botmux 3.13.0 → 3.15.0

package/dist/dashboard/web/i18n.js

@@ -18,6 +18,19 @@ const zh = {
     'nav.team': '团队协作',
     'nav.connectors': 'Webhook',
     'nav.webhookLogs': '调用日志',
+    'nav.feedback': '反馈分析',
+    'feedback.title': '反馈分析',
+    'feedback.subtitle': '查看已投递回答的覆盖率、最新评价、失败和脱敏明细。',
+    'feedback.delivered': '已投递',
+    'feedback.rated': '已评价回答',
+    'feedback.coverage': '评价覆盖率',
+    'feedback.positiveRate': '正向率',
+    'feedback.deliveryFailures': '投递失败',
+    'feedback.outboxFailures': 'Webhook 失败',
+    'feedback.trend': '语义趋势',
+    'feedback.reasons': '负向原因',
+    'feedback.deliveries': '脱敏投递明细',
+    'feedback.loadMore': '加载更多',
     'nav.office': '办公室',
     'nav.createSession': '创建会话',
     'nav.createBot': '创建机器人',
@@ -1093,6 +1106,8 @@ const zh = {
     'groups.matrixTitle': '群组矩阵',
     'groups.search': '搜索群名 / ID / owner',
     'groups.missingOnly': '仅缺 bot',
+    'groups.sessionSection': '会话群',
+    'groups.sessionSectionHint': '由 bot 自动创建和管理，默认收起',
     'groups.refresh': '刷新',
     'groups.create': '新建群聊',
     'groups.chat': '群聊',
@@ -1381,7 +1396,8 @@ const zh = {
     'settings.vcProfiles.agentOffline': '离线',
     'settings.vcProfiles.agentNoWorkingDir': '未设默认目录',
     'settings.vcProfiles.agentNoReliableTerminal': 'CLI 不支持可靠回执',
-    'settings.vcProfiles.agentNoManagedIsolation': '未启用安全执行隔离',
+    'settings.vcProfiles.agentNoManagedIsolation': '已开沙盒但当前平台/后端无法提供隔离',
+    'settings.vcProfiles.agentUnsandboxedRisk': '未开沙盒：会议为不可信输入，bot 凭证暴露（可在 Bot 设置开启沙盒隔离）',
     'settings.vcProfiles.fieldResponseMode': '输出方式',
     'settings.vcProfiles.responseModeHelp': '静默：后台分析，不自动在监听群回帖；若权限模板允许，仍可申请会中发言，用户显式提问时也会回复。\n回复监听群：把分析结果自动发到会议监听话题；同一场会议最多一个角色自动回帖，避免刷屏。',
     'settings.vcProfiles.responseSilent': '静默（不自动回帖）',
@@ -1528,6 +1544,7 @@ const zh = {
     'update.restarting': '正在重启 botmux，等待重连…',
     'update.restartSlow': '重启耗时较长，请稍后手动刷新页面。',
     'update.restartFailed': '重启失败：{detail}',
+    'update.bootstrapRequired': '新版本已安装，但当前运行的 daemon 还是升级前的旧进程，缺少信号自愈协议，网页无法安全重启它们。请在电脑前的终端里，确认所有会话空闲后运行：botmux restart --bootstrap-shutdown-protocol --yes 完成这一次性升级。',
     'skills.title': 'Skill 管理',
     'skills.installed': '已安装 Skills',
     'skills.installedHelp': '本机已安装、可供 Bot 使用的 Skills。',
@@ -1856,6 +1873,19 @@ const zh = {
     'botDefaults.agentModel': '模型',
     'botDefaults.agentModelPlaceholder': '留空使用该 CLI 默认模型',
     'botDefaults.agentHelp': '模型修改只影响新会话；切换 CLI、Runtime 或 Wrapper 会立即关闭仍使用旧启动身份的活跃会话，避免后续恢复到错误的 CLI。',
+    'botDefaults.agentReasoningEffort': '思考强度',
+    'botDefaults.agentReasoningEffortHelp': 'Codex 新会话默认使用的思考强度。保存后不会改变已经创建的会话。',
+    'botDefaults.agentTurnTimeout': '单轮超时（分钟）',
+    'botDefaults.agentTurnTimeoutHelp': '仅 dsh CLI 生效：runner 等待单轮对话结束的上限；超时会中止本轮并报错。留空使用默认 10 分钟。工具链长或模型偏慢时可调大（如 30）。保存后在下一次会话拉起时生效。',
+    'botDefaults.agentTurnTimeoutPlaceholder': '留空 = 默认 10 分钟',
+    'botDefaults.agentTurnTimeoutInvalid': '请输入正数分钟；留空表示用默认 10 分钟。超时上限约 35791 分钟。',
+    'botDefaults.agentReasoningEffortDefault': '跟随 Codex 默认值',
+    'botDefaults.agentReasoningEffortLow': 'Low',
+    'botDefaults.agentReasoningEffortMedium': 'Medium',
+    'botDefaults.agentReasoningEffortHigh': 'High',
+    'botDefaults.agentReasoningEffortXhigh': 'Extra high',
+    'botDefaults.agentReasoningEffortMax': 'Max',
+    'botDefaults.agentReasoningEffortUltra': 'Ultra',
     'botDefaults.agentSave': '保存 Agent 配置',
     'botDefaults.runtimeTitle': 'Codex 运行时',
     'botDefaults.runtimeHelp': '选择官方 Codex，或配置一个保持 Codex 命令行、resume 和输出协议兼容的自定义发行版。',
@@ -1975,6 +2005,10 @@ const zh = {
     'botDefaults.codexAppCleanInput': '纯净显示 User Message（实验性）',
     'botDefaults.codexAppCleanInputHelp': '只影响 Codex App 从下一 turn 起写入的 User Message 和历史显示：Botmux 的 XML、路由与系统上下文仍会传给模型，但改走隐藏上下文；不改变飞书对话，也不清理已有历史。',
     'botDefaults.codexAppCleanInputCompat': '默认关闭，保持原有兼容行为；开启后从下一 turn 生效。',
+    'botDefaults.envelopeInjection': '上下文注入',
+    'botDefaults.envelopeInjectionAuto': 'Hook 注入每轮上下文（实验性）',
+    'botDefaults.envelopeInjectionHelp': '开启后，操作提醒与白板不再写进输入框文本，改由 Claude Code 的 UserPromptSubmit hook 以系统提醒注入；输入框只显示消息本身。仅支持 claude-code，其它 CLI 自动保持内联。',
+    'botDefaults.envelopeInjectionNote': '默认关闭，保持内联行为；开启后从下一条回复生效，可随时切回。',
     'botDefaults.sectionCrossBot': '跨 bot 协作',
     'botDefaults.botToBotSameDir': 'bot@bot 同目录拉起',
     'botDefaults.botToBotSameDirHelp': '默认开启。当该 bot 被 @ 到已有其他 bot 工作的群/话题时，复用对方工作目录并跳过仓库选择。关闭后始终使用本 bot 自己的目录规则。',
@@ -2014,7 +2048,19 @@ const zh = {
     'botDefaults.p2pMode': '私聊会话模式',
     'botDefaults.p2pThread': 'thread（每条 DM 独立会话）',
     'botDefaults.p2pChat': 'chat（扁平连续单聊会话，默认）',
-    'botDefaults.p2pHelp': '私聊会话方式：chat（默认）=整段私聊共享一个连续会话；thread=每条顶层消息独立会话。改动立即生效。',
+    'botDefaults.p2pGroup': 'group（每条 DM 自动建专属会话群）',
+    'botDefaults.sgTag': '会话群标签',
+    'botDefaults.sgTagHelp': '会话群的标签方式：feed-group=你侧边栏的消息分组（默认；个人数据，需一次授权，token 自动续期，任何租户可用）；chat-tag=企业群标签，应用租户身份直接打（无需你授权，需应用具备 im:tag 权限，部分租户权限目录无该权限）；off=不打标签。',
+    'botDefaults.sgTagModeChatTag': 'chat-tag（企业群标签，免授权）',
+    'botDefaults.sgTagModeFeedGroup': 'feed-group（侧边栏分组，需授权，默认）',
+    'botDefaults.sgTagModeOff': 'off（不打标签）',
+    'botDefaults.sgTagChatTagNote': '应用租户身份打标，无需用户授权',
+    'botDefaults.sgTagAuthorized': '已授权，建群自动进分组',
+    'botDefaults.sgTagUnauthorized': '未授权（建群不进分组，仅头像标识）',
+    'botDefaults.sgTagAuthStart': '一键授权',
+    'botDefaults.sgTagAuthWaiting': '等待授权完成…',
+    'botDefaults.sgTagAuthTimeout': '等待超时：若已在新页面完成授权，刷新本页即可；否则请重试',
+    'botDefaults.p2pHelp': '私聊会话方式：chat（默认）=整段私聊共享一个连续会话；thread=每条顶层消息独立会话；group=每条顶层消息自动创建一个「你+bot」专属会话群并把会话落在群里（群名 AI 自动总结、回群续聊自动恢复上下文）。改动立即生效。',
     'botDefaults.regularGroupMode': '普通群会话模式',
     'botDefaults.regularGroupModeChat': 'chat（扁平连续单聊会话）',
     'botDefaults.regularGroupModeChatTopic': 'chat-topic（顶层平铺连续会话，原生话题各自独立会话，默认）',
@@ -2081,22 +2127,26 @@ const zh = {
     'botDefaults.autoGrantCardHelp': '未授权用户或外部 bot 明确 @ 时，自动向 owner 发送 /grant 申请卡。关闭后仍拦截，但不提示。',
     'botDefaults.restrictGrant': '限制被授权人只能纯对话',
     'botDefaults.restrictGrantHelp': '限制 /grant 用户只能普通对话，禁止 botmux 命令、透传命令、CLI 原生命令和工作流相关命令；owner 不受影响。',
+    'botDefaults.p2pOpen': '私聊对话全开',
+    'botDefaults.p2pOpenHelp': '任何能看到本 bot 的人都可以私聊它，无需逐个 /grant——谁能看到由飞书应用「可用范围」控制。只放行对话：管理操作默认仍只认管理员名单（例外：被「Slash 命令权限」显式降级到「能对话即可用」的 daemon 命令，私聊者也能执行）。开之前先确认 allowedUsers 非空。不影响群聊。',
     'botDefaults.grantDurationDefault': '默认授权时长',
-    'botDefaults.grantDurationHelp': '只影响之后生成的授权卡；每张卡仍可临时改为其他时长或永久，已有授权和已发出的卡片不变。',
+    'botDefaults.grantDurationHelp': '选择后自动保存；选择 1 小时（默认）会恢复内置时长。只影响之后生成的授权卡；每张卡仍可临时改为其他时长或永久，已有授权和已发出的卡片不变。',
     'botDefaults.grantDuration1Hour': '1 小时（默认）',
     'botDefaults.grantDuration1HourValue': '1 小时',
     'botDefaults.grantDuration8Hours': '8 小时',
     'botDefaults.grantDuration1Day': '1 天',
     'botDefaults.grantDuration7Days': '7 天',
     'botDefaults.grantDurationInvalid': '请选择有效的授权时长',
-    'botDefaults.quotaDefault': '默认消息额度',
-    'botDefaults.quotaPlaceholder': '留空＝授权卡每人 3 条',
-    'botDefaults.quotaHelp': '留空时，授权卡默认每人 3 条，Oncall 不限；填写后授权卡和 Oncall 使用同一额度。已有授权和显式 /grant @用户 N 不受影响。',
+    'botDefaults.quotaDefault': '消息额度覆盖',
+    'botDefaults.quotaPlaceholder': '留空＝内置默认：授权卡每人 {count} 条',
+    'botDefaults.quotaHelpBuiltIn': '当前使用内置默认：授权卡每人 {count} 条，Oncall 不限。填写数字并离开输入框后自动保存，授权卡和 Oncall 将使用同一额度；已有授权和显式 /grant @用户 N 不受影响。',
+    'botDefaults.quotaHelpCustom': '当前使用自定义额度：授权卡和 Oncall 每人 {count} 条。清空输入框并离开后，授权卡恢复每人 {defaultCount} 条、Oncall 恢复不限；已有授权和显式 /grant @用户 N 不受影响。',
+    'botDefaults.quotaHelpLegacy': '当前使用兼容旧配置：授权卡每人 {cardCount} 条，Oncall 每人 {oncallCount} 条。清空输入框并离开后，授权卡恢复每人 {defaultCount} 条、Oncall 恢复不限；已有授权和显式 /grant @用户 N 不受影响。',
     'botDefaults.quotaInvalid': '请输入 1–1000 的整数',
-    'botDefaults.grantDefaultsCurrentBuiltIn': '当前：{duration} · 授权卡每人 {count} 条；Oncall 不限',
-    'botDefaults.grantDefaultsCurrentCustom': '当前：{duration} · 每人 {count} 条（授权卡与 Oncall）',
+    'botDefaults.grantDefaultsCurrentBuiltIn': '当前内置默认：{duration} · 授权卡每人 {count} 条；Oncall 不限',
+    'botDefaults.grantDefaultsCurrentCustomBuiltInQuota': '当前自定义：{duration} · 消息额度为内置默认（授权卡每人 {count} 条；Oncall 不限）',
+    'botDefaults.grantDefaultsCurrentCustom': '当前自定义：{duration} · 每人 {count} 条（授权卡与 Oncall）',
     'botDefaults.grantDefaultsCurrentLegacy': '当前兼容旧配置：{duration} · 授权卡 {cardCount} 条；Oncall {oncallCount} 条',
-    'botDefaults.grantDefaultsSave': '保存默认限制',
     'botDefaults.grantDefaultsSaving': '保存中…',
     'botDefaults.sectionSessionCap': '会话常驻上限',
     'botDefaults.maxLiveWorkers': '最大常驻会话数',
@@ -2126,7 +2176,7 @@ const zh = {
     'botDefaults.canTalkDaemonPlaceholder': '如 /status /help',
     'botDefaults.canTalkDaemonSave': '保存降权名单',
     'botDefaults.sectionLaunchShell': '启动 Shell',
-    'botDefaults.launchShellHelp': '指定启动 CLI 的 shell（如 zsh 或 /usr/bin/zsh），覆盖 daemon 的 $SHELL。用于绕过登录 shell rc 中的跳转问题；PATH 等仍需在所选 shell 配置中可用。下个新会话生效。',
+    'botDefaults.launchShellHelp': '指定启动 CLI 的 shell（如 zsh / bash / fish 或 /usr/bin/zsh），覆盖 daemon 的 $SHELL。用于绕过登录 shell rc 中的跳转问题；PATH 等仍需在所选 shell 配置中可用（fish 用户写在 ~/.config/fish/config.fish）。下个新会话生效。',
     'botDefaults.launchShellPlaceholder': '如 zsh 或 /usr/bin/zsh；留空＝用 $SHELL',
     'botDefaults.launchShellSave': '保存启动 Shell',
     'botDefaults.sectionEnv': '环境变量',
@@ -2134,7 +2184,7 @@ const zh = {
     'botDefaults.envPlaceholder': '{\n  "ANTHROPIC_BASE_URL": "https://api.z.ai/api/anthropic",\n  "ANTHROPIC_AUTH_TOKEN": "你的 GLM Coding Plan key"\n}',
     'botDefaults.envSave': '保存环境变量',
     'botDefaults.sectionRiff': 'Riff 后端配置',
-    'botDefaults.riffHelp': '配置 riff 服务的连接参数，下个新会话生效。agent 固定为 codex（riff 服务端已下线其它 runner）。认证：默认自动读取本机 ByteCloud keychain 的 JWT（登录过 kaboo-cli / aiden-cli / cjadk 任一即可），新机器只需登录一次；也可用「JWT 环境变量」指定。仓库：自动复用会话工作目录（含仓库选择卡 / 仅默认目录 / Oncall 目录）的 git 仓库与当前分支，无需单独配置。',
+    'botDefaults.riffHelp': '配置 riff 服务的连接参数，下个新会话生效。agent 固定为 codex（riff 服务端已下线其它 runner）。认证：默认自动读取本机 ByteCloud keychain 的 JWT（登录过 kaboo-cli / aiden-cli / cjadk / bytedcli 任一即可，跨平台自动探测各工具存储目录），新机器只需登录一次；也可用「JWT 环境变量」指定。仓库：自动复用会话工作目录（含仓库选择卡 / 仅默认目录 / Oncall 目录）的 git 仓库与当前分支，无需单独配置。',
     'botDefaults.riffBaseUrl': 'Base URL',
     'botDefaults.riffBaseUrlPlaceholder': 'https://riff.example.com',
     'botDefaults.riffSandboxCluster': '运行环境',
@@ -2307,6 +2357,19 @@ const en = {
     'nav.team': 'Team Collaboration',
     'nav.connectors': 'Webhook',
     'nav.webhookLogs': 'Invocation Logs',
+    'nav.feedback': 'Feedback',
+    'feedback.title': 'Feedback analytics',
+    'feedback.subtitle': 'Review delivery coverage, latest ratings, failures, and redacted drill-down data.',
+    'feedback.delivered': 'Delivered',
+    'feedback.rated': 'Rated deliveries',
+    'feedback.coverage': 'Rating coverage',
+    'feedback.positiveRate': 'Positive rate',
+    'feedback.deliveryFailures': 'Delivery failures',
+    'feedback.outboxFailures': 'Webhook failures',
+    'feedback.trend': 'Semantic trend',
+    'feedback.reasons': 'Negative reasons',
+    'feedback.deliveries': 'Redacted deliveries',
+    'feedback.loadMore': 'Load more',
     'nav.office': 'Office',
     'nav.createSession': 'Create session',
     'nav.createBot': 'Create bot',
@@ -3382,6 +3445,8 @@ const en = {
     'groups.matrixTitle': 'Group Matrix',
     'groups.search': 'Search chat name / ID / owner',
     'groups.missingOnly': 'Missing bot only',
+    'groups.sessionSection': 'Session groups',
+    'groups.sessionSectionHint': 'auto-created and managed by bots, collapsed by default',
     'groups.refresh': 'Refresh',
     'groups.create': 'New Chat',
     'groups.chat': 'Chat',
@@ -3670,7 +3735,8 @@ const en = {
     'settings.vcProfiles.agentOffline': 'offline',
     'settings.vcProfiles.agentNoWorkingDir': 'no default working dir',
     'settings.vcProfiles.agentNoReliableTerminal': 'CLI lacks reliable turn receipts',
-    'settings.vcProfiles.agentNoManagedIsolation': 'managed execution isolation is not enabled',
+    'settings.vcProfiles.agentNoManagedIsolation': 'sandbox is on but this platform/backend cannot provide isolation',
+    'settings.vcProfiles.agentUnsandboxedRisk': 'unsandboxed: meeting input is untrusted, bot credential is exposed (enable sandbox in Bot settings to isolate)',
     'settings.vcProfiles.fieldResponseMode': 'Output mode',
     'settings.vcProfiles.responseModeHelp': 'Silent: analyzes in the background without auto-posting; if the permission template allows, it may still request in-meeting output, and it replies when explicitly asked.\nReply in listener chat: auto-posts results to the meeting thread; at most one role per meeting may auto-post.',
     'settings.vcProfiles.responseSilent': 'Silent (no automatic replies)',
@@ -3817,6 +3883,7 @@ const en = {
     'update.restarting': 'Restarting botmux, waiting to reconnect…',
     'update.restartSlow': 'Restart is taking a while; please refresh the page manually.',
     'update.restartFailed': 'Restart failed: {detail}',
+    'update.bootstrapRequired': 'The new version is installed, but the currently running daemons predate the signal-death autorestart protocol, so the dashboard cannot safely restart them. At the machine, confirm every session is idle and run in a terminal: botmux restart --bootstrap-shutdown-protocol --yes to complete this one-time upgrade.',
     'skills.title': 'Skill Management',
     'skills.installed': 'Installed Skills',
     'skills.installedHelp': 'Skills installed locally and available to Bots.',
@@ -4145,6 +4212,19 @@ const en = {
     'botDefaults.agentModel': 'Model',
     'botDefaults.agentModelPlaceholder': 'Leave empty for the CLI default model',
     'botDefaults.agentHelp': 'Model changes affect new sessions only. Switching CLI, runtime, or wrapper immediately closes active sessions using the old launch identity so they cannot resume with the wrong CLI.',
+    'botDefaults.agentReasoningEffort': 'Reasoning effort',
+    'botDefaults.agentReasoningEffortHelp': 'Default reasoning effort for new Codex sessions. Existing sessions are not changed.',
+    'botDefaults.agentTurnTimeout': 'Turn timeout (minutes)',
+    'botDefaults.agentTurnTimeoutHelp': 'dsh CLI only: the maximum time the runner waits for one turn to finish; exceeding it aborts the turn with an error. Leave empty for the 10-minute default. Raise it (e.g. 30) for long tool chains or slower models. Takes effect on the next session spawn.',
+    'botDefaults.agentTurnTimeoutPlaceholder': 'Empty = 10-minute default',
+    'botDefaults.agentTurnTimeoutInvalid': 'Enter a positive number of minutes; leave empty for the 10-minute default. Max ≈ 35791 minutes.',
+    'botDefaults.agentReasoningEffortDefault': 'Use the Codex default',
+    'botDefaults.agentReasoningEffortLow': 'Low',
+    'botDefaults.agentReasoningEffortMedium': 'Medium',
+    'botDefaults.agentReasoningEffortHigh': 'High',
+    'botDefaults.agentReasoningEffortXhigh': 'Extra high',
+    'botDefaults.agentReasoningEffortMax': 'Max',
+    'botDefaults.agentReasoningEffortUltra': 'Ultra',
     'botDefaults.agentSave': 'Save Agent Config',
     'botDefaults.runtimeTitle': 'Codex Runtime',
     'botDefaults.runtimeHelp': 'Use official Codex or configure a custom distribution that preserves Codex CLI, resume, and output compatibility.',
@@ -4264,6 +4344,10 @@ const en = {
     'botDefaults.codexAppCleanInput': 'Show clean User Messages (experimental)',
     'botDefaults.codexAppCleanInputHelp': 'Only changes User Messages and history written to Codex App from the next turn onward: Botmux XML, routing, and system context still reach the model, but move to hidden context. It does not change the Lark conversation or rewrite existing history.',
     'botDefaults.codexAppCleanInputCompat': 'Off by default to preserve legacy compatibility. When enabled, it applies from the next turn.',
+    'botDefaults.envelopeInjection': 'Context Injection',
+    'botDefaults.envelopeInjectionAuto': 'Inject per-turn context via hook (experimental)',
+    'botDefaults.envelopeInjectionHelp': 'When enabled, the reminder and whiteboard are no longer written into the input text; Claude Code\'s UserPromptSubmit hook injects them as a system reminder instead. The input box shows only the message itself. claude-code only; other CLIs keep inline context.',
+    'botDefaults.envelopeInjectionNote': 'Off by default to preserve inline behavior. When enabled, it applies from the next reply and can be switched back at any time.',
     'botDefaults.sectionCrossBot': 'Cross-bot',
     'botDefaults.botToBotSameDir': 'bot@bot same-directory launch',
     'botDefaults.botToBotSameDirHelp': 'On by default. When this bot is @-ed into a chat where another bot is already working, reuse that bot\'s directory and skip repo selection. Off uses this bot\'s own directory rules.',
@@ -4303,7 +4387,19 @@ const en = {
     'botDefaults.p2pMode': 'Private chat session mode',
     'botDefaults.p2pThread': 'thread (separate session per DM)',
     'botDefaults.p2pChat': 'chat (flat continuous session, default)',
-    'botDefaults.p2pHelp': 'Private chat session mode: chat (default) shares one continuous session; thread creates one session per top-level message. Applies immediately.',
+    'botDefaults.p2pGroup': 'group (a dedicated session group per DM)',
+    'botDefaults.sgTag': 'Session-group tag',
+    'botDefaults.sgTagHelp': 'How session groups get tagged: feed-group = your personal sidebar feed group (default; one-time authorization, token auto-refreshes, works on any tenant); chat-tag = tenant chat tags applied with the app identity (no user auth; app needs the im:tag scopes, which some tenants\' scope catalogs don\'t offer); off = no tagging.',
+    'botDefaults.sgTagModeChatTag': 'chat-tag (tenant tag, no auth)',
+    'botDefaults.sgTagModeFeedGroup': 'feed-group (sidebar group, needs auth, default)',
+    'botDefaults.sgTagModeOff': 'off (no tagging)',
+    'botDefaults.sgTagChatTagNote': 'Applied with the app tenant identity — no user authorization needed',
+    'botDefaults.sgTagAuthorized': 'Authorized — new groups auto-join the feed group',
+    'botDefaults.sgTagUnauthorized': 'Not authorized (avatar marker only)',
+    'botDefaults.sgTagAuthStart': 'Authorize',
+    'botDefaults.sgTagAuthWaiting': 'Waiting for authorization…',
+    'botDefaults.sgTagAuthTimeout': 'Timed out — if you finished authorizing in the new tab, just refresh this page; otherwise retry',
+    'botDefaults.p2pHelp': 'Private chat session mode: chat (default) shares one continuous session; thread creates one session per top-level message; group births a dedicated user+bot group per top-level message and hosts the session there (AI-generated group name, returning to the group resumes the session). Applies immediately.',
     'botDefaults.regularGroupMode': 'Regular group session mode',
     'botDefaults.regularGroupModeChat': 'chat (flat continuous session)',
     'botDefaults.regularGroupModeChatTopic': 'chat-topic (flat continuous at top level, native topics each get their own session, default)',
@@ -4370,22 +4466,26 @@ const en = {
     'botDefaults.autoGrantCardHelp': 'When an unauthorized user or external bot @mentions this bot, send a /grant request card to the owner. Off still blocks, but silently.',
     'botDefaults.restrictGrant': 'Restrict grantees to plain conversation',
     'botDefaults.restrictGrantHelp': 'Restricts /grant users to plain conversation. Botmux commands, passthrough commands, CLI-native commands, and workflow commands are blocked; the owner is exempt.',
+    'botDefaults.p2pOpen': 'Open direct messages to everyone',
+    'botDefaults.p2pOpenHelp': 'Anyone who can see this bot may DM it without a per-user /grant — visibility is controlled by the Feishu app availability scope. Talk only: admin actions still require the admin list by default (exception: daemon commands you explicitly downgrade to "anyone who can talk" under Slash command permissions are also reachable from DMs). Make sure allowedUsers is non-empty before turning this on. Group chats are unaffected.',
     'botDefaults.grantDurationDefault': 'Default access duration',
-    'botDefaults.grantDurationHelp': 'Applies only to cards created afterward. Each card can still use another duration or no time limit; existing grants and cards already sent are unchanged.',
+    'botDefaults.grantDurationHelp': 'Selections save automatically. Choosing 1 hour (default) restores the built-in duration. This applies only to cards created afterward; each card can still use another duration or no time limit, and existing grants and cards already sent are unchanged.',
     'botDefaults.grantDuration1Hour': '1 hour (default)',
     'botDefaults.grantDuration1HourValue': '1 hour',
     'botDefaults.grantDuration8Hours': '8 hours',
     'botDefaults.grantDuration1Day': '1 day',
     'botDefaults.grantDuration7Days': '7 days',
     'botDefaults.grantDurationInvalid': 'Choose a valid access duration',
-    'botDefaults.quotaDefault': 'Default message quota',
-    'botDefaults.quotaPlaceholder': 'Empty = 3 messages per grantee on cards',
-    'botDefaults.quotaHelp': 'When empty, grant cards allow 3 messages per person and oncall stays unlimited. A value applies to both grant cards and oncall. Existing grants and explicit /grant @user N are unchanged.',
+    'botDefaults.quotaDefault': 'Message quota override',
+    'botDefaults.quotaPlaceholder': 'Empty = built-in default: {count} messages per grantee on cards',
+    'botDefaults.quotaHelpBuiltIn': 'Currently using the built-in default: {count} messages per person on grant cards, with unlimited oncall. Enter a number and leave the field to save the same quota for grant cards and oncall. Existing grants and explicit /grant @user N are unchanged.',
+    'botDefaults.quotaHelpCustom': 'Currently using a custom quota: {count} messages per person on grant cards and oncall. Clear the field and leave it to restore {defaultCount} messages on grant cards and unlimited oncall. Existing grants and explicit /grant @user N are unchanged.',
+    'botDefaults.quotaHelpLegacy': 'Currently using a legacy setting: {cardCount} messages per person on grant cards and {oncallCount} on oncall. Clear the field and leave it to restore {defaultCount} messages on grant cards and unlimited oncall. Existing grants and explicit /grant @user N are unchanged.',
     'botDefaults.quotaInvalid': 'Enter a whole number from 1 to 1,000',
-    'botDefaults.grantDefaultsCurrentBuiltIn': 'Current: {duration} · {count} messages per person on cards; oncall unlimited',
-    'botDefaults.grantDefaultsCurrentCustom': 'Current: {duration} · {count} messages per person on cards and oncall',
+    'botDefaults.grantDefaultsCurrentBuiltIn': 'Current built-in default: {duration} · {count} messages per person on cards; oncall unlimited',
+    'botDefaults.grantDefaultsCurrentCustomBuiltInQuota': 'Current custom setting: {duration} · built-in message quota ({count} per person on cards; oncall unlimited)',
+    'botDefaults.grantDefaultsCurrentCustom': 'Current custom setting: {duration} · {count} messages per person on cards and oncall',
     'botDefaults.grantDefaultsCurrentLegacy': 'Current legacy setting: {duration} · {cardCount} on cards; {oncallCount} on oncall',
-    'botDefaults.grantDefaultsSave': 'Save default limits',
     'botDefaults.grantDefaultsSaving': 'Saving…',
     'botDefaults.sectionSessionCap': 'Resident session limit',
     'botDefaults.maxLiveWorkers': 'Max resident sessions',
@@ -4415,7 +4515,7 @@ const en = {
     'botDefaults.canTalkDaemonPlaceholder': 'e.g. /status /help',
     'botDefaults.canTalkDaemonSave': 'Save canTalk list',
     'botDefaults.sectionLaunchShell': 'Launch shell',
-    'botDefaults.launchShellHelp': 'Shell used to launch the CLI, such as zsh or /usr/bin/zsh, overriding the daemon $SHELL. Use it to avoid login-shell rc redirection issues; PATH must still be available in that shell. Applies next session.',
+    'botDefaults.launchShellHelp': 'Shell used to launch the CLI, such as zsh / bash / fish or /usr/bin/zsh, overriding the daemon $SHELL. Use it to avoid login-shell rc redirection issues; PATH must still be available in that shell (fish users: put it in ~/.config/fish/config.fish). Applies next session.',
     'botDefaults.launchShellPlaceholder': 'e.g. zsh or /usr/bin/zsh; empty = $SHELL',
     'botDefaults.launchShellSave': 'Save launch shell',
     'botDefaults.sectionEnv': 'Environment variables',
@@ -4423,7 +4523,7 @@ const en = {
     'botDefaults.envPlaceholder': '{\n  "ANTHROPIC_BASE_URL": "https://api.z.ai/api/anthropic",\n  "ANTHROPIC_AUTH_TOKEN": "your GLM Coding Plan key"\n}',
     'botDefaults.envSave': 'Save environment variables',
     'botDefaults.sectionRiff': 'Riff backend config',
-    'botDefaults.riffHelp': 'Connection parameters for the riff service; applies next session. Agent is fixed to codex (other runners were retired server-side). Auth: the JWT is auto-read from the local ByteCloud keychain (log in once with kaboo-cli / aiden-cli / cjadk), or set via the JWT env var field. Repo: the session workingDir git repo + current branch are reused automatically (repo picker / default dir / oncall dir included) — no separate repo config.',
+    'botDefaults.riffHelp': 'Connection parameters for the riff service; applies next session. Agent is fixed to codex (other runners were retired server-side). Auth: the JWT is auto-read from the local ByteCloud keychain (log in once with kaboo-cli / aiden-cli / cjadk / bytedcli — each tool\'s store is auto-probed cross-platform), or set via the JWT env var field. Repo: the session workingDir git repo + current branch are reused automatically (repo picker / default dir / oncall dir included) — no separate repo config.',
     'botDefaults.riffBaseUrl': 'Base URL',
     'botDefaults.riffBaseUrlPlaceholder': 'https://riff.example.com',
     'botDefaults.riffSandboxCluster': 'Runtime environment',