
+# reviewers register in the user-owned methods file, never here.
 
 [capabilities.ultracode]
 # Not a separate tool: the Claude Code CLI's own dynamic workflow, opened by putting the
@@ -55,17 +49,24 @@ command = "${backend}"
 # claude only: the keyword trigger is a Claude Code feature, so a codex seat cannot run it.
 offers = [{ operation = "workflow-review", adapter = "host-workflow-v1", hosts = ["claude"] }]
 
-[capabilities.ultracode-for-codex]
-command = "ultracode-for-codex"
-install = "npm i -g ultracode-for-codex"
-# codex only, and this is the tool's nature rather than a policy: it drives the Codex
-# app-server and takes its model catalog from there, so a reviewer seated on the
-# claude host is a seat it cannot fill. Declaring both hosts made a codex-main launch
-# emit "run ultracode-for-codex on claude-fable-5", which cannot work.
+[capabilities.codex-exec]
+# The Codex CLI's own non-interactive exec mode. As with `ultracode` above, the command
+# IS the configured backend — `${backend}` and not a duplicated literal, because a
+# duplicated default breaks for anyone whose backend is a wrapper or an absolute path.
+# No `install`: that field is EXECUTED by `agent-bios install --with`, and a missing
+# codex CLI is a missing host, not a missing reviewer.
+command = "${backend}"
+# codex only, and this is the tool's nature rather than a policy: `exec`,
+# `-s read-only`, `-c model_reasoning_effort` and `-c service_tier` are Codex CLI
+# surface (verified against installed codex-cli 0.146.0), so a claude seat cannot
+# run it. `-s read-only` pins the sandbox the descriptor promises; what stays
+# inherited is the ambient ~/.codex configuration (AGENTS.md, config.toml), so
+# this reviewer is read-only but not hermetic — the codex-run wrapper remains the
+# hermetic dispatch when that matters.
 #
-# Between the two, this review is available CROSS-FAMILY from either main — which the
-# codex arm previously had no way to express, and so silently went without.
-offers = [{ operation = "workflow-review", adapter = "host-workflow-v1", hosts = ["codex"] }]
+# Between the two, this review is available CROSS-FAMILY from a claude main — the
+# opposite family's CLI is dispatched as a fresh read-only subprocess.
+offers = [{ operation = "exec-review", adapter = "exec-stdio-v1", hosts = ["codex"] }]
 
 # ── review methods (DESIGN.md §1) ───────────────────────────────────────────
 # Data only. Adding a method here — including one this repo has never seen — must
@@ -92,59 +93,33 @@ aggregation = "majority"
 severity_emits = ["blocker", "high", "medium", "low", "info"]
 severity_map = { blocker = "blocker", high = "high", medium = "medium", low = "low", info = "info" }
 
-[review_methods.onto]
-label = "onto structured lens review"
-description = "Audits any target — code, a design doc, a whole repo — against the intent you state, looking hardest at whether authority, gates and harness are consistent with one another; complementary to the ultracode workflows rather than an alternative, and enough on its own for a logic-bearing document, ontology, harness or gate. Six lenses, cited issues, dissent kept as an artifact. Needs no diff. Returns a handle, not a result: poll 10+ min, and read record_status before believing a clean report."
-capability = "onto"
-operation = "structured-review"
-# `effort` is sent and `auth` is deliberately NOT. onto's per-call override REPLACES
-# a seat whose route differs, so what it omits is dropped rather than inherited —
-# which is why effort must be stated: this binding IS the reviewer's pinned rigour.
-# auth is the opposite case. onto selects the metered route only when a seat says so in
-# writing — `auth = "api_key"` or an `api_key_env` naming the variable to call — and
-# defaults to the subscription worker otherwise, so an omitted auth cannot land on
-# metered and stating one buys nothing. It does cost something: switching a seat to
-# oauth is a route change, so a user who deliberately chose metered loses both their
-# auth and the api_key_env that carried it. Omitting it lets onto's default protect the
-# unconfigured seat and its overlay preserve the configured one.
-instructions = 'call onto_review/onto_prepare_review with llmOverride={{"provider":"{provider}","model":"{model}","effort":"{effort}"}} so onto runs on {provider} at {effort}'
+[review_methods.codex-exec]
+label = "Codex deep exec review"
+# Named for the mechanism, not for the legacy layer. The legacy route token `ultracode`
+# used to BE its capability's key, so naming another tool with the bare name silently
+# repointed the legacy route — the golden caught that, and the fix was to bind the legacy
+# token to a capability explicitly (`LEGACY_ULTRACODE_CAPABILITY`) rather than let a setup
+# name and a tool id be the same string.
+description = "One deep pass by the Codex CLI in non-interactive exec mode: the whole packet handed to a single frontier-effort model rather than fanned out over agents. Use it on things that have to WORK when the strongest single reader beats many angles; the Claude-side workflow below is the fan-out counterpart. Reviews whatever packet you hand it on stdin, so it needs no working-tree state and nothing installed beyond the codex CLI itself."
+capability = "codex-exec"
+operation = "exec-review"
+# The exec flags are the whole mechanism, so they are stated as literals rather than left
+# to the dispatcher's memory. The severity ladder is stated too, and that is what makes
+# the identity map below TRUE rather than copied: this reviewer has no vocabulary of its
+# own — it reports on the ladder because the request tells it to.
+instructions = 'dispatch {command} exec -s read-only -m {model} -c model_reasoning_effort="{effort}" as a fresh read-only process with a self-contained review packet on stdin (the -s flag is what makes read-only true rather than promised; append -c service_tier="fast" only when a faster, shallower turnaround is explicitly wanted), and require every finding to carry one of {severities}'
 output = "review-v1"
-perspectives = ["axiology", "coverage", "evolution", "logic", "semantics", "structure"]
+perspectives = ["deep-exec"]
 trials = 1
 order = "fixed"
 swap_augmentation = false
 aggregation = "union"
-# onto's own REVIEW_SEVERITY_ORDER is this same ladder — read in its source, not
-# assumed. Identity is correct here for a different reason than the panel below.
 severity_emits = ["blocker", "high", "medium", "low", "info"]
 severity_map = { blocker = "blocker", high = "high", medium = "medium", low = "low", info = "info" }
 
-[review_methods.ultracode-for-codex]
-label = "Ultracode workflow review (Codex)"
-# Named for the tool, not for the legacy layer. The legacy route token `ultracode` used to
-# BE this capability's key, so naming the Claude tool `ultracode` silently repointed the
-# legacy route at it — the golden caught that, and the fix was to bind the legacy token to
-# a capability explicitly (`LEGACY_ULTRACODE_CAPABILITY`) rather than let a setup name and
-# a tool id be the same string.
-description = "The same dynamic workflow, ported to Codex — same use: things that have to WORK, checked from many angles rather than one. Fans dozens of Codex agents over your UNCOMMITTED working-tree changes for file:line defects, each candidate verified by its own agent. Its built-in code-review fails before spawning anything when the tree holds no reviewable change — clean, or only types it excludes such as .java, Dockerfile or dist/. Passing that gate is not the same as your files being reviewed. Detached: launching exits 0 even when the run dies."
-capability = "ultracode-for-codex"
-operation = "workflow-review"
-instructions = "run {command} against a self-contained review packet on {model}/{effort}"
-output = "review-v1"
-perspectives = ["orchestration"]
-trials = 1
-order = "fixed"
-swap_augmentation = false
-aggregation = "union"
-# P0..P3 plus a null severity, taken from the tool's own result contract. The mapping
-# is the owner's call: the tool documents the vocabulary but not what each level
-# means, so it cannot be derived. "null" keys a finding the tool reports with none.
-severity_emits = ["P0", "P1", "P2", "P3", "null"]
-severity_map = { P0 = "blocker", P1 = "high", P2 = "medium", P3 = "low", null = "info" }
-
 [review_methods.ultracode]
 label = "Ultracode workflow review (Claude)"
-description = "Claude Code's own dynamic workflow, on Claude. Decomposes the request across many agents and adversarially verifies each candidate finding before it survives. Use it on things that have to WORK — functional, adversarial, logic, scenario and stress passes — where onto is the one to reach for when the question is whether authority, gates and harness agree. Reviews whatever packet you hand it, so it needs no working-tree state. The keyword in the prompt is what opens the workflow: without it the turn is an ordinary session that will answer, plausibly, alone. PRECONDITION this launcher cannot establish: the keyword trigger must be enabled (`workflowKeywordTriggerEnabled`, default true, verified in claude 2.1.220). A resolvable claude CLI proves the command exists, not that the workflow opens — with that setting off the review runs as an ordinary session and would report as though it were orchestrated."
+description = "Claude Code's own dynamic workflow, on Claude. Decomposes the request across many agents and adversarially verifies each candidate finding before it survives. Use it on things that have to WORK — functional, adversarial, logic, scenario and stress passes; the Codex-side deep exec review above is the single-reader counterpart. Reviews whatever packet you hand it, so it needs no working-tree state. The keyword in the prompt is what opens the workflow: without it the turn is an ordinary session that will answer, plausibly, alone. PRECONDITION this launcher cannot establish: the keyword trigger must be enabled (`workflowKeywordTriggerEnabled`, default true, verified in claude 2.1.220). A resolvable claude CLI proves the command exists, not that the workflow opens — with that setting off the review runs as an ordinary session and would report as though it were orchestrated."
 capability = "ultracode"
 operation = "workflow-review"
 # The keyword is the whole mechanism, so it is stated as a literal rather than left to the
@@ -167,9 +142,6 @@ severity_map = { blocker = "blocker", high = "high", medium = "medium", low = "l
 # the reverse map must be unique so it resolves to exactly one validatable seat.
 provider = "openai"
 models = ["gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6-luna"]
-# onto review seat used when a CROSS-family main (Claude) routes onto review to
-# this (gpt/codex) family; must be an onto review-role registered (provider, model).
-onto_review = { provider = "openai", model = "gpt-5.6-sol" }
 
 [hosts.codex.tiers.frontier]
 model = "gpt-5.6-sol"
@@ -209,9 +181,6 @@ sweep = "${CODEX_HOME}/agents/sweep.toml"
 [hosts.claude]
 provider = "anthropic"
 models = ["claude-fable-5", "claude-opus-5", "claude-sonnet-5", "claude-haiku-4-5"]
-# onto review seat used when a CROSS-family main (Codex) routes onto review to
-# this (anthropic/claude) family; must be an onto review-role registered (provider, model).
-onto_review = { provider = "anthropic", model = "claude-fable-5" }
 
 [hosts.claude.tiers.frontier]
 model = "claude-fable-5"
@@ -241,7 +210,7 @@ claude_permission_mode = "bypassPermissions"
 
 [presets.deep-review]
 label = "Deep review"
-description = "HELM with hybrid onto, native, and Ultracode review at deep FRONTIER effort."
+description = "HELM with the base panel plus the deep reviewer from the OTHER provider — Codex exec at ultra when you launch Claude, the Claude workflow when you launch Codex — at FRONTIER effort."
 mode = "builder"
 main_tier = "helm"
 frontier_effort = { codex = "ultra", claude = "max" }
@@ -261,7 +230,7 @@ claude_permission_mode = "bypassPermissions"
 
 [presets.solo]
 label = "Solo"
-description = "Single-model session: delegation off (no tier fan-out; the standing spawn policy is lifted), review via the host's own command only."
+description = "Single-model session: delegation off (no tier fan-out; the standing spawn policy is lifted) and no review route requested — review is whatever you run yourself."
 mode = "builder"
 main_tier = "helm"
 frontier_effort = "max"
@@ -318,22 +287,15 @@ tier = "helm"
 provider = "openai"
 tier = "frontier"
 
-[presets.deep-review.review.hosts.claude.methods."onto"]
-provider = "openai"
-tier = "frontier"
-
-[presets.deep-review.review.hosts.claude.methods."ultracode-for-codex"]
+[presets.deep-review.review.hosts.claude.methods."codex-exec"]
 provider = "openai"
-tier = "frontier"
+model = "gpt-5.6-sol"
+effort = "ultra"
 
 [presets.deep-review.review.hosts.codex.base]
 provider = "anthropic"
 tier = "frontier"
 
-[presets.deep-review.review.hosts.codex.methods."onto"]
-provider = "anthropic"
-tier = "frontier"
-
 [presets.deep-review.review.hosts.codex.methods."ultracode"]
 provider = "anthropic"
 tier = "frontier"
@@ -350,22 +312,15 @@ tier = "workhorse"
 provider = "openai"
 tier = "frontier"
 
-[presets.session-distill.review.hosts.claude.methods."onto"]
+[presets.session-distill.review.hosts.claude.methods."codex-exec"]
 provider = "openai"
-tier = "frontier"
-
-[presets.session-distill.review.hosts.claude.methods."ultracode-for-codex"]
-provider = "openai"
-tier = "frontier"
+model = "gpt-5.6-sol"
+effort = "ultra"
 
 [presets.session-distill.review.hosts.codex.base]
 provider = "anthropic"
 tier = "frontier"
 
-[presets.session-distill.review.hosts.codex.methods."onto"]
-provider = "anthropic"
-tier = "frontier"
-
 [presets.session-distill.review.hosts.codex.methods."ultracode"]
 provider = "anthropic"
 tier = "frontier"

package/launch/agent-launch.zsh

@@ -4,10 +4,15 @@
 _agent_launch_direct() {
   local host="$1"
   shift
+  # `builtin command`, not bare `command`. The point of this line is to reach the real
+  # binary without re-entering a shell function, and zsh lets a user define `command()`
+  # — at which point the bare form calls THAT, and the direct path this wrapper exists to
+  # provide is handed to whatever the user's function does. `builtin` cannot be shadowed,
+  # so the resolution is the one the comment above already promised.
   if [[ "$host" == "claude" ]]; then
-    command claude --dangerously-skip-permissions "$@"
+    builtin command claude --dangerously-skip-permissions "$@"
   else
-    command codex "$@"
+    builtin command codex "$@"
   fi
 }
 

package/launch/i18n/en.toml

@@ -0,0 +1,186 @@
+# UI text catalog: English, the reference key-set. Every `t("key")` in
+# launch/agent-launch.py must exist here, and ko.toml/ja.toml must carry
+# exactly this key-set — the parity gate holds all three, both directions.
+# Chrome only: launch-contract text is never sourced from a catalog.
+
+"mode.title" = "Mode"
+"mode.swe.label" = "Software Engineer"
+"mode.swe.description" = "Repo-scoped work that defers to the project's own AGENTS.md/CLAUDE.md: a bare Vanilla session, or Custom to configure one."
+"mode.builder.label" = "Builder"
+"mode.builder.description" = "Tune tiers, review routes, and permissions across fixed presets; includes Custom."
+"mode.distill.label" = "Session distill"
+"mode.distill.description" = "Enter the dedicated session-distill hub: status, packages, versions, and session start."
+
+"language.label" = "Language"
+"language.description" = "Choose the TUI language (English / 한국어 / 日本語). The corpus the AI consumes stays English; this changes the launcher's screens only."
+"language.title" = "Language"
+"language.en.description" = "Show the launcher's screens in English."
+"language.ko.description" = "런처 화면을 한국어로 표시합니다."
+"language.ja.description" = "ランチャーの画面を日本語で表示します。"
+
+"corpus.label" = "Corpus packages"
+"corpus.description" = "Choose which corpus domain packages are installed; applying runs the installer's onboard loop (install + activation canary)."
+"corpus.title" = "Corpus packages"
+"corpus.core.line" = "core + infra always install; the checklist covers the optional domain packages."
+"corpus.toggle.description" = "Toggle this domain package. Nothing changes until Apply."
+"corpus.apply.label" = "Apply selection{pending}"
+"corpus.apply.description" = "Run agent-bios onboard with exactly the checked set; the installer deploys, canaries, and records the outcome."
+"corpus.apply.unchanged" = "the checked set equals the applied one — nothing to apply"
+"corpus.unavailable.line1" = "The corpus status projection is missing or predates domain reporting."
+"corpus.none.line" = "This projection lists no optional domain packages — core and infra always install, so there is nothing to choose here."
+"corpus.unavailable.line2" = "Run: agent-bios install   (it rewrites the projection this screen reads)"
+"corpus.back.hint" = "Return to the mode menu."
+
+"wizard.title" = "Register another reviewer"
+"wizard.id.label" = "Method id (kebab-case)"
+"wizard.label.label" = "Label (shown in the method list)"
+"wizard.description.label" = "Description (what it reviews best)"
+"wizard.drives.title" = "What runs this reviewer?"
+"wizard.drives.tool.label" = "An installed tool"
+"wizard.drives.tool.description" = "The method drives a capability: a command this machine can resolve, with an operation/adapter/hosts offer."
+"wizard.drives.panel.label" = "Fresh host subprocesses (panel-shaped)"
+"wizard.drives.panel.description" = "No tool: isolated passes by the host CLI itself. If this lands on the main seat the review is graded perspective_floor — its perspectives are then the only thing separating it from you."
+"wizard.cap.name.label" = "Capability name"
+"wizard.cap.command.label" = "Command (resolved on PATH, or ${backend} for the host CLI)"
+"wizard.cap.install.label" = "Install line (runs via agent-bios install --with; '-' for none)"
+"wizard.cap.operation.label" = "Operation (the join key between method and offer)"
+"wizard.cap.adapter.title" = "Adapter (core protocol codec)"
+"wizard.cap.hosts.title" = "Which host seats can this tool fill?"
+"wizard.cap.hosts.both" = "both (codex and claude)"
+"wizard.perspectives.label" = "Perspectives (comma-separated; one is enough for a reviewer that reads in its own context)"
+"wizard.perspectives.refused" = "Name at least one perspective — this is what the reviewer is told to look for."
+"wizard.trials.label" = "Trials (isolated passes; 1 or more)"
+"wizard.trials.refused" = "Needs a whole number of 1 or more."
+"wizard.instructions.label" = "Instructions (slots: {command} {model} {effort} {provider} {host} {service_tier} {perspectives} {trials} {severities})"
+"wizard.emits.label" = "Severity values YOUR reviewer reports, verbatim (comma-separated)"
+"wizard.map.title" = "Map to the canonical ladder — {value}"
+"wizard.confirm.title" = "The reader accepted this block — write it?"
+"wizard.confirm.target" = "Appends to: {target}"
+"wizard.confirm.write.label" = "Write it"
+"wizard.confirm.write.description" = "Append atomically; your file's existing content is untouched."
+"wizard.confirm.edit.label" = "Edit answers again"
+"wizard.refused.title" = "The reader refused this block"
+"wizard.refused.header" = "Validation is the reader's own; its message, verbatim:"
+"wizard.refused.edit.label" = "Edit answers (kept as defaults)"
+"wizard.refused.edit.description" = "Walk the questions again; every answer is pre-filled."
+"wizard.refused.contract.label" = "Show the file contract"
+"wizard.raced.line" = "The methods file changed while the wizard was open; nothing was written. Re-run the registration."
+"wizard.postwrite.line" = "Post-write re-read did not show the method; the file was restored from your shell's perspective — inspect it by hand."
+"wizard.postwrite.raced.line" = "Post-write re-read did not show the method, and the file changed underneath — another writer's edit was left exactly as it stands, not rolled back. Inspect it by hand."
+"wizard.done.line" = "Registered and live in this launcher: {method_id}"
+
+# Custom settings hub — the tiers, review, and execution policy of one launch.
+"custom.title" = "Custom settings"
+"custom.main.label" = "Main tier: {tier}"
+"custom.main.description" = "Choose the primary orchestrator used for this session."
+"custom.review.label" = "Review setup: {setup}"
+"custom.review.description" = "Choose the review routes requested when review gates fire."
+"custom.policy.label" = "Execution policy: {policy}"
+"custom.policy.description" = "Choose the host-specific permission or sandbox behavior."
+"custom.tier.description" = "Edit the {tier} model and reasoning effort, then return here."
+"custom.save.label" = "Save these settings globally and start"
+"custom.save.description" = "Save this setup as a named preset in your user config for reuse elsewhere, then launch."
+"custom.save.prompt" = "Save as preset name"
+"custom.start.label" = "Start with these settings"
+"custom.start.description" = "Confirm the complete setup shown above and continue to launch."
+"custom.exit.label" = "Exit without launching"
+"custom.exit.description" = "Discard this launch and return to the shell."
+
+"tier.title" = "Main tier"
+"tier.frontier.description" = "Highest-capability specialist for hard, high-impact work and deep review."
+"tier.helm.description" = "Primary orchestrator for planning, delegation, integration, and final decisions."
+"tier.workhorse.description" = "Cost-conscious executor for high-volume implementation and analysis."
+"tier.sweep.description" = "Fast, low-cost worker for narrow searches, checks, and mechanical tasks."
+
+"model.title" = "{tier} model"
+"model.use.description" = "Use {model} as this tier's model."
+"model.other.label" = "Other (enter a model id)"
+"model.other.description" = "Type any model id the backend accepts, even if it is not in the catalog."
+
+"effort.title" = "{tier} effort"
+"effort.low.description" = "Minimize reasoning cost and latency for straightforward work."
+"effort.medium.description" = "Use moderate reasoning for routine work with some ambiguity."
+"effort.high.description" = "Spend more reasoning on complex implementation and analysis."
+"effort.xhigh.description" = "Use deeper reasoning for difficult coordination and high-impact decisions."
+"effort.max.description" = "Use the host's strongest standard reasoning mode for frontier work."
+"effort.ultra.description" = "Use Codex Ultra for exceptionally deep, divisible frontier work."
+"effort.unsupported.host" = "not supported by {host}"
+"effort.unsupported.model" = "not supported by {model}"
+
+"policy.codex.title" = "Codex execution policy"
+"policy.codex.bypass.label" = "Bypass approvals and sandbox"
+"policy.codex.bypass.description" = "Run without Codex approval or sandbox restrictions."
+"policy.codex.workspace-write.label" = "Workspace write sandbox"
+"policy.codex.workspace-write.description" = "Allow workspace writes under Codex's workspace-write sandbox."
+"policy.codex.read-only.label" = "Read-only sandbox"
+"policy.codex.read-only.description" = "Allow inspection while blocking file writes through the Codex sandbox."
+"policy.codex.standard.label" = "Standard"
+"policy.codex.standard.description" = "Pass no policy flag; use Codex's own default approval and sandbox behavior."
+
+"policy.claude.title" = "Claude permission mode (not an OS sandbox)"
+"policy.claude.bypassPermissions.label" = "Bypass permissions"
+"policy.claude.bypassPermissions.description" = "Skip Claude permission prompts; this is not an OS sandbox setting."
+"policy.claude.acceptEdits.label" = "Accept edits"
+"policy.claude.acceptEdits.description" = "Automatically accept file edits while retaining other permission checks."
+"policy.claude.auto.label" = "Auto permissions"
+"policy.claude.auto.description" = "Use Claude's automatic permission mode."
+"policy.claude.manual.label" = "Manual permissions"
+"policy.claude.manual.description" = "Ask before actions according to Claude's manual permission flow."
+"policy.claude.dontAsk.label" = "Do not ask"
+"policy.claude.dontAsk.description" = "Use Claude's dontAsk permission mode."
+"policy.claude.plan.label" = "Plan mode"
+"policy.claude.plan.description" = "Start Claude in planning mode without direct implementation."
+"policy.claude.standard.label" = "Standard"
+"policy.claude.standard.description" = "Pass no policy flag; use Claude's own default permission prompts."
+
+# Session Distill area — corpus content versions, packages, and rollback.
+"distill.title" = "Session Distill"
+"distill.start.label" = "Start a session distill run"
+"distill.start.description" = "Launch with the Session distill preset: the mission line directs the session to the workflow guide and the SSOT."
+"distill.start.unavailable" = "preset {preset} not configured"
+"distill.packages.label" = "Corpus packages"
+"distill.packages.description" = "What corpus content is applied, as installable packages (v1: single core corpus)."
+"distill.versions.label" = "Versions & rollback"
+"distill.versions.description" = "Corpus content versions (distinct from system deployment); roll the corpus back or forward."
+"distill.back.label" = "Back"
+"distill.back.hint" = "Return to Session Distill."
+"distill.back.launch" = "Return to the launch menu."
+"distill.version.current" = "{version} (current)"
+"distill.version.description" = "closed {closed} · commit {commit} · {summary}"
+"distill.version.applied.title" = "{version} is the currently applied version"
+"distill.version.applied.line" = "Select a different version to roll back or forward."
+"distill.package.core.label" = "core corpus @ {version}"
+"distill.package.core.description" = "All corpus domains in one package until domain packaging lands (backlog). Layers: {layers}. Per-domain selection, versions, and rollback will appear here."
+"distill.rollback.title" = "Roll back corpus to {version}?"
+"distill.rollback.cancel.label" = "Cancel"
+"distill.rollback.cancel.description" = "Keep the currently deployed corpus content."
+"distill.rollback.confirm.label" = "Roll back to {version}"
+"distill.rollback.confirm.description" = "Re-deploys globals/guides/hooks as of that corpus version. System deployment (launcher, wrappers) stays current. Roll forward again by selecting the latest version."
+"distill.rollback.done" = "Rollback complete."
+"distill.rollback.failed" = "Rollback FAILED."
+
+# Corpus status panel — shared by the Session Distill area and the checklist.
+# Labels are padded to a column measured in display cells, so a translation may
+# be any width without ragging the panel.
+"panel.unprojected" = "corpus status not projected yet — run: agent-bios install"
+"panel.version.label" = "Applied version"
+"panel.mechanisms.label" = "Mechanisms"
+"panel.ledger.label" = "Ledger"
+"panel.domains.label" = "Domains"
+"panel.rolled-back" = "(ROLLED BACK; latest is {latest})"
+"panel.layers.none" = "none"
+"panel.ledger.value" = "placed {placed} · incubating {incubating} · versions {versions}"
+"panel.domains.unset" = "(none selected yet)"
+"panel.last-apply" = "⚠ LAST APPLY {outcome} at {at} — requested: {requested}"
+"corpus.core-only" = "core+infra only"
+
+# Numbered-prompt chrome. These were printed as English literals from the renderer
+# while every line of content around them was translated, so the Korean and Japanese
+# screens answered in one language and asked in another.
+"prompt.select" = "Select [{default}] ({actions}): "
+"prompt.back" = "b back"
+"prompt.cancel" = "q cancel"
+"prompt.unavailable" = "Unavailable"
+"prompt.unavailable.retry" = "Unavailable: {reason}. Select an enabled option."
+"prompt.no.previous" = "No previous menu. Use q to cancel."
+"prompt.corpus.header" = "-- Corpus status --"