dsh-config-manager 0.1.71 → 0.1.72

package/src/client/recovery/recovery-locales.ts

@@ -14,6 +14,9 @@ export const zh = {
   'common.cancel': '取消',
   'common.retry': '重试',
   'common.unknownError': '未知错误',
+  // 折叠开关的可访问名（维护与诊断的折叠卡头）
+  'common.expand': '展开',
+  'common.collapse': '收起',
   // 入口 / tab
   'view.recovery': '恢复',
   // 全局 SAFE MODE 横幅（聚合优化：恢复并入「备份与快照」，跨 tab 可见兜底）
@@ -171,25 +174,54 @@ export const zh = {
   'sessions.scan': '开始体检',
   'sessions.noRoot': '本机没有会话数据目录（还没产生过会话，或 DSH home 不是这个）。',
   'sessions.empty': '没有发现任何会话。',
-  'sessions.summary.total': '共 {count} 条会话',
-  'sessions.count.blocksStartup': '阻断启动 {count}',
-  'sessions.count.unloadable': '不可加载 {count}',
-  'sessions.count.nextRequestFails': '下次请求会失败 {count}',
-  'sessions.count.invisible': '看不见 {count}',
-  'sessions.targetFormat': '本机会话格式 v{version}',
+  'sessions.metric.total': '会话总数',
+  'sessions.metric.attention': '需要处理',
+  'sessions.metric.format': '会话格式',
+  'sessions.severityShort.blocksStartup': '阻断启动',
+  'sessions.severityShort.unloadable': '不可加载',
+  'sessions.severityShort.nextRequestFails': '下次请求失败',
+  'sessions.severityShort.invisible': '看不见',
+  'sessions.rescan': '重新体检',
+  'sessions.section.attention': '需要处理的会话',
+  'sessions.section.attentionNone': '列表里没有需要处理的会话。',
+  'sessions.issues.more': '还有 {count} 条',
+  'sessions.hidden.healthyShort': '另有 {count} 条正常会话（已隐藏）',
+  'sessions.repair.availableShort': '可应用内修复 {count} 条',
+  'sessions.repair.noneShort': '本次没有可应用内修复的会话。',
   'sessions.unverified': '已做深度校验 {verified} 条，未做深度校验 {count} 条（未验证 ≠ 没问题）',
   'sessions.untested': '另有 {count} 条超出扫描上限，本次未体检。',
   'sessions.unreadableEntries': '有 {count} 个目录/文件读不出来（已如实计入，未当作正常）。',
-  'sessions.col.session': '会话',
-  'sessions.col.severity': '严重级',
-  'sessions.col.issues': '问题',
-  'sessions.col.meta': '版本 / 体积 / 最近活动',
+  // 问题码 → 用户可读短标签（known-gaps G-24 剩余未做项 ③）：此前直接把机器码
+  // （location-mismatch / duplicate-id / format-newer …）拼上屏，中英用户都读不懂；
+  // 映射表在 src/ui/session-issue-labels.ts，未知码回落 sessions.issue.unknown，绝不裸渲染。
+  'sessions.issue.duplicateId': '同一会话 id 出现在多个工作区',
+  'sessions.issue.locationMismatch': '日志位置与所属工作区不一致',
+  'sessions.issue.headerUnreadable': '会话头读不出来',
+  'sessions.issue.tornTail': '末尾帧被截断（DSH 会自愈）',
+  'sessions.issue.corruptFrame': '容器里有非法帧',
+  'sessions.issue.unparsableEvent': '有事件无法解析',
+  'sessions.issue.replayDuplicateRows': '重复写入的行（可零损失清理）',
+  'sessions.issue.syntheticCloser': '合成收尾块与真实续写冲突',
+  'sessions.issue.seqGap': '事件序号有空洞',
+  'sessions.issue.missingMessageId': '消息缺少 id',
+  'sessions.issue.emptyToolCallId': '工具调用 id 为空',
+  'sessions.issue.danglingToolCall': '工具调用没有配对结果',
+  'sessions.issue.toolResultIdMismatch': '工具结果与调用 id 不一致',
+  'sessions.issue.duplicateToolCallId': '同一步里工具调用 id 重复',
+  'sessions.issue.invalidSettlement': '助手段落的结算字段非法',
+  'sessions.issue.closedTurnContinued': '已关闭的轮次被继续',
+  'sessions.issue.formatNewer': '会话格式高于本机 DSH（会被静默跳过）',
+  'sessions.issue.unregisteredWorkspace': '没有工作区记录指向它',
+  'sessions.issue.subagentWithoutParent': '子代理会话缺少父对话',
+  'sessions.issue.unknown': '未识别的问题',
   'sessions.severity.blocksStartup': '会让 DSH 起不来',
   'sessions.severity.invisible': '看不见',
   'sessions.severity.nextRequestFails': '下次请求会失败',
   'sessions.severity.ok': '正常',
   'sessions.severity.unloadable': '会话不可加载',
   'sessions.subagent': '子代理',
+  // 空白会话（从未提问）：DSH 自己的标题就是这个占位名（session.new），不用 uuid 冒充标题
+  'sessions.blank': '新会话',
   'sessions.truncated': '列表已截断：还有 {count} 条未显示（重新体检或按需缩小范围）。',
   'sessions.repair.title': '怎么修',
   'sessions.repair.desc': '容器非法 / header 不可读 / 格式超前这类应用内不动的问题，先在终端预览再落盘；需要写入时建议先关闭 DSH。',
@@ -206,7 +238,6 @@ export const zh = {
   'sessions.repair.none': '本次没有可应用内修复的会话。应用内可修：重放重复行 / 可证明的合成收尾块（零损失）、seq 空洞与不可解析行（截断，有损，需确认）；其余问题见下方离线命令。',
   'common.close': '关闭',
   'sessions.dialog.open': '打开会话体检',
-  'sessions.dialog.hint': '打开后扫描本机存量会话：哪些读不出来、哪些能应用内修复，都在弹窗里处理（扫描只读）。',
   'sessions.dialog.lastScan': '上次扫描：共 {total} 条，需处理 {issues} 条，本机修复记录 {repairs} 条。',
   'sessions.repair.action': '修复',
   'sessions.repair.available': '有 {count} 条会话可应用内修复；点行内「修复」先看计划，或用右上角「一键修复全部」按顺序处理。',
@@ -239,7 +270,6 @@ export const zh = {
   // F-2：官方 session.export 通道（原始日志 ZIP，由 DSH 自己打包，含子会话与附件）
   'sessions.zip.action': '下载原始日志 (ZIP)',
   'sessions.zip.hint': '由 DSH 自己打包这条会话的原始日志（含子会话与附件）；不经过本插件，孤儿/多代日志一并带上。',
-  'sessions.zip.checking': '正在检查导出能力…',
   'sessions.zip.reason.serviceMissing': '当前 DSH 的会话导出通道不可用：持久化后端缺少必需的服务（session-query / session-persistence / attachments）。这条入口已停用（状态 {status}）。',
   'sessions.zip.reason.authRequired': '无法确认导出通道的可用性：本机自请求被认证挡在门外（状态 {status}）。这不代表本机不支持导出 —— 请重启 DSH 后再试。',
   'sessions.zip.reason.readFailed': '导出通道在线，但这条会话的日志读取失败（状态 {status}）。请先用上方体检/修复处理这条会话。',
@@ -276,68 +306,223 @@ export const zh = {
   'sessions.repair.verify.unverified': '未验证：本机跑不了真 codec 复验，所以 DSH 现在能否读它并没有被证明 —— 未验证不等于已验证（写入是否生效另说）。',
   'sessions.repair.verify.rollbackFailed': '危险态：复验失败后自动回滚没有成功，目标当前仍是修复后的字节，需要人工处理。',
   'sessions.repair.rejectedNext': '原文件没有被改动。可以再点一次「开始体检」看最新状态；如果原因与「文件被改过/正在被写入」有关，等这条会话安静下来再试。',
-  // C-1 Q4 检查点（t7）：界面按 routes/recovery.ts 回传的 body.code / warn / guidance code 出文案，
-  // 不靠 HTTP 状态码猜原因（code 组不自行拼接用户可见文本，全部经本字典）。
-  'checkpoint.code.storage-unavailable': '检查点存储不可用',
-  'checkpoint.code.ledger-write-failed': '检查点台账写不进去',
-  'checkpoint.code.confirmation-required': '需要显式确认才能回滚',
-  'checkpoint.code.record-not-found': '找不到该检查点',
-  'checkpoint.code.protected-checkpoint': '该检查点受保护：不可回滚、不可删除',
-  'checkpoint.code.record-incomplete': '该检查点三态不全，缺省不允许回滚',
-  'checkpoint.code.guard-failed': '回滚前的保护点没能拍下来，已中止（零写入）',
-  'checkpoint.code.invalid-input': '请求参数不合法',
-  'checkpoint.code.no-chunks': '没有给出工作区路径分块',
-  'checkpoint.code.chunk-not-absolute': '工作区分块必须是绝对路径',
-  'checkpoint.code.chunk-not-found': '工作区分块不存在或不可用',
-  'checkpoint.code.no-session-input': '没有指定会话（unitId 或 sessionLogPath）',
-  'checkpoint.code.session-missing': '会话日志不存在',
-  'checkpoint.code.session-out-of-root': '会话日志不在本机会话根内，已拒绝',
-  'checkpoint.code.session-too-large': '会话日志超过副本上限：只记下了游标，该态不能自动回滚',
-  'checkpoint.code.session-active': '会话日志刚被写过，为避免覆盖正在进行的对话而拒绝',
-  'checkpoint.code.session-diverged': '会话日志比捕获游标还短（被别的路径改写或截断过），拒绝覆盖',
-  'checkpoint.code.capture-degraded': '该态捕获不完整（有链接或读不到的内容被跳过，已逐条留痕）',
-  'checkpoint.code.capture-truncated': '该态捕获到达上限被截断（已如实标注）',
-  'checkpoint.code.capture-failed': '该态捕获失败',
-  'checkpoint.code.nothing-to-restore': '该检查点没有可恢复的内容',
-  'checkpoint.code.invalid-path': '记录里的路径越界（不在捕获分块内），已拒绝该条',
-  'checkpoint.code.object-missing': '内容副本缺失，已拒绝该条',
-  'checkpoint.code.object-hash-mismatch': '内容副本与记录指纹不一致，已拒绝该条',
-  'checkpoint.code.restore-failed': '恢复失败（详见逐条细节）',
-  // 捕获 / 回滚过程中的告警（不阻断，但必须可见）
-  'checkpoint.warn.ledgerUnreadable': '检查点台账读不出来（已按空台账继续，未静默）',
-  'checkpoint.warn.trackMissing': '有一态没捕获到：该态本次不能回滚',
-  'checkpoint.warn.trackDegraded': '有一态捕获不完整（回滚可能不完整）',
-  'checkpoint.warn.protected': '该检查点受保护：不可回滚、不可删除',
-  'checkpoint.warn.guardFailed': '回滚前的保护点没拍成（已记告警后继续）',
-  // 降级指引：存储栈缺失 / 数据目录不可写 / 只读兜底 / 探测细节 / 会话离线处置 / 已就地写回 / 工作区部分恢复
-  'checkpoint.guidance.mountStorage': '检查点存储栈缺失：把 @deepseek-ai/dsh-storage、dsh-storage-json、dsh-storage-domain 组合进当前 profile 后重试',
-  'checkpoint.guidance.fixDataDir': '插件数据目录不可写：{detail}',
-  'checkpoint.guidance.readOnlyFallback': '存储不可用期间：捕获与回滚都会干净失败，但现状列表仍可查看（不会崩，也不会假装成功）',
-  'checkpoint.guidance.probeDetail': '探测细节：{detail}',
-  'checkpoint.guidance.sessionOffline': '该会话日志超上限或副本缺失：请用离线命令处理（路径见 detail）',
-  'checkpoint.guidance.sessionRewritten': '已就地写回会话日志（路径见 detail）；日志格式与目录位置不变',
-  'checkpoint.guidance.workspacePartial': '工作区可能已部分恢复：后续段（配置/会话）本次未执行',
-  // 面板标签最小集（下一轮做 UI 时直接用；键已就位，漏键即编译失败）
-  'checkpoint.title': '检查点（会话 / 工作区 / 配置 三态同点）',
-  'checkpoint.desc': '一次捕获记下三态的 capturedAt 与指纹，「同点」按跨度可核验；回滚只覆盖捕获过的内容，检查点之后新建的文件一律不删。',
-  'checkpoint.capture': '拍一个检查点',
-  'checkpoint.capture.chunks': '工作区路径（每行一个，绝对路径）',
-  'checkpoint.capture.session': '关联会话',
-  'checkpoint.capture.protect': '保护这个检查点（不可回滚、不可删除）',
-  'checkpoint.list.empty': '还没有检查点',
-  'checkpoint.col.time': '时间',
-  'checkpoint.col.states': '三态',
-  'checkpoint.col.spread': '同点跨度',
-  'checkpoint.samePoint.yes': '同点（跨度 {ms} 毫秒）',
-  'checkpoint.samePoint.no': '非同点：{reason}',
-  'checkpoint.state.workspace': '工作区',
-  'checkpoint.state.session': '会话游标',
-  'checkpoint.state.config': '插件配置',
-  'checkpoint.preview': '预览回滚',
-  'checkpoint.rewind': '回滚到此处',
-  'checkpoint.rewind.confirm': '我确认：将用该检查点覆盖工作区 / 配置 / 会话（新建的文件不会被删除）',
-  'checkpoint.delete': '删除检查点',
-  'checkpoint.legacy.guard': '回滚前的保护点',
+  'rollback.title': '工作区 + 会话回滚',
+  'rollback.desc': '每个回合结束自动留一个回滚点：工作区快照 + 会话游标，不需要手动拍点。回退只覆盖该点记录在案的工作区路径，并删除「能证明是留点之后新建」且通过安全判据的路径（.git / node_modules / 插件数据区 / 超出单文件上限一律拒删；留点时被预算挡下的既有文件也在证明名单里，不会被当成新建；证明名单本身不完整时一条都不删）；会话回退在目标回合之前的稳定边界 fork 一个新子会话，原会话日志只读、绝不被改写。',
+  'rollback.list.empty': '还没有回滚点',
+  /* 2026-10-11 布局重构：工具栏只放数字摘要 + 刷新按钮；留存/淘汰口径仍在 rollback.retention.hint（改由 ⓘ 承载）。 */
+  'rollback.summary': '共 {points} 个回滚点 · {sessions} 个会话',
+  'rollback.refresh': '刷新',
+  // 台账弹窗（2026-10-12：卡不再折叠，台账整块搬进按会话分组的弹窗）
+  'rollback.dialog.title': '回滚点台账',
+  'rollback.dialog.open': '查看回滚点',
+  // 台账弹窗左侧栏（拥有回滚点的对话列表；默认按各组最新时间从新到旧）
+  'rollback.sessions.title': '有回滚点的对话',
+  'rollback.col.time': '时间',
+  'rollback.col.session': '会话',
+  'rollback.col.turn': '回合',
+  'rollback.col.states': '两态',
+  'rollback.turn': '第 {n} 回合',
+  'rollback.turnUnknown': '回合未知',
+  'rollback.badge.incomplete': '两态不全',
+  'rollback.badge.protected': '受保护（只进不出）',
+  'rollback.apiMissing': '当前宿主没有回滚点能力（插件版本过旧）：界面不假装可用',
+  'rollback.retention.hint': '自动点：每会话最多 {perSession} 个、全局最多 {total} 个，超出只淘汰最旧的自动点。回退前的救援点不占这两个额度、也不被它们淘汰，但用户删不掉，所以另有自己的两道上限：每会话最多 {guardsPerSession} 个、全局最多 {guards} 个（无论按哪道算，超出都淘汰最旧的救援点）。',
+  'rollback.autopoint.hint': '回滚点由每个回合结束时自动留：工作区快照 + 会话游标（没有「手动拍点」入口）。',
+  'rollback.state.workspace': '工作区',
+  'rollback.state.session': '会话',
+  'rollback.state.unknown': '未知状态',
+  'rollback.mode.label': '回退范围',
+  'rollback.mode.filesAndSession': '工作区文件 + 会话',
+  'rollback.mode.filesOnly': '只回退工作区文件',
+  'rollback.mode.sessionOnly': '只回退会话',
+  'rollback.mode.unknown': '未知回退范围',
+  'rollback.kind.auto': '自动留点',
+  'rollback.kind.guard': '回退前救援点（可回退、不可删）',
+  /* 行内徽章短标签（完整语义见上一条，进 title） */
+  'rollback.kind.guardShort': '救援点',
+  'rollback.kind.unknown': '未知来源',
+  'rollback.code.ok': '成功',
+  'rollback.code.deleted': '已删除',
+  'rollback.code.confirmation-required': '需要显式确认才能回退',
+  'rollback.code.protected-point': '该回滚点被拒绝：受保护点不可回退、不可删除；救援点可作为回退目标，但用户不可删除',
+  'rollback.code.record-not-found': '找不到该回滚点',
+  'rollback.code.record-incomplete': '该回滚点两态不全，缺省不允许回退',
+  'rollback.code.invalid-input': '请求参数不合法',
+  'rollback.code.created-removals-limit': '待删除的「留点之后新建」路径超过上限：为免只删一半，本次回退整体拒绝、一条都没动（工作区与会话都未被改动）',
+  'rollback.code.no-boundary': '该回合之前没有可用的稳定边界（会话回退不可用）',
+  'rollback.code.storage-unavailable': '回滚点存储不可用',
+  'rollback.code.mutation-locked': '有另一个写操作正在进行（或已进安全模式）：稍后重试',
+  'rollback.code.method-not-allowed': '该端点不支持这个请求方法',
+  'rollback.code.ledger-unreadable': '回滚点台账读不出来（已按空台账继续，未静默）',
+  'rollback.code.ledger-write-failed': '回滚点台账写不进去',
+  'rollback.code.invalid-path': '记录里的路径越界（不在记录在案的分块内），已拒绝该条',
+  'rollback.code.object-missing': '内容副本缺失，已拒绝该条',
+  'rollback.code.object-hash-mismatch': '内容副本与记录指纹不一致，已拒绝该条',
+  'rollback.code.restore-failed': '回退失败（详见逐条细节）',
+  'rollback.code.verify-failed': '回退后逐文件校验未通过，已整体回滚到回退前状态',
+  'rollback.code.nothing-to-restore': '该回滚点没有可恢复的内容',
+  /* T10/T11：工作区段 **files=0**（该点压根没记录任何文件）的独立码 —— 与
+     `nothing-to-restore`（记录了条目但全部已与快照一致）是**两件不同的事**，界面上必须说两句不同的话：
+     前者「没有记录任何文件」，后者「工作区与该回退点一致」。只出现在 segments[].reasonCode。 */
+  'rollback.code.no-recorded-files': '该回退点没有记录任何文件',
+  'rollback.code.file-not-recorded': '这个路径不在该回滚点的记录里',
+  'rollback.code.guard-failed': '回退前的救援点没能留下，已中止（零写入）',
+  'rollback.code.session-missing': '会话日志不存在',
+  'rollback.code.session-out-of-root': '会话日志不在本机会话根内，已拒绝',
+  'rollback.code.session-too-large': '会话日志超过上限：只记下了游标（回退不依赖副本）',
+  // t7 定点修正（captain 授权；既有键措辞修正，不是新增键）：该码现在有两种用法 ——
+  // ① preview.session.reasonCode（仅供参考）；② 结果码：运行中的对话带文件段的回退被硬拒（工作区零改动）。
+  'rollback.code.session-active': '这条对话正在运行（会话日志刚被写过）：此时带文件段的回退会被拒绝、工作区一个字节都不动；只回溯消息不受影响（回退只 fork 子会话，不改写原日志）',
+  // t8（只追加，不动上面那条既有键）：对话**正在运行**时 —— 默认只回溯消息，带工作区段的回退在路由层被拒
+  'rollback.preview.sessionActive': '这条对话正在运行：本轮结束前只回溯消息（不改动工作区），避免与正在写盘的工具抢文件。等本轮结束后重新打开本弹窗，即可连文件一起回退。',
+  'rollback.sessionActive.denied': '这条对话正在运行：本次一个文件都没有改动。请等本轮结束，或改成「只回溯消息」再试。',
+  'rollback.code.session-fork-unavailable': '当前宿主没有提供会话 fork 能力，因此不能回退会话',
+  'rollback.code.fork-failed': 'fork 子会话失败，会话段未回退',
+  'rollback.code.capture-failed': '该态留点失败',
+  'rollback.code.capture-truncated': '该态留点到达上限被截断（已如实标注）',
+  'rollback.code.capture-degraded': '该态留点不完整（有链接或读不到的内容被跳过，已逐条留痕）',
+  'rollback.code.no-chunks': '没有给出工作区路径分块',
+  'rollback.code.chunk-not-absolute': '工作区分块必须是绝对路径',
+  'rollback.code.chunk-not-found': '工作区分块不存在或不可用',
+  'rollback.code.unknown': '未识别的错误码（技术细节见下方）',
+  'rollback.guidance.mountStorage': '回滚点存储栈缺失：把 @deepseek-ai/dsh-storage、dsh-storage-json、dsh-storage-domain 组合进当前 profile 后重试',
+  'rollback.guidance.fixDataDir': '插件数据目录不可写：{detail}',
+  'rollback.guidance.readOnlyFallback': '存储不可用期间：留点与回退都会干净失败，但现状列表仍可查看（不会崩，也不会假装成功）',
+  'rollback.guidance.probeDetail': '探测细节：{detail}',
+  'rollback.guidance.workspaceRolledBack': '工作区写回失败后已整体回滚到回退前状态（会话段本次未执行）',
+  'rollback.guidance.forkUnavailable': '当前宿主没有提供会话 fork 能力：会话段未回退（原会话日志未被改写）',
+  'rollback.guidance.sessionForked': '已 fork 新子会话：{detail}（原会话日志只读、未被改写）',
+  'rollback.guidance.sessionNotAttached': '新子会话没能挂回原工作区（会出现在侧栏「未分组」下；回退本身已生效）',
+  'rollback.guidance.unknown': '未识别的指引（技术细节见下方）',
+  'rollback.warn.ledgerUnreadable': '回滚点台账读不出来（已按空台账继续，未静默）',
+  'rollback.warn.trackMissing': '有一态没留到：该态本次不能回退',
+  'rollback.warn.trackDegraded': '有一态留得不完整（回退可能不完整）',
+  'rollback.warn.protected': '该回滚点受保护（只进不出）：不可回退、不可删除',
+  'rollback.warn.guardFailed': '回退前的救援点没留成（已记告警后继续）',
+  'rollback.warn.createdRefused': '本次不删除任何「留点后新建」的路径：捕获时的证明名单不完整（有整目录被忽略 / 路径索引缺失 / 目录读不出），无法证明哪些是新建的',
+  'rollback.warn.unknown': '未识别的告警（技术细节见下方）',
+  'rollback.preview': '预览回退',
+  /* 2026-10-10 用户第三条：预览对话框改简洁版，标题就叫「回退预览」（不再带副标题）。
+     这个键只被两处预览界面使用（聊天入口的预览对话框 + 设置页回滚卡的预览弹窗），改的是同一句话。 */
+  'rollback.preview.title': '回退预览',
+  'rollback.preview.hint': '以下为只读预览（零写入）。确认后才会执行回退。',
+  'rollback.preview.loading': '正在生成预览…',
+  'rollback.preview.empty': '该回滚点没有可回退的内容。',
+  'rollback.preview.none': '该点没有可回退的内容',
+  'rollback.preview.reason.guard': '宿主这次没有允许回退该救援点（救援点通常可作为回退目标；详见下方细节）',
+  'rollback.preview.reason.incomplete': '该点两态不全：需要显式允许部分回退',
+  'rollback.preview.reason.hostRefused': '宿主拒绝了这次回退（原因见下方细节）',
+  'rollback.preview.segments': '只勾可回退的段（只有工作区与会话两态）',
+  'rollback.preview.overwrite': '覆盖 {n} 项',
+  'rollback.preview.different': '其中 {n} 项内容不同',
+  'rollback.preview.missing': '{n} 项当前已不存在（会被重新创建）',
+  'rollback.preview.createdAfter': '{n} 项在留点时并不存在（留点之后新建；回退只会删除其中通过安全判据的）',
+  'rollback.preview.removalsTitle': '回退会删除的文件',
+  'rollback.preview.notice.skipped': '{n} 项在留点时被跳过（未记录；已计入证明名单 ⇒ 不参与删除判据）',
+  'rollback.preview.notice.truncated': '该点捕获被上限截断（超单文件上限 / 字节预算 / 文件数预算）；删除判据另看证明名单（路径索引）是否完整',
+  /* —— 简洁版预览：只列「会被回退的文件 + 新增/删除行数」（E1 的 preview.workspace.files）——
+   * 三条口径逐字对应引擎：① 只列**会被改动**的文件（内容已一致的一项都不列，空数组 ⇒ empty 那行）；
+   * ② added/removed 可能是 null（单文件超限 / 非文本 / 对象仓读不出）⇒ 说「行数未统计」，
+   * **绝不写 0**（0 是一个会被证伪的具体数字，而「不知道」不是）；③ 本清单只覆盖**记录在案**的
+   * 文件 —— 整文件删除走**另一条**清单（`rollback.preview.removalsTitle` / `createdSkipped`），
+   * 删除清单由引擎与执行阶段**共用同一个函数**算出（预览说会删的 = 实际删的）。 */
+  'rollback.preview.files.title': '将被回退的文件：',
+  'rollback.preview.files.empty': '工作区与该回退点一致，无需恢复',
+  /* —— T15：**预览态**（点「回退」之前那一屏）的四态文案 ——
+   * 判据只来自 preview 字段（available / overwrite / different / missing / reasonCode /
+   * session.restorable + 宿主 canRestore），**禁止解析 detail**；判定函数 = src/ui/rollback-view.ts 的
+   * rollbackPreviewNote()（一处实现，聊天对话框调用它）。
+   * ③a 与 ①② 的「会话仍会回退」变体都**不含**「无需恢复」——点下去真会 fork 子会话，
+   * 说「无需恢复」就是假尾句（假尾句禁令）。 */
+  'rollback.preview.files.unavailable': '该回退点的工作区态没有可用的记录（原因：{reason}），无需恢复',
+  'rollback.preview.files.unavailableSession': '该回退点的工作区态没有可用的记录（原因：{reason}）；会话仍会回退到该点之前',
+  'rollback.preview.files.noFilesSession': '该回退点没有记录任何文件；会话仍会回退到该点之前',
+  'rollback.preview.files.consistentSession': '工作区与该回退点一致（会话仍会回退到该点之前）',
+  'rollback.preview.file.added': '+{n}',
+  'rollback.preview.file.removed': '−{n}',
+  /** 整文件删除（用户 2026-10-12 第 6 条）：写「删除」而不是 `+0 −N` —— 那是两件事。 */
+  'rollback.preview.file.deleted': '删除',
+  'rollback.preview.file.unknown': '行数未统计',
+  'rollback.preview.file.unknownHint': '这些文件的行数没有统计出来（文件过大、不是文本或内容副本读不出来）—— 回退仍会照常覆盖它们。',
+  'rollback.diff.viewHint': '查看差异：{path}',
+  'rollback.diff.loading': '正在读取差异…',
+  'rollback.diff.before': '当前',
+  'rollback.diff.after': '回退后',
+  'rollback.diff.identical': '该文件与回退点内容一致，回退不会改动它',
+  'rollback.diff.degraded': '差异规模较大，已按整块替换展示（仍是完整结果，只是不是最小的编辑脚本）',
+  'rollback.diff.truncated': '只画了前 {shown} 行（共 {total} 行），数据本身是完整的',
+  'rollback.diff.reason.missingBlob': '这份内容副本读不出来，无法逐行对照（回退仍会尝试写回它）',
+  'rollback.diff.reason.binary': '不是文本文件，没有逐行差异可看',
+  'rollback.diff.reason.tooLarge': '文件超过展示上限，没有逐行差异可看（回退仍会照常覆盖它）',
+  'rollback.diff.reason.unreadable': '当前文件读不出来（权限不足，或它不是普通文件），无法逐行对照',
+  'rollback.diff.reason.unknown': '无法逐行对照，原因未知（宿主没有给出原因）',
+  'rollback.diff.failed': '差异读取失败',
+  /* 结果一行摘要：nothing-to-restore 是**成功**（HTTP 200、恢复 0 项），不是失败 —— 说「无需恢复」。
+     T11：同一句「无需恢复」下**三种情形必须说三句不同的话**，纯按 segments[].status / reasonCode 分派
+     （禁解析 detail、禁自造码）：
+       · noop     = ③ 记录了条目且全部已与快照一致 ⇒「工作区与该回退点一致」；
+       · noRecord = ① 存在 status==='skipped' 的段（该态没有可用捕获）⇒「没有可用的记录（原因：…）」；
+       · noFiles  = ② 存在 reasonCode==='no-recorded-files' 的段（该点没记录任何文件）。
+     {reason} 是**该段 reasonCode 的字典键文本**（未知码回落 unknown，绝不裸渲染机器码）。 */
+  'rollback.preview.result.noop': '工作区与该回退点一致，无需恢复',
+  'rollback.preview.result.noRecord': '该回退点没有可用的记录（原因：{reason}），无需恢复',
+  'rollback.preview.result.noFiles': '该回退点没有记录任何文件，无需恢复',
+  'rollback.preview.result.code': 'code：{code}',
+  'rollback.preview.warningsTitle': '该点的告警',
+  'rollback.preview.cursorBytes': '会话日志 {now} → {target} 字节',
+  'rollback.group.label': '会话：{session}',
+  'rollback.group.count': '{n} 个回滚点',
+  'rollback.group.unknownSession': '未知会话',
+  'rollback.row.files': '文件 {n} 个',
+  'rollback.row.sessionCursor': '有会话游标',
+  'rollback.row.noSessionCursor': '无会话游标（只能回退工作区）',
+  /* 2026-10-11 布局重构：两行式行卡上只放**短标签**，完整句仍在上面的键里（进 title）——
+     事实一个字都不少，但不再逐行重复整句。 */
+  'rollback.row.sessionShort': '会话可回退',
+  'rollback.row.workspaceShort': '仅工作区',
+  'rollback.row.notice.skipped': '{n} 项在留点时被跳过（未记录；已计入证明名单 ⇒ 不会被当成新建删掉）',
+  'rollback.row.notice.truncated': '该点留点达到上限被截断（计数仍如实；删除判据另看证明名单是否完整）',
+  /* 告警徽章的短标签（完整句进 title；truncated 无计数） */
+  'rollback.row.notice.skippedShort': '跳过 {n} 项',
+  'rollback.row.notice.truncatedShort': '已截断',
+  'rollback.preview.cursor': '会话边界 {from} → {to}',
+  'rollback.preview.turns': '回退到第 {n} 回合之前',
+  'rollback.preview.active': '该会话日志刚被写过（仅供参考：回退只 fork 子会话，不改写原日志）',
+  'rollback.rewind': '回退到此处',
+  'rollback.rewind.confirm': '我确认：按所选范围回退。工作区会写回该点记录在案的路径，并删除能证明是「留点之后新建」且通过安全判据的路径（.git / node_modules / 插件数据区 / 超出单文件上限一律拒删；证明名单不完整时一条都不删）；会话在目标回合之前的稳定边界 fork 新子会话，原会话日志不改写。',
+  'rollback.rewind.allowPartial': '允许部分回退（该回滚点两态不全）',
+  'rollback.guard.require': '回退前必须留救援点（留不下就整体中止，零写入）',
+  'rollback.guard.warn': '回退前留救援点（留不下记告警后继续）',
+  'rollback.guard.off': '跳过回退前救援点',
+  'rollback.guard.unknown': '未知的救援点策略',
+  'rollback.rewind.result.title': '回退结果',
+  'rollback.rewind.result.counts': '恢复 {restored} 项 / 删除 {removed} 项 / 失败 {failed} 项 / 留点时并不存在（之后新建）的共 {leftovers} 项',
+  'rollback.rewind.result.child': '已回到该消息之前（当前对话：{id}）',
+  // A（无感替换）：原会话被收进「已归档」——列表里只剩这一条对话
+  'rollback.rewind.archive.done': '原会话已收进「已归档」（需要时可在那儿恢复）',
+  // 第一条用户消息之前没有上一个回合 ⇒ 没有可 fork 的边界：开一条全新会话（对齐参照实现）
+  'rollback.rewind.freshSession': '这是这条对话的第一条消息之前：已为你新建一条空会话（这条消息的文字可从上面那条气泡复制）',
+  'rollback.rewind.freshSessionFailed': '这是第一条消息之前、没有可回退的对话边界，而本客户端没能新建空会话 —— 请手动点「新会话」',
+  'rollback.rewind.archive.unavailable': '本客户端没有可用的归档入口，所以原会话仍留在会话列表里（内容未被改写）',
+  'rollback.rewind.archive.active': '原会话还有进行中的工作，暂时不能归档 —— 它仍留在会话列表里（内容未被改写）',
+  'rollback.rewind.archive.failed': '原会话归档失败，它仍留在会话列表里（内容未被改写）',
+  'rollback.rewind.result.guard': '回退前救援点：{id}',
+  'rollback.rewind.result.skipped': '未执行的段：{list}',
+  'rollback.segment.restored': '已恢复',
+  'rollback.segment.skipped': '已跳过',
+  'rollback.segment.failed': '失败',
+  'rollback.segment.unknown': '未知状态',
+  'rollback.outcome.restored': '全部恢复',
+  'rollback.outcome.partial': '部分恢复',
+  'rollback.outcome.failed': '回退失败',
+  'rollback.outcome.denied': '已拒绝（零写入）',
+  'rollback.outcome.unknown': '未知结论',
+  'rollback.delete': '删除回滚点',
+  'rollback.delete.done': '已删除回滚点',
+  'rollback.delete.confirmTitle': '删除这个回滚点？',
+  'rollback.delete.confirmMessage': '只删除台账记录与内容副本，不会改动工作区与会话。受保护点与回退前救援点由引擎一律拒绝删除；救援点超出每会话上限 20 个或全局上限 50 个时会自动淘汰最旧的。',
+  'rollback.delete.protected': '该回滚点不可删除：受保护点与救援点一律被引擎拒绝（救援点超出每会话上限 20 个或全局上限 50 个时自动淘汰最旧的）',
+  'rollback.storage.unavailable': '回滚点存储不可用（现状列表仍可查看）',
   // t54：中断的档案复制残留（cross-F3）—— 独立形态 + 只给删除
   'recovery.incomplete.title': '未完成的档案副本',
   'recovery.incomplete.hint': '这些目录带「复制进行中」标记但没有 package.json，是复制被中断留下的半截副本；不能启动，只能删除（只列出有标记的目录 —— 用户手工建的目录不会出现在这里）。',
@@ -417,6 +602,8 @@ export const en: Record<keyof typeof zh, string> = {
   'common.cancel': 'Cancel',
   'common.retry': 'Retry',
   'common.unknownError': 'Unknown error',
+  'common.expand': 'Expand',
+  'common.collapse': 'Collapse',
   'view.recovery': 'Recovery',
   'recovery.banner': 'Configuration changes are protected: there is an unfinished recovery item. Resolve it before continuing.',
   'recovery.bannerAction': 'Go to recovery',
@@ -556,25 +743,53 @@ export const en: Record<keyof typeof zh, string> = {
   'sessions.scan': 'Run check',
   'sessions.noRoot': 'No sessions directory on this machine (no conversation yet, or DSH home is not this one).',
   'sessions.empty': 'No sessions found.',
-  'sessions.summary.total': '{count} session(s)',
-  'sessions.count.blocksStartup': '{count} block startup',
-  'sessions.count.unloadable': '{count} unloadable',
-  'sessions.count.nextRequestFails': '{count} will fail the next request',
-  'sessions.count.invisible': '{count} invisible',
-  'sessions.targetFormat': 'Local session format v{version}',
+  'sessions.metric.total': 'Sessions',
+  'sessions.metric.attention': 'Need attention',
+  'sessions.metric.format': 'Session format',
+  'sessions.severityShort.blocksStartup': 'Blocks startup',
+  'sessions.severityShort.unloadable': 'Unloadable',
+  'sessions.severityShort.nextRequestFails': 'Next request fails',
+  'sessions.severityShort.invisible': 'Invisible',
+  'sessions.rescan': 'Run check again',
+  'sessions.section.attention': 'Sessions needing attention',
+  'sessions.section.attentionNone': 'No session in the list needs attention.',
+  'sessions.issues.more': '+{count} more',
+  'sessions.hidden.healthyShort': '{count} healthy session(s) hidden',
+  'sessions.repair.availableShort': '{count} repairable in-app',
+  'sessions.repair.noneShort': 'No session can be repaired in-app this time.',
   'sessions.unverified': '{verified} deeply checked, {count} not deeply checked (unverified is not the same as healthy)',
   'sessions.untested': 'Another {count} session(s) exceeded the scan limit and were not checked.',
   'sessions.unreadableEntries': '{count} directory/file entries could not be read (counted as-is, never treated as fine).',
-  'sessions.col.session': 'Session',
-  'sessions.col.severity': 'Severity',
-  'sessions.col.issues': 'Issues',
-  'sessions.col.meta': 'Version / size / last activity',
+  // Issue code -> human label (known-gaps G-24 item 3): the panel used to print the raw machine
+  // code (location-mismatch / duplicate-id / format-newer ...); unknown codes fall back to
+  // sessions.issue.unknown, never the bare code.
+  'sessions.issue.duplicateId': 'Same session id in several workspaces',
+  'sessions.issue.locationMismatch': 'Log location does not match its workspace',
+  'sessions.issue.headerUnreadable': 'Session header unreadable',
+  'sessions.issue.tornTail': 'Truncated tail frame (DSH self-heals)',
+  'sessions.issue.corruptFrame': 'Invalid frame in the container',
+  'sessions.issue.unparsableEvent': 'Unparsable event',
+  'sessions.issue.replayDuplicateRows': 'Replayed duplicate rows (lossless cleanup)',
+  'sessions.issue.syntheticCloser': 'Synthetic closer conflicts with real continuation',
+  'sessions.issue.seqGap': 'Sequence gap',
+  'sessions.issue.missingMessageId': 'Message is missing its id',
+  'sessions.issue.emptyToolCallId': 'Empty tool-call id',
+  'sessions.issue.danglingToolCall': 'Tool call without a matching result',
+  'sessions.issue.toolResultIdMismatch': 'Tool result id does not match its call',
+  'sessions.issue.duplicateToolCallId': 'Duplicate tool-call id in one step',
+  'sessions.issue.invalidSettlement': 'Invalid assistant settlement fields',
+  'sessions.issue.closedTurnContinued': 'Closed turn continued',
+  'sessions.issue.formatNewer': 'Session format newer than this DSH (skipped silently)',
+  'sessions.issue.unregisteredWorkspace': 'No workspace record points at it',
+  'sessions.issue.subagentWithoutParent': 'Subagent session without its parent',
+  'sessions.issue.unknown': 'Unrecognized issue',
   'sessions.severity.blocksStartup': 'Blocks DSH startup',
   'sessions.severity.invisible': 'Invisible',
   'sessions.severity.nextRequestFails': 'Next request fails',
   'sessions.severity.ok': 'Healthy',
   'sessions.severity.unloadable': 'Session cannot load',
   'sessions.subagent': 'Subagent',
+  'sessions.blank': 'New Session',
   'sessions.truncated': 'List truncated: {count} more not shown (run the check again or narrow the scope).',
   'sessions.repair.title': 'How to repair',
   'sessions.repair.desc': 'For classes the in-app path does not touch (invalid containers / unreadable headers / future formats ...), preview in a terminal first; close DSH before writing.',
@@ -591,7 +806,6 @@ export const en: Record<keyof typeof zh, string> = {
   'sessions.repair.none': 'No session can be repaired in-app this time. In-app repair covers: replayed duplicate rows / provable synthetic closer blocks (lossless), and seq gaps or unparsable rows (truncation, LOSSY, needs confirmation). Everything else is in the offline commands below.',
   'common.close': 'Close',
   'sessions.dialog.open': 'Open session health check',
-  'sessions.dialog.hint': 'Opens a scan of the sessions on this machine: which ones cannot be read and which can be repaired in-app (the scan itself is read-only).',
   'sessions.dialog.lastScan': 'Last scan: {total} sessions, {issues} need attention, {repairs} repair record(s).',
   'sessions.repair.action': 'Repair',
   'sessions.repair.available': '{count} session(s) can be repaired in-app; click Repair on a row to preview, or use "Repair all" to process them in order.',
@@ -624,7 +838,6 @@ export const en: Record<keyof typeof zh, string> = {
   // F-2: the official session.export channel (raw-log ZIP built by DSH, including descendants and attachments)
   'sessions.zip.action': 'Download raw log (ZIP)',
   'sessions.zip.hint': "DSH packages this session's raw log (including descendant sessions and attachments) itself; the plugin is not involved, so orphaned and multi-generation logs come along.",
-  'sessions.zip.checking': 'Checking export capability…',
   'sessions.zip.reason.serviceMissing': 'The current DSH session-export channel is unavailable: the persistence backend is missing required services (session-query / session-persistence / attachments). This entry is disabled (status {status}).',
   'sessions.zip.reason.authRequired': 'The export channel could not be verified: the loopback request was rejected by authentication (status {status}). This does not mean export is unsupported here — restart DSH and try again.',
   'sessions.zip.reason.readFailed': "The export channel is live, but this session's log could not be read (status {status}). Repair this session above first.",
@@ -661,69 +874,195 @@ export const en: Record<keyof typeof zh, string> = {
   'sessions.repair.verify.unverified': 'Unverified: this machine cannot run the real-codec re-check, so DSH being able to read it right now is NOT proven -- unverified is not the same as verified (that says nothing about whether the write landed).',
   'sessions.repair.verify.rollbackFailed': 'Dangerous state: after the re-check failed, the automatic rollback did NOT succeed; the target still holds the repaired bytes and needs manual handling.',
   'sessions.repair.rejectedNext': 'The original file was not modified. Run the health check again for the latest state; if the reason mentions a changed file or active writing, retry once that session is quiet.',
-  // C-1 Q4 checkpoints (t7): the UI renders the body.code / warn / guidance codes returned by
-  // routes/recovery.ts instead of guessing a reason from the HTTP status.
-  'checkpoint.code.storage-unavailable': 'Checkpoint storage unavailable',
-  'checkpoint.code.ledger-write-failed': 'Could not write the checkpoint ledger',
-  'checkpoint.code.confirmation-required': 'Explicit confirmation is required to rewind',
-  'checkpoint.code.record-not-found': 'Checkpoint not found',
-  'checkpoint.code.protected-checkpoint': 'This checkpoint is protected: it cannot be rewound or deleted',
-  'checkpoint.code.record-incomplete': 'This checkpoint is incomplete; rewinding is refused by default',
-  'checkpoint.code.guard-failed': 'Could not capture the pre-rewind protection point; aborted with zero writes',
-  'checkpoint.code.invalid-input': 'Invalid request',
-  'checkpoint.code.no-chunks': 'No workspace path chunks were provided',
-  'checkpoint.code.chunk-not-absolute': 'Workspace chunks must be absolute paths',
-  'checkpoint.code.chunk-not-found': 'Workspace chunk is missing or unusable',
-  'checkpoint.code.no-session-input': 'No session was specified (unitId or sessionLogPath)',
-  'checkpoint.code.session-missing': 'Session log not found',
-  'checkpoint.code.session-out-of-root': 'Session log is outside the local session root; refused',
-  'checkpoint.code.session-too-large': 'Session log exceeds the copy limit: only the cursor was captured, so this state cannot be rewound automatically',
-  'checkpoint.code.session-active': 'The session log was written recently; refused to avoid overwriting an active conversation',
-  'checkpoint.code.session-diverged': 'The session log is shorter than the captured cursor (rewritten or truncated elsewhere); refused',
-  'checkpoint.code.capture-degraded': 'This state was captured incompletely (skipped links or unreadable entries are listed)',
-  'checkpoint.code.capture-truncated': 'This state hit the capture limit and was truncated',
-  'checkpoint.code.capture-failed': 'Failed to capture this state',
-  'checkpoint.code.nothing-to-restore': 'This checkpoint has nothing to restore',
-  'checkpoint.code.invalid-path': 'A recorded path is outside its capture chunk; that entry was refused',
-  'checkpoint.code.object-missing': 'The content copy is missing; that entry was refused',
-  'checkpoint.code.object-hash-mismatch': 'The content copy does not match the recorded fingerprint; that entry was refused',
-  'checkpoint.code.restore-failed': 'Restore failed (see per-entry details)',
-  // Warnings raised while capturing or rewinding (never blocking, always visible)
-  'checkpoint.warn.ledgerUnreadable': 'Checkpoint ledger unreadable (continuing with an empty ledger)',
-  'checkpoint.warn.trackMissing': 'A state was not captured: it cannot be rewound',
-  'checkpoint.warn.trackDegraded': 'A state was captured incompletely (the rewind may be incomplete)',
-  'checkpoint.warn.protected': 'This checkpoint is protected: no rewind, no delete',
-  'checkpoint.warn.guardFailed': 'The pre-rewind protection point failed (continued with a warning)',
-  // Degradation guidance: missing storage stack / unwritable data dir / read-only fallback
-  // / probe detail / session offline handling / written back in place / partially restored workspace
-  'checkpoint.guidance.mountStorage': 'Checkpoint storage stack missing: add @deepseek-ai/dsh-storage, dsh-storage-json and dsh-storage-domain to the current profile and retry',
-  'checkpoint.guidance.fixDataDir': 'Plugin data directory is not writable: {detail}',
-  'checkpoint.guidance.readOnlyFallback': 'While storage is unavailable, capture and rewind fail cleanly; the current list stays readable',
-  'checkpoint.guidance.probeDetail': 'Probe detail: {detail}',
-  'checkpoint.guidance.sessionOffline': 'This session log is over the limit or its copy is missing: handle it with the offline command (path in detail)',
-  'checkpoint.guidance.sessionRewritten': 'Session log was written back in place (path in detail); the log format and location are unchanged',
-  'checkpoint.guidance.workspacePartial': 'The workspace may be partially restored: later segments (config/session) were not attempted',
-  // Minimal panel labels (used by the UI in a later round; keys are in place so a missing one fails the build)
-  'checkpoint.title': 'Checkpoints (session / workspace / config at one point)',
-  'checkpoint.desc': 'Each capture records capturedAt and a fingerprint per state, so same-point is verifiable; a rewind only overwrites captured content and never deletes files created later.',
-  'checkpoint.capture': 'Capture a checkpoint',
-  'checkpoint.capture.chunks': 'Workspace paths (one absolute path per line)',
-  'checkpoint.capture.session': 'Session',
-  'checkpoint.capture.protect': 'Protect this checkpoint (no rewind, no delete)',
-  'checkpoint.list.empty': 'No checkpoints yet',
-  'checkpoint.col.time': 'Time',
-  'checkpoint.col.states': 'States',
-  'checkpoint.col.spread': 'Same-point spread',
-  'checkpoint.samePoint.yes': 'Same point ({ms} ms spread)',
-  'checkpoint.samePoint.no': 'Not one point: {reason}',
-  'checkpoint.state.workspace': 'Workspace',
-  'checkpoint.state.session': 'Session cursor',
-  'checkpoint.state.config': 'Plugin config',
-  'checkpoint.preview': 'Preview rewind',
-  'checkpoint.rewind': 'Rewind to here',
-  'checkpoint.rewind.confirm': 'I confirm: this checkpoint will overwrite the workspace / config / session (files created later are not deleted)',
-  'checkpoint.delete': 'Delete checkpoint',
-  'checkpoint.legacy.guard': 'Pre-rewind protection point',
+  'rollback.title': 'Workspace + session rollback',
+  'rollback.desc': 'A rollback point is kept automatically at the end of every turn: a workspace snapshot plus the session cursor -- there is no manual capture form. A rewind only overwrites the workspace paths that point recorded, and deletes the paths proven to have been created after that point which pass the safety rules (.git / node_modules / the plugin data directory / oversized files are always refused; files that already existed but were passed over by the budget are in the proof list too, so they are never mistaken for new ones; nothing is removed while the proof list itself is incomplete). Session rollback forks a new child session at the stable boundary before the target turn, and the original session log stays read-only and is never rewritten.',
+  'rollback.list.empty': 'No rollback points yet',
+  /* 2026-10-11 layout refactor: the toolbar keeps only the numeric summary + refresh;
+     retention/pruning wording stays in rollback.retention.hint (now carried by the ⓘ). */
+  'rollback.summary': '{points} rollback points · {sessions} sessions',
+  'rollback.refresh': 'Refresh',
+  // Rollback-point ledger dialog (2026-10-12: the card no longer folds; the ledger lives in this dialog, grouped by session)
+  'rollback.dialog.title': 'Rollback point ledger',
+  'rollback.dialog.open': 'View rollback points',
+  // Ledger dialog sidebar (conversations that own rollback points; newest first by default)
+  'rollback.sessions.title': 'Conversations with rollback points',
+  'rollback.col.time': 'Time',
+  'rollback.col.session': 'Session',
+  'rollback.col.turn': 'Turn',
+  'rollback.col.states': 'States',
+  'rollback.turn': 'Turn {n}',
+  'rollback.turnUnknown': 'Turn unknown',
+  'rollback.badge.incomplete': 'One of two states missing',
+  'rollback.badge.protected': 'Protected (kept forever)',
+  'rollback.apiMissing': 'This host has no rollback-point support (plugin too old): the UI does not pretend otherwise',
+  'rollback.retention.hint': 'Automatic points: at most {perSession} per session and {total} in total; eviction only drops the oldest automatic points. Pre-rewind rescue points do not count against those two budgets, and those budgets do not evict them; but you cannot delete them, so they have their own two limits: at most {guardsPerSession} per session and {guards} in total (whichever limit is passed, the oldest rescue point is evicted).',
+  'rollback.autopoint.hint': 'Rollback points are kept automatically at the end of each turn: workspace snapshot plus session cursor (there is no manual capture entry).',
+  'rollback.state.workspace': 'Workspace',
+  'rollback.state.session': 'Session',
+  'rollback.state.unknown': 'Unknown state',
+  'rollback.mode.label': 'Rollback scope',
+  'rollback.mode.filesAndSession': 'Workspace files + session',
+  'rollback.mode.filesOnly': 'Workspace files only',
+  'rollback.mode.sessionOnly': 'Session only',
+  'rollback.mode.unknown': 'Unknown rollback scope',
+  'rollback.kind.auto': 'Automatic point',
+  'rollback.kind.guard': 'Pre-rewind rescue point (rewindable, not deletable)',
+  'rollback.kind.guardShort': 'Rescue point',
+  'rollback.kind.unknown': 'Unknown origin',
+  'rollback.code.ok': 'Success',
+  'rollback.code.deleted': 'Deleted',
+  'rollback.code.confirmation-required': 'Explicit confirmation is required before a rewind',
+  'rollback.code.protected-point': 'This rollback point was refused: a protected point can be neither rewound nor deleted; a rescue point can be a rewind target, but you cannot delete it',
+  'rollback.code.record-not-found': 'Rollback point not found',
+  'rollback.code.record-incomplete': 'This point is missing one of its two states, so a rewind is refused by default',
+  'rollback.code.invalid-input': 'Invalid request parameters',
+  'rollback.code.created-removals-limit': 'The number of paths to delete that this point does not record exceeds the limit: to avoid deleting only half of them, the whole rewind was refused and nothing was touched (neither workspace nor session)',
+  'rollback.code.no-boundary': 'No usable stable boundary before that turn (session rollback unavailable)',
+  'rollback.code.storage-unavailable': 'Rollback-point storage is unavailable',
+  'rollback.code.mutation-locked': 'Another write operation is running (or safe mode is on): retry later',
+  'rollback.code.method-not-allowed': 'This endpoint does not support that request method',
+  'rollback.code.ledger-unreadable': 'Rollback-point ledger unreadable (continuing with an empty ledger, not silently)',
+  'rollback.code.ledger-write-failed': 'Could not write the rollback-point ledger',
+  'rollback.code.invalid-path': 'A recorded path is outside its recorded chunk; that entry was refused',
+  'rollback.code.object-missing': 'The content copy is missing; that entry was refused',
+  'rollback.code.object-hash-mismatch': 'The content copy does not match the recorded fingerprint; that entry was refused',
+  'rollback.code.restore-failed': 'Rewind failed (see the per-item details)',
+  'rollback.code.verify-failed': 'Post-rewind per-file verification failed; everything was rolled back to the pre-rewind state',
+  'rollback.code.nothing-to-restore': 'This rollback point has nothing to restore',
+  'rollback.code.no-recorded-files': 'This rollback point recorded no files',
+  'rollback.code.file-not-recorded': 'This path is not recorded in the rollback point',
+  'rollback.code.guard-failed': 'The pre-rewind rescue point could not be kept, so the rewind was aborted (zero writes)',
+  'rollback.code.session-missing': 'Session log not found',
+  'rollback.code.session-out-of-root': 'Session log is outside the local session root; refused',
+  'rollback.code.session-too-large': 'Session log exceeds the limit: only the cursor was recorded (the rewind does not depend on the copy)',
+  // t7 targeted wording fix (captain-authorized; existing key, not a new one): the code now has two uses —
+  // (1) preview.session.reasonCode (informational); (2) a *result* code: a files-including rewind is refused while the conversation runs.
+  'rollback.code.session-active': 'This conversation is running (its session log was written recently): a rewind that includes files is refused and the workspace stays untouched; rewinding the conversation only is unaffected (the rewind forks a child session and never rewrites the log)',
+  // t8 (append-only; the key above keeps its own wording): the conversation is running
+  'rollback.preview.sessionActive': 'This conversation is running: until the current turn finishes you can rewind the conversation only (no workspace changes), so nothing races with the tool that is writing files. Reopen this dialog after the turn to rewind files as well.',
+  'rollback.sessionActive.denied': 'This conversation is running: no files were changed. Wait for the current turn to finish, or rewind the conversation only.',
+  'rollback.code.session-fork-unavailable': 'This host provides no session fork capability, so the session cannot be rolled back',
+  'rollback.code.fork-failed': 'Forking the child session failed; the session segment was not rolled back',
+  'rollback.code.capture-failed': 'Failed to capture this state',
+  'rollback.code.capture-truncated': 'This state hit the capture limit and was truncated (recorded honestly)',
+  'rollback.code.capture-degraded': 'This state was captured incompletely (skipped links or unreadable entries are recorded)',
+  'rollback.code.no-chunks': 'No workspace path chunks were provided',
+  'rollback.code.chunk-not-absolute': 'Workspace chunks must be absolute paths',
+  'rollback.code.chunk-not-found': 'Workspace chunk is missing or unusable',
+  'rollback.code.unknown': 'Unrecognized error code (technical detail below)',
+  'rollback.guidance.mountStorage': 'Rollback-point storage stack missing: combine @deepseek-ai/dsh-storage, dsh-storage-json and dsh-storage-domain into the current profile, then retry',
+  'rollback.guidance.fixDataDir': 'The plugin data directory is not writable: {detail}',
+  'rollback.guidance.readOnlyFallback': 'While storage is unavailable, keeping points and rewinding fail cleanly, but the current list is still viewable (nothing crashes and nothing pretends to succeed)',
+  'rollback.guidance.probeDetail': 'Probe detail: {detail}',
+  'rollback.guidance.workspaceRolledBack': 'After a workspace write failed, everything was rolled back to the pre-rewind state (the session segment was not attempted)',
+  'rollback.guidance.forkUnavailable': 'This host provides no session fork capability: the session segment was not rolled back (the original log was not rewritten)',
+  'rollback.guidance.sessionForked': 'Forked a new child session: {detail} (the original session log stays read-only and was not rewritten)',
+  'rollback.guidance.sessionNotAttached': 'The new child session could not be filed back into its original workspace (it appears under "Ungrouped"; the rewind itself did apply)',
+  'rollback.guidance.unknown': 'Unrecognized guidance (technical detail below)',
+  'rollback.warn.ledgerUnreadable': 'Rollback-point ledger unreadable (continuing with an empty ledger, not silently)',
+  'rollback.warn.trackMissing': 'A state was not captured: it cannot be rolled back this time',
+  'rollback.warn.trackDegraded': 'A state was captured incompletely (the rewind may be incomplete)',
+  'rollback.warn.protected': 'This rollback point is protected (kept forever): no rewind, no delete',
+  'rollback.warn.guardFailed': 'The pre-rewind rescue point failed (continued with a warning)',
+  'rollback.warn.createdRefused': 'Nothing created after this point was deleted: the capture-time proof list is incomplete (a whole directory was ignored / the path index is missing / a directory was unreadable), so newly created paths cannot be proven',
+  'rollback.warn.unknown': 'Unrecognized warning (technical detail below)',
+  'rollback.preview': 'Preview rewind',
+  'rollback.preview.title': 'Rewind preview',
+  'rollback.preview.hint': 'Read-only preview below (zero writes). The rewind only runs after you confirm.',
+  'rollback.preview.loading': 'Generating preview…',
+  'rollback.preview.empty': 'This rollback point has nothing to restore.',
+  'rollback.preview.none': 'This point has nothing to restore',
+  'rollback.preview.reason.guard': 'The host did not allow rewinding this rescue point (a rescue point can normally be a rewind target; see the details below)',
+  'rollback.preview.reason.incomplete': 'This point is missing one of its two states: you must explicitly allow a partial rewind',
+  'rollback.preview.reason.hostRefused': 'The host refused this rewind (see the details below)',
+  'rollback.preview.segments': 'Tick the restorable segments only (there are just two states: workspace and session)',
+  'rollback.preview.overwrite': 'Overwrite {n} item(s)',
+  'rollback.preview.different': '{n} of them differ in content',
+  'rollback.preview.missing': '{n} item(s) no longer exist (they will be recreated)',
+  'rollback.preview.createdAfter': '{n} item(s) did not exist at that point (created afterwards; the rewind deletes only those that pass the safety rules)',
+  'rollback.preview.removalsTitle': 'Files the rewind will delete',
+  'rollback.preview.notice.skipped': '{n} item(s) were skipped at capture time (not recorded; they are in the proof list, so they are outside the deletion test)',
+  'rollback.preview.notice.truncated': 'Capture was truncated by a limit (per-file / byte budget / file-count budget); whether anything is deleted also depends on whether the proof list (path index) is complete',
+  'rollback.preview.files.title': 'Files that will be rewound:',
+  'rollback.preview.files.empty': 'The workspace already matches this rollback point, nothing to restore',
+  'rollback.preview.files.unavailable': 'The workspace state of this rollback point has no usable record (reason: {reason}), nothing to restore',
+  'rollback.preview.files.unavailableSession': 'The workspace state of this rollback point has no usable record (reason: {reason}); the session will still be rewound to before this point',
+  'rollback.preview.files.noFilesSession': 'This rollback point recorded no files; the session will still be rewound to before this point',
+  'rollback.preview.files.consistentSession': 'The workspace already matches this rollback point (the session will still be rewound to before this point)',
+  'rollback.preview.file.added': '+{n}',
+  'rollback.preview.file.removed': '\u2212{n}',
+  'rollback.preview.file.deleted': 'Delete',
+  'rollback.preview.file.unknown': 'line counts not measured',
+  'rollback.preview.file.unknownHint': 'Line counts could not be measured for these files (too large, not text, or the content copy is unreadable) \u2014 the rewind will still overwrite them.',
+  'rollback.diff.viewHint': 'View diff: {path}',
+  'rollback.diff.loading': 'Loading the diff\u2026',
+  'rollback.diff.before': 'Current',
+  'rollback.diff.after': 'After rewind',
+  'rollback.diff.identical': 'This file already matches the rollback point, so the rewind will not change it',
+  'rollback.diff.degraded': 'The diff is large, so it is shown as a whole-block replacement (still complete, just not a minimal edit script)',
+  'rollback.diff.truncated': 'Only the first {shown} of {total} rows are drawn (the data itself is complete)',
+  'rollback.diff.reason.missingBlob': 'The stored content copy cannot be read, so no line-by-line comparison is possible (the rewind will still try to write it back)',
+  'rollback.diff.reason.binary': 'Not a text file, so there is no line-by-line diff to show',
+  'rollback.diff.reason.tooLarge': 'The file exceeds the display limit, so there is no line-by-line diff (the rewind will still overwrite it)',
+  'rollback.diff.reason.unreadable': 'The current file cannot be read (permissions, or it is not a regular file), so no line-by-line comparison is possible',
+  'rollback.diff.reason.unknown': 'No line-by-line comparison is possible, and the host gave no reason (cause unknown)',
+  'rollback.diff.failed': 'Could not read the diff',
+  'rollback.preview.result.noop': 'The workspace already matches this rollback point, nothing to restore',
+  'rollback.preview.result.noRecord': 'This rollback point has no usable record (reason: {reason}), nothing to restore',
+  'rollback.preview.result.noFiles': 'This rollback point recorded no files, nothing to restore',
+  'rollback.preview.result.code': 'code: {code}',
+  'rollback.preview.warningsTitle': 'Warnings for this point',
+  'rollback.preview.cursorBytes': 'Session log {now} → {target} bytes',
+  'rollback.group.label': 'Session: {session}',
+  'rollback.group.count': '{n} point(s)',
+  'rollback.group.unknownSession': 'Unknown session',
+  'rollback.row.files': '{n} file(s)',
+  'rollback.row.sessionCursor': 'Has session cursor',
+  'rollback.row.noSessionCursor': 'No session cursor (workspace only)',
+  'rollback.row.sessionShort': 'Session rewindable',
+  'rollback.row.workspaceShort': 'Workspace only',
+  'rollback.row.notice.skipped': '{n} item(s) were skipped at capture time (not recorded; they are in the proof list and are never mistaken for newly created ones)',
+  'rollback.row.notice.truncated': 'This point hit the capture limit and was truncated (counts are still reported; deletion also depends on whether the proof list is complete)',
+  'rollback.row.notice.skippedShort': '{n} skipped',
+  'rollback.row.notice.truncatedShort': 'Truncated',
+  'rollback.preview.cursor': 'Session boundary {from} → {to}',
+  'rollback.preview.turns': 'Roll back to before turn {n}',
+  'rollback.preview.active': 'This session log was written recently (informational only: the rewind forks a child session and does not rewrite the log)',
+  'rollback.rewind': 'Rewind to here',
+  'rollback.rewind.confirm': 'I confirm: rewind with the selected scope. The workspace writes back the paths this point recorded and deletes the paths proven to have been created after that point which pass the safety rules (.git / node_modules / the plugin data directory / oversized files are always refused; nothing is removed while the proof list itself is incomplete); the session is forked into a new child session at the stable boundary before the target turn, and the original session log is not rewritten.',
+  'rollback.rewind.allowPartial': 'Allow a partial rewind (this point is missing one of its two states)',
+  'rollback.guard.require': 'A rescue point is mandatory before the rewind (if it cannot be kept, everything is aborted with zero writes)',
+  'rollback.guard.warn': 'Keep a rescue point before the rewind (if it cannot be kept, warn and continue)',
+  'rollback.guard.off': 'Skip the pre-rewind rescue point',
+  'rollback.guard.unknown': 'Unknown rescue-point policy',
+  'rollback.rewind.result.title': 'Rewind result',
+  'rollback.rewind.result.counts': '{restored} restored / {removed} deleted / {failed} failed / {leftovers} entries that did not exist at that point (created afterwards)',
+  'rollback.rewind.result.child': 'Rewound to before that message (current conversation: {id})',
+  // A (seamless replace): the original session is filed under "Archived" — only one conversation stays in the list
+  'rollback.rewind.archive.done': 'The original session is now archived (restore it from "Archived" whenever you need it)',
+  // Before the first user message there is no turn boundary to fork from: open a brand-new session
+  'rollback.rewind.freshSession': 'This is before the first message of the conversation, so a brand-new empty session was opened (copy that message from the bubble above to continue)',
+  'rollback.rewind.freshSessionFailed': 'There is no conversation boundary to rewind to before the first message, and this client could not open a new session — use "New session" manually',
+  'rollback.rewind.archive.unavailable': 'This client exposes no archive entry, so the original session stays in the session list (its content was not rewritten)',
+  'rollback.rewind.archive.active': 'The original session still has work in progress and cannot be archived yet — it stays in the session list (its content was not rewritten)',
+  'rollback.rewind.archive.failed': 'Archiving the original session failed; it stays in the session list (its content was not rewritten)',
+  'rollback.rewind.result.guard': 'Pre-rewind rescue point: {id}',
+  'rollback.rewind.result.skipped': 'Segments not attempted: {list}',
+  'rollback.segment.restored': 'Restored',
+  'rollback.segment.skipped': 'Skipped',
+  'rollback.segment.failed': 'Failed',
+  'rollback.segment.unknown': 'Unknown status',
+  'rollback.outcome.restored': 'Fully restored',
+  'rollback.outcome.partial': 'Partially restored',
+  'rollback.outcome.failed': 'Rewind failed',
+  'rollback.outcome.denied': 'Refused (zero writes)',
+  'rollback.outcome.unknown': 'Unknown outcome',
+  'rollback.delete': 'Delete rollback point',
+  'rollback.delete.done': 'Rollback point deleted',
+  'rollback.delete.confirmTitle': 'Delete this rollback point?',
+  'rollback.delete.confirmMessage': 'This deletes only the ledger record and its content copies; the workspace and sessions are untouched. Protected points and pre-rewind rescue points are always refused by the engine; rescue points beyond their per-session limit of 20 or their global limit of 50 are evicted automatically (oldest first).',
+  'rollback.delete.protected': 'This rollback point cannot be deleted: protected points and rescue points are always refused by the engine (rescue points beyond their per-session limit of 20 or their global limit of 50 are evicted automatically, oldest first)',
+  'rollback.storage.unavailable': 'Rollback-point storage is unavailable (the current list remains viewable)',
   'recovery.incomplete.title': 'Unfinished profile copy',
   'recovery.incomplete.hint': 'These directories carry a "copy in progress" marker but no package.json: a half-finished copy left by an interrupted copy. They cannot be launched, only deleted (only marked directories are listed — hand-made directories never appear here).',
   'recovery.incomplete.from': 'From: {name}',