botmux 3.7.1 → 3.8.0

package/dist/dashboard/web/i18n.js

@@ -303,6 +303,8 @@ const zh = {
     'sessions.workingDir': '工作目录',
     'sessions.created': '创建',
     'sessions.last': '最近',
+    'sessions.preview.latestExchange': '最近问答',
+    'sessions.preview.showFull': '查看完整问答',
     'sessions.adopt': '接入',
     'sessions.actions': '操作',
     'sessions.details': '详情',
@@ -312,6 +314,8 @@ const zh = {
     'sessions.locating': '发送中...',
     'sessions.cooldown': '冷却 {seconds}s',
     'sessions.openTerminal': '终端',
+    'sessions.openReadonlyTerminal': '打开只读终端',
+    'sessions.openWritableTerminal': '打开可操作 Web 终端',
     'sessions.writeLink': '操作链接',
     'sessions.writeLinkHint': '获取可操作终端链接（带写权限 token，新标签打开）',
     'sessions.writeLinkFail': '获取操作链接失败',
@@ -1235,12 +1239,13 @@ const zh = {
     'settings.openTerminalInFeishu': '流式卡片 Web 终端按钮在飞书侧栏打开',
     'settings.openTerminalInFeishuHelp': '默认关闭。将 Web Terminal 链接包装为飞书侧栏打开；写权限仍由终端 token 控制。',
     'settings.enableLocalCliOpen': '启用本机 CLI 直开',
-    'settings.enableLocalCliOpenHelp': '默认关闭，仅 daemon 运行在 macOS 时生效。附加模式支持当前 tmux / Herdr 会话，尽量保持同一路 I/O/历史和飞书连续性；resume 模式会另起 CLI resume 进程，可能使飞书侧不再跟随该会话。',
+    'settings.enableLocalCliOpenHelp': '默认关闭，仅 daemon 运行在 macOS 时生效。附加模式支持当前 tmux / Herdr / ZMX 会话并进入同一个 CLI；ZMX 本地 attach 使用原生终端，飞书侧仍为纯文本流。resume 模式会另起 CLI resume 进程，可能使飞书侧不再跟随该会话。',
     'settings.localCliOpenMode': '本机 CLI 打开模式',
-    'settings.localCliOpenModeHelp': '默认附加当前会话：managed tmux / Herdr 走精确 attach，adopt 会话只在已有可靠目标时附加；direct resume 适合明确接受飞书连续性风险的本机调试。',
+    'settings.localCliOpenModeHelp': '默认附加当前会话：managed tmux / Herdr / ZMX 走精确 attach，adopt 会话只在已有可靠目标时附加；ZMX 的原生 attach 不代表 botmux 提供 Web TUI。direct resume 适合明确接受飞书连续性风险的本机调试。',
     'settings.localCliOpenModeAttach': '附加当前会话（推荐）',
     'settings.localCliOpenModeResume': '另起 CLI resume',
     'settings.sectionExperimental': '实验性配置',
+    'settings.sectionHostOverloadAlert': '机器过载告警',
     'settings.chatBotDiscovery': '群内机器人发现（飞书 /members/bots）',
     'settings.chatBotDiscoveryHelp': '默认开启。实时读取群内机器人成员，提高多 bot 互相 @ 的准确性。接口不可用时会回退旧逻辑；仅在成员识别异常时关闭。',
     'settings.herdrTraexPlugin': 'TraeX herdr 插件自动安装（opt-in）',
@@ -1262,6 +1267,8 @@ const zh = {
     'settings.herdrTraexUnsupported': '当前 herdr 不支持插件；需 ≥ 0.7.0，请先运行 herdr update',
     'settings.codexRpcInput': 'Codex 家族 RPC 输入模式',
     'settings.codexRpcInputHelp': '实验性，默认关闭。对 codex / traex 机器人（仅 tmux 后端），用户消息经 app-server JSON-RPC 通道注入，绕开 codex 终端粘贴丢消息的问题（pane 仍跑真实 --remote TUI 渲染）。sandbox/隔离/审批门控/wrapper/带启动命令的会话自动回退传统粘贴。',
+    'settings.bypassCodexHookTrust': '自动信任 Codex Hook',
+    'settings.bypassCodexHookTrustHelp': '默认开启。Codex 0.14x 会弹交互式 hook 信任门（Press t to trust）；botmux 每次升级重写自装 hook 会让 hash 变化、门重新弹出，托管会话没人能按 t → 首条消息卡死。开启后对 codex / traex 普通 TUI 传 --dangerously-bypass-hook-trust。注意：该 flag 信任 codex 见到的所有 hook 来源（含项目 .codex/hooks.json 与已启用插件），不只 botmux 自装的；不想自动信任第三方项目/插件 hook 可关闭。受限机器人（关绕过）始终不受影响。下次会话生效，不影响已存活的 pane。',
     'settings.codexNotifier': 'Codex 任务完成通知',
     'settings.codexNotifierHelp': '实验性，默认关闭。独立 Codex App/CLI 任务完成后，由所选 Bot 向其首位可投递管理员发送飞书私聊；支持从完成卡继续处理，或请求本机打开原 Codex App 会话。',
     'settings.codexNotifierEnablePending': '完成下面的配置后将自动开启通知。',
@@ -1283,6 +1290,21 @@ const zh = {
     'settings.codexNotifierPending': '当前有 {count} 条完成消息等待投递。',
     'settings.codexNotifierWorkerPending': 'Hook 已安装，但通知 worker 尚未运行或心跳已过期。',
     'settings.codexNotifierLastError': '最近一次投递失败：{error}',
+    'settings.hostOverloadAlert': '启用过载告警',
+    'settings.hostOverloadAlertHelp': '开启后，所选「通知 Bot」的 daemon 会每 30 秒检查整机负载/内存，越过过载线时给该 Bot 的管理员发一条飞书私信提醒、恢复后再发一条。机器过载会导致会话冷启动超时假死，这个提醒能让你及时清理会话或调低常驻上限。整机只需一个通知 Bot；默认关闭。',
+    'settings.hostOverloadAlertTarget': '通知 Bot',
+    'settings.hostOverloadAlertTargetHelp': '选择用于发送过载告警私信的 Bot（任意能发飞书消息、且能解析到管理员的非 apiOnly Bot 均可）。该 Bot 自己的 daemon 负责采样与发送。',
+    'settings.hostOverloadAlertTargetPlaceholder': '请先选择通知 Bot',
+    'settings.hostOverloadAlertRecipient': '接收人：{recipient}（该 Bot 的首位管理员）',
+    'settings.hostOverloadAlertRecipientMissing': '所选 Bot 未配置管理员，不能发送过载告警私信。',
+    'settings.hostOverloadAlertRecipientUnverified': '目标 Bot 尚未把首位管理员解析为飞书 open_id，请检查管理员配置或等待 Bot 启动完成。',
+    'settings.hostOverloadAlertTargetRequired': '请先选择一个通知 Bot 再开启。',
+    'settings.hostOverloadAlertTargetOffline': '目标 Bot 的 daemon 当前不在线，过载告警无法投递。',
+    'settings.hostOverloadAlertEnterLoad': '负载进入阈值（load15 / 核数）',
+    'settings.hostOverloadAlertEnterLoadHelp': '当 15 分钟平均负载 > 逻辑核数 × 此值时判定为过载。默认 1.5。恢复线固定为内置默认（核数 × 1.0）；若你把进入线设得比它还低，恢复线会自动压到进入线的 95%，以保证「低于进入线才算恢复」不抖动。',
+    'settings.hostOverloadAlertEnterMem': '内存进入阈值（%）',
+    'settings.hostOverloadAlertEnterMemHelp': '当已用内存占比 ≥ 此百分比时判定为过载。默认 92。恢复线固定为内置默认（85%）；同样在你把进入线设得更低时,自动压到进入线的 95%。',
+    'settings.noVisibleOutputHintHelp': '实验性，默认关闭。在 botmux 路由提示里加一段纠偏：告诉模型 botmux send 成功即已送达、本轮无可见文本地结束是正常的、看到「无可见输出请继续」是底层 CLI（Claude Code ≥2.1.212）的误判不要重发。主要用于 Claude Code 驱动非 Claude 后端模型时（易把 thinking-only nudge 误读为发送失败而重复回复）；对纯 Claude 场景无害但通常无需开启。开关翻动下一个会话即生效，无需重启。',
     'settings.sectionVcMeetingAgent': '会议监听',
     'settings.vcMeetingAgent': '允许本机使用会议监听能力',
     'settings.vcMeetingAgentHelp': '默认开启。控制本机 bot 是否接收新的会议监听事件。关闭后不再恢复监听；已进行中的会议通常自然结束。',
@@ -1639,6 +1661,15 @@ const zh = {
     'botDefaults.metaOnline': '在线 · daemon 正常',
     'botDefaults.search': '搜索 bot 名 / app id',
     'botDefaults.refresh': '刷新',
+    'botDefaults.rosterCount': '{count} 个机器人',
+    'botDefaults.rosterFiltered': '共 {total} 个',
+    'botDefaults.tabNavigation': 'Bot 配置分类',
+    'botDefaults.tabCommon': '常用',
+    'botDefaults.tabSessions': '会话',
+    'botDefaults.tabSecurity': '权限与安全',
+    'botDefaults.tabCards': '消息卡片',
+    'botDefaults.tabAdvanced': '高级',
+    'botDefaults.tabHint': '切换分类不会丢失未保存输入',
     'botDefaults.sectionOncall': '新群 Oncall',
     'botDefaults.sectionBrand': '卡片签名',
     'botDefaults.renameTitle': '修改机器人名称',
@@ -1738,11 +1769,12 @@ const zh = {
     'botDefaults.readIsolationStaleOn': '（已开启，但当前环境无法强制执行——会话会 fail-close 拒启动，建议关闭以恢复）',
     'botDefaults.sectionBackend': '会话后端',
     'botDefaults.backendLabel': '后端类型',
-    'botDefaults.backendHelp': '该 bot 新会话使用的会话后端；改动实时生效于新会话，运行中的会话仍用其启动时的后端、不受影响。tmux 支持 adopt / Web 终端；herdr 托管持久会话；zellij 实验性；pty 最轻量但不跨 daemon 重启存活。“自动”跟随全局默认。',
+    'botDefaults.backendHelp': '该 bot 新会话使用的会话后端；改动实时生效于新会话，运行中的会话仍用其启动时的后端、不受影响。tmux 支持 adopt / Web 终端；herdr 托管持久会话；zmx >= 0.7.0 使用 tail 变化信号 + history 权威纯文本屏幕 + send 输入（无 Web TUI）；zellij 实验性；pty 最轻量但不跨 daemon 重启存活。“自动”跟随全局默认。',
     'botDefaults.backendAuto': '自动（跟随全局默认）',
     'botDefaults.backendTmux': 'tmux',
     'botDefaults.backendHerdr': 'herdr',
     'botDefaults.backendZellij': 'zellij',
+    'botDefaults.backendZmx': 'zmx',
     'botDefaults.backendPty': 'pty',
     'botDefaults.backendSaved': '已保存（下个新会话生效）',
     'botDefaults.brandSave': '保存签名',
@@ -1751,6 +1783,11 @@ const zh = {
     'botDefaults.brandStateOff': '当前：已关闭',
     'botDefaults.brandStateCustom': '当前：自定义',
     'botDefaults.sectionCard': '卡片行为',
+    'botDefaults.usageDisplay': '用量显示位置',
+    'botDefaults.usageDisplayHelp': '原生用量显示在哪里:流式卡正文(默认,显示上下文占用 + 本轮 ↑↓ + 累计 ↑↓)、回复卡页脚(仅显示上下文占用,保持页脚简洁)、或不显示。仅影响展示,不停止 Usage Ledger 统计。',
+    'botDefaults.usageDisplayStreaming': '流式卡片正文',
+    'botDefaults.usageDisplayFooter': '回复卡片页脚',
+    'botDefaults.usageDisplayOff': '不显示',
     'botDefaults.disableStreaming': '关闭飞书流式卡片',
     'botDefaults.disableStreamingHelp': '关闭实时会话状态卡和 Web Terminal 入口；最终结果仍会以消息发送。',
     'botDefaults.silentTurnReactions': '关闭无卡片模式下的状态 reaction',
@@ -1835,6 +1872,9 @@ const zh = {
     'botDefaults.substituteChats': '生效群聊',
     'botDefaults.substituteChatsHelp': '留空表示所有群聊（普通群与话题群）都生效；填写后仅在这些群聊 ID 中触发替身。每行一个，也可用逗号/分号分隔。',
     'botDefaults.substituteChatsPlaceholder': 'oc_xxx\noc_yyy',
+    'botDefaults.substituteExcludedChats': '黑名单群聊',
+    'botDefaults.substituteExcludedChatsHelp': '列出的群聊里替身永不触发（代答被硬关闭，群内 /substitute on 也无法开启），普通群与话题群一视同仁；直接 @机器人 仍照常回答。优先级高于「生效群聊」白名单——同时出现在两处的群以黑名单为准（不代答）。每行一个，也可用逗号/分号分隔。',
+    'botDefaults.substituteExcludedChatsPlaceholder': 'oc_xxx\noc_yyy',
     'botDefaults.substituteTargetsPlaceholder': 'zhangsan@bytedance.com\nou_xxxx（也可直接填 open_id / union_id）',
     'botDefaults.substituteTargets': '替身对象',
     'botDefaults.substituteTargetsHelp': '每项对应一个替身对象。可直接填邮箱（保存时自动解析为 Open ID），也可选择 Open ID、User ID 或 Union ID；解析失败的邮箱会标红。',
@@ -1864,11 +1904,11 @@ const zh = {
     'botDefaults.restrictGrant': '限制被授权人只能纯对话',
     'botDefaults.restrictGrantHelp': '限制 /grant 用户只能普通对话，禁止 botmux 命令、透传命令、CLI 原生命令和工作流相关命令；owner 不受影响。',
     'botDefaults.quotaDefault': '默认消息额度',
-    'botDefaults.quotaPlaceholder': '留空＝不配置默认额度',
-    'botDefaults.quotaHelp': '设置裸 /grant @用户 的默认消息额度。留空保存=不再设置默认额度；已有额度和显式 /grant @用户 N 不受影响。额度用尽后自动撤销授权。',
+    'botDefaults.quotaPlaceholder': '留空＝产品默认 3 条',
+    'botDefaults.quotaHelp': '覆盖授权卡片的默认消息额度。留空保存=使用产品默认 3 条；已有授权和显式 /grant @用户 N 不受影响。额度用尽后自动撤销授权。',
     'botDefaults.quotaSave': '保存额度',
     'botDefaults.quotaInvalid': '额度必须是正整数',
-    'botDefaults.quotaStateOff': '当前：未配置默认额度',
+    'botDefaults.quotaStateOff': '当前：产品默认 3 条',
     'botDefaults.quotaStateOn': '当前：每人 {count} 条',
     'botDefaults.sectionSessionCap': '会话常驻上限',
     'botDefaults.maxLiveWorkers': '最大常驻会话数',
@@ -1953,6 +1993,62 @@ const zh = {
     'roles.saveFailed': '保存失败，请重试',
     'roles.tabGroups': '按群组',
     'roles.tabProfiles': 'Profiles',
+    'roles.editorTabs': '角色配置',
+    'roles.roleTab': '角色提示词',
+    'roles.listenerTab': '消息监听',
+    'roles.listenerBadge': '监听',
+    'roles.listenerEnabled': '启用群消息监听',
+    'roles.listenerName': '监听名称',
+    'roles.listenerNamePlaceholder': '例如：告警监听',
+    'roles.listenerReplyCardTitle': '回复卡片标题',
+    'roles.listenerReplyCardTitlePlaceholder': '留空使用默认标题',
+    'roles.listenerWorkingDir': '工作目录',
+    'roles.listenerWorkingDirPlaceholder': '留空使用 Bot 默认工作目录',
+    'roles.listenerSenderTypes': '发送者类型',
+    'roles.listenerSenderUser': '用户',
+    'roles.listenerSenderBot': '机器人',
+    'roles.listenerMessageTypes': '消息类型',
+    'roles.listenerExcludeSelf': '排除当前机器人',
+    'roles.listenerPrompt': '监听提示词',
+    'roles.listenerPromptPlaceholder': '描述哪些群消息需要处理，以及如何回复。命中的消息会在原消息下方新建话题回复。',
+    'roles.listenerPromptRequired': '启用监听时提示词不能为空',
+    'roles.listenerSenderRequired': '启用监听时至少选择一个发送者',
+    'roles.listenerFilters': '发送者过滤',
+    'roles.listenerMembers': '成员过滤',
+    'roles.listenerBots': '机器人过滤',
+    'roles.listenerMembersHint': '显示名仅用于选择，配置保存 open_id',
+    'roles.listenerMembersEmpty': '暂无成员数据',
+    'roles.listenerBotsEmpty': '暂无机器人数据',
+    'roles.listenerSearchPlaceholder': '按名称或 open_id 搜索',
+    'roles.listenerClearSearch': '清空搜索',
+    'roles.listenerSelectVisible': '全选 {count} 项',
+    'roles.listenerClearVisible': '取消全选 {count} 项',
+    'roles.listenerSelectedCount': '已选择 {count} 项',
+    'roles.listenerFilteredCount': '当前筛选 {count} 项',
+    'roles.listenerMixedMode': '混合状态',
+    'roles.listenerBulkActions': '批量设置监听状态',
+    'roles.listenerTargetListen': '监听',
+    'roles.listenerTargetIgnore': '不监听',
+    'roles.listenerConfirmDelete': '确认删除该 Bot 在此群的消息监听配置？',
+    'roles.listenerScopeHelp': '监听只处理群聊顶层消息；显式 @ 当前 Bot 的消息仍走普通 @ 路由；默认不处理已有线程里的普通回复。',
+    'roles.listenerPreviewTitle': '预览与试运行',
+    'roles.listenerPreviewHint': '预览最近 24 小时内符合当前条件的群消息；试运行会按真实链路创建会话并回复。',
+    'roles.listenerPreviewCount': '数量',
+    'roles.listenerPreviewButton': '预览',
+    'roles.listenerRunPreviewButton': '试运行',
+    'roles.listenerPreviewEmpty': '尚未预览。',
+    'roles.listenerPreviewNoMatches': '最近 24 小时内没有符合条件的内容。',
+    'roles.listenerPreviewSummary': '命中 {count} 条消息',
+    'roles.listenerRunPreviewSummary': '试运行 {count} 条：已触发 {triggered} 条，执行中 {running} 条，已回复 {replied} 条，回复失败 {failed} 条',
+    'roles.listenerPreviewFailed': '预览失败，请重试',
+    'roles.listenerPreviewSender': '发送者',
+    'roles.listenerPreviewTime': '发送时间',
+    'roles.listenerPreviewMessageTitle': '消息标题',
+    'roles.listenerPreviewContent': '消息内容',
+    'roles.listenerRunPreviewState.triggered': '已触发',
+    'roles.listenerRunPreviewState.running': '执行中',
+    'roles.listenerRunPreviewState.replied': '已回复',
+    'roles.listenerRunPreviewState.failed': '回复失败',
     'roles.profileIdPlaceholder': 'profile id，如 collab-main',
     'roles.profileIdInvalid': 'Profile id 只能包含字母、数字、点、下划线、短横线，最长 64，且不能是 . 或 ..',
     'roles.openProfile': '打开',
@@ -2300,6 +2396,8 @@ const en = {
     'sessions.workingDir': 'Working Dir',
     'sessions.created': 'Created',
     'sessions.last': 'Last',
+    'sessions.preview.latestExchange': 'Latest exchange',
+    'sessions.preview.showFull': 'Show full exchange',
     'sessions.adopt': 'Adopt',
     'sessions.actions': 'Actions',
     'sessions.details': 'Details',
@@ -2309,6 +2407,8 @@ const en = {
     'sessions.locating': 'Sending...',
     'sessions.cooldown': 'Cooldown {seconds}s',
     'sessions.openTerminal': 'Terminal',
+    'sessions.openReadonlyTerminal': 'Open read-only terminal',
+    'sessions.openWritableTerminal': 'Open interactive web terminal',
     'sessions.writeLink': 'Write Link',
     'sessions.writeLinkHint': 'Get a writable terminal link (carries a write-access token; opens in a new tab)',
     'sessions.writeLinkFail': 'Failed to get write link',
@@ -3232,12 +3332,13 @@ const en = {
     'settings.openTerminalInFeishu': 'Open streaming-card Web terminals in the Feishu sidebar',
     'settings.openTerminalInFeishuHelp': 'Off by default. Wraps Web Terminal links so Feishu opens them in the sidebar. Write access is still controlled by the terminal token.',
     'settings.enableLocalCliOpen': 'Enable native CLI opening',
-    'settings.enableLocalCliOpenHelp': 'Off by default and effective only when the daemon runs on macOS. Attach mode supports current tmux / Herdr sessions and keeps the same I/O/history when possible; resume mode starts a separate CLI resume process and may stop Feishu from following the session.',
+    'settings.enableLocalCliOpenHelp': 'Off by default and effective only when the daemon runs on macOS. Attach mode enters the same CLI in current tmux / Herdr / ZMX sessions; a ZMX local attach uses the native terminal while Lark remains a plain-text stream. Resume mode starts a separate CLI resume process and may stop Feishu from following the session.',
     'settings.localCliOpenMode': 'Native CLI open mode',
-    'settings.localCliOpenModeHelp': 'Defaults to attaching the current session: managed tmux / Herdr use exact attach, adopted sessions attach only when a reliable existing target is known. Direct resume is for local debugging when you accept the Feishu continuity risk.',
+    'settings.localCliOpenModeHelp': 'Defaults to attaching the current session: managed tmux / Herdr / ZMX use exact attach, and adopted sessions attach only when a reliable existing target is known. A native ZMX attach does not mean botmux provides a Web TUI. Direct resume is for local debugging when you accept the Feishu continuity risk.',
     'settings.localCliOpenModeAttach': 'Attach current session (recommended)',
     'settings.localCliOpenModeResume': 'Start CLI resume',
     'settings.sectionExperimental': 'Experimental',
+    'settings.sectionHostOverloadAlert': 'Host overload alert',
     'settings.chatBotDiscovery': 'In-chat bot discovery (Feishu /members/bots)',
     'settings.chatBotDiscoveryHelp': 'On by default. Reads bot members in the current chat to improve multi-bot @ accuracy. Falls back to legacy discovery on failure; disable only if membership detection is wrong.',
     'settings.herdrTraexPlugin': 'Auto-install TraeX herdr plugin (opt-in)',
@@ -3259,6 +3360,8 @@ const en = {
     'settings.herdrTraexUnsupported': 'This herdr does not support plugins; requires >= 0.7.0. Run herdr update first',
     'settings.codexRpcInput': 'Codex-family RPC input mode',
     'settings.codexRpcInputHelp': 'Experimental, off by default. For codex / traex bots (tmux backend only), user messages are injected via the app-server JSON-RPC channel, bypassing codex terminal paste-drops (the pane still runs the real --remote TUI). Sandbox/isolation/approval-gated/wrapper/startup-command sessions fall back to paste.',
+    'settings.bypassCodexHookTrust': 'Auto-trust Codex hooks',
+    'settings.bypassCodexHookTrustHelp': 'On by default. Codex 0.14x shows an interactive hook-trust gate ("Press t to trust"); every botmux upgrade rewrites its bundled hook so the hash changes and the gate re-fires, and a botmux-managed session has no one to press t → the first message wedges. When on, codex / traex plain-TUI launches pass --dangerously-bypass-hook-trust. Note: that flag trusts ALL hook sources codex sees (including a project .codex/hooks.json and enabled plugins), not only botmux\'s — turn it off if you do not want third-party project/plugin hooks auto-trusted. Restricted bots (bypass disabled) are never affected. Takes effect on the next session; running panes are unchanged.',
     'settings.codexNotifier': 'Codex task completion notifications',
     'settings.codexNotifierHelp': 'Experimental and off by default. When a standalone Codex App/CLI task finishes, the selected Bot sends a Feishu DM to its first deliverable administrator, with options to continue from the card or ask this Mac to open the original Codex App session.',
     'settings.codexNotifierEnablePending': 'Notifications will turn on automatically after you complete the settings below.',
@@ -3280,6 +3383,22 @@ const en = {
     'settings.codexNotifierPending': '{count} completion message(s) are waiting for delivery.',
     'settings.codexNotifierWorkerPending': 'The Hook is installed, but the notification worker is not running or its heartbeat is stale.',
     'settings.codexNotifierLastError': 'Most recent delivery failure: {error}',
+    'settings.hostOverloadAlert': 'Enable overload alert',
+    'settings.hostOverloadAlertHelp': 'When enabled, the selected notification Bot’s daemon checks host load/memory every 30s and sends a Feishu DM to that Bot’s administrator when it crosses the overload line, plus one more when it recovers. Host overload makes session cold-starts time out and hang; this heads-up lets you clear sessions or lower the resident cap in time. One notification Bot per host is enough; off by default.',
+    'settings.hostOverloadAlertTarget': 'Notification Bot',
+    'settings.hostOverloadAlertTargetHelp': 'Pick the Bot that sends the overload DM (any non-apiOnly Bot that can send Feishu messages and resolve an administrator). That Bot’s own daemon does the sampling and sending.',
+    'settings.hostOverloadAlertTargetPlaceholder': 'Select a notification Bot',
+    'settings.hostOverloadAlertRecipient': 'Recipient: {recipient} (this Bot’s first administrator)',
+    'settings.hostOverloadAlertRecipientMissing': 'The selected Bot has no administrator configured, so it cannot send an overload DM.',
+    'settings.hostOverloadAlertRecipientUnverified': 'The target Bot has not resolved its first administrator to a Feishu open_id. Check the administrator config or wait for the Bot to finish starting.',
+    'settings.hostOverloadAlertTargetRequired': 'Select a notification Bot before enabling.',
+    'settings.hostOverloadAlertTargetOffline': 'The target Bot’s daemon is offline, so overload alerts cannot be delivered.',
+    'settings.hostOverloadAlertEnterLoad': 'Load enter threshold (load15 / cores)',
+    'settings.hostOverloadAlertEnterLoadHelp': 'Marks overload when the 15-minute load average > logical cores × this value. Default 1.5. The recovery line is fixed at the built-in default (cores × 1.0); if you set the enter line even lower than that, the recovery line is automatically pulled down to 95% of enter so "recovery requires dropping below enter" still holds (no flapping).',
+    'settings.hostOverloadAlertEnterMem': 'Memory enter threshold (%)',
+    'settings.hostOverloadAlertEnterMemHelp': 'Marks overload when used-memory fraction ≥ this percentage. Default 92. The recovery line is fixed at the built-in default (85%); likewise, if you set the enter line lower, it is automatically pulled down to 95% of enter.',
+    'settings.noVisibleOutputHint': '"No visible output" anti-resend hint',
+    'settings.noVisibleOutputHintHelp': 'Experimental, off by default. Adds a note to the botmux routing hints telling the model that a successful `botmux send` is already delivered, that ending a turn with no visible terminal text is normal, and that a "no visible output, please continue" prompt is a false alarm from the underlying CLI (Claude Code ≥2.1.212) — do not resend. Mainly helps when Claude Code drives a non-Claude backend model (which tends to misread the thinking-only nudge as a send failure and reply repeatedly); harmless but usually unnecessary for an all-Claude setup. Takes effect on the next session, no restart needed.',
     'settings.sectionVcMeetingAgent': 'Meeting Listener',
     'settings.vcMeetingAgent': 'Allow meeting listener features on this machine',
     'settings.vcMeetingAgentHelp': 'On by default. Controls whether bots on this host accept new meeting listener events. Off also skips listener restore; running meetings usually finish naturally.',
@@ -3636,6 +3755,15 @@ const en = {
     'botDefaults.metaOnline': 'Online · daemon healthy',
     'botDefaults.search': 'Search bot name / app id',
     'botDefaults.refresh': 'Refresh',
+    'botDefaults.rosterCount': '{count} bots',
+    'botDefaults.rosterFiltered': '{total} total',
+    'botDefaults.tabNavigation': 'Bot configuration categories',
+    'botDefaults.tabCommon': 'Common',
+    'botDefaults.tabSessions': 'Sessions',
+    'botDefaults.tabSecurity': 'Security',
+    'botDefaults.tabCards': 'Message cards',
+    'botDefaults.tabAdvanced': 'Advanced',
+    'botDefaults.tabHint': 'Switching categories keeps unsaved input',
     'botDefaults.sectionOncall': 'New-chat Oncall',
     'botDefaults.sectionBrand': 'Card Signature',
     'botDefaults.renameTitle': 'Rename bot',
@@ -3735,11 +3863,12 @@ const en = {
     'botDefaults.readIsolationStaleOn': "(enabled, but it can't be enforced here — sessions will fail-close; turn it off to recover)",
     'botDefaults.sectionBackend': 'Session backend',
     'botDefaults.backendLabel': 'Backend type',
-    'botDefaults.backendHelp': 'The session backend for this bot\'s new sessions. Changes apply live to new sessions; running sessions keep the backend they started on and are unaffected. tmux supports adopt / Web Terminal; herdr manages persistent sessions; zellij is experimental; pty is lightest but does not survive daemon restarts. "Auto" follows the global default.',
+    'botDefaults.backendHelp': 'The session backend for this bot\'s new sessions. Changes apply live to new sessions; running sessions keep the backend they started on and are unaffected. tmux supports adopt / Web Terminal; herdr manages persistent sessions; zmx >= 0.7.0 uses tail change signals + an authoritative plain-text history screen + send input (no Web TUI); zellij is experimental; pty is lightest but does not survive daemon restarts. "Auto" follows the global default.',
     'botDefaults.backendAuto': 'Auto (follow global default)',
     'botDefaults.backendTmux': 'tmux',
     'botDefaults.backendHerdr': 'herdr',
     'botDefaults.backendZellij': 'zellij',
+    'botDefaults.backendZmx': 'zmx',
     'botDefaults.backendPty': 'pty',
     'botDefaults.backendSaved': 'Saved (applies to the next new session)',
     'botDefaults.brandSave': 'Save Signature',
@@ -3748,6 +3877,11 @@ const en = {
     'botDefaults.brandStateOff': 'Current: off',
     'botDefaults.brandStateCustom': 'Current: custom',
     'botDefaults.sectionCard': 'Card Behavior',
+    'botDefaults.usageDisplay': 'Usage display',
+    'botDefaults.usageDisplayHelp': 'Where native usage is shown: the streaming card body (default — context window usage + this turn ↑↓ + cumulative ↑↓), the reply-card footer (context window usage only, to keep the footer compact), or nowhere. This affects display only; Usage Ledger accounting remains active.',
+    'botDefaults.usageDisplayStreaming': 'Streaming card body',
+    'botDefaults.usageDisplayFooter': 'Reply card footer',
+    'botDefaults.usageDisplayOff': 'Off',
     'botDefaults.disableStreaming': 'Disable streaming card',
     'botDefaults.disableStreamingHelp': 'Disables the live session card and Web Terminal entry. Final results are still sent as messages.',
     'botDefaults.silentTurnReactions': 'Disable status reactions in card-off mode',
@@ -3832,6 +3966,9 @@ const en = {
     'botDefaults.substituteChats': 'Allowed chats',
     'botDefaults.substituteChatsHelp': 'Leave blank to allow all chats (regular and topic groups); otherwise substitute only fires in these chat IDs. One per line, or comma/semicolon separated.',
     'botDefaults.substituteChatsPlaceholder': 'oc_xxx\noc_yyy',
+    'botDefaults.substituteExcludedChats': 'Blocked chats',
+    'botDefaults.substituteExcludedChatsHelp': 'Substitute never fires in these chats (answering is hard-disabled — /substitute on cannot re-enable it), for regular and topic groups alike; direct @bot mentions still answer normally. Takes precedence over the allowed-chats list: a chat in both is blocked. One per line, or comma/semicolon separated.',
+    'botDefaults.substituteExcludedChatsPlaceholder': 'oc_xxx\noc_yyy',
     'botDefaults.substituteTargetsPlaceholder': 'alice@example.com\nou_xxxx (open_id / union_id also accepted)',
     'botDefaults.substituteTargets': 'Substitute targets',
     'botDefaults.substituteTargetsHelp': 'Each row is one substitute target. Enter an email to resolve it to an Open ID on save, or select Open ID, User ID, or Union ID. Emails that cannot be resolved are flagged.',
@@ -3861,11 +3998,11 @@ const en = {
     'botDefaults.restrictGrant': 'Restrict grantees to plain conversation',
     'botDefaults.restrictGrantHelp': 'Restricts /grant users to plain conversation. Botmux commands, passthrough commands, CLI-native commands, and workflow commands are blocked; the owner is exempt.',
     'botDefaults.quotaDefault': 'Default message quota',
-    'botDefaults.quotaPlaceholder': 'Empty = no default quota',
-    'botDefaults.quotaHelp': 'Default quota for bare /grant @user. Saving empty stops assigning a default; existing quotas and explicit /grant @user N are unchanged. Authorization is revoked when quota runs out.',
+    'botDefaults.quotaPlaceholder': 'Empty = product default of 3',
+    'botDefaults.quotaHelp': 'Overrides the grant card message quota. Saving empty uses the product default of 3; existing grants and explicit /grant @user N are unchanged. Authorization is revoked when quota runs out.',
     'botDefaults.quotaSave': 'Save quota',
     'botDefaults.quotaInvalid': 'Quota must be a positive integer',
-    'botDefaults.quotaStateOff': 'Current: no default quota',
+    'botDefaults.quotaStateOff': 'Current: product default of 3',
     'botDefaults.quotaStateOn': 'Current: {count} per grantee',
     'botDefaults.sectionSessionCap': 'Resident session limit',
     'botDefaults.maxLiveWorkers': 'Max resident sessions',
@@ -3950,6 +4087,62 @@ const en = {
     'roles.saveFailed': 'Save failed, please retry',
     'roles.tabGroups': 'By Group',
     'roles.tabProfiles': 'Profiles',
+    'roles.editorTabs': 'Role settings',
+    'roles.roleTab': 'Role Prompt',
+    'roles.listenerTab': 'Message Listener',
+    'roles.listenerBadge': 'Listener',
+    'roles.listenerEnabled': 'Enable group message listener',
+    'roles.listenerName': 'Listener name',
+    'roles.listenerNamePlaceholder': 'e.g. Alert listener',
+    'roles.listenerReplyCardTitle': 'Reply card title',
+    'roles.listenerReplyCardTitlePlaceholder': 'Leave empty to use the default title',
+    'roles.listenerWorkingDir': 'Working directory',
+    'roles.listenerWorkingDirPlaceholder': 'Leave empty to use the bot default',
+    'roles.listenerSenderTypes': 'Sender types',
+    'roles.listenerSenderUser': 'Users',
+    'roles.listenerSenderBot': 'Bots',
+    'roles.listenerMessageTypes': 'Message types',
+    'roles.listenerExcludeSelf': 'Exclude this bot',
+    'roles.listenerPrompt': 'Listener prompt',
+    'roles.listenerPromptPlaceholder': 'Describe which group messages should be handled and how to reply. Matches reply as a topic under the original message.',
+    'roles.listenerPromptRequired': 'Prompt is required when listener is enabled',
+    'roles.listenerSenderRequired': 'Select at least one sender before enabling the listener',
+    'roles.listenerFilters': 'Sender filters',
+    'roles.listenerMembers': 'Member filters',
+    'roles.listenerBots': 'Bot filters',
+    'roles.listenerMembersHint': 'Display names are only for picking; open_id is saved',
+    'roles.listenerMembersEmpty': 'No members loaded',
+    'roles.listenerBotsEmpty': 'No bots loaded',
+    'roles.listenerSearchPlaceholder': 'Search by name or open_id',
+    'roles.listenerClearSearch': 'Clear search',
+    'roles.listenerSelectVisible': 'Select {count}',
+    'roles.listenerClearVisible': 'Clear {count}',
+    'roles.listenerSelectedCount': '{count} selected',
+    'roles.listenerFilteredCount': '{count} filtered',
+    'roles.listenerMixedMode': 'mixed',
+    'roles.listenerBulkActions': 'Bulk listening state',
+    'roles.listenerTargetListen': 'Listen',
+    'roles.listenerTargetIgnore': 'Ignore',
+    'roles.listenerConfirmDelete': 'Delete this bot\'s message listener config for this group?',
+    'roles.listenerScopeHelp': 'The listener only handles top-level group messages. Messages that explicitly mention this bot still use normal mention routing. Existing thread replies are not handled by default.',
+    'roles.listenerPreviewTitle': 'Preview and Test Run',
+    'roles.listenerPreviewHint': 'Preview group messages from the last 24 hours that match the current filters. Test run creates real sessions and replies through the normal path.',
+    'roles.listenerPreviewCount': 'Count',
+    'roles.listenerPreviewButton': 'Preview',
+    'roles.listenerRunPreviewButton': 'Test run',
+    'roles.listenerPreviewEmpty': 'No preview yet.',
+    'roles.listenerPreviewNoMatches': 'No messages from the last 24 hours match these filters.',
+    'roles.listenerPreviewSummary': '{count} matching messages',
+    'roles.listenerRunPreviewSummary': 'Test ran {count}: triggered {triggered}, running {running}, replied {replied}, failed {failed}',
+    'roles.listenerPreviewFailed': 'Preview failed. Try again.',
+    'roles.listenerPreviewSender': 'Sender',
+    'roles.listenerPreviewTime': 'Sent at',
+    'roles.listenerPreviewMessageTitle': 'Message title',
+    'roles.listenerPreviewContent': 'Message content',
+    'roles.listenerRunPreviewState.triggered': 'Triggered',
+    'roles.listenerRunPreviewState.running': 'Running',
+    'roles.listenerRunPreviewState.replied': 'Replied',
+    'roles.listenerRunPreviewState.failed': 'Reply failed',
     'roles.profileIdPlaceholder': 'profile id, e.g. collab-main',
     'roles.profileIdInvalid': 'Profile id may contain letters, numbers, dots, underscores, and hyphens only; max 64; cannot be . or ..',
     'roles.openProfile': 'Open',